@kynver-app/runtime 0.1.148 → 0.1.151

package/dist/index.js

@@ -1,82 +1,82 @@
-var Cv=Object.defineProperty;var M=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(n){throw t=[n],n}};var wv=(e,r)=>{for(var t in r)Cv(e,t,{get:r[t],enumerable:!0})};import{existsSync as Iv,mkdirSync as Ov,readFileSync as ol,readdirSync as aT,statSync as ep,writeFileSync as Nv}from"node:fs";import rp from"node:path";function Cr(e){console.error(e),process.exit(1)}function de(e){return process.platform!=="win32"?e:{windowsHide:!0,...e}}function N(e,r){return e||Cr(`missing ${r}`),e}function Mt(e){try{return JSON.parse(e)}catch{return null}}function w(e,r){try{return JSON.parse(ol(e,"utf8"))}catch(t){if(arguments.length>1)return r;Cr(`failed to read ${e}: ${t.message}`)}}function ae(e,r){Ov(rp.dirname(e),{recursive:!0}),Nv(e,`${JSON.stringify(r,null,2)}
-`)}function b(e){return String(e||"").toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"worker"}function tp(e){return b(`${new Date().toISOString().replace(/[-:]/g,"").replace(/\..+/,"Z")}-${e}`)}function ir(e){return String(e).replace(/\/+$/,"")}function gs(e){return String(e||"").replace(/\s+/g," ").trim()}function hs(e){try{return ep(e).size}catch{return 0}}function ks(e){try{return ep(e).mtime.toISOString()}catch{return null}}function ys(e,r){return Iv(e)?ol(e,"utf8").split(`
+var Nv=Object.defineProperty;var M=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(n){throw t=[n],n}};var Tv=(e,r)=>{for(var t in r)Nv(e,t,{get:r[t],enumerable:!0})};import{existsSync as Bv,mkdirSync as Hv,readFileSync as ul,readdirSync as RT,statSync as dp,writeFileSync as Fv}from"node:fs";import pp from"node:path";function _r(e){console.error(e),process.exit(1)}function pe(e){return process.platform!=="win32"?e:{windowsHide:!0,...e}}function N(e,r){return e||_r(`missing ${r}`),e}function Lt(e){try{return JSON.parse(e)}catch{return null}}function w(e,r){try{return JSON.parse(ul(e,"utf8"))}catch(t){if(arguments.length>1)return r;_r(`failed to read ${e}: ${t.message}`)}}function ae(e,r){Hv(pp.dirname(e),{recursive:!0}),Fv(e,`${JSON.stringify(r,null,2)}
+`)}function b(e){return String(e||"").toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"worker"}function mp(e){return b(`${new Date().toISOString().replace(/[-:]/g,"").replace(/\..+/,"Z")}-${e}`)}function ar(e){return String(e).replace(/\/+$/,"")}function ks(e){return String(e||"").replace(/\s+/g," ").trim()}function ys(e){try{return dp(e).size}catch{return 0}}function Rs(e){try{return dp(e).mtime.toISOString()}catch{return null}}function vs(e,r){return Bv(e)?ul(e,"utf8").split(`
 `).slice(-r).join(`
-`):""}function np(e){return e?ol(rp.resolve(e),"utf8"):""}function Fr(e){Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function wr(e){return new Promise(r=>setTimeout(r,e))}function H(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}function _r(e,r){try{process.kill(-e,r)}catch{process.kill(e,r)}}function op(e){let r=null,t=-1/0;for(let n of e){if(!n)continue;let o=Date.parse(n);Number.isFinite(o)&&o>t&&(t=o,r=n)}return r}function sl(e){return Math.max(0,Math.round((Date.now()-e)/1e3))}var C=M(()=>{"use strict"});function il(e){return Tv.has(e)?!0:Dv.some(r=>e.endsWith(r))}function ip(e){return Object.keys(e).filter(il).sort()}function We(e){let r={...e};for(let t of Object.keys(r))il(t)&&delete r[t];return r}function Mv(e){let r=ip(e);return{forbiddenPresent:r,safe:r.length===0}}function ap(e){return We(e)}var sp,Tv,Dv,Kr=M(()=>{"use strict";sp=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY"],Tv=new Set(sp),Dv=["_SECRET","_API_KEY"]});import{spawnSync as cp}from"node:child_process";function pe(e,r,t={}){let n=cp("git",r,de({cwd:e,encoding:"utf8"}));if(n.status!==0&&!t.allowFailure){let o=`git ${r.join(" ")} failed: ${n.stderr||n.stdout}`;if(t.throwError)throw new Error(o);Cr(o)}return n.stdout||""}function up(e){pe(e,["rev-parse","--show-toplevel"])}function Hn(e){return pe(e,["status","--short"],{allowFailure:!0}).split(`
-`).map(r=>r.trim()).filter(Boolean)}function ne(e,r){try{let t=cp("git",r,de({cwd:e,encoding:"utf8"}));return{status:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function lp(e,r,t){let n=ne(e,["merge-base","--is-ancestor",r,t]);return n.status===0?{isAncestor:!0,error:null}:n.status===1?{isAncestor:!1,error:null}:{isAncestor:null,error:n.error||n.stderr||n.stdout||`git exited ${n.status}`}}function Rs(e,r="origin/main"){let t=typeof r=="string"?{base:r}:r,n=t.baseCommit?.trim()||t.base?.trim()||"origin/main",o=t.baseCommit?.trim()||null;if(!e)return al(n,"missing worktree path");let s=ne(e,["rev-parse","HEAD"]);if(s.status!==0)return al(n,s.error||s.stderr||s.stdout||"failed to resolve HEAD");let i;if(o)i=o;else{let f=ne(e,["rev-parse",n]);if(f.status!==0)return al(n,f.error||f.stderr||f.stdout||`failed to resolve ${n}`,s.stdout.trim());i=f.stdout.trim()}let a=s.stdout.trim();if(a===i)return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:!0,headIsAncestorOfBase:!0,relation:"synced"};let l=lp(e,i,a),c=lp(e,a,i),u=l.error||c.error||void 0;if(l.isAncestor==null||c.isAncestor==null)return{checked:!1,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:"unknown",...u?{error:u}:{}};let d=l.isAncestor?"ahead":c.isAncestor?"merged":"diverged";return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:d,...u?{error:u}:{}}}function al(e,r,t=null){return{checked:!1,base:e,head:t,baseHead:null,baseIsAncestorOfHead:null,headIsAncestorOfBase:null,relation:"unknown",error:r}}var Pe=M(()=>{"use strict";C();Kr()});import{homedir as ll}from"node:os";import $r from"node:path";function dp(e){return e==="~"?ll():e.startsWith("~/")||e.startsWith("~\\")?$r.join(ll(),e.slice(2)):e}function Ut(e){return $r.resolve(dp(e))}function Se(e){let r=dp(e),t=$r.resolve(r),n=$r.resolve(ll());return t===n?"~":t.startsWith(`${n}${$r.sep}`)?`~/${$r.relative(n,t).split($r.sep).join("/")}`:t.replace(/\\/g,"/").replace(/^\/home\/[^/]+(?=\/|$)/,"~").replace(/^\/Users\/[^/]+(?=\/|$)/,"~").replace(/^[A-Za-z]:\/home\/[^/]+(?=\/|$)/i,"~").replace(/^[A-Za-z]:\/Users\/[^/]+(?=\/|$)/i,"~")}function q(e){return Se(e)}var Je=M(()=>{"use strict"});import{existsSync as dl,readFileSync as pp}from"node:fs";import{homedir as Uv}from"node:os";import ar from"node:path";import{fileURLToPath as Wv}from"node:url";function Bv(e){let r=ar.join(e,"package.json");if(!dl(r))return null;try{let t=JSON.parse(pp(r,"utf8"));return typeof t.name=="string"?t.name.trim():null}catch{return null}}function mp(e){return Bv(e)==="kynver"}function ul(e){let r=ar.resolve(e);if(!dl(r))return null;let t=ne(r,["rev-parse","--show-toplevel"]);if(t.status!==0)return null;let n=t.stdout.trim();return n.length?ar.resolve(n):null}function Hv(e=import.meta.url){let r=ar.dirname(Wv(e));for(let t=0;t<8;t+=1){let n=ar.join(r,"package.json");if(dl(n))try{if(JSON.parse(pp(n,"utf8")).name==="@kynver-app/runtime")return r}catch{}let o=ar.dirname(r);if(o===r)break;r=o}return null}function cl(e,r,t,n){if(!t)return;let o=ar.resolve(t);e.has(o)||mp(o)&&(e.add(o),r.push({repo:o,source:n}))}function pl(e){let r=e?.cwd??process.cwd(),t=new Set,n=[];cl(t,n,ul(r),"cwd_git");let o=Hv(e?.runtimeModuleUrl??import.meta.url);o&&cl(t,n,ul(o),"runtime_checkout");let s=Uv();for(let i of Lv)cl(t,n,Ut(ar.join(s,i)),"well_known_path");return n}function jr(e){return pl(e)[0]??null}function fp(e){let r=ar.resolve(e).replace(/\\/g,"/");return r.includes("/.kynver/harness/worktrees/")||r.includes("/.openclaw/harness/worktrees/")||r.includes("/kynver-harness/")||r.includes("/openclaw/harness/worktrees/")}function Fn(e){let r=pl(e);return r.find(n=>!fp(n.repo))??r[0]??null}var Lv,Kn=M(()=>{"use strict";Pe();Je();Lv=["Kynver","repos/Kynver","repos/kynver-source-main","code/Kynver","projects/Kynver"]});function Lt(e){let r=(e??"").trim().toLowerCase();return r==="ghost"||r==="forge"?r:r.includes("forge")?"forge":r.includes("ghost")||r.includes("openclaw")?"ghost":"forge"}function kp(e,r){return e[r]?.trim()||null}function Ae(e=process.env,r={}){let t=[],n=r.boxKind?.trim();if(n)return{boxKind:Lt(n),source:"config",slugInferenceBlocked:!1,warnings:t};let o=kp(e,"KYNVER_BOX_KIND");if(o)return{boxKind:Lt(o),source:"env",slugInferenceBlocked:!1,warnings:t};let s=kp(e,"KYNVER_AGENT_OS_SLUG");return s&&t.push(`KYNVER_AGENT_OS_SLUG=${s} is a workspace slug, not box identity \u2014 set boxKind via \`kynver setup --box-kind forge|ghost\` or KYNVER_BOX_KIND (defaulting box kind to forge)`),{boxKind:"forge",source:"default",slugInferenceBlocked:!!s,warnings:t}}function qe(e={},r=process.env){return Ae(r,e).boxKind}var Oe=M(()=>{"use strict"});function Sl(e,r){return e==="forge"?4:Math.max(1,r)}function lr(e,r){return e==="forge"?Math.min(Math.max(1,r),4):Math.max(1,r)}function Bt(e,r){return e==="forge"&&r>4}var Vn=M(()=>{"use strict"});import{readFileSync as sb}from"node:fs";import yp from"node:os";function Ht(e){if(e!==void 0){let r=e.match(/^MemAvailable:\s+(\d+)\s*kB/m);return r?Number(r[1])*1024:yp.freemem()}if(process.platform==="linux")try{let t=sb("/proc/meminfo","utf8").match(/^MemAvailable:\s+(\d+)\s*kB/m);if(t)return Number(t[1])*1024}catch{}return yp.freemem()}var Cs=M(()=>{"use strict"});import{existsSync as ib,readFileSync as ab,statfsSync as lb}from"node:fs";function ws(){if(process.platform!=="linux")return!1;for(let e of["/proc/sys/kernel/osrelease","/proc/version"])try{if(!ib(e))continue;let r=ab(e,"utf8");if(/microsoft|wsl/i.test(r))return!0}catch{}return!1}function Cl(e={}){if(!(e.forceWsl===void 0?ws():e.forceWsl))return null;let t=e.wslHostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Gr,n=e.wslHostFreeWarnBytes??Rp,o=e.wslHostFreeCriticalBytes??vp,s=e.statfs??lb,i;try{i=s(t)}catch(h){return{ok:!1,path:t,freeBytes:0,totalBytes:0,usedPercent:100,warnBelowBytes:n,criticalBelowBytes:o,reason:`Windows host disk probe failed at ${t}: ${h.message}`,probeError:h.message}}let a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<n,d=a<o,f=!u&&!d,p=(a/(1024*1024*1024)).toFixed(1),m=null;return f||(m=`Windows host disk ${t} at ${d?"critical":"warning"}: ${p} GiB free (<${(d?o:n)/1024/1024/1024} GiB); WSL VHDX cannot grow safely. ${bp()}`),{ok:f,path:t,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:n,criticalBelowBytes:o,reason:m,probeError:null}}function bp(){return"Recovery: 1) free Windows C: (empty Recycle Bin / Storage Sense / clear %TEMP% and %LOCALAPPDATA%\\Temp\\wsl-crashes); 2) shut down WSL (`wsl --shutdown`) then compact the VHDX (`Optimize-VHD` or `diskpart compact vdisk`); 3) clear local node_modules / .next / harness worktrees before restarting workers; 4) disable recurring dumps via `%USERPROFILE%/.wslconfig` (`maxCrashDumpCount=-1`) or `kynver wsl-crashes --execute`. Full runbook: docs/runbooks/wsl-disk-pressure.md."}var Rp,vp,Gr,_s=M(()=>{"use strict";Rp=25*1024*1024*1024,vp=12*1024*1024*1024,Gr="/mnt/c"});import{execFileSync as Sp}from"node:child_process";import{existsSync as Es,readFileSync as Cp,readdirSync as cb,statSync as ub}from"node:fs";import wl from"node:path";function xs(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function _l(){let e=process.env.KYNVER_WSL_WIN_USER?.trim();if(e)return e;try{let n=Sp("cmd.exe",["/c","echo","%USERNAME%"],{encoding:"utf8",timeout:5e3,stdio:["ignore","pipe","ignore"]}).trim();if(n&&n!=="%USERNAME%"&&!n.includes("%"))return n}catch{}let r=process.env.USER?.trim()||process.env.LOGNAME?.trim(),t=process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Gr;return r&&Es(wl.join(t,"Users",r))?r:null}function xp(e={}){let r=e.crashDumpDir?.trim()||process.env.KYNVER_WSL_CRASH_DUMP_DIR?.trim();if(r)return r;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Gr,n=e.windowsUser??_l();return n?`${t.replace(/\\/g,"/").replace(/\/$/,"")}/Users/${n}/AppData/Local/Temp/wsl-crashes`:null}function Ep(e){let r=/^wsl-crash-\d+-(\d+)-(.+)-(\d+)\.dmp$/i.exec(e);if(!r)return{executableHint:null,signal:null,pid:null};let t=Number(r[1]),n=r[2]??"",o=Number(r[3]),s=n.split("_").filter(Boolean);return{executableHint:s.length>0?s[s.length-1]:null,signal:Number.isFinite(o)?o:null,pid:Number.isFinite(t)?t:null}}function Pp(){try{if(Es("/proc/sys/kernel/core_pattern"))return Cp("/proc/sys/kernel/core_pattern","utf8").trim()}catch{}try{return Sp("sysctl",["-n","kernel.core_pattern"],{encoding:"utf8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim()||null}catch{return null}}function mb(e){return!!(e&&/wsl-capture-crash/i.test(e))}function Ap(e,r=Gr){let t=wl.join(r,"Users",e,".wslconfig");if(!Es(t))return{maxCrashDumpCount:null,crashDumpFolder:null};let n;try{n=Cp(t,"utf8")}catch{return null}let o=null,s=null;for(let i of n.split(/\r?\n/)){let a=i.replace(/#.*$/,"").trim();if(!a||a.startsWith("["))continue;let l=a.indexOf("=");if(l<0)continue;let c=a.slice(0,l).trim().toLowerCase(),u=a.slice(l+1).trim();if(c==="maxcrashdumpcount"){let d=Number(u);o=Number.isFinite(d)?d:null}else c==="crashdumpfolder"&&(s=u.replace(/^["']|["']$/g,"")||null)}return{maxCrashDumpCount:o,crashDumpFolder:s}}function fb(e){if(!Es(e))return[];let r=cb(e,{withFileTypes:!0}),t=[];for(let n of r){if(!n.isFile()||!n.name.toLowerCase().endsWith(".dmp"))continue;let o=wl.join(e,n.name);try{let s=ub(o),i=Ep(n.name);t.push({name:n.name,path:o,bytes:s.size,mtimeMs:s.mtimeMs,executableHint:i.executableHint,signal:i.signal,pid:i.pid})}catch{}}return t.sort((n,o)=>o.mtimeMs-n.mtimeMs),t}function cr(e={}){if(!(e.forceWsl===void 0?ws():e.forceWsl))return null;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Gr,n=e.windowsUser??_l(),o=e.warnBelowBytes??xs("KYNVER_WSL_CRASH_DUMP_WARN_BYTES",wp),s=e.criticalBelowBytes??xs("KYNVER_WSL_CRASH_DUMP_CRITICAL_BYTES",_p),i=e.warnCount??xs("KYNVER_WSL_CRASH_DUMP_WARN_COUNT",db),a=e.criticalCount??xs("KYNVER_WSL_CRASH_DUMP_CRITICAL_COUNT",pb),l=(e.readCorePattern??Pp)(),c=mb(l),u=null;n&&(u=(e.readWslConfig??Ap)(n,t));let d=u?.maxCrashDumpCount??null,f=d===-1,p=xp({hostMount:t,windowsUser:n,crashDumpDir:e.crashDumpDir});if(!p)return{ok:!0,path:null,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:f,reason:null,probeError:"windows_user_unresolved"};let m;try{m=(e.listDumps??fb)(p)}catch(F){return{ok:!1,path:p,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:f,reason:`WSL crash dump probe failed at ${p}: ${F.message}`,probeError:F.message}}let h=m.reduce((F,P)=>F+P.bytes,0),k=m.length,g=[...new Set(m.map(F=>F.executableHint).filter(F=>!!F))],R=h>=s,O=h>=o,_=k>=a,E=k>=i,Y=!(R||_||O||E),$=null;if(!Y){let F=R||_?"critical":"warning",P=(h/1024**3).toFixed(1),B=g.length>0?g.join(", "):"unknown";$=`WSL crash dumps ${F}: ${k} file(s), ${P} GiB at ${p} (executables: ${B}). `+Ip({wslCaptureEnabled:c,dumpsDisabledInWslConfig:f})}return{ok:Y,path:p,windowsUser:n,dumpCount:k,totalBytes:h,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:m,executables:g,corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:f,reason:$,probeError:null}}function Ip(e={}){let r=["Recovery:","1) run `kynver wsl-crashes --execute` or scripts/cleanup-wsl-crashes.ps1 to prune old .dmp files;"];return e.dumpsDisabledInWslConfig||r.push("2) add `[wsl2]\\nmaxCrashDumpCount=-1` to %USERPROFILE%/.wslconfig then `wsl --shutdown` to disable future dumps;"),e.wslCaptureEnabled&&r.push("3) investigate crashing executables (node OOM/SIGBUS often follows Windows C: pressure \u2014 see docs/runbooks/wsl-disk-pressure.md);"),r.push("full runbook: docs/runbooks/wsl-disk-pressure.md."),r.join(" ")}var wp,_p,db,pb,Ft=M(()=>{"use strict";_s();wp=5*1024*1024*1024,_p=10*1024*1024*1024,db=2,pb=4});import{statfsSync as gb}from"node:fs";function Le(e={}){let r=e.diskPath?.trim()||"/",t=e.diskFreeWarnBytes??hb,n=e.diskFreeCriticalBytes??kb,o=e.diskMaxUsedPercent??yb,s=e.diskHardMaxUsedPercent??Rb,i=gb(r),a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<t,d=a<n,f=a<t*2,p=f&&c>o,m=f&&c>s,h=!u&&!d&&!p&&!m,k=e.skipWslHostCheck?null:Cl(e.wslHost),g=e.skipWslCrashDumpCheck?null:cr(e.wslCrashDumps),R=h&&(k?k.ok:!0)&&(g?g.ok:!0),O=null;return R||(O=[d?`free space below critical ${n} bytes`:null,u?`free space below warning ${t} bytes`:null,m?`used percent above hard cap ${s}%`:null,p?`used percent above cap ${o}%`:null,k&&!k.ok?k.reason:null,g&&!g.ok?g.reason:null].filter(Boolean).join("; ")),vb({ok:R,path:r,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:t,criticalBelowBytes:n,maxUsedPercent:o,hardMaxUsedPercent:s,reason:O,wslHost:k,wslCrashDumps:g?{ok:g.ok,path:g.path,dumpCount:g.dumpCount,totalBytes:g.totalBytes,executables:g.executables,wslCaptureEnabled:g.wslCaptureEnabled,dumpsDisabledInWslConfig:g.dumpsDisabledInWslConfig,reason:g.reason,probeError:g.probeError}:null})}function vb(e){let r=process.env.KYNVER_DISPATCH_DISK_GATE_FORCE?.trim().toLowerCase();return r?r==="ok"||r==="open"||r==="none"?e.ok?e:{...e,ok:!0,reason:`disk gate forced open by KYNVER_DISPATCH_DISK_GATE_FORCE (suppressed: ${e.reason??"no reason"})`}:r==="block"||r==="pressured"?{...e,ok:!1,reason:`disk gate forced closed by KYNVER_DISPATCH_DISK_GATE_FORCE${e.reason?` (underlying: ${e.reason})`:""}`}:e:e}var hb,kb,yb,Rb,Kt=M(()=>{"use strict";Ft();_s();hb=30*1024*1024*1024,kb=15*1024*1024*1024,yb=80,Rb=90});import{existsSync as Op}from"node:fs";import{homedir as Tp}from"node:os";import xr from"node:path";function le(e){let r=xr.resolve(Ut(e.trim()));for(;bb.has(xr.basename(r));)r=xr.dirname(r);return r}function me(){let e=process.env.KYNVER_HARNESS_ROOT||process.env.OPUS_HARNESS_ROOT;if(e)return le(e);let r=y().harnessRoot?.trim();if(r)return le(r);let t=xr.join(Tp(),".kynver","harness");return Op(t)?t:Op(Np)?Np:t}function fe(e){return xr.join(le(e),"runs")}function ur(e){return xr.join(le(e),"worktrees")}function Yr(){let e=me();return{harnessRoot:e,runsDir:fe(e),worktreesDir:ur(e)}}function $t(e,r){return xr.join(e,b(r))}var Np,bb,Ce=M(()=>{"use strict";I();Je();C();Np=xr.join(Tp(),".openclaw","harness"),bb=new Set(["runs","worktrees"])});import{existsSync as Sb,readdirSync as Cb,statSync as wb}from"node:fs";import jt from"node:path";function Z(){return Yr()}function L(e){let{runsDir:r}=Z();return w(jt.join($t(r,b(e)),"run.json"))}function X(){let{runsDir:e}=Z();return Dp(e)}function Ps(e){return Dp(fe(e))}function _b(e){try{return wb(e).isDirectory()}catch{return!1}}function Dp(e){if(!Sb(e))return[];let r=[];for(let t of Cb(e,{withFileTypes:!0})){if(t.name==="runs")continue;let n=jt.join(e,t.name);if(!_b(n))continue;let o=w(jt.join(n,"run.json"),void 0);o?.id&&r.push(o)}return r}function ge(e,r){let{runsDir:t}=Z();return w(jt.join($t(t,b(e)),"workers",b(r),"worker.json"))}function Be(e){let{runsDir:r}=Z();ae(jt.join($t(r,e.id),"run.json"),e)}function K(e,r){let{runsDir:t}=Z();ae(jt.join($t(t,e),"workers",r.name,"worker.json"),r)}function x(e){let{harnessRoot:r}=Z();return Gn(r,e)}function Gn(e,r){return $t(fe(e),b(r))}var T=M(()=>{"use strict";Ce();C()});import{existsSync as xb,readdirSync as Eb}from"node:fs";import Pb from"node:path";function he(e){let r=new Set;for(let n of Object.keys(e.workers||{}))r.add(b(n));let t=Pb.join(x(e.id),"workers");if(!xb(t))return[...r];for(let n of Eb(t,{withFileTypes:!0}))n.isDirectory()&&r.add(b(n.name));return[...r]}var Jr=M(()=>{"use strict";T();C()});function xl(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function Mp(e){let r=e.trim();if(!r)return null;let t=xl(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let l=xl(s[1]??"");l&&n.push(l)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let l=xl(r.slice(i,a+1));l&&n.push(l)}return n.length>0?n[n.length-1]:null}function Up(e){let r=e.finalResult??e.final_result;if(r!=null)return typeof r=="string"?Mp(r)??(r.trim()||null):r;let t=typeof e.summary=="string"?e.summary.trim():"";if(!t)return null;let n=Mp(t);return n||t}var Wp=M(()=>{"use strict"});import{existsSync as Ab,readFileSync as Ib}from"node:fs";function El(e){return e==="complete"}function qr(e){return El(e.lastHeartbeatPhase)?e.terminalFinalResult!==void 0&&e.terminalFinalResult!==null?e.terminalFinalResult:e.lastHeartbeatSummary?.trim()||"completed":null}function ke(e){let r={heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,terminalFinalResult:null,heartbeatBlocker:null,timestampAnomalies:[],lastBoxResourceSnapshot:null,lastPrEvidence:[]};if(!Ab(e))return r;let t=Date.now()+Ob,n=new Date(t).toISOString(),o=Ib(e,"utf8").split(`
-`).filter(Boolean);for(let s of o){let i=Mt(s);if(!i||typeof i!="object"||Array.isArray(i))continue;let a=i;if(r.heartbeatCount++,a.ts){let l=String(a.ts),c=Date.parse(l);Number.isFinite(c)&&c>t?r.timestampAnomalies.push({kind:"future_heartbeat_timestamp",observedAt:l,clampedTo:n}):r.lastHeartbeatAt=l}a.phase!==void 0&&a.phase!==null&&(r.lastHeartbeatPhase=String(a.phase)),a.summary!==void 0&&a.summary!==null&&(r.lastHeartbeatSummary=String(a.summary)),El(r.lastHeartbeatPhase)&&(r.terminalFinalResult=Up(a)),r.heartbeatBlocker=a.blocker?String(a.blocker):null,a.boxResourceSnapshot&&typeof a.boxResourceSnapshot=="object"&&!Array.isArray(a.boxResourceSnapshot)&&(r.lastBoxResourceSnapshot=a.boxResourceSnapshot),Array.isArray(a.prEvidence)&&(r.lastPrEvidence=a.prEvidence.filter(l=>!!l&&typeof l=="object"&&typeof l.prUrl=="string"))}return r}var Ob,Er=M(()=>{"use strict";Wp();C();Ob=6e4});function Tb(e){return e?(e.split("/").pop()??e).replace(/\.exe$/i,"").toLowerCase():null}function Db(e){if(!e)return[];let r=[],t="",n,o=!1;for(let s of e){if(o){t+=s,o=!1;continue}if(s==="\\"){o=!0;continue}if(n){s===n?n=void 0:t+=s;continue}if(s==='"'||s==="'"){n=s;continue}if(/\s/.test(s)){t&&(r.push(t),t="");continue}t+=s}return t&&r.push(t),r}function Mb(e){let r=Tb(e[0]);return!!(r&&Nb.has(r))}function As(e){return!e||e.includes("/")||e.includes("*")?!1:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(e)}function Is(e){if(!e)return!1;let r=e.trim();return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")}function Ub(e){if(!e.startsWith("--glob="))return e;let r=e.slice(7);return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")?`--glob=${r}/**`:e}function Wb(e){let r=[];for(let t=1;t<e.length;t+=1){let n=e[t];if(n){if(n==="--"){r.push(...e.slice(t+1));break}if(n.startsWith("-")){if(n.includes("="))continue;Lp.has(n)&&(t+=1);continue}r.push(n)}}return r}function Bp(e){let r=!1,t=e.map((o,s)=>{let i=Ub(o),a=e[s-1];return a&&Lp.has(a)&&o.startsWith("!")&&!o.includes("/")&&!o.endsWith("/**")&&(i=`${o}/**`),i!==o&&(r=!0),i}),n=Wb(t);if(n.length===2){let[o,s]=n;if(Is(s))return{argv:[t[0]??"rg",o,"-g",`${s}/**`,"."],changed:!0};if(As(s))return{argv:[t[0]??"rg","-g",s,o,"."],changed:!0}}return r&&n.length===1?{argv:[...t,"."],changed:!0}:{argv:t,changed:r}}function Os(e){let r=e.trim();if(!r)return{command:r,changed:!1};let t=r.includes("&&")?" && ":r.includes("||")?" || ":"; ",n=r.split(/\s*(?:&&|\|\||;)\s*/u),o=!1,s=n.map(i=>{let a=Db(i.trim());if(!a.length||!Mb(a))return i;let l=Bp(a);return l.changed?(o=!0,l.argv.join(" ")):i});return o?{command:s.join(t),changed:!0}:{command:r,changed:!1}}function Pl(e){if(!e)return{};let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(|$)/iu);if(r)return{pattern:r[1],target:r[2]?.trim()};let t=e.match(/^search\s+"(.+)"\s+in\s+(.+)$/iu);return t?{pattern:t[1],target:t[2]?.trim()}:{}}function Hp(e){let{pattern:r,target:t}=Pl(e);return r?Is(t)?{kind:"rg_exclude_syntax",pattern:r,target:t}:As(t)?{kind:"bad_scope",pattern:r,target:t}:{kind:"not_repo_search",pattern:r,target:t}:{kind:"not_repo_search"}}function Fp(e){let{pattern:r,target:t}=Pl(e);if(!r)return null;if(Is(t)){let n=`${t.trim()}/**`;return{command:`rg "${r}" -g '${n}' .`,changed:!0}}return t&&As(t)?{command:`rg -g ${t} "${r}" .`,changed:!0}:null}function Kp(e){if(e.kind==="bad_scope"&&e.pattern?.includes("agent-os-land-pr")&&e.target==="package.json")return"Search package.json with a glob from the repo root: `rg -g package.json agent-os-land-pr .` \u2014 or run `node scripts/agent-os-land-pr.mjs <pr-url>` directly.";if(e.kind==="bad_scope"&&e.pattern&&e.target)return`Use \`rg -g '${e.target}' ${e.pattern} .\` from the repo root instead of treating ${e.target} as a folder.`;if(e.kind==="rg_exclude_syntax"&&e.pattern){let r=e.target?`${e.target.trim()}/**`:"!node_modules/**";return`Repo search scope \`${e.target??"!node_modules"}\` is not a valid ripgrep path. Use \`rg "${e.pattern}" -g '${r}' .\` from the repo root (exclude globs need a \`/**\` suffix).`}return e.kind==="no_matches"&&e.pattern?`No matches for "${e.pattern}". Try a broader pattern, drop overly short tokens, or search from the repo root with \`rg "${e.pattern}" .\`.`:null}function $p(e){let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(agent\)|\s*failed|$)/iu);return r?`search "${r[1]}" in ${r[2]?.trim()}`:null}function Ns(e){let r=e.meta?.trim()||(e.command?$p(e.command):null)||null;if(r){let t=Hp(r),n=Kp(t);if(n)return n;let o=Fp(r);if(o?.changed)return`Repo search used an invalid scope. Retry with: \`${o.command}\`.`}if(e.command&&/\b(rg|ripgrep)\b/i.test(e.command)){let t=Os(e.command);if(t.changed)return`Ripgrep scope may be invalid. Retry with: \`${t.command}\`.`;if(e.exitCode===1)return"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root."}return null}var Nb,Lp,Al=M(()=>{"use strict";Nb=new Set(["rg","ripgrep","grep"]),Lp=new Set(["-e","--regexp","-f","--file","-m","--max-count","-A","--after-context","-B","--before-context","-C","--context","-g","--glob","--iglob"])});function Yn(e,r=200){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function Fb(e){let r=e.trim();if(!r)return null;if(r.startsWith("{"))try{return JSON.parse(r)}catch{}let t=r.indexOf("{"),n=r.lastIndexOf("}");if(t>=0&&n>t)try{return JSON.parse(r.slice(t,n+1))}catch{return null}return null}function Jn(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function jp(e){let r=e.metadata;if(!Jn(r))return null;let t=r.vulnerabilities;if(!Jn(t))return null;let n=s=>typeof t[s]=="number"?t[s]:0,o={info:n("info"),low:n("low"),moderate:n("moderate"),high:n("high"),critical:n("critical"),total:n("total")};return typeof t.total!="number"&&!o.critical&&!o.high&&!o.moderate&&!o.low&&!o.info?null:o}function Kb(e){let r=[];e.critical&&r.push(`${e.critical} critical`),e.high&&r.push(`${e.high} high`),e.moderate&&r.push(`${e.moderate} moderate`),e.low&&r.push(`${e.low} low`),e.info&&r.push(`${e.info} info`);let t=r.length?r.join(", "):"see report";return`npm audit: ${e.total} vulnerabilit${e.total===1?"y":"ies"} (${t}) \u2014 remediation required`}function $b(e,r){let t=e.error;if(Jn(t)){let s=typeof t.summary=="string"?t.summary.trim():"",i=typeof t.code=="string"?t.code.trim():"";if(s)return i?`${i}: ${s}`:s;if(i)return i}let n=typeof e.message=="string"?e.message.trim():"";if(n)return n;let o=r.trim();return o?Yn(o.split(`
-`).find(Boolean)??o,160):"npm audit failed"}function Vp(e){let r=`${e.stdout}
-${e.stderr}`.trim(),t=Fb(r);if(!t||!Jn(t)){let o=Yn(r||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit failed (invalid or missing JSON): ${o}`,parseError:"invalid_json"}}if(Jn(t.error))return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit command failed: ${$b(t,e.stderr)}`};let n=jp(t);return n?e.exitCode===0&&n.total===0?{kind:"success",exitCode:0,summary:"npm audit: no vulnerabilities reported",audit:n}:{kind:"audit_findings",exitCode:e.exitCode,summary:Kb(n),audit:n}:{kind:"command_failure",exitCode:e.exitCode,summary:"npm audit failed: JSON response missing vulnerability metadata",parseError:"missing_metadata"}}function jb(e){return Lb.test(e)}function Vb(e){return Bb.test(e)}function Gb(e){let r=Ns({command:e.command,exitCode:e.exitCode});if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"ripgrep finished (exit 0)"};if(e.exitCode===1){let n=(e.stderr||e.interleaved).trim();if(n&&Hb.test(n)){let i=Yn(n,160);return{kind:"command_failure",exitCode:1,summary:r??`ripgrep failed (exit 1): ${i}`}}let o=Os(e.command),s=o.changed&&!r?` Retry with: \`${o.command}\`.`:"";return{kind:"search_no_matches",exitCode:1,summary:r??`ripgrep: no matches (exit 1).${s} Try a broader pattern or search from the repo root.`}}let t=Yn(e.interleaved||e.stdout||e.stderr||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:r??`ripgrep failed (exit ${e.exitCode}): ${t}`}}function Ts(e){let r=e.stdout??"",t=e.stderr??"",n=e.interleavedOutput??"";if(jb(e.command)){let i=r.trim()||n.trim()||t.trim();return Vp({exitCode:e.exitCode,stdout:i,stderr:t})}if(Vb(e.command))return Gb({command:e.command,exitCode:e.exitCode,stdout:r,stderr:t,interleaved:n});let o=Ns({command:e.command,exitCode:e.exitCode});if(o&&e.exitCode!==0)return{kind:"command_failure",exitCode:e.exitCode,summary:o};if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"command succeeded (exit 0)"};let s=Yn(n||r||t||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`command failed (exit ${e.exitCode}): ${s}`}}var Lb,Bb,Hb,Il=M(()=>{"use strict";Al();Lb=/\bnpm\s+audit\b/i,Bb=/\b(rg|ripgrep)\b/i,Hb=/\b(error|invalid|unknown|panic|not found)\b/i});import{existsSync as Yb,readFileSync as Jb}from"node:fs";function qb(e){let r=e.timestamp_ms;return e.timestamp||e.ts||(r?new Date(r).toISOString():void 0)}function Gp(e){if(!e)return null;for(let r of Object.keys(e))if(r.endsWith("ToolCall")){let t=r.slice(0,-8);return t.length?t:r}return null}function zb(e,r){e.finalResult=r.result||r.subtype||r.terminal_reason||"completed",r.is_error&&(e.error=String(r.result||r.api_error_status||"stream result error"))}function Yp(e){if(e.type!=="tool_call"||e.subtype!=="completed")return null;let t=(e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:null)?.shellToolCall;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t,o=n.args,s=o&&typeof o=="object"&&!Array.isArray(o)&&typeof o.command=="string"?String(o.command):"",i=n.result;if(!i||typeof i!="object"||Array.isArray(i))return null;let a=i.success??i.failure;if(!a||typeof a!="object"||Array.isArray(a))return null;let l=a,c=typeof l.exitCode=="number"?l.exitCode:0;return{command:s,exitCode:c,stdout:typeof l.stdout=="string"?l.stdout:"",stderr:typeof l.stderr=="string"?l.stderr:"",interleaved:typeof l.interleavedOutput=="string"?l.interleavedOutput:""}}function Xb(e,r){r.kind==="success"||r.kind==="search_no_matches"||(e.lastShellOutcome=r)}function Vt(e){let r={firstEventAt:null,lastEventAt:null,currentTool:null,finalResult:null,error:null,lastShellOutcome:null};if(!Yb(e))return r;let t=Jb(e,"utf8").split(`
