@kynver-app/runtime 0.1.139 → 0.1.140

package/dist/cli.js

@@ -1,66 +1,66 @@
 #!/usr/bin/env node
-var Mk=Object.defineProperty;var j=(e,r)=>()=>(e&&(r=e(e=0)),r);var Uk=(e,r)=>{for(var t in r)Mk(e,t,{get:r[t],enumerable:!0})};import{existsSync as Wk,mkdirSync as Bk,readFileSync as oi,readdirSync as WA,statSync as sc,writeFileSync as Lk}from"node:fs";import ic from"node:path";function ur(e){console.error(e),process.exit(1)}function ce(e){return process.platform!=="win32"?e:{windowsHide:!0,...e}}function O(e,r){return e||ur(`missing ${r}`),e}function tt(e){try{return JSON.parse(e)}catch{return null}}function _(e,r){try{return JSON.parse(oi(e,"utf8"))}catch(t){if(arguments.length>1)return r;ur(`failed to read ${e}: ${t.message}`)}}function ue(e,r){Bk(ic.dirname(e),{recursive:!0}),Lk(e,`${JSON.stringify(r,null,2)}
-`)}function R(e){return String(e||"").toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"worker"}function ac(e){return R(`${new Date().toISOString().replace(/[-:]/g,"").replace(/\..+/,"Z")}-${e}`)}function ze(e){return String(e).replace(/\/+$/,"")}function lo(e){return String(e||"").replace(/\s+/g," ").trim()}function co(e){try{return sc(e).size}catch{return 0}}function uo(e){try{return sc(e).mtime.toISOString()}catch{return null}}function po(e,r){return Wk(e)?oi(e,"utf8").split(`
+var jk=Object.defineProperty;var V=(e,r)=>()=>(e&&(r=e(e=0)),r);var Vk=(e,r)=>{for(var t in r)jk(e,t,{get:r[t],enumerable:!0})};import{existsSync as Gk,mkdirSync as Yk,readFileSync as pi,readdirSync as XA,statSync as pc,writeFileSync as Jk}from"node:fs";import mc from"node:path";function dr(e){console.error(e),process.exit(1)}function ue(e){return process.platform!=="win32"?e:{windowsHide:!0,...e}}function N(e,r){return e||dr(`missing ${r}`),e}function st(e){try{return JSON.parse(e)}catch{return null}}function _(e,r){try{return JSON.parse(pi(e,"utf8"))}catch(t){if(arguments.length>1)return r;dr(`failed to read ${e}: ${t.message}`)}}function de(e,r){Yk(mc.dirname(e),{recursive:!0}),Jk(e,`${JSON.stringify(r,null,2)}
+`)}function b(e){return String(e||"").toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"worker"}function fc(e){return b(`${new Date().toISOString().replace(/[-:]/g,"").replace(/\..+/,"Z")}-${e}`)}function Xe(e){return String(e).replace(/\/+$/,"")}function fo(e){return String(e||"").replace(/\s+/g," ").trim()}function go(e){try{return pc(e).size}catch{return 0}}function ho(e){try{return pc(e).mtime.toISOString()}catch{return null}}function ko(e,r){return Gk(e)?pi(e,"utf8").split(`
 `).slice(-r).join(`
-`):""}function lc(e){return e?oi(ic.resolve(e),"utf8"):""}function Pr(e){Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function dr(e){return new Promise(r=>setTimeout(r,e))}function F(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}function Zt(e,r){try{process.kill(-e,r)}catch{process.kill(e,r)}}function cc(e){let r=null,t=-1/0;for(let n of e){if(!n)continue;let o=Date.parse(n);Number.isFinite(o)&&o>t&&(t=o,r=n)}return r}function si(e){return Math.max(0,Math.round((Date.now()-e)/1e3))}var w=j(()=>{"use strict"});function Kk(e){return Fk.has(e)?!0:$k.some(r=>e.endsWith(r))}function Xe(e){let r={...e};for(let t of Object.keys(r))Kk(t)&&delete r[t];return r}var Hk,Fk,$k,nt=j(()=>{"use strict";Hk=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY"],Fk=new Set(Hk),$k=["_SECRET","_API_KEY"]});import{spawnSync as dc}from"node:child_process";function de(e,r,t={}){let n=dc("git",r,ce({cwd:e,encoding:"utf8"}));if(n.status!==0&&!t.allowFailure){let o=`git ${r.join(" ")} failed: ${n.stderr||n.stdout}`;if(t.throwError)throw new Error(o);ur(o)}return n.stdout||""}function pc(e){de(e,["rev-parse","--show-toplevel"])}function en(e){return de(e,["status","--short"],{allowFailure:!0}).split(`
-`).map(r=>r.trim()).filter(Boolean)}function re(e,r){try{let t=dc("git",r,ce({cwd:e,encoding:"utf8"}));return{status:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function uc(e,r,t){let n=re(e,["merge-base","--is-ancestor",r,t]);return n.status===0?{isAncestor:!0,error:null}:n.status===1?{isAncestor:!1,error:null}:{isAncestor:null,error:n.error||n.stderr||n.stdout||`git exited ${n.status}`}}function mo(e,r="origin/main"){let t=typeof r=="string"?{base:r}:r,n=t.baseCommit?.trim()||t.base?.trim()||"origin/main",o=t.baseCommit?.trim()||null;if(!e)return ii(n,"missing worktree path");let s=re(e,["rev-parse","HEAD"]);if(s.status!==0)return ii(n,s.error||s.stderr||s.stdout||"failed to resolve HEAD");let i;if(o)i=o;else{let f=re(e,["rev-parse",n]);if(f.status!==0)return ii(n,f.error||f.stderr||f.stdout||`failed to resolve ${n}`,s.stdout.trim());i=f.stdout.trim()}let a=s.stdout.trim();if(a===i)return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:!0,headIsAncestorOfBase:!0,relation:"synced"};let l=uc(e,i,a),c=uc(e,a,i),u=l.error||c.error||void 0;if(l.isAncestor==null||c.isAncestor==null)return{checked:!1,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:"unknown",...u?{error:u}:{}};let d=l.isAncestor?"ahead":c.isAncestor?"merged":"diverged";return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:d,...u?{error:u}:{}}}function ii(e,r,t=null){return{checked:!1,base:e,head:t,baseHead:null,baseIsAncestorOfHead:null,headIsAncestorOfBase:null,relation:"unknown",error:r}}var Se=j(()=>{"use strict";w();nt()});import{homedir as ai}from"node:os";import Er from"node:path";function mc(e){return e==="~"?ai():e.startsWith("~/")||e.startsWith("~\\")?Er.join(ai(),e.slice(2)):e}function ot(e){return Er.resolve(mc(e))}function ke(e){let r=mc(e),t=Er.resolve(r),n=Er.resolve(ai());return t===n?"~":t.startsWith(`${n}${Er.sep}`)?`~/${Er.relative(n,t).split(Er.sep).join("/")}`:t.replace(/\\/g,"/").replace(/^\/home\/[^/]+(?=\/|$)/,"~").replace(/^\/Users\/[^/]+(?=\/|$)/,"~").replace(/^[A-Za-z]:\/home\/[^/]+(?=\/|$)/i,"~").replace(/^[A-Za-z]:\/Users\/[^/]+(?=\/|$)/i,"~")}function q(e){return ke(e)}var Qe=j(()=>{"use strict"});import{existsSync as ci,readFileSync as gc}from"node:fs";import{homedir as jk}from"node:os";import Ze from"node:path";import{fileURLToPath as Vk}from"node:url";function Yk(e){let r=Ze.join(e,"package.json");if(!ci(r))return null;try{let t=JSON.parse(gc(r,"utf8"));return typeof t.name=="string"?t.name.trim():null}catch{return null}}function Jk(e){return Yk(e)==="kynver"}function fc(e){let r=Ze.resolve(e);if(!ci(r))return null;let t=re(r,["rev-parse","--show-toplevel"]);if(t.status!==0)return null;let n=t.stdout.trim();return n.length?Ze.resolve(n):null}function qk(e=import.meta.url){let r=Ze.dirname(Vk(e));for(let t=0;t<8;t+=1){let n=Ze.join(r,"package.json");if(ci(n))try{if(JSON.parse(gc(n,"utf8")).name==="@kynver-app/runtime")return r}catch{}let o=Ze.dirname(r);if(o===r)break;r=o}return null}function li(e,r,t,n){if(!t)return;let o=Ze.resolve(t);e.has(o)||Jk(o)&&(e.add(o),r.push({repo:o,source:n}))}function hc(e){let r=e?.cwd??process.cwd(),t=new Set,n=[];li(t,n,fc(r),"cwd_git");let o=qk(e?.runtimeModuleUrl??import.meta.url);o&&li(t,n,fc(o),"runtime_checkout");let s=jk();for(let i of Gk)li(t,n,ot(Ze.join(s,i)),"well_known_path");return n}function st(e){return hc(e)[0]??null}function zk(e){let r=Ze.resolve(e).replace(/\\/g,"/");return r.includes("/.kynver/harness/worktrees/")||r.includes("/.openclaw/harness/worktrees/")||r.includes("/kynver-harness/")||r.includes("/openclaw/harness/worktrees/")}function fo(e){let r=hc(e);return r.find(n=>!zk(n.repo))??r[0]??null}var Gk,go=j(()=>{"use strict";Se();Qe();Gk=["Kynver","repos/Kynver","repos/kynver-source-main","code/Kynver","projects/Kynver"]});function it(e){let r=(e??"").trim().toLowerCase();return r==="ghost"||r==="forge"?r:r.includes("forge")?"forge":r.includes("ghost")||r.includes("openclaw")?"ghost":"forge"}function kc(e,r){return e[r]?.trim()||null}function Ue(e=process.env,r={}){let t=[],n=r.boxKind?.trim();if(n)return{boxKind:it(n),source:"config",slugInferenceBlocked:!1,warnings:t};let o=kc(e,"KYNVER_BOX_KIND");if(o)return{boxKind:it(o),source:"env",slugInferenceBlocked:!1,warnings:t};let s=kc(e,"KYNVER_AGENT_OS_SLUG");return s&&t.push(`KYNVER_AGENT_OS_SLUG=${s} is a workspace slug, not box identity \u2014 set boxKind via \`kynver setup --box-kind forge|ghost\` or KYNVER_BOX_KIND (defaulting box kind to forge)`),{boxKind:"forge",source:"default",slugInferenceBlocked:!!s,warnings:t}}function We(e={},r=process.env){return Ue(r,e).boxKind}var Ie=j(()=>{"use strict"});import{readFileSync as Xk}from"node:fs";import yc from"node:os";function rn(e){if(e!==void 0){let r=e.match(/^MemAvailable:\s+(\d+)\s*kB/m);return r?Number(r[1])*1024:yc.freemem()}if(process.platform==="linux")try{let t=Xk("/proc/meminfo","utf8").match(/^MemAvailable:\s+(\d+)\s*kB/m);if(t)return Number(t[1])*1024}catch{}return yc.freemem()}var ho=j(()=>{"use strict"});import{existsSync as Qk,readFileSync as Zk,statfsSync as ey}from"node:fs";function ui(){if(process.platform!=="linux")return!1;for(let e of["/proc/sys/kernel/osrelease","/proc/version"])try{if(!Qk(e))continue;let r=Zk(e,"utf8");if(/microsoft|wsl/i.test(r))return!0}catch{}return!1}function Rc(e={}){if(!(e.forceWsl===void 0?ui():e.forceWsl))return null;let t=e.wslHostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||at,n=e.wslHostFreeWarnBytes??ry,o=e.wslHostFreeCriticalBytes??ty,s=e.statfs??ey,i;try{i=s(t)}catch(g){return{ok:!1,path:t,freeBytes:0,totalBytes:0,usedPercent:100,warnBelowBytes:n,criticalBelowBytes:o,reason:`Windows host disk probe failed at ${t}: ${g.message}`,probeError:g.message}}let a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<n,d=a<o,f=!u&&!d,m=(a/(1024*1024*1024)).toFixed(1),p=null;return f||(p=`Windows host disk ${t} at ${d?"critical":"warning"}: ${m} GiB free (<${(d?o:n)/1024/1024/1024} GiB); WSL VHDX cannot grow safely. ${ny()}`),{ok:f,path:t,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:n,criticalBelowBytes:o,reason:p,probeError:null}}function ny(){return"Recovery: 1) free Windows C: (empty Recycle Bin / Storage Sense / clear %TEMP% and %LOCALAPPDATA%\\Temp\\wsl-crashes); 2) shut down WSL (`wsl --shutdown`) then compact the VHDX (`Optimize-VHD` or `diskpart compact vdisk`); 3) clear local node_modules / .next / harness worktrees before restarting workers; 4) disable recurring dumps via `%USERPROFILE%/.wslconfig` (`maxCrashDumpCount=-1`) or `kynver wsl-crashes --execute`. Full runbook: docs/runbooks/wsl-disk-pressure.md."}var ry,ty,at,di=j(()=>{"use strict";ry=25*1024*1024*1024,ty=12*1024*1024*1024,at="/mnt/c"});import{execFileSync as bc}from"node:child_process";import{existsSync as yo,readFileSync as vc,readdirSync as oy,statSync as sy}from"node:fs";import pi from"node:path";function ko(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function Sc(){let e=process.env.KYNVER_WSL_WIN_USER?.trim();if(e)return e;try{let n=bc("cmd.exe",["/c","echo","%USERNAME%"],{encoding:"utf8",timeout:5e3,stdio:["ignore","pipe","ignore"]}).trim();if(n&&n!=="%USERNAME%"&&!n.includes("%"))return n}catch{}let r=process.env.USER?.trim()||process.env.LOGNAME?.trim(),t=process.env.KYNVER_WSL_HOST_MOUNT?.trim()||at;return r&&yo(pi.join(t,"Users",r))?r:null}function uy(e={}){let r=e.crashDumpDir?.trim()||process.env.KYNVER_WSL_CRASH_DUMP_DIR?.trim();if(r)return r;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||at,n=e.windowsUser??Sc();return n?`${t.replace(/\\/g,"/").replace(/\/$/,"")}/Users/${n}/AppData/Local/Temp/wsl-crashes`:null}function dy(e){let r=/^wsl-crash-\d+-(\d+)-(.+)-(\d+)\.dmp$/i.exec(e);if(!r)return{executableHint:null,signal:null,pid:null};let t=Number(r[1]),n=r[2]??"",o=Number(r[3]),s=n.split("_").filter(Boolean);return{executableHint:s.length>0?s[s.length-1]:null,signal:Number.isFinite(o)?o:null,pid:Number.isFinite(t)?t:null}}function py(){try{if(yo("/proc/sys/kernel/core_pattern"))return vc("/proc/sys/kernel/core_pattern","utf8").trim()}catch{}try{return bc("sysctl",["-n","kernel.core_pattern"],{encoding:"utf8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim()||null}catch{return null}}function my(e){return!!(e&&/wsl-capture-crash/i.test(e))}function fy(e,r=at){let t=pi.join(r,"Users",e,".wslconfig");if(!yo(t))return{maxCrashDumpCount:null,crashDumpFolder:null};let n;try{n=vc(t,"utf8")}catch{return null}let o=null,s=null;for(let i of n.split(/\r?\n/)){let a=i.replace(/#.*$/,"").trim();if(!a||a.startsWith("["))continue;let l=a.indexOf("=");if(l<0)continue;let c=a.slice(0,l).trim().toLowerCase(),u=a.slice(l+1).trim();if(c==="maxcrashdumpcount"){let d=Number(u);o=Number.isFinite(d)?d:null}else c==="crashdumpfolder"&&(s=u.replace(/^["']|["']$/g,"")||null)}return{maxCrashDumpCount:o,crashDumpFolder:s}}function gy(e){if(!yo(e))return[];let r=oy(e,{withFileTypes:!0}),t=[];for(let n of r){if(!n.isFile()||!n.name.toLowerCase().endsWith(".dmp"))continue;let o=pi.join(e,n.name);try{let s=sy(o),i=dy(n.name);t.push({name:n.name,path:o,bytes:s.size,mtimeMs:s.mtimeMs,executableHint:i.executableHint,signal:i.signal,pid:i.pid})}catch{}}return t.sort((n,o)=>o.mtimeMs-n.mtimeMs),t}function pr(e={}){if(!(e.forceWsl===void 0?ui():e.forceWsl))return null;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||at,n=e.windowsUser??Sc(),o=e.warnBelowBytes??ko("KYNVER_WSL_CRASH_DUMP_WARN_BYTES",iy),s=e.criticalBelowBytes??ko("KYNVER_WSL_CRASH_DUMP_CRITICAL_BYTES",ay),i=e.warnCount??ko("KYNVER_WSL_CRASH_DUMP_WARN_COUNT",ly),a=e.criticalCount??ko("KYNVER_WSL_CRASH_DUMP_CRITICAL_COUNT",cy),l=(e.readCorePattern??py)(),c=my(l),u=null;n&&(u=(e.readWslConfig??fy)(n,t));let d=u?.maxCrashDumpCount??null,f=d===-1,m=uy({hostMount:t,windowsUser:n,crashDumpDir:e.crashDumpDir});if(!m)return{ok:!0,path:null,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:f,reason:null,probeError:"windows_user_unresolved"};let p;try{p=(e.listDumps??gy)(m)}catch(D){return{ok:!1,path:m,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:f,reason:`WSL crash dump probe failed at ${m}: ${D.message}`,probeError:D.message}}let g=p.reduce((D,C)=>D+C.bytes,0),k=p.length,h=[...new Set(p.map(D=>D.executableHint).filter(D=>!!D))],b=g>=s,x=g>=o,M=k>=a,E=k>=i,K=!(b||M||x||E),L=null;if(!K){let D=b||M?"critical":"warning",C=(g/1024**3).toFixed(1),ae=h.length>0?h.join(", "):"unknown";L=`WSL crash dumps ${D}: ${k} file(s), ${C} GiB at ${m} (executables: ${ae}). `+hy({wslCaptureEnabled:c,dumpsDisabledInWslConfig:f})}return{ok:K,path:m,windowsUser:n,dumpCount:k,totalBytes:g,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:p,executables:h,corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:f,reason:L,probeError:null}}function hy(e={}){let r=["Recovery:","1) run `kynver wsl-crashes --execute` or scripts/cleanup-wsl-crashes.ps1 to prune old .dmp files;"];return e.dumpsDisabledInWslConfig||r.push("2) add `[wsl2]\\nmaxCrashDumpCount=-1` to %USERPROFILE%/.wslconfig then `wsl --shutdown` to disable future dumps;"),e.wslCaptureEnabled&&r.push("3) investigate crashing executables (node OOM/SIGBUS often follows Windows C: pressure \u2014 see docs/runbooks/wsl-disk-pressure.md);"),r.push("full runbook: docs/runbooks/wsl-disk-pressure.md."),r.join(" ")}var iy,ay,ly,cy,tn=j(()=>{"use strict";di();iy=5*1024*1024*1024,ay=10*1024*1024*1024,ly=2,cy=4});import{statfsSync as ky}from"node:fs";function Be(e={}){let r=e.diskPath?.trim()||"/",t=e.diskFreeWarnBytes??yy,n=e.diskFreeCriticalBytes??Ry,o=e.diskMaxUsedPercent??by,s=e.diskHardMaxUsedPercent??vy,i=ky(r),a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<t,d=a<n,f=a<t*2,m=f&&c>o,p=f&&c>s,g=!u&&!d&&!m&&!p,k=e.skipWslHostCheck?null:Rc(e.wslHost),h=e.skipWslCrashDumpCheck?null:pr(e.wslCrashDumps),b=g&&(k?k.ok:!0)&&(h?h.ok:!0),x=null;return b||(x=[d?`free space below critical ${n} bytes`:null,u?`free space below warning ${t} bytes`:null,p?`used percent above hard cap ${s}%`:null,m?`used percent above cap ${o}%`:null,k&&!k.ok?k.reason:null,h&&!h.ok?h.reason:null].filter(Boolean).join("; ")),Sy({ok:b,path:r,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:t,criticalBelowBytes:n,maxUsedPercent:o,hardMaxUsedPercent:s,reason:x,wslHost:k,wslCrashDumps:h?{ok:h.ok,path:h.path,dumpCount:h.dumpCount,totalBytes:h.totalBytes,executables:h.executables,wslCaptureEnabled:h.wslCaptureEnabled,dumpsDisabledInWslConfig:h.dumpsDisabledInWslConfig,reason:h.reason,probeError:h.probeError}:null})}function Sy(e){let r=process.env.KYNVER_DISPATCH_DISK_GATE_FORCE?.trim().toLowerCase();return r?r==="ok"||r==="open"||r==="none"?e.ok?e:{...e,ok:!0,reason:`disk gate forced open by KYNVER_DISPATCH_DISK_GATE_FORCE (suppressed: ${e.reason??"no reason"})`}:r==="block"||r==="pressured"?{...e,ok:!1,reason:`disk gate forced closed by KYNVER_DISPATCH_DISK_GATE_FORCE${e.reason?` (underlying: ${e.reason})`:""}`}:e:e}var yy,Ry,by,vy,nn=j(()=>{"use strict";tn();di();yy=30*1024*1024*1024,Ry=15*1024*1024*1024,by=80,vy=90});import{existsSync as wc}from"node:fs";import{homedir as _c}from"node:os";import mr from"node:path";function ie(e){let r=mr.resolve(ot(e.trim()));for(;wy.has(mr.basename(r));)r=mr.dirname(r);return r}function ye(){let e=process.env.KYNVER_HARNESS_ROOT||process.env.OPUS_HARNESS_ROOT;if(e)return ie(e);let r=v().harnessRoot?.trim();if(r)return ie(r);let t=mr.join(_c(),".kynver","harness");return wc(t)?t:wc(Cc)?Cc:t}function we(e){return mr.join(ie(e),"runs")}function fr(e){return mr.join(ie(e),"worktrees")}function lt(){let e=ye();return{harnessRoot:e,runsDir:we(e),worktreesDir:fr(e)}}function ct(e,r){return mr.join(e,R(r))}var Cc,wy,Ce=j(()=>{"use strict";I();Qe();w();Cc=mr.join(_c(),".openclaw","harness"),wy=new Set(["runs","worktrees"])});import{existsSync as Cy,readdirSync as _y,statSync as xy}from"node:fs";import ut from"node:path";function te(){return lt()}function B(e){let{runsDir:r}=te();return _(ut.join(ct(r,R(e)),"run.json"))}function Y(){let{runsDir:e}=te();return xc(e)}function Ro(e){return xc(we(e))}function Py(e){try{return xy(e).isDirectory()}catch{return!1}}function xc(e){if(!Cy(e))return[];let r=[];for(let t of _y(e,{withFileTypes:!0})){if(t.name==="runs")continue;let n=ut.join(e,t.name);if(!Py(n))continue;let o=_(ut.join(n,"run.json"),void 0);o?.id&&r.push(o)}return r}function Re(e,r){let{runsDir:t}=te();return _(ut.join(ct(t,R(e)),"workers",R(r),"worker.json"))}function Oe(e){let{runsDir:r}=te();ue(ut.join(ct(r,e.id),"run.json"),e)}function G(e,r){let{runsDir:t}=te();ue(ut.join(ct(t,e),"workers",r.name,"worker.json"),r)}function P(e){let{harnessRoot:r}=te();return on(r,e)}function on(e,r){return ct(we(e),R(r))}var W=j(()=>{"use strict";Ce();w()});import{existsSync as Ey,readdirSync as Ay}from"node:fs";import Iy from"node:path";function pe(e){let r=new Set;for(let n of Object.keys(e.workers||{}))r.add(R(n));let t=Iy.join(P(e.id),"workers");if(!Ey(t))return[...r];for(let n of Ay(t,{withFileTypes:!0}))n.isDirectory()&&r.add(R(n.name));return[...r]}var Ar=j(()=>{"use strict";W();w()});function mi(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function Pc(e){let r=e.trim();if(!r)return null;let t=mi(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let l=mi(s[1]??"");l&&n.push(l)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let l=mi(r.slice(i,a+1));l&&n.push(l)}return n.length>0?n[n.length-1]:null}function Ec(e){let r=e.finalResult??e.final_result;if(r!=null)return typeof r=="string"?Pc(r)??(r.trim()||null):r;let t=typeof e.summary=="string"?e.summary.trim():"";if(!t)return null;let n=Pc(t);return n||t}var Ac=j(()=>{"use strict"});import{existsSync as Oy,readFileSync as Ny}from"node:fs";function Ic(e){return e==="complete"}function dt(e){return Ic(e.lastHeartbeatPhase)?e.terminalFinalResult!==void 0&&e.terminalFinalResult!==null?e.terminalFinalResult:e.lastHeartbeatSummary?.trim()||"completed":null}function be(e){let r={heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,terminalFinalResult:null,heartbeatBlocker:null,timestampAnomalies:[],lastBoxResourceSnapshot:null,lastPrEvidence:[]};if(!Oy(e))return r;let t=Date.now()+Ty,n=new Date(t).toISOString(),o=Ny(e,"utf8").split(`
-`).filter(Boolean);for(let s of o){let i=tt(s);if(!i||typeof i!="object"||Array.isArray(i))continue;let a=i;if(r.heartbeatCount++,a.ts){let l=String(a.ts),c=Date.parse(l);Number.isFinite(c)&&c>t?r.timestampAnomalies.push({kind:"future_heartbeat_timestamp",observedAt:l,clampedTo:n}):r.lastHeartbeatAt=l}a.phase!==void 0&&a.phase!==null&&(r.lastHeartbeatPhase=String(a.phase)),a.summary!==void 0&&a.summary!==null&&(r.lastHeartbeatSummary=String(a.summary)),Ic(r.lastHeartbeatPhase)&&(r.terminalFinalResult=Ec(a)),r.heartbeatBlocker=a.blocker?String(a.blocker):null,a.boxResourceSnapshot&&typeof a.boxResourceSnapshot=="object"&&!Array.isArray(a.boxResourceSnapshot)&&(r.lastBoxResourceSnapshot=a.boxResourceSnapshot),Array.isArray(a.prEvidence)&&(r.lastPrEvidence=a.prEvidence.filter(l=>!!l&&typeof l=="object"&&typeof l.prUrl=="string"))}return r}var Ty,Ir=j(()=>{"use strict";Ac();w();Ty=6e4});function My(e){return e?(e.split("/").pop()??e).replace(/\.exe$/i,"").toLowerCase():null}function Uy(e){if(!e)return[];let r=[],t="",n,o=!1;for(let s of e){if(o){t+=s,o=!1;continue}if(s==="\\"){o=!0;continue}if(n){s===n?n=void 0:t+=s;continue}if(s==='"'||s==="'"){n=s;continue}if(/\s/.test(s)){t&&(r.push(t),t="");continue}t+=s}return t&&r.push(t),r}function Wy(e){let r=My(e[0]);return!!(r&&Dy.has(r))}function fi(e){return!e||e.includes("/")||e.includes("*")?!1:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(e)}function gi(e){if(!e)return!1;let r=e.trim();return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")}function By(e){if(!e.startsWith("--glob="))return e;let r=e.slice(7);return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")?`--glob=${r}/**`:e}function Ly(e){let r=[];for(let t=1;t<e.length;t+=1){let n=e[t];if(n){if(n==="--"){r.push(...e.slice(t+1));break}if(n.startsWith("-")){if(n.includes("="))continue;Oc.has(n)&&(t+=1);continue}r.push(n)}}return r}function Hy(e){let r=!1,t=e.map((o,s)=>{let i=By(o),a=e[s-1];return a&&Oc.has(a)&&o.startsWith("!")&&!o.includes("/")&&!o.endsWith("/**")&&(i=`${o}/**`),i!==o&&(r=!0),i}),n=Ly(t);if(n.length===2){let[o,s]=n;if(gi(s))return{argv:[t[0]??"rg",o,"-g",`${s}/**`,"."],changed:!0};if(fi(s))return{argv:[t[0]??"rg","-g",s,o,"."],changed:!0}}return r&&n.length===1?{argv:[...t,"."],changed:!0}:{argv:t,changed:r}}function hi(e){let r=e.trim();if(!r)return{command:r,changed:!1};let t=r.includes("&&")?" && ":r.includes("||")?" || ":"; ",n=r.split(/\s*(?:&&|\|\||;)\s*/u),o=!1,s=n.map(i=>{let a=Uy(i.trim());if(!a.length||!Wy(a))return i;let l=Hy(a);return l.changed?(o=!0,l.argv.join(" ")):i});return o?{command:s.join(t),changed:!0}:{command:r,changed:!1}}function Nc(e){if(!e)return{};let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(|$)/iu);if(r)return{pattern:r[1],target:r[2]?.trim()};let t=e.match(/^search\s+"(.+)"\s+in\s+(.+)$/iu);return t?{pattern:t[1],target:t[2]?.trim()}:{}}function Fy(e){let{pattern:r,target:t}=Nc(e);return r?gi(t)?{kind:"rg_exclude_syntax",pattern:r,target:t}:fi(t)?{kind:"bad_scope",pattern:r,target:t}:{kind:"not_repo_search",pattern:r,target:t}:{kind:"not_repo_search"}}function $y(e){let{pattern:r,target:t}=Nc(e);if(!r)return null;if(gi(t)){let n=`${t.trim()}/**`;return{command:`rg "${r}" -g '${n}' .`,changed:!0}}return t&&fi(t)?{command:`rg -g ${t} "${r}" .`,changed:!0}:null}function Ky(e){if(e.kind==="bad_scope"&&e.pattern?.includes("agent-os-land-pr")&&e.target==="package.json")return"Search package.json with a glob from the repo root: `rg -g package.json agent-os-land-pr .` \u2014 or run `node scripts/agent-os-land-pr.mjs <pr-url>` directly.";if(e.kind==="bad_scope"&&e.pattern&&e.target)return`Use \`rg -g '${e.target}' ${e.pattern} .\` from the repo root instead of treating ${e.target} as a folder.`;if(e.kind==="rg_exclude_syntax"&&e.pattern){let r=e.target?`${e.target.trim()}/**`:"!node_modules/**";return`Repo search scope \`${e.target??"!node_modules"}\` is not a valid ripgrep path. Use \`rg "${e.pattern}" -g '${r}' .\` from the repo root (exclude globs need a \`/**\` suffix).`}return e.kind==="no_matches"&&e.pattern?`No matches for "${e.pattern}". Try a broader pattern, drop overly short tokens, or search from the repo root with \`rg "${e.pattern}" .\`.`:null}function jy(e){let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(agent\)|\s*failed|$)/iu);return r?`search "${r[1]}" in ${r[2]?.trim()}`:null}function ki(e){let r=e.meta?.trim()||(e.command?jy(e.command):null)||null;if(r){let t=Fy(r),n=Ky(t);if(n)return n;let o=$y(r);if(o?.changed)return`Repo search used an invalid scope. Retry with: \`${o.command}\`.`}if(e.command&&/\b(rg|ripgrep)\b/i.test(e.command)){let t=hi(e.command);if(t.changed)return`Ripgrep scope may be invalid. Retry with: \`${t.command}\`.`;if(e.exitCode===1)return"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root."}return null}var Dy,Oc,Tc=j(()=>{"use strict";Dy=new Set(["rg","ripgrep","grep"]),Oc=new Set(["-e","--regexp","-f","--file","-m","--max-count","-A","--after-context","-B","--before-context","-C","--context","-g","--glob","--iglob"])});function sn(e,r=200){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function Jy(e){let r=e.trim();if(!r)return null;if(r.startsWith("{"))try{return JSON.parse(r)}catch{}let t=r.indexOf("{"),n=r.lastIndexOf("}");if(t>=0&&n>t)try{return JSON.parse(r.slice(t,n+1))}catch{return null}return null}function an(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function qy(e){let r=e.metadata;if(!an(r))return null;let t=r.vulnerabilities;if(!an(t))return null;let n=s=>typeof t[s]=="number"?t[s]:0,o={info:n("info"),low:n("low"),moderate:n("moderate"),high:n("high"),critical:n("critical"),total:n("total")};return typeof t.total!="number"&&!o.critical&&!o.high&&!o.moderate&&!o.low&&!o.info?null:o}function zy(e){let r=[];e.critical&&r.push(`${e.critical} critical`),e.high&&r.push(`${e.high} high`),e.moderate&&r.push(`${e.moderate} moderate`),e.low&&r.push(`${e.low} low`),e.info&&r.push(`${e.info} info`);let t=r.length?r.join(", "):"see report";return`npm audit: ${e.total} vulnerabilit${e.total===1?"y":"ies"} (${t}) \u2014 remediation required`}function Xy(e,r){let t=e.error;if(an(t)){let s=typeof t.summary=="string"?t.summary.trim():"",i=typeof t.code=="string"?t.code.trim():"";if(s)return i?`${i}: ${s}`:s;if(i)return i}let n=typeof e.message=="string"?e.message.trim():"";if(n)return n;let o=r.trim();return o?sn(o.split(`
-`).find(Boolean)??o,160):"npm audit failed"}function Qy(e){let r=`${e.stdout}
-${e.stderr}`.trim(),t=Jy(r);if(!t||!an(t)){let o=sn(r||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit failed (invalid or missing JSON): ${o}`,parseError:"invalid_json"}}if(an(t.error))return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit command failed: ${Xy(t,e.stderr)}`};let n=qy(t);return n?e.exitCode===0&&n.total===0?{kind:"success",exitCode:0,summary:"npm audit: no vulnerabilities reported",audit:n}:{kind:"audit_findings",exitCode:e.exitCode,summary:zy(n),audit:n}:{kind:"command_failure",exitCode:e.exitCode,summary:"npm audit failed: JSON response missing vulnerability metadata",parseError:"missing_metadata"}}function Zy(e){return Vy.test(e)}function eR(e){return Gy.test(e)}function rR(e){let r=ki({command:e.command,exitCode:e.exitCode});if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"ripgrep finished (exit 0)"};if(e.exitCode===1){let n=(e.stderr||e.interleaved).trim();if(n&&Yy.test(n)){let i=sn(n,160);return{kind:"command_failure",exitCode:1,summary:r??`ripgrep failed (exit 1): ${i}`}}let o=hi(e.command),s=o.changed&&!r?` Retry with: \`${o.command}\`.`:"";return{kind:"search_no_matches",exitCode:1,summary:r??`ripgrep: no matches (exit 1).${s} Try a broader pattern or search from the repo root.`}}let t=sn(e.interleaved||e.stdout||e.stderr||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:r??`ripgrep failed (exit ${e.exitCode}): ${t}`}}function yi(e){let r=e.stdout??"",t=e.stderr??"",n=e.interleavedOutput??"";if(Zy(e.command)){let i=r.trim()||n.trim()||t.trim();return Qy({exitCode:e.exitCode,stdout:i,stderr:t})}if(eR(e.command))return rR({command:e.command,exitCode:e.exitCode,stdout:r,stderr:t,interleaved:n});let o=ki({command:e.command,exitCode:e.exitCode});if(o&&e.exitCode!==0)return{kind:"command_failure",exitCode:e.exitCode,summary:o};if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"command succeeded (exit 0)"};let s=sn(n||r||t||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`command failed (exit ${e.exitCode}): ${s}`}}var Vy,Gy,Yy,Dc=j(()=>{"use strict";Tc();Vy=/\bnpm\s+audit\b/i,Gy=/\b(rg|ripgrep)\b/i,Yy=/\b(error|invalid|unknown|panic|not found)\b/i});import{existsSync as tR,readFileSync as nR}from"node:fs";function oR(e){let r=e.timestamp_ms;return e.timestamp||e.ts||(r?new Date(r).toISOString():void 0)}function Mc(e){if(!e)return null;for(let r of Object.keys(e))if(r.endsWith("ToolCall")){let t=r.slice(0,-8);return t.length?t:r}return null}function sR(e,r){e.finalResult=r.result||r.subtype||r.terminal_reason||"completed",r.is_error&&(e.error=String(r.result||r.api_error_status||"stream result error"))}function Uc(e){if(e.type!=="tool_call"||e.subtype!=="completed")return null;let t=(e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:null)?.shellToolCall;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t,o=n.args,s=o&&typeof o=="object"&&!Array.isArray(o)&&typeof o.command=="string"?String(o.command):"",i=n.result;if(!i||typeof i!="object"||Array.isArray(i))return null;let a=i.success??i.failure;if(!a||typeof a!="object"||Array.isArray(a))return null;let l=a,c=typeof l.exitCode=="number"?l.exitCode:0;return{command:s,exitCode:c,stdout:typeof l.stdout=="string"?l.stdout:"",stderr:typeof l.stderr=="string"?l.stderr:"",interleaved:typeof l.interleavedOutput=="string"?l.interleavedOutput:""}}function iR(e,r){r.kind==="success"||r.kind==="search_no_matches"||(e.lastShellOutcome=r)}function bo(e){let r={firstEventAt:null,lastEventAt:null,currentTool:null,finalResult:null,error:null,lastShellOutcome:null};if(!tR(e))return r;let t=nR(e,"utf8").split(`
-`).filter(Boolean);for(let n of t){let o=tt(n);if(!o)continue;let s=oR(o);if(s&&(r.firstEventAt||=s,r.lastEventAt=s),o.type==="stream_event"&&o.event&&typeof o.event=="object"&&o.event.type==="content_block_start"){let a=o.event.content_block;a?.type==="tool_use"&&(r.currentTool=String(a.name||"tool"))}if(o.type==="assistant"&&o.message&&typeof o.message=="object"){let a=o.message.content;if(Array.isArray(a)){let l=a.find(c=>c?.type==="tool_use");l&&(r.currentTool=String(l.name||r.currentTool))}}if(o.type==="tool_call"&&o.subtype==="started"){let a=o.tool_call&&typeof o.tool_call=="object"&&!Array.isArray(o.tool_call)?o.tool_call:void 0,l=Mc(a);l&&(r.currentTool=l)}let i=Uc(o);i&&iR(r,yi({command:i.command,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr,interleavedOutput:i.interleaved})),o.type==="result"&&sR(r,o)}return r}function aR(e){let r=Uc(e);if(!r)return;let t=yi({command:r.command,exitCode:r.exitCode,stdout:r.stdout,stderr:r.stderr,interleavedOutput:r.interleaved}),n=lo(r.command).slice(0,120);return t.kind==="audit_findings"?`[audit:findings] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="search_no_matches"?`[search:no_matches] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="command_failure"?`[command:failed] ${t.summary}${n?` \xB7 ${n}`:""}`:`[command:ok] exit 0${n?` \xB7 ${n}`:""}`}function Wc(e){if(e.type==="system"&&e.subtype)return`[system:${e.subtype}] ${String(e.status||e.cwd||"")}`.trim();if(e.type==="stream_event"&&e.event&&typeof e.event=="object"){let r=e.event.type;if(r==="content_block_start"){let t=e.event.content_block;if(t?.type==="tool_use")return`[tool:start] ${t.name}`}if(r==="content_block_delta"){let t=e.event.delta;if(t?.partial_json)return`[tool:input] ${t.partial_json}`}return r==="message_stop"?"[message:stop]":r?`[stream:${r}]`:void 0}if(e.type==="assistant"&&e.message&&typeof e.message=="object"){let r=e.message.content;if(Array.isArray(r)){let t=r.find(o=>o?.type==="text");if(t)return`[assistant] ${lo(String(t.text||""))}`;let n=r.find(o=>o?.type==="tool_use");if(n)return`[tool] ${n.name} ${JSON.stringify(n.input||{})}`}}if(e.type==="user"&&e.tool_use_result){let r=e.tool_use_result;return`[tool:result] stdout=${JSON.stringify(r.stdout||"")} stderr=${JSON.stringify(r.stderr||"")}`}if(e.type==="tool_call"){let r=String(e.subtype||""),t=r==="completed"?aR(e):void 0;if(t)return t;let n=e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:void 0,o=Mc(n)??"tool";return`[tool:${r}] ${o}`}if(e.type==="result")return`[result] ${e.subtype||""} ${lo(String(e.result||""))}`.trim()}var vo=j(()=>{"use strict";Dc();w()});function cR(e,r=240){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function Bc(e){let r=(e??"").trim();if(!r)return null;for(let t of lR)if(t.test.test(r))return{blocked:!0,reason:`${t.label}: ${cR(r)}`};return null}var lR,Lc=j(()=>{"use strict";lR=[{test:/\b(?:invalid|unknown|unsupported|unrecognized)\b[^.\n]*\bmodel\b/i,label:"provider rejected the requested model"},{test:/\bmodel\b[^.\n]*\b(?:not\s+(?:found|supported|available|recognized|valid)|is\s+not\s+valid|does\s+not\s+exist)/i,label:"provider rejected the requested model"},{test:/\b(?:did you mean|available models|choose (?:a|one of)|supported models)\b/i,label:"provider rejected the requested model"},{test:/model preflight failed/i,label:"model/provider preflight failed"},{test:/\b(?:command not found|ENOENT|is the .*CLI on PATH|executable not found|no such file or directory)\b/i,label:"provider CLI is missing or not on PATH"},{test:/\bfailed to spawn\b/i,label:"provider failed to spawn the worker process"},{test:/\b(?:not logged in|unauthorized|authentication (?:failed|required)|invalid api key|missing api key|401)\b/i,label:"provider authentication failed"}]});function Hc(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function uR(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function dR(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:Hc(e.head)}function pR(e,r,t){let n=["exited_with_changes_salvage"];if((e==="uncommitted"||e==="both")&&n.push(`${r} uncommitted change${r===1?"":"s"} with no final result`),(e==="committed_ahead"||e==="both")&&t){let o=t.length>12?t.slice(0,12):t;n.push(`commit ${o} ahead of base with no final result`)}return n.push("review worktree \u2014 commit, open a PR, or run a salvage worker before discarding"),n.join(": ")}function pt(e){if(e.alive||uR(e.finalResult))return null;let r=(e.changedFiles??[]).filter(i=>i.trim()).length,t=Hc(e.headCommit)??dR(e.gitAncestry),n=r>0,o=!!t;if(!n&&!o)return{kind:"none",salvageable:!1,uncommittedCount:0,headCommit:null,attentionReason:"process exited without a final result"};let s=n&&o?"both":n?"uncommitted":"committed_ahead";return{kind:s,salvageable:!0,uncommittedCount:r,headCommit:t,attentionReason:pR(s,r,t)}}var So=j(()=>{"use strict"});function ln(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function mR(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function fR(e){if(ln(e.headCommit)||ln(e.prUrl)||ln(e.artifactBundlePath)||ln(e.patchPath))return!0;let r=e.gitAncestry;return!!(r?.checked&&r.headIsAncestorOfBase===!1&&ln(r.head))}function mt(e){return mR(e.finalResult)?e.changedFiles.length===0?{blocked:!1}:fR(e)?{blocked:!0,detail:`Worktree has ${e.changedFiles.length} uncommitted change(s); commit or discard before landing`}:{blocked:!0,reason:"dirty_worktree_no_pr",detail:`Worktree has ${e.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`}:{blocked:!1}}function Fc(e){if(e.blocked)return e.detail??e.reason??"dirty_worktree_no_pr"}var wo=j(()=>{"use strict"});function Ri(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function $c(e){let r=e.targetPrReconciliation??e.target_pr_reconciliation??e.targetPrs??e.target_prs;return Array.isArray(r)?r.length:0}function ft(e){let r=e.trim();if(!r)return null;let t=Ri(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let u=Ri(s[1]??"");u&&n.push(u)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let u=Ri(r.slice(i,a+1));u&&n.push(u)}if(n.length===0)return null;let l=n[n.length-1],c=$c(l);for(let u of n){let d=$c(u);d>c&&(l=u,c=d)}return l}var Co=j(()=>{"use strict"});function gt(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function gR(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"?Object.keys(e).length>0:!0}function Or(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:gt(e)}function _o(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function Kc(e){let r=null;if(typeof e=="string"){let o=ft(e);o&&(r=o)}else e&&typeof e=="object"&&!Array.isArray(e)&&(r=e);if(!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=Or(String(s.prUrl??s.pr_url??"")),a=gt(s.outcome);!i||a!=="merged"&&a!=="skipped"&&a!=="blocked"||n.push({prUrl:i,outcome:a,mergeCommit:gt(s.mergeCommit??s.merge_commit),reason:gt(s.reason)})}return n}function jc(e,r){let t=[],n=Or(gt(e.prUrl)??"");if(n&&t.push(n),r&&typeof r=="object"&&!Array.isArray(r)){let o=r,s=Or(String(o.prUrl??o.pr_url??""));s&&t.push(s)}return[...new Set(t)]}function Vc(e){let{contract:r,snapshot:t}=e,n=e.finalResult??t.finalResult;if(!r.landingOnly&&r.targetPrUrls.length===0&&!r.repairEnforceOriginalPr)return{blocked:!1};if(!gR(n))return(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&r.targetPrUrls.length>0?{blocked:!0,reason:"missing_target_pr_reconciliation",detail:`Final result required to reconcile target PR(s): ${r.targetPrUrls.join(", ")}`}:{blocked:!1};if(!(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&!r.repairEnforceOriginalPr)return{blocked:!1};let s=r.repairEnforceOriginalPr?Or(gt(r.targetPrUrl)??"")??(r.targetPrUrls.length===1?Or(r.targetPrUrls[0]):null):null;if(s){let d=jc(t,n);if(!(n&&typeof n=="object"&&!Array.isArray(n)&&n.supersedesOriginalTargetPr===!0)){for(let g of d)if(g!==s)return{blocked:!0,reason:"duplicate_repair_pr",detail:`Repair worker opened or attached PR ${g} instead of canonical target ${s}`}}let p=Kc(n).find(g=>g.prUrl===s);if(!p||p.outcome!=="merged"&&!(p.reason?.trim()&&(p.outcome==="skipped"||p.outcome==="blocked")))return{blocked:!0,reason:"missing_repair_target_reconciliation",detail:`Repair worker must reconcile target PR ${s}`}}let i=Kc(n),a=new Map(i.map(d=>[_o(d.prUrl),d])),l=new Set(r.targetPrUrls.map(d=>_o(Or(d)??d)).filter(Boolean)),c=jc(t,n);if(r.landingOnly)for(let d of c){if(l.size>0&&!l.has(_o(d)))return{blocked:!0,reason:"unrelated_implementation_pr",detail:`Landing-only worker attached unrelated PR ${d}`};if(l.size===0)return{blocked:!0,reason:"unrelated_implementation_pr",detail:"Landing-only worker must not open new implementation PRs"}}if(r.targetPrUrls.length===0)return{blocked:!1};let u=[];for(let d of r.targetPrUrls){let f=_o(Or(d)??d),m=a.get(f);if(!m){u.push(f);continue}m.outcome!=="merged"&&!m.reason?.trim()&&u.push(f)}return u.length>0?{blocked:!0,reason:u.every(d=>a.has(d))?"incomplete_target_pr_landing":"missing_target_pr_reconciliation",detail:`Target PR reconciliation incomplete: ${u.join(", ")}`}:{blocked:!1}}function Gc(e){if(e.blocked)return e.detail??e.reason}var Yc=j(()=>{"use strict";Co()});function kR(e){let r=Date.now();if(e.completionBlocker&&!Jc(e.completionBlocker))return{state:"blocked",reason:e.completionBlocker};if(e.finalResult){if(e.localOnly&&RR(e.finalResult))return{state:"done",reason:"local-only worker superseded by merged PR"};let o={finalResult:e.finalResult,changedFiles:e.changedFiles??[],gitAncestry:e.gitAncestry??null,prUrl:e.prUrl??null},s=mt(o);if(s.blocked){let i=Fc(s);return{state:"needs_attention",reason:s.reason?`landing blocked (${s.reason}): ${i}`:`landing blocked: ${i}`}}if(e.landingContract){let i=Vc({contract:e.landingContract,snapshot:o,finalResult:e.finalResult}),a=Gc(i);if(a)return{state:"needs_attention",reason:i.reason?`landing contract (${i.reason}): ${a}`:`landing contract: ${a}`}}return{state:"done",reason:"final result recorded"}}if(!e.alive){if(yR(e))return{state:"done",reason:"empty abandoned worker record"};let o=Bc(e.error);if(o)return{state:"blocked",reason:o.reason};let s=pt({alive:!1,finalResult:null,changedFiles:e.changedFiles,gitAncestry:e.gitAncestry});if(s?.salvageable){let a=e.error?.trim();return{state:"needs_attention",reason:a?`${s.attentionReason} (${a})`:s.attentionReason}}let i=e.error?.trim();return{state:"needs_attention",reason:i?`process exited without a final result: ${i}`:s?.attentionReason??"process exited without a final result"}}if(e.heartbeatBlocker)return{state:"blocked",reason:`worker heartbeat reported blocker: ${e.heartbeatBlocker}`};let t=e.startedAt?Date.parse(e.startedAt):NaN;if(!e.firstEventAt&&e.stdoutBytes===0&&e.heartbeatBytes===0&&Number.isFinite(t)&&r-t>hR)return{state:"needs_attention",reason:`no first stream event ${si(t)}s after start`};let n=e.lastActivityAt?Date.parse(e.lastActivityAt):NaN;return Number.isFinite(n)&&r-n>ht?{state:"stale",reason:`no log/event/heartbeat activity for ${si(n)}s`}:{state:"ok",reason:"recent activity"}}function Jc(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function yR(e){return e.finalResult||e.taskId||e.agentOsId||e.stdoutBytes>0||(e.stderrBytes??0)>0||e.heartbeatBytes>0||e.error?.trim()||(e.changedFiles??[]).some(r=>r.trim())?!1:/empty worker dir|marked abandoned/i.test(e.reconcileReason??"")}function RR(e){let r=null;if(typeof e=="string"?r=ft(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return!1;let t=r.targetPrReconciliation??r.target_pr_reconciliation;return Array.isArray(t)?t.some(n=>!n||typeof n!="object"||Array.isArray(n)?!1:String(n.outcome??"").trim()==="merged"):!1}function bR(e,r,t){let n=e.completionSnapshot?.finalResult;return e.completionAckSource==="local-pr-merged-reconcile"&&n!==void 0&&n!==null?n:r||(n??dt(t))}function N(e,r={}){let t=bo(e.stdoutPath),n=be(e.heartbeatPath),o=typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim().length>0,s=bR(e,t.finalResult,n),i=o?!1:F(e.pid),a=co(e.stdoutPath),l=co(e.stderrPath),c=co(e.heartbeatPath),u=en(e.worktreePath),d=mo(e.worktreePath,{base:r.base,baseCommit:r.baseCommit}),f=cc([t.lastEventAt,n.lastHeartbeatAt,uo(e.stdoutPath),uo(e.stderrPath),uo(e.heartbeatPath)]),m=t.error||!i&&!s&&po(e.stderrPath,10).trim()||void 0,p=typeof e.completionBlocker=="string"&&e.completionBlocker.trim()?e.completionBlocker.trim():null,g=Jc(p)?null:p,k=e.repairTargetPrUrl?{landingOnly:!1,targetPrUrls:[e.repairTargetPrUrl],targetPrUrl:e.repairTargetPrUrl,repairEnforceOriginalPr:!0}:null,h=kR({alive:i,finalResult:s,firstEventAt:t.firstEventAt,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,lastActivityAt:f,heartbeatBlocker:n.heartbeatBlocker,startedAt:e.startedAt,error:m,changedFiles:u,gitAncestry:d,completionBlocker:g,landingContract:k,prUrl:e.repairTargetPrUrl??e.taskPrUrl??null,localOnly:e.localOnly===!0,taskId:e.taskId??null,agentOsId:e.agentOsId??null,reconcileReason:e.reconcileReason??null}),b=g||h.state==="blocked"?"blocked":o||h.state==="done"?"done":s?"exited":i?"running":"exited";return{runId:e.runId,worker:e.name,pid:e.pid,alive:i,status:b,attention:h,branch:e.branch,worktreePath:e.worktreePath,ownedPaths:e.ownedPaths,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,firstEventAt:t.firstEventAt,lastEventAt:t.lastEventAt,lastActivityAt:f,currentTool:o?null:t.currentTool,heartbeatCount:n.heartbeatCount,lastHeartbeatAt:n.lastHeartbeatAt,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,timestampAnomalies:n.timestampAnomalies,finalResult:s,error:m,changedFiles:u,gitAncestry:d,instructionPolicyFingerprint:e.instructionPolicyFingerprint??null,instructionPolicyEvidence:e.instructionPolicyEvidence??null,model:e.model??e.orchestrationAudit?.model??null,provider:e.orchestrationAudit?.provider??null,boxKind:e.boxKind??null,boxId:e.boxId??null,runtimeId:e.runtimeId??null,personaSlug:e.personaSlug??null,dispatched:e.dispatched??null,localOnly:e.localOnly??null}}function oe(e){return!!(e.finalResult||e.alive===!1||e.status==="exited"||e.status==="done")}function kt(e){return e.finalResult?e.attention.state==="needs_attention"||e.attention.state==="blocked":!1}function cn(e,r){return r.length===0?e:r.some(t=>t.attention==="needs_attention"||t.attention==="stale"||t.attention==="blocked")?"needs_attention":r.every(t=>t.status==="done")?"done":r.some(t=>t.status==="running")?"running":e}var hR,ht,J=j(()=>{"use strict";Ir();vo();Lc();So();Se();wo();Yc();Co();w();hR=18e4,ht=6e5});import{readFileSync as vR}from"node:fs";function SR(e){if(!e||process.platform!=="linux")return null;try{return vR(`/proc/${e}/cmdline`,"utf8").replace(/\0/g," ")}catch{return null}}function xo(e){if(!e.pid||process.platform!=="linux")return!0;let r=SR(e.pid);return r?[e.worktreePath,e.workerDir,e.heartbeatPath].filter(n=>typeof n=="string"&&n.trim().length>0).some(n=>r.includes(n)):!1}function Po(e){if(typeof e.completionBlocker=="string"&&e.completionBlocker.trim())return!1;let r=N(e);return r.alive&&!xo(e)?!1:r.alive&&!r.finalResult&&r.attention.state!=="done"}var Eo=j(()=>{"use strict";J()});import zc from"node:os";import wR from"node:path";function qc(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function CR(e=v(),r,t){let n=qc(e.perWorkerMemBytes,un),o=qc(e.memReserveBytes,dn),s=Math.min(1,Math.max(.1,Number(e.memUtilization)>0?Number(e.memUtilization):pn)),i=Io({config:e,configuredMaxWorkersOverride:r,totalMemBytes:t??zc.totalmem()});return{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i.configuredMaxWorkers,autoCap:i.autoCap,workerCapSource:i.workerCapSource}}function bi(e,r={}){let t=r.perWorkerMemBytes??un,n=r.memReserveBytes??dn,o=r.memUtilization??pn,s=Math.max(0,Math.floor(e*o)-n),i=Math.max(1,Math.floor(s/t));return Math.min(i,Ao)}function _R(){return rn()}function xR(e){let r=0;for(let t of pe(e)){let n=_(wR.join(P(e.id),"workers",R(t),"worker.json"),void 0);!n||!Po(n)||r++}return r}function PR(){let e=0;for(let r of Y())e+=xR(r);return e}function er(e){let r=e.config??v(),t=e.totalMemBytes??zc.totalmem(),{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i,autoCap:a,workerCapSource:l}=CR(r,e.configuredMaxWorkersOverride,t),c=We(r),u=e.freeMemBytes??_R(),d=e.activeWorkers??PR(),f=Math.max(0,Math.floor(t*s)-o),m=Math.max(0,Math.floor(f/n)),p=Math.max(0,Math.floor(Math.max(0,u-o)/n)),g=a,h=Math.max(0,Math.min(i??g,m)),b=Math.max(0,h-d),M=Math.min(b,p),T=e.skipDiskGate||process.env.KYNVER_RESOURCE_GATE_SKIP_DISK==="1"?void 0:Be({diskPath:e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/"});T&&!T.ok&&(M=0);let K=null;return M<=0&&(T&&!T.ok?K=T.reason??"disk gate blocked worker admission":d>=h?K=`at worker limit (${d}/${h} running)`:p<=0?K="insufficient free memory \u2014 waiting for workers to finish":K="no worker slots available"),{ok:M>0,totalMemBytes:t,freeMemBytes:u,memReserveBytes:o,perWorkerMemBytes:n,configuredMaxWorkers:i,workerCapSource:l,boxKind:c,autoCap:g,capacityWorkers:m,maxConcurrentWorkers:h,activeWorkers:d,slotsAvailable:M,reason:K,...T?{diskGate:T}:{}}}var un,dn,pn,Ao,yt=j(()=>{"use strict";ho();I();Ie();Oo();nn();W();Ar();Eo();w();un=500*1024*1024,dn=4*1024*1024*1024,pn=.85,Ao=64});function Nr(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Io(e){let r=e.config??{},t=e.env??process.env,n=Nr(r.perWorkerMemBytes,un),o=Nr(r.memReserveBytes,dn),s=Math.min(1,Math.max(.1,Number(r.memUtilization)>0?Number(r.memUtilization):pn)),i=bi(e.totalMemBytes,{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s});if(e.configuredMaxWorkersOverride!==void 0&&e.configuredMaxWorkersOverride!==null)return{configuredMaxWorkers:Nr(e.configuredMaxWorkersOverride,i),autoCap:i,workerCapSource:"workspace_override"};if(r.maxConcurrentWorkers!==void 0&&r.maxConcurrentWorkers!==null){let c=Nr(r.maxConcurrentWorkers,0)||null;if(c)return{configuredMaxWorkers:Math.min(c,Ao),autoCap:i,workerCapSource:"config"}}let l=(t.KYNVER_MAX_WORKERS_INTENTIONAL==="1"||t.KYNVER_MAX_WORKERS_INTENTIONAL==="true")&&t.KYNVER_MAX_WORKERS&&Nr(t.KYNVER_MAX_WORKERS,0)||null;return l?{configuredMaxWorkers:Math.min(l,Ao),autoCap:i,workerCapSource:"env"}:{configuredMaxWorkers:null,autoCap:i,workerCapSource:"auto"}}function vi(e={}){let r=e.totalMemBytes??0,t=bi(r,{perWorkerMemBytes:Nr(e.config?.perWorkerMemBytes,un),memReserveBytes:Nr(e.config?.memReserveBytes,dn),memUtilization:e.config?.memUtilization&&Number(e.config.memUtilization)>0?Number(e.config.memUtilization):pn}),n=e.diskGateOk??!0,o=n?t:Math.max(1,Math.min(t,4));return{totalMemBytes:r,autoCap:t,recommendedMaxWorkers:o,diskPath:e.diskPath??"/",diskGateOk:n,diskFreeBytes:e.diskFreeBytes??null}}var Oo=j(()=>{"use strict";yt()});var Qc={};Uk(Qc,{runDeviceLogin:()=>Si});import Xc from"node:os";function ER(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||v().apiBaseUrl;return r?ze(String(r)):void 0}async function AR(e){await new Promise(r=>setTimeout(r,e))}async function Si(e){let r=ER(e);if(!r)return console.error("kynver login (device flow) requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site, set KYNVER_API_URL, or run `kynver setup` first."),{ok:!1};let t=`${Xc.hostname()} (${Xc.platform()})`,n;try{let a=await fetch(`${r}/api/auth/device/code`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({clientName:t})});if(!a.ok)return console.error(`Could not start device authorization (${a.status}).`),{ok:!1};n=await a.json()}catch(a){return console.error(`Could not reach ${r}: ${a.message}`),{ok:!1}}let o=n.verification_uri_complete||n.verification_uri;console.log(""),console.log("  Authorize this machine:"),console.log(`    1. Open: ${o}`),console.log(`    2. Confirm the code: ${n.user_code}`),console.log(""),console.log("  Waiting for approval\u2026");let s=Date.now()+n.expires_in*1e3,i=Math.max(1,n.interval)*1e3;for(;Date.now()<s;){await AR(i);let a;try{a=await(await fetch(`${r}/api/auth/device/token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({device_code:n.device_code})})).json().catch(()=>({}))}catch{continue}switch(a.status){case"approved":return a.api_key?(mn(a.api_key),console.log("  Approved \u2014 this machine is now linked to your Kynver account."),{ok:!0,apiKey:a.api_key}):{ok:!1};case"slow_down":i+=2e3;break;case"authorization_pending":typeof a.interval=="number"&&(i=Math.max(i,a.interval*1e3));break;case"access_denied":return console.error("  Request was denied in the browser."),{ok:!1};case"expired_token":return console.error("  The code expired before it was approved. Run `kynver login` again."),{ok:!1};default:break}}return console.error("  Timed out waiting for approval. Run `kynver login` again."),{ok:!1}}var wi=j(()=>{"use strict";I();w()});import{existsSync as eu,mkdirSync as ru,readFileSync as tu,writeFileSync as nu}from"node:fs";import{homedir as IR,totalmem as OR}from"node:os";import Ci from"node:path";import NR from"node:os";function v(){if(!eu(No))return{};try{return JSON.parse(tu(No,"utf8"))}catch{return{}}}function rr(e){ru(To,{recursive:!0}),nu(No,`${JSON.stringify(_i(e),null,2)}
-`,{mode:384})}function _i(e){return{...e,...e.harnessRoot?.trim()?{harnessRoot:ke(e.harnessRoot.trim())}:{},...e.defaultRepo?.trim()?{defaultRepo:ke(e.defaultRepo.trim())}:{}}}function bt(e){return _i(e)}function TR(e,r){let t=fn(),n=(typeof r.apiBaseUrl=="string"?r.apiBaseUrl:void 0)||e.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim(),o=(typeof r.agentOsId=="string"?r.agentOsId:void 0)||e.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||(t.runnerToken?.trim().startsWith("krc1.")?t.runnerTokenAgentOsId?.trim():void 0),i=(typeof r.repo=="string"?r.repo:r.discoverRepo===!0||r.discoverRepo==="true"?st()?.repo:void 0)||e.defaultRepo?.trim()||process.env.KYNVER_DEFAULT_REPO?.trim()||process.env.KYNVER_HARNESS_REPO?.trim()||fo()?.repo,a=(typeof r.harnessRoot=="string"?r.harnessRoot:void 0)||e.harnessRoot?.trim()||process.env.KYNVER_HARNESS_ROOT?.trim()||process.env.OPUS_HARNESS_ROOT?.trim();return{...n?{apiBaseUrl:ze(n)}:{},...o?{agentOsId:o}:{},...i?{defaultRepo:i}:{},...a?{harnessRoot:a}:{},...typeof r.agentOsSlug=="string"?{agentOsSlug:r.agentOsSlug}:e.agentOsSlug?{agentOsSlug:e.agentOsSlug}:{}}}function DR(e,r,t=OR()){let n=typeof r.maxWorkers=="string"?r.maxWorkers:typeof r.maxConcurrentWorkers=="string"?r.maxConcurrentWorkers:void 0,o=typeof r.boxKind=="string"?r.boxKind:typeof r["box-kind"]=="string"?String(r["box-kind"]):void 0,s=Ue(process.env,{...e,...o?{boxKind:it(o)}:{}}).boxKind,i=Be({diskPath:typeof r.diskPath=="string"?r.diskPath:"/"}),a=vi({totalMemBytes:t,diskPath:i.path,diskGateOk:i.ok,diskFreeBytes:i.freeBytes,config:e});return n?{maxConcurrentWorkers:Math.max(1,Math.floor(Number(n))),maxConcurrentWorkersSource:"setup-flag",boxKind:s}:e.maxConcurrentWorkers!==void 0&&e.maxConcurrentWorkers!==null?{maxConcurrentWorkers:Math.max(1,Math.floor(Number(e.maxConcurrentWorkers))),maxConcurrentWorkersSource:e.maxConcurrentWorkersSource??"operator",boxKind:s}:{maxConcurrentWorkers:a.recommendedMaxWorkers,maxConcurrentWorkersSource:"setup-auto",boxKind:s}}function fn(){if(!eu(Rt))return{};try{return JSON.parse(tu(Rt,"utf8"))}catch{return{}}}function ou(e){ru(To,{recursive:!0}),nu(Rt,`${JSON.stringify(e,null,2)}
-`,{mode:384})}function ne(){return process.env.KYNVER_API_KEY?process.env.KYNVER_API_KEY:fn().apiKey}function mn(e){ou({...fn(),apiKey:e})}function Zc(e){let r=process.env.KYNVER_RUNNER_TOKEN?.trim();if(r)return r;let t=fn();if(t.runnerToken&&!(e&&t.runnerTokenAgentOsId&&t.runnerTokenAgentOsId!==e))return t.runnerToken}function Tr(e,r){ou({...fn(),runnerToken:r,runnerTokenAgentOsId:e})}function $(e){let r=gn(e);return r||Pi("requires --base-url, KYNVER_API_URL, KYNVER_CRON_FIRE_BASE_URL, or ~/.kynver/config.json apiBaseUrl"),r}function su(e){return gn(e)}function gn(e){let r=e||process.env.KYNVER_API_URL||process.env.KYNVER_CRON_FIRE_BASE_URL||process.env.OPENCLAW_CRON_FIRE_BASE_URL||v().apiBaseUrl;return r?ze(String(r)):void 0}function MR(e,r){let t=e||Zc(r)||(r?void 0:Zc(v().agentOsId));if(t)return String(t);let n=process.env.KYNVER_RUNTIME_SECRET||process.env.KYNVER_CRON_SECRET||process.env.OPENCLAW_CRON_SECRET;if(n)return console.warn("[kynver] using deployment-level callback secret; run `kynver runner credential --agent-os-id <id>` for a scoped token"),String(n)}async function xi(e,r,t){let n=MR(e,r);if(n)return{ok:!0,secret:n};let o=ne(),s=gn(t?.baseUrl);if(o&&r&&s)try{let i=await Dr(r,{baseUrl:s,apiKey:o});return Tr(r,i),{ok:!0,secret:i}}catch(i){return{ok:!1,reason:`runner credential mint failed: ${i.message}`}}return{ok:!1,reason:"no runner credential: requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, or KYNVER_API_KEY + API base URL to mint one"}}async function V(e,r,t){let n=await xi(e,r,t);if(n.ok)return n.secret;Pi(n.reason)}async function iu(e,r){let t=ne(),n=gn(r?.baseUrl);if(!t||!e||!n)return null;try{let o=await Dr(e,{baseUrl:n,apiKey:t});return Tr(e,o),o}catch{return null}}async function au(e,r,t){let n=ne(),o=gn(t?.baseUrl);if(!n)return{ok:!1,reason:"KYNVER_API_KEY is required to refresh a rejected runner token"};if(!r)return{ok:!1,reason:"agentOsId is required to refresh a rejected runner token"};if(!o)return{ok:!1,reason:"KYNVER_API_URL or --base-url is required to refresh a rejected runner token"};try{let s=await Dr(r,{baseUrl:o,apiKey:n});return s&&s!==e?(Tr(r,s),{ok:!0,token:s}):{ok:!1,reason:"runner credential refresh returned the rejected token"}}catch(s){return{ok:!1,reason:s.message}}}async function Dr(e,r){let t=r?.apiKey||ne();if(!t)throw new Error("API key required \u2014 run `kynver login` first");let o=`${$(r?.baseUrl)}/api/agent-os/by-id/${encodeURIComponent(e)}/runner-credentials`,s=await fetch(o,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify({})}),i=await s.text(),a=null;try{a=JSON.parse(i)}catch{a=null}if(!s.ok||!a?.token)throw new Error(`runner credential mint failed (${s.status}): ${a?.error??i.slice(0,200)}`);return a.token}async function lu(e){let r=(e.agentOsId?String(e.agentOsId):v().agentOsId)||"";r||Pi("runner credential requires --agent-os-id or agentOsId in ~/.kynver/config.json");try{let t=await Dr(r,{baseUrl:e.baseUrl?String(e.baseUrl):void 0});Tr(r,t),console.log(JSON.stringify({ok:!0,agentOsId:r,credentialsPath:q(Rt),tokenPrefix:`${t.slice(0,12)}\u2026`,note:"Scoped runner token saved; callbacks use X-Kynver-Runner-Token."},null,2))}catch(t){console.error(t instanceof Error?t.message:String(t)),process.exit(1)}}function Pi(e){console.error(e),process.exit(1)}function Do(e){let r={};for(let t=0;t<e.length;t++){let n=e[t];if(!n.startsWith("--"))continue;let o=n.slice(2).replace(/-([a-z])/g,(i,a)=>a.toUpperCase()),s=e[t+1];!s||s.startsWith("--")?r[o]=!0:(r[o]=s,t++)}return r}async function Mo(e){let r=v(),t=Be({diskPath:typeof e.diskPath=="string"?e.diskPath:"/"}),n=vi({totalMemBytes:NR.totalmem(),diskPath:t.path,diskGateOk:t.ok,diskFreeBytes:t.freeBytes,config:r}),o=DR(r,e),s=_i({...r,...TR(r,e),...o,workerProvider:typeof e.provider=="string"?e.provider:r.workerProvider||"cursor",...e.chatOauth===!0?{chatUseClaudeOauth:!0}:{}});rr(s);let i=Ue(process.env,s),a,l=ne(),c=s.agentOsId;if(l&&c)try{let u=await Dr(c,{baseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:s.apiBaseUrl,apiKey:l});Tr(c,u),a="Scoped runner token minted and saved to ~/.kynver/credentials."}catch{a="Runner token not minted (server offline or master secret unset). Run `kynver runner credential` after deploy."}console.log(JSON.stringify({ok:!0,configPath:q(No),config:bt(s),boxKind:s.boxKind,boxKindSource:i.source,workerCapRecommendation:n,...i.warnings.length?{boxIdentityWarnings:i.warnings}:{},note:a??"boxKind and maxConcurrentWorkers persisted; override with --box-kind and --max-workers. Run `kynver login` + `kynver runner credential` for scoped callbacks."},null,2))}async function cu(e){let r=typeof e.apiKey=="string"?e.apiKey:process.env.KYNVER_API_KEY;if(r){mn(r),console.log(JSON.stringify({ok:!0,credentialsPath:q(Rt)},null,2));return}let{runDeviceLogin:t}=await Promise.resolve().then(()=>(wi(),Qc));(await t(e)).ok||process.exit(1),console.log(JSON.stringify({ok:!0,credentialsPath:q(Rt)},null,2))}var To,No,Rt,BO,LO,I=j(()=>{"use strict";go();Qe();w();Ie();Oo();nn();To=Ci.join(IR(),".kynver"),No=Ci.join(To,"config.json"),Rt=Ci.join(To,"credentials");BO=500*1024*1024,LO=4*1024*1024*1024});I();import{mkdirSync as Ak,realpathSync as Ik}from"node:fs";import{fileURLToPath as NA}from"node:url";I();w();wi();import UR from"node:os";function WR(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||v().apiBaseUrl;return r?ze(String(r)):void 0}async function BR(e,r){let t=await fetch(`${e}/api/agent-os`,{headers:{Authorization:`Bearer ${r}`}});if(!t.ok)return null;let n=await t.json().catch(()=>null);if(!n?.primarySlug)return null;let o=n.items?.find(s=>s.slug===n.primarySlug);return o?.id&&o.slug?{id:o.id,slug:o.slug}:{id:"",slug:n.primarySlug}}async function Uo(e){let r=WR(e);r||(console.error("kynver bootstrap requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site or set KYNVER_API_URL."),process.exit(1)),ne()||(typeof e.apiKey=="string"?mn(e.apiKey):(await Si({...e,apiBaseUrl:r})).ok||process.exit(1));let t=ne();t||(console.error("No API key after login \u2014 aborting."),process.exit(1));let n=await BR(r,t);n||(console.error("Could not resolve your AgentOS workspace from the account. Confirm this account has AgentOS access, then retry."),process.exit(1));let o={...e,apiBaseUrl:r,agentOsSlug:n.slug,...n.id?{agentOsId:n.id}:{},...typeof e.repo=="string"?{}:{discoverRepo:!0}};await Mo(o),console.log(""),console.log(`  Bootstrap complete \u2014 ${UR.hostname()} is linked to workspace "${n.slug}".`),console.log("  Next: `kynver start` \u2014 brings the agent online and configures local Kynver Cron when needed."),console.log("  Persistent background service (Linux): `kynver cron install --install-systemd` after your first start."),console.log("  (Advanced: `kynver run create --repo /path/to/repo` + `kynver daemon --run <RUN_ID> --agent-os-id <AOS_ID> --execute`.)")}I();import $P from"node:os";I();Qe();I();import HR from"node:path";import{homedir as FR}from"node:os";I();go();Qe();import uu from"node:path";function LR(e){return uu.resolve(ot(e.trim()))}function vt(e,r,t){let n=e?.trim();return n?{repo:LR(n),source:r,persistedInConfig:t}:null}function du(e){return e?{repo:e.repo,source:e.source,persistedInConfig:!1}:null}function Le(e={}){let r=e.env??process.env,t=e.config??v(),n=vt(t.defaultRepo,"config",!0);if(n)return n;let o=vt(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=vt(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);return s||du(st({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl}))}function pu(e={}){let r=e.env??process.env,t=e.config??v(),n=vt(t.defaultRepo,"config",!0);if(n)return n;let o=vt(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=vt(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);return s||du(fo({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl}))}function mu(e,r){let t={...r??v(),defaultRepo:ke(uu.resolve(e))};return rr(t),t}function hn(e){return{defaultRepo:q(e.repo),source:e.source,persistedInConfig:e.persistedInConfig}}var Ei=HR.join(FR(),".kynver","config.json");function kn(e){let r=v(),t=pu({...e,config:r});if(!t)return{ok:!1,remediated:!1,alreadyPersisted:!1,configPath:q(Ei),resolved:null,reason:"No Kynver git checkout found. Clone the repo, cd into it, then run `kynver setup --repo /path/to/Kynver` (or export KYNVER_DEFAULT_REPO).",remediation:"Clone the Kynver monorepo, cd into it, then run `kynver config ensure-default-repo` (or `kynver setup --repo /path/to/Kynver`)."};if(t.persistedInConfig)return{ok:!0,remediated:!1,alreadyPersisted:!0,configPath:q(Ei),resolved:hn(t),config:bt(r)};let n=mu(t.repo,r),o=hn({...t,persistedInConfig:!0,source:"config"});return{ok:!0,remediated:!0,alreadyPersisted:!1,configPath:q(Ei),resolved:o,config:bt(n),remediation:"defaultRepo persisted in ~/.kynver/config.json \u2014 `kynver run create` no longer requires --repo."}}function fu(e=!1){let r=kn();if(e){console.log(JSON.stringify(r,null,2)),r.ok||(process.exitCode=1);return}if(!r.ok){console.error(r.reason??"Could not resolve a Kynver git checkout."),r.remediation&&console.error(r.remediation),process.exitCode=1;return}if(r.alreadyPersisted){console.log(`defaultRepo already set (${r.resolved?.defaultRepo??"unknown"}) in ${r.configPath}`);return}console.log(`Persisted defaultRepo ${r.resolved?.defaultRepo??""} in ${r.configPath}. \`kynver run create\` can omit --repo.`)}function gu(e){return e?e.persistedInConfig?{status:"pass"}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` to persist defaultRepo in ~/.kynver/config.json (or `kynver doctor runtime-takeover --remediate-default-repo`)."}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` from a Kynver checkout (or `kynver setup --repo /path/to/Kynver`)."}}function Ne(e){let r=String(e).trim();return r.startsWith("krc1.")?{"Content-Type":"application/json","X-Kynver-Runner-Token":r}:{"Content-Type":"application/json","X-Kynver-Cron-Secret":r,"X-OpenClaw-Cron-Secret":r,"X-Kynver-Runtime-Secret":r}}import{mkdirSync as $R,readFileSync as KR,renameSync as jR,writeFileSync as VR}from"node:fs";import{homedir as GR}from"node:os";import ku from"node:path";function hu(e){return JSON.stringify(Ai(e))}function Ai(e){if(Array.isArray(e))return e.map(Ai);if(e&&typeof e=="object"){let r={};for(let t of Object.keys(e).sort())r[t]=Ai(e[t]);return r}return e}function Ii(e){if(!e)return null;let r=e.trim();if(!r)return null;if(/^[0-9a-fA-F]{64}$/.test(r))return new Uint8Array(r.match(/.{2}/g).map(t=>parseInt(t,16)));try{let t=Buffer.from(r,"base64");if(t.length===32)return new Uint8Array(t)}catch{}return null}function yn(e){if(!e||typeof e!="object")return!1;let r=e;if(typeof r.signature!="string"||!r.signature||typeof r.publicKeyId!="string"||!r.publicKeyId)return!1;let t=r.bundle;return!(!t||typeof t!="object"||typeof t.version!="string"||!t.version||typeof t.generatedAt!="string"||!Array.isArray(t.personas)||!t.instructions||typeof t.instructions!="object"||!t.policyThresholds||typeof t.policyThresholds!="object")}function yu(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return ku.join(GR(),".kynver",`instruction-bundle-${r}.json`)}function Ru(e,r){try{let t=yu(e);$R(ku.dirname(t),{recursive:!0});let n=`${t}.tmp-${process.pid}`;VR(n,JSON.stringify(r),"utf8"),jR(n,t)}catch{}}function bu(e){try{let r=KR(yu(e),"utf8"),t=JSON.parse(r);return yn(t)?t:null}catch{return null}}var YR="embedded-1",JR=[{slug:"ghost",displayName:"Ghost",description:"Orchestration persona.",dispatchLane:null,defaultRoleLane:"system"},{slug:"astra",displayName:"Astra",description:"Planning persona.",dispatchLane:"implementation",defaultRoleLane:"plan_author"},{slug:"rhea",displayName:"Rhea",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"mnemo",displayName:"Mnemo",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"sentinel",displayName:"Sentinel",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"deep_reviewer"},{slug:"pixel",displayName:"Pixel",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"schema",displayName:"Schema",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"atlas",displayName:"Atlas",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"runtime_verifier"},{slug:"bridge",displayName:"Bridge",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"catalyst",displayName:"Catalyst",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"lorentz",displayName:"Lorentz",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"report_reviewer"},{slug:"dalton",displayName:"Dalton",description:"Landing persona.",dispatchLane:"landing",defaultRoleLane:"implementer"}],qR={"worker.prompt.core_rules":["Structured final result (recommended): record completion as JSON with summary, files, PR URLs, verification, risks, and blockers.","Completion handoff (required): before you stop, summarize the outcome in your last message and append a heartbeat line with phase `complete`. Commit your work cleanly and open a GitHub PR (draft OK) for substantial changes \u2014 never leave uncommitted changes behind without reporting them.","Review-only workers must not open new implementation PRs \u2014 review the existing PR and record a verdict in the final result.","Keep verification targeted to touched paths; avoid full-monorepo verification unless explicitly requested.","Do not run `npm publish`.","If verification fails, append a heartbeat line immediately with the failing command, reason, and next action."].join(`
+`):""}function gc(e){return e?pi(mc.resolve(e),"utf8"):""}function Ar(e){Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function pr(e){return new Promise(r=>setTimeout(r,e))}function L(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}function mr(e,r){try{process.kill(-e,r)}catch{process.kill(e,r)}}function hc(e){let r=null,t=-1/0;for(let n of e){if(!n)continue;let o=Date.parse(n);Number.isFinite(o)&&o>t&&(t=o,r=n)}return r}function mi(e){return Math.max(0,Math.round((Date.now()-e)/1e3))}var w=V(()=>{"use strict"});function Qk(e){return zk.has(e)?!0:Xk.some(r=>e.endsWith(r))}function Qe(e){let r={...e};for(let t of Object.keys(r))Qk(t)&&delete r[t];return r}var qk,zk,Xk,it=V(()=>{"use strict";qk=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY"],zk=new Set(qk),Xk=["_SECRET","_API_KEY"]});import{spawnSync as yc}from"node:child_process";function pe(e,r,t={}){let n=yc("git",r,ue({cwd:e,encoding:"utf8"}));if(n.status!==0&&!t.allowFailure){let o=`git ${r.join(" ")} failed: ${n.stderr||n.stdout}`;if(t.throwError)throw new Error(o);dr(o)}return n.stdout||""}function Rc(e){pe(e,["rev-parse","--show-toplevel"])}function on(e){return pe(e,["status","--short"],{allowFailure:!0}).split(`
+`).map(r=>r.trim()).filter(Boolean)}function re(e,r){try{let t=yc("git",r,ue({cwd:e,encoding:"utf8"}));return{status:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function kc(e,r,t){let n=re(e,["merge-base","--is-ancestor",r,t]);return n.status===0?{isAncestor:!0,error:null}:n.status===1?{isAncestor:!1,error:null}:{isAncestor:null,error:n.error||n.stderr||n.stdout||`git exited ${n.status}`}}function yo(e,r="origin/main"){let t=typeof r=="string"?{base:r}:r,n=t.baseCommit?.trim()||t.base?.trim()||"origin/main",o=t.baseCommit?.trim()||null;if(!e)return fi(n,"missing worktree path");let s=re(e,["rev-parse","HEAD"]);if(s.status!==0)return fi(n,s.error||s.stderr||s.stdout||"failed to resolve HEAD");let i;if(o)i=o;else{let m=re(e,["rev-parse",n]);if(m.status!==0)return fi(n,m.error||m.stderr||m.stdout||`failed to resolve ${n}`,s.stdout.trim());i=m.stdout.trim()}let a=s.stdout.trim();if(a===i)return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:!0,headIsAncestorOfBase:!0,relation:"synced"};let l=kc(e,i,a),c=kc(e,a,i),u=l.error||c.error||void 0;if(l.isAncestor==null||c.isAncestor==null)return{checked:!1,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:"unknown",...u?{error:u}:{}};let d=l.isAncestor?"ahead":c.isAncestor?"merged":"diverged";return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:d,...u?{error:u}:{}}}function fi(e,r,t=null){return{checked:!1,base:e,head:t,baseHead:null,baseIsAncestorOfHead:null,headIsAncestorOfBase:null,relation:"unknown",error:r}}var Se=V(()=>{"use strict";w();it()});import{homedir as gi}from"node:os";import Ir from"node:path";function bc(e){return e==="~"?gi():e.startsWith("~/")||e.startsWith("~\\")?Ir.join(gi(),e.slice(2)):e}function at(e){return Ir.resolve(bc(e))}function Re(e){let r=bc(e),t=Ir.resolve(r),n=Ir.resolve(gi());return t===n?"~":t.startsWith(`${n}${Ir.sep}`)?`~/${Ir.relative(n,t).split(Ir.sep).join("/")}`:t.replace(/\\/g,"/").replace(/^\/home\/[^/]+(?=\/|$)/,"~").replace(/^\/Users\/[^/]+(?=\/|$)/,"~").replace(/^[A-Za-z]:\/home\/[^/]+(?=\/|$)/i,"~").replace(/^[A-Za-z]:\/Users\/[^/]+(?=\/|$)/i,"~")}function q(e){return Re(e)}var Ze=V(()=>{"use strict"});import{existsSync as ki,readFileSync as Sc}from"node:fs";import{homedir as Zk}from"node:os";import er from"node:path";import{fileURLToPath as ey}from"node:url";function ty(e){let r=er.join(e,"package.json");if(!ki(r))return null;try{let t=JSON.parse(Sc(r,"utf8"));return typeof t.name=="string"?t.name.trim():null}catch{return null}}function ny(e){return ty(e)==="kynver"}function vc(e){let r=er.resolve(e);if(!ki(r))return null;let t=re(r,["rev-parse","--show-toplevel"]);if(t.status!==0)return null;let n=t.stdout.trim();return n.length?er.resolve(n):null}function oy(e=import.meta.url){let r=er.dirname(ey(e));for(let t=0;t<8;t+=1){let n=er.join(r,"package.json");if(ki(n))try{if(JSON.parse(Sc(n,"utf8")).name==="@kynver-app/runtime")return r}catch{}let o=er.dirname(r);if(o===r)break;r=o}return null}function hi(e,r,t,n){if(!t)return;let o=er.resolve(t);e.has(o)||ny(o)&&(e.add(o),r.push({repo:o,source:n}))}function wc(e){let r=e?.cwd??process.cwd(),t=new Set,n=[];hi(t,n,vc(r),"cwd_git");let o=oy(e?.runtimeModuleUrl??import.meta.url);o&&hi(t,n,vc(o),"runtime_checkout");let s=Zk();for(let i of ry)hi(t,n,at(er.join(s,i)),"well_known_path");return n}function lt(e){return wc(e)[0]??null}function sy(e){let r=er.resolve(e).replace(/\\/g,"/");return r.includes("/.kynver/harness/worktrees/")||r.includes("/.openclaw/harness/worktrees/")||r.includes("/kynver-harness/")||r.includes("/openclaw/harness/worktrees/")}function Ro(e){let r=wc(e);return r.find(n=>!sy(n.repo))??r[0]??null}var ry,bo=V(()=>{"use strict";Se();Ze();ry=["Kynver","repos/Kynver","repos/kynver-source-main","code/Kynver","projects/Kynver"]});function ct(e){let r=(e??"").trim().toLowerCase();return r==="ghost"||r==="forge"?r:r.includes("forge")?"forge":r.includes("ghost")||r.includes("openclaw")?"ghost":"forge"}function Cc(e,r){return e[r]?.trim()||null}function We(e=process.env,r={}){let t=[],n=r.boxKind?.trim();if(n)return{boxKind:ct(n),source:"config",slugInferenceBlocked:!1,warnings:t};let o=Cc(e,"KYNVER_BOX_KIND");if(o)return{boxKind:ct(o),source:"env",slugInferenceBlocked:!1,warnings:t};let s=Cc(e,"KYNVER_AGENT_OS_SLUG");return s&&t.push(`KYNVER_AGENT_OS_SLUG=${s} is a workspace slug, not box identity \u2014 set boxKind via \`kynver setup --box-kind forge|ghost\` or KYNVER_BOX_KIND (defaulting box kind to forge)`),{boxKind:"forge",source:"default",slugInferenceBlocked:!!s,warnings:t}}function Be(e={},r=process.env){return We(r,e).boxKind}var Ie=V(()=>{"use strict"});import{readFileSync as iy}from"node:fs";import _c from"node:os";function sn(e){if(e!==void 0){let r=e.match(/^MemAvailable:\s+(\d+)\s*kB/m);return r?Number(r[1])*1024:_c.freemem()}if(process.platform==="linux")try{let t=iy("/proc/meminfo","utf8").match(/^MemAvailable:\s+(\d+)\s*kB/m);if(t)return Number(t[1])*1024}catch{}return _c.freemem()}var vo=V(()=>{"use strict"});import{existsSync as ay,readFileSync as ly,statfsSync as cy}from"node:fs";function yi(){if(process.platform!=="linux")return!1;for(let e of["/proc/sys/kernel/osrelease","/proc/version"])try{if(!ay(e))continue;let r=ly(e,"utf8");if(/microsoft|wsl/i.test(r))return!0}catch{}return!1}function xc(e={}){if(!(e.forceWsl===void 0?yi():e.forceWsl))return null;let t=e.wslHostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||ut,n=e.wslHostFreeWarnBytes??uy,o=e.wslHostFreeCriticalBytes??dy,s=e.statfs??cy,i;try{i=s(t)}catch(h){return{ok:!1,path:t,freeBytes:0,totalBytes:0,usedPercent:100,warnBelowBytes:n,criticalBelowBytes:o,reason:`Windows host disk probe failed at ${t}: ${h.message}`,probeError:h.message}}let a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<n,d=a<o,m=!u&&!d,f=(a/(1024*1024*1024)).toFixed(1),p=null;return m||(p=`Windows host disk ${t} at ${d?"critical":"warning"}: ${f} GiB free (<${(d?o:n)/1024/1024/1024} GiB); WSL VHDX cannot grow safely. ${py()}`),{ok:m,path:t,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:n,criticalBelowBytes:o,reason:p,probeError:null}}function py(){return"Recovery: 1) free Windows C: (empty Recycle Bin / Storage Sense / clear %TEMP% and %LOCALAPPDATA%\\Temp\\wsl-crashes); 2) shut down WSL (`wsl --shutdown`) then compact the VHDX (`Optimize-VHD` or `diskpart compact vdisk`); 3) clear local node_modules / .next / harness worktrees before restarting workers; 4) disable recurring dumps via `%USERPROFILE%/.wslconfig` (`maxCrashDumpCount=-1`) or `kynver wsl-crashes --execute`. Full runbook: docs/runbooks/wsl-disk-pressure.md."}var uy,dy,ut,Ri=V(()=>{"use strict";uy=25*1024*1024*1024,dy=12*1024*1024*1024,ut="/mnt/c"});import{execFileSync as Pc}from"node:child_process";import{existsSync as wo,readFileSync as Ec,readdirSync as my,statSync as fy}from"node:fs";import bi from"node:path";function So(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function Ac(){let e=process.env.KYNVER_WSL_WIN_USER?.trim();if(e)return e;try{let n=Pc("cmd.exe",["/c","echo","%USERNAME%"],{encoding:"utf8",timeout:5e3,stdio:["ignore","pipe","ignore"]}).trim();if(n&&n!=="%USERNAME%"&&!n.includes("%"))return n}catch{}let r=process.env.USER?.trim()||process.env.LOGNAME?.trim(),t=process.env.KYNVER_WSL_HOST_MOUNT?.trim()||ut;return r&&wo(bi.join(t,"Users",r))?r:null}function Ry(e={}){let r=e.crashDumpDir?.trim()||process.env.KYNVER_WSL_CRASH_DUMP_DIR?.trim();if(r)return r;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||ut,n=e.windowsUser??Ac();return n?`${t.replace(/\\/g,"/").replace(/\/$/,"")}/Users/${n}/AppData/Local/Temp/wsl-crashes`:null}function by(e){let r=/^wsl-crash-\d+-(\d+)-(.+)-(\d+)\.dmp$/i.exec(e);if(!r)return{executableHint:null,signal:null,pid:null};let t=Number(r[1]),n=r[2]??"",o=Number(r[3]),s=n.split("_").filter(Boolean);return{executableHint:s.length>0?s[s.length-1]:null,signal:Number.isFinite(o)?o:null,pid:Number.isFinite(t)?t:null}}function vy(){try{if(wo("/proc/sys/kernel/core_pattern"))return Ec("/proc/sys/kernel/core_pattern","utf8").trim()}catch{}try{return Pc("sysctl",["-n","kernel.core_pattern"],{encoding:"utf8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim()||null}catch{return null}}function Sy(e){return!!(e&&/wsl-capture-crash/i.test(e))}function wy(e,r=ut){let t=bi.join(r,"Users",e,".wslconfig");if(!wo(t))return{maxCrashDumpCount:null,crashDumpFolder:null};let n;try{n=Ec(t,"utf8")}catch{return null}let o=null,s=null;for(let i of n.split(/\r?\n/)){let a=i.replace(/#.*$/,"").trim();if(!a||a.startsWith("["))continue;let l=a.indexOf("=");if(l<0)continue;let c=a.slice(0,l).trim().toLowerCase(),u=a.slice(l+1).trim();if(c==="maxcrashdumpcount"){let d=Number(u);o=Number.isFinite(d)?d:null}else c==="crashdumpfolder"&&(s=u.replace(/^["']|["']$/g,"")||null)}return{maxCrashDumpCount:o,crashDumpFolder:s}}function Cy(e){if(!wo(e))return[];let r=my(e,{withFileTypes:!0}),t=[];for(let n of r){if(!n.isFile()||!n.name.toLowerCase().endsWith(".dmp"))continue;let o=bi.join(e,n.name);try{let s=fy(o),i=by(n.name);t.push({name:n.name,path:o,bytes:s.size,mtimeMs:s.mtimeMs,executableHint:i.executableHint,signal:i.signal,pid:i.pid})}catch{}}return t.sort((n,o)=>o.mtimeMs-n.mtimeMs),t}function fr(e={}){if(!(e.forceWsl===void 0?yi():e.forceWsl))return null;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||ut,n=e.windowsUser??Ac(),o=e.warnBelowBytes??So("KYNVER_WSL_CRASH_DUMP_WARN_BYTES",gy),s=e.criticalBelowBytes??So("KYNVER_WSL_CRASH_DUMP_CRITICAL_BYTES",hy),i=e.warnCount??So("KYNVER_WSL_CRASH_DUMP_WARN_COUNT",ky),a=e.criticalCount??So("KYNVER_WSL_CRASH_DUMP_CRITICAL_COUNT",yy),l=(e.readCorePattern??vy)(),c=Sy(l),u=null;n&&(u=(e.readWslConfig??wy)(n,t));let d=u?.maxCrashDumpCount??null,m=d===-1,f=Ry({hostMount:t,windowsUser:n,crashDumpDir:e.crashDumpDir});if(!f)return{ok:!0,path:null,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:m,reason:null,probeError:"windows_user_unresolved"};let p;try{p=(e.listDumps??Cy)(f)}catch(U){return{ok:!1,path:f,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:m,reason:`WSL crash dump probe failed at ${f}: ${U.message}`,probeError:U.message}}let h=p.reduce((U,C)=>U+C.bytes,0),k=p.length,g=[...new Set(p.map(U=>U.executableHint).filter(U=>!!U))],R=h>=s,I=h>=o,P=k>=a,E=k>=i,j=!(R||P||I||E),F=null;if(!j){let U=R||P?"critical":"warning",C=(h/1024**3).toFixed(1),ae=g.length>0?g.join(", "):"unknown";F=`WSL crash dumps ${U}: ${k} file(s), ${C} GiB at ${f} (executables: ${ae}). `+_y({wslCaptureEnabled:c,dumpsDisabledInWslConfig:m})}return{ok:j,path:f,windowsUser:n,dumpCount:k,totalBytes:h,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:p,executables:g,corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:m,reason:F,probeError:null}}function _y(e={}){let r=["Recovery:","1) run `kynver wsl-crashes --execute` or scripts/cleanup-wsl-crashes.ps1 to prune old .dmp files;"];return e.dumpsDisabledInWslConfig||r.push("2) add `[wsl2]\\nmaxCrashDumpCount=-1` to %USERPROFILE%/.wslconfig then `wsl --shutdown` to disable future dumps;"),e.wslCaptureEnabled&&r.push("3) investigate crashing executables (node OOM/SIGBUS often follows Windows C: pressure \u2014 see docs/runbooks/wsl-disk-pressure.md);"),r.push("full runbook: docs/runbooks/wsl-disk-pressure.md."),r.join(" ")}var gy,hy,ky,yy,an=V(()=>{"use strict";Ri();gy=5*1024*1024*1024,hy=10*1024*1024*1024,ky=2,yy=4});import{statfsSync as xy}from"node:fs";function Le(e={}){let r=e.diskPath?.trim()||"/",t=e.diskFreeWarnBytes??Py,n=e.diskFreeCriticalBytes??Ey,o=e.diskMaxUsedPercent??Ay,s=e.diskHardMaxUsedPercent??Iy,i=xy(r),a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<t,d=a<n,m=a<t*2,f=m&&c>o,p=m&&c>s,h=!u&&!d&&!f&&!p,k=e.skipWslHostCheck?null:xc(e.wslHost),g=e.skipWslCrashDumpCheck?null:fr(e.wslCrashDumps),R=h&&(k?k.ok:!0)&&(g?g.ok:!0),I=null;return R||(I=[d?`free space below critical ${n} bytes`:null,u?`free space below warning ${t} bytes`:null,p?`used percent above hard cap ${s}%`:null,f?`used percent above cap ${o}%`:null,k&&!k.ok?k.reason:null,g&&!g.ok?g.reason:null].filter(Boolean).join("; ")),Oy({ok:R,path:r,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:t,criticalBelowBytes:n,maxUsedPercent:o,hardMaxUsedPercent:s,reason:I,wslHost:k,wslCrashDumps:g?{ok:g.ok,path:g.path,dumpCount:g.dumpCount,totalBytes:g.totalBytes,executables:g.executables,wslCaptureEnabled:g.wslCaptureEnabled,dumpsDisabledInWslConfig:g.dumpsDisabledInWslConfig,reason:g.reason,probeError:g.probeError}:null})}function Oy(e){let r=process.env.KYNVER_DISPATCH_DISK_GATE_FORCE?.trim().toLowerCase();return r?r==="ok"||r==="open"||r==="none"?e.ok?e:{...e,ok:!0,reason:`disk gate forced open by KYNVER_DISPATCH_DISK_GATE_FORCE (suppressed: ${e.reason??"no reason"})`}:r==="block"||r==="pressured"?{...e,ok:!1,reason:`disk gate forced closed by KYNVER_DISPATCH_DISK_GATE_FORCE${e.reason?` (underlying: ${e.reason})`:""}`}:e:e}var Py,Ey,Ay,Iy,ln=V(()=>{"use strict";an();Ri();Py=30*1024*1024*1024,Ey=15*1024*1024*1024,Ay=80,Iy=90});import{existsSync as Ic}from"node:fs";import{homedir as Nc}from"node:os";import gr from"node:path";function ie(e){let r=gr.resolve(at(e.trim()));for(;Ny.has(gr.basename(r));)r=gr.dirname(r);return r}function be(){let e=process.env.KYNVER_HARNESS_ROOT||process.env.OPUS_HARNESS_ROOT;if(e)return ie(e);let r=v().harnessRoot?.trim();if(r)return ie(r);let t=gr.join(Nc(),".kynver","harness");return Ic(t)?t:Ic(Oc)?Oc:t}function we(e){return gr.join(ie(e),"runs")}function hr(e){return gr.join(ie(e),"worktrees")}function dt(){let e=be();return{harnessRoot:e,runsDir:we(e),worktreesDir:hr(e)}}function pt(e,r){return gr.join(e,b(r))}var Oc,Ny,Ce=V(()=>{"use strict";O();Ze();w();Oc=gr.join(Nc(),".openclaw","harness"),Ny=new Set(["runs","worktrees"])});import{existsSync as Ty,readdirSync as Dy,statSync as My}from"node:fs";import mt from"node:path";function te(){return dt()}function B(e){let{runsDir:r}=te();return _(mt.join(pt(r,b(e)),"run.json"))}function Y(){let{runsDir:e}=te();return Tc(e)}function Co(e){return Tc(we(e))}function Uy(e){try{return My(e).isDirectory()}catch{return!1}}function Tc(e){if(!Ty(e))return[];let r=[];for(let t of Dy(e,{withFileTypes:!0})){if(t.name==="runs")continue;let n=mt.join(e,t.name);if(!Uy(n))continue;let o=_(mt.join(n,"run.json"),void 0);o?.id&&r.push(o)}return r}function me(e,r){let{runsDir:t}=te();return _(mt.join(pt(t,b(e)),"workers",b(r),"worker.json"))}function Oe(e){let{runsDir:r}=te();de(mt.join(pt(r,e.id),"run.json"),e)}function H(e,r){let{runsDir:t}=te();de(mt.join(pt(t,e),"workers",r.name,"worker.json"),r)}function x(e){let{harnessRoot:r}=te();return cn(r,e)}function cn(e,r){return pt(we(e),b(r))}var M=V(()=>{"use strict";Ce();w()});import{existsSync as Wy,readdirSync as By}from"node:fs";import Ly from"node:path";function fe(e){let r=new Set;for(let n of Object.keys(e.workers||{}))r.add(b(n));let t=Ly.join(x(e.id),"workers");if(!Wy(t))return[...r];for(let n of By(t,{withFileTypes:!0}))n.isDirectory()&&r.add(b(n.name));return[...r]}var Or=V(()=>{"use strict";M();w()});function vi(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function Dc(e){let r=e.trim();if(!r)return null;let t=vi(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let l=vi(s[1]??"");l&&n.push(l)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let l=vi(r.slice(i,a+1));l&&n.push(l)}return n.length>0?n[n.length-1]:null}function Mc(e){let r=e.finalResult??e.final_result;if(r!=null)return typeof r=="string"?Dc(r)??(r.trim()||null):r;let t=typeof e.summary=="string"?e.summary.trim():"";if(!t)return null;let n=Dc(t);return n||t}var Uc=V(()=>{"use strict"});import{existsSync as Hy,readFileSync as Fy}from"node:fs";function Wc(e){return e==="complete"}function ft(e){return Wc(e.lastHeartbeatPhase)?e.terminalFinalResult!==void 0&&e.terminalFinalResult!==null?e.terminalFinalResult:e.lastHeartbeatSummary?.trim()||"completed":null}function ve(e){let r={heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,terminalFinalResult:null,heartbeatBlocker:null,timestampAnomalies:[],lastBoxResourceSnapshot:null,lastPrEvidence:[]};if(!Hy(e))return r;let t=Date.now()+$y,n=new Date(t).toISOString(),o=Fy(e,"utf8").split(`
+`).filter(Boolean);for(let s of o){let i=st(s);if(!i||typeof i!="object"||Array.isArray(i))continue;let a=i;if(r.heartbeatCount++,a.ts){let l=String(a.ts),c=Date.parse(l);Number.isFinite(c)&&c>t?r.timestampAnomalies.push({kind:"future_heartbeat_timestamp",observedAt:l,clampedTo:n}):r.lastHeartbeatAt=l}a.phase!==void 0&&a.phase!==null&&(r.lastHeartbeatPhase=String(a.phase)),a.summary!==void 0&&a.summary!==null&&(r.lastHeartbeatSummary=String(a.summary)),Wc(r.lastHeartbeatPhase)&&(r.terminalFinalResult=Mc(a)),r.heartbeatBlocker=a.blocker?String(a.blocker):null,a.boxResourceSnapshot&&typeof a.boxResourceSnapshot=="object"&&!Array.isArray(a.boxResourceSnapshot)&&(r.lastBoxResourceSnapshot=a.boxResourceSnapshot),Array.isArray(a.prEvidence)&&(r.lastPrEvidence=a.prEvidence.filter(l=>!!l&&typeof l=="object"&&typeof l.prUrl=="string"))}return r}var $y,Nr=V(()=>{"use strict";Uc();w();$y=6e4});function jy(e){return e?(e.split("/").pop()??e).replace(/\.exe$/i,"").toLowerCase():null}function Vy(e){if(!e)return[];let r=[],t="",n,o=!1;for(let s of e){if(o){t+=s,o=!1;continue}if(s==="\\"){o=!0;continue}if(n){s===n?n=void 0:t+=s;continue}if(s==='"'||s==="'"){n=s;continue}if(/\s/.test(s)){t&&(r.push(t),t="");continue}t+=s}return t&&r.push(t),r}function Gy(e){let r=jy(e[0]);return!!(r&&Ky.has(r))}function Si(e){return!e||e.includes("/")||e.includes("*")?!1:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(e)}function wi(e){if(!e)return!1;let r=e.trim();return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")}function Yy(e){if(!e.startsWith("--glob="))return e;let r=e.slice(7);return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")?`--glob=${r}/**`:e}function Jy(e){let r=[];for(let t=1;t<e.length;t+=1){let n=e[t];if(n){if(n==="--"){r.push(...e.slice(t+1));break}if(n.startsWith("-")){if(n.includes("="))continue;Bc.has(n)&&(t+=1);continue}r.push(n)}}return r}function qy(e){let r=!1,t=e.map((o,s)=>{let i=Yy(o),a=e[s-1];return a&&Bc.has(a)&&o.startsWith("!")&&!o.includes("/")&&!o.endsWith("/**")&&(i=`${o}/**`),i!==o&&(r=!0),i}),n=Jy(t);if(n.length===2){let[o,s]=n;if(wi(s))return{argv:[t[0]??"rg",o,"-g",`${s}/**`,"."],changed:!0};if(Si(s))return{argv:[t[0]??"rg","-g",s,o,"."],changed:!0}}return r&&n.length===1?{argv:[...t,"."],changed:!0}:{argv:t,changed:r}}function Ci(e){let r=e.trim();if(!r)return{command:r,changed:!1};let t=r.includes("&&")?" && ":r.includes("||")?" || ":"; ",n=r.split(/\s*(?:&&|\|\||;)\s*/u),o=!1,s=n.map(i=>{let a=Vy(i.trim());if(!a.length||!Gy(a))return i;let l=qy(a);return l.changed?(o=!0,l.argv.join(" ")):i});return o?{command:s.join(t),changed:!0}:{command:r,changed:!1}}function Lc(e){if(!e)return{};let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(|$)/iu);if(r)return{pattern:r[1],target:r[2]?.trim()};let t=e.match(/^search\s+"(.+)"\s+in\s+(.+)$/iu);return t?{pattern:t[1],target:t[2]?.trim()}:{}}function zy(e){let{pattern:r,target:t}=Lc(e);return r?wi(t)?{kind:"rg_exclude_syntax",pattern:r,target:t}:Si(t)?{kind:"bad_scope",pattern:r,target:t}:{kind:"not_repo_search",pattern:r,target:t}:{kind:"not_repo_search"}}function Xy(e){let{pattern:r,target:t}=Lc(e);if(!r)return null;if(wi(t)){let n=`${t.trim()}/**`;return{command:`rg "${r}" -g '${n}' .`,changed:!0}}return t&&Si(t)?{command:`rg -g ${t} "${r}" .`,changed:!0}:null}function Qy(e){if(e.kind==="bad_scope"&&e.pattern?.includes("agent-os-land-pr")&&e.target==="package.json")return"Search package.json with a glob from the repo root: `rg -g package.json agent-os-land-pr .` \u2014 or run `node scripts/agent-os-land-pr.mjs <pr-url>` directly.";if(e.kind==="bad_scope"&&e.pattern&&e.target)return`Use \`rg -g '${e.target}' ${e.pattern} .\` from the repo root instead of treating ${e.target} as a folder.`;if(e.kind==="rg_exclude_syntax"&&e.pattern){let r=e.target?`${e.target.trim()}/**`:"!node_modules/**";return`Repo search scope \`${e.target??"!node_modules"}\` is not a valid ripgrep path. Use \`rg "${e.pattern}" -g '${r}' .\` from the repo root (exclude globs need a \`/**\` suffix).`}return e.kind==="no_matches"&&e.pattern?`No matches for "${e.pattern}". Try a broader pattern, drop overly short tokens, or search from the repo root with \`rg "${e.pattern}" .\`.`:null}function Zy(e){let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(agent\)|\s*failed|$)/iu);return r?`search "${r[1]}" in ${r[2]?.trim()}`:null}function _i(e){let r=e.meta?.trim()||(e.command?Zy(e.command):null)||null;if(r){let t=zy(r),n=Qy(t);if(n)return n;let o=Xy(r);if(o?.changed)return`Repo search used an invalid scope. Retry with: \`${o.command}\`.`}if(e.command&&/\b(rg|ripgrep)\b/i.test(e.command)){let t=Ci(e.command);if(t.changed)return`Ripgrep scope may be invalid. Retry with: \`${t.command}\`.`;if(e.exitCode===1)return"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root."}return null}var Ky,Bc,Hc=V(()=>{"use strict";Ky=new Set(["rg","ripgrep","grep"]),Bc=new Set(["-e","--regexp","-f","--file","-m","--max-count","-A","--after-context","-B","--before-context","-C","--context","-g","--glob","--iglob"])});function un(e,r=200){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function nR(e){let r=e.trim();if(!r)return null;if(r.startsWith("{"))try{return JSON.parse(r)}catch{}let t=r.indexOf("{"),n=r.lastIndexOf("}");if(t>=0&&n>t)try{return JSON.parse(r.slice(t,n+1))}catch{return null}return null}function dn(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function oR(e){let r=e.metadata;if(!dn(r))return null;let t=r.vulnerabilities;if(!dn(t))return null;let n=s=>typeof t[s]=="number"?t[s]:0,o={info:n("info"),low:n("low"),moderate:n("moderate"),high:n("high"),critical:n("critical"),total:n("total")};return typeof t.total!="number"&&!o.critical&&!o.high&&!o.moderate&&!o.low&&!o.info?null:o}function sR(e){let r=[];e.critical&&r.push(`${e.critical} critical`),e.high&&r.push(`${e.high} high`),e.moderate&&r.push(`${e.moderate} moderate`),e.low&&r.push(`${e.low} low`),e.info&&r.push(`${e.info} info`);let t=r.length?r.join(", "):"see report";return`npm audit: ${e.total} vulnerabilit${e.total===1?"y":"ies"} (${t}) \u2014 remediation required`}function iR(e,r){let t=e.error;if(dn(t)){let s=typeof t.summary=="string"?t.summary.trim():"",i=typeof t.code=="string"?t.code.trim():"";if(s)return i?`${i}: ${s}`:s;if(i)return i}let n=typeof e.message=="string"?e.message.trim():"";if(n)return n;let o=r.trim();return o?un(o.split(`
+`).find(Boolean)??o,160):"npm audit failed"}function aR(e){let r=`${e.stdout}
+${e.stderr}`.trim(),t=nR(r);if(!t||!dn(t)){let o=un(r||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit failed (invalid or missing JSON): ${o}`,parseError:"invalid_json"}}if(dn(t.error))return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit command failed: ${iR(t,e.stderr)}`};let n=oR(t);return n?e.exitCode===0&&n.total===0?{kind:"success",exitCode:0,summary:"npm audit: no vulnerabilities reported",audit:n}:{kind:"audit_findings",exitCode:e.exitCode,summary:sR(n),audit:n}:{kind:"command_failure",exitCode:e.exitCode,summary:"npm audit failed: JSON response missing vulnerability metadata",parseError:"missing_metadata"}}function lR(e){return eR.test(e)}function cR(e){return rR.test(e)}function uR(e){let r=_i({command:e.command,exitCode:e.exitCode});if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"ripgrep finished (exit 0)"};if(e.exitCode===1){let n=(e.stderr||e.interleaved).trim();if(n&&tR.test(n)){let i=un(n,160);return{kind:"command_failure",exitCode:1,summary:r??`ripgrep failed (exit 1): ${i}`}}let o=Ci(e.command),s=o.changed&&!r?` Retry with: \`${o.command}\`.`:"";return{kind:"search_no_matches",exitCode:1,summary:r??`ripgrep: no matches (exit 1).${s} Try a broader pattern or search from the repo root.`}}let t=un(e.interleaved||e.stdout||e.stderr||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:r??`ripgrep failed (exit ${e.exitCode}): ${t}`}}function xi(e){let r=e.stdout??"",t=e.stderr??"",n=e.interleavedOutput??"";if(lR(e.command)){let i=r.trim()||n.trim()||t.trim();return aR({exitCode:e.exitCode,stdout:i,stderr:t})}if(cR(e.command))return uR({command:e.command,exitCode:e.exitCode,stdout:r,stderr:t,interleaved:n});let o=_i({command:e.command,exitCode:e.exitCode});if(o&&e.exitCode!==0)return{kind:"command_failure",exitCode:e.exitCode,summary:o};if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"command succeeded (exit 0)"};let s=un(n||r||t||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`command failed (exit ${e.exitCode}): ${s}`}}var eR,rR,tR,Fc=V(()=>{"use strict";Hc();eR=/\bnpm\s+audit\b/i,rR=/\b(rg|ripgrep)\b/i,tR=/\b(error|invalid|unknown|panic|not found)\b/i});import{existsSync as dR,readFileSync as pR}from"node:fs";function mR(e){let r=e.timestamp_ms;return e.timestamp||e.ts||(r?new Date(r).toISOString():void 0)}function $c(e){if(!e)return null;for(let r of Object.keys(e))if(r.endsWith("ToolCall")){let t=r.slice(0,-8);return t.length?t:r}return null}function fR(e,r){e.finalResult=r.result||r.subtype||r.terminal_reason||"completed",r.is_error&&(e.error=String(r.result||r.api_error_status||"stream result error"))}function Kc(e){if(e.type!=="tool_call"||e.subtype!=="completed")return null;let t=(e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:null)?.shellToolCall;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t,o=n.args,s=o&&typeof o=="object"&&!Array.isArray(o)&&typeof o.command=="string"?String(o.command):"",i=n.result;if(!i||typeof i!="object"||Array.isArray(i))return null;let a=i.success??i.failure;if(!a||typeof a!="object"||Array.isArray(a))return null;let l=a,c=typeof l.exitCode=="number"?l.exitCode:0;return{command:s,exitCode:c,stdout:typeof l.stdout=="string"?l.stdout:"",stderr:typeof l.stderr=="string"?l.stderr:"",interleaved:typeof l.interleavedOutput=="string"?l.interleavedOutput:""}}function gR(e,r){r.kind==="success"||r.kind==="search_no_matches"||(e.lastShellOutcome=r)}function _o(e){let r={firstEventAt:null,lastEventAt:null,currentTool:null,finalResult:null,error:null,lastShellOutcome:null};if(!dR(e))return r;let t=pR(e,"utf8").split(`
+`).filter(Boolean);for(let n of t){let o=st(n);if(!o)continue;let s=mR(o);if(s&&(r.firstEventAt||=s,r.lastEventAt=s),o.type==="stream_event"&&o.event&&typeof o.event=="object"&&o.event.type==="content_block_start"){let a=o.event.content_block;a?.type==="tool_use"&&(r.currentTool=String(a.name||"tool"))}if(o.type==="assistant"&&o.message&&typeof o.message=="object"){let a=o.message.content;if(Array.isArray(a)){let l=a.find(c=>c?.type==="tool_use");l&&(r.currentTool=String(l.name||r.currentTool))}}if(o.type==="tool_call"&&o.subtype==="started"){let a=o.tool_call&&typeof o.tool_call=="object"&&!Array.isArray(o.tool_call)?o.tool_call:void 0,l=$c(a);l&&(r.currentTool=l)}let i=Kc(o);i&&gR(r,xi({command:i.command,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr,interleavedOutput:i.interleaved})),o.type==="result"&&fR(r,o)}return r}function hR(e){let r=Kc(e);if(!r)return;let t=xi({command:r.command,exitCode:r.exitCode,stdout:r.stdout,stderr:r.stderr,interleavedOutput:r.interleaved}),n=fo(r.command).slice(0,120);return t.kind==="audit_findings"?`[audit:findings] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="search_no_matches"?`[search:no_matches] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="command_failure"?`[command:failed] ${t.summary}${n?` \xB7 ${n}`:""}`:`[command:ok] exit 0${n?` \xB7 ${n}`:""}`}function jc(e){if(e.type==="system"&&e.subtype)return`[system:${e.subtype}] ${String(e.status||e.cwd||"")}`.trim();if(e.type==="stream_event"&&e.event&&typeof e.event=="object"){let r=e.event.type;if(r==="content_block_start"){let t=e.event.content_block;if(t?.type==="tool_use")return`[tool:start] ${t.name}`}if(r==="content_block_delta"){let t=e.event.delta;if(t?.partial_json)return`[tool:input] ${t.partial_json}`}return r==="message_stop"?"[message:stop]":r?`[stream:${r}]`:void 0}if(e.type==="assistant"&&e.message&&typeof e.message=="object"){let r=e.message.content;if(Array.isArray(r)){let t=r.find(o=>o?.type==="text");if(t)return`[assistant] ${fo(String(t.text||""))}`;let n=r.find(o=>o?.type==="tool_use");if(n)return`[tool] ${n.name} ${JSON.stringify(n.input||{})}`}}if(e.type==="user"&&e.tool_use_result){let r=e.tool_use_result;return`[tool:result] stdout=${JSON.stringify(r.stdout||"")} stderr=${JSON.stringify(r.stderr||"")}`}if(e.type==="tool_call"){let r=String(e.subtype||""),t=r==="completed"?hR(e):void 0;if(t)return t;let n=e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:void 0,o=$c(n)??"tool";return`[tool:${r}] ${o}`}if(e.type==="result")return`[result] ${e.subtype||""} ${fo(String(e.result||""))}`.trim()}var xo=V(()=>{"use strict";Fc();w()});function yR(e,r=240){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function Vc(e){let r=(e??"").trim();if(!r)return null;for(let t of kR)if(t.test.test(r))return{blocked:!0,reason:`${t.label}: ${yR(r)}`};return null}var kR,Gc=V(()=>{"use strict";kR=[{test:/\b(?:invalid|unknown|unsupported|unrecognized)\b[^.\n]*\bmodel\b/i,label:"provider rejected the requested model"},{test:/\bmodel\b[^.\n]*\b(?:not\s+(?:found|supported|available|recognized|valid)|is\s+not\s+valid|does\s+not\s+exist)/i,label:"provider rejected the requested model"},{test:/\b(?:did you mean|available models|choose (?:a|one of)|supported models)\b/i,label:"provider rejected the requested model"},{test:/model preflight failed/i,label:"model/provider preflight failed"},{test:/\b(?:command not found|ENOENT|is the .*CLI on PATH|executable not found|no such file or directory)\b/i,label:"provider CLI is missing or not on PATH"},{test:/\bfailed to spawn\b/i,label:"provider failed to spawn the worker process"},{test:/\b(?:not logged in|unauthorized|authentication (?:failed|required)|invalid api key|missing api key|401)\b/i,label:"provider authentication failed"}]});function Yc(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function RR(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function bR(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:Yc(e.head)}function vR(e,r,t){let n=["exited_with_changes_salvage"];if((e==="uncommitted"||e==="both")&&n.push(`${r} uncommitted change${r===1?"":"s"} with no final result`),(e==="committed_ahead"||e==="both")&&t){let o=t.length>12?t.slice(0,12):t;n.push(`commit ${o} ahead of base with no final result`)}return n.push("review worktree \u2014 commit, open a PR, or run a salvage worker before discarding"),n.join(": ")}function gt(e){if(e.alive||RR(e.finalResult))return null;let r=(e.changedFiles??[]).filter(i=>i.trim()).length,t=Yc(e.headCommit)??bR(e.gitAncestry),n=r>0,o=!!t;if(!n&&!o)return{kind:"none",salvageable:!1,uncommittedCount:0,headCommit:null,attentionReason:"process exited without a final result"};let s=n&&o?"both":n?"uncommitted":"committed_ahead";return{kind:s,salvageable:!0,uncommittedCount:r,headCommit:t,attentionReason:vR(s,r,t)}}var Po=V(()=>{"use strict"});function pn(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function SR(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function wR(e){if(pn(e.headCommit)||pn(e.prUrl)||pn(e.artifactBundlePath)||pn(e.patchPath))return!0;let r=e.gitAncestry;return!!(r?.checked&&r.headIsAncestorOfBase===!1&&pn(r.head))}function ht(e){return SR(e.finalResult)?e.changedFiles.length===0?{blocked:!1}:wR(e)?{blocked:!0,detail:`Worktree has ${e.changedFiles.length} uncommitted change(s); commit or discard before landing`}:{blocked:!0,reason:"dirty_worktree_no_pr",detail:`Worktree has ${e.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`}:{blocked:!1}}function Jc(e){if(e.blocked)return e.detail??e.reason??"dirty_worktree_no_pr"}var Eo=V(()=>{"use strict"});function Pi(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function qc(e){let r=e.targetPrReconciliation??e.target_pr_reconciliation??e.targetPrs??e.target_prs;return Array.isArray(r)?r.length:0}function kt(e){let r=e.trim();if(!r)return null;let t=Pi(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let u=Pi(s[1]??"");u&&n.push(u)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let u=Pi(r.slice(i,a+1));u&&n.push(u)}if(n.length===0)return null;let l=n[n.length-1],c=qc(l);for(let u of n){let d=qc(u);d>c&&(l=u,c=d)}return l}var Ao=V(()=>{"use strict"});function yt(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function CR(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"?Object.keys(e).length>0:!0}function Tr(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:yt(e)}function Io(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function zc(e){let r=null;if(typeof e=="string"){let o=kt(e);o&&(r=o)}else e&&typeof e=="object"&&!Array.isArray(e)&&(r=e);if(!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=Tr(String(s.prUrl??s.pr_url??"")),a=yt(s.outcome);!i||a!=="merged"&&a!=="skipped"&&a!=="blocked"||n.push({prUrl:i,outcome:a,mergeCommit:yt(s.mergeCommit??s.merge_commit),reason:yt(s.reason)})}return n}function Xc(e,r){let t=[],n=Tr(yt(e.prUrl)??"");if(n&&t.push(n),r&&typeof r=="object"&&!Array.isArray(r)){let o=r,s=Tr(String(o.prUrl??o.pr_url??""));s&&t.push(s)}return[...new Set(t)]}function Qc(e){let{contract:r,snapshot:t}=e,n=e.finalResult??t.finalResult;if(!r.landingOnly&&r.targetPrUrls.length===0&&!r.repairEnforceOriginalPr)return{blocked:!1};if(!CR(n))return(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&r.targetPrUrls.length>0?{blocked:!0,reason:"missing_target_pr_reconciliation",detail:`Final result required to reconcile target PR(s): ${r.targetPrUrls.join(", ")}`}:{blocked:!1};if(!(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&!r.repairEnforceOriginalPr)return{blocked:!1};let s=r.repairEnforceOriginalPr?Tr(yt(r.targetPrUrl)??"")??(r.targetPrUrls.length===1?Tr(r.targetPrUrls[0]):null):null;if(s){let d=Xc(t,n);if(!(n&&typeof n=="object"&&!Array.isArray(n)&&n.supersedesOriginalTargetPr===!0)){for(let h of d)if(h!==s)return{blocked:!0,reason:"duplicate_repair_pr",detail:`Repair worker opened or attached PR ${h} instead of canonical target ${s}`}}let p=zc(n).find(h=>h.prUrl===s);if(!p||p.outcome!=="merged"&&!(p.reason?.trim()&&(p.outcome==="skipped"||p.outcome==="blocked")))return{blocked:!0,reason:"missing_repair_target_reconciliation",detail:`Repair worker must reconcile target PR ${s}`}}let i=zc(n),a=new Map(i.map(d=>[Io(d.prUrl),d])),l=new Set(r.targetPrUrls.map(d=>Io(Tr(d)??d)).filter(Boolean)),c=Xc(t,n);if(r.landingOnly)for(let d of c){if(l.size>0&&!l.has(Io(d)))return{blocked:!0,reason:"unrelated_implementation_pr",detail:`Landing-only worker attached unrelated PR ${d}`};if(l.size===0)return{blocked:!0,reason:"unrelated_implementation_pr",detail:"Landing-only worker must not open new implementation PRs"}}if(r.targetPrUrls.length===0)return{blocked:!1};let u=[];for(let d of r.targetPrUrls){let m=Io(Tr(d)??d),f=a.get(m);if(!f){u.push(m);continue}f.outcome!=="merged"&&!f.reason?.trim()&&u.push(m)}return u.length>0?{blocked:!0,reason:u.every(d=>a.has(d))?"incomplete_target_pr_landing":"missing_target_pr_reconciliation",detail:`Target PR reconciliation incomplete: ${u.join(", ")}`}:{blocked:!1}}function Zc(e){if(e.blocked)return e.detail??e.reason}var eu=V(()=>{"use strict";Ao()});function xR(e){let r=Date.now();if(e.completionBlocker&&!ru(e.completionBlocker))return{state:"blocked",reason:e.completionBlocker};if(e.finalResult){if(e.localOnly&&ER(e.finalResult))return{state:"done",reason:"local-only worker superseded by merged PR"};let o={finalResult:e.finalResult,changedFiles:e.changedFiles??[],gitAncestry:e.gitAncestry??null,prUrl:e.prUrl??null},s=ht(o);if(s.blocked){let i=Jc(s);return{state:"needs_attention",reason:s.reason?`landing blocked (${s.reason}): ${i}`:`landing blocked: ${i}`}}if(e.landingContract){let i=Qc({contract:e.landingContract,snapshot:o,finalResult:e.finalResult}),a=Zc(i);if(a)return{state:"needs_attention",reason:i.reason?`landing contract (${i.reason}): ${a}`:`landing contract: ${a}`}}return{state:"done",reason:"final result recorded"}}if(!e.alive){if(PR(e))return{state:"done",reason:"empty abandoned worker record"};let o=Vc(e.error);if(o)return{state:"blocked",reason:o.reason};let s=gt({alive:!1,finalResult:null,changedFiles:e.changedFiles,gitAncestry:e.gitAncestry});if(s?.salvageable){let a=e.error?.trim();return{state:"needs_attention",reason:a?`${s.attentionReason} (${a})`:s.attentionReason}}let i=e.error?.trim();return{state:"needs_attention",reason:i?`process exited without a final result: ${i}`:s?.attentionReason??"process exited without a final result"}}if(e.heartbeatBlocker)return{state:"blocked",reason:`worker heartbeat reported blocker: ${e.heartbeatBlocker}`};let t=e.startedAt?Date.parse(e.startedAt):NaN;if(!e.firstEventAt&&e.stdoutBytes===0&&e.heartbeatBytes===0&&Number.isFinite(t)&&r-t>_R)return{state:"needs_attention",reason:`no first stream event ${mi(t)}s after start`};let n=e.lastActivityAt?Date.parse(e.lastActivityAt):NaN;return Number.isFinite(n)&&r-n>Rt?{state:"stale",reason:`no log/event/heartbeat activity for ${mi(n)}s`}:{state:"ok",reason:"recent activity"}}function ru(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function PR(e){return e.finalResult||e.taskId||e.agentOsId||e.stdoutBytes>0||(e.stderrBytes??0)>0||e.heartbeatBytes>0||e.error?.trim()||(e.changedFiles??[]).some(r=>r.trim())?!1:/empty worker dir|marked abandoned/i.test(e.reconcileReason??"")}function ER(e){let r=null;if(typeof e=="string"?r=kt(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return!1;let t=r.targetPrReconciliation??r.target_pr_reconciliation;return Array.isArray(t)?t.some(n=>!n||typeof n!="object"||Array.isArray(n)?!1:String(n.outcome??"").trim()==="merged"):!1}function AR(e,r,t){let n=e.completionSnapshot?.finalResult;return e.completionAckSource==="local-pr-merged-reconcile"&&n!==void 0&&n!==null?n:r||(n??ft(t))}function T(e,r={}){let t=_o(e.stdoutPath),n=ve(e.heartbeatPath),o=typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim().length>0,s=AR(e,t.finalResult,n),i=o?!1:L(e.pid),a=go(e.stdoutPath),l=go(e.stderrPath),c=go(e.heartbeatPath),u=on(e.worktreePath),d=yo(e.worktreePath,{base:r.base,baseCommit:r.baseCommit}),m=hc([t.lastEventAt,n.lastHeartbeatAt,ho(e.stdoutPath),ho(e.stderrPath),ho(e.heartbeatPath)]),f=t.error||!i&&!s&&ko(e.stderrPath,10).trim()||void 0,p=typeof e.completionBlocker=="string"&&e.completionBlocker.trim()?e.completionBlocker.trim():null,h=ru(p)?null:p,k=e.repairTargetPrUrl?{landingOnly:!1,targetPrUrls:[e.repairTargetPrUrl],targetPrUrl:e.repairTargetPrUrl,repairEnforceOriginalPr:!0}:null,g=xR({alive:i,finalResult:s,firstEventAt:t.firstEventAt,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,lastActivityAt:m,heartbeatBlocker:n.heartbeatBlocker,startedAt:e.startedAt,error:f,changedFiles:u,gitAncestry:d,completionBlocker:h,landingContract:k,prUrl:e.repairTargetPrUrl??e.taskPrUrl??null,localOnly:e.localOnly===!0,taskId:e.taskId??null,agentOsId:e.agentOsId??null,reconcileReason:e.reconcileReason??null}),R=h||g.state==="blocked"?"blocked":o||g.state==="done"?"done":s?"exited":i?"running":"exited";return{runId:e.runId,worker:e.name,pid:e.pid,alive:i,status:R,attention:g,branch:e.branch,worktreePath:e.worktreePath,ownedPaths:e.ownedPaths,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,firstEventAt:t.firstEventAt,lastEventAt:t.lastEventAt,lastActivityAt:m,currentTool:o?null:t.currentTool,heartbeatCount:n.heartbeatCount,lastHeartbeatAt:n.lastHeartbeatAt,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,timestampAnomalies:n.timestampAnomalies,finalResult:s,error:f,changedFiles:u,gitAncestry:d,instructionPolicyFingerprint:e.instructionPolicyFingerprint??null,instructionPolicyEvidence:e.instructionPolicyEvidence??null,model:e.model??e.orchestrationAudit?.model??null,provider:e.orchestrationAudit?.provider??null,boxKind:e.boxKind??null,boxId:e.boxId??null,runtimeId:e.runtimeId??null,personaSlug:e.personaSlug??null,dispatched:e.dispatched??null,localOnly:e.localOnly??null}}function oe(e){return!!(e.finalResult||e.alive===!1||e.status==="exited"||e.status==="done")}function bt(e){return e.finalResult?e.attention.state==="needs_attention"||e.attention.state==="blocked":!1}function mn(e,r){return r.length===0?e:r.some(t=>t.attention==="needs_attention"||t.attention==="stale"||t.attention==="blocked")?"needs_attention":r.every(t=>t.status==="done")?"done":r.some(t=>t.status==="running")?"running":e}var _R,Rt,J=V(()=>{"use strict";Nr();xo();Gc();Po();Se();Eo();eu();Ao();w();_R=18e4,Rt=6e5});import{readFileSync as IR}from"node:fs";function OR(e){if(!e||process.platform!=="linux")return null;try{return IR(`/proc/${e}/cmdline`,"utf8").replace(/\0/g," ")}catch{return null}}function Oo(e){if(!e.pid||process.platform!=="linux")return!0;let r=OR(e.pid);return r?[e.worktreePath,e.workerDir,e.heartbeatPath].filter(n=>typeof n=="string"&&n.trim().length>0).some(n=>r.includes(n)):!1}function No(e){if(typeof e.completionBlocker=="string"&&e.completionBlocker.trim())return!1;let r=T(e);return r.alive&&!Oo(e)?!1:r.alive&&!r.finalResult&&r.attention.state!=="done"}var To=V(()=>{"use strict";J()});import nu from"node:os";import NR from"node:path";function tu(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function TR(e=v(),r,t){let n=tu(e.perWorkerMemBytes,fn),o=tu(e.memReserveBytes,gn),s=Math.min(1,Math.max(.1,Number(e.memUtilization)>0?Number(e.memUtilization):hn)),i=Mo({config:e,configuredMaxWorkersOverride:r,totalMemBytes:t??nu.totalmem()});return{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i.configuredMaxWorkers,autoCap:i.autoCap,workerCapSource:i.workerCapSource}}function Ei(e,r={}){let t=r.perWorkerMemBytes??fn,n=r.memReserveBytes??gn,o=r.memUtilization??hn,s=Math.max(0,Math.floor(e*o)-n),i=Math.max(1,Math.floor(s/t));return Math.min(i,Do)}function DR(){return sn()}function MR(e){let r=0;for(let t of fe(e)){let n=_(NR.join(x(e.id),"workers",b(t),"worker.json"),void 0);!n||!No(n)||r++}return r}function UR(){let e=0;for(let r of Y())e+=MR(r);return e}function rr(e){let r=e.config??v(),t=e.totalMemBytes??nu.totalmem(),{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i,autoCap:a,workerCapSource:l}=TR(r,e.configuredMaxWorkersOverride,t),c=Be(r),u=e.freeMemBytes??DR(),d=e.activeWorkers??UR(),m=Math.max(0,Math.floor(t*s)-o),f=Math.max(0,Math.floor(m/n)),p=Math.max(0,Math.floor(Math.max(0,u-o)/n)),h=a,g=Math.max(0,Math.min(i??h,f)),R=Math.max(0,g-d),P=Math.min(R,p),D=e.skipDiskGate||process.env.KYNVER_RESOURCE_GATE_SKIP_DISK==="1"?void 0:Le({diskPath:e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/"});D&&!D.ok&&(P=0);let j=null;return P<=0&&(D&&!D.ok?j=D.reason??"disk gate blocked worker admission":d>=g?j=`at worker limit (${d}/${g} running)`:p<=0?j="insufficient free memory \u2014 waiting for workers to finish":j="no worker slots available"),{ok:P>0,totalMemBytes:t,freeMemBytes:u,memReserveBytes:o,perWorkerMemBytes:n,configuredMaxWorkers:i,workerCapSource:l,boxKind:c,autoCap:h,capacityWorkers:f,maxConcurrentWorkers:g,activeWorkers:d,slotsAvailable:P,reason:j,...D?{diskGate:D}:{}}}var fn,gn,hn,Do,vt=V(()=>{"use strict";vo();O();Ie();Uo();ln();M();Or();To();w();fn=500*1024*1024,gn=4*1024*1024*1024,hn=.85,Do=64});function Dr(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Mo(e){let r=e.config??{},t=e.env??process.env,n=Dr(r.perWorkerMemBytes,fn),o=Dr(r.memReserveBytes,gn),s=Math.min(1,Math.max(.1,Number(r.memUtilization)>0?Number(r.memUtilization):hn)),i=Ei(e.totalMemBytes,{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s});if(e.configuredMaxWorkersOverride!==void 0&&e.configuredMaxWorkersOverride!==null)return{configuredMaxWorkers:Dr(e.configuredMaxWorkersOverride,i),autoCap:i,workerCapSource:"workspace_override"};if(r.maxConcurrentWorkers!==void 0&&r.maxConcurrentWorkers!==null){let c=Dr(r.maxConcurrentWorkers,0)||null;if(c)return{configuredMaxWorkers:Math.min(c,Do),autoCap:i,workerCapSource:"config"}}let l=(t.KYNVER_MAX_WORKERS_INTENTIONAL==="1"||t.KYNVER_MAX_WORKERS_INTENTIONAL==="true")&&t.KYNVER_MAX_WORKERS&&Dr(t.KYNVER_MAX_WORKERS,0)||null;return l?{configuredMaxWorkers:Math.min(l,Do),autoCap:i,workerCapSource:"env"}:{configuredMaxWorkers:null,autoCap:i,workerCapSource:"auto"}}function Ai(e={}){let r=e.totalMemBytes??0,t=Ei(r,{perWorkerMemBytes:Dr(e.config?.perWorkerMemBytes,fn),memReserveBytes:Dr(e.config?.memReserveBytes,gn),memUtilization:e.config?.memUtilization&&Number(e.config.memUtilization)>0?Number(e.config.memUtilization):hn}),n=e.diskGateOk??!0,o=n?t:Math.max(1,Math.min(t,4));return{totalMemBytes:r,autoCap:t,recommendedMaxWorkers:o,diskPath:e.diskPath??"/",diskGateOk:n,diskFreeBytes:e.diskFreeBytes??null}}var Uo=V(()=>{"use strict";vt()});var su={};Vk(su,{runDeviceLogin:()=>Ii});import ou from"node:os";function WR(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||v().apiBaseUrl;return r?Xe(String(r)):void 0}async function BR(e){await new Promise(r=>setTimeout(r,e))}async function Ii(e){let r=WR(e);if(!r)return console.error("kynver login (device flow) requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site, set KYNVER_API_URL, or run `kynver setup` first."),{ok:!1};let t=`${ou.hostname()} (${ou.platform()})`,n;try{let a=await fetch(`${r}/api/auth/device/code`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({clientName:t})});if(!a.ok)return console.error(`Could not start device authorization (${a.status}).`),{ok:!1};n=await a.json()}catch(a){return console.error(`Could not reach ${r}: ${a.message}`),{ok:!1}}let o=n.verification_uri_complete||n.verification_uri;console.log(""),console.log("  Authorize this machine:"),console.log(`    1. Open: ${o}`),console.log(`    2. Confirm the code: ${n.user_code}`),console.log(""),console.log("  Waiting for approval\u2026");let s=Date.now()+n.expires_in*1e3,i=Math.max(1,n.interval)*1e3;for(;Date.now()<s;){await BR(i);let a;try{a=await(await fetch(`${r}/api/auth/device/token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({device_code:n.device_code})})).json().catch(()=>({}))}catch{continue}switch(a.status){case"approved":return a.api_key?(kn(a.api_key),console.log("  Approved \u2014 this machine is now linked to your Kynver account."),{ok:!0,apiKey:a.api_key}):{ok:!1};case"slow_down":i+=2e3;break;case"authorization_pending":typeof a.interval=="number"&&(i=Math.max(i,a.interval*1e3));break;case"access_denied":return console.error("  Request was denied in the browser."),{ok:!1};case"expired_token":return console.error("  The code expired before it was approved. Run `kynver login` again."),{ok:!1};default:break}}return console.error("  Timed out waiting for approval. Run `kynver login` again."),{ok:!1}}var Oi=V(()=>{"use strict";O();w()});import{existsSync as au,mkdirSync as lu,readFileSync as cu,writeFileSync as uu}from"node:fs";import{homedir as LR,totalmem as HR}from"node:os";import Ni from"node:path";import FR from"node:os";function yn(e){let r=String(e??"").trim();if(!r)return{ok:!1,reason:"missing"};let t=r.toLowerCase();return KR.has(t)?{ok:!1,value:r,reason:"placeholder"}:$R.test(r)?{ok:!0,value:r}:{ok:!1,value:r,reason:"not a UUID"}}function Lo(e){let r=yn(e),t=r.value??String(e??"").trim(),n=t?`"${t}"`:"<empty>",o=r.reason==="placeholder"?"looks like a placeholder":r.reason??"is invalid";return[`Invalid AgentOS id ${n}: ${o}.`,"AgentOS ids are UUIDs from the AgentOS registry, not slugs or examples (for example, not `aos`).","Fix: run `kynver bootstrap` to relink this runner, or run `kynver setup --agent-os-id <uuid>` / pass `--agent-os-id <uuid>` after copying the id from Command Center.","If this came from stale ~/.kynver/config.json, remove or replace the agentOsId value before starting the daemon."].join(" ")}function v(){if(!au(Wo))return{};try{return JSON.parse(cu(Wo,"utf8"))}catch{return{}}}function tr(e){lu(Bo,{recursive:!0}),uu(Wo,`${JSON.stringify(Ti(e),null,2)}
+`,{mode:384})}function Ti(e){return{...e,...e.harnessRoot?.trim()?{harnessRoot:Re(e.harnessRoot.trim())}:{},...e.defaultRepo?.trim()?{defaultRepo:Re(e.defaultRepo.trim())}:{}}}function wt(e){return Ti(e)}function jR(e,r){let t=Rn(),n=(typeof r.apiBaseUrl=="string"?r.apiBaseUrl:void 0)||e.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim(),o=(typeof r.agentOsId=="string"?r.agentOsId:void 0)||e.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||(t.runnerToken?.trim().startsWith("krc1.")?t.runnerTokenAgentOsId?.trim():void 0),i=(typeof r.repo=="string"?r.repo:r.discoverRepo===!0||r.discoverRepo==="true"?lt()?.repo:void 0)||e.defaultRepo?.trim()||process.env.KYNVER_DEFAULT_REPO?.trim()||process.env.KYNVER_HARNESS_REPO?.trim()||Ro()?.repo,a=(typeof r.harnessRoot=="string"?r.harnessRoot:void 0)||e.harnessRoot?.trim()||process.env.KYNVER_HARNESS_ROOT?.trim()||process.env.OPUS_HARNESS_ROOT?.trim();return{...n?{apiBaseUrl:Xe(n)}:{},...o?{agentOsId:o}:{},...i?{defaultRepo:i}:{},...a?{harnessRoot:a}:{},...typeof r.agentOsSlug=="string"?{agentOsSlug:r.agentOsSlug}:e.agentOsSlug?{agentOsSlug:e.agentOsSlug}:{}}}function VR(e,r,t=HR()){let n=typeof r.maxWorkers=="string"?r.maxWorkers:typeof r.maxConcurrentWorkers=="string"?r.maxConcurrentWorkers:void 0,o=typeof r.boxKind=="string"?r.boxKind:typeof r["box-kind"]=="string"?String(r["box-kind"]):void 0,s=We(process.env,{...e,...o?{boxKind:ct(o)}:{}}).boxKind,i=Le({diskPath:typeof r.diskPath=="string"?r.diskPath:"/"}),a=Ai({totalMemBytes:t,diskPath:i.path,diskGateOk:i.ok,diskFreeBytes:i.freeBytes,config:e});return n?{maxConcurrentWorkers:Math.max(1,Math.floor(Number(n))),maxConcurrentWorkersSource:"setup-flag",boxKind:s}:e.maxConcurrentWorkers!==void 0&&e.maxConcurrentWorkers!==null?{maxConcurrentWorkers:Math.max(1,Math.floor(Number(e.maxConcurrentWorkers))),maxConcurrentWorkersSource:e.maxConcurrentWorkersSource??"operator",boxKind:s}:{maxConcurrentWorkers:a.recommendedMaxWorkers,maxConcurrentWorkersSource:"setup-auto",boxKind:s}}function Rn(){if(!au(St))return{};try{return JSON.parse(cu(St,"utf8"))}catch{return{}}}function du(e){lu(Bo,{recursive:!0}),uu(St,`${JSON.stringify(e,null,2)}
+`,{mode:384})}function ne(){return process.env.KYNVER_API_KEY?process.env.KYNVER_API_KEY:Rn().apiKey}function kn(e){du({...Rn(),apiKey:e})}function iu(e){let r=process.env.KYNVER_RUNNER_TOKEN?.trim();if(r)return r;let t=Rn();if(t.runnerToken&&!(e&&t.runnerTokenAgentOsId&&t.runnerTokenAgentOsId!==e))return t.runnerToken}function Mr(e,r){du({...Rn(),runnerToken:r,runnerTokenAgentOsId:e})}function K(e){let r=bn(e);return r||Ho("requires --base-url, KYNVER_API_URL, KYNVER_CRON_FIRE_BASE_URL, or ~/.kynver/config.json apiBaseUrl"),r}function pu(e){return bn(e)}function bn(e){let r=e||process.env.KYNVER_API_URL||process.env.KYNVER_CRON_FIRE_BASE_URL||process.env.OPENCLAW_CRON_FIRE_BASE_URL||v().apiBaseUrl;return r?Xe(String(r)):void 0}function GR(e,r){let t=e||iu(r)||(r?void 0:iu(v().agentOsId));if(t)return String(t);let n=process.env.KYNVER_RUNTIME_SECRET||process.env.KYNVER_CRON_SECRET||process.env.OPENCLAW_CRON_SECRET;if(n)return console.warn("[kynver] using deployment-level callback secret; run `kynver runner credential --agent-os-id <id>` for a scoped token"),String(n)}async function Di(e,r,t){let n=GR(e,r);if(n)return{ok:!0,secret:n};let o=ne(),s=bn(t?.baseUrl);if(o&&r&&s)try{let i=await Ur(r,{baseUrl:s,apiKey:o});return Mr(r,i),{ok:!0,secret:i}}catch(i){return{ok:!1,reason:`runner credential mint failed: ${i.message}`}}return{ok:!1,reason:"no runner credential: requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, or KYNVER_API_KEY + API base URL to mint one"}}async function G(e,r,t){let n=await Di(e,r,t);if(n.ok)return n.secret;Ho(n.reason)}async function mu(e,r){let t=ne(),n=bn(r?.baseUrl);if(!t||!e||!n)return null;try{let o=await Ur(e,{baseUrl:n,apiKey:t});return Mr(e,o),o}catch{return null}}async function fu(e,r,t){let n=ne(),o=bn(t?.baseUrl);if(!n)return{ok:!1,reason:"KYNVER_API_KEY is required to refresh a rejected runner token"};if(!r)return{ok:!1,reason:"agentOsId is required to refresh a rejected runner token"};if(!o)return{ok:!1,reason:"KYNVER_API_URL or --base-url is required to refresh a rejected runner token"};try{let s=await Ur(r,{baseUrl:o,apiKey:n});return s&&s!==e?(Mr(r,s),{ok:!0,token:s}):{ok:!1,reason:"runner credential refresh returned the rejected token"}}catch(s){return{ok:!1,reason:s.message}}}async function Ur(e,r){let t=r?.apiKey||ne();if(!t)throw new Error("API key required \u2014 run `kynver login` first");let o=`${K(r?.baseUrl)}/api/agent-os/by-id/${encodeURIComponent(e)}/runner-credentials`,s=await fetch(o,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify({})}),i=await s.text(),a=null;try{a=JSON.parse(i)}catch{a=null}if(!s.ok||!a?.token)throw new Error(`runner credential mint failed (${s.status}): ${a?.error??i.slice(0,200)}`);return a.token}async function gu(e){let r=(e.agentOsId?String(e.agentOsId):v().agentOsId)||"";r||Ho("runner credential requires --agent-os-id or agentOsId in ~/.kynver/config.json");try{let t=await Ur(r,{baseUrl:e.baseUrl?String(e.baseUrl):void 0});Mr(r,t),console.log(JSON.stringify({ok:!0,agentOsId:r,credentialsPath:q(St),tokenPrefix:`${t.slice(0,12)}\u2026`,note:"Scoped runner token saved; callbacks use X-Kynver-Runner-Token."},null,2))}catch(t){console.error(t instanceof Error?t.message:String(t)),process.exit(1)}}function Ho(e){console.error(e),process.exit(1)}function Fo(e){let r={};for(let t=0;t<e.length;t++){let n=e[t];if(!n.startsWith("--"))continue;let o=n.slice(2).replace(/-([a-z])/g,(i,a)=>a.toUpperCase()),s=e[t+1];!s||s.startsWith("--")?r[o]=!0:(r[o]=s,t++)}return r}async function $o(e){let r=v(),t=Le({diskPath:typeof e.diskPath=="string"?e.diskPath:"/"}),n=Ai({totalMemBytes:FR.totalmem(),diskPath:t.path,diskGateOk:t.ok,diskFreeBytes:t.freeBytes,config:r}),o=VR(r,e),s=Ti({...r,...jR(r,e),...o,workerProvider:typeof e.provider=="string"?e.provider:r.workerProvider||"cursor",...e.chatOauth===!0?{chatUseClaudeOauth:!0}:{}});s.agentOsId&&!yn(s.agentOsId).ok&&Ho(Lo(s.agentOsId)),tr(s);let i=We(process.env,s),a,l=ne(),c=s.agentOsId;if(l&&c)try{let u=await Ur(c,{baseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:s.apiBaseUrl,apiKey:l});Mr(c,u),a="Scoped runner token minted and saved to ~/.kynver/credentials."}catch{a="Runner token not minted (server offline or master secret unset). Run `kynver runner credential` after deploy."}console.log(JSON.stringify({ok:!0,configPath:q(Wo),config:wt(s),boxKind:s.boxKind,boxKindSource:i.source,workerCapRecommendation:n,...i.warnings.length?{boxIdentityWarnings:i.warnings}:{},note:a??"boxKind and maxConcurrentWorkers persisted; override with --box-kind and --max-workers. Run `kynver login` + `kynver runner credential` for scoped callbacks."},null,2))}async function hu(e){let r=typeof e.apiKey=="string"?e.apiKey:process.env.KYNVER_API_KEY;if(r){kn(r),console.log(JSON.stringify({ok:!0,credentialsPath:q(St)},null,2));return}let{runDeviceLogin:t}=await Promise.resolve().then(()=>(Oi(),su));(await t(e)).ok||process.exit(1),console.log(JSON.stringify({ok:!0,credentialsPath:q(St)},null,2))}var Bo,Wo,St,$R,KR,QO,ZO,O=V(()=>{"use strict";bo();Ze();w();Ie();Uo();ln();Bo=Ni.join(LR(),".kynver"),Wo=Ni.join(Bo,"config.json"),St=Ni.join(Bo,"credentials"),$R=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i,KR=new Set(["aos","aos-1","agent-os-id","agentosid","agent_os_id","<agent-os-id>","<agentosid>","todo","changeme","change-me","placeholder"]);QO=500*1024*1024,ZO=4*1024*1024*1024});O();import{mkdirSync as Bk,realpathSync as Lk}from"node:fs";import{fileURLToPath as GA}from"node:url";O();w();Oi();import YR from"node:os";function JR(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||v().apiBaseUrl;return r?Xe(String(r)):void 0}async function qR(e,r){let t=await fetch(`${e}/api/agent-os`,{headers:{Authorization:`Bearer ${r}`}});if(!t.ok)return null;let n=await t.json().catch(()=>null);if(!n?.primarySlug)return null;let o=n.items?.find(s=>s.slug===n.primarySlug);return o?.id&&o.slug?{id:o.id,slug:o.slug}:{id:"",slug:n.primarySlug}}async function Ko(e){let r=JR(e);r||(console.error("kynver bootstrap requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site or set KYNVER_API_URL."),process.exit(1)),ne()||(typeof e.apiKey=="string"?kn(e.apiKey):(await Ii({...e,apiBaseUrl:r})).ok||process.exit(1));let t=ne();t||(console.error("No API key after login \u2014 aborting."),process.exit(1));let n=await qR(r,t);n||(console.error("Could not resolve your AgentOS workspace from the account. Confirm this account has AgentOS access, then retry."),process.exit(1));let o={...e,apiBaseUrl:r,agentOsSlug:n.slug,...n.id?{agentOsId:n.id}:{},...typeof e.repo=="string"?{}:{discoverRepo:!0}};await $o(o),console.log(""),console.log(`  Bootstrap complete \u2014 ${YR.hostname()} is linked to workspace "${n.slug}".`),console.log("  Next: `kynver start` \u2014 brings the agent online and configures local Kynver Cron when needed."),console.log("  Persistent background service (Linux): `kynver cron install --install-systemd` after your first start."),console.log("  (Advanced: `kynver run create --repo /path/to/repo` + `kynver daemon --run <RUN_ID> --agent-os-id <AOS_ID> --execute`.)")}O();import tE from"node:os";O();Ze();O();import XR from"node:path";import{homedir as QR}from"node:os";O();bo();Ze();import ku from"node:path";function zR(e){return ku.resolve(at(e.trim()))}function Ct(e,r,t){let n=e?.trim();return n?{repo:zR(n),source:r,persistedInConfig:t}:null}function yu(e){return e?{repo:e.repo,source:e.source,persistedInConfig:!1}:null}function He(e={}){let r=e.env??process.env,t=e.config??v(),n=Ct(t.defaultRepo,"config",!0);if(n)return n;let o=Ct(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=Ct(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);return s||yu(lt({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl}))}function Ru(e={}){let r=e.env??process.env,t=e.config??v(),n=Ct(t.defaultRepo,"config",!0);if(n)return n;let o=Ct(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=Ct(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);return s||yu(Ro({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl}))}function bu(e,r){let t={...r??v(),defaultRepo:Re(ku.resolve(e))};return tr(t),t}function vn(e){return{defaultRepo:q(e.repo),source:e.source,persistedInConfig:e.persistedInConfig}}var Mi=XR.join(QR(),".kynver","config.json");function Sn(e){let r=v(),t=Ru({...e,config:r});if(!t)return{ok:!1,remediated:!1,alreadyPersisted:!1,configPath:q(Mi),resolved:null,reason:"No Kynver git checkout found. Clone the repo, cd into it, then run `kynver setup --repo /path/to/Kynver` (or export KYNVER_DEFAULT_REPO).",remediation:"Clone the Kynver monorepo, cd into it, then run `kynver config ensure-default-repo` (or `kynver setup --repo /path/to/Kynver`)."};if(t.persistedInConfig)return{ok:!0,remediated:!1,alreadyPersisted:!0,configPath:q(Mi),resolved:vn(t),config:wt(r)};let n=bu(t.repo,r),o=vn({...t,persistedInConfig:!0,source:"config"});return{ok:!0,remediated:!0,alreadyPersisted:!1,configPath:q(Mi),resolved:o,config:wt(n),remediation:"defaultRepo persisted in ~/.kynver/config.json \u2014 `kynver run create` no longer requires --repo."}}function vu(e=!1){let r=Sn();if(e){console.log(JSON.stringify(r,null,2)),r.ok||(process.exitCode=1);return}if(!r.ok){console.error(r.reason??"Could not resolve a Kynver git checkout."),r.remediation&&console.error(r.remediation),process.exitCode=1;return}if(r.alreadyPersisted){console.log(`defaultRepo already set (${r.resolved?.defaultRepo??"unknown"}) in ${r.configPath}`);return}console.log(`Persisted defaultRepo ${r.resolved?.defaultRepo??""} in ${r.configPath}. \`kynver run create\` can omit --repo.`)}function Su(e){return e?e.persistedInConfig?{status:"pass"}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` to persist defaultRepo in ~/.kynver/config.json (or `kynver doctor runtime-takeover --remediate-default-repo`)."}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` from a Kynver checkout (or `kynver setup --repo /path/to/Kynver`)."}}function Ne(e){let r=String(e).trim();return r.startsWith("krc1.")?{"Content-Type":"application/json","X-Kynver-Runner-Token":r}:{"Content-Type":"application/json","X-Kynver-Cron-Secret":r,"X-OpenClaw-Cron-Secret":r,"X-Kynver-Runtime-Secret":r}}import{mkdirSync as ZR,readFileSync as eb,renameSync as rb,writeFileSync as tb}from"node:fs";import{homedir as nb}from"node:os";import Cu from"node:path";function wu(e){return JSON.stringify(Ui(e))}function Ui(e){if(Array.isArray(e))return e.map(Ui);if(e&&typeof e=="object"){let r={};for(let t of Object.keys(e).sort())r[t]=Ui(e[t]);return r}return e}function Wi(e){if(!e)return null;let r=e.trim();if(!r)return null;if(/^[0-9a-fA-F]{64}$/.test(r))return new Uint8Array(r.match(/.{2}/g).map(t=>parseInt(t,16)));try{let t=Buffer.from(r,"base64");if(t.length===32)return new Uint8Array(t)}catch{}return null}function wn(e){if(!e||typeof e!="object")return!1;let r=e;if(typeof r.signature!="string"||!r.signature||typeof r.publicKeyId!="string"||!r.publicKeyId)return!1;let t=r.bundle;return!(!t||typeof t!="object"||typeof t.version!="string"||!t.version||typeof t.generatedAt!="string"||!Array.isArray(t.personas)||!t.instructions||typeof t.instructions!="object"||!t.policyThresholds||typeof t.policyThresholds!="object")}function _u(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return Cu.join(nb(),".kynver",`instruction-bundle-${r}.json`)}function xu(e,r){try{let t=_u(e);ZR(Cu.dirname(t),{recursive:!0});let n=`${t}.tmp-${process.pid}`;tb(n,JSON.stringify(r),"utf8"),rb(n,t)}catch{}}function Pu(e){try{let r=eb(_u(e),"utf8"),t=JSON.parse(r);return wn(t)?t:null}catch{return null}}var ob="embedded-1",sb=[{slug:"ghost",displayName:"Ghost",description:"Orchestration persona.",dispatchLane:null,defaultRoleLane:"system"},{slug:"astra",displayName:"Astra",description:"Planning persona.",dispatchLane:"implementation",defaultRoleLane:"plan_author"},{slug:"rhea",displayName:"Rhea",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"mnemo",displayName:"Mnemo",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"sentinel",displayName:"Sentinel",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"deep_reviewer"},{slug:"pixel",displayName:"Pixel",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"schema",displayName:"Schema",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"atlas",displayName:"Atlas",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"runtime_verifier"},{slug:"bridge",displayName:"Bridge",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"catalyst",displayName:"Catalyst",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"lorentz",displayName:"Lorentz",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"report_reviewer"},{slug:"dalton",displayName:"Dalton",description:"Landing persona.",dispatchLane:"landing",defaultRoleLane:"implementer"}],ib={"worker.prompt.core_rules":["Structured final result (recommended): record completion as JSON with summary, files, PR URLs, verification, risks, and blockers.","Completion handoff (required): before you stop, summarize the outcome in your last message and append a heartbeat line with phase `complete`. Commit your work cleanly and open a GitHub PR (draft OK) for substantial changes \u2014 never leave uncommitted changes behind without reporting them.","Review-only workers must not open new implementation PRs \u2014 review the existing PR and record a verdict in the final result.","Keep verification targeted to touched paths; avoid full-monorepo verification unless explicitly requested.","Do not run `npm publish`.","If verification fails, append a heartbeat line immediately with the failing command, reason, and next action."].join(`
 `),"worker.prompt.progress.compact":"Plan progress: when planId is set, report progress with `kynver plan progress --plan <planId> --row <rowKey> --role implementer --status in_progress|running|partial|blocked`. Do not mark rows done from the worker CLI.","worker.prompt.progress.full":["Structured plan progress (required when planId is set):","- Report checkpoints with `kynver plan progress --plan <planId> --row <rowKey> --role implementer --status in_progress|running|partial|blocked`.","- When a slice is finished, emit `partial` with evidence (`--evidence pr:<url>`, `--evidence path:<file>`, or `--evidence command:<cmd>`).","- Do not propose or confirm row `done` from the worker CLI."].join(`
 `),"worker.prompt.merge_gate.compact":"Verification cost control: prefer local verification before requesting CI runs; do not push empty commits to re-trigger CI; record verification evidence on the PR.","worker.prompt.merge_gate.full":["Verification cost control:","- Prefer local verification of touched paths before requesting any CI run.","- Do not push empty commits to re-trigger CI.","- Record verification evidence on the PR before requesting review."].join(`
 `),"worker.prompt.plan_artifacts.compact":"Plan artifacts: when authoring or revising plan documents, open a GitHub PR early and iterate from that PR branch; do not leave the canonical plan only in a local worktree.","worker.prompt.plan_artifacts.full":["Plan artifacts (when authoring or revising plan documents):","- Create a feature branch and open a GitHub PR (draft OK) before substantial drafting; commit and push the plan file.","- Iterate on that PR branch and link the PR URL on the related task and progress evidence."].join(`
-`)},zR={"harness.maxTaskAttempts":4,"harness.dispatchCooldownMs":5e3,"daemon.idleIntervalMs":5*6e4,"daemon.maxIdleStreak":10},St={version:YR,generatedAt:"1970-01-01T00:00:00.000Z",personas:JR,instructions:qR,policyThresholds:zR};var Rn=St,vu="embedded";function Mr(){return Rn.version}function gr(){return vu}function Su(e,r){Rn=e,vu=r}function bn(e){let r=Rn.instructions[e];if(typeof r=="string"&&r.trim())return r;let t=St.instructions[e];return typeof t=="string"?t:""}function wt(e,r){let t=Rn.policyThresholds[e];if(typeof t=="number"&&Number.isFinite(t))return t;let n=St.policyThresholds[e];return typeof n=="number"&&Number.isFinite(n)?n:r}function wu(e){if(!e)return null;let r=e.trim().toLowerCase();return Rn.personas.find(t=>t.slug===r)??null}import{createPublicKey as QR,verify as ZR}from"node:crypto";var XR={"ib-3bab6314f0ba":"53a2040646cd479e1f5f1aea9abf7848ce8b62e32001efb8044dfd90e8ab87ed","ib-26e6c695da06":"bb1700f25b2ee7d7cdcdb9f446f0f44ef2cc22a3096bc161232fb658e7cdaf38"};function Cu(e,r=process.env){let t=Ii(r.KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY);if(t)return t;let n=XR[e];return n?Ii(n):null}var eb=Buffer.from("302a300506032b6570032100","hex");function rb(e){return QR({key:Buffer.concat([eb,Buffer.from(e)]),format:"der",type:"spki"})}function tb(e,r){if(!yn(e))return{ok:!1,reason:"malformed signed bundle payload"};let t;try{t=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(t.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let n=Buffer.from(hu(e.bundle),"utf8");return ZR(null,n,rb(r),t)?{ok:!0,bundle:e.bundle}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(n){return{ok:!1,reason:`signature verification failed: ${n.message}`}}}function _u(e,r=process.env){if(!yn(e))return{ok:!1,reason:"malformed signed bundle payload"};let t=Cu(e.publicKeyId,r);return t?tb(e,t):{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}" (not pinned; set KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY)`}}var nb=15*6e4,ob=1e4,tr={lastAttemptAtMs:0,etag:null,diskCacheTried:!1,routeMissingLogged:!1};function Sn(e,r){console.error(JSON.stringify({event:e,...r}))}function xu(e,r,t){let n=_u(e);return n.ok?(Su(n.bundle,r),r==="server"&&Ru(t,e),!0):(Sn("instruction_bundle_signature_invalid",{agentOsId:t,source:r,publicKeyId:e.publicKeyId,reason:n.reason}),!1)}function vn(e){if(tr.diskCacheTried)return!1;tr.diskCacheTried=!0;let r=bu(e);return r?xu(r,"disk",e):!1}async function Pu(e){let r=e.nowMs??Date.now(),t=()=>({source:gr(),version:Mr(),updated:!1});if(!e.force&&r-tr.lastAttemptAtMs<nb)return t();tr.lastAttemptAtMs=r;let n=e.baseUrl?.trim().replace(/\/$/,""),o=e.secret?.trim();if(!n||!o)return gr()==="embedded"&&vn(e.agentOsId)?{...t(),updated:!0}:t();let s=e.fetchImpl??fetch,i=new AbortController,a=setTimeout(()=>i.abort(),ob);try{let l=Ne(o);delete l["Content-Type"],tr.etag&&gr()==="server"&&(l["If-None-Match"]=tr.etag);let c=await s(`${n}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/runtime/instruction-bundle`,{headers:l,signal:i.signal});if(c.status===304)return t();if(c.status===404)return tr.routeMissingLogged||(tr.routeMissingLogged=!0,Sn("instruction_bundle_route_missing",{agentOsId:e.agentOsId,baseUrl:n})),gr()==="embedded"&&vn(e.agentOsId)?{...t(),updated:!0}:t();if(!c.ok)return Sn("instruction_bundle_fetch_failed",{agentOsId:e.agentOsId,status:c.status}),gr()==="embedded"&&vn(e.agentOsId)?{...t(),updated:!0}:t();let u=await c.json().catch(()=>null);return!u||!xu(u,"server",e.agentOsId)?gr()==="embedded"&&vn(e.agentOsId)?{...t(),updated:!0}:t():(tr.etag=c.headers.get("etag"),Sn("instruction_bundle_loaded",{agentOsId:e.agentOsId,version:Mr(),publicKeyId:u.publicKeyId}),{...t(),updated:!0})}catch(l){return Sn("instruction_bundle_fetch_error",{agentOsId:e.agentOsId,error:l instanceof Error?l.message:String(l)}),gr()==="embedded"&&vn(e.agentOsId)?{...t(),updated:!0}:t()}finally{clearTimeout(a)}}I();Ie();Oo();import sb from"node:os";function Eu(e,r){console.error(JSON.stringify({event:"daemon_identity",level:e,message:r}))}function Au(e=v(),r=process.env){let t=Ue(r,e),n=Io({config:e,totalMemBytes:sb.totalmem(),env:r}),o=[...t.warnings],s=[];if(!e.boxKind?.trim()&&!r.KYNVER_BOX_KIND?.trim()&&o.push("boxKind is not persisted in ~/.kynver/config.json \u2014 run `kynver setup --box-kind forge|ghost` so Command Center attributes snapshots to the correct pool"),t.slugInferenceBlocked){let a=r.KYNVER_DAEMON_STRICT_IDENTITY==="1"||r.KYNVER_DAEMON_STRICT_IDENTITY==="true",l="ambiguous box identity: KYNVER_AGENT_OS_SLUG is set without KYNVER_BOX_KIND or config.boxKind; treating this host as forge";a?s.push(l):o.push(l)}let i=s.length===0;for(let a of o)Eu("warn",a);for(let a of s)Eu("error",a);return{ok:i,box:t,workerCapSource:n.workerCapSource,maxConcurrentWorkers:n.configuredMaxWorkers??n.autoCap,autoCap:n.autoCap,warnings:o,errors:s}}import{mkdirSync as ib,readFileSync as ab,renameSync as lb,writeFileSync as cb}from"node:fs";import{homedir as ub}from"node:os";import Iu from"node:path";function Ou(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return Iu.join(ub(),".kynver",`daemon-heartbeat-${r}.json`)}function Nu(e){try{let r=Ou(e.agentOsId);ib(Iu.dirname(r),{recursive:!0});let t={observedAt:(e.now??new Date).toISOString(),pid:process.pid,runId:e.runId,agentOsId:e.agentOsId,...e.instructionBundleVersion?{instructionBundleVersion:e.instructionBundleVersion}:{}},n=`${r}.tmp-${process.pid}`;cb(n,JSON.stringify(t),"utf8"),lb(n,r)}catch{}}function Tu(e){try{let r=ab(Ou(e),"utf8"),t=JSON.parse(r);return typeof t?.observedAt!="string"?null:t}catch{return null}}function Du(e,r,t=Date.now()){if(!e)return!1;let n=Date.parse(e.observedAt);return Number.isNaN(n)?!0:t-n>r}function db(e){let r=process.env[e]?.trim().toLowerCase();return r==="1"||r==="true"||r==="yes"||r==="on"}function Ct(){process.platform==="win32"&&(db("KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS")||(console.error(JSON.stringify({event:"daemon_start_blocked",reason:"native_windows_console_flash",remedy:"Run the daemon inside WSL: .\\scripts\\start-tier2-wsl.ps1 \u2014 or set KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS=1 to override (flashes visible consoles)."})),process.exit(1)))}I();import{existsSync as pb}from"node:fs";import{homedir as mb}from"node:os";import fb from"node:path";function Mu(e,r){let t=process.env[e]?.trim().toLowerCase();return t?t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r:r}function wn(e,r,t=1){let n=Number(process.env[e]);return!Number.isFinite(n)||n<t?r:Math.floor(n)}function hr(){let e=process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim();return e||fb.join(mb(),".kynver","agent-os-cron.json")}function gb(e=hr()){let r=process.env.KYNVER_CRON_TICK_STATE_PATH?.trim();return r||`${e.replace(/\.json$/i,"")}.tick-state.json`}function hb(){let e=v();return process.env.KYNVER_API_URL?.trim()||e.apiBaseUrl?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}function Oi(){return process.env.KYNVER_CRON_SECRET?.trim()||process.env.OPENCLAW_CRON_SECRET?.trim()||process.env.KYNVER_RUNTIME_SECRET?.trim()||null}function nr(){let e=hr(),r=gb(e),t=hb(),n=Oi(),o=!!(t&&n),s=pb(e),i=o&&(s||Mu("KYNVER_CRON_TICK_FORCE",!1));return{storePath:e,statePath:r,lockPath:`${r}.lock`,fireBaseUrl:t,secret:n,tickEnabled:Mu("KYNVER_CRON_TICK_ENABLED",i),tickIntervalMs:wn("KYNVER_CRON_TICK_INTERVAL_MS",6e4,5e3),missedRunPolicy:process.env.KYNVER_CRON_MISSED_RUN_POLICY?.trim().toLowerCase()==="skip"?"skip":"catch_up",maxCatchUpPerTick:wn("KYNVER_CRON_MAX_CATCH_UP_PER_TICK",3,0),maxRetries:wn("KYNVER_CRON_MAX_RETRIES",3,0),retryBackoffMs:wn("KYNVER_CRON_RETRY_BACKOFF_MS",6e4,1e3),inflightLeaseMs:wn("KYNVER_CRON_INFLIGHT_LEASE_MS",12e4,5e3)}}function Wo(e=nr()){return e.tickEnabled&&!!(e.fireBaseUrl&&e.secret)}function kb(e){return e.replace(/\/+$/,"")}async function Uu(e){let r=e.fetchFn??fetch,t=e.entry.spec.callbackPath.startsWith("/")?e.entry.spec.callbackPath:`/${e.entry.spec.callbackPath}`,n=`${kb(e.baseUrl)}${t}`,s={source:"kynver-cron",jobId:e.jobId??e.entry.spec.dedupeKey??null,agentOsId:e.entry.spec.target.agentOsId,kind:e.entry.spec.kind,target:e.entry.spec.target,...e.entry.spec.payload!==void 0&&{payload:e.entry.spec.payload}},i=await r(n,{method:"POST",headers:Ne(e.secret),body:JSON.stringify(s)}),a=null;try{a=await i.json()}catch{a=null}return{ok:i.ok,status:i.status,body:a}}w();import{closeSync as yb,existsSync as Ni,openSync as Rb,readFileSync as bb,unlinkSync as Wu,writeFileSync as vb}from"node:fs";var Sb=10*6e4;function Bu(e){if(!Ni(e))return null;try{let r=JSON.parse(bb(e,"utf8"));if(typeof r.pid=="number"&&typeof r.at=="string")return r}catch{return null}return null}function wb(e){let r=Bu(e);if(!r||!F(r.pid))return!0;let t=Date.parse(r.at);return Number.isNaN(t)?!0:Date.now()-t>Sb}function Lu(e){if(Ni(e)&&!wb(e)){let r=Bu(e);return{acquired:!1,reason:r?`held by pid ${r.pid}`:"held by another process"}}if(Ni(e))try{Wu(e)}catch{}try{let r=Rb(e,"wx");return vb(r,JSON.stringify({pid:process.pid,at:new Date().toISOString()}),"utf8"),yb(r),{acquired:!0}}catch(r){if(r.code==="EEXIST")return{acquired:!1,reason:"concurrent acquire"};throw r}}function Hu(e){try{Wu(e)}catch{}}var Cb=/^[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+$/;function _b(e){return Cb.test(e.trim())}function xb(e,r,t){let n=new Set;for(let o of e.split(",")){let s=o.trim();if(!s)continue;if(s==="*"){for(let d=r;d<=t;d++)n.add(d);continue}let i=/^(.+)\/(\d+)$/.exec(s),a=i?i[1]:s,l=i?Math.max(1,Number(i[2])):1;if(a==="*"){for(let d=r;d<=t;d+=l)n.add(d);continue}let c=/^(\d+)-(\d+)$/.exec(a);if(c){let d=Math.max(r,Number(c[1])),f=Math.min(t,Number(c[2]));for(let m=d;m<=f;m+=l)n.add(m);continue}let u=Number(a);Number.isInteger(u)&&u>=r&&u<=t&&n.add(u)}return n}function Cn(e,r,t,n){let o=e.trim();return o==="*"?!0:xb(o,t,n).has(r)}function Pb(e,r){let t=e.trim().split(/\s+/);if(t.length!==5)return!1;let[n,o,s,i,a]=t;return Cn(n,r.getUTCMinutes(),0,59)&&Cn(o,r.getUTCHours(),0,23)&&Cn(s,r.getUTCDate(),1,31)&&Cn(i,r.getUTCMonth()+1,1,12)&&Cn(a,r.getUTCDay(),0,6)}var Eb=366*24*60;function Ab(e){return new Date(Date.UTC(e.getUTCFullYear(),e.getUTCMonth(),e.getUTCDate(),e.getUTCHours(),e.getUTCMinutes(),0,0))}function Fu(e,r){if(!_b(e))return null;let t=Ab(r);t=new Date(t.getTime()+6e4);for(let n=0;n<Eb;n++){if(Pb(e,t))return t;t=new Date(t.getTime()+6e4)}return null}function $u(e,r){if(e.scheduleKind==="runAt"&&e.runAt){let t=Date.parse(e.runAt);return Number.isNaN(t)?null:new Date(t).toISOString()}if(e.scheduleKind==="cron"&&e.cron){let t=Fu(e.cron.trim(),r);return t?t.toISOString():null}return null}function Ti(e,r){if(e.scheduleKind!=="cron"||!e.cron?.trim())return null;let t=Fu(e.cron.trim(),r);return t?t.toISOString():null}import{promises as Ib}from"node:fs";async function Ku(e){try{return await Ib.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function Ob(e){if(!e)return[];try{let r=JSON.parse(e);return Array.isArray(r.entries)?r.entries:[]}catch{return[]}}async function Ur(e=hr()){let r=await Ku(e);return Ob(r)}async function ju(e,r){let{mkdir:t,writeFile:n,rename:o}=await import("node:fs/promises"),{randomBytes:s}=await import("node:crypto"),{dirname:i}=await import("node:path");await t(i(e),{recursive:!0});let a=`${e}.${s(4).toString("hex")}.tmp`,l=JSON.stringify({entries:r},null,2);await n(a,l,"utf8"),await o(a,e)}async function Vu(e,r=hr()){let t=await Ur(r),n=t.findIndex(o=>o.providerScheduleId===e.providerScheduleId);n>=0?t[n]=e:t.push(e),await ju(r,t)}async function Gu(e=hr()){return await Ku(e)!==null?{created:!1}:(await ju(e,[]),{created:!0})}import{randomBytes as Nb}from"node:crypto";import{promises as _n}from"node:fs";import Tb from"node:path";var Bo={version:1,jobs:{}};async function Db(e){try{return await _n.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function Mb(e){if(!e)return{...Bo,jobs:{...Bo.jobs}};try{let r=JSON.parse(e);return r?.version!==1||typeof r.jobs!="object"||!r.jobs?{...Bo,jobs:{}}:r}catch{return{...Bo,jobs:{}}}}async function Lo(e){let r=await Db(e);return Mb(r)}async function Ub(e,r){await _n.mkdir(Tb.dirname(e),{recursive:!0});let t=Nb(6).toString("hex"),n=`${e}.tmp-${process.pid}-${Date.now()}-${t}`;await _n.writeFile(n,`${JSON.stringify(r,null,2)}
-`,"utf8");try{await _n.rename(n,e)}catch(o){let s=o.code;if(s!=="EPERM"&&s!=="EEXIST"&&s!=="EACCES")throw o;await _n.unlink(n).catch(()=>{})}}async function Yu(e,r){await Ub(e,r)}function Ju(e,r){let t=e.jobs[r];if(t)return t;let n={providerScheduleId:r,nextFireAt:null,lastFiredAt:null,lastAttemptAt:null,consecutiveFailures:0,completedAt:null,inflightUntil:null};return e.jobs[r]=n,n}function Wb(e,r){if(!e.inflightUntil)return!1;let t=Date.parse(e.inflightUntil);return!Number.isNaN(t)&&t>r}function Bb(e){return!!e.completedAt}function Lb(e,r,t,n){if(r.consecutiveFailures===0)return!0;if(e.spec.scheduleKind!=="cron"&&r.consecutiveFailures>t.maxRetries)return!1;if(!r.lastAttemptAt)return!0;let o=Date.parse(r.lastAttemptAt);return Number.isNaN(o)?!0:n-o>=t.retryBackoffMs}function Hb(e,r,t){if(r.nextFireAt)return r.nextFireAt;let n=$u(e.spec,t);return r.nextFireAt=n,n}function Fb(e,r,t,n){if(e.paused||Bb(r)||Wb(r,t)||!Lb(e,r,n,t))return!1;let o=r.nextFireAt?Date.parse(r.nextFireAt):NaN;return Number.isNaN(o)?!1:t>=o}function $b(e,r,t){e.spec.scheduleKind==="cron"&&(r.nextFireAt=Ti(e.spec,t))}async function _t(e={}){let r=e.env??nr(),t=e.now??new Date,n=t.getTime();if(!r.tickEnabled)return{enabled:!1,skipped:"tick_disabled",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};if(!r.fireBaseUrl||!r.secret)return{enabled:!0,skipped:"missing_fire_credentials",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};let o=Lu(r.lockPath);if(!o.acquired)return{enabled:!0,skipped:o.reason??"lock_not_acquired",scanned:0,due:0,fired:0,skippedJobs:0,errors:0,lockHeld:!0};try{let s=await Ur(r.storePath),i=e.agentOsIdFilter?s.filter(m=>m.spec.target.agentOsId===e.agentOsIdFilter):s,a=await Lo(r.statePath),l=[];for(let m of i){let p=Ju(a,m.providerScheduleId);Hb(m,p,t),Fb(m,p,n,r)&&l.push({entry:m,job:p})}l.sort((m,p)=>{let g=Date.parse(m.job.nextFireAt??"")||0,k=Date.parse(p.job.nextFireAt??"")||0;return g-k});let c=0,u=0,d=0,f=r.maxCatchUpPerTick;for(let{entry:m,job:p}of l){if(r.missedRunPolicy==="skip"&&m.spec.scheduleKind==="cron"){let g=Date.parse(p.nextFireAt??"");if(!Number.isNaN(g)&&g<n-r.tickIntervalMs*2){p.nextFireAt=Ti(m.spec,t),d++;continue}}if(f<=0){d++;continue}p.inflightUntil=new Date(n+r.inflightLeaseMs).toISOString(),p.lastAttemptAt=t.toISOString(),$b(m,p,t);try{let g=await Uu({entry:m,baseUrl:r.fireBaseUrl,secret:r.secret,fetchFn:e.fetchFn});p.inflightUntil=null,g.ok?(p.lastFiredAt=t.toISOString(),p.consecutiveFailures=0,m.spec.scheduleKind==="runAt"&&(p.completedAt=t.toISOString(),p.nextFireAt=null),c++,f--):(p.consecutiveFailures+=1,u++)}catch{p.inflightUntil=null,p.consecutiveFailures+=1,u++}}return await Yu(r.statePath,a),{enabled:!0,scanned:i.length,due:l.length,fired:c,skippedJobs:d,errors:u}}finally{Hu(r.lockPath)}}w();W();import qu from"node:path";var zu="mesh-cron-lease.json";function Ho(e){return _(qu.join(P(e),zu),null)}function Xu(e,r){ue(qu.join(P(e),zu),{...r,updatedAt:new Date().toISOString()})}function Qu(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.response;if(!r||typeof r!="object"||Array.isArray(r))return null;let t=r.meshLiveness;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t.cronLease;if(!n||typeof n!="object"||Array.isArray(n))return null;let o=n;return{leaseToken:typeof o.leaseToken=="string"?o.leaseToken:null,holderBoxId:typeof o.holderBoxId=="string"?o.holderBoxId:null,authorized:o.authorized===!0,updatedAt:new Date().toISOString()}}w();import gx from"node:path";W();Eo();w();import Kb from"node:path";function jb(e){let r=Array.isArray(e.ownedPaths)?e.ownedPaths.filter(n=>typeof n=="string"):[],t=Array.isArray(e.writeSetPrefixes)?(e.writeSetPrefixes??[]).filter(n=>typeof n=="string"):[];return{...r.length?{ownedPaths:r}:{},...t.length?{writeSetPrefixes:t}:{},...e.allowConcurrentHotspot?{allowConcurrentHotspot:!0}:{}}}function Fo(e){let r=B(e),t=[];for(let n of Object.keys(r.workers||{})){let o=_(Kb.join(P(r.id),"workers",R(n),"worker.json"),void 0);!o?.taskId||!Po(o)||t.push({runId:r.id,workerName:n,taskId:o.taskId,pid:o.pid,...jb(o)})}return t}I();I();function Zu(e){if(e!==void 0&&Number.isFinite(e)&&e>0)return Math.floor(e);let r=Number(process.env.KYNVER_CALLBACK_TIMEOUT_MS);return Number.isFinite(r)&&r>0?Math.floor(r):3e4}async function ed(e,r){let t=Zu(r),n=new AbortController,o=setTimeout(()=>n.abort(),t);try{return await e(n.signal)}finally{clearTimeout(o)}}function rd(e,r){let t=Zu(r);return{ok:!1,status:0,response:{error:e instanceof Error?e.message:String(e),timeoutMs:t}}}async function Wr(e,r,t,n){let o;try{o=await ed(i=>fetch(e,{method:"POST",headers:Ne(r),body:JSON.stringify(t),signal:i}),n?.timeoutMs)}catch(i){return rd(i,n?.timeoutMs)}let s=null;try{s=await o.json()}catch{s=null}return{ok:o.ok,status:o.status,response:s}}async function X(e,r,t,n){let o=await Wr(e,r,t,{timeoutMs:n.timeoutMs});if(o.ok||o.status!==401)return o;let s=await au(r,n.agentOsId,{baseUrl:n.baseUrl});return s.ok?{...await Wr(e,s.token,t,{timeoutMs:n.timeoutMs}),refreshedAuth:!0}:{...o,authRefreshFailure:s.reason}}async function $o(e,r,t){let n;try{n=await ed(s=>fetch(e,{method:"GET",headers:Ne(r),signal:s}),t?.timeoutMs)}catch(s){return rd(s,t?.timeoutMs)}let o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,response:o}}I();function td(){let e=Number(process.env.KYNVER_DISPATCH_CALLBACK_TIMEOUT_MS);return Number.isFinite(e)&&e>0?Math.floor(e):12e4}function Di(e){console.error(JSON.stringify({event:"dispatch_progress",ts:new Date().toISOString(),...e}))}function nd(e){if(!e||typeof e!="object")return!1;let r=e;if(r.timeoutMs!==void 0)return!0;let t=r.error;if(typeof t!="string"||!t.trim())return!1;let n=t.toLowerCase();return n.includes("abort")||n.includes("timeout")}var Vb=["implementation","review","landing"],Gb=["plan_author","implementer","report_reviewer","deep_reviewer","runtime_verifier","system"];function Yb(e){return Vb.includes(e)}function Jb(e){return Gb.includes(e)}function od(e){return{slug:e.slug,displayName:e.displayName,description:e.description,dispatchLane:e.dispatchLane===null||Yb(e.dispatchLane)?e.dispatchLane:null,defaultRoleLane:Jb(e.defaultRoleLane)?e.defaultRoleLane:"implementer"}}var sd=St.personas.map(od),qb=new Map(sd.map(e=>[e.slug,e]));function zb(e){if(!e)return null;let r=e.trim().toLowerCase(),t=qb.get(r)??null,n=wu(r);if(!n)return t;let o=od(n);return t?{...o,dispatchLane:t.dispatchLane,defaultRoleLane:t.defaultRoleLane}:o}function Mi(e){return zb(e)?.defaultRoleLane??null}function id(){return sd.filter(e=>e.dispatchLane==="review").map(e=>e.slug)}function ad(e){return(e??"").trim().toLowerCase()}function Xb(e){switch(ad(e)){case"implementer":case"repair_implementer":case"plan_author":case"runtime_verifier":return"implementation";case"plan_reviewer":case"report_reviewer":case"deep_reviewer":return"review";default:return null}}function Qb(e){let r=ad(e);if(!r)return;if(r==="implementation"||r==="review"||r==="landing"||r==="any")return r;let t=Xb(r);if(t)return t;if(r==="implement"||r==="repair"||r==="coding")return"implementation";if(r==="land"||r==="merge")return"landing"}function ld(e){return Qb(e)??"any"}nn();yt();W();W();function Ko(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Ui(e){return e.toLowerCase()}function Zb(e){let r=Ko(e,"roleLane");if(r)return r;let t=Ui(Ko(e,"executorRef")),n=Ui(Ko(e,"title")),o=Ui(Ko(e,"personaSlug")),s=`${t} ${n}`;if(s.includes("deep review")||s.includes("security review")||t.includes("deep-reviewer"))return"deep_reviewer";if(s.includes("plan author")||s.includes("plan-author")||n.includes("strategy plan"))return"plan_author";if(s.includes("plan review")||t.includes("plan-reviewer"))return"plan_reviewer";if(s.includes("report review")||s.includes("completion report"))return"report_reviewer";if(s.includes("repair")||n.startsWith("fix ")||t.includes("repair"))return"repair_implementer";if(t.includes("cursor")||t.includes("codex")||t.includes("composer")||n.includes("implement")||n.includes("land:"))return"implementer";let i=Mi(o);if(i)return o==="lorentz"&&(s.includes("deep")||s.includes("security"))?"deep_reviewer":i;if(s.includes("review"))return"report_reviewer"}function cd(e){let r=Zb(e);return r?{...e,roleLane:r}:e}I();var or="cursor",ev=new Set(["claude","opus","anthropic"]),rv=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function Wi(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Br(e){if(!e?.trim())return!1;let r=e.trim().toLowerCase();return ev.has(r)?!0:r.includes("claude")||r.includes("opus")}function Bi(e){if(!e)return!1;let r=e.workerProviderOverride;if(typeof r=="string"&&Br(r))return!0;let t=Wi(e,"executorRef").toLowerCase();if(t==="provider:claude"||t.startsWith("provider:claude:")||t.includes("claude-worker-override")||t.includes("operator-claude"))return!0;let n=Wi(e,"description");if(rv.some(s=>s.test(n)))return!0;let o=Wi(e,"title");return!!/\[use-claude-worker\]/i.test(o)}function tv(e,r){return{provider:or,model:Li,rule:`policy:cursor_default${r}`,requestedModel:e}}function ud(e){let{routing:r,task:t}=e,n=e.explicitProvider?.trim().toLowerCase();if(e.explicitProviderIsOperatorOverride&&Br(n))return{...r,provider:"claude",rule:r.rule.startsWith("explicit:")?r.rule:"explicit:operator_provider"};if(Bi(t)||r.rule==="explicit:cli"&&Br(r.provider)||!Br(r.provider))return r;let o=r.rule&&r.rule!=="default:global"?`:${r.rule.replace(/:/g,"_")}`:"";return tv(r.model,o)}function jo(e,r=or){let t=e?.trim();return t?Br(t)?or:t==="codex"?"codex":t:r}var dd={codex:{id:"codex",displayName:"Codex (BYO OAuth / Hermes openai-codex)",costTier:"low",authSources:["oauth_local","api_key_env","subscription_hermes"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!1},cursor:{id:"cursor",displayName:"Cursor / Composer",costTier:"medium",authSources:["oauth_local","api_key_env"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0},claude:{id:"claude",displayName:"Claude Code",costTier:"high",authSources:["oauth_local"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0}};function xt(e){return dd[e]}function pd(){return Object.values(dd)}import{existsSync as ov}from"node:fs";import{homedir as sv}from"node:os";import gd from"node:path";import{createHash as md}from"node:crypto";import{statSync as nv}from"node:fs";import{spawnSync as fd}from"node:child_process";function He(e){try{let r=nv(e),t=`${e}|${r.size}|${r.mtimeMs}`;return md("sha256").update(t).digest("hex").slice(0,16)}catch{return}}function Pt(e){return md("sha256").update(`env:${e}`).digest("hex").slice(0,16)}function _e(e,r){for(let t of r){let n=process.env[t]?.trim();if(n)return n}return e}function Fe(e,r,t={}){let n=t.timeoutMs??8e3;try{let o=fd(e,r,{encoding:"utf8",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}});if(o.status===0)return{ok:!0,note:t.okNote??`${e} ${r.join(" ")}: ok`};let s=(o.stderr||o.stdout||"").trim(),i=t.failPrefix??`${e} ${r.join(" ")} failed`;return{ok:!1,note:s?`${i}: ${s.slice(0,200)}`:i}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} probe failed`}}}function Vo(e,r,t={}){let n=t.timeoutMs??8e3;try{return fd(e,r,{stdio:"ignore",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}}).status===0?{ok:!0,note:t.okNote??`${e} authenticated`}:{ok:!1,note:t.failNote??`${e} not authenticated`}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} auth probe failed`}}}var iv="codex";function av(){let e=sv();return[gd.join(e,".codex","auth.json"),gd.join(e,".config","codex","auth.json")]}function hd(e=new Date().toISOString()){let r=_e(iv,["KYNVER_CODEX_BIN","CODEX_BIN"]);if(process.env.CODEX_API_KEY?.trim())return{providerId:"codex",ready:!0,authSource:"api_key_env",sessionFingerprint:Pt("CODEX_API_KEY"),checkedAt:e,note:"CODEX_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=av().find(s=>ov(s)),n=Fe(r,["login","status"],{okNote:"codex login status: authenticated",failPrefix:"codex login status"}),o=!!t&&n.ok;return{providerId:"codex",ready:o,authSource:"oauth_local",sessionFingerprint:t?He(t):void 0,checkedAt:e,note:o?"Local Codex OAuth session bound on runner":[n.note,t?void 0:"no ~/.codex/auth.json"].filter(Boolean).join("; ")}}import{existsSync as lv}from"node:fs";import{homedir as cv}from"node:os";import Hi from"node:path";function uv(){let e=process.env.HERMES_HOME?.trim(),r=e?Hi.resolve(e):Hi.join(cv(),".hermes");return Hi.join(r,"auth.json")}function Go(e=new Date().toISOString()){let r=_e("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=Fe(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=uv(),o=lv(n),s=Vo(r,["auth","status","openai-codex"],{okNote:"hermes openai-codex: logged in",failNote:"hermes openai-codex: not logged in"}),i=t.ok&&s.ok;return{path:"hermes_openai_codex",ready:i,authSource:i?"subscription_hermes":"none",sessionFingerprint:o?He(n):void 0,checkedAt:e,note:i?"Hermes openai-codex subscription session bound (ChatGPT Codex OAuth)":[t.note,s.note,o?void 0:"no ~/.hermes/auth.json"].filter(Boolean).join("; ")}}function Et(e=new Date().toISOString()){let r=hd(e);if(r.ready)return{...r,path:"codex_cli"};let t=Go(e);return t.ready?{providerId:"codex",ready:!0,authSource:t.authSource,sessionFingerprint:t.sessionFingerprint,checkedAt:t.checkedAt,note:t.note,path:"hermes_openai_codex",hermesOpenAiCodex:t}:{providerId:"codex",ready:!1,authSource:"none",checkedAt:e,path:"none",hermesOpenAiCodex:t,note:[r.note,t.note].filter(Boolean).join("; ")||"Codex CLI and Hermes openai-codex unavailable"}}var kd=["low","medium","high"],yd={oauth_local:0,subscription_hermes:0,runner_token:1,api_key_env:2,none:3};function Rd(e,r){let t=xt(e);return r==="privileged"?t.supportsPrivilegedPlatformActions:r==="low"?t.supportsLowRiskOrchestration:!0}function dv(e,r){let t=xt(e.providerId),n=xt(r.providerId),o=kd.indexOf(t.costTier)-kd.indexOf(n.costTier);if(o!==0)return o;let s=yd[e.binding.authSource]-yd[r.binding.authSource];return s!==0?s:e.providerId.localeCompare(r.providerId)}function Fi(e){let r=pd().map(a=>({providerId:a.id,binding:e.inventory.bindings[a.id]})).filter(a=>a.binding.ready&&Rd(a.providerId,e.riskClass));if(r.length===0)return null;let n=[...r].sort(dv)[0],o="codex";if(n.providerId===o)return{providerId:n.providerId,binding:n.binding};let s=e.inventory.bindings[o],i;return Rd(o,e.riskClass)?s.ready||(i=s.note??`${o} not bound`):i=`${e.riskClass} orchestration requires privileged-capable provider`,{providerId:n.providerId,binding:n.binding,escalatedFrom:o,escalatedReason:i}}import{existsSync as pv}from"node:fs";import{homedir as mv}from"node:os";import fv from"node:path";var gv="claude";function hv(){let e=mv();return[fv.join(e,".claude",".credentials.json")]}function bd(e=new Date().toISOString()){let r=_e(gv,["KYNVER_CLAUDE_BIN","CLAUDE_BIN"]);if(process.env.ANTHROPIC_API_KEY?.trim())return{providerId:"claude",ready:!0,authSource:"api_key_env",sessionFingerprint:Pt("ANTHROPIC_API_KEY"),checkedAt:e,note:"ANTHROPIC_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=Fe(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=hv().find(i=>pv(i)),o=Vo(r,["auth","status"],{okNote:"claude auth status: authenticated",failNote:"claude auth status: not authenticated"}),s=t.ok&&(o.ok||!!n);return{providerId:"claude",ready:s,authSource:"oauth_local",sessionFingerprint:n?He(n):void 0,checkedAt:e,note:s?"Local Claude Code OAuth session bound on runner":[t.note,o.note,n?void 0:"no ~/.claude/.credentials.json"].filter(Boolean).join("; ")}}import{existsSync as kv}from"node:fs";import{homedir as yv}from"node:os";import Rv from"node:path";var bv="agent";function vv(){let e=yv();return[Rv.join(e,".config","cursor","auth.json")]}function vd(e=new Date().toISOString()){let r=_e(bv,["KYNVER_CURSOR_AGENT_BIN","CURSOR_AGENT_BIN"]);if(process.env.CURSOR_API_KEY?.trim())return{providerId:"cursor",ready:!0,authSource:"api_key_env",sessionFingerprint:Pt("CURSOR_API_KEY"),checkedAt:e,note:"CURSOR_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=Fe(r,["-v"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=vv().find(s=>kv(s)),o=!!n&&t.ok;return{providerId:"cursor",ready:o,authSource:"oauth_local",sessionFingerprint:n?He(n):void 0,checkedAt:e,note:o?"Local Cursor/Composer OAuth session bound on runner":[t.note,n?void 0:"no ~/.config/cursor/auth.json"].filter(Boolean).join("; ")}}import{existsSync as Sv,readFileSync as wv}from"node:fs";import{homedir as Cv}from"node:os";import $i from"node:path";var _v=["OPENAI_API_KEY","ANTHROPIC_API_KEY","KYNVER_API_KEY","KYNVER_BASE_URL"];function xv(){let e=process.env.HERMES_HOME?.trim(),r=e?$i.resolve(e):$i.join(Cv(),".hermes");return $i.join(r,".env")}function Pv(e){try{let r=wv(e,"utf8"),t=[];for(let n of _v)new RegExp(`^${n}=`,"m").test(r)&&t.push(n);return t}catch{return[]}}function Sd(e=new Date().toISOString()){let r=_e("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=Fe(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=xv(),o=Sv(n),s=o?Pv(n):[],a=s.some(c=>c.endsWith("_API_KEY"))?"api_key_env":o?"oauth_local":"none",l=t.ok&&o;return{adapterId:"hermes",cliAvailable:t.ok,profileBound:o,authSource:a,sessionFingerprint:o?He(n):void 0,checkedAt:e,note:l?`Hermes profile bound (${s.length?`keys: ${s.join(", ")}`:"no API keys detected"})`:[t.note,o?void 0:"no ~/.hermes/.env"].filter(Boolean).join("; ")}}function wd(e={}){let r=e.nowIso?.()??new Date().toISOString(),t=Et(r),n={codex:t,cursor:vd(r),claude:bd(r)},o=Object.values(n).filter(s=>s.ready).length;return{generatedAt:r,bindings:n,cloudApiCredits:{anthropicApiKey:!!process.env.ANTHROPIC_API_KEY?.trim(),openaiApiKey:!!process.env.OPENAI_API_KEY?.trim(),codexApiKey:!!process.env.CODEX_API_KEY?.trim()},hermes:Sd(r),hermesOpenAiCodex:Go(r),codexAdapterPath:t.path,readyCount:o}}var Ev=[/\bprivileged\b/i,/\bproduction\s+db\b/i,/\bdb:push\b/i,/\bmigration\b/i,/\bdeploy\b/i,/\bsecrets?\b/i,/\bstripe\b/i,/\[require-approval\]/i,/\[operator-only\]/i],Av=[/\borchestration\b/i,/\bplan[- ]?progress\b/i,/\bstatus\s+sync\b/i,/\bheartbeat\b/i,/\bboard[- ]?drain\b/i,/\bmaintenance\b/i,/\[orchestration:\s*low-risk\]/i];function Ki(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Iv(e){let r=Ki(e,"executorRef").toLowerCase(),t=Ki(e,"title").toLowerCase(),n=Ki(e,"description").toLowerCase(),o=`${r}
+`)},ab={"harness.maxTaskAttempts":4,"harness.dispatchCooldownMs":5e3,"daemon.idleIntervalMs":5*6e4,"daemon.maxIdleStreak":10},_t={version:ob,generatedAt:"1970-01-01T00:00:00.000Z",personas:sb,instructions:ib,policyThresholds:ab};var Cn=_t,Eu="embedded";function Wr(){return Cn.version}function kr(){return Eu}function Au(e,r){Cn=e,Eu=r}function _n(e){let r=Cn.instructions[e];if(typeof r=="string"&&r.trim())return r;let t=_t.instructions[e];return typeof t=="string"?t:""}function xt(e,r){let t=Cn.policyThresholds[e];if(typeof t=="number"&&Number.isFinite(t))return t;let n=_t.policyThresholds[e];return typeof n=="number"&&Number.isFinite(n)?n:r}function Iu(e){if(!e)return null;let r=e.trim().toLowerCase();return Cn.personas.find(t=>t.slug===r)??null}import{createPublicKey as cb,verify as ub}from"node:crypto";var lb={"ib-3bab6314f0ba":"53a2040646cd479e1f5f1aea9abf7848ce8b62e32001efb8044dfd90e8ab87ed","ib-26e6c695da06":"bb1700f25b2ee7d7cdcdb9f446f0f44ef2cc22a3096bc161232fb658e7cdaf38"};function Ou(e,r=process.env){let t=Wi(r.KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY);if(t)return t;let n=lb[e];return n?Wi(n):null}var db=Buffer.from("302a300506032b6570032100","hex");function pb(e){return cb({key:Buffer.concat([db,Buffer.from(e)]),format:"der",type:"spki"})}function mb(e,r){if(!wn(e))return{ok:!1,reason:"malformed signed bundle payload"};let t;try{t=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(t.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let n=Buffer.from(wu(e.bundle),"utf8");return ub(null,n,pb(r),t)?{ok:!0,bundle:e.bundle}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(n){return{ok:!1,reason:`signature verification failed: ${n.message}`}}}function Nu(e,r=process.env){if(!wn(e))return{ok:!1,reason:"malformed signed bundle payload"};let t=Ou(e.publicKeyId,r);return t?mb(e,t):{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}" (not pinned; set KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY)`}}var fb=15*6e4,gb=1e4,nr={lastAttemptAtMs:0,etag:null,diskCacheTried:!1,routeMissingLogged:!1};function Pn(e,r){console.error(JSON.stringify({event:e,...r}))}function Tu(e,r,t){let n=Nu(e);return n.ok?(Au(n.bundle,r),r==="server"&&xu(t,e),!0):(Pn("instruction_bundle_signature_invalid",{agentOsId:t,source:r,publicKeyId:e.publicKeyId,reason:n.reason}),!1)}function xn(e){if(nr.diskCacheTried)return!1;nr.diskCacheTried=!0;let r=Pu(e);return r?Tu(r,"disk",e):!1}async function Du(e){let r=e.nowMs??Date.now(),t=()=>({source:kr(),version:Wr(),updated:!1});if(!e.force&&r-nr.lastAttemptAtMs<fb)return t();nr.lastAttemptAtMs=r;let n=e.baseUrl?.trim().replace(/\/$/,""),o=e.secret?.trim();if(!n||!o)return kr()==="embedded"&&xn(e.agentOsId)?{...t(),updated:!0}:t();let s=e.fetchImpl??fetch,i=new AbortController,a=setTimeout(()=>i.abort(),gb);try{let l=Ne(o);delete l["Content-Type"],nr.etag&&kr()==="server"&&(l["If-None-Match"]=nr.etag);let c=await s(`${n}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/runtime/instruction-bundle`,{headers:l,signal:i.signal});if(c.status===304)return t();if(c.status===404)return nr.routeMissingLogged||(nr.routeMissingLogged=!0,Pn("instruction_bundle_route_missing",{agentOsId:e.agentOsId,baseUrl:n})),kr()==="embedded"&&xn(e.agentOsId)?{...t(),updated:!0}:t();if(!c.ok)return Pn("instruction_bundle_fetch_failed",{agentOsId:e.agentOsId,status:c.status}),kr()==="embedded"&&xn(e.agentOsId)?{...t(),updated:!0}:t();let u=await c.json().catch(()=>null);return!u||!Tu(u,"server",e.agentOsId)?kr()==="embedded"&&xn(e.agentOsId)?{...t(),updated:!0}:t():(nr.etag=c.headers.get("etag"),Pn("instruction_bundle_loaded",{agentOsId:e.agentOsId,version:Wr(),publicKeyId:u.publicKeyId}),{...t(),updated:!0})}catch(l){return Pn("instruction_bundle_fetch_error",{agentOsId:e.agentOsId,error:l instanceof Error?l.message:String(l)}),kr()==="embedded"&&xn(e.agentOsId)?{...t(),updated:!0}:t()}finally{clearTimeout(a)}}O();Ie();Uo();import hb from"node:os";function Mu(e,r){console.error(JSON.stringify({event:"daemon_identity",level:e,message:r}))}function Uu(e=v(),r=process.env){let t=We(r,e),n=Mo({config:e,totalMemBytes:hb.totalmem(),env:r}),o=[...t.warnings],s=[];if(!e.boxKind?.trim()&&!r.KYNVER_BOX_KIND?.trim()&&o.push("boxKind is not persisted in ~/.kynver/config.json \u2014 run `kynver setup --box-kind forge|ghost` so Command Center attributes snapshots to the correct pool"),t.slugInferenceBlocked){let a=r.KYNVER_DAEMON_STRICT_IDENTITY==="1"||r.KYNVER_DAEMON_STRICT_IDENTITY==="true",l="ambiguous box identity: KYNVER_AGENT_OS_SLUG is set without KYNVER_BOX_KIND or config.boxKind; treating this host as forge";a?s.push(l):o.push(l)}let i=s.length===0;for(let a of o)Mu("warn",a);for(let a of s)Mu("error",a);return{ok:i,box:t,workerCapSource:n.workerCapSource,maxConcurrentWorkers:n.configuredMaxWorkers??n.autoCap,autoCap:n.autoCap,warnings:o,errors:s}}import{mkdirSync as kb,readFileSync as yb,renameSync as Rb,writeFileSync as bb}from"node:fs";import{homedir as vb}from"node:os";import Wu from"node:path";function Bu(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return Wu.join(vb(),".kynver",`daemon-heartbeat-${r}.json`)}function Lu(e){try{let r=Bu(e.agentOsId);kb(Wu.dirname(r),{recursive:!0});let t={observedAt:(e.now??new Date).toISOString(),pid:process.pid,runId:e.runId,agentOsId:e.agentOsId,...e.instructionBundleVersion?{instructionBundleVersion:e.instructionBundleVersion}:{}},n=`${r}.tmp-${process.pid}`;bb(n,JSON.stringify(t),"utf8"),Rb(n,r)}catch{}}function Hu(e){try{let r=yb(Bu(e),"utf8"),t=JSON.parse(r);return typeof t?.observedAt!="string"?null:t}catch{return null}}function Fu(e,r,t=Date.now()){if(!e)return!1;let n=Date.parse(e.observedAt);return Number.isNaN(n)?!0:t-n>r}function Sb(e){let r=process.env[e]?.trim().toLowerCase();return r==="1"||r==="true"||r==="yes"||r==="on"}function Pt(){process.platform==="win32"&&(Sb("KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS")||(console.error(JSON.stringify({event:"daemon_start_blocked",reason:"native_windows_console_flash",remedy:"Run the daemon inside WSL: .\\scripts\\start-tier2-wsl.ps1 \u2014 or set KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS=1 to override (flashes visible consoles)."})),process.exit(1)))}O();import{existsSync as wb}from"node:fs";import{homedir as Cb}from"node:os";import _b from"node:path";function $u(e,r){let t=process.env[e]?.trim().toLowerCase();return t?t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r:r}function En(e,r,t=1){let n=Number(process.env[e]);return!Number.isFinite(n)||n<t?r:Math.floor(n)}function yr(){let e=process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim();return e||_b.join(Cb(),".kynver","agent-os-cron.json")}function xb(e=yr()){let r=process.env.KYNVER_CRON_TICK_STATE_PATH?.trim();return r||`${e.replace(/\.json$/i,"")}.tick-state.json`}function Pb(){let e=v();return process.env.KYNVER_API_URL?.trim()||e.apiBaseUrl?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}function Bi(){return process.env.KYNVER_CRON_SECRET?.trim()||process.env.OPENCLAW_CRON_SECRET?.trim()||process.env.KYNVER_RUNTIME_SECRET?.trim()||null}function or(){let e=yr(),r=xb(e),t=Pb(),n=Bi(),o=!!(t&&n),s=wb(e),i=o&&(s||$u("KYNVER_CRON_TICK_FORCE",!1));return{storePath:e,statePath:r,lockPath:`${r}.lock`,fireBaseUrl:t,secret:n,tickEnabled:$u("KYNVER_CRON_TICK_ENABLED",i),tickIntervalMs:En("KYNVER_CRON_TICK_INTERVAL_MS",6e4,5e3),missedRunPolicy:process.env.KYNVER_CRON_MISSED_RUN_POLICY?.trim().toLowerCase()==="skip"?"skip":"catch_up",maxCatchUpPerTick:En("KYNVER_CRON_MAX_CATCH_UP_PER_TICK",3,0),maxRetries:En("KYNVER_CRON_MAX_RETRIES",3,0),retryBackoffMs:En("KYNVER_CRON_RETRY_BACKOFF_MS",6e4,1e3),inflightLeaseMs:En("KYNVER_CRON_INFLIGHT_LEASE_MS",12e4,5e3)}}function jo(e=or()){return e.tickEnabled&&!!(e.fireBaseUrl&&e.secret)}function Eb(e){return e.replace(/\/+$/,"")}async function Ku(e){let r=e.fetchFn??fetch,t=e.entry.spec.callbackPath.startsWith("/")?e.entry.spec.callbackPath:`/${e.entry.spec.callbackPath}`,n=`${Eb(e.baseUrl)}${t}`,s={source:"kynver-cron",jobId:e.jobId??e.entry.spec.dedupeKey??null,agentOsId:e.entry.spec.target.agentOsId,kind:e.entry.spec.kind,target:e.entry.spec.target,...e.entry.spec.payload!==void 0&&{payload:e.entry.spec.payload}},i=await r(n,{method:"POST",headers:Ne(e.secret),body:JSON.stringify(s)}),a=null;try{a=await i.json()}catch{a=null}return{ok:i.ok,status:i.status,body:a}}w();import{closeSync as Ab,existsSync as Li,openSync as Ib,readFileSync as Ob,unlinkSync as ju,writeFileSync as Nb}from"node:fs";var Tb=10*6e4;function Vu(e){if(!Li(e))return null;try{let r=JSON.parse(Ob(e,"utf8"));if(typeof r.pid=="number"&&typeof r.at=="string")return r}catch{return null}return null}function Db(e){let r=Vu(e);if(!r||!L(r.pid))return!0;let t=Date.parse(r.at);return Number.isNaN(t)?!0:Date.now()-t>Tb}function Gu(e){if(Li(e)&&!Db(e)){let r=Vu(e);return{acquired:!1,reason:r?`held by pid ${r.pid}`:"held by another process"}}if(Li(e))try{ju(e)}catch{}try{let r=Ib(e,"wx");return Nb(r,JSON.stringify({pid:process.pid,at:new Date().toISOString()}),"utf8"),Ab(r),{acquired:!0}}catch(r){if(r.code==="EEXIST")return{acquired:!1,reason:"concurrent acquire"};throw r}}function Yu(e){try{ju(e)}catch{}}var Mb=/^[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+$/;function Ub(e){return Mb.test(e.trim())}function Wb(e,r,t){let n=new Set;for(let o of e.split(",")){let s=o.trim();if(!s)continue;if(s==="*"){for(let d=r;d<=t;d++)n.add(d);continue}let i=/^(.+)\/(\d+)$/.exec(s),a=i?i[1]:s,l=i?Math.max(1,Number(i[2])):1;if(a==="*"){for(let d=r;d<=t;d+=l)n.add(d);continue}let c=/^(\d+)-(\d+)$/.exec(a);if(c){let d=Math.max(r,Number(c[1])),m=Math.min(t,Number(c[2]));for(let f=d;f<=m;f+=l)n.add(f);continue}let u=Number(a);Number.isInteger(u)&&u>=r&&u<=t&&n.add(u)}return n}function An(e,r,t,n){let o=e.trim();return o==="*"?!0:Wb(o,t,n).has(r)}function Bb(e,r){let t=e.trim().split(/\s+/);if(t.length!==5)return!1;let[n,o,s,i,a]=t;return An(n,r.getUTCMinutes(),0,59)&&An(o,r.getUTCHours(),0,23)&&An(s,r.getUTCDate(),1,31)&&An(i,r.getUTCMonth()+1,1,12)&&An(a,r.getUTCDay(),0,6)}var Lb=366*24*60;function Hb(e){return new Date(Date.UTC(e.getUTCFullYear(),e.getUTCMonth(),e.getUTCDate(),e.getUTCHours(),e.getUTCMinutes(),0,0))}function Ju(e,r){if(!Ub(e))return null;let t=Hb(r);t=new Date(t.getTime()+6e4);for(let n=0;n<Lb;n++){if(Bb(e,t))return t;t=new Date(t.getTime()+6e4)}return null}function qu(e,r){if(e.scheduleKind==="runAt"&&e.runAt){let t=Date.parse(e.runAt);return Number.isNaN(t)?null:new Date(t).toISOString()}if(e.scheduleKind==="cron"&&e.cron){let t=Ju(e.cron.trim(),r);return t?t.toISOString():null}return null}function Hi(e,r){if(e.scheduleKind!=="cron"||!e.cron?.trim())return null;let t=Ju(e.cron.trim(),r);return t?t.toISOString():null}import{promises as Fb}from"node:fs";async function zu(e){try{return await Fb.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function $b(e){if(!e)return[];try{let r=JSON.parse(e);return Array.isArray(r.entries)?r.entries:[]}catch{return[]}}async function Br(e=yr()){let r=await zu(e);return $b(r)}async function Xu(e,r){let{mkdir:t,writeFile:n,rename:o}=await import("node:fs/promises"),{randomBytes:s}=await import("node:crypto"),{dirname:i}=await import("node:path");await t(i(e),{recursive:!0});let a=`${e}.${s(4).toString("hex")}.tmp`,l=JSON.stringify({entries:r},null,2);await n(a,l,"utf8"),await o(a,e)}async function Qu(e,r=yr()){let t=await Br(r),n=t.findIndex(o=>o.providerScheduleId===e.providerScheduleId);n>=0?t[n]=e:t.push(e),await Xu(r,t)}async function Zu(e=yr()){return await zu(e)!==null?{created:!1}:(await Xu(e,[]),{created:!0})}import{randomBytes as Kb}from"node:crypto";import{promises as In}from"node:fs";import jb from"node:path";var Vo={version:1,jobs:{}};async function Vb(e){try{return await In.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function Gb(e){if(!e)return{...Vo,jobs:{...Vo.jobs}};try{let r=JSON.parse(e);return r?.version!==1||typeof r.jobs!="object"||!r.jobs?{...Vo,jobs:{}}:r}catch{return{...Vo,jobs:{}}}}async function Go(e){let r=await Vb(e);return Gb(r)}async function Yb(e,r){await In.mkdir(jb.dirname(e),{recursive:!0});let t=Kb(6).toString("hex"),n=`${e}.tmp-${process.pid}-${Date.now()}-${t}`;await In.writeFile(n,`${JSON.stringify(r,null,2)}
+`,"utf8");try{await In.rename(n,e)}catch(o){let s=o.code;if(s!=="EPERM"&&s!=="EEXIST"&&s!=="EACCES")throw o;await In.unlink(n).catch(()=>{})}}async function ed(e,r){await Yb(e,r)}function rd(e,r){let t=e.jobs[r];if(t)return t;let n={providerScheduleId:r,nextFireAt:null,lastFiredAt:null,lastAttemptAt:null,consecutiveFailures:0,completedAt:null,inflightUntil:null};return e.jobs[r]=n,n}function Jb(e,r){if(!e.inflightUntil)return!1;let t=Date.parse(e.inflightUntil);return!Number.isNaN(t)&&t>r}function qb(e){return!!e.completedAt}function zb(e,r,t,n){if(r.consecutiveFailures===0)return!0;if(e.spec.scheduleKind!=="cron"&&r.consecutiveFailures>t.maxRetries)return!1;if(!r.lastAttemptAt)return!0;let o=Date.parse(r.lastAttemptAt);return Number.isNaN(o)?!0:n-o>=t.retryBackoffMs}function Xb(e,r,t){if(r.nextFireAt)return r.nextFireAt;let n=qu(e.spec,t);return r.nextFireAt=n,n}function Qb(e,r,t,n){if(e.paused||qb(r)||Jb(r,t)||!zb(e,r,n,t))return!1;let o=r.nextFireAt?Date.parse(r.nextFireAt):NaN;return Number.isNaN(o)?!1:t>=o}function Zb(e,r,t){e.spec.scheduleKind==="cron"&&(r.nextFireAt=Hi(e.spec,t))}async function Et(e={}){let r=e.env??or(),t=e.now??new Date,n=t.getTime();if(!r.tickEnabled)return{enabled:!1,skipped:"tick_disabled",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};if(!r.fireBaseUrl||!r.secret)return{enabled:!0,skipped:"missing_fire_credentials",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};let o=Gu(r.lockPath);if(!o.acquired)return{enabled:!0,skipped:o.reason??"lock_not_acquired",scanned:0,due:0,fired:0,skippedJobs:0,errors:0,lockHeld:!0};try{let s=await Br(r.storePath),i=e.agentOsIdFilter?s.filter(f=>f.spec.target.agentOsId===e.agentOsIdFilter):s,a=await Go(r.statePath),l=[];for(let f of i){let p=rd(a,f.providerScheduleId);Xb(f,p,t),Qb(f,p,n,r)&&l.push({entry:f,job:p})}l.sort((f,p)=>{let h=Date.parse(f.job.nextFireAt??"")||0,k=Date.parse(p.job.nextFireAt??"")||0;return h-k});let c=0,u=0,d=0,m=r.maxCatchUpPerTick;for(let{entry:f,job:p}of l){if(r.missedRunPolicy==="skip"&&f.spec.scheduleKind==="cron"){let h=Date.parse(p.nextFireAt??"");if(!Number.isNaN(h)&&h<n-r.tickIntervalMs*2){p.nextFireAt=Hi(f.spec,t),d++;continue}}if(m<=0){d++;continue}p.inflightUntil=new Date(n+r.inflightLeaseMs).toISOString(),p.lastAttemptAt=t.toISOString(),Zb(f,p,t);try{let h=await Ku({entry:f,baseUrl:r.fireBaseUrl,secret:r.secret,fetchFn:e.fetchFn});p.inflightUntil=null,h.ok?(p.lastFiredAt=t.toISOString(),p.consecutiveFailures=0,f.spec.scheduleKind==="runAt"&&(p.completedAt=t.toISOString(),p.nextFireAt=null),c++,m--):(p.consecutiveFailures+=1,u++)}catch{p.inflightUntil=null,p.consecutiveFailures+=1,u++}}return await ed(r.statePath,a),{enabled:!0,scanned:i.length,due:l.length,fired:c,skippedJobs:d,errors:u}}finally{Yu(r.lockPath)}}w();M();import td from"node:path";var nd="mesh-cron-lease.json";function Yo(e){return _(td.join(x(e),nd),null)}function od(e,r){de(td.join(x(e),nd),{...r,updatedAt:new Date().toISOString()})}function sd(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.response;if(!r||typeof r!="object"||Array.isArray(r))return null;let t=r.meshLiveness;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t.cronLease;if(!n||typeof n!="object"||Array.isArray(n))return null;let o=n;return{leaseToken:typeof o.leaseToken=="string"?o.leaseToken:null,holderBoxId:typeof o.holderBoxId=="string"?o.holderBoxId:null,authorized:o.authorized===!0,updatedAt:new Date().toISOString()}}w();import Ax from"node:path";M();To();w();import ev from"node:path";function rv(e){let r=Array.isArray(e.ownedPaths)?e.ownedPaths.filter(n=>typeof n=="string"):[],t=Array.isArray(e.writeSetPrefixes)?(e.writeSetPrefixes??[]).filter(n=>typeof n=="string"):[];return{...r.length?{ownedPaths:r}:{},...t.length?{writeSetPrefixes:t}:{},...e.allowConcurrentHotspot?{allowConcurrentHotspot:!0}:{}}}function Jo(e){let r=B(e),t=[];for(let n of Object.keys(r.workers||{})){let o=_(ev.join(x(r.id),"workers",b(n),"worker.json"),void 0);!o?.taskId||!No(o)||t.push({runId:r.id,workerName:n,taskId:o.taskId,pid:o.pid,...rv(o)})}return t}O();O();function id(e){if(e!==void 0&&Number.isFinite(e)&&e>0)return Math.floor(e);let r=Number(process.env.KYNVER_CALLBACK_TIMEOUT_MS);return Number.isFinite(r)&&r>0?Math.floor(r):3e4}async function ad(e,r){let t=id(r),n=new AbortController,o=setTimeout(()=>n.abort(),t);try{return await e(n.signal)}finally{clearTimeout(o)}}function ld(e,r){let t=id(r);return{ok:!1,status:0,response:{error:e instanceof Error?e.message:String(e),timeoutMs:t}}}async function Lr(e,r,t,n){let o;try{o=await ad(i=>fetch(e,{method:"POST",headers:Ne(r),body:JSON.stringify(t),signal:i}),n?.timeoutMs)}catch(i){return ld(i,n?.timeoutMs)}let s=null;try{s=await o.json()}catch{s=null}return{ok:o.ok,status:o.status,response:s}}async function X(e,r,t,n){let o=await Lr(e,r,t,{timeoutMs:n.timeoutMs});if(o.ok||o.status!==401)return o;let s=await fu(r,n.agentOsId,{baseUrl:n.baseUrl});return s.ok?{...await Lr(e,s.token,t,{timeoutMs:n.timeoutMs}),refreshedAuth:!0}:{...o,authRefreshFailure:s.reason}}async function qo(e,r,t){let n;try{n=await ad(s=>fetch(e,{method:"GET",headers:Ne(r),signal:s}),t?.timeoutMs)}catch(s){return ld(s,t?.timeoutMs)}let o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,response:o}}O();function cd(){let e=Number(process.env.KYNVER_DISPATCH_CALLBACK_TIMEOUT_MS);return Number.isFinite(e)&&e>0?Math.floor(e):12e4}function Fi(e){console.error(JSON.stringify({event:"dispatch_progress",ts:new Date().toISOString(),...e}))}function ud(e){if(!e||typeof e!="object")return!1;let r=e;if(r.timeoutMs!==void 0)return!0;let t=r.error;if(typeof t!="string"||!t.trim())return!1;let n=t.toLowerCase();return n.includes("abort")||n.includes("timeout")}var tv=["implementation","review","landing"],nv=["plan_author","implementer","report_reviewer","deep_reviewer","runtime_verifier","system"];function ov(e){return tv.includes(e)}function sv(e){return nv.includes(e)}function dd(e){return{slug:e.slug,displayName:e.displayName,description:e.description,dispatchLane:e.dispatchLane===null||ov(e.dispatchLane)?e.dispatchLane:null,defaultRoleLane:sv(e.defaultRoleLane)?e.defaultRoleLane:"implementer"}}var pd=_t.personas.map(dd),iv=new Map(pd.map(e=>[e.slug,e]));function av(e){if(!e)return null;let r=e.trim().toLowerCase(),t=iv.get(r)??null,n=Iu(r);if(!n)return t;let o=dd(n);return t?{...o,dispatchLane:t.dispatchLane,defaultRoleLane:t.defaultRoleLane}:o}function $i(e){return av(e)?.defaultRoleLane??null}function md(){return pd.filter(e=>e.dispatchLane==="review").map(e=>e.slug)}function fd(e){return(e??"").trim().toLowerCase()}function lv(e){switch(fd(e)){case"implementer":case"repair_implementer":case"plan_author":case"runtime_verifier":return"implementation";case"plan_reviewer":case"report_reviewer":case"deep_reviewer":return"review";default:return null}}function cv(e){let r=fd(e);if(!r)return;if(r==="implementation"||r==="review"||r==="landing"||r==="any")return r;let t=lv(r);if(t)return t;if(r==="implement"||r==="repair"||r==="coding")return"implementation";if(r==="land"||r==="merge")return"landing"}function gd(e){return cv(e)??"any"}ln();vt();M();M();function zo(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Ki(e){return e.toLowerCase()}function uv(e){let r=zo(e,"roleLane");if(r)return r;let t=Ki(zo(e,"executorRef")),n=Ki(zo(e,"title")),o=Ki(zo(e,"personaSlug")),s=`${t} ${n}`;if(s.includes("deep review")||s.includes("security review")||t.includes("deep-reviewer"))return"deep_reviewer";if(s.includes("plan author")||s.includes("plan-author")||n.includes("strategy plan"))return"plan_author";if(s.includes("plan review")||t.includes("plan-reviewer"))return"plan_reviewer";if(s.includes("report review")||s.includes("completion report"))return"report_reviewer";if(s.includes("repair")||n.startsWith("fix ")||t.includes("repair"))return"repair_implementer";if(t.includes("cursor")||t.includes("codex")||t.includes("composer")||n.includes("implement")||n.includes("land:"))return"implementer";let i=$i(o);if(i)return o==="lorentz"&&(s.includes("deep")||s.includes("security"))?"deep_reviewer":i;if(s.includes("review"))return"report_reviewer"}function hd(e){let r=uv(e);return r?{...e,roleLane:r}:e}O();var sr="cursor",dv=new Set(["claude","opus","anthropic"]),pv=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function ji(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Hr(e){if(!e?.trim())return!1;let r=e.trim().toLowerCase();return dv.has(r)?!0:r.includes("claude")||r.includes("opus")}function Vi(e){if(!e)return!1;let r=e.workerProviderOverride;if(typeof r=="string"&&Hr(r))return!0;let t=ji(e,"executorRef").toLowerCase();if(t==="provider:claude"||t.startsWith("provider:claude:")||t.includes("claude-worker-override")||t.includes("operator-claude"))return!0;let n=ji(e,"description");if(pv.some(s=>s.test(n)))return!0;let o=ji(e,"title");return!!/\[use-claude-worker\]/i.test(o)}function mv(e,r){return{provider:sr,model:Gi,rule:`policy:cursor_default${r}`,requestedModel:e}}function kd(e){let{routing:r,task:t}=e,n=e.explicitProvider?.trim().toLowerCase();if(e.explicitProviderIsOperatorOverride&&Hr(n))return{...r,provider:"claude",rule:r.rule.startsWith("explicit:")?r.rule:"explicit:operator_provider"};if(Vi(t)||r.rule==="explicit:cli"&&Hr(r.provider)||!Hr(r.provider))return r;let o=r.rule&&r.rule!=="default:global"?`:${r.rule.replace(/:/g,"_")}`:"";return mv(r.model,o)}function Xo(e,r=sr){let t=e?.trim();return t?Hr(t)?sr:t==="codex"?"codex":t:r}var yd={codex:{id:"codex",displayName:"Codex (BYO OAuth / Hermes openai-codex)",costTier:"low",authSources:["oauth_local","api_key_env","subscription_hermes"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!1},cursor:{id:"cursor",displayName:"Cursor / Composer",costTier:"medium",authSources:["oauth_local","api_key_env"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0},claude:{id:"claude",displayName:"Claude Code",costTier:"high",authSources:["oauth_local"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0}};function At(e){return yd[e]}function Rd(){return Object.values(yd)}import{existsSync as gv}from"node:fs";import{homedir as hv}from"node:os";import Sd from"node:path";import{createHash as bd}from"node:crypto";import{statSync as fv}from"node:fs";import{spawnSync as vd}from"node:child_process";function Fe(e){try{let r=fv(e),t=`${e}|${r.size}|${r.mtimeMs}`;return bd("sha256").update(t).digest("hex").slice(0,16)}catch{return}}function It(e){return bd("sha256").update(`env:${e}`).digest("hex").slice(0,16)}function _e(e,r){for(let t of r){let n=process.env[t]?.trim();if(n)return n}return e}function $e(e,r,t={}){let n=t.timeoutMs??8e3;try{let o=vd(e,r,{encoding:"utf8",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}});if(o.status===0)return{ok:!0,note:t.okNote??`${e} ${r.join(" ")}: ok`};let s=(o.stderr||o.stdout||"").trim(),i=t.failPrefix??`${e} ${r.join(" ")} failed`;return{ok:!1,note:s?`${i}: ${s.slice(0,200)}`:i}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} probe failed`}}}function Qo(e,r,t={}){let n=t.timeoutMs??8e3;try{return vd(e,r,{stdio:"ignore",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}}).status===0?{ok:!0,note:t.okNote??`${e} authenticated`}:{ok:!1,note:t.failNote??`${e} not authenticated`}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} auth probe failed`}}}var kv="codex";function yv(){let e=hv();return[Sd.join(e,".codex","auth.json"),Sd.join(e,".config","codex","auth.json")]}function wd(e=new Date().toISOString()){let r=_e(kv,["KYNVER_CODEX_BIN","CODEX_BIN"]);if(process.env.CODEX_API_KEY?.trim())return{providerId:"codex",ready:!0,authSource:"api_key_env",sessionFingerprint:It("CODEX_API_KEY"),checkedAt:e,note:"CODEX_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=yv().find(s=>gv(s)),n=$e(r,["login","status"],{okNote:"codex login status: authenticated",failPrefix:"codex login status"}),o=!!t&&n.ok;return{providerId:"codex",ready:o,authSource:"oauth_local",sessionFingerprint:t?Fe(t):void 0,checkedAt:e,note:o?"Local Codex OAuth session bound on runner":[n.note,t?void 0:"no ~/.codex/auth.json"].filter(Boolean).join("; ")}}import{existsSync as Rv}from"node:fs";import{homedir as bv}from"node:os";import Yi from"node:path";function vv(){let e=process.env.HERMES_HOME?.trim(),r=e?Yi.resolve(e):Yi.join(bv(),".hermes");return Yi.join(r,"auth.json")}function Zo(e=new Date().toISOString()){let r=_e("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=$e(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=vv(),o=Rv(n),s=Qo(r,["auth","status","openai-codex"],{okNote:"hermes openai-codex: logged in",failNote:"hermes openai-codex: not logged in"}),i=t.ok&&s.ok;return{path:"hermes_openai_codex",ready:i,authSource:i?"subscription_hermes":"none",sessionFingerprint:o?Fe(n):void 0,checkedAt:e,note:i?"Hermes openai-codex subscription session bound (ChatGPT Codex OAuth)":[t.note,s.note,o?void 0:"no ~/.hermes/auth.json"].filter(Boolean).join("; ")}}function Ot(e=new Date().toISOString()){let r=wd(e);if(r.ready)return{...r,path:"codex_cli"};let t=Zo(e);return t.ready?{providerId:"codex",ready:!0,authSource:t.authSource,sessionFingerprint:t.sessionFingerprint,checkedAt:t.checkedAt,note:t.note,path:"hermes_openai_codex",hermesOpenAiCodex:t}:{providerId:"codex",ready:!1,authSource:"none",checkedAt:e,path:"none",hermesOpenAiCodex:t,note:[r.note,t.note].filter(Boolean).join("; ")||"Codex CLI and Hermes openai-codex unavailable"}}var Cd=["low","medium","high"],_d={oauth_local:0,subscription_hermes:0,runner_token:1,api_key_env:2,none:3};function xd(e,r){let t=At(e);return r==="privileged"?t.supportsPrivilegedPlatformActions:r==="low"?t.supportsLowRiskOrchestration:!0}function Sv(e,r){let t=At(e.providerId),n=At(r.providerId),o=Cd.indexOf(t.costTier)-Cd.indexOf(n.costTier);if(o!==0)return o;let s=_d[e.binding.authSource]-_d[r.binding.authSource];return s!==0?s:e.providerId.localeCompare(r.providerId)}function Ji(e){let r=Rd().map(a=>({providerId:a.id,binding:e.inventory.bindings[a.id]})).filter(a=>a.binding.ready&&xd(a.providerId,e.riskClass));if(r.length===0)return null;let n=[...r].sort(Sv)[0],o="codex";if(n.providerId===o)return{providerId:n.providerId,binding:n.binding};let s=e.inventory.bindings[o],i;return xd(o,e.riskClass)?s.ready||(i=s.note??`${o} not bound`):i=`${e.riskClass} orchestration requires privileged-capable provider`,{providerId:n.providerId,binding:n.binding,escalatedFrom:o,escalatedReason:i}}import{existsSync as wv}from"node:fs";import{homedir as Cv}from"node:os";import _v from"node:path";var xv="claude";function Pv(){let e=Cv();return[_v.join(e,".claude",".credentials.json")]}function Pd(e=new Date().toISOString()){let r=_e(xv,["KYNVER_CLAUDE_BIN","CLAUDE_BIN"]);if(process.env.ANTHROPIC_API_KEY?.trim())return{providerId:"claude",ready:!0,authSource:"api_key_env",sessionFingerprint:It("ANTHROPIC_API_KEY"),checkedAt:e,note:"ANTHROPIC_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=$e(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=Pv().find(i=>wv(i)),o=Qo(r,["auth","status"],{okNote:"claude auth status: authenticated",failNote:"claude auth status: not authenticated"}),s=t.ok&&(o.ok||!!n);return{providerId:"claude",ready:s,authSource:"oauth_local",sessionFingerprint:n?Fe(n):void 0,checkedAt:e,note:s?"Local Claude Code OAuth session bound on runner":[t.note,o.note,n?void 0:"no ~/.claude/.credentials.json"].filter(Boolean).join("; ")}}import{existsSync as Ev}from"node:fs";import{homedir as Av}from"node:os";import Iv from"node:path";var Ov="agent";function Nv(){let e=Av();return[Iv.join(e,".config","cursor","auth.json")]}function Ed(e=new Date().toISOString()){let r=_e(Ov,["KYNVER_CURSOR_AGENT_BIN","CURSOR_AGENT_BIN"]);if(process.env.CURSOR_API_KEY?.trim())return{providerId:"cursor",ready:!0,authSource:"api_key_env",sessionFingerprint:It("CURSOR_API_KEY"),checkedAt:e,note:"CURSOR_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=$e(r,["-v"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=Nv().find(s=>Ev(s)),o=!!n&&t.ok;return{providerId:"cursor",ready:o,authSource:"oauth_local",sessionFingerprint:n?Fe(n):void 0,checkedAt:e,note:o?"Local Cursor/Composer OAuth session bound on runner":[t.note,n?void 0:"no ~/.config/cursor/auth.json"].filter(Boolean).join("; ")}}import{existsSync as Tv,readFileSync as Dv}from"node:fs";import{homedir as Mv}from"node:os";import qi from"node:path";var Uv=["OPENAI_API_KEY","ANTHROPIC_API_KEY","KYNVER_API_KEY","KYNVER_BASE_URL"];function Wv(){let e=process.env.HERMES_HOME?.trim(),r=e?qi.resolve(e):qi.join(Mv(),".hermes");return qi.join(r,".env")}function Bv(e){try{let r=Dv(e,"utf8"),t=[];for(let n of Uv)new RegExp(`^${n}=`,"m").test(r)&&t.push(n);return t}catch{return[]}}function Ad(e=new Date().toISOString()){let r=_e("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=$e(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=Wv(),o=Tv(n),s=o?Bv(n):[],a=s.some(c=>c.endsWith("_API_KEY"))?"api_key_env":o?"oauth_local":"none",l=t.ok&&o;return{adapterId:"hermes",cliAvailable:t.ok,profileBound:o,authSource:a,sessionFingerprint:o?Fe(n):void 0,checkedAt:e,note:l?`Hermes profile bound (${s.length?`keys: ${s.join(", ")}`:"no API keys detected"})`:[t.note,o?void 0:"no ~/.hermes/.env"].filter(Boolean).join("; ")}}function Id(e={}){let r=e.nowIso?.()??new Date().toISOString(),t=Ot(r),n={codex:t,cursor:Ed(r),claude:Pd(r)},o=Object.values(n).filter(s=>s.ready).length;return{generatedAt:r,bindings:n,cloudApiCredits:{anthropicApiKey:!!process.env.ANTHROPIC_API_KEY?.trim(),openaiApiKey:!!process.env.OPENAI_API_KEY?.trim(),codexApiKey:!!process.env.CODEX_API_KEY?.trim()},hermes:Ad(r),hermesOpenAiCodex:Zo(r),codexAdapterPath:t.path,readyCount:o}}var Lv=[/\bprivileged\b/i,/\bproduction\s+db\b/i,/\bdb:push\b/i,/\bmigration\b/i,/\bdeploy\b/i,/\bsecrets?\b/i,/\bstripe\b/i,/\[require-approval\]/i,/\[operator-only\]/i],Hv=[/\borchestration\b/i,/\bplan[- ]?progress\b/i,/\bstatus\s+sync\b/i,/\bheartbeat\b/i,/\bboard[- ]?drain\b/i,/\bmaintenance\b/i,/\[orchestration:\s*low-risk\]/i];function zi(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Fv(e){let r=zi(e,"executorRef").toLowerCase(),t=zi(e,"title").toLowerCase(),n=zi(e,"description").toLowerCase(),o=`${r}