-`).filter(Boolean);for(let n of t){let o=Mt(n);if(!o)continue;let s=qb(o);if(s&&(r.firstEventAt||=s,r.lastEventAt=s),o.type==="stream_event"&&o.event&&typeof o.event=="object"&&o.event.type==="content_block_start"){let a=o.event.content_block;a?.type==="tool_use"&&(r.currentTool=String(a.name||"tool"))}if(o.type==="assistant"&&o.message&&typeof o.message=="object"){let a=o.message.content;if(Array.isArray(a)){let l=a.find(c=>c?.type==="tool_use");l&&(r.currentTool=String(l.name||r.currentTool))}}if(o.type==="tool_call"&&o.subtype==="started"){let a=o.tool_call&&typeof o.tool_call=="object"&&!Array.isArray(o.tool_call)?o.tool_call:void 0,l=Gp(a);l&&(r.currentTool=l)}let i=Yp(o);i&&Xb(r,Ts({command:i.command,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr,interleavedOutput:i.interleaved})),o.type==="result"&&zb(r,o)}return r}function Qb(e){return Vt(e)}function Jp(e){let r=Yp(e);if(!r)return;let t=Ts({command:r.command,exitCode:r.exitCode,stdout:r.stdout,stderr:r.stderr,interleavedOutput:r.interleaved}),n=gs(r.command).slice(0,120);return t.kind==="audit_findings"?`[audit:findings] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="search_no_matches"?`[search:no_matches] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="command_failure"?`[command:failed] ${t.summary}${n?` \xB7 ${n}`:""}`:`[command:ok] exit 0${n?` \xB7 ${n}`:""}`}function Ol(e){if(e.type==="system"&&e.subtype)return`[system:${e.subtype}] ${String(e.status||e.cwd||"")}`.trim();if(e.type==="stream_event"&&e.event&&typeof e.event=="object"){let r=e.event.type;if(r==="content_block_start"){let t=e.event.content_block;if(t?.type==="tool_use")return`[tool:start] ${t.name}`}if(r==="content_block_delta"){let t=e.event.delta;if(t?.partial_json)return`[tool:input] ${t.partial_json}`}return r==="message_stop"?"[message:stop]":r?`[stream:${r}]`:void 0}if(e.type==="assistant"&&e.message&&typeof e.message=="object"){let r=e.message.content;if(Array.isArray(r)){let t=r.find(o=>o?.type==="text");if(t)return`[assistant] ${gs(String(t.text||""))}`;let n=r.find(o=>o?.type==="tool_use");if(n)return`[tool] ${n.name} ${JSON.stringify(n.input||{})}`}}if(e.type==="user"&&e.tool_use_result){let r=e.tool_use_result;return`[tool:result] stdout=${JSON.stringify(r.stdout||"")} stderr=${JSON.stringify(r.stderr||"")}`}if(e.type==="tool_call"){let r=String(e.subtype||""),t=r==="completed"?Jp(e):void 0;if(t)return t;let n=e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:void 0,o=Gp(n)??"tool";return`[tool:${r}] ${o}`}if(e.type==="result")return`[result] ${e.subtype||""} ${gs(String(e.result||""))}`.trim()}var qn=M(()=>{"use strict";Il();C()});function eS(e,r=240){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function qp(e){let r=(e??"").trim();if(!r)return null;for(let t of Zb)if(t.test.test(r))return{blocked:!0,reason:`${t.label}: ${eS(r)}`};return null}var Zb,zp=M(()=>{"use strict";Zb=[{test:/\b(?:invalid|unknown|unsupported|unrecognized)\b[^.\n]*\bmodel\b/i,label:"provider rejected the requested model"},{test:/\bmodel\b[^.\n]*\b(?:not\s+(?:found|supported|available|recognized|valid)|is\s+not\s+valid|does\s+not\s+exist)/i,label:"provider rejected the requested model"},{test:/\b(?:did you mean|available models|choose (?:a|one of)|supported models)\b/i,label:"provider rejected the requested model"},{test:/model preflight failed/i,label:"model/provider preflight failed"},{test:/\b(?:command not found|ENOENT|is the .*CLI on PATH|executable not found|no such file or directory)\b/i,label:"provider CLI is missing or not on PATH"},{test:/\bfailed to spawn\b/i,label:"provider failed to spawn the worker process"},{test:/\b(?:not logged in|unauthorized|authentication (?:failed|required)|invalid api key|missing api key|401)\b/i,label:"provider authentication failed"}]});function Xp(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function rS(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function tS(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:Xp(e.head)}function nS(e,r,t){let n=["exited_with_changes_salvage"];if((e==="uncommitted"||e==="both")&&n.push(`${r} uncommitted change${r===1?"":"s"} with no final result`),(e==="committed_ahead"||e==="both")&&t){let o=t.length>12?t.slice(0,12):t;n.push(`commit ${o} ahead of base with no final result`)}return n.push("review worktree \u2014 commit, open a PR, or run a salvage worker before discarding"),n.join(": ")}function zr(e){if(e.alive||rS(e.finalResult))return null;let r=(e.changedFiles??[]).filter(i=>i.trim()).length,t=Xp(e.headCommit)??tS(e.gitAncestry),n=r>0,o=!!t;if(!n&&!o)return{kind:"none",salvageable:!1,uncommittedCount:0,headCommit:null,attentionReason:"process exited without a final result"};let s=n&&o?"both":n?"uncommitted":"committed_ahead";return{kind:s,salvageable:!0,uncommittedCount:r,headCommit:t,attentionReason:nS(s,r,t)}}var zn=M(()=>{"use strict"});function Xn(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function oS(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function sS(e){if(Xn(e.headCommit)||Xn(e.prUrl)||Xn(e.artifactBundlePath)||Xn(e.patchPath))return!0;let r=e.gitAncestry;return!!(r?.checked&&r.headIsAncestorOfBase===!1&&Xn(r.head))}function Xr(e){return oS(e.finalResult)?e.changedFiles.length===0?{blocked:!1}:sS(e)?{blocked:!0,detail:`Worktree has ${e.changedFiles.length} uncommitted change(s); commit or discard before landing`}:{blocked:!0,reason:"dirty_worktree_no_pr",detail:`Worktree has ${e.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`}:{blocked:!1}}function Qp(e){if(e.blocked)return e.detail??e.reason??"dirty_worktree_no_pr"}var Qn=M(()=>{"use strict"});function Nl(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function Zp(e){let r=e.targetPrReconciliation??e.target_pr_reconciliation??e.targetPrs??e.target_prs;return Array.isArray(r)?r.length:0}function Gt(e){let r=e.trim();if(!r)return null;let t=Nl(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let u=Nl(s[1]??"");u&&n.push(u)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let u=Nl(r.slice(i,a+1));u&&n.push(u)}if(n.length===0)return null;let l=n[n.length-1],c=Zp(l);for(let u of n){let d=Zp(u);d>c&&(l=u,c=d)}return l}var Ds=M(()=>{"use strict"});function em(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:e.trim()||null}function rm(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function iS(e){return new Set(e.map(r=>rm(em(r)??r)).filter(Boolean))}function tm(e,r,t){let n=em(e)??e;if(!n)return"unrelated";let o=rm(n);return iS(r).has(o)?"contract":t?(t.outcome==="skipped"||t.outcome==="blocked")&&t.reason?.trim()?"support":(t.outcome==="merged","unrelated"):"unrelated"}var nm=M(()=>{"use strict"});function Yt(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function aS(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"?Object.keys(e).length>0:!0}function Qr(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:Yt(e)}function Ms(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function om(e){let r=null;if(typeof e=="string"){let o=Gt(e);o&&(r=o)}else e&&typeof e=="object"&&!Array.isArray(e)&&(r=e);if(!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=Qr(String(s.prUrl??s.pr_url??"")),a=Yt(s.outcome);!i||a!=="merged"&&a!=="skipped"&&a!=="blocked"||n.push({prUrl:i,outcome:a,mergeCommit:Yt(s.mergeCommit??s.merge_commit),reason:Yt(s.reason)})}return n}function sm(e,r){let t=[],n=Qr(Yt(e.prUrl)??"");if(n&&t.push(n),r&&typeof r=="object"&&!Array.isArray(r)){let o=r,s=Qr(String(o.prUrl??o.pr_url??""));s&&t.push(s)}return[...new Set(t)]}function Tl(e){let{contract:r,snapshot:t}=e,n=e.finalResult??t.finalResult;if(!r.landingOnly&&r.targetPrUrls.length===0&&!r.repairEnforceOriginalPr)return{blocked:!1};if(!aS(n))return(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&r.targetPrUrls.length>0?{blocked:!0,reason:"missing_target_pr_reconciliation",detail:`Final result required to reconcile target PR(s): ${r.targetPrUrls.join(", ")}`}:{blocked:!1};if(!(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&!r.repairEnforceOriginalPr)return{blocked:!1};let s=r.repairEnforceOriginalPr?Qr(Yt(r.targetPrUrl)??"")??(r.targetPrUrls.length===1?Qr(r.targetPrUrls[0]):null):null;if(s){let d=sm(t,n);if(!(n&&typeof n=="object"&&!Array.isArray(n)&&n.supersedesOriginalTargetPr===!0)){for(let h of d)if(h!==s)return{blocked:!0,reason:"duplicate_repair_pr",detail:`Repair worker opened or attached PR ${h} instead of canonical target ${s}`}}let m=om(n).find(h=>h.prUrl===s);if(!m||m.outcome!=="merged"&&!(m.reason?.trim()&&(m.outcome==="skipped"||m.outcome==="blocked")))return{blocked:!0,reason:"missing_repair_target_reconciliation",detail:`Repair worker must reconcile target PR ${s}`}}let i=om(n),a=new Map(i.map(d=>[Ms(d.prUrl),d])),l=new Set(r.targetPrUrls.map(d=>Ms(Qr(d)??d)).filter(Boolean)),c=sm(t,n);if(r.landingOnly)for(let d of c){let f=a.get(Ms(d)),p=tm(d,r.targetPrUrls,f);if(!(p==="contract"||p==="support"))return l.size>0?{blocked:!0,reason:"unrelated_implementation_pr",detail:`Landing-only worker attached unrelated PR ${d}`}:{blocked:!0,reason:"unrelated_implementation_pr",detail:"Landing-only worker must not open new implementation PRs"}}if(r.targetPrUrls.length===0)return{blocked:!1};let u=[];for(let d of r.targetPrUrls){let f=Ms(Qr(d)??d),p=a.get(f);if(!p){u.push(f);continue}p.outcome!=="merged"&&!p.reason?.trim()&&u.push(f)}return u.length>0?{blocked:!0,reason:u.every(d=>a.has(d))?"incomplete_target_pr_landing":"missing_target_pr_reconciliation",detail:`Target PR reconciliation incomplete: ${u.join(", ")}`}:{blocked:!1}}function Dl(e){if(e.blocked)return e.detail??e.reason}var Ml=M(()=>{"use strict";Ds();nm()});function im(e){let r=Date.now();if(e.completionBlocker&&!am(e.completionBlocker))return{state:"blocked",reason:e.completionBlocker};if(e.finalResult){if(e.localOnly&&uS(e.finalResult))return{state:"done",reason:"local-only worker superseded by merged PR"};let o={finalResult:e.finalResult,changedFiles:e.changedFiles??[],gitAncestry:e.gitAncestry??null,prUrl:e.prUrl??null},s=Xr(o);if(s.blocked){let i=Qp(s);return{state:"needs_attention",reason:s.reason?`landing blocked (${s.reason}): ${i}`:`landing blocked: ${i}`}}if(e.landingContract){let i=Tl({contract:e.landingContract,snapshot:o,finalResult:e.finalResult}),a=Dl(i);if(a)return{state:"needs_attention",reason:i.reason?`landing contract (${i.reason}): ${a}`:`landing contract: ${a}`}}return{state:"done",reason:"final result recorded"}}if(!e.alive){if(cS(e))return{state:"done",reason:"empty abandoned worker record"};let o=qp(e.error);if(o)return{state:"blocked",reason:o.reason};let s=zr({alive:!1,finalResult:null,changedFiles:e.changedFiles,gitAncestry:e.gitAncestry});if(s?.salvageable){let a=e.error?.trim();return{state:"needs_attention",reason:a?`${s.attentionReason} (${a})`:s.attentionReason}}let i=e.error?.trim();return{state:"needs_attention",reason:i?`process exited without a final result: ${i}`:s?.attentionReason??"process exited without a final result"}}if(e.heartbeatBlocker)return{state:"blocked",reason:`worker heartbeat reported blocker: ${e.heartbeatBlocker}`};let t=e.startedAt?Date.parse(e.startedAt):NaN;if(!e.firstEventAt&&e.stdoutBytes===0&&e.heartbeatBytes===0&&Number.isFinite(t)&&r-t>lS)return{state:"needs_attention",reason:`no first stream event ${sl(t)}s after start`};let n=e.lastActivityAt?Date.parse(e.lastActivityAt):NaN;return Number.isFinite(n)&&r-n>Jt?{state:"stale",reason:`no log/event/heartbeat activity for ${sl(n)}s`}:{state:"ok",reason:"recent activity"}}function am(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function cS(e){return e.finalResult||e.taskId||e.agentOsId||e.stdoutBytes>0||(e.stderrBytes??0)>0||e.heartbeatBytes>0||e.error?.trim()||(e.changedFiles??[]).some(r=>r.trim())?!1:/empty worker dir|marked abandoned/i.test(e.reconcileReason??"")}function uS(e){let r=null;if(typeof e=="string"?r=Gt(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return!1;let t=r.targetPrReconciliation??r.target_pr_reconciliation;return Array.isArray(t)?t.some(n=>!n||typeof n!="object"||Array.isArray(n)?!1:String(n.outcome??"").trim()==="merged"):!1}function dS(e,r,t){let n=e.completionSnapshot?.finalResult;return e.completionAckSource==="local-pr-merged-reconcile"&&n!==void 0&&n!==null?n:r||(n??qr(t))}function D(e,r={}){let t=Vt(e.stdoutPath),n=ke(e.heartbeatPath),o=typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim().length>0,s=dS(e,t.finalResult,n),i=o?!1:H(e.pid),a=hs(e.stdoutPath),l=hs(e.stderrPath),c=hs(e.heartbeatPath),u=Hn(e.worktreePath),d=Rs(e.worktreePath,{base:r.base,baseCommit:r.baseCommit}),f=op([t.lastEventAt,n.lastHeartbeatAt,ks(e.stdoutPath),ks(e.stderrPath),ks(e.heartbeatPath)]),p=t.error||!i&&!s&&ys(e.stderrPath,10).trim()||void 0,m=typeof e.completionBlocker=="string"&&e.completionBlocker.trim()?e.completionBlocker.trim():null,h=am(m)?null:m,k=e.repairTargetPrUrl?{landingOnly:!1,targetPrUrls:[e.repairTargetPrUrl],targetPrUrl:e.repairTargetPrUrl,repairEnforceOriginalPr:!0}:null,g=im({alive:i,finalResult:s,firstEventAt:t.firstEventAt,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,lastActivityAt:f,heartbeatBlocker:n.heartbeatBlocker,startedAt:e.startedAt,error:p,changedFiles:u,gitAncestry:d,completionBlocker:h,landingContract:k,prUrl:e.repairTargetPrUrl??e.taskPrUrl??null,localOnly:e.localOnly===!0,taskId:e.taskId??null,agentOsId:e.agentOsId??null,reconcileReason:e.reconcileReason??null}),R=h||g.state==="blocked"?"blocked":o||g.state==="done"?"done":s?"exited":i?"running":"exited";return{runId:e.runId,worker:e.name,pid:e.pid,alive:i,status:R,attention:g,branch:e.branch,worktreePath:e.worktreePath,ownedPaths:e.ownedPaths,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,firstEventAt:t.firstEventAt,lastEventAt:t.lastEventAt,lastActivityAt:f,currentTool:o?null:t.currentTool,heartbeatCount:n.heartbeatCount,lastHeartbeatAt:n.lastHeartbeatAt,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,timestampAnomalies:n.timestampAnomalies,finalResult:s,error:p,changedFiles:u,gitAncestry:d,instructionPolicyFingerprint:e.instructionPolicyFingerprint??null,instructionPolicyEvidence:e.instructionPolicyEvidence??null,model:e.model??e.orchestrationAudit?.model??null,provider:e.orchestrationAudit?.provider??null,boxKind:e.boxKind??null,boxId:e.boxId??null,runtimeId:e.runtimeId??null,personaSlug:e.personaSlug??null,dispatched:e.dispatched??null,localOnly:e.localOnly??null}}function oe(e){return!!(e.finalResult||e.alive===!1||e.status==="exited"||e.status==="done")}function Zr(e){return e.finalResult?e.attention.state==="needs_attention"||e.attention.state==="blocked":!1}function qt(e,r){return r.length===0?e:r.some(t=>t.attention==="needs_attention"||t.attention==="stale"||t.attention==="blocked")?"needs_attention":r.every(t=>t.status==="done")?"done":r.some(t=>t.status==="running")?"running":e}var lS,Jt,z=M(()=>{"use strict";Er();qn();zp();zn();Pe();Qn();Ml();Ds();C();lS=18e4,Jt=6e5});import{readFileSync as pS}from"node:fs";function mS(e){if(!e||process.platform!=="linux")return null;try{return pS(`/proc/${e}/cmdline`,"utf8").replace(/\0/g," ")}catch{return null}}function Us(e){if(!e.pid||process.platform!=="linux")return!0;let r=mS(e.pid);return r?[e.worktreePath,e.workerDir,e.heartbeatPath].filter(n=>typeof n=="string"&&n.trim().length>0).some(n=>r.includes(n)):!1}function et(e){if(typeof e.completionBlocker=="string"&&e.completionBlocker.trim())return!1;let r=D(e);return r.alive&&!Us(e)?!1:r.alive&&!r.finalResult&&r.attention.state!=="done"}var zt=M(()=>{"use strict";z()});import cm from"node:os";import fS from"node:path";function lm(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function gS(e=y(),r,t){let n=lm(e.perWorkerMemBytes,Zn),o=lm(e.memReserveBytes,eo),s=Math.min(1,Math.max(.1,Number(e.memUtilization)>0?Number(e.memUtilization):ro)),i=Ls({config:e,configuredMaxWorkersOverride:r,totalMemBytes:t??cm.totalmem()});return{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i.configuredMaxWorkers,autoCap:i.autoCap,workerCapSource:i.workerCapSource}}function Ul(e,r={}){let t=r.perWorkerMemBytes??Zn,n=r.memReserveBytes??eo,o=r.memUtilization??ro,s=Math.max(0,Math.floor(e*o)-n),i=Math.max(1,Math.floor(s/t));return Math.min(i,Ws)}function hS(){return Ht()}function kS(e){let r=0;for(let t of he(e)){let n=w(fS.join(x(e.id),"workers",b(t),"worker.json"),void 0);!n||!et(n)||r++}return r}function yS(){let e=0;for(let r of X())e+=kS(r);return e}function dr(e){let r=e.config??y(),t=e.totalMemBytes??cm.totalmem(),{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i,autoCap:a,workerCapSource:l}=gS(r,e.configuredMaxWorkersOverride,t),c=qe(r),u=e.freeMemBytes??hS(),d=e.activeWorkers??yS(),f=Math.max(0,Math.floor(t*s)-o),p=Math.max(0,Math.floor(f/n)),m=Math.max(0,Math.floor(Math.max(0,u-o)/n)),h=a,k=lr(c,i??h),g=Math.max(0,Math.min(k,p)),R=Math.max(0,g-d),_=Math.min(R,m),U=e.skipDiskGate||process.env.KYNVER_RESOURCE_GATE_SKIP_DISK==="1"?void 0:Le({diskPath:e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/"});U&&!U.ok&&(_=0);let Y=null;return _<=0&&(U&&!U.ok?Y=U.reason??"disk gate blocked worker admission":d>=g?Y=`at worker limit (${d}/${g} running)`:m<=0?Y="insufficient free memory \u2014 waiting for workers to finish":Y="no worker slots available"),{ok:_>0,totalMemBytes:t,freeMemBytes:u,memReserveBytes:o,perWorkerMemBytes:n,configuredMaxWorkers:i,workerCapSource:l,boxKind:c,autoCap:h,capacityWorkers:p,maxConcurrentWorkers:g,activeWorkers:d,slotsAvailable:_,reason:Y,...U?{diskGate:U}:{}}}var Zn,eo,ro,Ws,Xt=M(()=>{"use strict";Cs();I();Oe();Vn();Bs();Kt();T();Jr();zt();C();Zn=500*1024*1024,eo=4*1024*1024*1024,ro=.85,Ws=64});function rt(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Ls(e){let r=e.config??{},t=e.env??process.env,n=rt(r.perWorkerMemBytes,Zn),o=rt(r.memReserveBytes,eo),s=Math.min(1,Math.max(.1,Number(r.memUtilization)>0?Number(r.memUtilization):ro)),i=Ul(e.totalMemBytes,{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s});if(e.configuredMaxWorkersOverride!==void 0&&e.configuredMaxWorkersOverride!==null)return{configuredMaxWorkers:rt(e.configuredMaxWorkersOverride,i),autoCap:i,workerCapSource:"workspace_override"};if(r.maxConcurrentWorkers!==void 0&&r.maxConcurrentWorkers!==null){let c=rt(r.maxConcurrentWorkers,0)||null;if(c)return{configuredMaxWorkers:Math.min(c,Ws),autoCap:i,workerCapSource:"config"}}let l=(t.KYNVER_MAX_WORKERS_INTENTIONAL==="1"||t.KYNVER_MAX_WORKERS_INTENTIONAL==="true")&&t.KYNVER_MAX_WORKERS&&rt(t.KYNVER_MAX_WORKERS,0)||null;return l?{configuredMaxWorkers:Math.min(l,Ws),autoCap:i,workerCapSource:"env"}:{configuredMaxWorkers:null,autoCap:i,workerCapSource:"auto"}}function Wl(e={}){let r=e.totalMemBytes??0,t=Ul(r,{perWorkerMemBytes:rt(e.config?.perWorkerMemBytes,Zn),memReserveBytes:rt(e.config?.memReserveBytes,eo),memUtilization:e.config?.memUtilization&&Number(e.config.memUtilization)>0?Number(e.config.memUtilization):ro}),n=e.diskGateOk??!0,o=n?t:Math.max(1,Math.min(t,4));return{totalMemBytes:r,autoCap:t,recommendedMaxWorkers:o,diskPath:e.diskPath??"/",diskGateOk:n,diskFreeBytes:e.diskFreeBytes??null}}var Bs=M(()=>{"use strict";Xt()});import{existsSync as um,mkdirSync as RS,readFileSync as dm,writeFileSync as vS}from"node:fs";import{homedir as bS}from"node:os";import pm from"node:path";function Ll(e){let r=new Map;for(let t of e.split(/\r?\n/)){let n=t.trim();if(!n||n.startsWith("#"))continue;let o=n.indexOf("=");if(o<=0)continue;let s=n.slice(0,o).trim(),i=n.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),r.set(s,i)}return r}function SS(e,r=`# Managed by kynver cron install \u2014 safe to edit; re-run install to merge keys.
+`):""}function fp(e){return e?ul(pp.resolve(e),"utf8"):""}function $r(e){Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function xr(e){return new Promise(r=>setTimeout(r,e))}function H(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}function Er(e,r){try{process.kill(-e,r)}catch{process.kill(e,r)}}function gp(e){let r=null,t=-1/0;for(let n of e){if(!n)continue;let o=Date.parse(n);Number.isFinite(o)&&o>t&&(t=o,r=n)}return r}function dl(e){return Math.max(0,Math.round((Date.now()-e)/1e3))}var C=M(()=>{"use strict"});function pl(e){return Kv.has(e)?!0:$v.some(r=>e.endsWith(r))}function kp(e){return Object.keys(e).filter(pl).sort()}function We(e){let r={...e};for(let t of Object.keys(r))pl(t)&&delete r[t];return r}function jv(e){let r=kp(e);return{forbiddenPresent:r,safe:r.length===0}}function yp(e){return We(e)}var hp,Kv,$v,jr=M(()=>{"use strict";hp=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY"],Kv=new Set(hp),$v=["_SECRET","_API_KEY"]});import{spawnSync as vp}from"node:child_process";function me(e,r,t={}){let n=vp("git",r,pe({cwd:e,encoding:"utf8"}));if(n.status!==0&&!t.allowFailure){let o=`git ${r.join(" ")} failed: ${n.stderr||n.stdout}`;if(t.throwError)throw new Error(o);_r(o)}return n.stdout||""}function bp(e){me(e,["rev-parse","--show-toplevel"])}function $n(e){return me(e,["status","--short"],{allowFailure:!0}).split(`
+`).map(r=>r.trim()).filter(Boolean)}function ne(e,r){try{let t=vp("git",r,pe({cwd:e,encoding:"utf8"}));return{status:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function Rp(e,r,t){let n=ne(e,["merge-base","--is-ancestor",r,t]);return n.status===0?{isAncestor:!0,error:null}:n.status===1?{isAncestor:!1,error:null}:{isAncestor:null,error:n.error||n.stderr||n.stdout||`git exited ${n.status}`}}function bs(e,r="origin/main"){let t=typeof r=="string"?{base:r}:r,n=t.baseCommit?.trim()||t.base?.trim()||"origin/main",o=t.baseCommit?.trim()||null;if(!e)return ml(n,"missing worktree path");let s=ne(e,["rev-parse","HEAD"]);if(s.status!==0)return ml(n,s.error||s.stderr||s.stdout||"failed to resolve HEAD");let i;if(o)i=o;else{let m=ne(e,["rev-parse",n]);if(m.status!==0)return ml(n,m.error||m.stderr||m.stdout||`failed to resolve ${n}`,s.stdout.trim());i=m.stdout.trim()}let a=s.stdout.trim();if(a===i)return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:!0,headIsAncestorOfBase:!0,relation:"synced"};let l=Rp(e,i,a),c=Rp(e,a,i),u=l.error||c.error||void 0;if(l.isAncestor==null||c.isAncestor==null)return{checked:!1,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:"unknown",...u?{error:u}:{}};let d=l.isAncestor?"ahead":c.isAncestor?"merged":"diverged";return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:d,...u?{error:u}:{}}}function ml(e,r,t=null){return{checked:!1,base:e,head:t,baseHead:null,baseIsAncestorOfHead:null,headIsAncestorOfBase:null,relation:"unknown",error:r}}var Pe=M(()=>{"use strict";C();jr()});import{homedir as fl}from"node:os";import Vr from"node:path";function Sp(e){return e==="~"?fl():e.startsWith("~/")||e.startsWith("~\\")?Vr.join(fl(),e.slice(2)):e}function Bt(e){return Vr.resolve(Sp(e))}function Se(e){let r=Sp(e),t=Vr.resolve(r),n=Vr.resolve(fl());return t===n?"~":t.startsWith(`${n}${Vr.sep}`)?`~/${Vr.relative(n,t).split(Vr.sep).join("/")}`:t.replace(/\\/g,"/").replace(/^\/home\/[^/]+(?=\/|$)/,"~").replace(/^\/Users\/[^/]+(?=\/|$)/,"~").replace(/^[A-Za-z]:\/home\/[^/]+(?=\/|$)/i,"~").replace(/^[A-Za-z]:\/Users\/[^/]+(?=\/|$)/i,"~")}function q(e){return Se(e)}var Je=M(()=>{"use strict"});import{existsSync as kl,readFileSync as Cp}from"node:fs";import{homedir as Vv}from"node:os";import lr from"node:path";import{fileURLToPath as Gv}from"node:url";function Jv(e){let r=lr.join(e,"package.json");if(!kl(r))return null;try{let t=JSON.parse(Cp(r,"utf8"));return typeof t.name=="string"?t.name.trim():null}catch{return null}}function wp(e){return Jv(e)==="kynver"}function hl(e){let r=lr.resolve(e);if(!kl(r))return null;let t=ne(r,["rev-parse","--show-toplevel"]);if(t.status!==0)return null;let n=t.stdout.trim();return n.length?lr.resolve(n):null}function qv(e=import.meta.url){let r=lr.dirname(Gv(e));for(let t=0;t<8;t+=1){let n=lr.join(r,"package.json");if(kl(n))try{if(JSON.parse(Cp(n,"utf8")).name==="@kynver-app/runtime")return r}catch{}let o=lr.dirname(r);if(o===r)break;r=o}return null}function gl(e,r,t,n){if(!t)return;let o=lr.resolve(t);e.has(o)||wp(o)&&(e.add(o),r.push({repo:o,source:n}))}function yl(e){let r=e?.cwd??process.cwd(),t=new Set,n=[];gl(t,n,hl(r),"cwd_git");let o=qv(e?.runtimeModuleUrl??import.meta.url);o&&gl(t,n,hl(o),"runtime_checkout");let s=Vv();for(let i of Yv)gl(t,n,Bt(lr.join(s,i)),"well_known_path");return n}function Gr(e){return yl(e)[0]??null}function _p(e){let r=lr.resolve(e).replace(/\\/g,"/");return r.includes("/.kynver/harness/worktrees/")||r.includes("/.openclaw/harness/worktrees/")||r.includes("/kynver-harness/")||r.includes("/openclaw/harness/worktrees/")}function jn(e){let r=yl(e);return r.find(n=>!_p(n.repo))??r[0]??null}var Yv,Vn=M(()=>{"use strict";Pe();Je();Yv=["Kynver","repos/Kynver","repos/kynver-source-main","code/Kynver","projects/Kynver"]});function Ft(e){let r=(e??"").trim().toLowerCase();return r==="ghost"||r==="forge"?r:r.includes("forge")?"forge":r.includes("ghost")||r.includes("openclaw")?"ghost":"forge"}function Pp(e,r){return e[r]?.trim()||null}function Ae(e=process.env,r={}){let t=[],n=r.boxKind?.trim();if(n)return{boxKind:Ft(n),source:"config",slugInferenceBlocked:!1,warnings:t};let o=Pp(e,"KYNVER_BOX_KIND");if(o)return{boxKind:Ft(o),source:"env",slugInferenceBlocked:!1,warnings:t};let s=Pp(e,"KYNVER_AGENT_OS_SLUG");return s&&t.push(`KYNVER_AGENT_OS_SLUG=${s} is a workspace slug, not box identity \u2014 set boxKind via \`kynver setup --box-kind forge|ghost\` or KYNVER_BOX_KIND (defaulting box kind to forge)`),{boxKind:"forge",source:"default",slugInferenceBlocked:!!s,warnings:t}}function qe(e={},r=process.env){return Ae(r,e).boxKind}var Oe=M(()=>{"use strict"});function Pl(e,r){return e==="forge"?4:Math.max(1,r)}function cr(e,r){return e==="forge"?Math.min(Math.max(1,r),4):Math.max(1,r)}function Kt(e,r){return e==="forge"&&r>4}var Jn=M(()=>{"use strict"});import{readFileSync as fb}from"node:fs";import Ap from"node:os";function $t(e){if(e!==void 0){let r=e.match(/^MemAvailable:\s+(\d+)\s*kB/m);return r?Number(r[1])*1024:Ap.freemem()}if(process.platform==="linux")try{let t=fb("/proc/meminfo","utf8").match(/^MemAvailable:\s+(\d+)\s*kB/m);if(t)return Number(t[1])*1024}catch{}return Ap.freemem()}var _s=M(()=>{"use strict"});import{existsSync as gb,readFileSync as hb,statfsSync as kb}from"node:fs";function xs(){if(process.platform!=="linux")return!1;for(let e of["/proc/sys/kernel/osrelease","/proc/version"])try{if(!gb(e))continue;let r=hb(e,"utf8");if(/microsoft|wsl/i.test(r))return!0}catch{}return!1}function Al(e={}){if(!(e.forceWsl===void 0?xs():e.forceWsl))return null;let t=e.wslHostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Jr,n=e.wslHostFreeWarnBytes??Ip,o=e.wslHostFreeCriticalBytes??Op,s=e.statfs??kb,i;try{i=s(t)}catch(h){return{ok:!1,path:t,freeBytes:0,totalBytes:0,usedPercent:100,warnBelowBytes:n,criticalBelowBytes:o,reason:`Windows host disk probe failed at ${t}: ${h.message}`,probeError:h.message}}let a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<n,d=a<o,m=!u&&!d,p=(a/(1024*1024*1024)).toFixed(1),f=null;return m||(f=`Windows host disk ${t} at ${d?"critical":"warning"}: ${p} GiB free (<${(d?o:n)/1024/1024/1024} GiB); WSL VHDX cannot grow safely. ${Np()}`),{ok:m,path:t,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:n,criticalBelowBytes:o,reason:f,probeError:null}}function Np(){return"Recovery: 1) free Windows C: (empty Recycle Bin / Storage Sense / clear %TEMP% and %LOCALAPPDATA%\\Temp\\wsl-crashes); 2) shut down WSL (`wsl --shutdown`) then compact the VHDX (`Optimize-VHD` or `diskpart compact vdisk`); 3) clear local node_modules / .next / harness worktrees before restarting workers; 4) disable recurring dumps via `%USERPROFILE%/.wslconfig` (`maxCrashDumpCount=-1`) or `kynver wsl-crashes --execute`. Full runbook: docs/runbooks/wsl-disk-pressure.md."}var Ip,Op,Jr,Es=M(()=>{"use strict";Ip=25*1024*1024*1024,Op=12*1024*1024*1024,Jr="/mnt/c"});import{execFileSync as Tp}from"node:child_process";import{existsSync as As,readFileSync as Dp,readdirSync as yb,statSync as Rb}from"node:fs";import Il from"node:path";function Ps(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function Ol(){let e=process.env.KYNVER_WSL_WIN_USER?.trim();if(e)return e;try{let n=Tp("cmd.exe",["/c","echo","%USERNAME%"],{encoding:"utf8",timeout:5e3,stdio:["ignore","pipe","ignore"]}).trim();if(n&&n!=="%USERNAME%"&&!n.includes("%"))return n}catch{}let r=process.env.USER?.trim()||process.env.LOGNAME?.trim(),t=process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Jr;return r&&As(Il.join(t,"Users",r))?r:null}function Wp(e={}){let r=e.crashDumpDir?.trim()||process.env.KYNVER_WSL_CRASH_DUMP_DIR?.trim();if(r)return r;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Jr,n=e.windowsUser??Ol();return n?`${t.replace(/\\/g,"/").replace(/\/$/,"")}/Users/${n}/AppData/Local/Temp/wsl-crashes`:null}function Lp(e){let r=/^wsl-crash-\d+-(\d+)-(.+)-(\d+)\.dmp$/i.exec(e);if(!r)return{executableHint:null,signal:null,pid:null};let t=Number(r[1]),n=r[2]??"",o=Number(r[3]),s=n.split("_").filter(Boolean);return{executableHint:s.length>0?s[s.length-1]:null,signal:Number.isFinite(o)?o:null,pid:Number.isFinite(t)?t:null}}function Bp(){try{if(As("/proc/sys/kernel/core_pattern"))return Dp("/proc/sys/kernel/core_pattern","utf8").trim()}catch{}try{return Tp("sysctl",["-n","kernel.core_pattern"],{encoding:"utf8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim()||null}catch{return null}}function Sb(e){return!!(e&&/wsl-capture-crash/i.test(e))}function Hp(e,r=Jr){let t=Il.join(r,"Users",e,".wslconfig");if(!As(t))return{maxCrashDumpCount:null,crashDumpFolder:null};let n;try{n=Dp(t,"utf8")}catch{return null}let o=null,s=null;for(let i of n.split(/\r?\n/)){let a=i.replace(/#.*$/,"").trim();if(!a||a.startsWith("["))continue;let l=a.indexOf("=");if(l<0)continue;let c=a.slice(0,l).trim().toLowerCase(),u=a.slice(l+1).trim();if(c==="maxcrashdumpcount"){let d=Number(u);o=Number.isFinite(d)?d:null}else c==="crashdumpfolder"&&(s=u.replace(/^["']|["']$/g,"")||null)}return{maxCrashDumpCount:o,crashDumpFolder:s}}function Cb(e){if(!As(e))return[];let r=yb(e,{withFileTypes:!0}),t=[];for(let n of r){if(!n.isFile()||!n.name.toLowerCase().endsWith(".dmp"))continue;let o=Il.join(e,n.name);try{let s=Rb(o),i=Lp(n.name);t.push({name:n.name,path:o,bytes:s.size,mtimeMs:s.mtimeMs,executableHint:i.executableHint,signal:i.signal,pid:i.pid})}catch{}}return t.sort((n,o)=>o.mtimeMs-n.mtimeMs),t}function ur(e={}){if(!(e.forceWsl===void 0?xs():e.forceWsl))return null;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Jr,n=e.windowsUser??Ol(),o=e.warnBelowBytes??Ps("KYNVER_WSL_CRASH_DUMP_WARN_BYTES",Mp),s=e.criticalBelowBytes??Ps("KYNVER_WSL_CRASH_DUMP_CRITICAL_BYTES",Up),i=e.warnCount??Ps("KYNVER_WSL_CRASH_DUMP_WARN_COUNT",vb),a=e.criticalCount??Ps("KYNVER_WSL_CRASH_DUMP_CRITICAL_COUNT",bb),l=(e.readCorePattern??Bp)(),c=Sb(l),u=null;n&&(u=(e.readWslConfig??Hp)(n,t));let d=u?.maxCrashDumpCount??null,m=d===-1,p=Wp({hostMount:t,windowsUser:n,crashDumpDir:e.crashDumpDir});if(!p)return{ok:!0,path:null,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:m,reason:null,probeError:"windows_user_unresolved"};let f;try{f=(e.listDumps??Cb)(p)}catch(F){return{ok:!1,path:p,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:m,reason:`WSL crash dump probe failed at ${p}: ${F.message}`,probeError:F.message}}let h=f.reduce((F,P)=>F+P.bytes,0),k=f.length,g=[...new Set(f.map(F=>F.executableHint).filter(F=>!!F))],R=h>=s,O=h>=o,_=k>=a,E=k>=i,Y=!(R||_||O||E),$=null;if(!Y){let F=R||_?"critical":"warning",P=(h/1024**3).toFixed(1),B=g.length>0?g.join(", "):"unknown";$=`WSL crash dumps ${F}: ${k} file(s), ${P} GiB at ${p} (executables: ${B}). `+Fp({wslCaptureEnabled:c,dumpsDisabledInWslConfig:m})}return{ok:Y,path:p,windowsUser:n,dumpCount:k,totalBytes:h,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:f,executables:g,corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:m,reason:$,probeError:null}}function Fp(e={}){let r=["Recovery:","1) run `kynver wsl-crashes --execute` or scripts/cleanup-wsl-crashes.ps1 to prune old .dmp files;"];return e.dumpsDisabledInWslConfig||r.push("2) add `[wsl2]\\nmaxCrashDumpCount=-1` to %USERPROFILE%/.wslconfig then `wsl --shutdown` to disable future dumps;"),e.wslCaptureEnabled&&r.push("3) investigate crashing executables (node OOM/SIGBUS often follows Windows C: pressure \u2014 see docs/runbooks/wsl-disk-pressure.md);"),r.push("full runbook: docs/runbooks/wsl-disk-pressure.md."),r.join(" ")}var Mp,Up,vb,bb,jt=M(()=>{"use strict";Es();Mp=5*1024*1024*1024,Up=10*1024*1024*1024,vb=2,bb=4});import{statfsSync as wb}from"node:fs";function Le(e={}){let r=e.diskPath?.trim()||"/",t=e.diskFreeWarnBytes??_b,n=e.diskFreeCriticalBytes??xb,o=e.diskMaxUsedPercent??Eb,s=e.diskHardMaxUsedPercent??Pb,i=wb(r),a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<t,d=a<n,m=a<t*2,p=m&&c>o,f=m&&c>s,h=!u&&!d&&!p&&!f,k=e.skipWslHostCheck?null:Al(e.wslHost),g=e.skipWslCrashDumpCheck?null:ur(e.wslCrashDumps),R=h&&(k?k.ok:!0)&&(g?g.ok:!0),O=null;return R||(O=[d?`free space below critical ${n} bytes`:null,u?`free space below warning ${t} bytes`:null,f?`used percent above hard cap ${s}%`:null,p?`used percent above cap ${o}%`:null,k&&!k.ok?k.reason:null,g&&!g.ok?g.reason:null].filter(Boolean).join("; ")),Ab({ok:R,path:r,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:t,criticalBelowBytes:n,maxUsedPercent:o,hardMaxUsedPercent:s,reason:O,wslHost:k,wslCrashDumps:g?{ok:g.ok,path:g.path,dumpCount:g.dumpCount,totalBytes:g.totalBytes,executables:g.executables,wslCaptureEnabled:g.wslCaptureEnabled,dumpsDisabledInWslConfig:g.dumpsDisabledInWslConfig,reason:g.reason,probeError:g.probeError}:null})}function Ab(e){let r=process.env.KYNVER_DISPATCH_DISK_GATE_FORCE?.trim().toLowerCase();return r?r==="ok"||r==="open"||r==="none"?e.ok?e:{...e,ok:!0,reason:`disk gate forced open by KYNVER_DISPATCH_DISK_GATE_FORCE (suppressed: ${e.reason??"no reason"})`}:r==="block"||r==="pressured"?{...e,ok:!1,reason:`disk gate forced closed by KYNVER_DISPATCH_DISK_GATE_FORCE${e.reason?` (underlying: ${e.reason})`:""}`}:e:e}var _b,xb,Eb,Pb,Vt=M(()=>{"use strict";jt();Es();_b=30*1024*1024*1024,xb=15*1024*1024*1024,Eb=80,Pb=90});import{existsSync as Kp}from"node:fs";import{homedir as jp}from"node:os";import Pr from"node:path";function le(e){let r=Pr.resolve(Bt(e.trim()));for(;Ib.has(Pr.basename(r));)r=Pr.dirname(r);return r}function fe(){let e=process.env.KYNVER_HARNESS_ROOT||process.env.OPUS_HARNESS_ROOT;if(e)return le(e);let r=y().harnessRoot?.trim();if(r)return le(r);let t=Pr.join(jp(),".kynver","harness");return Kp(t)?t:Kp($p)?$p:t}function ge(e){return Pr.join(le(e),"runs")}function dr(e){return Pr.join(le(e),"worktrees")}function qr(){let e=fe();return{harnessRoot:e,runsDir:ge(e),worktreesDir:dr(e)}}function Gt(e,r){return Pr.join(e,b(r))}var $p,Ib,Ce=M(()=>{"use strict";I();Je();C();$p=Pr.join(jp(),".openclaw","harness"),Ib=new Set(["runs","worktrees"])});import{existsSync as Ob,readdirSync as Nb,statSync as Tb}from"node:fs";import Yt from"node:path";function Z(){return qr()}function L(e){let{runsDir:r}=Z();return w(Yt.join(Gt(r,b(e)),"run.json"))}function X(){let{runsDir:e}=Z();return Vp(e)}function Is(e){return Vp(ge(e))}function Db(e){try{return Tb(e).isDirectory()}catch{return!1}}function Vp(e){if(!Ob(e))return[];let r=[];for(let t of Nb(e,{withFileTypes:!0})){if(t.name==="runs")continue;let n=Yt.join(e,t.name);if(!Db(n))continue;let o=w(Yt.join(n,"run.json"),void 0);o?.id&&r.push(o)}return r}function he(e,r){let{runsDir:t}=Z();return w(Yt.join(Gt(t,b(e)),"workers",b(r),"worker.json"))}function Be(e){let{runsDir:r}=Z();ae(Yt.join(Gt(r,e.id),"run.json"),e)}function K(e,r){let{runsDir:t}=Z();ae(Yt.join(Gt(t,e),"workers",r.name,"worker.json"),r)}function x(e){let{harnessRoot:r}=Z();return qn(r,e)}function qn(e,r){return Gt(ge(e),b(r))}var T=M(()=>{"use strict";Ce();C()});import{existsSync as Mb,readdirSync as Ub}from"node:fs";import Wb from"node:path";function ke(e){let r=new Set;for(let n of Object.keys(e.workers||{}))r.add(b(n));let t=Wb.join(x(e.id),"workers");if(!Mb(t))return[...r];for(let n of Ub(t,{withFileTypes:!0}))n.isDirectory()&&r.add(b(n.name));return[...r]}var zr=M(()=>{"use strict";T();C()});function Nl(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function Gp(e){let r=e.trim();if(!r)return null;let t=Nl(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let l=Nl(s[1]??"");l&&n.push(l)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let l=Nl(r.slice(i,a+1));l&&n.push(l)}return n.length>0?n[n.length-1]:null}function Yp(e){let r=e.finalResult??e.final_result;if(r!=null)return typeof r=="string"?Gp(r)??(r.trim()||null):r;let t=typeof e.summary=="string"?e.summary.trim():"";if(!t)return null;let n=Gp(t);return n||t}var Jp=M(()=>{"use strict"});import{existsSync as Lb,readFileSync as Bb}from"node:fs";function Tl(e){return e==="complete"}function ze(e){return Tl(e.lastHeartbeatPhase)?e.terminalFinalResult!==void 0&&e.terminalFinalResult!==null?e.terminalFinalResult:e.lastHeartbeatSummary?.trim()||"completed":null}function ce(e){let r={heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,terminalFinalResult:null,heartbeatBlocker:null,timestampAnomalies:[],lastBoxResourceSnapshot:null,lastPrEvidence:[]};if(!Lb(e))return r;let t=Date.now()+Hb,n=new Date(t).toISOString(),o=Bb(e,"utf8").split(`
+`).filter(Boolean);for(let s of o){let i=Lt(s);if(!i||typeof i!="object"||Array.isArray(i))continue;let a=i;if(r.heartbeatCount++,a.ts){let l=String(a.ts),c=Date.parse(l);Number.isFinite(c)&&c>t?r.timestampAnomalies.push({kind:"future_heartbeat_timestamp",observedAt:l,clampedTo:n}):r.lastHeartbeatAt=l}a.phase!==void 0&&a.phase!==null&&(r.lastHeartbeatPhase=String(a.phase)),a.summary!==void 0&&a.summary!==null&&(r.lastHeartbeatSummary=String(a.summary)),Tl(r.lastHeartbeatPhase)&&(r.terminalFinalResult=Yp(a)),r.heartbeatBlocker=a.blocker?String(a.blocker):null,a.boxResourceSnapshot&&typeof a.boxResourceSnapshot=="object"&&!Array.isArray(a.boxResourceSnapshot)&&(r.lastBoxResourceSnapshot=a.boxResourceSnapshot),Array.isArray(a.prEvidence)&&(r.lastPrEvidence=a.prEvidence.filter(l=>!!l&&typeof l=="object"&&typeof l.prUrl=="string"))}return r}var Hb,pr=M(()=>{"use strict";Jp();C();Hb=6e4});function Kb(e){return e?(e.split("/").pop()??e).replace(/\.exe$/i,"").toLowerCase():null}function $b(e){if(!e)return[];let r=[],t="",n,o=!1;for(let s of e){if(o){t+=s,o=!1;continue}if(s==="\\"){o=!0;continue}if(n){s===n?n=void 0:t+=s;continue}if(s==='"'||s==="'"){n=s;continue}if(/\s/.test(s)){t&&(r.push(t),t="");continue}t+=s}return t&&r.push(t),r}function jb(e){let r=Kb(e[0]);return!!(r&&Fb.has(r))}function Os(e){return!e||e.includes("/")||e.includes("*")?!1:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(e)}function Ns(e){if(!e)return!1;let r=e.trim();return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")}function Vb(e){if(!e.startsWith("--glob="))return e;let r=e.slice(7);return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")?`--glob=${r}/**`:e}function Gb(e){let r=[];for(let t=1;t<e.length;t+=1){let n=e[t];if(n){if(n==="--"){r.push(...e.slice(t+1));break}if(n.startsWith("-")){if(n.includes("="))continue;qp.has(n)&&(t+=1);continue}r.push(n)}}return r}function zp(e){let r=!1,t=e.map((o,s)=>{let i=Vb(o),a=e[s-1];return a&&qp.has(a)&&o.startsWith("!")&&!o.includes("/")&&!o.endsWith("/**")&&(i=`${o}/**`),i!==o&&(r=!0),i}),n=Gb(t);if(n.length===2){let[o,s]=n;if(Ns(s))return{argv:[t[0]??"rg",o,"-g",`${s}/**`,"."],changed:!0};if(Os(s))return{argv:[t[0]??"rg","-g",s,o,"."],changed:!0}}return r&&n.length===1?{argv:[...t,"."],changed:!0}:{argv:t,changed:r}}function Ts(e){let r=e.trim();if(!r)return{command:r,changed:!1};let t=r.includes("&&")?" && ":r.includes("||")?" || ":"; ",n=r.split(/\s*(?:&&|\|\||;)\s*/u),o=!1,s=n.map(i=>{let a=$b(i.trim());if(!a.length||!jb(a))return i;let l=zp(a);return l.changed?(o=!0,l.argv.join(" ")):i});return o?{command:s.join(t),changed:!0}:{command:r,changed:!1}}function Dl(e){if(!e)return{};let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(|$)/iu);if(r)return{pattern:r[1],target:r[2]?.trim()};let t=e.match(/^search\s+"(.+)"\s+in\s+(.+)$/iu);return t?{pattern:t[1],target:t[2]?.trim()}:{}}function Xp(e){let{pattern:r,target:t}=Dl(e);return r?Ns(t)?{kind:"rg_exclude_syntax",pattern:r,target:t}:Os(t)?{kind:"bad_scope",pattern:r,target:t}:{kind:"not_repo_search",pattern:r,target:t}:{kind:"not_repo_search"}}function Qp(e){let{pattern:r,target:t}=Dl(e);if(!r)return null;if(Ns(t)){let n=`${t.trim()}/**`;return{command:`rg "${r}" -g '${n}' .`,changed:!0}}return t&&Os(t)?{command:`rg -g ${t} "${r}" .`,changed:!0}:null}function Zp(e){if(e.kind==="bad_scope"&&e.pattern?.includes("agent-os-land-pr")&&e.target==="package.json")return"Search package.json with a glob from the repo root: `rg -g package.json agent-os-land-pr .` \u2014 or run `node scripts/agent-os-land-pr.mjs <pr-url>` directly.";if(e.kind==="bad_scope"&&e.pattern&&e.target)return`Use \`rg -g '${e.target}' ${e.pattern} .\` from the repo root instead of treating ${e.target} as a folder.`;if(e.kind==="rg_exclude_syntax"&&e.pattern){let r=e.target?`${e.target.trim()}/**`:"!node_modules/**";return`Repo search scope \`${e.target??"!node_modules"}\` is not a valid ripgrep path. Use \`rg "${e.pattern}" -g '${r}' .\` from the repo root (exclude globs need a \`/**\` suffix).`}return e.kind==="no_matches"&&e.pattern?`No matches for "${e.pattern}". Try a broader pattern, drop overly short tokens, or search from the repo root with \`rg "${e.pattern}" .\`.`:null}function em(e){let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(agent\)|\s*failed|$)/iu);return r?`search "${r[1]}" in ${r[2]?.trim()}`:null}function Ds(e){let r=e.meta?.trim()||(e.command?em(e.command):null)||null;if(r){let t=Xp(r),n=Zp(t);if(n)return n;let o=Qp(r);if(o?.changed)return`Repo search used an invalid scope. Retry with: \`${o.command}\`.`}if(e.command&&/\b(rg|ripgrep)\b/i.test(e.command)){let t=Ts(e.command);if(t.changed)return`Ripgrep scope may be invalid. Retry with: \`${t.command}\`.`;if(e.exitCode===1)return"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root."}return null}var Fb,qp,Ml=M(()=>{"use strict";Fb=new Set(["rg","ripgrep","grep"]),qp=new Set(["-e","--regexp","-f","--file","-m","--max-count","-A","--after-context","-B","--before-context","-C","--context","-g","--glob","--iglob"])});function zn(e,r=200){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function zb(e){let r=e.trim();if(!r)return null;if(r.startsWith("{"))try{return JSON.parse(r)}catch{}let t=r.indexOf("{"),n=r.lastIndexOf("}");if(t>=0&&n>t)try{return JSON.parse(r.slice(t,n+1))}catch{return null}return null}function Xn(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function rm(e){let r=e.metadata;if(!Xn(r))return null;let t=r.vulnerabilities;if(!Xn(t))return null;let n=s=>typeof t[s]=="number"?t[s]:0,o={info:n("info"),low:n("low"),moderate:n("moderate"),high:n("high"),critical:n("critical"),total:n("total")};return typeof t.total!="number"&&!o.critical&&!o.high&&!o.moderate&&!o.low&&!o.info?null:o}function Xb(e){let r=[];e.critical&&r.push(`${e.critical} critical`),e.high&&r.push(`${e.high} high`),e.moderate&&r.push(`${e.moderate} moderate`),e.low&&r.push(`${e.low} low`),e.info&&r.push(`${e.info} info`);let t=r.length?r.join(", "):"see report";return`npm audit: ${e.total} vulnerabilit${e.total===1?"y":"ies"} (${t}) \u2014 remediation required`}function Qb(e,r){let t=e.error;if(Xn(t)){let s=typeof t.summary=="string"?t.summary.trim():"",i=typeof t.code=="string"?t.code.trim():"";if(s)return i?`${i}: ${s}`:s;if(i)return i}let n=typeof e.message=="string"?e.message.trim():"";if(n)return n;let o=r.trim();return o?zn(o.split(`
+`).find(Boolean)??o,160):"npm audit failed"}function tm(e){let r=`${e.stdout}
+${e.stderr}`.trim(),t=zb(r);if(!t||!Xn(t)){let o=zn(r||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit failed (invalid or missing JSON): ${o}`,parseError:"invalid_json"}}if(Xn(t.error))return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit command failed: ${Qb(t,e.stderr)}`};let n=rm(t);return n?e.exitCode===0&&n.total===0?{kind:"success",exitCode:0,summary:"npm audit: no vulnerabilities reported",audit:n}:{kind:"audit_findings",exitCode:e.exitCode,summary:Xb(n),audit:n}:{kind:"command_failure",exitCode:e.exitCode,summary:"npm audit failed: JSON response missing vulnerability metadata",parseError:"missing_metadata"}}function Zb(e){return Yb.test(e)}function eS(e){return Jb.test(e)}function rS(e){let r=Ds({command:e.command,exitCode:e.exitCode});if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"ripgrep finished (exit 0)"};if(e.exitCode===1){let n=(e.stderr||e.interleaved).trim();if(n&&qb.test(n)){let i=zn(n,160);return{kind:"command_failure",exitCode:1,summary:r??`ripgrep failed (exit 1): ${i}`}}let o=Ts(e.command),s=o.changed&&!r?` Retry with: \`${o.command}\`.`:"";return{kind:"search_no_matches",exitCode:1,summary:r??`ripgrep: no matches (exit 1).${s} Try a broader pattern or search from the repo root.`}}let t=zn(e.interleaved||e.stdout||e.stderr||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:r??`ripgrep failed (exit ${e.exitCode}): ${t}`}}function Ms(e){let r=e.stdout??"",t=e.stderr??"",n=e.interleavedOutput??"";if(Zb(e.command)){let i=r.trim()||n.trim()||t.trim();return tm({exitCode:e.exitCode,stdout:i,stderr:t})}if(eS(e.command))return rS({command:e.command,exitCode:e.exitCode,stdout:r,stderr:t,interleaved:n});let o=Ds({command:e.command,exitCode:e.exitCode});if(o&&e.exitCode!==0)return{kind:"command_failure",exitCode:e.exitCode,summary:o};if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"command succeeded (exit 0)"};let s=zn(n||r||t||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`command failed (exit ${e.exitCode}): ${s}`}}var Yb,Jb,qb,Ul=M(()=>{"use strict";Ml();Yb=/\bnpm\s+audit\b/i,Jb=/\b(rg|ripgrep)\b/i,qb=/\b(error|invalid|unknown|panic|not found)\b/i});import{existsSync as tS,readFileSync as nS}from"node:fs";function oS(e){let r=e.timestamp_ms;return e.timestamp||e.ts||(r?new Date(r).toISOString():void 0)}function nm(e){if(!e)return null;for(let r of Object.keys(e))if(r.endsWith("ToolCall")){let t=r.slice(0,-8);return t.length?t:r}return null}function sS(e,r){e.finalResult=r.result||r.subtype||r.terminal_reason||"completed",r.is_error&&(e.error=String(r.result||r.api_error_status||"stream result error"))}function om(e){if(e.type!=="tool_call"||e.subtype!=="completed")return null;let t=(e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:null)?.shellToolCall;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t,o=n.args,s=o&&typeof o=="object"&&!Array.isArray(o)&&typeof o.command=="string"?String(o.command):"",i=n.result;if(!i||typeof i!="object"||Array.isArray(i))return null;let a=i.success??i.failure;if(!a||typeof a!="object"||Array.isArray(a))return null;let l=a,c=typeof l.exitCode=="number"?l.exitCode:0;return{command:s,exitCode:c,stdout:typeof l.stdout=="string"?l.stdout:"",stderr:typeof l.stderr=="string"?l.stderr:"",interleaved:typeof l.interleavedOutput=="string"?l.interleavedOutput:""}}function iS(e,r){r.kind==="success"||r.kind==="search_no_matches"||(e.lastShellOutcome=r)}function Ar(e){let r={firstEventAt:null,lastEventAt:null,currentTool:null,finalResult:null,error:null,lastShellOutcome:null};if(!tS(e))return r;let t=nS(e,"utf8").split(`
+`).filter(Boolean);for(let n of t){let o=Lt(n);if(!o)continue;let s=oS(o);if(s&&(r.firstEventAt||=s,r.lastEventAt=s),o.type==="stream_event"&&o.event&&typeof o.event=="object"&&o.event.type==="content_block_start"){let a=o.event.content_block;a?.type==="tool_use"&&(r.currentTool=String(a.name||"tool"))}if(o.type==="assistant"&&o.message&&typeof o.message=="object"){let a=o.message.content;if(Array.isArray(a)){let l=a.find(c=>c?.type==="tool_use");l&&(r.currentTool=String(l.name||r.currentTool))}}if(o.type==="tool_call"&&o.subtype==="started"){let a=o.tool_call&&typeof o.tool_call=="object"&&!Array.isArray(o.tool_call)?o.tool_call:void 0,l=nm(a);l&&(r.currentTool=l)}let i=om(o);i&&iS(r,Ms({command:i.command,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr,interleavedOutput:i.interleaved})),o.type==="result"&&sS(r,o)}return r}function aS(e){return Ar(e)}function sm(e){let r=om(e);if(!r)return;let t=Ms({command:r.command,exitCode:r.exitCode,stdout:r.stdout,stderr:r.stderr,interleavedOutput:r.interleaved}),n=ks(r.command).slice(0,120);return t.kind==="audit_findings"?`[audit:findings] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="search_no_matches"?`[search:no_matches] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="command_failure"?`[command:failed] ${t.summary}${n?` \xB7 ${n}`:""}`:`[command:ok] exit 0${n?` \xB7 ${n}`:""}`}function Wl(e){if(e.type==="system"&&e.subtype)return`[system:${e.subtype}] ${String(e.status||e.cwd||"")}`.trim();if(e.type==="stream_event"&&e.event&&typeof e.event=="object"){let r=e.event.type;if(r==="content_block_start"){let t=e.event.content_block;if(t?.type==="tool_use")return`[tool:start] ${t.name}`}if(r==="content_block_delta"){let t=e.event.delta;if(t?.partial_json)return`[tool:input] ${t.partial_json}`}return r==="message_stop"?"[message:stop]":r?`[stream:${r}]`:void 0}if(e.type==="assistant"&&e.message&&typeof e.message=="object"){let r=e.message.content;if(Array.isArray(r)){let t=r.find(o=>o?.type==="text");if(t)return`[assistant] ${ks(String(t.text||""))}`;let n=r.find(o=>o?.type==="tool_use");if(n)return`[tool] ${n.name} ${JSON.stringify(n.input||{})}`}}if(e.type==="user"&&e.tool_use_result){let r=e.tool_use_result;return`[tool:result] stdout=${JSON.stringify(r.stdout||"")} stderr=${JSON.stringify(r.stderr||"")}`}if(e.type==="tool_call"){let r=String(e.subtype||""),t=r==="completed"?sm(e):void 0;if(t)return t;let n=e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:void 0,o=nm(n)??"tool";return`[tool:${r}] ${o}`}if(e.type==="result")return`[result] ${e.subtype||""} ${ks(String(e.result||""))}`.trim()}var Jt=M(()=>{"use strict";Ul();C()});function cS(e,r=240){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function Us(e){let r=(e??"").trim();if(!r)return null;for(let t of lS)if(t.test.test(r))return{blocked:!0,reason:`${t.label}: ${cS(r)}`};return null}var lS,Ll=M(()=>{"use strict";lS=[{test:/\b(?:invalid|unknown|unsupported|unrecognized)\b[^.\n]*\bmodel\b/i,label:"provider rejected the requested model"},{test:/\bmodel\b[^.\n]*\b(?:not\s+(?:found|supported|available|recognized|valid)|is\s+not\s+valid|does\s+not\s+exist)/i,label:"provider rejected the requested model"},{test:/\b(?:did you mean|available models|choose (?:a|one of)|supported models)\b/i,label:"provider rejected the requested model"},{test:/model preflight failed/i,label:"model/provider preflight failed"},{test:/\b(?:command not found|ENOENT|is the .*CLI on PATH|executable not found|no such file or directory)\b/i,label:"provider CLI is missing or not on PATH"},{test:/\bfailed to spawn\b/i,label:"provider failed to spawn the worker process"},{test:/\b(?:not logged in|unauthorized|authentication (?:failed|required)|invalid api key|missing api key|401)\b/i,label:"provider authentication failed"}]});function im(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function uS(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function dS(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:im(e.head)}function pS(e,r,t){let n=["exited_with_changes_salvage"];if((e==="uncommitted"||e==="both")&&n.push(`${r} uncommitted change${r===1?"":"s"} with no final result`),(e==="committed_ahead"||e==="both")&&t){let o=t.length>12?t.slice(0,12):t;n.push(`commit ${o} ahead of base with no final result`)}return n.push("review worktree \u2014 commit, open a PR, or run a salvage worker before discarding"),n.join(": ")}function Xr(e){if(e.alive||uS(e.finalResult))return null;let r=(e.changedFiles??[]).filter(i=>i.trim()).length,t=im(e.headCommit)??dS(e.gitAncestry),n=r>0,o=!!t;if(!n&&!o)return{kind:"none",salvageable:!1,uncommittedCount:0,headCommit:null,attentionReason:"process exited without a final result"};let s=n&&o?"both":n?"uncommitted":"committed_ahead";return{kind:s,salvageable:!0,uncommittedCount:r,headCommit:t,attentionReason:pS(s,r,t)}}var Qn=M(()=>{"use strict"});function Zn(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function mS(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function fS(e){if(Zn(e.headCommit)||Zn(e.prUrl)||Zn(e.artifactBundlePath)||Zn(e.patchPath))return!0;let r=e.gitAncestry;return!!(r?.checked&&r.headIsAncestorOfBase===!1&&Zn(r.head))}function Qr(e){return mS(e.finalResult)?e.changedFiles.length===0?{blocked:!1}:fS(e)?{blocked:!0,detail:`Worktree has ${e.changedFiles.length} uncommitted change(s); commit or discard before landing`}:{blocked:!0,reason:"dirty_worktree_no_pr",detail:`Worktree has ${e.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`}:{blocked:!1}}function am(e){if(e.blocked)return e.detail??e.reason??"dirty_worktree_no_pr"}var eo=M(()=>{"use strict"});function Bl(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function lm(e){let r=e.targetPrReconciliation??e.target_pr_reconciliation??e.targetPrs??e.target_prs;return Array.isArray(r)?r.length:0}function qt(e){let r=e.trim();if(!r)return null;let t=Bl(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let u=Bl(s[1]??"");u&&n.push(u)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let u=Bl(r.slice(i,a+1));u&&n.push(u)}if(n.length===0)return null;let l=n[n.length-1],c=lm(l);for(let u of n){let d=lm(u);d>c&&(l=u,c=d)}return l}var Ws=M(()=>{"use strict"});function cm(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:e.trim()||null}function um(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function gS(e){return new Set(e.map(r=>um(cm(r)??r)).filter(Boolean))}function dm(e,r,t){let n=cm(e)??e;if(!n)return"unrelated";let o=um(n);return gS(r).has(o)?"contract":t?(t.outcome==="skipped"||t.outcome==="blocked")&&t.reason?.trim()?"support":(t.outcome==="merged","unrelated"):"unrelated"}var pm=M(()=>{"use strict"});function zt(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function hS(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"?Object.keys(e).length>0:!0}function Zr(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:zt(e)}function Ls(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function mm(e){let r=null;if(typeof e=="string"){let o=qt(e);o&&(r=o)}else e&&typeof e=="object"&&!Array.isArray(e)&&(r=e);if(!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=Zr(String(s.prUrl??s.pr_url??"")),a=zt(s.outcome);!i||a!=="merged"&&a!=="skipped"&&a!=="blocked"||n.push({prUrl:i,outcome:a,mergeCommit:zt(s.mergeCommit??s.merge_commit),reason:zt(s.reason)})}return n}function fm(e,r){let t=[],n=Zr(zt(e.prUrl)??"");if(n&&t.push(n),r&&typeof r=="object"&&!Array.isArray(r)){let o=r,s=Zr(String(o.prUrl??o.pr_url??""));s&&t.push(s)}return[...new Set(t)]}function Hl(e){let{contract:r,snapshot:t}=e,n=e.finalResult??t.finalResult;if(!r.landingOnly&&r.targetPrUrls.length===0&&!r.repairEnforceOriginalPr)return{blocked:!1};if(!hS(n))return(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&r.targetPrUrls.length>0?{blocked:!0,reason:"missing_target_pr_reconciliation",detail:`Final result required to reconcile target PR(s): ${r.targetPrUrls.join(", ")}`}:{blocked:!1};if(!(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&!r.repairEnforceOriginalPr)return{blocked:!1};let s=r.repairEnforceOriginalPr?Zr(zt(r.targetPrUrl)??"")??(r.targetPrUrls.length===1?Zr(r.targetPrUrls[0]):null):null;if(s){let d=fm(t,n);if(!(n&&typeof n=="object"&&!Array.isArray(n)&&n.supersedesOriginalTargetPr===!0)){for(let h of d)if(h!==s)return{blocked:!0,reason:"duplicate_repair_pr",detail:`Repair worker opened or attached PR ${h} instead of canonical target ${s}`}}let f=mm(n).find(h=>h.prUrl===s);if(!f||f.outcome!=="merged"&&!(f.reason?.trim()&&(f.outcome==="skipped"||f.outcome==="blocked")))return{blocked:!0,reason:"missing_repair_target_reconciliation",detail:`Repair worker must reconcile target PR ${s}`}}let i=mm(n),a=new Map(i.map(d=>[Ls(d.prUrl),d])),l=new Set(r.targetPrUrls.map(d=>Ls(Zr(d)??d)).filter(Boolean)),c=fm(t,n);if(r.landingOnly)for(let d of c){let m=a.get(Ls(d)),p=dm(d,r.targetPrUrls,m);if(!(p==="contract"||p==="support"))return l.size>0?{blocked:!0,reason:"unrelated_implementation_pr",detail:`Landing-only worker attached unrelated PR ${d}`}:{blocked:!0,reason:"unrelated_implementation_pr",detail:"Landing-only worker must not open new implementation PRs"}}if(r.targetPrUrls.length===0)return{blocked:!1};let u=[];for(let d of r.targetPrUrls){let m=Ls(Zr(d)??d),p=a.get(m);if(!p){u.push(m);continue}p.outcome!=="merged"&&!p.reason?.trim()&&u.push(m)}return u.length>0?{blocked:!0,reason:u.every(d=>a.has(d))?"incomplete_target_pr_landing":"missing_target_pr_reconciliation",detail:`Target PR reconciliation incomplete: ${u.join(", ")}`}:{blocked:!1}}function Fl(e){if(e.blocked)return e.detail??e.reason}var Kl=M(()=>{"use strict";Ws();pm()});function gm(e){let r=Date.now();if(e.completionBlocker&&!hm(e.completionBlocker))return{state:"blocked",reason:e.completionBlocker};if(e.finalResult){if(e.localOnly&&RS(e.finalResult))return{state:"done",reason:"local-only worker superseded by merged PR"};let o={finalResult:e.finalResult,changedFiles:e.changedFiles??[],gitAncestry:e.gitAncestry??null,prUrl:e.prUrl??null},s=Qr(o);if(s.blocked){let i=am(s);return{state:"needs_attention",reason:s.reason?`landing blocked (${s.reason}): ${i}`:`landing blocked: ${i}`}}if(e.landingContract){let i=Hl({contract:e.landingContract,snapshot:o,finalResult:e.finalResult}),a=Fl(i);if(a)return{state:"needs_attention",reason:i.reason?`landing contract (${i.reason}): ${a}`:`landing contract: ${a}`}}return{state:"done",reason:"final result recorded"}}if(!e.alive){if(yS(e))return{state:"done",reason:"empty abandoned worker record"};let o=Us(e.error);if(o)return{state:"blocked",reason:o.reason};let s=Xr({alive:!1,finalResult:null,changedFiles:e.changedFiles,gitAncestry:e.gitAncestry});if(s?.salvageable){let a=e.error?.trim();return{state:"needs_attention",reason:a?`${s.attentionReason} (${a})`:s.attentionReason}}let i=e.error?.trim();return{state:"needs_attention",reason:i?`process exited without a final result: ${i}`:s?.attentionReason??"process exited without a final result"}}if(e.heartbeatBlocker)return{state:"blocked",reason:`worker heartbeat reported blocker: ${e.heartbeatBlocker}`};let t=e.startedAt?Date.parse(e.startedAt):NaN;if(!e.firstEventAt&&e.stdoutBytes===0&&e.heartbeatBytes===0&&Number.isFinite(t)&&r-t>kS)return{state:"needs_attention",reason:`no first stream event ${dl(t)}s after start`};let n=e.lastActivityAt?Date.parse(e.lastActivityAt):NaN;return Number.isFinite(n)&&r-n>Xt?{state:"stale",reason:`no log/event/heartbeat activity for ${dl(n)}s`}:{state:"ok",reason:"recent activity"}}function hm(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function yS(e){return e.finalResult||e.taskId||e.agentOsId||e.stdoutBytes>0||(e.stderrBytes??0)>0||e.heartbeatBytes>0||e.error?.trim()||(e.changedFiles??[]).some(r=>r.trim())?!1:/empty worker dir|marked abandoned/i.test(e.reconcileReason??"")}function RS(e){let r=null;if(typeof e=="string"?r=qt(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return!1;let t=r.targetPrReconciliation??r.target_pr_reconciliation;return Array.isArray(t)?t.some(n=>!n||typeof n!="object"||Array.isArray(n)?!1:String(n.outcome??"").trim()==="merged"):!1}function vS(e,r,t){let n=e.completionSnapshot?.finalResult;return e.completionAckSource==="local-pr-merged-reconcile"&&n!==void 0&&n!==null?n:r||(n??ze(t))}function D(e,r={}){let t=Ar(e.stdoutPath),n=ce(e.heartbeatPath),o=typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim().length>0,s=vS(e,t.finalResult,n),i=o?!1:H(e.pid),a=ys(e.stdoutPath),l=ys(e.stderrPath),c=ys(e.heartbeatPath),u=$n(e.worktreePath),d=bs(e.worktreePath,{base:r.base,baseCommit:r.baseCommit}),m=gp([t.lastEventAt,n.lastHeartbeatAt,Rs(e.stdoutPath),Rs(e.stderrPath),Rs(e.heartbeatPath)]),p=t.error||!i&&!s&&vs(e.stderrPath,10).trim()||void 0,f=typeof e.completionBlocker=="string"&&e.completionBlocker.trim()?e.completionBlocker.trim():null,h=hm(f)?null:f,k=e.repairTargetPrUrl?{landingOnly:!1,targetPrUrls:[e.repairTargetPrUrl],targetPrUrl:e.repairTargetPrUrl,repairEnforceOriginalPr:!0}:null,g=gm({alive:i,finalResult:s,firstEventAt:t.firstEventAt,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,lastActivityAt:m,heartbeatBlocker:n.heartbeatBlocker,startedAt:e.startedAt,error:p,changedFiles:u,gitAncestry:d,completionBlocker:h,landingContract:k,prUrl:e.repairTargetPrUrl??e.taskPrUrl??null,localOnly:e.localOnly===!0,taskId:e.taskId??null,agentOsId:e.agentOsId??null,reconcileReason:e.reconcileReason??null}),R=h||g.state==="blocked"?"blocked":o||g.state==="done"?"done":s?"exited":i?"running":"exited";return{runId:e.runId,worker:e.name,pid:e.pid,alive:i,status:R,attention:g,branch:e.branch,worktreePath:e.worktreePath,ownedPaths:e.ownedPaths,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,firstEventAt:t.firstEventAt,lastEventAt:t.lastEventAt,lastActivityAt:m,currentTool:o?null:t.currentTool,heartbeatCount:n.heartbeatCount,lastHeartbeatAt:n.lastHeartbeatAt,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,timestampAnomalies:n.timestampAnomalies,finalResult:s,error:p,changedFiles:u,gitAncestry:d,instructionPolicyFingerprint:e.instructionPolicyFingerprint??null,instructionPolicyEvidence:e.instructionPolicyEvidence??null,model:e.model??e.orchestrationAudit?.model??null,provider:e.orchestrationAudit?.provider??null,boxKind:e.boxKind??null,boxId:e.boxId??null,runtimeId:e.runtimeId??null,personaSlug:e.personaSlug??null,dispatched:e.dispatched??null,localOnly:e.localOnly??null}}function oe(e){return!!(e.finalResult||e.alive===!1||e.status==="exited"||e.status==="done")}function et(e){return e.finalResult?e.attention.state==="needs_attention"||e.attention.state==="blocked":!1}function Qt(e,r){return r.length===0?e:r.some(t=>t.attention==="needs_attention"||t.attention==="stale"||t.attention==="blocked")?"needs_attention":r.every(t=>t.status==="done")?"done":r.some(t=>t.status==="running")?"running":e}var kS,Xt,z=M(()=>{"use strict";pr();Jt();Ll();Qn();Pe();eo();Kl();Ws();C();kS=18e4,Xt=6e5});import{readFileSync as bS}from"node:fs";function SS(e){if(!e||process.platform!=="linux")return null;try{return bS(`/proc/${e}/cmdline`,"utf8").replace(/\0/g," ")}catch{return null}}function Bs(e){if(!e.pid||process.platform!=="linux")return!0;let r=SS(e.pid);return r?[e.worktreePath,e.workerDir,e.heartbeatPath].filter(n=>typeof n=="string"&&n.trim().length>0).some(n=>r.includes(n)):!1}function rt(e){if(typeof e.completionBlocker=="string"&&e.completionBlocker.trim())return!1;let r=D(e);return r.alive&&!Bs(e)?!1:r.alive&&!r.finalResult&&r.attention.state!=="done"}var Zt=M(()=>{"use strict";z()});import ym from"node:os";import CS from"node:path";function km(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function wS(e=y(),r,t){let n=km(e.perWorkerMemBytes,ro),o=km(e.memReserveBytes,to),s=Math.min(1,Math.max(.1,Number(e.memUtilization)>0?Number(e.memUtilization):no)),i=Fs({config:e,configuredMaxWorkersOverride:r,totalMemBytes:t??ym.totalmem()});return{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i.configuredMaxWorkers,autoCap:i.autoCap,workerCapSource:i.workerCapSource}}function $l(e,r={}){let t=r.perWorkerMemBytes??ro,n=r.memReserveBytes??to,o=r.memUtilization??no,s=Math.max(0,Math.floor(e*o)-n),i=Math.max(1,Math.floor(s/t));return Math.min(i,Hs)}function _S(){return $t()}function xS(e){let r=0;for(let t of ke(e)){let n=w(CS.join(x(e.id),"workers",b(t),"worker.json"),void 0);!n||!rt(n)||r++}return r}function ES(){let e=0;for(let r of X())e+=xS(r);return e}function mr(e){let r=e.config??y(),t=e.totalMemBytes??ym.totalmem(),{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i,autoCap:a,workerCapSource:l}=wS(r,e.configuredMaxWorkersOverride,t),c=qe(r),u=e.freeMemBytes??_S(),d=e.activeWorkers??ES(),m=Math.max(0,Math.floor(t*s)-o),p=Math.max(0,Math.floor(m/n)),f=Math.max(0,Math.floor(Math.max(0,u-o)/n)),h=a,k=cr(c,i??h),g=Math.max(0,Math.min(k,p)),R=Math.max(0,g-d),_=Math.min(R,f),U=e.skipDiskGate||process.env.KYNVER_RESOURCE_GATE_SKIP_DISK==="1"?void 0:Le({diskPath:e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/"});U&&!U.ok&&(_=0);let Y=null;return _<=0&&(U&&!U.ok?Y=U.reason??"disk gate blocked worker admission":d>=g?Y=`at worker limit (${d}/${g} running)`:f<=0?Y="insufficient free memory \u2014 waiting for workers to finish":Y="no worker slots available"),{ok:_>0,totalMemBytes:t,freeMemBytes:u,memReserveBytes:o,perWorkerMemBytes:n,configuredMaxWorkers:i,workerCapSource:l,boxKind:c,autoCap:h,capacityWorkers:p,maxConcurrentWorkers:g,activeWorkers:d,slotsAvailable:_,reason:Y,...U?{diskGate:U}:{}}}var ro,to,no,Hs,en=M(()=>{"use strict";_s();I();Oe();Jn();Ks();Vt();T();zr();Zt();C();ro=500*1024*1024,to=4*1024*1024*1024,no=.85,Hs=64});function tt(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Fs(e){let r=e.config??{},t=e.env??process.env,n=tt(r.perWorkerMemBytes,ro),o=tt(r.memReserveBytes,to),s=Math.min(1,Math.max(.1,Number(r.memUtilization)>0?Number(r.memUtilization):no)),i=$l(e.totalMemBytes,{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s});if(e.configuredMaxWorkersOverride!==void 0&&e.configuredMaxWorkersOverride!==null)return{configuredMaxWorkers:tt(e.configuredMaxWorkersOverride,i),autoCap:i,workerCapSource:"workspace_override"};if(r.maxConcurrentWorkers!==void 0&&r.maxConcurrentWorkers!==null){let c=tt(r.maxConcurrentWorkers,0)||null;if(c)return{configuredMaxWorkers:Math.min(c,Hs),autoCap:i,workerCapSource:"config"}}let l=(t.KYNVER_MAX_WORKERS_INTENTIONAL==="1"||t.KYNVER_MAX_WORKERS_INTENTIONAL==="true")&&t.KYNVER_MAX_WORKERS&&tt(t.KYNVER_MAX_WORKERS,0)||null;return l?{configuredMaxWorkers:Math.min(l,Hs),autoCap:i,workerCapSource:"env"}:{configuredMaxWorkers:null,autoCap:i,workerCapSource:"auto"}}function jl(e={}){let r=e.totalMemBytes??0,t=$l(r,{perWorkerMemBytes:tt(e.config?.perWorkerMemBytes,ro),memReserveBytes:tt(e.config?.memReserveBytes,to),memUtilization:e.config?.memUtilization&&Number(e.config.memUtilization)>0?Number(e.config.memUtilization):no}),n=e.diskGateOk??!0,o=n?t:Math.max(1,Math.min(t,4));return{totalMemBytes:r,autoCap:t,recommendedMaxWorkers:o,diskPath:e.diskPath??"/",diskGateOk:n,diskFreeBytes:e.diskFreeBytes??null}}var Ks=M(()=>{"use strict";en()});import{existsSync as Rm,mkdirSync as PS,readFileSync as vm,writeFileSync as AS}from"node:fs";import{homedir as IS}from"node:os";import bm from"node:path";function Vl(e){let r=new Map;for(let t of e.split(/\r?\n/)){let n=t.trim();if(!n||n.startsWith("#"))continue;let o=n.indexOf("=");if(o<=0)continue;let s=n.slice(0,o).trim(),i=n.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),r.set(s,i)}return r}function OS(e,r=`# Managed by kynver cron install \u2014 safe to edit; re-run install to merge keys.