 ${t}
-${n}`;return Ev.some(s=>s.test(o))?"privileged":r.includes("provider:claude")||r.includes("deep_review")||r.includes("security")||r.includes("landing")||r.includes("review")||t.startsWith("land:")||r.includes("implementer")||r.includes("repair")||t.includes("implement")?"elevated":Av.some(s=>s.test(o))?"low":"elevated"}function Ov(e){let r=xt(e.provider),t=e.escalatedFrom&&e.escalatedReason?`Escalated from ${e.escalatedFrom} (${e.escalatedReason}); using ${r.displayName} (${r.costTier} tier)`:`${r.displayName} selected for ${e.riskClass} orchestration (${r.costTier} tier, auth=${e.authSource})`;return{provider:e.provider,model:e.model,authSource:e.authSource,costTier:r.costTier,riskClass:e.riskClass,costRationale:t,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason}}function Nv(e){let r=e.inventory??wd();return e.codexBinding?{...r,bindings:{...r.bindings,codex:e.codexBinding}}:r}function Lr(e){let r=Ov({provider:e.providerId,model:e.model,authSource:e.binding.authSource,riskClass:e.riskClass,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason});return{provider:e.providerId,model:e.model,rule:r.routingRule,audit:r}}function Cd(e){let r=e.task??{},t=Iv(r),n=Nv({inventory:e.inventory,codexBinding:e.codexBinding??(e.inventory?null:Et())}),o=e.preferLowCost===!1?null:e.explicitProvider?.trim().toLowerCase(),s=e.explicitModel?.trim()||void 0,i=or;if(o==="codex"||o==="provider:codex"){let c=n.bindings.codex;if(!c.ready){let u=Fi({inventory:n,riskClass:t});return Lr(u?{providerId:u.providerId,binding:u.binding,riskClass:t,routingRule:"orchestration:explicit_codex_unavailable_cost_aware",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"}:{providerId:i,binding:n.bindings[i],riskClass:t,routingRule:"orchestration:codex_unavailable_escalate_cursor",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"})}return Lr({providerId:"codex",binding:c,riskClass:t,routingRule:"orchestration:explicit_codex",model:s})}if(o==="cursor"||o==="provider:cursor"){let c=n.bindings.cursor;if(c.ready)return Lr({providerId:"cursor",binding:c,riskClass:t,routingRule:"orchestration:explicit_cursor",model:s})}if(o==="claude"||o==="provider:claude"){let c=n.bindings.claude;if(c.ready)return Lr({providerId:"claude",binding:c,riskClass:t,routingRule:"orchestration:explicit_claude",model:s})}let a=Fi({inventory:n,riskClass:t});if(a)return Lr({providerId:a.providerId,binding:a.binding,riskClass:t,routingRule:`orchestration:cost_aware_${a.providerId}`,model:s,escalatedFrom:a.escalatedFrom,escalatedReason:a.escalatedReason});let l=n.bindings.codex;return Lr({providerId:i,binding:n.bindings[i],riskClass:t,routingRule:l.ready?"orchestration:inventory_empty_default_cursor":"orchestration:codex_unavailable_default_cursor",model:s,...l.ready?{}:{escalatedFrom:"codex",escalatedReason:l.note??"codex oauth not bound"}})}nt();w();import{closeSync as _d,openSync as xd}from"node:fs";import{spawn as Bv}from"node:child_process";var Tv=/-(?:thinking(?:-(?:high|medium|low|minimal|max|none))?|high|medium|low|minimal)$/i;function Dv(e){return e.replace(Tv,"")}var Mv=/^(?:gpt-|gpt5|o1|o3|o4|gemini-|grok-|composer|deepseek|llama|mistral|qwen|command-)/i;function ji(e){return/^claude[-_]/i.test(e)||/^(?:opus|sonnet|haiku)\b/i.test(e)}var Uv=new Set(["cursor"]);function Wv(e){let r=e.trim().toLowerCase();return Uv.has(r)?"auto":null}function Vi(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let o=Dv(t).trim()||r;return Mv.test(o)||!ji(o)&&o!==r?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is not a Claude model \u2014 the "claude" provider drives the Claude CLI, which only accepts claude-* model ids (got "${o}"). Pick a Claude model or switch the worker provider.`}:o!==t?{ok:!0,model:o,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${o}" (the Claude CLI rejects reasoning-effort suffixes)`}:{ok:!0,model:o,normalized:!1}}function At(e,r){let t=(e??"").trim();return t?ji(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "codex". Switch the provider or pick a Codex/OpenAI model.`}:{ok:!0,model:t,normalized:!1}:{ok:!0,model:r,normalized:!1}}function Gi(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let n=Wv(t);return n?{ok:!0,model:n,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${n}" (Cursor provider alias \u2014 use "auto" or a composer id, not "cursor")`}:ji(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "cursor". Switch the provider to "claude" or pick a Cursor model.`}:{ok:!0,model:t,normalized:!1}}var It="claude-sonnet-4-6",Pd={name:"claude",defaultModel:It,preflightModel(e){return Vi(e,It)},start(e){let r=Vi(e.model,It);if(!r.ok)throw new Error(`claude provider model preflight failed: ${r.note}`);let t=r.model,n=xd(e.stdoutPath,"a"),o=xd(e.stderrPath,"a"),s=["ignore",n,o],i=Bv("claude",["--model",t,"-p","--verbose","--permission-mode","bypassPermissions","--output-format","stream-json","--include-partial-messages",e.prompt],ce({cwd:e.worktreePath,detached:!0,stdio:s,env:Xe(process.env)}));if(_d(n),_d(o),!i.pid)throw new Error("failed to spawn claude worker process (is the `claude` CLI on PATH?)");return i.unref(),{pid:i.pid,model:t}}};nt();w();import{closeSync as Od,existsSync as $v,openSync as Nd}from"node:fs";import{spawn as Td}from"node:child_process";nt();w();import{closeSync as Ed,openSync as Ad}from"node:fs";import{spawn as Lv}from"node:child_process";var Yi=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4";function Hv(){return Xe({...process.env,CI:"1",NO_COLOR:"1",HERMES_ACCEPT_HOOKS:process.env.HERMES_ACCEPT_HOOKS??"1"})}function Fv(e,r){let t=process.env.KYNVER_HERMES_CODEX_MAX_TURNS?.trim()||"40";return["chat","-q",r,"--provider","openai-codex","-m",e,"-Q","--accept-hooks","--max-turns",t,"--toolsets","hermes-cli"]}var Id={name:"hermes-codex",defaultModel:Yi,preflightModel(e){return At(e,Yi)},start(e){let r=At(e.model,Yi);if(!r.ok)throw new Error(`hermes-codex provider model preflight failed: ${r.note}`);let t=r.model,n=Ad(e.stdoutPath,"a"),o=Ad(e.stderrPath,"a"),s=["ignore",n,o],i=_e("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),a=Fv(t,e.prompt),l=Lv(i,a,ce({cwd:e.worktreePath,detached:!0,shell:!1,stdio:s,env:Hv()}));if(Ed(n),Ed(o),!l.pid)throw new Error(`failed to spawn Hermes openai-codex worker (is \`${i}\` on PATH? run \`hermes auth status openai-codex\`)`);return l.unref(),{pid:l.pid,model:t}}};function Kv(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4"}var Hr=Kv();function jv(){return process.env.KYNVER_CODEX_BIN?.trim()||process.env.CODEX_BIN?.trim()||"codex"}function Vv(){return Xe({...process.env,CI:"1",NO_COLOR:"1"})}function Gv(e,r){return["exec","--sandbox","read-only","--ask-for-approval","never","--model",e,r]}function Yv(e,r,t){if(!(process.platform!=="win32"&&$v("/usr/bin/script")))return Td(e,r,t);let o=[e,...r].map(s=>`'${s.replace(/'/g,"'\\''")}'`).join(" ");return Td("script",["-qfc",o,"/dev/null"],t)}var Dd={name:"codex",defaultModel:Hr,preflightModel(e){return At(e,Hr)},start(e){if(Et().path==="hermes_openai_codex")return Id.start(e);let t=At(e.model,Hr);if(!t.ok)throw new Error(`codex provider model preflight failed: ${t.note}`);let n=t.model,o=Nd(e.stdoutPath,"a"),s=Nd(e.stderrPath,"a"),i=["ignore",o,s],a=jv(),l=Gv(n,e.prompt),c=Yv(a,l,ce({cwd:e.worktreePath,detached:!0,shell:!1,stdio:i,env:Vv()}));if(Od(o),Od(s),!c.pid)throw new Error(`failed to spawn Codex worker (is \`${a}\` on PATH? run \`codex login\` or set CODEX_API_KEY)`);return c.unref(),{pid:c.pid,model:n}}};var Jv="claude-sonnet-4-6",Li="composer-2.5";function Yo(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Md(e){return e.toLowerCase()}function qi(e=v()){let r=e.defaultModel?.trim();if(r)return r;let t=process.env.KYNVER_DEFAULT_MODEL?.trim();return t||Jv}function Ji(e){let r=(e??"").toLowerCase();return!r||r.includes("composer")||r.includes("cursor")||r.includes("codex")||r.startsWith("gpt-")||r.startsWith("gpt5")?"cursor":/^claude[-_]/i.test(r)||/^(?:opus|sonnet|haiku)\b/i.test(r)?"claude":"cursor"}function qv(e,r){let t=e.trim().toLowerCase(),n=r?.trim();return t==="cursor"?{model:Li,provider:"cursor",rule:n&&n!=="cursor"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:t==="claude"||t==="anthropic"?{model:It,provider:"claude",rule:n&&n!=="claude"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:null}function Ud(e,r){return!!(e.includes("deep")&&e.includes("review")||e.includes("security")||e.includes("plan_author")||e.includes("plan-author")||r.includes("deep review")||r.includes("security review")||e.includes("plan")&&!e.includes("review")&&(e.includes("author")||e.includes("strategy")))}function zv(e){let r=Md(Yo(e,"executorRef")),t=Yo(e,"title").toLowerCase(),n=Yo(e,"priority")||"normal",o=Md(Yo(e,"roleLane"));if(r.includes("provider:codex")||r.startsWith("codex:"))return{provider:"codex",model:Hr,rule:"lane:codex_orchestration"};if(r.includes("cursor")||r.includes("composer")||r.includes("copilot")||o==="implementer"||o==="repair_implementer")return{provider:"cursor",rule:"lane:implementation"};if(r.includes("codex"))return{provider:"codex",model:Hr,rule:"lane:codex_orchestration"};if(r.includes("landing")||t.startsWith("land:")||t.includes(" merge"))return{provider:"cursor",rule:"lane:landing"};if(r.includes("review")||/^review[\s:]/.test(t)||o.includes("review"))return Ud(r,t)||o==="deep_reviewer"?{provider:"cursor",rule:"lane:deep_review"}:{provider:"cursor",rule:"lane:review"};if(Ud(r,t)||o==="plan_author")return{provider:"cursor",rule:"lane:planning"};if(n==="critical")return{provider:"cursor",rule:"priority:critical"};if(n==="high")return{provider:"cursor",rule:"priority:high"};if(n==="low")return{provider:"cursor",rule:"priority:low"};let s=qi();return{model:s,provider:Ji(s),rule:"default:global"}}function Jo(e){let r;if(e.explicitModel?.trim()){let o=e.explicitModel.trim(),s=qv(o,e.explicitProvider);s?r=s:r={model:o,provider:e.explicitProvider?.trim()||Ji(o),rule:"explicit:cli",requestedModel:o}}else if(e.task&&Object.keys(e.task).length>0){let o=zv(e.task);r={...o,requestedModel:o.model}}else{let o=qi();r={model:o,provider:e.explicitProvider?.trim()||Ji(o),rule:"default:global",requestedModel:o}}let t=ud({routing:r,task:e.task,explicitProvider:e.explicitProvider,explicitProviderIsOperatorOverride:e.explicitProviderIsOperatorOverride});if(!e.task||Object.keys(e.task).length===0||t.rule==="explicit:model_provider_alias"||t.rule==="explicit:model_provider_alias_overrode_provider"||t.rule==="explicit:cli"||Br(t.provider)&&(e.explicitProviderIsOperatorOverride||Bi(e.task)))return t;let n=Cd({task:e.task,explicitProvider:e.explicitProvider??t.provider,explicitModel:t.model});return{provider:n.provider,model:n.provider==="codex"?n.model??t.model??Hr:t.model,rule:n.rule,requestedModel:t.requestedModel,orchestrationAudit:n.audit}}function Wd(e,r,t){return e||r||t||qi()||It}function Bd(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Ld(){return{maxTaskAttempts:Bd(process.env.KYNVER_MAX_TASK_ATTEMPTS,Math.floor(wt("harness.maxTaskAttempts",4))),dispatchCooldownMs:Bd(process.env.KYNVER_DISPATCH_COOLDOWN_MS,Math.floor(wt("harness.dispatchCooldownMs",5e3)))}}I();import Zv from"node:path";W();J();w();var zi="kynver-harness:",Hd="@runner:";function Xi(e){return e?.trim()?e.trim():null}function Xv(e){let r=Xi(e);if(!r?.startsWith(zi))return null;let t=r.slice(zi.length),n=t.indexOf(Hd);return n>=0?t.slice(0,n).trim()||null:t.trim()||null}function Qi(e,r){let t=e.trim(),n=r.trim();return`${zi}${t}${Hd}${n}`}function Zi(e,r){let t=Xi(r);return t?Xv(e)===t:!1}function qo(e){let r=Xi(e.workerLeaseOwner);return r&&Zi(r,e.runId)?r:Qi(e.runId,e.runnerId)}import Fd from"node:os";Ie();Ie();import Qv from"node:os";function zo(e,r){let t=(r??Qv.hostname()).trim().toLowerCase().replace(/\s+/g,"-")||"unknown-host";return`${e}:${t}`}function kr(e){return e?.trim()?e.trim():null}function $e(e={}){let r=e.env??process.env;return{runnerId:kr(r.KYNVER_RUNTIME_ID)??kr(r.OPENCLAW_RUNTIME_ID)??kr(r.HOSTNAME)??Fd.hostname(),hostname:kr(r.HOSTNAME)??Fd.hostname(),profile:kr(r.KYNVER_RUNNER_PROFILE)??kr(r.OPENCLAW_RUNNER_PROFILE),harnessRepo:kr(r.KYNVER_HARNESS_REPO)??kr(r.KYNVER_DEFAULT_REPO),runId:e.runId??null,instructionBundleVersion:Mr()}}function $d(e,r){return _(Zv.join(P(e),"workers",R(r),"worker.json"),void 0)}async function Xo(e,r){let t=B(e),n=String(r.agentOsId||"");if(!n)return{renewed:[],failed:[],skipped:[]};let o=$(r.baseUrl?String(r.baseUrl):void 0),s=await V(r.secret?String(r.secret):void 0,n,{baseUrl:o}),i=Number(r.leaseMs)>0?Math.floor(Number(r.leaseMs)):ea,a=$e({runId:e}).runnerId,l=[],c=[],u=[];for(let d of Object.keys(t.workers||{})){let f=$d(e,d);if(!f?.taskId||!f.agentOsId){u.push(d);continue}if(!F(f.pid)){u.push(d);continue}if(N(f).status==="done"){u.push(d);continue}let p=qo({runId:e,workerLeaseOwner:f.leaseOwner??null,runnerId:a}),g=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(f.taskId)}/renew-lease`,k=await X(g,s,{leaseOwner:p,leaseDurationMs:i,...f.leaseToken?{leaseToken:f.leaseToken}:{}},{agentOsId:n,baseUrl:o});if(k.ok){l.push(d);continue}let h=k.response&&typeof k.response=="object"&&"reason"in k.response?String(k.response.reason??`http ${k.status}`):`http ${k.status}`;c.push({worker:d,reason:h})}return{renewed:l,failed:c,skipped:u}}function Kd(e,r){let t=B(e);for(let n of Object.keys(t.workers||{})){let o=$d(e,n);if(!(!o||o.taskId!==r||!F(o.pid)||N(o).status==="done"))return!0}return!1}Se();W();W();import{existsSync as yw,mkdirSync as Rw}from"node:fs";import Nt from"node:path";var eS=/<!--\s*harness-contract:\s*(\{[\s\S]*?\})\s*-->/i,rS="next-action-fix:";function Qo(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function jd(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:Qo(e)}function tS(e){let r=(e.title??"").trim().toLowerCase();if(r.startsWith("fix:")||r.startsWith("repair:"))return!0;let t=(e.executorRef??"").toLowerCase();return!!(t.startsWith(rS)||t.includes("repair")||t.includes("unblock"))}function nS(e){let r={repairEnforceOriginalPr:!1,targetPrUrl:null,targetPrBranch:null};if(!e)return r;let t=e.match(eS);if(!t?.[1])return r;try{let n=JSON.parse(t[1]),o=Qo(String(n.targetPrUrl??n.target_pr_url??"")),s=Qo(String(n.targetPrBranch??n.target_pr_branch??""));return{repairEnforceOriginalPr:n.repairEnforceOriginalPr===!0||n.repair_enforce_original_pr===!0||!!o,targetPrUrl:o?jd(o):null,targetPrBranch:s}}catch{return r}}function Vd(e){if(!tS(e))return null;let r=nS(e.description),t=e.prUrl?jd(e.prUrl):null,n=r.targetPrUrl??t;return n?{targetPrUrl:n,targetPrBranch:r.targetPrBranch??Qo(e.branch)}:null}function Gd(e){return["Repair target PR policy:","- Work on the existing target PR branch \u2014 do not open a duplicate repair PR by default.",`- Canonical target PR: ${e.targetPrUrl}`,...e.targetPrBranch?[`- Canonical target branch: \`${e.targetPrBranch}\` (checkout is already on this branch).`]:[],`- Reconcile ${e.targetPrUrl} in structured finalResult.targetPrReconciliation.`,"- Only supersede the original when the branch is inaccessible: set supersedesOriginalTargetPr: true with reason and close/comment on the original PR."]}function Yd(e){let r=e.ownedPaths.length?`Owned paths: ${e.ownedPaths.join(", ")}. Do not edit outside these paths without stopping and reporting why.`:"Owned paths: unrestricted for this worker, but keep edits tightly scoped.",t=!!e.model?.toLowerCase().includes("haiku"),n=t?"compact":"full",o=t?e.planId?`Active planId: ${e.planId}`:"No planId on this worker.":e.planId?`Active planId: ${e.planId}${e.taskId?` \xB7 taskId: ${e.taskId}`:""}`:"No planId on this worker \u2014 still emit progress when you touch plan-scoped work.",s=[...bn(`worker.prompt.progress.${n}`).split(`
-`),o],i=bn(`worker.prompt.merge_gate.${n}`).split(`
-`),a=bn(`worker.prompt.plan_artifacts.${n}`).split(`
-`);return["You are running under the Kynver AgentOS runtime.","Immediately state your plan before editing.",r,`Worktree: ${e.worktreePath}`,`Progress heartbeat file: ${e.heartbeatPath}`,"After each major step, append one JSON line to the heartbeat file with fields: ts, phase, summary, changedFiles, blocker.","Final response must include files changed, verification commands, and unresolved risks.",...bn("worker.prompt.core_rules").split(`
-`),"",...s,"",...i,"",...a,"",...e.contextEnvelopeMarkdown?.trim()?[e.contextEnvelopeMarkdown.trim(),""]:[],...e.personaMarkdown?.trim()?[e.personaMarkdown.trim(),""]:[],...e.instructionPolicyMarkdown?.trim()?["Operating rules (from AgentOS memory policy):",e.instructionPolicyMarkdown.trim(),""]:[],...e.memoryQualityMarkdown?.trim()?[e.memoryQualityMarkdown.trim(),""]:[],...e.repairTargetPrUrl?[...Gd({targetPrUrl:e.repairTargetPrUrl,targetPrBranch:e.repairTargetBranch??null}),""]:[],"Task:",e.task].join(`
-`)}w();I();w();nt();import{closeSync as ta,existsSync as qd,mkdirSync as lS,openSync as na,statSync as cS,unlinkSync as Jd}from"node:fs";import{spawn as uS}from"node:child_process";import dS from"node:os";import Ke from"node:path";import{existsSync as xn,readdirSync as oS}from"node:fs";import Fr from"node:path";var sS=/^\d{4}\.\d{1,2}\.\d{1,2}-[a-f0-9]+$/i;function iS(e){let t=e.split("-")[0].split(".");if(t.length!==3)return null;let[n,o,s]=t;return!n||!o||!s?null:+`${n}${o.padStart(2,"0")}${s.padStart(2,"0")}`}function aS(e){let r=Fr.join(e,"versions");if(!xn(r))return null;let t=null,n=-1;for(let o of oS(r,{withFileTypes:!0})){if(!o.isDirectory()||!sS.test(o.name))continue;let s=iS(o.name);s==null||s<=n||(n=s,t=Fr.join(r,o.name))}return t}function Zo(e){let r=e?.trim()||Fr.join(process.env.LOCALAPPDATA||"","cursor-agent"),t=Fr.join(r,"node.exe"),n=Fr.join(r,"index.js");if(xn(t)&&xn(n))return{nodeExe:t,indexJs:n,versionDir:r};let o=aS(r);if(!o)return null;let s=Fr.join(o,"node.exe"),i=Fr.join(o,"index.js");return!xn(s)||!xn(i)?null:{nodeExe:s,indexJs:i,versionDir:o}}var ra="composer-2.5",pS=15e3,mS=6e4,fS=3e4;function gS(e,r,t){return{executable:e,prefixArgs:[r],shell:!1,detached:!0,bundledVersionDir:t}}function hS(e){if(process.platform==="win32"){let r=/\.(cmd|bat)$/i.test(e),t=/node\.exe$/i.test(e)&&qd(Ke.join(Ke.dirname(e),"index.js"));if(r||t||e==="agent"){let o=r?Zo(Ke.dirname(e)):t?{nodeExe:e,indexJs:Ke.join(Ke.dirname(e),"index.js"),versionDir:Ke.dirname(e)}:Zo();if(o)return gS(o.nodeExe,o.indexJs,o.versionDir);throw new Error("Cursor Agent on Windows has no headless bundled node.exe under %LOCALAPPDATA%\\cursor-agent\\versions\\\u2026. Run `agent login` / update Cursor Agent CLI, use `--provider claude`, or set KYNVER_CURSOR_AGENT_ROOT to the cursor-agent folder.")}}return{executable:e,prefixArgs:[],shell:!1,detached:!0}}function kS(){let e=process.env.KYNVER_CURSOR_AGENT_BIN?.trim()||process.env.CURSOR_AGENT_BIN?.trim();if(e)return e;if(process.platform==="win32"){let r=Zo(process.env.KYNVER_CURSOR_AGENT_ROOT?.trim()||void 0);if(r)return r.nodeExe;let t=Ke.join(process.env.LOCALAPPDATA||"","cursor-agent","agent.cmd");if(qd(t))return t}return"agent"}function yS(e,r){return Xe({...process.env,CI:"1",NO_COLOR:"1",...r.bundledVersionDir?{CURSOR_INVOKED_AS:Ke.basename(e)||"agent.cmd"}:{}})}function zd(e){e<=0||Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function oa(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?Math.floor(n):r}function RS(){let e=process.env.KYNVER_CURSOR_START_LOCK_DIR?.trim()||Ke.join(dS.homedir(),".kynver","locks");return lS(e,{recursive:!0}),Ke.join(e,"cursor-agent-start.lock")}function bS(){if(process.env.KYNVER_CURSOR_START_LOCK==="0")return()=>{};let e=RS(),r=oa("KYNVER_CURSOR_START_LOCK_TIMEOUT_MS",mS),t=oa("KYNVER_CURSOR_START_LOCK_STALE_MS",fS),n=Date.now();for(;;)try{let o=na(e,"wx");return ta(o),()=>{try{Jd(e)}catch{}}}catch(o){if(o.code!=="EEXIST")throw o;try{if(Date.now()-cS(e).mtimeMs>t){Jd(e);continue}}catch{continue}if(Date.now()-n>r)throw new Error(`timed out waiting for Cursor agent start lock: ${e}`);zd(250)}}var Xd={name:"cursor",defaultModel:ra,preflightModel(e){return Gi(e,ra)},start(e){let r=Gi(e.model,ra);if(!r.ok)throw new Error(`cursor provider model preflight failed: ${r.note}`);let t=r.model,n=na(e.stdoutPath,"a"),o=na(e.stderrPath,"a"),s=["ignore",n,o],i=kS(),a=hS(i),l=bS(),c;try{c=uS(a.executable,[...a.prefixArgs,"-p","--force","--trust","--workspace",e.worktreePath,"--output-format","stream-json","--stream-partial-output","--model",t,e.prompt],ce({cwd:e.worktreePath,detached:a.detached,shell:a.shell,stdio:s,env:yS(i,a)})),zd(oa("KYNVER_CURSOR_START_LOCK_HOLD_MS",pS))}finally{l(),ta(n),ta(o)}if(!c.pid)throw new Error(`failed to spawn Cursor agent worker (is \`${i}\` on PATH? run \`agent login\` or set CURSOR_API_KEY)`);return c.unref(),{pid:c.pid,model:t}}};var es={claude:Pd,codex:Dd,cursor:Xd},Qd=null;function Zd(e){if(Qd)return Qd;let r=e?.trim();if(r){let o=es[r];if(!o)throw new Error(`unknown worker provider "${r}" \u2014 supported: ${Object.keys(es).join(", ")}`);return o}let t=jo(v().workerProvider),n=es[t];if(!n)throw new Error(`unknown worker provider "${t}" \u2014 supported: ${Object.keys(es).join(", ")}`);return n}w();import{spawn as lw}from"node:child_process";import{existsSync as cw,openSync as uw,closeSync as Hp}from"node:fs";import Fp from"node:path";import{fileURLToPath as dw}from"node:url";W();function rs(e){return!!e.completionReportedAt?.trim()}function sa(e,r,t){e.completionReportedAt=t.completionReportedAt,e.completionOutcome=t.completionOutcome,t.completionResponse!==void 0&&(e.completionResponse=t.completionResponse),G(r,e)}function vS(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function ia(e){return!!(vS(e.completionBlocker)||e.completionOutcome==="rejected")}function $r(e){return rs(e)&&!ia(e)}W();J();I();import On from"node:path";function aa(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function Pn(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}var SS=new Set(["review_scheduled","review_already_scheduled","skipped_terminal_task","closed","dispatched","dispatch_already_done"]);function ep(e){let r=aa(e);if(!r)return{routeOutcome:null,taskAdvanced:!1,detail:null};let t=Pn(r.outcome),n=Pn(r.detail)??Pn(r.error),o=aa(r.task),s=aa(r.closedTask),i=o?Pn(o.status):null,a=s?Pn(s.status):null,l=t!==null&&SS.has(t)||i==="awaiting_review"||i==="done"||a==="done";return{routeOutcome:t,taskAdvanced:l,detail:n}}function rp(e){return e.taskAdvanced}W();So();var wS="expert-lane-pr-review:",CS="plan-review-task",_S="scheduledjob:";function tp(e){if(!e)return null;let r=e.trim().toLowerCase();return r.length?r:null}function np(e){let r=(e.executorRef??"").toLowerCase();if(r.startsWith(wS)||r===CS||r.startsWith("daemon-review:"))return!0;if(r.startsWith(_S)&&e.parentTaskId){let n=tp(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}let t=(e.title??"").toLowerCase();if(t.includes("expert pr review"))return!0;if(e.parentTaskId&&(t.startsWith("review:")||t.includes("review required")||t.includes("runtime review"))){let n=tp(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}return!1}var op=/^(lane:)?(review|deep_review|planning|landing)(:|$)/i,xS=new Set(id()),PS=/no commits between/i;function sp(e){return!!(e&&PS.test(e))}function me(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function ip(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:me(e.head)}function ap(e){if(e==null)return null;let t=(typeof e=="string"?e:typeof e=="object"&&e!==null&&"summary"in e?String(e.summary??""):JSON.stringify(e)).match(/https?:\/\/[^\s)>"]+\/(?:pull|pulls|merge_requests|pull-requests)\/\d+/i);return t?me(t[0]):null}function ES(e,r,t){let n=r.trim();if(!n)return null;let o=t.git(e,["rev-list","--count",`${n}..HEAD`]);if(o.status!==0)return null;let s=Number.parseInt(o.stdout.trim(),10);return Number.isFinite(s)?s:null}function AS(e,r){if(r.changedFiles.length>0)return!1;let t=me(e.personaSlug)?.toLowerCase();if(t&&xS.has(t))return!0;let n=me(e.routingRule)??"";return!!(n&&op.test(n))}function IS(e,r){if(e.changedFiles.length>0)return!0;let t=me(r?.baseRef);if(t&&r?.exec&&r.worktreePath){let n=ES(r.worktreePath,t,r.exec);if(n===0)return!1;if(n!==null&&n>0)return!0}return!!(me(e.headCommit)||ip(e.gitAncestry))}function lp(e){if(!e.dispatched)return{required:!1,reason:"not_dispatched"};if(np({title:e.taskTitle??void 0,personaSlug:e.personaSlug,parentTaskId:e.parentTaskId,executorRef:e.executorRef}))return{required:!1,reason:"expert_review_task"};let r=me(e.routingRule)??"";if(r&&op.test(r))return{required:!1,reason:"review_lane"};let t=e.worker??{personaSlug:e.personaSlug,routingRule:e.routingRule};if(AS(t,e.snapshot))return{required:!1,reason:"review_artifact"};if(me(e.patchPath)||me(e.artifactBundlePath))return{required:!1,reason:"patch_or_bundle"};if(me(e.repairTargetPrUrl))return{required:!1,reason:"repair_target_pr"};if(me(e.prUrl)??me(e.taskPrUrl)??me(e.snapshot.prUrl))return{required:!1,reason:"already_has_pr"};let s=e.exec&&e.baseRef?{baseRef:e.baseRef,exec:e.exec,worktreePath:e.snapshot.worktreePath}:void 0;return IS(e.snapshot,s)?{required:!0,snapshot:e.snapshot}:{required:!1,reason:"no_work_product"}}function cp(e,r){return{changedFiles:e.changedFiles,branch:e.branch,worktreePath:e.worktreePath,gitAncestry:e.gitAncestry,finalResult:e.finalResult,headCommit:me(r?.headCommit)??ip(e.gitAncestry),prUrl:me(r?.prUrl)??null}}import{spawnSync as OS}from"node:child_process";function dp(e){let r=e.trim();if(!r)return null;let t=r.match(/^git@github\.com:([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(t)return up(t[1]);let n=r.match(/^ssh:\/\/git@github\.com\/([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(n)return up(n[1]);try{let o=new URL(r.includes("://")?r:`https://${r}`);if(o.hostname.toLowerCase()!=="github.com")return null;let s=o.pathname.replace(/^\/+|\/+$/g,"").split("/");if(s.length<2)return null;let[i,a]=s;return!i||!a?null:`${i}/${a.replace(/\.git$/i,"")}`}catch{return null}}function up(e){let r=e.split("/").filter(Boolean);if(r.length<2)return null;let t=r[0],n=r[1].replace(/\.git$/i,"");return t&&n?`${t}/${n}`:null}Se();function NS(e,r,t){try{let n=OS(e,t,{cwd:r,encoding:"utf8"});return{status:n.status,stdout:(n.stdout||"").trim(),stderr:(n.stderr||"").trim(),error:n.error?n.error.message:null}}catch(n){return{status:null,stdout:"",stderr:"",error:n.message}}}var ns={git:(e,r)=>re(e,r),gh:(e,r)=>NS("gh",e,r)};function TS(e){return e.split(`
-`).map(r=>r.trim()).find(Boolean)??""}function pp(e,r){let t=r.git(e,["remote","get-url","origin"]);return t.status!==0?null:dp(t.stdout)}function En(e,r){let t=r.git(e,["rev-parse","HEAD"]);return t.status!==0?null:t.stdout.trim()||null}function ts(e,r,t,n){let o=n.gh(e,["pr","list","--repo",r,"--head",t,"--state","open","--json","url","--limit","1"]);if(o.status!==0)return null;try{return JSON.parse(o.stdout)[0]?.url?.trim()||null}catch{return null}}function os(e){let{worktreePath:r,branch:t,commitMessage:n,hasDirtyFiles:o,exec:s}=e;if(o){let l=s.git(r,["add","-A"]);if(l.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:l.stderr||l.stdout||l.error||"git add failed"};let c=s.git(r,["commit","-m",n]);if(c.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:c.stderr||c.stdout||c.error||"git commit failed"}}let i=s.git(r,["push","-u","origin",t]);if(i.status!==0)return{ok:!1,committed:o,pushed:!1,detail:i.stderr||i.stdout||i.error||"git push failed"};let a=En(r,s)??void 0;return{ok:!0,committed:o,pushed:!0,headCommit:a}}function mp(e){let r=ts(e.worktreePath,e.repo,e.branch,e.exec);if(r)return{ok:!0,prUrl:r,created:!1};let t=e.exec.gh(e.worktreePath,["pr","create","--repo",e.repo,"--base",e.base,"--head",e.branch,"--title",e.title,"--body",e.body,"--draft"]);if(t.status!==0)return{ok:!1,detail:t.stderr||t.stdout||t.error||"gh pr create failed"};let n=DS(t.stdout)??ts(e.worktreePath,e.repo,e.branch,e.exec);return n?{ok:!0,prUrl:n,created:!0}:{ok:!1,detail:"gh pr create succeeded but no PR URL was parsed"}}function DS(e){let t=TS(e).match(/https?:\/\/[^\s]+\/pull\/\d+/i);return t?t[0]:null}function MS(e){return e.gh(process.cwd(),["--version"]).status===0}function US(e,r){return`AgentOS harness: ${e} (${r})`}function WS(e,r,t){return["Automated PR-ready handoff from the Kynver harness runtime.","",e?`AgentOS task: \`${e}\``:"",`Harness worker: \`${r}\` \xB7 run \`${t}\``,"","Opened by orchestrator completion enforcement so production review receives a reviewable artifact."].filter(Boolean).join(`
-`)}function la(e){if(e.snapshot.changedFiles.length===0)return{ok:!0,prUrl:e.prUrl,headCommit:e.snapshot.headCommit??En(e.snapshot.worktreePath,e.exec)??void 0};let r=os({worktreePath:e.snapshot.worktreePath,branch:e.snapshot.branch,commitMessage:e.commitMessage,hasDirtyFiles:!0,exec:e.exec});return r.ok?{ok:!0,prUrl:e.prUrl,headCommit:r.headCommit??e.snapshot.headCommit??void 0,committed:r.committed,pushed:r.pushed}:{ok:!1,reason:`PR-ready handoff blocked: ${r.detail??"git commit/push failed"}`,nextAction:"Commit and push the dirty worker changes to the existing PR branch, then rerun `kynver worker complete`."}}function ca(e,r=ns){let t=e.prUrlHint??ap(e.status.finalResult)??null,n=cp(e.status,{prUrl:t,headCommit:null}),o=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main";if(!lp({dispatched:e.worker.dispatched,routingRule:e.worker.routingRule,personaSlug:e.worker.personaSlug,prUrl:t,taskTitle:e.worker.taskTitle,executorRef:e.worker.executorRef,parentTaskId:e.worker.parentTaskId,taskPrUrl:e.worker.taskPrUrl,repairTargetPrUrl:e.worker.repairTargetPrUrl,baseRef:o,exec:r,worker:e.worker,snapshot:n}).required)return t?la({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r}):{ok:!0};if(t)return la({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});if(!MS(r)){let k=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${k?`${k} uncommitted change(s) with no PR URL`:"committed branch with no PR URL"}`,nextAction:"Install and authenticate GitHub CLI (`gh auth login`), then commit, push, and run `gh pr create` (or rerun `kynver worker complete` after the PR exists)."}}let i=pp(n.worktreePath,r);if(!i)return{ok:!1,reason:"PR-ready handoff blocked: could not resolve github.com origin for the worktree",nextAction:"Ensure `origin` points at GitHub, push the branch, open a PR, and rerun `kynver worker complete`."};let a=e.worker.repairTargetPrUrl?.trim();if(a){let k=!1,h=!1,b=n.headCommit??En(n.worktreePath,r)??void 0;if(n.changedFiles.length>0){let x=os({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`fix(harness): repair target PR ${a}`,hasDirtyFiles:!0,exec:r});if(!x.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${x.detail??"git commit/push failed"}`,nextAction:"Commit and push to the target PR branch, then rerun `kynver worker complete`."};k=x.committed,h=x.pushed,b=x.headCommit??b}else{let x=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(x.status!==0&&!/already up to date/i.test(x.stderr||x.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${x.stderr||x.stdout||"git push failed"}`,nextAction:"Push the target branch to origin, then rerun `kynver worker complete`."};h=x.status===0}return{ok:!0,prUrl:a,headCommit:b,committed:k,pushed:h}}let l=ts(n.worktreePath,i,n.branch,r);if(l)return la({snapshot:n,prUrl:l,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});let c=n.changedFiles.length>0,u=!1,d=!1,f=n.headCommit??void 0,m=os({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`chore(harness): PR-ready handoff for ${e.worker.name}`,hasDirtyFiles:c,exec:r});if(c&&!m.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${m.detail??"git commit/push failed"}`,nextAction:"Commit and push the branch, run `gh pr create`, then rerun `kynver worker complete`."};if(c){if(u=m.committed,d=m.pushed,!m.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${m.detail??"git push failed"}`,nextAction:"Fix git auth or merge conflicts, push the branch, run `gh pr create`, then rerun `kynver worker complete`."}}else{let k=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(k.status!==0&&!/already up to date/i.test(k.stderr||k.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${k.stderr||k.stdout||k.error||"git push failed"}`,nextAction:"Push the branch to origin, run `gh pr create`, then rerun `kynver worker complete`."};d=k.status===0}f=m.headCommit??f??En(n.worktreePath,r)??void 0;let p=e.run.base?.trim()||"main",g=mp({worktreePath:n.worktreePath,repo:i,branch:n.branch,base:p.replace(/^origin\//,""),title:US(e.worker.name,e.worker.runId),body:WS(e.worker.taskId,e.worker.name,e.worker.runId),exec:r});if(!g.ok||!g.prUrl){if(sp(g.detail))return{ok:!0,headCommit:f??void 0,committed:u,pushed:d};let k=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${k?`${k} uncommitted change(s) and no PR URL after handoff attempt`:"no PR URL after handoff attempt"}${g.detail?` (${g.detail})`:""}`,nextAction:"Run `gh pr create` on the worker branch (or fix `gh` auth), attach the PR URL to the task, then rerun `kynver worker complete`."}}return{ok:!0,prUrl:g.prUrl,headCommit:f??void 0,committed:u,pushed:d,created:g.created}}J();vo();function ss(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return n!=="node_modules"&&!n.startsWith("node_modules/")})}function fp(e){let r=e.trim();return r.startsWith("??")?r.slice(2).trim():r.length>3&&/^[ MADRCU?!]{2} /.test(r.slice(0,3))?r.slice(3).trim():r}function gp(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function hp(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function yp(e){let r=hp(e);if(!r)return[];let t=hp(r.worktreeHandoff),n=gp(t?.disposableArtifactsRemoved);return n.length?n:gp(r.disposableArtifactsRemoved)}function kp(e){return e.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"")}function Rp(e,r){let t=ss(e);if(t.length===0)return!0;if(r.length===0)return!1;let n=new Set(r.map(o=>kp(o)));return t.every(o=>{let s=kp(fp(o));return n.has(s)})}function is(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function bp(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function BS(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function LS(e){let r=bp(e.disposableArtifactsRemoved),t=yp(e.finalResult);return[...new Set([...r,...t])]}function vp(e){let r=bp(e.changedFiles),t=ss(r),n=LS(e),o=t.length===0||Rp(r,n);return is(e.prUrl)?o?{allowed:!0,state:"pr_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a PR attached; commit or discard before completing`}:is(e.headCommit)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) on top of a commit; commit or discard before completing`}:is(e.artifactBundlePath)||is(e.patchPath)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a patch/bundle handoff; clean the tree before completing`}:o?{allowed:!0,state:"clean",materialDirtyCount:0}:BS(e.finalResult)?{allowed:!1,state:"dirty_worktree_no_pr",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no commit or PR; commit, open a PR, discard, or remove one-off files via \`kynver worker discard-disposable\` before completing`}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no final result`}}W();J();w();import HS from"node:path";var FS=new Set(["awaiting_review","blocked","done","needs_input","waiting","scheduled","ready","cancelled","failed"]);function Sp(e){return!!(typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim())}function $S(e){if(typeof e=="string"){let r=e.trim();return r.length?r:null}if(e&&typeof e=="object"&&!Array.isArray(e)){let r=e,t=r.summary??r.finalSummary??r.message;if(typeof t=="string"&&t.trim())return t.trim();try{return JSON.stringify(e)}catch{return null}}return null}function KS(e){let r=e.finalResult??null,t=typeof e.lastHeartbeatSummary=="string"?e.lastHeartbeatSummary:$S(r);return{finalResult:r??t??"completed",summary:t}}function ua(e,r,t){if(Sp(e)&&e.status==="done"&&e.completionSnapshot!=null)return;let n=new Date().toISOString(),o=KS(r),s=t?.source?.trim();e.completionReportedAt=n,e.completionSnapshot=o,e.status="done",s&&(e.completionAckSource=s),G(e.runId,e)}function jS(e){let r=new Map,n=e.response?.tick?.filteredItems;if(!Array.isArray(n))return r;for(let o of n){if(o.kind!=="task"||typeof o.id!="string")continue;let s=typeof o.taskStatus=="string"?o.taskStatus.trim():"";s&&r.set(o.id,s)}return r}function wp(e,r){let t=jS(r);if(t.size===0)return[];let n=B(e),o=[];for(let s of Object.keys(n.workers||{})){let i=_(HS.join(P(n.id),"workers",R(s),"worker.json"),void 0);if(!i?.taskId||Sp(i))continue;let a=t.get(i.taskId);if(!a||a==="running"||!FS.has(a))continue;let l=N(i,{base:n.base,baseCommit:n.baseCommit});ua(i,l,{source:`board-task-${a}`}),o.push({worker:s,taskId:i.taskId,taskStatus:a})}return o}w();w();import VS from"node:path";var GS=/^[a-z0-9][a-z0-9._-]{0,127}$/i,YS=/^[a-z0-9][a-z0-9._-]{0,63}$/i,da=new Set(["undefined","null"]),Cp="usage: kynver worker <action> --run RUN_ID --name WORKER_NAME";function as(e){let r=e.trim();if(!GS.test(r))throw new Error(`invalid run id: ${e}`);return r}function JS(e){let r=e.trim();if(!YS.test(r))throw new Error(`invalid worker name: ${e}`);return r}function pa(e){return typeof e=="string"?e.trim():""}function je(e){let r=pa(e.run),t=pa(e.name);return(!r||da.has(r))&&ur(`missing --run RUN_ID (${Cp})`),(!t||da.has(t))&&ur(`missing --name WORKER_NAME (${Cp})`),{runId:as(r),workerName:JS(t)}}function ma(e){let r=pa(e.run);return(!r||da.has(r))&&ur("missing --run RUN_ID (usage: kynver run status --run RUN_ID)"),as(r)}function _p(e){let r=VS.resolve(e);if(r.includes(".."))throw new Error("repo path must not contain .. segments");return r}async function xp(e,r,t){let n=await fetch(e,{method:"POST",headers:Ne(r),body:JSON.stringify(t)}),o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,parsed:o}}function qS(e){if(e&&typeof e=="object"){let r=e.error;if(typeof r=="string"&&r.trim())return r.trim()}}function Pp(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function An(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function zS(e){return e.completionBlocker?`blocked:${e.completionBlocker}`:e.completionOutcome?e.completionOutcome:e.completionReportedAt?"completion_acknowledged":e.finished?"worker_finished":"in_progress"}function XS(e){return e.completionBlocker?"Resolve completion blocker, then rerun `kynver worker complete`.":e.completionOutcome==="review_scheduled"||e.completionOutcome==="review_already_scheduled"?"Await review lane and landing decision in Command Center.":e.completionOutcome==="needs_attention"?"Inspect blocker/attention reason in Command Center and dispatch a repair task.":e.finished&&!e.completionReportedAt?"Post completion acknowledgement to AgentOS (`kynver worker complete`).":null}function Ap(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function QS(e){return e.prUrl?"pr_handoff":e.headCommit?"commit_handoff":e.changedFiles.length>0?"dirty_worktree":"none"}function In(e,r){(e.completionBlocker??void 0)!==(r??void 0)&&(r?e.completionBlocker=r:delete e.completionBlocker,G(e.runId,e))}function ZS(e){e.completionBlocker&&(delete e.completionBlocker,G(e.runId,e))}function ls(e){return e?{base:e.base,baseCommit:e.baseCommit}:{}}function ew(e,r){return{...e,...r.prUrl?{prUrl:r.prUrl}:{},...r.headCommit?{headCommit:r.headCommit}:{}}}async function Nn(e){let{runId:r,workerName:t}=je(e),n=Re(r,t),o=B(n.runId),s=N(n,ls(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!oe(s))return{ok:!0,skipped:!0,reason:"worker-not-finished"};if(n.localOnly)return{ok:!0,skipped:!0,reason:"local-only-worker"};if(!i)return{ok:!1,reason:"missing agentOsId"};let l=e.force===!0||e.force==="true";if(!l&&$r(n))return{ok:!0,skipped:!0,reason:"completion-already-acknowledged",httpStatus:200};if(!l&&ia(n)&&ZS(n),!(e.skipPrHandoff===!0||e.skipPrHandoff==="true")&&n.dispatched&&a){let E=ca({worker:n,run:o,status:s});if(!E.ok)return In(n,E.reason),{ok:!1,reason:E.reason,nextAction:E.nextAction,completionBlocked:!0};(E.prUrl||E.headCommit)&&(s=N(n,ls(o)),s=ew(s,E))}let u=s.gitAncestry.headIsAncestorOfBase===!1&&s.gitAncestry.head?s.gitAncestry.head:s.headCommit;if(n.dispatched){let E=vp({changedFiles:s.changedFiles,finalResult:s.finalResult,prUrl:s.prUrl,headCommit:u,disposableArtifactsRemoved:n.disposableArtifactsRemoved});if(!E.allowed){let T=E.detail??`worktree completion blocked (${E.state})`;return In(n,T),{ok:!1,reason:T,nextAction:"Clean the worktree (commit, open a PR, or `kynver worker discard-disposable --path <file>`), then rerun `kynver worker complete`.",completionBlocked:!0}}}let d=$(e.baseUrl?String(e.baseUrl):void 0),f=e.secret?String(e.secret):void 0,m=await V(f,i,{baseUrl:d}),p=`${d}/api/agent-os/by-id/${encodeURIComponent(i)}/harness/completion`,g={...s};n.disposableArtifactsRemoved?.length&&(g.disposableArtifactsRemoved=n.disposableArtifactsRemoved);let k={source:"kynver-harness",agentOsId:i,runId:n.runId,workerName:n.name,taskId:a,leaseToken:n.leaseToken??null,startedAt:n.startedAt,finishedAt:s.lastActivityAt||new Date().toISOString(),status:n.leaseToken?{...g,leaseToken:n.leaseToken}:g,workerInjection:{instructionPolicyFingerprint:n.instructionPolicyFingerprint??null,instructionPolicyEvidence:n.instructionPolicyEvidence??null,memoryQualityCapture:n.memoryQualityCapture??null,policyAt:n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence=="object"&&"policyAt"in n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence.policyAt=="string"?n.instructionPolicyEvidence.policyAt:null,personaSlug:n.personaSlug??null,personaEvidence:n.personaEvidence??null,contextEnvelopeEvidence:n.contextEnvelopeEvidence??null}},h=await xp(p,m,k);if((h.status===401||h.status===403)&&!f){let E=await iu(i,{baseUrl:d});E&&E!==m&&(m=E,h=await xp(p,m,k))}if(h.ok){let E=ep(h.parsed);if(!rp(E)){let C=`completion acknowledged but board not advanced: ${E.detail??(E.routeOutcome?`harness completion returned ${E.routeOutcome}`:"harness completion did not advance the linked task")}`;In(n,C);let ae={completionReportedAt:new Date().toISOString(),completionOutcome:"rejected",completionResponse:h.parsed};return sa(n,n.runId,ae),{ok:!1,httpStatus:h.status,response:h.parsed,reason:C,completionBlocked:!0}}In(n,void 0);let T=E.routeOutcome??"acknowledged",K={completionReportedAt:new Date().toISOString(),completionOutcome:"acknowledged",completionResponse:h.parsed};sa(n,n.runId,K),ua(n,s,{source:"harness-completion"});let L=s.prUrl;return{ok:!0,httpStatus:h.status,response:h.parsed,reason:T,...L?{prHandoff:{prUrl:L}}:{}}}let b=h.status===401||h.status===403,x=qS(h.parsed)??(b?"runner token unauthorized":"non-2xx response"),M=b?`completion replay rejected (${h.status}): ${x}`:`completion replay failed (${h.status}): ${x}`;return In(n,M),{ok:!1,httpStatus:h.status,response:h.parsed,completionBlocked:!0}}async function ga(e){try{let{runId:r,workerName:t}=je(e),n=Re(r,t),o=B(n.runId),s=N(n,ls(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!oe(s)){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"worker-not-finished",workerStatus:s.status,alive:s.alive},null,2));return}if(n.localOnly){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"local-only-worker"},null,2));return}i||(console.error("worker complete requires --agent-os-id (or an agentOsId persisted at worker start)"),process.exit(1));let l=await Nn(e);console.log(JSON.stringify({worker:n.name,runId:n.runId,...l.skipped?{status:"skipped"}:{},...l.reason?{reason:l.reason}:{},...l.nextAction?{nextAction:l.nextAction}:{},...l.completionBlocked?{completionBlocked:l.completionBlocked}:{},agentOsId:i,taskId:a,httpStatus:l.httpStatus,response:l.response},null,2)),l.ok||process.exit(1)}catch(r){console.error(`worker complete failed: ${r.message}`),process.exit(1)}}function Ip(e){let{runId:r,workerName:t}=je(e),n=Re(r,t),o=B(n.runId),s=N(n,ls(o));ue(On.join(n.workerDir,"last-status.json"),s),console.log(JSON.stringify(s,null,2))}function rw(e){return{full:`kynver worker list --run ${e} --full`,blocked:`kynver worker list --run ${e} --blocked`,running:`kynver worker list --run ${e} --running`,task:`kynver worker list --run ${e} --task <task-id>`,worker:`kynver worker list --run ${e} --worker <worker>`,runFull:`kynver run status --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`}}function fa(e){if(typeof e!="string")return;let r=e.trim();return r.length?r:void 0}function tw(e){let r={};(e.blocked===!0||e.blocked==="true")&&(r.blocked=!0),(e.running===!0||e.running==="true")&&(r.running=!0);let t=fa(e.task??e.taskId);t&&(r.task=t);let n=fa(e.worker??e.name);n&&(r.worker=n);let o=fa(e.status);return o&&(r.status=o),r}function nw(e,r){if(r.blocked){let t=typeof e.attention=="string"?e.attention:"",n=typeof e.status=="string"?e.status:"";if(!(t==="blocked"||t==="needs_attention"||t==="stale"||n==="blocked"))return!1}return!(r.running&&!(e.status==="running"&&e.attention!=="blocked"&&e.attention!=="needs_attention")||typeof r.task=="string"&&e.taskId!==r.task||typeof r.worker=="string"&&e.worker!==r.worker||typeof r.status=="string"&&e.status!==r.status)}function Op(e,r){let t=tw(r);if(Object.keys(t).length===0)return e;let n=e.workers.filter(s=>nw(s,t)),o={...e,workerCount:n.length,needsAttention:n.filter(s=>s.attention&&s.attention!=="ok"&&s.attention!=="done").map(s=>s.worker),workers:n,activeFilters:t};return e.summary&&(o.summary={statusCounts:yr(n,"status"),attentionCounts:yr(n,"attention"),lifecycleCounts:yr(n,"lifecycleStage")}),e.controller&&(o.controller=Dp(n)),o}function Np(e){let r=ma(e),t=e.full===!0||e.full==="true",n=Op(t?Kr(r):Up(r),e),o=n.workers;console.log(JSON.stringify({runId:n.runId,status:n.status,projection:t?"full":"compact",workerCount:n.workerCount,...n.activeFilters?{activeFilters:n.activeFilters}:{},...t?{}:{resultContract:{projection:"compact",rawWorkerPayloadsOmitted:!0,deepDetailAvailableVia:["--full","worker status","worker tail","run status --full"]},drilldownCommands:rw(r)},needsAttention:n.needsAttention,..."summary"in n?{summary:n.summary}:{},..."controller"in n?{controller:n.controller}:{},workers:o},null,2))}function Tp(e){let{run:r,workerName:t,worker:n}=e,o=N(n,{base:r.base,baseCommit:r.baseCommit}),s=o.gitAncestry.headIsAncestorOfBase===!1&&o.gitAncestry.head?o.gitAncestry.head:void 0,i=pt({alive:o.alive,finalResult:o.finalResult,changedFiles:o.changedFiles,gitAncestry:o.gitAncestry,headCommit:s}),a=n.completionBlocker,l=typeof a=="string"&&a?a:void 0,c=Ap(l)?void 0:l,u=c?"blocked":o.status,d=c?"blocked":o.attention.state,f=Pp(n.completionResponse),m=Pp(f?.task),p=An(f?.outcome),g=An(f?.status),k=Array.isArray(f?.warnings)?f.warnings.filter(T=>typeof T=="string"&&T.trim().length>0):[],h=An(m?.prUrl)??An(f?.prUrl),b=An(n.completionReportedAt),x=zS({finished:oe(o),completionBlocker:c,completionOutcome:p,completionReportedAt:b}),M=XS({completionBlocker:c,completionOutcome:p,completionReportedAt:b,finished:oe(o)}),E=QS({changedFiles:o.changedFiles,headCommit:s,prUrl:h??void 0});return{worker:o.worker,status:u,attention:d,attentionReason:c??o.attention.reason,landingBlocked:o.finalResult?d==="needs_attention"||d==="blocked":!1,exitedWithoutFinalResult:!o.finalResult&&!o.alive,salvageState:i?.salvageable?"review_needed":"none",salvageReason:i?.salvageable?i.attentionReason:void 0,pid:o.pid,alive:o.alive,currentTool:o.currentTool,lastActivityAt:o.lastActivityAt,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary,heartbeatBlocker:o.heartbeatBlocker,changedFileCount:o.changedFiles.length,changedFiles:o.changedFiles,branch:o.branch,taskId:n.taskId??null,planId:n.planId??null,instructionPolicyFingerprint:typeof n.instructionPolicyFingerprint=="string"?n.instructionPolicyFingerprint:null,instructionPolicyRuleCount:(()=>{let T=n.instructionPolicyEvidence;if(!T||typeof T!="object")return null;let K=T.ruleSlugs;return Array.isArray(K)?K.length:null})(),leaseOwner:n.leaseOwner??null,model:typeof n.model=="string"?n.model:void 0,routingRule:typeof n.routingRule=="string"?n.routingRule:void 0,requestedModel:typeof n.requestedModel=="string"?n.requestedModel:void 0,headCommit:s,prUrl:h,handoffState:E,gitAncestry:o.gitAncestry,finalResult:o.finalResult,lifecycleStage:x,completionReportedAt:b,completionOutcome:n.completionOutcome??null,completionRouteStatus:g,completionRouteOutcome:p,completionWarnings:k,completionBlocker:c??null,checkpoint:{phase:o.lastHeartbeatPhase,summary:o.lastHeartbeatSummary,blocker:o.heartbeatBlocker},lastCommandHint:o.currentTool??o.lastHeartbeatSummary,failureReason:c??o.error??null,nextAction:M,ancestry:o.gitAncestry.relation,ancestryChecked:o.gitAncestry.checked}}function ow(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!Ap(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function sw(e,r){return{worker:e,status:"done",attention:"done",attentionReason:"metadata terminal worker; full status skipped in compact snapshot",alive:!1,pid:typeof r.pid=="number"?r.pid:void 0,branch:typeof r.branch=="string"?r.branch:void 0,taskId:r.taskId??null,planId:r.planId??null,model:typeof r.model=="string"?r.model:void 0,routingRule:typeof r.routingRule=="string"?r.routingRule:void 0,requestedModel:typeof r.requestedModel=="string"?r.requestedModel:void 0,lifecycleStage:r.completionReportedAt?"completion_acknowledged":"worker_finished",completionReportedAt:typeof r.completionReportedAt=="string"?r.completionReportedAt:null,completionOutcome:r.completionOutcome??null,localOnly:r.localOnly===!0,compactStatus:!0}}function yr(e,r){let t={};for(let n of e){let o=n[r],s=typeof o=="string"&&o.trim()?o:"unknown";t[s]=(t[s]??0)+1}return t}function Ep(e){if(e.attention!=="blocked")return!1;let r=typeof e.attentionReason=="string"?e.attentionReason:"";return r.includes("cli-config.json.tmp")||r.includes("Invalid authentication credentials")||r.includes("provider CLI is missing or not on PATH")||r.includes("unknown command:")}function Dp(e){let r=e.filter(Ep),t=e.filter(n=>{if(Ep(n))return!1;let o=n.attention;return o==="needs_attention"||o==="blocked"||o==="stale"||n.status==="running"});return{actionableCount:t.length,runningCount:e.filter(n=>n.status==="running").length,blockedCount:e.filter(n=>n.attention==="blocked").length,staleCount:e.filter(n=>n.attention==="stale").length,needsAttentionCount:e.filter(n=>n.attention==="needs_attention").length,doneCount:e.filter(n=>n.status==="done").length,systemHealthBlockerCount:r.length,systemHealthBlockers:r.slice(0,10).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt})),actionableWorkers:t.slice(0,25).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,taskId:n.taskId,planId:n.planId,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt,nextAction:n.nextAction}))}}function Mp(e,r,t){let n={runId:e.id,name:e.name,status:cn(e.status,r),repo:e.repo,workerCount:r.length,needsAttention:r.filter(o=>o.attention&&o.attention!=="ok"&&o.attention!=="done").map(o=>o.worker),workers:r};return t&&(n.summary={statusCounts:yr(r,"status"),attentionCounts:yr(r,"attention"),lifecycleCounts:yr(r,"lifecycleStage")},n.controller=Dp(r)),n}function iw(e){return e.status==="done"&&e.attention==="done"}function Kr(e){let r=B(e),n=Object.keys(r.workers||{}).map(s=>{let i=_(On.join(P(r.id),"workers",R(s),"worker.json"),void 0);return i?Tp({run:r,workerName:s,worker:i}):{worker:s,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=Mp(r,n,!1);return ue(On.join(P(r.id),"last-board.json"),o),o}function Up(e){let r=B(e),n=Object.keys(r.workers||{}).map(i=>{let a=_(On.join(P(r.id),"workers",R(i),"worker.json"),void 0);return a?ow(a)?sw(i,a):Tp({run:r,workerName:i,worker:a}):{worker:i,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=n.filter(i=>!iw(i)),s=Mp(r,o,!0);return s.status=cn(r.status,n),s.summary={...s.summary??{},totalWorkerCount:n.length,shownWorkerCount:o.length,omittedTerminalDoneWorkerCount:n.length-o.length,allStatusCounts:yr(n,"status"),allAttentionCounts:yr(n,"attention")},ue(On.join(P(r.id),"last-board-compact.json"),s),s}async function Wp(e,r){let t=String(e.run||""),n=String(e.agentOsId||"");if(!t||!n)return null;let o=Kr(t),s=$(e.baseUrl?String(e.baseUrl):void 0),i=await V(e.secret?String(e.secret):void 0,n,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(n)}/harness/snapshot`,l=await X(a,i,{agentOsId:n,runId:t,source:r,snapshot:o},{agentOsId:n,baseUrl:s});return{ok:l.ok,httpStatus:l.status,response:l.response,authRefreshed:l.refreshedAuth,authRefreshFailure:l.authRefreshFailure}}function aw(e){return{full:`kynver run status --run ${e} --full`,blocked:`kynver status --run ${e} --blocked`,running:`kynver status --run ${e} --running`,task:`kynver status --run ${e} --task <task-id>`,worker:`kynver status --run ${e} --worker <worker>`,workersFull:`kynver worker list --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`,monitorTick:`kynver monitor status --run ${e} --tick`}}function cs(e){let r=ma(e),t=e.full===!0||e.full==="true",n=Op(t?Kr(r):Up(r),e);n.projection=t?"full":"compact",t||(n.resultContract={projection:"compact",rawWorkerPayloadsOmitted:!0,omittedWorkerFields:["finalResult","changedFiles","gitAncestry","completionResponse","stdout/stderr tails"],deepDetailAvailableVia:["--full","worker status","worker tail","monitor status --tick"]},n.drilldownCommands=aw(r)),console.log(JSON.stringify(n,null,2))}function Bp(e){let{runId:r,workerName:t}=je(e),n=Re(r,t),o=po(n.stdoutPath,Number(e.lines||40));if(e.raw===!0||e.raw==="true"){process.stdout.write(o);return}for(let s of o.split(`
-`).filter(Boolean)){let i=tt(s),a=i?Wc(i):s;a&&console.log(a)}}function Lp(e){let{runId:r,workerName:t}=je(e),n=Re(r,t);if(!F(n.pid)){console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"not_running"},null,2));return}if(Zt(n.pid,"SIGTERM"),Pr(1500),F(n.pid)){Zt(n.pid,"SIGKILL"),console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"sigkill_sent"},null,2));return}console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"stopped"},null,2))}w();var pw=5e3,mw=360*60*1e3,fw=3,gw=5e3;function hw(e){let{runId:r,workerName:t}=je(e);return{run:r,name:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,maxTotalMs:Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):void 0,completeAttempts:Number(e.completeAttempts)>0?Math.floor(Number(e.completeAttempts)):void 0,completeBackoffMs:Number(e.completeBackoffMs)>0?Math.floor(Number(e.completeBackoffMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}}async function Ot(e){let r=hw(e),t=r.pollMs??pw,n=r.maxTotalMs??mw,o=r.completeAttempts??fw,s=r.completeBackoffMs??gw,i=Re(r.run,r.name);if(!i.agentOsId||!i.taskId)return{worker:i.name,runId:i.runId,outcome:"missing_link",attempts:0,reason:"worker has no agentOsId/taskId \u2014 nothing to attribute completion to"};if($r(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let a=Date.now();for(;;){if(i=Re(r.run,r.name),$r(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let u=N(i);if(oe(u)||!F(i.pid))break;if(Date.now()-a>n)return{worker:i.name,runId:i.runId,outcome:"timed_out",attempts:0,reason:`worker did not finish within ${n}ms`};Pr(t)}let l,c;for(let u=1;u<=o;u++){let d=await Nn({run:r.run,name:r.name,...r.agentOsId?{agentOsId:r.agentOsId}:{},...r.baseUrl?{baseUrl:r.baseUrl}:{},...r.secret?{secret:r.secret}:{}});if(l=d.httpStatus,d.ok)return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:d.httpStatus,attempts:u};if(d.httpStatus===401||d.httpStatus===403)return c=typeof d.reason=="string"?d.reason:"completion replay refused",{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:d.httpStatus,attempts:u,reason:c};c=typeof d.reason=="string"?d.reason:"transient failure",u<o&&Pr(s)}return{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:l,attempts:o,reason:c??"completion failed after retries"}}async function $p(e){try{let r=await Ot(e);console.log(JSON.stringify(r,null,2)),(r.outcome==="missing_link"||r.outcome==="timed_out")&&process.exit(1),process.exit(0)}catch(r){console.error(`worker auto-complete failed: ${r.message}`),process.exit(1)}}function kw(){return Fp.join(dw(new URL(".",import.meta.url)),"cli.js")}function Kp(e){let r=e.cliPath??kw();if(!cw(r))return;let t=Fp.join(e.workerDir,"auto-complete.log"),n;try{n=uw(t,"a")}catch{n=void 0}let o=["ignore",n??"ignore",n??"ignore"],s=e.nodeExecutable??process.execPath,i=[r,"worker","auto-complete","--run",e.runId,"--name",e.workerName];e.agentOsId&&i.push("--agent-os-id",e.agentOsId),e.baseUrl&&i.push("--base-url",e.baseUrl),e.secret&&i.push("--secret",e.secret);try{let a=lw(s,i,ce({detached:!0,stdio:o,env:process.env}));return n!==void 0&&Hp(n),a.unref(),{pid:a.pid,logPath:t,cliPath:r}}catch{if(n!==void 0)try{Hp(n)}catch{}return}}Se();function jp(e,r,t){de(e,["fetch","origin",t,"--prune"],{allowFailure:!0});let n=`origin/${t}`,o=re(e,["worktree","add","-B",t,r,n]);if(o.status===0)return;let s=re(e,["worktree","add","-b",t,r,"HEAD"]);if(s.status!==0){let i=o.stderr||o.stdout||s.stderr||s.stdout||"git worktree add failed for repair target branch";throw new Error(i)}}Ie();I();function ha(e,r){let t=typeof r.name=="string"?r.name.trim():"";if(!t||t==="undefined"||t==="null")throw new Error(`worker name is required and must be a real identifier (got: ${JSON.stringify(r.name)})`);let n=R(t);if(e.workers?.[n])throw new Error(`worker already exists in run ${e.id}: ${n}`);if(!r.task)throw new Error(`missing task text for worker ${n}`);let o=r.routingRule||r.requestedModel?{provider:r.provider||or,model:r.model,rule:r.routingRule||"explicit:spawn",requestedModel:r.requestedModel??r.model}:Jo({explicitModel:r.model,explicitProvider:r.provider,explicitProviderIsOperatorOverride:!!r.provider?.trim()}),s=Zd(o.provider),i=o.model;if(s.preflightModel){let D=s.preflightModel(r.model);if(!D.ok)throw new Error(`model preflight failed for provider "${s.name}": ${D.note??"invalid model/provider combination"}`);D.normalized&&console.error(`[supervisor] ${n}: ${D.note}`),i=D.model}let{worktreesDir:a}=te(),l=Nt.join(P(e.id),"workers",n);Rw(l,{recursive:!0});let c=Nt.join(a,e.id,n),u=r.repairTargetBranch?.trim()||void 0,d=u||r.branch||`agent/${e.id}/${n}`;if(yw(c))throw new Error(`worktree path already exists: ${c}`);de(e.repo,["fetch","origin","--prune"],{allowFailure:!0}),u?jp(e.repo,c,u):de(e.repo,["worktree","add","-b",d,c,e.baseCommit],{throwError:!0});let f=Nt.join(l,"stdout.jsonl"),m=Nt.join(l,"stderr.log"),p=Nt.join(l,"heartbeat.jsonl"),g=Yd({task:r.task,ownedPaths:r.ownedPaths||[],worktreePath:c,heartbeatPath:p,planId:r.planId,taskId:r.taskId,instructionPolicyMarkdown:r.instructionPolicyMarkdown,memoryQualityMarkdown:r.memoryQualityPromptMarkdown??r.memoryQualityCapture?.promptMarkdown??null,personaMarkdown:r.personaMarkdown,contextEnvelopeMarkdown:r.contextEnvelopeMarkdown,model:i,repairTargetPrUrl:r.repairTargetPrUrl,repairTargetBranch:r.repairTargetBranch??(u||void 0)}),k=process.env.KYNVER_HARNESS_TASK_ID,h=process.env.KYNVER_HARNESS_AGENT_OS_ID;r.taskId&&(process.env.KYNVER_HARNESS_TASK_ID=String(r.taskId)),r.agentOsId&&(process.env.KYNVER_HARNESS_AGENT_OS_ID=String(r.agentOsId));let b;try{b=s.start({name:n,task:r.task,ownedPaths:r.ownedPaths,model:i,branch:d,worktreePath:c,workerDir:l,stdoutPath:f,stderrPath:m,heartbeatPath:p,prompt:g})}catch(D){throw de(e.repo,["worktree","remove","--force",c],{allowFailure:!0}),de(e.repo,["branch","-D",d],{allowFailure:!0}),D}finally{k===void 0?delete process.env.KYNVER_HARNESS_TASK_ID:process.env.KYNVER_HARNESS_TASK_ID=k,h===void 0?delete process.env.KYNVER_HARNESS_AGENT_OS_ID:process.env.KYNVER_HARNESS_AGENT_OS_ID=h}let x=Wd(b.model,i,s.defaultModel),M=v(),E=Ue(process.env,M),T=$e().runnerId,K=zo(E.boxKind),L={name:n,runId:e.id,status:"running",pid:b.pid,model:x,branch:d,worktreePath:c,workerDir:l,stdoutPath:f,stderrPath:m,heartbeatPath:p,ownedPaths:r.ownedPaths,...r.agentOsId?{agentOsId:String(r.agentOsId)}:{},...r.taskId?{taskId:String(r.taskId)}:{},...r.planId?{planId:String(r.planId)}:{},...r.instructionPolicyFingerprint?{instructionPolicyFingerprint:String(r.instructionPolicyFingerprint)}:{},...r.instructionPolicyEvidence?{instructionPolicyEvidence:r.instructionPolicyEvidence}:{},...r.memoryQualityCapture?{memoryQualityCapture:r.memoryQualityCapture}:{},...r.personaSlug?{personaSlug:String(r.personaSlug)}:{},...r.personaEvidence?{personaEvidence:r.personaEvidence}:{},...r.contextEnvelopeEvidence?{contextEnvelopeEvidence:r.contextEnvelopeEvidence}:{},...r.leaseOwner?{leaseOwner:String(r.leaseOwner)}:{},...r.leaseToken?{leaseToken:String(r.leaseToken)}:{},...r.dispatched?{dispatched:!0}:{},...!r.agentOsId||!r.taskId?{localOnly:!0}:{},routingRule:o.rule,...o.requestedModel?{requestedModel:o.requestedModel}:{},...o.orchestrationAudit?{orchestrationAudit:o.orchestrationAudit}:{},...r.executorRef?{executorRef:String(r.executorRef)}:{},...r.parentTaskId?{parentTaskId:String(r.parentTaskId)}:{},...r.taskTitle?{taskTitle:String(r.taskTitle)}:{},...r.taskPrUrl?{taskPrUrl:String(r.taskPrUrl)}:{},...r.repairTargetPrUrl?{repairTargetPrUrl:String(r.repairTargetPrUrl)}:{},...r.repairTargetBranch?{repairTargetBranch:String(r.repairTargetBranch)}:{},boxKind:E.boxKind,boxId:K,runtimeId:T,startedAt:new Date().toISOString()};if(G(e.id,L),e.workers={...e.workers||{},[n]:{workerDir:l,statusPath:Nt.join(l,"worker.json")}},e.status="running",Oe(e),L.agentOsId&&L.taskId){let D;try{D=Kp({runId:e.id,workerName:n,workerDir:l,agentOsId:L.agentOsId})}catch(C){let ae=`completion sidecar failed to spawn: ${C.message}`;L.completionBlocker=ae,G(e.id,L)}if(D)D.pid&&(L.completionSidecarPid=D.pid,G(e.id,L));else{let C="completion sidecar failed to spawn (CLI not found or spawn error)";L.completionBlocker=C,L.completionSidecarSpawnFailedAt=new Date().toISOString(),G(e.id,L)}}return L}async function Vp(e){let r=B(String(e.run)),t=typeof e.name=="string"?e.name.trim():"";t||(console.error("worker start failed: --name is required"),process.exit(1));let n=e.task?String(e.task):lc(e.taskFile?String(e.taskFile):void 0);n||(console.error("missing --task or --task-file"),process.exit(1));let o=!!(e.agentOsId&&e.taskId),s=e.localOnly===!0||e.localOnly==="true";!o&&!s&&(e.agentOsId||e.taskId)&&(console.error("worker start: board-linked workers require both --agent-os-id and --task-id (or pass --local-only for direct runs)"),process.exit(1));let i=e.wait===!0||e.wait==="true",a;try{a=ha(r,{name:t,task:n,ownedPaths:e.owned?String(e.owned).split(",").map(c=>c.trim()).filter(Boolean):[],model:e.model?String(e.model):void 0,branch:e.branch?String(e.branch):void 0,agentOsId:e.agentOsId?String(e.agentOsId):void 0,taskId:e.taskId?String(e.taskId):void 0,provider:e.provider?String(e.provider):void 0}),console.log(JSON.stringify({runId:r.id,worker:a.name,pid:a.pid,branch:a.branch,worktreePath:a.worktreePath,workerDir:a.workerDir},null,2))}catch(c){console.error(`worker start failed: ${c.message}`),process.exit(1)}if(!i||!a)return;let l=await Ot({run:String(e.run),name:a.name,...a.agentOsId?{agentOsId:a.agentOsId}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});console.error(JSON.stringify({event:"start_wait_outcome",...l})),l.outcome==="timed_out"&&(process.exitCode=1)}w();import{createHash as Gp}from"node:crypto";function Rr(e){let r=e.replace(/\r\n/g,`
-`).trimEnd();return Gp("sha256").update(r,"utf8").digest("hex")}function Tt(e){if(e==null)return null;let r=e.trim();return r?Gp("sha256").update(r,"utf8").digest("hex"):null}I();var z=class extends Error{kind;httpStatus;constructor(r,t,n){super(t),this.name="PlanPersistError",this.kind=r,this.httpStatus=n}};function Tn(e,r){return e===401||e===403?new z("auth",r,e):e>=500?new z("server",r,e):new z("permanent",r,e)}function ka(e){let r=e instanceof Error?e.message:String(e);return/ECONNREFUSED|ENOTFOUND|ETIMEDOUT|fetch failed|network/i.test(r)?new z("network",r):new z("tool_interruption",r)}function Yp(e){return e!=="permanent"}function ds(e){let r={"Content-Type":"application/json"};return e&&(r.Authorization=`Bearer ${e}`),r}async function ps(e){let r=await e.text();try{return JSON.parse(r)}catch{return r}}async function Jp(e,r,t={}){let n=$(t.baseUrl),o=t.apiKey??ne(),s=t.fetchFn??fetch,i=`${n}/api/agent-os/${encodeURIComponent(e)}/plans/${encodeURIComponent(r)}`;try{let a=await s(i,{method:"GET",headers:ds(o)}),l=await ps(a);if(!a.ok){let c=typeof l=="object"&&l&&"error"in l?String(l.error):`GET plan failed (${a.status})`;throw Tn(a.status,c)}return l}catch(a){throw a instanceof z?a:ka(a)}}async function qp(e,r={}){let t=$(r.baseUrl),n=r.apiKey??ne(),o=r.fetchFn??fetch,s=e.agentOsSlug;try{if(e.operation==="create"){let f=`${t}/api/agent-os/${encodeURIComponent(s)}/plans`,m={title:e.title,summary:e.summary??null,slug:e.planSlug??null,sourceRefs:us(e),initialVersion:{title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:us(e)}},p=await o(f,{method:"POST",headers:ds(n),body:JSON.stringify(m)}),g=await ps(p);if(!p.ok){let h=typeof g=="object"&&g&&"error"in g?String(g.error):`create plan failed (${p.status})`;throw Tn(p.status,h)}let k=g;return{planId:k.plan.id,versionId:k.version.id,versionNumber:k.version.versionNumber}}let i=e.planId;if(!i)throw new z("permanent","planId is required for this operation");if(e.operation==="update_metadata"){let f=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}`,m={title:e.title,summary:e.summary??null,sourceRefs:us(e)},p=await o(f,{method:"PATCH",headers:ds(n),body:JSON.stringify(m)}),g=await ps(p);if(!p.ok){let h=typeof g=="object"&&g&&"error"in g?String(g.error):`update plan failed (${p.status})`;throw Tn(p.status,h)}let k=g;return{planId:k.id,versionId:k.currentVersionId,versionNumber:null}}let a=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}/versions`,l={title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:us(e),markCurrent:e.markCurrent!==!1},c=await o(a,{method:"POST",headers:ds(n),body:JSON.stringify(l)}),u=await ps(c);if(!c.ok){let f=typeof u=="object"&&u&&"error"in u?String(u.error):`add version failed (${c.status})`;throw Tn(c.status,f)}let d=u;return{planId:d.version.planId,versionId:d.version.id,versionNumber:d.version.versionNumber}}catch(i){throw i instanceof z?i:ka(i)}}function us(e){let r={...e.sourceRefs??{}};return e.model&&(r.model=e.model),Object.keys(r).length?r:e.sourceRefs??null}import{createHash as bw}from"node:crypto";function ms(e){let r={operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??null,planSlug:e.planSlug??null,title:e.title.trim(),summaryHash:Tt(e.summary),bodyHash:Rr(e.body),changeSummary:e.changeSummary?.trim()??null,markCurrent:e.markCurrent??!0};return bw("sha256").update(JSON.stringify(r),"utf8").digest("hex")}import{mkdirSync as zp}from"node:fs";import{homedir as vw}from"node:os";import Dt from"node:path";function fs(){let e=process.env.KYNVER_STATE_ROOT;return e?Dt.resolve(e):Dt.join(vw(),".kynver","state")}function gs(){return Dt.join(fs(),"plan-outbox")}function Sw(){return Dt.join(fs(),"plan-outbox-archive")}function jr(){let e=gs(),r=Sw();return zp(e,{recursive:!0}),zp(r,{recursive:!0}),{outboxDir:e,archiveDir:r}}function Dn(e){if(e.startsWith("/tmp/")||e.startsWith("/var/folders/"))return!0;let r=Dt.resolve(e);return r.startsWith("/tmp/")||r.startsWith(Dt.join("/var","folders"))}import{existsSync as ya,readFileSync as Qp,renameSync as Xp,readdirSync as ww,writeFileSync as Ra,unlinkSync as IW}from"node:fs";import Te from"node:path";import{randomUUID as Cw}from"node:crypto";var _w=12;function Mt(){let{outboxDir:e}=jr(),r=ww(e).filter(n=>n.endsWith(".json")),t=[];for(let n of r){let o=va(Te.join(e,n));o&&o.queueStatus==="queued"&&t.push(o)}return t.sort((n,o)=>n.createdAt.localeCompare(o.createdAt))}function ba(e){for(let r of Mt())if(r.idempotencyKey===e)return r;return null}function va(e){if(!ya(e))return null;try{return JSON.parse(Qp(e,"utf8"))}catch{return null}}function Zp(e){let{outboxDir:r}=jr(),t=Te.join(r,e.bodyPath);return Qp(t,"utf8")}function Sa(e,r){let{outboxDir:t}=jr(),n=new Date().toISOString(),o=r.existing?.id??Cw(),s=r.existing?.bodyPath??`${o}.body.md`,i=Te.join(t,`${o}.json`),a=Te.join(t,s);r.existing||Ra(a,e.body,"utf8");let l={id:o,idempotencyKey:ms(e),operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??r.existing?.planId??null,planSlug:e.planSlug??r.existing?.planSlug??null,title:e.title,summary:e.summary??null,bodyPath:s,bodyHash:Rr(e.body),author:e.author??null,model:e.model??null,sourceRefs:e.sourceRefs??null,changeSummary:e.changeSummary??null,markCurrent:e.markCurrent??!0,createdAt:r.existing?.createdAt??n,updatedAt:n,retryCount:(r.existing?.retryCount??0)+(r.existing?1:0),maxRetries:e.maxRetries??r.existing?.maxRetries??_w,lastError:r.lastError,lastFailureKind:r.lastFailureKind,queueStatus:"queued",userStatus:"queued for retry",readbackEvidence:null};return Ra(i,`${JSON.stringify(l,null,2)}
-`,{mode:384}),l}function em(e){let{outboxDir:r}=jr(),t=Te.join(r,`${e.id}.json`);Ra(t,`${JSON.stringify(e,null,2)}
-`,{mode:384})}function rm(e){let{outboxDir:r,archiveDir:t}=jr(),n=Te.join(r,`${e.id}.json`),o=Te.join(r,e.bodyPath),s=Te.join(t,`${e.id}.json`),i=Te.join(t,e.bodyPath);ya(n)&&Xp(n,s),ya(o)&&Xp(o,i)}function Mn(e){let{outboxDir:r}=jr();return{jsonPath:Te.join(r,`${e.id}.json`),bodyPath:Te.join(r,e.bodyPath)}}function tm(e,r){return{operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId,planSlug:e.planSlug,title:e.title,summary:e.summary,body:r,changeSummary:e.changeSummary??void 0,author:e.author??void 0,model:e.model??void 0,sourceRefs:e.sourceRefs,markCurrent:e.markCurrent??!0,maxRetries:e.maxRetries}}async function nm(e,r,t={}){let n=await Jp(e,r.planId,t),o=n.plan,s=n.currentVersion;if(o.title.trim()!==r.title.trim())throw new z("verification_failed",`title mismatch: expected "${r.title}", got "${o.title}"`);let i=Tt(r.summary),a=Tt(o.summary);if(i!==a)throw new z("verification_failed","summary mismatch on readback");if(r.versionId&&o.currentVersionId!==r.versionId)throw new z("verification_failed",`currentVersionId mismatch: expected ${r.versionId}, got ${o.currentVersionId}`);if(r.versionNumber!=null&&(!s||s.versionNumber!==r.versionNumber))throw new z("verification_failed",`versionNumber mismatch: expected ${r.versionNumber}, got ${s?.versionNumber??"none"}`);let l=s?.body??"",c=Rr(l);if(r.bodyHash&&c!==r.bodyHash)throw new z("verification_failed","body hash mismatch on readback");return{planId:o.id,currentVersionId:o.currentVersionId,versionNumber:s?.versionNumber??null,title:o.title,summary:o.summary,bodyHash:r.bodyHash||c,readAt:new Date().toISOString()}}function om(e,r){return{planId:r.planId,title:e.title,summary:e.summary??null,body:e.body,bodyHash:Rr(e.body),versionId:r.versionId,versionNumber:r.versionNumber}}var sm="persisted and read back",xw="queued for retry",wa="failed and needs action";async function Un(e,r={}){e.bodyPathHint&&Dn(e.bodyPathHint);let t=ms(e),n=ba(t);if(n?.readbackEvidence)return{userStatus:sm,outboxId:n.id,planId:n.readbackEvidence.planId,readbackEvidence:n.readbackEvidence,idempotencyKey:t};if(e.immediateFailure)return im(e,e.immediateFailure.message,e.immediateFailure.kind,n);let o=r.writePlan??qp,s=r.verifyReadback??nm;try{let i=await o(e,r),a={...e,planId:i.planId},l=om(a,i),c=await s(e.agentOsSlug,Pw(e,l),r);return n&&rm(n),{userStatus:sm,planId:i.planId,versionId:i.versionId??void 0,readbackEvidence:c,idempotencyKey:t}}catch(i){let a=i instanceof z?i:new z("tool_interruption",i instanceof Error?i.message:String(i));if(!Yp(a.kind)){let l=Sa(e,{lastError:a.message,lastFailureKind:a.kind,existing:n??void 0}),c=Mn(l),u=am(l,a.message);return{userStatus:wa,outboxId:u.id,outboxPath:c.jsonPath,bodyPath:c.bodyPath,lastError:a.message,idempotencyKey:t}}return im(e,a.message,a.kind,n)}}function Pw(e,r){return e.operation==="update_metadata"?{...r,body:"",bodyHash:""}:r}function im(e,r,t,n){let o=Sa(e,{lastError:r,lastFailureKind:t,existing:n??void 0}),s=Mn(o);if(o.retryCount>=o.maxRetries){let i=am(o,r);return{userStatus:wa,outboxId:i.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}return{userStatus:xw,outboxId:o.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}function am(e,r){let t={...e,queueStatus:"failed",userStatus:wa,lastError:r,updatedAt:new Date().toISOString()};return em(t),t}import Ew from"node:path";async function Ca(e={},r={}){let t=Mt().filter(s=>e.outboxId?s.id===e.outboxId:!0),n=e.max&&e.max>0?t.slice(0,e.max):t,o={processed:0,succeeded:0,stillQueued:0,failed:0,results:[]};for(let s of n){o.processed+=1;let i=Zp(s),a=tm(s,i),l=await Un(a,r);l.userStatus==="persisted and read back"?o.succeeded+=1:l.userStatus==="failed and needs action"?o.failed+=1:o.stillQueued+=1,o.results.push({outboxId:s.id,userStatus:l.userStatus,lastError:l.lastError})}return o}function _a(e){let r=Ew.join(gs(),`${e}.json`);return va(r)}function xa(e){let r=Mn(e);return["## Plan persistence risk","",`AgentOS plan write is **not** confirmed (${e.userStatus}).`,`- outboxId: \`${e.id}\``,e.planId?`- planId: \`${e.planId}\``:"- planId: (pending \u2014 create not yet applied)",`- outbox: \`${r.jsonPath}\``,`- body: \`${r.bodyPath}\``,"","Drain when approval/connectivity returns: `kynver plan outbox drain`"].join(`
-`)}function Pa(e){let r=e.metadata&&typeof e.metadata=="object"?e.metadata:null,t=typeof e.planPersistenceOutboxId=="string"&&e.planPersistenceOutboxId||(r&&typeof r.planPersistenceOutboxId=="string"?r.planPersistenceOutboxId:void 0);return t?{outboxId:t,jsonPath:typeof e.planPersistenceOutboxPath=="string"?e.planPersistenceOutboxPath:r&&typeof r.planPersistenceOutboxPath=="string"?r.planPersistenceOutboxPath:void 0,bodyPath:typeof e.planPersistenceBodyPath=="string"?e.planPersistenceBodyPath:r&&typeof r.planPersistenceBodyPath=="string"?r.planPersistenceBodyPath:void 0}:null}async function Ea(e){let r=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/release`,t;try{t=await X(r,e.secret,{agentOsId:e.agentOsId,leaseOwner:e.leaseOwner,...e.failureDetail?{failureDetail:e.failureDetail}:{}},{agentOsId:e.agentOsId,baseUrl:e.baseUrl})}catch(s){return{released:!1,httpOk:!1,releaseResponse:{ok:!1,error:s.message}}}let n=t.response;return{released:t.ok===!0||n?.ok===!0,httpOk:t.ok===!0,releaseResponse:t.response??t}}import{spawnSync as cm}from"node:child_process";import{spawnSync as Aw}from"node:child_process";function lm(){if(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim())return{source:"env",configured:!0,reason:"GitHub token already configured in environment"};let e=Aw("gh",["auth","token"],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});if(e.status!==0)return{source:"missing",configured:!1,reason:typeof e.stderr=="string"&&e.stderr.trim()?e.stderr.trim():"gh auth token failed; run `gh auth login` on this machine"};let r=typeof e.stdout=="string"?e.stdout.trim():"";return r?(process.env.GH_TOKEN=r,{source:"gh-cli",configured:!0,reason:"Using local GitHub CLI auth for daemon land_pr merge"}):{source:"missing",configured:!1,reason:"gh auth token returned an empty token; run `gh auth login` on this machine"}}var um=new Set(["SUCCESS","SKIPPED","NEUTRAL"]),Iw=new Set(["CLEAN","HAS_HOOKS"]);function Ia(e){return e?.trim()?["--repo",e.trim()]:[]}function dm(e){let r=/github\.com\/([^/]+)\/([^/]+)\/pull\/\d+/i.exec(e.trim());return r?`${r[1]}/${r[2]}`:null}function pm(e,r,t){let n=e.gh(r,t);if(n.status!==0)throw new Error(n.stderr||n.stdout||`gh ${t.join(" ")} failed`);return JSON.parse(n.stdout||"{}")}function Wn(e){return typeof e.name=="string"&&e.name||typeof e.context=="string"&&e.context||typeof e.workflowName=="string"&&e.workflowName||"unknown check"}function Ow(e){let r=Array.isArray(e)?e:[],t=[],n=[];for(let o of r){let s=o&&typeof o=="object"?o:{},i=typeof s.conclusion=="string"?s.conclusion.toUpperCase():"",a=typeof s.status=="string"?s.status.toUpperCase():"",l=typeof s.state=="string"?s.state.toUpperCase():"";if(!(i&&um.has(i))){if(i){n.push(`${Wn(s)}=${i}`);continue}if(!(l&&um.has(l))){if(l&&l!=="PENDING"&&l!=="EXPECTED"){n.push(`${Wn(s)}=${l}`);continue}if(l==="PENDING"||l==="EXPECTED"){t.push(`${Wn(s)}=${l}`);continue}if(a&&a!=="COMPLETED"){t.push(`${Wn(s)}=${a}`);continue}t.push(`${Wn(s)}=PENDING`)}}}return{pending:t,failed:n}}function Nw(e){return(Array.isArray(e)?e:[]).some(t=>{let n=t&&typeof t=="object"?t:{},o=typeof n.name=="string"&&n.name||typeof n.context=="string"&&n.context||"",s=typeof n.conclusion=="string"?n.conclusion.toUpperCase():"",i=typeof n.state=="string"?n.state.toUpperCase():"";return/^vercel/i.test(o)&&(s==="SUCCESS"||i==="SUCCESS")})}var Tw=/^##\s*(test\s*plan|verification|test\s*evidence|verify)\b/im,Dw=/typecheck|npm run (test|build|typecheck)|vitest|tsc\b|verify-pr-local|local verify|local-verify|tests? (pass|green)|build green|node --test/i,Mw=/^docs[(:]/i,Uw=/docs[- ]only|documentation only|no[- ]code change|no code changes|low[- ]risk|plan tracker only|markdown only/i;function Ww(e){let r=typeof e.title=="string"?e.title.trim():"",t=typeof e.body=="string"?e.body.trim():"",n=Mw.test(r)||Uw.test(t),o=Tw.test(t),s=Dw.test(t);return n||o||s||e.vercelCheckSuccess===!0}function Bw(e){if(!Ww({title:e.title,body:e.body,vercelCheckSuccess:Nw(e.statusCheckRollup)}))throw new Error(`PR #${e.number} lacks landing verification evidence \u2014 add ## Test plan / ## Verification with local commands, Vercel preview, or docs/no-code rationale`)}function Lw(e){if(e.state!=="OPEN")throw new Error(`PR #${e.number} is ${e.state}, not OPEN`);if(e.isDraft)throw new Error(`PR #${e.number} is still a draft`);if(!Iw.has(e.mergeStateStatus))throw new Error(`PR #${e.number} mergeStateStatus is ${e.mergeStateStatus}`);let r=Ow(e.statusCheckRollup);if(r.failed.length>0)throw new Error(`PR #${e.number} has failing checks: ${r.failed.join(", ")}`);if(r.pending.length>0)throw new Error(`PR #${e.number} has pending checks: ${r.pending.join(", ")}`);Bw(e)}function Hw(e){try{return Lw(e),null}catch(r){return r instanceof Error?r.message:String(r)}}function Fw(e,r,t,n){if(!n?.trim())return;let o=encodeURI(`heads/${n}`);e.gh(r,["api","-X","DELETE",`repos/${t}/git/refs/${o}`])}function $w(e,r,t){if(t?.trim())return t.trim();let n=e.gh(r,["repo","view","--json","nameWithOwner"]);if(n.status!==0)throw new Error(n.stderr||"Could not resolve GitHub repo");let o=JSON.parse(n.stdout||"{}");if(!o.nameWithOwner)throw new Error("Could not resolve GitHub repo");return o.nameWithOwner}function Kw(e,r){if(!r?.trim())return;let t=cm("git",["worktree","list","--porcelain"],{cwd:e,encoding:"utf8"});if(t.status!==0)return;let n=String(t.stdout||"").split(/\r?\n/),o=null,s=null;for(let i of n){if(i.startsWith("worktree ")){o=i.slice(9).trim(),s=null;continue}i.startsWith("branch ")&&o&&(s=i.slice(7).trim(),s.endsWith(`/${r}`)&&cm("git",["worktree","remove","--force",o],{cwd:e,encoding:"utf8"}))}}async function mm(e){let r=e.cwd??process.cwd(),t=e.exec??ns,n=e.prUrl.trim();if(!n)throw new Error("prUrl is required");let o=lm();if(!o.configured)return{prUrl:n,outcome:"blocked",reason:o.reason};let s=pm(t,r,["pr","view",n,...Ia(e.repo),"--json",["number","url","title","body","state","isDraft","mergeStateStatus","statusCheckRollup","headRefName","mergedAt","mergeCommit"].join(",")]);if(s.state==="MERGED"||s.mergedAt)return{prUrl:s.url||n,outcome:"skipped",mergeCommit:s.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 land_pr no-op (redelivery)`};let i=Hw(s);if(i)return e.skipNotReady?{prUrl:s.url||n,outcome:"skipped",reason:i}:{prUrl:s.url||n,outcome:"blocked",reason:i};if(e.dryRun)return{prUrl:s.url||n,outcome:"skipped",reason:"dry-run: PR is ready to merge"};let a=String(s.number),l=t.gh(r,["pr","merge",a,...Ia(e.repo),"--squash"]);if(l.status!==0){let u=Aa(t,r,a,e.repo);return u?{prUrl:u.url||s.url||n,outcome:"skipped",mergeCommit:u.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 merged by another lane during land_pr (race)`}:{prUrl:s.url||n,outcome:"blocked",reason:l.stderr||l.stdout||"gh pr merge failed"}}let c=Aa(t,r,a,e.repo);c||(c=Aa(t,r,a,e.repo));try{let u=$w(t,r,e.repo);Fw(t,r,u,s.headRefName),Kw(r,s.headRefName)}catch{}return{prUrl:c?.url||s.url||n,outcome:"merged",mergeCommit:c?.mergeCommit?.oid??null,reason:`Daemon land_pr merged PR #${s.number}${c?"":" (post-merge view unavailable \u2014 merge verified by gh exit 0)"}`}}function Aa(e,r,t,n){try{let o=pm(e,r,["pr","view",t,...Ia(n),"--json","number,url,mergedAt,mergeCommit,state"]);return o.state==="MERGED"||o.mergedAt?o:null}catch{return null}}I();async function fm(e){let r=await V(e.secret,e.agentOsId,{baseUrl:e.baseUrl}),t=String(e.task.id),n=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/harness/completion`,o=new Date().toISOString(),s={source:"kynver-harness",agentOsId:e.agentOsId,runId:e.runId,workerName:`land-pr-${t}`,taskId:t,leaseToken:e.task.leaseToken??null,startedAt:o,finishedAt:o,status:{finalResult:e.report,prUrl:e.report.prUrl,summary:e.report.reason,leaseToken:e.task.leaseToken??null},workerInjection:null},i=await X(n,r,s,{agentOsId:e.agentOsId,baseUrl:e.baseUrl});return{ok:i.ok,status:i.status}}function gm(){return["## verify_live completion contract","Finish with a JSON finalResult object:","{",'  "prUrl": "<landed pr>",','  "outcome": "passed" | "failed" | "skipped" | "no_mcp_surface",','  "reason": "<human summary>",','  "mergeCommit": "<sha optional>",','  "liveReadback": "<prod readback string from acceptance.liveReadbackQuery>",','  "mcpCalls": [{ "tool": "<name>", "ok": true, "summary": "..." }]',"}","","Drive the feature MCP tools against live production. Do not mark passed without exercising the MCP surface.","When the subject carries an acceptance snapshot, include liveReadback \u2014 the server oracle rejects passed if the original symptom still appears."].join(`
-`)}var ea=3600*1e3;function hm(e){let r=e.admissionExhaustion;return!r||typeof r!="object"?null:r}function km(e){let r=e.dispatchSkipDrain;return!r||typeof r!="object"?null:r}function jw(e){let r=e.harnessWorkerContext;if(!r||typeof r!="object")return null;let t=r,n=typeof t.instructionPolicyMarkdown=="string"?t.instructionPolicyMarkdown:null,o=typeof t.instructionPolicyFingerprint=="string"?t.instructionPolicyFingerprint:null,s=t.instructionPolicyEvidence&&typeof t.instructionPolicyEvidence=="object"?t.instructionPolicyEvidence:null,i=typeof t.personaMarkdown=="string"?t.personaMarkdown:null,a=typeof t.personaEvidence=="object"&&t.personaEvidence&&typeof t.personaEvidence.injectedPersonaSlug=="string"?t.personaEvidence.injectedPersonaSlug:null,l=t.personaEvidence&&typeof t.personaEvidence=="object"?t.personaEvidence:null,c=t.personaInjectionReady===!0,u=typeof t.contextEnvelopeMarkdown=="string"?t.contextEnvelopeMarkdown:null,d=t.contextEnvelopeEvidence&&typeof t.contextEnvelopeEvidence=="object"?t.contextEnvelopeEvidence:null,f=t.contextEnvelopeReady===!0,m=t.memoryQualityCapture&&typeof t.memoryQualityCapture=="object"?t.memoryQualityCapture:null,p=typeof t.memoryQualityPromptMarkdown=="string"?t.memoryQualityPromptMarkdown:typeof m?.promptMarkdown=="string"?m.promptMarkdown:null;return{instructionPolicyMarkdown:n,instructionPolicyFingerprint:o,instructionPolicyEvidence:s,memoryQualityCapture:m,memoryQualityPromptMarkdown:p,personaMarkdown:i,personaSlug:a,personaEvidence:l,personaInjectionReady:c,contextEnvelopeMarkdown:u,contextEnvelopeEvidence:d,contextEnvelopeReady:f}}function Vw(e){if(typeof e!="string")return null;let r=e.trim().toLowerCase();return r.length?r:null}function Gw(e,r){let t=[`[AgentOS task ${e.id}] ${e.title}`,"",e.description?String(e.description):"(no description on the board task)","",`Board linkage: agentOsId=${r}, taskId=${e.id}, attempt=${e.attempt}, executor=${e.executor}${e.executorRef?`, executorRef=${e.executorRef}`:""}.`,"This worker was dispatched from the AgentOS board. The harness reports your completion back to the board when you finish."];e.executor==="verify_live"&&t.push("",gm());let n=Pa(e);if(n?.outboxId){let o=_a(n.outboxId);o?t.push("",xa(o)):t.push("","## Plan persistence risk","",`Unconfirmed AgentOS plan write (outboxId=${n.outboxId}).`)}return t.join(`