 `){let t=[r.trimEnd(),""];for(let[n,o]of[...e.entries()].sort(([s],[i])=>s.localeCompare(i))){let s=o.includes(" ")||o.includes("#")||o.includes('"')?`"${o.replace(/\\/g,"\\\\").replace(/"/g,'\\"')}"`:o;t.push(`${n}=${s}`)}return t.push(""),t.join(`
-`)}function Qt(e=we){return um(e)?Ll(dm(e,"utf8")):new Map}function Hs(e,r={}){let t=r.filePath??we,n=um(t)?dm(t,"utf8"):"",o=Ll(n),s=[],i=[];for(let u of r.removeKeys??[])o.delete(u)&&i.push(u);for(let[u,d]of Object.entries(e)){if(d===void 0)continue;let f=o.get(u);o.set(u,d),f!==d&&s.push(u)}let a=Ll(n),l=a.size!==o.size;if(!l){for(let[u,d]of o)if(a.get(u)!==d){l=!0;break}}let c=SS(o);return l&&(RS(pm.dirname(t),{recursive:!0}),vS(t,c,{mode:384})),{path:t,changed:l,keysWritten:s,keysRemoved:i}}var we,Pr=M(()=>{"use strict";we=pm.join(bS(),".kynver",".env")});var Bl,to=M(()=>{"use strict";Bl="1.5G"});import{spawnSync as CS}from"node:child_process";function Zt(){return process.env.KYNVER_BUILD_SKIP_SYSTEMD==="1"||process.env.KYNVER_BUILD_SKIP_SYSTEMD==="true"?!1:no!==void 0?no:process.platform!=="linux"?(no=!1,!1):(no=CS("systemd-run",["--version"],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}).status===0,no)}function Fs(e){let r=e.memoryMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_MAX??Bl,t=e.memorySwapMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_SWAP_MAX??"2G",n=["systemd-run","--scope","--collect","-p",`MemoryMax=${r}`,"-p",`MemorySwapMax=${t}`];return e.cwd&&n.push("--working-directory",e.cwd),n.push("--",...e.command),n}var no,Ks=M(()=>{"use strict";to()});import{realpathSync as wS}from"node:fs";function en(e=process.argv[1]){let r=process.env.KYNVER_BIN?.trim();if(r)return r;let t=e?.trim();if(!t)return"kynver";try{return wS.native(t)}catch{return t}}function fm(e){return/\s/.test(e)?`"${e.replace(/"/g,'\\"')}"`:e}var $s=M(()=>{"use strict"});import{existsSync as _S,mkdirSync as xS,writeFileSync as ES}from"node:fs";import{homedir as PS}from"node:os";import hm from"node:path";import{spawnSync as gm}from"node:child_process";function AS(){return hm.join(PS(),".config","systemd","user")}function IS(e){let r=fm(e.kynverBin?.trim()||en());return["[Unit]","Description=Kynver AgentOS daemon (keeper-supervised pipeline + cron tick)","After=network-online.target","","[Service]","Type=simple",`EnvironmentFile=${e.envFilePath}`,`ExecStart=${r} daemon --run ${e.runId} --agent-os-id ${e.agentOsId} --execute`,"Restart=always","RestartSec=10","","[Install]","WantedBy=default.target",""].join(`
-`)}function js(e,r){if(!Zt())return{supported:!1,unitPath:null,written:!1,enabled:!1,started:!1,note:process.platform==="linux"?"systemd-run not available \u2014 install user service manually or run `kynver daemon` under your supervisor.":"systemd user units are only supported on Linux; use `kynver daemon` manually on macOS/Windows."};let t=AS(),n=hm.join(t,oo),o=IS(e);if(!r)return{supported:!0,unitPath:n,written:!1,enabled:!1,started:!1,note:"Dry-run \u2014 pass --execute to write and enable the user unit."};xS(t,{recursive:!0});let s=_S(n);ES(n,o,"utf8");let i=gm("systemctl",["--user","daemon-reload"],{encoding:"utf8"});if(i.status!==0)return{supported:!0,unitPath:n,written:!0,enabled:!1,started:!1,note:`Wrote ${n} but systemctl --user daemon-reload failed: ${i.stderr||i.stdout}`};let a=gm("systemctl",["--user","enable","--now",oo],{encoding:"utf8"});return{supported:!0,unitPath:n,written:!s||!0,enabled:a.status===0,started:a.status===0,note:a.status===0?`Enabled and started ${oo}`:`Wrote ${n} but enable failed: ${a.stderr||a.stdout}`}}var oo,Vs=M(()=>{"use strict";Ks();$s();oo="kynver-cron-daemon.service"});import{existsSync as OS,readFileSync as NS}from"node:fs";function rn(){if(process.platform==="win32")return"win32";if(process.platform==="darwin")return"darwin";if(process.platform==="linux"){if(process.env.WSL_DISTRO_NAME?.trim())return"wsl";try{if(OS("/proc/version")){let e=NS("/proc/version","utf8");if(/microsoft/i.test(e))return"wsl"}}catch{}return"linux"}return"linux"}function so(e){return e==="linux"}var io=M(()=>{"use strict"});function km(e){return e===!0||e==="true"||e==="1"||e==="yes"||e==="on"}function TS(e){return"keeper"}function ym(e,r,t={}){if(km(t.installSystemd)||km(t["install-systemd"]))return so(r)?"systemd":"keeper";let n=e.daemonSupervisionOwner;return n==="systemd"&&so(r)?"systemd":n==="keeper"?"keeper":TS(r)}function DS(){return{KYNVER_CRON_DAEMON_PRESENT:"1"}}function Hl(e,r){let t=["Daemon restart hardening is Kynver-owned: `kynver start` runs the in-process keeper by default (crash + heartbeat-stall respawn)."];return e==="linux"?t.push("For logout-surviving supervision on Linux: `kynver start --install-systemd` (or `kynver cron install --install-systemd`)."):e==="wsl"?t.push("WSL: run `kynver start` in a persistent tmux/screen session, or use Windows `start-tier2-wsl.ps1` which delegates to the keeper."):e==="darwin"?t.push("macOS: run `kynver start` under launchd or a terminal multiplexer for session survival."):e==="win32"&&t.push("Native Windows: prefer WSL (`kynver start` inside WSL). Native console daemon is blocked unless KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS=1."),r==="systemd"&&t.push("This box is configured for systemd user-unit supervision (~/.config/systemd/user/kynver-cron-daemon.service)."),t}function Fl(e,r={},t){let n=t??rn(),o=ym(e,n,r);return{hostKind:n,owner:o,envUpdates:DS(),guidance:Hl(n,o)}}var Gs=M(()=>{"use strict";io()});import{existsSync as MS}from"node:fs";import Rm from"node:path";import{homedir as vm}from"node:os";function US(){return Rm.join(vm(),".config","systemd","user",oo)}function Kl(){return MS(US())}function Ys(e,r={},t){let n=Fl(e,r,t),o={};e.daemonSupervisionOwner||(o.daemonSupervisionOwner=n.owner);let s={...e,...o},i=!1;Object.keys(o).length>0&&(ce(s),i=!0);let a=Hs(n.envUpdates,{filePath:we});return{policy:n,configPath:q(Rm.join(vm(),".kynver","config.json")),envFilePath:q(a.path),envChanged:a.changed,configUpdated:i}}function Js(e,r){return e.daemonSupervisionOwner==="systemd"&&Kl()?"systemd":e.daemonSupervisionOwner??"keeper"}var ao=M(()=>{"use strict";Pr();Je();I();Vs();Gs()});var Sm={};wv(Sm,{runDeviceLogin:()=>$l});import bm from"node:os";function WS(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||y().apiBaseUrl;return r?ir(String(r)):void 0}async function LS(e){await new Promise(r=>setTimeout(r,e))}async function $l(e){let r=WS(e);if(!r)return console.error("kynver login (device flow) requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site, set KYNVER_API_URL, or run `kynver setup` first."),{ok:!1};let t=`${bm.hostname()} (${bm.platform()})`,n;try{let a=await fetch(`${r}/api/auth/device/code`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({clientName:t})});if(!a.ok)return console.error(`Could not start device authorization (${a.status}).`),{ok:!1};n=await a.json()}catch(a){return console.error(`Could not reach ${r}: ${a.message}`),{ok:!1}}let o=n.verification_uri_complete||n.verification_uri;console.log(""),console.log("  Authorize this machine:"),console.log(`    1. Open: ${o}`),console.log(`    2. Confirm the code: ${n.user_code}`),console.log(""),console.log("  Waiting for approval\u2026");let s=Date.now()+n.expires_in*1e3,i=Math.max(1,n.interval)*1e3;for(;Date.now()<s;){await LS(i);let a;try{a=await(await fetch(`${r}/api/auth/device/token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({device_code:n.device_code})})).json().catch(()=>({}))}catch{continue}switch(a.status){case"approved":return a.api_key?(lo(a.api_key),console.log("  Approved \u2014 this machine is now linked to your Kynver account."),{ok:!0,apiKey:a.api_key}):{ok:!1};case"slow_down":i+=2e3;break;case"authorization_pending":typeof a.interval=="number"&&(i=Math.max(i,a.interval*1e3));break;case"access_denied":return console.error("  Request was denied in the browser."),{ok:!1};case"expired_token":return console.error("  The code expired before it was approved. Run `kynver login` again."),{ok:!1};default:break}}return console.error("  Timed out waiting for approval. Run `kynver login` again."),{ok:!1}}var jl=M(()=>{"use strict";I();C()});import{existsSync as wm,mkdirSync as _m,readFileSync as xm,writeFileSync as Em}from"node:fs";import{homedir as BS,totalmem as HS}from"node:os";import Vl from"node:path";import FS from"node:os";function co(e){let r=String(e??"").trim();if(!r)return{ok:!1,reason:"missing"};let t=r.toLowerCase();return $S.has(t)?{ok:!1,value:r,reason:"placeholder"}:KS.test(r)?{ok:!0,value:r}:{ok:!1,value:r,reason:"not a UUID"}}function Xs(e){let r=co(e),t=r.value??String(e??"").trim(),n=t?`"${t}"`:"<empty>",o=r.reason==="placeholder"?"looks like a placeholder":r.reason??"is invalid";return[`Invalid AgentOS id ${n}: ${o}.`,"AgentOS ids are UUIDs from the AgentOS registry, not slugs or examples (for example, not `aos`).","Fix: run `kynver bootstrap` to relink this runner, or run `kynver setup --agent-os-id <uuid>` / pass `--agent-os-id <uuid>` after copying the id from Command Center.","If this came from stale ~/.kynver/config.json, remove or replace the agentOsId value before starting the daemon."].join(" ")}function y(){if(!wm(qs))return{};try{return JSON.parse(xm(qs,"utf8"))}catch{return{}}}function ce(e){_m(zs,{recursive:!0}),Em(qs,`${JSON.stringify(Gl(e),null,2)}
-`,{mode:384})}function Gl(e){return{...e,...e.harnessRoot?.trim()?{harnessRoot:Se(e.harnessRoot.trim())}:{},...e.defaultRepo?.trim()?{defaultRepo:Se(e.defaultRepo.trim())}:{}}}function nn(e){return Gl(e)}function jS(e,r){let t=uo(),n=(typeof r.apiBaseUrl=="string"?r.apiBaseUrl:void 0)||e.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim(),o=(typeof r.agentOsId=="string"?r.agentOsId:void 0)||e.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||(t.runnerToken?.trim().startsWith("krc1.")?t.runnerTokenAgentOsId?.trim():void 0),i=(typeof r.repo=="string"?r.repo:r.discoverRepo===!0||r.discoverRepo==="true"?jr()?.repo:void 0)||e.defaultRepo?.trim()||process.env.KYNVER_DEFAULT_REPO?.trim()||process.env.KYNVER_HARNESS_REPO?.trim()||Fn()?.repo,a=(typeof r.harnessRoot=="string"?r.harnessRoot:void 0)||e.harnessRoot?.trim()||process.env.KYNVER_HARNESS_ROOT?.trim()||process.env.OPUS_HARNESS_ROOT?.trim();return{...n?{apiBaseUrl:ir(n)}:{},...o?{agentOsId:o}:{},...i?{defaultRepo:i}:{},...a?{harnessRoot:a}:{},...typeof r.agentOsSlug=="string"?{agentOsSlug:r.agentOsSlug}:e.agentOsSlug?{agentOsSlug:e.agentOsSlug}:{}}}function VS(e,r,t=HS()){let n=typeof r.maxWorkers=="string"?r.maxWorkers:typeof r.maxConcurrentWorkers=="string"?r.maxConcurrentWorkers:void 0,o=typeof r.boxKind=="string"?r.boxKind:typeof r["box-kind"]=="string"?String(r["box-kind"]):void 0,s=Ae(process.env,{...e,...o?{boxKind:Lt(o)}:{}}).boxKind,i=Le({diskPath:typeof r.diskPath=="string"?r.diskPath:"/"}),a=Wl({totalMemBytes:t,diskPath:i.path,diskGateOk:i.ok,diskFreeBytes:i.freeBytes,config:e});if(n){let l=Math.max(1,Math.floor(Number(n)));return{maxConcurrentWorkers:lr(s,l),maxConcurrentWorkersSource:"setup-flag",boxKind:s}}if(e.maxConcurrentWorkers!==void 0&&e.maxConcurrentWorkers!==null){let l=Math.max(1,Math.floor(Number(e.maxConcurrentWorkers)));return Bt(s,l)?{maxConcurrentWorkers:Sl(s,a.recommendedMaxWorkers),maxConcurrentWorkersSource:"setup-auto",boxKind:s}:{maxConcurrentWorkers:lr(s,l),maxConcurrentWorkersSource:e.maxConcurrentWorkersSource??"operator",boxKind:s}}return{maxConcurrentWorkers:Sl(s,a.recommendedMaxWorkers),maxConcurrentWorkersSource:"setup-auto",boxKind:s}}function uo(){if(!wm(tn))return{};try{return JSON.parse(xm(tn,"utf8"))}catch{return{}}}function Pm(e){_m(zs,{recursive:!0}),Em(tn,`${JSON.stringify(e,null,2)}
-`,{mode:384})}function se(){return process.env.KYNVER_API_KEY?process.env.KYNVER_API_KEY:uo().apiKey}function lo(e){Pm({...uo(),apiKey:e})}function Cm(e){let r=process.env.KYNVER_RUNNER_TOKEN?.trim();if(r)return r;let t=uo();if(t.runnerToken&&!(e&&t.runnerTokenAgentOsId&&t.runnerTokenAgentOsId!==e))return t.runnerToken}function tt(e,r){Pm({...uo(),runnerToken:r,runnerTokenAgentOsId:e})}function V(e){let r=po(e);return r||mo("requires --base-url, KYNVER_API_URL, KYNVER_CRON_FIRE_BASE_URL, or ~/.kynver/config.json apiBaseUrl"),r}function Yl(e){return po(e)}function po(e){let r=e||process.env.KYNVER_API_URL||process.env.KYNVER_CRON_FIRE_BASE_URL||process.env.OPENCLAW_CRON_FIRE_BASE_URL||y().apiBaseUrl;return r?ir(String(r)):void 0}function Am(e,r){let t=e||Cm(r)||(r?void 0:Cm(y().agentOsId));if(t)return String(t);let n=process.env.KYNVER_RUNTIME_SECRET||process.env.KYNVER_CRON_SECRET||process.env.OPENCLAW_CRON_SECRET;if(n)return console.warn("[kynver] using deployment-level callback secret; run `kynver runner credential --agent-os-id <id>` for a scoped token"),String(n)}function GS(e,r){let t=Am(e,r);if(t)return t;mo("requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, KYNVER_API_KEY with an API base URL to mint one, or (legacy) KYNVER_RUNTIME_SECRET / KYNVER_CRON_SECRET / OPENCLAW_CRON_SECRET")}async function Qs(e,r,t){let n=Am(e,r);if(n)return{ok:!0,secret:n};let o=se(),s=po(t?.baseUrl);if(o&&r&&s)try{let i=await nt(r,{baseUrl:s,apiKey:o});return tt(r,i),{ok:!0,secret:i}}catch(i){return{ok:!1,reason:`runner credential mint failed: ${i.message}`}}return{ok:!1,reason:"no runner credential: requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, or KYNVER_API_KEY + API base URL to mint one"}}async function J(e,r,t){let n=await Qs(e,r,t);if(n.ok)return n.secret;mo(n.reason)}async function Im(e,r){let t=se(),n=po(r?.baseUrl);if(!t||!e||!n)return null;try{let o=await nt(e,{baseUrl:n,apiKey:t});return tt(e,o),o}catch{return null}}async function Om(e,r,t){let n=se(),o=po(t?.baseUrl);if(!n)return{ok:!1,reason:"KYNVER_API_KEY is required to refresh a rejected runner token"};if(!r)return{ok:!1,reason:"agentOsId is required to refresh a rejected runner token"};if(!o)return{ok:!1,reason:"KYNVER_API_URL or --base-url is required to refresh a rejected runner token"};try{let s=await nt(r,{baseUrl:o,apiKey:n});return s&&s!==e?(tt(r,s),{ok:!0,token:s}):{ok:!1,reason:"runner credential refresh returned the rejected token"}}catch(s){return{ok:!1,reason:s.message}}}async function nt(e,r){let t=r?.apiKey||se();if(!t)throw new Error("API key required \u2014 run `kynver login` first");let o=`${V(r?.baseUrl)}/api/agent-os/by-id/${encodeURIComponent(e)}/runner-credentials`,s=await fetch(o,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify({})}),i=await s.text(),a=null;try{a=JSON.parse(i)}catch{a=null}if(!s.ok||!a?.token)throw new Error(`runner credential mint failed (${s.status}): ${a?.error??i.slice(0,200)}`);return a.token}async function Nm(e){let r=(e.agentOsId?String(e.agentOsId):y().agentOsId)||"";r||mo("runner credential requires --agent-os-id or agentOsId in ~/.kynver/config.json");try{let t=await nt(r,{baseUrl:e.baseUrl?String(e.baseUrl):void 0});tt(r,t),console.log(JSON.stringify({ok:!0,agentOsId:r,credentialsPath:q(tn),tokenPrefix:`${t.slice(0,12)}\u2026`,note:"Scoped runner token saved; callbacks use X-Kynver-Runner-Token."},null,2))}catch(t){console.error(t instanceof Error?t.message:String(t)),process.exit(1)}}function mo(e){console.error(e),process.exit(1)}function fo(e){let r={};for(let t=0;t<e.length;t++){let n=e[t];if(!n.startsWith("--"))continue;let o=n.slice(2).replace(/-([a-z])/g,(i,a)=>a.toUpperCase()),s=e[t+1];!s||s.startsWith("--")?r[o]=!0:(r[o]=s,t++)}return r}async function Zs(e){let r=y(),t=Le({diskPath:typeof e.diskPath=="string"?e.diskPath:"/"}),n=Wl({totalMemBytes:FS.totalmem(),diskPath:t.path,diskGateOk:t.ok,diskFreeBytes:t.freeBytes,config:r}),o=VS(r,e),s=Gl({...r,...jS(r,e),...o,workerProvider:typeof e.provider=="string"?e.provider:r.workerProvider||"cursor",...e.chatOauth===!0?{chatUseClaudeOauth:!0}:{}});s.agentOsId&&!co(s.agentOsId).ok&&mo(Xs(s.agentOsId)),ce(s);let i=Ae(process.env,s),a=Ys(s,e);a.configUpdated&&(s=y());let l,c=se(),u=s.agentOsId;if(c&&u)try{let d=await nt(u,{baseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:s.apiBaseUrl,apiKey:c});tt(u,d),l="Scoped runner token minted and saved to ~/.kynver/credentials."}catch{l="Runner token not minted (server offline or master secret unset). Run `kynver runner credential` after deploy."}console.log(JSON.stringify({ok:!0,configPath:q(qs),config:nn(s),boxKind:s.boxKind,boxKindSource:i.source,workerCapRecommendation:n,daemonSupervision:{hostKind:a.policy.hostKind,owner:a.policy.owner,envFilePath:a.envFilePath},...i.warnings.length?{boxIdentityWarnings:i.warnings}:{},note:l??"boxKind and maxConcurrentWorkers persisted; override with --box-kind and --max-workers. Run `kynver login` + `kynver runner credential` for scoped callbacks."},null,2))}async function Tm(e){let r=typeof e.apiKey=="string"?e.apiKey:process.env.KYNVER_API_KEY;if(r){lo(r),console.log(JSON.stringify({ok:!0,credentialsPath:q(tn)},null,2));return}let{runDeviceLogin:t}=await Promise.resolve().then(()=>(jl(),Sm));(await t(e)).ok||process.exit(1),console.log(JSON.stringify({ok:!0,credentialsPath:q(tn)},null,2))}var zs,qs,tn,KS,$S,tU,nU,I=M(()=>{"use strict";Kn();Je();C();Oe();Vn();Bs();Kt();ao();zs=Vl.join(BS(),".kynver"),qs=Vl.join(zs,"config.json"),tn=Vl.join(zs,"credentials"),KS=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i,$S=new Set(["aos","aos-1","agent-os-id","agentosid","agent_os_id","<agent-os-id>","<agentosid>","todo","changeme","change-me","placeholder"]);tU=500*1024*1024,nU=4*1024*1024*1024});import{existsSync as _v,readFileSync as xv}from"node:fs";import{dirname as nl,join as Xd}from"node:path";import{fileURLToPath as zd}from"node:url";function Ev(e){let r=nl(zd(e));for(let t=0;t<6;t+=1){if(_v(Xd(r,"package.json")))return r;let n=nl(r);if(n===r)break;r=n}throw new Error(`package.json not found above ${nl(zd(e))}`)}function Qd(e=import.meta.url){let r=Xd(Ev(e),"package.json"),t=JSON.parse(xv(r,"utf8"));if(typeof t.version!="string"||!t.version.trim())throw new Error(`Missing package.json version at ${r}`);return t.version}var Bn=Qd();function Pv(e){return e.some(r=>r==="--version"||r==="-v")}function Av(e,r){console.log(r?`${r} ${e}`:e),process.exit(0)}function Zd(e,r=import.meta.url,t){return Pv(e)?(Av(Qd(r),t),!0):!1}Kn();import{existsSync as gp,readFileSync as Fv}from"node:fs";import vs from"node:path";var fl={"@kynver-app/runtime":"0.1.83","@kynver-app/openclaw-agent-os":"0.1.43","@kynver-app/mcp-agent-os":"0.3.34"},gl=Object.keys(fl),ml={"@kynver-app/runtime":"Kynver runtime","@kynver-app/openclaw-agent-os":"OpenClaw AgentOS plugin","@kynver-app/mcp-agent-os":"AgentOS MCP server"},Kv={"@kynver-app/runtime":"packages/kynver-runtime/package.json","@kynver-app/openclaw-agent-os":"packages/kynver-openclaw-agent-os/package.json","@kynver-app/mcp-agent-os":"packages/kynver-mcp-agent-os/package.json"};function hp(e){let r=e.trim().split("-")[0]?.split("+")[0];if(!r)return null;let t=r.split(".");if(t.length<1||t.length>3)return null;let n=t.map(o=>Number.parseInt(o,10));if(n.some(o=>!Number.isFinite(o)||o<0))return null;for(;n.length<3;)n.push(0);return[n[0],n[1],n[2]]}function jn(e,r){let t=hp(e),n=hp(r);if(!t||!n)return 0;for(let o=0;o<3;o+=1){if(t[o]>n[o])return 1;if(t[o]<n[o])return-1}return 0}function hl(e,r){return jn(e,r)>=0}function $v(e){let r=null;for(let t of e)(!r||jn(t,r)>0)&&(r=t);return r}function jv(e){try{let r=JSON.parse(Fv(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function Vv(e,r){let t=[r,process.env.KYNVER_REPO,e].filter(o=>!!o?.trim());for(let o of t){let s=vs.resolve(o);if(gp(vs.join(s,"packages/kynver-runtime/package.json"))&&gp(vs.join(s,"package.json")))return s}return jr({cwd:e})?.repo??null}function kl(e={}){let r=e.cwd??process.cwd(),t=Vv(r,e.repoRoot);if(!t)return{};let n={};for(let o of gl){let s=vs.join(t,Kv[o]),i=jv(s);i&&(n[o]={version:i,source:"repo",path:s})}return n}function Gv(e){return e==="@kynver-app/runtime"?["npm run kynver:build","npm run kynver"]:[`npm run build -w ${e}`]}function Yv(e){let{packageName:r,minimumVersion:t,effectiveVersion:n,effectiveSource:o,repoVersion:s}=e,i=[];return s&&hl(s,t)?(i.push(`Use the monorepo checkout (${s}) instead of a stale npm install: ${Gv(r).join("; ")}.`),i.push("Do not publish npm packages or wait on an operator release."),i):(n?i.push(`Upgrade ${r} from ${n} to >= ${t} (npm install -g ${r}@latest or align OpenClaw npm prefix).`):i.push(`Install ${r} >= ${t} before running memory-heavy AgentOS paths.`),r==="@kynver-app/runtime"&&i.push("Repo-source alternative: npm run kynver:build && npm run kynver"),o==="installed"&&s&&i.push(`Repo checkout reports ${s}; rebuild/link repo source if you develop from the monorepo.`),i)}function Jv(e){if(e.length===0)return{version:null,source:"unknown"};let r=$v(e.map(n=>n.version));if(!r)return{version:null,source:"unknown"};let t=e.find(n=>n.version===r)??e[0];return{version:t.version,source:t.source}}function bs(e={}){let r=(i,a)=>i?typeof i=="string"?{version:i,source:a}:i:null,t=gl.map(i=>{let a=fl[i],l=[],c=r(e.installed?.[i],"installed"),u=r(e.repo?.[i],"repo"),d=r(e.self?.[i],"self");c&&l.push(c),u&&l.push(u),d&&l.push(d);let{version:f,source:p}=Jv(l),m=u?.version??null,h=f?hl(f,a):!1,k=h?[]:Yv({packageName:i,minimumVersion:a,effectiveVersion:f,effectiveSource:p,repoVersion:m}),g=h?`${ml[i]} ${f} meets memory-cost minimum ${a} (${p}).`:`${ml[i]} is below memory-cost minimum ${a}`+(f?` (effective ${f} via ${p})`:" (no version detected)")+".";return{packageName:i,displayName:ml[i],minimumVersion:a,effectiveVersion:f,effectiveSource:p,ok:h,summary:g,remediation:k}}),n=t.filter(i=>!i.ok),o=n.length===0,s=o?"All managed AgentOS packages meet memory-cost minimum versions.":`Memory-cost package guard blocked ${n.length} stale package(s): ${n.map(i=>`${i.packageName} < ${i.minimumVersion}`).join("; ")}.`;return{ok:o,summary:s,packages:t}}var $n=class extends Error{result;constructor(r){let t=[r.summary,...r.packages.filter(n=>!n.ok).flatMap(n=>[`- ${n.summary}`,...n.remediation.map(o=>`  \u2192 ${o}`)])];super(t.join(`
-`)),this.name="MemoryCostPackageVersionGuardError",this.result=r}};function yl(e={}){let r=bs(e);if(!r.ok)throw new $n(r);return r}function qv(e){return new $n(e).message}import{readFile as zv}from"node:fs/promises";import{homedir as Xv}from"node:os";import Vr from"node:path";var Qv=["@kynver-app/runtime","@kynver-app/openclaw-agent-os","@kynver-app/mcp-agent-os"];function Wt(e){let r=e?.trim();return r||null}function Zv(e){return[...new Set(e.filter(r=>!!r))]}function eb(){let e=Xv(),r=Wt(process.env.KYNVER_OPENCLAW_NPM_ROOT)??Wt(process.env.OPENCLAW_NPM_ROOT)??Vr.join(e,".openclaw","npm"),t=Wt(process.env.KYNVER_NPM_GLOBAL_ROOT)??Wt(process.env.KYNVER_NPM_GLOBAL_MODULES_ROOT)??(Wt(process.env.NPM_CONFIG_PREFIX)?Vr.join(Wt(process.env.NPM_CONFIG_PREFIX),"lib","node_modules"):Vr.join(e,".npm-global","lib","node_modules"));return Zv([Vr.join(r,"lib","node_modules"),Vr.join(r,"node_modules"),t.endsWith("node_modules")?t:Vr.join(t,"lib","node_modules")])}async function rb(e){try{let r=JSON.parse(await zv(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function tb(e){let r=eb(),t=new Set,n=[];for(let o of r){let s=Vr.join(o,e,"package.json");t.has(s)||(t.add(s),n.push(s))}return n}async function Ss(e=new Date().toISOString()){let r={};for(let t of Qv){let n=null;for(let o of tb(t)){let s=await rb(o);s&&(!n||jn(s,n.version)>0)&&(n={version:s,path:o})}n&&(r[t]={version:n.version,observedAt:e,path:n.path})}return r}function nb(e){let r={};for(let[t,n]of Object.entries(e))n?.version&&(r[t]={version:n.version,source:"installed",path:n.path});return r}async function Rl(e={}){let[r,t]=await Promise.all([Ss(),Promise.resolve(kl({cwd:e.cwd,repoRoot:e.repoRoot}))]),n={},o=e.selfPackageName==="@kynver-app/runtime"&&e.selfVersion?e.selfVersion:Bn;return n["@kynver-app/runtime"]={version:o,source:"self"},e.selfPackageName&&e.selfVersion&&e.selfPackageName!=="@kynver-app/runtime"&&(n[e.selfPackageName]={version:e.selfVersion,source:"self"}),{installed:nb(r),repo:t,self:n}}async function ob(e={}){let r=await Rl(e);return bs(r)}async function vl(e={}){let r=await Rl(e);return yl(r)}function bl(e,r){return e?e==="daemon"||e==="start"||e==="worker"||e==="monitor"||e==="run"&&(r==="dispatch"||r==="sweep"||r==="reconcile"||r==="unblock")||e==="cron"&&r==="tick":!1}I();function He(e){let r=String(e).trim();return r.startsWith("krc1.")?{"Content-Type":"application/json","X-Kynver-Runner-Token":r}:{"Content-Type":"application/json","X-Kynver-Cron-Secret":r,"X-OpenClaw-Cron-Secret":r,"X-Kynver-Runtime-Secret":r}}I();function Dm(e){if(e!==void 0&&Number.isFinite(e)&&e>0)return Math.floor(e);let r=Number(process.env.KYNVER_CALLBACK_TIMEOUT_MS);return Number.isFinite(r)&&r>0?Math.floor(r):3e4}async function Mm(e,r){let t=Dm(r),n=new AbortController,o;try{return await Promise.race([e(n.signal),new Promise((s,i)=>{o=setTimeout(()=>{n.abort(),i(new Error(`callback timeout after ${t}ms`))},t)})])}finally{o&&clearTimeout(o)}}function Um(e,r){let t=Dm(r);return{ok:!1,status:0,response:{error:e instanceof Error?e.message:String(e),timeoutMs:t}}}async function Ar(e,r,t,n){try{return await Mm(async o=>{let s=await fetch(e,{method:"POST",headers:He(r),body:JSON.stringify(t),signal:o}),i=null;try{i=await s.json()}catch{i=null}return{ok:s.ok,status:s.status,response:i}},n?.timeoutMs)}catch(o){return Um(o,n?.timeoutMs)}}async function re(e,r,t,n){let o=await Ar(e,r,t,{timeoutMs:n.timeoutMs});if(o.ok||o.status!==401)return o;let s=await Om(r,n.agentOsId,{baseUrl:n.baseUrl});return s.ok?{...await Ar(e,s.token,t,{timeoutMs:n.timeoutMs}),refreshedAuth:!0}:{...o,authRefreshFailure:s.reason}}async function ei(e,r,t){try{return await Mm(async n=>{let o=await fetch(e,{method:"GET",headers:He(r),signal:n}),s=null;try{s=await o.json()}catch{s=null}return{ok:o.ok,status:o.status,response:s}},t?.timeoutMs)}catch(n){return Um(n,t?.timeoutMs)}}function Wm(){let e=Number(process.env.KYNVER_DISPATCH_CALLBACK_TIMEOUT_MS);return Number.isFinite(e)&&e>0?Math.floor(e):12e4}function Jl(e){console.error(JSON.stringify({event:"dispatch_progress",ts:new Date().toISOString(),...e}))}function Lm(e){if(!e||typeof e!="object")return!1;let r=e;if(r.timeoutMs!==void 0)return!0;let t=r.error;if(typeof t!="string"||!t.trim())return!1;let n=t.toLowerCase();return n.includes("abort")||n.includes("timeout")}var Bm="embedded-1",YS=[{slug:"ghost",displayName:"Ghost",description:"Orchestration persona.",dispatchLane:null,defaultRoleLane:"system"},{slug:"astra",displayName:"Astra",description:"Planning persona.",dispatchLane:"implementation",defaultRoleLane:"plan_author"},{slug:"rhea",displayName:"Rhea",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"mnemo",displayName:"Mnemo",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"sentinel",displayName:"Sentinel",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"deep_reviewer"},{slug:"pixel",displayName:"Pixel",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"schema",displayName:"Schema",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"atlas",displayName:"Atlas",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"runtime_verifier"},{slug:"bridge",displayName:"Bridge",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"catalyst",displayName:"Catalyst",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"lorentz",displayName:"Lorentz",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"report_reviewer"},{slug:"dalton",displayName:"Dalton",description:"Landing persona.",dispatchLane:"landing",defaultRoleLane:"implementer"}],JS={"worker.prompt.core_rules":["Structured final result (recommended): record completion as JSON with summary, files, PR URLs, verification, risks, and blockers.","Completion handoff (required): before you stop, summarize the outcome in your last message and append a heartbeat line with phase `complete` and a structured finalResult object. Commit your work cleanly and open a GitHub PR (draft OK) for substantial changes \u2014 never leave uncommitted changes behind without reporting them.","Review-only workers must not open new implementation PRs \u2014 review the existing PR and record a verdict in the final result.","Keep verification targeted to touched paths; avoid full-monorepo verification unless explicitly requested.","Do not run `npm publish`.","If verification fails, append a heartbeat line immediately with the failing command, reason, and next action."].join(`
+`)}function rn(e=we){return Rm(e)?Vl(vm(e,"utf8")):new Map}function $s(e,r={}){let t=r.filePath??we,n=Rm(t)?vm(t,"utf8"):"",o=Vl(n),s=[],i=[];for(let u of r.removeKeys??[])o.delete(u)&&i.push(u);for(let[u,d]of Object.entries(e)){if(d===void 0)continue;let m=o.get(u);o.set(u,d),m!==d&&s.push(u)}let a=Vl(n),l=a.size!==o.size;if(!l){for(let[u,d]of o)if(a.get(u)!==d){l=!0;break}}let c=OS(o);return l&&(PS(bm.dirname(t),{recursive:!0}),AS(t,c,{mode:384})),{path:t,changed:l,keysWritten:s,keysRemoved:i}}var we,Ir=M(()=>{"use strict";we=bm.join(IS(),".kynver",".env")});var Gl,oo=M(()=>{"use strict";Gl="1.5G"});import{spawnSync as NS}from"node:child_process";function tn(){return process.env.KYNVER_BUILD_SKIP_SYSTEMD==="1"||process.env.KYNVER_BUILD_SKIP_SYSTEMD==="true"?!1:so!==void 0?so:process.platform!=="linux"?(so=!1,!1):(so=NS("systemd-run",["--version"],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}).status===0,so)}function js(e){let r=e.memoryMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_MAX??Gl,t=e.memorySwapMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_SWAP_MAX??"2G",n=["systemd-run","--scope","--collect","-p",`MemoryMax=${r}`,"-p",`MemorySwapMax=${t}`];return e.cwd&&n.push("--working-directory",e.cwd),n.push("--",...e.command),n}var so,Vs=M(()=>{"use strict";oo()});import{realpathSync as TS}from"node:fs";function nn(e=process.argv[1]){let r=process.env.KYNVER_BIN?.trim();if(r)return r;let t=e?.trim();if(!t)return"kynver";try{return TS.native(t)}catch{return t}}function Cm(e){return/\s/.test(e)?`"${e.replace(/"/g,'\\"')}"`:e}var Gs=M(()=>{"use strict"});import{existsSync as DS,mkdirSync as MS,writeFileSync as US}from"node:fs";import{homedir as WS}from"node:os";import _m from"node:path";import{spawnSync as wm}from"node:child_process";function LS(){return _m.join(WS(),".config","systemd","user")}function BS(e){let r=Cm(e.kynverBin?.trim()||nn());return["[Unit]","Description=Kynver AgentOS daemon (keeper-supervised pipeline + cron tick)","After=network-online.target","","[Service]","Type=simple",`EnvironmentFile=${e.envFilePath}`,`ExecStart=${r} daemon --run ${e.runId} --agent-os-id ${e.agentOsId} --execute`,"Restart=always","RestartSec=10","","[Install]","WantedBy=default.target",""].join(`
+`)}function Ys(e,r){if(!tn())return{supported:!1,unitPath:null,written:!1,enabled:!1,started:!1,note:process.platform==="linux"?"systemd-run not available \u2014 install user service manually or run `kynver daemon` under your supervisor.":"systemd user units are only supported on Linux; use `kynver daemon` manually on macOS/Windows."};let t=LS(),n=_m.join(t,io),o=BS(e);if(!r)return{supported:!0,unitPath:n,written:!1,enabled:!1,started:!1,note:"Dry-run \u2014 pass --execute to write and enable the user unit."};MS(t,{recursive:!0});let s=DS(n);US(n,o,"utf8");let i=wm("systemctl",["--user","daemon-reload"],{encoding:"utf8"});if(i.status!==0)return{supported:!0,unitPath:n,written:!0,enabled:!1,started:!1,note:`Wrote ${n} but systemctl --user daemon-reload failed: ${i.stderr||i.stdout}`};let a=wm("systemctl",["--user","enable","--now",io],{encoding:"utf8"});return{supported:!0,unitPath:n,written:!s||!0,enabled:a.status===0,started:a.status===0,note:a.status===0?`Enabled and started ${io}`:`Wrote ${n} but enable failed: ${a.stderr||a.stdout}`}}var io,Js=M(()=>{"use strict";Vs();Gs();io="kynver-cron-daemon.service"});import{existsSync as HS,readFileSync as FS}from"node:fs";function on(){if(process.platform==="win32")return"win32";if(process.platform==="darwin")return"darwin";if(process.platform==="linux"){if(process.env.WSL_DISTRO_NAME?.trim())return"wsl";try{if(HS("/proc/version")){let e=FS("/proc/version","utf8");if(/microsoft/i.test(e))return"wsl"}}catch{}return"linux"}return"linux"}function ao(e){return e==="linux"}var lo=M(()=>{"use strict"});function xm(e){return e===!0||e==="true"||e==="1"||e==="yes"||e==="on"}function KS(e){return"keeper"}function Em(e,r,t={}){if(xm(t.installSystemd)||xm(t["install-systemd"]))return ao(r)?"systemd":"keeper";let n=e.daemonSupervisionOwner;return n==="systemd"&&ao(r)?"systemd":n==="keeper"?"keeper":KS(r)}function $S(){return{KYNVER_CRON_DAEMON_PRESENT:"1"}}function Yl(e,r){let t=["Daemon restart hardening is Kynver-owned: `kynver start` runs the in-process keeper by default (crash + heartbeat-stall respawn)."];return e==="linux"?t.push("For logout-surviving supervision on Linux: `kynver start --install-systemd` (or `kynver cron install --install-systemd`)."):e==="wsl"?t.push("WSL: run `kynver start` in a persistent tmux/screen session, or use Windows `start-tier2-wsl.ps1` which delegates to the keeper."):e==="darwin"?t.push("macOS: run `kynver start` under launchd or a terminal multiplexer for session survival."):e==="win32"&&t.push("Native Windows: prefer WSL (`kynver start` inside WSL). Native console daemon is blocked unless KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS=1."),r==="systemd"&&t.push("This box is configured for systemd user-unit supervision (~/.config/systemd/user/kynver-cron-daemon.service)."),t}function Jl(e,r={},t){let n=t??on(),o=Em(e,n,r);return{hostKind:n,owner:o,envUpdates:$S(),guidance:Yl(n,o)}}var qs=M(()=>{"use strict";lo()});import{existsSync as jS}from"node:fs";import Pm from"node:path";import{homedir as Am}from"node:os";function VS(){return Pm.join(Am(),".config","systemd","user",io)}function ql(){return jS(VS())}function zs(e,r={},t){let n=Jl(e,r,t),o={};e.daemonSupervisionOwner||(o.daemonSupervisionOwner=n.owner);let s={...e,...o},i=!1;Object.keys(o).length>0&&(ue(s),i=!0);let a=$s(n.envUpdates,{filePath:we});return{policy:n,configPath:q(Pm.join(Am(),".kynver","config.json")),envFilePath:q(a.path),envChanged:a.changed,configUpdated:i}}function Xs(e,r){return e.daemonSupervisionOwner==="systemd"&&ql()?"systemd":e.daemonSupervisionOwner??"keeper"}var co=M(()=>{"use strict";Ir();Je();I();Js();qs()});var Om={};Tv(Om,{runDeviceLogin:()=>zl});import Im from"node:os";function GS(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||y().apiBaseUrl;return r?ar(String(r)):void 0}async function YS(e){await new Promise(r=>setTimeout(r,e))}async function zl(e){let r=GS(e);if(!r)return console.error("kynver login (device flow) requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site, set KYNVER_API_URL, or run `kynver setup` first."),{ok:!1};let t=`${Im.hostname()} (${Im.platform()})`,n;try{let a=await fetch(`${r}/api/auth/device/code`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({clientName:t})});if(!a.ok)return console.error(`Could not start device authorization (${a.status}).`),{ok:!1};n=await a.json()}catch(a){return console.error(`Could not reach ${r}: ${a.message}`),{ok:!1}}let o=n.verification_uri_complete||n.verification_uri;console.log(""),console.log("  Authorize this machine:"),console.log(`    1. Open: ${o}`),console.log(`    2. Confirm the code: ${n.user_code}`),console.log(""),console.log("  Waiting for approval\u2026");let s=Date.now()+n.expires_in*1e3,i=Math.max(1,n.interval)*1e3;for(;Date.now()<s;){await YS(i);let a;try{a=await(await fetch(`${r}/api/auth/device/token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({device_code:n.device_code})})).json().catch(()=>({}))}catch{continue}switch(a.status){case"approved":return a.api_key?(uo(a.api_key),console.log("  Approved \u2014 this machine is now linked to your Kynver account."),{ok:!0,apiKey:a.api_key}):{ok:!1};case"slow_down":i+=2e3;break;case"authorization_pending":typeof a.interval=="number"&&(i=Math.max(i,a.interval*1e3));break;case"access_denied":return console.error("  Request was denied in the browser."),{ok:!1};case"expired_token":return console.error("  The code expired before it was approved. Run `kynver login` again."),{ok:!1};default:break}}return console.error("  Timed out waiting for approval. Run `kynver login` again."),{ok:!1}}var Xl=M(()=>{"use strict";I();C()});import{existsSync as Tm,mkdirSync as Dm,readFileSync as Mm,writeFileSync as Um}from"node:fs";import{homedir as JS,totalmem as qS}from"node:os";import Ql from"node:path";import zS from"node:os";function po(e){let r=String(e??"").trim();if(!r)return{ok:!1,reason:"missing"};let t=r.toLowerCase();return QS.has(t)?{ok:!1,value:r,reason:"placeholder"}:XS.test(r)?{ok:!0,value:r}:{ok:!1,value:r,reason:"not a UUID"}}function ei(e){let r=po(e),t=r.value??String(e??"").trim(),n=t?`"${t}"`:"<empty>",o=r.reason==="placeholder"?"looks like a placeholder":r.reason??"is invalid";return[`Invalid AgentOS id ${n}: ${o}.`,"AgentOS ids are UUIDs from the AgentOS registry, not slugs or examples (for example, not `aos`).","Fix: run `kynver bootstrap` to relink this runner, or run `kynver setup --agent-os-id <uuid>` / pass `--agent-os-id <uuid>` after copying the id from Command Center.","If this came from stale ~/.kynver/config.json, remove or replace the agentOsId value before starting the daemon."].join(" ")}function y(){if(!Tm(Qs))return{};try{return JSON.parse(Mm(Qs,"utf8"))}catch{return{}}}function ue(e){Dm(Zs,{recursive:!0}),Um(Qs,`${JSON.stringify(Zl(e),null,2)}
+`,{mode:384})}function Zl(e){return{...e,...e.harnessRoot?.trim()?{harnessRoot:Se(e.harnessRoot.trim())}:{},...e.defaultRepo?.trim()?{defaultRepo:Se(e.defaultRepo.trim())}:{}}}function an(e){return Zl(e)}function ZS(e,r){let t=mo(),n=(typeof r.apiBaseUrl=="string"?r.apiBaseUrl:void 0)||e.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim(),o=(typeof r.agentOsId=="string"?r.agentOsId:void 0)||e.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||(t.runnerToken?.trim().startsWith("krc1.")?t.runnerTokenAgentOsId?.trim():void 0),i=(typeof r.repo=="string"?r.repo:r.discoverRepo===!0||r.discoverRepo==="true"?Gr()?.repo:void 0)||e.defaultRepo?.trim()||process.env.KYNVER_DEFAULT_REPO?.trim()||process.env.KYNVER_HARNESS_REPO?.trim()||jn()?.repo,a=(typeof r.harnessRoot=="string"?r.harnessRoot:void 0)||e.harnessRoot?.trim()||process.env.KYNVER_HARNESS_ROOT?.trim()||process.env.OPUS_HARNESS_ROOT?.trim();return{...n?{apiBaseUrl:ar(n)}:{},...o?{agentOsId:o}:{},...i?{defaultRepo:i}:{},...a?{harnessRoot:a}:{},...typeof r.agentOsSlug=="string"?{agentOsSlug:r.agentOsSlug}:e.agentOsSlug?{agentOsSlug:e.agentOsSlug}:{}}}function eC(e,r,t=qS()){let n=typeof r.maxWorkers=="string"?r.maxWorkers:typeof r.maxConcurrentWorkers=="string"?r.maxConcurrentWorkers:void 0,o=typeof r.boxKind=="string"?r.boxKind:typeof r["box-kind"]=="string"?String(r["box-kind"]):void 0,s=Ae(process.env,{...e,...o?{boxKind:Ft(o)}:{}}).boxKind,i=Le({diskPath:typeof r.diskPath=="string"?r.diskPath:"/"}),a=jl({totalMemBytes:t,diskPath:i.path,diskGateOk:i.ok,diskFreeBytes:i.freeBytes,config:e});if(n){let l=Math.max(1,Math.floor(Number(n)));return{maxConcurrentWorkers:cr(s,l),maxConcurrentWorkersSource:"setup-flag",boxKind:s}}if(e.maxConcurrentWorkers!==void 0&&e.maxConcurrentWorkers!==null){let l=Math.max(1,Math.floor(Number(e.maxConcurrentWorkers)));return Kt(s,l)?{maxConcurrentWorkers:Pl(s,a.recommendedMaxWorkers),maxConcurrentWorkersSource:"setup-auto",boxKind:s}:{maxConcurrentWorkers:cr(s,l),maxConcurrentWorkersSource:e.maxConcurrentWorkersSource??"operator",boxKind:s}}return{maxConcurrentWorkers:Pl(s,a.recommendedMaxWorkers),maxConcurrentWorkersSource:"setup-auto",boxKind:s}}function mo(){if(!Tm(sn))return{};try{return JSON.parse(Mm(sn,"utf8"))}catch{return{}}}function Wm(e){Dm(Zs,{recursive:!0}),Um(sn,`${JSON.stringify(e,null,2)}
+`,{mode:384})}function se(){return process.env.KYNVER_API_KEY?process.env.KYNVER_API_KEY:mo().apiKey}function uo(e){Wm({...mo(),apiKey:e})}function Nm(e){let r=process.env.KYNVER_RUNNER_TOKEN?.trim();if(r)return r;let t=mo();if(t.runnerToken&&!(e&&t.runnerTokenAgentOsId&&t.runnerTokenAgentOsId!==e))return t.runnerToken}function nt(e,r){Wm({...mo(),runnerToken:r,runnerTokenAgentOsId:e})}function V(e){let r=fo(e);return r||go("requires --base-url, KYNVER_API_URL, KYNVER_CRON_FIRE_BASE_URL, or ~/.kynver/config.json apiBaseUrl"),r}function ec(e){return fo(e)}function fo(e){let r=e||process.env.KYNVER_API_URL||process.env.KYNVER_CRON_FIRE_BASE_URL||process.env.OPENCLAW_CRON_FIRE_BASE_URL||y().apiBaseUrl;return r?ar(String(r)):void 0}function Lm(e,r){let t=e||Nm(r)||(r?void 0:Nm(y().agentOsId));if(t)return String(t);let n=process.env.KYNVER_RUNTIME_SECRET||process.env.KYNVER_CRON_SECRET||process.env.OPENCLAW_CRON_SECRET;if(n)return console.warn("[kynver] using deployment-level callback secret; run `kynver runner credential --agent-os-id <id>` for a scoped token"),String(n)}function rC(e,r){let t=Lm(e,r);if(t)return t;go("requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, KYNVER_API_KEY with an API base URL to mint one, or (legacy) KYNVER_RUNTIME_SECRET / KYNVER_CRON_SECRET / OPENCLAW_CRON_SECRET")}async function ri(e,r,t){let n=Lm(e,r);if(n)return{ok:!0,secret:n};let o=se(),s=fo(t?.baseUrl);if(o&&r&&s)try{let i=await ot(r,{baseUrl:s,apiKey:o});return nt(r,i),{ok:!0,secret:i}}catch(i){return{ok:!1,reason:`runner credential mint failed: ${i.message}`}}return{ok:!1,reason:"no runner credential: requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, or KYNVER_API_KEY + API base URL to mint one"}}async function J(e,r,t){let n=await ri(e,r,t);if(n.ok)return n.secret;go(n.reason)}async function Bm(e,r){let t=se(),n=fo(r?.baseUrl);if(!t||!e||!n)return null;try{let o=await ot(e,{baseUrl:n,apiKey:t});return nt(e,o),o}catch{return null}}async function Hm(e,r,t){let n=se(),o=fo(t?.baseUrl);if(!n)return{ok:!1,reason:"KYNVER_API_KEY is required to refresh a rejected runner token"};if(!r)return{ok:!1,reason:"agentOsId is required to refresh a rejected runner token"};if(!o)return{ok:!1,reason:"KYNVER_API_URL or --base-url is required to refresh a rejected runner token"};try{let s=await ot(r,{baseUrl:o,apiKey:n});return s&&s!==e?(nt(r,s),{ok:!0,token:s}):{ok:!1,reason:"runner credential refresh returned the rejected token"}}catch(s){return{ok:!1,reason:s.message}}}async function ot(e,r){let t=r?.apiKey||se();if(!t)throw new Error("API key required \u2014 run `kynver login` first");let o=`${V(r?.baseUrl)}/api/agent-os/by-id/${encodeURIComponent(e)}/runner-credentials`,s=await fetch(o,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify({})}),i=await s.text(),a=null;try{a=JSON.parse(i)}catch{a=null}if(!s.ok||!a?.token)throw new Error(`runner credential mint failed (${s.status}): ${a?.error??i.slice(0,200)}`);return a.token}async function Fm(e){let r=(e.agentOsId?String(e.agentOsId):y().agentOsId)||"";r||go("runner credential requires --agent-os-id or agentOsId in ~/.kynver/config.json");try{let t=await ot(r,{baseUrl:e.baseUrl?String(e.baseUrl):void 0});nt(r,t),console.log(JSON.stringify({ok:!0,agentOsId:r,credentialsPath:q(sn),tokenPrefix:`${t.slice(0,12)}\u2026`,note:"Scoped runner token saved; callbacks use X-Kynver-Runner-Token."},null,2))}catch(t){console.error(t instanceof Error?t.message:String(t)),process.exit(1)}}function go(e){console.error(e),process.exit(1)}function ho(e){let r={};for(let t=0;t<e.length;t++){let n=e[t];if(!n.startsWith("--"))continue;let o=n.slice(2).replace(/-([a-z])/g,(i,a)=>a.toUpperCase()),s=e[t+1];!s||s.startsWith("--")?r[o]=!0:(r[o]=s,t++)}return r}async function ti(e){let r=y(),t=Le({diskPath:typeof e.diskPath=="string"?e.diskPath:"/"}),n=jl({totalMemBytes:zS.totalmem(),diskPath:t.path,diskGateOk:t.ok,diskFreeBytes:t.freeBytes,config:r}),o=eC(r,e),s=Zl({...r,...ZS(r,e),...o,workerProvider:typeof e.provider=="string"?e.provider:r.workerProvider||"cursor",...e.chatOauth===!0?{chatUseClaudeOauth:!0}:{}});s.agentOsId&&!po(s.agentOsId).ok&&go(ei(s.agentOsId)),ue(s);let i=Ae(process.env,s),a=zs(s,e);a.configUpdated&&(s=y());let l,c=se(),u=s.agentOsId;if(c&&u)try{let d=await ot(u,{baseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:s.apiBaseUrl,apiKey:c});nt(u,d),l="Scoped runner token minted and saved to ~/.kynver/credentials."}catch{l="Runner token not minted (server offline or master secret unset). Run `kynver runner credential` after deploy."}console.log(JSON.stringify({ok:!0,configPath:q(Qs),config:an(s),boxKind:s.boxKind,boxKindSource:i.source,workerCapRecommendation:n,daemonSupervision:{hostKind:a.policy.hostKind,owner:a.policy.owner,envFilePath:a.envFilePath},...i.warnings.length?{boxIdentityWarnings:i.warnings}:{},note:l??"boxKind and maxConcurrentWorkers persisted; override with --box-kind and --max-workers. Run `kynver login` + `kynver runner credential` for scoped callbacks."},null,2))}async function Km(e){let r=typeof e.apiKey=="string"?e.apiKey:process.env.KYNVER_API_KEY;if(r){uo(r),console.log(JSON.stringify({ok:!0,credentialsPath:q(sn)},null,2));return}let{runDeviceLogin:t}=await Promise.resolve().then(()=>(Xl(),Om));(await t(e)).ok||process.exit(1),console.log(JSON.stringify({ok:!0,credentialsPath:q(sn)},null,2))}var Zs,Qs,sn,XS,QS,fU,gU,I=M(()=>{"use strict";Vn();Je();C();Oe();Jn();Ks();Vt();co();Zs=Ql.join(JS(),".kynver"),Qs=Ql.join(Zs,"config.json"),sn=Ql.join(Zs,"credentials"),XS=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i,QS=new Set(["aos","aos-1","agent-os-id","agentosid","agent_os_id","<agent-os-id>","<agentosid>","todo","changeme","change-me","placeholder"]);fU=500*1024*1024,gU=4*1024*1024*1024});import{existsSync as Dv,readFileSync as Mv}from"node:fs";import{dirname as cl,join as lp}from"node:path";import{fileURLToPath as ap}from"node:url";function Uv(e){let r=cl(ap(e));for(let t=0;t<6;t+=1){if(Dv(lp(r,"package.json")))return r;let n=cl(r);if(n===r)break;r=n}throw new Error(`package.json not found above ${cl(ap(e))}`)}function cp(e=import.meta.url){let r=lp(Uv(e),"package.json"),t=JSON.parse(Mv(r,"utf8"));if(typeof t.version!="string"||!t.version.trim())throw new Error(`Missing package.json version at ${r}`);return t.version}var Kn=cp();function Wv(e){return e.some(r=>r==="--version"||r==="-v")}function Lv(e,r){console.log(r?`${r} ${e}`:e),process.exit(0)}function up(e,r=import.meta.url,t){return Wv(e)?(Lv(cp(r),t),!0):!1}Vn();import{existsSync as xp,readFileSync as zv}from"node:fs";import Ss from"node:path";var vl={"@kynver-app/runtime":"0.1.83","@kynver-app/openclaw-agent-os":"0.1.43","@kynver-app/mcp-agent-os":"0.3.34"},bl=Object.keys(vl),Rl={"@kynver-app/runtime":"Kynver runtime","@kynver-app/openclaw-agent-os":"OpenClaw AgentOS plugin","@kynver-app/mcp-agent-os":"AgentOS MCP server"},Xv={"@kynver-app/runtime":"packages/kynver-runtime/package.json","@kynver-app/openclaw-agent-os":"packages/kynver-openclaw-agent-os/package.json","@kynver-app/mcp-agent-os":"packages/kynver-mcp-agent-os/package.json"};function Ep(e){let r=e.trim().split("-")[0]?.split("+")[0];if(!r)return null;let t=r.split(".");if(t.length<1||t.length>3)return null;let n=t.map(o=>Number.parseInt(o,10));if(n.some(o=>!Number.isFinite(o)||o<0))return null;for(;n.length<3;)n.push(0);return[n[0],n[1],n[2]]}function Yn(e,r){let t=Ep(e),n=Ep(r);if(!t||!n)return 0;for(let o=0;o<3;o+=1){if(t[o]>n[o])return 1;if(t[o]<n[o])return-1}return 0}function Sl(e,r){return Yn(e,r)>=0}function Qv(e){let r=null;for(let t of e)(!r||Yn(t,r)>0)&&(r=t);return r}function Zv(e){try{let r=JSON.parse(zv(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function eb(e,r){let t=[r,process.env.KYNVER_REPO,e].filter(o=>!!o?.trim());for(let o of t){let s=Ss.resolve(o);if(xp(Ss.join(s,"packages/kynver-runtime/package.json"))&&xp(Ss.join(s,"package.json")))return s}return Gr({cwd:e})?.repo??null}function Cl(e={}){let r=e.cwd??process.cwd(),t=eb(r,e.repoRoot);if(!t)return{};let n={};for(let o of bl){let s=Ss.join(t,Xv[o]),i=Zv(s);i&&(n[o]={version:i,source:"repo",path:s})}return n}function rb(e){return e==="@kynver-app/runtime"?["npm run kynver:build","npm run kynver"]:[`npm run build -w ${e}`]}function tb(e){let{packageName:r,minimumVersion:t,effectiveVersion:n,effectiveSource:o,repoVersion:s}=e,i=[];return s&&Sl(s,t)?(i.push(`Use the monorepo checkout (${s}) instead of a stale npm install: ${rb(r).join("; ")}.`),i.push("Do not publish npm packages or wait on an operator release."),i):(n?i.push(`Upgrade ${r} from ${n} to >= ${t} (npm install -g ${r}@latest or align OpenClaw npm prefix).`):i.push(`Install ${r} >= ${t} before running memory-heavy AgentOS paths.`),r==="@kynver-app/runtime"&&i.push("Repo-source alternative: npm run kynver:build && npm run kynver"),o==="installed"&&s&&i.push(`Repo checkout reports ${s}; rebuild/link repo source if you develop from the monorepo.`),i)}function nb(e){if(e.length===0)return{version:null,source:"unknown"};let r=Qv(e.map(n=>n.version));if(!r)return{version:null,source:"unknown"};let t=e.find(n=>n.version===r)??e[0];return{version:t.version,source:t.source}}function Cs(e={}){let r=(i,a)=>i?typeof i=="string"?{version:i,source:a}:i:null,t=bl.map(i=>{let a=vl[i],l=[],c=r(e.installed?.[i],"installed"),u=r(e.repo?.[i],"repo"),d=r(e.self?.[i],"self");c&&l.push(c),u&&l.push(u),d&&l.push(d);let{version:m,source:p}=nb(l),f=u?.version??null,h=m?Sl(m,a):!1,k=h?[]:tb({packageName:i,minimumVersion:a,effectiveVersion:m,effectiveSource:p,repoVersion:f}),g=h?`${Rl[i]} ${m} meets memory-cost minimum ${a} (${p}).`:`${Rl[i]} is below memory-cost minimum ${a}`+(m?` (effective ${m} via ${p})`:" (no version detected)")+".";return{packageName:i,displayName:Rl[i],minimumVersion:a,effectiveVersion:m,effectiveSource:p,ok:h,summary:g,remediation:k}}),n=t.filter(i=>!i.ok),o=n.length===0,s=o?"All managed AgentOS packages meet memory-cost minimum versions.":`Memory-cost package guard blocked ${n.length} stale package(s): ${n.map(i=>`${i.packageName} < ${i.minimumVersion}`).join("; ")}.`;return{ok:o,summary:s,packages:t}}var Gn=class extends Error{result;constructor(r){let t=[r.summary,...r.packages.filter(n=>!n.ok).flatMap(n=>[`- ${n.summary}`,...n.remediation.map(o=>`  \u2192 ${o}`)])];super(t.join(`
+`)),this.name="MemoryCostPackageVersionGuardError",this.result=r}};function wl(e={}){let r=Cs(e);if(!r.ok)throw new Gn(r);return r}function ob(e){return new Gn(e).message}import{readFile as sb}from"node:fs/promises";import{homedir as ib}from"node:os";import Yr from"node:path";var ab=["@kynver-app/runtime","@kynver-app/openclaw-agent-os","@kynver-app/mcp-agent-os"];function Ht(e){let r=e?.trim();return r||null}function lb(e){return[...new Set(e.filter(r=>!!r))]}function cb(){let e=ib(),r=Ht(process.env.KYNVER_OPENCLAW_NPM_ROOT)??Ht(process.env.OPENCLAW_NPM_ROOT)??Yr.join(e,".openclaw","npm"),t=Ht(process.env.KYNVER_NPM_GLOBAL_ROOT)??Ht(process.env.KYNVER_NPM_GLOBAL_MODULES_ROOT)??(Ht(process.env.NPM_CONFIG_PREFIX)?Yr.join(Ht(process.env.NPM_CONFIG_PREFIX),"lib","node_modules"):Yr.join(e,".npm-global","lib","node_modules"));return lb([Yr.join(r,"lib","node_modules"),Yr.join(r,"node_modules"),t.endsWith("node_modules")?t:Yr.join(t,"lib","node_modules")])}async function ub(e){try{let r=JSON.parse(await sb(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function db(e){let r=cb(),t=new Set,n=[];for(let o of r){let s=Yr.join(o,e,"package.json");t.has(s)||(t.add(s),n.push(s))}return n}async function ws(e=new Date().toISOString()){let r={};for(let t of ab){let n=null;for(let o of db(t)){let s=await ub(o);s&&(!n||Yn(s,n.version)>0)&&(n={version:s,path:o})}n&&(r[t]={version:n.version,observedAt:e,path:n.path})}return r}function pb(e){let r={};for(let[t,n]of Object.entries(e))n?.version&&(r[t]={version:n.version,source:"installed",path:n.path});return r}async function _l(e={}){let[r,t]=await Promise.all([ws(),Promise.resolve(Cl({cwd:e.cwd,repoRoot:e.repoRoot}))]),n={},o=e.selfPackageName==="@kynver-app/runtime"&&e.selfVersion?e.selfVersion:Kn;return n["@kynver-app/runtime"]={version:o,source:"self"},e.selfPackageName&&e.selfVersion&&e.selfPackageName!=="@kynver-app/runtime"&&(n[e.selfPackageName]={version:e.selfVersion,source:"self"}),{installed:pb(r),repo:t,self:n}}async function mb(e={}){let r=await _l(e);return Cs(r)}async function xl(e={}){let r=await _l(e);return wl(r)}function El(e,r){return e?e==="daemon"||e==="start"||e==="worker"||e==="monitor"||e==="run"&&(r==="dispatch"||r==="sweep"||r==="reconcile"||r==="unblock")||e==="cron"&&r==="tick":!1}I();function He(e){let r=String(e).trim();return r.startsWith("krc1.")?{"Content-Type":"application/json","X-Kynver-Runner-Token":r}:{"Content-Type":"application/json","X-Kynver-Cron-Secret":r,"X-OpenClaw-Cron-Secret":r,"X-Kynver-Runtime-Secret":r}}I();function $m(e){if(e!==void 0&&Number.isFinite(e)&&e>0)return Math.floor(e);let r=Number(process.env.KYNVER_CALLBACK_TIMEOUT_MS);return Number.isFinite(r)&&r>0?Math.floor(r):3e4}async function jm(e,r){let t=$m(r),n=new AbortController,o;try{return await Promise.race([e(n.signal),new Promise((s,i)=>{o=setTimeout(()=>{n.abort(),i(new Error(`callback timeout after ${t}ms`))},t)})])}finally{o&&clearTimeout(o)}}function Vm(e,r){let t=$m(r);return{ok:!1,status:0,response:{error:e instanceof Error?e.message:String(e),timeoutMs:t}}}async function Or(e,r,t,n){try{return await jm(async o=>{let s=await fetch(e,{method:"POST",headers:He(r),body:JSON.stringify(t),signal:o}),i=null;try{i=await s.json()}catch{i=null}return{ok:s.ok,status:s.status,response:i}},n?.timeoutMs)}catch(o){return Vm(o,n?.timeoutMs)}}async function re(e,r,t,n){let o=await Or(e,r,t,{timeoutMs:n.timeoutMs});if(o.ok||o.status!==401)return o;let s=await Hm(r,n.agentOsId,{baseUrl:n.baseUrl});return s.ok?{...await Or(e,s.token,t,{timeoutMs:n.timeoutMs}),refreshedAuth:!0}:{...o,authRefreshFailure:s.reason}}async function ni(e,r,t){try{return await jm(async n=>{let o=await fetch(e,{method:"GET",headers:He(r),signal:n}),s=null;try{s=await o.json()}catch{s=null}return{ok:o.ok,status:o.status,response:s}},t?.timeoutMs)}catch(n){return Vm(n,t?.timeoutMs)}}function Gm(){let e=Number(process.env.KYNVER_DISPATCH_CALLBACK_TIMEOUT_MS);return Number.isFinite(e)&&e>0?Math.floor(e):12e4}function rc(e){console.error(JSON.stringify({event:"dispatch_progress",ts:new Date().toISOString(),...e}))}function Ym(e){if(!e||typeof e!="object")return!1;let r=e;if(r.timeoutMs!==void 0)return!0;let t=r.error;if(typeof t!="string"||!t.trim())return!1;let n=t.toLowerCase();return n.includes("abort")||n.includes("timeout")}var Jm="embedded-1",tC=[{slug:"ghost",displayName:"Ghost",description:"Orchestration persona.",dispatchLane:null,defaultRoleLane:"system"},{slug:"astra",displayName:"Astra",description:"Planning persona.",dispatchLane:"implementation",defaultRoleLane:"plan_author"},{slug:"rhea",displayName:"Rhea",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"mnemo",displayName:"Mnemo",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"sentinel",displayName:"Sentinel",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"deep_reviewer"},{slug:"pixel",displayName:"Pixel",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"schema",displayName:"Schema",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"atlas",displayName:"Atlas",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"runtime_verifier"},{slug:"bridge",displayName:"Bridge",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"catalyst",displayName:"Catalyst",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"lorentz",displayName:"Lorentz",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"report_reviewer"},{slug:"dalton",displayName:"Dalton",description:"Landing persona.",dispatchLane:"landing",defaultRoleLane:"implementer"}],nC={"worker.prompt.core_rules":["Structured final result (recommended): record completion as JSON with summary, files, PR URLs, verification, risks, and blockers.","Completion handoff (required): before you stop, summarize the outcome in your last message and append a heartbeat line with phase `complete` and a structured finalResult object. Commit your work cleanly and open a GitHub PR (draft OK) for substantial changes \u2014 never leave uncommitted changes behind without reporting them.","Review-only workers must not open new implementation PRs \u2014 review the existing PR and record a verdict in the final result. Prefer `gh pr view` / `gh pr diff`; if a local checkout is needed, use a disposable ref or detached worktree, not a checked-out `pr-*` branch.","Keep verification targeted to touched paths; avoid full-monorepo verification unless explicitly requested.","Do not run `npm publish`.","If verification fails, append a heartbeat line immediately with the failing command, reason, and next action."].join(`
 `),"worker.prompt.progress.compact":"Plan progress: when planId is set, report progress with `kynver plan progress --plan <planId> --row <rowKey> --role implementer --status in_progress|running|partial|blocked`. Do not mark rows done from the worker CLI.","worker.prompt.progress.full":["Structured plan progress (required when planId is set):","- Report checkpoints with `kynver plan progress --plan <planId> --row <rowKey> --role implementer --status in_progress|running|partial|blocked`.","- When a slice is finished, emit `partial` with evidence (`--evidence pr:<url>`, `--evidence path:<file>`, or `--evidence command:<cmd>`).","- Do not propose or confirm row `done` from the worker CLI."].join(`
 `),"worker.prompt.merge_gate.compact":"Verification cost control: prefer local verification before requesting CI runs; do not push empty commits to re-trigger CI; record verification evidence on the PR.","worker.prompt.merge_gate.full":["Verification cost control:","- Prefer local verification of touched paths before requesting any CI run.","- Do not push empty commits to re-trigger CI.","- Record verification evidence on the PR before requesting review."].join(`
 `),"worker.prompt.plan_artifacts.compact":"Plan artifacts: when authoring or revising plan documents, open a GitHub PR early and iterate from that PR branch; do not leave the canonical plan only in a local worktree.","worker.prompt.plan_artifacts.full":["Plan artifacts (when authoring or revising plan documents):","- Create a feature branch and open a GitHub PR (draft OK) before substantial drafting; commit and push the plan file.","- Iterate on that PR branch and link the PR URL on the related task and progress evidence."].join(`
-`)},qS={"harness.maxTaskAttempts":4,"harness.dispatchCooldownMs":5e3,"daemon.idleIntervalMs":5*6e4,"daemon.maxIdleStreak":10},ot={version:Bm,generatedAt:"1970-01-01T00:00:00.000Z",personas:YS,instructions:JS,policyThresholds:qS};var on=ot,Hm="embedded";function zS(){return on}function Ir(){return on.version}function pr(){return Hm}function ql(e,r){on=e,Hm=r}function sn(e){let r=on.instructions[e];if(typeof r=="string"&&r.trim())return r;let t=ot.instructions[e];return typeof t=="string"?t:""}function st(e,r){let t=on.policyThresholds[e];if(typeof t=="number"&&Number.isFinite(t))return t;let n=ot.policyThresholds[e];return typeof n=="number"&&Number.isFinite(n)?n:r}function ri(e){if(!e)return null;let r=e.trim().toLowerCase();return on.personas.find(t=>t.slug===r)??null}var XS=["implementation","review","landing"],QS=["plan_author","implementer","report_reviewer","deep_reviewer","runtime_verifier","system"];function ZS(e){return XS.includes(e)}function eC(e){return QS.includes(e)}function Fm(e){return{slug:e.slug,displayName:e.displayName,description:e.description,dispatchLane:e.dispatchLane===null||ZS(e.dispatchLane)?e.dispatchLane:null,defaultRoleLane:eC(e.defaultRoleLane)?e.defaultRoleLane:"implementer"}}var ti=ot.personas.map(Fm),Km=new Map(ti.map(e=>[e.slug,e]));function zl(e){if(!e)return null;let r=e.trim().toLowerCase(),t=Km.get(r)??null,n=ri(r);if(!n)return t;let o=Fm(n);return t?{...o,dispatchLane:t.dispatchLane,defaultRoleLane:t.defaultRoleLane}:o}function $m(e){return zl(e)?.dispatchLane??null}function ni(e){return zl(e)?.defaultRoleLane??null}function rC(e){if(!e)return!1;let r=e.trim().toLowerCase();return Km.has(r)||ri(r)!==null}function Xl(){return ti.filter(e=>e.dispatchLane==="review").map(e=>e.slug)}function tC(){return ti.filter(e=>e.dispatchLane==="landing").map(e=>e.slug)}function jm(e){return(e??"").trim().toLowerCase()}function nC(e){switch(jm(e)){case"implementer":case"repair_implementer":case"plan_author":case"runtime_verifier":return"implementation";case"plan_reviewer":case"report_reviewer":case"deep_reviewer":return"review";default:return null}}function oC(e){let r=jm(e);if(!r)return;if(r==="implementation"||r==="review"||r==="landing"||r==="any")return r;let t=nC(r);if(t)return t;if(r==="implement"||r==="repair"||r==="coding")return"implementation";if(r==="land"||r==="merge")return"landing"}function Vm(e){return oC(e)??"any"}Kt();Xt();T();T();function oi(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Ql(e){return e.toLowerCase()}function sC(e){let r=oi(e,"roleLane");if(r)return r;let t=Ql(oi(e,"executorRef")),n=Ql(oi(e,"title")),o=Ql(oi(e,"personaSlug")),s=`${t} ${n}`;if(s.includes("deep review")||s.includes("security review")||t.includes("deep-reviewer"))return"deep_reviewer";if(s.includes("plan author")||s.includes("plan-author")||n.includes("strategy plan"))return"plan_author";if(s.includes("plan review")||t.includes("plan-reviewer"))return"plan_reviewer";if(s.includes("report review")||s.includes("completion report"))return"report_reviewer";if(s.includes("repair")||n.startsWith("fix ")||t.includes("repair"))return"repair_implementer";if(t.includes("cursor")||t.includes("codex")||t.includes("composer")||n.includes("implement")||n.includes("land:"))return"implementer";let i=ni(o);if(i)return o==="lorentz"&&(s.includes("deep")||s.includes("security"))?"deep_reviewer":i;if(s.includes("review"))return"report_reviewer"}function Gm(e){let r=sC(e);return r?{...e,roleLane:r}:e}I();var Ie="cursor",iC=new Set(["claude","opus","anthropic"]),aC=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function Zl(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function ze(e){if(!e?.trim())return!1;let r=e.trim().toLowerCase();return iC.has(r)?!0:r.includes("claude")||r.includes("opus")}function si(e){if(!e)return!1;let r=e.workerProviderOverride;if(typeof r=="string"&&ze(r))return!0;let t=Zl(e,"executorRef").toLowerCase();if(t==="provider:claude"||t.startsWith("provider:claude:")||t.includes("claude-worker-override")||t.includes("operator-claude"))return!0;let n=Zl(e,"description");if(aC.some(s=>s.test(n)))return!0;let o=Zl(e,"title");return!!/\[use-claude-worker\]/i.test(o)}function lC(e,r){return{provider:Ie,model:rc,rule:`policy:cursor_default${r}`,requestedModel:e}}function ec(e){let{routing:r,task:t}=e,n=e.explicitProvider?.trim().toLowerCase();if(e.explicitProviderIsOperatorOverride&&ze(n))return{...r,provider:"claude",rule:r.rule.startsWith("explicit:")?r.rule:"explicit:operator_provider"};if(si(t)||r.rule==="explicit:cli"&&ze(r.provider)||!ze(r.provider))return r;let o=r.rule&&r.rule!=="default:global"?`:${r.rule.replace(/:/g,"_")}`:"";return lC(r.model,o)}function go(e,r=Ie){let t=e?.trim();return t?ze(t)?Ie:t==="codex"?"codex":t:r}function cC(e){let r=[...new Set(e.map(t=>t.trim().toLowerCase()).filter(Boolean))];return r.includes(Ie)?[...new Set(r.map(t=>ze(t)?Ie:t))]:r.every(t=>ze(t))?[Ie]:r}var Ym={codex:{id:"codex",displayName:"Codex (BYO OAuth / Hermes openai-codex)",costTier:"low",authSources:["oauth_local","api_key_env","subscription_hermes"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!1},cursor:{id:"cursor",displayName:"Cursor / Composer",costTier:"medium",authSources:["oauth_local","api_key_env"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0},claude:{id:"claude",displayName:"Claude Code",costTier:"high",authSources:["oauth_local"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0}};function it(e){return Ym[e]}function tc(){return Object.values(Ym)}import{existsSync as dC}from"node:fs";import{homedir as pC}from"node:os";import zm from"node:path";import{createHash as Jm}from"node:crypto";import{statSync as uC}from"node:fs";import{spawnSync as qm}from"node:child_process";function Xe(e){try{let r=uC(e),t=`${e}|${r.size}|${r.mtimeMs}`;return Jm("sha256").update(t).digest("hex").slice(0,16)}catch{return}}function an(e){return Jm("sha256").update(`env:${e}`).digest("hex").slice(0,16)}function Ne(e,r){for(let t of r){let n=process.env[t]?.trim();if(n)return n}return e}function Qe(e,r,t={}){let n=t.timeoutMs??8e3;try{let o=qm(e,r,{encoding:"utf8",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}});if(o.status===0)return{ok:!0,note:t.okNote??`${e} ${r.join(" ")}: ok`};let s=(o.stderr||o.stdout||"").trim(),i=t.failPrefix??`${e} ${r.join(" ")} failed`;return{ok:!1,note:s?`${i}: ${s.slice(0,200)}`:i}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} probe failed`}}}function ii(e,r,t={}){let n=t.timeoutMs??8e3;try{return qm(e,r,{stdio:"ignore",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}}).status===0?{ok:!0,note:t.okNote??`${e} authenticated`}:{ok:!1,note:t.failNote??`${e} not authenticated`}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} auth probe failed`}}}var mC="codex";function fC(){let e=pC();return[zm.join(e,".codex","auth.json"),zm.join(e,".config","codex","auth.json")]}function nc(e=new Date().toISOString()){let r=Ne(mC,["KYNVER_CODEX_BIN","CODEX_BIN"]);if(process.env.CODEX_API_KEY?.trim())return{providerId:"codex",ready:!0,authSource:"api_key_env",sessionFingerprint:an("CODEX_API_KEY"),checkedAt:e,note:"CODEX_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=fC().find(s=>dC(s)),n=Qe(r,["login","status"],{okNote:"codex login status: authenticated",failPrefix:"codex login status"}),o=!!t&&n.ok;return{providerId:"codex",ready:o,authSource:"oauth_local",sessionFingerprint:t?Xe(t):void 0,checkedAt:e,note:o?"Local Codex OAuth session bound on runner":[n.note,t?void 0:"no ~/.codex/auth.json"].filter(Boolean).join("; ")}}import{existsSync as gC}from"node:fs";import{homedir as hC}from"node:os";import oc from"node:path";function kC(){let e=process.env.HERMES_HOME?.trim(),r=e?oc.resolve(e):oc.join(hC(),".hermes");return oc.join(r,"auth.json")}function ho(e=new Date().toISOString()){let r=Ne("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=Qe(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=kC(),o=gC(n),s=ii(r,["auth","status","openai-codex"],{okNote:"hermes openai-codex: logged in",failNote:"hermes openai-codex: not logged in"}),i=t.ok&&s.ok;return{path:"hermes_openai_codex",ready:i,authSource:i?"subscription_hermes":"none",sessionFingerprint:o?Xe(n):void 0,checkedAt:e,note:i?"Hermes openai-codex subscription session bound (ChatGPT Codex OAuth)":[t.note,s.note,o?void 0:"no ~/.hermes/auth.json"].filter(Boolean).join("; ")}}function Or(e=new Date().toISOString()){let r=nc(e);if(r.ready)return{...r,path:"codex_cli"};let t=ho(e);return t.ready?{providerId:"codex",ready:!0,authSource:t.authSource,sessionFingerprint:t.sessionFingerprint,checkedAt:t.checkedAt,note:t.note,path:"hermes_openai_codex",hermesOpenAiCodex:t}:{providerId:"codex",ready:!1,authSource:"none",checkedAt:e,path:"none",hermesOpenAiCodex:t,note:[r.note,t.note].filter(Boolean).join("; ")||"Codex CLI and Hermes openai-codex unavailable"}}var Xm=["low","medium","high"],Qm={oauth_local:0,subscription_hermes:0,runner_token:1,api_key_env:2,none:3};function sc(e,r){let t=it(e);return r==="privileged"?t.supportsPrivilegedPlatformActions:r==="low"?t.supportsLowRiskOrchestration:!0}function Zm(e,r){let t=it(e.providerId),n=it(r.providerId),o=Xm.indexOf(t.costTier)-Xm.indexOf(n.costTier);if(o!==0)return o;let s=Qm[e.binding.authSource]-Qm[r.binding.authSource];return s!==0?s:e.providerId.localeCompare(r.providerId)}function ai(e){let r=tc().map(a=>({providerId:a.id,binding:e.inventory.bindings[a.id]})).filter(a=>a.binding.ready&&sc(a.providerId,e.riskClass));if(r.length===0)return null;let n=[...r].sort(Zm)[0],o="codex";if(n.providerId===o)return{providerId:n.providerId,binding:n.binding};let s=e.inventory.bindings[o],i;return sc(o,e.riskClass)?s.ready||(i=s.note??`${o} not bound`):i=`${e.riskClass} orchestration requires privileged-capable provider`,{providerId:n.providerId,binding:n.binding,escalatedFrom:o,escalatedReason:i}}import{existsSync as yC}from"node:fs";import{homedir as RC}from"node:os";import vC from"node:path";var bC="claude";function SC(){let e=RC();return[vC.join(e,".claude",".credentials.json")]}function li(e=new Date().toISOString()){let r=Ne(bC,["KYNVER_CLAUDE_BIN","CLAUDE_BIN"]);if(process.env.ANTHROPIC_API_KEY?.trim())return{providerId:"claude",ready:!0,authSource:"api_key_env",sessionFingerprint:an("ANTHROPIC_API_KEY"),checkedAt:e,note:"ANTHROPIC_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=Qe(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=SC().find(i=>yC(i)),o=ii(r,["auth","status"],{okNote:"claude auth status: authenticated",failNote:"claude auth status: not authenticated"}),s=t.ok&&(o.ok||!!n);return{providerId:"claude",ready:s,authSource:"oauth_local",sessionFingerprint:n?Xe(n):void 0,checkedAt:e,note:s?"Local Claude Code OAuth session bound on runner":[t.note,o.note,n?void 0:"no ~/.claude/.credentials.json"].filter(Boolean).join("; ")}}import{existsSync as CC}from"node:fs";import{homedir as wC}from"node:os";import _C from"node:path";var xC="agent";function EC(){let e=wC();return[_C.join(e,".config","cursor","auth.json")]}function ci(e=new Date().toISOString()){let r=Ne(xC,["KYNVER_CURSOR_AGENT_BIN","CURSOR_AGENT_BIN"]);if(process.env.CURSOR_API_KEY?.trim())return{providerId:"cursor",ready:!0,authSource:"api_key_env",sessionFingerprint:an("CURSOR_API_KEY"),checkedAt:e,note:"CURSOR_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=Qe(r,["-v"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=EC().find(s=>CC(s)),o=!!n&&t.ok;return{providerId:"cursor",ready:o,authSource:"oauth_local",sessionFingerprint:n?Xe(n):void 0,checkedAt:e,note:o?"Local Cursor/Composer OAuth session bound on runner":[t.note,n?void 0:"no ~/.config/cursor/auth.json"].filter(Boolean).join("; ")}}import{existsSync as PC,readFileSync as AC}from"node:fs";import{homedir as IC}from"node:os";import ic from"node:path";var OC=["OPENAI_API_KEY","ANTHROPIC_API_KEY","KYNVER_API_KEY","KYNVER_BASE_URL"];function NC(){let e=process.env.HERMES_HOME?.trim(),r=e?ic.resolve(e):ic.join(IC(),".hermes");return ic.join(r,".env")}function TC(e){try{let r=AC(e,"utf8"),t=[];for(let n of OC)new RegExp(`^${n}=`,"m").test(r)&&t.push(n);return t}catch{return[]}}function ac(e=new Date().toISOString()){let r=Ne("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=Qe(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=NC(),o=PC(n),s=o?TC(n):[],a=s.some(c=>c.endsWith("_API_KEY"))?"api_key_env":o?"oauth_local":"none",l=t.ok&&o;return{adapterId:"hermes",cliAvailable:t.ok,profileBound:o,authSource:a,sessionFingerprint:o?Xe(n):void 0,checkedAt:e,note:l?`Hermes profile bound (${s.length?`keys: ${s.join(", ")}`:"no API keys detected"})`:[t.note,o?void 0:"no ~/.hermes/.env"].filter(Boolean).join("; ")}}function lc(e={}){let r=e.nowIso?.()??new Date().toISOString(),t=Or(r),n={codex:t,cursor:ci(r),claude:li(r)},o=Object.values(n).filter(s=>s.ready).length;return{generatedAt:r,bindings:n,cloudApiCredits:{anthropicApiKey:!!process.env.ANTHROPIC_API_KEY?.trim(),openaiApiKey:!!process.env.OPENAI_API_KEY?.trim(),codexApiKey:!!process.env.CODEX_API_KEY?.trim()},hermes:ac(r),hermesOpenAiCodex:ho(r),codexAdapterPath:t.path,readyCount:o}}function DC(e,r){switch(e){case"codex":return Or(r);case"cursor":return ci(r);case"claude":return li(r)}}var MC=[/\bprivileged\b/i,/\bproduction\s+db\b/i,/\bdb:push\b/i,/\bmigration\b/i,/\bdeploy\b/i,/\bsecrets?\b/i,/\bstripe\b/i,/\[require-approval\]/i,/\[operator-only\]/i],UC=[/\borchestration\b/i,/\bplan[- ]?progress\b/i,/\bstatus\s+sync\b/i,/\bheartbeat\b/i,/\bboard[- ]?drain\b/i,/\bmaintenance\b/i,/\[orchestration:\s*low-risk\]/i];function cc(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function ef(e){let r=cc(e,"executorRef").toLowerCase(),t=cc(e,"title").toLowerCase(),n=cc(e,"description").toLowerCase(),o=`${r}