-`)}function Yw(e){let r=new Set;if(e.targetTaskId)return r.add(String(e.targetTaskId)),r;if(e.targetTaskIds)for(let t of String(e.targetTaskIds).split(",")){let n=t.trim();n&&r.add(n)}return r}async function Vr(e){let r=e.pipeline===!0||e.pipeline==="true";try{let xr=function(){return Z.filter(S=>S.started).length},lr=function(S,y){Di({runId:s.id,agentOsId:i,phase:S,startedCount:xr(),outcomeCount:Z.length,cappedStarts:x,...y})},fe=function(S){return S.landPrDispatch===!0?!0:S.task?.executor==="land_pr"};var t=xr,n=lr,o=fe;let s=B(String(O(String(e.run||""),"--run"))),i=String(O(String(e.agentOsId||""),"--agent-os-id")),a=$(e.baseUrl?String(e.baseUrl):void 0),l=await V(e.secret?String(e.secret):void 0,i,{baseUrl:a}),u=!(e.execute===!0||e.execute==="true"),d=$e({runId:s.id}),f=Qi(s.id,d.runnerId),m=e.diskPath?Be({diskPath:String(e.diskPath)}):Be({diskPath:s.repo}),p=er({runId:s.id}),g=Yw(e),k=g.size>0,h=Number(e.maxStarts)>0?Math.floor(Number(e.maxStarts)):1,b=k?Math.min(h,g.size):h,x=u?b:Math.min(b,p.slotsAvailable);if(!u&&x<=0){let S={runId:s.id,agentOsId:i,dryRun:!1,skipped:!0,reason:p.reason??"no resource slots",resourceGate:p};if(r)return{ok:!0,...S};console.log(JSON.stringify(S,null,2));return}let M=Fo(s.id);if(e.reconcileStaleBlockers===!0||e.reconcileStaleBlockers==="true"){let S=`${a}/api/agent-os/by-id/${encodeURIComponent(i)}/lane-hygiene`;try{await X(S,l,{agentOsId:i,dryRun:!1,includeBoardReconcile:!0},{agentOsId:i,baseUrl:a})}catch(y){console.error(`[dispatch] reconcile-stale-blockers lane-hygiene call failed: ${y.message}`)}}let E=`${a}/api/agent-os/by-id/${encodeURIComponent(i)}/tasks/dispatch-next`,T=S=>({agentOsId:i,dryRun:u,maxStarts:S,leaseOwner:f,leaseDurationMs:Number(e.leaseMs)>0?Math.floor(Number(e.leaseMs)):ea,runnerDiskGate:m,runnerResourceGate:p,activeHarnessWorkers:M,runnerPresence:d,harnessBoardSnapshot:Kr(s.id),...e.lane?{lane:ld(String(e.lane))}:{},...e.executor?{executor:String(e.executor)}:{},...e.diskPath?{diskPath:String(e.diskPath)}:{},...e.targetTaskId?{targetTaskId:String(e.targetTaskId)}:{},...!e.targetTaskId&&e.targetTaskIds?{targetTaskIds:String(e.targetTaskIds).split(",").map(y=>y.trim()).filter(Boolean)}:{}}),K=td(),L=async S=>{let y=await X(E,l,T(S),{agentOsId:i,baseUrl:a,timeoutMs:K})??{ok:!1,status:0,response:null},A=y.response;return{dispatch:y,result:A?.result}},D=await L(k||u?x:1);if(!D.dispatch.ok||!D.result){let S={runId:s.id,agentOsId:i,action:"dispatch",httpStatus:D.dispatch.status,response:D.dispatch.response,authRefreshed:D.dispatch.refreshedAuth===!0,authRefreshFailure:D.dispatch.authRefreshFailure};if(r)return{ok:!1,...S};console.log(JSON.stringify(S,null,2)),process.exit(1)}let C=D.result;if(u){let S=hm(C),y=km(C),A={runId:s.id,agentOsId:i,dryRun:!0,wouldStart:C.started.map(H=>({taskId:H.task.id,title:H.task.title,reason:H.reason})),skipped:C.skipped.map(H=>({taskId:H.task.id,skipReason:H.skipReason,reason:H.reason})),diskGate:C.diskGate,resourceGate:C.resourceGate,inspected:C.inspected,pagesScanned:C.pagesScanned??null,candidatesExhausted:C.candidatesExhausted??null,capacityIdle:S?.capacityIdle===!0,admissionExhaustion:S,dispatchSkipDrain:y};if(r)return{ok:!0,...A};console.log(JSON.stringify(A,null,2));return}let ae=Ld(),Z=[],Je=[],Zr=Number(C.inspected)||0,Me=!1;async function ve(S,y,A){let H=await Ea({baseUrl:a,secret:l,agentOsId:i,taskId:String(S.id),leaseOwner:f,failureDetail:y}),se={taskId:S.id,started:!1,error:y,released:H.released,releaseResponse:H.releaseResponse,...A};return Z.push(se),lr("outcome",{lastOutcome:se}),!1}async function ee(S){let y=S.task,A=String(y.id);if(k&&!g.has(A))return ve(y,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...g]});let H=y.prUrl?String(y.prUrl):"";if(!H)return ve(y,"land_pr task missing prUrl");try{let se=await mm({prUrl:H,repo:dm(H),cwd:s.repo}),et=await fm({baseUrl:a,secret:l,agentOsId:i,runId:s.id,task:y,report:se});return et.ok?(Z.push({taskId:A,started:!0,landPr:!0,outcome:se.outcome,completionStatus:et.status}),!0):ve(y,`land_pr completion POST failed (HTTP ${et.status})`,{landPr:!0,outcome:se.outcome})}catch(se){return ve(y,se.message)}}async function U(S){let y="duplicate_dispatch_prevented: live local worker already owns this task",A=await Ea({baseUrl:a,secret:l,agentOsId:i,taskId:String(S.id),leaseOwner:f,failureDetail:y}),H={taskId:S.id,started:!1,error:y,alreadyRunning:!0,nonFatal:!0,released:A.released,releaseResponse:A.releaseResponse};return Z.push(H),lr("outcome",{lastOutcome:H}),!1}async function ge(S){let y=S.task,A=jw(S),H=String(y.id);if(k&&!g.has(H))return ve(y,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...g]});let se=Vw(y.personaSlug);if(se&&(!A?.personaInjectionReady||!A.personaMarkdown))return ve(y,`persona_injection_required: missing anchored context-envelope persona block for "${se}"`);if(Kd(s.id,H))return U(y);let et=Number(y.attempt)||1;if(et>ae.maxTaskAttempts)return ve(y,`task attempt ${et} exceeds KYNVER_MAX_TASK_ATTEMPTS (${ae.maxTaskAttempts})`);let Tk=R(`t-${y.id}-a${y.attempt}`),rt=Jo({explicitModel:e.model?String(e.model):void 0,explicitProvider:e.provider?String(e.provider):void 0,explicitProviderIsOperatorOverride:!!e.provider,task:cd(y)});try{let ni=y.planId?String(y.planId):void 0,io=Vd({title:y.title?String(y.title):void 0,description:y.description?String(y.description):null,executorRef:y.executorRef?String(y.executorRef):null,prUrl:y.prUrl?String(y.prUrl):null,branch:y.branch?String(y.branch):null}),ao=ha(s,{name:Tk,task:Gw(y,i),ownedPaths:e.owned?String(e.owned).split(",").map(Dk=>Dk.trim()).filter(Boolean):[],model:rt.model,provider:rt.provider,routingRule:rt.rule,requestedModel:rt.requestedModel,agentOsId:i,taskId:String(y.id),planId:ni,branch:io?.targetPrBranch??void 0,executorRef:y.executorRef?String(y.executorRef):void 0,parentTaskId:y.parentTaskId?String(y.parentTaskId):void 0,taskTitle:y.title?String(y.title):void 0,taskPrUrl:io?.targetPrUrl??(y.prUrl?String(y.prUrl):void 0),repairTargetPrUrl:io?.targetPrUrl,repairTargetBranch:io?.targetPrBranch??void 0,instructionPolicyMarkdown:A?.instructionPolicyMarkdown??null,instructionPolicyFingerprint:A?.instructionPolicyFingerprint??null,instructionPolicyEvidence:A?.instructionPolicyEvidence??null,memoryQualityCapture:A?.memoryQualityCapture??null,memoryQualityPromptMarkdown:A?.memoryQualityPromptMarkdown??null,personaMarkdown:A?.personaMarkdown??null,personaSlug:A?.personaSlug??se,personaEvidence:A?.personaEvidence??null,contextEnvelopeMarkdown:A?.contextEnvelopeMarkdown??null,contextEnvelopeEvidence:A?.contextEnvelopeEvidence??null,leaseOwner:f,leaseToken:y.leaseToken?String(y.leaseToken):void 0,dispatched:!0}),oc={taskId:y.id,started:!0,worker:ao.name,pid:ao.pid,branch:ao.branch,model:ao.model,provider:rt.provider,routingRule:rt.rule,instructionPolicyFingerprint:A?.instructionPolicyFingerprint??null,instructionPolicyRuleCount:Array.isArray(A?.instructionPolicyEvidence?.ruleSlugs)?A.instructionPolicyEvidence.ruleSlugs.length:null,personaSlug:A?.personaSlug??se,personaOperatingRuleCount:A?.personaEvidence?.operatingRuleCount??null};return Z.push(oc),lr("worker_started",{lastOutcome:oc}),A?.instructionPolicyFingerprint&&console.error(`[dispatch] task ${H}: operating-rules policy injected fingerprint=${A.instructionPolicyFingerprint}`),A?.personaSlug&&console.error(`[dispatch] task ${H}: persona context injected slug=${A.personaSlug}`),A?.contextEnvelopeReady&&console.error(`[dispatch] task ${H}: context envelope injected anchor=${A.contextEnvelopeEvidence?.anchorTaskId??H}`),!0}catch(ni){return ve(y,ni.message)}}let he=new Set;async function qe(S){let y=S.task,A=String(y.id);if(he.has(A))return ve(y,"dispatch_retry_loop_prevented: task already failed to start this tick");let H=fe(S)?await ee(S):await ge(S);return H||he.add(A),H}for(let S of C.started)await qe(S);if(Je.push(...C.skipped??[]),k)for(let S of Je){let y=String(S.task.id);g.has(y)&&Z.push({taskId:y,started:!1,error:`exact_target_not_started:${S.skipReason}`,skipReason:S.skipReason,detail:S.reason??null,requestedTargetTaskIds:[...g]})}for(;!k&&Z.length<x;){let S=await L(1);if(!S.dispatch.ok||!S.result){let A=nd(S.dispatch.response),H=xr();Me=A&&H>0;let se={started:!1,error:"dispatch_next request failed during top-up",httpStatus:S.dispatch.status,response:S.dispatch.response,...Me?{nonFatal:!0,partialTopUp:!0}:{}};Z.push(se),lr("top_up_failed",{partialTopUpInterrupted:Me,lastOutcome:se});break}Zr+=Number(S.result.inspected)||0,Je.push(...S.result.skipped??[]);let y=S.result.started??[];if(y.length===0)break;for(let A of y){if(Z.length>=x)break;await qe(A)}}let le=Z.filter(S=>S.started).length,cr=hm(C),so=km(C),ec=le===0&&(cr?.capacityIdle===!0||Number(C.resourceGate?.slotsAvailable)>0);if(ec&&cr?.summary){let S=cr.skipReasonCounts?.retry_ceiling_exceeded??0,y=C.overAttemptIdleRecovery??cr.overAttemptIdleRecovery,A=y?.attempted===!0?`; over_attempt_recovery minted=${y.minted??0} started=${y.started??0}`:S>0?"; over_attempt_recovery not attempted":"",H=so?`; dispatch_skip_drain scanned=${so.scanned??0} advanced=${so.advanced??0}`:"";console.error(`[dispatch] ${cr.summary}${S>0?`; retry_ceiling_exceeded=${S}`:""}${A}${H}`)}let rc={runId:s.id,agentOsId:i,dryRun:!1,leaseOwner:f,startedCount:le,capacityIdle:ec,admissionExhaustion:cr,dispatchSkipDrain:so,outcomes:Z,skipped:Je.map(S=>({taskId:S.task.id,skipReason:S.skipReason})),inspected:Zr,pagesScanned:C.pagesScanned??null,candidatesExhausted:C.candidatesExhausted??null,diskGate:C.diskGate,resourceGate:C.resourceGate,...Me?{partialTopUpInterrupted:!0}:{},dispatchCallbackTimeoutMs:K},tc=S=>!S.started&&S.nonFatal!==!0,Nk=Z.some(tc),nc=Me&&le>0?!0:!Nk;if(Di({runId:s.id,agentOsId:i,phase:"complete",partial:Me,startedCount:le,ok:nc}),r)return{ok:nc,...rc};console.log(JSON.stringify(rc,null,2)),Z.some(tc)&&process.exit(1)}catch(s){if(r)return{ok:!1,error:s.message};console.error(`run dispatch failed: ${s.message}`),process.exit(1)}}var Jw=1;function Ut(e){if(!e||typeof e!="object")return 0;let r=e.startedCount;if(typeof r=="number")return r;let t=e.outcomes;return Array.isArray(t)?t.filter(n=>n.started).length:0}function qw(e){let{maxStarts:r,...t}=e;return t}async function Oa(e,r){if(r<=0)return{ok:!0,skipped:!0,reason:"no slots",maxStarts:0,startedCount:0};let t=qw(e);if(t.targetTaskId||t.targetTaskIds){let u=await Vr({...t,execute:!0,pipeline:!0,maxStarts:String(r)});return{...typeof u=="object"&&u!==null?u:{},passes:{target:u},startedCount:Ut(u)}}let n=Math.min(r,Jw),o=Math.max(0,r-n),s=await Vr({...t,execute:!0,pipeline:!0,lane:"review",maxStarts:String(n)}),i=Ut(s),a=o+(n-i);if(a<=0)return{...typeof s=="object"&&s!==null?s:{},passes:{review:s},startedCount:i};let l=await Vr({...t,execute:!0,pipeline:!0,maxStarts:String(a)}),c=Ut(l);return{passes:{review:s,work:l},startedCount:i+c,ok:!0}}function ym(e){if(!e||typeof e!="object")return[];let t=e.response?.dispatch?.exactTargetTaskIds;if(!Array.isArray(t))return[];let n=new Set,o=[];for(let s of t){if(typeof s!="string")continue;let i=s.trim();!i||n.has(i)||(n.add(i),o.push(i))}return o}function zw(e){let t=e.response?.dispatch;return t&&typeof t=="object"?t:null}function Bn(e){return typeof e!="number"||!Number.isFinite(e)?null:Math.max(0,Math.floor(e))}function Rm(e,r){let t=zw(r),n=Bn(t?.recommendedMaxStarts),o=Bn(t?.actionableReady),s=Bn(t?.queuedTasks),i=Bn(t?.boardAdvancedThisTick)??0,a=Bn(t?.leaseReapedThisTick)??0,l=i+a,c=o??s,u=e.slotsAvailable;c!==null?u=Math.min(u,c):n!==null&&(u=Math.min(u,n)),c===null&&n!==null&&(u=Math.max(u,Math.min(e.slotsAvailable,n)));let d=t?.underutilized===!0||(c??0)>0&&e.slotsAvailable>0&&e.maxConcurrentWorkers>0&&e.activeWorkers<e.maxConcurrentWorkers;if(e.slotsAvailable>0&&u===0&&(d||l>0)){let m=c??(l>0?l:1);u=Math.min(e.slotsAvailable,Math.max(1,m))}let f=s!==null&&o!==null?Math.max(0,s-o):null;return{maxStarts:Math.max(0,u),underutilized:d,advisedStarts:n,actionableReady:o,queuedTasks:s,nonDispatchableReady:f,boardAdvancedThisTick:i,leaseReapedThisTick:a}}import EC from"node:path";W();Ar();J();w();import Xw from"node:path";var Qw=new Set(["running","dispatching","pending","queued","needs_attention"]),sr=new Set(["completed","failed","cancelled","done"]);function Gr(e){let r=pe(e);if(r.length===0)return"failed";let t=!1,n=!1,o=!1,s=!1;for(let i of r){let a=_(Xw.join(P(e.id),"workers",R(i),"worker.json"),void 0);if(!a)continue;let l=N(a,{base:e.base,baseCommit:e.baseCommit});if(l.alive&&!l.finalResult){t=!0;break}typeof a.completionBlocker=="string"&&a.completionBlocker&&(o=!0),kt(l)&&(s=!0),l.finalResult&&l.attention.state==="done"&&(n=!0)}return t||o||s?null:n?"completed":"failed"}function Ln(){let e=[];for(let r of Y()){if(!Qw.has(r.status))continue;let t=Gr(r);if(!t||t===r.status)continue;let n=r.status;r.status=t,Oe(r),e.push({runId:r.id,from:n,to:t})}return e}W();Ar();J();w();Ir();vo();import{existsSync as Sr,lstatSync as lC,readdirSync as cC,readlinkSync as uC,renameSync as La,unlinkSync as dC}from"node:fs";import Ve from"node:path";Ce();w();import De from"node:path";var Zw=`${De.sep}runs${De.sep}runs${De.sep}`;function hs(e){return e.includes(Zw)}function Na(e,r){return De.join(we(ie(e)),R(r))}function br(e,r,t){return De.join(Na(e,r),"workers",R(t))}function bm(e,r,t){let n=ie(e);return De.join(n,"runs","runs",R(r),"workers",R(t))}function Ta(){return["stdout.jsonl","stderr.log","heartbeat.jsonl","last-status.json","auto-complete.log","worker.json"]}function Yr(e){return{workerJsonPath:De.join(e,"worker.json"),stdoutPath:De.join(e,"stdout.jsonl"),stderrPath:De.join(e,"stderr.log"),heartbeatPath:De.join(e,"heartbeat.jsonl"),lastStatusPath:De.join(e,"last-status.json")}}function vm(e){let r=Yr(br(e.harnessRoot,e.runId,e.workerName)).workerJsonPath;return e.statusPath&&!hs(e.statusPath)?e.statusPath:r}import{existsSync as vr,mkdirSync as eC,readdirSync as wm,renameSync as rC,statSync as Da}from"node:fs";import Q from"node:path";Ir();Ce();W();w();var Hn=900*1e3,tC=3600*1e3;function Cm(e,r){let t=Q.resolve(e),n=Q.resolve(we(r)),o=Q.relative(n,t);return o!==".."&&!o.startsWith("..")&&!Q.isAbsolute(o)}function Ma(e){if(!vr(e))return[];try{return wm(e,{withFileTypes:!0}).filter(r=>r.isDirectory()&&r.name!=="runs").map(r=>r.name)}catch{return[]}}function Ua(e){let r=Q.join(e,"workers");if(!vr(r))return[];try{return wm(r,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name)}catch{return[]}}function _m(e){return Q.join(e,"archived-workers")}function nC(e,r){let t=Q.join(_m(e),R(r));return vr(t)?`${t}-${Date.now()}`:t}function Sm(e,r,t){if(!vr(e))return!1;try{let n=r-Da(e).mtimeMs;return Number.isFinite(n)&&n>=0&&n<t}catch{return!1}}function xm(e,r=Date.now(),t=Hn){if(!vr(e))return!1;let n=Yr(e),o=_(n.workerJsonPath,void 0);if(o?.status==="running"&&F(o.pid))return!0;let s=be(n.heartbeatPath);if(s.lastHeartbeatAt){let i=r-Date.parse(s.lastHeartbeatAt);if(Number.isFinite(i)&&i>=0&&i<t)return!0}return!!(Sm(n.stdoutPath,r,t)||Sm(n.heartbeatPath,r,t))}function oC(e,r,t){let n=typeof r.completionReportedAt=="string"?Date.parse(r.completionReportedAt):NaN;if(Number.isFinite(n))return t-n;let o=(()=>{let s=r.completionResponse;if(!s||typeof s!="object")return NaN;let i=s.task;if(!i||typeof i!="object")return NaN;let a=i.updatedAt;return typeof a=="string"?Date.parse(a):NaN})();if(Number.isFinite(o))return t-o;try{return t-Da(Q.join(e,"worker.json")).mtimeMs}catch{return 0}}function sC(e,r,t,n){if(xm(e,t))return{eligible:!1,reason:"worker has active/recent retention signals"};let o=typeof r.status=="string"?r.status:"";if(typeof r.completionBlocker=="string"&&r.completionBlocker.trim().length>0)return{eligible:!1,reason:"worker has completion blocker"};let i=typeof r.completionReportedAt=="string"||r.completionOutcome==="acknowledged";if(o!=="done"&&!i)return{eligible:!1,reason:`worker status is ${o||"unknown"}`};let a=oC(e,r,t);return!Number.isFinite(a)||a<n?{eligible:!1,reason:"terminal worker is still within archive grace window"}:{eligible:!0,reason:"terminal worker metadata archived"}}function Wt(e,r=Date.now(),t=Hn){for(let n of Ua(e))if(xm(Q.join(e,"workers",n),r,t))return!0;return!1}function iC(){return{repo:Le()?.repo??"",base:"origin/main",baseCommit:"unknown"}}function aC(e,r){let t=Q.join(we(e),R(r));if(!vr(t))return null;let n=Ua(t);if(n.length===0)return null;let o;try{o=Da(t).birthtime.toISOString()}catch{o=new Date().toISOString()}let s={};for(let a of n){let l=br(e,r,a);s[a]={workerDir:l,statusPath:Q.join(l,"worker.json")}}let i=Wt(t);return{id:r,name:r,...iC(),status:i?"running":"needs_attention",createdAt:o,workers:s}}function Wa(e){let r=ie(e??ye()),t=we(r),n=[];for(let o of Ma(t)){let s=Q.join(t,o,"run.json");if(vr(s)){n.push({runId:o,action:"skipped",reason:"run.json present"});continue}let i=aC(r,o);if(!i){n.push({runId:o,action:"skipped",reason:"no worker dirs on disk"});continue}Oe(i),n.push({runId:o,action:"repaired_run_json",reason:Wt(Q.join(t,o))?"synthesized run.json while worker artifacts still active":"synthesized run.json from orphan worker metadata dirs"})}return{runs:n}}function Ba(e,r={}){let t=ie(e??ye()),n=we(t),o=r.now??Date.now(),s=r.archiveAgeMs??tC,i=[];Wa(t);for(let a of Ma(n)){let l=Q.join(n,a),c=Q.join(l,"run.json"),u=_(c,void 0);if(!u?.id)continue;let d=new Set([...Object.keys(u.workers||{}),...Ua(l)]),f=!1;for(let m of d){let p=Q.join(l,"workers",R(m)),g=Q.join(p,"worker.json"),k=_(g,void 0);if(!k){let x=Q.join(_m(l),R(m));if(vr(x)&&(u.workers[R(m)]||u.workers[m])){delete u.workers[R(m)],delete u.workers[m],f=!0,i.push({runId:u.id,worker:m,action:"archived",reason:"removed stale live index entry for archived worker metadata",archivePath:x});continue}i.push({runId:u.id,worker:m,action:"skipped",reason:"worker.json missing"});continue}let h=sC(p,k,o,s);if(!h.eligible){i.push({runId:u.id,worker:m,action:"skipped",reason:h.reason});continue}let b=nC(l,m);eC(Q.dirname(b),{recursive:!0}),rC(p,b),delete u.workers[R(m)],delete u.workers[m],f=!0,i.push({runId:u.id,worker:m,action:"archived",reason:h.reason,archivePath:b})}f&&Oe(u)}return{workers:i}}function Pm(e,r=Date.now()){let t=new Set,n=we(e);for(let o of Ma(n)){let s=Q.join(n,o);Wt(s,r)&&t.add(`${e}\0${o}`)}return t}W();w();function pC(e,r){let t=Na(e,r),n;try{n=lC(t)}catch{return null}if(!n.isSymbolicLink())return null;let o=Ve.resolve(Ve.dirname(t),uC(t));if(Wt(o)||Wt(t))return null;let s=`${t}.materialize-${Date.now()}`;return La(o,s),dC(t),La(s,t),o}function mC(e){let r=[];for(let t of Ta()){let n=Ve.join(e.fromDir,t),o=Ve.join(e.toDir,t);!Sr(n)||Sr(o)||(La(n,o),r.push(t))}return r}function Em(e,r){let t=Yr(r),n=!1;return e.workerDir!==r&&(e.workerDir=r,n=!0),e.stdoutPath!==t.stdoutPath&&(e.stdoutPath=t.stdoutPath,n=!0),e.stderrPath!==t.stderrPath&&(e.stderrPath=t.stderrPath,n=!0),e.heartbeatPath!==t.heartbeatPath&&(e.heartbeatPath=t.heartbeatPath,n=!0),n}function fC(e){let r=typeof e.lastStatus?.status=="string"?e.lastStatus.status:void 0,t=e.lastStatus?.attention&&typeof e.lastStatus.attention=="object"?e.lastStatus.attention.state:void 0;return r==="done"||t==="done"||e.stdoutFinalResult||e.heartbeatFinalResult?"done":r==="blocked"?"blocked":r==="running"?"exited":r??"exited"}function gC(e){let r=Yr(e.canonicalDir),t=_(r.lastStatusPath,void 0),n=Sr(r.stdoutPath),o=Sr(r.heartbeatPath);if(!(n||o||t!=null))return null;let i=n?bo(r.stdoutPath):{finalResult:null},a=o?be(r.heartbeatPath):be(""),l=dt(a),c=fC({lastStatus:t,stdoutFinalResult:i.finalResult,heartbeatFinalResult:l}),u={name:e.workerName,runId:e.run.id,status:c,branch:typeof t?.branch=="string"?t.branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:typeof t?.worktreePath=="string"?t.worktreePath:Ve.join(te().worktreesDir,e.run.id,e.workerName),workerDir:e.canonicalDir,stdoutPath:r.stdoutPath,stderrPath:r.stderrPath,heartbeatPath:r.heartbeatPath,startedAt:typeof t?.startedAt=="string"?t.startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"synthesized worker.json from on-disk artifacts after metadata repair"};return typeof t?.taskId=="string"&&(u.taskId=t.taskId),typeof t?.agentOsId=="string"&&(u.agentOsId=t.agentOsId),typeof t?.planId=="string"&&(u.planId=t.planId),typeof t?.pid=="number"&&(u.pid=t.pid),(i.finalResult||l)&&(u.completionSnapshot={finalResult:i.finalResult??l??"completed",summary:a.lastHeartbeatSummary}),Em(u,e.canonicalDir),u}function hC(e,r){let t=!1,n={...e.workers||{}};for(let[o,s]of Object.entries(n)){let i=br(r,e.id,o),a=Ve.join(i,"worker.json");(hs(s.workerDir)||hs(s.statusPath)||s.workerDir!==i||s.statusPath!==a)&&(n[o]={workerDir:i,statusPath:a},t=!0)}return t&&(e.workers=n,Oe(e)),t}function kC(e){let r=[],t=br(e.harnessRoot,e.run.id,e.workerName),n=bm(e.harnessRoot,e.run.id,e.workerName),o=Yr(t),s=mC({fromDir:n,toDir:t});s.length>0&&r.push({runId:e.run.id,worker:e.workerName,action:"relocated_artifacts",reason:`moved ${s.join(", ")} from nested runs/runs layout`});let i=vm({harnessRoot:e.harnessRoot,runId:e.run.id,workerName:e.workerName,statusPath:e.statusPath}),a=_(i,void 0);if(!a&&Sr(o.workerJsonPath)&&(a=_(o.workerJsonPath,void 0)),!a){let l=gC({run:e.run,workerName:e.workerName,canonicalDir:t,harnessRoot:e.harnessRoot});if(l)return G(e.run.id,l),r.push({runId:e.run.id,worker:e.workerName,action:"synthesized_worker_json",reason:l.reconcileReason??"synthesized from artifacts"}),r;let c=Sr(t),u=Ta().some(d=>Sr(Ve.join(t,d)));if(c&&!u){let d={name:e.workerName,runId:e.run.id,status:"exited",branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:Ve.join(te().worktreesDir,e.run.id,e.workerName),workerDir:t,stdoutPath:o.stdoutPath,stderrPath:o.stderrPath,heartbeatPath:o.heartbeatPath,startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"empty worker dir \u2014 marked abandoned during metadata reconcile"};return G(e.run.id,d),r.push({runId:e.run.id,worker:e.workerName,action:"marked_abandoned",reason:d.reconcileReason??"empty worker dir"}),r}return r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker.json missing and no recoverable artifacts"}),r}return Em(a,t)?(a.reconciledAt=new Date().toISOString(),a.reconcileReason=a.reconcileReason??"repaired nested runs/runs path fields",G(e.run.id,a),r.push({runId:e.run.id,worker:e.workerName,action:"repaired_worker_paths",reason:a.reconcileReason})):r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker metadata already canonical"}),r}function yC(e,r){let t=Ve.join(P(e.id),"workers");if(!Sr(t))return[];let n=new Set(Object.keys(e.workers||{})),o=[];for(let s of cC(t,{withFileTypes:!0}))s.isDirectory()&&(n.has(s.name)||o.push(s.name));return o}function Am(){let{harnessRoot:e}=te(),r=Wa(e),t=[];for(let n of Y()){let o=pC(e,n.id);o&&t.push({runId:n.id,worker:"*",action:"materialized_run_symlink",reason:`replaced symlink with real run dir (was ${o})`}),hC(n,e)&&t.push({runId:n.id,worker:"*",action:"repaired_run_index",reason:"repaired nested runs/runs workerDir/statusPath entries in run.json"});let s=new Set(Object.keys(n.workers||{}));for(let i of yC(n,e))s.add(i),n.workers={...n.workers||{},[i]:{workerDir:br(e,n.id,i),statusPath:Ve.join(br(e,n.id,i),"worker.json")}},Oe(n),t.push({runId:n.id,worker:i,action:"repaired_run_index",reason:"indexed orphan worker dir into run.json"});for(let i of s){let a=n.workers?.[i];t.push(...kC({run:n,workerName:i,harnessRoot:e,statusPath:a?.statusPath}))}}return{workers:t,runMetadataRetention:r}}Ir();Co();J();W();Ar();w();import{execFileSync as Im}from"node:child_process";import Om from"node:path";function Ha(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:null}function RC(e){let r=Ha(e)?.match(/\/pull\/(\d+)$/);if(!r)return null;let t=Number.parseInt(r[1],10);return Number.isFinite(t)?t:null}function bC(e){if(e==null)return"";if(typeof e=="string")return e;try{return JSON.stringify(e)}catch{return""}}function vC(e){let r=new Set;for(let t of e.matchAll(/github\.com\/[^/\s)>"']+\/[^/\s)>"']+\/(?:pull|pulls)\/(\d+)/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bPR\s*#?\s*(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bpr[-_]?(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}return[...r]}function SC(e){let r=null;if(typeof e=="string"?r=ft(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=Ha(String(s.prUrl??s.pr_url??"")),a=String(s.outcome??"").trim();!i||a!=="merged"||n.push({prUrl:i,mergeCommit:typeof s.mergeCommit=="string"?s.mergeCommit:typeof s.merge_commit=="string"?s.merge_commit:null,reason:typeof s.reason=="string"?s.reason:null})}return n}function wC(e){try{let n=Im("git",["config","--get","remote.origin.url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim().match(/github\.com[:/]([^/]+\/[^/.]+)(?:\.git)?$/i)?.[1];if(!n)return null;let o=Im("gh",["pr","view",String(e.prNumber),"--repo",n,"--json","state,mergedAt,mergeCommit,url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}),s=JSON.parse(o);return{prUrl:Ha(s.url??`https://github.com/${n}/pull/${e.prNumber}`)??`https://github.com/${n}/pull/${e.prNumber}`,state:s.state??"",mergedAt:s.mergedAt??null,mergeCommit:s.mergeCommit?.oid??null}}catch{return null}}function CC(e){let r=be(e.heartbeatPath);return e.completionSnapshot?.finalResult??dt(r)}function _C(e){let r=new Map,t=P(e.id);for(let n of pe(e)){let o=_(Om.join(t,"workers",R(n),"worker.json"),void 0);if(o)for(let s of SC(CC(o))){let i=RC(s.prUrl);i!=null&&!r.has(i)&&r.set(i,s)}}return r}function xC(e,r){let t=be(e.heartbeatPath),n=[e.name,e.repairTargetPrUrl,e.taskPrUrl,e.branch,t.lastHeartbeatSummary,bC(r)].filter(Boolean).join(`
-`);return vC(n)}function PC(e){return e.localOnly===!0&&!e.taskId&&!e.agentOsId}function Fa(e={}){let r=e.lookupPr??wC,t=[],n=new Map;for(let o of Y()){let s=_C(o),i=P(o.id);for(let a of pe(o)){let l=Om.join(i,"workers",R(a),"worker.json"),c=_(l,void 0);if(!c||!PC(c))continue;let u=N(c,{base:o.base,baseCommit:o.baseCommit});if(u.attention.state!=="needs_attention")continue;let d=null;for(let m of xC(c,u.finalResult)){if(d=s.get(m)??null,!d){let p=o.repo||c.worktreePath,g=`${p}#${m}`,k=n.has(g)?n.get(g)??null:r({repoDir:p,prNumber:m});n.has(g)||n.set(g,k),k&&(k.state==="MERGED"||k.mergedAt)&&(d={prUrl:k.prUrl,mergeCommit:k.mergeCommit??null,reason:"GitHub reports PR merged"})}if(d)break}if(!d){t.push({runId:o.id,worker:a,action:"skipped",reason:"no merged PR evidence"});continue}let f=new Date().toISOString();c.status="done",c.completionSnapshot={prUrl:d.prUrl,summary:`Local-only worker superseded by merged PR ${d.prUrl}`,finalResult:{summary:`Local-only repair/salvage worker superseded by merged PR ${d.prUrl}`,targetPrReconciliation:[{prUrl:d.prUrl,outcome:"merged",mergeCommit:d.mergeCommit??null,reason:d.reason??"PR already merged; local-only worker no longer requires attention"}]}},c.completionAckSource="local-pr-merged-reconcile",c.reconciledAt=f,c.reconcileReason="local-only needs_attention superseded by merged PR",G(o.id,c),t.push({runId:o.id,worker:a,action:"marked_done",reason:c.reconcileReason,prUrl:d.prUrl,mergeCommit:d.mergeCommit??null})}}return{workers:t}}var AC=900*1e3;function IC(){return process.env.KYNVER_NO_STALE_CLEANUP==="1"}function Fn(){let e=Am();if(IC()){let s=Fa(),i=Ba();return{workers:[],finalizedRuns:Ln(),metadataReconcile:e,localPrAttentionReconcile:s,terminalWorkerArchive:i}}let r=[],t=Date.now();for(let s of Y())for(let i of pe(s)){let a=EC.join(P(s.id),"workers",R(i),"worker.json"),l=_(a,void 0);if(!l||l.status!=="running"){r.push({runId:s.id,worker:i,action:"skipped",reason:l?`worker status is ${l.status}`:"worker.json missing"});continue}let c=N(l,{base:s.base,baseCommit:s.baseCommit});if(c.finalResult){if(l.status==="running"){let u=c.attention.state==="blocked"?"blocked":c.attention.state==="done"||c.status==="done"?"done":"exited";l.status=u,l.reconciledAt=new Date().toISOString(),l.reconcileReason="synced finished worker record after terminal stdout/heartbeat",G(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:l.reconcileReason})}else r.push({runId:s.id,worker:i,action:"skipped",reason:"final result present"});continue}if(!c.alive){let u=c.attention.state==="blocked"?"blocked":c.status==="done"?"done":"exited";l.status=u,l.reconciledAt=new Date().toISOString(),l.reconcileReason=c.attention.reason,G(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:c.attention.reason});continue}if(c.attention.state==="stale"&&l.pid&&F(l.pid)){let u=c.lastHeartbeatAt?Date.parse(c.lastHeartbeatAt):NaN,d=c.lastActivityAt?Date.parse(c.lastActivityAt):NaN,f=!Number.isFinite(u)||t-u>AC,m=Number.isFinite(d)&&t-d>ht;if(f&&m){Zt(l.pid,"SIGTERM"),l.status="exited",l.reconciledAt=new Date().toISOString(),l.reconcileReason=`reconciled stale worker: ${c.attention.reason}`,G(s.id,l),r.push({runId:s.id,worker:i,action:"killed_stale",reason:c.attention.reason});continue}}r.push({runId:s.id,worker:i,action:"skipped",reason:c.attention.reason})}let n=Fa(),o=Ba();return{workers:r,finalizedRuns:Ln(),metadataReconcile:e,localPrAttentionReconcile:n,terminalWorkerArchive:o}}function Nm(){let e=Fn(),r=e.workers.filter(l=>l.action==="marked_exited").length,t=e.workers.filter(l=>l.action==="killed_stale").length,n=e.workers.filter(l=>l.action==="skipped").length,o=e.metadataReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),s=e.localPrAttentionReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),i=e.metadataReconcile.runMetadataRetention.runs.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),a=e.terminalWorkerArchive.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{});console.log(JSON.stringify({ok:!0,workers:{markedExited:r,killedStale:t,skipped:n,total:e.workers.length},metadataReconcile:{totals:o,total:e.metadataReconcile.workers.length,runMetadataRetention:{totals:i,total:e.metadataReconcile.runMetadataRetention.runs.length}},localPrAttentionReconcile:{totals:s,total:e.localPrAttentionReconcile.workers.length},terminalWorkerArchive:{totals:a,total:e.terminalWorkerArchive.workers.length},finalizedRuns:e.finalizedRuns.length,details:{workers:e.workers,metadataReconcile:e.metadataReconcile.workers,localPrAttentionReconcile:e.localPrAttentionReconcile.workers,terminalWorkerArchive:e.terminalWorkerArchive.workers,runMetadataRetention:e.metadataReconcile.runMetadataRetention.runs,finalizedRuns:e.finalizedRuns}},null,2))}yt();I();Ie();import OC from"node:os";function ks(e,r={}){let t=(r.boxKind??We(v())).trim().toLowerCase()||"forge",n=r.hostLabel??OC.hostname();return{boxId:r.boxId??zo(t,n),boxKind:t,displayName:r.displayName??null,hostLabel:n,observedAt:r.observedAt??new Date().toISOString(),totalMemBytes:e.totalMemBytes,freeMemBytes:e.freeMemBytes,activeWorkers:e.activeWorkers,maxConcurrentWorkers:e.maxConcurrentWorkers,autoCap:e.autoCap,slotsAvailable:e.slotsAvailable,harnessRunId:r.harnessRunId??null,queuedTasks:r.queuedTasks??null,reason:e.reason,...r.prEvidence?.length?{prEvidence:r.prEvidence}:{}}}W();So();J();I();import NC from"node:path";W();J();w();async function $n(e){let r=e.pipeline===!0||e.pipeline==="true";try{let t=B(String(O(String(e.run||""),"--run"))),n=String(O(String(e.agentOsId||""),"--agent-os-id")),o=$(e.baseUrl?String(e.baseUrl):void 0),s=await V(e.secret?String(e.secret):void 0,n,{baseUrl:o}),i=$e({runId:t.id}).runnerId,a=await Wp({run:t.id,agentOsId:n,...e},"run_sweep"),l=[];for(let f of Object.keys(t.workers||{})){let m=_(NC.join(P(t.id),"workers",R(f),"worker.json"),void 0);if(!m||!m.dispatched||!m.taskId)continue;let p=N(m);if(p.alive||p.finalResult||m.completionReportedAt)continue;let g=qo({runId:t.id,workerLeaseOwner:m.leaseOwner??null,runnerId:i}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(String(m.taskId))}/release`,h;try{h=await X(k,s,{agentOsId:n,leaseOwner:g},{agentOsId:n,baseUrl:o})}catch(b){h={ok:!1,error:b.message}}l.push({worker:f,taskId:m.taskId,pid:m.pid,released:h.ok===!0||h.response?.ok===!0,response:h.response??h})}let c=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/reap`,u;try{u=await X(c,s,{agentOsId:n,...Number(e.graceMs)>=0&&e.graceMs!==void 0&&e.graceMs!==!0?{graceMs:Math.floor(Number(e.graceMs))}:{}},{agentOsId:n,baseUrl:o})}catch(f){u={ok:!1,error:f.message}}let d={runId:t.id,agentOsId:n,snapshotPublished:a,releasedLocalOrphans:l,reap:u.response??u};if(r)return{ok:!0,...d};console.log(JSON.stringify(d,null,2))}catch(t){if(r)return{ok:!1,error:t.message};console.error(`run sweep failed: ${t.message}`),process.exit(1)}}w();J();W();w();import TC from"node:path";I();async function Tm(e){let r=$(e.baseUrl),t=await V(e.secret,e.agentOsId,{baseUrl:r}),n=`${r}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/plan-progress-sync`,o=await X(n,t,{phase:e.phase,taskId:e.taskId,blocker:e.blocker,artifact:e.artifact},{agentOsId:e.agentOsId,baseUrl:r});return{ok:o.ok,status:o.status,response:o.response}}async function Dm(e,r){let t=B(e),n=String(r.agentOsId||"");if(!n)return[];let o=[];for(let s of Object.keys(t.workers||{})){let i=_(TC.join(P(t.id),"workers",R(s),"worker.json"),void 0);if(!i?.dispatched||!i.taskId)continue;let a=N(i);if(!a.heartbeatBlocker)continue;if(i.lastSyncedHeartbeatBlocker===a.heartbeatBlocker){o.push({worker:s,phase:"heartbeat_blocker",ok:!0,skipped:!0});continue}let l=await Tm({agentOsId:n,taskId:i.taskId,phase:"heartbeat_blocker",blocker:a.heartbeatBlocker,baseUrl:r.baseUrl?String(r.baseUrl):void 0,secret:r.secret?String(r.secret):void 0});l.ok&&(i.lastSyncedHeartbeatBlocker=a.heartbeatBlocker,G(t.id,i)),o.push({worker:s,phase:"heartbeat_blocker",ok:l.ok})}return o}I();Ie();function DC(e=process.env){let r=v();return We(r,e)!=="forge"}function Mm(e,r=process.env){if(DC(r))return e?.maxConcurrentWorkers??void 0}async function Um(e,r){let t=$(r.baseUrl?String(r.baseUrl):void 0),n=await V(r.secret?String(r.secret):void 0,e,{baseUrl:t}),o=`${t}/api/agent-os/by-id/${encodeURIComponent(e)}/runtime`;try{let s=await $o(o,n);if(!s.ok)return null;let a=s.response?.preferences?.maxConcurrentWorkers;if(a==null)return{maxConcurrentWorkers:null};let l=Number(a);return!Number.isFinite(l)||l<=0?{maxConcurrentWorkers:null}:{maxConcurrentWorkers:Math.floor(l)}}catch{return null}}I();Ie();Ce();import Ae from"node:path";wo();import bs from"node:path";Se();J();var $a=[".next",".turbo","dist","build",".cache","node_modules/.cache"];function Wm(e){let r=e.replace(/\\/g,"/").replace(/\/+$/,"");if(r==="node_modules"||r.startsWith("node_modules/"))return!0;for(let t of $a)if(r===t||r.startsWith(`${t}/`))return!0;return!1}function xe(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return!Wm(n)})}function Jr(e){if(typeof e=="string")return e.match(/https:\/\/github\.com\/[^\s]+\/pull\/\d+/i)?.[0]??null;if(e&&typeof e=="object"){let r=e;for(let t of["prUrl","pr_url","pullRequestUrl"]){let n=r[t];if(typeof n=="string"&&n.trim())return n.trim()}}return null}function Kn(e){let r=e.gitAncestry?.relation;return r==="merged"||r==="synced"?xe(e.changedFiles).length>0:!!(Jr(e.finalResult)||r==="ahead"||r==="diverged"||e.changedFiles.length>0&&e.finalResult)}w();function jn(e){return e.status||(e.status=N(e.worker,{base:e.run.base,baseCommit:e.run.baseCommit})),e.status}function Ka(e,r){if(e.status)return xe(e.status.changedFiles).length>0;let t=r?r.porcelain(e.worktreePath):en(e.worktreePath);return xe(t).length>0}function MC(e){let r=e.worker.completionSnapshot?.finalResult;return r??(e.worker.taskPrUrl?{prUrl:e.worker.taskPrUrl}:null)}function ja(e,r){if(e.status)return e.status;let t=e.worker,n=typeof t.completionReportedAt=="string"&&t.completionReportedAt.trim().length>0,o=!!(t.status&&["done","exited","blocked","failed","abandoned"].includes(t.status))||n,s=MC(e);if(o&&!F(t.pid)){let i=r?.gitStatusCache?r.gitStatusCache.porcelain(e.worktreePath):en(e.worktreePath),a=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main",c=r?.gitRevCache?.countAheadOfMain(e.worktreePath,a)===0?{checked:!0,base:a,relation:"synced"}:mo(e.worktreePath,{base:e.run.base,baseCommit:e.run.baseCommit}),u={runId:e.runId,worker:e.workerName,pid:t.pid,alive:!1,status:t.status??(n?"done":"exited"),attention:{state:n?"done":"stale"},branch:t.branch,worktreePath:e.worktreePath,ownedPaths:t.ownedPaths,stdoutBytes:0,stderrBytes:0,heartbeatBytes:0,firstEventAt:null,lastEventAt:null,lastActivityAt:t.completionReportedAt??null,currentTool:null,heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,heartbeatBlocker:null,changedFiles:i,gitAncestry:c,finalResult:s,completionBlocker:typeof t.completionBlocker=="string"&&t.completionBlocker.trim()||null,prUrl:t.repairTargetPrUrl??t.taskPrUrl??Jr(s)};return e.status=u,u}return jn(e)}J();J();Ir();w();function Va(e,r=Date.now(),t=Hn){let n=be(e.heartbeatPath);if(!n.lastHeartbeatAt)return!1;let o=r-Date.parse(n.lastHeartbeatAt);return Number.isFinite(o)&&o>=0&&o<t}function ys(e,r=Date.now(),t=Hn){return F(e.pid)?!0:Va(e,r,t)}function UC(e,r){return r?r.runTerminalCache.derive(e.run):Gr(e.run)}function ir(e,r=Date.now()){return ys(e.worker,r)}function Ga(e,r){return sr.has(e.run.status)?!1:UC(e,r)!==null}function Bm(e,r,t=Date.now()){if(ir(e,t))return!0;if(sr.has(e.run.status)||Ga(e,r))return!1;let n=jn(e);return oe(n)?!1:!!ir(e,t)}wo();J();function Lm(e,r){if(!(typeof e.worker.completionBlocker=="string"?e.worker.completionBlocker.trim():""))return!1;if(ir(e))return!0;let n=r??jn(e);return!!(!oe(n)||Kn(n)||xe(n.changedFiles).length>0||mt({finalResult:n.finalResult,changedFiles:n.changedFiles,gitAncestry:n.gitAncestry,prUrl:Jr(n.finalResult)}).blocked)}Se();w();import{existsSync as Fm,mkdirSync as WC,writeFileSync as Hm}from"node:fs";import Rs from"node:path";function $m(e,r,t){return Rs.join(e,"salvage",R(r),R(t))}function Km(e){return Fm(Rs.join($m(e.harnessRoot,e.runId,e.workerName),"evidence.json"))}function jm(e){let r=$m(e.harnessRoot,e.indexed.runId,e.indexed.workerName);WC(r,{recursive:!0});let t=Rs.join(r,"salvage.patch"),n=!1;if(Fm(e.indexed.worktreePath)){let s=re(e.indexed.worktreePath,["diff","HEAD"]),i=re(e.indexed.worktreePath,["diff","--cached"]),a=[s.stdout,i.stdout].filter(l=>l.trim()).join(`
-`);a.trim()&&(Hm(t,a.endsWith(`
+${n}`;return Lv.some(s=>s.test(o))?"privileged":r.includes("provider:claude")||r.includes("deep_review")||r.includes("security")||r.includes("landing")||r.includes("review")||t.startsWith("land:")||r.includes("implementer")||r.includes("repair")||t.includes("implement")?"elevated":Hv.some(s=>s.test(o))?"low":"elevated"}function $v(e){let r=At(e.provider),t=e.escalatedFrom&&e.escalatedReason?`Escalated from ${e.escalatedFrom} (${e.escalatedReason}); using ${r.displayName} (${r.costTier} tier)`:`${r.displayName} selected for ${e.riskClass} orchestration (${r.costTier} tier, auth=${e.authSource})`;return{provider:e.provider,model:e.model,authSource:e.authSource,costTier:r.costTier,riskClass:e.riskClass,costRationale:t,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason}}function Kv(e){let r=e.inventory??Id();return e.codexBinding?{...r,bindings:{...r.bindings,codex:e.codexBinding}}:r}function Fr(e){let r=$v({provider:e.providerId,model:e.model,authSource:e.binding.authSource,riskClass:e.riskClass,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason});return{provider:e.providerId,model:e.model,rule:r.routingRule,audit:r}}function Od(e){let r=e.task??{},t=Fv(r),n=Kv({inventory:e.inventory,codexBinding:e.codexBinding??(e.inventory?null:Ot())}),o=e.preferLowCost===!1?null:e.explicitProvider?.trim().toLowerCase(),s=e.explicitModel?.trim()||void 0,i=sr;if(o==="codex"||o==="provider:codex"){let c=n.bindings.codex;if(!c.ready){let u=Ji({inventory:n,riskClass:t});return Fr(u?{providerId:u.providerId,binding:u.binding,riskClass:t,routingRule:"orchestration:explicit_codex_unavailable_cost_aware",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"}:{providerId:i,binding:n.bindings[i],riskClass:t,routingRule:"orchestration:codex_unavailable_escalate_cursor",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"})}return Fr({providerId:"codex",binding:c,riskClass:t,routingRule:"orchestration:explicit_codex",model:s})}if(o==="cursor"||o==="provider:cursor"){let c=n.bindings.cursor;if(c.ready)return Fr({providerId:"cursor",binding:c,riskClass:t,routingRule:"orchestration:explicit_cursor",model:s})}if(o==="claude"||o==="provider:claude"){let c=n.bindings.claude;if(c.ready)return Fr({providerId:"claude",binding:c,riskClass:t,routingRule:"orchestration:explicit_claude",model:s})}let a=Ji({inventory:n,riskClass:t});if(a)return Fr({providerId:a.providerId,binding:a.binding,riskClass:t,routingRule:`orchestration:cost_aware_${a.providerId}`,model:s,escalatedFrom:a.escalatedFrom,escalatedReason:a.escalatedReason});let l=n.bindings.codex;return Fr({providerId:i,binding:n.bindings[i],riskClass:t,routingRule:l.ready?"orchestration:inventory_empty_default_cursor":"orchestration:codex_unavailable_default_cursor",model:s,...l.ready?{}:{escalatedFrom:"codex",escalatedReason:l.note??"codex oauth not bound"}})}it();w();import{closeSync as Nd,openSync as Td}from"node:fs";import{spawn as qv}from"node:child_process";var jv=/-(?:thinking(?:-(?:high|medium|low|minimal|max|none))?|high|medium|low|minimal)$/i;function Vv(e){return e.replace(jv,"")}var Gv=/^(?:gpt-|gpt5|o1|o3|o4|gemini-|grok-|composer|deepseek|llama|mistral|qwen|command-)/i;function Xi(e){return/^claude[-_]/i.test(e)||/^(?:opus|sonnet|haiku)\b/i.test(e)}var Yv=new Set(["cursor"]);function Jv(e){let r=e.trim().toLowerCase();return Yv.has(r)?"auto":null}function Qi(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let o=Vv(t).trim()||r;return Gv.test(o)||!Xi(o)&&o!==r?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is not a Claude model \u2014 the "claude" provider drives the Claude CLI, which only accepts claude-* model ids (got "${o}"). Pick a Claude model or switch the worker provider.`}:o!==t?{ok:!0,model:o,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${o}" (the Claude CLI rejects reasoning-effort suffixes)`}:{ok:!0,model:o,normalized:!1}}function Nt(e,r){let t=(e??"").trim();return t?Xi(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "codex". Switch the provider or pick a Codex/OpenAI model.`}:{ok:!0,model:t,normalized:!1}:{ok:!0,model:r,normalized:!1}}function Zi(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let n=Jv(t);return n?{ok:!0,model:n,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${n}" (Cursor provider alias \u2014 use "auto" or a composer id, not "cursor")`}:Xi(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "cursor". Switch the provider to "claude" or pick a Cursor model.`}:{ok:!0,model:t,normalized:!1}}var Tt="claude-sonnet-4-6",Dd={name:"claude",defaultModel:Tt,preflightModel(e){return Qi(e,Tt)},start(e){let r=Qi(e.model,Tt);if(!r.ok)throw new Error(`claude provider model preflight failed: ${r.note}`);let t=r.model,n=Td(e.stdoutPath,"a"),o=Td(e.stderrPath,"a"),s=["ignore",n,o],i=qv("claude",["--model",t,"-p","--verbose","--permission-mode","bypassPermissions","--output-format","stream-json","--include-partial-messages",e.prompt],ue({cwd:e.worktreePath,detached:!0,stdio:s,env:Qe(process.env)}));if(Nd(n),Nd(o),!i.pid)throw new Error("failed to spawn claude worker process (is the `claude` CLI on PATH?)");return i.unref(),{pid:i.pid,model:t}}};it();w();import{closeSync as Bd,existsSync as Zv,openSync as Ld}from"node:fs";import{spawn as Hd}from"node:child_process";it();w();import{closeSync as Md,openSync as Ud}from"node:fs";import{spawn as zv}from"node:child_process";var ea=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4";function Xv(){return Qe({...process.env,CI:"1",NO_COLOR:"1",HERMES_ACCEPT_HOOKS:process.env.HERMES_ACCEPT_HOOKS??"1"})}function Qv(e,r){let t=process.env.KYNVER_HERMES_CODEX_MAX_TURNS?.trim()||"40";return["chat","-q",r,"--provider","openai-codex","-m",e,"-Q","--accept-hooks","--max-turns",t,"--toolsets","hermes-cli"]}var Wd={name:"hermes-codex",defaultModel:ea,preflightModel(e){return Nt(e,ea)},start(e){let r=Nt(e.model,ea);if(!r.ok)throw new Error(`hermes-codex provider model preflight failed: ${r.note}`);let t=r.model,n=Ud(e.stdoutPath,"a"),o=Ud(e.stderrPath,"a"),s=["ignore",n,o],i=_e("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),a=Qv(t,e.prompt),l=zv(i,a,ue({cwd:e.worktreePath,detached:!0,shell:!1,stdio:s,env:Xv()}));if(Md(n),Md(o),!l.pid)throw new Error(`failed to spawn Hermes openai-codex worker (is \`${i}\` on PATH? run \`hermes auth status openai-codex\`)`);return l.unref(),{pid:l.pid,model:t}}};function eS(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4"}var $r=eS();function rS(){return process.env.KYNVER_CODEX_BIN?.trim()||process.env.CODEX_BIN?.trim()||"codex"}function tS(){return Qe({...process.env,CI:"1",NO_COLOR:"1"})}function nS(e,r){return["exec","--sandbox","read-only","--ask-for-approval","never","--model",e,r]}function oS(e,r,t){if(!(process.platform!=="win32"&&Zv("/usr/bin/script")))return Hd(e,r,t);let o=[e,...r].map(s=>`'${s.replace(/'/g,"'\\''")}'`).join(" ");return Hd("script",["-qfc",o,"/dev/null"],t)}var Fd={name:"codex",defaultModel:$r,preflightModel(e){return Nt(e,$r)},start(e){if(Ot().path==="hermes_openai_codex")return Wd.start(e);let t=Nt(e.model,$r);if(!t.ok)throw new Error(`codex provider model preflight failed: ${t.note}`);let n=t.model,o=Ld(e.stdoutPath,"a"),s=Ld(e.stderrPath,"a"),i=["ignore",o,s],a=rS(),l=nS(n,e.prompt),c=oS(a,l,ue({cwd:e.worktreePath,detached:!0,shell:!1,stdio:i,env:tS()}));if(Bd(o),Bd(s),!c.pid)throw new Error(`failed to spawn Codex worker (is \`${a}\` on PATH? run \`codex login\` or set CODEX_API_KEY)`);return c.unref(),{pid:c.pid,model:n}}};var sS="claude-sonnet-4-6",Gi="composer-2.5";function es(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function $d(e){return e.toLowerCase()}function ta(e=v()){let r=e.defaultModel?.trim();if(r)return r;let t=process.env.KYNVER_DEFAULT_MODEL?.trim();return t||sS}function ra(e){let r=(e??"").toLowerCase();return!r||r.includes("composer")||r.includes("cursor")||r.includes("codex")||r.startsWith("gpt-")||r.startsWith("gpt5")?"cursor":/^claude[-_]/i.test(r)||/^(?:opus|sonnet|haiku)\b/i.test(r)?"claude":"cursor"}function iS(e,r){let t=e.trim().toLowerCase(),n=r?.trim();return t==="cursor"?{model:Gi,provider:"cursor",rule:n&&n!=="cursor"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:t==="claude"||t==="anthropic"?{model:Tt,provider:"claude",rule:n&&n!=="claude"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:null}function Kd(e,r){return!!(e.includes("deep")&&e.includes("review")||e.includes("security")||e.includes("plan_author")||e.includes("plan-author")||r.includes("deep review")||r.includes("security review")||e.includes("plan")&&!e.includes("review")&&(e.includes("author")||e.includes("strategy")))}function aS(e){let r=$d(es(e,"executorRef")),t=es(e,"title").toLowerCase(),n=es(e,"priority")||"normal",o=$d(es(e,"roleLane"));if(r.includes("provider:codex")||r.startsWith("codex:"))return{provider:"codex",model:$r,rule:"lane:codex_orchestration"};if(r.includes("cursor")||r.includes("composer")||r.includes("copilot")||o==="implementer"||o==="repair_implementer")return{provider:"cursor",rule:"lane:implementation"};if(r.includes("codex"))return{provider:"codex",model:$r,rule:"lane:codex_orchestration"};if(r.includes("landing")||t.startsWith("land:")||t.includes(" merge"))return{provider:"cursor",rule:"lane:landing"};if(r.includes("review")||/^review[\s:]/.test(t)||o.includes("review"))return Kd(r,t)||o==="deep_reviewer"?{provider:"cursor",rule:"lane:deep_review"}:{provider:"cursor",rule:"lane:review"};if(Kd(r,t)||o==="plan_author")return{provider:"cursor",rule:"lane:planning"};if(n==="critical")return{provider:"cursor",rule:"priority:critical"};if(n==="high")return{provider:"cursor",rule:"priority:high"};if(n==="low")return{provider:"cursor",rule:"priority:low"};let s=ta();return{model:s,provider:ra(s),rule:"default:global"}}function rs(e){let r;if(e.explicitModel?.trim()){let o=e.explicitModel.trim(),s=iS(o,e.explicitProvider);s?r=s:r={model:o,provider:e.explicitProvider?.trim()||ra(o),rule:"explicit:cli",requestedModel:o}}else if(e.task&&Object.keys(e.task).length>0){let o=aS(e.task);r={...o,requestedModel:o.model}}else{let o=ta();r={model:o,provider:e.explicitProvider?.trim()||ra(o),rule:"default:global",requestedModel:o}}let t=kd({routing:r,task:e.task,explicitProvider:e.explicitProvider,explicitProviderIsOperatorOverride:e.explicitProviderIsOperatorOverride});if(!e.task||Object.keys(e.task).length===0||t.rule==="explicit:model_provider_alias"||t.rule==="explicit:model_provider_alias_overrode_provider"||t.rule==="explicit:cli"||Hr(t.provider)&&(e.explicitProviderIsOperatorOverride||Vi(e.task)))return t;let n=Od({task:e.task,explicitProvider:e.explicitProvider??t.provider,explicitModel:t.model});return{provider:n.provider,model:n.provider==="codex"?n.model??t.model??$r:t.model,rule:n.rule,requestedModel:t.requestedModel,orchestrationAudit:n.audit}}function jd(e,r,t){return e||r||t||ta()||Tt}function Vd(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Gd(){return{maxTaskAttempts:Vd(process.env.KYNVER_MAX_TASK_ATTEMPTS,Math.floor(xt("harness.maxTaskAttempts",4))),dispatchCooldownMs:Vd(process.env.KYNVER_DISPATCH_COOLDOWN_MS,Math.floor(xt("harness.dispatchCooldownMs",5e3)))}}O();import uS from"node:path";M();J();w();var na="kynver-harness:",Yd="@runner:";function oa(e){return e?.trim()?e.trim():null}function lS(e){let r=oa(e);if(!r?.startsWith(na))return null;let t=r.slice(na.length),n=t.indexOf(Yd);return n>=0?t.slice(0,n).trim()||null:t.trim()||null}function sa(e,r){let t=e.trim(),n=r.trim();return`${na}${t}${Yd}${n}`}function ia(e,r){let t=oa(r);return t?lS(e)===t:!1}function ts(e){let r=oa(e.workerLeaseOwner);return r&&ia(r,e.runId)?r:sa(e.runId,e.runnerId)}import Jd from"node:os";Ie();Ie();import cS from"node:os";function ns(e,r){let t=(r??cS.hostname()).trim().toLowerCase().replace(/\s+/g,"-")||"unknown-host";return`${e}:${t}`}function Rr(e){return e?.trim()?e.trim():null}function Ke(e={}){let r=e.env??process.env;return{runnerId:Rr(r.KYNVER_RUNTIME_ID)??Rr(r.OPENCLAW_RUNTIME_ID)??Rr(r.HOSTNAME)??Jd.hostname(),hostname:Rr(r.HOSTNAME)??Jd.hostname(),profile:Rr(r.KYNVER_RUNNER_PROFILE)??Rr(r.OPENCLAW_RUNNER_PROFILE),harnessRepo:Rr(r.KYNVER_HARNESS_REPO)??Rr(r.KYNVER_DEFAULT_REPO),runId:e.runId??null,instructionBundleVersion:Wr()}}O();async function Dt(e){let r=new Map,t=e.agentOsId?.trim();if(!t||e.taskIds.length===0)return r;let n=K(e.baseUrl);try{let o=await G(e.secret,t,{baseUrl:n}),s=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/harness/monitor/task-leases`,i=await X(s,o,{taskIds:[...new Set(e.taskIds)]},{agentOsId:t,baseUrl:n});if(!i.ok||!i.response||typeof i.response!="object")return r;let a=i.response.tasks;if(!Array.isArray(a))return r;for(let l of a)l?.taskId&&r.set(l.taskId,l)}catch{}return r}M();async function os(e){let r=e.worker.leaseOwner?.trim()??null,t=e.worker.leaseToken?.trim()??null;if(t)return{leaseOwner:r,leaseToken:t};let n=e.worker.taskId?.trim();if(!n)return{leaseOwner:r,leaseToken:null};let s=(await Dt({agentOsId:e.agentOsId,taskIds:[n],baseUrl:e.baseUrl,secret:e.secret})).get(n),i=s?.leaseOwner?.trim()??null,a=s?.leaseToken?.trim()??null;if(!a)return{leaseOwner:r??i,leaseToken:null};let l=r??i;return(!e.worker.leaseToken||e.worker.leaseToken!==a)&&H(e.worker.runId,{...e.worker,...l?{leaseOwner:l}:{},leaseToken:a}),{leaseOwner:l,leaseToken:a}}function qd(e,r){return _(uS.join(x(e),"workers",b(r),"worker.json"),void 0)}async function ss(e,r){let t=B(e),n=String(r.agentOsId||"");if(!n)return{renewed:[],failed:[],skipped:[]};let o=K(r.baseUrl?String(r.baseUrl):void 0),s=await G(r.secret?String(r.secret):void 0,n,{baseUrl:o}),i=Number(r.leaseMs)>0?Math.floor(Number(r.leaseMs)):aa,a=Ke({runId:e}).runnerId,l=[],c=[],u=[];for(let d of Object.keys(t.workers||{})){let m=qd(e,d);if(!m?.taskId||!m.agentOsId){u.push(d);continue}if(!L(m.pid)){u.push(d);continue}if(T(m).status==="done"){u.push(d);continue}let p=ts({runId:e,workerLeaseOwner:m.leaseOwner??null,runnerId:a}),h=await os({worker:m,agentOsId:n,baseUrl:o,secret:s}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(m.taskId)}/renew-lease`,g=await X(k,s,{leaseOwner:h.leaseOwner??p,leaseDurationMs:i,...h.leaseToken?{leaseToken:h.leaseToken}:{}},{agentOsId:n,baseUrl:o});if(g.ok){l.push(d);continue}let R=g.response&&typeof g.response=="object"&&"reason"in g.response?String(g.response.reason??`http ${g.status}`):`http ${g.status}`;c.push({worker:d,reason:R})}return{renewed:l,failed:c,skipped:u}}function zd(e,r){let t=B(e);for(let n of Object.keys(t.workers||{})){let o=qd(e,n);if(!(!o||o.taskId!==r||!L(o.pid)||T(o).status==="done"))return!0}return!1}Se();M();M();import{existsSync as Aw,mkdirSync as Iw}from"node:fs";import Ut from"node:path";var dS=/<!--\s*harness-contract:\s*(\{[\s\S]*?\})\s*-->/i,pS="next-action-fix:";function is(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Xd(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:is(e)}function mS(e){let r=(e.title??"").trim().toLowerCase();if(r.startsWith("fix:")||r.startsWith("repair:"))return!0;let t=(e.executorRef??"").toLowerCase();return!!(t.startsWith(pS)||t.includes("repair")||t.includes("unblock"))}function fS(e){let r={repairEnforceOriginalPr:!1,targetPrUrl:null,targetPrBranch:null};if(!e)return r;let t=e.match(dS);if(!t?.[1])return r;try{let n=JSON.parse(t[1]),o=is(String(n.targetPrUrl??n.target_pr_url??"")),s=is(String(n.targetPrBranch??n.target_pr_branch??""));return{repairEnforceOriginalPr:n.repairEnforceOriginalPr===!0||n.repair_enforce_original_pr===!0||!!o,targetPrUrl:o?Xd(o):null,targetPrBranch:s}}catch{return r}}function Qd(e){if(!mS(e))return null;let r=fS(e.description),t=e.prUrl?Xd(e.prUrl):null,n=r.targetPrUrl??t;return n?{targetPrUrl:n,targetPrBranch:r.targetPrBranch??is(e.branch)}:null}function Zd(e){return["Repair target PR policy:","- Work on the existing target PR branch \u2014 do not open a duplicate repair PR by default.",`- Canonical target PR: ${e.targetPrUrl}`,...e.targetPrBranch?[`- Canonical target branch: \`${e.targetPrBranch}\` (checkout is already on this branch).`]:[],`- Reconcile ${e.targetPrUrl} in structured finalResult.targetPrReconciliation.`,"- Only supersede the original when the branch is inaccessible: set supersedesOriginalTargetPr: true with reason and close/comment on the original PR."]}function ep(e){let r=e.ownedPaths.length?`Owned paths: ${e.ownedPaths.join(", ")}. Do not edit outside these paths without stopping and reporting why.`:"Owned paths: unrestricted for this worker, but keep edits tightly scoped.",t=!!e.model?.toLowerCase().includes("haiku"),n=t?"compact":"full",o=t?e.planId?`Active planId: ${e.planId}`:"No planId on this worker.":e.planId?`Active planId: ${e.planId}${e.taskId?` \xB7 taskId: ${e.taskId}`:""}`:"No planId on this worker \u2014 still emit progress when you touch plan-scoped work.",s=[..._n(`worker.prompt.progress.${n}`).split(`
+`),o],i=_n(`worker.prompt.merge_gate.${n}`).split(`
+`),a=_n(`worker.prompt.plan_artifacts.${n}`).split(`
+`);return["You are running under the Kynver AgentOS runtime.","Immediately state your plan before editing.",r,`Worktree: ${e.worktreePath}`,`Progress heartbeat file: ${e.heartbeatPath}`,"After each major step, append one JSON line to the heartbeat file with fields: ts, phase, summary, changedFiles, blocker.","Final response must include files changed, verification commands, and unresolved risks.",..._n("worker.prompt.core_rules").split(`
+`),"",...s,"",...i,"",...a,"",...e.contextEnvelopeMarkdown?.trim()?[e.contextEnvelopeMarkdown.trim(),""]:[],...e.personaMarkdown?.trim()?[e.personaMarkdown.trim(),""]:[],...e.instructionPolicyMarkdown?.trim()?["Operating rules (from AgentOS memory policy):",e.instructionPolicyMarkdown.trim(),""]:[],...e.memoryQualityMarkdown?.trim()?[e.memoryQualityMarkdown.trim(),""]:[],...e.repairTargetPrUrl?[...Zd({targetPrUrl:e.repairTargetPrUrl,targetPrBranch:e.repairTargetBranch??null}),""]:[],"Task:",e.task].join(`
+`)}w();O();w();it();import{closeSync as ca,existsSync as tp,mkdirSync as RS,openSync as ua,statSync as bS,unlinkSync as rp}from"node:fs";import{spawn as vS}from"node:child_process";import SS from"node:os";import je from"node:path";import{existsSync as On,readdirSync as gS}from"node:fs";import Kr from"node:path";var hS=/^\d{4}\.\d{1,2}\.\d{1,2}-[a-f0-9]+$/i;function kS(e){let t=e.split("-")[0].split(".");if(t.length!==3)return null;let[n,o,s]=t;return!n||!o||!s?null:+`${n}${o.padStart(2,"0")}${s.padStart(2,"0")}`}function yS(e){let r=Kr.join(e,"versions");if(!On(r))return null;let t=null,n=-1;for(let o of gS(r,{withFileTypes:!0})){if(!o.isDirectory()||!hS.test(o.name))continue;let s=kS(o.name);s==null||s<=n||(n=s,t=Kr.join(r,o.name))}return t}function as(e){let r=e?.trim()||Kr.join(process.env.LOCALAPPDATA||"","cursor-agent"),t=Kr.join(r,"node.exe"),n=Kr.join(r,"index.js");if(On(t)&&On(n))return{nodeExe:t,indexJs:n,versionDir:r};let o=yS(r);if(!o)return null;let s=Kr.join(o,"node.exe"),i=Kr.join(o,"index.js");return!On(s)||!On(i)?null:{nodeExe:s,indexJs:i,versionDir:o}}var la="composer-2.5",wS=15e3,CS=6e4,_S=3e4;function xS(e,r,t){return{executable:e,prefixArgs:[r],shell:!1,detached:!0,bundledVersionDir:t}}function PS(e){if(process.platform==="win32"){let r=/\.(cmd|bat)$/i.test(e),t=/node\.exe$/i.test(e)&&tp(je.join(je.dirname(e),"index.js"));if(r||t||e==="agent"){let o=r?as(je.dirname(e)):t?{nodeExe:e,indexJs:je.join(je.dirname(e),"index.js"),versionDir:je.dirname(e)}:as();if(o)return xS(o.nodeExe,o.indexJs,o.versionDir);throw new Error("Cursor Agent on Windows has no headless bundled node.exe under %LOCALAPPDATA%\\cursor-agent\\versions\\\u2026. Run `agent login` / update Cursor Agent CLI, use `--provider claude`, or set KYNVER_CURSOR_AGENT_ROOT to the cursor-agent folder.")}}return{executable:e,prefixArgs:[],shell:!1,detached:!0}}function ES(){let e=process.env.KYNVER_CURSOR_AGENT_BIN?.trim()||process.env.CURSOR_AGENT_BIN?.trim();if(e)return e;if(process.platform==="win32"){let r=as(process.env.KYNVER_CURSOR_AGENT_ROOT?.trim()||void 0);if(r)return r.nodeExe;let t=je.join(process.env.LOCALAPPDATA||"","cursor-agent","agent.cmd");if(tp(t))return t}return"agent"}function AS(e,r){return Qe({...process.env,CI:"1",NO_COLOR:"1",...r.bundledVersionDir?{CURSOR_INVOKED_AS:je.basename(e)||"agent.cmd"}:{}})}function np(e){e<=0||Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function da(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?Math.floor(n):r}function IS(){let e=process.env.KYNVER_CURSOR_START_LOCK_DIR?.trim()||je.join(SS.homedir(),".kynver","locks");return RS(e,{recursive:!0}),je.join(e,"cursor-agent-start.lock")}function OS(){if(process.env.KYNVER_CURSOR_START_LOCK==="0")return()=>{};let e=IS(),r=da("KYNVER_CURSOR_START_LOCK_TIMEOUT_MS",CS),t=da("KYNVER_CURSOR_START_LOCK_STALE_MS",_S),n=Date.now();for(;;)try{let o=ua(e,"wx");return ca(o),()=>{try{rp(e)}catch{}}}catch(o){if(o.code!=="EEXIST")throw o;try{if(Date.now()-bS(e).mtimeMs>t){rp(e);continue}}catch{continue}if(Date.now()-n>r)throw new Error(`timed out waiting for Cursor agent start lock: ${e}`);np(250)}}var op={name:"cursor",defaultModel:la,preflightModel(e){return Zi(e,la)},start(e){let r=Zi(e.model,la);if(!r.ok)throw new Error(`cursor provider model preflight failed: ${r.note}`);let t=r.model,n=ua(e.stdoutPath,"a"),o=ua(e.stderrPath,"a"),s=["ignore",n,o],i=ES(),a=PS(i),l=OS(),c;try{c=vS(a.executable,[...a.prefixArgs,"-p","--force","--trust","--workspace",e.worktreePath,"--output-format","stream-json","--stream-partial-output","--model",t,e.prompt],ue({cwd:e.worktreePath,detached:a.detached,shell:a.shell,stdio:s,env:AS(i,a)})),np(da("KYNVER_CURSOR_START_LOCK_HOLD_MS",wS))}finally{l(),ca(n),ca(o)}if(!c.pid)throw new Error(`failed to spawn Cursor agent worker (is \`${i}\` on PATH? run \`agent login\` or set CURSOR_API_KEY)`);return c.unref(),{pid:c.pid,model:t}}};var ls={claude:Dd,codex:Fd,cursor:op},sp=null;function ip(e){if(sp)return sp;let r=e?.trim();if(r){let o=ls[r];if(!o)throw new Error(`unknown worker provider "${r}" \u2014 supported: ${Object.keys(ls).join(", ")}`);return o}let t=Xo(v().workerProvider),n=ls[t];if(!n)throw new Error(`unknown worker provider "${t}" \u2014 supported: ${Object.keys(ls).join(", ")}`);return n}w();import{spawn as Rw}from"node:child_process";import{existsSync as bw,openSync as vw,closeSync as Jp}from"node:fs";import qp from"node:path";import{fileURLToPath as Sw}from"node:url";M();function cs(e){return!!e.completionReportedAt?.trim()}function pa(e,r,t){e.completionReportedAt=t.completionReportedAt,e.completionOutcome=t.completionOutcome,t.completionResponse!==void 0&&(e.completionResponse=t.completionResponse),H(r,e)}function NS(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function ma(e){return!!(NS(e.completionBlocker)||e.completionOutcome==="rejected")}function jr(e){return cs(e)&&!ma(e)}M();J();O();import Un from"node:path";function fa(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function Nn(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}var TS=new Set(["review_scheduled","review_already_scheduled","skipped_terminal_task","closed","dispatched","dispatch_already_done"]);function ap(e){let r=fa(e);if(!r)return{routeOutcome:null,taskAdvanced:!1,detail:null};let t=Nn(r.outcome),n=Nn(r.detail)??Nn(r.error),o=fa(r.task),s=fa(r.closedTask),i=o?Nn(o.status):null,a=s?Nn(s.status):null,l=t!==null&&TS.has(t)||i==="awaiting_review"||i==="done"||a==="done";return{routeOutcome:t,taskAdvanced:l,detail:n}}function lp(e){return e.taskAdvanced}M();Po();var DS="expert-lane-pr-review:",MS="plan-review-task",US="scheduledjob:";function cp(e){if(!e)return null;let r=e.trim().toLowerCase();return r.length?r:null}function up(e){let r=(e.executorRef??"").toLowerCase();if(r.startsWith(DS)||r===MS||r.startsWith("daemon-review:"))return!0;if(r.startsWith(US)&&e.parentTaskId){let n=cp(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}let t=(e.title??"").toLowerCase();if(t.includes("expert pr review"))return!0;if(e.parentTaskId&&(t.startsWith("review:")||t.includes("review required")||t.includes("runtime review"))){let n=cp(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}return!1}var dp=/^(lane:)?(review|deep_review|planning|landing)(:|$)/i,WS=new Set(md()),BS=/no commits between/i;function pp(e){return!!(e&&BS.test(e))}function ge(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function mp(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:ge(e.head)}function fp(e){if(e==null)return null;let t=(typeof e=="string"?e:typeof e=="object"&&e!==null&&"summary"in e?String(e.summary??""):JSON.stringify(e)).match(/https?:\/\/[^\s)>"]+\/(?:pull|pulls|merge_requests|pull-requests)\/\d+/i);return t?ge(t[0]):null}function LS(e,r,t){let n=r.trim();if(!n)return null;let o=t.git(e,["rev-list","--count",`${n}..HEAD`]);if(o.status!==0)return null;let s=Number.parseInt(o.stdout.trim(),10);return Number.isFinite(s)?s:null}function HS(e,r){if(r.changedFiles.length>0)return!1;let t=ge(e.personaSlug)?.toLowerCase();if(t&&WS.has(t))return!0;let n=ge(e.routingRule)??"";return!!(n&&dp.test(n))}function FS(e,r){if(e.changedFiles.length>0)return!0;let t=ge(r?.baseRef);if(t&&r?.exec&&r.worktreePath){let n=LS(r.worktreePath,t,r.exec);if(n===0)return!1;if(n!==null&&n>0)return!0}return!!(ge(e.headCommit)||mp(e.gitAncestry))}function gp(e){if(!e.dispatched)return{required:!1,reason:"not_dispatched"};if(up({title:e.taskTitle??void 0,personaSlug:e.personaSlug,parentTaskId:e.parentTaskId,executorRef:e.executorRef}))return{required:!1,reason:"expert_review_task"};let r=ge(e.routingRule)??"";if(r&&dp.test(r))return{required:!1,reason:"review_lane"};let t=e.worker??{personaSlug:e.personaSlug,routingRule:e.routingRule};if(HS(t,e.snapshot))return{required:!1,reason:"review_artifact"};if(ge(e.patchPath)||ge(e.artifactBundlePath))return{required:!1,reason:"patch_or_bundle"};if(ge(e.repairTargetPrUrl))return{required:!1,reason:"repair_target_pr"};if(ge(e.prUrl)??ge(e.taskPrUrl)??ge(e.snapshot.prUrl))return{required:!1,reason:"already_has_pr"};let s=e.exec&&e.baseRef?{baseRef:e.baseRef,exec:e.exec,worktreePath:e.snapshot.worktreePath}:void 0;return FS(e.snapshot,s)?{required:!0,snapshot:e.snapshot}:{required:!1,reason:"no_work_product"}}function hp(e,r){return{changedFiles:e.changedFiles,branch:e.branch,worktreePath:e.worktreePath,gitAncestry:e.gitAncestry,finalResult:e.finalResult,headCommit:ge(r?.headCommit)??mp(e.gitAncestry),prUrl:ge(r?.prUrl)??null}}import{spawnSync as $S}from"node:child_process";function yp(e){let r=e.trim();if(!r)return null;let t=r.match(/^git@github\.com:([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(t)return kp(t[1]);let n=r.match(/^ssh:\/\/git@github\.com\/([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(n)return kp(n[1]);try{let o=new URL(r.includes("://")?r:`https://${r}`);if(o.hostname.toLowerCase()!=="github.com")return null;let s=o.pathname.replace(/^\/+|\/+$/g,"").split("/");if(s.length<2)return null;let[i,a]=s;return!i||!a?null:`${i}/${a.replace(/\.git$/i,"")}`}catch{return null}}function kp(e){let r=e.split("/").filter(Boolean);if(r.length<2)return null;let t=r[0],n=r[1].replace(/\.git$/i,"");return t&&n?`${t}/${n}`:null}Se();function KS(e,r,t){try{let n=$S(e,t,{cwd:r,encoding:"utf8"});return{status:n.status,stdout:(n.stdout||"").trim(),stderr:(n.stderr||"").trim(),error:n.error?n.error.message:null}}catch(n){return{status:null,stdout:"",stderr:"",error:n.message}}}var ds={git:(e,r)=>re(e,r),gh:(e,r)=>KS("gh",e,r)};function jS(e){return e.split(`
+`).map(r=>r.trim()).find(Boolean)??""}function Rp(e,r){let t=r.git(e,["remote","get-url","origin"]);return t.status!==0?null:yp(t.stdout)}function Tn(e,r){let t=r.git(e,["rev-parse","HEAD"]);return t.status!==0?null:t.stdout.trim()||null}function us(e,r,t,n){let o=n.gh(e,["pr","list","--repo",r,"--head",t,"--state","open","--json","url","--limit","1"]);if(o.status!==0)return null;try{return JSON.parse(o.stdout)[0]?.url?.trim()||null}catch{return null}}function ps(e){let{worktreePath:r,branch:t,commitMessage:n,hasDirtyFiles:o,exec:s}=e;if(o){let l=s.git(r,["add","-A"]);if(l.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:l.stderr||l.stdout||l.error||"git add failed"};let c=s.git(r,["commit","-m",n]);if(c.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:c.stderr||c.stdout||c.error||"git commit failed"}}let i=s.git(r,["push","-u","origin",t]);if(i.status!==0)return{ok:!1,committed:o,pushed:!1,detail:i.stderr||i.stdout||i.error||"git push failed"};let a=Tn(r,s)??void 0;return{ok:!0,committed:o,pushed:!0,headCommit:a}}function bp(e){let r=us(e.worktreePath,e.repo,e.branch,e.exec);if(r)return{ok:!0,prUrl:r,created:!1};let t=e.exec.gh(e.worktreePath,["pr","create","--repo",e.repo,"--base",e.base,"--head",e.branch,"--title",e.title,"--body",e.body,"--draft"]);if(t.status!==0)return{ok:!1,detail:t.stderr||t.stdout||t.error||"gh pr create failed"};let n=VS(t.stdout)??us(e.worktreePath,e.repo,e.branch,e.exec);return n?{ok:!0,prUrl:n,created:!0}:{ok:!1,detail:"gh pr create succeeded but no PR URL was parsed"}}function VS(e){let t=jS(e).match(/https?:\/\/[^\s]+\/pull\/\d+/i);return t?t[0]:null}function vp(e,r,t,n){let o=t.trim();if(!o||!r.trim())return null;let s=n.gh(e,["api",`repos/${r}/commits/${o}/pulls`]);if(s.status!==0||!s.stdout)return null;try{let l=JSON.parse(s.stdout).filter(c=>c.merged_at&&c.html_url?.trim()).sort((c,u)=>(typeof c.number=="number"?c.number:Number.MAX_SAFE_INTEGER)-(typeof u.number=="number"?u.number:Number.MAX_SAFE_INTEGER))[0];return l?.html_url?.trim()?{prUrl:l.html_url.trim(),number:typeof l.number=="number"?l.number:null}:null}catch{return null}}function GS(e){return e.gh(process.cwd(),["--version"]).status===0}function YS(e,r){return`AgentOS harness: ${e} (${r})`}function JS(e,r,t){return["Automated PR-ready handoff from the Kynver harness runtime.","",e?`AgentOS task: \`${e}\``:"",`Harness worker: \`${r}\` \xB7 run \`${t}\``,"","Opened by orchestrator completion enforcement so production review receives a reviewable artifact."].filter(Boolean).join(`
+`)}function ga(e){if(e.snapshot.changedFiles.length===0)return{ok:!0,prUrl:e.prUrl,headCommit:e.snapshot.headCommit??Tn(e.snapshot.worktreePath,e.exec)??void 0};let r=ps({worktreePath:e.snapshot.worktreePath,branch:e.snapshot.branch,commitMessage:e.commitMessage,hasDirtyFiles:!0,exec:e.exec});return r.ok?{ok:!0,prUrl:e.prUrl,headCommit:r.headCommit??e.snapshot.headCommit??void 0,committed:r.committed,pushed:r.pushed}:{ok:!1,reason:`PR-ready handoff blocked: ${r.detail??"git commit/push failed"}`,nextAction:"Commit and push the dirty worker changes to the existing PR branch, then rerun `kynver worker complete`."}}function ha(e,r=ds){let t=e.prUrlHint??fp(e.status.finalResult)??null,n=hp(e.status,{prUrl:t,headCommit:null}),o=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main";if(!gp({dispatched:e.worker.dispatched,routingRule:e.worker.routingRule,personaSlug:e.worker.personaSlug,prUrl:t,taskTitle:e.worker.taskTitle,executorRef:e.worker.executorRef,parentTaskId:e.worker.parentTaskId,taskPrUrl:e.worker.taskPrUrl,repairTargetPrUrl:e.worker.repairTargetPrUrl,baseRef:o,exec:r,worker:e.worker,snapshot:n}).required)return t?ga({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r}):{ok:!0};if(t)return ga({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});if(!GS(r)){let g=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${g?`${g} uncommitted change(s) with no PR URL`:"committed branch with no PR URL"}`,nextAction:"Install and authenticate GitHub CLI (`gh auth login`), then commit, push, and run `gh pr create` (or rerun `kynver worker complete` after the PR exists)."}}let i=Rp(n.worktreePath,r);if(!i)return{ok:!1,reason:"PR-ready handoff blocked: could not resolve github.com origin for the worktree",nextAction:"Ensure `origin` points at GitHub, push the branch, open a PR, and rerun `kynver worker complete`."};let a=e.worker.repairTargetPrUrl?.trim();if(a){let g=!1,R=!1,I=n.headCommit??Tn(n.worktreePath,r)??void 0;if(n.changedFiles.length>0){let P=ps({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`fix(harness): repair target PR ${a}`,hasDirtyFiles:!0,exec:r});if(!P.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${P.detail??"git commit/push failed"}`,nextAction:"Commit and push to the target PR branch, then rerun `kynver worker complete`."};g=P.committed,R=P.pushed,I=P.headCommit??I}else{let P=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(P.status!==0&&!/already up to date/i.test(P.stderr||P.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${P.stderr||P.stdout||"git push failed"}`,nextAction:"Push the target branch to origin, then rerun `kynver worker complete`."};R=P.status===0}return{ok:!0,prUrl:a,headCommit:I,committed:g,pushed:R}}let l=us(n.worktreePath,i,n.branch,r);if(l)return ga({snapshot:n,prUrl:l,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});let c=n.changedFiles.length>0,u=!1,d=!1,m=n.headCommit??void 0,f=ps({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`chore(harness): PR-ready handoff for ${e.worker.name}`,hasDirtyFiles:c,exec:r});if(c&&!f.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${f.detail??"git commit/push failed"}`,nextAction:"Commit and push the branch, run `gh pr create`, then rerun `kynver worker complete`."};if(c){if(u=f.committed,d=f.pushed,!f.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${f.detail??"git push failed"}`,nextAction:"Fix git auth or merge conflicts, push the branch, run `gh pr create`, then rerun `kynver worker complete`."}}else{let g=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(g.status!==0&&!/already up to date/i.test(g.stderr||g.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${g.stderr||g.stdout||g.error||"git push failed"}`,nextAction:"Push the branch to origin, run `gh pr create`, then rerun `kynver worker complete`."};d=g.status===0}m=f.headCommit??m??Tn(n.worktreePath,r)??void 0;let p=m?vp(n.worktreePath,i,m,r):null;if(p)return{ok:!0,prUrl:p.prUrl,headCommit:m,committed:u,pushed:d,created:!1};let h=e.run.base?.trim()||"main",k=bp({worktreePath:n.worktreePath,repo:i,branch:n.branch,base:h.replace(/^origin\//,""),title:YS(e.worker.name,e.worker.runId),body:JS(e.worker.taskId,e.worker.name,e.worker.runId),exec:r});if(!k.ok||!k.prUrl){if(pp(k.detail))return{ok:!0,headCommit:m??void 0,committed:u,pushed:d};let g=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${g?`${g} uncommitted change(s) and no PR URL after handoff attempt`:"no PR URL after handoff attempt"}${k.detail?` (${k.detail})`:""}`,nextAction:"Run `gh pr create` on the worker branch (or fix `gh` auth), attach the PR URL to the task, then rerun `kynver worker complete`."}}return{ok:!0,prUrl:k.prUrl,headCommit:m??void 0,committed:u,pushed:d,created:k.created}}J();xo();function ms(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return n!=="node_modules"&&!n.startsWith("node_modules/")})}function Sp(e){let r=e.trim();return r.startsWith("??")?r.slice(2).trim():r.length>3&&/^[ MADRCU?!]{2} /.test(r.slice(0,3))?r.slice(3).trim():r}function wp(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function Cp(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function xp(e){let r=Cp(e);if(!r)return[];let t=Cp(r.worktreeHandoff),n=wp(t?.disposableArtifactsRemoved);return n.length?n:wp(r.disposableArtifactsRemoved)}function _p(e){return e.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"")}function Pp(e,r){let t=ms(e);if(t.length===0)return!0;if(r.length===0)return!1;let n=new Set(r.map(o=>_p(o)));return t.every(o=>{let s=_p(Sp(o));return n.has(s)})}function fs(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Ep(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function qS(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function zS(e){let r=Ep(e.disposableArtifactsRemoved),t=xp(e.finalResult);return[...new Set([...r,...t])]}function Ap(e){let r=Ep(e.changedFiles),t=ms(r),n=zS(e),o=t.length===0||Pp(r,n);return fs(e.prUrl)?o?{allowed:!0,state:"pr_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a PR attached; commit or discard before completing`}:fs(e.headCommit)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) on top of a commit; commit or discard before completing`}:fs(e.artifactBundlePath)||fs(e.patchPath)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a patch/bundle handoff; clean the tree before completing`}:o?{allowed:!0,state:"clean",materialDirtyCount:0}:qS(e.finalResult)?{allowed:!1,state:"dirty_worktree_no_pr",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no commit or PR; commit, open a PR, discard, or remove one-off files via \`kynver worker discard-disposable\` before completing`}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no final result`}}M();J();w();import XS from"node:path";var QS=new Set(["awaiting_review","blocked","done","needs_input","waiting","scheduled","ready","cancelled","failed"]);function Ip(e){return!!(typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim())}function ZS(e){if(typeof e=="string"){let r=e.trim();return r.length?r:null}if(e&&typeof e=="object"&&!Array.isArray(e)){let r=e,t=r.summary??r.finalSummary??r.message;if(typeof t=="string"&&t.trim())return t.trim();try{return JSON.stringify(e)}catch{return null}}return null}function ew(e){let r=e.finalResult??null,t=typeof e.lastHeartbeatSummary=="string"?e.lastHeartbeatSummary:ZS(r);return{finalResult:r??t??"completed",summary:t}}function ka(e,r,t){if(Ip(e)&&e.status==="done"&&e.completionSnapshot!=null)return;let n=new Date().toISOString(),o=ew(r),s=t?.source?.trim();e.completionReportedAt=n,e.completionSnapshot=o,e.status="done",s&&(e.completionAckSource=s),H(e.runId,e)}function rw(e){let r=new Map,n=e.response?.tick?.filteredItems;if(!Array.isArray(n))return r;for(let o of n){if(o.kind!=="task"||typeof o.id!="string")continue;let s=typeof o.taskStatus=="string"?o.taskStatus.trim():"";s&&r.set(o.id,s)}return r}function Op(e,r){let t=rw(r);if(t.size===0)return[];let n=B(e),o=[];for(let s of Object.keys(n.workers||{})){let i=_(XS.join(x(n.id),"workers",b(s),"worker.json"),void 0);if(!i?.taskId||Ip(i))continue;let a=t.get(i.taskId);if(!a||a==="running"||!QS.has(a))continue;let l=T(i,{base:n.base,baseCommit:n.baseCommit});ka(i,l,{source:`board-task-${a}`}),o.push({worker:s,taskId:i.taskId,taskStatus:a})}return o}w();w();import tw from"node:path";var nw=/^[a-z0-9][a-z0-9._-]{0,127}$/i,ow=/^[a-z0-9][a-z0-9._-]{0,63}$/i,ya=new Set(["undefined","null"]),Np="usage: kynver worker <action> --run RUN_ID --name WORKER_NAME";function gs(e){let r=e.trim();if(!nw.test(r))throw new Error(`invalid run id: ${e}`);return r}function sw(e){let r=e.trim();if(!ow.test(r))throw new Error(`invalid worker name: ${e}`);return r}function Ra(e){return typeof e=="string"?e.trim():""}function Ve(e){let r=Ra(e.run),t=Ra(e.name);return(!r||ya.has(r))&&dr(`missing --run RUN_ID (${Np})`),(!t||ya.has(t))&&dr(`missing --name WORKER_NAME (${Np})`),{runId:gs(r),workerName:sw(t)}}function ba(e){let r=Ra(e.run);return(!r||ya.has(r))&&dr("missing --run RUN_ID (usage: kynver run status --run RUN_ID)"),gs(r)}function Tp(e){let r=tw.resolve(e);if(r.includes(".."))throw new Error("repo path must not contain .. segments");return r}async function Dp(e,r,t){let n=await fetch(e,{method:"POST",headers:Ne(r),body:JSON.stringify(t)}),o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,parsed:o}}function iw(e){if(e&&typeof e=="object"){let r=e.error;if(typeof r=="string"&&r.trim())return r.trim()}}function Mp(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function Dn(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function aw(e){return e.completionBlocker?`blocked:${e.completionBlocker}`:e.completionOutcome?e.completionOutcome:e.completionReportedAt?"completion_acknowledged":e.finished?"worker_finished":"in_progress"}function lw(e){return e.completionBlocker?"Resolve completion blocker, then rerun `kynver worker complete`.":e.completionOutcome==="review_scheduled"||e.completionOutcome==="review_already_scheduled"?"Await review lane and landing decision in Command Center.":e.completionOutcome==="needs_attention"?"Inspect blocker/attention reason in Command Center and dispatch a repair task.":e.finished&&!e.completionReportedAt?"Post completion acknowledgement to AgentOS (`kynver worker complete`).":null}function Wp(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function cw(e){return e.prUrl?"pr_handoff":e.headCommit?"commit_handoff":e.changedFiles.length>0?"dirty_worktree":"none"}function Mn(e,r){(e.completionBlocker??void 0)!==(r??void 0)&&(r?e.completionBlocker=r:delete e.completionBlocker,H(e.runId,e))}function uw(e){e.completionBlocker&&(delete e.completionBlocker,H(e.runId,e))}function hs(e){return e?{base:e.base,baseCommit:e.baseCommit}:{}}function dw(e,r){return{...e,...r.prUrl?{prUrl:r.prUrl}:{},...r.headCommit?{headCommit:r.headCommit}:{}}}async function Wn(e){let{runId:r,workerName:t}=Ve(e),n=me(r,t),o=B(n.runId),s=T(n,hs(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!oe(s))return{ok:!0,skipped:!0,reason:"worker-not-finished"};if(n.localOnly)return{ok:!0,skipped:!0,reason:"local-only-worker"};if(!i)return{ok:!1,reason:"missing agentOsId"};let l=e.force===!0||e.force==="true";if(!l&&jr(n))return{ok:!0,skipped:!0,reason:"completion-already-acknowledged",httpStatus:200};if(!l&&ma(n)&&uw(n),!(e.skipPrHandoff===!0||e.skipPrHandoff==="true")&&n.dispatched&&a){let E=ha({worker:n,run:o,status:s});if(!E.ok)return Mn(n,E.reason),{ok:!1,reason:E.reason,nextAction:E.nextAction,completionBlocked:!0};(E.prUrl||E.headCommit)&&(s=T(n,hs(o)),s=dw(s,E))}let u=s.gitAncestry.headIsAncestorOfBase===!1&&s.gitAncestry.head?s.gitAncestry.head:s.headCommit;if(n.dispatched){let E=Ap({changedFiles:s.changedFiles,finalResult:s.finalResult,prUrl:s.prUrl,headCommit:u,disposableArtifactsRemoved:n.disposableArtifactsRemoved});if(!E.allowed){let D=E.detail??`worktree completion blocked (${E.state})`;return Mn(n,D),{ok:!1,reason:D,nextAction:"Clean the worktree (commit, open a PR, or `kynver worker discard-disposable --path <file>`), then rerun `kynver worker complete`.",completionBlocked:!0}}}let d=K(e.baseUrl?String(e.baseUrl):void 0),m=e.secret?String(e.secret):void 0,f=await G(m,i,{baseUrl:d});a&&(await os({worker:n,agentOsId:i,baseUrl:d,secret:f}),n=me(r,t));let p=`${d}/api/agent-os/by-id/${encodeURIComponent(i)}/harness/completion`,h={...s};n.disposableArtifactsRemoved?.length&&(h.disposableArtifactsRemoved=n.disposableArtifactsRemoved);let k={source:"kynver-harness",agentOsId:i,runId:n.runId,workerName:n.name,taskId:a,leaseToken:n.leaseToken??null,startedAt:n.startedAt,finishedAt:s.lastActivityAt||new Date().toISOString(),status:n.leaseToken?{...h,leaseToken:n.leaseToken}:h,workerInjection:{instructionPolicyFingerprint:n.instructionPolicyFingerprint??null,instructionPolicyEvidence:n.instructionPolicyEvidence??null,memoryQualityCapture:n.memoryQualityCapture??null,policyAt:n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence=="object"&&"policyAt"in n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence.policyAt=="string"?n.instructionPolicyEvidence.policyAt:null,personaSlug:n.personaSlug??null,personaEvidence:n.personaEvidence??null,contextEnvelopeEvidence:n.contextEnvelopeEvidence??null}},g=await Dp(p,f,k);if((g.status===401||g.status===403)&&!m){let E=await mu(i,{baseUrl:d});E&&E!==f&&(f=E,g=await Dp(p,f,k))}if(g.ok){let E=ap(g.parsed);if(!lp(E)){let C=`completion acknowledged but board not advanced: ${E.detail??(E.routeOutcome?`harness completion returned ${E.routeOutcome}`:"harness completion did not advance the linked task")}`;Mn(n,C);let ae={completionReportedAt:new Date().toISOString(),completionOutcome:"rejected",completionResponse:g.parsed};return pa(n,n.runId,ae),{ok:!1,httpStatus:g.status,response:g.parsed,reason:C,completionBlocked:!0}}Mn(n,void 0);let D=E.routeOutcome??"acknowledged",j={completionReportedAt:new Date().toISOString(),completionOutcome:"acknowledged",completionResponse:g.parsed};pa(n,n.runId,j),ka(n,s,{source:"harness-completion"});let F=s.prUrl;return{ok:!0,httpStatus:g.status,response:g.parsed,reason:D,...F?{prHandoff:{prUrl:F}}:{}}}let R=g.status===401||g.status===403,I=iw(g.parsed)??(R?"runner token unauthorized":"non-2xx response"),P=R?`completion replay rejected (${g.status}): ${I}`:`completion replay failed (${g.status}): ${I}`;return Mn(n,P),{ok:!1,httpStatus:g.status,response:g.parsed,completionBlocked:!0}}async function Sa(e){try{let{runId:r,workerName:t}=Ve(e),n=me(r,t),o=B(n.runId),s=T(n,hs(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!oe(s)){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"worker-not-finished",workerStatus:s.status,alive:s.alive},null,2));return}if(n.localOnly){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"local-only-worker"},null,2));return}i||(console.error("worker complete requires --agent-os-id (or an agentOsId persisted at worker start)"),process.exit(1));let l=await Wn(e);console.log(JSON.stringify({worker:n.name,runId:n.runId,...l.skipped?{status:"skipped"}:{},...l.reason?{reason:l.reason}:{},...l.nextAction?{nextAction:l.nextAction}:{},...l.completionBlocked?{completionBlocked:l.completionBlocked}:{},agentOsId:i,taskId:a,httpStatus:l.httpStatus,response:l.response},null,2)),l.ok||process.exit(1)}catch(r){console.error(`worker complete failed: ${r.message}`),process.exit(1)}}function Bp(e){let{runId:r,workerName:t}=Ve(e),n=me(r,t),o=B(n.runId),s=T(n,hs(o));de(Un.join(n.workerDir,"last-status.json"),s),console.log(JSON.stringify(s,null,2))}function pw(e){return{full:`kynver worker list --run ${e} --full`,blocked:`kynver worker list --run ${e} --blocked`,running:`kynver worker list --run ${e} --running`,task:`kynver worker list --run ${e} --task <task-id>`,worker:`kynver worker list --run ${e} --worker <worker>`,runFull:`kynver run status --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`}}function va(e){if(typeof e!="string")return;let r=e.trim();return r.length?r:void 0}function mw(e){let r={};(e.blocked===!0||e.blocked==="true")&&(r.blocked=!0),(e.running===!0||e.running==="true")&&(r.running=!0);let t=va(e.task??e.taskId);t&&(r.task=t);let n=va(e.worker??e.name);n&&(r.worker=n);let o=va(e.status);return o&&(r.status=o),r}function fw(e,r){if(r.blocked){let t=typeof e.attention=="string"?e.attention:"",n=typeof e.status=="string"?e.status:"";if(!(t==="blocked"||t==="needs_attention"||t==="stale"||n==="blocked"))return!1}return!(r.running&&!(e.status==="running"&&e.attention!=="blocked"&&e.attention!=="needs_attention")||typeof r.task=="string"&&e.taskId!==r.task||typeof r.worker=="string"&&e.worker!==r.worker||typeof r.status=="string"&&e.status!==r.status)}function Lp(e,r){let t=mw(r);if(Object.keys(t).length===0)return e;let n=e.workers.filter(s=>fw(s,t)),o={...e,workerCount:n.length,needsAttention:n.filter(s=>s.attention&&s.attention!=="ok"&&s.attention!=="done").map(s=>s.worker),workers:n,activeFilters:t};return e.summary&&(o.summary={statusCounts:br(n,"status"),attentionCounts:br(n,"attention"),lifecycleCounts:br(n,"lifecycleStage")}),e.controller&&(o.controller=$p(n)),o}function Hp(e){let r=ba(e),t=e.full===!0||e.full==="true",n=Lp(t?Vr(r):jp(r),e),o=n.workers;console.log(JSON.stringify({runId:n.runId,status:n.status,projection:t?"full":"compact",workerCount:n.workerCount,...n.activeFilters?{activeFilters:n.activeFilters}:{},...t?{}:{resultContract:{projection:"compact",rawWorkerPayloadsOmitted:!0,deepDetailAvailableVia:["--full","worker status","worker tail","run status --full"]},drilldownCommands:pw(r)},needsAttention:n.needsAttention,..."summary"in n?{summary:n.summary}:{},..."controller"in n?{controller:n.controller}:{},workers:o},null,2))}function Fp(e){let{run:r,workerName:t,worker:n}=e,o=T(n,{base:r.base,baseCommit:r.baseCommit}),s=o.gitAncestry.headIsAncestorOfBase===!1&&o.gitAncestry.head?o.gitAncestry.head:void 0,i=gt({alive:o.alive,finalResult:o.finalResult,changedFiles:o.changedFiles,gitAncestry:o.gitAncestry,headCommit:s}),a=n.completionBlocker,l=typeof a=="string"&&a?a:void 0,c=Wp(l)?void 0:l,u=c?"blocked":o.status,d=c?"blocked":o.attention.state,m=Mp(n.completionResponse),f=Mp(m?.task),p=Dn(m?.outcome),h=Dn(m?.status),k=Array.isArray(m?.warnings)?m.warnings.filter(D=>typeof D=="string"&&D.trim().length>0):[],g=Dn(f?.prUrl)??Dn(m?.prUrl),R=Dn(n.completionReportedAt),I=aw({finished:oe(o),completionBlocker:c,completionOutcome:p,completionReportedAt:R}),P=lw({completionBlocker:c,completionOutcome:p,completionReportedAt:R,finished:oe(o)}),E=cw({changedFiles:o.changedFiles,headCommit:s,prUrl:g??void 0});return{worker:o.worker,status:u,attention:d,attentionReason:c??o.attention.reason,landingBlocked:o.finalResult?d==="needs_attention"||d==="blocked":!1,exitedWithoutFinalResult:!o.finalResult&&!o.alive,salvageState:i?.salvageable?"review_needed":"none",salvageReason:i?.salvageable?i.attentionReason:void 0,pid:o.pid,alive:o.alive,currentTool:o.currentTool,lastActivityAt:o.lastActivityAt,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary,heartbeatBlocker:o.heartbeatBlocker,changedFileCount:o.changedFiles.length,changedFiles:o.changedFiles,branch:o.branch,taskId:n.taskId??null,planId:n.planId??null,instructionPolicyFingerprint:typeof n.instructionPolicyFingerprint=="string"?n.instructionPolicyFingerprint:null,instructionPolicyRuleCount:(()=>{let D=n.instructionPolicyEvidence;if(!D||typeof D!="object")return null;let j=D.ruleSlugs;return Array.isArray(j)?j.length:null})(),leaseOwner:n.leaseOwner??null,model:typeof n.model=="string"?n.model:void 0,routingRule:typeof n.routingRule=="string"?n.routingRule:void 0,requestedModel:typeof n.requestedModel=="string"?n.requestedModel:void 0,headCommit:s,prUrl:g,handoffState:E,gitAncestry:o.gitAncestry,finalResult:o.finalResult,lifecycleStage:I,completionReportedAt:R,completionOutcome:n.completionOutcome??null,completionRouteStatus:h,completionRouteOutcome:p,completionWarnings:k,completionBlocker:c??null,checkpoint:{phase:o.lastHeartbeatPhase,summary:o.lastHeartbeatSummary,blocker:o.heartbeatBlocker},lastCommandHint:o.currentTool??o.lastHeartbeatSummary,failureReason:c??o.error??null,nextAction:P,ancestry:o.gitAncestry.relation,ancestryChecked:o.gitAncestry.checked}}function gw(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!Wp(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function hw(e,r){return{worker:e,status:"done",attention:"done",attentionReason:"metadata terminal worker; full status skipped in compact snapshot",alive:!1,pid:typeof r.pid=="number"?r.pid:void 0,branch:typeof r.branch=="string"?r.branch:void 0,taskId:r.taskId??null,planId:r.planId??null,model:typeof r.model=="string"?r.model:void 0,routingRule:typeof r.routingRule=="string"?r.routingRule:void 0,requestedModel:typeof r.requestedModel=="string"?r.requestedModel:void 0,lifecycleStage:r.completionReportedAt?"completion_acknowledged":"worker_finished",completionReportedAt:typeof r.completionReportedAt=="string"?r.completionReportedAt:null,completionOutcome:r.completionOutcome??null,localOnly:r.localOnly===!0,compactStatus:!0}}function br(e,r){let t={};for(let n of e){let o=n[r],s=typeof o=="string"&&o.trim()?o:"unknown";t[s]=(t[s]??0)+1}return t}function Up(e){if(e.attention!=="blocked")return!1;let r=typeof e.attentionReason=="string"?e.attentionReason:"";return r.includes("cli-config.json.tmp")||r.includes("Invalid authentication credentials")||r.includes("provider CLI is missing or not on PATH")||r.includes("unknown command:")}function $p(e){let r=e.filter(Up),t=e.filter(n=>{if(Up(n))return!1;let o=n.attention;return o==="needs_attention"||o==="blocked"||o==="stale"||n.status==="running"});return{actionableCount:t.length,runningCount:e.filter(n=>n.status==="running").length,blockedCount:e.filter(n=>n.attention==="blocked").length,staleCount:e.filter(n=>n.attention==="stale").length,needsAttentionCount:e.filter(n=>n.attention==="needs_attention").length,doneCount:e.filter(n=>n.status==="done").length,systemHealthBlockerCount:r.length,systemHealthBlockers:r.slice(0,10).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt})),actionableWorkers:t.slice(0,25).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,taskId:n.taskId,planId:n.planId,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt,nextAction:n.nextAction}))}}function Kp(e,r,t){let n={runId:e.id,name:e.name,status:mn(e.status,r),repo:e.repo,workerCount:r.length,needsAttention:r.filter(o=>o.attention&&o.attention!=="ok"&&o.attention!=="done").map(o=>o.worker),workers:r};return t&&(n.summary={statusCounts:br(r,"status"),attentionCounts:br(r,"attention"),lifecycleCounts:br(r,"lifecycleStage")},n.controller=$p(r)),n}function kw(e){return e.status==="done"&&e.attention==="done"}function Vr(e){let r=B(e),n=Object.keys(r.workers||{}).map(s=>{let i=_(Un.join(x(r.id),"workers",b(s),"worker.json"),void 0);return i?Fp({run:r,workerName:s,worker:i}):{worker:s,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=Kp(r,n,!1);return de(Un.join(x(r.id),"last-board.json"),o),o}function jp(e){let r=B(e),n=Object.keys(r.workers||{}).map(i=>{let a=_(Un.join(x(r.id),"workers",b(i),"worker.json"),void 0);return a?gw(a)?hw(i,a):Fp({run:r,workerName:i,worker:a}):{worker:i,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=n.filter(i=>!kw(i)),s=Kp(r,o,!0);return s.status=mn(r.status,n),s.summary={...s.summary??{},totalWorkerCount:n.length,shownWorkerCount:o.length,omittedTerminalDoneWorkerCount:n.length-o.length,allStatusCounts:br(n,"status"),allAttentionCounts:br(n,"attention")},de(Un.join(x(r.id),"last-board-compact.json"),s),s}async function Vp(e,r){let t=String(e.run||""),n=String(e.agentOsId||"");if(!t||!n)return null;let o=Vr(t),s=K(e.baseUrl?String(e.baseUrl):void 0),i=await G(e.secret?String(e.secret):void 0,n,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(n)}/harness/snapshot`,l=await X(a,i,{agentOsId:n,runId:t,source:r,snapshot:o},{agentOsId:n,baseUrl:s});return{ok:l.ok,httpStatus:l.status,response:l.response,authRefreshed:l.refreshedAuth,authRefreshFailure:l.authRefreshFailure}}function yw(e){return{full:`kynver run status --run ${e} --full`,blocked:`kynver status --run ${e} --blocked`,running:`kynver status --run ${e} --running`,task:`kynver status --run ${e} --task <task-id>`,worker:`kynver status --run ${e} --worker <worker>`,workersFull:`kynver worker list --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`,monitorTick:`kynver monitor status --run ${e} --tick`}}function ks(e){let r=ba(e),t=e.full===!0||e.full==="true",n=Lp(t?Vr(r):jp(r),e);n.projection=t?"full":"compact",t||(n.resultContract={projection:"compact",rawWorkerPayloadsOmitted:!0,omittedWorkerFields:["finalResult","changedFiles","gitAncestry","completionResponse","stdout/stderr tails"],deepDetailAvailableVia:["--full","worker status","worker tail","monitor status --tick"]},n.drilldownCommands=yw(r)),console.log(JSON.stringify(n,null,2))}function Gp(e){let{runId:r,workerName:t}=Ve(e),n=me(r,t),o=ko(n.stdoutPath,Number(e.lines||40));if(e.raw===!0||e.raw==="true"){process.stdout.write(o);return}for(let s of o.split(`
+`).filter(Boolean)){let i=st(s),a=i?jc(i):s;a&&console.log(a)}}function Yp(e){let{runId:r,workerName:t}=Ve(e),n=me(r,t);if(!L(n.pid)){console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"not_running"},null,2));return}if(mr(n.pid,"SIGTERM"),Ar(1500),L(n.pid)){mr(n.pid,"SIGKILL"),console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"sigkill_sent"},null,2));return}console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"stopped"},null,2))}w();var ww=5e3,Cw=360*60*1e3,_w=3,xw=5e3;function Pw(e){let{runId:r,workerName:t}=Ve(e);return{run:r,name:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,maxTotalMs:Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):void 0,completeAttempts:Number(e.completeAttempts)>0?Math.floor(Number(e.completeAttempts)):void 0,completeBackoffMs:Number(e.completeBackoffMs)>0?Math.floor(Number(e.completeBackoffMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}}async function Mt(e){let r=Pw(e),t=r.pollMs??ww,n=r.maxTotalMs??Cw,o=r.completeAttempts??_w,s=r.completeBackoffMs??xw,i=me(r.run,r.name);if(!i.agentOsId||!i.taskId)return{worker:i.name,runId:i.runId,outcome:"missing_link",attempts:0,reason:"worker has no agentOsId/taskId \u2014 nothing to attribute completion to"};if(jr(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let a=Date.now();for(;;){if(i=me(r.run,r.name),jr(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let u=T(i);if(oe(u)||!L(i.pid))break;if(Date.now()-a>n)return{worker:i.name,runId:i.runId,outcome:"timed_out",attempts:0,reason:`worker did not finish within ${n}ms`};Ar(t)}let l,c;for(let u=1;u<=o;u++){let d=await Wn({run:r.run,name:r.name,...r.agentOsId?{agentOsId:r.agentOsId}:{},...r.baseUrl?{baseUrl:r.baseUrl}:{},...r.secret?{secret:r.secret}:{}});if(l=d.httpStatus,d.ok)return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:d.httpStatus,attempts:u};if(d.httpStatus===401||d.httpStatus===403)return c=typeof d.reason=="string"?d.reason:"completion replay refused",{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:d.httpStatus,attempts:u,reason:c};c=typeof d.reason=="string"?d.reason:"transient failure",u<o&&Ar(s)}return{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:l,attempts:o,reason:c??"completion failed after retries"}}async function zp(e){try{let r=await Mt(e);console.log(JSON.stringify(r,null,2)),(r.outcome==="missing_link"||r.outcome==="timed_out")&&process.exit(1),process.exit(0)}catch(r){console.error(`worker auto-complete failed: ${r.message}`),process.exit(1)}}function Ew(){return qp.join(Sw(new URL(".",import.meta.url)),"cli.js")}function Xp(e){let r=e.cliPath??Ew();if(!bw(r))return;let t=qp.join(e.workerDir,"auto-complete.log"),n;try{n=vw(t,"a")}catch{n=void 0}let o=["ignore",n??"ignore",n??"ignore"],s=e.nodeExecutable??process.execPath,i=[r,"worker","auto-complete","--run",e.runId,"--name",e.workerName];e.agentOsId&&i.push("--agent-os-id",e.agentOsId),e.baseUrl&&i.push("--base-url",e.baseUrl),e.secret&&i.push("--secret",e.secret);try{let a=Rw(s,i,ue({detached:!0,stdio:o,env:process.env}));return n!==void 0&&Jp(n),a.unref(),{pid:a.pid,logPath:t,cliPath:r}}catch{if(n!==void 0)try{Jp(n)}catch{}return}}Se();function Qp(e,r,t){pe(e,["fetch","origin",t,"--prune"],{allowFailure:!0});let n=`origin/${t}`,o=re(e,["worktree","add","-B",t,r,n]);if(o.status===0)return;let s=re(e,["worktree","add","-b",t,r,"HEAD"]);if(s.status!==0){let i=o.stderr||o.stdout||s.stderr||s.stdout||"git worktree add failed for repair target branch";throw new Error(i)}}Ie();O();function wa(e,r){let t=typeof r.name=="string"?r.name.trim():"";if(!t||t==="undefined"||t==="null")throw new Error(`worker name is required and must be a real identifier (got: ${JSON.stringify(r.name)})`);let n=b(t);if(e.workers?.[n])throw new Error(`worker already exists in run ${e.id}: ${n}`);if(!r.task)throw new Error(`missing task text for worker ${n}`);let o=r.routingRule||r.requestedModel?{provider:r.provider||sr,model:r.model,rule:r.routingRule||"explicit:spawn",requestedModel:r.requestedModel??r.model}:rs({explicitModel:r.model,explicitProvider:r.provider,explicitProviderIsOperatorOverride:!!r.provider?.trim()}),s=ip(o.provider),i=o.model;if(s.preflightModel){let U=s.preflightModel(r.model);if(!U.ok)throw new Error(`model preflight failed for provider "${s.name}": ${U.note??"invalid model/provider combination"}`);U.normalized&&console.error(`[supervisor] ${n}: ${U.note}`),i=U.model}let{worktreesDir:a}=te(),l=Ut.join(x(e.id),"workers",n);Iw(l,{recursive:!0});let c=Ut.join(a,e.id,n),u=r.repairTargetBranch?.trim()||void 0,d=u||r.branch||`agent/${e.id}/${n}`;if(Aw(c))throw new Error(`worktree path already exists: ${c}`);pe(e.repo,["fetch","origin","--prune"],{allowFailure:!0}),u?Qp(e.repo,c,u):pe(e.repo,["worktree","add","-b",d,c,e.baseCommit],{throwError:!0});let m=Ut.join(l,"stdout.jsonl"),f=Ut.join(l,"stderr.log"),p=Ut.join(l,"heartbeat.jsonl"),h=ep({task:r.task,ownedPaths:r.ownedPaths||[],worktreePath:c,heartbeatPath:p,planId:r.planId,taskId:r.taskId,instructionPolicyMarkdown:r.instructionPolicyMarkdown,memoryQualityMarkdown:r.memoryQualityPromptMarkdown??r.memoryQualityCapture?.promptMarkdown??null,personaMarkdown:r.personaMarkdown,contextEnvelopeMarkdown:r.contextEnvelopeMarkdown,model:i,repairTargetPrUrl:r.repairTargetPrUrl,repairTargetBranch:r.repairTargetBranch??(u||void 0)}),k=process.env.KYNVER_HARNESS_TASK_ID,g=process.env.KYNVER_HARNESS_AGENT_OS_ID;r.taskId&&(process.env.KYNVER_HARNESS_TASK_ID=String(r.taskId)),r.agentOsId&&(process.env.KYNVER_HARNESS_AGENT_OS_ID=String(r.agentOsId));let R;try{R=s.start({name:n,task:r.task,ownedPaths:r.ownedPaths,model:i,branch:d,worktreePath:c,workerDir:l,stdoutPath:m,stderrPath:f,heartbeatPath:p,prompt:h})}catch(U){throw pe(e.repo,["worktree","remove","--force",c],{allowFailure:!0}),pe(e.repo,["branch","-D",d],{allowFailure:!0}),U}finally{k===void 0?delete process.env.KYNVER_HARNESS_TASK_ID:process.env.KYNVER_HARNESS_TASK_ID=k,g===void 0?delete process.env.KYNVER_HARNESS_AGENT_OS_ID:process.env.KYNVER_HARNESS_AGENT_OS_ID=g}let I=jd(R.model,i,s.defaultModel),P=v(),E=We(process.env,P),D=Ke().runnerId,j=ns(E.boxKind),F={name:n,runId:e.id,status:"running",pid:R.pid,model:I,branch:d,worktreePath:c,workerDir:l,stdoutPath:m,stderrPath:f,heartbeatPath:p,ownedPaths:r.ownedPaths,...r.agentOsId?{agentOsId:String(r.agentOsId)}:{},...r.taskId?{taskId:String(r.taskId)}:{},...r.planId?{planId:String(r.planId)}:{},...r.instructionPolicyFingerprint?{instructionPolicyFingerprint:String(r.instructionPolicyFingerprint)}:{},...r.instructionPolicyEvidence?{instructionPolicyEvidence:r.instructionPolicyEvidence}:{},...r.memoryQualityCapture?{memoryQualityCapture:r.memoryQualityCapture}:{},...r.personaSlug?{personaSlug:String(r.personaSlug)}:{},...r.personaEvidence?{personaEvidence:r.personaEvidence}:{},...r.contextEnvelopeEvidence?{contextEnvelopeEvidence:r.contextEnvelopeEvidence}:{},...r.leaseOwner?{leaseOwner:String(r.leaseOwner)}:{},...r.leaseToken?{leaseToken:String(r.leaseToken)}:{},...r.dispatched?{dispatched:!0}:{},...!r.agentOsId||!r.taskId?{localOnly:!0}:{},routingRule:o.rule,...o.requestedModel?{requestedModel:o.requestedModel}:{},...o.orchestrationAudit?{orchestrationAudit:o.orchestrationAudit}:{},...r.executorRef?{executorRef:String(r.executorRef)}:{},...r.parentTaskId?{parentTaskId:String(r.parentTaskId)}:{},...r.taskTitle?{taskTitle:String(r.taskTitle)}:{},...r.taskPrUrl?{taskPrUrl:String(r.taskPrUrl)}:{},...r.repairTargetPrUrl?{repairTargetPrUrl:String(r.repairTargetPrUrl)}:{},...r.repairTargetBranch?{repairTargetBranch:String(r.repairTargetBranch)}:{},boxKind:E.boxKind,boxId:j,runtimeId:D,startedAt:new Date().toISOString()};if(H(e.id,F),e.workers={...e.workers||{},[n]:{workerDir:l,statusPath:Ut.join(l,"worker.json")}},e.status="running",Oe(e),F.agentOsId&&F.taskId){let U;try{U=Xp({runId:e.id,workerName:n,workerDir:l,agentOsId:F.agentOsId})}catch(C){let ae=`completion sidecar failed to spawn: ${C.message}`;F.completionBlocker=ae,H(e.id,F)}if(U)U.pid&&(F.completionSidecarPid=U.pid,H(e.id,F));else{let C="completion sidecar failed to spawn (CLI not found or spawn error)";F.completionBlocker=C,F.completionSidecarSpawnFailedAt=new Date().toISOString(),H(e.id,F)}}return F}async function Zp(e){let r=B(String(e.run)),t=typeof e.name=="string"?e.name.trim():"";t||(console.error("worker start failed: --name is required"),process.exit(1));let n=e.task?String(e.task):gc(e.taskFile?String(e.taskFile):void 0);n||(console.error("missing --task or --task-file"),process.exit(1));let o=!!(e.agentOsId&&e.taskId),s=e.localOnly===!0||e.localOnly==="true";!o&&!s&&(e.agentOsId||e.taskId)&&(console.error("worker start: board-linked workers require both --agent-os-id and --task-id (or pass --local-only for direct runs)"),process.exit(1));let i=e.wait===!0||e.wait==="true",a;try{a=wa(r,{name:t,task:n,ownedPaths:e.owned?String(e.owned).split(",").map(c=>c.trim()).filter(Boolean):[],model:e.model?String(e.model):void 0,branch:e.branch?String(e.branch):void 0,agentOsId:e.agentOsId?String(e.agentOsId):void 0,taskId:e.taskId?String(e.taskId):void 0,provider:e.provider?String(e.provider):void 0}),console.log(JSON.stringify({runId:r.id,worker:a.name,pid:a.pid,branch:a.branch,worktreePath:a.worktreePath,workerDir:a.workerDir},null,2))}catch(c){console.error(`worker start failed: ${c.message}`),process.exit(1)}if(!i||!a)return;let l=await Mt({run:String(e.run),name:a.name,...a.agentOsId?{agentOsId:a.agentOsId}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});console.error(JSON.stringify({event:"start_wait_outcome",...l})),l.outcome==="timed_out"&&(process.exitCode=1)}w();import{createHash as em}from"node:crypto";function vr(e){let r=e.replace(/\r\n/g,`