+`)},oC={"harness.maxTaskAttempts":4,"harness.dispatchCooldownMs":5e3,"daemon.idleIntervalMs":5*6e4,"daemon.maxIdleStreak":10},st={version:Jm,generatedAt:"1970-01-01T00:00:00.000Z",personas:tC,instructions:nC,policyThresholds:oC};var ln=st,qm="embedded";function sC(){return ln}function Nr(){return ln.version}function fr(){return qm}function tc(e,r){ln=e,qm=r}function cn(e){let r=ln.instructions[e];if(typeof r=="string"&&r.trim())return r;let t=st.instructions[e];return typeof t=="string"?t:""}function it(e,r){let t=ln.policyThresholds[e];if(typeof t=="number"&&Number.isFinite(t))return t;let n=st.policyThresholds[e];return typeof n=="number"&&Number.isFinite(n)?n:r}function oi(e){if(!e)return null;let r=e.trim().toLowerCase();return ln.personas.find(t=>t.slug===r)??null}var iC=["implementation","review","landing"],aC=["plan_author","implementer","report_reviewer","deep_reviewer","runtime_verifier","system"];function lC(e){return iC.includes(e)}function cC(e){return aC.includes(e)}function zm(e){return{slug:e.slug,displayName:e.displayName,description:e.description,dispatchLane:e.dispatchLane===null||lC(e.dispatchLane)?e.dispatchLane:null,defaultRoleLane:cC(e.defaultRoleLane)?e.defaultRoleLane:"implementer"}}var si=st.personas.map(zm),Xm=new Map(si.map(e=>[e.slug,e]));function nc(e){if(!e)return null;let r=e.trim().toLowerCase(),t=Xm.get(r)??null,n=oi(r);if(!n)return t;let o=zm(n);return t?{...o,dispatchLane:t.dispatchLane,defaultRoleLane:t.defaultRoleLane}:o}function Qm(e){return nc(e)?.dispatchLane??null}function ii(e){return nc(e)?.defaultRoleLane??null}function uC(e){if(!e)return!1;let r=e.trim().toLowerCase();return Xm.has(r)||oi(r)!==null}function oc(){return si.filter(e=>e.dispatchLane==="review").map(e=>e.slug)}function dC(){return si.filter(e=>e.dispatchLane==="landing").map(e=>e.slug)}function Zm(e){return(e??"").trim().toLowerCase()}function pC(e){switch(Zm(e)){case"implementer":case"repair_implementer":case"plan_author":case"runtime_verifier":return"implementation";case"plan_reviewer":case"report_reviewer":case"deep_reviewer":return"review";default:return null}}function mC(e){let r=Zm(e);if(!r)return;if(r==="implementation"||r==="review"||r==="landing"||r==="any")return r;let t=pC(r);if(t)return t;if(r==="implement"||r==="repair"||r==="coding")return"implementation";if(r==="land"||r==="merge")return"landing"}function ef(e){return mC(e)??"any"}Vt();en();T();T();function ai(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function sc(e){return e.toLowerCase()}function fC(e){let r=ai(e,"roleLane");if(r)return r;let t=sc(ai(e,"executorRef")),n=sc(ai(e,"title")),o=sc(ai(e,"personaSlug")),s=`${t} ${n}`;if(s.includes("deep review")||s.includes("security review")||t.includes("deep-reviewer"))return"deep_reviewer";if(s.includes("plan author")||s.includes("plan-author")||n.includes("strategy plan"))return"plan_author";if(s.includes("plan review")||t.includes("plan-reviewer"))return"plan_reviewer";if(s.includes("report review")||s.includes("completion report"))return"report_reviewer";if(s.includes("repair")||n.startsWith("fix ")||t.includes("repair"))return"repair_implementer";if(t.includes("cursor")||t.includes("codex")||t.includes("composer")||n.includes("implement")||n.includes("land:"))return"implementer";let i=ii(o);if(i)return o==="lorentz"&&(s.includes("deep")||s.includes("security"))?"deep_reviewer":i;if(s.includes("review"))return"report_reviewer"}function rf(e){let r=fC(e);return r?{...e,roleLane:r}:e}I();var Ie="cursor",gC=new Set(["claude","opus","anthropic"]),hC=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function ic(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Xe(e){if(!e?.trim())return!1;let r=e.trim().toLowerCase();return gC.has(r)?!0:r.includes("claude")||r.includes("opus")}function li(e){if(!e)return!1;let r=e.workerProviderOverride;if(typeof r=="string"&&Xe(r))return!0;let t=ic(e,"executorRef").toLowerCase();if(t==="provider:claude"||t.startsWith("provider:claude:")||t.includes("claude-worker-override")||t.includes("operator-claude"))return!0;let n=ic(e,"description");if(hC.some(s=>s.test(n)))return!0;let o=ic(e,"title");return!!/\[use-claude-worker\]/i.test(o)}function kC(e,r){return{provider:Ie,model:lc,rule:`policy:cursor_default${r}`,requestedModel:e}}function ac(e){let{routing:r,task:t}=e,n=e.explicitProvider?.trim().toLowerCase();if(e.explicitProviderIsOperatorOverride&&Xe(n))return{...r,provider:"claude",rule:r.rule.startsWith("explicit:")?r.rule:"explicit:operator_provider"};if(li(t)||r.rule==="explicit:cli"&&Xe(r.provider)||!Xe(r.provider))return r;let o=r.rule&&r.rule!=="default:global"?`:${r.rule.replace(/:/g,"_")}`:"";return kC(r.model,o)}function ko(e,r=Ie){let t=e?.trim();return t?Xe(t)?Ie:t==="codex"?"codex":t:r}function yC(e){let r=[...new Set(e.map(t=>t.trim().toLowerCase()).filter(Boolean))];return r.includes(Ie)?[...new Set(r.map(t=>Xe(t)?Ie:t))]:r.every(t=>Xe(t))?[Ie]:r}var tf={codex:{id:"codex",displayName:"Codex (BYO OAuth / Hermes openai-codex)",costTier:"low",authSources:["oauth_local","api_key_env","subscription_hermes"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!1},cursor:{id:"cursor",displayName:"Cursor / Composer",costTier:"medium",authSources:["oauth_local","api_key_env"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0},claude:{id:"claude",displayName:"Claude Code",costTier:"high",authSources:["oauth_local"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0}};function at(e){return tf[e]}function cc(){return Object.values(tf)}import{existsSync as vC}from"node:fs";import{homedir as bC}from"node:os";import sf from"node:path";import{createHash as nf}from"node:crypto";import{statSync as RC}from"node:fs";import{spawnSync as of}from"node:child_process";function Qe(e){try{let r=RC(e),t=`${e}|${r.size}|${r.mtimeMs}`;return nf("sha256").update(t).digest("hex").slice(0,16)}catch{return}}function un(e){return nf("sha256").update(`env:${e}`).digest("hex").slice(0,16)}function Ne(e,r){for(let t of r){let n=process.env[t]?.trim();if(n)return n}return e}function Ze(e,r,t={}){let n=t.timeoutMs??8e3;try{let o=of(e,r,{encoding:"utf8",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}});if(o.status===0)return{ok:!0,note:t.okNote??`${e} ${r.join(" ")}: ok`};let s=(o.stderr||o.stdout||"").trim(),i=t.failPrefix??`${e} ${r.join(" ")} failed`;return{ok:!1,note:s?`${i}: ${s.slice(0,200)}`:i}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} probe failed`}}}function ci(e,r,t={}){let n=t.timeoutMs??8e3;try{return of(e,r,{stdio:"ignore",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}}).status===0?{ok:!0,note:t.okNote??`${e} authenticated`}:{ok:!1,note:t.failNote??`${e} not authenticated`}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} auth probe failed`}}}var SC="codex";function CC(){let e=bC();return[sf.join(e,".codex","auth.json"),sf.join(e,".config","codex","auth.json")]}function uc(e=new Date().toISOString()){let r=Ne(SC,["KYNVER_CODEX_BIN","CODEX_BIN"]);if(process.env.CODEX_API_KEY?.trim())return{providerId:"codex",ready:!0,authSource:"api_key_env",sessionFingerprint:un("CODEX_API_KEY"),checkedAt:e,note:"CODEX_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=CC().find(s=>vC(s)),n=Ze(r,["login","status"],{okNote:"codex login status: authenticated",failPrefix:"codex login status"}),o=!!t&&n.ok;return{providerId:"codex",ready:o,authSource:"oauth_local",sessionFingerprint:t?Qe(t):void 0,checkedAt:e,note:o?"Local Codex OAuth session bound on runner":[n.note,t?void 0:"no ~/.codex/auth.json"].filter(Boolean).join("; ")}}import{existsSync as wC}from"node:fs";import{homedir as _C}from"node:os";import dc from"node:path";function xC(){let e=process.env.HERMES_HOME?.trim(),r=e?dc.resolve(e):dc.join(_C(),".hermes");return dc.join(r,"auth.json")}function yo(e=new Date().toISOString()){let r=Ne("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=Ze(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=xC(),o=wC(n),s=ci(r,["auth","status","openai-codex"],{okNote:"hermes openai-codex: logged in",failNote:"hermes openai-codex: not logged in"}),i=t.ok&&s.ok;return{path:"hermes_openai_codex",ready:i,authSource:i?"subscription_hermes":"none",sessionFingerprint:o?Qe(n):void 0,checkedAt:e,note:i?"Hermes openai-codex subscription session bound (ChatGPT Codex OAuth)":[t.note,s.note,o?void 0:"no ~/.hermes/auth.json"].filter(Boolean).join("; ")}}function Tr(e=new Date().toISOString()){let r=uc(e);if(r.ready)return{...r,path:"codex_cli"};let t=yo(e);return t.ready?{providerId:"codex",ready:!0,authSource:t.authSource,sessionFingerprint:t.sessionFingerprint,checkedAt:t.checkedAt,note:t.note,path:"hermes_openai_codex",hermesOpenAiCodex:t}:{providerId:"codex",ready:!1,authSource:"none",checkedAt:e,path:"none",hermesOpenAiCodex:t,note:[r.note,t.note].filter(Boolean).join("; ")||"Codex CLI and Hermes openai-codex unavailable"}}var af=["low","medium","high"],lf={oauth_local:0,subscription_hermes:0,runner_token:1,api_key_env:2,none:3};function pc(e,r){let t=at(e);return r==="privileged"?t.supportsPrivilegedPlatformActions:r==="low"?t.supportsLowRiskOrchestration:!0}function cf(e,r){let t=at(e.providerId),n=at(r.providerId),o=af.indexOf(t.costTier)-af.indexOf(n.costTier);if(o!==0)return o;let s=lf[e.binding.authSource]-lf[r.binding.authSource];return s!==0?s:e.providerId.localeCompare(r.providerId)}function ui(e){let r=cc().map(a=>({providerId:a.id,binding:e.inventory.bindings[a.id]})).filter(a=>a.binding.ready&&pc(a.providerId,e.riskClass));if(r.length===0)return null;let n=[...r].sort(cf)[0],o="codex";if(n.providerId===o)return{providerId:n.providerId,binding:n.binding};let s=e.inventory.bindings[o],i;return pc(o,e.riskClass)?s.ready||(i=s.note??`${o} not bound`):i=`${e.riskClass} orchestration requires privileged-capable provider`,{providerId:n.providerId,binding:n.binding,escalatedFrom:o,escalatedReason:i}}import{existsSync as EC}from"node:fs";import{homedir as PC}from"node:os";import AC from"node:path";var IC="claude";function OC(){let e=PC();return[AC.join(e,".claude",".credentials.json")]}function di(e=new Date().toISOString()){let r=Ne(IC,["KYNVER_CLAUDE_BIN","CLAUDE_BIN"]);if(process.env.ANTHROPIC_API_KEY?.trim())return{providerId:"claude",ready:!0,authSource:"api_key_env",sessionFingerprint:un("ANTHROPIC_API_KEY"),checkedAt:e,note:"ANTHROPIC_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=Ze(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=OC().find(i=>EC(i)),o=ci(r,["auth","status"],{okNote:"claude auth status: authenticated",failNote:"claude auth status: not authenticated"}),s=t.ok&&(o.ok||!!n);return{providerId:"claude",ready:s,authSource:"oauth_local",sessionFingerprint:n?Qe(n):void 0,checkedAt:e,note:s?"Local Claude Code OAuth session bound on runner":[t.note,o.note,n?void 0:"no ~/.claude/.credentials.json"].filter(Boolean).join("; ")}}import{existsSync as NC}from"node:fs";import{homedir as TC}from"node:os";import DC from"node:path";var MC="agent";function UC(){let e=TC();return[DC.join(e,".config","cursor","auth.json")]}function pi(e=new Date().toISOString()){let r=Ne(MC,["KYNVER_CURSOR_AGENT_BIN","CURSOR_AGENT_BIN"]);if(process.env.CURSOR_API_KEY?.trim())return{providerId:"cursor",ready:!0,authSource:"api_key_env",sessionFingerprint:un("CURSOR_API_KEY"),checkedAt:e,note:"CURSOR_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=Ze(r,["-v"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=UC().find(s=>NC(s)),o=!!n&&t.ok;return{providerId:"cursor",ready:o,authSource:"oauth_local",sessionFingerprint:n?Qe(n):void 0,checkedAt:e,note:o?"Local Cursor/Composer OAuth session bound on runner":[t.note,n?void 0:"no ~/.config/cursor/auth.json"].filter(Boolean).join("; ")}}import{existsSync as WC,readFileSync as LC}from"node:fs";import{homedir as BC}from"node:os";import mc from"node:path";var HC=["OPENAI_API_KEY","ANTHROPIC_API_KEY","KYNVER_API_KEY","KYNVER_BASE_URL"];function FC(){let e=process.env.HERMES_HOME?.trim(),r=e?mc.resolve(e):mc.join(BC(),".hermes");return mc.join(r,".env")}function KC(e){try{let r=LC(e,"utf8"),t=[];for(let n of HC)new RegExp(`^${n}=`,"m").test(r)&&t.push(n);return t}catch{return[]}}function fc(e=new Date().toISOString()){let r=Ne("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=Ze(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=FC(),o=WC(n),s=o?KC(n):[],a=s.some(c=>c.endsWith("_API_KEY"))?"api_key_env":o?"oauth_local":"none",l=t.ok&&o;return{adapterId:"hermes",cliAvailable:t.ok,profileBound:o,authSource:a,sessionFingerprint:o?Qe(n):void 0,checkedAt:e,note:l?`Hermes profile bound (${s.length?`keys: ${s.join(", ")}`:"no API keys detected"})`:[t.note,o?void 0:"no ~/.hermes/.env"].filter(Boolean).join("; ")}}function gc(e={}){let r=e.nowIso?.()??new Date().toISOString(),t=Tr(r),n={codex:t,cursor:pi(r),claude:di(r)},o=Object.values(n).filter(s=>s.ready).length;return{generatedAt:r,bindings:n,cloudApiCredits:{anthropicApiKey:!!process.env.ANTHROPIC_API_KEY?.trim(),openaiApiKey:!!process.env.OPENAI_API_KEY?.trim(),codexApiKey:!!process.env.CODEX_API_KEY?.trim()},hermes:fc(r),hermesOpenAiCodex:yo(r),codexAdapterPath:t.path,readyCount:o}}function $C(e,r){switch(e){case"codex":return Tr(r);case"cursor":return pi(r);case"claude":return di(r)}}var jC=[/\bprivileged\b/i,/\bproduction\s+db\b/i,/\bdb:push\b/i,/\bmigration\b/i,/\bdeploy\b/i,/\bsecrets?\b/i,/\bstripe\b/i,/\[require-approval\]/i,/\[operator-only\]/i],VC=[/\borchestration\b/i,/\bplan[- ]?progress\b/i,/\bstatus\s+sync\b/i,/\bheartbeat\b/i,/\bboard[- ]?drain\b/i,/\bmaintenance\b/i,/\[orchestration:\s*low-risk\]/i];function hc(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function uf(e){let r=hc(e,"executorRef").toLowerCase(),t=hc(e,"title").toLowerCase(),n=hc(e,"description").toLowerCase(),o=`${r}
 ${t}
-${n}`;return MC.some(s=>s.test(o))?"privileged":r.includes("provider:claude")||r.includes("deep_review")||r.includes("security")||r.includes("landing")||r.includes("review")||t.startsWith("land:")||r.includes("implementer")||r.includes("repair")||t.includes("implement")?"elevated":UC.some(s=>s.test(o))?"low":"elevated"}function WC(e){let r=it(e.provider),t=e.escalatedFrom&&e.escalatedReason?`Escalated from ${e.escalatedFrom} (${e.escalatedReason}); using ${r.displayName} (${r.costTier} tier)`:`${r.displayName} selected for ${e.riskClass} orchestration (${r.costTier} tier, auth=${e.authSource})`;return{provider:e.provider,model:e.model,authSource:e.authSource,costTier:r.costTier,riskClass:e.riskClass,costRationale:t,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason}}function LC(e){let r=e.inventory??lc();return e.codexBinding?{...r,bindings:{...r.bindings,codex:e.codexBinding}}:r}function at(e){let r=WC({provider:e.providerId,model:e.model,authSource:e.binding.authSource,riskClass:e.riskClass,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason});return{provider:e.providerId,model:e.model,rule:r.routingRule,audit:r}}function uc(e){let r=e.task??{},t=ef(r),n=LC({inventory:e.inventory,codexBinding:e.codexBinding??(e.inventory?null:Or())}),o=e.preferLowCost===!1?null:e.explicitProvider?.trim().toLowerCase(),s=e.explicitModel?.trim()||void 0,i=Ie;if(o==="codex"||o==="provider:codex"){let c=n.bindings.codex;if(!c.ready){let u=ai({inventory:n,riskClass:t});return at(u?{providerId:u.providerId,binding:u.binding,riskClass:t,routingRule:"orchestration:explicit_codex_unavailable_cost_aware",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"}:{providerId:i,binding:n.bindings[i],riskClass:t,routingRule:"orchestration:codex_unavailable_escalate_cursor",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"})}return at({providerId:"codex",binding:c,riskClass:t,routingRule:"orchestration:explicit_codex",model:s})}if(o==="cursor"||o==="provider:cursor"){let c=n.bindings.cursor;if(c.ready)return at({providerId:"cursor",binding:c,riskClass:t,routingRule:"orchestration:explicit_cursor",model:s})}if(o==="claude"||o==="provider:claude"){let c=n.bindings.claude;if(c.ready)return at({providerId:"claude",binding:c,riskClass:t,routingRule:"orchestration:explicit_claude",model:s})}let a=ai({inventory:n,riskClass:t});if(a)return at({providerId:a.providerId,binding:a.binding,riskClass:t,routingRule:`orchestration:cost_aware_${a.providerId}`,model:s,escalatedFrom:a.escalatedFrom,escalatedReason:a.escalatedReason});let l=n.bindings.codex;return at({providerId:i,binding:n.bindings[i],riskClass:t,routingRule:l.ready?"orchestration:inventory_empty_default_cursor":"orchestration:codex_unavailable_default_cursor",model:s,...l.ready?{}:{escalatedFrom:"codex",escalatedReason:l.note??"codex oauth not bound"}})}Kr();C();import{closeSync as tf,openSync as nf}from"node:fs";import{spawn as $C}from"node:child_process";var BC=/-(?:thinking(?:-(?:high|medium|low|minimal|max|none))?|high|medium|low|minimal)$/i;function HC(e){return e.replace(BC,"")}var FC=/^(?:gpt-|gpt5|o1|o3|o4|gemini-|grok-|composer|deepseek|llama|mistral|qwen|command-)/i;function dc(e){return/^claude[-_]/i.test(e)||/^(?:opus|sonnet|haiku)\b/i.test(e)}var KC=new Set(["cursor"]);function rf(e){let r=e.trim().toLowerCase();return KC.has(r)?"auto":null}function ui(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let o=HC(t).trim()||r;return FC.test(o)||!dc(o)&&o!==r?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is not a Claude model \u2014 the "claude" provider drives the Claude CLI, which only accepts claude-* model ids (got "${o}"). Pick a Claude model or switch the worker provider.`}:o!==t?{ok:!0,model:o,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${o}" (the Claude CLI rejects reasoning-effort suffixes)`}:{ok:!0,model:o,normalized:!1}}function lt(e,r){let t=(e??"").trim();return t?dc(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "codex". Switch the provider or pick a Codex/OpenAI model.`}:{ok:!0,model:t,normalized:!1}:{ok:!0,model:r,normalized:!1}}function di(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let n=rf(t);return n?{ok:!0,model:n,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${n}" (Cursor provider alias \u2014 use "auto" or a composer id, not "cursor")`}:dc(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "cursor". Switch the provider to "claude" or pick a Cursor model.`}:{ok:!0,model:t,normalized:!1}}var ln="claude-sonnet-4-6",of={name:"claude",defaultModel:ln,preflightModel(e){return ui(e,ln)},start(e){let r=ui(e.model,ln);if(!r.ok)throw new Error(`claude provider model preflight failed: ${r.note}`);let t=r.model,n=nf(e.stdoutPath,"a"),o=nf(e.stderrPath,"a"),s=["ignore",n,o],i=$C("claude",["--model",t,"-p","--verbose","--permission-mode","bypassPermissions","--output-format","stream-json","--include-partial-messages",e.prompt],de({cwd:e.worktreePath,detached:!0,stdio:s,env:We(process.env)}));if(tf(n),tf(o),!i.pid)throw new Error("failed to spawn claude worker process (is the `claude` CLI on PATH?)");return i.unref(),{pid:i.pid,model:t}}};Kr();C();import{closeSync as cf,existsSync as GC,openSync as uf}from"node:fs";import{spawn as df}from"node:child_process";Kr();C();import{closeSync as sf,openSync as af}from"node:fs";import{spawn as jC}from"node:child_process";var pi=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4";function VC(){return We({...process.env,CI:"1",NO_COLOR:"1",HERMES_ACCEPT_HOOKS:process.env.HERMES_ACCEPT_HOOKS??"1"})}function lf(e,r){let t=process.env.KYNVER_HERMES_CODEX_MAX_TURNS?.trim()||"40";return["chat","-q",r,"--provider","openai-codex","-m",e,"-Q","--accept-hooks","--max-turns",t,"--toolsets","hermes-cli"]}var pc={name:"hermes-codex",defaultModel:pi,preflightModel(e){return lt(e,pi)},start(e){let r=lt(e.model,pi);if(!r.ok)throw new Error(`hermes-codex provider model preflight failed: ${r.note}`);let t=r.model,n=af(e.stdoutPath,"a"),o=af(e.stderrPath,"a"),s=["ignore",n,o],i=Ne("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),a=lf(t,e.prompt),l=jC(i,a,de({cwd:e.worktreePath,detached:!0,shell:!1,stdio:s,env:VC()}));if(sf(n),sf(o),!l.pid)throw new Error(`failed to spawn Hermes openai-codex worker (is \`${i}\` on PATH? run \`hermes auth status openai-codex\`)`);return l.unref(),{pid:l.pid,model:t}}};function YC(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4"}var Nr=YC();function JC(){return process.env.KYNVER_CODEX_BIN?.trim()||process.env.CODEX_BIN?.trim()||"codex"}function qC(){return We({...process.env,CI:"1",NO_COLOR:"1"})}function pf(e,r){return["exec","--sandbox","read-only","--ask-for-approval","never","--model",e,r]}function zC(e,r,t){if(!(process.platform!=="win32"&&GC("/usr/bin/script")))return df(e,r,t);let o=[e,...r].map(s=>`'${s.replace(/'/g,"'\\''")}'`).join(" ");return df("script",["-qfc",o,"/dev/null"],t)}var mc={name:"codex",defaultModel:Nr,preflightModel(e){return lt(e,Nr)},start(e){if(Or().path==="hermes_openai_codex")return pc.start(e);let t=lt(e.model,Nr);if(!t.ok)throw new Error(`codex provider model preflight failed: ${t.note}`);let n=t.model,o=uf(e.stdoutPath,"a"),s=uf(e.stderrPath,"a"),i=["ignore",o,s],a=JC(),l=pf(n,e.prompt),c=zC(a,l,de({cwd:e.worktreePath,detached:!0,shell:!1,stdio:i,env:qC()}));if(cf(o),cf(s),!c.pid)throw new Error(`failed to spawn Codex worker (is \`${a}\` on PATH? run \`codex login\` or set CODEX_API_KEY)`);return c.unref(),{pid:c.pid,model:n}}};var XC="claude-sonnet-4-6",rc="composer-2.5";function mi(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function mf(e){return e.toLowerCase()}function gc(e=y()){let r=e.defaultModel?.trim();if(r)return r;let t=process.env.KYNVER_DEFAULT_MODEL?.trim();return t||XC}function fc(e){let r=(e??"").toLowerCase();return!r||r.includes("composer")||r.includes("cursor")||r.includes("codex")||r.startsWith("gpt-")||r.startsWith("gpt5")?"cursor":/^claude[-_]/i.test(r)||/^(?:opus|sonnet|haiku)\b/i.test(r)?"claude":"cursor"}function QC(e,r){let t=e.trim().toLowerCase(),n=r?.trim();return t==="cursor"?{model:rc,provider:"cursor",rule:n&&n!=="cursor"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:t==="claude"||t==="anthropic"?{model:ln,provider:"claude",rule:n&&n!=="claude"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:null}function ff(e,r){return!!(e.includes("deep")&&e.includes("review")||e.includes("security")||e.includes("plan_author")||e.includes("plan-author")||r.includes("deep review")||r.includes("security review")||e.includes("plan")&&!e.includes("review")&&(e.includes("author")||e.includes("strategy")))}function ZC(e){let r=mf(mi(e,"executorRef")),t=mi(e,"title").toLowerCase(),n=mi(e,"priority")||"normal",o=mf(mi(e,"roleLane"));if(r.includes("provider:codex")||r.startsWith("codex:"))return{provider:"codex",model:Nr,rule:"lane:codex_orchestration"};if(r.includes("cursor")||r.includes("composer")||r.includes("copilot")||o==="implementer"||o==="repair_implementer")return{provider:"cursor",rule:"lane:implementation"};if(r.includes("codex"))return{provider:"codex",model:Nr,rule:"lane:codex_orchestration"};if(r.includes("landing")||t.startsWith("land:")||t.includes(" merge"))return{provider:"cursor",rule:"lane:landing"};if(r.includes("review")||/^review[\s:]/.test(t)||o.includes("review"))return ff(r,t)||o==="deep_reviewer"?{provider:"cursor",rule:"lane:deep_review"}:{provider:"cursor",rule:"lane:review"};if(ff(r,t)||o==="plan_author")return{provider:"cursor",rule:"lane:planning"};if(n==="critical")return{provider:"cursor",rule:"priority:critical"};if(n==="high")return{provider:"cursor",rule:"priority:high"};if(n==="low")return{provider:"cursor",rule:"priority:low"};let s=gc();return{model:s,provider:fc(s),rule:"default:global"}}function fi(e){let r;if(e.explicitModel?.trim()){let o=e.explicitModel.trim(),s=QC(o,e.explicitProvider);s?r=s:r={model:o,provider:e.explicitProvider?.trim()||fc(o),rule:"explicit:cli",requestedModel:o}}else if(e.task&&Object.keys(e.task).length>0){let o=ZC(e.task);r={...o,requestedModel:o.model}}else{let o=gc();r={model:o,provider:e.explicitProvider?.trim()||fc(o),rule:"default:global",requestedModel:o}}let t=ec({routing:r,task:e.task,explicitProvider:e.explicitProvider,explicitProviderIsOperatorOverride:e.explicitProviderIsOperatorOverride});if(!e.task||Object.keys(e.task).length===0||t.rule==="explicit:model_provider_alias"||t.rule==="explicit:model_provider_alias_overrode_provider"||t.rule==="explicit:cli"||ze(t.provider)&&(e.explicitProviderIsOperatorOverride||si(e.task)))return t;let n=uc({task:e.task,explicitProvider:e.explicitProvider??t.provider,explicitModel:t.model});return{provider:n.provider,model:n.provider==="codex"?n.model??t.model??Nr:t.model,rule:n.rule,requestedModel:t.requestedModel,orchestrationAudit:n.audit}}function gf(e,r,t){return e||r||t||gc()||ln}function hf(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function kf(){return{maxTaskAttempts:hf(process.env.KYNVER_MAX_TASK_ATTEMPTS,Math.floor(st("harness.maxTaskAttempts",4))),dispatchCooldownMs:hf(process.env.KYNVER_DISPATCH_COOLDOWN_MS,Math.floor(st("harness.dispatchCooldownMs",5e3)))}}I();import nw from"node:path";T();z();C();var hc="kynver-harness:",yf="@runner:";function kc(e){return e?.trim()?e.trim():null}function ew(e){let r=kc(e);if(!r?.startsWith(hc))return null;let t=r.slice(hc.length),n=t.indexOf(yf);return n>=0?t.slice(0,n).trim()||null:t.trim()||null}function yc(e,r){let t=e.trim(),n=r.trim();return`${hc}${t}${yf}${n}`}function Rc(e,r){let t=kc(r);return t?ew(e)===t:!1}function gi(e){let r=kc(e.workerLeaseOwner);return r&&Rc(r,e.runId)?r:yc(e.runId,e.runnerId)}import Rf from"node:os";Oe();Oe();import rw from"node:os";function tw(e=process.env){return Ae(e).boxKind}function ko(e,r){let t=(r??rw.hostname()).trim().toLowerCase().replace(/\s+/g,"-")||"unknown-host";return`${e}:${t}`}function Tr(e){return e?.trim()?e.trim():null}function Ze(e={}){let r=e.env??process.env;return{runnerId:Tr(r.KYNVER_RUNTIME_ID)??Tr(r.OPENCLAW_RUNTIME_ID)??Tr(r.HOSTNAME)??Rf.hostname(),hostname:Tr(r.HOSTNAME)??Rf.hostname(),profile:Tr(r.KYNVER_RUNNER_PROFILE)??Tr(r.OPENCLAW_RUNNER_PROFILE),harnessRepo:Tr(r.KYNVER_HARNESS_REPO)??Tr(r.KYNVER_DEFAULT_REPO),runId:e.runId??null,instructionBundleVersion:Ir()}}I();async function cn(e){let r=new Map,t=e.agentOsId?.trim();if(!t||e.taskIds.length===0)return r;let n=V(e.baseUrl);try{let o=await J(e.secret,t,{baseUrl:n}),s=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/harness/monitor/task-leases`,i=await re(s,o,{taskIds:[...new Set(e.taskIds)]},{agentOsId:t,baseUrl:n});if(!i.ok||!i.response||typeof i.response!="object")return r;let a=i.response.tasks;if(!Array.isArray(a))return r;for(let l of a)l?.taskId&&r.set(l.taskId,l)}catch{}return r}T();async function hi(e){let r=e.worker.leaseOwner?.trim()??null,t=e.worker.leaseToken?.trim()??null;if(t)return{leaseOwner:r,leaseToken:t};let n=e.worker.taskId?.trim();if(!n)return{leaseOwner:r,leaseToken:null};let s=(await cn({agentOsId:e.agentOsId,taskIds:[n],baseUrl:e.baseUrl,secret:e.secret})).get(n),i=s?.leaseOwner?.trim()??null,a=s?.leaseToken?.trim()??null;if(!a)return{leaseOwner:r??i,leaseToken:null};let l=r??i;return(!e.worker.leaseToken||e.worker.leaseToken!==a)&&K(e.worker.runId,{...e.worker,...l?{leaseOwner:l}:{},leaseToken:a}),{leaseOwner:l,leaseToken:a}}function vf(e,r){return w(nw.join(x(e),"workers",b(r),"worker.json"),void 0)}async function ki(e,r){let t=L(e),n=String(r.agentOsId||"");if(!n)return{renewed:[],failed:[],skipped:[]};let o=V(r.baseUrl?String(r.baseUrl):void 0),s=await J(r.secret?String(r.secret):void 0,n,{baseUrl:o}),i=Number(r.leaseMs)>0?Math.floor(Number(r.leaseMs)):yi,a=Ze({runId:e}).runnerId,l=[],c=[],u=[];for(let d of Object.keys(t.workers||{})){let f=vf(e,d);if(!f?.taskId||!f.agentOsId){u.push(d);continue}if(!H(f.pid)){u.push(d);continue}if(D(f).status==="done"){u.push(d);continue}let m=gi({runId:e,workerLeaseOwner:f.leaseOwner??null,runnerId:a}),h=await hi({worker:f,agentOsId:n,baseUrl:o,secret:s}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(f.taskId)}/renew-lease`,g=await re(k,s,{leaseOwner:h.leaseOwner??m,leaseDurationMs:i,...h.leaseToken?{leaseToken:h.leaseToken}:{}},{agentOsId:n,baseUrl:o});if(g.ok){l.push(d);continue}let R=g.response&&typeof g.response=="object"&&"reason"in g.response?String(g.response.reason??`http ${g.status}`):`http ${g.status}`;c.push({worker:d,reason:R})}return{renewed:l,failed:c,skipped:u}}function bf(e,r){let t=L(e);for(let n of Object.keys(t.workers||{})){let o=vf(e,n);if(!(!o||o.taskId!==r||!H(o.pid)||D(o).status==="done"))return!0}return!1}Pe();T();T();import{existsSync as S_,mkdirSync as C_}from"node:fs";import un from"node:path";var ow=/<!--\s*harness-contract:\s*(\{[\s\S]*?\})\s*-->/i,sw="next-action-fix:";function Ri(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Sf(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:Ri(e)}function iw(e){let r=(e.title??"").trim().toLowerCase();if(r.startsWith("fix:")||r.startsWith("repair:"))return!0;let t=(e.executorRef??"").toLowerCase();return!!(t.startsWith(sw)||t.includes("repair")||t.includes("unblock"))}function aw(e){let r={repairEnforceOriginalPr:!1,targetPrUrl:null,targetPrBranch:null};if(!e)return r;let t=e.match(ow);if(!t?.[1])return r;try{let n=JSON.parse(t[1]),o=Ri(String(n.targetPrUrl??n.target_pr_url??"")),s=Ri(String(n.targetPrBranch??n.target_pr_branch??""));return{repairEnforceOriginalPr:n.repairEnforceOriginalPr===!0||n.repair_enforce_original_pr===!0||!!o,targetPrUrl:o?Sf(o):null,targetPrBranch:s}}catch{return r}}function Cf(e){if(!iw(e))return null;let r=aw(e.description),t=e.prUrl?Sf(e.prUrl):null,n=r.targetPrUrl??t;return n?{targetPrUrl:n,targetPrBranch:r.targetPrBranch??Ri(e.branch)}:null}function wf(e){return["Repair target PR policy:","- Work on the existing target PR branch \u2014 do not open a duplicate repair PR by default.",`- Canonical target PR: ${e.targetPrUrl}`,...e.targetPrBranch?[`- Canonical target branch: \`${e.targetPrBranch}\` (checkout is already on this branch).`]:[],`- Reconcile ${e.targetPrUrl} in structured finalResult.targetPrReconciliation.`,"- Only supersede the original when the branch is inaccessible: set supersedesOriginalTargetPr: true with reason and close/comment on the original PR."]}function vc(e){let r=e.ownedPaths.length?`Owned paths: ${e.ownedPaths.join(", ")}. Do not edit outside these paths without stopping and reporting why.`:"Owned paths: unrestricted for this worker, but keep edits tightly scoped.",t=!!e.model?.toLowerCase().includes("haiku"),n=t?"compact":"full",o=t?e.planId?`Active planId: ${e.planId}`:"No planId on this worker.":e.planId?`Active planId: ${e.planId}${e.taskId?` \xB7 taskId: ${e.taskId}`:""}`:"No planId on this worker \u2014 still emit progress when you touch plan-scoped work.",s=[...sn(`worker.prompt.progress.${n}`).split(`
-`),o],i=sn(`worker.prompt.merge_gate.${n}`).split(`
-`),a=sn(`worker.prompt.plan_artifacts.${n}`).split(`
-`);return["You are running under the Kynver AgentOS runtime.","Immediately state your plan before editing.",r,`Worktree: ${e.worktreePath}`,`Progress heartbeat file: ${e.heartbeatPath}`,"After each major step, append one JSON line to the heartbeat file with fields: ts, phase, summary, changedFiles, blocker.","Before exiting, append a terminal heartbeat with phase `complete` and a structured finalResult object; if you cannot complete, append blocker plus the recovery next action instead of exiting silently.","Final response must include files changed, verification commands, and unresolved risks.",...sn("worker.prompt.core_rules").split(`
-`),"",...s,"",...i,"",...a,"",...e.contextEnvelopeMarkdown?.trim()?[e.contextEnvelopeMarkdown.trim(),""]:[],...e.personaMarkdown?.trim()?[e.personaMarkdown.trim(),""]:[],...e.instructionPolicyMarkdown?.trim()?["Operating rules (from AgentOS memory policy):",e.instructionPolicyMarkdown.trim(),""]:[],...e.memoryQualityMarkdown?.trim()?[e.memoryQualityMarkdown.trim(),""]:[],...e.repairTargetPrUrl?[...wf({targetPrUrl:e.repairTargetPrUrl,targetPrBranch:e.repairTargetBranch??null}),""]:[],"Task:",e.task].join(`
-`)}C();I();C();Kr();import{closeSync as Sc,existsSync as xf,mkdirSync as pw,openSync as Cc,statSync as mw,unlinkSync as _f}from"node:fs";import{spawn as fw}from"node:child_process";import gw from"node:os";import er from"node:path";import{existsSync as yo,readdirSync as lw}from"node:fs";import ct from"node:path";var cw=/^\d{4}\.\d{1,2}\.\d{1,2}-[a-f0-9]+$/i;function uw(e){let t=e.split("-")[0].split(".");if(t.length!==3)return null;let[n,o,s]=t;return!n||!o||!s?null:+`${n}${o.padStart(2,"0")}${s.padStart(2,"0")}`}function dw(e){let r=ct.join(e,"versions");if(!yo(r))return null;let t=null,n=-1;for(let o of lw(r,{withFileTypes:!0})){if(!o.isDirectory()||!cw.test(o.name))continue;let s=uw(o.name);s==null||s<=n||(n=s,t=ct.join(r,o.name))}return t}function vi(e){let r=e?.trim()||ct.join(process.env.LOCALAPPDATA||"","cursor-agent"),t=ct.join(r,"node.exe"),n=ct.join(r,"index.js");if(yo(t)&&yo(n))return{nodeExe:t,indexJs:n,versionDir:r};let o=dw(r);if(!o)return null;let s=ct.join(o,"node.exe"),i=ct.join(o,"index.js");return!yo(s)||!yo(i)?null:{nodeExe:s,indexJs:i,versionDir:o}}var bc="composer-2.5",hw=15e3,kw=6e4,yw=3e4;function Rw(e,r,t){return{executable:e,prefixArgs:[r],shell:!1,detached:!0,bundledVersionDir:t}}function vw(e){if(process.platform==="win32"){let r=/\.(cmd|bat)$/i.test(e),t=/node\.exe$/i.test(e)&&xf(er.join(er.dirname(e),"index.js"));if(r||t||e==="agent"){let o=r?vi(er.dirname(e)):t?{nodeExe:e,indexJs:er.join(er.dirname(e),"index.js"),versionDir:er.dirname(e)}:vi();if(o)return Rw(o.nodeExe,o.indexJs,o.versionDir);throw new Error("Cursor Agent on Windows has no headless bundled node.exe under %LOCALAPPDATA%\\cursor-agent\\versions\\\u2026. Run `agent login` / update Cursor Agent CLI, use `--provider claude`, or set KYNVER_CURSOR_AGENT_ROOT to the cursor-agent folder.")}}return{executable:e,prefixArgs:[],shell:!1,detached:!0}}function bw(){let e=process.env.KYNVER_CURSOR_AGENT_BIN?.trim()||process.env.CURSOR_AGENT_BIN?.trim();if(e)return e;if(process.platform==="win32"){let r=vi(process.env.KYNVER_CURSOR_AGENT_ROOT?.trim()||void 0);if(r)return r.nodeExe;let t=er.join(process.env.LOCALAPPDATA||"","cursor-agent","agent.cmd");if(xf(t))return t}return"agent"}function Sw(e,r){return We({...process.env,CI:"1",NO_COLOR:"1",...r.bundledVersionDir?{CURSOR_INVOKED_AS:er.basename(e)||"agent.cmd"}:{}})}function Ef(e){e<=0||Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function wc(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?Math.floor(n):r}function Cw(){let e=process.env.KYNVER_CURSOR_START_LOCK_DIR?.trim()||er.join(gw.homedir(),".kynver","locks");return pw(e,{recursive:!0}),er.join(e,"cursor-agent-start.lock")}function ww(){if(process.env.KYNVER_CURSOR_START_LOCK==="0")return()=>{};let e=Cw(),r=wc("KYNVER_CURSOR_START_LOCK_TIMEOUT_MS",kw),t=wc("KYNVER_CURSOR_START_LOCK_STALE_MS",yw),n=Date.now();for(;;)try{let o=Cc(e,"wx");return Sc(o),()=>{try{_f(e)}catch{}}}catch(o){if(o.code!=="EEXIST")throw o;try{if(Date.now()-mw(e).mtimeMs>t){_f(e);continue}}catch{continue}if(Date.now()-n>r)throw new Error(`timed out waiting for Cursor agent start lock: ${e}`);Ef(250)}}var Pf={name:"cursor",defaultModel:bc,preflightModel(e){return di(e,bc)},start(e){let r=di(e.model,bc);if(!r.ok)throw new Error(`cursor provider model preflight failed: ${r.note}`);let t=r.model,n=Cc(e.stdoutPath,"a"),o=Cc(e.stderrPath,"a"),s=["ignore",n,o],i=bw(),a=vw(i),l=ww(),c;try{c=fw(a.executable,[...a.prefixArgs,"-p","--force","--trust","--workspace",e.worktreePath,"--output-format","stream-json","--stream-partial-output","--model",t,e.prompt],de({cwd:e.worktreePath,detached:a.detached,shell:a.shell,stdio:s,env:Sw(i,a)})),Ef(wc("KYNVER_CURSOR_START_LOCK_HOLD_MS",hw))}finally{l(),Sc(n),Sc(o)}if(!c.pid)throw new Error(`failed to spawn Cursor agent worker (is \`${i}\` on PATH? run \`agent login\` or set CURSOR_API_KEY)`);return c.unref(),{pid:c.pid,model:t}}};var bi={claude:of,codex:mc,cursor:Pf},Af=null;function If(e){if(Af)return Af;let r=e?.trim();if(r){let o=bi[r];if(!o)throw new Error(`unknown worker provider "${r}" \u2014 supported: ${Object.keys(bi).join(", ")}`);return o}let t=go(y().workerProvider),n=bi[t];if(!n)throw new Error(`unknown worker provider "${t}" \u2014 supported: ${Object.keys(bi).join(", ")}`);return n}C();import{spawn as p_}from"node:child_process";import{existsSync as m_,openSync as f_,closeSync as pg}from"node:fs";import mg from"node:path";import{fileURLToPath as g_}from"node:url";T();function Si(e){return!!e.completionReportedAt?.trim()}function _c(e,r,t){e.completionReportedAt=t.completionReportedAt,e.completionOutcome=t.completionOutcome,t.completionResponse!==void 0&&(e.completionResponse=t.completionResponse),K(r,e)}function _w(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function xc(e){return!!(_w(e.completionBlocker)||e.completionOutcome==="rejected")}function ut(e){return Si(e)&&!xc(e)}T();z();I();import wo from"node:path";function Ec(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function Ro(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}var xw=new Set(["review_scheduled","review_already_scheduled","skipped_terminal_task","closed","dispatched","dispatch_already_done"]);function Of(e){let r=Ec(e);if(!r)return{routeOutcome:null,taskAdvanced:!1,detail:null};let t=Ro(r.outcome),n=Ro(r.detail)??Ro(r.error),o=Ec(r.task),s=Ec(r.closedTask),i=o?Ro(o.status):null,a=s?Ro(s.status):null,l=t!==null&&xw.has(t)||i==="awaiting_review"||i==="done"||a==="done";return{routeOutcome:t,taskAdvanced:l,detail:n}}function Nf(e){return e.taskAdvanced}T();zn();var Ew="expert-lane-pr-review:",Pw="plan-review-task",Aw="scheduledjob:";function Tf(e){if(!e)return null;let r=e.trim().toLowerCase();return r.length?r:null}function Df(e){let r=(e.executorRef??"").toLowerCase();if(r.startsWith(Ew)||r===Pw||r.startsWith("daemon-review:"))return!0;if(r.startsWith(Aw)&&e.parentTaskId){let n=Tf(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}let t=(e.title??"").toLowerCase();if(t.includes("expert pr review"))return!0;if(e.parentTaskId&&(t.startsWith("review:")||t.includes("review required")||t.includes("runtime review"))){let n=Tf(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}return!1}var Mf=/^(lane:)?(review|deep_review|planning|landing)(:|$)/i,Iw=new Set(Xl()),Ow=/no commits between/i;function Uf(e){return!!(e&&Ow.test(e))}function ye(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Wf(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:ye(e.head)}function Pc(e){if(e==null)return null;let t=(typeof e=="string"?e:typeof e=="object"&&e!==null&&"summary"in e?String(e.summary??""):JSON.stringify(e)).match(/https?:\/\/[^\s)>"]+\/(?:pull|pulls|merge_requests|pull-requests)\/\d+/i);return t?ye(t[0]):null}function Nw(e,r,t){let n=r.trim();if(!n)return null;let o=t.git(e,["rev-list","--count",`${n}..HEAD`]);if(o.status!==0)return null;let s=Number.parseInt(o.stdout.trim(),10);return Number.isFinite(s)?s:null}function Tw(e,r){if(r.changedFiles.length>0)return!1;let t=ye(e.personaSlug)?.toLowerCase();if(t&&Iw.has(t))return!0;let n=ye(e.routingRule)??"";return!!(n&&Mf.test(n))}function Dw(e,r){if(e.changedFiles.length>0)return!0;let t=ye(r?.baseRef);if(t&&r?.exec&&r.worktreePath){let n=Nw(r.worktreePath,t,r.exec);if(n===0)return!1;if(n!==null&&n>0)return!0}return!!(ye(e.headCommit)||Wf(e.gitAncestry))}function Ac(e){if(!e.dispatched)return{required:!1,reason:"not_dispatched"};if(Df({title:e.taskTitle??void 0,personaSlug:e.personaSlug,parentTaskId:e.parentTaskId,executorRef:e.executorRef}))return{required:!1,reason:"expert_review_task"};let r=ye(e.routingRule)??"";if(r&&Mf.test(r))return{required:!1,reason:"review_lane"};let t=e.worker??{personaSlug:e.personaSlug,routingRule:e.routingRule};if(Tw(t,e.snapshot))return{required:!1,reason:"review_artifact"};if(ye(e.patchPath)||ye(e.artifactBundlePath))return{required:!1,reason:"patch_or_bundle"};if(ye(e.repairTargetPrUrl))return{required:!1,reason:"repair_target_pr"};if(ye(e.prUrl)??ye(e.taskPrUrl)??ye(e.snapshot.prUrl))return{required:!1,reason:"already_has_pr"};let s=e.exec&&e.baseRef?{baseRef:e.baseRef,exec:e.exec,worktreePath:e.snapshot.worktreePath}:void 0;return Dw(e.snapshot,s)?{required:!0,snapshot:e.snapshot}:{required:!1,reason:"no_work_product"}}function Lf(e,r){return{changedFiles:e.changedFiles,branch:e.branch,worktreePath:e.worktreePath,gitAncestry:e.gitAncestry,finalResult:e.finalResult,headCommit:ye(r?.headCommit)??Wf(e.gitAncestry),prUrl:ye(r?.prUrl)??null}}import{spawnSync as Mw}from"node:child_process";function Hf(e){let r=e.trim();if(!r)return null;let t=r.match(/^git@github\.com:([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(t)return Bf(t[1]);let n=r.match(/^ssh:\/\/git@github\.com\/([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(n)return Bf(n[1]);try{let o=new URL(r.includes("://")?r:`https://${r}`);if(o.hostname.toLowerCase()!=="github.com")return null;let s=o.pathname.replace(/^\/+|\/+$/g,"").split("/");if(s.length<2)return null;let[i,a]=s;return!i||!a?null:`${i}/${a.replace(/\.git$/i,"")}`}catch{return null}}function Bf(e){let r=e.split("/").filter(Boolean);if(r.length<2)return null;let t=r[0],n=r[1].replace(/\.git$/i,"");return t&&n?`${t}/${n}`:null}Pe();function Uw(e,r,t){try{let n=Mw(e,t,{cwd:r,encoding:"utf8"});return{status:n.status,stdout:(n.stdout||"").trim(),stderr:(n.stderr||"").trim(),error:n.error?n.error.message:null}}catch(n){return{status:null,stdout:"",stderr:"",error:n.message}}}var wi={git:(e,r)=>ne(e,r),gh:(e,r)=>Uw("gh",e,r)};function Ww(e){return e.split(`