+`).trimEnd();return em("sha256").update(r,"utf8").digest("hex")}function Wt(e){if(e==null)return null;let r=e.trim();return r?em("sha256").update(r,"utf8").digest("hex"):null}O();var z=class extends Error{kind;httpStatus;constructor(r,t,n){super(t),this.name="PlanPersistError",this.kind=r,this.httpStatus=n}};function Bn(e,r){return e===401||e===403?new z("auth",r,e):e>=500?new z("server",r,e):new z("permanent",r,e)}function Ca(e){let r=e instanceof Error?e.message:String(e);return/ECONNREFUSED|ENOTFOUND|ETIMEDOUT|fetch failed|network/i.test(r)?new z("network",r):new z("tool_interruption",r)}function rm(e){return e!=="permanent"}function Rs(e){let r={"Content-Type":"application/json"};return e&&(r.Authorization=`Bearer ${e}`),r}async function bs(e){let r=await e.text();try{return JSON.parse(r)}catch{return r}}async function tm(e,r,t={}){let n=K(t.baseUrl),o=t.apiKey??ne(),s=t.fetchFn??fetch,i=`${n}/api/agent-os/${encodeURIComponent(e)}/plans/${encodeURIComponent(r)}`;try{let a=await s(i,{method:"GET",headers:Rs(o)}),l=await bs(a);if(!a.ok){let c=typeof l=="object"&&l&&"error"in l?String(l.error):`GET plan failed (${a.status})`;throw Bn(a.status,c)}return l}catch(a){throw a instanceof z?a:Ca(a)}}async function nm(e,r={}){let t=K(r.baseUrl),n=r.apiKey??ne(),o=r.fetchFn??fetch,s=e.agentOsSlug;try{if(e.operation==="create"){let m=`${t}/api/agent-os/${encodeURIComponent(s)}/plans`,f={title:e.title,summary:e.summary??null,slug:e.planSlug??null,sourceRefs:ys(e),initialVersion:{title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:ys(e)}},p=await o(m,{method:"POST",headers:Rs(n),body:JSON.stringify(f)}),h=await bs(p);if(!p.ok){let g=typeof h=="object"&&h&&"error"in h?String(h.error):`create plan failed (${p.status})`;throw Bn(p.status,g)}let k=h;return{planId:k.plan.id,versionId:k.version.id,versionNumber:k.version.versionNumber}}let i=e.planId;if(!i)throw new z("permanent","planId is required for this operation");if(e.operation==="update_metadata"){let m=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}`,f={title:e.title,summary:e.summary??null,sourceRefs:ys(e)},p=await o(m,{method:"PATCH",headers:Rs(n),body:JSON.stringify(f)}),h=await bs(p);if(!p.ok){let g=typeof h=="object"&&h&&"error"in h?String(h.error):`update plan failed (${p.status})`;throw Bn(p.status,g)}let k=h;return{planId:k.id,versionId:k.currentVersionId,versionNumber:null}}let a=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}/versions`,l={title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:ys(e),markCurrent:e.markCurrent!==!1},c=await o(a,{method:"POST",headers:Rs(n),body:JSON.stringify(l)}),u=await bs(c);if(!c.ok){let m=typeof u=="object"&&u&&"error"in u?String(u.error):`add version failed (${c.status})`;throw Bn(c.status,m)}let d=u;return{planId:d.version.planId,versionId:d.version.id,versionNumber:d.version.versionNumber}}catch(i){throw i instanceof z?i:Ca(i)}}function ys(e){let r={...e.sourceRefs??{}};return e.model&&(r.model=e.model),Object.keys(r).length?r:e.sourceRefs??null}import{createHash as Ow}from"node:crypto";function vs(e){let r={operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??null,planSlug:e.planSlug??null,title:e.title.trim(),summaryHash:Wt(e.summary),bodyHash:vr(e.body),changeSummary:e.changeSummary?.trim()??null,markCurrent:e.markCurrent??!0};return Ow("sha256").update(JSON.stringify(r),"utf8").digest("hex")}import{mkdirSync as om}from"node:fs";import{homedir as Nw}from"node:os";import Bt from"node:path";function Ss(){let e=process.env.KYNVER_STATE_ROOT;return e?Bt.resolve(e):Bt.join(Nw(),".kynver","state")}function ws(){return Bt.join(Ss(),"plan-outbox")}function Tw(){return Bt.join(Ss(),"plan-outbox-archive")}function Gr(){let e=ws(),r=Tw();return om(e,{recursive:!0}),om(r,{recursive:!0}),{outboxDir:e,archiveDir:r}}function Ln(e){if(e.startsWith("/tmp/")||e.startsWith("/var/folders/"))return!0;let r=Bt.resolve(e);return r.startsWith("/tmp/")||r.startsWith(Bt.join("/var","folders"))}import{existsSync as _a,readFileSync as im,renameSync as sm,readdirSync as Dw,writeFileSync as xa,unlinkSync as eB}from"node:fs";import Te from"node:path";import{randomUUID as Mw}from"node:crypto";var Uw=12;function Lt(){let{outboxDir:e}=Gr(),r=Dw(e).filter(n=>n.endsWith(".json")),t=[];for(let n of r){let o=Ea(Te.join(e,n));o&&o.queueStatus==="queued"&&t.push(o)}return t.sort((n,o)=>n.createdAt.localeCompare(o.createdAt))}function Pa(e){for(let r of Lt())if(r.idempotencyKey===e)return r;return null}function Ea(e){if(!_a(e))return null;try{return JSON.parse(im(e,"utf8"))}catch{return null}}function am(e){let{outboxDir:r}=Gr(),t=Te.join(r,e.bodyPath);return im(t,"utf8")}function Aa(e,r){let{outboxDir:t}=Gr(),n=new Date().toISOString(),o=r.existing?.id??Mw(),s=r.existing?.bodyPath??`${o}.body.md`,i=Te.join(t,`${o}.json`),a=Te.join(t,s);r.existing||xa(a,e.body,"utf8");let l={id:o,idempotencyKey:vs(e),operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??r.existing?.planId??null,planSlug:e.planSlug??r.existing?.planSlug??null,title:e.title,summary:e.summary??null,bodyPath:s,bodyHash:vr(e.body),author:e.author??null,model:e.model??null,sourceRefs:e.sourceRefs??null,changeSummary:e.changeSummary??null,markCurrent:e.markCurrent??!0,createdAt:r.existing?.createdAt??n,updatedAt:n,retryCount:(r.existing?.retryCount??0)+(r.existing?1:0),maxRetries:e.maxRetries??r.existing?.maxRetries??Uw,lastError:r.lastError,lastFailureKind:r.lastFailureKind,queueStatus:"queued",userStatus:"queued for retry",readbackEvidence:null};return xa(i,`${JSON.stringify(l,null,2)}
+`,{mode:384}),l}function lm(e){let{outboxDir:r}=Gr(),t=Te.join(r,`${e.id}.json`);xa(t,`${JSON.stringify(e,null,2)}
+`,{mode:384})}function cm(e){let{outboxDir:r,archiveDir:t}=Gr(),n=Te.join(r,`${e.id}.json`),o=Te.join(r,e.bodyPath),s=Te.join(t,`${e.id}.json`),i=Te.join(t,e.bodyPath);_a(n)&&sm(n,s),_a(o)&&sm(o,i)}function Hn(e){let{outboxDir:r}=Gr();return{jsonPath:Te.join(r,`${e.id}.json`),bodyPath:Te.join(r,e.bodyPath)}}function um(e,r){return{operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId,planSlug:e.planSlug,title:e.title,summary:e.summary,body:r,changeSummary:e.changeSummary??void 0,author:e.author??void 0,model:e.model??void 0,sourceRefs:e.sourceRefs,markCurrent:e.markCurrent??!0,maxRetries:e.maxRetries}}async function dm(e,r,t={}){let n=await tm(e,r.planId,t),o=n.plan,s=n.currentVersion;if(o.title.trim()!==r.title.trim())throw new z("verification_failed",`title mismatch: expected "${r.title}", got "${o.title}"`);let i=Wt(r.summary),a=Wt(o.summary);if(i!==a)throw new z("verification_failed","summary mismatch on readback");if(r.versionId&&o.currentVersionId!==r.versionId)throw new z("verification_failed",`currentVersionId mismatch: expected ${r.versionId}, got ${o.currentVersionId}`);if(r.versionNumber!=null&&(!s||s.versionNumber!==r.versionNumber))throw new z("verification_failed",`versionNumber mismatch: expected ${r.versionNumber}, got ${s?.versionNumber??"none"}`);let l=s?.body??"",c=vr(l);if(r.bodyHash&&c!==r.bodyHash)throw new z("verification_failed","body hash mismatch on readback");return{planId:o.id,currentVersionId:o.currentVersionId,versionNumber:s?.versionNumber??null,title:o.title,summary:o.summary,bodyHash:r.bodyHash||c,readAt:new Date().toISOString()}}function pm(e,r){return{planId:r.planId,title:e.title,summary:e.summary??null,body:e.body,bodyHash:vr(e.body),versionId:r.versionId,versionNumber:r.versionNumber}}var mm="persisted and read back",Ww="queued for retry",Ia="failed and needs action";async function Fn(e,r={}){e.bodyPathHint&&Ln(e.bodyPathHint);let t=vs(e),n=Pa(t);if(n?.readbackEvidence)return{userStatus:mm,outboxId:n.id,planId:n.readbackEvidence.planId,readbackEvidence:n.readbackEvidence,idempotencyKey:t};if(e.immediateFailure)return fm(e,e.immediateFailure.message,e.immediateFailure.kind,n);let o=r.writePlan??nm,s=r.verifyReadback??dm;try{let i=await o(e,r),a={...e,planId:i.planId},l=pm(a,i),c=await s(e.agentOsSlug,Bw(e,l),r);return n&&cm(n),{userStatus:mm,planId:i.planId,versionId:i.versionId??void 0,readbackEvidence:c,idempotencyKey:t}}catch(i){let a=i instanceof z?i:new z("tool_interruption",i instanceof Error?i.message:String(i));if(!rm(a.kind)){let l=Aa(e,{lastError:a.message,lastFailureKind:a.kind,existing:n??void 0}),c=Hn(l),u=gm(l,a.message);return{userStatus:Ia,outboxId:u.id,outboxPath:c.jsonPath,bodyPath:c.bodyPath,lastError:a.message,idempotencyKey:t}}return fm(e,a.message,a.kind,n)}}function Bw(e,r){return e.operation==="update_metadata"?{...r,body:"",bodyHash:""}:r}function fm(e,r,t,n){let o=Aa(e,{lastError:r,lastFailureKind:t,existing:n??void 0}),s=Hn(o);if(o.retryCount>=o.maxRetries){let i=gm(o,r);return{userStatus:Ia,outboxId:i.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}return{userStatus:Ww,outboxId:o.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}function gm(e,r){let t={...e,queueStatus:"failed",userStatus:Ia,lastError:r,updatedAt:new Date().toISOString()};return lm(t),t}import Lw from"node:path";async function Oa(e={},r={}){let t=Lt().filter(s=>e.outboxId?s.id===e.outboxId:!0),n=e.max&&e.max>0?t.slice(0,e.max):t,o={processed:0,succeeded:0,stillQueued:0,failed:0,results:[]};for(let s of n){o.processed+=1;let i=am(s),a=um(s,i),l=await Fn(a,r);l.userStatus==="persisted and read back"?o.succeeded+=1:l.userStatus==="failed and needs action"?o.failed+=1:o.stillQueued+=1,o.results.push({outboxId:s.id,userStatus:l.userStatus,lastError:l.lastError})}return o}function Na(e){let r=Lw.join(ws(),`${e}.json`);return Ea(r)}function Ta(e){let r=Hn(e);return["## Plan persistence risk","",`AgentOS plan write is **not** confirmed (${e.userStatus}).`,`- outboxId: \`${e.id}\``,e.planId?`- planId: \`${e.planId}\``:"- planId: (pending \u2014 create not yet applied)",`- outbox: \`${r.jsonPath}\``,`- body: \`${r.bodyPath}\``,"","Drain when approval/connectivity returns: `kynver plan outbox drain`"].join(`
+`)}function Da(e){let r=e.metadata&&typeof e.metadata=="object"?e.metadata:null,t=typeof e.planPersistenceOutboxId=="string"&&e.planPersistenceOutboxId||(r&&typeof r.planPersistenceOutboxId=="string"?r.planPersistenceOutboxId:void 0);return t?{outboxId:t,jsonPath:typeof e.planPersistenceOutboxPath=="string"?e.planPersistenceOutboxPath:r&&typeof r.planPersistenceOutboxPath=="string"?r.planPersistenceOutboxPath:void 0,bodyPath:typeof e.planPersistenceBodyPath=="string"?e.planPersistenceBodyPath:r&&typeof r.planPersistenceBodyPath=="string"?r.planPersistenceBodyPath:void 0}:null}async function Ma(e){let r=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/release`,t;try{t=await X(r,e.secret,{agentOsId:e.agentOsId,leaseOwner:e.leaseOwner,...e.failureDetail?{failureDetail:e.failureDetail}:{}},{agentOsId:e.agentOsId,baseUrl:e.baseUrl})}catch(s){return{released:!1,httpOk:!1,releaseResponse:{ok:!1,error:s.message}}}let n=t.response;return{released:t.ok===!0||n?.ok===!0,httpOk:t.ok===!0,releaseResponse:t.response??t}}import{spawnSync as km}from"node:child_process";import{spawnSync as Hw}from"node:child_process";function hm(){if(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim())return{source:"env",configured:!0,reason:"GitHub token already configured in environment"};let e=Hw("gh",["auth","token"],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});if(e.status!==0)return{source:"missing",configured:!1,reason:typeof e.stderr=="string"&&e.stderr.trim()?e.stderr.trim():"gh auth token failed; run `gh auth login` on this machine"};let r=typeof e.stdout=="string"?e.stdout.trim():"";return r?(process.env.GH_TOKEN=r,{source:"gh-cli",configured:!0,reason:"Using local GitHub CLI auth for daemon land_pr merge"}):{source:"missing",configured:!1,reason:"gh auth token returned an empty token; run `gh auth login` on this machine"}}var ym=new Set(["SUCCESS","SKIPPED","NEUTRAL"]),Fw=new Set(["CLEAN","HAS_HOOKS"]);function Wa(e){return e?.trim()?["--repo",e.trim()]:[]}function Rm(e){let r=/github\.com\/([^/]+)\/([^/]+)\/pull\/\d+/i.exec(e.trim());return r?`${r[1]}/${r[2]}`:null}function bm(e,r,t){let n=e.gh(r,t);if(n.status!==0)throw new Error(n.stderr||n.stdout||`gh ${t.join(" ")} failed`);return JSON.parse(n.stdout||"{}")}function $n(e){return typeof e.name=="string"&&e.name||typeof e.context=="string"&&e.context||typeof e.workflowName=="string"&&e.workflowName||"unknown check"}function $w(e){let r=Array.isArray(e)?e:[],t=[],n=[];for(let o of r){let s=o&&typeof o=="object"?o:{},i=typeof s.conclusion=="string"?s.conclusion.toUpperCase():"",a=typeof s.status=="string"?s.status.toUpperCase():"",l=typeof s.state=="string"?s.state.toUpperCase():"";if(!(i&&ym.has(i))){if(i){n.push(`${$n(s)}=${i}`);continue}if(!(l&&ym.has(l))){if(l&&l!=="PENDING"&&l!=="EXPECTED"){n.push(`${$n(s)}=${l}`);continue}if(l==="PENDING"||l==="EXPECTED"){t.push(`${$n(s)}=${l}`);continue}if(a&&a!=="COMPLETED"){t.push(`${$n(s)}=${a}`);continue}t.push(`${$n(s)}=PENDING`)}}}return{pending:t,failed:n}}function Kw(e){return(Array.isArray(e)?e:[]).some(t=>{let n=t&&typeof t=="object"?t:{},o=typeof n.name=="string"&&n.name||typeof n.context=="string"&&n.context||"",s=typeof n.conclusion=="string"?n.conclusion.toUpperCase():"",i=typeof n.state=="string"?n.state.toUpperCase():"";return/^vercel/i.test(o)&&(s==="SUCCESS"||i==="SUCCESS")})}var jw=/^##\s*(test\s*plan|verification|test\s*evidence|verify)\b/im,Vw=/typecheck|npm run (test|build|typecheck)|vitest|tsc\b|verify-pr-local|local verify|local-verify|tests? (pass|green)|build green|node --test/i,Gw=/^docs[(:]/i,Yw=/docs[- ]only|documentation only|no[- ]code change|no code changes|low[- ]risk|plan tracker only|markdown only/i;function Jw(e){let r=typeof e.title=="string"?e.title.trim():"",t=typeof e.body=="string"?e.body.trim():"",n=Gw.test(r)||Yw.test(t),o=jw.test(t),s=Vw.test(t);return n||o||s||e.vercelCheckSuccess===!0}function qw(e){if(!Jw({title:e.title,body:e.body,vercelCheckSuccess:Kw(e.statusCheckRollup)}))throw new Error(`PR #${e.number} lacks landing verification evidence \u2014 add ## Test plan / ## Verification with local commands, Vercel preview, or docs/no-code rationale`)}function zw(e){if(e.state!=="OPEN")throw new Error(`PR #${e.number} is ${e.state}, not OPEN`);if(e.isDraft)throw new Error(`PR #${e.number} is still a draft`);if(!Fw.has(e.mergeStateStatus))throw new Error(`PR #${e.number} mergeStateStatus is ${e.mergeStateStatus}`);let r=$w(e.statusCheckRollup);if(r.failed.length>0)throw new Error(`PR #${e.number} has failing checks: ${r.failed.join(", ")}`);if(r.pending.length>0)throw new Error(`PR #${e.number} has pending checks: ${r.pending.join(", ")}`);qw(e)}function Xw(e){try{return zw(e),null}catch(r){return r instanceof Error?r.message:String(r)}}function Qw(e,r,t,n){if(!n?.trim())return;let o=encodeURI(`heads/${n}`);e.gh(r,["api","-X","DELETE",`repos/${t}/git/refs/${o}`])}function Zw(e,r,t){if(t?.trim())return t.trim();let n=e.gh(r,["repo","view","--json","nameWithOwner"]);if(n.status!==0)throw new Error(n.stderr||"Could not resolve GitHub repo");let o=JSON.parse(n.stdout||"{}");if(!o.nameWithOwner)throw new Error("Could not resolve GitHub repo");return o.nameWithOwner}function eC(e,r){if(!r?.trim())return;let t=km("git",["worktree","list","--porcelain"],{cwd:e,encoding:"utf8"});if(t.status!==0)return;let n=String(t.stdout||"").split(/\r?\n/),o=null,s=null;for(let i of n){if(i.startsWith("worktree ")){o=i.slice(9).trim(),s=null;continue}i.startsWith("branch ")&&o&&(s=i.slice(7).trim(),s.endsWith(`/${r}`)&&km("git",["worktree","remove","--force",o],{cwd:e,encoding:"utf8"}))}}async function vm(e){let r=e.cwd??process.cwd(),t=e.exec??ds,n=e.prUrl.trim();if(!n)throw new Error("prUrl is required");let o=hm();if(!o.configured)return{prUrl:n,outcome:"blocked",reason:o.reason};let s=bm(t,r,["pr","view",n,...Wa(e.repo),"--json",["number","url","title","body","state","isDraft","mergeStateStatus","statusCheckRollup","headRefName","mergedAt","mergeCommit"].join(",")]);if(s.state==="MERGED"||s.mergedAt)return{prUrl:s.url||n,outcome:"skipped",mergeCommit:s.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 land_pr no-op (redelivery)`};let i=Xw(s);if(i)return e.skipNotReady?{prUrl:s.url||n,outcome:"skipped",reason:i}:{prUrl:s.url||n,outcome:"blocked",reason:i};if(e.dryRun)return{prUrl:s.url||n,outcome:"skipped",reason:"dry-run: PR is ready to merge"};let a=String(s.number),l=t.gh(r,["pr","merge",a,...Wa(e.repo),"--squash"]);if(l.status!==0){let u=Ua(t,r,a,e.repo);return u?{prUrl:u.url||s.url||n,outcome:"skipped",mergeCommit:u.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 merged by another lane during land_pr (race)`}:{prUrl:s.url||n,outcome:"blocked",reason:l.stderr||l.stdout||"gh pr merge failed"}}let c=Ua(t,r,a,e.repo);c||(c=Ua(t,r,a,e.repo));try{let u=Zw(t,r,e.repo);Qw(t,r,u,s.headRefName),eC(r,s.headRefName)}catch{}return{prUrl:c?.url||s.url||n,outcome:"merged",mergeCommit:c?.mergeCommit?.oid??null,reason:`Daemon land_pr merged PR #${s.number}${c?"":" (post-merge view unavailable \u2014 merge verified by gh exit 0)"}`}}function Ua(e,r,t,n){try{let o=bm(e,r,["pr","view",t,...Wa(n),"--json","number,url,mergedAt,mergeCommit,state"]);return o.state==="MERGED"||o.mergedAt?o:null}catch{return null}}O();async function Sm(e){let r=await G(e.secret,e.agentOsId,{baseUrl:e.baseUrl}),t=String(e.task.id),n=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/harness/completion`,o=new Date().toISOString(),s={source:"kynver-harness",agentOsId:e.agentOsId,runId:e.runId,workerName:`land-pr-${t}`,taskId:t,leaseToken:e.task.leaseToken??null,startedAt:o,finishedAt:o,status:{finalResult:e.report,prUrl:e.report.prUrl,summary:e.report.reason,leaseToken:e.task.leaseToken??null},workerInjection:null},i=await X(n,r,s,{agentOsId:e.agentOsId,baseUrl:e.baseUrl});return{ok:i.ok,status:i.status}}function wm(){return["## verify_live completion contract","Finish with a JSON finalResult object:","{",'  "prUrl": "<landed pr>",','  "outcome": "passed" | "failed" | "skipped" | "no_mcp_surface",','  "reason": "<human summary>",','  "mergeCommit": "<sha optional>",','  "liveReadback": "<prod readback string from acceptance.liveReadbackQuery>",','  "mcpCalls": [{ "tool": "<name>", "ok": true, "summary": "..." }]',"}","","Drive the feature MCP tools against live production. Do not mark passed without exercising the MCP surface.","When the subject carries an acceptance snapshot, include liveReadback \u2014 the server oracle rejects passed if the original symptom still appears."].join(`
+`)}var rC="dispatch_start_readback_failed:";function Yr(e){return`${rC} ${e.trim()}`}function tC(e){return e.branch?.trim()?e.worktreePath?.trim()?e.heartbeatPath?.trim()?e.startedAt?.trim()?null:"missing local worker startedAt":"missing local worker heartbeatPath":"missing local worker worktreePath":"missing local worker branch"}function nC(e){let{snapshot:r,leaseOwner:t,expectedLeaseToken:n,worker:o}=e;if(!r)return{ok:!1,error:Yr("task lease snapshot missing after spawn"),detail:{taskId:o.taskId,leaseOwner:t,expectedLeaseToken:n}};if(r.status!=="running")return{ok:!1,error:Yr(`AgentOS task status=${r.status} (expected running)`),detail:{taskId:r.taskId,status:r.status,leaseOwner:r.leaseOwner,blocker:r.blocker},snapshot:r};let s=r.leaseOwner?.trim()??"";if(!s||s!==t.trim())return{ok:!1,error:Yr(`leaseOwner mismatch (board=${s||"null"}, expected=${t})`),detail:{taskId:r.taskId,boardLeaseOwner:s||null,expectedLeaseOwner:t},snapshot:r};let i=r.leaseToken?.trim()??"";if(!i||i!==n.trim())return{ok:!1,error:Yr(`leaseToken mismatch (board=${i||"null"}, expected=${n})`),detail:{taskId:r.taskId,boardLeaseToken:i||null,expectedLeaseToken:n},snapshot:r};let a=tC(o);return a?{ok:!1,error:Yr(a),detail:{taskId:o.taskId,worker:o.name},snapshot:r}:r.heartbeatAt?.trim()?o.executorRef?.trim()&&r.executorRef?.trim()&&o.executorRef.trim()!==r.executorRef.trim()?{ok:!1,error:Yr(`executorRef mismatch (board=${r.executorRef}, worker=${o.executorRef})`),detail:{taskId:r.taskId,boardExecutorRef:r.executorRef,workerExecutorRef:o.executorRef},snapshot:r}:{ok:!0,snapshot:r}:{ok:!1,error:Yr("AgentOS heartbeatAt missing after claim"),detail:{taskId:r.taskId},snapshot:r}}async function Cm(e){let r=await Dt({agentOsId:e.agentOsId,taskIds:[e.taskId],baseUrl:e.baseUrl,secret:e.secret});return nC({snapshot:r.get(e.taskId)??null,leaseOwner:e.leaseOwner,expectedLeaseToken:e.expectedLeaseToken,worker:e.worker})}w();M();function _m(e,r,t){r.pid&&L(r.pid)&&(mr(r.pid,"SIGTERM"),L(r.pid)&&mr(r.pid,"SIGKILL"));let n={...r,status:"failed",pid:void 0,completionBlocker:t,dispatchStartReadbackFailed:!0};return H(e,n),n}M();var aa=3600*1e3;function xm(e){let r=e.admissionExhaustion;return!r||typeof r!="object"?null:r}function Pm(e){let r=e.dispatchSkipDrain;return!r||typeof r!="object"?null:r}function oC(e){let r=e.harnessWorkerContext;if(!r||typeof r!="object")return null;let t=r,n=typeof t.instructionPolicyMarkdown=="string"?t.instructionPolicyMarkdown:null,o=typeof t.instructionPolicyFingerprint=="string"?t.instructionPolicyFingerprint:null,s=t.instructionPolicyEvidence&&typeof t.instructionPolicyEvidence=="object"?t.instructionPolicyEvidence:null,i=typeof t.personaMarkdown=="string"?t.personaMarkdown:null,a=typeof t.personaEvidence=="object"&&t.personaEvidence&&typeof t.personaEvidence.injectedPersonaSlug=="string"?t.personaEvidence.injectedPersonaSlug:null,l=t.personaEvidence&&typeof t.personaEvidence=="object"?t.personaEvidence:null,c=t.personaInjectionReady===!0,u=typeof t.contextEnvelopeMarkdown=="string"?t.contextEnvelopeMarkdown:null,d=t.contextEnvelopeEvidence&&typeof t.contextEnvelopeEvidence=="object"?t.contextEnvelopeEvidence:null,m=t.contextEnvelopeReady===!0,f=t.memoryQualityCapture&&typeof t.memoryQualityCapture=="object"?t.memoryQualityCapture:null,p=typeof t.memoryQualityPromptMarkdown=="string"?t.memoryQualityPromptMarkdown:typeof f?.promptMarkdown=="string"?f.promptMarkdown:null;return{instructionPolicyMarkdown:n,instructionPolicyFingerprint:o,instructionPolicyEvidence:s,memoryQualityCapture:f,memoryQualityPromptMarkdown:p,personaMarkdown:i,personaSlug:a,personaEvidence:l,personaInjectionReady:c,contextEnvelopeMarkdown:u,contextEnvelopeEvidence:d,contextEnvelopeReady:m}}function sC(e){if(typeof e!="string")return null;let r=e.trim().toLowerCase();return r.length?r:null}function iC(e,r){let t=[`[AgentOS task ${e.id}] ${e.title}`,"",e.description?String(e.description):"(no description on the board task)","",`Board linkage: agentOsId=${r}, taskId=${e.id}, attempt=${e.attempt}, executor=${e.executor}${e.executorRef?`, executorRef=${e.executorRef}`:""}.`,"This worker was dispatched from the AgentOS board. The harness reports your completion back to the board when you finish."];e.executor==="verify_live"&&t.push("",wm());let n=Da(e);if(n?.outboxId){let o=Na(n.outboxId);o?t.push("",Ta(o)):t.push("","## Plan persistence risk","",`Unconfirmed AgentOS plan write (outboxId=${n.outboxId}).`)}return t.join(`
+`)}function aC(e){let r=new Set;if(e.targetTaskId)return r.add(String(e.targetTaskId)),r;if(e.targetTaskIds)for(let t of String(e.targetTaskIds).split(",")){let n=t.trim();n&&r.add(n)}return r}async function Jr(e){let r=e.pipeline===!0||e.pipeline==="true";try{let Er=function(){return Z.filter(S=>S.started).length},cr=function(S,y){Fi({runId:s.id,agentOsId:i,phase:S,startedCount:Er(),outcomeCount:Z.length,cappedStarts:I,...y})},he=function(S){return S.landPrDispatch===!0?!0:S.task?.executor==="land_pr"};var t=Er,n=cr,o=he;let s=B(String(N(String(e.run||""),"--run"))),i=String(N(String(e.agentOsId||""),"--agent-os-id")),a=K(e.baseUrl?String(e.baseUrl):void 0),l=await G(e.secret?String(e.secret):void 0,i,{baseUrl:a}),u=!(e.execute===!0||e.execute==="true"),d=Ke({runId:s.id}),m=sa(s.id,d.runnerId),f=e.diskPath?Le({diskPath:String(e.diskPath)}):Le({diskPath:s.repo}),p=rr({runId:s.id}),h=aC(e),k=h.size>0,g=Number(e.maxStarts)>0?Math.floor(Number(e.maxStarts)):1,R=k?Math.min(g,h.size):g,I=u?R:Math.min(R,p.slotsAvailable);if(!u&&I<=0){let S={runId:s.id,agentOsId:i,dryRun:!1,skipped:!0,reason:p.reason??"no resource slots",resourceGate:p};if(r)return{ok:!0,...S};console.log(JSON.stringify(S,null,2));return}let P=Jo(s.id);if(e.reconcileStaleBlockers===!0||e.reconcileStaleBlockers==="true"){let S=`${a}/api/agent-os/by-id/${encodeURIComponent(i)}/lane-hygiene`;try{await X(S,l,{agentOsId:i,dryRun:!1,includeBoardReconcile:!0},{agentOsId:i,baseUrl:a})}catch(y){console.error(`[dispatch] reconcile-stale-blockers lane-hygiene call failed: ${y.message}`)}}let E=`${a}/api/agent-os/by-id/${encodeURIComponent(i)}/tasks/dispatch-next`,D=S=>({agentOsId:i,dryRun:u,maxStarts:S,leaseOwner:m,leaseDurationMs:Number(e.leaseMs)>0?Math.floor(Number(e.leaseMs)):aa,runnerDiskGate:f,runnerResourceGate:p,activeHarnessWorkers:P,runnerPresence:d,harnessBoardSnapshot:Vr(s.id),...e.lane?{lane:gd(String(e.lane))}:{},...e.executor?{executor:String(e.executor)}:{},...e.diskPath?{diskPath:String(e.diskPath)}:{},...e.targetTaskId?{targetTaskId:String(e.targetTaskId)}:{},...!e.targetTaskId&&e.targetTaskIds?{targetTaskIds:String(e.targetTaskIds).split(",").map(y=>y.trim()).filter(Boolean)}:{}}),j=cd(),F=async S=>{let y=await X(E,l,D(S),{agentOsId:i,baseUrl:a,timeoutMs:j})??{ok:!1,status:0,response:null},A=y.response;return{dispatch:y,result:A?.result}},U=await F(k||u?I:1);if(!U.dispatch.ok||!U.result){let S={runId:s.id,agentOsId:i,action:"dispatch",httpStatus:U.dispatch.status,response:U.dispatch.response,authRefreshed:U.dispatch.refreshedAuth===!0,authRefreshFailure:U.dispatch.authRefreshFailure};if(r)return{ok:!1,...S};console.log(JSON.stringify(S,null,2)),process.exit(1)}let C=U.result;if(u){let S=xm(C),y=Pm(C),A={runId:s.id,agentOsId:i,dryRun:!0,wouldStart:C.started.map($=>({taskId:$.task.id,title:$.task.title,reason:$.reason})),skipped:C.skipped.map($=>({taskId:$.task.id,skipReason:$.skipReason,reason:$.reason})),diskGate:C.diskGate,resourceGate:C.resourceGate,inspected:C.inspected,pagesScanned:C.pagesScanned??null,candidatesExhausted:C.candidatesExhausted??null,capacityIdle:S?.capacityIdle===!0,admissionExhaustion:S,dispatchSkipDrain:y};if(r)return{ok:!0,...A};console.log(JSON.stringify(A,null,2));return}let ae=Gd(),Z=[],qe=[],tt=Number(C.inspected)||0,Me=!1;async function le(S,y,A){let $=await Ma({baseUrl:a,secret:l,agentOsId:i,taskId:String(S.id),leaseOwner:m,failureDetail:y}),se={taskId:S.id,started:!1,error:y,released:$.released,releaseResponse:$.releaseResponse,...A};return Z.push(se),cr("outcome",{lastOutcome:se}),!1}async function ee(S){let y=S.task,A=String(y.id);if(k&&!h.has(A))return le(y,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...h]});let $=y.prUrl?String(y.prUrl):"";if(!$)return le(y,"land_pr task missing prUrl");try{let se=await vm({prUrl:$,repo:Rm($),cwd:s.repo}),nt=await Sm({baseUrl:a,secret:l,agentOsId:i,runId:s.id,task:y,report:se});return nt.ok?(Z.push({taskId:A,started:!0,landPr:!0,outcome:se.outcome,completionStatus:nt.status}),!0):le(y,`land_pr completion POST failed (HTTP ${nt.status})`,{landPr:!0,outcome:se.outcome})}catch(se){return le(y,se.message)}}async function W(S){let y="duplicate_dispatch_prevented: live local worker already owns this task",A=await Ma({baseUrl:a,secret:l,agentOsId:i,taskId:String(S.id),leaseOwner:m,failureDetail:y}),$={taskId:S.id,started:!1,error:y,alreadyRunning:!0,nonFatal:!0,released:A.released,releaseResponse:A.releaseResponse};return Z.push($),cr("outcome",{lastOutcome:$}),!1}async function ke(S){let y=S.task,A=oC(S),$=String(y.id);if(k&&!h.has($))return le(y,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...h]});let se=sC(y.personaSlug);if(se&&(!A?.personaInjectionReady||!A.personaMarkdown))return le(y,`persona_injection_required: missing anchored context-envelope persona block for "${se}"`);if(zd(s.id,$))return W(y);let nt=Number(y.attempt)||1;if(nt>ae.maxTaskAttempts)return le(y,`task attempt ${nt} exceeds KYNVER_MAX_TASK_ATTEMPTS (${ae.maxTaskAttempts})`);let nn=y.leaseToken?String(y.leaseToken).trim():"";if(!nn)return le(y,"dispatch_start_failed: claimed task missing leaseToken \u2014 refusing local spawn");let $k=b(`t-${y.id}-a${y.attempt}`),ot=rs({explicitModel:e.model?String(e.model):void 0,explicitProvider:e.provider?String(e.provider):void 0,explicitProviderIsOperatorOverride:!!e.provider,task:hd(y)});try{let di=y.planId?String(y.planId):void 0,po=Qd({title:y.title?String(y.title):void 0,description:y.description?String(y.description):null,executorRef:y.executorRef?String(y.executorRef):null,prUrl:y.prUrl?String(y.prUrl):null,branch:y.branch?String(y.branch):null}),Ue=wa(s,{name:$k,task:iC(y,i),ownedPaths:e.owned?String(e.owned).split(",").map(Kk=>Kk.trim()).filter(Boolean):[],model:ot.model,provider:ot.provider,routingRule:ot.rule,requestedModel:ot.requestedModel,agentOsId:i,taskId:String(y.id),planId:di,branch:po?.targetPrBranch??void 0,executorRef:y.executorRef?String(y.executorRef):void 0,parentTaskId:y.parentTaskId?String(y.parentTaskId):void 0,taskTitle:y.title?String(y.title):void 0,taskPrUrl:po?.targetPrUrl??(y.prUrl?String(y.prUrl):void 0),repairTargetPrUrl:po?.targetPrUrl,repairTargetBranch:po?.targetPrBranch??void 0,instructionPolicyMarkdown:A?.instructionPolicyMarkdown??null,instructionPolicyFingerprint:A?.instructionPolicyFingerprint??null,instructionPolicyEvidence:A?.instructionPolicyEvidence??null,memoryQualityCapture:A?.memoryQualityCapture??null,memoryQualityPromptMarkdown:A?.memoryQualityPromptMarkdown??null,personaMarkdown:A?.personaMarkdown??null,personaSlug:A?.personaSlug??se,personaEvidence:A?.personaEvidence??null,contextEnvelopeMarkdown:A?.contextEnvelopeMarkdown??null,contextEnvelopeEvidence:A?.contextEnvelopeEvidence??null,leaseOwner:m,leaseToken:nn,dispatched:!0}),mo=await Cm({agentOsId:i,taskId:String(y.id),leaseOwner:m,expectedLeaseToken:nn,worker:Ue,baseUrl:a,secret:l});if(!mo.ok)return _m(s.id,Ue,mo.error??"dispatch_start_readback_failed"),le(y,mo.error??"dispatch_start_readback_failed",{readback:mo.detail??null});Ue.leaseToken!==nn&&(Ue.leaseToken=nn,Ue.leaseOwner=m,H(s.id,Ue));let dc={taskId:y.id,started:!0,worker:Ue.name,pid:Ue.pid,branch:Ue.branch,model:Ue.model,provider:ot.provider,routingRule:ot.rule,instructionPolicyFingerprint:A?.instructionPolicyFingerprint??null,instructionPolicyRuleCount:Array.isArray(A?.instructionPolicyEvidence?.ruleSlugs)?A.instructionPolicyEvidence.ruleSlugs.length:null,personaSlug:A?.personaSlug??se,personaOperatingRuleCount:A?.personaEvidence?.operatingRuleCount??null};return Z.push(dc),cr("worker_started",{lastOutcome:dc}),A?.instructionPolicyFingerprint&&console.error(`[dispatch] task ${$}: operating-rules policy injected fingerprint=${A.instructionPolicyFingerprint}`),A?.personaSlug&&console.error(`[dispatch] task ${$}: persona context injected slug=${A.personaSlug}`),A?.contextEnvelopeReady&&console.error(`[dispatch] task ${$}: context envelope injected anchor=${A.contextEnvelopeEvidence?.anchorTaskId??$}`),!0}catch(di){return le(y,di.message)}}let ye=new Set;async function ze(S){let y=S.task,A=String(y.id);if(ye.has(A))return le(y,"dispatch_retry_loop_prevented: task already failed to start this tick");let $=he(S)?await ee(S):await ke(S);return $||ye.add(A),$}for(let S of C.started)await ze(S);if(qe.push(...C.skipped??[]),k)for(let S of qe){let y=String(S.task.id);h.has(y)&&Z.push({taskId:y,started:!1,error:`exact_target_not_started:${S.skipReason}`,skipReason:S.skipReason,detail:S.reason??null,requestedTargetTaskIds:[...h]})}for(;!k&&Z.length<I;){let S=await F(1);if(!S.dispatch.ok||!S.result){let A=ud(S.dispatch.response),$=Er();Me=A&&$>0;let se={started:!1,error:"dispatch_next request failed during top-up",httpStatus:S.dispatch.status,response:S.dispatch.response,...Me?{nonFatal:!0,partialTopUp:!0}:{}};Z.push(se),cr("top_up_failed",{partialTopUpInterrupted:Me,lastOutcome:se});break}tt+=Number(S.result.inspected)||0,qe.push(...S.result.skipped??[]);let y=S.result.started??[];if(y.length===0)break;for(let A of y){if(Z.length>=I)break;await ze(A)}}let ce=Z.filter(S=>S.started).length,ur=xm(C),uo=Pm(C),ac=ce===0&&(ur?.capacityIdle===!0||Number(C.resourceGate?.slotsAvailable)>0);if(ac&&ur?.summary){let S=ur.skipReasonCounts?.retry_ceiling_exceeded??0,y=C.overAttemptIdleRecovery??ur.overAttemptIdleRecovery,A=y?.attempted===!0?`; over_attempt_recovery minted=${y.minted??0} started=${y.started??0}`:S>0?"; over_attempt_recovery not attempted":"",$=uo?`; dispatch_skip_drain scanned=${uo.scanned??0} advanced=${uo.advanced??0}`:"";console.error(`[dispatch] ${ur.summary}${S>0?`; retry_ceiling_exceeded=${S}`:""}${A}${$}`)}let lc={runId:s.id,agentOsId:i,dryRun:!1,leaseOwner:m,startedCount:ce,capacityIdle:ac,admissionExhaustion:ur,dispatchSkipDrain:uo,outcomes:Z,skipped:qe.map(S=>({taskId:S.task.id,skipReason:S.skipReason})),inspected:tt,pagesScanned:C.pagesScanned??null,candidatesExhausted:C.candidatesExhausted??null,diskGate:C.diskGate,resourceGate:C.resourceGate,...Me?{partialTopUpInterrupted:!0}:{},dispatchCallbackTimeoutMs:j},cc=S=>!S.started&&S.nonFatal!==!0,Fk=Z.some(cc),uc=Me&&ce>0?!0:!Fk;if(Fi({runId:s.id,agentOsId:i,phase:"complete",partial:Me,startedCount:ce,ok:uc}),r)return{ok:uc,...lc};console.log(JSON.stringify(lc,null,2)),Z.some(cc)&&process.exit(1)}catch(s){if(r)return{ok:!1,error:s.message};console.error(`run dispatch failed: ${s.message}`),process.exit(1)}}var lC=1;function Ht(e){if(!e||typeof e!="object")return 0;let r=e.startedCount;if(typeof r=="number")return r;let t=e.outcomes;return Array.isArray(t)?t.filter(n=>n.started).length:0}function cC(e){let{maxStarts:r,...t}=e;return t}async function Ba(e,r){if(r<=0)return{ok:!0,skipped:!0,reason:"no slots",maxStarts:0,startedCount:0};let t=cC(e);if(t.targetTaskId||t.targetTaskIds){let u=await Jr({...t,execute:!0,pipeline:!0,maxStarts:String(r)});return{...typeof u=="object"&&u!==null?u:{},passes:{target:u},startedCount:Ht(u)}}let n=Math.min(r,lC),o=Math.max(0,r-n),s=await Jr({...t,execute:!0,pipeline:!0,lane:"review",maxStarts:String(n)}),i=Ht(s),a=o+(n-i);if(a<=0)return{...typeof s=="object"&&s!==null?s:{},passes:{review:s},startedCount:i};let l=await Jr({...t,execute:!0,pipeline:!0,maxStarts:String(a)}),c=Ht(l);return{passes:{review:s,work:l},startedCount:i+c,ok:!0}}function Em(e){if(!e||typeof e!="object")return[];let t=e.response?.dispatch?.exactTargetTaskIds;if(!Array.isArray(t))return[];let n=new Set,o=[];for(let s of t){if(typeof s!="string")continue;let i=s.trim();!i||n.has(i)||(n.add(i),o.push(i))}return o}function uC(e){let t=e.response?.dispatch;return t&&typeof t=="object"?t:null}function Kn(e){return typeof e!="number"||!Number.isFinite(e)?null:Math.max(0,Math.floor(e))}function Am(e,r){let t=uC(r),n=Kn(t?.recommendedMaxStarts),o=Kn(t?.actionableReady),s=Kn(t?.queuedTasks),i=Kn(t?.boardAdvancedThisTick)??0,a=Kn(t?.leaseReapedThisTick)??0,l=i+a,c=o??s,u=e.slotsAvailable;c!==null?u=Math.min(u,c):n!==null&&(u=Math.min(u,n)),c===null&&n!==null&&(u=Math.max(u,Math.min(e.slotsAvailable,n)));let d=t?.underutilized===!0||(c??0)>0&&e.slotsAvailable>0&&e.maxConcurrentWorkers>0&&e.activeWorkers<e.maxConcurrentWorkers;if(e.slotsAvailable>0&&u===0&&(d||l>0)){let f=c??(l>0?l:1);u=Math.min(e.slotsAvailable,Math.max(1,f))}let m=s!==null&&o!==null?Math.max(0,s-o):null;return{maxStarts:Math.max(0,u),underutilized:d,advisedStarts:n,actionableReady:o,queuedTasks:s,nonDispatchableReady:m,boardAdvancedThisTick:i,leaseReapedThisTick:a}}import $C from"node:path";M();Or();J();w();import dC from"node:path";var pC=new Set(["running","dispatching","pending","queued","needs_attention"]),ir=new Set(["completed","failed","cancelled","done"]);function qr(e){let r=fe(e);if(r.length===0)return"failed";let t=!1,n=!1,o=!1,s=!1;for(let i of r){let a=_(dC.join(x(e.id),"workers",b(i),"worker.json"),void 0);if(!a)continue;let l=T(a,{base:e.base,baseCommit:e.baseCommit});if(l.alive&&!l.finalResult){t=!0;break}typeof a.completionBlocker=="string"&&a.completionBlocker&&(o=!0),bt(l)&&(s=!0),l.finalResult&&l.attention.state==="done"&&(n=!0)}return t||o||s?null:n?"completed":"failed"}function jn(){let e=[];for(let r of Y()){if(!pC.has(r.status))continue;let t=qr(r);if(!t||t===r.status)continue;let n=r.status;r.status=t,Oe(r),e.push({runId:r.id,from:n,to:t})}return e}M();Or();J();w();Nr();xo();import{existsSync as Cr,lstatSync as SC,readdirSync as wC,readlinkSync as CC,renameSync as Ga,unlinkSync as _C}from"node:fs";import Ge from"node:path";Ce();w();import De from"node:path";var mC=`${De.sep}runs${De.sep}runs${De.sep}`;function Cs(e){return e.includes(mC)}function La(e,r){return De.join(we(ie(e)),b(r))}function Sr(e,r,t){return De.join(La(e,r),"workers",b(t))}function Im(e,r,t){let n=ie(e);return De.join(n,"runs","runs",b(r),"workers",b(t))}function Ha(){return["stdout.jsonl","stderr.log","heartbeat.jsonl","last-status.json","auto-complete.log","worker.json"]}function zr(e){return{workerJsonPath:De.join(e,"worker.json"),stdoutPath:De.join(e,"stdout.jsonl"),stderrPath:De.join(e,"stderr.log"),heartbeatPath:De.join(e,"heartbeat.jsonl"),lastStatusPath:De.join(e,"last-status.json")}}function Om(e){let r=zr(Sr(e.harnessRoot,e.runId,e.workerName)).workerJsonPath;return e.statusPath&&!Cs(e.statusPath)?e.statusPath:r}import{existsSync as wr,mkdirSync as fC,readdirSync as Tm,renameSync as gC,statSync as Fa}from"node:fs";import Q from"node:path";Nr();Ce();M();w();var Vn=900*1e3,hC=3600*1e3;function Dm(e,r){let t=Q.resolve(e),n=Q.resolve(we(r)),o=Q.relative(n,t);return o!==".."&&!o.startsWith("..")&&!Q.isAbsolute(o)}function $a(e){if(!wr(e))return[];try{return Tm(e,{withFileTypes:!0}).filter(r=>r.isDirectory()&&r.name!=="runs").map(r=>r.name)}catch{return[]}}function Ka(e){let r=Q.join(e,"workers");if(!wr(r))return[];try{return Tm(r,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name)}catch{return[]}}function Mm(e){return Q.join(e,"archived-workers")}function kC(e,r){let t=Q.join(Mm(e),b(r));return wr(t)?`${t}-${Date.now()}`:t}function Nm(e,r,t){if(!wr(e))return!1;try{let n=r-Fa(e).mtimeMs;return Number.isFinite(n)&&n>=0&&n<t}catch{return!1}}function Um(e,r=Date.now(),t=Vn){if(!wr(e))return!1;let n=zr(e),o=_(n.workerJsonPath,void 0);if(o?.status==="running"&&L(o.pid))return!0;let s=ve(n.heartbeatPath);if(s.lastHeartbeatAt){let i=r-Date.parse(s.lastHeartbeatAt);if(Number.isFinite(i)&&i>=0&&i<t)return!0}return!!(Nm(n.stdoutPath,r,t)||Nm(n.heartbeatPath,r,t))}function yC(e,r,t){let n=typeof r.completionReportedAt=="string"?Date.parse(r.completionReportedAt):NaN;if(Number.isFinite(n))return t-n;let o=(()=>{let s=r.completionResponse;if(!s||typeof s!="object")return NaN;let i=s.task;if(!i||typeof i!="object")return NaN;let a=i.updatedAt;return typeof a=="string"?Date.parse(a):NaN})();if(Number.isFinite(o))return t-o;try{return t-Fa(Q.join(e,"worker.json")).mtimeMs}catch{return 0}}function RC(e,r,t,n){if(Um(e,t))return{eligible:!1,reason:"worker has active/recent retention signals"};let o=typeof r.status=="string"?r.status:"";if(typeof r.completionBlocker=="string"&&r.completionBlocker.trim().length>0)return{eligible:!1,reason:"worker has completion blocker"};let i=typeof r.completionReportedAt=="string"||r.completionOutcome==="acknowledged";if(o!=="done"&&!i)return{eligible:!1,reason:`worker status is ${o||"unknown"}`};let a=yC(e,r,t);return!Number.isFinite(a)||a<n?{eligible:!1,reason:"terminal worker is still within archive grace window"}:{eligible:!0,reason:"terminal worker metadata archived"}}function Ft(e,r=Date.now(),t=Vn){for(let n of Ka(e))if(Um(Q.join(e,"workers",n),r,t))return!0;return!1}function bC(){return{repo:He()?.repo??"",base:"origin/main",baseCommit:"unknown"}}function vC(e,r){let t=Q.join(we(e),b(r));if(!wr(t))return null;let n=Ka(t);if(n.length===0)return null;let o;try{o=Fa(t).birthtime.toISOString()}catch{o=new Date().toISOString()}let s={};for(let a of n){let l=Sr(e,r,a);s[a]={workerDir:l,statusPath:Q.join(l,"worker.json")}}let i=Ft(t);return{id:r,name:r,...bC(),status:i?"running":"needs_attention",createdAt:o,workers:s}}function ja(e){let r=ie(e??be()),t=we(r),n=[];for(let o of $a(t)){let s=Q.join(t,o,"run.json");if(wr(s)){n.push({runId:o,action:"skipped",reason:"run.json present"});continue}let i=vC(r,o);if(!i){n.push({runId:o,action:"skipped",reason:"no worker dirs on disk"});continue}Oe(i),n.push({runId:o,action:"repaired_run_json",reason:Ft(Q.join(t,o))?"synthesized run.json while worker artifacts still active":"synthesized run.json from orphan worker metadata dirs"})}return{runs:n}}function Va(e,r={}){let t=ie(e??be()),n=we(t),o=r.now??Date.now(),s=r.archiveAgeMs??hC,i=[];ja(t);for(let a of $a(n)){let l=Q.join(n,a),c=Q.join(l,"run.json"),u=_(c,void 0);if(!u?.id)continue;let d=new Set([...Object.keys(u.workers||{}),...Ka(l)]),m=!1;for(let f of d){let p=Q.join(l,"workers",b(f)),h=Q.join(p,"worker.json"),k=_(h,void 0);if(!k){let I=Q.join(Mm(l),b(f));if(wr(I)&&(u.workers[b(f)]||u.workers[f])){delete u.workers[b(f)],delete u.workers[f],m=!0,i.push({runId:u.id,worker:f,action:"archived",reason:"removed stale live index entry for archived worker metadata",archivePath:I});continue}i.push({runId:u.id,worker:f,action:"skipped",reason:"worker.json missing"});continue}let g=RC(p,k,o,s);if(!g.eligible){i.push({runId:u.id,worker:f,action:"skipped",reason:g.reason});continue}let R=kC(l,f);fC(Q.dirname(R),{recursive:!0}),gC(p,R),delete u.workers[b(f)],delete u.workers[f],m=!0,i.push({runId:u.id,worker:f,action:"archived",reason:g.reason,archivePath:R})}m&&Oe(u)}return{workers:i}}function Wm(e,r=Date.now()){let t=new Set,n=we(e);for(let o of $a(n)){let s=Q.join(n,o);Ft(s,r)&&t.add(`${e}\0${o}`)}return t}M();w();function xC(e,r){let t=La(e,r),n;try{n=SC(t)}catch{return null}if(!n.isSymbolicLink())return null;let o=Ge.resolve(Ge.dirname(t),CC(t));if(Ft(o)||Ft(t))return null;let s=`${t}.materialize-${Date.now()}`;return Ga(o,s),_C(t),Ga(s,t),o}function PC(e){let r=[];for(let t of Ha()){let n=Ge.join(e.fromDir,t),o=Ge.join(e.toDir,t);!Cr(n)||Cr(o)||(Ga(n,o),r.push(t))}return r}function Bm(e,r){let t=zr(r),n=!1;return e.workerDir!==r&&(e.workerDir=r,n=!0),e.stdoutPath!==t.stdoutPath&&(e.stdoutPath=t.stdoutPath,n=!0),e.stderrPath!==t.stderrPath&&(e.stderrPath=t.stderrPath,n=!0),e.heartbeatPath!==t.heartbeatPath&&(e.heartbeatPath=t.heartbeatPath,n=!0),n}function EC(e){let r=typeof e.lastStatus?.status=="string"?e.lastStatus.status:void 0,t=e.lastStatus?.attention&&typeof e.lastStatus.attention=="object"?e.lastStatus.attention.state:void 0;return r==="done"||t==="done"||e.stdoutFinalResult||e.heartbeatFinalResult?"done":r==="blocked"?"blocked":r==="running"?"exited":r??"exited"}function AC(e){let r=zr(e.canonicalDir),t=_(r.lastStatusPath,void 0),n=Cr(r.stdoutPath),o=Cr(r.heartbeatPath);if(!(n||o||t!=null))return null;let i=n?_o(r.stdoutPath):{finalResult:null},a=o?ve(r.heartbeatPath):ve(""),l=ft(a),c=EC({lastStatus:t,stdoutFinalResult:i.finalResult,heartbeatFinalResult:l}),u={name:e.workerName,runId:e.run.id,status:c,branch:typeof t?.branch=="string"?t.branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:typeof t?.worktreePath=="string"?t.worktreePath:Ge.join(te().worktreesDir,e.run.id,e.workerName),workerDir:e.canonicalDir,stdoutPath:r.stdoutPath,stderrPath:r.stderrPath,heartbeatPath:r.heartbeatPath,startedAt:typeof t?.startedAt=="string"?t.startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"synthesized worker.json from on-disk artifacts after metadata repair"};return typeof t?.taskId=="string"&&(u.taskId=t.taskId),typeof t?.agentOsId=="string"&&(u.agentOsId=t.agentOsId),typeof t?.planId=="string"&&(u.planId=t.planId),typeof t?.pid=="number"&&(u.pid=t.pid),(i.finalResult||l)&&(u.completionSnapshot={finalResult:i.finalResult??l??"completed",summary:a.lastHeartbeatSummary}),Bm(u,e.canonicalDir),u}function IC(e,r){let t=!1,n={...e.workers||{}};for(let[o,s]of Object.entries(n)){let i=Sr(r,e.id,o),a=Ge.join(i,"worker.json");(Cs(s.workerDir)||Cs(s.statusPath)||s.workerDir!==i||s.statusPath!==a)&&(n[o]={workerDir:i,statusPath:a},t=!0)}return t&&(e.workers=n,Oe(e)),t}function OC(e){let r=[],t=Sr(e.harnessRoot,e.run.id,e.workerName),n=Im(e.harnessRoot,e.run.id,e.workerName),o=zr(t),s=PC({fromDir:n,toDir:t});s.length>0&&r.push({runId:e.run.id,worker:e.workerName,action:"relocated_artifacts",reason:`moved ${s.join(", ")} from nested runs/runs layout`});let i=Om({harnessRoot:e.harnessRoot,runId:e.run.id,workerName:e.workerName,statusPath:e.statusPath}),a=_(i,void 0);if(!a&&Cr(o.workerJsonPath)&&(a=_(o.workerJsonPath,void 0)),!a){let l=AC({run:e.run,workerName:e.workerName,canonicalDir:t,harnessRoot:e.harnessRoot});if(l)return H(e.run.id,l),r.push({runId:e.run.id,worker:e.workerName,action:"synthesized_worker_json",reason:l.reconcileReason??"synthesized from artifacts"}),r;let c=Cr(t),u=Ha().some(d=>Cr(Ge.join(t,d)));if(c&&!u){let d={name:e.workerName,runId:e.run.id,status:"exited",branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:Ge.join(te().worktreesDir,e.run.id,e.workerName),workerDir:t,stdoutPath:o.stdoutPath,stderrPath:o.stderrPath,heartbeatPath:o.heartbeatPath,startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"empty worker dir \u2014 marked abandoned during metadata reconcile"};return H(e.run.id,d),r.push({runId:e.run.id,worker:e.workerName,action:"marked_abandoned",reason:d.reconcileReason??"empty worker dir"}),r}return r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker.json missing and no recoverable artifacts"}),r}return Bm(a,t)?(a.reconciledAt=new Date().toISOString(),a.reconcileReason=a.reconcileReason??"repaired nested runs/runs path fields",H(e.run.id,a),r.push({runId:e.run.id,worker:e.workerName,action:"repaired_worker_paths",reason:a.reconcileReason})):r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker metadata already canonical"}),r}function NC(e,r){let t=Ge.join(x(e.id),"workers");if(!Cr(t))return[];let n=new Set(Object.keys(e.workers||{})),o=[];for(let s of wC(t,{withFileTypes:!0}))s.isDirectory()&&(n.has(s.name)||o.push(s.name));return o}function Lm(){let{harnessRoot:e}=te(),r=ja(e),t=[];for(let n of Y()){let o=xC(e,n.id);o&&t.push({runId:n.id,worker:"*",action:"materialized_run_symlink",reason:`replaced symlink with real run dir (was ${o})`}),IC(n,e)&&t.push({runId:n.id,worker:"*",action:"repaired_run_index",reason:"repaired nested runs/runs workerDir/statusPath entries in run.json"});let s=new Set(Object.keys(n.workers||{}));for(let i of NC(n,e))s.add(i),n.workers={...n.workers||{},[i]:{workerDir:Sr(e,n.id,i),statusPath:Ge.join(Sr(e,n.id,i),"worker.json")}},Oe(n),t.push({runId:n.id,worker:i,action:"repaired_run_index",reason:"indexed orphan worker dir into run.json"});for(let i of s){let a=n.workers?.[i];t.push(...OC({run:n,workerName:i,harnessRoot:e,statusPath:a?.statusPath}))}}return{workers:t,runMetadataRetention:r}}Nr();Ao();J();M();Or();w();import{execFileSync as Hm}from"node:child_process";import Fm from"node:path";function Ya(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:null}function TC(e){let r=Ya(e)?.match(/\/pull\/(\d+)$/);if(!r)return null;let t=Number.parseInt(r[1],10);return Number.isFinite(t)?t:null}function DC(e){if(e==null)return"";if(typeof e=="string")return e;try{return JSON.stringify(e)}catch{return""}}function MC(e){let r=new Set;for(let t of e.matchAll(/github\.com\/[^/\s)>"']+\/[^/\s)>"']+\/(?:pull|pulls)\/(\d+)/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bPR\s*#?\s*(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bpr[-_]?(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}return[...r]}function UC(e){let r=null;if(typeof e=="string"?r=kt(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=Ya(String(s.prUrl??s.pr_url??"")),a=String(s.outcome??"").trim();!i||a!=="merged"||n.push({prUrl:i,mergeCommit:typeof s.mergeCommit=="string"?s.mergeCommit:typeof s.merge_commit=="string"?s.merge_commit:null,reason:typeof s.reason=="string"?s.reason:null})}return n}function WC(e){try{let n=Hm("git",["config","--get","remote.origin.url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim().match(/github\.com[:/]([^/]+\/[^/.]+)(?:\.git)?$/i)?.[1];if(!n)return null;let o=Hm("gh",["pr","view",String(e.prNumber),"--repo",n,"--json","state,mergedAt,mergeCommit,url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}),s=JSON.parse(o);return{prUrl:Ya(s.url??`https://github.com/${n}/pull/${e.prNumber}`)??`https://github.com/${n}/pull/${e.prNumber}`,state:s.state??"",mergedAt:s.mergedAt??null,mergeCommit:s.mergeCommit?.oid??null}}catch{return null}}function BC(e){let r=ve(e.heartbeatPath);return e.completionSnapshot?.finalResult??ft(r)}function LC(e){let r=new Map,t=x(e.id);for(let n of fe(e)){let o=_(Fm.join(t,"workers",b(n),"worker.json"),void 0);if(o)for(let s of UC(BC(o))){let i=TC(s.prUrl);i!=null&&!r.has(i)&&r.set(i,s)}}return r}function HC(e,r){let t=ve(e.heartbeatPath),n=[e.name,e.repairTargetPrUrl,e.taskPrUrl,e.branch,t.lastHeartbeatSummary,DC(r)].filter(Boolean).join(`
+`);return MC(n)}function FC(e){return e.localOnly===!0&&!e.taskId&&!e.agentOsId}function Ja(e={}){let r=e.lookupPr??WC,t=[],n=new Map;for(let o of Y()){let s=LC(o),i=x(o.id);for(let a of fe(o)){let l=Fm.join(i,"workers",b(a),"worker.json"),c=_(l,void 0);if(!c||!FC(c))continue;let u=T(c,{base:o.base,baseCommit:o.baseCommit});if(u.attention.state!=="needs_attention")continue;let d=null;for(let f of HC(c,u.finalResult)){if(d=s.get(f)??null,!d){let p=o.repo||c.worktreePath,h=`${p}#${f}`,k=n.has(h)?n.get(h)??null:r({repoDir:p,prNumber:f});n.has(h)||n.set(h,k),k&&(k.state==="MERGED"||k.mergedAt)&&(d={prUrl:k.prUrl,mergeCommit:k.mergeCommit??null,reason:"GitHub reports PR merged"})}if(d)break}if(!d){t.push({runId:o.id,worker:a,action:"skipped",reason:"no merged PR evidence"});continue}let m=new Date().toISOString();c.status="done",c.completionSnapshot={prUrl:d.prUrl,summary:`Local-only worker superseded by merged PR ${d.prUrl}`,finalResult:{summary:`Local-only repair/salvage worker superseded by merged PR ${d.prUrl}`,targetPrReconciliation:[{prUrl:d.prUrl,outcome:"merged",mergeCommit:d.mergeCommit??null,reason:d.reason??"PR already merged; local-only worker no longer requires attention"}]}},c.completionAckSource="local-pr-merged-reconcile",c.reconciledAt=m,c.reconcileReason="local-only needs_attention superseded by merged PR",H(o.id,c),t.push({runId:o.id,worker:a,action:"marked_done",reason:c.reconcileReason,prUrl:d.prUrl,mergeCommit:d.mergeCommit??null})}}return{workers:t}}var KC=900*1e3;function jC(){return process.env.KYNVER_NO_STALE_CLEANUP==="1"}function Gn(){let e=Lm();if(jC()){let s=Ja(),i=Va();return{workers:[],finalizedRuns:jn(),metadataReconcile:e,localPrAttentionReconcile:s,terminalWorkerArchive:i}}let r=[],t=Date.now();for(let s of Y())for(let i of fe(s)){let a=$C.join(x(s.id),"workers",b(i),"worker.json"),l=_(a,void 0);if(!l||l.status!=="running"){r.push({runId:s.id,worker:i,action:"skipped",reason:l?`worker status is ${l.status}`:"worker.json missing"});continue}let c=T(l,{base:s.base,baseCommit:s.baseCommit});if(c.finalResult){if(l.status==="running"){let u=c.attention.state==="blocked"?"blocked":c.attention.state==="done"||c.status==="done"?"done":"exited";l.status=u,l.reconciledAt=new Date().toISOString(),l.reconcileReason="synced finished worker record after terminal stdout/heartbeat",H(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:l.reconcileReason})}else r.push({runId:s.id,worker:i,action:"skipped",reason:"final result present"});continue}if(!c.alive){let u=c.attention.state==="blocked"?"blocked":c.status==="done"?"done":"exited";l.status=u,l.reconciledAt=new Date().toISOString(),l.reconcileReason=c.attention.reason,H(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:c.attention.reason});continue}if(c.attention.state==="stale"&&l.pid&&L(l.pid)){let u=c.lastHeartbeatAt?Date.parse(c.lastHeartbeatAt):NaN,d=c.lastActivityAt?Date.parse(c.lastActivityAt):NaN,m=!Number.isFinite(u)||t-u>KC,f=Number.isFinite(d)&&t-d>Rt;if(m&&f){mr(l.pid,"SIGTERM"),l.status="exited",l.reconciledAt=new Date().toISOString(),l.reconcileReason=`reconciled stale worker: ${c.attention.reason}`,H(s.id,l),r.push({runId:s.id,worker:i,action:"killed_stale",reason:c.attention.reason});continue}}r.push({runId:s.id,worker:i,action:"skipped",reason:c.attention.reason})}let n=Ja(),o=Va();return{workers:r,finalizedRuns:jn(),metadataReconcile:e,localPrAttentionReconcile:n,terminalWorkerArchive:o}}function $m(){let e=Gn(),r=e.workers.filter(l=>l.action==="marked_exited").length,t=e.workers.filter(l=>l.action==="killed_stale").length,n=e.workers.filter(l=>l.action==="skipped").length,o=e.metadataReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),s=e.localPrAttentionReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),i=e.metadataReconcile.runMetadataRetention.runs.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),a=e.terminalWorkerArchive.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{});console.log(JSON.stringify({ok:!0,workers:{markedExited:r,killedStale:t,skipped:n,total:e.workers.length},metadataReconcile:{totals:o,total:e.metadataReconcile.workers.length,runMetadataRetention:{totals:i,total:e.metadataReconcile.runMetadataRetention.runs.length}},localPrAttentionReconcile:{totals:s,total:e.localPrAttentionReconcile.workers.length},terminalWorkerArchive:{totals:a,total:e.terminalWorkerArchive.workers.length},finalizedRuns:e.finalizedRuns.length,details:{workers:e.workers,metadataReconcile:e.metadataReconcile.workers,localPrAttentionReconcile:e.localPrAttentionReconcile.workers,terminalWorkerArchive:e.terminalWorkerArchive.workers,runMetadataRetention:e.metadataReconcile.runMetadataRetention.runs,finalizedRuns:e.finalizedRuns}},null,2))}vt();O();Ie();import VC from"node:os";function _s(e,r={}){let t=(r.boxKind??Be(v())).trim().toLowerCase()||"forge",n=r.hostLabel??VC.hostname();return{boxId:r.boxId??ns(t,n),boxKind:t,displayName:r.displayName??null,hostLabel:n,observedAt:r.observedAt??new Date().toISOString(),totalMemBytes:e.totalMemBytes,freeMemBytes:e.freeMemBytes,activeWorkers:e.activeWorkers,maxConcurrentWorkers:e.maxConcurrentWorkers,autoCap:e.autoCap,slotsAvailable:e.slotsAvailable,harnessRunId:r.harnessRunId??null,queuedTasks:r.queuedTasks??null,reason:e.reason,...r.prEvidence?.length?{prEvidence:r.prEvidence}:{}}}M();Po();J();O();import GC from"node:path";M();J();w();async function Yn(e){let r=e.pipeline===!0||e.pipeline==="true";try{let t=B(String(N(String(e.run||""),"--run"))),n=String(N(String(e.agentOsId||""),"--agent-os-id")),o=K(e.baseUrl?String(e.baseUrl):void 0),s=await G(e.secret?String(e.secret):void 0,n,{baseUrl:o}),i=Ke({runId:t.id}).runnerId,a=await Vp({run:t.id,agentOsId:n,...e},"run_sweep"),l=[];for(let m of Object.keys(t.workers||{})){let f=_(GC.join(x(t.id),"workers",b(m),"worker.json"),void 0);if(!f||!f.dispatched||!f.taskId)continue;let p=T(f);if(p.alive||p.finalResult||f.completionReportedAt)continue;let h=ts({runId:t.id,workerLeaseOwner:f.leaseOwner??null,runnerId:i}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(String(f.taskId))}/release`,g;try{g=await X(k,s,{agentOsId:n,leaseOwner:h},{agentOsId:n,baseUrl:o})}catch(R){g={ok:!1,error:R.message}}l.push({worker:m,taskId:f.taskId,pid:f.pid,released:g.ok===!0||g.response?.ok===!0,response:g.response??g})}let c=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/reap`,u;try{u=await X(c,s,{agentOsId:n,...Number(e.graceMs)>=0&&e.graceMs!==void 0&&e.graceMs!==!0?{graceMs:Math.floor(Number(e.graceMs))}:{}},{agentOsId:n,baseUrl:o})}catch(m){u={ok:!1,error:m.message}}let d={runId:t.id,agentOsId:n,snapshotPublished:a,releasedLocalOrphans:l,reap:u.response??u};if(r)return{ok:!0,...d};console.log(JSON.stringify(d,null,2))}catch(t){if(r)return{ok:!1,error:t.message};console.error(`run sweep failed: ${t.message}`),process.exit(1)}}w();J();M();w();import YC from"node:path";O();async function Km(e){let r=K(e.baseUrl),t=await G(e.secret,e.agentOsId,{baseUrl:r}),n=`${r}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/plan-progress-sync`,o=await X(n,t,{phase:e.phase,taskId:e.taskId,blocker:e.blocker,artifact:e.artifact},{agentOsId:e.agentOsId,baseUrl:r});return{ok:o.ok,status:o.status,response:o.response}}async function jm(e,r){let t=B(e),n=String(r.agentOsId||"");if(!n)return[];let o=[];for(let s of Object.keys(t.workers||{})){let i=_(YC.join(x(t.id),"workers",b(s),"worker.json"),void 0);if(!i?.dispatched||!i.taskId)continue;let a=T(i);if(!a.heartbeatBlocker)continue;if(i.lastSyncedHeartbeatBlocker===a.heartbeatBlocker){o.push({worker:s,phase:"heartbeat_blocker",ok:!0,skipped:!0});continue}let l=await Km({agentOsId:n,taskId:i.taskId,phase:"heartbeat_blocker",blocker:a.heartbeatBlocker,baseUrl:r.baseUrl?String(r.baseUrl):void 0,secret:r.secret?String(r.secret):void 0});l.ok&&(i.lastSyncedHeartbeatBlocker=a.heartbeatBlocker,H(t.id,i)),o.push({worker:s,phase:"heartbeat_blocker",ok:l.ok})}return o}O();Ie();function JC(e=process.env){let r=v();return Be(r,e)!=="forge"}function Vm(e,r=process.env){if(JC(r))return e?.maxConcurrentWorkers??void 0}async function Gm(e,r){let t=K(r.baseUrl?String(r.baseUrl):void 0),n=await G(r.secret?String(r.secret):void 0,e,{baseUrl:t}),o=`${t}/api/agent-os/by-id/${encodeURIComponent(e)}/runtime`;try{let s=await qo(o,n);if(!s.ok)return null;let a=s.response?.preferences?.maxConcurrentWorkers;if(a==null)return{maxConcurrentWorkers:null};let l=Number(a);return!Number.isFinite(l)||l<=0?{maxConcurrentWorkers:null}:{maxConcurrentWorkers:Math.floor(l)}}catch{return null}}O();Ie();Ce();import Ae from"node:path";Eo();import Es from"node:path";Se();J();var qa=[".next",".turbo","dist","build",".cache","node_modules/.cache"];function Ym(e){let r=e.replace(/\\/g,"/").replace(/\/+$/,"");if(r==="node_modules"||r.startsWith("node_modules/"))return!0;for(let t of qa)if(r===t||r.startsWith(`${t}/`))return!0;return!1}function xe(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return!Ym(n)})}function Xr(e){if(typeof e=="string")return e.match(/https:\/\/github\.com\/[^\s]+\/pull\/\d+/i)?.[0]??null;if(e&&typeof e=="object"){let r=e;for(let t of["prUrl","pr_url","pullRequestUrl"]){let n=r[t];if(typeof n=="string"&&n.trim())return n.trim()}}return null}function Jn(e){let r=e.gitAncestry?.relation;return r==="merged"||r==="synced"?xe(e.changedFiles).length>0:!!(Xr(e.finalResult)||r==="ahead"||r==="diverged"||e.changedFiles.length>0&&e.finalResult)}w();function qn(e){return e.status||(e.status=T(e.worker,{base:e.run.base,baseCommit:e.run.baseCommit})),e.status}function za(e,r){if(e.status)return xe(e.status.changedFiles).length>0;let t=r?r.porcelain(e.worktreePath):on(e.worktreePath);return xe(t).length>0}function qC(e){let r=e.worker.completionSnapshot?.finalResult;return r??(e.worker.taskPrUrl?{prUrl:e.worker.taskPrUrl}:null)}function Xa(e,r){if(e.status)return e.status;let t=e.worker,n=typeof t.completionReportedAt=="string"&&t.completionReportedAt.trim().length>0,o=!!(t.status&&["done","exited","blocked","failed","abandoned"].includes(t.status))||n,s=qC(e);if(o&&!L(t.pid)){let i=r?.gitStatusCache?r.gitStatusCache.porcelain(e.worktreePath):on(e.worktreePath),a=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main",c=r?.gitRevCache?.countAheadOfMain(e.worktreePath,a)===0?{checked:!0,base:a,relation:"synced"}:yo(e.worktreePath,{base:e.run.base,baseCommit:e.run.baseCommit}),u={runId:e.runId,worker:e.workerName,pid:t.pid,alive:!1,status:t.status??(n?"done":"exited"),attention:{state:n?"done":"stale"},branch:t.branch,worktreePath:e.worktreePath,ownedPaths:t.ownedPaths,stdoutBytes:0,stderrBytes:0,heartbeatBytes:0,firstEventAt:null,lastEventAt:null,lastActivityAt:t.completionReportedAt??null,currentTool:null,heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,heartbeatBlocker:null,changedFiles:i,gitAncestry:c,finalResult:s,completionBlocker:typeof t.completionBlocker=="string"&&t.completionBlocker.trim()||null,prUrl:t.repairTargetPrUrl??t.taskPrUrl??Xr(s)};return e.status=u,u}return qn(e)}J();J();Nr();w();function Qa(e,r=Date.now(),t=Vn){let n=ve(e.heartbeatPath);if(!n.lastHeartbeatAt)return!1;let o=r-Date.parse(n.lastHeartbeatAt);return Number.isFinite(o)&&o>=0&&o<t}function xs(e,r=Date.now(),t=Vn){return L(e.pid)?!0:Qa(e,r,t)}function zC(e,r){return r?r.runTerminalCache.derive(e.run):qr(e.run)}function ar(e,r=Date.now()){return xs(e.worker,r)}function Za(e,r){return ir.has(e.run.status)?!1:zC(e,r)!==null}function Jm(e,r,t=Date.now()){if(ar(e,t))return!0;if(ir.has(e.run.status)||Za(e,r))return!1;let n=qn(e);return oe(n)?!1:!!ar(e,t)}Eo();J();function qm(e,r){if(!(typeof e.worker.completionBlocker=="string"?e.worker.completionBlocker.trim():""))return!1;if(ar(e))return!0;let n=r??qn(e);return!!(!oe(n)||Jn(n)||xe(n.changedFiles).length>0||ht({finalResult:n.finalResult,changedFiles:n.changedFiles,gitAncestry:n.gitAncestry,prUrl:Xr(n.finalResult)}).blocked)}Se();w();import{existsSync as Xm,mkdirSync as XC,writeFileSync as zm}from"node:fs";import Ps from"node:path";function Qm(e,r,t){return Ps.join(e,"salvage",b(r),b(t))}function Zm(e){return Xm(Ps.join(Qm(e.harnessRoot,e.runId,e.workerName),"evidence.json"))}function ef(e){let r=Qm(e.harnessRoot,e.indexed.runId,e.indexed.workerName);XC(r,{recursive:!0});let t=Ps.join(r,"salvage.patch"),n=!1;if(Xm(e.indexed.worktreePath)){let s=re(e.indexed.worktreePath,["diff","HEAD"]),i=re(e.indexed.worktreePath,["diff","--cached"]),a=[s.stdout,i.stdout].filter(l=>l.trim()).join(`
+`);a.trim()&&(zm(t,a.endsWith(`
 `)?a:`${a}
-`),n=!0)}let o={capturedAt:new Date(e.now??Date.now()).toISOString(),skipReason:e.skipReason,runId:e.indexed.runId,workerName:e.indexed.workerName,worktreePath:e.indexed.worktreePath,taskId:e.indexed.worker.taskId,agentOsId:e.indexed.worker.agentOsId,branch:e.indexed.worker.branch,completionBlocker:e.indexed.worker.completionBlocker,finalResult:e.status.finalResult,changedFiles:e.status.changedFiles,gitAncestry:e.status.gitAncestry,prUrl:e.status.prUrl??null,...n?{patchPath:t}:{}};return Hm(Rs.join(r,"evidence.json"),`${JSON.stringify(o,null,2)}
-`),o}var BC=new Set(["completion_blocked","dirty_worktree","pr_or_unmerged_commits","landing_blocked"]);function LC(e){return!BC.has(e.skipReason)||ir(e.indexed,e.now)?!1:Km({harnessRoot:e.harnessRoot,runId:e.indexed.runId,workerName:e.indexed.workerName})?!0:e.writeSalvageEvidence?(jm({harnessRoot:e.harnessRoot,indexed:e.indexed,skipReason:e.skipReason,status:e.status,now:e.now}),!0):!1}function HC(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,terminalWorktreesAgeMs:o}=e;return r?sr.has(r.run.status)||e.liveness&&Ga(r,e.liveness)||e.liveness&&oe(ja(r,e.liveness))&&!ir(r)?o:n:t?o:n}function FC(e,r){if(e.harnessRoot?.trim())return bs.resolve(e.harnessRoot);let t=r.worker.workerDir;if(!t)return null;let n=`${bs.sep}runs${bs.sep}`,o=t.indexOf(n);return o<0?null:t.slice(0,o+n.length-1)}function Vm(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,ageMs:o,orphanSafety:s,worktreeRemovalGuard:i}=e,a=e.now??Date.now();if(!r)return t?s??null:"orphan_without_flag";let l=HC(e);if(n<=0&&!t&&l<=0)return"worktrees_disabled";if(l>0&&o<l)return"below_age_threshold";if(ir(r,a))return"active_worker";let c=ja(r,e.liveness),u=FC(e,r),d=p=>u&&LC({indexed:r,harnessRoot:u,skipReason:p,status:c,now:a,writeSalvageEvidence:e.writeSalvageEvidence===!0})?null:p;if(Lm(r,c)){let p=d("completion_blocked");if(p)return p}if(Ka(r,e.liveness?.gitStatusCache)){let p=d("dirty_worktree");if(p)return p}let f=e.liveness?.gitRevCache?.countAheadOfMain(e.worktreePath);if(f!=null&&f>0){let p=d("pr_or_unmerged_commits");if(p)return p}if(Bm(r,e.liveness,a)||!oe(c))return"run_still_active";if(Kn(c)){let p=d("pr_or_unmerged_commits");if(p)return p}if(xe(c.changedFiles).length>0){let p=d("dirty_worktree");if(p)return p}if(mt({finalResult:c.finalResult,changedFiles:c.changedFiles,gitAncestry:c.gitAncestry,prUrl:Jr(c.finalResult)}).blocked){let p=d("landing_blocked");if(p)return p}if(i&&e.worktreePath){let p=i({worktreePath:e.worktreePath,indexed:!!r,runId:r?.runId,worker:r?.workerName});if(p)return p.detail?{reason:p.reason,detail:p.detail}:p.reason}return null}function Ya(e){let{indexed:r,nodeModulesAgeMs:t,ageMs:n,worktreePath:o,activeWorktreePaths:s,diskPressure:i}=e;return!i&&n<t?"below_age_threshold":s.has(bs.resolve(o))||r&&ir(r)?"active_worker":r&&Ka(r,e.gitStatusCache)?"dirty_worktree":null}function Gm(e){return Ya(e)}var Ym=new Set(["active_worker","run_still_active","completion_blocked","landing_blocked"]);function Jm(e,r){let t=[],n=new Set,o=(s,i,a)=>{let l=`${s}\0${i}`;n.has(l)||t.length>=24||(n.add(l),t.push({path:s,reason:i,...a?{detail:a}:{}}))};for(let s of r)Ym.has(s.reason)&&o(s.path,s.reason,s.detail);for(let s of e)!s.skipped||!s.skipReason||Ym.has(s.skipReason)&&o(s.path,s.skipReason);return t}import{existsSync as Qm,readdirSync as Zm,statSync as jC}from"node:fs";import ef from"node:path";W();Ce();import qm from"node:path";w();function KC(e,r){return ys(e,r)}function zm(e,r=Date.now()){let t=new Set,n=new Set;for(let o of e){for(let s of Ro(o)){let i=!1;for(let a of Object.keys(s.workers||{})){let l=_(qm.join(on(o,s.id),"workers",R(a),"worker.json"),void 0);if(!l?.worktreePath)continue;let c=qm.resolve(l.worktreePath);KC(l,r)&&(i=!0,t.add(c))}i&&n.add(`${o}\0${s.id}`)}for(let s of Pm(o))n.add(s)}return{activeWorktreePaths:t,liveRunKeys:n}}function Xm(e,r,t,n){return t?n.has(`${r}\0${t}`):!1}w();function VC(e,r){try{let t=jC(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function GC(e,r){let t=ef.join(e,"runs",r,"run.json");return Qm(t)?_(t,null):null}function rf(e){try{return Zm(e).length===0}catch{return!1}}function tf(e){let{harnessRoot:r,runId:t,runPath:n,ageMs:o,runDirectoriesAgeMs:s,activeGuards:i}=e;if(Xm(n,r,t,i.liveRunKeys)||!rf(n))return"run_still_active";let a=GC(r,t);return a&&!sr.has(a.status)&&!Gr(a)?"run_still_active":s>0&&o<s?"below_age_threshold":null}function nf(e){if(!Qm(e.worktreesDir))return[];let r=[],t;try{t=Zm(e.worktreesDir,{withFileTypes:!0})}catch{return[]}for(let n of t){if(!n.isDirectory())continue;let o=n.name;if(e.runIdFilter&&o!==e.runIdFilter)continue;let s=ef.join(e.worktreesDir,o);rf(s)&&r.push({kind:"remove_run_directory",path:s,bytes:null,harnessRoot:e.harnessRoot,runId:o,ageMs:VC(s,e.now)})}return r}Se();import{existsSync as qa,rmSync as gf}from"node:fs";import{execFileSync as YC}from"node:child_process";import{existsSync as of,readdirSync as JC,statSync as qC}from"node:fs";import zC from"node:path";var XC=2500;function QC(e,r=XC){if(!of(e))return 0;try{let n=YC("du",["-sb",e],{encoding:"utf8",timeout:r,stdio:["ignore","pipe","ignore"]}).trim().split(/\s+/)[0],o=Number(n);return Number.isFinite(o)&&o>=0?o:null}catch{return null}}function ar(e,r=5e4){if(!of(e))return 0;let t=QC(e);if(t!==null)return t;let n=0,o=0,s=[e];for(;s.length>0;){let i=s.pop(),a;try{a=JC(i)}catch{continue}for(let l of a){if(o++>r)return null;let c=zC.join(i,l),u;try{u=qC(c)}catch{continue}u.isDirectory()?s.push(c):n+=u.size}}return n}import{existsSync as t_,rmSync as n_}from"node:fs";Ce();import{lstatSync as ZC,readdirSync as e_}from"node:fs";function sf(e){try{let r=ZC(e),t=typeof process.getuid=="function"?process.getuid():null,n=typeof process.getgid=="function"?process.getgid():null,o=t!==null&&(r.uid!==t||n!==null&&r.gid!==n);return{uid:r.uid,gid:r.gid,foreign:o}}catch{return null}}function af(e,r=32){let t=sf(e);if(!t)return!1;if(t.foreign)return!0;try{let n=e_(e),o=0;for(let s of n){if(o>=r)break;let i=`${e.replace(/\/$/,"")}/${s}`,a=sf(i);if(o+=1,a?.foreign)return!0}}catch{}return!1}import{spawnSync as r_}from"node:child_process";import uf from"node:path";import Pe from"node:path";function lf(e,r,t,n){let o=Pe.resolve(e),s=`${Pe.sep}${n}`,i=o.endsWith(s)?o:null;if(!i)return"path_outside_harness";let a=Pe.relative(t,i);if(a.startsWith("..")||Pe.isAbsolute(a))return"path_outside_harness";let l=a.split(Pe.sep);return l.length<3||l[l.length-1]!==n||!o.startsWith(Pe.resolve(r))?"path_outside_harness":null}function vs(e,r,t){return lf(e,r,t,"node_modules")}function Ss(e,r,t){return lf(e,r,t,".next")}function ws(e,r,t){let n=Pe.resolve(e),o=Pe.relative(t,n);return o.startsWith("..")||Pe.isAbsolute(o)||o.split(Pe.sep).length<3||!n.startsWith(Pe.resolve(r))?"path_outside_harness":null}function cf(e,r,t){let n=Pe.resolve(e);return vs(n,r,t)===null||Ss(n,r,t)===null||ws(n,r,t)===null}function pf(){let e=(process.env.KYNVER_CLEANUP_PRIVILEGED??"auto").trim().toLowerCase();return e==="0"||e==="false"||e==="off"||e==="no"?"off":e==="1"||e==="true"||e==="force"||e==="yes"?"force":"auto"}function df(e){let r=r_("sudo",["-n",...e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});return{ok:r.status===0,stderr:`${r.stderr??""}${r.stdout??""}`.trim()}}function mf(e,r,t){if(!cf(e,r,t))return{ok:!1,error:"path is not an allowed harness generated cache"};let n=typeof process.getuid=="function"?process.getuid():null,o=typeof process.getgid=="function"?process.getgid():null;if(n===null||o===null)return{ok:!1,error:"privileged reclaim requires POSIX uid/gid"};let s=df(["chown","-R",`${n}:${o}`,uf.resolve(e)]);if(s.ok)return{ok:!0,method:"chown_then_rm"};let i=df(["rm","-rf",uf.resolve(e)]);return i.ok?{ok:!0,method:"sudo_rm"}:{ok:!1,error:s.stderr||i.stderr||"sudo -n failed (password required or not permitted)"}}var Ja="Root-owned harness caches require operator reclaim: configure passwordless sudo for chown/rm under ~/.kynver/harness/worktrees, or run `node scripts/reclaim-harness-root-owned-cache.mjs --execute` as the harness owner with sudo available. See docs/runbooks/harness-root-owned-cache-reclaim.md.";function o_(e){let r=e?.code;return r==="EACCES"||r==="EPERM"}function ff(e,r,t={}){if(!t_(e.path))return{executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.harnessRoot,o=n?fr(n):null,i=e.bytes??ar(e.path)??void 0,a=t.removePath??n_,l=t.hasForeignOwnedEntry??af;try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i}}catch(c){if(!o_(c)||!n||!o)return{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let u=l(e.path),d=pf();if(!(d==="force"||d==="auto"&&u))return u?{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; ${Ja}`}:{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let m=mf(e.path,n,o);if(m.ok&&m.method==="sudo_rm")return{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0};if(m.ok)try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0}}catch(p){return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${p.message}; privileged chown succeeded but rm still failed`}}return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; privileged reclaim failed: ${m.error}; ${Ja}`}}}function za(e){let r=e.harnessRoot;return!r||!Cm(e.path,r)?null:{...e,executed:!1,skipped:!0,skipReason:"run_metadata_protected"}}function Xa(e,r){let t=za(e);if(t)return t;let n=ff(e,r);return{...e,bytes:n.bytes??e.bytes,executed:n.executed,skipped:n.skipped,skipReason:n.skipReason,error:n.error}}function hf(e,r){return Xa(e,r)}function kf(e,r){return Xa(e,r)}function yf(e,r){return Xa(e,r)}function Rf(e,r){let t=za(e);if(t)return t;if(!qa(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};try{let n=e.bytes??ar(e.path);return gf(e.path,{recursive:!0,force:!0}),{...e,bytes:n,executed:!0,skipped:!1}}catch(n){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:n.message}}}function bf(e,r){let t=za(e);if(t)return t;if(!qa(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.repo;try{let o=e.bytes??ar(e.path);return n&&de(n,["worktree","remove","--force",e.path],{allowFailure:!0}),qa(e.path)&&gf(e.path,{recursive:!0,force:!0}),{...e,bytes:o,executed:!0,skipped:!1}}catch(o){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:o.message}}}import{existsSync as Cs,readdirSync as _s,statSync as s_}from"node:fs";import Ge from"node:path";function Qa(e,r){try{let t=s_(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function Sf(e,r){let t=Ge.relative(r,e);return t===""||!t.startsWith("..")&&!Ge.isAbsolute(t)}function vf(e,r,t,n){let o=[];for(let s of $a){if(s===".next")continue;let i=Ge.join(e,s);if(!Cs(i))continue;let a=Ge.resolve(i);t.has(a)||Sf(a,r.harnessRoot)&&(t.add(a),o.push({kind:"remove_build_cache",path:a,bytes:null,runId:n.runId,worker:n.worker,repo:n.repo,ageMs:Qa(a,r.now)}))}return o}function wf(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||r.push(...vf(n.worktreePath,e,t,{runId:n.runId,worker:n.workerName,repo:n.run.repo}));if(!e.includeOrphans||!Cs(e.worktreesDir))return r;for(let n of _s(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory())continue;let o=Ge.join(e.worktreesDir,n.name);for(let s of _s(o,{withFileTypes:!0})){if(!s.isDirectory())continue;let i=Ge.join(o,s.name);r.push(...vf(i,e,t,{runId:n.name,worker:s.name}))}}return r}function Cf(e){let r=e.worktreesAgeMs>0||e.includeOrphans,t=e.includeOrphans;if(!r&&!t)return[];let n=[],o=new Set;if(r)for(let i of e.index.values()){if(e.runIdFilter&&i.runId!==e.runIdFilter)continue;let a=i.worktreePath;Cs(a)&&(o.has(a)||(o.add(a),n.push({kind:"remove_worktree",path:a,bytes:null,runId:i.runId,worker:i.workerName,repo:i.run.repo,ageMs:Qa(a,e.now)})))}if(!t||!Cs(e.worktreesDir))return n;let s=new Set;for(let i of e.index.values())s.add(Ge.resolve(i.worktreePath));for(let i of _s(e.worktreesDir,{withFileTypes:!0})){if(!i.isDirectory()||e.runIdFilter&&i.name!==e.runIdFilter)continue;let a=Ge.join(e.worktreesDir,i.name),l;try{l=_s(a,{withFileTypes:!0})}catch{continue}for(let c of l){if(!c.isDirectory())continue;let u=Ge.resolve(Ge.join(a,c.name));o.has(u)||s.has(u)||Sf(u,e.harnessRoot)&&(o.add(u),n.push({kind:"remove_worktree",path:u,bytes:null,runId:i.name,worker:c.name,ageMs:Qa(u,e.now)}))}}return n}import{existsSync as Pf,readdirSync as _f,statSync as i_}from"node:fs";import Bt from"node:path";var a_=[{dirName:"node_modules",kind:"remove_node_modules"},{dirName:".next",kind:"remove_next_cache"}];function l_(e,r){try{let t=i_(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function c_(e,r){let t=Bt.relative(r,e);return t===""||!t.startsWith("..")&&!Bt.isAbsolute(t)}function u_(e,r,t,n,o,s){if(!Pf(n))return;let i=Bt.resolve(n);r.has(i)||c_(i,t.harnessRoot)&&(r.add(i),e.push({kind:o,path:i,bytes:null,harnessRoot:t.harnessRoot,runId:s.runId,worker:s.worker,repo:s.repo,ageMs:l_(i,t.now)}))}function xf(e,r,t,n,o){for(let s of a_)u_(e,r,t,Bt.join(n,s.dirName),s.kind,o)}function Ef(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||xf(r,t,e,n.worktreePath,{runId:n.runId,worker:n.workerName,repo:n.run.repo});if(!e.includeOrphans||!Pf(e.worktreesDir))return r;for(let n of _f(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory()||e.runIdFilter&&n.name!==e.runIdFilter)continue;let o=Bt.join(e.worktreesDir,n.name),s;try{s=_f(o,{withFileTypes:!0})}catch{continue}for(let i of s){if(!i.isDirectory())continue;let a=Bt.join(o,i.name);xf(r,t,e,a,{runId:n.name,worker:i.name})}}return r}Se();import{existsSync as Af,statSync as d_}from"node:fs";import Ye from"node:path";function p_(e,r){try{let t=d_(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function m_(e){let r=[],t=null;for(let n of e.split(`
-`)){if(!n.trim())continue;let[o,...s]=n.split(" "),i=s.join(" ");if(o==="worktree"){t&&r.push(t),t={path:i};continue}t&&(o==="branch"&&(t.branch=i),o==="HEAD"&&(t.head=i),o==="bare"&&(t.bare=!0))}return t&&r.push(t),r}function f_(e,r){let t=Ye.relative(Ye.resolve(r),Ye.resolve(e));return t!==""&&!t.startsWith("..")&&!Ye.isAbsolute(t)}var g_=200;function If(e){if(!e.includeOrphans||!Af(e.worktreesDir))return[];let r=new Set;for(let s of e.index.values())s.run.repo&&r.add(Ye.resolve(s.run.repo));let t=new Set;for(let s of e.index.values())t.add(Ye.resolve(s.worktreePath));let n=[],o=new Set;for(let s of r){let i=0,a;try{a=de(s,["worktree","list","--porcelain"],{allowFailure:!0})}catch{continue}let l=m_(a);for(let c of l){if(i>=g_)break;let u=Ye.resolve(c.path);if(u===Ye.resolve(s)||!f_(u,e.worktreesDir)||t.has(u)||o.has(u)||!Af(u))continue;let f=Ye.relative(e.worktreesDir,u).split(Ye.sep),m=f[0],p=f[1]??"unknown";o.add(u),i+=1,n.push({kind:"remove_worktree",path:u,bytes:null,runId:m,worker:p,repo:s,ageMs:p_(u,e.now)})}}return n}W();w();import Vn from"node:path";function Of(e,r){let t=Vn.resolve(r),n=new Map;for(let[o,s]of e){let i=s.harnessRoot?Vn.resolve(s.harnessRoot):null;i&&i!==t||n.set(o,s)}return n}function Nf(e){let r=new Map;for(let t of Ro(e))for(let n of Object.keys(t.workers||{})){let o=Vn.join(on(e,t.id),"workers",R(n),"worker.json"),s=_(o,void 0);s?.worktreePath&&r.set(Vn.resolve(s.worktreePath),{harnessRoot:e,worktreePath:Vn.resolve(s.worktreePath),runId:t.id,workerName:n,run:t,worker:s})}return r}function Gn(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function qr(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?n:r}function rl(e={}){let r=e.execute===!0||e.execute!==!1&&Gn("KYNVER_CLEANUP_EXECUTE"),t=e.finalizeStaleRuns!==!1&&!Gn("KYNVER_CLEANUP_SKIP_FINALIZE"),n=e.nodeModulesAgeMs??qr("KYNVER_CLEANUP_NODE_MODULES_AGE_MS",216e5),o=e.scanDependencyCaches??(e.nodeModulesAgeMs!==void 0||process.env.KYNVER_CLEANUP_NODE_MODULES_AGE_MS!=null),s=e.worktreesAgeMs??qr("KYNVER_CLEANUP_WORKTREES_AGE_MS",0),i=e.terminalWorktreesAgeMs??qr("KYNVER_CLEANUP_TERMINAL_WORKTREES_AGE_MS",216e5),a=e.runDirectoriesAgeMs??qr("KYNVER_CLEANUP_RUN_DIRECTORIES_AGE_MS",36e5),l=e.maxActionsPerSweep??qr("KYNVER_CLEANUP_MAX_ACTIONS_PER_SWEEP",120),c=e.includeOrphans===!0||Gn("KYNVER_CLEANUP_INCLUDE_ORPHANS"),d=Gn("KYNVER_CLEANUP_SCOPE_ALL")||process.env.KYNVER_CLEANUP_SCOPE==="all"?e.runIdFilter:e.runIdFilter??(process.env.KYNVER_CLEANUP_RUN_ID||void 0),f=e.accountBytes!==!1&&!Gn("KYNVER_CLEANUP_SKIP_BYTE_ACCOUNTING"),m=qr("KYNVER_CLEANUP_STORAGE_ENTRY_CAP",2e3),p=e.storagePerRunEntryCap!==void 0?e.storagePerRunEntryCap:f&&m>0?m:null,g=qr("KYNVER_CLEANUP_BYTE_ENTRY_CAP",2e3),k=e.byteAccountingEntryCap??(Number.isFinite(g)&&g>0?Math.floor(g):2e3);return{execute:r,finalizeStaleRuns:t,scanDependencyCaches:o,nodeModulesAgeMs:n,worktreesAgeMs:s>0?s:0,terminalWorktreesAgeMs:i>=0?i:0,runDirectoriesAgeMs:a>=0?a:0,maxActionsPerSweep:Number.isFinite(l)&&l>0?Math.floor(l):120,includeOrphans:c,runIdFilter:d?String(d):void 0,accountBytes:f,storagePerRunEntryCap:p,byteAccountingEntryCap:k}}function Uf(e){let r=process.env.KYNVER_CLEANUP_SCOPE==="all",t=Number(process.env.KYNVER_CLEANUP_WORKTREES_AGE_MS),n=r?Number.isFinite(t)&&t>0?t:6048e5:Number.isFinite(t)&&t>0?t:0;return rl({runIdFilter:r?void 0:e,worktreesAgeMs:n,terminalWorktreesAgeMs:r?216e5:void 0,runDirectoriesAgeMs:r?36e5:void 0,includeOrphans:r?!0:void 0,finalizeStaleRuns:!0,accountBytes:!0,scanDependencyCaches:!0})}Se();import{existsSync as Wf}from"node:fs";import tl from"node:path";w();var h_=1800*1e3;function Bf(e){let r=e.now??Date.now(),t=e.heartbeatFreshMs??h_;if(!Wf(e.worktreePath))return null;if(e.runId&&e.workerName){let c=tl.join(e.harnessRoot,"runs",e.runId,"workers",e.workerName),u=_(tl.join(c,"worker.json"),void 0);if(u&&Va(u,r,t))return"active_worker"}let n=tl.join(e.worktreePath,".git");if(!Wf(n))return null;let o=re(e.worktreePath,["status","--porcelain"]);if(o.status!==0)return"pr_or_unmerged_commits";let s=o.stdout.split(`
-`).map(c=>c.trim()).filter(c=>c.length>0);if(xe(s).length>0)return"dirty_worktree";let i=re(e.worktreePath,["rev-list","--count","@{u}..HEAD"]);if(i.status===0){let c=Number(i.stdout.trim());if(Number.isFinite(c)&&c>0)return"pr_or_unmerged_commits"}let a=re(e.worktreePath,["rev-list","--count","origin/main..HEAD"]);if(a.status!==0)return i.status!==0?"pr_or_unmerged_commits":null;let l=Number(a.stdout.trim());return Number.isFinite(l)&&l>0?"pr_or_unmerged_commits":null}Ce();import{existsSync as k_,readdirSync as Lf,statSync as y_}from"node:fs";import R_ from"node:path";function Hf(e={}){let r=ie(e.harnessRoot??ye()),t=fr(r),n=e.now??Date.now(),o=new Date(n).toISOString();if(!k_(t))return{harnessRoot:r,worktreesDir:t,worktreesBytes:0,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o};let s=0,i=0,a=0,l=null,c;try{c=Lf(t,{withFileTypes:!0})}catch{return{harnessRoot:r,worktreesDir:t,worktreesBytes:null,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o}}for(let u of c){if(!u.isDirectory())continue;i+=1;let d=R_.join(t,u.name);try{let f=y_(d);l=l===null?f.mtimeMs:Math.min(l,f.mtimeMs)}catch{}try{for(let f of Lf(d,{withFileTypes:!0}))f.isDirectory()&&(a+=1)}catch{}if(s!==null&&e.perRunEntryCap!==null){let f=e.perRunEntryCap??5e4;if(f<=0)s=null;else{let m=ar(d,f);m===null?s=null:s+=m}}}return{harnessRoot:r,worktreesDir:t,worktreesBytes:s,runCount:i,workerCount:a,oldestRunAt:l===null?null:new Date(l).toISOString(),scannedAt:o}}Ce();import{existsSync as b_}from"node:fs";import{homedir as v_}from"node:os";import Ff from"node:path";var S_=["/var/tmp/kynver-harness",Ff.join(v_(),".openclaw","harness")];function nl(e,r,t){if(!t?.trim())return;let n=ie(t.trim());e.has(n)||(e.add(n),r.push(n))}function w_(e){return e.scanWellKnown!=null?e.scanWellKnown:process.env.VITEST==="true"?!1:process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN!=="0"&&!["0","false","no"].includes((process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN??"").toLowerCase())}function $f(e={}){let r=new Set,t=[];nl(r,t,e.harnessRoot??ye());let n=process.env.KYNVER_CLEANUP_EXTRA_ROOTS?.split(",").map(o=>o.trim()).filter(Boolean);for(let o of n??[])nl(r,t,o);if(w_(e))for(let o of S_){let s=Ff.resolve(o);!r.has(s)&&b_(s)&&nl(r,t,s)}return t}nn();function C_(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function __(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function Kf(e={}){let r=e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/",t=__("KYNVER_DISK_GUARD_MAX_USED_PERCENT",75),n=Be({...e,diskPath:r,diskMaxUsedPercent:e.diskMaxUsedPercent??t}),o=!n.ok||n.usedPercent>=t,s=process.env.KYNVER_CLEANUP_DISK_PRESSURE_FORCE?.trim().toLowerCase();return s==="none"||s==="off"||s==="0"?o=!1:(s==="pressured"||s==="on"||s==="1")&&(o=!0),{diskGate:n,pressured:o,maxUsedPercent:t}}function jf(e,r){if(!r.pressured)return e;let t=e.execute||!C_("KYNVER_CLEANUP_DRY_RUN_ON_PRESSURE");return{...e,execute:t,nodeModulesAgeMs:0,runIdFilter:void 0,includeOrphans:!0,terminalWorktreesAgeMs:0,runDirectoriesAgeMs:0,worktreesAgeMs:e.worktreesAgeMs>0?e.worktreesAgeMs:6048e5,diskPressure:!0,diskGate:r.diskGate}}tn();import{unlinkSync as x_}from"node:fs";function xs(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function Vf(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function P_(e,r,t){return e.length===0?[]:t?[...e]:e.length<=r?[]:e.slice(r)}function Ps(e={}){let r=e.execute===!0||xs("KYNVER_WSL_CRASH_DUMP_EXECUTE")||xs("KYNVER_CLEANUP_EXECUTE"),t=e.purgeAll===!0||xs("KYNVER_WSL_CRASH_DUMP_PURGE_ALL"),n=Math.max(0,e.keepNewest??Vf("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",t?0:1)),o=pr({forceWsl:e.forceWsl});if(!o?.path)return{observation:o,execute:r,keepNewest:n,removed:[],removedBytes:0,skipped:o?.probeError?[{path:o.path??"(unresolved)",reason:o.probeError}]:[]};let s=P_(o.dumps,n,t),i=[],a=[],l=0;for(let c of s){if(!r){a.push({path:c.path,reason:"dry_run"});continue}try{x_(c.path),i.push({path:c.path,bytes:c.bytes,name:c.name}),l+=c.bytes}catch(u){a.push({path:c.path,reason:u.message})}}return{observation:o,execute:r,keepNewest:n,removed:i,removedBytes:l,skipped:a}}function Gf(e){return e?xs("KYNVER_WSL_CRASH_DUMP_CLEANUP")||!e.ok?!0:e.dumpCount>Vf("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",1):!1}tn();function Ee(e,r){if(process.env.KYNVER_CLEANUP_QUIET==="1")return;let t=r?`: ${r}`:"";console.error(`[kynver cleanup] ${e}${t}`)}Se();var Es=class{aheadOfMain=new Map;countAheadOfMain(r,t="origin/main"){let n=`${r}\0${t}`;if(this.aheadOfMain.has(n))return this.aheadOfMain.get(n)??null;let o=re(r,["rev-list","--count",`${t}..HEAD`]);if(o.status!==0)return this.aheadOfMain.set(n,null),null;let s=Number(o.stdout.trim()),i=Number.isFinite(s)?s:null;return this.aheadOfMain.set(n,i),i}};import{spawnSync as E_}from"node:child_process";import{existsSync as A_}from"node:fs";import I_ from"node:path";var O_=5e3;function N_(e,r){if(!A_(I_.join(e,".git")))return{status:null,stdout:"",stderr:"",error:"not_a_git_repo"};try{let t=E_("git",r,{cwd:e,encoding:"utf8",timeout:O_}),n=t.error?.message?.includes("ETIMEDOUT")===!0;return{status:n?null:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:n?"git_timeout":t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function Yf(e){let r=N_(e,["status","--short"]);return r.error==="not_a_git_repo"?[]:r.error==="git_timeout"||r.status!==0?null:r.stdout.split(`
-`).map(t=>t.trim()).filter(Boolean)}var As=class{cache=new Map;porcelain(r){let t=r,n=this.cache.get(t);if(n!==void 0)return n;let o=Yf(t)??[];return this.cache.set(t,o),o}};var Is=class{cache=new Map;derive(r){let t=this.cache.get(r.id);if(t!==void 0)return t;let n=Gr(r);return this.cache.set(r.id,n),n}};function T_(e){let r={};for(let t of e)r[t.kind]=(r[t.kind]??0)+1;return r}function Jf(e,r={}){let t=r.maxSampleActions??12,n=r.maxSampleSkips??8;return{harnessRoot:e.harnessRoot,scanRoots:e.scanRoots,dryRun:e.dryRun,execute:e.execute,scannedAt:e.scannedAt,finalizedRuns:e.finalizedRuns.length,actionCount:e.actions.length,actionKinds:T_(e.actions),totals:e.totals,...e.storage?{storage:e.storage}:{},...e.preservedLivePaths?.length?{preservedLivePaths:e.preservedLivePaths}:{},...e.removedRunDirectories!=null?{removedRunDirectories:e.removedRunDirectories}:{},sampleActions:e.actions.slice(0,t).map(o=>({kind:o.kind,path:o.path,...o.skipReason?{skipReason:o.skipReason}:{},...o.bytes!=null?{bytes:o.bytes}:{},...o.runId?{runId:o.runId}:{},...o.worker?{worker:o.worker}:{}})),sampleSkips:e.skips.slice(0,n)}}function D_(e={}){let r=e.harnessRoot?ie(e.harnessRoot):ye(),t=$f({harnessRoot:r}),n=e.now??Date.now();return{harnessRoot:r,scanRoots:t,now:n}}function M_(e){return typeof e=="string"?{reason:e}:e}function Lt(e,r,t,n){e.push({path:r,reason:t,...n?{detail:n}:{}})}function Os(e,r,t){return!r||e.bytes!=null?e:{...e,bytes:ar(e.path,t)}}function qf(e,r){let t={};for(let n of r)t[n.reason]=(t[n.reason]??0)+1;for(let n of e)n.skipReason&&(t[n.skipReason]=(t[n.skipReason]??0)+1);return t}function U_(e,r){return e.kind==="remove_next_cache"?kf(e,r):hf(e,r)}function W_(e,r,t){return e.kind==="remove_next_cache"?Ss(e.path,r,t):vs(e.path,r,t)}function B_(e){let r=new Map;for(let t of e)for(let[n,o]of Nf(t))r.set(n,o);return r}function zf(e,r){return e.runId&&e.worker?Ae.join(r,e.runId,e.worker):Ae.resolve(e.path,"..")}function ol(e={}){let r=rl(e),t=Kf();r=jf(r,t);let n=D_(e);Ee("scan",`${n.scanRoots.length} harness root(s)`);let o=zm(n.scanRoots,n.now),s=r.finalizeStaleRuns?Ln().map(C=>({runId:C.runId,from:C.from,to:C.to})):[];s.length>0&&Ee("finalize",`${s.length} stale run(s) marked terminal`),Ee("index","building worktree index");let i=B_(n.scanRoots);Ee("index",`${i.size} indexed worktree(s)`);let a={runTerminalCache:new Is,gitStatusCache:new As,gitRevCache:new Es},l=[],c=[],u=new Set,d=r.maxActionsPerSweep,f=()=>c.length>=d;for(let C of n.scanRoots){if(f())break;Ee("root",C);let ae=Ae.join(C,"worktrees"),Z=Of(i,C),Je={harnessRoot:C,worktreesDir:ae,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter,index:Z,now:n.now},Zr=r.scanDependencyCaches?Ef(Je):[];Ee("dependency",r.scanDependencyCaches?`${Zr.length} cache candidate(s) at ${C}`:"skipped (worktree-only sweep)");let Me=0;for(let fe of Zr){if(f())break;Me+=1,Me%50===0&&Ee("dependency",`${Me}/${Zr.length} evaluated`);let ee=Ae.resolve(fe.path);if(u.has(ee))continue;u.add(ee);let U={...fe,path:ee},ge=W_(U,C,ae);if(ge){Lt(l,U.path,ge),c.push({...U,executed:!1,skipped:!0,skipReason:ge});continue}let he=zf(U,ae),qe=Z.get(Ae.resolve(he))??null,le=Ya({indexed:qe,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:U.ageMs,worktreePath:he,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(le){Lt(l,U.path,le),c.push({...U,executed:!1,skipped:!0,skipReason:le});continue}c.push(U_(Os(U,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(r.scanDependencyCaches)for(let fe of wf(Je)){if(f())break;let ee=Ae.resolve(fe.path);if(u.has(ee))continue;u.add(ee);let U={...fe,path:ee},ge=ws(U.path,C,ae);if(ge){Lt(l,U.path,ge),c.push({...U,executed:!1,skipped:!0,skipReason:ge});continue}let he=zf(U,ae),qe=Z.get(Ae.resolve(he))??null,le=Gm({indexed:qe,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:U.ageMs,worktreePath:he,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(le){Lt(l,U.path,le),c.push({...U,executed:!1,skipped:!0,skipReason:le});continue}c.push(yf(Os(U,r.accountBytes,r.byteAccountingEntryCap),r.execute))}let xr=[...Cf(Je),...If(Je)];Ee("worktrees",`${xr.length} candidate(s) at ${C}`);let lr=new Set,ve=0;for(let fe of xr){if(f())break;ve+=1,ve%50===0&&Ee("worktrees",`${ve}/${xr.length} evaluated`);let ee=Ae.resolve(fe.path);if(lr.has(ee))continue;lr.add(ee);let U={...fe,path:ee},ge=Z.get(Ae.resolve(U.path))??null,he=ge?null:Bf({worktreePath:U.path,harnessRoot:C,runId:U.runId,workerName:U.worker,now:n.now}),qe=Vm({indexed:ge,worktreePath:Ae.resolve(U.path),includeOrphans:r.includeOrphans,worktreesAgeMs:r.worktreesAgeMs,terminalWorktreesAgeMs:r.terminalWorktreesAgeMs,ageMs:U.ageMs,orphanSafety:he,worktreeRemovalGuard:e.worktreeRemovalGuard,liveness:a,now:n.now,harnessRoot:C,writeSalvageEvidence:r.execute});if(qe){let{reason:le,detail:cr}=M_(qe);Lt(l,U.path,le,cr),c.push({...U,executed:!1,skipped:!0,skipReason:le});continue}c.push(bf(Os(U,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(!f()&&r.runDirectoriesAgeMs>=0)for(let fe of nf({harnessRoot:C,worktreesDir:ae,runDirectoriesAgeMs:r.runDirectoriesAgeMs,runIdFilter:r.runIdFilter,activeGuards:o,now:n.now})){if(f())break;let ee=Ae.resolve(fe.path);if(u.has(ee))continue;u.add(ee);let U={...fe,path:ee},ge=U.runId??Ae.basename(ee),he=tf({harnessRoot:C,runId:ge,runPath:ee,ageMs:U.ageMs,runDirectoriesAgeMs:r.runDirectoriesAgeMs,activeGuards:o});if(he){Lt(l,U.path,he),c.push({...U,executed:!1,skipped:!0,skipReason:he});continue}c.push(Rf(Os(U,r.accountBytes,r.byteAccountingEntryCap),r.execute))}}let m=0,p=0,g=0,k=0,h=0,b=0;for(let C of c)C.bytes&&(m+=C.bytes),!C.skipped&&!C.executed&&C.bytes&&(g+=C.bytes),C.executed?(h+=1,k+=C.bytes??0,C.kind==="remove_run_directory"&&(p+=1)):C.skipped&&(b+=1,C.skipReason==="dry_run"&&C.bytes&&(g+=C.bytes));let x=r.accountBytes?Hf({harnessRoot:n.harnessRoot,now:n.now,perRunEntryCap:r.storagePerRunEntryCap}):void 0,M=pr(),E=r.execute&&Gf(M),T=E?Ps({execute:!0}):null,K=M?{observed:!0,execute:E,dumpCount:M.dumpCount,totalBytes:M.totalBytes,removedCount:T?.removed.length??0,removedBytes:T?.removedBytes??0,executables:M.executables,path:M.path,reason:M.reason}:void 0;T&&T.removed.length>0&&(k+=T.removedBytes,h+=T.removed.length,Ee("wsl-crashes",`removed ${T.removed.length} dump(s), ${T.removedBytes} bytes`)),Ee("complete",`${c.length} action(s), ${b} skipped, ${h} removed`);let L=Jm(c,l),D=Jf({harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:m,reclaimableBytes:g,removedBytes:k,removedPaths:h,skippedPaths:b,skipReasons:qf(c,l)},...x?{storage:x}:{},...L.length>0?{preservedLivePaths:L}:{},...p>0?{removedRunDirectories:p}:{},...K?{wslCrashDumps:K}:{}});return{harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:m,reclaimableBytes:g,removedBytes:k,removedPaths:h,skippedPaths:b,skipReasons:qf(c,l)},...x?{storage:x}:{},...L.length>0?{preservedLivePaths:L}:{},...p>0?{removedRunDirectories:p}:{},...K?{wslCrashDumps:K}:{},compactSummary:D}}function Xf(e){let r=Uf(e);return ol({execute:r.execute,finalizeStaleRuns:r.finalizeStaleRuns,accountBytes:r.accountBytes,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter})}function Qf(){return process.env.KYNVER_PIPELINE_CLEANUP!=="0"}import{readFile as Y_}from"node:fs/promises";import{homedir as J_}from"node:os";import zr from"node:path";go();import{existsSync as Zf,readFileSync as L_}from"node:fs";import Ns from"node:path";var rg={"@kynver-app/runtime":"0.1.83","@kynver-app/openclaw-agent-os":"0.1.43","@kynver-app/mcp-agent-os":"0.3.34"},tg=Object.keys(rg),sl={"@kynver-app/runtime":"Kynver runtime","@kynver-app/openclaw-agent-os":"OpenClaw AgentOS plugin","@kynver-app/mcp-agent-os":"AgentOS MCP server"},H_={"@kynver-app/runtime":"packages/kynver-runtime/package.json","@kynver-app/openclaw-agent-os":"packages/kynver-openclaw-agent-os/package.json","@kynver-app/mcp-agent-os":"packages/kynver-mcp-agent-os/package.json"};function eg(e){let r=e.trim().split("-")[0]?.split("+")[0];if(!r)return null;let t=r.split(".");if(t.length<1||t.length>3)return null;let n=t.map(o=>Number.parseInt(o,10));if(n.some(o=>!Number.isFinite(o)||o<0))return null;for(;n.length<3;)n.push(0);return[n[0],n[1],n[2]]}function Ts(e,r){let t=eg(e),n=eg(r);if(!t||!n)return 0;for(let o=0;o<3;o+=1){if(t[o]>n[o])return 1;if(t[o]<n[o])return-1}return 0}function ng(e,r){return Ts(e,r)>=0}function F_(e){let r=null;for(let t of e)(!r||Ts(t,r)>0)&&(r=t);return r}function $_(e){try{let r=JSON.parse(L_(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function K_(e,r){let t=[r,process.env.KYNVER_REPO,e].filter(o=>!!o?.trim());for(let o of t){let s=Ns.resolve(o);if(Zf(Ns.join(s,"packages/kynver-runtime/package.json"))&&Zf(Ns.join(s,"package.json")))return s}return st({cwd:e})?.repo??null}function og(e={}){let r=e.cwd??process.cwd(),t=K_(r,e.repoRoot);if(!t)return{};let n={};for(let o of tg){let s=Ns.join(t,H_[o]),i=$_(s);i&&(n[o]={version:i,source:"repo",path:s})}return n}function j_(e){return e==="@kynver-app/runtime"?["npm run kynver:build","npm run kynver"]:[`npm run build -w ${e}`]}function V_(e){let{packageName:r,minimumVersion:t,effectiveVersion:n,effectiveSource:o,repoVersion:s}=e,i=[];return s&&ng(s,t)?(i.push(`Use the monorepo checkout (${s}) instead of a stale npm install: ${j_(r).join("; ")}.`),i.push("Do not publish npm packages or wait on an operator release."),i):(n?i.push(`Upgrade ${r} from ${n} to >= ${t} (npm install -g ${r}@latest or align OpenClaw npm prefix).`):i.push(`Install ${r} >= ${t} before running memory-heavy AgentOS paths.`),r==="@kynver-app/runtime"&&i.push("Repo-source alternative: npm run kynver:build && npm run kynver"),o==="installed"&&s&&i.push(`Repo checkout reports ${s}; rebuild/link repo source if you develop from the monorepo.`),i)}function G_(e){if(e.length===0)return{version:null,source:"unknown"};let r=F_(e.map(n=>n.version));if(!r)return{version:null,source:"unknown"};let t=e.find(n=>n.version===r)??e[0];return{version:t.version,source:t.source}}function sg(e={}){let r=(i,a)=>i?typeof i=="string"?{version:i,source:a}:i:null,t=tg.map(i=>{let a=rg[i],l=[],c=r(e.installed?.[i],"installed"),u=r(e.repo?.[i],"repo"),d=r(e.self?.[i],"self");c&&l.push(c),u&&l.push(u),d&&l.push(d);let{version:f,source:m}=G_(l),p=u?.version??null,g=f?ng(f,a):!1,k=g?[]:V_({packageName:i,minimumVersion:a,effectiveVersion:f,effectiveSource:m,repoVersion:p}),h=g?`${sl[i]} ${f} meets memory-cost minimum ${a} (${m}).`:`${sl[i]} is below memory-cost minimum ${a}`+(f?` (effective ${f} via ${m})`:" (no version detected)")+".";return{packageName:i,displayName:sl[i],minimumVersion:a,effectiveVersion:f,effectiveSource:m,ok:g,summary:h,remediation:k}}),n=t.filter(i=>!i.ok),o=n.length===0,s=o?"All managed AgentOS packages meet memory-cost minimum versions.":`Memory-cost package guard blocked ${n.length} stale package(s): ${n.map(i=>`${i.packageName} < ${i.minimumVersion}`).join("; ")}.`;return{ok:o,summary:s,packages:t}}var il=class extends Error{result;constructor(r){let t=[r.summary,...r.packages.filter(n=>!n.ok).flatMap(n=>[`- ${n.summary}`,...n.remediation.map(o=>`  \u2192 ${o}`)])];super(t.join(`