-`).map(r=>r.trim()).find(Boolean)??""}function Ff(e,r){let t=r.git(e,["remote","get-url","origin"]);return t.status!==0?null:Hf(t.stdout)}function vo(e,r){let t=r.git(e,["rev-parse","HEAD"]);return t.status!==0?null:t.stdout.trim()||null}function Ci(e,r,t,n){let o=n.gh(e,["pr","list","--repo",r,"--head",t,"--state","open","--json","url","--limit","1"]);if(o.status!==0)return null;try{return JSON.parse(o.stdout)[0]?.url?.trim()||null}catch{return null}}function _i(e){let{worktreePath:r,branch:t,commitMessage:n,hasDirtyFiles:o,exec:s}=e;if(o){let l=s.git(r,["add","-A"]);if(l.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:l.stderr||l.stdout||l.error||"git add failed"};let c=s.git(r,["commit","-m",n]);if(c.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:c.stderr||c.stdout||c.error||"git commit failed"}}let i=s.git(r,["push","-u","origin",t]);if(i.status!==0)return{ok:!1,committed:o,pushed:!1,detail:i.stderr||i.stdout||i.error||"git push failed"};let a=vo(r,s)??void 0;return{ok:!0,committed:o,pushed:!0,headCommit:a}}function Kf(e){let r=Ci(e.worktreePath,e.repo,e.branch,e.exec);if(r)return{ok:!0,prUrl:r,created:!1};let t=e.exec.gh(e.worktreePath,["pr","create","--repo",e.repo,"--base",e.base,"--head",e.branch,"--title",e.title,"--body",e.body,"--draft"]);if(t.status!==0)return{ok:!1,detail:t.stderr||t.stdout||t.error||"gh pr create failed"};let n=Lw(t.stdout)??Ci(e.worktreePath,e.repo,e.branch,e.exec);return n?{ok:!0,prUrl:n,created:!0}:{ok:!1,detail:"gh pr create succeeded but no PR URL was parsed"}}function Lw(e){let t=Ww(e).match(/https?:\/\/[^\s]+\/pull\/\d+/i);return t?t[0]:null}function $f(e,r,t,n){let o=t.trim();if(!o||!r.trim())return null;let s=n.gh(e,["api",`repos/${r}/commits/${o}/pulls`]);if(s.status!==0||!s.stdout)return null;try{let l=JSON.parse(s.stdout).filter(c=>c.merged_at&&c.html_url?.trim()).sort((c,u)=>(typeof c.number=="number"?c.number:Number.MAX_SAFE_INTEGER)-(typeof u.number=="number"?u.number:Number.MAX_SAFE_INTEGER))[0];return l?.html_url?.trim()?{prUrl:l.html_url.trim(),number:typeof l.number=="number"?l.number:null}:null}catch{return null}}function Bw(e){return e.gh(process.cwd(),["--version"]).status===0}function Hw(e,r){return`AgentOS harness: ${e} (${r})`}function Fw(e,r,t){return["Automated PR-ready handoff from the Kynver harness runtime.","",e?`AgentOS task: \`${e}\``:"",`Harness worker: \`${r}\` \xB7 run \`${t}\``,"","Opened by orchestrator completion enforcement so production review receives a reviewable artifact."].filter(Boolean).join(`
-`)}function Ic(e){if(e.snapshot.changedFiles.length===0)return{ok:!0,prUrl:e.prUrl,headCommit:e.snapshot.headCommit??vo(e.snapshot.worktreePath,e.exec)??void 0};let r=_i({worktreePath:e.snapshot.worktreePath,branch:e.snapshot.branch,commitMessage:e.commitMessage,hasDirtyFiles:!0,exec:e.exec});return r.ok?{ok:!0,prUrl:e.prUrl,headCommit:r.headCommit??e.snapshot.headCommit??void 0,committed:r.committed,pushed:r.pushed}:{ok:!1,reason:`PR-ready handoff blocked: ${r.detail??"git commit/push failed"}`,nextAction:"Commit and push the dirty worker changes to the existing PR branch, then rerun `kynver worker complete`."}}function xi(e,r=wi){let t=e.prUrlHint??Pc(e.status.finalResult)??null,n=Lf(e.status,{prUrl:t,headCommit:null}),o=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main";if(!Ac({dispatched:e.worker.dispatched,routingRule:e.worker.routingRule,personaSlug:e.worker.personaSlug,prUrl:t,taskTitle:e.worker.taskTitle,executorRef:e.worker.executorRef,parentTaskId:e.worker.parentTaskId,taskPrUrl:e.worker.taskPrUrl,repairTargetPrUrl:e.worker.repairTargetPrUrl,baseRef:o,exec:r,worker:e.worker,snapshot:n}).required)return t?Ic({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r}):{ok:!0};if(t)return Ic({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});if(!Bw(r)){let g=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${g?`${g} uncommitted change(s) with no PR URL`:"committed branch with no PR URL"}`,nextAction:"Install and authenticate GitHub CLI (`gh auth login`), then commit, push, and run `gh pr create` (or rerun `kynver worker complete` after the PR exists)."}}let i=Ff(n.worktreePath,r);if(!i)return{ok:!1,reason:"PR-ready handoff blocked: could not resolve github.com origin for the worktree",nextAction:"Ensure `origin` points at GitHub, push the branch, open a PR, and rerun `kynver worker complete`."};let a=e.worker.repairTargetPrUrl?.trim();if(a){let g=!1,R=!1,O=n.headCommit??vo(n.worktreePath,r)??void 0;if(n.changedFiles.length>0){let _=_i({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`fix(harness): repair target PR ${a}`,hasDirtyFiles:!0,exec:r});if(!_.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${_.detail??"git commit/push failed"}`,nextAction:"Commit and push to the target PR branch, then rerun `kynver worker complete`."};g=_.committed,R=_.pushed,O=_.headCommit??O}else{let _=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(_.status!==0&&!/already up to date/i.test(_.stderr||_.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${_.stderr||_.stdout||"git push failed"}`,nextAction:"Push the target branch to origin, then rerun `kynver worker complete`."};R=_.status===0}return{ok:!0,prUrl:a,headCommit:O,committed:g,pushed:R}}let l=Ci(n.worktreePath,i,n.branch,r);if(l)return Ic({snapshot:n,prUrl:l,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});let c=n.changedFiles.length>0,u=!1,d=!1,f=n.headCommit??void 0,p=_i({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`chore(harness): PR-ready handoff for ${e.worker.name}`,hasDirtyFiles:c,exec:r});if(c&&!p.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${p.detail??"git commit/push failed"}`,nextAction:"Commit and push the branch, run `gh pr create`, then rerun `kynver worker complete`."};if(c){if(u=p.committed,d=p.pushed,!p.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${p.detail??"git push failed"}`,nextAction:"Fix git auth or merge conflicts, push the branch, run `gh pr create`, then rerun `kynver worker complete`."}}else{let g=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(g.status!==0&&!/already up to date/i.test(g.stderr||g.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${g.stderr||g.stdout||g.error||"git push failed"}`,nextAction:"Push the branch to origin, run `gh pr create`, then rerun `kynver worker complete`."};d=g.status===0}f=p.headCommit??f??vo(n.worktreePath,r)??void 0;let m=f?$f(n.worktreePath,i,f,r):null;if(m)return{ok:!0,prUrl:m.prUrl,headCommit:f,committed:u,pushed:d,created:!1};let h=e.run.base?.trim()||"main",k=Kf({worktreePath:n.worktreePath,repo:i,branch:n.branch,base:h.replace(/^origin\//,""),title:Hw(e.worker.name,e.worker.runId),body:Fw(e.worker.taskId,e.worker.name,e.worker.runId),exec:r});if(!k.ok||!k.prUrl){if(Uf(k.detail))return{ok:!0,headCommit:f??void 0,committed:u,pushed:d};let g=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${g?`${g} uncommitted change(s) and no PR URL after handoff attempt`:"no PR URL after handoff attempt"}${k.detail?` (${k.detail})`:""}`,nextAction:"Run `gh pr create` on the worker branch (or fix `gh` auth), attach the PR URL to the task, then rerun `kynver worker complete`."}}return{ok:!0,prUrl:k.prUrl,headCommit:f??void 0,committed:u,pushed:d,created:k.created}}z();qn();function Ei(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return n!=="node_modules"&&!n.startsWith("node_modules/")})}function jf(e){let r=e.trim();return r.startsWith("??")?r.slice(2).trim():r.length>3&&/^[ MADRCU?!]{2} /.test(r.slice(0,3))?r.slice(3).trim():r}function Vf(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function Gf(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function Jf(e){let r=Gf(e);if(!r)return[];let t=Gf(r.worktreeHandoff),n=Vf(t?.disposableArtifactsRemoved);return n.length?n:Vf(r.disposableArtifactsRemoved)}function Yf(e){return e.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"")}function qf(e,r){let t=Ei(e);if(t.length===0)return!0;if(r.length===0)return!1;let n=new Set(r.map(o=>Yf(o)));return t.every(o=>{let s=Yf(jf(o));return n.has(s)})}function Pi(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function zf(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function Kw(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function $w(e){let r=zf(e.disposableArtifactsRemoved),t=Jf(e.finalResult);return[...new Set([...r,...t])]}function Xf(e){let r=zf(e.changedFiles),t=Ei(r),n=$w(e),o=t.length===0||qf(r,n);return Pi(e.prUrl)?o?{allowed:!0,state:"pr_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a PR attached; commit or discard before completing`}:Pi(e.headCommit)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) on top of a commit; commit or discard before completing`}:Pi(e.artifactBundlePath)||Pi(e.patchPath)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a patch/bundle handoff; clean the tree before completing`}:o?{allowed:!0,state:"clean",materialDirtyCount:0}:Kw(e.finalResult)?{allowed:!1,state:"dirty_worktree_no_pr",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no commit or PR; commit, open a PR, discard, or remove one-off files via \`kynver worker discard-disposable\` before completing`}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no final result`}}T();z();C();import jw from"node:path";var Vw=new Set(["awaiting_review","blocked","done","needs_input","waiting","scheduled","ready","cancelled","failed"]);function Qf(e){return!!(typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim())}function Gw(e){if(typeof e=="string"){let r=e.trim();return r.length?r:null}if(e&&typeof e=="object"&&!Array.isArray(e)){let r=e,t=r.summary??r.finalSummary??r.message;if(typeof t=="string"&&t.trim())return t.trim();try{return JSON.stringify(e)}catch{return null}}return null}function Yw(e){let r=e.finalResult??null,t=typeof e.lastHeartbeatSummary=="string"?e.lastHeartbeatSummary:Gw(r);return{finalResult:r??t??"completed",summary:t}}function Oc(e,r,t){if(Qf(e)&&e.status==="done"&&e.completionSnapshot!=null)return;let n=new Date().toISOString(),o=Yw(r),s=t?.source?.trim();e.completionReportedAt=n,e.completionSnapshot=o,e.status="done",s&&(e.completionAckSource=s),K(e.runId,e)}function Jw(e){let r=new Map,n=e.response?.tick?.filteredItems;if(!Array.isArray(n))return r;for(let o of n){if(o.kind!=="task"||typeof o.id!="string")continue;let s=typeof o.taskStatus=="string"?o.taskStatus.trim():"";s&&r.set(o.id,s)}return r}function Zf(e,r){let t=Jw(r);if(t.size===0)return[];let n=L(e),o=[];for(let s of Object.keys(n.workers||{})){let i=w(jw.join(x(n.id),"workers",b(s),"worker.json"),void 0);if(!i?.taskId||Qf(i))continue;let a=t.get(i.taskId);if(!a||a==="running"||!Vw.has(a))continue;let l=D(i,{base:n.base,baseCommit:n.baseCommit});Oc(i,l,{source:`board-task-${a}`}),o.push({worker:s,taskId:i.taskId,taskStatus:a})}return o}C();C();import Ai from"node:path";var qw=/^[a-z0-9][a-z0-9._-]{0,127}$/i,zw=/^[a-z0-9][a-z0-9._-]{0,63}$/i,Nc=new Set(["undefined","null"]),eg="usage: kynver worker <action> --run RUN_ID --name WORKER_NAME";function bo(e){let r=e.trim();if(!qw.test(r))throw new Error(`invalid run id: ${e}`);return r}function rg(e){let r=e.trim();if(!zw.test(r))throw new Error(`invalid worker name: ${e}`);return r}function Tc(e){return typeof e=="string"?e.trim():""}function Fe(e){let r=Tc(e.run),t=Tc(e.name);return(!r||Nc.has(r))&&Cr(`missing --run RUN_ID (${eg})`),(!t||Nc.has(t))&&Cr(`missing --name WORKER_NAME (${eg})`),{runId:bo(r),workerName:rg(t)}}function Ii(e){let r=Tc(e.run);return(!r||Nc.has(r))&&Cr("missing --run RUN_ID (usage: kynver run status --run RUN_ID)"),bo(r)}function Dc(e){let r=Ai.resolve(e);if(r.includes(".."))throw new Error("repo path must not contain .. segments");return r}function Xw(e,r){return r.map(t=>{let n=Ai.resolve(e,t),o=Ai.relative(e,n);if(o.startsWith("..")||Ai.isAbsolute(o))throw new Error(`owned path escapes repo: ${t}`);return n})}function Qw(e){return!Number.isFinite(e)||e<=0||e>500?40:Math.floor(e)}async function tg(e,r,t){let n=await fetch(e,{method:"POST",headers:He(r),body:JSON.stringify(t)}),o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,parsed:o}}function Zw(e){if(e&&typeof e=="object"){let r=e.error;if(typeof r=="string"&&r.trim())return r.trim()}}function ng(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function So(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function e_(e){return e.completionBlocker?`blocked:${e.completionBlocker}`:e.completionOutcome?e.completionOutcome:e.completionReportedAt?"completion_acknowledged":e.finished?"worker_finished":"in_progress"}function r_(e){return e.completionBlocker?"Resolve completion blocker, then rerun `kynver worker complete`.":e.completionOutcome==="review_scheduled"||e.completionOutcome==="review_already_scheduled"?"Await review lane and landing decision in Command Center.":e.completionOutcome==="needs_attention"?"Inspect blocker/attention reason in Command Center and dispatch a repair task.":e.finished&&!e.completionReportedAt?"Post completion acknowledgement to AgentOS (`kynver worker complete`).":null}function sg(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function t_(e){return e.prUrl?"pr_handoff":e.headCommit?"commit_handoff":e.changedFiles.length>0?"dirty_worktree":"none"}function Co(e,r){(e.completionBlocker??void 0)!==(r??void 0)&&(r?e.completionBlocker=r:delete e.completionBlocker,K(e.runId,e))}function n_(e){e.completionBlocker&&(delete e.completionBlocker,K(e.runId,e))}function Oi(e){return e?{base:e.base,baseCommit:e.baseCommit}:{}}function o_(e,r){return{...e,...r.prUrl?{prUrl:r.prUrl}:{},...r.headCommit?{headCommit:r.headCommit}:{}}}async function _o(e){let{runId:r,workerName:t}=Fe(e),n=ge(r,t),o=L(n.runId),s=D(n,Oi(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!oe(s))return{ok:!0,skipped:!0,reason:"worker-not-finished"};if(n.localOnly)return{ok:!0,skipped:!0,reason:"local-only-worker"};if(!i)return{ok:!1,reason:"missing agentOsId"};let l=e.force===!0||e.force==="true";if(!l&&ut(n))return{ok:!0,skipped:!0,reason:"completion-already-acknowledged",httpStatus:200};if(!l&&xc(n)&&n_(n),!(e.skipPrHandoff===!0||e.skipPrHandoff==="true")&&n.dispatched&&a){let E=xi({worker:n,run:o,status:s});if(!E.ok)return Co(n,E.reason),{ok:!1,reason:E.reason,nextAction:E.nextAction,completionBlocked:!0};(E.prUrl||E.headCommit)&&(s=D(n,Oi(o)),s=o_(s,E))}let u=s.gitAncestry.headIsAncestorOfBase===!1&&s.gitAncestry.head?s.gitAncestry.head:s.headCommit;if(n.dispatched){let E=Xf({changedFiles:s.changedFiles,finalResult:s.finalResult,prUrl:s.prUrl,headCommit:u,disposableArtifactsRemoved:n.disposableArtifactsRemoved});if(!E.allowed){let U=E.detail??`worktree completion blocked (${E.state})`;return Co(n,U),{ok:!1,reason:U,nextAction:"Clean the worktree (commit, open a PR, or `kynver worker discard-disposable --path <file>`), then rerun `kynver worker complete`.",completionBlocked:!0}}}let d=V(e.baseUrl?String(e.baseUrl):void 0),f=e.secret?String(e.secret):void 0,p=await J(f,i,{baseUrl:d});a&&(await hi({worker:n,agentOsId:i,baseUrl:d,secret:p}),n=ge(r,t));let m=`${d}/api/agent-os/by-id/${encodeURIComponent(i)}/harness/completion`,h={...s};n.disposableArtifactsRemoved?.length&&(h.disposableArtifactsRemoved=n.disposableArtifactsRemoved);let k={source:"kynver-harness",agentOsId:i,runId:n.runId,workerName:n.name,taskId:a,leaseToken:n.leaseToken??null,startedAt:n.startedAt,finishedAt:s.lastActivityAt||new Date().toISOString(),status:n.leaseToken?{...h,leaseToken:n.leaseToken}:h,workerInjection:{instructionPolicyFingerprint:n.instructionPolicyFingerprint??null,instructionPolicyEvidence:n.instructionPolicyEvidence??null,memoryQualityCapture:n.memoryQualityCapture??null,policyAt:n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence=="object"&&"policyAt"in n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence.policyAt=="string"?n.instructionPolicyEvidence.policyAt:null,personaSlug:n.personaSlug??null,personaEvidence:n.personaEvidence??null,contextEnvelopeEvidence:n.contextEnvelopeEvidence??null}},g=await tg(m,p,k);if((g.status===401||g.status===403)&&!f){let E=await Im(i,{baseUrl:d});E&&E!==p&&(p=E,g=await tg(m,p,k))}if(g.ok){let E=Of(g.parsed);if(!Nf(E)){let P=`completion acknowledged but board not advanced: ${E.detail??(E.routeOutcome?`harness completion returned ${E.routeOutcome}`:"harness completion did not advance the linked task")}`;Co(n,P);let B={completionReportedAt:new Date().toISOString(),completionOutcome:"rejected",completionResponse:g.parsed};return _c(n,n.runId,B),{ok:!1,httpStatus:g.status,response:g.parsed,reason:P,completionBlocked:!0}}Co(n,void 0);let U=E.routeOutcome??"acknowledged",Y={completionReportedAt:new Date().toISOString(),completionOutcome:"acknowledged",completionResponse:g.parsed};_c(n,n.runId,Y),Oc(n,s,{source:"harness-completion"});let $=s.prUrl;return{ok:!0,httpStatus:g.status,response:g.parsed,reason:U,...$?{prHandoff:{prUrl:$}}:{}}}let R=g.status===401||g.status===403,O=Zw(g.parsed)??(R?"runner token unauthorized":"non-2xx response"),_=R?`completion replay rejected (${g.status}): ${O}`:`completion replay failed (${g.status}): ${O}`;return Co(n,_),{ok:!1,httpStatus:g.status,response:g.parsed,completionBlocked:!0}}async function Ni(e){try{let{runId:r,workerName:t}=Fe(e),n=ge(r,t),o=L(n.runId),s=D(n,Oi(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!oe(s)){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"worker-not-finished",workerStatus:s.status,alive:s.alive},null,2));return}if(n.localOnly){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"local-only-worker"},null,2));return}i||(console.error("worker complete requires --agent-os-id (or an agentOsId persisted at worker start)"),process.exit(1));let l=await _o(e);console.log(JSON.stringify({worker:n.name,runId:n.runId,...l.skipped?{status:"skipped"}:{},...l.reason?{reason:l.reason}:{},...l.nextAction?{nextAction:l.nextAction}:{},...l.completionBlocked?{completionBlocked:l.completionBlocked}:{},agentOsId:i,taskId:a,httpStatus:l.httpStatus,response:l.response},null,2)),l.ok||process.exit(1)}catch(r){console.error(`worker complete failed: ${r.message}`),process.exit(1)}}function Uc(e){let{runId:r,workerName:t}=Fe(e),n=ge(r,t),o=L(n.runId),s=D(n,Oi(o));ae(wo.join(n.workerDir,"last-status.json"),s),console.log(JSON.stringify(s,null,2))}function s_(e){return{full:`kynver worker list --run ${e} --full`,blocked:`kynver worker list --run ${e} --blocked`,running:`kynver worker list --run ${e} --running`,task:`kynver worker list --run ${e} --task <task-id>`,worker:`kynver worker list --run ${e} --worker <worker>`,runFull:`kynver run status --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`}}function Mc(e){if(typeof e!="string")return;let r=e.trim();return r.length?r:void 0}function i_(e){let r={};(e.blocked===!0||e.blocked==="true")&&(r.blocked=!0),(e.running===!0||e.running==="true")&&(r.running=!0);let t=Mc(e.task??e.taskId);t&&(r.task=t);let n=Mc(e.worker??e.name);n&&(r.worker=n);let o=Mc(e.status);return o&&(r.status=o),r}function a_(e,r){if(r.blocked){let t=typeof e.attention=="string"?e.attention:"",n=typeof e.status=="string"?e.status:"";if(!(t==="blocked"||t==="needs_attention"||t==="stale"||n==="blocked"))return!1}return!(r.running&&!(e.status==="running"&&e.attention!=="blocked"&&e.attention!=="needs_attention")||typeof r.task=="string"&&e.taskId!==r.task||typeof r.worker=="string"&&e.worker!==r.worker||typeof r.status=="string"&&e.status!==r.status)}function ig(e,r){let t=i_(r);if(Object.keys(t).length===0)return e;let n=e.workers.filter(s=>a_(s,t)),o={...e,workerCount:n.length,needsAttention:n.filter(s=>s.attention&&s.attention!=="ok"&&s.attention!=="done").map(s=>s.worker),workers:n,activeFilters:t};return e.summary&&(o.summary={statusCounts:Dr(n,"status"),attentionCounts:Dr(n,"attention"),lifecycleCounts:Dr(n,"lifecycleStage")}),e.controller&&(o.controller=cg(n)),o}function ag(e){let r=Ii(e),t=e.full===!0||e.full==="true",n=ig(t?xo(r):Eo(r),e),o=n.workers;console.log(JSON.stringify({runId:n.runId,status:n.status,projection:t?"full":"compact",workerCount:n.workerCount,...n.activeFilters?{activeFilters:n.activeFilters}:{},...t?{}:{resultContract:{projection:"compact",rawWorkerPayloadsOmitted:!0,deepDetailAvailableVia:["--full","worker status","worker tail","run status --full"]},drilldownCommands:s_(r)},needsAttention:n.needsAttention,..."summary"in n?{summary:n.summary}:{},..."controller"in n?{controller:n.controller}:{},workers:o},null,2))}function lg(e){let{run:r,workerName:t,worker:n}=e,o=D(n,{base:r.base,baseCommit:r.baseCommit}),s=o.gitAncestry.headIsAncestorOfBase===!1&&o.gitAncestry.head?o.gitAncestry.head:void 0,i=zr({alive:o.alive,finalResult:o.finalResult,changedFiles:o.changedFiles,gitAncestry:o.gitAncestry,headCommit:s}),a=n.completionBlocker,l=typeof a=="string"&&a?a:void 0,c=sg(l)?void 0:l,u=c?"blocked":o.status,d=c?"blocked":o.attention.state,f=ng(n.completionResponse),p=ng(f?.task),m=So(f?.outcome),h=So(f?.status),k=Array.isArray(f?.warnings)?f.warnings.filter(U=>typeof U=="string"&&U.trim().length>0):[],g=So(p?.prUrl)??So(f?.prUrl),R=So(n.completionReportedAt),O=e_({finished:oe(o),completionBlocker:c,completionOutcome:m,completionReportedAt:R}),_=r_({completionBlocker:c,completionOutcome:m,completionReportedAt:R,finished:oe(o)}),E=t_({changedFiles:o.changedFiles,headCommit:s,prUrl:g??void 0});return{worker:o.worker,status:u,attention:d,attentionReason:c??o.attention.reason,landingBlocked:o.finalResult?d==="needs_attention"||d==="blocked":!1,exitedWithoutFinalResult:!o.finalResult&&!o.alive,salvageState:i?.salvageable?"review_needed":"none",salvageReason:i?.salvageable?i.attentionReason:void 0,pid:o.pid,alive:o.alive,currentTool:o.currentTool,lastActivityAt:o.lastActivityAt,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary,heartbeatBlocker:o.heartbeatBlocker,changedFileCount:o.changedFiles.length,changedFiles:o.changedFiles,branch:o.branch,taskId:n.taskId??null,planId:n.planId??null,instructionPolicyFingerprint:typeof n.instructionPolicyFingerprint=="string"?n.instructionPolicyFingerprint:null,instructionPolicyRuleCount:(()=>{let U=n.instructionPolicyEvidence;if(!U||typeof U!="object")return null;let Y=U.ruleSlugs;return Array.isArray(Y)?Y.length:null})(),leaseOwner:n.leaseOwner??null,model:typeof n.model=="string"?n.model:void 0,routingRule:typeof n.routingRule=="string"?n.routingRule:void 0,requestedModel:typeof n.requestedModel=="string"?n.requestedModel:void 0,headCommit:s,prUrl:g,handoffState:E,gitAncestry:o.gitAncestry,finalResult:o.finalResult,lifecycleStage:O,completionReportedAt:R,completionOutcome:n.completionOutcome??null,completionRouteStatus:h,completionRouteOutcome:m,completionWarnings:k,completionBlocker:c??null,checkpoint:{phase:o.lastHeartbeatPhase,summary:o.lastHeartbeatSummary,blocker:o.heartbeatBlocker},lastCommandHint:o.currentTool??o.lastHeartbeatSummary,failureReason:c??o.error??null,nextAction:_,ancestry:o.gitAncestry.relation,ancestryChecked:o.gitAncestry.checked}}function l_(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!sg(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function c_(e,r){return{worker:e,status:"done",attention:"done",attentionReason:"metadata terminal worker; full status skipped in compact snapshot",alive:!1,pid:typeof r.pid=="number"?r.pid:void 0,branch:typeof r.branch=="string"?r.branch:void 0,taskId:r.taskId??null,planId:r.planId??null,model:typeof r.model=="string"?r.model:void 0,routingRule:typeof r.routingRule=="string"?r.routingRule:void 0,requestedModel:typeof r.requestedModel=="string"?r.requestedModel:void 0,lifecycleStage:r.completionReportedAt?"completion_acknowledged":"worker_finished",completionReportedAt:typeof r.completionReportedAt=="string"?r.completionReportedAt:null,completionOutcome:r.completionOutcome??null,localOnly:r.localOnly===!0,compactStatus:!0}}function Dr(e,r){let t={};for(let n of e){let o=n[r],s=typeof o=="string"&&o.trim()?o:"unknown";t[s]=(t[s]??0)+1}return t}function og(e){if(e.attention!=="blocked")return!1;let r=typeof e.attentionReason=="string"?e.attentionReason:"";return r.includes("cli-config.json.tmp")||r.includes("Invalid authentication credentials")||r.includes("provider CLI is missing or not on PATH")||r.includes("unknown command:")}function cg(e){let r=e.filter(og),t=e.filter(n=>{if(og(n))return!1;let o=n.attention;return o==="needs_attention"||o==="blocked"||o==="stale"||n.status==="running"});return{actionableCount:t.length,runningCount:e.filter(n=>n.status==="running").length,blockedCount:e.filter(n=>n.attention==="blocked").length,staleCount:e.filter(n=>n.attention==="stale").length,needsAttentionCount:e.filter(n=>n.attention==="needs_attention").length,doneCount:e.filter(n=>n.status==="done").length,systemHealthBlockerCount:r.length,systemHealthBlockers:r.slice(0,10).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt})),actionableWorkers:t.slice(0,25).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,taskId:n.taskId,planId:n.planId,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt,nextAction:n.nextAction}))}}function ug(e,r,t){let n={runId:e.id,name:e.name,status:qt(e.status,r),repo:e.repo,workerCount:r.length,needsAttention:r.filter(o=>o.attention&&o.attention!=="ok"&&o.attention!=="done").map(o=>o.worker),workers:r};return t&&(n.summary={statusCounts:Dr(r,"status"),attentionCounts:Dr(r,"attention"),lifecycleCounts:Dr(r,"lifecycleStage")},n.controller=cg(r)),n}function u_(e){return e.status==="done"&&e.attention==="done"}function xo(e){let r=L(e),n=Object.keys(r.workers||{}).map(s=>{let i=w(wo.join(x(r.id),"workers",b(s),"worker.json"),void 0);return i?lg({run:r,workerName:s,worker:i}):{worker:s,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=ug(r,n,!1);return ae(wo.join(x(r.id),"last-board.json"),o),o}function Eo(e){let r=L(e),n=Object.keys(r.workers||{}).map(i=>{let a=w(wo.join(x(r.id),"workers",b(i),"worker.json"),void 0);return a?l_(a)?c_(i,a):lg({run:r,workerName:i,worker:a}):{worker:i,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=n.filter(i=>!u_(i)),s=ug(r,o,!0);return s.status=qt(r.status,n),s.summary={...s.summary??{},totalWorkerCount:n.length,shownWorkerCount:o.length,omittedTerminalDoneWorkerCount:n.length-o.length,allStatusCounts:Dr(n,"status"),allAttentionCounts:Dr(n,"attention")},ae(wo.join(x(r.id),"last-board-compact.json"),s),s}async function dg(e,r){let t=String(e.run||""),n=String(e.agentOsId||"");if(!t||!n)return null;let o=xo(t),s=V(e.baseUrl?String(e.baseUrl):void 0),i=await J(e.secret?String(e.secret):void 0,n,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(n)}/harness/snapshot`,l=await re(a,i,{agentOsId:n,runId:t,source:r,snapshot:o},{agentOsId:n,baseUrl:s});return{ok:l.ok,httpStatus:l.status,response:l.response,authRefreshed:l.refreshedAuth,authRefreshFailure:l.authRefreshFailure}}function d_(e){return{full:`kynver run status --run ${e} --full`,blocked:`kynver status --run ${e} --blocked`,running:`kynver status --run ${e} --running`,task:`kynver status --run ${e} --task <task-id>`,worker:`kynver status --run ${e} --worker <worker>`,workersFull:`kynver worker list --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`,monitorTick:`kynver monitor status --run ${e} --tick`}}function Wc(e){let r=Ii(e),t=e.full===!0||e.full==="true",n=ig(t?xo(r):Eo(r),e);n.projection=t?"full":"compact",t||(n.resultContract={projection:"compact",rawWorkerPayloadsOmitted:!0,omittedWorkerFields:["finalResult","changedFiles","gitAncestry","completionResponse","stdout/stderr tails"],deepDetailAvailableVia:["--full","worker status","worker tail","monitor status --tick"]},n.drilldownCommands=d_(r)),console.log(JSON.stringify(n,null,2))}function Lc(e){let{runId:r,workerName:t}=Fe(e),n=ge(r,t),o=ys(n.stdoutPath,Number(e.lines||40));if(e.raw===!0||e.raw==="true"){process.stdout.write(o);return}for(let s of o.split(`
-`).filter(Boolean)){let i=Mt(s),a=i?Ol(i):s;a&&console.log(a)}}function Bc(e){let{runId:r,workerName:t}=Fe(e),n=ge(r,t);if(!H(n.pid)){console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"not_running"},null,2));return}if(_r(n.pid,"SIGTERM"),Fr(1500),H(n.pid)){_r(n.pid,"SIGKILL"),console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"sigkill_sent"},null,2));return}console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"stopped"},null,2))}C();var h_=5e3,k_=360*60*1e3,y_=3,R_=5e3;function v_(e){let{runId:r,workerName:t}=Fe(e);return{run:r,name:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,maxTotalMs:Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):void 0,completeAttempts:Number(e.completeAttempts)>0?Math.floor(Number(e.completeAttempts)):void 0,completeBackoffMs:Number(e.completeBackoffMs)>0?Math.floor(Number(e.completeBackoffMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}}async function dt(e){let r=v_(e),t=r.pollMs??h_,n=r.maxTotalMs??k_,o=r.completeAttempts??y_,s=r.completeBackoffMs??R_,i=ge(r.run,r.name);if(!i.agentOsId||!i.taskId)return{worker:i.name,runId:i.runId,outcome:"missing_link",attempts:0,reason:"worker has no agentOsId/taskId \u2014 nothing to attribute completion to"};if(ut(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let a=Date.now();for(;;){if(i=ge(r.run,r.name),ut(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let u=D(i);if(oe(u)||!H(i.pid))break;if(Date.now()-a>n)return{worker:i.name,runId:i.runId,outcome:"timed_out",attempts:0,reason:`worker did not finish within ${n}ms`};Fr(t)}let l,c;for(let u=1;u<=o;u++){let d=await _o({run:r.run,name:r.name,...r.agentOsId?{agentOsId:r.agentOsId}:{},...r.baseUrl?{baseUrl:r.baseUrl}:{},...r.secret?{secret:r.secret}:{}});if(l=d.httpStatus,d.ok)return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:d.httpStatus,attempts:u};if(d.httpStatus===401||d.httpStatus===403)return c=typeof d.reason=="string"?d.reason:"completion replay refused",{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:d.httpStatus,attempts:u,reason:c};c=typeof d.reason=="string"?d.reason:"transient failure",u<o&&Fr(s)}return{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:l,attempts:o,reason:c??"completion failed after retries"}}async function Hc(e){try{let r=await dt(e);console.log(JSON.stringify(r,null,2)),(r.outcome==="missing_link"||r.outcome==="timed_out")&&process.exit(1),process.exit(0)}catch(r){console.error(`worker auto-complete failed: ${r.message}`),process.exit(1)}}function b_(){return mg.join(g_(new URL(".",import.meta.url)),"cli.js")}function Fc(e){let r=e.cliPath??b_();if(!m_(r))return;let t=mg.join(e.workerDir,"auto-complete.log"),n;try{n=f_(t,"a")}catch{n=void 0}let o=["ignore",n??"ignore",n??"ignore"],s=e.nodeExecutable??process.execPath,i=[r,"worker","auto-complete","--run",e.runId,"--name",e.workerName];e.agentOsId&&i.push("--agent-os-id",e.agentOsId),e.baseUrl&&i.push("--base-url",e.baseUrl),e.secret&&i.push("--secret",e.secret);try{let a=p_(s,i,de({detached:!0,stdio:o,env:process.env}));return n!==void 0&&pg(n),a.unref(),{pid:a.pid,logPath:t,cliPath:r}}catch{if(n!==void 0)try{pg(n)}catch{}return}}Pe();function fg(e,r,t){pe(e,["fetch","origin",t,"--prune"],{allowFailure:!0});let n=`origin/${t}`,o=ne(e,["worktree","add","-B",t,r,n]);if(o.status===0)return;let s=ne(e,["worktree","add","-b",t,r,"HEAD"]);if(s.status!==0){let i=o.stderr||o.stdout||s.stderr||s.stdout||"git worktree add failed for repair target branch";throw new Error(i)}}Oe();I();function Ti(e,r){let t=typeof r.name=="string"?r.name.trim():"";if(!t||t==="undefined"||t==="null")throw new Error(`worker name is required and must be a real identifier (got: ${JSON.stringify(r.name)})`);let n=b(t);if(e.workers?.[n])throw new Error(`worker already exists in run ${e.id}: ${n}`);if(!r.task)throw new Error(`missing task text for worker ${n}`);let o=r.routingRule||r.requestedModel?{provider:r.provider||Ie,model:r.model,rule:r.routingRule||"explicit:spawn",requestedModel:r.requestedModel??r.model}:fi({explicitModel:r.model,explicitProvider:r.provider,explicitProviderIsOperatorOverride:!!r.provider?.trim()}),s=If(o.provider),i=o.model;if(s.preflightModel){let F=s.preflightModel(r.model);if(!F.ok)throw new Error(`model preflight failed for provider "${s.name}": ${F.note??"invalid model/provider combination"}`);F.normalized&&console.error(`[supervisor] ${n}: ${F.note}`),i=F.model}let{worktreesDir:a}=Z(),l=un.join(x(e.id),"workers",n);C_(l,{recursive:!0});let c=un.join(a,e.id,n),u=r.repairTargetBranch?.trim()||void 0,d=u||r.branch||`agent/${e.id}/${n}`;if(S_(c))throw new Error(`worktree path already exists: ${c}`);pe(e.repo,["fetch","origin","--prune"],{allowFailure:!0}),u?fg(e.repo,c,u):pe(e.repo,["worktree","add","-b",d,c,e.baseCommit],{throwError:!0});let f=un.join(l,"stdout.jsonl"),p=un.join(l,"stderr.log"),m=un.join(l,"heartbeat.jsonl"),h=vc({task:r.task,ownedPaths:r.ownedPaths||[],worktreePath:c,heartbeatPath:m,planId:r.planId,taskId:r.taskId,instructionPolicyMarkdown:r.instructionPolicyMarkdown,memoryQualityMarkdown:r.memoryQualityPromptMarkdown??r.memoryQualityCapture?.promptMarkdown??null,personaMarkdown:r.personaMarkdown,contextEnvelopeMarkdown:r.contextEnvelopeMarkdown,model:i,repairTargetPrUrl:r.repairTargetPrUrl,repairTargetBranch:r.repairTargetBranch??(u||void 0)}),k=process.env.KYNVER_HARNESS_TASK_ID,g=process.env.KYNVER_HARNESS_AGENT_OS_ID;r.taskId&&(process.env.KYNVER_HARNESS_TASK_ID=String(r.taskId)),r.agentOsId&&(process.env.KYNVER_HARNESS_AGENT_OS_ID=String(r.agentOsId));let R;try{R=s.start({name:n,task:r.task,ownedPaths:r.ownedPaths,model:i,branch:d,worktreePath:c,workerDir:l,stdoutPath:f,stderrPath:p,heartbeatPath:m,prompt:h})}catch(F){throw pe(e.repo,["worktree","remove","--force",c],{allowFailure:!0}),pe(e.repo,["branch","-D",d],{allowFailure:!0}),F}finally{k===void 0?delete process.env.KYNVER_HARNESS_TASK_ID:process.env.KYNVER_HARNESS_TASK_ID=k,g===void 0?delete process.env.KYNVER_HARNESS_AGENT_OS_ID:process.env.KYNVER_HARNESS_AGENT_OS_ID=g}let O=gf(R.model,i,s.defaultModel),_=y(),E=Ae(process.env,_),U=Ze().runnerId,Y=ko(E.boxKind),$={name:n,runId:e.id,status:"running",pid:R.pid,model:O,branch:d,worktreePath:c,workerDir:l,stdoutPath:f,stderrPath:p,heartbeatPath:m,ownedPaths:r.ownedPaths,...r.agentOsId?{agentOsId:String(r.agentOsId)}:{},...r.taskId?{taskId:String(r.taskId)}:{},...r.planId?{planId:String(r.planId)}:{},...r.instructionPolicyFingerprint?{instructionPolicyFingerprint:String(r.instructionPolicyFingerprint)}:{},...r.instructionPolicyEvidence?{instructionPolicyEvidence:r.instructionPolicyEvidence}:{},...r.memoryQualityCapture?{memoryQualityCapture:r.memoryQualityCapture}:{},...r.personaSlug?{personaSlug:String(r.personaSlug)}:{},...r.personaEvidence?{personaEvidence:r.personaEvidence}:{},...r.contextEnvelopeEvidence?{contextEnvelopeEvidence:r.contextEnvelopeEvidence}:{},...r.leaseOwner?{leaseOwner:String(r.leaseOwner)}:{},...r.leaseToken?{leaseToken:String(r.leaseToken)}:{},...r.dispatched?{dispatched:!0}:{},...!r.agentOsId||!r.taskId?{localOnly:!0}:{},routingRule:o.rule,...o.requestedModel?{requestedModel:o.requestedModel}:{},...o.orchestrationAudit?{orchestrationAudit:o.orchestrationAudit}:{},...r.executorRef?{executorRef:String(r.executorRef)}:{},...r.parentTaskId?{parentTaskId:String(r.parentTaskId)}:{},...r.taskTitle?{taskTitle:String(r.taskTitle)}:{},...r.taskPrUrl?{taskPrUrl:String(r.taskPrUrl)}:{},...r.repairTargetPrUrl?{repairTargetPrUrl:String(r.repairTargetPrUrl)}:{},...r.repairTargetBranch?{repairTargetBranch:String(r.repairTargetBranch)}:{},boxKind:E.boxKind,boxId:Y,runtimeId:U,startedAt:new Date().toISOString()};if(K(e.id,$),e.workers={...e.workers||{},[n]:{workerDir:l,statusPath:un.join(l,"worker.json")}},e.status="running",Be(e),$.agentOsId&&$.taskId){let F;try{F=Fc({runId:e.id,workerName:n,workerDir:l,agentOsId:$.agentOsId})}catch(P){let B=`completion sidecar failed to spawn: ${P.message}`;$.completionBlocker=B,K(e.id,$)}if(F)F.pid&&($.completionSidecarPid=F.pid,K(e.id,$));else{let P="completion sidecar failed to spawn (CLI not found or spawn error)";$.completionBlocker=P,$.completionSidecarSpawnFailedAt=new Date().toISOString(),K(e.id,$)}}return $}async function Kc(e){let r=L(String(e.run)),t=typeof e.name=="string"?e.name.trim():"";t||(console.error("worker start failed: --name is required"),process.exit(1));let n=e.task?String(e.task):np(e.taskFile?String(e.taskFile):void 0);n||(console.error("missing --task or --task-file"),process.exit(1));let o=!!(e.agentOsId&&e.taskId),s=e.localOnly===!0||e.localOnly==="true";!o&&!s&&(e.agentOsId||e.taskId)&&(console.error("worker start: board-linked workers require both --agent-os-id and --task-id (or pass --local-only for direct runs)"),process.exit(1));let i=e.wait===!0||e.wait==="true",a;try{a=Ti(r,{name:t,task:n,ownedPaths:e.owned?String(e.owned).split(",").map(c=>c.trim()).filter(Boolean):[],model:e.model?String(e.model):void 0,branch:e.branch?String(e.branch):void 0,agentOsId:e.agentOsId?String(e.agentOsId):void 0,taskId:e.taskId?String(e.taskId):void 0,provider:e.provider?String(e.provider):void 0}),console.log(JSON.stringify({runId:r.id,worker:a.name,pid:a.pid,branch:a.branch,worktreePath:a.worktreePath,workerDir:a.workerDir},null,2))}catch(c){console.error(`worker start failed: ${c.message}`),process.exit(1)}if(!i||!a)return;let l=await dt({run:String(e.run),name:a.name,...a.agentOsId?{agentOsId:a.agentOsId}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});console.error(JSON.stringify({event:"start_wait_outcome",...l})),l.outcome==="timed_out"&&(process.exitCode=1)}T();zt();C();import w_ from"node:path";function __(e){let r=Array.isArray(e.ownedPaths)?e.ownedPaths.filter(n=>typeof n=="string"):[],t=Array.isArray(e.writeSetPrefixes)?(e.writeSetPrefixes??[]).filter(n=>typeof n=="string"):[];return{...r.length?{ownedPaths:r}:{},...t.length?{writeSetPrefixes:t}:{},...e.allowConcurrentHotspot?{allowConcurrentHotspot:!0}:{}}}function Di(e){let r=L(e),t=[];for(let n of Object.keys(r.workers||{})){let o=w(w_.join(x(r.id),"workers",b(n),"worker.json"),void 0);!o?.taskId||!et(o)||t.push({runId:r.id,workerName:n,taskId:o.taskId,pid:o.pid,...__(o)})}return t}C();import{createHash as gg}from"node:crypto";function mr(e){let r=e.replace(/\r\n/g,`