-`)),this.name="MemoryCostPackageVersionGuardError",this.result=r}};function ig(e={}){let r=sg(e);if(!r.ok)throw new il(r);return r}var q_=["@kynver-app/runtime","@kynver-app/openclaw-agent-os","@kynver-app/mcp-agent-os"];function Ht(e){let r=e?.trim();return r||null}function z_(e){return[...new Set(e.filter(r=>!!r))]}function X_(){let e=J_(),r=Ht(process.env.KYNVER_OPENCLAW_NPM_ROOT)??Ht(process.env.OPENCLAW_NPM_ROOT)??zr.join(e,".openclaw","npm"),t=Ht(process.env.KYNVER_NPM_GLOBAL_ROOT)??Ht(process.env.KYNVER_NPM_GLOBAL_MODULES_ROOT)??(Ht(process.env.NPM_CONFIG_PREFIX)?zr.join(Ht(process.env.NPM_CONFIG_PREFIX),"lib","node_modules"):zr.join(e,".npm-global","lib","node_modules"));return z_([zr.join(r,"lib","node_modules"),zr.join(r,"node_modules"),t.endsWith("node_modules")?t:zr.join(t,"lib","node_modules")])}async function Q_(e){try{let r=JSON.parse(await Y_(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function Z_(e){let r=X_(),t=new Set,n=[];for(let o of r){let s=zr.join(o,e,"package.json");t.has(s)||(t.add(s),n.push(s))}return n}async function Ds(e=new Date().toISOString()){let r={};for(let t of q_){let n=null;for(let o of Z_(t)){let s=await Q_(o);s&&(!n||Ts(s,n.version)>0)&&(n={version:s,path:o})}n&&(r[t]={version:n.version,observedAt:e,path:n.path})}return r}import{spawnSync as ex}from"node:child_process";var rx=1e4,tx=4*1024*1024,ag=(e,r,t)=>{try{let n=ex(e,r,{encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:t?.timeoutMs??rx,maxBuffer:tx});return{ok:n.status===0,stdout:typeof n.stdout=="string"?n.stdout:"",stderr:typeof n.stderr=="string"?n.stderr:""}}catch(n){return{ok:!1,stdout:"",stderr:n instanceof Error?n.message:String(n)}}};function Ft(e,r,t){let n=e(r,t);if(!n.ok||!n.stdout.trim())return null;try{return JSON.parse(n.stdout)}catch{return null}}function lg(e,r,t){return`${e} ${r} ${t}`}function Yn(e){let r=e.lastIndexOf("@");if(r<=0||r===e.length-1)return null;let t=e.slice(0,r),n=e.slice(r+1);return!/^[^/\s]+\/[^/\s]+$/.test(t)||!/^[0-9a-f]{7,40}$/i.test(n)?null:{repo:t,sha:n}}function cg(e){let r=e.trim().match(/[/:]([^/]+\/[^/]+)\/(?:pull|pulls|merge_requests|pull-requests)\/(\d+)/i);if(!r)return null;let t=Number(r[2]);return!Number.isFinite(t)||t<=0?null:{repo:r[1],number:t}}var nx=8e3,ox=30,sx=100,ix=400;function al(e){return process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()?!0:e("gh",["auth","token"]).ok}function $t(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function ax(e){return Array.isArray(e)?e.map(r=>$t(r)).filter(r=>r!==null).slice(0,ox).map(r=>({context:r.context??null,state:r.state??null,target_url:r.target_url??null,description:r.description??null})):[]}function ug(e,r,t){let n=Ft(e,"gh",["api",`repos/${r}/commits/${t}/status`]);return n?{state:n.state??null,statuses:ax(n.statuses)}:null}var dg={provider:"github",kind:"pr_snapshot",version:"1",isAvailable:al,collect(e,r){let t=cg(e);if(!t)return null;let n=Ft(r,"gh",["api",`repos/${t.repo}/pulls/${t.number}`]);if(!n)return null;let o=$t(n.head),s=typeof o?.sha=="string"?o.sha:null,i=$t(n.user),a=$t($t(o?.repo)?.owner),l=typeof n.body=="string"?n.body.slice(0,nx):null,c=[],u={state:null,statuses:[]};if(s){let m=Ft(r,"gh",["api",`repos/${t.repo}/commits/${s}/check-runs?per_page=100`]);Array.isArray(m?.check_runs)&&(c=m.check_runs.map(p=>$t(p)).filter(p=>p!==null).slice(0,sx).map(p=>({name:p.name??null,status:p.status??null,conclusion:p.conclusion??null}))),u=ug(r,t.repo,s)??u}let d=r("gh",["api","--paginate",`repos/${t.repo}/pulls/${t.number}/files?per_page=100`,"--jq",".[].filename"]),f=d.ok?d.stdout.split(`
-`).map(m=>m.trim()).filter(Boolean).slice(0,ix):[];return{pull:{html_url:n.html_url??null,title:n.title??null,body:l,user:{login:i?.login??null},state:n.state??null,draft:n.draft??null,merged:n.merged??null,merged_at:n.merged_at??null,merge_commit_sha:n.merge_commit_sha??null,mergeable:n.mergeable??null,mergeable_state:n.mergeable_state??null,head:{sha:s,ref:o?.ref??null,repo:{owner:{login:a?.login??null}}}},checkRuns:c,combinedStatus:u,changedFiles:f}}},pg={provider:"github",kind:"commit_status",version:"1",isAvailable:al,collect(e,r){let t=Yn(e);return t?ug(r,t.repo,t.sha):null}},mg={provider:"github",kind:"branch_reachability",version:"1",isAvailable:al,collect(e,r){let t=Yn(e);if(!t)return null;let n=Ft(r,"gh",["api",`repos/${t.repo}`]),o=typeof n?.default_branch=="string"&&n.default_branch.trim()?n.default_branch.trim():null;if(!o)return null;let s=Ft(r,"gh",["api",`repos/${t.repo}/compare/${encodeURIComponent(o)}...${t.sha}`]);if(!s)return null;let i=typeof s.status=="string"?s.status:null;return{defaultBranch:o,compareStatus:i,reachable:i==="identical"||i==="behind"}}};var lx=5,cx=/\b(READY|ERROR|BUILDING|QUEUED|CANCELED|INITIALIZING)\b/i,ux=/https:\/\/[^\s]+/,fg={provider:"vercel",kind:"deployment_status",version:"1",isAvailable(e){return e("vercel",["whoami"]).ok},collect(e,r){let t=Yn(e);if(!t)return null;let n=r("vercel",["list","--prod","--meta",`githubCommitSha=${t.sha}`]);if(!n.ok)return null;let o=[];for(let s of n.stdout.split(`
-`)){let i=s.match(ux)?.[0];if(!i)continue;let a=s.match(cx)?.[1]?.toUpperCase()??null;if(o.push({url:i,state:a}),o.length>=lx)break}return{found:o.length>0,deployments:o}}};var ll=[];function Ms(e){ll.some(r=>r.provider===e.provider&&r.kind===e.kind)||ll.push(e)}function gg(e,r){return ll.find(t=>t.provider===e&&t.kind===r)??null}function hg(){Ms(dg),Ms(pg),Ms(mg),Ms(fg)}var dx=8,px=25e3;function kg(e,r={}){hg();let t=r.run??ag,n=r.now??(()=>new Date),o=r.maxSubjects??dx,s=Date.now()+(r.deadlineMs??px),i=new Set,a=e.filter(m=>{let p=lg(m.provider,m.kind,m.subject);return i.has(p)?!1:(i.add(p),!0)}),l=a.length>0?Math.floor(n().getTime()/6e4)%a.length:0,u=a.map((m,p)=>a[(l+p)%a.length]).slice(0,o),d={attempted:0,collected:0,items:[],skipped:[]},f=new Map;for(let m of u){if(Date.now()>s){d.skipped.push({...m,reason:"budget_exhausted"});continue}let p=gg(m.provider,m.kind);if(!p){d.skipped.push({...m,reason:"no_recipe"});continue}let g=`${p.provider} ${p.kind}`,k=f.get(g);if(k===void 0&&(k=p.isAvailable(t),f.set(g,k)),!k){d.skipped.push({...m,reason:"provider_unavailable"});continue}d.attempted+=1;let h=p.collect(m.subject,t);if(h==null){d.skipped.push({...m,reason:"collect_failed"});continue}d.collected+=1,d.items.push({provider:m.provider,kind:m.kind,subject:m.subject,payload:h,observedAt:n().toISOString(),collectorVersion:p.version})}return d}W();w();import mx from"node:path";var fx="provider-evidence-wanted.json";function yg(e){return mx.join(P(e),fx)}function Rg(e){if(!Array.isArray(e))return[];let r=[];for(let t of e){if(!t||typeof t!="object"||Array.isArray(t))continue;let n=t,o=typeof n.provider=="string"?n.provider.trim():"",s=typeof n.kind=="string"?n.kind.trim():"",i=typeof n.subject=="string"?n.subject.trim():"";!o||!s||!i||r.push({provider:o,kind:s,subject:i})}return r}function bg(e){let r=_(yg(e),null);return Rg(r?.wanted)}function vg(e,r){ue(yg(e),{savedAt:new Date().toISOString(),wanted:r})}function Sg(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.providerEvidenceWanted;return Array.isArray(r)?Rg(r):null}async function hx(e,r){let t=B(e),n=[];for(let o of Object.keys(t.workers||{})){let s=_(gx.join(P(t.id),"workers",R(o),"worker.json"),void 0);if(!s?.taskId||s.localOnly)continue;if($r(s)){n.push({worker:o,ok:!0,taskId:s.taskId??null,skipped:!0});continue}let i=N(s);if(!oe(i))continue;let a=pt({alive:i.alive,finalResult:i.finalResult,changedFiles:i.changedFiles,gitAncestry:i.gitAncestry});if(!s.dispatched&&!i.finalResult&&!a?.salvageable)continue;let l=await Nn({run:e,name:o,agentOsId:String(r.agentOsId||s.agentOsId||""),...r});n.push({worker:o,ok:l.ok,taskId:s.taskId??null})}return n}async function kx(e,r,t,n,o){let s=$(n.baseUrl?String(n.baseUrl):void 0),i=await V(n.secret?String(n.secret):void 0,e,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(e)}/operator/tick`,l=await Ds(),c=Fo(r),u=null;try{let g=bg(r);u=g.length>0?kg(g):null}catch{u=null}let d=Ho(r),f=await Wr(a,i,{agentOsId:e,runId:r,ingestHarness:!0,harnessBoardSnapshot:Kr(r),resourceGate:t,boxResourceSnapshot:ks(t,{harnessRunId:r,boxKind:We(v())}),packageVersions:l,...o?{harnessCleanup:o}:{},runnerPresence:$e({runId:r}),activeHarnessWorkers:c,...d?.leaseToken?{meshCronLeaseToken:d.leaseToken}:{},...u&&u.items.length>0?{providerEvidence:u.items}:{}}),m=Sg(f.response);if(m)try{vg(r,m)}catch{}let p=Qu(f);if(p)try{Xu(r,p)}catch{}return{ok:f.ok,httpStatus:f.status,response:f.response,...u?{providerEvidence:{attempted:u.attempted,collected:u.collected,skipped:u.skipped.length}}:{}}}async function cl(e){let r=String(O(String(e.run||""),"--run")),t=String(O(String(e.agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false";cs({run:r});let o=await Um(t,e),s=Mm(o),i=er({runId:r,configuredMaxWorkersOverride:s}),a=Qf()?Xf(r):void 0,l=await kx(t,r,i,e,a),c=wp(r,l),u=await Xo(r,e),d=await hx(r,e),f=er({runId:r,configuredMaxWorkersOverride:s}),m=Fn(),p=await Dm(r,e),g=Rm(f,l),k=g.maxStarts,h=await $n({run:r,agentOsId:t,pipeline:!0,...e}),b=null,x=0,M=ym(l),E=k;if(n&&E>0&&M.length>0){let K=Math.min(E,M.length),L=await Oa({...e,run:r,agentOsId:t,targetTaskIds:M.join(",")},K),D=Ut(L);x+=D,E=Math.max(0,E-D),b={exactTargetTaskIds:M,exact:L,startedCount:x}}if(n&&E>0){let K=await Oa({...e,run:r,agentOsId:t},E),L=Ut(K);x+=L,b=b&&typeof b=="object"?{...b,broad:K,startedCount:x}:K}else!n||k<=0?b||(b={ok:!0,skipped:!0,reason:n?f.reason??"no slots or queued work":"execute disabled",maxStarts:0,dispatchAdvice:g,...M.length?{exactTargetTaskIds:M,exactOnly:!0}:{}}):b&&typeof b=="object"&&(b={...b,broadSkipped:!0,startedCount:x});let T=!g.underutilized&&k===0&&d.length===0&&x===0;return{runId:r,agentOsId:t,execute:n,resourceGate:i,dispatchResourceGate:f,leaseRenewal:u,completedWorkers:d,staleReconcile:m,harnessCleanup:a,planProgressSync:p,completionAckSync:c,operatorTick:l,sweep:h,dispatchAdvice:g,dispatch:b,idle:T}}I();import Ux from"node:os";import{readFileSync as yx}from"node:fs";import{homedir as Rx,platform as bx}from"node:os";import vx from"node:path";import{execFileSync as Sx}from"node:child_process";function wg(e,r=Date.now()){try{let t=JSON.parse(e),n=t.claudeAiOauth?.accessToken,o=t.claudeAiOauth?.expiresAt;return typeof n!="string"||!n||typeof o=="number"&&o-r<6e4?null:n}catch{return null}}function wx(){if(bx()==="darwin")try{let e=Sx("security",["find-generic-password","-s","Claude Code-credentials","-w"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return wg(e.trim())}catch{return null}try{let e=yx(vx.join(Rx(),".claude",".credentials.json"),"utf8");return wg(e)}catch{return null}}function Cg(e=process.env,r={}){let t=e.ANTHROPIC_API_KEY?.trim();if(t)return{kind:"api_key",key:t};let n=e.KYNVER_CHAT_USE_CLAUDE_OAUTH;if(r.oauthOptIn===!0||n==="1"||n==="true"||n==="yes"){let s=wx();if(s)return{kind:"oauth",token:s}}return null}var Cx="You are Claude Code, Anthropic's official CLI for Claude.";function _x(){return{blocks:[],stopReason:null,inputTokens:0,outputTokens:0}}function xx(e,r){let t=r;switch(t.type){case"message_start":return e.inputTokens=t.message?.usage?.input_tokens??0,"";case"content_block_start":{let n=t.index??e.blocks.length;return e.blocks[n]={type:t.content_block?.type==="tool_use"?"tool_use":"text",text:"",id:t.content_block?.id,name:t.content_block?.name,inputJson:""},""}case"content_block_delta":{let n=e.blocks[t.index??e.blocks.length-1];return n?t.delta?.type==="text_delta"&&t.delta.text?(n.text+=t.delta.text,t.delta.text):(t.delta?.type==="input_json_delta"&&t.delta.partial_json&&(n.inputJson+=t.delta.partial_json),""):""}case"message_delta":return t.delta?.stop_reason&&(e.stopReason=t.delta.stop_reason),typeof t.usage?.output_tokens=="number"&&(e.outputTokens=t.usage.output_tokens),"";default:return""}}function Px(e){let r=[];for(let t of e.blocks)if(t)if(t.type==="tool_use"){let n={};try{n=t.inputJson?JSON.parse(t.inputJson):{}}catch{n={}}r.push({type:"tool_use",id:t.id??"",name:t.name??"",input:n})}else t.text&&r.push({type:"text",text:t.text});return{content:r,stop_reason:e.stopReason??"end_turn",usage:{input_tokens:e.inputTokens,output_tokens:e.outputTokens}}}async function*Ex(e){let r=e.getReader(),t=new TextDecoder,n="";try{for(;;){let{done:o,value:s}=await r.read();if(o)break;n+=t.decode(s,{stream:!0});let i;for(;(i=n.indexOf(`
-`))!==-1;){let a=n.slice(0,i).trim();if(n=n.slice(i+1),!a.startsWith("data:"))continue;let l=a.slice(5).trim();if(!(!l||l==="[DONE]"))try{yield JSON.parse(l)}catch{}}}}finally{r.releaseLock()}}function Ax(e=process.env){return(e.ANTHROPIC_BASE_URL?.trim()||"https://api.anthropic.com").replace(/\/$/,"")}async function _g(e){let{creds:r,model:t,payload:n}=e,o={"Content-Type":"application/json","anthropic-version":"2023-06-01"},s=n.system;r.kind==="api_key"?o["x-api-key"]=r.key:(o.Authorization=`Bearer ${r.token}`,o["anthropic-beta"]="oauth-2025-04-20",s=[{type:"text",text:Cx},{type:"text",text:n.system}]);let i=await fetch(`${Ax()}/v1/messages`,{method:"POST",headers:o,signal:e.signal,body:JSON.stringify({model:t,max_tokens:n.maxTokens,system:s,messages:n.messages,...Array.isArray(n.tools)&&n.tools.length>0?{tools:n.tools}:{},...n.temperature!==void 0?{temperature:n.temperature}:{},stream:!0})});if(!i.ok||!i.body){let l=await i.text().catch(()=>"");throw new Error(`Anthropic stream failed: HTTP ${i.status}${l?` \u2014 ${l.slice(0,300)}`:""}`)}let a=_x();for await(let l of Ex(i.body)){let c=xx(a,l);c&&e.onDelta(c)}return Px(a)}var Kt=class{constructor(r,t=150){this.flushFn=r;this.floorMs=t}buffer="";timer=null;closed=!1;push(r){this.closed||!r||(this.buffer+=r,this.timer||(this.timer=setTimeout(()=>{this.timer=null,this.flushNow()},this.floorMs)))}flushNow(){if(!this.buffer)return;let r=this.buffer;this.buffer="",this.flushFn(r)}close(){this.closed||(this.closed=!0,this.timer&&(clearTimeout(this.timer),this.timer=null),this.flushNow())}};import{spawn as Tx}from"node:child_process";var Ix=new Set(["run list","run status","worker list","worker status","worker tail","status","cron status","monitor status","monitor list"]),Ox=new Set(["run create","run dispatch","run sweep","worker start","worker stop","worker complete","cleanup"]),Nx=["--secret","--api-key","--keeper-child"];function xg(e){if(!Array.isArray(e)||e.length===0||e.some(n=>typeof n!="string"))return{ok:!1,mutating:!1,reason:"argv must be a non-empty string array"};for(let n of e){if(Nx.some(o=>n===o||n.startsWith(`${o}=`)))return{ok:!1,mutating:!1,reason:`forbidden flag: ${n}`};if(n.includes(`
-`)||n.includes("\0"))return{ok:!1,mutating:!1,reason:"control characters refused"}}let r=e[0],t=e.length>1&&!e[1].startsWith("--")?`${r} ${e[1]}`:r;return t==="doctor runtime-takeover"?e.includes("--remediate-default-repo")?{ok:!0,mutating:!0}:{ok:!0,mutating:!1}:r==="cleanup"?{ok:!0,mutating:e.includes("--execute")}:Ix.has(t)?{ok:!0,mutating:!1}:Ox.has(t)?{ok:!0,mutating:!0}:{ok:!1,mutating:!1,reason:`verb not allowlisted: ${t}`}}var Dx=10*6e4,Mx=5e3,Pg=2e5;async function Eg(e,r,t={}){let n=xg(e);if(!n.ok)return{exitCode:null,timedOut:!1,refused:n.reason};let o=t.cliEntry??process.argv[1],s=t.timeoutMs??Dx,i=new Kt(r);return new Promise(a=>{let l=0,c=!1,u=Tx(process.execPath,[o,...e],{stdio:["ignore","pipe","pipe"],env:process.env}),d=m=>{if(l>=Pg)return;let p=m.toString("utf8").slice(0,Pg-l);l+=p.length,i.push(p)};u.stdout?.on("data",d),u.stderr?.on("data",d);let f=setTimeout(()=>{c=!0,u.kill("SIGTERM"),setTimeout(()=>u.kill("SIGKILL"),Mx).unref()},s);u.on("error",m=>{clearTimeout(f),i.push(`spawn failed: ${m.message}`),i.close(),a({exitCode:null,timedOut:!1,refused:void 0})}),u.on("close",m=>{clearTimeout(f),i.close(),a({exitCode:m,timedOut:c})})})}var Wx=25e3,Bx=32e3,Lx=5e3,Hx=6e4,Ag=5*6e4,Fx=5e3,$x="claude-sonnet-4-6";async function Kx(e,r,t){let n=t.KYNVER_RUNTIME_CHAT_BRIDGE_URL?.trim();if(n)return n;if(!e)return null;let o=new AbortController,s=setTimeout(()=>o.abort(),Fx);try{let i=await fetch(`${e.replace(/\/$/,"")}/api/runtime/chat-bridge`,{headers:{Authorization:`Bearer ${r}`},signal:o.signal});if(!i.ok)return null;let a=await i.json().catch(()=>null);return typeof a?.bridgeUrl=="string"&&a.bridgeUrl.trim()?a.bridgeUrl.trim():null}catch{return null}finally{clearTimeout(s)}}async function Ig(e=process.env){let r=v(),t=r.agentOsId?.trim(),n=ne();if(!t||!n)return null;let o=await Kx(r.apiBaseUrl,n,e);return o?{bridgeUrl:o.replace(/\/$/,""),agentOsId:t,apiKey:n,boxId:Ux.hostname(),model:e.KYNVER_CHAT_MODEL?.trim()||r.defaultModel?.trim()||$x,useClaudeOauth:r.chatUseClaudeOauth===!0}:null}async function jx(e,r){let t=new AbortController,n=setTimeout(()=>t.abort(),Bx),o=setInterval(()=>{r()&&t.abort()},500);try{let s=await fetch(`${e.bridgeUrl}/runtime-chat/claim`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,boxId:e.boxId,waitMs:Wx}),signal:t.signal});if(s.status===204)return null;if(s.status===401||s.status===403)return"auth_error";if(!s.ok)throw new Error(`claim failed: HTTP ${s.status}`);return(await s.json().catch(()=>null))?.turn??null}catch(s){if(r())return null;throw s}finally{clearTimeout(n),clearInterval(o)}}async function Xr(e,r,t){return(await fetch(`${e.bridgeUrl}/runtime-chat/turns/${encodeURIComponent(r)}/events`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,events:t})})).ok}async function Vx(e,r){let t=0,n=Array.isArray(r.payload?.argv)?r.payload.argv:[],o=await Eg(n,s=>{Xr(e,r.turnId,[{seq:t++,kind:"delta",text:s}])});o.refused?await Xr(e,r.turnId,[{seq:t++,kind:"error",error:`command_refused: ${o.refused}`}]).catch(()=>{}):await Xr(e,r.turnId,[{seq:t++,kind:"final",message:{exitCode:o.exitCode,timedOut:o.timedOut}}]).catch(()=>{}),console.error(JSON.stringify({event:"command_turn_done",turnId:r.turnId,argv:n.slice(0,4),exitCode:o.exitCode,timedOut:o.timedOut,refused:o.refused??null}))}async function Gx(e,r){let t=0,n=!1,o=new AbortController,s=l=>{n||Xr(e,r.turnId,[{seq:t++,kind:"delta",text:l}]).then(c=>{c||(n=!0,o.abort())})},i=new Kt(s),a=Cg(process.env,{oauthOptIn:e.useClaudeOauth});if(!a){await Xr(e,r.turnId,[{seq:0,kind:"error",error:"no_local_credentials"}]).catch(()=>{});return}try{let l=await _g({creds:a,model:e.model,payload:r.payload,onDelta:c=>i.push(c),signal:o.signal});i.close(),n||await Xr(e,r.turnId,[{seq:t++,kind:"final",message:l}]),console.error(JSON.stringify({event:"chat_turn_done",turnId:r.turnId,model:e.model}))}catch(l){i.close(),n||await Xr(e,r.turnId,[{seq:t++,kind:"error",error:l instanceof Error?l.message:String(l)}]).catch(()=>{}),console.error(JSON.stringify({event:"chat_turn_error",turnId:r.turnId,error:l instanceof Error?l.message:String(l)}))}}async function ul(e,r){for(let n=0;n<e&&!r();n+=500)await new Promise(o=>setTimeout(o,Math.min(500,e-n)))}async function Og(e){let r=await Ig();for(r||console.error(JSON.stringify({event:"chat_claim_loop_waiting",reason:!ne()||!v().agentOsId?.trim()?"machine_not_linked":"bridge_not_discovered (rollout off, discovery route missing/404, or API unreachable)",rediscoverMs:Ag}));!r&&!e.shouldStop();){if(!ne()||!v().agentOsId?.trim()||(await ul(Ag,e.shouldStop),e.shouldStop()))return;r=await Ig()}if(!(!r||e.shouldStop())){for(console.error(JSON.stringify({event:"chat_claim_loop_start",bridgeUrl:r.bridgeUrl,agentOsId:r.agentOsId,boxId:r.boxId,model:r.model,useClaudeOauth:r.useClaudeOauth}));!e.shouldStop();)try{let t=await jx(r,e.shouldStop);if(t==="auth_error"){console.error(JSON.stringify({event:"chat_claim_auth_error"})),await ul(Hx,e.shouldStop);continue}t&&(t.payload?.kind==="command"?await Vx(r,t):await Gx(r,t))}catch(t){console.error(JSON.stringify({event:"chat_claim_error",error:t instanceof Error?t.message:String(t)})),await ul(Lx,e.shouldStop)}console.error(JSON.stringify({event:"chat_claim_loop_stop"}))}}var Yx=6e4,Jx=5*6e4,qx=10,zx=250;async function dl(e,r){let t=e;for(;t>0&&!r();){let n=Math.min(zx,t);await dr(n),t-=n}}async function Us(e){Ct();let r=String(O(String(e.run||""),"--run")),t=String(O(String(e.agentOsId||v().agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false",o=Number(e.intervalMs)>0?Math.floor(Number(e.intervalMs)):Yx,s=!1,i=0;process.on("SIGINT",()=>{s=!0}),process.on("SIGTERM",()=>{s=!0});let a=kn();a.remediated&&console.error(JSON.stringify({event:"daemon_default_repo_remediated",defaultRepo:a.resolved?.defaultRepo??null,configPath:a.configPath}));let l=Au(v());l.ok||(console.error(JSON.stringify({event:"daemon_start_blocked",runId:r,agentOsId:t,errors:l.errors})),process.exit(1)),console.error(JSON.stringify({event:"daemon_start",runId:r,agentOsId:t,execute:n,intervalMs:o,boxKind:l.box.boxKind,workerCapSource:l.workerCapSource,maxConcurrentWorkers:l.maxConcurrentWorkers}));let c=nr(),u=Og({shouldStop:()=>s}).catch(f=>{console.error(JSON.stringify({event:"chat_claim_loop_crashed",error:f instanceof Error?f.message:String(f)}))}),d=!1;for(;!s;)try{Nu({agentOsId:t,runId:r,instructionBundleVersion:Mr()});let f=await xi(e.secret?String(e.secret):void 0,t);if(!f.ok){d||(d=!0,console.error(JSON.stringify({event:"daemon_runner_credential_missing",agentOsId:t,reason:f.reason,remedy:`run \`kynver runner credential --agent-os-id ${t}\` (or \`kynver bootstrap\`); ticks resume automatically once the credential exists`}))),await dl(o,()=>s);continue}d&&(d=!1,console.error(JSON.stringify({event:"daemon_runner_credential_recovered",agentOsId:t}))),await Pu({agentOsId:t,baseUrl:su(e.baseUrl?String(e.baseUrl):void 0),secret:f.secret});let m=await cl({run:r,agentOsId:t,execute:n,...e});if(console.error(JSON.stringify({event:"daemon_tick",...m})),c.tickEnabled){let h=Ho(r);if(h&&!h.authorized)console.error(JSON.stringify({event:"daemon_cron_tick_skipped",reason:"mesh_cron_lease_not_authorized",holderBoxId:h.holderBoxId}));else{let b=await _t({env:c,agentOsIdFilter:t});b.enabled&&(b.fired>0||b.errors>0||b.lockHeld)&&console.error(JSON.stringify({event:"daemon_cron_tick",...b}))}}m.idle?i++:i=0;let p=Math.floor(wt("daemon.maxIdleStreak",qx)),g=Math.floor(wt("daemon.idleIntervalMs",Jx)),k=i>=p?g:o;await dl(k,()=>s)}catch(f){console.error(JSON.stringify({event:"daemon_tick_error",error:f.message})),await dl(o,()=>s)}await u,console.error(JSON.stringify({event:"daemon_stop",runId:r,agentOsId:t}))}I();import{spawn as Xx}from"node:child_process";w();var Qx=15*6e4,Ng=2*6e4,Tg=1e4,Zx=5e3,eP=5*6e4,rP=30*6e4,Dg=5e3;function tP(e,r=process.env){let t=typeof e=="string"?Number.parseInt(e,10):NaN;if(Number.isFinite(t)&&t>0)return t;let n=Number.parseInt(r.KYNVER_DAEMON_STALL_MS??"",10);return Number.isFinite(n)&&n>0?n:Qx}function Ws(e,r=process.env){if(e.keeperChild===!0||e.keeperChild==="true"||e.noSupervise===!0||e.noSupervise==="true"||e.supervised==="false")return!1;let t=(r.KYNVER_DAEMON_SUPERVISED??"").trim().toLowerCase();return!(t==="0"||t==="false"||t==="no"||t==="off")}function nP(e,r=Zx,t=eP){let n=Math.min(Math.max(e,1)-1,10);return Math.min(r*2**n,t)}function oP(e,r,t=rP){return r-e>=t}function Qr(e,r={}){console.error(JSON.stringify({event:`daemon_keeper_${e}`,...r}))}function sP(e){let r=[];for(let t=0;t<e.length;t+=1){let n=e[t];if(!(n==="--supervised"||n==="--no-supervise"||n==="--keeper-child")){if(n==="--stall-ms"){t+1<e.length&&!e[t+1].startsWith("--")&&(t+=1);continue}n.startsWith("--stall-ms=")||n.startsWith("--supervised=")||r.push(n)}}return r.push("--keeper-child"),r}async function Bs(e,r=process.argv.slice(2)){let t=String(O(String(e.agentOsId||v().agentOsId||""),"--agent-os-id")),n=tP(e.stallMs),o=sP(r),s=process.argv[1],i=!1,a=null,l=0,c=u=>{i=!0,Qr("stop",{signal:u}),a?.pid&&a.kill(u)};for(process.on("SIGINT",()=>c("SIGINT")),process.on("SIGTERM",()=>c("SIGTERM")),Qr("start",{agentOsId:t,stallMs:n,childArgv:o});!i;){let u=Date.now(),d=!1,f=null,m=null;for(a=Xx(process.execPath,[s,...o],{stdio:"inherit",env:process.env}),Qr("child_spawned",{pid:a.pid??null}),a.on("exit",(k,h)=>{d=!0,f=k,m=h});!d&&!i&&(await dr(Dg),!(d||i));){if(Date.now()-u<Ng)continue;let k=Tu(t),h=k&&k.pid===a.pid?k:null;if(h&&Du(h,n)){Qr("stall_detected",{pid:a.pid??null,lastBeatAt:h.observedAt,stallMs:n}),a.kill("SIGTERM"),await dr(Tg),d||a.kill("SIGKILL");break}if(!h&&Date.now()-u>n+Ng){Qr("no_heartbeat_detected",{pid:a.pid??null,stallMs:n}),a.kill("SIGTERM"),await dr(Tg),d||a.kill("SIGKILL");break}}for(;!d&&!i;)await dr(Dg);if(i)break;let p=Date.now();oP(u,p)&&(l=0),l+=1;let g=nP(l);Qr("child_exited",{code:f,signal:m,uptimeMs:p-u,consecutiveFailures:l,respawnInMs:g}),await dr(g)}Qr("stopped",{agentOsId:t})}Se();W();import{existsSync as mP,mkdirSync as fP}from"node:fs";import gP from"node:path";W();Ar();import{existsSync as iP,readFileSync as aP}from"node:fs";import Mg from"node:path";J();w();function lP(e){if(!e||!iP(e))return 0;try{return aP(e,"utf8").trim().length}catch{return 0}}function cP(e,r){let t=Mg.join(P(e.id),"workers",R(r),"worker.json"),n=_(t,void 0);if(!n)return{worker:r,workerStatus:"missing",attention:"needs_attention",attentionReason:"worker.json missing",missingHeartbeat:!0,missingFinalResult:!0,landingBlocked:!1,completionBlocked:!1};let o=N(n,{base:e.base,baseCommit:e.baseCommit}),s=lP(n.heartbeatPath)===0,i=!o.finalResult&&!o.alive,a=typeof n.completionBlocker=="string"&&n.completionBlocker.length>0;return{worker:r,workerStatus:n.status,attention:o.attention.state,attentionReason:o.attention.reason,missingHeartbeat:s,missingFinalResult:i,landingBlocked:kt(o),completionBlocked:a}}function uP(e){return e.openWorkerCount>0?"active_workers":e.workers.some(r=>r.completionBlocked)?"completion_blocked":e.workers.some(r=>r.landingBlocked)?"landing_blocked":null}function dP(e){let r={blocked:5,needs_attention:4,stale:3,done:2,ok:1},t="ok",n;for(let o of e){let s=o.attention;(r[s]??0)>=(r[t]??0)&&(t=s,n=o.attentionReason)}return{attention:t,attentionReason:n}}function pP(e){let r=0;for(let t of pe(e)){let n=Mg.join(P(e.id),"workers",R(t),"worker.json"),o=_(n,void 0);if(!o)continue;let s=N(o,{base:e.base,baseCommit:e.baseCommit});s.alive&&!s.finalResult&&(r+=1)}return r}function Jn(){return Fn(),Y().map(e=>{let t=pe(e).map(d=>cP(e,d)),n=t.filter(d=>d.missingHeartbeat).map(d=>d.worker),o=t.filter(d=>d.missingFinalResult).map(d=>d.worker),s=t.filter(d=>d.landingBlocked).map(d=>d.worker),i=t.filter(d=>d.completionBlocked).map(d=>d.worker),{attention:a,attentionReason:l}=dP(t),c=pP(e),u=cn(e.status,t.map(d=>({attention:d.attention,status:d.workerStatus})));return{id:e.id,name:e.name,status:e.status,effectiveStatus:u,repo:e.repo,createdAt:e.createdAt,openWorkerCount:c,attention:a,attentionReason:l,finalizeBlockedReason:uP({run:e,workers:t,openWorkerCount:c}),evidence:{missingHeartbeatWorkers:n,missingFinalResultWorkers:o,landingBlockedWorkers:s,completionBlockedWorkers:i,workers:t}}})}function Ug(){console.log(JSON.stringify(Jn(),null,2))}w();function hP(e){let r=typeof e.repo=="string"?e.repo.trim():"";if(r)return r;let t=Le();return t?t.repo:(O("","--repo (or set defaultRepo via `kynver setup` / KYNVER_DEFAULT_REPO)"),"")}function Ls(e){let r=_p(hP(e));pc(r);let t=e.id?as(String(e.id)):ac(String(e.name||"run")),n=P(t);mP(n)&&kP(`run already exists: ${t}`),fP(n,{recursive:!0});let o=String(e.base||"origin/main"),s=de(r,["rev-parse",o]).trim(),i={id:t,name:String(e.name||t),repo:r,base:o,baseCommit:s,status:"created",createdAt:new Date().toISOString(),workers:{}};ue(gP.join(n,"run.json"),i);let a={runId:t,runDir:n,repo:r,base:o,baseCommit:s};return console.log(JSON.stringify(a,null,2)),a}function Wg(){Ug()}function kP(e){console.error(e),process.exit(1)}W();import{existsSync as $s}from"node:fs";async function Hs(e=nr()){let r=await Ur(e.storePath).catch(()=>[]),t=await Lo(e.statePath).catch(()=>({version:1,jobs:{}})),n=!!(e.fireBaseUrl&&e.secret),o=Wo(e),s="disabled";return o?s="kynver-cron-daemon":process.env.QSTASH_TOKEN?.trim()&&(s="qstash"),{primary:s,env:{storePath:e.storePath,statePath:e.statePath,tickEnabled:e.tickEnabled,fireBaseUrl:e.fireBaseUrl,missedRunPolicy:e.missedRunPolicy,maxCatchUpPerTick:e.maxCatchUpPerTick,maxRetries:e.maxRetries},jobCount:r.length,stateJobCount:Object.keys(t.jobs).length,credentialsReady:n,daemonPrimary:o}}import{homedir as SP}from"node:os";import wP from"node:path";import{existsSync as Bg,mkdirSync as yP,readFileSync as Lg,writeFileSync as RP}from"node:fs";import{homedir as bP}from"node:os";import Hg from"node:path";var wr=Hg.join(bP(),".kynver",".env");function pl(e){let r=new Map;for(let t of e.split(/\r?\n/)){let n=t.trim();if(!n||n.startsWith("#"))continue;let o=n.indexOf("=");if(o<=0)continue;let s=n.slice(0,o).trim(),i=n.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),r.set(s,i)}return r}function vP(e,r=`# Managed by kynver cron install \u2014 safe to edit; re-run install to merge keys.
+`),n=!0)}let o={capturedAt:new Date(e.now??Date.now()).toISOString(),skipReason:e.skipReason,runId:e.indexed.runId,workerName:e.indexed.workerName,worktreePath:e.indexed.worktreePath,taskId:e.indexed.worker.taskId,agentOsId:e.indexed.worker.agentOsId,branch:e.indexed.worker.branch,completionBlocker:e.indexed.worker.completionBlocker,finalResult:e.status.finalResult,changedFiles:e.status.changedFiles,gitAncestry:e.status.gitAncestry,prUrl:e.status.prUrl??null,...n?{patchPath:t}:{}};return zm(Ps.join(r,"evidence.json"),`${JSON.stringify(o,null,2)}
+`),o}var QC=new Set(["completion_blocked","dirty_worktree","pr_or_unmerged_commits","landing_blocked"]);function ZC(e){return!QC.has(e.skipReason)||ar(e.indexed,e.now)?!1:Zm({harnessRoot:e.harnessRoot,runId:e.indexed.runId,workerName:e.indexed.workerName})?!0:e.writeSalvageEvidence?(ef({harnessRoot:e.harnessRoot,indexed:e.indexed,skipReason:e.skipReason,status:e.status,now:e.now}),!0):!1}function e_(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,terminalWorktreesAgeMs:o}=e;return r?ir.has(r.run.status)||e.liveness&&Za(r,e.liveness)||e.liveness&&oe(Xa(r,e.liveness))&&!ar(r)?o:n:t?o:n}function r_(e,r){if(e.harnessRoot?.trim())return Es.resolve(e.harnessRoot);let t=r.worker.workerDir;if(!t)return null;let n=`${Es.sep}runs${Es.sep}`,o=t.indexOf(n);return o<0?null:t.slice(0,o+n.length-1)}function rf(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,ageMs:o,orphanSafety:s,worktreeRemovalGuard:i}=e,a=e.now??Date.now();if(!r)return t?s??null:"orphan_without_flag";let l=e_(e);if(n<=0&&!t&&l<=0)return"worktrees_disabled";if(l>0&&o<l)return"below_age_threshold";if(ar(r,a))return"active_worker";let c=Xa(r,e.liveness),u=r_(e,r),d=p=>u&&ZC({indexed:r,harnessRoot:u,skipReason:p,status:c,now:a,writeSalvageEvidence:e.writeSalvageEvidence===!0})?null:p;if(qm(r,c)){let p=d("completion_blocked");if(p)return p}if(za(r,e.liveness?.gitStatusCache)){let p=d("dirty_worktree");if(p)return p}let m=e.liveness?.gitRevCache?.countAheadOfMain(e.worktreePath);if(m!=null&&m>0){let p=d("pr_or_unmerged_commits");if(p)return p}if(Jm(r,e.liveness,a)||!oe(c))return"run_still_active";if(Jn(c)){let p=d("pr_or_unmerged_commits");if(p)return p}if(xe(c.changedFiles).length>0){let p=d("dirty_worktree");if(p)return p}if(ht({finalResult:c.finalResult,changedFiles:c.changedFiles,gitAncestry:c.gitAncestry,prUrl:Xr(c.finalResult)}).blocked){let p=d("landing_blocked");if(p)return p}if(i&&e.worktreePath){let p=i({worktreePath:e.worktreePath,indexed:!!r,runId:r?.runId,worker:r?.workerName});if(p)return p.detail?{reason:p.reason,detail:p.detail}:p.reason}return null}function el(e){let{indexed:r,nodeModulesAgeMs:t,ageMs:n,worktreePath:o,activeWorktreePaths:s,diskPressure:i}=e;return!i&&n<t?"below_age_threshold":s.has(Es.resolve(o))||r&&ar(r)?"active_worker":r&&za(r,e.gitStatusCache)?"dirty_worktree":null}function tf(e){return el(e)}var nf=new Set(["active_worker","run_still_active","completion_blocked","landing_blocked"]);function of(e,r){let t=[],n=new Set,o=(s,i,a)=>{let l=`${s}\0${i}`;n.has(l)||t.length>=24||(n.add(l),t.push({path:s,reason:i,...a?{detail:a}:{}}))};for(let s of r)nf.has(s.reason)&&o(s.path,s.reason,s.detail);for(let s of e)!s.skipped||!s.skipReason||nf.has(s.skipReason)&&o(s.path,s.skipReason);return t}import{existsSync as cf,readdirSync as uf,statSync as o_}from"node:fs";import df from"node:path";M();Ce();import sf from"node:path";w();function n_(e,r){return xs(e,r)}function af(e,r=Date.now()){let t=new Set,n=new Set;for(let o of e){for(let s of Co(o)){let i=!1;for(let a of Object.keys(s.workers||{})){let l=_(sf.join(cn(o,s.id),"workers",b(a),"worker.json"),void 0);if(!l?.worktreePath)continue;let c=sf.resolve(l.worktreePath);n_(l,r)&&(i=!0,t.add(c))}i&&n.add(`${o}\0${s.id}`)}for(let s of Wm(o))n.add(s)}return{activeWorktreePaths:t,liveRunKeys:n}}function lf(e,r,t,n){return t?n.has(`${r}\0${t}`):!1}w();function s_(e,r){try{let t=o_(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function i_(e,r){let t=df.join(e,"runs",r,"run.json");return cf(t)?_(t,null):null}function pf(e){try{return uf(e).length===0}catch{return!1}}function mf(e){let{harnessRoot:r,runId:t,runPath:n,ageMs:o,runDirectoriesAgeMs:s,activeGuards:i}=e;if(lf(n,r,t,i.liveRunKeys)||!pf(n))return"run_still_active";let a=i_(r,t);return a&&!ir.has(a.status)&&!qr(a)?"run_still_active":s>0&&o<s?"below_age_threshold":null}function ff(e){if(!cf(e.worktreesDir))return[];let r=[],t;try{t=uf(e.worktreesDir,{withFileTypes:!0})}catch{return[]}for(let n of t){if(!n.isDirectory())continue;let o=n.name;if(e.runIdFilter&&o!==e.runIdFilter)continue;let s=df.join(e.worktreesDir,o);pf(s)&&r.push({kind:"remove_run_directory",path:s,bytes:null,harnessRoot:e.harnessRoot,runId:o,ageMs:s_(s,e.now)})}return r}Se();import{existsSync as tl,rmSync as _f}from"node:fs";import{execFileSync as a_}from"node:child_process";import{existsSync as gf,readdirSync as l_,statSync as c_}from"node:fs";import u_ from"node:path";var d_=2500;function p_(e,r=d_){if(!gf(e))return 0;try{let n=a_("du",["-sb",e],{encoding:"utf8",timeout:r,stdio:["ignore","pipe","ignore"]}).trim().split(/\s+/)[0],o=Number(n);return Number.isFinite(o)&&o>=0?o:null}catch{return null}}function lr(e,r=5e4){if(!gf(e))return 0;let t=p_(e);if(t!==null)return t;let n=0,o=0,s=[e];for(;s.length>0;){let i=s.pop(),a;try{a=l_(i)}catch{continue}for(let l of a){if(o++>r)return null;let c=u_.join(i,l),u;try{u=c_(c)}catch{continue}u.isDirectory()?s.push(c):n+=u.size}}return n}import{existsSync as h_,rmSync as k_}from"node:fs";Ce();import{lstatSync as m_,readdirSync as f_}from"node:fs";function hf(e){try{let r=m_(e),t=typeof process.getuid=="function"?process.getuid():null,n=typeof process.getgid=="function"?process.getgid():null,o=t!==null&&(r.uid!==t||n!==null&&r.gid!==n);return{uid:r.uid,gid:r.gid,foreign:o}}catch{return null}}function kf(e,r=32){let t=hf(e);if(!t)return!1;if(t.foreign)return!0;try{let n=f_(e),o=0;for(let s of n){if(o>=r)break;let i=`${e.replace(/\/$/,"")}/${s}`,a=hf(i);if(o+=1,a?.foreign)return!0}}catch{}return!1}import{spawnSync as g_}from"node:child_process";import bf from"node:path";import Pe from"node:path";function yf(e,r,t,n){let o=Pe.resolve(e),s=`${Pe.sep}${n}`,i=o.endsWith(s)?o:null;if(!i)return"path_outside_harness";let a=Pe.relative(t,i);if(a.startsWith("..")||Pe.isAbsolute(a))return"path_outside_harness";let l=a.split(Pe.sep);return l.length<3||l[l.length-1]!==n||!o.startsWith(Pe.resolve(r))?"path_outside_harness":null}function As(e,r,t){return yf(e,r,t,"node_modules")}function Is(e,r,t){return yf(e,r,t,".next")}function Os(e,r,t){let n=Pe.resolve(e),o=Pe.relative(t,n);return o.startsWith("..")||Pe.isAbsolute(o)||o.split(Pe.sep).length<3||!n.startsWith(Pe.resolve(r))?"path_outside_harness":null}function Rf(e,r,t){let n=Pe.resolve(e);return As(n,r,t)===null||Is(n,r,t)===null||Os(n,r,t)===null}function Sf(){let e=(process.env.KYNVER_CLEANUP_PRIVILEGED??"auto").trim().toLowerCase();return e==="0"||e==="false"||e==="off"||e==="no"?"off":e==="1"||e==="true"||e==="force"||e==="yes"?"force":"auto"}function vf(e){let r=g_("sudo",["-n",...e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});return{ok:r.status===0,stderr:`${r.stderr??""}${r.stdout??""}`.trim()}}function wf(e,r,t){if(!Rf(e,r,t))return{ok:!1,error:"path is not an allowed harness generated cache"};let n=typeof process.getuid=="function"?process.getuid():null,o=typeof process.getgid=="function"?process.getgid():null;if(n===null||o===null)return{ok:!1,error:"privileged reclaim requires POSIX uid/gid"};let s=vf(["chown","-R",`${n}:${o}`,bf.resolve(e)]);if(s.ok)return{ok:!0,method:"chown_then_rm"};let i=vf(["rm","-rf",bf.resolve(e)]);return i.ok?{ok:!0,method:"sudo_rm"}:{ok:!1,error:s.stderr||i.stderr||"sudo -n failed (password required or not permitted)"}}var rl="Root-owned harness caches require operator reclaim: configure passwordless sudo for chown/rm under ~/.kynver/harness/worktrees, or run `node scripts/reclaim-harness-root-owned-cache.mjs --execute` as the harness owner with sudo available. See docs/runbooks/harness-root-owned-cache-reclaim.md.";function y_(e){let r=e?.code;return r==="EACCES"||r==="EPERM"}function Cf(e,r,t={}){if(!h_(e.path))return{executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.harnessRoot,o=n?hr(n):null,i=e.bytes??lr(e.path)??void 0,a=t.removePath??k_,l=t.hasForeignOwnedEntry??kf;try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i}}catch(c){if(!y_(c)||!n||!o)return{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let u=l(e.path),d=Sf();if(!(d==="force"||d==="auto"&&u))return u?{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; ${rl}`}:{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let f=wf(e.path,n,o);if(f.ok&&f.method==="sudo_rm")return{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0};if(f.ok)try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0}}catch(p){return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${p.message}; privileged chown succeeded but rm still failed`}}return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; privileged reclaim failed: ${f.error}; ${rl}`}}}function nl(e){let r=e.harnessRoot;return!r||!Dm(e.path,r)?null:{...e,executed:!1,skipped:!0,skipReason:"run_metadata_protected"}}function ol(e,r){let t=nl(e);if(t)return t;let n=Cf(e,r);return{...e,bytes:n.bytes??e.bytes,executed:n.executed,skipped:n.skipped,skipReason:n.skipReason,error:n.error}}function xf(e,r){return ol(e,r)}function Pf(e,r){return ol(e,r)}function Ef(e,r){return ol(e,r)}function Af(e,r){let t=nl(e);if(t)return t;if(!tl(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};try{let n=e.bytes??lr(e.path);return _f(e.path,{recursive:!0,force:!0}),{...e,bytes:n,executed:!0,skipped:!1}}catch(n){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:n.message}}}function If(e,r){let t=nl(e);if(t)return t;if(!tl(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.repo;try{let o=e.bytes??lr(e.path);return n&&pe(n,["worktree","remove","--force",e.path],{allowFailure:!0}),tl(e.path)&&_f(e.path,{recursive:!0,force:!0}),{...e,bytes:o,executed:!0,skipped:!1}}catch(o){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:o.message}}}import{existsSync as Ns,readdirSync as Ts,statSync as R_}from"node:fs";import Ye from"node:path";function sl(e,r){try{let t=R_(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function Nf(e,r){let t=Ye.relative(r,e);return t===""||!t.startsWith("..")&&!Ye.isAbsolute(t)}function Of(e,r,t,n){let o=[];for(let s of qa){if(s===".next")continue;let i=Ye.join(e,s);if(!Ns(i))continue;let a=Ye.resolve(i);t.has(a)||Nf(a,r.harnessRoot)&&(t.add(a),o.push({kind:"remove_build_cache",path:a,bytes:null,runId:n.runId,worker:n.worker,repo:n.repo,ageMs:sl(a,r.now)}))}return o}function Tf(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||r.push(...Of(n.worktreePath,e,t,{runId:n.runId,worker:n.workerName,repo:n.run.repo}));if(!e.includeOrphans||!Ns(e.worktreesDir))return r;for(let n of Ts(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory())continue;let o=Ye.join(e.worktreesDir,n.name);for(let s of Ts(o,{withFileTypes:!0})){if(!s.isDirectory())continue;let i=Ye.join(o,s.name);r.push(...Of(i,e,t,{runId:n.name,worker:s.name}))}}return r}function Df(e){let r=e.worktreesAgeMs>0||e.includeOrphans,t=e.includeOrphans;if(!r&&!t)return[];let n=[],o=new Set;if(r)for(let i of e.index.values()){if(e.runIdFilter&&i.runId!==e.runIdFilter)continue;let a=i.worktreePath;Ns(a)&&(o.has(a)||(o.add(a),n.push({kind:"remove_worktree",path:a,bytes:null,runId:i.runId,worker:i.workerName,repo:i.run.repo,ageMs:sl(a,e.now)})))}if(!t||!Ns(e.worktreesDir))return n;let s=new Set;for(let i of e.index.values())s.add(Ye.resolve(i.worktreePath));for(let i of Ts(e.worktreesDir,{withFileTypes:!0})){if(!i.isDirectory()||e.runIdFilter&&i.name!==e.runIdFilter)continue;let a=Ye.join(e.worktreesDir,i.name),l;try{l=Ts(a,{withFileTypes:!0})}catch{continue}for(let c of l){if(!c.isDirectory())continue;let u=Ye.resolve(Ye.join(a,c.name));o.has(u)||s.has(u)||Nf(u,e.harnessRoot)&&(o.add(u),n.push({kind:"remove_worktree",path:u,bytes:null,runId:i.name,worker:c.name,ageMs:sl(u,e.now)}))}}return n}import{existsSync as Wf,readdirSync as Mf,statSync as b_}from"node:fs";import $t from"node:path";var v_=[{dirName:"node_modules",kind:"remove_node_modules"},{dirName:".next",kind:"remove_next_cache"}];function S_(e,r){try{let t=b_(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function w_(e,r){let t=$t.relative(r,e);return t===""||!t.startsWith("..")&&!$t.isAbsolute(t)}function C_(e,r,t,n,o,s){if(!Wf(n))return;let i=$t.resolve(n);r.has(i)||w_(i,t.harnessRoot)&&(r.add(i),e.push({kind:o,path:i,bytes:null,harnessRoot:t.harnessRoot,runId:s.runId,worker:s.worker,repo:s.repo,ageMs:S_(i,t.now)}))}function Uf(e,r,t,n,o){for(let s of v_)C_(e,r,t,$t.join(n,s.dirName),s.kind,o)}function Bf(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||Uf(r,t,e,n.worktreePath,{runId:n.runId,worker:n.workerName,repo:n.run.repo});if(!e.includeOrphans||!Wf(e.worktreesDir))return r;for(let n of Mf(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory()||e.runIdFilter&&n.name!==e.runIdFilter)continue;let o=$t.join(e.worktreesDir,n.name),s;try{s=Mf(o,{withFileTypes:!0})}catch{continue}for(let i of s){if(!i.isDirectory())continue;let a=$t.join(o,i.name);Uf(r,t,e,a,{runId:n.name,worker:i.name})}}return r}Se();import{existsSync as Lf,statSync as __}from"node:fs";import Je from"node:path";function x_(e,r){try{let t=__(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function P_(e){let r=[],t=null;for(let n of e.split(`
+`)){if(!n.trim())continue;let[o,...s]=n.split(" "),i=s.join(" ");if(o==="worktree"){t&&r.push(t),t={path:i};continue}t&&(o==="branch"&&(t.branch=i),o==="HEAD"&&(t.head=i),o==="bare"&&(t.bare=!0))}return t&&r.push(t),r}function E_(e,r){let t=Je.relative(Je.resolve(r),Je.resolve(e));return t!==""&&!t.startsWith("..")&&!Je.isAbsolute(t)}var A_=200;function Hf(e){if(!e.includeOrphans||!Lf(e.worktreesDir))return[];let r=new Set;for(let s of e.index.values())s.run.repo&&r.add(Je.resolve(s.run.repo));let t=new Set;for(let s of e.index.values())t.add(Je.resolve(s.worktreePath));let n=[],o=new Set;for(let s of r){let i=0,a;try{a=pe(s,["worktree","list","--porcelain"],{allowFailure:!0})}catch{continue}let l=P_(a);for(let c of l){if(i>=A_)break;let u=Je.resolve(c.path);if(u===Je.resolve(s)||!E_(u,e.worktreesDir)||t.has(u)||o.has(u)||!Lf(u))continue;let m=Je.relative(e.worktreesDir,u).split(Je.sep),f=m[0],p=m[1]??"unknown";o.add(u),i+=1,n.push({kind:"remove_worktree",path:u,bytes:null,runId:f,worker:p,repo:s,ageMs:x_(u,e.now)})}}return n}M();w();import zn from"node:path";function Ff(e,r){let t=zn.resolve(r),n=new Map;for(let[o,s]of e){let i=s.harnessRoot?zn.resolve(s.harnessRoot):null;i&&i!==t||n.set(o,s)}return n}function $f(e){let r=new Map;for(let t of Co(e))for(let n of Object.keys(t.workers||{})){let o=zn.join(cn(e,t.id),"workers",b(n),"worker.json"),s=_(o,void 0);s?.worktreePath&&r.set(zn.resolve(s.worktreePath),{harnessRoot:e,worktreePath:zn.resolve(s.worktreePath),runId:t.id,workerName:n,run:t,worker:s})}return r}function Xn(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function Qr(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?n:r}function ll(e={}){let r=e.execute===!0||e.execute!==!1&&Xn("KYNVER_CLEANUP_EXECUTE"),t=e.finalizeStaleRuns!==!1&&!Xn("KYNVER_CLEANUP_SKIP_FINALIZE"),n=e.nodeModulesAgeMs??Qr("KYNVER_CLEANUP_NODE_MODULES_AGE_MS",216e5),o=e.scanDependencyCaches??(e.nodeModulesAgeMs!==void 0||process.env.KYNVER_CLEANUP_NODE_MODULES_AGE_MS!=null),s=e.worktreesAgeMs??Qr("KYNVER_CLEANUP_WORKTREES_AGE_MS",0),i=e.terminalWorktreesAgeMs??Qr("KYNVER_CLEANUP_TERMINAL_WORKTREES_AGE_MS",216e5),a=e.runDirectoriesAgeMs??Qr("KYNVER_CLEANUP_RUN_DIRECTORIES_AGE_MS",36e5),l=e.maxActionsPerSweep??Qr("KYNVER_CLEANUP_MAX_ACTIONS_PER_SWEEP",120),c=e.includeOrphans===!0||Xn("KYNVER_CLEANUP_INCLUDE_ORPHANS"),d=Xn("KYNVER_CLEANUP_SCOPE_ALL")||process.env.KYNVER_CLEANUP_SCOPE==="all"?e.runIdFilter:e.runIdFilter??(process.env.KYNVER_CLEANUP_RUN_ID||void 0),m=e.accountBytes!==!1&&!Xn("KYNVER_CLEANUP_SKIP_BYTE_ACCOUNTING"),f=Qr("KYNVER_CLEANUP_STORAGE_ENTRY_CAP",2e3),p=e.storagePerRunEntryCap!==void 0?e.storagePerRunEntryCap:m&&f>0?f:null,h=Qr("KYNVER_CLEANUP_BYTE_ENTRY_CAP",2e3),k=e.byteAccountingEntryCap??(Number.isFinite(h)&&h>0?Math.floor(h):2e3);return{execute:r,finalizeStaleRuns:t,scanDependencyCaches:o,nodeModulesAgeMs:n,worktreesAgeMs:s>0?s:0,terminalWorktreesAgeMs:i>=0?i:0,runDirectoriesAgeMs:a>=0?a:0,maxActionsPerSweep:Number.isFinite(l)&&l>0?Math.floor(l):120,includeOrphans:c,runIdFilter:d?String(d):void 0,accountBytes:m,storagePerRunEntryCap:p,byteAccountingEntryCap:k}}function Gf(e){let r=process.env.KYNVER_CLEANUP_SCOPE==="all",t=Number(process.env.KYNVER_CLEANUP_WORKTREES_AGE_MS),n=r?Number.isFinite(t)&&t>0?t:6048e5:Number.isFinite(t)&&t>0?t:0;return ll({runIdFilter:r?void 0:e,worktreesAgeMs:n,terminalWorktreesAgeMs:r?216e5:void 0,runDirectoriesAgeMs:r?36e5:void 0,includeOrphans:r?!0:void 0,finalizeStaleRuns:!0,accountBytes:!0,scanDependencyCaches:!0})}Se();import{existsSync as Yf}from"node:fs";import cl from"node:path";w();var I_=1800*1e3;function Jf(e){let r=e.now??Date.now(),t=e.heartbeatFreshMs??I_;if(!Yf(e.worktreePath))return null;if(e.runId&&e.workerName){let c=cl.join(e.harnessRoot,"runs",e.runId,"workers",e.workerName),u=_(cl.join(c,"worker.json"),void 0);if(u&&Qa(u,r,t))return"active_worker"}let n=cl.join(e.worktreePath,".git");if(!Yf(n))return null;let o=re(e.worktreePath,["status","--porcelain"]);if(o.status!==0)return"pr_or_unmerged_commits";let s=o.stdout.split(`
+`).map(c=>c.trim()).filter(c=>c.length>0);if(xe(s).length>0)return"dirty_worktree";let i=re(e.worktreePath,["rev-list","--count","@{u}..HEAD"]);if(i.status===0){let c=Number(i.stdout.trim());if(Number.isFinite(c)&&c>0)return"pr_or_unmerged_commits"}let a=re(e.worktreePath,["rev-list","--count","origin/main..HEAD"]);if(a.status!==0)return i.status!==0?"pr_or_unmerged_commits":null;let l=Number(a.stdout.trim());return Number.isFinite(l)&&l>0?"pr_or_unmerged_commits":null}Ce();import{existsSync as O_,readdirSync as qf,statSync as N_}from"node:fs";import T_ from"node:path";function zf(e={}){let r=ie(e.harnessRoot??be()),t=hr(r),n=e.now??Date.now(),o=new Date(n).toISOString();if(!O_(t))return{harnessRoot:r,worktreesDir:t,worktreesBytes:0,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o};let s=0,i=0,a=0,l=null,c;try{c=qf(t,{withFileTypes:!0})}catch{return{harnessRoot:r,worktreesDir:t,worktreesBytes:null,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o}}for(let u of c){if(!u.isDirectory())continue;i+=1;let d=T_.join(t,u.name);try{let m=N_(d);l=l===null?m.mtimeMs:Math.min(l,m.mtimeMs)}catch{}try{for(let m of qf(d,{withFileTypes:!0}))m.isDirectory()&&(a+=1)}catch{}if(s!==null&&e.perRunEntryCap!==null){let m=e.perRunEntryCap??5e4;if(m<=0)s=null;else{let f=lr(d,m);f===null?s=null:s+=f}}}return{harnessRoot:r,worktreesDir:t,worktreesBytes:s,runCount:i,workerCount:a,oldestRunAt:l===null?null:new Date(l).toISOString(),scannedAt:o}}Ce();import{existsSync as D_}from"node:fs";import{homedir as M_}from"node:os";import Xf from"node:path";var U_=["/var/tmp/kynver-harness",Xf.join(M_(),".openclaw","harness")];function ul(e,r,t){if(!t?.trim())return;let n=ie(t.trim());e.has(n)||(e.add(n),r.push(n))}function W_(e){return e.scanWellKnown!=null?e.scanWellKnown:process.env.VITEST==="true"?!1:process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN!=="0"&&!["0","false","no"].includes((process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN??"").toLowerCase())}function Qf(e={}){let r=new Set,t=[];ul(r,t,e.harnessRoot??be());let n=process.env.KYNVER_CLEANUP_EXTRA_ROOTS?.split(",").map(o=>o.trim()).filter(Boolean);for(let o of n??[])ul(r,t,o);if(W_(e))for(let o of U_){let s=Xf.resolve(o);!r.has(s)&&D_(s)&&ul(r,t,s)}return t}ln();function B_(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function L_(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function Zf(e={}){let r=e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/",t=L_("KYNVER_DISK_GUARD_MAX_USED_PERCENT",75),n=Le({...e,diskPath:r,diskMaxUsedPercent:e.diskMaxUsedPercent??t}),o=!n.ok||n.usedPercent>=t,s=process.env.KYNVER_CLEANUP_DISK_PRESSURE_FORCE?.trim().toLowerCase();return s==="none"||s==="off"||s==="0"?o=!1:(s==="pressured"||s==="on"||s==="1")&&(o=!0),{diskGate:n,pressured:o,maxUsedPercent:t}}function eg(e,r){if(!r.pressured)return e;let t=e.execute||!B_("KYNVER_CLEANUP_DRY_RUN_ON_PRESSURE");return{...e,execute:t,nodeModulesAgeMs:0,runIdFilter:void 0,includeOrphans:!0,terminalWorktreesAgeMs:0,runDirectoriesAgeMs:0,worktreesAgeMs:e.worktreesAgeMs>0?e.worktreesAgeMs:6048e5,diskPressure:!0,diskGate:r.diskGate}}an();import{unlinkSync as H_}from"node:fs";function Ds(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function rg(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function F_(e,r,t){return e.length===0?[]:t?[...e]:e.length<=r?[]:e.slice(r)}function Ms(e={}){let r=e.execute===!0||Ds("KYNVER_WSL_CRASH_DUMP_EXECUTE")||Ds("KYNVER_CLEANUP_EXECUTE"),t=e.purgeAll===!0||Ds("KYNVER_WSL_CRASH_DUMP_PURGE_ALL"),n=Math.max(0,e.keepNewest??rg("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",t?0:1)),o=fr({forceWsl:e.forceWsl});if(!o?.path)return{observation:o,execute:r,keepNewest:n,removed:[],removedBytes:0,skipped:o?.probeError?[{path:o.path??"(unresolved)",reason:o.probeError}]:[]};let s=F_(o.dumps,n,t),i=[],a=[],l=0;for(let c of s){if(!r){a.push({path:c.path,reason:"dry_run"});continue}try{H_(c.path),i.push({path:c.path,bytes:c.bytes,name:c.name}),l+=c.bytes}catch(u){a.push({path:c.path,reason:u.message})}}return{observation:o,execute:r,keepNewest:n,removed:i,removedBytes:l,skipped:a}}function tg(e){return e?Ds("KYNVER_WSL_CRASH_DUMP_CLEANUP")||!e.ok?!0:e.dumpCount>rg("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",1):!1}an();function Ee(e,r){if(process.env.KYNVER_CLEANUP_QUIET==="1")return;let t=r?`: ${r}`:"";console.error(`[kynver cleanup] ${e}${t}`)}Se();var Us=class{aheadOfMain=new Map;countAheadOfMain(r,t="origin/main"){let n=`${r}\0${t}`;if(this.aheadOfMain.has(n))return this.aheadOfMain.get(n)??null;let o=re(r,["rev-list","--count",`${t}..HEAD`]);if(o.status!==0)return this.aheadOfMain.set(n,null),null;let s=Number(o.stdout.trim()),i=Number.isFinite(s)?s:null;return this.aheadOfMain.set(n,i),i}};import{spawnSync as $_}from"node:child_process";import{existsSync as K_}from"node:fs";import j_ from"node:path";var V_=5e3;function G_(e,r){if(!K_(j_.join(e,".git")))return{status:null,stdout:"",stderr:"",error:"not_a_git_repo"};try{let t=$_("git",r,{cwd:e,encoding:"utf8",timeout:V_}),n=t.error?.message?.includes("ETIMEDOUT")===!0;return{status:n?null:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:n?"git_timeout":t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function ng(e){let r=G_(e,["status","--short"]);return r.error==="not_a_git_repo"?[]:r.error==="git_timeout"||r.status!==0?null:r.stdout.split(`
+`).map(t=>t.trim()).filter(Boolean)}var Ws=class{cache=new Map;porcelain(r){let t=r,n=this.cache.get(t);if(n!==void 0)return n;let o=ng(t)??[];return this.cache.set(t,o),o}};var Bs=class{cache=new Map;derive(r){let t=this.cache.get(r.id);if(t!==void 0)return t;let n=qr(r);return this.cache.set(r.id,n),n}};function Y_(e){let r={};for(let t of e)r[t.kind]=(r[t.kind]??0)+1;return r}function og(e,r={}){let t=r.maxSampleActions??12,n=r.maxSampleSkips??8;return{harnessRoot:e.harnessRoot,scanRoots:e.scanRoots,dryRun:e.dryRun,execute:e.execute,scannedAt:e.scannedAt,finalizedRuns:e.finalizedRuns.length,actionCount:e.actions.length,actionKinds:Y_(e.actions),totals:e.totals,...e.storage?{storage:e.storage}:{},...e.preservedLivePaths?.length?{preservedLivePaths:e.preservedLivePaths}:{},...e.removedRunDirectories!=null?{removedRunDirectories:e.removedRunDirectories}:{},sampleActions:e.actions.slice(0,t).map(o=>({kind:o.kind,path:o.path,...o.skipReason?{skipReason:o.skipReason}:{},...o.bytes!=null?{bytes:o.bytes}:{},...o.runId?{runId:o.runId}:{},...o.worker?{worker:o.worker}:{}})),sampleSkips:e.skips.slice(0,n)}}function J_(e={}){let r=e.harnessRoot?ie(e.harnessRoot):be(),t=Qf({harnessRoot:r}),n=e.now??Date.now();return{harnessRoot:r,scanRoots:t,now:n}}function q_(e){return typeof e=="string"?{reason:e}:e}function Kt(e,r,t,n){e.push({path:r,reason:t,...n?{detail:n}:{}})}function Ls(e,r,t){return!r||e.bytes!=null?e:{...e,bytes:lr(e.path,t)}}function sg(e,r){let t={};for(let n of r)t[n.reason]=(t[n.reason]??0)+1;for(let n of e)n.skipReason&&(t[n.skipReason]=(t[n.skipReason]??0)+1);return t}function z_(e,r){return e.kind==="remove_next_cache"?Pf(e,r):xf(e,r)}function X_(e,r,t){return e.kind==="remove_next_cache"?Is(e.path,r,t):As(e.path,r,t)}function Q_(e){let r=new Map;for(let t of e)for(let[n,o]of $f(t))r.set(n,o);return r}function ig(e,r){return e.runId&&e.worker?Ae.join(r,e.runId,e.worker):Ae.resolve(e.path,"..")}function dl(e={}){let r=ll(e),t=Zf();r=eg(r,t);let n=J_(e);Ee("scan",`${n.scanRoots.length} harness root(s)`);let o=af(n.scanRoots,n.now),s=r.finalizeStaleRuns?jn().map(C=>({runId:C.runId,from:C.from,to:C.to})):[];s.length>0&&Ee("finalize",`${s.length} stale run(s) marked terminal`),Ee("index","building worktree index");let i=Q_(n.scanRoots);Ee("index",`${i.size} indexed worktree(s)`);let a={runTerminalCache:new Bs,gitStatusCache:new Ws,gitRevCache:new Us},l=[],c=[],u=new Set,d=r.maxActionsPerSweep,m=()=>c.length>=d;for(let C of n.scanRoots){if(m())break;Ee("root",C);let ae=Ae.join(C,"worktrees"),Z=Ff(i,C),qe={harnessRoot:C,worktreesDir:ae,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter,index:Z,now:n.now},tt=r.scanDependencyCaches?Bf(qe):[];Ee("dependency",r.scanDependencyCaches?`${tt.length} cache candidate(s) at ${C}`:"skipped (worktree-only sweep)");let Me=0;for(let he of tt){if(m())break;Me+=1,Me%50===0&&Ee("dependency",`${Me}/${tt.length} evaluated`);let ee=Ae.resolve(he.path);if(u.has(ee))continue;u.add(ee);let W={...he,path:ee},ke=X_(W,C,ae);if(ke){Kt(l,W.path,ke),c.push({...W,executed:!1,skipped:!0,skipReason:ke});continue}let ye=ig(W,ae),ze=Z.get(Ae.resolve(ye))??null,ce=el({indexed:ze,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:W.ageMs,worktreePath:ye,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(ce){Kt(l,W.path,ce),c.push({...W,executed:!1,skipped:!0,skipReason:ce});continue}c.push(z_(Ls(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(r.scanDependencyCaches)for(let he of Tf(qe)){if(m())break;let ee=Ae.resolve(he.path);if(u.has(ee))continue;u.add(ee);let W={...he,path:ee},ke=Os(W.path,C,ae);if(ke){Kt(l,W.path,ke),c.push({...W,executed:!1,skipped:!0,skipReason:ke});continue}let ye=ig(W,ae),ze=Z.get(Ae.resolve(ye))??null,ce=tf({indexed:ze,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:W.ageMs,worktreePath:ye,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(ce){Kt(l,W.path,ce),c.push({...W,executed:!1,skipped:!0,skipReason:ce});continue}c.push(Ef(Ls(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}let Er=[...Df(qe),...Hf(qe)];Ee("worktrees",`${Er.length} candidate(s) at ${C}`);let cr=new Set,le=0;for(let he of Er){if(m())break;le+=1,le%50===0&&Ee("worktrees",`${le}/${Er.length} evaluated`);let ee=Ae.resolve(he.path);if(cr.has(ee))continue;cr.add(ee);let W={...he,path:ee},ke=Z.get(Ae.resolve(W.path))??null,ye=ke?null:Jf({worktreePath:W.path,harnessRoot:C,runId:W.runId,workerName:W.worker,now:n.now}),ze=rf({indexed:ke,worktreePath:Ae.resolve(W.path),includeOrphans:r.includeOrphans,worktreesAgeMs:r.worktreesAgeMs,terminalWorktreesAgeMs:r.terminalWorktreesAgeMs,ageMs:W.ageMs,orphanSafety:ye,worktreeRemovalGuard:e.worktreeRemovalGuard,liveness:a,now:n.now,harnessRoot:C,writeSalvageEvidence:r.execute});if(ze){let{reason:ce,detail:ur}=q_(ze);Kt(l,W.path,ce,ur),c.push({...W,executed:!1,skipped:!0,skipReason:ce});continue}c.push(If(Ls(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(!m()&&r.runDirectoriesAgeMs>=0)for(let he of ff({harnessRoot:C,worktreesDir:ae,runDirectoriesAgeMs:r.runDirectoriesAgeMs,runIdFilter:r.runIdFilter,activeGuards:o,now:n.now})){if(m())break;let ee=Ae.resolve(he.path);if(u.has(ee))continue;u.add(ee);let W={...he,path:ee},ke=W.runId??Ae.basename(ee),ye=mf({harnessRoot:C,runId:ke,runPath:ee,ageMs:W.ageMs,runDirectoriesAgeMs:r.runDirectoriesAgeMs,activeGuards:o});if(ye){Kt(l,W.path,ye),c.push({...W,executed:!1,skipped:!0,skipReason:ye});continue}c.push(Af(Ls(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}}let f=0,p=0,h=0,k=0,g=0,R=0;for(let C of c)C.bytes&&(f+=C.bytes),!C.skipped&&!C.executed&&C.bytes&&(h+=C.bytes),C.executed?(g+=1,k+=C.bytes??0,C.kind==="remove_run_directory"&&(p+=1)):C.skipped&&(R+=1,C.skipReason==="dry_run"&&C.bytes&&(h+=C.bytes));let I=r.accountBytes?zf({harnessRoot:n.harnessRoot,now:n.now,perRunEntryCap:r.storagePerRunEntryCap}):void 0,P=fr(),E=r.execute&&tg(P),D=E?Ms({execute:!0}):null,j=P?{observed:!0,execute:E,dumpCount:P.dumpCount,totalBytes:P.totalBytes,removedCount:D?.removed.length??0,removedBytes:D?.removedBytes??0,executables:P.executables,path:P.path,reason:P.reason}:void 0;D&&D.removed.length>0&&(k+=D.removedBytes,g+=D.removed.length,Ee("wsl-crashes",`removed ${D.removed.length} dump(s), ${D.removedBytes} bytes`)),Ee("complete",`${c.length} action(s), ${R} skipped, ${g} removed`);let F=of(c,l),U=og({harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:f,reclaimableBytes:h,removedBytes:k,removedPaths:g,skippedPaths:R,skipReasons:sg(c,l)},...I?{storage:I}:{},...F.length>0?{preservedLivePaths:F}:{},...p>0?{removedRunDirectories:p}:{},...j?{wslCrashDumps:j}:{}});return{harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:f,reclaimableBytes:h,removedBytes:k,removedPaths:g,skippedPaths:R,skipReasons:sg(c,l)},...I?{storage:I}:{},...F.length>0?{preservedLivePaths:F}:{},...p>0?{removedRunDirectories:p}:{},...j?{wslCrashDumps:j}:{},compactSummary:U}}function ag(e){let r=Gf(e);return dl({execute:r.execute,finalizeStaleRuns:r.finalizeStaleRuns,accountBytes:r.accountBytes,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter})}function lg(){return process.env.KYNVER_PIPELINE_CLEANUP!=="0"}import{readFile as ax}from"node:fs/promises";import{homedir as lx}from"node:os";import Zr from"node:path";bo();import{existsSync as cg,readFileSync as Z_}from"node:fs";import Hs from"node:path";var dg={"@kynver-app/runtime":"0.1.83","@kynver-app/openclaw-agent-os":"0.1.43","@kynver-app/mcp-agent-os":"0.3.34"},pg=Object.keys(dg),pl={"@kynver-app/runtime":"Kynver runtime","@kynver-app/openclaw-agent-os":"OpenClaw AgentOS plugin","@kynver-app/mcp-agent-os":"AgentOS MCP server"},ex={"@kynver-app/runtime":"packages/kynver-runtime/package.json","@kynver-app/openclaw-agent-os":"packages/kynver-openclaw-agent-os/package.json","@kynver-app/mcp-agent-os":"packages/kynver-mcp-agent-os/package.json"};function ug(e){let r=e.trim().split("-")[0]?.split("+")[0];if(!r)return null;let t=r.split(".");if(t.length<1||t.length>3)return null;let n=t.map(o=>Number.parseInt(o,10));if(n.some(o=>!Number.isFinite(o)||o<0))return null;for(;n.length<3;)n.push(0);return[n[0],n[1],n[2]]}function Fs(e,r){let t=ug(e),n=ug(r);if(!t||!n)return 0;for(let o=0;o<3;o+=1){if(t[o]>n[o])return 1;if(t[o]<n[o])return-1}return 0}function mg(e,r){return Fs(e,r)>=0}function rx(e){let r=null;for(let t of e)(!r||Fs(t,r)>0)&&(r=t);return r}function tx(e){try{let r=JSON.parse(Z_(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function nx(e,r){let t=[r,process.env.KYNVER_REPO,e].filter(o=>!!o?.trim());for(let o of t){let s=Hs.resolve(o);if(cg(Hs.join(s,"packages/kynver-runtime/package.json"))&&cg(Hs.join(s,"package.json")))return s}return lt({cwd:e})?.repo??null}function fg(e={}){let r=e.cwd??process.cwd(),t=nx(r,e.repoRoot);if(!t)return{};let n={};for(let o of pg){let s=Hs.join(t,ex[o]),i=tx(s);i&&(n[o]={version:i,source:"repo",path:s})}return n}function ox(e){return e==="@kynver-app/runtime"?["npm run kynver:build","npm run kynver"]:[`npm run build -w ${e}`]}function sx(e){let{packageName:r,minimumVersion:t,effectiveVersion:n,effectiveSource:o,repoVersion:s}=e,i=[];return s&&mg(s,t)?(i.push(`Use the monorepo checkout (${s}) instead of a stale npm install: ${ox(r).join("; ")}.`),i.push("Do not publish npm packages or wait on an operator release."),i):(n?i.push(`Upgrade ${r} from ${n} to >= ${t} (npm install -g ${r}@latest or align OpenClaw npm prefix).`):i.push(`Install ${r} >= ${t} before running memory-heavy AgentOS paths.`),r==="@kynver-app/runtime"&&i.push("Repo-source alternative: npm run kynver:build && npm run kynver"),o==="installed"&&s&&i.push(`Repo checkout reports ${s}; rebuild/link repo source if you develop from the monorepo.`),i)}function ix(e){if(e.length===0)return{version:null,source:"unknown"};let r=rx(e.map(n=>n.version));if(!r)return{version:null,source:"unknown"};let t=e.find(n=>n.version===r)??e[0];return{version:t.version,source:t.source}}function gg(e={}){let r=(i,a)=>i?typeof i=="string"?{version:i,source:a}:i:null,t=pg.map(i=>{let a=dg[i],l=[],c=r(e.installed?.[i],"installed"),u=r(e.repo?.[i],"repo"),d=r(e.self?.[i],"self");c&&l.push(c),u&&l.push(u),d&&l.push(d);let{version:m,source:f}=ix(l),p=u?.version??null,h=m?mg(m,a):!1,k=h?[]:sx({packageName:i,minimumVersion:a,effectiveVersion:m,effectiveSource:f,repoVersion:p}),g=h?`${pl[i]} ${m} meets memory-cost minimum ${a} (${f}).`:`${pl[i]} is below memory-cost minimum ${a}`+(m?` (effective ${m} via ${f})`:" (no version detected)")+".";return{packageName:i,displayName:pl[i],minimumVersion:a,effectiveVersion:m,effectiveSource:f,ok:h,summary:g,remediation:k}}),n=t.filter(i=>!i.ok),o=n.length===0,s=o?"All managed AgentOS packages meet memory-cost minimum versions.":`Memory-cost package guard blocked ${n.length} stale package(s): ${n.map(i=>`${i.packageName} < ${i.minimumVersion}`).join("; ")}.`;return{ok:o,summary:s,packages:t}}var ml=class extends Error{result;constructor(r){let t=[r.summary,...r.packages.filter(n=>!n.ok).flatMap(n=>[`- ${n.summary}`,...n.remediation.map(o=>`  \u2192 ${o}`)])];super(t.join(`
+`)),this.name="MemoryCostPackageVersionGuardError",this.result=r}};function hg(e={}){let r=gg(e);if(!r.ok)throw new ml(r);return r}var cx=["@kynver-app/runtime","@kynver-app/openclaw-agent-os","@kynver-app/mcp-agent-os"];function jt(e){let r=e?.trim();return r||null}function ux(e){return[...new Set(e.filter(r=>!!r))]}function dx(){let e=lx(),r=jt(process.env.KYNVER_OPENCLAW_NPM_ROOT)??jt(process.env.OPENCLAW_NPM_ROOT)??Zr.join(e,".openclaw","npm"),t=jt(process.env.KYNVER_NPM_GLOBAL_ROOT)??jt(process.env.KYNVER_NPM_GLOBAL_MODULES_ROOT)??(jt(process.env.NPM_CONFIG_PREFIX)?Zr.join(jt(process.env.NPM_CONFIG_PREFIX),"lib","node_modules"):Zr.join(e,".npm-global","lib","node_modules"));return ux([Zr.join(r,"lib","node_modules"),Zr.join(r,"node_modules"),t.endsWith("node_modules")?t:Zr.join(t,"lib","node_modules")])}async function px(e){try{let r=JSON.parse(await ax(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function mx(e){let r=dx(),t=new Set,n=[];for(let o of r){let s=Zr.join(o,e,"package.json");t.has(s)||(t.add(s),n.push(s))}return n}async function $s(e=new Date().toISOString()){let r={};for(let t of cx){let n=null;for(let o of mx(t)){let s=await px(o);s&&(!n||Fs(s,n.version)>0)&&(n={version:s,path:o})}n&&(r[t]={version:n.version,observedAt:e,path:n.path})}return r}import{spawnSync as fx}from"node:child_process";var gx=1e4,hx=4*1024*1024,kg=(e,r,t)=>{try{let n=fx(e,r,{encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:t?.timeoutMs??gx,maxBuffer:hx});return{ok:n.status===0,stdout:typeof n.stdout=="string"?n.stdout:"",stderr:typeof n.stderr=="string"?n.stderr:""}}catch(n){return{ok:!1,stdout:"",stderr:n instanceof Error?n.message:String(n)}}};function Vt(e,r,t){let n=e(r,t);if(!n.ok||!n.stdout.trim())return null;try{return JSON.parse(n.stdout)}catch{return null}}function yg(e,r,t){return`${e} ${r} ${t}`}function Qn(e){let r=e.lastIndexOf("@");if(r<=0||r===e.length-1)return null;let t=e.slice(0,r),n=e.slice(r+1);return!/^[^/\s]+\/[^/\s]+$/.test(t)||!/^[0-9a-f]{7,40}$/i.test(n)?null:{repo:t,sha:n}}function Rg(e){let r=e.trim().match(/[/:]([^/]+\/[^/]+)\/(?:pull|pulls|merge_requests|pull-requests)\/(\d+)/i);if(!r)return null;let t=Number(r[2]);return!Number.isFinite(t)||t<=0?null:{repo:r[1],number:t}}var kx=8e3,yx=30,Rx=100,bx=400;function fl(e){return process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()?!0:e("gh",["auth","token"]).ok}function Gt(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function vx(e){return Array.isArray(e)?e.map(r=>Gt(r)).filter(r=>r!==null).slice(0,yx).map(r=>({context:r.context??null,state:r.state??null,target_url:r.target_url??null,description:r.description??null})):[]}function bg(e,r,t){let n=Vt(e,"gh",["api",`repos/${r}/commits/${t}/status`]);return n?{state:n.state??null,statuses:vx(n.statuses)}:null}var vg={provider:"github",kind:"pr_snapshot",version:"1",isAvailable:fl,collect(e,r){let t=Rg(e);if(!t)return null;let n=Vt(r,"gh",["api",`repos/${t.repo}/pulls/${t.number}`]);if(!n)return null;let o=Gt(n.head),s=typeof o?.sha=="string"?o.sha:null,i=Gt(n.user),a=Gt(Gt(o?.repo)?.owner),l=typeof n.body=="string"?n.body.slice(0,kx):null,c=[],u={state:null,statuses:[]};if(s){let f=Vt(r,"gh",["api",`repos/${t.repo}/commits/${s}/check-runs?per_page=100`]);Array.isArray(f?.check_runs)&&(c=f.check_runs.map(p=>Gt(p)).filter(p=>p!==null).slice(0,Rx).map(p=>({name:p.name??null,status:p.status??null,conclusion:p.conclusion??null}))),u=bg(r,t.repo,s)??u}let d=r("gh",["api","--paginate",`repos/${t.repo}/pulls/${t.number}/files?per_page=100`,"--jq",".[].filename"]),m=d.ok?d.stdout.split(`
+`).map(f=>f.trim()).filter(Boolean).slice(0,bx):[];return{pull:{html_url:n.html_url??null,title:n.title??null,body:l,user:{login:i?.login??null},state:n.state??null,draft:n.draft??null,merged:n.merged??null,merged_at:n.merged_at??null,merge_commit_sha:n.merge_commit_sha??null,mergeable:n.mergeable??null,mergeable_state:n.mergeable_state??null,head:{sha:s,ref:o?.ref??null,repo:{owner:{login:a?.login??null}}}},checkRuns:c,combinedStatus:u,changedFiles:m}}},Sg={provider:"github",kind:"commit_status",version:"1",isAvailable:fl,collect(e,r){let t=Qn(e);return t?bg(r,t.repo,t.sha):null}},wg={provider:"github",kind:"branch_reachability",version:"1",isAvailable:fl,collect(e,r){let t=Qn(e);if(!t)return null;let n=Vt(r,"gh",["api",`repos/${t.repo}`]),o=typeof n?.default_branch=="string"&&n.default_branch.trim()?n.default_branch.trim():null;if(!o)return null;let s=Vt(r,"gh",["api",`repos/${t.repo}/compare/${encodeURIComponent(o)}...${t.sha}`]);if(!s)return null;let i=typeof s.status=="string"?s.status:null;return{defaultBranch:o,compareStatus:i,reachable:i==="identical"||i==="behind"}}};var Sx=5,wx=/\b(READY|ERROR|BUILDING|QUEUED|CANCELED|INITIALIZING)\b/i,Cx=/https:\/\/[^\s]+/,Cg={provider:"vercel",kind:"deployment_status",version:"1",isAvailable(e){return e("vercel",["whoami"]).ok},collect(e,r){let t=Qn(e);if(!t)return null;let n=r("vercel",["list","--prod","--meta",`githubCommitSha=${t.sha}`]);if(!n.ok)return null;let o=[];for(let s of n.stdout.split(`
+`)){let i=s.match(Cx)?.[0];if(!i)continue;let a=s.match(wx)?.[1]?.toUpperCase()??null;if(o.push({url:i,state:a}),o.length>=Sx)break}return{found:o.length>0,deployments:o}}};var gl=[];function Ks(e){gl.some(r=>r.provider===e.provider&&r.kind===e.kind)||gl.push(e)}function _g(e,r){return gl.find(t=>t.provider===e&&t.kind===r)??null}function xg(){Ks(vg),Ks(Sg),Ks(wg),Ks(Cg)}var _x=8,xx=25e3;function Pg(e,r={}){xg();let t=r.run??kg,n=r.now??(()=>new Date),o=r.maxSubjects??_x,s=Date.now()+(r.deadlineMs??xx),i=new Set,a=e.filter(f=>{let p=yg(f.provider,f.kind,f.subject);return i.has(p)?!1:(i.add(p),!0)}),l=a.length>0?Math.floor(n().getTime()/6e4)%a.length:0,u=a.map((f,p)=>a[(l+p)%a.length]).slice(0,o),d={attempted:0,collected:0,items:[],skipped:[]},m=new Map;for(let f of u){if(Date.now()>s){d.skipped.push({...f,reason:"budget_exhausted"});continue}let p=_g(f.provider,f.kind);if(!p){d.skipped.push({...f,reason:"no_recipe"});continue}let h=`${p.provider} ${p.kind}`,k=m.get(h);if(k===void 0&&(k=p.isAvailable(t),m.set(h,k)),!k){d.skipped.push({...f,reason:"provider_unavailable"});continue}d.attempted+=1;let g=p.collect(f.subject,t);if(g==null){d.skipped.push({...f,reason:"collect_failed"});continue}d.collected+=1,d.items.push({provider:f.provider,kind:f.kind,subject:f.subject,payload:g,observedAt:n().toISOString(),collectorVersion:p.version})}return d}M();w();import Px from"node:path";var Ex="provider-evidence-wanted.json";function Eg(e){return Px.join(x(e),Ex)}function Ag(e){if(!Array.isArray(e))return[];let r=[];for(let t of e){if(!t||typeof t!="object"||Array.isArray(t))continue;let n=t,o=typeof n.provider=="string"?n.provider.trim():"",s=typeof n.kind=="string"?n.kind.trim():"",i=typeof n.subject=="string"?n.subject.trim():"";!o||!s||!i||r.push({provider:o,kind:s,subject:i})}return r}function Ig(e){let r=_(Eg(e),null);return Ag(r?.wanted)}function Og(e,r){de(Eg(e),{savedAt:new Date().toISOString(),wanted:r})}function Ng(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.providerEvidenceWanted;return Array.isArray(r)?Ag(r):null}async function Ix(e,r){let t=B(e),n=[];for(let o of Object.keys(t.workers||{})){let s=_(Ax.join(x(t.id),"workers",b(o),"worker.json"),void 0);if(!s?.taskId||s.localOnly)continue;if(jr(s)){n.push({worker:o,ok:!0,taskId:s.taskId??null,skipped:!0});continue}let i=T(s);if(!oe(i))continue;let a=gt({alive:i.alive,finalResult:i.finalResult,changedFiles:i.changedFiles,gitAncestry:i.gitAncestry});if(!s.dispatched&&!i.finalResult&&!a?.salvageable)continue;let l=await Wn({run:e,name:o,agentOsId:String(r.agentOsId||s.agentOsId||""),...r});n.push({worker:o,ok:l.ok,taskId:s.taskId??null})}return n}async function Ox(e,r,t,n,o){let s=K(n.baseUrl?String(n.baseUrl):void 0),i=await G(n.secret?String(n.secret):void 0,e,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(e)}/operator/tick`,l=await $s(),c=Jo(r),u=null;try{let h=Ig(r);u=h.length>0?Pg(h):null}catch{u=null}let d=Yo(r),m=await Lr(a,i,{agentOsId:e,runId:r,ingestHarness:!0,harnessBoardSnapshot:Vr(r),resourceGate:t,boxResourceSnapshot:_s(t,{harnessRunId:r,boxKind:Be(v())}),packageVersions:l,...o?{harnessCleanup:o}:{},runnerPresence:Ke({runId:r}),activeHarnessWorkers:c,...d?.leaseToken?{meshCronLeaseToken:d.leaseToken}:{},...u&&u.items.length>0?{providerEvidence:u.items}:{}}),f=Ng(m.response);if(f)try{Og(r,f)}catch{}let p=sd(m);if(p)try{od(r,p)}catch{}return{ok:m.ok,httpStatus:m.status,response:m.response,...u?{providerEvidence:{attempted:u.attempted,collected:u.collected,skipped:u.skipped.length}}:{}}}async function hl(e){let r=String(N(String(e.run||""),"--run")),t=String(N(String(e.agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false";ks({run:r});let o=await Gm(t,e),s=Vm(o),i=rr({runId:r,configuredMaxWorkersOverride:s}),a=lg()?ag(r):void 0,l=await Ox(t,r,i,e,a),c=Op(r,l),u=await ss(r,e),d=await Ix(r,e),m=rr({runId:r,configuredMaxWorkersOverride:s}),f=Gn(),p=await jm(r,e),h=Am(m,l),k=h.maxStarts,g=await Yn({run:r,agentOsId:t,pipeline:!0,...e}),R=null,I=0,P=Em(l),E=k;if(n&&E>0&&P.length>0){let j=Math.min(E,P.length),F=await Ba({...e,run:r,agentOsId:t,targetTaskIds:P.join(",")},j),U=Ht(F);I+=U,E=Math.max(0,E-U),R={exactTargetTaskIds:P,exact:F,startedCount:I}}if(n&&E>0){let j=await Ba({...e,run:r,agentOsId:t},E),F=Ht(j);I+=F,R=R&&typeof R=="object"?{...R,broad:j,startedCount:I}:j}else!n||k<=0?R||(R={ok:!0,skipped:!0,reason:n?m.reason??"no slots or queued work":"execute disabled",maxStarts:0,dispatchAdvice:h,...P.length?{exactTargetTaskIds:P,exactOnly:!0}:{}}):R&&typeof R=="object"&&(R={...R,broadSkipped:!0,startedCount:I});let D=!h.underutilized&&k===0&&d.length===0&&I===0;return{runId:r,agentOsId:t,execute:n,resourceGate:i,dispatchResourceGate:m,leaseRenewal:u,completedWorkers:d,staleReconcile:f,harnessCleanup:a,planProgressSync:p,completionAckSync:c,operatorTick:l,sweep:g,dispatchAdvice:h,dispatch:R,idle:D}}O();import zx from"node:os";import{readFileSync as Nx}from"node:fs";import{homedir as Tx,platform as Dx}from"node:os";import Mx from"node:path";import{execFileSync as Ux}from"node:child_process";function Tg(e,r=Date.now()){try{let t=JSON.parse(e),n=t.claudeAiOauth?.accessToken,o=t.claudeAiOauth?.expiresAt;return typeof n!="string"||!n||typeof o=="number"&&o-r<6e4?null:n}catch{return null}}function Wx(){if(Dx()==="darwin")try{let e=Ux("security",["find-generic-password","-s","Claude Code-credentials","-w"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return Tg(e.trim())}catch{return null}try{let e=Nx(Mx.join(Tx(),".claude",".credentials.json"),"utf8");return Tg(e)}catch{return null}}function Dg(e=process.env,r={}){let t=e.ANTHROPIC_API_KEY?.trim();if(t)return{kind:"api_key",key:t};let n=e.KYNVER_CHAT_USE_CLAUDE_OAUTH;if(r.oauthOptIn===!0||n==="1"||n==="true"||n==="yes"){let s=Wx();if(s)return{kind:"oauth",token:s}}return null}var Bx="You are Claude Code, Anthropic's official CLI for Claude.";function Lx(){return{blocks:[],stopReason:null,inputTokens:0,outputTokens:0}}function Hx(e,r){let t=r;switch(t.type){case"message_start":return e.inputTokens=t.message?.usage?.input_tokens??0,"";case"content_block_start":{let n=t.index??e.blocks.length;return e.blocks[n]={type:t.content_block?.type==="tool_use"?"tool_use":"text",text:"",id:t.content_block?.id,name:t.content_block?.name,inputJson:""},""}case"content_block_delta":{let n=e.blocks[t.index??e.blocks.length-1];return n?t.delta?.type==="text_delta"&&t.delta.text?(n.text+=t.delta.text,t.delta.text):(t.delta?.type==="input_json_delta"&&t.delta.partial_json&&(n.inputJson+=t.delta.partial_json),""):""}case"message_delta":return t.delta?.stop_reason&&(e.stopReason=t.delta.stop_reason),typeof t.usage?.output_tokens=="number"&&(e.outputTokens=t.usage.output_tokens),"";default:return""}}function Fx(e){let r=[];for(let t of e.blocks)if(t)if(t.type==="tool_use"){let n={};try{n=t.inputJson?JSON.parse(t.inputJson):{}}catch{n={}}r.push({type:"tool_use",id:t.id??"",name:t.name??"",input:n})}else t.text&&r.push({type:"text",text:t.text});return{content:r,stop_reason:e.stopReason??"end_turn",usage:{input_tokens:e.inputTokens,output_tokens:e.outputTokens}}}async function*$x(e){let r=e.getReader(),t=new TextDecoder,n="";try{for(;;){let{done:o,value:s}=await r.read();if(o)break;n+=t.decode(s,{stream:!0});let i;for(;(i=n.indexOf(`
+`))!==-1;){let a=n.slice(0,i).trim();if(n=n.slice(i+1),!a.startsWith("data:"))continue;let l=a.slice(5).trim();if(!(!l||l==="[DONE]"))try{yield JSON.parse(l)}catch{}}}}finally{r.releaseLock()}}function Kx(e=process.env){return(e.ANTHROPIC_BASE_URL?.trim()||"https://api.anthropic.com").replace(/\/$/,"")}async function Mg(e){let{creds:r,model:t,payload:n}=e,o={"Content-Type":"application/json","anthropic-version":"2023-06-01"},s=n.system;r.kind==="api_key"?o["x-api-key"]=r.key:(o.Authorization=`Bearer ${r.token}`,o["anthropic-beta"]="oauth-2025-04-20",s=[{type:"text",text:Bx},{type:"text",text:n.system}]);let i=await fetch(`${Kx()}/v1/messages`,{method:"POST",headers:o,signal:e.signal,body:JSON.stringify({model:t,max_tokens:n.maxTokens,system:s,messages:n.messages,...Array.isArray(n.tools)&&n.tools.length>0?{tools:n.tools}:{},...n.temperature!==void 0?{temperature:n.temperature}:{},stream:!0})});if(!i.ok||!i.body){let l=await i.text().catch(()=>"");throw new Error(`Anthropic stream failed: HTTP ${i.status}${l?` \u2014 ${l.slice(0,300)}`:""}`)}let a=Lx();for await(let l of $x(i.body)){let c=Hx(a,l);c&&e.onDelta(c)}return Fx(a)}var Yt=class{constructor(r,t=150){this.flushFn=r;this.floorMs=t}buffer="";timer=null;closed=!1;push(r){this.closed||!r||(this.buffer+=r,this.timer||(this.timer=setTimeout(()=>{this.timer=null,this.flushNow()},this.floorMs)))}flushNow(){if(!this.buffer)return;let r=this.buffer;this.buffer="",this.flushFn(r)}close(){this.closed||(this.closed=!0,this.timer&&(clearTimeout(this.timer),this.timer=null),this.flushNow())}};import{spawn as Yx}from"node:child_process";var jx=new Set(["run list","run status","worker list","worker status","worker tail","status","cron status","monitor status","monitor list"]),Vx=new Set(["run create","run dispatch","run sweep","worker start","worker stop","worker complete","cleanup"]),Gx=["--secret","--api-key","--keeper-child"];function Ug(e){if(!Array.isArray(e)||e.length===0||e.some(n=>typeof n!="string"))return{ok:!1,mutating:!1,reason:"argv must be a non-empty string array"};for(let n of e){if(Gx.some(o=>n===o||n.startsWith(`${o}=`)))return{ok:!1,mutating:!1,reason:`forbidden flag: ${n}`};if(n.includes(`
+`)||n.includes("\0"))return{ok:!1,mutating:!1,reason:"control characters refused"}}let r=e[0],t=e.length>1&&!e[1].startsWith("--")?`${r} ${e[1]}`:r;return t==="doctor runtime-takeover"?e.includes("--remediate-default-repo")?{ok:!0,mutating:!0}:{ok:!0,mutating:!1}:r==="cleanup"?{ok:!0,mutating:e.includes("--execute")}:jx.has(t)?{ok:!0,mutating:!1}:Vx.has(t)?{ok:!0,mutating:!0}:{ok:!1,mutating:!1,reason:`verb not allowlisted: ${t}`}}var Jx=10*6e4,qx=5e3,Wg=2e5;async function Bg(e,r,t={}){let n=Ug(e);if(!n.ok)return{exitCode:null,timedOut:!1,refused:n.reason};let o=t.cliEntry??process.argv[1],s=t.timeoutMs??Jx,i=new Yt(r);return new Promise(a=>{let l=0,c=!1,u=Yx(process.execPath,[o,...e],{stdio:["ignore","pipe","pipe"],env:process.env}),d=f=>{if(l>=Wg)return;let p=f.toString("utf8").slice(0,Wg-l);l+=p.length,i.push(p)};u.stdout?.on("data",d),u.stderr?.on("data",d);let m=setTimeout(()=>{c=!0,u.kill("SIGTERM"),setTimeout(()=>u.kill("SIGKILL"),qx).unref()},s);u.on("error",f=>{clearTimeout(m),i.push(`spawn failed: ${f.message}`),i.close(),a({exitCode:null,timedOut:!1,refused:void 0})}),u.on("close",f=>{clearTimeout(m),i.close(),a({exitCode:f,timedOut:c})})})}var Xx=25e3,Qx=32e3,Zx=5e3,eP=6e4,Lg=5*6e4,rP=5e3,tP="claude-sonnet-4-6";async function nP(e,r,t){let n=t.KYNVER_RUNTIME_CHAT_BRIDGE_URL?.trim();if(n)return n;if(!e)return null;let o=new AbortController,s=setTimeout(()=>o.abort(),rP);try{let i=await fetch(`${e.replace(/\/$/,"")}/api/runtime/chat-bridge`,{headers:{Authorization:`Bearer ${r}`},signal:o.signal});if(!i.ok)return null;let a=await i.json().catch(()=>null);return typeof a?.bridgeUrl=="string"&&a.bridgeUrl.trim()?a.bridgeUrl.trim():null}catch{return null}finally{clearTimeout(s)}}async function Hg(e=process.env){let r=v(),t=r.agentOsId?.trim(),n=ne();if(!t||!n)return null;let o=await nP(r.apiBaseUrl,n,e);return o?{bridgeUrl:o.replace(/\/$/,""),agentOsId:t,apiKey:n,boxId:zx.hostname(),model:e.KYNVER_CHAT_MODEL?.trim()||r.defaultModel?.trim()||tP,useClaudeOauth:r.chatUseClaudeOauth===!0}:null}async function oP(e,r){let t=new AbortController,n=setTimeout(()=>t.abort(),Qx),o=setInterval(()=>{r()&&t.abort()},500);try{let s=await fetch(`${e.bridgeUrl}/runtime-chat/claim`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,boxId:e.boxId,waitMs:Xx}),signal:t.signal});if(s.status===204)return null;if(s.status===401||s.status===403)return"auth_error";if(!s.ok)throw new Error(`claim failed: HTTP ${s.status}`);return(await s.json().catch(()=>null))?.turn??null}catch(s){if(r())return null;throw s}finally{clearTimeout(n),clearInterval(o)}}async function et(e,r,t){return(await fetch(`${e.bridgeUrl}/runtime-chat/turns/${encodeURIComponent(r)}/events`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,events:t})})).ok}async function sP(e,r){let t=0,n=Array.isArray(r.payload?.argv)?r.payload.argv:[],o=await Bg(n,s=>{et(e,r.turnId,[{seq:t++,kind:"delta",text:s}])});o.refused?await et(e,r.turnId,[{seq:t++,kind:"error",error:`command_refused: ${o.refused}`}]).catch(()=>{}):await et(e,r.turnId,[{seq:t++,kind:"final",message:{exitCode:o.exitCode,timedOut:o.timedOut}}]).catch(()=>{}),console.error(JSON.stringify({event:"command_turn_done",turnId:r.turnId,argv:n.slice(0,4),exitCode:o.exitCode,timedOut:o.timedOut,refused:o.refused??null}))}async function iP(e,r){let t=0,n=!1,o=new AbortController,s=l=>{n||et(e,r.turnId,[{seq:t++,kind:"delta",text:l}]).then(c=>{c||(n=!0,o.abort())})},i=new Yt(s),a=Dg(process.env,{oauthOptIn:e.useClaudeOauth});if(!a){await et(e,r.turnId,[{seq:0,kind:"error",error:"no_local_credentials"}]).catch(()=>{});return}try{let l=await Mg({creds:a,model:e.model,payload:r.payload,onDelta:c=>i.push(c),signal:o.signal});i.close(),n||await et(e,r.turnId,[{seq:t++,kind:"final",message:l}]),console.error(JSON.stringify({event:"chat_turn_done",turnId:r.turnId,model:e.model}))}catch(l){i.close(),n||await et(e,r.turnId,[{seq:t++,kind:"error",error:l instanceof Error?l.message:String(l)}]).catch(()=>{}),console.error(JSON.stringify({event:"chat_turn_error",turnId:r.turnId,error:l instanceof Error?l.message:String(l)}))}}async function kl(e,r){for(let n=0;n<e&&!r();n+=500)await new Promise(o=>setTimeout(o,Math.min(500,e-n)))}async function Fg(e){let r=await Hg();for(r||console.error(JSON.stringify({event:"chat_claim_loop_waiting",reason:!ne()||!v().agentOsId?.trim()?"machine_not_linked":"bridge_not_discovered (rollout off, discovery route missing/404, or API unreachable)",rediscoverMs:Lg}));!r&&!e.shouldStop();){if(!ne()||!v().agentOsId?.trim()||(await kl(Lg,e.shouldStop),e.shouldStop()))return;r=await Hg()}if(!(!r||e.shouldStop())){for(console.error(JSON.stringify({event:"chat_claim_loop_start",bridgeUrl:r.bridgeUrl,agentOsId:r.agentOsId,boxId:r.boxId,model:r.model,useClaudeOauth:r.useClaudeOauth}));!e.shouldStop();)try{let t=await oP(r,e.shouldStop);if(t==="auth_error"){console.error(JSON.stringify({event:"chat_claim_auth_error"})),await kl(eP,e.shouldStop);continue}t&&(t.payload?.kind==="command"?await sP(r,t):await iP(r,t))}catch(t){console.error(JSON.stringify({event:"chat_claim_error",error:t instanceof Error?t.message:String(t)})),await kl(Zx,e.shouldStop)}console.error(JSON.stringify({event:"chat_claim_loop_stop"}))}}var aP=6e4,lP=5*6e4,cP=10,uP=250;async function yl(e,r){let t=e;for(;t>0&&!r();){let n=Math.min(uP,t);await pr(n),t-=n}}async function js(e){Pt();let r=String(N(String(e.run||""),"--run")),t=String(N(String(e.agentOsId||v().agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false",o=Number(e.intervalMs)>0?Math.floor(Number(e.intervalMs)):aP,s=!1,i=0;process.on("SIGINT",()=>{s=!0}),process.on("SIGTERM",()=>{s=!0});let a=Sn();a.remediated&&console.error(JSON.stringify({event:"daemon_default_repo_remediated",defaultRepo:a.resolved?.defaultRepo??null,configPath:a.configPath}));let l=Uu(v());l.ok||(console.error(JSON.stringify({event:"daemon_start_blocked",runId:r,agentOsId:t,errors:l.errors})),process.exit(1)),console.error(JSON.stringify({event:"daemon_start",runId:r,agentOsId:t,execute:n,intervalMs:o,boxKind:l.box.boxKind,workerCapSource:l.workerCapSource,maxConcurrentWorkers:l.maxConcurrentWorkers}));let c=or(),u=Fg({shouldStop:()=>s}).catch(m=>{console.error(JSON.stringify({event:"chat_claim_loop_crashed",error:m instanceof Error?m.message:String(m)}))}),d=!1;for(;!s;)try{Lu({agentOsId:t,runId:r,instructionBundleVersion:Wr()});let m=await Di(e.secret?String(e.secret):void 0,t);if(!m.ok){d||(d=!0,console.error(JSON.stringify({event:"daemon_runner_credential_missing",agentOsId:t,reason:m.reason,remedy:`run \`kynver runner credential --agent-os-id ${t}\` (or \`kynver bootstrap\`); ticks resume automatically once the credential exists`}))),await yl(o,()=>s);continue}d&&(d=!1,console.error(JSON.stringify({event:"daemon_runner_credential_recovered",agentOsId:t}))),await Du({agentOsId:t,baseUrl:pu(e.baseUrl?String(e.baseUrl):void 0),secret:m.secret});let f=await hl({run:r,agentOsId:t,execute:n,...e});if(console.error(JSON.stringify({event:"daemon_tick",...f})),c.tickEnabled){let g=Yo(r);if(g&&!g.authorized)console.error(JSON.stringify({event:"daemon_cron_tick_skipped",reason:"mesh_cron_lease_not_authorized",holderBoxId:g.holderBoxId}));else{let R=await Et({env:c,agentOsIdFilter:t});R.enabled&&(R.fired>0||R.errors>0||R.lockHeld)&&console.error(JSON.stringify({event:"daemon_cron_tick",...R}))}}f.idle?i++:i=0;let p=Math.floor(xt("daemon.maxIdleStreak",cP)),h=Math.floor(xt("daemon.idleIntervalMs",lP)),k=i>=p?h:o;await yl(k,()=>s)}catch(m){console.error(JSON.stringify({event:"daemon_tick_error",error:m.message})),await yl(o,()=>s)}await u,console.error(JSON.stringify({event:"daemon_stop",runId:r,agentOsId:t}))}O();import{spawn as dP}from"node:child_process";w();var pP=15*6e4,$g=2*6e4,Kg=1e4,mP=5e3,fP=5*6e4,gP=30*6e4,jg=5e3;function hP(e,r=process.env){let t=typeof e=="string"?Number.parseInt(e,10):NaN;if(Number.isFinite(t)&&t>0)return t;let n=Number.parseInt(r.KYNVER_DAEMON_STALL_MS??"",10);return Number.isFinite(n)&&n>0?n:pP}function Vs(e,r=process.env){if(e.keeperChild===!0||e.keeperChild==="true"||e.noSupervise===!0||e.noSupervise==="true"||e.supervised==="false")return!1;let t=(r.KYNVER_DAEMON_SUPERVISED??"").trim().toLowerCase();return!(t==="0"||t==="false"||t==="no"||t==="off")}function kP(e,r=mP,t=fP){let n=Math.min(Math.max(e,1)-1,10);return Math.min(r*2**n,t)}function yP(e,r,t=gP){return r-e>=t}function rt(e,r={}){console.error(JSON.stringify({event:`daemon_keeper_${e}`,...r}))}function RP(e){let r=[];for(let t=0;t<e.length;t+=1){let n=e[t];if(!(n==="--supervised"||n==="--no-supervise"||n==="--keeper-child")){if(n==="--stall-ms"){t+1<e.length&&!e[t+1].startsWith("--")&&(t+=1);continue}n.startsWith("--stall-ms=")||n.startsWith("--supervised=")||r.push(n)}}return r.push("--keeper-child"),r}async function Gs(e,r=process.argv.slice(2)){let t=String(N(String(e.agentOsId||v().agentOsId||""),"--agent-os-id")),n=hP(e.stallMs),o=RP(r),s=process.argv[1],i=!1,a=null,l=0,c=u=>{i=!0,rt("stop",{signal:u}),a?.pid&&a.kill(u)};for(process.on("SIGINT",()=>c("SIGINT")),process.on("SIGTERM",()=>c("SIGTERM")),rt("start",{agentOsId:t,stallMs:n,childArgv:o});!i;){let u=Date.now(),d=!1,m=null,f=null;for(a=dP(process.execPath,[s,...o],{stdio:"inherit",env:process.env}),rt("child_spawned",{pid:a.pid??null}),a.on("exit",(k,g)=>{d=!0,m=k,f=g});!d&&!i&&(await pr(jg),!(d||i));){if(Date.now()-u<$g)continue;let k=Hu(t),g=k&&k.pid===a.pid?k:null;if(g&&Fu(g,n)){rt("stall_detected",{pid:a.pid??null,lastBeatAt:g.observedAt,stallMs:n}),a.kill("SIGTERM"),await pr(Kg),d||a.kill("SIGKILL");break}if(!g&&Date.now()-u>n+$g){rt("no_heartbeat_detected",{pid:a.pid??null,stallMs:n}),a.kill("SIGTERM"),await pr(Kg),d||a.kill("SIGKILL");break}}for(;!d&&!i;)await pr(jg);if(i)break;let p=Date.now();yP(u,p)&&(l=0),l+=1;let h=kP(l);rt("child_exited",{code:m,signal:f,uptimeMs:p-u,consecutiveFailures:l,respawnInMs:h}),await pr(h)}rt("stopped",{agentOsId:t})}Se();M();import{existsSync as PP,mkdirSync as EP}from"node:fs";import AP from"node:path";M();Or();import{existsSync as bP,readFileSync as vP}from"node:fs";import Vg from"node:path";J();w();function SP(e){if(!e||!bP(e))return 0;try{return vP(e,"utf8").trim().length}catch{return 0}}function wP(e,r){let t=Vg.join(x(e.id),"workers",b(r),"worker.json"),n=_(t,void 0);if(!n)return{worker:r,workerStatus:"missing",attention:"needs_attention",attentionReason:"worker.json missing",missingHeartbeat:!0,missingFinalResult:!0,landingBlocked:!1,completionBlocked:!1};let o=T(n,{base:e.base,baseCommit:e.baseCommit}),s=SP(n.heartbeatPath)===0,i=!o.finalResult&&!o.alive,a=typeof n.completionBlocker=="string"&&n.completionBlocker.length>0;return{worker:r,workerStatus:n.status,attention:o.attention.state,attentionReason:o.attention.reason,missingHeartbeat:s,missingFinalResult:i,landingBlocked:bt(o),completionBlocked:a}}function CP(e){return e.openWorkerCount>0?"active_workers":e.workers.some(r=>r.completionBlocked)?"completion_blocked":e.workers.some(r=>r.landingBlocked)?"landing_blocked":null}function _P(e){let r={blocked:5,needs_attention:4,stale:3,done:2,ok:1},t="ok",n;for(let o of e){let s=o.attention;(r[s]??0)>=(r[t]??0)&&(t=s,n=o.attentionReason)}return{attention:t,attentionReason:n}}function xP(e){let r=0;for(let t of fe(e)){let n=Vg.join(x(e.id),"workers",b(t),"worker.json"),o=_(n,void 0);if(!o)continue;let s=T(o,{base:e.base,baseCommit:e.baseCommit});s.alive&&!s.finalResult&&(r+=1)}return r}function Zn(){return Gn(),Y().map(e=>{let t=fe(e).map(d=>wP(e,d)),n=t.filter(d=>d.missingHeartbeat).map(d=>d.worker),o=t.filter(d=>d.missingFinalResult).map(d=>d.worker),s=t.filter(d=>d.landingBlocked).map(d=>d.worker),i=t.filter(d=>d.completionBlocked).map(d=>d.worker),{attention:a,attentionReason:l}=_P(t),c=xP(e),u=mn(e.status,t.map(d=>({attention:d.attention,status:d.workerStatus})));return{id:e.id,name:e.name,status:e.status,effectiveStatus:u,repo:e.repo,createdAt:e.createdAt,openWorkerCount:c,attention:a,attentionReason:l,finalizeBlockedReason:CP({run:e,workers:t,openWorkerCount:c}),evidence:{missingHeartbeatWorkers:n,missingFinalResultWorkers:o,landingBlockedWorkers:s,completionBlockedWorkers:i,workers:t}}})}function Gg(){console.log(JSON.stringify(Zn(),null,2))}w();function IP(e){let r=typeof e.repo=="string"?e.repo.trim():"";if(r)return r;let t=He();return t?t.repo:(N("","--repo (or set defaultRepo via `kynver setup` / KYNVER_DEFAULT_REPO)"),"")}function Ys(e){let r=Tp(IP(e));Rc(r);let t=e.id?gs(String(e.id)):fc(String(e.name||"run")),n=x(t);PP(n)&&OP(`run already exists: ${t}`),EP(n,{recursive:!0});let o=String(e.base||"origin/main"),s=pe(r,["rev-parse",o]).trim(),i={id:t,name:String(e.name||t),repo:r,base:o,baseCommit:s,status:"created",createdAt:new Date().toISOString(),workers:{}};de(AP.join(n,"run.json"),i);let a={runId:t,runDir:n,repo:r,base:o,baseCommit:s};return console.log(JSON.stringify(a,null,2)),a}function Yg(){Gg()}function OP(e){console.error(e),process.exit(1)}M();import{existsSync as zs}from"node:fs";async function Js(e=or()){let r=await Br(e.storePath).catch(()=>[]),t=await Go(e.statePath).catch(()=>({version:1,jobs:{}})),n=!!(e.fireBaseUrl&&e.secret),o=jo(e),s="disabled";return o?s="kynver-cron-daemon":process.env.QSTASH_TOKEN?.trim()&&(s="qstash"),{primary:s,env:{storePath:e.storePath,statePath:e.statePath,tickEnabled:e.tickEnabled,fireBaseUrl:e.fireBaseUrl,missedRunPolicy:e.missedRunPolicy,maxCatchUpPerTick:e.maxCatchUpPerTick,maxRetries:e.maxRetries},jobCount:r.length,stateJobCount:Object.keys(t.jobs).length,credentialsReady:n,daemonPrimary:o}}import{homedir as UP}from"node:os";import WP from"node:path";import{existsSync as Jg,mkdirSync as NP,readFileSync as qg,writeFileSync as TP}from"node:fs";import{homedir as DP}from"node:os";import zg from"node:path";var _r=zg.join(DP(),".kynver",".env");function Rl(e){let r=new Map;for(let t of e.split(/\r?\n/)){let n=t.trim();if(!n||n.startsWith("#"))continue;let o=n.indexOf("=");if(o<=0)continue;let s=n.slice(0,o).trim(),i=n.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),r.set(s,i)}return r}function MP(e,r=`# Managed by kynver cron install \u2014 safe to edit; re-run install to merge keys.
 `){let t=[r.trimEnd(),""];for(let[n,o]of[...e.entries()].sort(([s],[i])=>s.localeCompare(i))){let s=o.includes(" ")||o.includes("#")||o.includes('"')?`"${o.replace(/\\/g,"\\\\").replace(/"/g,'\\"')}"`:o;t.push(`${n}=${s}`)}return t.push(""),t.join(`
-`)}function Fs(e=wr){return Bg(e)?pl(Lg(e,"utf8")):new Map}function Fg(e,r={}){let t=r.filePath??wr,n=Bg(t)?Lg(t,"utf8"):"",o=pl(n),s=[],i=[];for(let u of r.removeKeys??[])o.delete(u)&&i.push(u);for(let[u,d]of Object.entries(e)){if(d===void 0)continue;let f=o.get(u);o.set(u,d),f!==d&&s.push(u)}let a=pl(n),l=a.size!==o.size;if(!l){for(let[u,d]of o)if(a.get(u)!==d){l=!0;break}}let c=vP(o);return l&&(yP(Hg.dirname(t),{recursive:!0}),RP(t,c,{mode:384})),{path:t,changed:l,keysWritten:s,keysRemoved:i}}var Cr="watchdog:board-sweep",CP="*/5 * * * *",_P=["Set KYNVER_SCHEDULER_PROVIDER=kynver-cron on the hosted Kynver deployment (Vercel).","Set KYNVER_CRON_SECRET to the same value written to ~/.kynver/.env by this installer.","Unset KYNVER_CRON_STORE_PATH on Vercel \u2014 the connected box owns the local store.","Keep QSTASH_TOKEN only if other non-watchdog schedules still use QStash (analyst/market jobs)."];function $g(e){let r=e.storePath?.trim()||hr(),t=e.envFilePath?.trim()||wr,n=wP.join(SP(),".kynver","config.json"),o=`/api/agent-os/by-id/${e.agentOsId}/scheduler/fire`,s=[];e.apiBaseUrl?.trim()||s.push("apiBaseUrl \u2014 run `kynver setup --api-base-url \u2026`"),e.agentOsId?.trim()||s.push("agentOsId \u2014 run `kynver setup --agent-os-id \u2026`");let i={KYNVER_API_URL:e.apiBaseUrl,KYNVER_CRON_SECRET:e.cronSecret,KYNVER_CRON_STORE_PATH:r,KYNVER_CRON_TICK_ENABLED:"1"},a=["OPENCLAW_CRON_STORE_PATH","OPENCLAW_CRON_SECRET","OPENCLAW_CRON_FIRE_BASE_URL"],l={deploymentSchedulerProvider:"kynver-cron",apiBaseUrl:e.apiBaseUrl,agentOsId:e.agentOsId,...e.defaultDaemonRunId?{defaultDaemonRunId:e.defaultDaemonRunId}:{}};return{envFilePath:t,configPath:n,storePath:r,envUpdates:i,envRemovals:a,configUpdates:l,deploymentSteps:_P,prerequisites:s,systemdSupported:process.platform==="linux",watchdogSpec:{kind:"watchdog",cron:CP,dedupeKey:Cr,callbackPath:o}}}async function jt(e){let r=e.envFilePath??wr,t=[],n=nr(),o=await Hs(n),s=Fs(r);t.push({id:"config_agent_os",ok:!!e.config.agentOsId?.trim(),summary:e.config.agentOsId?`agentOsId configured (${e.config.agentOsId})`:"agentOsId missing in ~/.kynver/config.json",remediation:"Run `kynver setup --agent-os-id <id>`."}),t.push({id:"config_api_base",ok:!!(e.config.apiBaseUrl?.trim()||n.fireBaseUrl),summary:n.fireBaseUrl?`fire base URL resolved (${n.fireBaseUrl})`:"KYNVER_API_URL / apiBaseUrl not configured",remediation:"Run `kynver setup --api-base-url https://\u2026`."}),t.push({id:"deployment_provider",ok:e.config.deploymentSchedulerProvider==="kynver-cron",summary:`deploymentSchedulerProvider=${e.config.deploymentSchedulerProvider??"(unset)"}`,remediation:'Run `kynver cron install` or set deploymentSchedulerProvider to "kynver-cron".'}),t.push({id:"cron_secret",ok:!!n.secret,summary:n.secret?"KYNVER_CRON_SECRET present":"KYNVER_CRON_SECRET missing",remediation:"Run `kynver cron install` to generate and persist the shared secret."}),t.push({id:"env_file",ok:$s(r)&&!!s.get("KYNVER_CRON_SECRET"),summary:$s(r)?`~/.kynver/.env present (${s.size} keys)`:"~/.kynver/.env missing",remediation:"Run `kynver cron install` to write ~/.kynver/.env."}),t.push({id:"cron_store",ok:$s(n.storePath),summary:$s(n.storePath)?`cron store present (${n.storePath})`:`cron store missing (${n.storePath})`,remediation:"Run `kynver cron install` to initialize the local store."});let a=(await Ur(n.storePath).catch(()=>[])).find(u=>u.spec.dedupeKey===Cr);t.push({id:"watchdog_local",ok:!!a,summary:a?`watchdog entry in local store (${a.providerScheduleId})`:"watchdog entry not mirrored in local cron store",remediation:"Run `kynver cron install` (with API access) to register and mirror watchdog."}),t.push({id:"daemon_primary",ok:o.daemonPrimary,summary:o.daemonPrimary?"cron tick enabled with credentials (daemon-primary)":`cron primary=${o.primary}; tickEnabled=${o.env.tickEnabled}`,remediation:"Ensure KYNVER_CRON_TICK_ENABLED=1 and run `kynver daemon` (or enable the systemd user unit)."});let l=s.has("OPENCLAW_CRON_STORE_PATH")||s.has("OPENCLAW_CRON_SECRET")||s.has("OPENCLAW_CRON_FIRE_BASE_URL");return t.push({id:"legacy_openclaw_env",ok:!l,summary:l?"legacy OPENCLAW_CRON_* keys still present in ~/.kynver/.env":"no legacy OPENCLAW_CRON_* keys in env file",remediation:"Re-run `kynver cron install` to retire legacy aliases."}),{ok:t.every(u=>u.ok),checks:t}}I();Qe();w();import{existsSync as nh}from"node:fs";import{createHash as xP}from"node:crypto";function Kg(e){let r=JSON.stringify({cb:e.callbackPath,cron:e.cron??null,runAt:e.runAt??null,kind:e.kind,target:e.target,dedupeKey:e.dedupeKey??null});return`kc-cron:${xP("sha1").update(r).digest("hex").slice(0,16)}`}async function ml(e,r,t={}){return fetch(e,{...t,headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`,...t.headers}})}async function jg(e,r,t,n={}){let o=new URLSearchParams(n),s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs?${o}`,i=await ml(s,t),a=await i.text(),l=null;try{l=JSON.parse(a)}catch{l=null}if(!i.ok)throw new Error(`list scheduler jobs failed (${i.status}): ${l?.error??a.slice(0,200)}`);return l?.items??[]}async function Vg(e,r,t,n,o={}){let s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/watchdog/ensure`,i={};n&&(i.cron=n),o.requireProvider&&(i.requireProvider=o.requireProvider);let a=await ml(s,t,{method:"POST",body:JSON.stringify(i)}),l=await a.text(),c=null;try{c=JSON.parse(l)}catch{c=null}if(!a.ok||!c?.job)throw new Error(`ensure watchdog failed (${a.status}): ${c?.error??l.slice(0,200)}`);return{job:c.job,route:c.route??`/api/agent-os/by-id/${r}/scheduler/fire`,dedupeKey:c.dedupeKey??Cr,requestedCron:c.requestedCron??n??"*/5 * * * *",selectedProvider:c.selectedProvider??c.job.provider??null}}async function Gg(e,r,t,n){let o=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs/${encodeURIComponent(t)}/cancel`,s=await ml(o,n,{method:"POST",body:"{}"});if(!s.ok){let i=await s.text();throw new Error(`cancel job ${t} failed (${s.status}): ${i.slice(0,200)}`)}}function Yg(e,r,t=Cr){return{kind:"watchdog",scheduleKind:"cron",cron:r,callbackPath:`/api/agent-os/by-id/${e}/scheduler/fire`,payload:{source:"agent-os.watchdog-schedule",agentOsId:e},target:{agentOsId:e},description:"Watchdog board sweep (repair loop)",dedupeKey:t}}function Jg(e){return e.filter(r=>r.kind==="watchdog"&&r.dedupeKey===Cr&&r.provider==="qstash"&&r.status!=="cancelled")}function PP(e){return e.find(r=>r.kind==="watchdog"&&r.dedupeKey===Cr&&r.provider==="kynver-cron"&&r.status!=="cancelled")}function qg(e){return PP(e)?{allowed:!0}:{allowed:!1,reason:"Cannot cancel QStash watchdog until hosted KYNVER_SCHEDULER_PROVIDER=kynver-cron is live and a kynver-cron watchdog row exists. Set Vercel env, redeploy, re-run `kynver cron install`, then `--confirm-qstash-removal`."}}import{randomBytes as EP}from"node:crypto";function AP(){return EP(32).toString("base64url")}function zg(e=wr){let r=Oi();if(r)return{secret:r,generated:!1,source:"env"};let n=Fs(e).get("KYNVER_CRON_SECRET")?.trim();return n?{secret:n,generated:!1,source:"env-file"}:{secret:AP(),generated:!0,source:"generated"}}import{realpathSync as IP}from"node:fs";function Ks(e=process.argv[1]){let r=process.env.KYNVER_BIN?.trim();if(r)return r;let t=e?.trim();if(!t)return"kynver";try{return IP.native(t)}catch{return t}}function Xg(e){return/\s/.test(e)?`"${e.replace(/"/g,'\\"')}"`:e}import{existsSync as NP,mkdirSync as TP,writeFileSync as DP}from"node:fs";import{homedir as MP}from"node:os";import eh from"node:path";import{spawnSync as Zg}from"node:child_process";import{spawnSync as OP}from"node:child_process";var fl="1.5G";var qn;function zn(){return process.env.KYNVER_BUILD_SKIP_SYSTEMD==="1"||process.env.KYNVER_BUILD_SKIP_SYSTEMD==="true"?!1:qn!==void 0?qn:process.platform!=="linux"?(qn=!1,!1):(qn=OP("systemd-run",["--version"],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}).status===0,qn)}function gl(e){let r=e.memoryMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_MAX??fl,t=e.memorySwapMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_SWAP_MAX??"2G",n=["systemd-run","--scope","--collect","-p",`MemoryMax=${r}`,"-p",`MemorySwapMax=${t}`];return e.cwd&&n.push("--working-directory",e.cwd),n.push("--",...e.command),n}var hl="kynver-cron-daemon.service";function UP(){return eh.join(MP(),".config","systemd","user")}function WP(e){let r=Xg(e.kynverBin?.trim()||Ks());return["[Unit]","Description=Kynver AgentOS daemon (pipeline + cron tick)","After=network-online.target","","[Service]","Type=simple",`EnvironmentFile=${e.envFilePath}`,`ExecStart=${r} daemon --run ${e.runId} --agent-os-id ${e.agentOsId} --execute`,"Restart=on-failure","RestartSec=10","","[Install]","WantedBy=default.target",""].join(`
-`)}function rh(e,r){if(!zn())return{supported:!1,unitPath:null,written:!1,enabled:!1,started:!1,note:process.platform==="linux"?"systemd-run not available \u2014 install user service manually or run `kynver daemon` under your supervisor.":"systemd user units are only supported on Linux; use `kynver daemon` manually on macOS/Windows."};let t=UP(),n=eh.join(t,hl),o=WP(e);if(!r)return{supported:!0,unitPath:n,written:!1,enabled:!1,started:!1,note:"Dry-run \u2014 pass --execute to write and enable the user unit."};TP(t,{recursive:!0});let s=NP(n);DP(n,o,"utf8");let i=Zg("systemctl",["--user","daemon-reload"],{encoding:"utf8"});if(i.status!==0)return{supported:!0,unitPath:n,written:!0,enabled:!1,started:!1,note:`Wrote ${n} but systemctl --user daemon-reload failed: ${i.stderr||i.stdout}`};let a=Zg("systemctl",["--user","enable","--now",hl],{encoding:"utf8"});return{supported:!0,unitPath:n,written:!s||!0,enabled:a.status===0,started:a.status===0,note:a.status===0?`Enabled and started ${hl}`:`Wrote ${n} but enable failed: ${a.stderr||a.stdout}`}}W();function th(e,r){if(r?.trim())return r.trim();if(e.defaultDaemonRunId?.trim())return e.defaultDaemonRunId.trim();let t=te().runsDir;return nh(t)?Y().sort((o,s)=>Date.parse(s.createdAt)-Date.parse(o.createdAt))[0]?.id??null:null}async function js(e={}){let r=e.execute!==!1,t=v(),n=ze(e.apiBaseUrl?.trim()||t.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||""),o=e.agentOsId?.trim()||t.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||"",s=zg(),i=$g({config:t,apiBaseUrl:n,agentOsId:o,cronSecret:s.secret,defaultDaemonRunId:e.runId?.trim()||t.defaultDaemonRunId,installSystemd:e.installSystemd===!0}),a=[...i.prerequisites],l={ok:!1,dryRun:!r,plan:i,secretGenerated:s.generated,configPath:q(i.configPath),storeInitialized:!1,blockers:a};if(a.length)return l;if(r){let c=Fg(i.envUpdates,{filePath:i.envFilePath,removeKeys:i.envRemovals});l.envFile={path:q(c.path),changed:c.changed,keysWritten:c.keysWritten};let u={...t,...i.configUpdates},d=th(u,e.runId);d&&(u.defaultDaemonRunId=d),rr(u),process.env.KYNVER_API_URL=n,process.env.KYNVER_CRON_SECRET=s.secret,process.env.KYNVER_CRON_STORE_PATH=i.storePath,process.env.KYNVER_CRON_TICK_ENABLED="1";let f=await Gu(i.storePath);l.storeInitialized=f.created||nh(i.storePath);let m=ne();if(m)try{let p=await Dr(o,{baseUrl:n,apiKey:m});Tr(o,p)}catch{}if(!e.skipWatchdog)if(!m)l.watchdog={error:"KYNVER_API_KEY required to register watchdog on server"},a.push("login \u2014 run `kynver login --api-key \u2026` to register watchdog remotely");else try{let p=await Vg(n,o,m,void 0,{requireProvider:"kynver-cron"}),g=Yg(o,p.requestedCron,p.dedupeKey),k={providerScheduleId:Kg(g),spec:g,registeredAt:new Date().toISOString(),paused:!1};await Vu(k,i.storePath),l.watchdog={remoteJobId:p.job.id,provider:p.selectedProvider??p.job.provider,localProviderScheduleId:k.providerScheduleId};let h=await jg(n,o,m),b=Jg(h),x=["Phase 1 (local): `kynver cron install` writes box env/store and may fail remote watchdog until Vercel cutover.","Phase 2 (hosted): set KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET on Vercel, redeploy, re-run install.","Phase 3 (cleanup): `kynver cron install --confirm-qstash-removal` after a kynver-cron watchdog row exists.","Analyst/market QStash schedules are never touched by this installer."],M=[];if(b.length)if(e.confirmQstashRemoval){let E=qg(h);if(!E.allowed)a.push(E.reason);else for(let T of b)await Gg(n,o,T.id,m),M.push(T.id)}else a.push(`${b.length} QStash watchdog job(s) still active \u2014 complete Vercel cutover (KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET), re-run install, then --confirm-qstash-removal`);l.qstashWatchdog={found:b.map(E=>({id:E.id,provider:E.provider,status:E.status})),removed:M,manualSteps:x}}catch(p){l.watchdog={error:p.message},a.push(`watchdog registration failed: ${p.message}`)}if(e.installSystemd){let p=th({...t,...i.configUpdates},e.runId);if(!p)l.systemd={supported:i.systemdSupported,unitPath:null,written:!1,enabled:!1,started:!1,note:"No harness run found \u2014 run `kynver run create` first or pass --run <runId>."},a.push("harness run \u2014 create a run before installing systemd unit");else{try{B(p)}catch{a.push(`harness run ${p} not found`)}l.systemd=rh({envFilePath:i.envFilePath,agentOsId:o,runId:p,kynverBin:Ks()},r)}}if(!e.skipTestFire&&a.length===0){let p=await _t({agentOsIdFilter:o});l.testFire={fired:p.fired,errors:p.errors},p.errors>0&&a.push(`test fire reported ${p.errors} error(s) \u2014 check server KYNVER_CRON_SECRET matches`)}else e.skipTestFire&&(l.testFire={fired:0,errors:0,skipped:!0});l.verify=await jt({config:v(),envFilePath:i.envFilePath}),l.blockers=a,l.ok=a.length===0&&(l.verify?.ok??!1)}else l.ok=a.length===0;return l}var BP=["deployment_provider","cron_secret","env_file","cron_store"];function oh(e){let r=e?.trim().toLowerCase();if(r==="qstash"||r==="kynver-cron"||r==="openclaw-cron")return r;if(r==="openclaw")return"openclaw-cron"}function LP(e){let r=oh(process.env.KYNVER_SCHEDULER_PROVIDER);if(r==="qstash"||r==="openclaw-cron")return!1;if(r==="kynver-cron")return!0;let t=oh(e.deploymentSchedulerProvider);return t==="qstash"||t==="openclaw-cron"?!1:t==="kynver-cron"?!0:!!(e.agentOsId?.trim()&&e.apiBaseUrl?.trim())}async function HP(e){if(!LP(e))return{expectsKynverCron:!1,ready:!0,failedChecks:[]};let t=(await jt({config:e})).checks.filter(n=>BP.includes(n.id)&&!n.ok);return{expectsKynverCron:!0,ready:t.length===0,failedChecks:t}}function FP(e){let r=["Run `kynver cron install` on this box."];for(let t of e)t.remediation&&r.push(`  \u2022 ${t.id}: ${t.remediation}`);return r}function kl(e){return e===!0||e==="true"||e==="1"||e==="yes"||e==="on"}async function sh(e){if(kl(e.args.skipCron))return{action:"skipped"};let r=await HP(e.config);if(!r.expectsKynverCron||r.ready)return{action:"ready"};console.log(""),console.log("  Local Kynver Cron is not ready \u2014 running `kynver cron install`\u2026");let t=kl(e.args.installSystemd)||kl(e.args["install-systemd"]),n=await js({execute:!0,skipTestFire:!0,agentOsId:e.agentOsId,runId:e.runId,installSystemd:t});if(n.ok)return console.log("  Kynver Cron configured for this box."),console.log(""),{action:"installed",installOk:!0};console.log(""),console.log("  Cron install did not fully complete (daemon will still start):");for(let o of n.blockers)console.log(`    ! ${o}`);if(n.plan.deploymentSteps.length){console.log(""),console.log("  Hosted deployment (complete on Vercel, then re-run install):");for(let o of n.plan.deploymentSteps)console.log(`    - ${o}`)}for(let o of FP(r.failedChecks))console.log(`  ${o}`);return console.log(""),{action:"guided",installOk:!1,blockers:n.blockers}}function KP(e,r){return e.filter(n=>n.repo===r&&!sr.has(n.status)).sort((n,o)=>(o.createdAt??"").localeCompare(n.createdAt??""))[0]?.id??null}async function ih(e){Ct();let r=v();(!ne()||!r.agentOsId?.trim())&&(console.log("  This machine isn't linked yet \u2014 running bootstrap first."),await Uo(e),r=v());let t=(typeof e.agentOsId=="string"?e.agentOsId.trim():"")||r.agentOsId?.trim()||"";t||(console.error("No AgentOS workspace configured \u2014 run `kynver bootstrap` (or pass --agent-os-id)."),process.exit(1)),e.chatOauth===!0&&r.chatUseClaudeOauth!==!0&&(rr({...r,chatUseClaudeOauth:!0}),r=v(),console.log("  Chat: Claude Code OAuth opt-in saved (delegated turns may use your local subscription)."));let n=(typeof e.repo=="string"?e.repo.trim():"")||r.defaultRepo?.trim()||Le()?.repo||"";n||(console.error("No repo configured \u2014 pass --repo /path/to/repo or run `kynver setup --discover-repo`."),process.exit(1));let o=typeof e.run=="string"&&e.run.trim()?e.run.trim():"";o||(o=KP(Y(),n)??"",o?console.log(`  Reusing run ${o} for ${n}.`):o=Ls({...e,repo:n,name:"agent"}).runId),await sh({config:r,agentOsId:t,runId:o,args:e}),console.log(""),console.log(`  ${$P.hostname()} \u2014 agent coming online`),console.log(`    workspace: ${t}`),console.log(`    repo:      ${n}`),console.log(`    run:       ${o}`),console.log("  Ctrl-C stops the agent. (Advanced control: `kynver daemon --help`.)"),console.log("");let s={...e,run:o,agentOsId:t};if(Ws(s)){await Bs(s,jP(o,t,e));return}await Us(s)}function jP(e,r,t){let n=["daemon","--run",e,"--agent-os-id",r];return typeof t.intervalMs=="string"&&t.intervalMs.trim()&&n.push("--interval-ms",t.intervalMs.trim()),(t.execute===!1||t.execute==="false")&&n.push("--execute","false"),typeof t.stallMs=="string"&&t.stallMs.trim()&&n.push("--stall-ms",t.stallMs.trim()),n}W();W();J();import{existsSync as VP,rmSync as GP}from"node:fs";import yl from"node:path";function YP(e){let r=e.replace(/\\/g,"/").replace(/^\.\//,"").trim();if(!r||r.startsWith("/")||r.includes(".."))throw new Error(`unsafe path: ${e}`);return r}function JP(e){return typeof e!="string"||!e.trim()?[]:e.split(",").map(r=>r.trim()).filter(Boolean)}function qP(e){let{runId:r,workerName:t}=je(e),n=Re(r,t),o=[...JP(e.path),...Array.isArray(e.paths)?e.paths:[]];if(o.length===0)return{ok:!1,removed:[],reason:"requires at least one --path"};let s=yl.resolve(n.worktreePath),i=[];for(let c of o){let u=YP(c),d=yl.resolve(s,u);if(!d.startsWith(s+yl.sep)&&d!==s)return{ok:!1,removed:i,reason:`path escapes worktree: ${c}`};if(!VP(d))return{ok:!1,removed:i,reason:`path not found: ${c}`};GP(d,{recursive:!0,force:!0}),i.push(u)}let a=Array.isArray(n.disposableArtifactsRemoved)?n.disposableArtifactsRemoved.filter(c=>typeof c=="string"):[];n.disposableArtifactsRemoved=[...new Set([...a,...i])],G(n.runId,n);let l=N(n);return{ok:!0,removed:i,...l.changedFiles.length?{reason:"worktree still has other changes"}:{}}}function ah(e){let r=qP(e);console.log(JSON.stringify(r,null,2)),r.ok||process.exit(1)}I();import vE from"node:path";ho();var zP=/--max-old-space-size=(\d+)/;function XP(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Rl(){return XP(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB,1024)}function bl(e=process.env){let r={...e};if(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB==="0")return r;let t=r.NODE_OPTIONS??"";if(zP.test(t))return r;let o=`--max-old-space-size=${Rl()}`;return r.NODE_OPTIONS=t.trim()?`${t.trim()} ${o}`:o,r}function Vt(e=Rl()){return`--max-old-space-size=${e}`}I();import{spawnSync as QP}from"node:child_process";ho();function Vs(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function ch(e=v()){let r=process.env.KYNVER_BUILD_MEM_BUDGET_BYTES?Vs(process.env.KYNVER_BUILD_MEM_BUDGET_BYTES,1610612736):void 0,t=process.env.KYNVER_BUILD_MEM_RESERVE_BYTES?Vs(process.env.KYNVER_BUILD_MEM_RESERVE_BYTES,2147483648):void 0;return{perBuildBudgetBytes:r??Vs(e.perWorkerMemBytes,1610612736),reserveBytes:t??Vs(e.memReserveBytes,2147483648)}}var Gs=0;function wl(){Gs+=1}function Cl(){Gs=Math.max(0,Gs-1)}function Gt(e={}){let r={...ch(),...e},t=e.memAvailableBytes??rn(),n=r.perBuildBudgetBytes+r.reserveBytes,o=t>=n;return{admitted:o,memAvailableBytes:t,requiredBytes:n,activeBuilds:Gs,reason:o?null:`insufficient memory: need ${n} bytes available (budget ${r.perBuildBudgetBytes} + reserve ${r.reserveBytes}), have ${t}`}}function ZP(e){e<=0||QP(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function _l(e,r=2e3,t={}){let n=Date.now()+Math.max(0,e),o=Gt({...t,memAvailableBytes:t.memAvailableBytes?.()});for(;!o.admitted&&Date.now()<n;)ZP(Math.min(r,n-Date.now())),o=Gt({...t,memAvailableBytes:t.memAvailableBytes?.()});return o}import{spawnSync as RE}from"node:child_process";w();import{closeSync as nE,existsSync as xl,mkdirSync as oE,openSync as sE,readdirSync as dh,readFileSync as iE,unlinkSync as El,writeFileSync as aE}from"node:fs";import Al from"node:path";import{mkdirSync as eE}from"node:fs";import{tmpdir as rE}from"node:os";import Ys from"node:path";function tE(){return!!(process.env.VERCEL||process.env.VERCEL_ENV||process.env.AWS_LAMBDA_FUNCTION_NAME||process.env.AWS_EXECUTION_ENV)}function uh(){let e=process.env.KYNVER_HEAVY_VERIFICATION_STATE_ROOT;return e?Ys.resolve(e):tE()?Ys.join(rE(),"kynver","state","heavy-verification"):Ys.join(fs(),"heavy-verification")}function Xn(){return Ys.join(uh(),"slots")}function Yt(){let e=Xn();return eE(e,{recursive:!0}),e}var Jt=120*6e4,Pl=1;function lE(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Zn(){let e=process.env.KYNVER_HEAVY_VERIFICATION_SKIP?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function Qn(){let e=process.env.KYNVER_HEAVY_VERIFICATION_MAX_CONCURRENT;return e?lE(e,Pl):Pl}function cE(e){return`slot-${e}`}function ph(e,r=Xn()){return Al.join(r,`${e}.json`)}function Il(e){if(!xl(e))return null;try{let r=JSON.parse(iE(e,"utf8"));if(typeof r.slotId=="string"&&typeof r.pid=="number"&&typeof r.acquiredAt=="string"&&typeof r.command=="string")return r}catch{return null}return null}function Js(e,r=Jt){if(!e||!F(e.pid))return!0;let t=Date.parse(e.acquiredAt);return Number.isNaN(t)?!0:Date.now()-t>r}function uE(e,r){let t=Il(e);if(Js(t,r))try{El(e)}catch{}}function dE(e){return oE(e,{recursive:!0}),e}function zs(e={}){let r=dE(e.slotsDir??Yt()),t=e.staleMs??Jt,n=0;for(let o of dh(r)){if(!o.endsWith(".json"))continue;let s=Al.join(r,o),i=xl(s);uE(s,t),i&&!xl(s)&&(n+=1)}return n}function mh(e={}){let r=e.slotsDir??Yt(),t=e.staleMs??Jt;zs({slotsDir:r,staleMs:t});let n=[];for(let o of dh(r)){if(!o.endsWith(".json"))continue;let s=Il(Al.join(r,o));s&&!Js(s,t)&&n.push(s)}return n}function qs(e={}){return mh(e).length}function qt(e,r={}){if(Zn())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:Qn(),reason:null};let t=r.slotsDir??Yt(),n=r.staleMs??Jt,o=r.maxSlots??Qn();zs({slotsDir:t,staleMs:n});for(let i=0;i<o;i+=1){let a=cE(i),l=ph(a,t),c=Il(l);if(c&&Js(c,n))try{El(l)}catch{}else if(c&&!Js(c,n))continue;let u={slotId:a,pid:process.pid,acquiredAt:new Date().toISOString(),command:e};try{let d=sE(l,"wx");aE(d,JSON.stringify(u,null,2),"utf8"),nE(d);let f=qs({slotsDir:t,staleMs:n});return{admitted:!0,slotId:a,activeSlots:f,maxSlots:o,reason:null}}catch(d){if(d.code==="EEXIST")continue;throw d}}let s=qs({slotsDir:t,staleMs:n});return{admitted:!1,slotId:null,activeSlots:s,maxSlots:o,reason:`heavy verification at capacity (${s}/${o} slots)`}}function eo(e,r={}){if(!e)return;let t=ph(e,r.slotsDir??Xn());try{El(t)}catch{}}function ro(e,r={}){if(Zn())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:Qn(),reason:null};let t=r.slotsDir??Yt(),n=r.staleMs??Jt,o=r.maxSlots??Qn();zs({slotsDir:t,staleMs:n});let s=qs({slotsDir:t,staleMs:n}),i=s<o;return{admitted:i,slotId:null,activeSlots:s,maxSlots:o,reason:i?null:`heavy verification at capacity (${s}/${o} slots); waiting for ${e}`}}import{spawnSync as pE}from"node:child_process";function mE(e){e<=0||pE(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function Ol(e,r,t=2e3,n={}){let o=Date.now()+Math.max(0,r),s=qt(e,n);for(;!s.admitted&&Date.now()<o;)mE(Math.min(t,o-Date.now())),s=qt(e,n);return s}var fE=/\b(npm run typecheck|tsc\b[^|&;]*--noEmit|node scripts\/verify-pr-local\.mjs|kynver (harness )?verify)\b/i,gE=/\b(npm run build\b|next build\b)\b/i,hE=/\b(vercel (build|deploy|--prod))\b/i,kE=/\b(openai|anthropic|perplexity|voyage)\b.*\b(api|cli)\b|\b(paid|billable)[-_ ]?compute\b/i;function Nl(e){let r=e.trim();return r?kE.test(r)?{heavy:!0,commandClass:"paid_compute",reason:"paid external compute requires heavy-verification token and operator approval"}:hE.test(r)?{heavy:!0,commandClass:"vercel_verify",reason:"Vercel build/deploy verification requires heavy-verification token"}:gE.test(r)?{heavy:!0,commandClass:"full_build",reason:"full app build requires heavy-verification token"}:fE.test(r)?{heavy:!0,commandClass:"full_typecheck",reason:"full repo typecheck requires heavy-verification token"}:{heavy:!1,commandClass:"allowed",reason:null}:{heavy:!1,commandClass:"allowed",reason:null}}var Xs="heavy_verification_token_required";function Tl(e,r={}){let t=Nl(e);if(!t.heavy)return{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:"command does not require heavy-verification token",verificationGate:{...ro(e),slotId:null}};if(Zn())return{allowed:!0,outcome:"heavy_verification_skipped",commandClass:t.commandClass,reason:"KYNVER_HEAVY_VERIFICATION_SKIP bypasses gate",verificationGate:{...ro(e),slotId:null}};let n=r.waitMs??0,o=n>0?Ol(e,n,r.pollMs):qt(e);return o.admitted?{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:t.reason??"heavy-verification token acquired",verificationGate:o}:{allowed:!1,outcome:Xs,commandClass:t.commandClass,reason:t.reason??o.reason??Xs,verificationGate:o}}Ce();import Dl from"node:path";function yE(e){let r=fr(ye()),t=Dl.relative(r,Dl.resolve(e));return t.length>0&&!t.startsWith("..")&&!Dl.isAbsolute(t)}function fh(e){return yE(e)?(typeof process.getuid=="function"?process.getuid():null)===0?{ok:!1,reason:"Refusing build/install as root inside a harness worktree \u2014 generated caches become root-owned and block daemon cleanup. Run kynver daemon and workers as the harness owner (never sudo kynver)."}:{ok:!0}:{ok:!0}}function bE(e){let r=[];for(let[t,n]of Object.entries(e))n!==void 0&&r.push(`${t}=${n}`);return r}function gh(e,r){let t=RE(e[0],e.slice(1),{cwd:r.cwd,env:r.env,encoding:"utf8",stdio:["ignore","pipe","pipe"],shell:r.shell,timeout:r.timeoutMs});return{exitCode:t.status??1,stdout:(t.stdout??"").trim(),stderr:(t.stderr??"").trim()}}function Ml(e){let r=e.waitForAdmissionMs??6e5,t=Tl(e.command,{waitMs:r}),n=t.verificationGate;if(!t.allowed)return{ok:!1,exitCode:1,stdout:"",stderr:t.reason,admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:Vt(),admission:Gt(),verificationGate:n,gateOutcome:t.outcome,command:e.command};let o=n.slotId,s=r>0?_l(r):Gt();if(!s.admitted)return eo(o),{ok:!1,exitCode:1,stdout:"",stderr:s.reason??"build admission denied",admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:Vt(),admission:s,verificationGate:n,command:e.command};let i=fh(e.cwd);if(!i.ok)return eo(o),{ok:!1,exitCode:1,stdout:"",stderr:i.reason,admitted:!0,wrappedWithSystemd:!1,nodeOptionsFlag:Vt(),admission:s,verificationGate:n,command:e.command};let a=bl({...process.env,...e.env}),l=Vt(),c=zn();wl();try{let u;if(c){let d=gl({cwd:e.cwd,command:["/usr/bin/env",...bE(a),"/bin/bash","-lc",e.command]});u=gh(d,{cwd:e.cwd,env:a,timeoutMs:e.timeoutMs})}else u=gh([e.command],{cwd:e.cwd,env:a,shell:!0,timeoutMs:e.timeoutMs});return{ok:u.exitCode===0,exitCode:u.exitCode,stdout:u.stdout,stderr:u.stderr,admitted:!0,wrappedWithSystemd:c,nodeOptionsFlag:l,admission:s,verificationGate:n,gateOutcome:t.outcome,command:e.command}}finally{Cl(),eo(o)}}var Ul=["npm run typecheck","npm run test"];function Qs(e,r=Ul,t={}){let n=[],o=!0;for(let s of r){let i=Ml({cwd:e,command:s,waitForAdmissionMs:t.waitForAdmissionMs,timeoutMs:t.timeoutMs});n.push({command:s,result:i}),i.ok||(o=!1)}return{passed:o,steps:n}}w();function hh(e){let r=e.indexOf(":");if(r<=0)throw new Error(`invalid --evidence ${e} (expected type:value)`);return{type:e.slice(0,r),value:e.slice(r+1)}}async function kh(e){let r=O(e.plan?String(e.plan):void 0,"plan"),t=(e.agentOsId?String(e.agentOsId):v().agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=O(e.role?String(e.role):void 0,"role"),o=O(e.status?String(e.status):void 0,"status"),s=[],i=e.evidence;if(Array.isArray(i))for(let x of i)s.push(hh(String(x)));else typeof i=="string"&&s.push(hh(i));let a=$(e.baseUrl?String(e.baseUrl):void 0),l=await V(e.secret?String(e.secret):void 0,t,{baseUrl:a}),c=`${a}/api/agent-os/by-id/${encodeURIComponent(t)}/plans/${encodeURIComponent(r)}/progress-events`,u=v(),f=`provider:${jo(u.workerProvider,or)}`,p=(e.proposed===!0||e.proposed==="true"?!0:e.proposed===!1||e.proposed==="false"?!1:void 0)??(o!=="done"&&(n==="implementer"||n==="repair_implementer")),g={rowKey:e.row?String(e.row):void 0,rowId:e.rowId?String(e.rowId):void 0,taskId:e.task?String(e.task):void 0,reviewTaskId:e.reviewTask?String(e.reviewTask):void 0,roleLane:n,status:o,note:e.note?String(e.note):void 0,remainingWork:e.remaining?String(e.remaining):void 0,evidence:s.length?s:void 0,executorRef:e.executorRef?String(e.executorRef):f};p!==void 0&&(g.proposed=p);let k=await fetch(c,{method:"POST",headers:Ne(l),body:JSON.stringify(g)}),h=await k.text(),b=null;try{b=JSON.parse(h)}catch{b=h}k.ok||(console.error(JSON.stringify({httpStatus:k.status,response:b},null,2)),process.exit(1)),console.log(JSON.stringify(b,null,2))}function SE(e){let r=O(e.worktree?String(e.worktree):void 0,"worktree"),t=vE.resolve(r),n=Qs(t),o=e.json===!0||e.json==="true",s={passed:n.passed,worktree:t,steps:n.steps};console.log(o?JSON.stringify(s,null,2):n.passed?"local plan verify passed":"local plan verify failed"),n.passed||process.exit(1)}async function yh(e){let r=O(e.plan?String(e.plan):void 0,"plan");if(e.local===!0||e.local==="true"){SE(e);return}let n=v().agentOsSlug;n||(console.error("requires agentOsSlug in ~/.kynver/config.json for verify (session route)"),process.exit(1));let o=$(e.baseUrl?String(e.baseUrl):void 0),s=process.env.KYNVER_API_KEY,i={"Content-Type":"application/json"};s&&(i.Authorization=`Bearer ${s}`);let a=`${o}/api/agent-os/${encodeURIComponent(n)}/plans/${encodeURIComponent(r)}/verify`,l=await fetch(a,{method:"POST",headers:i,body:JSON.stringify({worktreePath:e.worktree?String(e.worktree):void 0,taskId:e.task?String(e.task):void 0,humanOverride:e.humanOverride===!0||e.humanOverride==="true"})}),c=await l.text(),u=null;try{u=JSON.parse(c)}catch{u=c}l.ok||(console.error(JSON.stringify({httpStatus:l.status,response:u},null,2)),process.exit(1)),console.log(JSON.stringify(u,null,2))}import wE from"node:path";w();function Rh(e){let r=wE.resolve(O(e.worktree?String(e.worktree):void 0,"worktree")),t=e.json===!0||e.json==="true"||e.emitJson===!0||e.emitJson==="true",n=[],o=e.command;if(Array.isArray(o))for(let a of o)n.push(String(a));else typeof o=="string"&&n.push(o);let s=Qs(r,n.length?n:Ul,{waitForAdmissionMs:e.waitForAdmissionMs?Number(e.waitForAdmissionMs):void 0,timeoutMs:e.timeoutMs?Number(e.timeoutMs):void 0}),i={passed:s.passed,worktree:r,steps:s.steps.map(a=>({command:a.command,ok:a.result.ok,exitCode:a.result.exitCode,admitted:a.result.admitted,wrappedWithSystemd:a.result.wrappedWithSystemd,nodeOptionsFlag:a.result.nodeOptionsFlag,admission:a.result.admission,verificationGate:a.result.verificationGate,stderr:a.result.stderr.slice(0,4e3)}))};if(t)console.log(JSON.stringify(i,null,2));else{console.log(s.passed?"harness verify passed":"harness verify failed");for(let a of i.steps)console.log(`  ${a.ok?"\u2713":"\u2717"} ${a.command} (exit ${a.exitCode}, systemd=${a.wrappedWithSystemd})`),!a.ok&&a.stderr&&console.log(`    ${a.stderr.split(`
-`)[0]}`)}process.exit(s.passed?0:1)}I();import{readFileSync as CE}from"node:fs";w();var _E=["create","add_version","update_metadata"],xE=["approval_guard","auth","network","server","tool_interruption"];function PE(e){let r=e.bodyFile?String(e.bodyFile):void 0;if(r)return{body:CE(r,"utf8"),bodyPathHint:r};let t=e.body?String(e.body):void 0;if(t)return{body:t};throw new Error("requires --body-file PATH or --body TEXT")}async function bh(e){let r=O(e.operation?String(e.operation):void 0,"operation");if(!_E.includes(r))throw new Error(`invalid --operation ${r}`);let t=r,n=v(),o=O(e.slug?String(e.slug):n.agentOsSlug,"slug (or agentOsSlug in ~/.kynver/config.json)"),s=O(e.title?String(e.title):void 0,"title"),{body:i,bodyPathHint:a}=PE(e);a&&Dn(a)&&console.warn(JSON.stringify({warning:"/tmp-only body path is not durable; AgentOS persistence requires outbox or successful API write",bodyPathHint:a}));let l={operation:t,agentOsSlug:o,title:s,body:i,bodyPathHint:a,summary:e.summary?String(e.summary):void 0,planId:e.plan?String(e.plan):void 0,planSlug:e.planSlug?String(e.planSlug):void 0,changeSummary:e.changeSummary?String(e.changeSummary):void 0,author:e.author?String(e.author):void 0,model:e.model?String(e.model):void 0,maxRetries:e.maxRetries?Number(e.maxRetries):void 0,immediateFailure:EE(e)},c=await Un(l);console.log(JSON.stringify(c,null,2)),c.userStatus==="failed and needs action"&&process.exit(1)}function EE(e){let r=e.failureKind?String(e.failureKind):void 0;if(!r)return;if(!xE.includes(r))throw new Error(`invalid --failure-kind ${r}`);let t=e.failureMessage?String(e.failureMessage):`immediate failure (${r})`;return{kind:r,message:t}}async function vh(){let e=Mt();console.log(JSON.stringify({count:e.length,items:e},null,2))}async function Sh(e){let r=e.max?Number(e.max):void 0,t=e.id?String(e.id):void 0,n=await Ca({max:r,outboxId:t});console.log(JSON.stringify(n,null,2)),n.failed>0&&process.exit(1)}function wh(e){let r=e.execute===!0||e.execute==="true",t=e.skipFinalize===!0||e.skipFinalize==="true",n=e.accountBytes===!0||e.accountBytes==="true",o=e.compact===!0||e.compact==="true",s=e.nodeModulesAgeMs,i=s!=null&&s!=="",a=i?Number(s):void 0,l=e.worktreesAgeMs?Number(e.worktreesAgeMs):0,c=e.includeOrphans===!0||e.includeOrphans==="true",u=e.harnessRoot?String(e.harnessRoot):void 0,d=ol({execute:r,finalizeStaleRuns:!t,accountBytes:n,scanDependencyCaches:i,nodeModulesAgeMs:a!==void 0&&Number.isFinite(a)?a:i?216e5:void 0,worktreesAgeMs:Number.isFinite(l)?l:0,includeOrphans:c,harnessRoot:u});o&&d.compactSummary?console.log(JSON.stringify(d.compactSummary,null,2)):console.log(JSON.stringify(d,null,2)),r&&d.totals.removedPaths===0&&d.actions.length===0&&(process.exitCode=0)}tn();function Ch(e){let r=e.execute===!0||e.execute==="true",t=e.json===!0||e.json==="true",n=e["purge-all"]===!0||e["purge-all"]==="true",o=e["keep-newest"]?Number(e["keep-newest"]):void 0;if(r||n){let a=Ps({execute:r,purgeAll:n,keepNewest:o}),l={...a,observation:a.observation?{...a.observation,dumps:a.observation.dumps.map(c=>({name:c.name,bytes:c.bytes,executableHint:c.executableHint,mtimeMs:c.mtimeMs}))}:null};console.log(JSON.stringify(l,null,t?2:0));return}let s=pr(),i=s?{...s,dumps:s.dumps.map(a=>({name:a.name,bytes:a.bytes,executableHint:a.executableHint,mtimeMs:a.mtimeMs}))}:{skipped:!0,reason:"not_wsl"};console.log(JSON.stringify(i,null,t?2:0))}function _r(e,r=2400){if(e==null)return;let n=(typeof e=="string"?e:JSON.stringify(e,null,2)).trim();if(n)return n.length<=r?n:`${n.slice(0,r-1).trimEnd()}\u2026`}function Zs(e){let r=[],t=typeof e.monitorId=="string"?e.monitorId:void 0;if(r.push(t?`Harness monitor tick \xB7 ${e.runId} (${t})`:`Harness monitor tick \xB7 ${e.runId}`),!e.workers.length)return r.push("No workers in scope for this poll."),{primary:r.join(`
-`),diagnostic:_r(e)};for(let i of e.workers){let a=i.autoComplete.eligible?"eligible for auto-complete":"not auto-completing",l=i.autoComplete.blockers.length>0?` (${i.autoComplete.blockers.slice(0,2).join("; ")})`:"";r.push(`\u2022 ${i.worker}: ${i.workerStatus}, ${i.health}${i.healthReason?` \u2014 ${i.healthReason}`:""}; ${a}${l}`),i.taskStatus&&r.push(`  Board task: ${i.taskStatus}${i.leaseOwner?` (lease: ${i.leaseOwner})`:""}`)}let n=e.autoCompleted?.filter(i=>i.outcome==="completed"&&i.ok)??[],o=e.autoCompleted?.filter(i=>!i.ok&&i.outcome!=="skipped")??[];n.length&&r.push(`Auto-completed: ${n.map(i=>i.worker).join(", ")} \u2014 AgentOS completion should be posted.`),o.length&&r.push(`Auto-complete blocked: ${o.map(i=>`${i.worker}${i.reason?` (${i.reason})`:""}`).join("; ")}`),e.leaseRenewal?.failed?.length&&r.push(`Lease renew failed for: ${e.leaseRenewal.failed.map(i=>i.worker).join(", ")}`);let s=e.workers.length>0&&e.workers.every(i=>i.autoComplete.terminalVerified)&&(e.autoCompleted?.every(i=>i.ok||i.outcome==="skipped")??!0);return r.push(s?"Next: monitor loop should stop \u2014 all workers terminal and handled.":"Next: monitor will poll again until workers are terminal-verified or max time elapses."),{primary:r.join(`
-`),diagnostic:_r(e)}}import UE from"node:path";W();J();w();J();w();function _h(e){let{worker:r,status:t,taskLease:n}=e,o=n?.leaseOwner??null;if(r.dispatched&&n){if(n.status==="running"&&o&&!Zi(o,r.runId))return{health:"orphaned",reason:`task lease held by ${o}, expected harness run ${r.runId}`};if(n.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"board task running but worker process is not alive"}}if(r.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"worker.json still running but process is dead"};if(t.attention.state==="stale")return{health:"stale",reason:t.attention.reason};let s=t.lastHeartbeatAt?Date.parse(t.lastHeartbeatAt):NaN;return t.alive&&Number.isFinite(s)&&Date.now()-s>ht?{health:"stale",reason:`heartbeat older than ${Math.floor(ht/1e3)}s`}:t.alive&&r.pid&&!F(r.pid)?{health:"orphaned",reason:"pid recorded but process is not alive"}:n?.status==="running"&&!t.alive&&t.finalResult?{health:"healthy",reason:"finished worker awaiting completion replay"}:{health:"healthy",reason:t.attention.reason||"worker within expected lifecycle bounds"}}Ce();w();import{existsSync as xh,mkdirSync as TE,readdirSync as DE,unlinkSync as ME}from"node:fs";import Wl from"node:path";function Ph(){let{harnessRoot:e}=lt(),r=Wl.join(e,"monitors");return TE(r,{recursive:!0}),r}function zt(e,r){return r?`${R(e)}--${R(r)}`:R(e)}function Bl(e){return Wl.join(Ph(),`${e}.json`)}function Xt(e){return _(Bl(e),void 0)}function Qt(e){ue(Bl(e.monitorId),e)}function Eh(e){let r=Bl(e);return xh(r)?(ME(r),!0):!1}function Ah(){let e=Ph();if(!xh(e))return[];let r=[];for(let t of DE(e)){if(!t.endsWith(".json"))continue;let n=_(Wl.join(e,t),void 0);n?.monitorId&&r.push({monitorId:n.monitorId,runId:n.runId,workerName:n.workerName,agentOsId:n.agentOsId,pid:n.pid,alive:n.pid?F(n.pid):!1,startedAt:n.startedAt,pollMs:n.pollMs,logPath:n.logPath})}return r.sort((t,n)=>t.startedAt.localeCompare(n.startedAt))}J();function Ll(e){let{worker:r,status:t}=e,n=[];r.localOnly&&n.push("local-only worker (no board linkage)"),(!r.agentOsId||!r.taskId)&&n.push("missing agentOsId/taskId linkage"),rs(r)&&n.push("completion already acknowledged"),r.completionBlocker&&n.push(r.completionBlocker),t.heartbeatBlocker&&t.alive&&n.push(`worker heartbeat blocker: ${t.heartbeatBlocker}`),t.attention.state==="blocked"&&n.push(t.attention.reason||"worker attention blocked"),kt(t)&&n.push(t.attention.reason||"landing gate blocked");let o=oe(t),s;return o?t.finalResult?s="final_result":t.alive?s="terminal_status":s="process_exited":n.push("worker has not reached a terminal condition"),{eligible:o&&n.length===0,terminalVerified:o,terminalReason:s,blockers:n}}I();async function Ih(e){let r=new Map,t=e.agentOsId?.trim();if(!t||e.taskIds.length===0)return r;let n=$(e.baseUrl);try{let o=await V(e.secret,t,{baseUrl:n}),s=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/harness/monitor/task-leases`,i=await X(s,o,{taskIds:[...new Set(e.taskIds)]},{agentOsId:t,baseUrl:n});if(!i.ok||!i.response||typeof i.response!="object")return r;let a=i.response.tasks;if(!Array.isArray(a))return r;for(let l of a)l?.taskId&&r.set(l.taskId,l)}catch{}return r}function Oh(e,r){return _(UE.join(P(e),"workers",R(r),"worker.json"),void 0)}function Nh(e,r){let t=B(e),n=Object.keys(t.workers||{});if(!r)return n;let o=R(r);return n.filter(s=>R(s)===o)}function Th(e,r){let t=B(e.runId),n=N(e,{base:t.base,baseCommit:t.baseCommit}),o=e.taskId?r.get(e.taskId)??null:null,s=_h({worker:e,status:n,taskLease:o}),i=Ll({worker:e,status:n});return{runId:e.runId,worker:e.name,health:s.health,healthReason:s.reason,workerStatus:n.status,attentionState:n.attention.state,attentionReason:n.attention.reason,alive:n.alive,taskId:e.taskId,leaseOwner:o?.leaseOwner??void 0,taskStatus:o?.status,autoComplete:i,status:n}}async function to(e){let r=String(e.run||"");O(r,"--run");let t=e.name?String(e.name):void 0,n=e.agentOsId?String(e.agentOsId):void 0,o=B(r),s=Nh(r,t),i=[];for(let p of s){let g=Oh(r,p);g&&i.push(g)}let a=n||i.map(p=>p.agentOsId).find(p=>typeof p=="string"&&p.trim())||void 0,l=i.map(p=>p.taskId).filter(p=>!!p),c=await Ih({agentOsId:a,taskIds:l,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}),u=i.map(p=>Th(p,c)),d;a&&e.renewLeases!==!1&&e.renewLeases!=="false"&&(d=await Xo(r,{...e,agentOsId:a}));let f=[];if(e.autoComplete===!0||e.autoComplete==="true")for(let p of u){if(!p.autoComplete.eligible){f.push({worker:p.worker,outcome:"skipped",ok:!1,reason:p.autoComplete.blockers.join("; ")||"not eligible"});continue}let g=await Ot({run:r,name:p.worker,...a?{agentOsId:a}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});f.push({worker:p.worker,outcome:g.outcome,ok:g.outcome==="completed",reason:g.reason})}return{runId:r,agentOsId:a,workers:u,leaseRenewal:d,autoCompleted:f}}function Dh(e){let r=String(e.run||"");O(r,"--run");let t=e.name?String(e.name):void 0,n=Nh(r,t),o=[];for(let s of n){let i=Oh(r,s);i&&o.push(Th(i,new Map))}return{runId:r,workers:o,autoCompleted:[]}}function Hl(){return Ah()}function Mh(e){let r=String(e.run||"");O(r,"--run");let t=zt(r,e.name?String(e.name):void 0),n=Xt(t);if(!n)return{monitorId:t,stopped:!1};if(n.pid&&F(n.pid))try{process.kill(n.pid,"SIGTERM")}catch{}return n.stoppedAt=new Date().toISOString(),Qt(n),Eh(t),{monitorId:t,stopped:!0,pid:n.pid}}async function Fl(e){let r=String(e.run||""),t=String(e.name||"");O(r,"--run"),O(t,"--name");let n=Re(r,t),o=B(r),s=N(n,{base:o.base,baseCommit:o.baseCommit}),i=Ll({worker:n,status:s});if(!i.eligible){console.log(JSON.stringify({runId:r,worker:t,outcome:"blocked",blockers:i.blockers,terminalVerified:i.terminalVerified},null,2)),process.exitCode=1;return}let a=await Ot({...e,run:r,name:t});console.log(JSON.stringify(a,null,2)),a.outcome!=="completed"&&a.outcome!=="blocked"&&(process.exitCode=1)}w();var WE=5e3,BE=360*60*1e3;async function Uh(e){let r=String(e.monitorId||""),t=Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):WE,n=Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):BE,o=Date.now();for(;Date.now()-o<=n;){let s=r?Xt(r):void 0;if(s?.stoppedAt)break;let i=await to({...e,autoComplete:e.autoComplete??!0,renewLeases:e.renewLeases??!0}),a=Zs({monitorId:r,phase:"tick",...i});if(console.log(a.primary),a.diagnostic&&console.error(`[monitor diagnostic] ${a.diagnostic}`),i.workers.length>0&&i.workers.every(c=>c.autoComplete.terminalVerified&&(c.autoComplete.eligible||c.autoComplete.blockers.some(u=>u.includes("already acknowledged"))))&&i.autoCompleted.every(c=>c.ok||c.outcome==="skipped")){r&&s&&(s.stoppedAt=new Date().toISOString(),Qt(s));break}Pr(t)}}w();Ce();import{spawn as LE}from"node:child_process";import{closeSync as Wh,existsSync as HE,openSync as FE}from"node:fs";import Bh from"node:path";import{fileURLToPath as $E}from"node:url";function KE(){return Bh.join($E(new URL(".",import.meta.url)),"cli.js")}function Lh(e){let r=e.cliPath??KE();if(!HE(r))return;let t=zt(e.runId,e.workerName),{harnessRoot:n}=lt(),o=Bh.join(n,"monitors",`${t}.log`),s;try{s=FE(o,"a")}catch{s=void 0}let i=e.nodeExecutable??process.execPath,a=e.pollMs??5e3,l=[r,"monitor","run-loop","--run",e.runId,"--monitor-id",t,"--poll-ms",String(a),"--auto-complete","true","--renew-leases","true"];e.workerName&&l.push("--name",e.workerName),e.agentOsId&&l.push("--agent-os-id",e.agentOsId),e.baseUrl&&l.push("--base-url",e.baseUrl),e.secret&&l.push("--secret",e.secret);let c=["ignore",s??"ignore",s??"ignore"];try{let u=LE(i,l,ce({detached:!0,stdio:c,env:process.env}));s!==void 0&&Wh(s),u.unref();let d={monitorId:t,runId:e.runId,workerName:e.workerName,agentOsId:e.agentOsId,pid:u.pid,startedAt:new Date().toISOString(),pollMs:a,logPath:o};return Qt(d),{monitorId:t,pid:u.pid,logPath:o,session:d}}catch{if(s!==void 0)try{Wh(s)}catch{}return}}w();async function Hh(e){let r=String(e.run||"");O(r,"--run");let t=e.name?String(e.name):void 0,n=zt(r,t),o=Xt(n);if(o?.pid&&!o.stoppedAt)return{monitorId:n,session:o,spawned:!1,pid:o.pid};let s=Lh({runId:r,workerName:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0});if(!s)throw new Error("failed to spawn monitor sidecar (cli.js missing or spawn error)");return{monitorId:n,session:s.session,spawned:!0,pid:s.pid}}async function Fh(e){if(String(e.run||"")){let t=e.tick===!0||e.tick==="true"?await to({...e,autoComplete:!1}):Dh(e);console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({monitors:Hl()},null,2))}function $h(e){console.log(JSON.stringify(Mh(e),null,2))}function Kh(){console.log(JSON.stringify({monitors:Hl()},null,2))}async function jh(e){await Uh(e)}async function Vh(e){let r=await to(e);console.log(JSON.stringify(r,null,2))}import{existsSync as jE,readFileSync as VE}from"node:fs";import{dirname as $l,join as Yh}from"node:path";import{fileURLToPath as Gh}from"node:url";function GE(e){let r=$l(Gh(e));for(let t=0;t<6;t+=1){if(jE(Yh(r,"package.json")))return r;let n=$l(r);if(n===r)break;r=n}throw new Error(`package.json not found above ${$l(Gh(e))}`)}function Jh(e=import.meta.url){let r=Yh(GE(e),"package.json"),t=JSON.parse(VE(r,"utf8"));if(typeof t.version!="string"||!t.version.trim())throw new Error(`Missing package.json version at ${r}`);return t.version}var ei=Jh();function YE(e){return e.some(r=>r==="--version"||r==="-v")}function JE(e,r){console.log(r?`${r} ${e}`:e),process.exit(0)}function qh(e,r=import.meta.url,t){return YE(e)?(JE(Jh(r),t),!0):!1}function qE(e){let r={};for(let[t,n]of Object.entries(e))n?.version&&(r[t]={version:n.version,source:"installed",path:n.path});return r}async function zE(e={}){let[r,t]=await Promise.all([Ds(),Promise.resolve(og({cwd:e.cwd,repoRoot:e.repoRoot}))]),n={},o=e.selfPackageName==="@kynver-app/runtime"&&e.selfVersion?e.selfVersion:ei;return n["@kynver-app/runtime"]={version:o,source:"self"},e.selfPackageName&&e.selfVersion&&e.selfPackageName!=="@kynver-app/runtime"&&(n[e.selfPackageName]={version:e.selfVersion,source:"self"}),{installed:qE(r),repo:t,self:n}}async function zh(e={}){let r=await zE(e);return ig(r)}function Xh(e,r){return e?e==="daemon"||e==="start"||e==="worker"||e==="monitor"||e==="run"&&(r==="dispatch"||r==="sweep"||r==="reconcile"||r==="unblock")||e==="cron"&&r==="tick":!1}w();function XE(e){let r=e.trim();return r?Jn().find(n=>n.name===r&&n.status!=="completed")??null:null}function Qh(e){let r=String(O(String(e.name||""),"--name")),t=XE(r);console.log(JSON.stringify({runId:t?.id??null,name:r,status:t?.status??null,effectiveStatus:t?.effectiveStatus??null},null,2))}W();J();w();I();import QE from"node:path";function no(e,r,t,n,o,s){return{runId:e,worker:r,taskId:t,agentOsId:n,leaseOwner:o,action:"skipped",reason:s}}async function ZE(e){let r=$(e.baseUrl?String(e.baseUrl):void 0),t=e.agentOsId?String(e.agentOsId).trim():null,n=e.dryRun===!0||e.dryRun==="true",o=[],s=[],i=[];for(let a of Y())for(let l of Object.keys(a.workers??{})){let c=QE.join(P(a.id),"workers",R(l),"worker.json"),u=_(c,void 0);if(!u){s.push(no(a.id,l,"","","","worker.json missing"));continue}let d=u.taskId??"",f=u.agentOsId??"",m=u.leaseOwner??"";if(!u.dispatched||!d||!f||!m){s.push(no(a.id,l,d,f,m,"not a fully-leased dispatched worker"));continue}if(t&&f!==t)continue;if(u.completionReportedAt){s.push(no(a.id,l,d,f,m,"completion already reported"));continue}let p=N(u);if(p.finalResult){s.push(no(a.id,l,d,f,m,"has final result \u2014 let pipeline tick complete it"));continue}if(p.alive){s.push(no(a.id,l,d,f,m,"worker process is still alive"));continue}if(n){o.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"released",reason:"dry-run: would release dead dispatched worker lease"});continue}try{let g=await V(e.secret?String(e.secret):void 0,f,{baseUrl:r}),k=`${r}/api/agent-os/by-id/${encodeURIComponent(f)}/tasks/${encodeURIComponent(d)}/release`,h=await X(k,g,{agentOsId:f,leaseOwner:m},{agentOsId:f,baseUrl:r});h.ok===!0||h.response?.ok===!0?o.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"released",reason:"dead dispatched worker lease released; task requeued"}):s.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"skipped",reason:`release returned ok:false (likely owner mismatch or already released): HTTP ${h.status}`})}catch(g){i.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"error",reason:g.message})}}return{dryRun:n,released:o,skipped:s,errors:i}}async function Zh(e){let r=await ZE(e),t={ok:r.errors.length===0,dryRun:r.dryRun,released:r.released.length,skipped:r.skipped.length,errors:r.errors.length,details:r};console.log(JSON.stringify(t,null,2)),r.errors.length>0&&process.exit(1)}import ik from"node:path";Qe();I();import{accessSync as eA,constants as rA,existsSync as Kl,readFileSync as tA}from"node:fs";import{homedir as ri}from"node:os";import ti from"node:path";import{spawnSync as nA}from"node:child_process";Ce();function ek(e,r){try{let t=nA(e,r,{encoding:"utf8"}),n=(t.stdout||"").trim(),o=(t.stderr||"").trim();return{ok:t.status===0,stdout:n,stderr:o,error:t.error?.message}}catch(t){return{ok:!1,stdout:"",stderr:"",error:t.message}}}function rk(e){let r=e?.trim();if(r)return r.length<=12?`${r}\u2026`:`${r.slice(0,12)}\u2026`}function oA(e){if(!Kl(e))return!1;try{return eA(e,rA.W_OK),!0}catch{return!1}}var tk={packageVersion:()=>ei,commandOnPath:e=>ek(process.platform==="win32"?"where":"which",[e]),kynverVersion:e=>ek(e,["--version"]),loadConfig:()=>v(),configFilePath:()=>ti.join(ri(),".kynver","config.json"),credentialsFilePath:()=>ti.join(ri(),".kynver","credentials"),readCredentials:()=>{let e=ti.join(ri(),".kynver","credentials");if(!Kl(e))return{hasApiKey:!1};try{let r=JSON.parse(tA(e,"utf8"));return{hasApiKey:!!r.apiKey?.trim(),runnerTokenPrefix:rk(r.runnerToken),runnerTokenAgentOsId:r.runnerTokenAgentOsId}}catch{return{hasApiKey:!1}}},envSnapshot:()=>({kynverApiUrl:process.env.KYNVER_API_URL?.trim()||void 0,openclawCronFireBaseUrl:process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||void 0,kynverRunnerTokenPrefix:rk(process.env.KYNVER_RUNNER_TOKEN),kynverRuntimeSecret:!!process.env.KYNVER_RUNTIME_SECRET?.trim(),openclawCronSecret:!!process.env.OPENCLAW_CRON_SECRET?.trim(),kynverHarnessRoot:process.env.KYNVER_HARNESS_ROOT?.trim()||void 0,opusHarnessRoot:process.env.OPUS_HARNESS_ROOT?.trim()||void 0,kynverSchedulerProvider:process.env.KYNVER_SCHEDULER_PROVIDER?.trim()||void 0,openclawCronStorePath:!!(process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim()),kynverCronDaemonPrimary:Wo(),qstashTokenPresent:!!process.env.QSTASH_TOKEN?.trim(),kynverHostedDeployment:(()=>{let e=process.env.KYNVER_HOSTED_DEPLOYMENT?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"})()}),harnessRoot:()=>ye(),legacyOpenclawHarnessRoot:()=>ti.join(ri(),".openclaw","harness"),pathExists:e=>Kl(e),pathWritable:e=>oA(e)};function nk(e,r){return e.kynverSchedulerProvider==="openclaw-cron"||r.deploymentSchedulerProvider==="openclaw-cron"}function sA(e,r){return e.kynverSchedulerProvider==="kynver-cron"||r.deploymentSchedulerProvider==="kynver-cron"}function ok(e){return!!e.openclawCronStorePath}function iA(e,r){return e.kynverSchedulerProvider==="qstash"||r.deploymentSchedulerProvider==="qstash"}function sk(e,r){let t={schedulerProvider:e.kynverSchedulerProvider??null,deploymentSchedulerProvider:r.deploymentSchedulerProvider??null,openclawCronStorePath:!!e.openclawCronStorePath,kynverCronDaemonPrimary:!!e.kynverCronDaemonPrimary},n=!!r.agentOsId?.trim()&&!!r.apiBaseUrl?.trim()&&r.hasScopedRunnerToken;if(iA(e,r)&&!nk(e,r)){let u=e.kynverSchedulerProvider==="qstash"?"KYNVER_SCHEDULER_PROVIDER=qstash on this host":"deploymentSchedulerProvider=qstash in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler cut over to QStash (${u})`,details:t}}if(sA(e,r)&&!nk(e,r)){if(ok(e)&&e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=e.kynverSchedulerProvider==="kynver-cron"?"KYNVER_SCHEDULER_PROVIDER=kynver-cron on this host":"deploymentSchedulerProvider=kynver-cron in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler owned by Kynver Cron (${u})`,details:t}}if(ok(e)){if(e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=[];return e.openclawCronStorePath&&u.push("KYNVER_CRON_STORE_PATH or OPENCLAW_CRON_STORE_PATH set (local cron store)"),{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Local cron store without daemon tick (${u.join("; ")})`,remediation:"Run `kynver daemon` with KYNVER_CRON_SECRET + KYNVER_API_URL (or KYNVER_CRON_FIRE_BASE_URL) so the daemon-owned cron tick fires schedules. On hosted deploys use QStash (KYNVER_SCHEDULER_PROVIDER=qstash). Legacy OpenClaw cron env aliases still work during cutover.",details:t}}let o=e.kynverSchedulerProvider==="openclaw-cron",s=r.deploymentSchedulerProvider==="openclaw-cron",i=e.kynverSchedulerProvider==="qstash",a=!!e.qstashTokenPresent||!!e.kynverHostedDeployment,l=a&&!n,c=l&&e.kynverSchedulerProvider==="openclaw-cron";return s&&!o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"deploymentSchedulerProvider=openclaw-cron in ~/.kynver/config.json \u2014 migrate to kynver-cron or qstash",remediation:'Run `kynver scheduler attest-cutover` or set deploymentSchedulerProvider to "kynver-cron" or "qstash" in ~/.kynver/config.json.',details:t}:n&&o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 dispatch is owned by kynver daemon; unset the OpenClaw override",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:n?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:i?"Runner override qstash present; hosted dispatch still owned by kynver daemon pipeline-tick":"Hosted dispatch owned by kynver daemon (pipeline-tick \u2192 operator/tick); no OpenClaw cron on runner",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 hosted dispatch still depends on the OpenClaw local-cron adapter",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,hostedDeployment:a}}:c?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment has KYNVER_SCHEDULER_PROVIDER=openclaw-cron \u2014 AgentOS scheduled ticks should use QStash or kynver-cron",remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server (or kynver-cron for Kynver-owned local scheduling). User runners use `kynver daemon` for dispatch and should not set a scheduler provider.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:l&&e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"QSTASH_TOKEN present; hosted scheduler auto-selects qstash (explicit KYNVER_SCHEDULER_PROVIDER=qstash optional)",details:{schedulerProvider:null,qstashTokenPresent:!0,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment with no QSTASH_TOKEN and no KYNVER_SCHEDULER_PROVIDER \u2014 kynver-cron is an in-process stub here and will NOT fire; no firing scheduler is configured",remediation:"Set QSTASH_TOKEN + KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server for hosted AgentOS schedules. Only use kynver-cron when a `kynver daemon` (or local cron store) actually owns firing on this box.",details:{schedulerProvider:null,resolvedFallback:"none",qstashTokenPresent:!1,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&e.kynverSchedulerProvider&&e.kynverSchedulerProvider!=="qstash"&&e.kynverSchedulerProvider!=="kynver-cron"?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Hosted deployment without QSTASH_TOKEN (KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}) \u2014 use qstash or kynver-cron`,remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server, or kynver-cron for Kynver-owned local scheduling. User runners use `kynver daemon` for dispatch.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}`,details:{schedulerProvider:e.kynverSchedulerProvider??null}}:{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"No KYNVER_SCHEDULER_PROVIDER on runner (expected) \u2014 finish runner setup so daemon pipeline-tick owns dispatch",details:{schedulerProvider:null,dispatchPath:"kynver-daemon-pipeline-tick-pending"}}}function aA(e){let r={pass:0,warn:0,fail:0};for(let t of e)for(let n of t.checks)r[n.status]+=1;return r}function lA(e){let r=e.packageVersion(),t=e.commandOnPath("kynver"),n=t.ok&&t.stdout.length>0,o=n?t.stdout.split(/\r?\n/)[0]?.trim():void 0,s=o?q(o):void 0,i=[{id:"cli_running_version",label:"Running @kynver-app/runtime version",status:"pass",summary:`@kynver-app/runtime ${r}`,details:{version:r}},{id:"cli_on_path",label:"kynver executable on PATH",status:n?"pass":"warn",summary:n?`Found ${s}`:"kynver not found on PATH (invoked via node/npx?)",remediation:n?void 0:"Install globally (`npm i -g @kynver-app/runtime`) or invoke via `npx @kynver-app/runtime`.",details:{path:s}}];if(n&&o){let a=e.kynverVersion(o),l=a.stdout.replace(/^kynver\s+/i,"").trim()||void 0,c=a.ok&&(!l||l===r);i.push({id:"cli_installed_version",label:"Installed kynver CLI version matches running package",status:c?"pass":"warn",summary:a.ok&&l?c?`Installed ${l}`:`Installed ${l} differs from running ${r}`:a.error?`Could not read installed version (${a.error})`:a.stderr||"Could not read installed version",remediation:c?void 0:"Reinstall or rebuild @kynver-app/runtime so PATH kynver matches the harness worktree version.",details:{installedVersion:l,runningVersion:r,path:s}})}return{id:"cli_package",label:"CLI / package",checks:i}}function cA(e){let r=e.configFilePath(),t=q(r),n=e.pathExists(r),o=e.loadConfig(),s=[{id:"config_file",label:"~/.kynver/config.json present",status:n?"pass":"fail",summary:n?`Found ${t}`:`Missing ${t}`,remediation:n?void 0:"Run `kynver setup --api-base-url <url> --agent-os-id <id> --repo <path>`.",details:{configPath:t}}];if(n){let i=o.apiBaseUrl?.trim(),a=o.agentOsId?.trim(),l=Le({config:o}),c=l?hn(l):null,u=gu(l);s.push({id:"config_api_base_url",label:"Default API base URL",status:i?"pass":"warn",summary:i??"Not set in config (KYNVER_API_URL / --base-url required per command)",remediation:i?void 0:"Set `apiBaseUrl` via `kynver setup --api-base-url https://\u2026`.",details:{apiBaseUrl:i??null}},{id:"config_agent_os_id",label:"Default AgentOS id",status:a?"pass":"warn",summary:a??"Not set (pass --agent-os-id on daemon/dispatch/worker commands)",remediation:a?void 0:"Set `agentOsId` via `kynver setup --agent-os-id <uuid>`.",details:{agentOsId:a??null,agentOsSlug:o.agentOsSlug??null}},{id:"config_default_repo",label:"Default repo path",status:u.status,summary:l?l.persistedInConfig?`${c.defaultRepo} (config)`:`${c.defaultRepo} (${l.source}, not persisted in ~/.kynver/config.json)`:"Not set in ~/.kynver/config.json (`kynver run create` requires --repo)",remediation:u.remediation,details:{defaultRepo:c?.defaultRepo??null,source:c?.source??null,persistedInConfig:c?.persistedInConfig??!1,harnessRoot:o.harnessRoot?ke(o.harnessRoot):null}})}return{id:"user_config",label:"User config (~/.kynver)",checks:s}}function uA(e){let t=e.loadConfig().agentOsId?.trim(),n=e.readCredentials(),o=e.envSnapshot(),s=e.credentialsFilePath(),i=q(s),a=o.kynverRunnerTokenPrefix,l=n.runnerTokenPrefix,c=n.runnerTokenAgentOsId,u=!!l&&(!t||!c||c===t),d=!!a?.startsWith("krc1.")||u&&l?.startsWith("krc1.");return{id:"runner_token",label:"Runner token readiness",checks:[{id:"runner_token_scoped",label:"Scoped runner token (krc1.*) ready",status:d?"pass":"fail",summary:d?a?"KYNVER_RUNNER_TOKEN is set (scoped prefix shown)":`Saved scoped token for agentOsId ${c??t??"(unknown)"}`:"No scoped runner token for the configured AgentOS workspace",remediation:d?void 0:"Run `kynver login` then `kynver runner credential --agent-os-id <id>` (or `kynver setup` with API key).",details:{source:a?"env":l?"credentials":"none",tokenPrefix:a??(u?l:void 0),agentOsId:t??c??null,credentialsPath:i}},{id:"runner_token_agent_os_match",label:"Saved runner token matches configured agentOsId",status:!l||!t||!c||c===t?"pass":"warn",summary:!l||!c?"No saved token agentOsId to compare":t?c===t?"Saved token scoped to configured agentOsId":`Saved token is for ${c}, config expects ${t}`:"Config agentOsId unset \u2014 token scope not validated against config",remediation:l&&t&&c&&c!==t?"`kynver runner credential --agent-os-id <configured-id>` to mint a workspace-bound token.":void 0,details:{configuredAgentOsId:t??null,savedAgentOsId:c??null}},{id:"runner_api_key_for_refresh",label:"API key available for token refresh",status:n.hasApiKey||process.env.KYNVER_API_KEY?.trim()?"pass":"warn",summary:n.hasApiKey||process.env.KYNVER_API_KEY?"KYNVER API key present for runner credential mint/refresh":"No API key \u2014 401 callback recovery cannot auto-mint a replacement token",remediation:n.hasApiKey||process.env.KYNVER_API_KEY?void 0:"Run `kynver login --api-key \u2026`.",details:{credentialsPath:i,hasApiKey:n.hasApiKey||!!process.env.KYNVER_API_KEY}}]}}function dA(e){let r=e.commandOnPath("vercel"),t=r.ok,n=!!(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()),o=!!process.env.VERCEL_TOKEN?.trim();return{id:"vercel_deploy_evidence",label:"Vercel deploy evidence",checks:[{id:"vercel_global_cli_absent",label:"Global Vercel CLI not installed",status:t?"warn":"pass",summary:t?`Global Vercel CLI found (${r.stdout||"on PATH"}) \u2014 uninstall after operator approval`:"No global Vercel CLI on PATH",remediation:t?"Uninstall global Vercel CLI (`npm uninstall -g vercel`) \u2014 use GitHub commit status or scoped VERCEL_TOKEN + REST API instead.":void 0,details:{path:t&&r.stdout||null}},{id:"github_token_for_vercel_status",label:"GitHub token for Vercel status",status:n?"pass":"warn",summary:n?"GITHUB_TOKEN/GH_TOKEN present for GitHub Vercel StatusContext evidence":"No GITHUB_TOKEN \u2014 merge-gate Vercel evidence requires GitHub commit status API",remediation:n?void 0:"Export GITHUB_TOKEN (or GH_TOKEN) for PR head commit status lookups."},{id:"vercel_api_token_optional",label:"Vercel API token (optional fallback)",status:o?"pass":"warn",summary:o?"VERCEL_TOKEN configured for optional REST API deployment lookup":"VERCEL_TOKEN unset \u2014 GitHub status is the default path; API fallback disabled",remediation:o?void 0:"Set ephemeral/scoped VERCEL_TOKEN only when GitHub status is insufficient; avoid persistent ~/.vercel auth on runner hosts."}]}}function pA(e){let r=e.harnessRoot(),t=ik.join(r,"runs"),n=ik.join(r,"worktrees"),o=ke(r),s=ke(t),i=ke(n),a=e.pathExists(t),l=e.pathExists(n);return{id:"harness_dirs",label:"Harness / daemon directories",checks:[{id:"harness_root",label:"Harness root resolved",status:"pass",summary:o,details:{harnessRoot:o}},{id:"harness_runs_dir",label:"Runs directory ready",status:a&&e.pathWritable(t)?"pass":"warn",summary:a?e.pathWritable(t)?`Writable ${s}`:`Exists but not writable: ${s}`:`Will be created on first run: ${s}`,remediation:a&&!e.pathWritable(t)?`Fix permissions on ${s} or set KYNVER_HARNESS_ROOT to a writable path.`:void 0,details:{runsDir:s,exists:a,writable:e.pathWritable(t)}},{id:"harness_worktrees_dir",label:"Worktrees directory ready",status:l&&e.pathWritable(n)?"pass":"warn",summary:l?e.pathWritable(n)?`Writable ${i}`:`Exists but not writable: ${i}`:`Will be created on first worker: ${i}`,remediation:l&&!e.pathWritable(n)?`Fix permissions on ${i}.`:void 0,details:{worktreesDir:i,exists:l,writable:e.pathWritable(n)}}]}}function mA(e){let r=e.loadConfig(),t=e.envSnapshot(),n=t.kynverApiUrl??r.apiBaseUrl?.trim()??t.openclawCronFireBaseUrl,o=!t.kynverApiUrl&&!r.apiBaseUrl&&!!t.openclawCronFireBaseUrl,s=t.openclawCronSecret||t.kynverRuntimeSecret,i=t.kynverRunnerTokenPrefix?.startsWith("krc1."),l=e.readCredentials().runnerTokenPrefix?.startsWith("krc1.");return{id:"callback_auth",label:"Callback auth / config",checks:[{id:"callback_base_url",label:"Callback base URL configured",status:n?o?"warn":"pass":"fail",summary:n?o?`Using legacy OPENCLAW_CRON_FIRE_BASE_URL (${n})`:n:"No KYNVER_API_URL, config apiBaseUrl, or legacy OpenClaw base URL",remediation:n?o?"Migrate to KYNVER_API_URL or `kynver setup --api-base-url` and drop OPENCLAW_CRON_FIRE_BASE_URL.":void 0:"Set KYNVER_API_URL or run `kynver setup --api-base-url https://\u2026`.",details:{source:t.kynverApiUrl?"KYNVER_API_URL":r.apiBaseUrl?"config.apiBaseUrl":t.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL":"none",baseUrl:n??null}},{id:"callback_auth_mode",label:"Callback auth uses scoped runner token",status:i||l?"pass":s?"warn":"fail",summary:i?"KYNVER_RUNNER_TOKEN scoped token will be sent as X-Kynver-Runner-Token":l?"Saved krc1.* token in ~/.kynver/credentials":s?"Deployment-level KYNVER_RUNTIME_SECRET / OPENCLAW_CRON_SECRET in use (legacy headers)":"No callback secret configured",remediation:i||l?void 0:"Mint a scoped token: `kynver runner credential --agent-os-id <id>`. Avoid shared OPENCLAW_CRON_SECRET on user runners.",details:{mode:i||l?"scoped":s?"legacy_global_secret":"missing",legacyHeadersWhenNotScoped:["X-OpenClaw-Cron-Secret","X-Kynver-Runtime-Secret"]}}]}}function fA(e){let r=e.envSnapshot(),t=e.loadConfig(),n=e.readCredentials(),o=e.harnessRoot(),s=e.legacyOpenclawHarnessRoot(),i=ke(o),a=ke(s),l=r.opusHarnessRoot?ke(r.opusHarnessRoot):null,c=o===s&&e.pathExists(s),u=t.agentOsId?.trim(),d=r.kynverRunnerTokenPrefix,f=n.runnerTokenPrefix,m=n.runnerTokenAgentOsId,p=!!f&&(!u||!m||m===u),g=!!d?.startsWith("krc1.")||p&&!!f?.startsWith("krc1.");return{id:"openclaw_hotspots",label:"OpenClaw dependency hotspots",checks:[{id:"hotspot_legacy_harness_root",label:"Legacy ~/.openclaw/harness still active",status:c?"warn":"pass",summary:c?`Harness root is legacy ${a}`:r.opusHarnessRoot?`OPUS_HARNESS_ROOT override in use (${l})`:`Using ${i}`,remediation:c?"Set KYNVER_HARNESS_ROOT=~/.kynver/harness (or run setup), migrate artifacts, retire OPUS_HARNESS_ROOT.":r.opusHarnessRoot?"Prefer KYNVER_HARNESS_ROOT over OPUS_HARNESS_ROOT.":void 0,details:{harnessRoot:i,legacyRoot:a,opusHarnessRoot:l}},{id:"hotspot_openclaw_env_secrets",label:"OpenClaw deployment secrets in runner env",status:r.openclawCronSecret||r.openclawCronFireBaseUrl?"warn":"pass",summary:r.openclawCronSecret||r.openclawCronFireBaseUrl?[r.openclawCronSecret?"OPENCLAW_CRON_SECRET set":null,r.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL set":null].filter(Boolean).join("; "):"No OpenClaw cron env overrides on this runner",remediation:r.openclawCronSecret||r.openclawCronFireBaseUrl?"Move to KYNVER_API_URL + scoped runner tokens; unset OpenClaw cron env on user-hosted runners.":void 0},sk(r,{agentOsId:u??null,apiBaseUrl:t.apiBaseUrl?.trim()??r.kynverApiUrl??null,hasScopedRunnerToken:g,deploymentSchedulerProvider:t.deploymentSchedulerProvider==="qstash"||t.deploymentSchedulerProvider==="kynver-cron"||t.deploymentSchedulerProvider==="openclaw-cron"?t.deploymentSchedulerProvider:void 0}),{id:"hotspot_lease_source_names",label:"Harness lease/completion source names",status:"pass",summary:"Runtime uses kynver-harness:* lease owners and completion source kynver-harness (OpenClaw names retired in runtime)",details:{leaseOwnerPattern:"kynver-harness:<runId>",completionSource:"kynver-harness",note:"OpenClaw adapter remains optional in packages/kynver-openclaw-agent-os only"}}]}}function ak(e=tk){let r=[lA(e),cA(e),uA(e),dA(e),pA(e),mA(e),fA(e)],t=aA(r),n=t.fail===0,o=n?t.warn>0?`Ready with ${t.warn} warning(s) \u2014 review remediation before retiring OpenClaw as primary runtime agent.`:"Ready \u2014 Kynver runtime can serve as primary runtime agent on this host.":`${t.fail} blocking check(s) \u2014 fix failures before OpenClaw takeover.`;return{command:"doctor runtime-takeover",ready:n,summary:o,counts:t,sections:r}}function lk(e={}){let r;if(e.remediateDefaultRepo===!0){let n=kn();if(!n.ok){console.error(n.reason??"defaultRepo remediation failed"),n.remediation&&console.error(n.remediation),process.exitCode=1;return}n.remediated?r=`Remediated defaultRepo \u2192 ${n.resolved?.defaultRepo??"unknown"}`:r=`defaultRepo already persisted (${n.resolved?.defaultRepo??"unknown"})`}let t=ak();r&&(t.notes=[...t.notes??[],r]),console.log(JSON.stringify(t,null,2)),t.ready||(process.exitCode=1)}I();async function ck(e){let r=v(),t=(e.agentOsId?String(e.agentOsId):r.agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=$(e.baseUrl?String(e.baseUrl):r.apiBaseUrl),o=await V(e.secret?String(e.secret):void 0,t,{baseUrl:n}),s=new URLSearchParams;if(typeof e.since=="string"&&e.since.trim()&&s.set("since",e.since.trim()),e.limit!=null&&String(e.limit).trim()){let c=Number(e.limit);Number.isFinite(c)&&c>0&&s.set("limit",String(Math.floor(c)))}let i=s.toString()?`?${s.toString()}`:"",a=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/command-center/dashboard-contract${i}`,l=await $o(a,o);l.ok||(console.error(`dashboard-contract GET failed: HTTP ${l.status}`),l.response&&console.error(JSON.stringify(l.response,null,2)),process.exit(1)),console.log(JSON.stringify(l.response,null,2))}Qe();var jl=["Vercel/hosted: set KYNVER_SCHEDULER_PROVIDER=qstash","Vercel/hosted: ensure QSTASH_TOKEN (and QStash signing keys) are configured","Vercel/hosted: unset OPENCLAW_CRON_STORE_PATH if present"],Vl=["User runner: unset KYNVER_SCHEDULER_PROVIDER (scheduling is deployment-owned)","User runner: unset OPENCLAW_CRON_STORE_PATH, OPENCLAW_CRON_SECRET, OPENCLAW_CRON_FIRE_BASE_URL",'User runner: after deployment cutover, run `kynver scheduler attest-cutover` (or set deploymentSchedulerProvider to "qstash" in ~/.kynver/config.json)',"Verify: kynver doctor runtime-takeover \u2014 hotspot_openclaw_scheduler should pass"];function gA(e=process.env){return{kynverSchedulerProvider:e.KYNVER_SCHEDULER_PROVIDER?.trim()||null,kynverCronStorePath:e.KYNVER_CRON_STORE_PATH?.trim()||e.OPENCLAW_CRON_STORE_PATH?.trim()||null,kynverCronSecret:!!(e.KYNVER_CRON_SECRET?.trim()||e.OPENCLAW_CRON_SECRET?.trim()),kynverCronFireBaseUrl:e.KYNVER_CRON_FIRE_BASE_URL?.trim()||e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null,openclawCronStorePath:e.OPENCLAW_CRON_STORE_PATH?.trim()||null,openclawCronSecret:!!e.OPENCLAW_CRON_SECRET?.trim(),openclawCronFireBaseUrl:e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}}function Gl(e,r=gA()){let t=[];return r.kynverSchedulerProvider==="openclaw-cron"&&t.push("Runner still has KYNVER_SCHEDULER_PROVIDER=openclaw-cron"),r.kynverCronStorePath&&r.kynverSchedulerProvider!=="kynver-cron"&&t.push("Runner has KYNVER_CRON_STORE_PATH but KYNVER_SCHEDULER_PROVIDER is not kynver-cron \u2014 use `kynver daemon` cron tick or unset the store for QStash-only runners"),r.openclawCronStorePath&&!r.kynverCronStorePath&&t.push("Runner still has legacy OPENCLAW_CRON_STORE_PATH (prefer KYNVER_CRON_STORE_PATH)"),e.deploymentSchedulerProvider==="openclaw-cron"&&t.push("~/.kynver/config.json deploymentSchedulerProvider is still openclaw-cron"),{ok:t.length===0,blockers:t,runnerEnv:r,deploymentSchedulerProvider:e.deploymentSchedulerProvider??null,deploymentSteps:[...jl],runnerSteps:[...Vl]}}function uk(e){return{...e,deploymentSchedulerProvider:"qstash"}}I();import hA from"node:path";import{homedir as kA}from"node:os";var dk=hA.join(kA(),".kynver","config.json");function pk(e=!1){let r=v(),t=Gl(r),n={...t,configPath:q(dk),configAttestationExample:{deploymentSchedulerProvider:"qstash"}};if(e){console.log(JSON.stringify(n,null,2)),t.ok||(process.exitCode=1);return}console.log(`AgentOS scheduler provider cutover checklist
-`),console.log("Deployment (Vercel):");for(let o of jl)console.log(`  - ${o}`);console.log(`
-User runner:`);for(let o of Vl)console.log(`  - ${o}`);if(console.log(`
+`)}function qs(e=_r){return Jg(e)?Rl(qg(e,"utf8")):new Map}function Xg(e,r={}){let t=r.filePath??_r,n=Jg(t)?qg(t,"utf8"):"",o=Rl(n),s=[],i=[];for(let u of r.removeKeys??[])o.delete(u)&&i.push(u);for(let[u,d]of Object.entries(e)){if(d===void 0)continue;let m=o.get(u);o.set(u,d),m!==d&&s.push(u)}let a=Rl(n),l=a.size!==o.size;if(!l){for(let[u,d]of o)if(a.get(u)!==d){l=!0;break}}let c=MP(o);return l&&(NP(zg.dirname(t),{recursive:!0}),TP(t,c,{mode:384})),{path:t,changed:l,keysWritten:s,keysRemoved:i}}var xr="watchdog:board-sweep",BP="*/5 * * * *",LP=["Set KYNVER_SCHEDULER_PROVIDER=kynver-cron on the hosted Kynver deployment (Vercel).","Set KYNVER_CRON_SECRET to the same value written to ~/.kynver/.env by this installer.","Unset KYNVER_CRON_STORE_PATH on Vercel \u2014 the connected box owns the local store.","Keep QSTASH_TOKEN only if other non-watchdog schedules still use QStash (analyst/market jobs)."];function Qg(e){let r=e.storePath?.trim()||yr(),t=e.envFilePath?.trim()||_r,n=WP.join(UP(),".kynver","config.json"),o=`/api/agent-os/by-id/${e.agentOsId}/scheduler/fire`,s=[];e.apiBaseUrl?.trim()||s.push("apiBaseUrl \u2014 run `kynver setup --api-base-url \u2026`"),e.agentOsId?.trim()||s.push("agentOsId \u2014 run `kynver setup --agent-os-id \u2026`");let i={KYNVER_API_URL:e.apiBaseUrl,KYNVER_CRON_SECRET:e.cronSecret,KYNVER_CRON_STORE_PATH:r,KYNVER_CRON_TICK_ENABLED:"1"},a=["OPENCLAW_CRON_STORE_PATH","OPENCLAW_CRON_SECRET","OPENCLAW_CRON_FIRE_BASE_URL"],l={deploymentSchedulerProvider:"kynver-cron",apiBaseUrl:e.apiBaseUrl,agentOsId:e.agentOsId,...e.defaultDaemonRunId?{defaultDaemonRunId:e.defaultDaemonRunId}:{}};return{envFilePath:t,configPath:n,storePath:r,envUpdates:i,envRemovals:a,configUpdates:l,deploymentSteps:LP,prerequisites:s,systemdSupported:process.platform==="linux",watchdogSpec:{kind:"watchdog",cron:BP,dedupeKey:xr,callbackPath:o}}}async function Jt(e){let r=e.envFilePath??_r,t=[],n=or(),o=await Js(n),s=qs(r);t.push({id:"config_agent_os",ok:!!e.config.agentOsId?.trim(),summary:e.config.agentOsId?`agentOsId configured (${e.config.agentOsId})`:"agentOsId missing in ~/.kynver/config.json",remediation:"Run `kynver setup --agent-os-id <id>`."}),t.push({id:"config_api_base",ok:!!(e.config.apiBaseUrl?.trim()||n.fireBaseUrl),summary:n.fireBaseUrl?`fire base URL resolved (${n.fireBaseUrl})`:"KYNVER_API_URL / apiBaseUrl not configured",remediation:"Run `kynver setup --api-base-url https://\u2026`."}),t.push({id:"deployment_provider",ok:e.config.deploymentSchedulerProvider==="kynver-cron",summary:`deploymentSchedulerProvider=${e.config.deploymentSchedulerProvider??"(unset)"}`,remediation:'Run `kynver cron install` or set deploymentSchedulerProvider to "kynver-cron".'}),t.push({id:"cron_secret",ok:!!n.secret,summary:n.secret?"KYNVER_CRON_SECRET present":"KYNVER_CRON_SECRET missing",remediation:"Run `kynver cron install` to generate and persist the shared secret."}),t.push({id:"env_file",ok:zs(r)&&!!s.get("KYNVER_CRON_SECRET"),summary:zs(r)?`~/.kynver/.env present (${s.size} keys)`:"~/.kynver/.env missing",remediation:"Run `kynver cron install` to write ~/.kynver/.env."}),t.push({id:"cron_store",ok:zs(n.storePath),summary:zs(n.storePath)?`cron store present (${n.storePath})`:`cron store missing (${n.storePath})`,remediation:"Run `kynver cron install` to initialize the local store."});let a=(await Br(n.storePath).catch(()=>[])).find(u=>u.spec.dedupeKey===xr);t.push({id:"watchdog_local",ok:!!a,summary:a?`watchdog entry in local store (${a.providerScheduleId})`:"watchdog entry not mirrored in local cron store",remediation:"Run `kynver cron install` (with API access) to register and mirror watchdog."}),t.push({id:"daemon_primary",ok:o.daemonPrimary,summary:o.daemonPrimary?"cron tick enabled with credentials (daemon-primary)":`cron primary=${o.primary}; tickEnabled=${o.env.tickEnabled}`,remediation:"Ensure KYNVER_CRON_TICK_ENABLED=1 and run `kynver daemon` (or enable the systemd user unit)."});let l=s.has("OPENCLAW_CRON_STORE_PATH")||s.has("OPENCLAW_CRON_SECRET")||s.has("OPENCLAW_CRON_FIRE_BASE_URL");return t.push({id:"legacy_openclaw_env",ok:!l,summary:l?"legacy OPENCLAW_CRON_* keys still present in ~/.kynver/.env":"no legacy OPENCLAW_CRON_* keys in env file",remediation:"Re-run `kynver cron install` to retire legacy aliases."}),{ok:t.every(u=>u.ok),checks:t}}O();Ze();w();import{existsSync as mh}from"node:fs";import{createHash as HP}from"node:crypto";function Zg(e){let r=JSON.stringify({cb:e.callbackPath,cron:e.cron??null,runAt:e.runAt??null,kind:e.kind,target:e.target,dedupeKey:e.dedupeKey??null});return`kc-cron:${HP("sha1").update(r).digest("hex").slice(0,16)}`}async function bl(e,r,t={}){return fetch(e,{...t,headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`,...t.headers}})}async function eh(e,r,t,n={}){let o=new URLSearchParams(n),s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs?${o}`,i=await bl(s,t),a=await i.text(),l=null;try{l=JSON.parse(a)}catch{l=null}if(!i.ok)throw new Error(`list scheduler jobs failed (${i.status}): ${l?.error??a.slice(0,200)}`);return l?.items??[]}async function rh(e,r,t,n,o={}){let s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/watchdog/ensure`,i={};n&&(i.cron=n),o.requireProvider&&(i.requireProvider=o.requireProvider);let a=await bl(s,t,{method:"POST",body:JSON.stringify(i)}),l=await a.text(),c=null;try{c=JSON.parse(l)}catch{c=null}if(!a.ok||!c?.job)throw new Error(`ensure watchdog failed (${a.status}): ${c?.error??l.slice(0,200)}`);return{job:c.job,route:c.route??`/api/agent-os/by-id/${r}/scheduler/fire`,dedupeKey:c.dedupeKey??xr,requestedCron:c.requestedCron??n??"*/5 * * * *",selectedProvider:c.selectedProvider??c.job.provider??null}}async function th(e,r,t,n){let o=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs/${encodeURIComponent(t)}/cancel`,s=await bl(o,n,{method:"POST",body:"{}"});if(!s.ok){let i=await s.text();throw new Error(`cancel job ${t} failed (${s.status}): ${i.slice(0,200)}`)}}function nh(e,r,t=xr){return{kind:"watchdog",scheduleKind:"cron",cron:r,callbackPath:`/api/agent-os/by-id/${e}/scheduler/fire`,payload:{source:"agent-os.watchdog-schedule",agentOsId:e},target:{agentOsId:e},description:"Watchdog board sweep (repair loop)",dedupeKey:t}}function oh(e){return e.filter(r=>r.kind==="watchdog"&&r.dedupeKey===xr&&r.provider==="qstash"&&r.status!=="cancelled")}function FP(e){return e.find(r=>r.kind==="watchdog"&&r.dedupeKey===xr&&r.provider==="kynver-cron"&&r.status!=="cancelled")}function sh(e){return FP(e)?{allowed:!0}:{allowed:!1,reason:"Cannot cancel QStash watchdog until hosted KYNVER_SCHEDULER_PROVIDER=kynver-cron is live and a kynver-cron watchdog row exists. Set Vercel env, redeploy, re-run `kynver cron install`, then `--confirm-qstash-removal`."}}import{randomBytes as $P}from"node:crypto";function KP(){return $P(32).toString("base64url")}function ih(e=_r){let r=Bi();if(r)return{secret:r,generated:!1,source:"env"};let n=qs(e).get("KYNVER_CRON_SECRET")?.trim();return n?{secret:n,generated:!1,source:"env-file"}:{secret:KP(),generated:!0,source:"generated"}}import{realpathSync as jP}from"node:fs";function Xs(e=process.argv[1]){let r=process.env.KYNVER_BIN?.trim();if(r)return r;let t=e?.trim();if(!t)return"kynver";try{return jP.native(t)}catch{return t}}function ah(e){return/\s/.test(e)?`"${e.replace(/"/g,'\\"')}"`:e}import{existsSync as GP,mkdirSync as YP,writeFileSync as JP}from"node:fs";import{homedir as qP}from"node:os";import uh from"node:path";import{spawnSync as ch}from"node:child_process";import{spawnSync as VP}from"node:child_process";var vl="1.5G";var eo;function ro(){return process.env.KYNVER_BUILD_SKIP_SYSTEMD==="1"||process.env.KYNVER_BUILD_SKIP_SYSTEMD==="true"?!1:eo!==void 0?eo:process.platform!=="linux"?(eo=!1,!1):(eo=VP("systemd-run",["--version"],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}).status===0,eo)}function Sl(e){let r=e.memoryMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_MAX??vl,t=e.memorySwapMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_SWAP_MAX??"2G",n=["systemd-run","--scope","--collect","-p",`MemoryMax=${r}`,"-p",`MemorySwapMax=${t}`];return e.cwd&&n.push("--working-directory",e.cwd),n.push("--",...e.command),n}var wl="kynver-cron-daemon.service";function zP(){return uh.join(qP(),".config","systemd","user")}function XP(e){let r=ah(e.kynverBin?.trim()||Xs());return["[Unit]","Description=Kynver AgentOS daemon (pipeline + cron tick)","After=network-online.target","","[Service]","Type=simple",`EnvironmentFile=${e.envFilePath}`,`ExecStart=${r} daemon --run ${e.runId} --agent-os-id ${e.agentOsId} --execute`,"Restart=on-failure","RestartSec=10","","[Install]","WantedBy=default.target",""].join(`
+`)}function dh(e,r){if(!ro())return{supported:!1,unitPath:null,written:!1,enabled:!1,started:!1,note:process.platform==="linux"?"systemd-run not available \u2014 install user service manually or run `kynver daemon` under your supervisor.":"systemd user units are only supported on Linux; use `kynver daemon` manually on macOS/Windows."};let t=zP(),n=uh.join(t,wl),o=XP(e);if(!r)return{supported:!0,unitPath:n,written:!1,enabled:!1,started:!1,note:"Dry-run \u2014 pass --execute to write and enable the user unit."};YP(t,{recursive:!0});let s=GP(n);JP(n,o,"utf8");let i=ch("systemctl",["--user","daemon-reload"],{encoding:"utf8"});if(i.status!==0)return{supported:!0,unitPath:n,written:!0,enabled:!1,started:!1,note:`Wrote ${n} but systemctl --user daemon-reload failed: ${i.stderr||i.stdout}`};let a=ch("systemctl",["--user","enable","--now",wl],{encoding:"utf8"});return{supported:!0,unitPath:n,written:!s||!0,enabled:a.status===0,started:a.status===0,note:a.status===0?`Enabled and started ${wl}`:`Wrote ${n} but enable failed: ${a.stderr||a.stdout}`}}M();function ph(e,r){if(r?.trim())return r.trim();if(e.defaultDaemonRunId?.trim())return e.defaultDaemonRunId.trim();let t=te().runsDir;return mh(t)?Y().sort((o,s)=>Date.parse(s.createdAt)-Date.parse(o.createdAt))[0]?.id??null:null}async function Qs(e={}){let r=e.execute!==!1,t=v(),n=Xe(e.apiBaseUrl?.trim()||t.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||""),o=e.agentOsId?.trim()||t.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||"",s=ih(),i=Qg({config:t,apiBaseUrl:n,agentOsId:o,cronSecret:s.secret,defaultDaemonRunId:e.runId?.trim()||t.defaultDaemonRunId,installSystemd:e.installSystemd===!0}),a=[...i.prerequisites],l={ok:!1,dryRun:!r,plan:i,secretGenerated:s.generated,configPath:q(i.configPath),storeInitialized:!1,blockers:a};if(a.length)return l;if(r){let c=Xg(i.envUpdates,{filePath:i.envFilePath,removeKeys:i.envRemovals});l.envFile={path:q(c.path),changed:c.changed,keysWritten:c.keysWritten};let u={...t,...i.configUpdates},d=ph(u,e.runId);d&&(u.defaultDaemonRunId=d),tr(u),process.env.KYNVER_API_URL=n,process.env.KYNVER_CRON_SECRET=s.secret,process.env.KYNVER_CRON_STORE_PATH=i.storePath,process.env.KYNVER_CRON_TICK_ENABLED="1";let m=await Zu(i.storePath);l.storeInitialized=m.created||mh(i.storePath);let f=ne();if(f)try{let p=await Ur(o,{baseUrl:n,apiKey:f});Mr(o,p)}catch{}if(!e.skipWatchdog)if(!f)l.watchdog={error:"KYNVER_API_KEY required to register watchdog on server"},a.push("login \u2014 run `kynver login --api-key \u2026` to register watchdog remotely");else try{let p=await rh(n,o,f,void 0,{requireProvider:"kynver-cron"}),h=nh(o,p.requestedCron,p.dedupeKey),k={providerScheduleId:Zg(h),spec:h,registeredAt:new Date().toISOString(),paused:!1};await Qu(k,i.storePath),l.watchdog={remoteJobId:p.job.id,provider:p.selectedProvider??p.job.provider,localProviderScheduleId:k.providerScheduleId};let g=await eh(n,o,f),R=oh(g),I=["Phase 1 (local): `kynver cron install` writes box env/store and may fail remote watchdog until Vercel cutover.","Phase 2 (hosted): set KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET on Vercel, redeploy, re-run install.","Phase 3 (cleanup): `kynver cron install --confirm-qstash-removal` after a kynver-cron watchdog row exists.","Analyst/market QStash schedules are never touched by this installer."],P=[];if(R.length)if(e.confirmQstashRemoval){let E=sh(g);if(!E.allowed)a.push(E.reason);else for(let D of R)await th(n,o,D.id,f),P.push(D.id)}else a.push(`${R.length} QStash watchdog job(s) still active \u2014 complete Vercel cutover (KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET), re-run install, then --confirm-qstash-removal`);l.qstashWatchdog={found:R.map(E=>({id:E.id,provider:E.provider,status:E.status})),removed:P,manualSteps:I}}catch(p){l.watchdog={error:p.message},a.push(`watchdog registration failed: ${p.message}`)}if(e.installSystemd){let p=ph({...t,...i.configUpdates},e.runId);if(!p)l.systemd={supported:i.systemdSupported,unitPath:null,written:!1,enabled:!1,started:!1,note:"No harness run found \u2014 run `kynver run create` first or pass --run <runId>."},a.push("harness run \u2014 create a run before installing systemd unit");else{try{B(p)}catch{a.push(`harness run ${p} not found`)}l.systemd=dh({envFilePath:i.envFilePath,agentOsId:o,runId:p,kynverBin:Xs()},r)}}if(!e.skipTestFire&&a.length===0){let p=await Et({agentOsIdFilter:o});l.testFire={fired:p.fired,errors:p.errors},p.errors>0&&a.push(`test fire reported ${p.errors} error(s) \u2014 check server KYNVER_CRON_SECRET matches`)}else e.skipTestFire&&(l.testFire={fired:0,errors:0,skipped:!0});l.verify=await Jt({config:v(),envFilePath:i.envFilePath}),l.blockers=a,l.ok=a.length===0&&(l.verify?.ok??!1)}else l.ok=a.length===0;return l}var QP=["deployment_provider","cron_secret","env_file","cron_store"];function fh(e){let r=e?.trim().toLowerCase();if(r==="qstash"||r==="kynver-cron"||r==="openclaw-cron")return r;if(r==="openclaw")return"openclaw-cron"}function ZP(e){let r=fh(process.env.KYNVER_SCHEDULER_PROVIDER);if(r==="qstash"||r==="openclaw-cron")return!1;if(r==="kynver-cron")return!0;let t=fh(e.deploymentSchedulerProvider);return t==="qstash"||t==="openclaw-cron"?!1:t==="kynver-cron"?!0:!!(e.agentOsId?.trim()&&e.apiBaseUrl?.trim())}async function eE(e){if(!ZP(e))return{expectsKynverCron:!1,ready:!0,failedChecks:[]};let t=(await Jt({config:e})).checks.filter(n=>QP.includes(n.id)&&!n.ok);return{expectsKynverCron:!0,ready:t.length===0,failedChecks:t}}function rE(e){let r=["Run `kynver cron install` on this box."];for(let t of e)t.remediation&&r.push(`  \u2022 ${t.id}: ${t.remediation}`);return r}function Cl(e){return e===!0||e==="true"||e==="1"||e==="yes"||e==="on"}async function gh(e){if(Cl(e.args.skipCron))return{action:"skipped"};let r=await eE(e.config);if(!r.expectsKynverCron||r.ready)return{action:"ready"};console.log(""),console.log("  Local Kynver Cron is not ready \u2014 running `kynver cron install`\u2026");let t=Cl(e.args.installSystemd)||Cl(e.args["install-systemd"]),n=await Qs({execute:!0,skipTestFire:!0,agentOsId:e.agentOsId,runId:e.runId,installSystemd:t});if(n.ok)return console.log("  Kynver Cron configured for this box."),console.log(""),{action:"installed",installOk:!0};console.log(""),console.log("  Cron install did not fully complete (daemon will still start):");for(let o of n.blockers)console.log(`    ! ${o}`);if(n.plan.deploymentSteps.length){console.log(""),console.log("  Hosted deployment (complete on Vercel, then re-run install):");for(let o of n.plan.deploymentSteps)console.log(`    - ${o}`)}for(let o of rE(r.failedChecks))console.log(`  ${o}`);return console.log(""),{action:"guided",installOk:!1,blockers:n.blockers}}function nE(e,r){return e.filter(n=>n.repo===r&&!ir.has(n.status)).sort((n,o)=>(o.createdAt??"").localeCompare(n.createdAt??""))[0]?.id??null}async function hh(e){Pt();let r=v();(!ne()||!r.agentOsId?.trim())&&(console.log("  This machine isn't linked yet \u2014 running bootstrap first."),await Ko(e),r=v());let t=(typeof e.agentOsId=="string"?e.agentOsId.trim():"")||r.agentOsId?.trim()||"";t||(console.error("No AgentOS workspace configured \u2014 run `kynver bootstrap` (or pass --agent-os-id)."),process.exit(1)),yn(t).ok||(console.error(Lo(t)),process.exit(1)),e.chatOauth===!0&&r.chatUseClaudeOauth!==!0&&(tr({...r,chatUseClaudeOauth:!0}),r=v(),console.log("  Chat: Claude Code OAuth opt-in saved (delegated turns may use your local subscription)."));let o=(typeof e.repo=="string"?e.repo.trim():"")||r.defaultRepo?.trim()||He()?.repo||"";o||(console.error("No repo configured \u2014 pass --repo /path/to/repo or run `kynver setup --discover-repo`."),process.exit(1));let s=typeof e.run=="string"&&e.run.trim()?e.run.trim():"";s||(s=nE(Y(),o)??"",s?console.log(`  Reusing run ${s} for ${o}.`):s=Ys({...e,repo:o,name:"agent"}).runId),await gh({config:r,agentOsId:t,runId:s,args:e}),console.log(""),console.log(`  ${tE.hostname()} \u2014 agent coming online`),console.log(`    workspace: ${t}`),console.log(`    repo:      ${o}`),console.log(`    run:       ${s}`),console.log("  Ctrl-C stops the agent. (Advanced control: `kynver daemon --help`.)"),console.log("");let i={...e,run:s,agentOsId:t};if(Vs(i)){await Gs(i,oE(s,t,e));return}await js(i)}function oE(e,r,t){if(!yn(r).ok)throw new Error(Lo(r));let o=["daemon","--run",e,"--agent-os-id",r];return typeof t.intervalMs=="string"&&t.intervalMs.trim()&&o.push("--interval-ms",t.intervalMs.trim()),(t.execute===!1||t.execute==="false")&&o.push("--execute","false"),typeof t.stallMs=="string"&&t.stallMs.trim()&&o.push("--stall-ms",t.stallMs.trim()),o}M();M();J();import{existsSync as sE,rmSync as iE}from"node:fs";import _l from"node:path";function aE(e){let r=e.replace(/\\/g,"/").replace(/^\.\//,"").trim();if(!r||r.startsWith("/")||r.includes(".."))throw new Error(`unsafe path: ${e}`);return r}function lE(e){return typeof e!="string"||!e.trim()?[]:e.split(",").map(r=>r.trim()).filter(Boolean)}function cE(e){let{runId:r,workerName:t}=Ve(e),n=me(r,t),o=[...lE(e.path),...Array.isArray(e.paths)?e.paths:[]];if(o.length===0)return{ok:!1,removed:[],reason:"requires at least one --path"};let s=_l.resolve(n.worktreePath),i=[];for(let c of o){let u=aE(c),d=_l.resolve(s,u);if(!d.startsWith(s+_l.sep)&&d!==s)return{ok:!1,removed:i,reason:`path escapes worktree: ${c}`};if(!sE(d))return{ok:!1,removed:i,reason:`path not found: ${c}`};iE(d,{recursive:!0,force:!0}),i.push(u)}let a=Array.isArray(n.disposableArtifactsRemoved)?n.disposableArtifactsRemoved.filter(c=>typeof c=="string"):[];n.disposableArtifactsRemoved=[...new Set([...a,...i])],H(n.runId,n);let l=T(n);return{ok:!0,removed:i,...l.changedFiles.length?{reason:"worktree still has other changes"}:{}}}function kh(e){let r=cE(e);console.log(JSON.stringify(r,null,2)),r.ok||process.exit(1)}O();import ME from"node:path";vo();var uE=/--max-old-space-size=(\d+)/;function dE(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function xl(){return dE(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB,1024)}function Pl(e=process.env){let r={...e};if(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB==="0")return r;let t=r.NODE_OPTIONS??"";if(uE.test(t))return r;let o=`--max-old-space-size=${xl()}`;return r.NODE_OPTIONS=t.trim()?`${t.trim()} ${o}`:o,r}function qt(e=xl()){return`--max-old-space-size=${e}`}O();import{spawnSync as pE}from"node:child_process";vo();function Zs(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Rh(e=v()){let r=process.env.KYNVER_BUILD_MEM_BUDGET_BYTES?Zs(process.env.KYNVER_BUILD_MEM_BUDGET_BYTES,1610612736):void 0,t=process.env.KYNVER_BUILD_MEM_RESERVE_BYTES?Zs(process.env.KYNVER_BUILD_MEM_RESERVE_BYTES,2147483648):void 0;return{perBuildBudgetBytes:r??Zs(e.perWorkerMemBytes,1610612736),reserveBytes:t??Zs(e.memReserveBytes,2147483648)}}var ei=0;function Il(){ei+=1}function Ol(){ei=Math.max(0,ei-1)}function zt(e={}){let r={...Rh(),...e},t=e.memAvailableBytes??sn(),n=r.perBuildBudgetBytes+r.reserveBytes,o=t>=n;return{admitted:o,memAvailableBytes:t,requiredBytes:n,activeBuilds:ei,reason:o?null:`insufficient memory: need ${n} bytes available (budget ${r.perBuildBudgetBytes} + reserve ${r.reserveBytes}), have ${t}`}}function mE(e){e<=0||pE(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function Nl(e,r=2e3,t={}){let n=Date.now()+Math.max(0,e),o=zt({...t,memAvailableBytes:t.memAvailableBytes?.()});for(;!o.admitted&&Date.now()<n;)mE(Math.min(r,n-Date.now())),o=zt({...t,memAvailableBytes:t.memAvailableBytes?.()});return o}import{spawnSync as TE}from"node:child_process";w();import{closeSync as kE,existsSync as Tl,mkdirSync as yE,openSync as RE,readdirSync as vh,readFileSync as bE,unlinkSync as Ml,writeFileSync as vE}from"node:fs";import Ul from"node:path";import{mkdirSync as fE}from"node:fs";import{tmpdir as gE}from"node:os";import ri from"node:path";function hE(){return!!(process.env.VERCEL||process.env.VERCEL_ENV||process.env.AWS_LAMBDA_FUNCTION_NAME||process.env.AWS_EXECUTION_ENV)}function bh(){let e=process.env.KYNVER_HEAVY_VERIFICATION_STATE_ROOT;return e?ri.resolve(e):hE()?ri.join(gE(),"kynver","state","heavy-verification"):ri.join(Ss(),"heavy-verification")}function to(){return ri.join(bh(),"slots")}function Xt(){let e=to();return fE(e,{recursive:!0}),e}var Qt=120*6e4,Dl=1;function SE(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function oo(){let e=process.env.KYNVER_HEAVY_VERIFICATION_SKIP?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function no(){let e=process.env.KYNVER_HEAVY_VERIFICATION_MAX_CONCURRENT;return e?SE(e,Dl):Dl}function wE(e){return`slot-${e}`}function Sh(e,r=to()){return Ul.join(r,`${e}.json`)}function Wl(e){if(!Tl(e))return null;try{let r=JSON.parse(bE(e,"utf8"));if(typeof r.slotId=="string"&&typeof r.pid=="number"&&typeof r.acquiredAt=="string"&&typeof r.command=="string")return r}catch{return null}return null}function ti(e,r=Qt){if(!e||!L(e.pid))return!0;let t=Date.parse(e.acquiredAt);return Number.isNaN(t)?!0:Date.now()-t>r}function CE(e,r){let t=Wl(e);if(ti(t,r))try{Ml(e)}catch{}}function _E(e){return yE(e,{recursive:!0}),e}function oi(e={}){let r=_E(e.slotsDir??Xt()),t=e.staleMs??Qt,n=0;for(let o of vh(r)){if(!o.endsWith(".json"))continue;let s=Ul.join(r,o),i=Tl(s);CE(s,t),i&&!Tl(s)&&(n+=1)}return n}function wh(e={}){let r=e.slotsDir??Xt(),t=e.staleMs??Qt;oi({slotsDir:r,staleMs:t});let n=[];for(let o of vh(r)){if(!o.endsWith(".json"))continue;let s=Wl(Ul.join(r,o));s&&!ti(s,t)&&n.push(s)}return n}function ni(e={}){return wh(e).length}function Zt(e,r={}){if(oo())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:no(),reason:null};let t=r.slotsDir??Xt(),n=r.staleMs??Qt,o=r.maxSlots??no();oi({slotsDir:t,staleMs:n});for(let i=0;i<o;i+=1){let a=wE(i),l=Sh(a,t),c=Wl(l);if(c&&ti(c,n))try{Ml(l)}catch{}else if(c&&!ti(c,n))continue;let u={slotId:a,pid:process.pid,acquiredAt:new Date().toISOString(),command:e};try{let d=RE(l,"wx");vE(d,JSON.stringify(u,null,2),"utf8"),kE(d);let m=ni({slotsDir:t,staleMs:n});return{admitted:!0,slotId:a,activeSlots:m,maxSlots:o,reason:null}}catch(d){if(d.code==="EEXIST")continue;throw d}}let s=ni({slotsDir:t,staleMs:n});return{admitted:!1,slotId:null,activeSlots:s,maxSlots:o,reason:`heavy verification at capacity (${s}/${o} slots)`}}function so(e,r={}){if(!e)return;let t=Sh(e,r.slotsDir??to());try{Ml(t)}catch{}}function io(e,r={}){if(oo())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:no(),reason:null};let t=r.slotsDir??Xt(),n=r.staleMs??Qt,o=r.maxSlots??no();oi({slotsDir:t,staleMs:n});let s=ni({slotsDir:t,staleMs:n}),i=s<o;return{admitted:i,slotId:null,activeSlots:s,maxSlots:o,reason:i?null:`heavy verification at capacity (${s}/${o} slots); waiting for ${e}`}}import{spawnSync as xE}from"node:child_process";function PE(e){e<=0||xE(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function Bl(e,r,t=2e3,n={}){let o=Date.now()+Math.max(0,r),s=Zt(e,n);for(;!s.admitted&&Date.now()<o;)PE(Math.min(t,o-Date.now())),s=Zt(e,n);return s}var EE=/\b(npm run typecheck|tsc\b[^|&;]*--noEmit|node scripts\/verify-pr-local\.mjs|kynver (harness )?verify)\b/i,AE=/\b(npm run build\b|next build\b)\b/i,IE=/\b(vercel (build|deploy|--prod))\b/i,OE=/\b(openai|anthropic|perplexity|voyage)\b.*\b(api|cli)\b|\b(paid|billable)[-_ ]?compute\b/i;function Ll(e){let r=e.trim();return r?OE.test(r)?{heavy:!0,commandClass:"paid_compute",reason:"paid external compute requires heavy-verification token and operator approval"}:IE.test(r)?{heavy:!0,commandClass:"vercel_verify",reason:"Vercel build/deploy verification requires heavy-verification token"}:AE.test(r)?{heavy:!0,commandClass:"full_build",reason:"full app build requires heavy-verification token"}:EE.test(r)?{heavy:!0,commandClass:"full_typecheck",reason:"full repo typecheck requires heavy-verification token"}:{heavy:!1,commandClass:"allowed",reason:null}:{heavy:!1,commandClass:"allowed",reason:null}}var si="heavy_verification_token_required";function Hl(e,r={}){let t=Ll(e);if(!t.heavy)return{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:"command does not require heavy-verification token",verificationGate:{...io(e),slotId:null}};if(oo())return{allowed:!0,outcome:"heavy_verification_skipped",commandClass:t.commandClass,reason:"KYNVER_HEAVY_VERIFICATION_SKIP bypasses gate",verificationGate:{...io(e),slotId:null}};let n=r.waitMs??0,o=n>0?Bl(e,n,r.pollMs):Zt(e);return o.admitted?{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:t.reason??"heavy-verification token acquired",verificationGate:o}:{allowed:!1,outcome:si,commandClass:t.commandClass,reason:t.reason??o.reason??si,verificationGate:o}}Ce();import Fl from"node:path";function NE(e){let r=hr(be()),t=Fl.relative(r,Fl.resolve(e));return t.length>0&&!t.startsWith("..")&&!Fl.isAbsolute(t)}function Ch(e){return NE(e)?(typeof process.getuid=="function"?process.getuid():null)===0?{ok:!1,reason:"Refusing build/install as root inside a harness worktree \u2014 generated caches become root-owned and block daemon cleanup. Run kynver daemon and workers as the harness owner (never sudo kynver)."}:{ok:!0}:{ok:!0}}function DE(e){let r=[];for(let[t,n]of Object.entries(e))n!==void 0&&r.push(`${t}=${n}`);return r}function _h(e,r){let t=TE(e[0],e.slice(1),{cwd:r.cwd,env:r.env,encoding:"utf8",stdio:["ignore","pipe","pipe"],shell:r.shell,timeout:r.timeoutMs});return{exitCode:t.status??1,stdout:(t.stdout??"").trim(),stderr:(t.stderr??"").trim()}}function $l(e){let r=e.waitForAdmissionMs??6e5,t=Hl(e.command,{waitMs:r}),n=t.verificationGate;if(!t.allowed)return{ok:!1,exitCode:1,stdout:"",stderr:t.reason,admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:qt(),admission:zt(),verificationGate:n,gateOutcome:t.outcome,command:e.command};let o=n.slotId,s=r>0?Nl(r):zt();if(!s.admitted)return so(o),{ok:!1,exitCode:1,stdout:"",stderr:s.reason??"build admission denied",admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:qt(),admission:s,verificationGate:n,command:e.command};let i=Ch(e.cwd);if(!i.ok)return so(o),{ok:!1,exitCode:1,stdout:"",stderr:i.reason,admitted:!0,wrappedWithSystemd:!1,nodeOptionsFlag:qt(),admission:s,verificationGate:n,command:e.command};let a=Pl({...process.env,...e.env}),l=qt(),c=ro();Il();try{let u;if(c){let d=Sl({cwd:e.cwd,command:["/usr/bin/env",...DE(a),"/bin/bash","-lc",e.command]});u=_h(d,{cwd:e.cwd,env:a,timeoutMs:e.timeoutMs})}else u=_h([e.command],{cwd:e.cwd,env:a,shell:!0,timeoutMs:e.timeoutMs});return{ok:u.exitCode===0,exitCode:u.exitCode,stdout:u.stdout,stderr:u.stderr,admitted:!0,wrappedWithSystemd:c,nodeOptionsFlag:l,admission:s,verificationGate:n,gateOutcome:t.outcome,command:e.command}}finally{Ol(),so(o)}}var Kl=["npm run typecheck","npm run test"];function ii(e,r=Kl,t={}){let n=[],o=!0;for(let s of r){let i=$l({cwd:e,command:s,waitForAdmissionMs:t.waitForAdmissionMs,timeoutMs:t.timeoutMs});n.push({command:s,result:i}),i.ok||(o=!1)}return{passed:o,steps:n}}w();function xh(e){let r=e.indexOf(":");if(r<=0)throw new Error(`invalid --evidence ${e} (expected type:value)`);return{type:e.slice(0,r),value:e.slice(r+1)}}async function Ph(e){let r=N(e.plan?String(e.plan):void 0,"plan"),t=(e.agentOsId?String(e.agentOsId):v().agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=N(e.role?String(e.role):void 0,"role"),o=N(e.status?String(e.status):void 0,"status"),s=[],i=e.evidence;if(Array.isArray(i))for(let I of i)s.push(xh(String(I)));else typeof i=="string"&&s.push(xh(i));let a=K(e.baseUrl?String(e.baseUrl):void 0),l=await G(e.secret?String(e.secret):void 0,t,{baseUrl:a}),c=`${a}/api/agent-os/by-id/${encodeURIComponent(t)}/plans/${encodeURIComponent(r)}/progress-events`,u=v(),m=`provider:${Xo(u.workerProvider,sr)}`,p=(e.proposed===!0||e.proposed==="true"?!0:e.proposed===!1||e.proposed==="false"?!1:void 0)??(o!=="done"&&(n==="implementer"||n==="repair_implementer")),h={rowKey:e.row?String(e.row):void 0,rowId:e.rowId?String(e.rowId):void 0,taskId:e.task?String(e.task):void 0,reviewTaskId:e.reviewTask?String(e.reviewTask):void 0,roleLane:n,status:o,note:e.note?String(e.note):void 0,remainingWork:e.remaining?String(e.remaining):void 0,evidence:s.length?s:void 0,executorRef:e.executorRef?String(e.executorRef):m};p!==void 0&&(h.proposed=p);let k=await fetch(c,{method:"POST",headers:Ne(l),body:JSON.stringify(h)}),g=await k.text(),R=null;try{R=JSON.parse(g)}catch{R=g}k.ok||(console.error(JSON.stringify({httpStatus:k.status,response:R},null,2)),process.exit(1)),console.log(JSON.stringify(R,null,2))}function UE(e){let r=N(e.worktree?String(e.worktree):void 0,"worktree"),t=ME.resolve(r),n=ii(t),o=e.json===!0||e.json==="true",s={passed:n.passed,worktree:t,steps:n.steps};console.log(o?JSON.stringify(s,null,2):n.passed?"local plan verify passed":"local plan verify failed"),n.passed||process.exit(1)}async function Eh(e){let r=N(e.plan?String(e.plan):void 0,"plan");if(e.local===!0||e.local==="true"){UE(e);return}let n=v().agentOsSlug;n||(console.error("requires agentOsSlug in ~/.kynver/config.json for verify (session route)"),process.exit(1));let o=K(e.baseUrl?String(e.baseUrl):void 0),s=process.env.KYNVER_API_KEY,i={"Content-Type":"application/json"};s&&(i.Authorization=`Bearer ${s}`);let a=`${o}/api/agent-os/${encodeURIComponent(n)}/plans/${encodeURIComponent(r)}/verify`,l=await fetch(a,{method:"POST",headers:i,body:JSON.stringify({worktreePath:e.worktree?String(e.worktree):void 0,taskId:e.task?String(e.task):void 0,humanOverride:e.humanOverride===!0||e.humanOverride==="true"})}),c=await l.text(),u=null;try{u=JSON.parse(c)}catch{u=c}l.ok||(console.error(JSON.stringify({httpStatus:l.status,response:u},null,2)),process.exit(1)),console.log(JSON.stringify(u,null,2))}import WE from"node:path";w();function Ah(e){let r=WE.resolve(N(e.worktree?String(e.worktree):void 0,"worktree")),t=e.json===!0||e.json==="true"||e.emitJson===!0||e.emitJson==="true",n=[],o=e.command;if(Array.isArray(o))for(let a of o)n.push(String(a));else typeof o=="string"&&n.push(o);let s=ii(r,n.length?n:Kl,{waitForAdmissionMs:e.waitForAdmissionMs?Number(e.waitForAdmissionMs):void 0,timeoutMs:e.timeoutMs?Number(e.timeoutMs):void 0}),i={passed:s.passed,worktree:r,steps:s.steps.map(a=>({command:a.command,ok:a.result.ok,exitCode:a.result.exitCode,admitted:a.result.admitted,wrappedWithSystemd:a.result.wrappedWithSystemd,nodeOptionsFlag:a.result.nodeOptionsFlag,admission:a.result.admission,verificationGate:a.result.verificationGate,stderr:a.result.stderr.slice(0,4e3)}))};if(t)console.log(JSON.stringify(i,null,2));else{console.log(s.passed?"harness verify passed":"harness verify failed");for(let a of i.steps)console.log(`  ${a.ok?"\u2713":"\u2717"} ${a.command} (exit ${a.exitCode}, systemd=${a.wrappedWithSystemd})`),!a.ok&&a.stderr&&console.log(`    ${a.stderr.split(`
+`)[0]}`)}process.exit(s.passed?0:1)}O();import{readFileSync as BE}from"node:fs";w();var LE=["create","add_version","update_metadata"],HE=["approval_guard","auth","network","server","tool_interruption"];function FE(e){let r=e.bodyFile?String(e.bodyFile):void 0;if(r)return{body:BE(r,"utf8"),bodyPathHint:r};let t=e.body?String(e.body):void 0;if(t)return{body:t};throw new Error("requires --body-file PATH or --body TEXT")}async function Ih(e){let r=N(e.operation?String(e.operation):void 0,"operation");if(!LE.includes(r))throw new Error(`invalid --operation ${r}`);let t=r,n=v(),o=N(e.slug?String(e.slug):n.agentOsSlug,"slug (or agentOsSlug in ~/.kynver/config.json)"),s=N(e.title?String(e.title):void 0,"title"),{body:i,bodyPathHint:a}=FE(e);a&&Ln(a)&&console.warn(JSON.stringify({warning:"/tmp-only body path is not durable; AgentOS persistence requires outbox or successful API write",bodyPathHint:a}));let l={operation:t,agentOsSlug:o,title:s,body:i,bodyPathHint:a,summary:e.summary?String(e.summary):void 0,planId:e.plan?String(e.plan):void 0,planSlug:e.planSlug?String(e.planSlug):void 0,changeSummary:e.changeSummary?String(e.changeSummary):void 0,author:e.author?String(e.author):void 0,model:e.model?String(e.model):void 0,maxRetries:e.maxRetries?Number(e.maxRetries):void 0,immediateFailure:$E(e)},c=await Fn(l);console.log(JSON.stringify(c,null,2)),c.userStatus==="failed and needs action"&&process.exit(1)}function $E(e){let r=e.failureKind?String(e.failureKind):void 0;if(!r)return;if(!HE.includes(r))throw new Error(`invalid --failure-kind ${r}`);let t=e.failureMessage?String(e.failureMessage):`immediate failure (${r})`;return{kind:r,message:t}}async function Oh(){let e=Lt();console.log(JSON.stringify({count:e.length,items:e},null,2))}async function Nh(e){let r=e.max?Number(e.max):void 0,t=e.id?String(e.id):void 0,n=await Oa({max:r,outboxId:t});console.log(JSON.stringify(n,null,2)),n.failed>0&&process.exit(1)}function Th(e){let r=e.execute===!0||e.execute==="true",t=e.skipFinalize===!0||e.skipFinalize==="true",n=e.accountBytes===!0||e.accountBytes==="true",o=e.compact===!0||e.compact==="true",s=e.nodeModulesAgeMs,i=s!=null&&s!=="",a=i?Number(s):void 0,l=e.worktreesAgeMs?Number(e.worktreesAgeMs):0,c=e.includeOrphans===!0||e.includeOrphans==="true",u=e.harnessRoot?String(e.harnessRoot):void 0,d=dl({execute:r,finalizeStaleRuns:!t,accountBytes:n,scanDependencyCaches:i,nodeModulesAgeMs:a!==void 0&&Number.isFinite(a)?a:i?216e5:void 0,worktreesAgeMs:Number.isFinite(l)?l:0,includeOrphans:c,harnessRoot:u});o&&d.compactSummary?console.log(JSON.stringify(d.compactSummary,null,2)):console.log(JSON.stringify(d,null,2)),r&&d.totals.removedPaths===0&&d.actions.length===0&&(process.exitCode=0)}an();function Dh(e){let r=e.execute===!0||e.execute==="true",t=e.json===!0||e.json==="true",n=e["purge-all"]===!0||e["purge-all"]==="true",o=e["keep-newest"]?Number(e["keep-newest"]):void 0;if(r||n){let a=Ms({execute:r,purgeAll:n,keepNewest:o}),l={...a,observation:a.observation?{...a.observation,dumps:a.observation.dumps.map(c=>({name:c.name,bytes:c.bytes,executableHint:c.executableHint,mtimeMs:c.mtimeMs}))}:null};console.log(JSON.stringify(l,null,t?2:0));return}let s=fr(),i=s?{...s,dumps:s.dumps.map(a=>({name:a.name,bytes:a.bytes,executableHint:a.executableHint,mtimeMs:a.mtimeMs}))}:{skipped:!0,reason:"not_wsl"};console.log(JSON.stringify(i,null,t?2:0))}function Pr(e,r=2400){if(e==null)return;let n=(typeof e=="string"?e:JSON.stringify(e,null,2)).trim();if(n)return n.length<=r?n:`${n.slice(0,r-1).trimEnd()}\u2026`}function ai(e){let r=[],t=typeof e.monitorId=="string"?e.monitorId:void 0;if(r.push(t?`Harness monitor tick \xB7 ${e.runId} (${t})`:`Harness monitor tick \xB7 ${e.runId}`),!e.workers.length)return r.push("No workers in scope for this poll."),{primary:r.join(`
+`),diagnostic:Pr(e)};for(let i of e.workers){let a=i.autoComplete.eligible?"eligible for auto-complete":"not auto-completing",l=i.autoComplete.blockers.length>0?` (${i.autoComplete.blockers.slice(0,2).join("; ")})`:"";r.push(`\u2022 ${i.worker}: ${i.workerStatus}, ${i.health}${i.healthReason?` \u2014 ${i.healthReason}`:""}; ${a}${l}`),i.taskStatus&&r.push(`  Board task: ${i.taskStatus}${i.leaseOwner?` (lease: ${i.leaseOwner})`:""}`)}let n=e.autoCompleted?.filter(i=>i.outcome==="completed"&&i.ok)??[],o=e.autoCompleted?.filter(i=>!i.ok&&i.outcome!=="skipped")??[];n.length&&r.push(`Auto-completed: ${n.map(i=>i.worker).join(", ")} \u2014 AgentOS completion should be posted.`),o.length&&r.push(`Auto-complete blocked: ${o.map(i=>`${i.worker}${i.reason?` (${i.reason})`:""}`).join("; ")}`),e.leaseRenewal?.failed?.length&&r.push(`Lease renew failed for: ${e.leaseRenewal.failed.map(i=>i.worker).join(", ")}`);let s=e.workers.length>0&&e.workers.every(i=>i.autoComplete.terminalVerified)&&(e.autoCompleted?.every(i=>i.ok||i.outcome==="skipped")??!0);return r.push(s?"Next: monitor loop should stop \u2014 all workers terminal and handled.":"Next: monitor will poll again until workers are terminal-verified or max time elapses."),{primary:r.join(`
+`),diagnostic:Pr(e)}}import zE from"node:path";M();J();w();J();w();function Mh(e){let{worker:r,status:t,taskLease:n}=e,o=n?.leaseOwner??null;if(r.dispatched&&n){if(n.status==="running"&&o&&!ia(o,r.runId))return{health:"orphaned",reason:`task lease held by ${o}, expected harness run ${r.runId}`};let i=r.leaseToken?.trim()??"",a=n.leaseToken?.trim()??"";if(n.status==="running"&&i&&a&&i!==a)return{health:"orphaned",reason:"task leaseToken superseded on board \u2014 completion replay would fail"};if(n.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"board task running but worker process is not alive"}}if(r.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"worker.json still running but process is dead"};if(t.attention.state==="stale")return{health:"stale",reason:t.attention.reason};let s=t.lastHeartbeatAt?Date.parse(t.lastHeartbeatAt):NaN;return t.alive&&Number.isFinite(s)&&Date.now()-s>Rt?{health:"stale",reason:`heartbeat older than ${Math.floor(Rt/1e3)}s`}:t.alive&&r.pid&&!L(r.pid)?{health:"orphaned",reason:"pid recorded but process is not alive"}:n?.status==="running"&&!t.alive&&t.finalResult?{health:"healthy",reason:"finished worker awaiting completion replay"}:{health:"healthy",reason:t.attention.reason||"worker within expected lifecycle bounds"}}Ce();w();import{existsSync as Uh,mkdirSync as YE,readdirSync as JE,unlinkSync as qE}from"node:fs";import jl from"node:path";function Wh(){let{harnessRoot:e}=dt(),r=jl.join(e,"monitors");return YE(r,{recursive:!0}),r}function en(e,r){return r?`${b(e)}--${b(r)}`:b(e)}function Vl(e){return jl.join(Wh(),`${e}.json`)}function rn(e){return _(Vl(e),void 0)}function tn(e){de(Vl(e.monitorId),e)}function Bh(e){let r=Vl(e);return Uh(r)?(qE(r),!0):!1}function Lh(){let e=Wh();if(!Uh(e))return[];let r=[];for(let t of JE(e)){if(!t.endsWith(".json"))continue;let n=_(jl.join(e,t),void 0);n?.monitorId&&r.push({monitorId:n.monitorId,runId:n.runId,workerName:n.workerName,agentOsId:n.agentOsId,pid:n.pid,alive:n.pid?L(n.pid):!1,startedAt:n.startedAt,pollMs:n.pollMs,logPath:n.logPath})}return r.sort((t,n)=>t.startedAt.localeCompare(n.startedAt))}J();function Gl(e){let{worker:r,status:t}=e,n=[];r.localOnly&&n.push("local-only worker (no board linkage)"),(!r.agentOsId||!r.taskId)&&n.push("missing agentOsId/taskId linkage"),cs(r)&&n.push("completion already acknowledged"),r.completionBlocker&&n.push(r.completionBlocker),t.heartbeatBlocker&&t.alive&&n.push(`worker heartbeat blocker: ${t.heartbeatBlocker}`),t.attention.state==="blocked"&&n.push(t.attention.reason||"worker attention blocked"),bt(t)&&n.push(t.attention.reason||"landing gate blocked");let o=oe(t),s;return o?t.finalResult?s="final_result":t.alive?s="terminal_status":s="process_exited":n.push("worker has not reached a terminal condition"),{eligible:o&&n.length===0,terminalVerified:o,terminalReason:s,blockers:n}}function Hh(e,r){return _(zE.join(x(e),"workers",b(r),"worker.json"),void 0)}function Fh(e,r){let t=B(e),n=Object.keys(t.workers||{});if(!r)return n;let o=b(r);return n.filter(s=>b(s)===o)}function $h(e,r){let t=B(e.runId),n=T(e,{base:t.base,baseCommit:t.baseCommit}),o=e.taskId?r.get(e.taskId)??null:null,s=Mh({worker:e,status:n,taskLease:o}),i=Gl({worker:e,status:n});return{runId:e.runId,worker:e.name,health:s.health,healthReason:s.reason,workerStatus:n.status,attentionState:n.attention.state,attentionReason:n.attention.reason,alive:n.alive,taskId:e.taskId,leaseOwner:o?.leaseOwner??void 0,taskStatus:o?.status,autoComplete:i,status:n}}async function ao(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=e.agentOsId?String(e.agentOsId):void 0,o=B(r),s=Fh(r,t),i=[];for(let p of s){let h=Hh(r,p);h&&i.push(h)}let a=n||i.map(p=>p.agentOsId).find(p=>typeof p=="string"&&p.trim())||void 0,l=i.map(p=>p.taskId).filter(p=>!!p),c=await Dt({agentOsId:a,taskIds:l,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}),u=i.map(p=>$h(p,c)),d;a&&e.renewLeases!==!1&&e.renewLeases!=="false"&&(d=await ss(r,{...e,agentOsId:a}));let m=[];if(e.autoComplete===!0||e.autoComplete==="true")for(let p of u){if(!p.autoComplete.eligible){m.push({worker:p.worker,outcome:"skipped",ok:!1,reason:p.autoComplete.blockers.join("; ")||"not eligible"});continue}let h=await Mt({run:r,name:p.worker,...a?{agentOsId:a}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});m.push({worker:p.worker,outcome:h.outcome,ok:h.outcome==="completed",reason:h.reason})}return{runId:r,agentOsId:a,workers:u,leaseRenewal:d,autoCompleted:m}}function Kh(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=Fh(r,t),o=[];for(let s of n){let i=Hh(r,s);i&&o.push($h(i,new Map))}return{runId:r,workers:o,autoCompleted:[]}}function Yl(){return Lh()}function jh(e){let r=String(e.run||"");N(r,"--run");let t=en(r,e.name?String(e.name):void 0),n=rn(t);if(!n)return{monitorId:t,stopped:!1};if(n.pid&&L(n.pid))try{process.kill(n.pid,"SIGTERM")}catch{}return n.stoppedAt=new Date().toISOString(),tn(n),Bh(t),{monitorId:t,stopped:!0,pid:n.pid}}async function Jl(e){let r=String(e.run||""),t=String(e.name||"");N(r,"--run"),N(t,"--name");let n=me(r,t),o=B(r),s=T(n,{base:o.base,baseCommit:o.baseCommit}),i=Gl({worker:n,status:s});if(!i.eligible){console.log(JSON.stringify({runId:r,worker:t,outcome:"blocked",blockers:i.blockers,terminalVerified:i.terminalVerified},null,2)),process.exitCode=1;return}let a=await Mt({...e,run:r,name:t});console.log(JSON.stringify(a,null,2)),a.outcome!=="completed"&&a.outcome!=="blocked"&&(process.exitCode=1)}w();var XE=5e3,QE=360*60*1e3;async function Vh(e){let r=String(e.monitorId||""),t=Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):XE,n=Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):QE,o=Date.now();for(;Date.now()-o<=n;){let s=r?rn(r):void 0;if(s?.stoppedAt)break;let i=await ao({...e,autoComplete:e.autoComplete??!0,renewLeases:e.renewLeases??!0}),a=ai({monitorId:r,phase:"tick",...i});if(console.log(a.primary),a.diagnostic&&console.error(`[monitor diagnostic] ${a.diagnostic}`),i.workers.length>0&&i.workers.every(c=>c.autoComplete.terminalVerified&&(c.autoComplete.eligible||c.autoComplete.blockers.some(u=>u.includes("already acknowledged"))))&&i.autoCompleted.every(c=>c.ok||c.outcome==="skipped")){r&&s&&(s.stoppedAt=new Date().toISOString(),tn(s));break}Ar(t)}}w();Ce();import{spawn as ZE}from"node:child_process";import{closeSync as Gh,existsSync as eA,openSync as rA}from"node:fs";import Yh from"node:path";import{fileURLToPath as tA}from"node:url";function nA(){return Yh.join(tA(new URL(".",import.meta.url)),"cli.js")}function Jh(e){let r=e.cliPath??nA();if(!eA(r))return;let t=en(e.runId,e.workerName),{harnessRoot:n}=dt(),o=Yh.join(n,"monitors",`${t}.log`),s;try{s=rA(o,"a")}catch{s=void 0}let i=e.nodeExecutable??process.execPath,a=e.pollMs??5e3,l=[r,"monitor","run-loop","--run",e.runId,"--monitor-id",t,"--poll-ms",String(a),"--auto-complete","true","--renew-leases","true"];e.workerName&&l.push("--name",e.workerName),e.agentOsId&&l.push("--agent-os-id",e.agentOsId),e.baseUrl&&l.push("--base-url",e.baseUrl),e.secret&&l.push("--secret",e.secret);let c=["ignore",s??"ignore",s??"ignore"];try{let u=ZE(i,l,ue({detached:!0,stdio:c,env:process.env}));s!==void 0&&Gh(s),u.unref();let d={monitorId:t,runId:e.runId,workerName:e.workerName,agentOsId:e.agentOsId,pid:u.pid,startedAt:new Date().toISOString(),pollMs:a,logPath:o};return tn(d),{monitorId:t,pid:u.pid,logPath:o,session:d}}catch{if(s!==void 0)try{Gh(s)}catch{}return}}w();async function qh(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=en(r,t),o=rn(n);if(o?.pid&&!o.stoppedAt)return{monitorId:n,session:o,spawned:!1,pid:o.pid};let s=Jh({runId:r,workerName:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0});if(!s)throw new Error("failed to spawn monitor sidecar (cli.js missing or spawn error)");return{monitorId:n,session:s.session,spawned:!0,pid:s.pid}}async function zh(e){if(String(e.run||"")){let t=e.tick===!0||e.tick==="true"?await ao({...e,autoComplete:!1}):Kh(e);console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({monitors:Yl()},null,2))}function Xh(e){console.log(JSON.stringify(jh(e),null,2))}function Qh(){console.log(JSON.stringify({monitors:Yl()},null,2))}async function Zh(e){await Vh(e)}async function ek(e){let r=await ao(e);console.log(JSON.stringify(r,null,2))}import{existsSync as oA,readFileSync as sA}from"node:fs";import{dirname as ql,join as tk}from"node:path";import{fileURLToPath as rk}from"node:url";function iA(e){let r=ql(rk(e));for(let t=0;t<6;t+=1){if(oA(tk(r,"package.json")))return r;let n=ql(r);if(n===r)break;r=n}throw new Error(`package.json not found above ${ql(rk(e))}`)}function nk(e=import.meta.url){let r=tk(iA(e),"package.json"),t=JSON.parse(sA(r,"utf8"));if(typeof t.version!="string"||!t.version.trim())throw new Error(`Missing package.json version at ${r}`);return t.version}var li=nk();function aA(e){return e.some(r=>r==="--version"||r==="-v")}function lA(e,r){console.log(r?`${r} ${e}`:e),process.exit(0)}function ok(e,r=import.meta.url,t){return aA(e)?(lA(nk(r),t),!0):!1}function cA(e){let r={};for(let[t,n]of Object.entries(e))n?.version&&(r[t]={version:n.version,source:"installed",path:n.path});return r}async function uA(e={}){let[r,t]=await Promise.all([$s(),Promise.resolve(fg({cwd:e.cwd,repoRoot:e.repoRoot}))]),n={},o=e.selfPackageName==="@kynver-app/runtime"&&e.selfVersion?e.selfVersion:li;return n["@kynver-app/runtime"]={version:o,source:"self"},e.selfPackageName&&e.selfVersion&&e.selfPackageName!=="@kynver-app/runtime"&&(n[e.selfPackageName]={version:e.selfVersion,source:"self"}),{installed:cA(r),repo:t,self:n}}async function sk(e={}){let r=await uA(e);return hg(r)}function ik(e,r){return e?e==="daemon"||e==="start"||e==="worker"||e==="monitor"||e==="run"&&(r==="dispatch"||r==="sweep"||r==="reconcile"||r==="unblock")||e==="cron"&&r==="tick":!1}w();function dA(e){let r=e.trim();return r?Zn().find(n=>n.name===r&&n.status!=="completed")??null:null}function ak(e){let r=String(N(String(e.name||""),"--name")),t=dA(r);console.log(JSON.stringify({runId:t?.id??null,name:r,status:t?.status??null,effectiveStatus:t?.effectiveStatus??null},null,2))}M();J();w();O();import pA from"node:path";function lo(e,r,t,n,o,s){return{runId:e,worker:r,taskId:t,agentOsId:n,leaseOwner:o,action:"skipped",reason:s}}async function mA(e){let r=K(e.baseUrl?String(e.baseUrl):void 0),t=e.agentOsId?String(e.agentOsId).trim():null,n=e.dryRun===!0||e.dryRun==="true",o=[],s=[],i=[];for(let a of Y())for(let l of Object.keys(a.workers??{})){let c=pA.join(x(a.id),"workers",b(l),"worker.json"),u=_(c,void 0);if(!u){s.push(lo(a.id,l,"","","","worker.json missing"));continue}let d=u.taskId??"",m=u.agentOsId??"",f=u.leaseOwner??"";if(!u.dispatched||!d||!m||!f){s.push(lo(a.id,l,d,m,f,"not a fully-leased dispatched worker"));continue}if(t&&m!==t)continue;if(u.completionReportedAt){s.push(lo(a.id,l,d,m,f,"completion already reported"));continue}let p=T(u);if(p.finalResult){s.push(lo(a.id,l,d,m,f,"has final result \u2014 let pipeline tick complete it"));continue}if(p.alive){s.push(lo(a.id,l,d,m,f,"worker process is still alive"));continue}if(n){o.push({runId:a.id,worker:l,taskId:d,agentOsId:m,leaseOwner:f,action:"released",reason:"dry-run: would release dead dispatched worker lease"});continue}try{let h=await G(e.secret?String(e.secret):void 0,m,{baseUrl:r}),k=`${r}/api/agent-os/by-id/${encodeURIComponent(m)}/tasks/${encodeURIComponent(d)}/release`,g=await X(k,h,{agentOsId:m,leaseOwner:f},{agentOsId:m,baseUrl:r});g.ok===!0||g.response?.ok===!0?o.push({runId:a.id,worker:l,taskId:d,agentOsId:m,leaseOwner:f,action:"released",reason:"dead dispatched worker lease released; task requeued"}):s.push({runId:a.id,worker:l,taskId:d,agentOsId:m,leaseOwner:f,action:"skipped",reason:`release returned ok:false (likely owner mismatch or already released): HTTP ${g.status}`})}catch(h){i.push({runId:a.id,worker:l,taskId:d,agentOsId:m,leaseOwner:f,action:"error",reason:h.message})}}return{dryRun:n,released:o,skipped:s,errors:i}}async function lk(e){let r=await mA(e),t={ok:r.errors.length===0,dryRun:r.dryRun,released:r.released.length,skipped:r.skipped.length,errors:r.errors.length,details:r};console.log(JSON.stringify(t,null,2)),r.errors.length>0&&process.exit(1)}import gk from"node:path";Ze();O();import{accessSync as fA,constants as gA,existsSync as zl,readFileSync as hA}from"node:fs";import{homedir as ci}from"node:os";import ui from"node:path";import{spawnSync as kA}from"node:child_process";Ce();function ck(e,r){try{let t=kA(e,r,{encoding:"utf8"}),n=(t.stdout||"").trim(),o=(t.stderr||"").trim();return{ok:t.status===0,stdout:n,stderr:o,error:t.error?.message}}catch(t){return{ok:!1,stdout:"",stderr:"",error:t.message}}}function uk(e){let r=e?.trim();if(r)return r.length<=12?`${r}\u2026`:`${r.slice(0,12)}\u2026`}function yA(e){if(!zl(e))return!1;try{return fA(e,gA.W_OK),!0}catch{return!1}}var dk={packageVersion:()=>li,commandOnPath:e=>ck(process.platform==="win32"?"where":"which",[e]),kynverVersion:e=>ck(e,["--version"]),loadConfig:()=>v(),configFilePath:()=>ui.join(ci(),".kynver","config.json"),credentialsFilePath:()=>ui.join(ci(),".kynver","credentials"),readCredentials:()=>{let e=ui.join(ci(),".kynver","credentials");if(!zl(e))return{hasApiKey:!1};try{let r=JSON.parse(hA(e,"utf8"));return{hasApiKey:!!r.apiKey?.trim(),runnerTokenPrefix:uk(r.runnerToken),runnerTokenAgentOsId:r.runnerTokenAgentOsId}}catch{return{hasApiKey:!1}}},envSnapshot:()=>({kynverApiUrl:process.env.KYNVER_API_URL?.trim()||void 0,openclawCronFireBaseUrl:process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||void 0,kynverRunnerTokenPrefix:uk(process.env.KYNVER_RUNNER_TOKEN),kynverRuntimeSecret:!!process.env.KYNVER_RUNTIME_SECRET?.trim(),openclawCronSecret:!!process.env.OPENCLAW_CRON_SECRET?.trim(),kynverHarnessRoot:process.env.KYNVER_HARNESS_ROOT?.trim()||void 0,opusHarnessRoot:process.env.OPUS_HARNESS_ROOT?.trim()||void 0,kynverSchedulerProvider:process.env.KYNVER_SCHEDULER_PROVIDER?.trim()||void 0,openclawCronStorePath:!!(process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim()),kynverCronDaemonPrimary:jo(),qstashTokenPresent:!!process.env.QSTASH_TOKEN?.trim(),kynverHostedDeployment:(()=>{let e=process.env.KYNVER_HOSTED_DEPLOYMENT?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"})()}),harnessRoot:()=>be(),legacyOpenclawHarnessRoot:()=>ui.join(ci(),".openclaw","harness"),pathExists:e=>zl(e),pathWritable:e=>yA(e)};function pk(e,r){return e.kynverSchedulerProvider==="openclaw-cron"||r.deploymentSchedulerProvider==="openclaw-cron"}function RA(e,r){return e.kynverSchedulerProvider==="kynver-cron"||r.deploymentSchedulerProvider==="kynver-cron"}function mk(e){return!!e.openclawCronStorePath}function bA(e,r){return e.kynverSchedulerProvider==="qstash"||r.deploymentSchedulerProvider==="qstash"}function fk(e,r){let t={schedulerProvider:e.kynverSchedulerProvider??null,deploymentSchedulerProvider:r.deploymentSchedulerProvider??null,openclawCronStorePath:!!e.openclawCronStorePath,kynverCronDaemonPrimary:!!e.kynverCronDaemonPrimary},n=!!r.agentOsId?.trim()&&!!r.apiBaseUrl?.trim()&&r.hasScopedRunnerToken;if(bA(e,r)&&!pk(e,r)){let u=e.kynverSchedulerProvider==="qstash"?"KYNVER_SCHEDULER_PROVIDER=qstash on this host":"deploymentSchedulerProvider=qstash in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler cut over to QStash (${u})`,details:t}}if(RA(e,r)&&!pk(e,r)){if(mk(e)&&e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=e.kynverSchedulerProvider==="kynver-cron"?"KYNVER_SCHEDULER_PROVIDER=kynver-cron on this host":"deploymentSchedulerProvider=kynver-cron in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler owned by Kynver Cron (${u})`,details:t}}if(mk(e)){if(e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=[];return e.openclawCronStorePath&&u.push("KYNVER_CRON_STORE_PATH or OPENCLAW_CRON_STORE_PATH set (local cron store)"),{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Local cron store without daemon tick (${u.join("; ")})`,remediation:"Run `kynver daemon` with KYNVER_CRON_SECRET + KYNVER_API_URL (or KYNVER_CRON_FIRE_BASE_URL) so the daemon-owned cron tick fires schedules. On hosted deploys use QStash (KYNVER_SCHEDULER_PROVIDER=qstash). Legacy OpenClaw cron env aliases still work during cutover.",details:t}}let o=e.kynverSchedulerProvider==="openclaw-cron",s=r.deploymentSchedulerProvider==="openclaw-cron",i=e.kynverSchedulerProvider==="qstash",a=!!e.qstashTokenPresent||!!e.kynverHostedDeployment,l=a&&!n,c=l&&e.kynverSchedulerProvider==="openclaw-cron";return s&&!o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"deploymentSchedulerProvider=openclaw-cron in ~/.kynver/config.json \u2014 migrate to kynver-cron or qstash",remediation:'Run `kynver scheduler attest-cutover` or set deploymentSchedulerProvider to "kynver-cron" or "qstash" in ~/.kynver/config.json.',details:t}:n&&o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 dispatch is owned by kynver daemon; unset the OpenClaw override",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:n?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:i?"Runner override qstash present; hosted dispatch still owned by kynver daemon pipeline-tick":"Hosted dispatch owned by kynver daemon (pipeline-tick \u2192 operator/tick); no OpenClaw cron on runner",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 hosted dispatch still depends on the OpenClaw local-cron adapter",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,hostedDeployment:a}}:c?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment has KYNVER_SCHEDULER_PROVIDER=openclaw-cron \u2014 AgentOS scheduled ticks should use QStash or kynver-cron",remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server (or kynver-cron for Kynver-owned local scheduling). User runners use `kynver daemon` for dispatch and should not set a scheduler provider.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:l&&e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"QSTASH_TOKEN present; hosted scheduler auto-selects qstash (explicit KYNVER_SCHEDULER_PROVIDER=qstash optional)",details:{schedulerProvider:null,qstashTokenPresent:!0,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment with no QSTASH_TOKEN and no KYNVER_SCHEDULER_PROVIDER \u2014 kynver-cron is an in-process stub here and will NOT fire; no firing scheduler is configured",remediation:"Set QSTASH_TOKEN + KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server for hosted AgentOS schedules. Only use kynver-cron when a `kynver daemon` (or local cron store) actually owns firing on this box.",details:{schedulerProvider:null,resolvedFallback:"none",qstashTokenPresent:!1,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&e.kynverSchedulerProvider&&e.kynverSchedulerProvider!=="qstash"&&e.kynverSchedulerProvider!=="kynver-cron"?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Hosted deployment without QSTASH_TOKEN (KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}) \u2014 use qstash or kynver-cron`,remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server, or kynver-cron for Kynver-owned local scheduling. User runners use `kynver daemon` for dispatch.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}`,details:{schedulerProvider:e.kynverSchedulerProvider??null}}:{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"No KYNVER_SCHEDULER_PROVIDER on runner (expected) \u2014 finish runner setup so daemon pipeline-tick owns dispatch",details:{schedulerProvider:null,dispatchPath:"kynver-daemon-pipeline-tick-pending"}}}function vA(e){let r={pass:0,warn:0,fail:0};for(let t of e)for(let n of t.checks)r[n.status]+=1;return r}function SA(e){let r=e.packageVersion(),t=e.commandOnPath("kynver"),n=t.ok&&t.stdout.length>0,o=n?t.stdout.split(/\r?\n/)[0]?.trim():void 0,s=o?q(o):void 0,i=[{id:"cli_running_version",label:"Running @kynver-app/runtime version",status:"pass",summary:`@kynver-app/runtime ${r}`,details:{version:r}},{id:"cli_on_path",label:"kynver executable on PATH",status:n?"pass":"warn",summary:n?`Found ${s}`:"kynver not found on PATH (invoked via node/npx?)",remediation:n?void 0:"Install globally (`npm i -g @kynver-app/runtime`) or invoke via `npx @kynver-app/runtime`.",details:{path:s}}];if(n&&o){let a=e.kynverVersion(o),l=a.stdout.replace(/^kynver\s+/i,"").trim()||void 0,c=a.ok&&(!l||l===r);i.push({id:"cli_installed_version",label:"Installed kynver CLI version matches running package",status:c?"pass":"warn",summary:a.ok&&l?c?`Installed ${l}`:`Installed ${l} differs from running ${r}`:a.error?`Could not read installed version (${a.error})`:a.stderr||"Could not read installed version",remediation:c?void 0:"Reinstall or rebuild @kynver-app/runtime so PATH kynver matches the harness worktree version.",details:{installedVersion:l,runningVersion:r,path:s}})}return{id:"cli_package",label:"CLI / package",checks:i}}function wA(e){let r=e.configFilePath(),t=q(r),n=e.pathExists(r),o=e.loadConfig(),s=[{id:"config_file",label:"~/.kynver/config.json present",status:n?"pass":"fail",summary:n?`Found ${t}`:`Missing ${t}`,remediation:n?void 0:"Run `kynver setup --api-base-url <url> --agent-os-id <id> --repo <path>`.",details:{configPath:t}}];if(n){let i=o.apiBaseUrl?.trim(),a=o.agentOsId?.trim(),l=He({config:o}),c=l?vn(l):null,u=Su(l);s.push({id:"config_api_base_url",label:"Default API base URL",status:i?"pass":"warn",summary:i??"Not set in config (KYNVER_API_URL / --base-url required per command)",remediation:i?void 0:"Set `apiBaseUrl` via `kynver setup --api-base-url https://\u2026`.",details:{apiBaseUrl:i??null}},{id:"config_agent_os_id",label:"Default AgentOS id",status:a?"pass":"warn",summary:a??"Not set (pass --agent-os-id on daemon/dispatch/worker commands)",remediation:a?void 0:"Set `agentOsId` via `kynver setup --agent-os-id <uuid>`.",details:{agentOsId:a??null,agentOsSlug:o.agentOsSlug??null}},{id:"config_default_repo",label:"Default repo path",status:u.status,summary:l?l.persistedInConfig?`${c.defaultRepo} (config)`:`${c.defaultRepo} (${l.source}, not persisted in ~/.kynver/config.json)`:"Not set in ~/.kynver/config.json (`kynver run create` requires --repo)",remediation:u.remediation,details:{defaultRepo:c?.defaultRepo??null,source:c?.source??null,persistedInConfig:c?.persistedInConfig??!1,harnessRoot:o.harnessRoot?Re(o.harnessRoot):null}})}return{id:"user_config",label:"User config (~/.kynver)",checks:s}}function CA(e){let t=e.loadConfig().agentOsId?.trim(),n=e.readCredentials(),o=e.envSnapshot(),s=e.credentialsFilePath(),i=q(s),a=o.kynverRunnerTokenPrefix,l=n.runnerTokenPrefix,c=n.runnerTokenAgentOsId,u=!!l&&(!t||!c||c===t),d=!!a?.startsWith("krc1.")||u&&l?.startsWith("krc1.");return{id:"runner_token",label:"Runner token readiness",checks:[{id:"runner_token_scoped",label:"Scoped runner token (krc1.*) ready",status:d?"pass":"fail",summary:d?a?"KYNVER_RUNNER_TOKEN is set (scoped prefix shown)":`Saved scoped token for agentOsId ${c??t??"(unknown)"}`:"No scoped runner token for the configured AgentOS workspace",remediation:d?void 0:"Run `kynver login` then `kynver runner credential --agent-os-id <id>` (or `kynver setup` with API key).",details:{source:a?"env":l?"credentials":"none",tokenPrefix:a??(u?l:void 0),agentOsId:t??c??null,credentialsPath:i}},{id:"runner_token_agent_os_match",label:"Saved runner token matches configured agentOsId",status:!l||!t||!c||c===t?"pass":"warn",summary:!l||!c?"No saved token agentOsId to compare":t?c===t?"Saved token scoped to configured agentOsId":`Saved token is for ${c}, config expects ${t}`:"Config agentOsId unset \u2014 token scope not validated against config",remediation:l&&t&&c&&c!==t?"`kynver runner credential --agent-os-id <configured-id>` to mint a workspace-bound token.":void 0,details:{configuredAgentOsId:t??null,savedAgentOsId:c??null}},{id:"runner_api_key_for_refresh",label:"API key available for token refresh",status:n.hasApiKey||process.env.KYNVER_API_KEY?.trim()?"pass":"warn",summary:n.hasApiKey||process.env.KYNVER_API_KEY?"KYNVER API key present for runner credential mint/refresh":"No API key \u2014 401 callback recovery cannot auto-mint a replacement token",remediation:n.hasApiKey||process.env.KYNVER_API_KEY?void 0:"Run `kynver login --api-key \u2026`.",details:{credentialsPath:i,hasApiKey:n.hasApiKey||!!process.env.KYNVER_API_KEY}}]}}function _A(e){let r=e.commandOnPath("vercel"),t=r.ok,n=!!(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()),o=!!process.env.VERCEL_TOKEN?.trim();return{id:"vercel_deploy_evidence",label:"Vercel deploy evidence",checks:[{id:"vercel_global_cli_absent",label:"Global Vercel CLI not installed",status:t?"warn":"pass",summary:t?`Global Vercel CLI found (${r.stdout||"on PATH"}) \u2014 uninstall after operator approval`:"No global Vercel CLI on PATH",remediation:t?"Uninstall global Vercel CLI (`npm uninstall -g vercel`) \u2014 use GitHub commit status or scoped VERCEL_TOKEN + REST API instead.":void 0,details:{path:t&&r.stdout||null}},{id:"github_token_for_vercel_status",label:"GitHub token for Vercel status",status:n?"pass":"warn",summary:n?"GITHUB_TOKEN/GH_TOKEN present for GitHub Vercel StatusContext evidence":"No GITHUB_TOKEN \u2014 merge-gate Vercel evidence requires GitHub commit status API",remediation:n?void 0:"Export GITHUB_TOKEN (or GH_TOKEN) for PR head commit status lookups."},{id:"vercel_api_token_optional",label:"Vercel API token (optional fallback)",status:o?"pass":"warn",summary:o?"VERCEL_TOKEN configured for optional REST API deployment lookup":"VERCEL_TOKEN unset \u2014 GitHub status is the default path; API fallback disabled",remediation:o?void 0:"Set ephemeral/scoped VERCEL_TOKEN only when GitHub status is insufficient; avoid persistent ~/.vercel auth on runner hosts."}]}}function xA(e){let r=e.harnessRoot(),t=gk.join(r,"runs"),n=gk.join(r,"worktrees"),o=Re(r),s=Re(t),i=Re(n),a=e.pathExists(t),l=e.pathExists(n);return{id:"harness_dirs",label:"Harness / daemon directories",checks:[{id:"harness_root",label:"Harness root resolved",status:"pass",summary:o,details:{harnessRoot:o}},{id:"harness_runs_dir",label:"Runs directory ready",status:a&&e.pathWritable(t)?"pass":"warn",summary:a?e.pathWritable(t)?`Writable ${s}`:`Exists but not writable: ${s}`:`Will be created on first run: ${s}`,remediation:a&&!e.pathWritable(t)?`Fix permissions on ${s} or set KYNVER_HARNESS_ROOT to a writable path.`:void 0,details:{runsDir:s,exists:a,writable:e.pathWritable(t)}},{id:"harness_worktrees_dir",label:"Worktrees directory ready",status:l&&e.pathWritable(n)?"pass":"warn",summary:l?e.pathWritable(n)?`Writable ${i}`:`Exists but not writable: ${i}`:`Will be created on first worker: ${i}`,remediation:l&&!e.pathWritable(n)?`Fix permissions on ${i}.`:void 0,details:{worktreesDir:i,exists:l,writable:e.pathWritable(n)}}]}}function PA(e){let r=e.loadConfig(),t=e.envSnapshot(),n=t.kynverApiUrl??r.apiBaseUrl?.trim()??t.openclawCronFireBaseUrl,o=!t.kynverApiUrl&&!r.apiBaseUrl&&!!t.openclawCronFireBaseUrl,s=t.openclawCronSecret||t.kynverRuntimeSecret,i=t.kynverRunnerTokenPrefix?.startsWith("krc1."),l=e.readCredentials().runnerTokenPrefix?.startsWith("krc1.");return{id:"callback_auth",label:"Callback auth / config",checks:[{id:"callback_base_url",label:"Callback base URL configured",status:n?o?"warn":"pass":"fail",summary:n?o?`Using legacy OPENCLAW_CRON_FIRE_BASE_URL (${n})`:n:"No KYNVER_API_URL, config apiBaseUrl, or legacy OpenClaw base URL",remediation:n?o?"Migrate to KYNVER_API_URL or `kynver setup --api-base-url` and drop OPENCLAW_CRON_FIRE_BASE_URL.":void 0:"Set KYNVER_API_URL or run `kynver setup --api-base-url https://\u2026`.",details:{source:t.kynverApiUrl?"KYNVER_API_URL":r.apiBaseUrl?"config.apiBaseUrl":t.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL":"none",baseUrl:n??null}},{id:"callback_auth_mode",label:"Callback auth uses scoped runner token",status:i||l?"pass":s?"warn":"fail",summary:i?"KYNVER_RUNNER_TOKEN scoped token will be sent as X-Kynver-Runner-Token":l?"Saved krc1.* token in ~/.kynver/credentials":s?"Deployment-level KYNVER_RUNTIME_SECRET / OPENCLAW_CRON_SECRET in use (legacy headers)":"No callback secret configured",remediation:i||l?void 0:"Mint a scoped token: `kynver runner credential --agent-os-id <id>`. Avoid shared OPENCLAW_CRON_SECRET on user runners.",details:{mode:i||l?"scoped":s?"legacy_global_secret":"missing",legacyHeadersWhenNotScoped:["X-OpenClaw-Cron-Secret","X-Kynver-Runtime-Secret"]}}]}}function EA(e){let r=e.envSnapshot(),t=e.loadConfig(),n=e.readCredentials(),o=e.harnessRoot(),s=e.legacyOpenclawHarnessRoot(),i=Re(o),a=Re(s),l=r.opusHarnessRoot?Re(r.opusHarnessRoot):null,c=o===s&&e.pathExists(s),u=t.agentOsId?.trim(),d=r.kynverRunnerTokenPrefix,m=n.runnerTokenPrefix,f=n.runnerTokenAgentOsId,p=!!m&&(!u||!f||f===u),h=!!d?.startsWith("krc1.")||p&&!!m?.startsWith("krc1.");return{id:"openclaw_hotspots",label:"OpenClaw dependency hotspots",checks:[{id:"hotspot_legacy_harness_root",label:"Legacy ~/.openclaw/harness still active",status:c?"warn":"pass",summary:c?`Harness root is legacy ${a}`:r.opusHarnessRoot?`OPUS_HARNESS_ROOT override in use (${l})`:`Using ${i}`,remediation:c?"Set KYNVER_HARNESS_ROOT=~/.kynver/harness (or run setup), migrate artifacts, retire OPUS_HARNESS_ROOT.":r.opusHarnessRoot?"Prefer KYNVER_HARNESS_ROOT over OPUS_HARNESS_ROOT.":void 0,details:{harnessRoot:i,legacyRoot:a,opusHarnessRoot:l}},{id:"hotspot_openclaw_env_secrets",label:"OpenClaw deployment secrets in runner env",status:r.openclawCronSecret||r.openclawCronFireBaseUrl?"warn":"pass",summary:r.openclawCronSecret||r.openclawCronFireBaseUrl?[r.openclawCronSecret?"OPENCLAW_CRON_SECRET set":null,r.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL set":null].filter(Boolean).join("; "):"No OpenClaw cron env overrides on this runner",remediation:r.openclawCronSecret||r.openclawCronFireBaseUrl?"Move to KYNVER_API_URL + scoped runner tokens; unset OpenClaw cron env on user-hosted runners.":void 0},fk(r,{agentOsId:u??null,apiBaseUrl:t.apiBaseUrl?.trim()??r.kynverApiUrl??null,hasScopedRunnerToken:h,deploymentSchedulerProvider:t.deploymentSchedulerProvider==="qstash"||t.deploymentSchedulerProvider==="kynver-cron"||t.deploymentSchedulerProvider==="openclaw-cron"?t.deploymentSchedulerProvider:void 0}),{id:"hotspot_lease_source_names",label:"Harness lease/completion source names",status:"pass",summary:"Runtime uses kynver-harness:* lease owners and completion source kynver-harness (OpenClaw names retired in runtime)",details:{leaseOwnerPattern:"kynver-harness:<runId>",completionSource:"kynver-harness",note:"OpenClaw adapter remains optional in packages/kynver-openclaw-agent-os only"}}]}}function hk(e=dk){let r=[SA(e),wA(e),CA(e),_A(e),xA(e),PA(e),EA(e)],t=vA(r),n=t.fail===0,o=n?t.warn>0?`Ready with ${t.warn} warning(s) \u2014 review remediation before retiring OpenClaw as primary runtime agent.`:"Ready \u2014 Kynver runtime can serve as primary runtime agent on this host.":`${t.fail} blocking check(s) \u2014 fix failures before OpenClaw takeover.`;return{command:"doctor runtime-takeover",ready:n,summary:o,counts:t,sections:r}}function kk(e={}){let r;if(e.remediateDefaultRepo===!0){let n=Sn();if(!n.ok){console.error(n.reason??"defaultRepo remediation failed"),n.remediation&&console.error(n.remediation),process.exitCode=1;return}n.remediated?r=`Remediated defaultRepo \u2192 ${n.resolved?.defaultRepo??"unknown"}`:r=`defaultRepo already persisted (${n.resolved?.defaultRepo??"unknown"})`}let t=hk();r&&(t.notes=[...t.notes??[],r]),console.log(JSON.stringify(t,null,2)),t.ready||(process.exitCode=1)}O();async function yk(e){let r=v(),t=(e.agentOsId?String(e.agentOsId):r.agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=K(e.baseUrl?String(e.baseUrl):r.apiBaseUrl),o=await G(e.secret?String(e.secret):void 0,t,{baseUrl:n}),s=new URLSearchParams;if(typeof e.since=="string"&&e.since.trim()&&s.set("since",e.since.trim()),e.limit!=null&&String(e.limit).trim()){let c=Number(e.limit);Number.isFinite(c)&&c>0&&s.set("limit",String(Math.floor(c)))}let i=s.toString()?`?${s.toString()}`:"",a=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/command-center/dashboard-contract${i}`,l=await qo(a,o);l.ok||(console.error(`dashboard-contract GET failed: HTTP ${l.status}`),l.response&&console.error(JSON.stringify(l.response,null,2)),process.exit(1)),console.log(JSON.stringify(l.response,null,2))}Ze();var Xl=["Vercel/hosted: set KYNVER_SCHEDULER_PROVIDER=qstash","Vercel/hosted: ensure QSTASH_TOKEN (and QStash signing keys) are configured","Vercel/hosted: unset OPENCLAW_CRON_STORE_PATH if present"],Ql=["User runner: unset KYNVER_SCHEDULER_PROVIDER (scheduling is deployment-owned)","User runner: unset OPENCLAW_CRON_STORE_PATH, OPENCLAW_CRON_SECRET, OPENCLAW_CRON_FIRE_BASE_URL",'User runner: after deployment cutover, run `kynver scheduler attest-cutover` (or set deploymentSchedulerProvider to "qstash" in ~/.kynver/config.json)',"Verify: kynver doctor runtime-takeover \u2014 hotspot_openclaw_scheduler should pass"];function AA(e=process.env){return{kynverSchedulerProvider:e.KYNVER_SCHEDULER_PROVIDER?.trim()||null,kynverCronStorePath:e.KYNVER_CRON_STORE_PATH?.trim()||e.OPENCLAW_CRON_STORE_PATH?.trim()||null,kynverCronSecret:!!(e.KYNVER_CRON_SECRET?.trim()||e.OPENCLAW_CRON_SECRET?.trim()),kynverCronFireBaseUrl:e.KYNVER_CRON_FIRE_BASE_URL?.trim()||e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null,openclawCronStorePath:e.OPENCLAW_CRON_STORE_PATH?.trim()||null,openclawCronSecret:!!e.OPENCLAW_CRON_SECRET?.trim(),openclawCronFireBaseUrl:e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}}function Zl(e,r=AA()){let t=[];return r.kynverSchedulerProvider==="openclaw-cron"&&t.push("Runner still has KYNVER_SCHEDULER_PROVIDER=openclaw-cron"),r.kynverCronStorePath&&r.kynverSchedulerProvider!=="kynver-cron"&&t.push("Runner has KYNVER_CRON_STORE_PATH but KYNVER_SCHEDULER_PROVIDER is not kynver-cron \u2014 use `kynver daemon` cron tick or unset the store for QStash-only runners"),r.openclawCronStorePath&&!r.kynverCronStorePath&&t.push("Runner still has legacy OPENCLAW_CRON_STORE_PATH (prefer KYNVER_CRON_STORE_PATH)"),e.deploymentSchedulerProvider==="openclaw-cron"&&t.push("~/.kynver/config.json deploymentSchedulerProvider is still openclaw-cron"),{ok:t.length===0,blockers:t,runnerEnv:r,deploymentSchedulerProvider:e.deploymentSchedulerProvider??null,deploymentSteps:[...Xl],runnerSteps:[...Ql]}}function Rk(e){return{...e,deploymentSchedulerProvider:"qstash"}}O();import IA from"node:path";import{homedir as OA}from"node:os";var bk=IA.join(OA(),".kynver","config.json");function vk(e=!1){let r=v(),t=Zl(r),n={...t,configPath:q(bk),configAttestationExample:{deploymentSchedulerProvider:"qstash"}};if(e){console.log(JSON.stringify(n,null,2)),t.ok||(process.exitCode=1);return}console.log(`AgentOS scheduler provider cutover checklist
+`),console.log("Deployment (Vercel):");for(let o of Xl)console.log(`  - ${o}`);console.log(`
+User runner:`);for(let o of Ql)console.log(`  - ${o}`);if(console.log(`
 This host:`),console.log(`  config: ${n.configPath}`),console.log(`  deploymentSchedulerProvider: ${t.deploymentSchedulerProvider??"(unset)"}`),console.log(`  KYNVER_SCHEDULER_PROVIDER: ${t.runnerEnv.kynverSchedulerProvider??"(unset)"}`),console.log(`  KYNVER_CRON_STORE_PATH: ${t.runnerEnv.kynverCronStorePath??"(unset)"}`),console.log(`  OPENCLAW_CRON_STORE_PATH (legacy): ${t.runnerEnv.openclawCronStorePath??"(unset)"}`),t.blockers.length){console.log(`
 Blockers:`);for(let o of t.blockers)console.log(`  ! ${o}`);process.exitCode=1;return}console.log(`
-No local blockers detected on this runner.`)}function mk(e=!1){let r=v(),t=Gl(r);if(!t.ok){let s={ok:!1,attested:!1,blockers:t.blockers,remediation:"Clear local OpenClaw scheduler blockers before attesting qstash cutover."};if(e)console.log(JSON.stringify(s,null,2));else{console.error("Cannot attest scheduler cutover \u2014 local blockers remain:");for(let i of t.blockers)console.error(`  ! ${i}`)}process.exitCode=1;return}let n=uk(r);rr(n);let o={ok:!0,attested:!0,configPath:q(dk),deploymentSchedulerProvider:"qstash",config:bt(n),note:"Recorded deploymentSchedulerProvider=qstash in ~/.kynver/config.json. Confirm Vercel has KYNVER_SCHEDULER_PROVIDER=qstash and QSTASH_TOKEN before relying on hosted schedules."};if(e){console.log(JSON.stringify(o,null,2));return}console.log(o.note),console.log(`  config: ${o.configPath}`)}async function fk(e){let r=await Hs();if(e){console.log(JSON.stringify(r,null,2));return}console.log(`Kynver Cron primary: ${r.primary}`),console.log(`  store: ${r.env.storePath} (${r.jobCount} jobs)`),console.log(`  tick state: ${r.env.statePath} (${r.stateJobCount} tracked)`),console.log(`  tick enabled: ${r.env.tickEnabled}`),console.log(`  fire base URL: ${r.env.fireBaseUrl??"(unset)"}`),console.log(`  credentials ready: ${r.credentialsReady}`),console.log(`  daemon-owned primary: ${r.daemonPrimary}`)}async function gk(e){let r=typeof e.agentOsId=="string"?e.agentOsId:void 0,t=await _t({agentOsIdFilter:r??null});if(e.json===!0){console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({event:"kynver_cron_tick",...t}))}I();function yA(e,r){if(e===void 0)return r;if(e===!0)return!0;if(e===!1)return!1;let t=String(e).trim().toLowerCase();return t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r}async function hk(e){let r=e.dryRun===!0||e["dry-run"]===!0,t=await js({execute:r?!1:yA(e.execute,!0),json:e.json===!0,installSystemd:e.installSystemd===!0||e["install-systemd"]===!0,confirmQstashRemoval:e.confirmQstashRemoval===!0||e["confirm-qstash-removal"]===!0,skipWatchdog:e.skipWatchdog===!0||e["skip-watchdog"]===!0,skipTestFire:e.skipTestFire===!0||e["skip-test-fire"]===!0,agentOsId:typeof e.agentOsId=="string"?e.agentOsId:void 0,apiBaseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0,runId:typeof e.run=="string"?e.run:void 0});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}if(console.log(t.dryRun?`Kynver Cron install (dry-run)
+No local blockers detected on this runner.`)}function Sk(e=!1){let r=v(),t=Zl(r);if(!t.ok){let s={ok:!1,attested:!1,blockers:t.blockers,remediation:"Clear local OpenClaw scheduler blockers before attesting qstash cutover."};if(e)console.log(JSON.stringify(s,null,2));else{console.error("Cannot attest scheduler cutover \u2014 local blockers remain:");for(let i of t.blockers)console.error(`  ! ${i}`)}process.exitCode=1;return}let n=Rk(r);tr(n);let o={ok:!0,attested:!0,configPath:q(bk),deploymentSchedulerProvider:"qstash",config:wt(n),note:"Recorded deploymentSchedulerProvider=qstash in ~/.kynver/config.json. Confirm Vercel has KYNVER_SCHEDULER_PROVIDER=qstash and QSTASH_TOKEN before relying on hosted schedules."};if(e){console.log(JSON.stringify(o,null,2));return}console.log(o.note),console.log(`  config: ${o.configPath}`)}async function wk(e){let r=await Js();if(e){console.log(JSON.stringify(r,null,2));return}console.log(`Kynver Cron primary: ${r.primary}`),console.log(`  store: ${r.env.storePath} (${r.jobCount} jobs)`),console.log(`  tick state: ${r.env.statePath} (${r.stateJobCount} tracked)`),console.log(`  tick enabled: ${r.env.tickEnabled}`),console.log(`  fire base URL: ${r.env.fireBaseUrl??"(unset)"}`),console.log(`  credentials ready: ${r.credentialsReady}`),console.log(`  daemon-owned primary: ${r.daemonPrimary}`)}async function Ck(e){let r=typeof e.agentOsId=="string"?e.agentOsId:void 0,t=await Et({agentOsIdFilter:r??null});if(e.json===!0){console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({event:"kynver_cron_tick",...t}))}O();function NA(e,r){if(e===void 0)return r;if(e===!0)return!0;if(e===!1)return!1;let t=String(e).trim().toLowerCase();return t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r}async function _k(e){let r=e.dryRun===!0||e["dry-run"]===!0,t=await Qs({execute:r?!1:NA(e.execute,!0),json:e.json===!0,installSystemd:e.installSystemd===!0||e["install-systemd"]===!0,confirmQstashRemoval:e.confirmQstashRemoval===!0||e["confirm-qstash-removal"]===!0,skipWatchdog:e.skipWatchdog===!0||e["skip-watchdog"]===!0,skipTestFire:e.skipTestFire===!0||e["skip-test-fire"]===!0,agentOsId:typeof e.agentOsId=="string"?e.agentOsId:void 0,apiBaseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0,runId:typeof e.run=="string"?e.run:void 0});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}if(console.log(t.dryRun?`Kynver Cron install (dry-run)
 `:`Kynver Cron install
 `),console.log(`  config: ${t.configPath}`),console.log(`  env file: ${t.plan.envFilePath}`),console.log(`  store: ${t.plan.storePath}`),t.secretGenerated&&console.log("  generated new KYNVER_CRON_SECRET"),t.envFile&&console.log(`  env merge: ${t.envFile.changed?"updated":"unchanged"} (${t.envFile.keysWritten.join(", ")||"no key changes"})`),t.watchdog?.remoteJobId?console.log(`  watchdog: job ${t.watchdog.remoteJobId} provider=${t.watchdog.provider} local=${t.watchdog.localProviderScheduleId}`):t.watchdog?.error&&console.log(`  watchdog: ERROR ${t.watchdog.error}`),t.qstashWatchdog?.found.length){console.log(`  qstash watchdog leftovers: ${t.qstashWatchdog.found.length}`);for(let n of t.qstashWatchdog.found)console.log(`    - ${n.id} (${n.status})`);t.qstashWatchdog.removed.length&&console.log(`  removed: ${t.qstashWatchdog.removed.join(", ")}`)}t.systemd&&console.log(`  systemd: ${t.systemd.note??(t.systemd.started?"running":"not started")}`),t.testFire&&!t.testFire.skipped&&console.log(`  test fire: fired=${t.testFire.fired} errors=${t.testFire.errors}`),console.log(`
 Hosted deployment (manual):`);for(let n of t.plan.deploymentSteps)console.log(`  - ${n}`);if(t.blockers.length){console.log(`
-Blockers:`);for(let n of t.blockers)console.log(`  ! ${n}`);process.exitCode=1;return}console.log("\nInstall complete \u2014 run `kynver cron verify` to re-check.")}async function kk(e){let r=v(),t=await jt({config:r});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}console.log(`Kynver Cron verify: ${t.ok?"PASS":"FAIL"}
-`);for(let n of t.checks){let o=n.ok?"ok":"FAIL";console.log(`  [${o}] ${n.id}: ${n.summary}`),!n.ok&&n.remediation&&console.log(`         \u2192 ${n.remediation}`)}t.ok||(process.exitCode=1)}I();import bA from"node:os";I();Ie();yt();w();var oo={slug:"landing-maintainer",originCron:"maintain-8-blocker-and-pr-landing-workers",defaultRepo:"Totalsolutionsync/Kynver",landScript:"scripts/agent-os-land-pr.mjs",landScriptArgs:["--skip-not-ready"]};import{spawnSync as RA}from"node:child_process";import yk from"node:path";function Rk(e,r,t){let o=[yk.join(r,oo.landScript),String(e),...oo.landScriptArgs];if(!t)return{action:{kind:"land_pr",prNumber:e,reason:"dry-run"},executed:!1,exitCode:0,stdout:`dry-run: node ${o.join(" ")}`,stderr:""};let s=RA("node",o,{cwd:r,encoding:"utf8",timeout:600*1e3});return{action:{kind:"land_pr",prNumber:e,reason:"landing wrapper invoked"},executed:!0,exitCode:s.status,stdout:s.stdout??"",stderr:s.stderr??""}}function bk(e){let r=e.repoPath?String(e.repoPath).trim():"";return r?yk.resolve(r):Le()?.repo??process.cwd()}async function vk(e){let r=String(O(String(e.agentOsId||""),"--agent-os-id")),t=String(e.repo||oo.defaultRepo).trim(),n=e.fleet===!0||e.fleet==="true",o=e.execute===!0||e.execute==="true",s=e.run?String(e.run):void 0,i=er({runId:s??"fleet-lane-tick"}),a={...ks(i,{harnessRunId:s,boxKind:We(v()),hostLabel:bA.hostname()}),providerHealthy:i.ok,authorizedForRepair:i.ok,authorizedForLanding:i.ok,systemHealthBlockers:i.ok?[]:[i.reason??"resource_gate_blocked"],actionableWorkers:i.activeWorkers},l=$(e.baseUrl?String(e.baseUrl):void 0),c=await V(e.secret?String(e.secret):void 0,r,{baseUrl:l}),u=`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/tick`,f=(await Wr(u,c,{repo:t,fleet:n,execute:o,runId:s,boxCapacity:a})).response,m=[],p=bk(e),g=Array.isArray(f?.localActions)?f.localActions:[],k=a.boxId;for(let h of g){if(h.kind==="land_pr"&&typeof h.prNumber=="number"){let b=Rk(h.prNumber,p,o);if(m.push({action:b.action,executed:b.executed,exitCode:b.exitCode}),o&&b.executed){let x=b.exitCode===0,M=typeof h.prUrl=="string"&&h.prUrl.trim()?h.prUrl.trim():`https://github.com/${t}/pull/${h.prNumber}`;try{await Wr(`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/outcome`,c,{repo:t,prUrl:M,holderBoxId:k,merged:x})}catch{}}continue}m.push({action:h,executed:!1,exitCode:null})}return{repo:t,fleet:n,execute:o,coordinator:f,localOutcomes:m}}async function Sk(e,r){let t=String(r??e.lane??"").trim();t!=="landing-maintainer"&&(console.error(`unknown lane: ${t||"(none)"}`),process.exit(1));let n=await vk(e);if(e.json===!0||e.json==="true"){console.log(JSON.stringify(n,null,2));return}console.log(["fleet landing-maintainer tick",`repo=${n.repo}`,`fleet=${n.fleet}`,`execute=${n.execute}`,`localOutcomes=${n.localOutcomes.length}`].join(" "));for(let o of n.localOutcomes)console.log(`  ${o.action.kind} pr=${o.action.prNumber??"-"} executed=${o.executed}`)}I();W();Ar();yt();import CA from"node:path";w();Ir();Eo();W();w();import vA from"node:path";function wk(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function Ck(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!wk(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function Yl(e){return typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||!F(e.pid)?!1:xo(e)}function SA(e,r){let t=e.completionBlocker?.trim();if(t&&!wk(t))return{attention:"blocked",attentionReason:t,status:"blocked"};if(r.heartbeatBlocker)return{attention:"blocked",attentionReason:r.heartbeatBlocker,status:"blocked"};if(Ck(e))return{attention:"done",attentionReason:"completion acknowledged",status:"done"};let n=Yl(e);return n?{attention:"ok",status:e.status?.trim()||"running"}:e.status==="done"?{attention:"done",status:"done"}:n?{attention:"ok",status:e.status?.trim()||"unknown"}:{attention:"needs_attention",attentionReason:"process not alive",status:"exited"}}function wA(e){return typeof e.completionBlocker=="string"&&e.completionBlocker.trim()||Ck(e)?!1:Yl(e)}function Jl(e,r){let t=_(vA.join(P(e.id),"workers",R(r),"worker.json"),void 0);if(!t)return null;let n=be(t.heartbeatPath),{attention:o,attentionReason:s,status:i}=SA(t,n),a=Yl(t),l=wA(t);return{runId:e.id,runName:e.name,worker:r,status:i,attention:o,attentionReason:s,alive:a,isActive:l,taskId:t.taskId?.trim()||null,planId:t.planId?.trim()||null,leaseOwner:t.leaseOwner?.trim()||null,pid:t.pid,model:t.model,currentTask:n.lastHeartbeatSummary,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,completionBlocker:t.completionBlocker?.trim()||null}}function ql(e,r){let t={};for(let n of e){let o=r(n).trim()||"unknown";t[o]=(t[o]??0)+1}return t}function _k(e){return e.filter(r=>r.attention==="blocked"||r.attention==="needs_attention"||r.attention==="stale").map(r=>({runId:r.runId,worker:r.worker,taskId:r.taskId,reason:r.completionBlocker??r.heartbeatBlocker??r.attentionReason??r.attention}))}function xk(e){return e.filter(r=>r.isActive&&r.taskId).map(r=>r.taskId.trim())}function _A(){let e=[];for(let r of Y())for(let t of pe(r)){let n=Jl(r,t);n&&e.push(n)}return e}function xA(e){let r=e.trim().toLowerCase();if(!r)return null;for(let t of Y())for(let n of pe(t)){let s=_(CA.join(P(t.id),"workers",R(n),"worker.json"),void 0)?.taskId?.trim();if(s&&(s.toLowerCase()===r||s.toLowerCase().endsWith(r)))return Jl(t,n)}return null}function zl(e){if(e.mode==="full")return{mode:"full",runs:Jn()};let r=v(),{harnessRoot:t}=te(),n=Y(),o=_A(),s=o.filter(l=>l.isActive).length,i=er({runId:n[0]?.id??"fleet",activeWorkers:s}),a={generatedAt:new Date().toISOString(),mode:e.mode,harnessRoot:t,agentOsId:r.agentOsId?.trim()||null,resourceGate:i,runCount:n.length,runStatusCounts:ql(n,l=>l.status),workerCount:o.length,workerStatusCounts:ql(o,l=>l.status),workerAttentionCounts:ql(o,l=>l.attention),activeTaskIds:xk(o),blocked:_k(o).slice(0,25),workers:o};if(e.mode==="task"){let l=e.taskId?.trim()??"",c=l?xA(l):null;return{...a,mode:"task",taskId:l,taskFound:!!c,workers:c?[c]:[]}}if(e.mode==="workers"){let l=o.filter(c=>c.alive||c.attention==="blocked"||c.attention==="needs_attention"||c.attention==="stale");return{...a,mode:"workers",workers:l,blocked:_k(l).slice(0,25),activeTaskIds:xk(l)}}return a}function Xl(e,r=72){let t=e.trim();return t.length<=r?t:`${t.slice(0,r-1)}\u2026`}function PA(e){let r=[`${e.runId}/${e.worker}`,e.taskId?`task=${e.taskId}`:"task=\u2014",e.leaseOwner?`lease=${e.leaseOwner}`:"lease=\u2014",`${e.status}/${e.attention}`];return e.currentTask&&r.push(`tool=${Xl(e.currentTask,48)}`),r.join(" \xB7 ")}function EA(e){let r=e.resourceGate,t=[];if(t.push("Kynver factory status"),t.push(`Slots: ${r.activeWorkers}/${r.maxConcurrentWorkers} active \xB7 ${r.slotsAvailable} available`+(r.reason?` (${r.reason})`:"")),t.push(`Runs: ${e.runCount} \xB7 Workers: ${e.workerCount}`),e.activeTaskIds.length>0&&t.push(`Active tasks: ${e.activeTaskIds.slice(0,12).join(", ")}`),e.blocked.length>0){t.push(`Blocked (${e.blocked.length}):`);for(let n of e.blocked.slice(0,8)){let o=n.taskId?` task=${n.taskId}`:"";t.push(`  \xB7 ${n.runId}/${n.worker}${o}: ${Xl(n.reason)}`)}e.blocked.length>8&&t.push(`  \xB7 \u2026and ${e.blocked.length-8} more (use kynver status --workers)`)}else t.push("Blocked: none");return t.push("Drilldown: kynver status --workers | --task <id> | --json | --full"),t.join(`
-`)}function AA(e){let r=e.resourceGate,t=[];if(t.push(`Worker slots ${r.activeWorkers}/${r.maxConcurrentWorkers} \xB7 available ${r.slotsAvailable}`),e.workers.length===0)return t.push("No active or attention workers."),t.join(`
-`);for(let n of e.workers)t.push(PA(n));return t.join(`
-`)}function IA(e){if(!e.taskId)return"missing --task <id>";if(!e.taskFound||e.workers.length===0)return`No harness worker found for task ${e.taskId}`;let r=e.workers[0];return[`task ${e.taskId}`,`${r.runId}/${r.worker}`,r.status,r.attention,r.leaseOwner?`lease=${r.leaseOwner}`:null,r.model?`model=${r.model}`:null,r.currentTask?`tool=${Xl(r.currentTask)}`:null,r.completionBlocker??r.heartbeatBlocker??r.attentionReason??null].filter(n=>!!n).join(" \xB7 ")}function Pk(e){return e.mode==="workers"?AA(e):e.mode==="task"?IA(e):EA(e)}function OA(e){return e.full===!0||e.full==="true"?"full":e.json===!0||e.json==="true"?"json":e.workers===!0||e.workers==="true"?"workers":typeof e.task=="string"&&e.task.trim()?"task":"compact"}function Ek(e){let r=OA(e);if(r==="full"){let n=zl({mode:"full"});console.log(JSON.stringify(n,null,2));return}let t=zl({mode:r,taskId:typeof e.task=="string"?e.task:void 0});if(r==="json"){console.log(JSON.stringify(t,null,2));return}console.log(Pk(t))}function Ql(e){return e==="help"||e==="--help"||e==="-h"}function Ok(e,r){let t=[e,r].filter(Boolean).join(" ");console.error(`unknown command: ${t||"(none)"}`),Zl(1)}function Zl(e=0){(e===0?console.log:console.error)(["Usage:","  kynver login [--api-key KEY] [--api-base-url URL]   (omit --api-key to authorize in the browser)","  kynver bootstrap [--api-base-url URL] [--api-key KEY] [--repo PATH]   (login + setup + runner credential in one shot)","  kynver start [--repo PATH] [--api-base-url URL] [--run RUN_ID] [--interval-ms MS] [--chat-oauth]   (bring your agent online: bootstrap if needed + run + daemon; --chat-oauth lets delegated chat turns use your local Claude subscription)","  kynver runner credential [--agent-os-id ID] [--base-url URL]","  kynver setup [--api-base-url URL] [--agent-os-id ID] [--agent-os-slug SLUG] [--box-kind forge|ghost] [--repo PATH] [--discover-repo] [--max-workers N] [--provider claude|cursor] [--chat-oauth]","  kynver daemon --run RUN_ID --agent-os-id AOS_ID [--execute] [--interval-ms MS] [--stall-ms MS] [--no-supervise]","  kynver status [--compact] [--workers] [--task TASK_ID] [--json] [--full]  # factory-wide harness summary","  kynver run list","  kynver run resolve --name RUN_NAME","  kynver run status --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver run dispatch --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--execute] [--lane any|implementation|review|landing] [--target-task-id TASK_ID] [--executor harness] [--max-starts 1] [--lease-ms MS] [--owned path[,path]] [--model claude-opus-4-8] [--disk-path /] [--reconcile-stale-blockers]","  kynver run sweep --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--grace-ms MS]",'  kynver worker start --run RUN_ID --name worker --task "..." [--owned path[,path]] [--model MODEL] [--provider claude|cursor] [--agent-os-id AOS_ID] [--task-id TASK_ID] [--wait]',"  kynver worker list --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver worker status --run RUN_ID --name worker","  kynver worker tail --run RUN_ID --name worker [--lines 40] [--raw]","  kynver worker stop --run RUN_ID --name worker","  kynver worker complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--task-id TASK_ID] [--base-url URL] [--secret SECRET]","  kynver worker discard-disposable --run RUN_ID --name worker --path scripts/helper.mjs[,other]","  kynver worker auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--poll-ms 5000] [--max-total-ms 21600000] [--complete-attempts 3] [--complete-backoff-ms 5000] [--base-url URL] [--secret SECRET]","  kynver run reconcile","  kynver run unblock [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET] [--dry-run]","  kynver plan progress --plan PLAN_ID --row ROW_KEY --role ROLE --status STATUS [--task TASK_ID] [--note NOTE] [--evidence type:value] [--agent-os-id AOS_ID]","  kynver plan verify --plan PLAN_ID [--worktree PATH] [--task TASK_ID] [--human-override] [--local]","  kynver harness verify --worktree PATH [--command CMD] [--json] [--wait-for-admission-ms MS] [--timeout-ms MS]","  kynver plan persist --operation create|add_version|update_metadata --title TITLE (--body-file PATH | --body TEXT) [--slug SLUG] [--plan PLAN_ID] [--summary TEXT] [--failure-kind approval_guard|auth|network|server|tool_interruption]","  kynver plan outbox list","  kynver plan outbox drain [--max N] [--id OUTBOX_ID]","  kynver cleanup [--execute] [--compact] [--node-modules-age-ms MS] [--worktrees-age-ms MS] [--harness-root PATH] [--include-orphans] [--skip-finalize] [--account-bytes]","  kynver wsl-crashes [--json] [--execute] [--purge-all] [--keep-newest N]","    --include-orphans also scans whole worktree directories (<harnessRoot>/worktrees/<runId>/<workerId>/) that no run/worker.json references; orphans pass salvage gates (recent heartbeat, dirty git, ahead of origin/main) before removal.","    Dry-run defaults to fast scan (no byte accounting). Pass --account-bytes for reclaimable byte totals. Pass --compact for a bounded operator summary (no full action list).","  kynver monitor start --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS]","  kynver monitor status [--run RUN_ID] [--name worker] [--tick]","  kynver monitor stop --run RUN_ID [--name worker]","  kynver monitor list","  kynver monitor tick --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--auto-complete] [--renew-leases]","  kynver monitor auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET]","  kynver monitor run-loop --run RUN_ID --monitor-id ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS] [--auto-complete] [--renew-leases]","  kynver config ensure-default-repo [--json]","  kynver doctor runtime-takeover [--remediate-default-repo]","  kynver scheduler cutover-check [--json]","  kynver scheduler attest-cutover [--json]","  kynver cron install [--dry-run] [--json] [--install-systemd] [--confirm-qstash-removal] [--skip-watchdog] [--skip-test-fire] [--agent-os-id ID] [--api-base-url URL] [--run RUN_ID]","  kynver cron verify [--json]","  kynver cron status [--json]","  kynver cron tick [--agent-os-id AOS_ID] [--json]","  kynver lane tick landing-maintainer [--fleet] [--repo OWNER/NAME] [--agent-os-id AOS_ID] [--execute] [--json]","  kynver board contract [--agent-os-id ID] [--base-url URL] [--since ISO] [--limit N]"].join(`
-`)),process.exit(e)}async function TA(e=process.argv.slice(2)){if(qh(e,import.meta.url,"kynver"))return;if(e.length===0||Ql(e[0]))return Zl(0);let r=e.shift(),t,n;if((r==="run"||r==="worker"||r==="plan"||r==="runner"||r==="harness"||r==="monitor"||r==="doctor"||r==="config"||r==="scheduler"||r==="cron"||r==="lane"||r==="board")&&(t=e.shift()),n=e,t&&Ql(t)||n.some(Ql))return Zl(0);let o=Do(n),{runsDir:s,worktreesDir:i}=te();if(Ak(s,{recursive:!0}),Ak(i,{recursive:!0}),r==="daemon"&&Ct(),Xh(r,t)){let a,l=o.run?String(o.run).trim():"";if(l)try{a=B(l).repo}catch{a=void 0}await zh({repoRoot:a,cwd:a})}if(r==="login")return void await cu(o);if(r==="bootstrap")return void await Uo(o);if(r==="start")return void await ih(o);if(r==="runner"&&t==="credential")return void await lu(o);if(r==="setup")return void await Mo(o);if(r==="status")return Ek(o);if(r==="daemon")return Ws(o)?void await Bs(o):void await Us(o);if(r==="plan"&&t==="progress")return void await kh(o);if(r==="plan"&&t==="verify")return void await yh(o);if(r==="harness"&&t==="verify")return Rh(o);if(r==="plan"&&t==="persist")return void await bh(o);if(r==="plan"&&t==="outbox"){let a=n.shift();if(a==="list")return void await vh();if(a==="drain")return void await Sh(Do(n));Ok("plan",`outbox ${a??""}`.trim())}if(r==="cleanup")return wh(o);if(r==="wsl-crashes")return Ch(o);if(r==="config"&&t==="ensure-default-repo")return fu(o.json===!0);if(r==="doctor"&&t==="runtime-takeover")return lk(o);if(r==="scheduler"&&t==="cutover-check")return pk(o.json===!0);if(r==="scheduler"&&t==="attest-cutover")return mk(o.json===!0);if(r==="cron"&&t==="install")return void await hk(o);if(r==="cron"&&t==="verify")return void await kk(o);if(r==="cron"&&t==="status")return void await fk(o.json===!0);if(r==="cron"&&t==="tick")return void await gk(o);if(r==="lane"&&t==="tick"){let a=n.shift();return void await Sk(Do(n),a)}if(r==="board"&&t==="contract")return void await ck(o);if(r==="run"&&t==="create")return void Ls(o);if(r==="run"&&t==="list")return Wg();if(r==="run"&&t==="resolve")return Qh(o);if(r==="run"&&t==="status")return cs(o);if(r==="run"&&t==="dispatch")return void await Vr(o);if(r==="run"&&t==="sweep")return void await $n(o);if(r==="run"&&t==="reconcile")return Nm();if(r==="run"&&t==="unblock")return void await Zh(o);if(r==="worker"&&t==="start")return void await Vp(o);if(r==="worker"&&t==="list")return Np(o);if(r==="worker"&&t==="status")return Ip(o);if(r==="worker"&&t==="tail")return Bp(o);if(r==="worker"&&t==="stop")return Lp(o);if(r==="worker"&&t==="complete")return void await ga(o);if(r==="worker"&&t==="discard-disposable")return ah(o);if(r==="worker"&&t==="auto-complete")return void await $p(o);if(r==="monitor"&&t==="start"){let a=await Hh(o);console.log(JSON.stringify(a,null,2));return}if(r==="monitor"&&t==="status")return void await Fh(o);if(r==="monitor"&&t==="stop")return $h(o);if(r==="monitor"&&t==="list")return Kh();if(r==="monitor"&&t==="tick")return void await Vh(o);if(r==="monitor"&&t==="auto-complete")return void await Fl(o);if(r==="monitor"&&t==="run-loop")return void await jh(o);Ok(r,t)}var DA=process.argv[1]&&Ik.native(process.argv[1])===Ik.native(NA(import.meta.url));DA&&TA().catch(e=>{console.error(e),process.exit(1)});export{TA as main,Zl as usage};
+Blockers:`);for(let n of t.blockers)console.log(`  ! ${n}`);process.exitCode=1;return}console.log("\nInstall complete \u2014 run `kynver cron verify` to re-check.")}async function xk(e){let r=v(),t=await Jt({config:r});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}console.log(`Kynver Cron verify: ${t.ok?"PASS":"FAIL"}
+`);for(let n of t.checks){let o=n.ok?"ok":"FAIL";console.log(`  [${o}] ${n.id}: ${n.summary}`),!n.ok&&n.remediation&&console.log(`         \u2192 ${n.remediation}`)}t.ok||(process.exitCode=1)}O();import DA from"node:os";O();Ie();vt();w();var co={slug:"landing-maintainer",originCron:"maintain-8-blocker-and-pr-landing-workers",defaultRepo:"Totalsolutionsync/Kynver",landScript:"scripts/agent-os-land-pr.mjs",landScriptArgs:["--skip-not-ready"]};import{spawnSync as TA}from"node:child_process";import Pk from"node:path";function Ek(e,r,t){let o=[Pk.join(r,co.landScript),String(e),...co.landScriptArgs];if(!t)return{action:{kind:"land_pr",prNumber:e,reason:"dry-run"},executed:!1,exitCode:0,stdout:`dry-run: node ${o.join(" ")}`,stderr:""};let s=TA("node",o,{cwd:r,encoding:"utf8",timeout:600*1e3});return{action:{kind:"land_pr",prNumber:e,reason:"landing wrapper invoked"},executed:!0,exitCode:s.status,stdout:s.stdout??"",stderr:s.stderr??""}}function Ak(e){let r=e.repoPath?String(e.repoPath).trim():"";return r?Pk.resolve(r):He()?.repo??process.cwd()}async function Ik(e){let r=String(N(String(e.agentOsId||""),"--agent-os-id")),t=String(e.repo||co.defaultRepo).trim(),n=e.fleet===!0||e.fleet==="true",o=e.execute===!0||e.execute==="true",s=e.run?String(e.run):void 0,i=rr({runId:s??"fleet-lane-tick"}),a={..._s(i,{harnessRunId:s,boxKind:Be(v()),hostLabel:DA.hostname()}),providerHealthy:i.ok,authorizedForRepair:i.ok,authorizedForLanding:i.ok,systemHealthBlockers:i.ok?[]:[i.reason??"resource_gate_blocked"],actionableWorkers:i.activeWorkers},l=K(e.baseUrl?String(e.baseUrl):void 0),c=await G(e.secret?String(e.secret):void 0,r,{baseUrl:l}),u=`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/tick`,m=(await Lr(u,c,{repo:t,fleet:n,execute:o,runId:s,boxCapacity:a})).response,f=[],p=Ak(e),h=Array.isArray(m?.localActions)?m.localActions:[],k=a.boxId;for(let g of h){if(g.kind==="land_pr"&&typeof g.prNumber=="number"){let R=Ek(g.prNumber,p,o);if(f.push({action:R.action,executed:R.executed,exitCode:R.exitCode}),o&&R.executed){let I=R.exitCode===0,P=typeof g.prUrl=="string"&&g.prUrl.trim()?g.prUrl.trim():`https://github.com/${t}/pull/${g.prNumber}`;try{await Lr(`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/outcome`,c,{repo:t,prUrl:P,holderBoxId:k,merged:I})}catch{}}continue}f.push({action:g,executed:!1,exitCode:null})}return{repo:t,fleet:n,execute:o,coordinator:m,localOutcomes:f}}async function Ok(e,r){let t=String(r??e.lane??"").trim();t!=="landing-maintainer"&&(console.error(`unknown lane: ${t||"(none)"}`),process.exit(1));let n=await Ik(e);if(e.json===!0||e.json==="true"){console.log(JSON.stringify(n,null,2));return}console.log(["fleet landing-maintainer tick",`repo=${n.repo}`,`fleet=${n.fleet}`,`execute=${n.execute}`,`localOutcomes=${n.localOutcomes.length}`].join(" "));for(let o of n.localOutcomes)console.log(`  ${o.action.kind} pr=${o.action.prNumber??"-"} executed=${o.executed}`)}O();M();Or();vt();import BA from"node:path";w();Nr();To();M();w();import MA from"node:path";function Nk(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function Tk(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!Nk(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function ec(e){return typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||!L(e.pid)?!1:Oo(e)}function UA(e,r){let t=e.completionBlocker?.trim();if(t&&!Nk(t))return{attention:"blocked",attentionReason:t,status:"blocked"};if(r.heartbeatBlocker)return{attention:"blocked",attentionReason:r.heartbeatBlocker,status:"blocked"};if(Tk(e))return{attention:"done",attentionReason:"completion acknowledged",status:"done"};let n=ec(e);return n?{attention:"ok",status:e.status?.trim()||"running"}:e.status==="done"?{attention:"done",status:"done"}:n?{attention:"ok",status:e.status?.trim()||"unknown"}:{attention:"needs_attention",attentionReason:"process not alive",status:"exited"}}function WA(e){return typeof e.completionBlocker=="string"&&e.completionBlocker.trim()||Tk(e)?!1:ec(e)}function rc(e,r){let t=_(MA.join(x(e.id),"workers",b(r),"worker.json"),void 0);if(!t)return null;let n=ve(t.heartbeatPath),{attention:o,attentionReason:s,status:i}=UA(t,n),a=ec(t),l=WA(t);return{runId:e.id,runName:e.name,worker:r,status:i,attention:o,attentionReason:s,alive:a,isActive:l,taskId:t.taskId?.trim()||null,planId:t.planId?.trim()||null,leaseOwner:t.leaseOwner?.trim()||null,pid:t.pid,model:t.model,currentTask:n.lastHeartbeatSummary,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,completionBlocker:t.completionBlocker?.trim()||null}}function tc(e,r){let t={};for(let n of e){let o=r(n).trim()||"unknown";t[o]=(t[o]??0)+1}return t}function Dk(e){return e.filter(r=>r.attention==="blocked"||r.attention==="needs_attention"||r.attention==="stale").map(r=>({runId:r.runId,worker:r.worker,taskId:r.taskId,reason:r.completionBlocker??r.heartbeatBlocker??r.attentionReason??r.attention}))}function Mk(e){return e.filter(r=>r.isActive&&r.taskId).map(r=>r.taskId.trim())}function LA(){let e=[];for(let r of Y())for(let t of fe(r)){let n=rc(r,t);n&&e.push(n)}return e}function HA(e){let r=e.trim().toLowerCase();if(!r)return null;for(let t of Y())for(let n of fe(t)){let s=_(BA.join(x(t.id),"workers",b(n),"worker.json"),void 0)?.taskId?.trim();if(s&&(s.toLowerCase()===r||s.toLowerCase().endsWith(r)))return rc(t,n)}return null}function nc(e){if(e.mode==="full")return{mode:"full",runs:Zn()};let r=v(),{harnessRoot:t}=te(),n=Y(),o=LA(),s=o.filter(l=>l.isActive).length,i=rr({runId:n[0]?.id??"fleet",activeWorkers:s}),a={generatedAt:new Date().toISOString(),mode:e.mode,harnessRoot:t,agentOsId:r.agentOsId?.trim()||null,resourceGate:i,runCount:n.length,runStatusCounts:tc(n,l=>l.status),workerCount:o.length,workerStatusCounts:tc(o,l=>l.status),workerAttentionCounts:tc(o,l=>l.attention),activeTaskIds:Mk(o),blocked:Dk(o).slice(0,25),workers:o};if(e.mode==="task"){let l=e.taskId?.trim()??"",c=l?HA(l):null;return{...a,mode:"task",taskId:l,taskFound:!!c,workers:c?[c]:[]}}if(e.mode==="workers"){let l=o.filter(c=>c.alive||c.attention==="blocked"||c.attention==="needs_attention"||c.attention==="stale");return{...a,mode:"workers",workers:l,blocked:Dk(l).slice(0,25),activeTaskIds:Mk(l)}}return a}function oc(e,r=72){let t=e.trim();return t.length<=r?t:`${t.slice(0,r-1)}\u2026`}function FA(e){let r=[`${e.runId}/${e.worker}`,e.taskId?`task=${e.taskId}`:"task=\u2014",e.leaseOwner?`lease=${e.leaseOwner}`:"lease=\u2014",`${e.status}/${e.attention}`];return e.currentTask&&r.push(`tool=${oc(e.currentTask,48)}`),r.join(" \xB7 ")}function $A(e){let r=e.resourceGate,t=[];if(t.push("Kynver factory status"),t.push(`Slots: ${r.activeWorkers}/${r.maxConcurrentWorkers} active \xB7 ${r.slotsAvailable} available`+(r.reason?` (${r.reason})`:"")),t.push(`Runs: ${e.runCount} \xB7 Workers: ${e.workerCount}`),e.activeTaskIds.length>0&&t.push(`Active tasks: ${e.activeTaskIds.slice(0,12).join(", ")}`),e.blocked.length>0){t.push(`Blocked (${e.blocked.length}):`);for(let n of e.blocked.slice(0,8)){let o=n.taskId?` task=${n.taskId}`:"";t.push(`  \xB7 ${n.runId}/${n.worker}${o}: ${oc(n.reason)}`)}e.blocked.length>8&&t.push(`  \xB7 \u2026and ${e.blocked.length-8} more (use kynver status --workers)`)}else t.push("Blocked: none");return t.push("Drilldown: kynver status --workers | --task <id> | --json | --full"),t.join(`
+`)}function KA(e){let r=e.resourceGate,t=[];if(t.push(`Worker slots ${r.activeWorkers}/${r.maxConcurrentWorkers} \xB7 available ${r.slotsAvailable}`),e.workers.length===0)return t.push("No active or attention workers."),t.join(`
+`);for(let n of e.workers)t.push(FA(n));return t.join(`
+`)}function jA(e){if(!e.taskId)return"missing --task <id>";if(!e.taskFound||e.workers.length===0)return`No harness worker found for task ${e.taskId}`;let r=e.workers[0];return[`task ${e.taskId}`,`${r.runId}/${r.worker}`,r.status,r.attention,r.leaseOwner?`lease=${r.leaseOwner}`:null,r.model?`model=${r.model}`:null,r.currentTask?`tool=${oc(r.currentTask)}`:null,r.completionBlocker??r.heartbeatBlocker??r.attentionReason??null].filter(n=>!!n).join(" \xB7 ")}function Uk(e){return e.mode==="workers"?KA(e):e.mode==="task"?jA(e):$A(e)}function VA(e){return e.full===!0||e.full==="true"?"full":e.json===!0||e.json==="true"?"json":e.workers===!0||e.workers==="true"?"workers":typeof e.task=="string"&&e.task.trim()?"task":"compact"}function Wk(e){let r=VA(e);if(r==="full"){let n=nc({mode:"full"});console.log(JSON.stringify(n,null,2));return}let t=nc({mode:r,taskId:typeof e.task=="string"?e.task:void 0});if(r==="json"){console.log(JSON.stringify(t,null,2));return}console.log(Uk(t))}function sc(e){return e==="help"||e==="--help"||e==="-h"}function Hk(e,r){let t=[e,r].filter(Boolean).join(" ");console.error(`unknown command: ${t||"(none)"}`),ic(1)}function ic(e=0){(e===0?console.log:console.error)(["Usage:","  kynver login [--api-key KEY] [--api-base-url URL]   (omit --api-key to authorize in the browser)","  kynver bootstrap [--api-base-url URL] [--api-key KEY] [--repo PATH]   (login + setup + runner credential in one shot)","  kynver start [--repo PATH] [--api-base-url URL] [--run RUN_ID] [--interval-ms MS] [--chat-oauth]   (bring your agent online: bootstrap if needed + run + daemon; --chat-oauth lets delegated chat turns use your local Claude subscription)","  kynver runner credential [--agent-os-id ID] [--base-url URL]","  kynver setup [--api-base-url URL] [--agent-os-id ID] [--agent-os-slug SLUG] [--box-kind forge|ghost] [--repo PATH] [--discover-repo] [--max-workers N] [--provider claude|cursor] [--chat-oauth]","  kynver daemon --run RUN_ID --agent-os-id AOS_ID [--execute] [--interval-ms MS] [--stall-ms MS] [--no-supervise]","  kynver status [--compact] [--workers] [--task TASK_ID] [--json] [--full]  # factory-wide harness summary","  kynver run list","  kynver run resolve --name RUN_NAME","  kynver run status --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver run dispatch --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--execute] [--lane any|implementation|review|landing] [--target-task-id TASK_ID] [--executor harness] [--max-starts 1] [--lease-ms MS] [--owned path[,path]] [--model claude-opus-4-8] [--disk-path /] [--reconcile-stale-blockers]","  kynver run sweep --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--grace-ms MS]",'  kynver worker start --run RUN_ID --name worker --task "..." [--owned path[,path]] [--model MODEL] [--provider claude|cursor] [--agent-os-id AOS_ID] [--task-id TASK_ID] [--wait]',"  kynver worker list --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver worker status --run RUN_ID --name worker","  kynver worker tail --run RUN_ID --name worker [--lines 40] [--raw]","  kynver worker stop --run RUN_ID --name worker","  kynver worker complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--task-id TASK_ID] [--base-url URL] [--secret SECRET]","  kynver worker discard-disposable --run RUN_ID --name worker --path scripts/helper.mjs[,other]","  kynver worker auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--poll-ms 5000] [--max-total-ms 21600000] [--complete-attempts 3] [--complete-backoff-ms 5000] [--base-url URL] [--secret SECRET]","  kynver run reconcile","  kynver run unblock [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET] [--dry-run]","  kynver plan progress --plan PLAN_ID --row ROW_KEY --role ROLE --status STATUS [--task TASK_ID] [--note NOTE] [--evidence type:value] [--agent-os-id AOS_ID]","  kynver plan verify --plan PLAN_ID [--worktree PATH] [--task TASK_ID] [--human-override] [--local]","  kynver harness verify --worktree PATH [--command CMD] [--json] [--wait-for-admission-ms MS] [--timeout-ms MS]","  kynver plan persist --operation create|add_version|update_metadata --title TITLE (--body-file PATH | --body TEXT) [--slug SLUG] [--plan PLAN_ID] [--summary TEXT] [--failure-kind approval_guard|auth|network|server|tool_interruption]","  kynver plan outbox list","  kynver plan outbox drain [--max N] [--id OUTBOX_ID]","  kynver cleanup [--execute] [--compact] [--node-modules-age-ms MS] [--worktrees-age-ms MS] [--harness-root PATH] [--include-orphans] [--skip-finalize] [--account-bytes]","  kynver wsl-crashes [--json] [--execute] [--purge-all] [--keep-newest N]","    --include-orphans also scans whole worktree directories (<harnessRoot>/worktrees/<runId>/<workerId>/) that no run/worker.json references; orphans pass salvage gates (recent heartbeat, dirty git, ahead of origin/main) before removal.","    Dry-run defaults to fast scan (no byte accounting). Pass --account-bytes for reclaimable byte totals. Pass --compact for a bounded operator summary (no full action list).","  kynver monitor start --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS]","  kynver monitor status [--run RUN_ID] [--name worker] [--tick]","  kynver monitor stop --run RUN_ID [--name worker]","  kynver monitor list","  kynver monitor tick --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--auto-complete] [--renew-leases]","  kynver monitor auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET]","  kynver monitor run-loop --run RUN_ID --monitor-id ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS] [--auto-complete] [--renew-leases]","  kynver config ensure-default-repo [--json]","  kynver doctor runtime-takeover [--remediate-default-repo]","  kynver scheduler cutover-check [--json]","  kynver scheduler attest-cutover [--json]","  kynver cron install [--dry-run] [--json] [--install-systemd] [--confirm-qstash-removal] [--skip-watchdog] [--skip-test-fire] [--agent-os-id ID] [--api-base-url URL] [--run RUN_ID]","  kynver cron verify [--json]","  kynver cron status [--json]","  kynver cron tick [--agent-os-id AOS_ID] [--json]","  kynver lane tick landing-maintainer [--fleet] [--repo OWNER/NAME] [--agent-os-id AOS_ID] [--execute] [--json]","  kynver board contract [--agent-os-id ID] [--base-url URL] [--since ISO] [--limit N]"].join(`
+`)),process.exit(e)}async function YA(e=process.argv.slice(2)){if(ok(e,import.meta.url,"kynver"))return;if(e.length===0||sc(e[0]))return ic(0);let r=e.shift(),t,n;if((r==="run"||r==="worker"||r==="plan"||r==="runner"||r==="harness"||r==="monitor"||r==="doctor"||r==="config"||r==="scheduler"||r==="cron"||r==="lane"||r==="board")&&(t=e.shift()),n=e,t&&sc(t)||n.some(sc))return ic(0);let o=Fo(n),{runsDir:s,worktreesDir:i}=te();if(Bk(s,{recursive:!0}),Bk(i,{recursive:!0}),r==="daemon"&&Pt(),ik(r,t)){let a,l=o.run?String(o.run).trim():"";if(l)try{a=B(l).repo}catch{a=void 0}await sk({repoRoot:a,cwd:a})}if(r==="login")return void await hu(o);if(r==="bootstrap")return void await Ko(o);if(r==="start")return void await hh(o);if(r==="runner"&&t==="credential")return void await gu(o);if(r==="setup")return void await $o(o);if(r==="status")return Wk(o);if(r==="daemon")return Vs(o)?void await Gs(o):void await js(o);if(r==="plan"&&t==="progress")return void await Ph(o);if(r==="plan"&&t==="verify")return void await Eh(o);if(r==="harness"&&t==="verify")return Ah(o);if(r==="plan"&&t==="persist")return void await Ih(o);if(r==="plan"&&t==="outbox"){let a=n.shift();if(a==="list")return void await Oh();if(a==="drain")return void await Nh(Fo(n));Hk("plan",`outbox ${a??""}`.trim())}if(r==="cleanup")return Th(o);if(r==="wsl-crashes")return Dh(o);if(r==="config"&&t==="ensure-default-repo")return vu(o.json===!0);if(r==="doctor"&&t==="runtime-takeover")return kk(o);if(r==="scheduler"&&t==="cutover-check")return vk(o.json===!0);if(r==="scheduler"&&t==="attest-cutover")return Sk(o.json===!0);if(r==="cron"&&t==="install")return void await _k(o);if(r==="cron"&&t==="verify")return void await xk(o);if(r==="cron"&&t==="status")return void await wk(o.json===!0);if(r==="cron"&&t==="tick")return void await Ck(o);if(r==="lane"&&t==="tick"){let a=n.shift();return void await Ok(Fo(n),a)}if(r==="board"&&t==="contract")return void await yk(o);if(r==="run"&&t==="create")return void Ys(o);if(r==="run"&&t==="list")return Yg();if(r==="run"&&t==="resolve")return ak(o);if(r==="run"&&t==="status")return ks(o);if(r==="run"&&t==="dispatch")return void await Jr(o);if(r==="run"&&t==="sweep")return void await Yn(o);if(r==="run"&&t==="reconcile")return $m();if(r==="run"&&t==="unblock")return void await lk(o);if(r==="worker"&&t==="start")return void await Zp(o);if(r==="worker"&&t==="list")return Hp(o);if(r==="worker"&&t==="status")return Bp(o);if(r==="worker"&&t==="tail")return Gp(o);if(r==="worker"&&t==="stop")return Yp(o);if(r==="worker"&&t==="complete")return void await Sa(o);if(r==="worker"&&t==="discard-disposable")return kh(o);if(r==="worker"&&t==="auto-complete")return void await zp(o);if(r==="monitor"&&t==="start"){let a=await qh(o);console.log(JSON.stringify(a,null,2));return}if(r==="monitor"&&t==="status")return void await zh(o);if(r==="monitor"&&t==="stop")return Xh(o);if(r==="monitor"&&t==="list")return Qh();if(r==="monitor"&&t==="tick")return void await ek(o);if(r==="monitor"&&t==="auto-complete")return void await Jl(o);if(r==="monitor"&&t==="run-loop")return void await Zh(o);Hk(r,t)}var JA=process.argv[1]&&Lk.native(process.argv[1])===Lk.native(GA(import.meta.url));JA&&YA().catch(e=>{console.error(e),process.exit(1)});export{YA as main,ic as usage};