-`).trimEnd();return gg("sha256").update(r,"utf8").digest("hex")}function dn(e){if(e==null)return null;let r=e.trim();return r?gg("sha256").update(r,"utf8").digest("hex"):null}I();var ee=class extends Error{kind;httpStatus;constructor(r,t,n){super(t),this.name="PlanPersistError",this.kind=r,this.httpStatus=n}};function Po(e,r){return e===401||e===403?new ee("auth",r,e):e>=500?new ee("server",r,e):new ee("permanent",r,e)}function $c(e){let r=e instanceof Error?e.message:String(e);return/ECONNREFUSED|ENOTFOUND|ETIMEDOUT|fetch failed|network/i.test(r)?new ee("network",r):new ee("tool_interruption",r)}function hg(e){return e!=="permanent"}function Ui(e){let r={"Content-Type":"application/json"};return e&&(r.Authorization=`Bearer ${e}`),r}async function Wi(e){let r=await e.text();try{return JSON.parse(r)}catch{return r}}async function kg(e,r,t={}){let n=V(t.baseUrl),o=t.apiKey??se(),s=t.fetchFn??fetch,i=`${n}/api/agent-os/${encodeURIComponent(e)}/plans/${encodeURIComponent(r)}`;try{let a=await s(i,{method:"GET",headers:Ui(o)}),l=await Wi(a);if(!a.ok){let c=typeof l=="object"&&l&&"error"in l?String(l.error):`GET plan failed (${a.status})`;throw Po(a.status,c)}return l}catch(a){throw a instanceof ee?a:$c(a)}}async function yg(e,r={}){let t=V(r.baseUrl),n=r.apiKey??se(),o=r.fetchFn??fetch,s=e.agentOsSlug;try{if(e.operation==="create"){let f=`${t}/api/agent-os/${encodeURIComponent(s)}/plans`,p={title:e.title,summary:e.summary??null,slug:e.planSlug??null,sourceRefs:Mi(e),initialVersion:{title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:Mi(e)}},m=await o(f,{method:"POST",headers:Ui(n),body:JSON.stringify(p)}),h=await Wi(m);if(!m.ok){let g=typeof h=="object"&&h&&"error"in h?String(h.error):`create plan failed (${m.status})`;throw Po(m.status,g)}let k=h;return{planId:k.plan.id,versionId:k.version.id,versionNumber:k.version.versionNumber}}let i=e.planId;if(!i)throw new ee("permanent","planId is required for this operation");if(e.operation==="update_metadata"){let f=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}`,p={title:e.title,summary:e.summary??null,sourceRefs:Mi(e)},m=await o(f,{method:"PATCH",headers:Ui(n),body:JSON.stringify(p)}),h=await Wi(m);if(!m.ok){let g=typeof h=="object"&&h&&"error"in h?String(h.error):`update plan failed (${m.status})`;throw Po(m.status,g)}let k=h;return{planId:k.id,versionId:k.currentVersionId,versionNumber:null}}let a=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}/versions`,l={title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:Mi(e),markCurrent:e.markCurrent!==!1},c=await o(a,{method:"POST",headers:Ui(n),body:JSON.stringify(l)}),u=await Wi(c);if(!c.ok){let f=typeof u=="object"&&u&&"error"in u?String(u.error):`add version failed (${c.status})`;throw Po(c.status,f)}let d=u;return{planId:d.version.planId,versionId:d.version.id,versionNumber:d.version.versionNumber}}catch(i){throw i instanceof ee?i:$c(i)}}function Mi(e){let r={...e.sourceRefs??{}};return e.model&&(r.model=e.model),Object.keys(r).length?r:e.sourceRefs??null}import{createHash as x_}from"node:crypto";function Li(e){let r={operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??null,planSlug:e.planSlug??null,title:e.title.trim(),summaryHash:dn(e.summary),bodyHash:mr(e.body),changeSummary:e.changeSummary?.trim()??null,markCurrent:e.markCurrent??!0};return x_("sha256").update(JSON.stringify(r),"utf8").digest("hex")}import{mkdirSync as Rg}from"node:fs";import{homedir as E_}from"node:os";import pn from"node:path";function Bi(){let e=process.env.KYNVER_STATE_ROOT;return e?pn.resolve(e):pn.join(E_(),".kynver","state")}function Hi(){return pn.join(Bi(),"plan-outbox")}function P_(){return pn.join(Bi(),"plan-outbox-archive")}function pt(){let e=Hi(),r=P_();return Rg(e,{recursive:!0}),Rg(r,{recursive:!0}),{outboxDir:e,archiveDir:r}}function Ao(e){if(e.startsWith("/tmp/")||e.startsWith("/var/folders/"))return!0;let r=pn.resolve(e);return r.startsWith("/tmp/")||r.startsWith(pn.join("/var","folders"))}import{existsSync as jc,readFileSync as bg,renameSync as vg,readdirSync as A_,writeFileSync as Vc,unlinkSync as BH}from"node:fs";import Ke from"node:path";import{randomUUID as I_}from"node:crypto";var O_=12;function mt(){let{outboxDir:e}=pt(),r=A_(e).filter(n=>n.endsWith(".json")),t=[];for(let n of r){let o=Yc(Ke.join(e,n));o&&o.queueStatus==="queued"&&t.push(o)}return t.sort((n,o)=>n.createdAt.localeCompare(o.createdAt))}function Gc(e){for(let r of mt())if(r.idempotencyKey===e)return r;return null}function Yc(e){if(!jc(e))return null;try{return JSON.parse(bg(e,"utf8"))}catch{return null}}function Sg(e){let{outboxDir:r}=pt(),t=Ke.join(r,e.bodyPath);return bg(t,"utf8")}function Jc(e,r){let{outboxDir:t}=pt(),n=new Date().toISOString(),o=r.existing?.id??I_(),s=r.existing?.bodyPath??`${o}.body.md`,i=Ke.join(t,`${o}.json`),a=Ke.join(t,s);r.existing||Vc(a,e.body,"utf8");let l={id:o,idempotencyKey:Li(e),operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??r.existing?.planId??null,planSlug:e.planSlug??r.existing?.planSlug??null,title:e.title,summary:e.summary??null,bodyPath:s,bodyHash:mr(e.body),author:e.author??null,model:e.model??null,sourceRefs:e.sourceRefs??null,changeSummary:e.changeSummary??null,markCurrent:e.markCurrent??!0,createdAt:r.existing?.createdAt??n,updatedAt:n,retryCount:(r.existing?.retryCount??0)+(r.existing?1:0),maxRetries:e.maxRetries??r.existing?.maxRetries??O_,lastError:r.lastError,lastFailureKind:r.lastFailureKind,queueStatus:"queued",userStatus:"queued for retry",readbackEvidence:null};return Vc(i,`${JSON.stringify(l,null,2)}
-`,{mode:384}),l}function Cg(e){let{outboxDir:r}=pt(),t=Ke.join(r,`${e.id}.json`);Vc(t,`${JSON.stringify(e,null,2)}
-`,{mode:384})}function wg(e){let{outboxDir:r,archiveDir:t}=pt(),n=Ke.join(r,`${e.id}.json`),o=Ke.join(r,e.bodyPath),s=Ke.join(t,`${e.id}.json`),i=Ke.join(t,e.bodyPath);jc(n)&&vg(n,s),jc(o)&&vg(o,i)}function Io(e){let{outboxDir:r}=pt();return{jsonPath:Ke.join(r,`${e.id}.json`),bodyPath:Ke.join(r,e.bodyPath)}}function _g(e,r){return{operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId,planSlug:e.planSlug,title:e.title,summary:e.summary,body:r,changeSummary:e.changeSummary??void 0,author:e.author??void 0,model:e.model??void 0,sourceRefs:e.sourceRefs,markCurrent:e.markCurrent??!0,maxRetries:e.maxRetries}}async function xg(e,r,t={}){let n=await kg(e,r.planId,t),o=n.plan,s=n.currentVersion;if(o.title.trim()!==r.title.trim())throw new ee("verification_failed",`title mismatch: expected "${r.title}", got "${o.title}"`);let i=dn(r.summary),a=dn(o.summary);if(i!==a)throw new ee("verification_failed","summary mismatch on readback");if(r.versionId&&o.currentVersionId!==r.versionId)throw new ee("verification_failed",`currentVersionId mismatch: expected ${r.versionId}, got ${o.currentVersionId}`);if(r.versionNumber!=null&&(!s||s.versionNumber!==r.versionNumber))throw new ee("verification_failed",`versionNumber mismatch: expected ${r.versionNumber}, got ${s?.versionNumber??"none"}`);let l=s?.body??"",c=mr(l);if(r.bodyHash&&c!==r.bodyHash)throw new ee("verification_failed","body hash mismatch on readback");return{planId:o.id,currentVersionId:o.currentVersionId,versionNumber:s?.versionNumber??null,title:o.title,summary:o.summary,bodyHash:r.bodyHash||c,readAt:new Date().toISOString()}}function Eg(e,r){return{planId:r.planId,title:e.title,summary:e.summary??null,body:e.body,bodyHash:mr(e.body),versionId:r.versionId,versionNumber:r.versionNumber}}var Pg="persisted and read back",N_="queued for retry",qc="failed and needs action";async function mn(e,r={}){e.bodyPathHint&&Ao(e.bodyPathHint);let t=Li(e),n=Gc(t);if(n?.readbackEvidence)return{userStatus:Pg,outboxId:n.id,planId:n.readbackEvidence.planId,readbackEvidence:n.readbackEvidence,idempotencyKey:t};if(e.immediateFailure)return Ag(e,e.immediateFailure.message,e.immediateFailure.kind,n);let o=r.writePlan??yg,s=r.verifyReadback??xg;try{let i=await o(e,r),a={...e,planId:i.planId},l=Eg(a,i),c=await s(e.agentOsSlug,T_(e,l),r);return n&&wg(n),{userStatus:Pg,planId:i.planId,versionId:i.versionId??void 0,readbackEvidence:c,idempotencyKey:t}}catch(i){let a=i instanceof ee?i:new ee("tool_interruption",i instanceof Error?i.message:String(i));if(!hg(a.kind)){let l=Jc(e,{lastError:a.message,lastFailureKind:a.kind,existing:n??void 0}),c=Io(l),u=Ig(l,a.message);return{userStatus:qc,outboxId:u.id,outboxPath:c.jsonPath,bodyPath:c.bodyPath,lastError:a.message,idempotencyKey:t}}return Ag(e,a.message,a.kind,n)}}function T_(e,r){return e.operation==="update_metadata"?{...r,body:"",bodyHash:""}:r}function Ag(e,r,t,n){let o=Jc(e,{lastError:r,lastFailureKind:t,existing:n??void 0}),s=Io(o);if(o.retryCount>=o.maxRetries){let i=Ig(o,r);return{userStatus:qc,outboxId:i.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}return{userStatus:N_,outboxId:o.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}function Ig(e,r){let t={...e,queueStatus:"failed",userStatus:qc,lastError:r,updatedAt:new Date().toISOString()};return Cg(t),t}import D_ from"node:path";async function Fi(e={},r={}){let t=mt().filter(s=>e.outboxId?s.id===e.outboxId:!0),n=e.max&&e.max>0?t.slice(0,e.max):t,o={processed:0,succeeded:0,stillQueued:0,failed:0,results:[]};for(let s of n){o.processed+=1;let i=Sg(s),a=_g(s,i),l=await mn(a,r);l.userStatus==="persisted and read back"?o.succeeded+=1:l.userStatus==="failed and needs action"?o.failed+=1:o.stillQueued+=1,o.results.push({outboxId:s.id,userStatus:l.userStatus,lastError:l.lastError})}return o}function zc(e){let r=D_.join(Hi(),`${e}.json`);return Yc(r)}function Ki(e){let r=Io(e);return["## Plan persistence risk","",`AgentOS plan write is **not** confirmed (${e.userStatus}).`,`- outboxId: \`${e.id}\``,e.planId?`- planId: \`${e.planId}\``:"- planId: (pending \u2014 create not yet applied)",`- outbox: \`${r.jsonPath}\``,`- body: \`${r.bodyPath}\``,"","Drain when approval/connectivity returns: `kynver plan outbox drain`"].join(`
-`)}function $i(e){let r=e.metadata&&typeof e.metadata=="object"?e.metadata:null,t=typeof e.planPersistenceOutboxId=="string"&&e.planPersistenceOutboxId||(r&&typeof r.planPersistenceOutboxId=="string"?r.planPersistenceOutboxId:void 0);return t?{outboxId:t,jsonPath:typeof e.planPersistenceOutboxPath=="string"?e.planPersistenceOutboxPath:r&&typeof r.planPersistenceOutboxPath=="string"?r.planPersistenceOutboxPath:void 0,bodyPath:typeof e.planPersistenceBodyPath=="string"?e.planPersistenceBodyPath:r&&typeof r.planPersistenceBodyPath=="string"?r.planPersistenceBodyPath:void 0}:null}async function Xc(e){let r=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/release`,t;try{t=await re(r,e.secret,{agentOsId:e.agentOsId,leaseOwner:e.leaseOwner,...e.failureDetail?{failureDetail:e.failureDetail}:{}},{agentOsId:e.agentOsId,baseUrl:e.baseUrl})}catch(s){return{released:!1,httpOk:!1,releaseResponse:{ok:!1,error:s.message}}}let n=t.response;return{released:t.ok===!0||n?.ok===!0,httpOk:t.ok===!0,releaseResponse:t.response??t}}import{spawnSync as Ng}from"node:child_process";import{spawnSync as M_}from"node:child_process";function Og(){if(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim())return{source:"env",configured:!0,reason:"GitHub token already configured in environment"};let e=M_("gh",["auth","token"],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});if(e.status!==0)return{source:"missing",configured:!1,reason:typeof e.stderr=="string"&&e.stderr.trim()?e.stderr.trim():"gh auth token failed; run `gh auth login` on this machine"};let r=typeof e.stdout=="string"?e.stdout.trim():"";return r?(process.env.GH_TOKEN=r,{source:"gh-cli",configured:!0,reason:"Using local GitHub CLI auth for daemon land_pr merge"}):{source:"missing",configured:!1,reason:"gh auth token returned an empty token; run `gh auth login` on this machine"}}var Tg=new Set(["SUCCESS","SKIPPED","NEUTRAL"]),U_=new Set(["CLEAN","HAS_HOOKS"]);function Zc(e){return e?.trim()?["--repo",e.trim()]:[]}function Dg(e){let r=/github\.com\/([^/]+)\/([^/]+)\/pull\/\d+/i.exec(e.trim());return r?`${r[1]}/${r[2]}`:null}function Mg(e,r,t){let n=e.gh(r,t);if(n.status!==0)throw new Error(n.stderr||n.stdout||`gh ${t.join(" ")} failed`);return JSON.parse(n.stdout||"{}")}function Oo(e){return typeof e.name=="string"&&e.name||typeof e.context=="string"&&e.context||typeof e.workflowName=="string"&&e.workflowName||"unknown check"}function W_(e){let r=Array.isArray(e)?e:[],t=[],n=[];for(let o of r){let s=o&&typeof o=="object"?o:{},i=typeof s.conclusion=="string"?s.conclusion.toUpperCase():"",a=typeof s.status=="string"?s.status.toUpperCase():"",l=typeof s.state=="string"?s.state.toUpperCase():"";if(!(i&&Tg.has(i))){if(i){n.push(`${Oo(s)}=${i}`);continue}if(!(l&&Tg.has(l))){if(l&&l!=="PENDING"&&l!=="EXPECTED"){n.push(`${Oo(s)}=${l}`);continue}if(l==="PENDING"||l==="EXPECTED"){t.push(`${Oo(s)}=${l}`);continue}if(a&&a!=="COMPLETED"){t.push(`${Oo(s)}=${a}`);continue}t.push(`${Oo(s)}=PENDING`)}}}return{pending:t,failed:n}}function L_(e){return(Array.isArray(e)?e:[]).some(t=>{let n=t&&typeof t=="object"?t:{},o=typeof n.name=="string"&&n.name||typeof n.context=="string"&&n.context||"",s=typeof n.conclusion=="string"?n.conclusion.toUpperCase():"",i=typeof n.state=="string"?n.state.toUpperCase():"";return/^vercel/i.test(o)&&(s==="SUCCESS"||i==="SUCCESS")})}var B_=/^##\s*(test\s*plan|verification|test\s*evidence|verify)\b/im,H_=/typecheck|npm run (test|build|typecheck)|vitest|tsc\b|verify-pr-local|local verify|local-verify|tests? (pass|green)|build green|node --test/i,F_=/^docs[(:]/i,K_=/docs[- ]only|documentation only|no[- ]code change|no code changes|low[- ]risk|plan tracker only|markdown only/i;function $_(e){let r=typeof e.title=="string"?e.title.trim():"",t=typeof e.body=="string"?e.body.trim():"",n=F_.test(r)||K_.test(t),o=B_.test(t),s=H_.test(t);return n||o||s||e.vercelCheckSuccess===!0}function j_(e){if(!$_({title:e.title,body:e.body,vercelCheckSuccess:L_(e.statusCheckRollup)}))throw new Error(`PR #${e.number} lacks landing verification evidence \u2014 add ## Test plan / ## Verification with local commands, Vercel preview, or docs/no-code rationale`)}function V_(e){if(e.state!=="OPEN")throw new Error(`PR #${e.number} is ${e.state}, not OPEN`);if(e.isDraft)throw new Error(`PR #${e.number} is still a draft`);if(!U_.has(e.mergeStateStatus))throw new Error(`PR #${e.number} mergeStateStatus is ${e.mergeStateStatus}`);let r=W_(e.statusCheckRollup);if(r.failed.length>0)throw new Error(`PR #${e.number} has failing checks: ${r.failed.join(", ")}`);if(r.pending.length>0)throw new Error(`PR #${e.number} has pending checks: ${r.pending.join(", ")}`);j_(e)}function G_(e){try{return V_(e),null}catch(r){return r instanceof Error?r.message:String(r)}}function Y_(e,r,t,n){if(!n?.trim())return;let o=encodeURI(`heads/${n}`);e.gh(r,["api","-X","DELETE",`repos/${t}/git/refs/${o}`])}function J_(e,r,t){if(t?.trim())return t.trim();let n=e.gh(r,["repo","view","--json","nameWithOwner"]);if(n.status!==0)throw new Error(n.stderr||"Could not resolve GitHub repo");let o=JSON.parse(n.stdout||"{}");if(!o.nameWithOwner)throw new Error("Could not resolve GitHub repo");return o.nameWithOwner}function q_(e,r){if(!r?.trim())return;let t=Ng("git",["worktree","list","--porcelain"],{cwd:e,encoding:"utf8"});if(t.status!==0)return;let n=String(t.stdout||"").split(/\r?\n/),o=null,s=null;for(let i of n){if(i.startsWith("worktree ")){o=i.slice(9).trim(),s=null;continue}i.startsWith("branch ")&&o&&(s=i.slice(7).trim(),s.endsWith(`/${r}`)&&Ng("git",["worktree","remove","--force",o],{cwd:e,encoding:"utf8"}))}}async function Ug(e){let r=e.cwd??process.cwd(),t=e.exec??wi,n=e.prUrl.trim();if(!n)throw new Error("prUrl is required");let o=Og();if(!o.configured)return{prUrl:n,outcome:"blocked",reason:o.reason};let s=Mg(t,r,["pr","view",n,...Zc(e.repo),"--json",["number","url","title","body","state","isDraft","mergeStateStatus","statusCheckRollup","headRefName","mergedAt","mergeCommit"].join(",")]);if(s.state==="MERGED"||s.mergedAt)return{prUrl:s.url||n,outcome:"skipped",mergeCommit:s.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 land_pr no-op (redelivery)`};let i=G_(s);if(i)return e.skipNotReady?{prUrl:s.url||n,outcome:"skipped",reason:i}:{prUrl:s.url||n,outcome:"blocked",reason:i};if(e.dryRun)return{prUrl:s.url||n,outcome:"skipped",reason:"dry-run: PR is ready to merge"};let a=String(s.number),l=t.gh(r,["pr","merge",a,...Zc(e.repo),"--squash"]);if(l.status!==0){let u=Qc(t,r,a,e.repo);return u?{prUrl:u.url||s.url||n,outcome:"skipped",mergeCommit:u.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 merged by another lane during land_pr (race)`}:{prUrl:s.url||n,outcome:"blocked",reason:l.stderr||l.stdout||"gh pr merge failed"}}let c=Qc(t,r,a,e.repo);c||(c=Qc(t,r,a,e.repo));try{let u=J_(t,r,e.repo);Y_(t,r,u,s.headRefName),q_(r,s.headRefName)}catch{}return{prUrl:c?.url||s.url||n,outcome:"merged",mergeCommit:c?.mergeCommit?.oid??null,reason:`Daemon land_pr merged PR #${s.number}${c?"":" (post-merge view unavailable \u2014 merge verified by gh exit 0)"}`}}function Qc(e,r,t,n){try{let o=Mg(e,r,["pr","view",t,...Zc(n),"--json","number,url,mergedAt,mergeCommit,state"]);return o.state==="MERGED"||o.mergedAt?o:null}catch{return null}}I();async function Wg(e){let r=await J(e.secret,e.agentOsId,{baseUrl:e.baseUrl}),t=String(e.task.id),n=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/harness/completion`,o=new Date().toISOString(),s={source:"kynver-harness",agentOsId:e.agentOsId,runId:e.runId,workerName:`land-pr-${t}`,taskId:t,leaseToken:e.task.leaseToken??null,startedAt:o,finishedAt:o,status:{finalResult:e.report,prUrl:e.report.prUrl,summary:e.report.reason,leaseToken:e.task.leaseToken??null},workerInjection:null},i=await re(n,r,s,{agentOsId:e.agentOsId,baseUrl:e.baseUrl});return{ok:i.ok,status:i.status}}function Lg(){return["## verify_live completion contract","Finish with a JSON finalResult object:","{",'  "prUrl": "<landed pr>",','  "outcome": "passed" | "failed" | "skipped" | "no_mcp_surface",','  "reason": "<human summary>",','  "mergeCommit": "<sha optional>",','  "liveReadback": "<prod readback string from acceptance.liveReadbackQuery>",','  "mcpCalls": [{ "tool": "<name>", "ok": true, "summary": "..." }]',"}","","Drive the feature MCP tools against live production. Do not mark passed without exercising the MCP surface.","When the subject carries an acceptance snapshot, include liveReadback \u2014 the server oracle rejects passed if the original symptom still appears."].join(`
-`)}var z_="dispatch_start_readback_failed:";function ft(e){return`${z_} ${e.trim()}`}function X_(e){return e.branch?.trim()?e.worktreePath?.trim()?e.heartbeatPath?.trim()?e.startedAt?.trim()?null:"missing local worker startedAt":"missing local worker heartbeatPath":"missing local worker worktreePath":"missing local worker branch"}function Q_(e){let{snapshot:r,leaseOwner:t,expectedLeaseToken:n,worker:o}=e;if(!r)return{ok:!1,error:ft("task lease snapshot missing after spawn"),detail:{taskId:o.taskId,leaseOwner:t,expectedLeaseToken:n}};if(r.status!=="running")return{ok:!1,error:ft(`AgentOS task status=${r.status} (expected running)`),detail:{taskId:r.taskId,status:r.status,leaseOwner:r.leaseOwner,blocker:r.blocker},snapshot:r};let s=r.leaseOwner?.trim()??"";if(!s||s!==t.trim())return{ok:!1,error:ft(`leaseOwner mismatch (board=${s||"null"}, expected=${t})`),detail:{taskId:r.taskId,boardLeaseOwner:s||null,expectedLeaseOwner:t},snapshot:r};let i=r.leaseToken?.trim()??"";if(!i||i!==n.trim())return{ok:!1,error:ft(`leaseToken mismatch (board=${i||"null"}, expected=${n})`),detail:{taskId:r.taskId,boardLeaseToken:i||null,expectedLeaseToken:n},snapshot:r};let a=X_(o);return a?{ok:!1,error:ft(a),detail:{taskId:o.taskId,worker:o.name},snapshot:r}:r.heartbeatAt?.trim()?o.executorRef?.trim()&&r.executorRef?.trim()&&o.executorRef.trim()!==r.executorRef.trim()?{ok:!1,error:ft(`executorRef mismatch (board=${r.executorRef}, worker=${o.executorRef})`),detail:{taskId:r.taskId,boardExecutorRef:r.executorRef,workerExecutorRef:o.executorRef},snapshot:r}:{ok:!0,snapshot:r}:{ok:!1,error:ft("AgentOS heartbeatAt missing after claim"),detail:{taskId:r.taskId},snapshot:r}}async function Bg(e){let r=await cn({agentOsId:e.agentOsId,taskIds:[e.taskId],baseUrl:e.baseUrl,secret:e.secret});return Q_({snapshot:r.get(e.taskId)??null,leaseOwner:e.leaseOwner,expectedLeaseToken:e.expectedLeaseToken,worker:e.worker})}C();T();function Hg(e,r,t){r.pid&&H(r.pid)&&(_r(r.pid,"SIGTERM"),H(r.pid)&&_r(r.pid,"SIGKILL"));let n={...r,status:"failed",pid:void 0,completionBlocker:t,dispatchStartReadbackFailed:!0};return K(e,n),n}T();var yi=3600*1e3;function Fg(e){let r=e.admissionExhaustion;return!r||typeof r!="object"?null:r}function Kg(e){let r=e.dispatchSkipDrain;return!r||typeof r!="object"?null:r}function Z_(e){let r=e.harnessWorkerContext;if(!r||typeof r!="object")return null;let t=r,n=typeof t.instructionPolicyMarkdown=="string"?t.instructionPolicyMarkdown:null,o=typeof t.instructionPolicyFingerprint=="string"?t.instructionPolicyFingerprint:null,s=t.instructionPolicyEvidence&&typeof t.instructionPolicyEvidence=="object"?t.instructionPolicyEvidence:null,i=typeof t.personaMarkdown=="string"?t.personaMarkdown:null,a=typeof t.personaEvidence=="object"&&t.personaEvidence&&typeof t.personaEvidence.injectedPersonaSlug=="string"?t.personaEvidence.injectedPersonaSlug:null,l=t.personaEvidence&&typeof t.personaEvidence=="object"?t.personaEvidence:null,c=t.personaInjectionReady===!0,u=typeof t.contextEnvelopeMarkdown=="string"?t.contextEnvelopeMarkdown:null,d=t.contextEnvelopeEvidence&&typeof t.contextEnvelopeEvidence=="object"?t.contextEnvelopeEvidence:null,f=t.contextEnvelopeReady===!0,p=t.memoryQualityCapture&&typeof t.memoryQualityCapture=="object"?t.memoryQualityCapture:null,m=typeof t.memoryQualityPromptMarkdown=="string"?t.memoryQualityPromptMarkdown:typeof p?.promptMarkdown=="string"?p.promptMarkdown:null;return{instructionPolicyMarkdown:n,instructionPolicyFingerprint:o,instructionPolicyEvidence:s,memoryQualityCapture:p,memoryQualityPromptMarkdown:m,personaMarkdown:i,personaSlug:a,personaEvidence:l,personaInjectionReady:c,contextEnvelopeMarkdown:u,contextEnvelopeEvidence:d,contextEnvelopeReady:f}}function ex(e){if(typeof e!="string")return null;let r=e.trim().toLowerCase();return r.length?r:null}function $g(e,r){let t=[`[AgentOS task ${e.id}] ${e.title}`,"",e.description?String(e.description):"(no description on the board task)","",`Board linkage: agentOsId=${r}, taskId=${e.id}, attempt=${e.attempt}, executor=${e.executor}${e.executorRef?`, executorRef=${e.executorRef}`:""}.`,"This worker was dispatched from the AgentOS board. The harness reports your completion back to the board when you finish."];e.executor==="verify_live"&&t.push("",Lg());let n=$i(e);if(n?.outboxId){let o=zc(n.outboxId);o?t.push("",Ki(o)):t.push("","## Plan persistence risk","",`Unconfirmed AgentOS plan write (outboxId=${n.outboxId}).`)}return t.join(`
-`)}function rx(e){let r=new Set;if(e.targetTaskId)return r.add(String(e.targetTaskId)),r;if(e.targetTaskIds)for(let t of String(e.targetTaskIds).split(",")){let n=t.trim();n&&r.add(n)}return r}async function Mr(e){let r=e.pipeline===!0||e.pipeline==="true";try{let Ot=function(){return Q.filter(S=>S.started).length},Ge=function(S,v){Jl({runId:i.id,agentOsId:a,phase:S,startedCount:Ot(),outcomeCount:Q.length,cappedStarts:_,...v})},ve=function(){return Q.some(S=>(typeof S.error=="string"?S.error:"").startsWith("dispatch_start_readback_failed:"))},W=function(S){return S.landPrDispatch===!0?!0:S.task?.executor==="land_pr"};var t=Ot,n=Ge,o=ve,s=W;let i=L(String(N(String(e.run||""),"--run"))),a=String(N(String(e.agentOsId||""),"--agent-os-id")),l=V(e.baseUrl?String(e.baseUrl):void 0),c=await J(e.secret?String(e.secret):void 0,a,{baseUrl:l}),d=!(e.execute===!0||e.execute==="true"),f=Ze({runId:i.id}),p=yc(i.id,f.runnerId),m=e.diskPath?Le({diskPath:String(e.diskPath)}):Le({diskPath:i.repo}),h=dr({runId:i.id}),k=rx(e),g=k.size>0,R=Number(e.maxStarts)>0?Math.floor(Number(e.maxStarts)):1,O=g?Math.min(R,k.size):R,_=d?O:Math.min(O,h.slotsAvailable);if(!d&&_<=0){let S={runId:i.id,agentOsId:a,dryRun:!1,skipped:!0,reason:h.reason??"no resource slots",resourceGate:h};if(r)return{ok:!0,...S};console.log(JSON.stringify(S,null,2));return}let E=Di(i.id);if(e.reconcileStaleBlockers===!0||e.reconcileStaleBlockers==="true"){let S=`${l}/api/agent-os/by-id/${encodeURIComponent(a)}/lane-hygiene`;try{await re(S,c,{agentOsId:a,dryRun:!1,includeBoardReconcile:!0},{agentOsId:a,baseUrl:l})}catch(v){console.error(`[dispatch] reconcile-stale-blockers lane-hygiene call failed: ${v.message}`)}}let U=`${l}/api/agent-os/by-id/${encodeURIComponent(a)}/tasks/dispatch-next`,Y=S=>({agentOsId:a,dryRun:d,maxStarts:S,leaseOwner:p,leaseDurationMs:Number(e.leaseMs)>0?Math.floor(Number(e.leaseMs)):yi,runnerDiskGate:m,runnerResourceGate:h,activeHarnessWorkers:E,runnerPresence:f,harnessBoardSnapshot:xo(i.id),...e.lane?{lane:Vm(String(e.lane))}:{},...e.executor?{executor:String(e.executor)}:{},...e.diskPath?{diskPath:String(e.diskPath)}:{},...e.targetTaskId?{targetTaskId:String(e.targetTaskId)}:{},...!e.targetTaskId&&e.targetTaskIds?{targetTaskIds:String(e.targetTaskIds).split(",").map(v=>v.trim()).filter(Boolean)}:{}}),$=Wm(),F=async S=>{let v=await re(U,c,Y(S),{agentOsId:a,baseUrl:l,timeoutMs:$})??{ok:!1,status:0,response:null},A=v.response;return{dispatch:v,result:A?.result}},P=await F(g||d?_:1);if(!P.dispatch.ok||!P.result){let S={runId:i.id,agentOsId:a,action:"dispatch",httpStatus:P.dispatch.status,response:P.dispatch.response,authRefreshed:P.dispatch.refreshedAuth===!0,authRefreshFailure:P.dispatch.authRefreshFailure};if(r)return{ok:!1,...S};console.log(JSON.stringify(S,null,2)),process.exit(1)}let B=P.result;if(d){let S=Fg(B),v=Kg(B),A={runId:i.id,agentOsId:a,dryRun:!0,wouldStart:B.started.map(j=>({taskId:j.task.id,title:j.task.title,reason:j.reason})),skipped:B.skipped.map(j=>({taskId:j.task.id,skipReason:j.skipReason,reason:j.reason})),diskGate:B.diskGate,resourceGate:B.resourceGate,inspected:B.inspected,pagesScanned:B.pagesScanned??null,candidatesExhausted:B.candidatesExhausted??null,capacityIdle:S?.capacityIdle===!0,admissionExhaustion:S,dispatchSkipDrain:v};if(r)return{ok:!0,...A};console.log(JSON.stringify(A,null,2));return}let Hr=kf(),Q=[],br=[],It=Number(B.inspected)||0,Ve=!1;async function G(S,v,A){let j=await Xc({baseUrl:l,secret:c,agentOsId:a,taskId:String(S.id),leaseOwner:p,failureDetail:v}),ue={taskId:S.id,started:!1,error:v,released:j.released,releaseResponse:j.releaseResponse,...A};return Q.push(ue),Ge("outcome",{lastOutcome:ue}),!1}async function be(S){let v=S.task,A=String(v.id);if(g&&!k.has(A))return G(v,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...k]});let j=v.prUrl?String(v.prUrl):"";if(!j)return G(v,"land_pr task missing prUrl");try{let ue=await Ug({prUrl:j,repo:Dg(j),cwd:i.repo}),Tt=await Wg({baseUrl:l,secret:c,agentOsId:a,runId:i.id,task:v,report:ue});return Tt.ok?(Q.push({taskId:A,started:!0,landPr:!0,outcome:ue.outcome,completionStatus:Tt.status}),!0):G(v,`land_pr completion POST failed (HTTP ${Tt.status})`,{landPr:!0,outcome:ue.outcome})}catch(ue){return G(v,ue.message)}}async function xe(S){let v="duplicate_dispatch_prevented: live local worker already owns this task",A=await Xc({baseUrl:l,secret:c,agentOsId:a,taskId:String(S.id),leaseOwner:p,failureDetail:v}),j={taskId:S.id,started:!1,error:v,alreadyRunning:!0,nonFatal:!0,released:A.released,releaseResponse:A.releaseResponse};return Q.push(j),Ge("outcome",{lastOutcome:j}),!1}async function Sr(S){let v=S.task,A=Z_(S),j=String(v.id);if(g&&!k.has(j))return G(v,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...k]});let ue=ex(v.personaSlug);if(ue&&(!A?.personaInjectionReady||!A.personaMarkdown))return G(v,`persona_injection_required: missing anchored context-envelope persona block for "${ue}"`);if(bf(i.id,j))return xe(v);let Tt=Number(v.attempt)||1;if(Tt>Hr.maxTaskAttempts)return G(v,`task attempt ${Tt} exceeds KYNVER_MAX_TASK_ATTEMPTS (${Hr.maxTaskAttempts})`);let Ln=v.leaseToken?String(v.leaseToken).trim():"";if(!Ln)return G(v,"dispatch_start_failed: claimed task missing leaseToken \u2014 refusing local spawn");let bv=b(`t-${v.id}-a${v.attempt}`),Dt=fi({explicitModel:e.model?String(e.model):void 0,explicitProvider:e.provider?String(e.provider):void 0,explicitProviderIsOperatorOverride:!!e.provider,task:Gm(v)});try{let tl=v.planId?String(v.planId):void 0,ms=Cf({title:v.title?String(v.title):void 0,description:v.description?String(v.description):null,executorRef:v.executorRef?String(v.executorRef):null,prUrl:v.prUrl?String(v.prUrl):null,branch:v.branch?String(v.branch):null}),Ye=Ti(i,{name:bv,task:$g(v,a),ownedPaths:e.owned?String(e.owned).split(",").map(Sv=>Sv.trim()).filter(Boolean):[],model:Dt.model,provider:Dt.provider,routingRule:Dt.rule,requestedModel:Dt.requestedModel,agentOsId:a,taskId:String(v.id),planId:tl,branch:ms?.targetPrBranch??void 0,executorRef:v.executorRef?String(v.executorRef):void 0,parentTaskId:v.parentTaskId?String(v.parentTaskId):void 0,taskTitle:v.title?String(v.title):void 0,taskPrUrl:ms?.targetPrUrl??(v.prUrl?String(v.prUrl):void 0),repairTargetPrUrl:ms?.targetPrUrl,repairTargetBranch:ms?.targetPrBranch??void 0,instructionPolicyMarkdown:A?.instructionPolicyMarkdown??null,instructionPolicyFingerprint:A?.instructionPolicyFingerprint??null,instructionPolicyEvidence:A?.instructionPolicyEvidence??null,memoryQualityCapture:A?.memoryQualityCapture??null,memoryQualityPromptMarkdown:A?.memoryQualityPromptMarkdown??null,personaMarkdown:A?.personaMarkdown??null,personaSlug:A?.personaSlug??ue,personaEvidence:A?.personaEvidence??null,contextEnvelopeMarkdown:A?.contextEnvelopeMarkdown??null,contextEnvelopeEvidence:A?.contextEnvelopeEvidence??null,leaseOwner:p,leaseToken:Ln,dispatched:!0}),fs=await Bg({agentOsId:a,taskId:String(v.id),leaseOwner:p,expectedLeaseToken:Ln,worker:Ye,baseUrl:l,secret:c});if(!fs.ok)return Hg(i.id,Ye,fs.error??"dispatch_start_readback_failed"),G(v,fs.error??"dispatch_start_readback_failed",{readback:fs.detail??null});Ye.leaseToken!==Ln&&(Ye.leaseToken=Ln,Ye.leaseOwner=p,K(i.id,Ye));let qd={taskId:v.id,started:!0,worker:Ye.name,pid:Ye.pid,branch:Ye.branch,model:Ye.model,provider:Dt.provider,routingRule:Dt.rule,instructionPolicyFingerprint:A?.instructionPolicyFingerprint??null,instructionPolicyRuleCount:Array.isArray(A?.instructionPolicyEvidence?.ruleSlugs)?A.instructionPolicyEvidence.ruleSlugs.length:null,personaSlug:A?.personaSlug??ue,personaOperatingRuleCount:A?.personaEvidence?.operatingRuleCount??null};return Q.push(qd),Ge("worker_started",{lastOutcome:qd}),A?.instructionPolicyFingerprint&&console.error(`[dispatch] task ${j}: operating-rules policy injected fingerprint=${A.instructionPolicyFingerprint}`),A?.personaSlug&&console.error(`[dispatch] task ${j}: persona context injected slug=${A.personaSlug}`),A?.contextEnvelopeReady&&console.error(`[dispatch] task ${j}: context envelope injected anchor=${A.contextEnvelopeEvidence?.anchorTaskId??j}`),!0}catch(tl){return G(v,tl.message)}}let Ee=new Set;async function us(S){let v=S.task,A=String(v.id);if(Ee.has(A))return G(v,"dispatch_retry_loop_prevented: task already failed to start this tick");let j=W(S)?await be(S):await Sr(S);return j||Ee.add(A),j}for(let S of B.started)await us(S);if(br.push(...B.skipped??[]),g)for(let S of br){let v=String(S.task.id);k.has(v)&&Q.push({taskId:v,started:!1,error:`exact_target_not_started:${S.skipReason}`,skipReason:S.skipReason,detail:S.reason??null,requestedTargetTaskIds:[...k]})}for(;!g&&Q.length<_;){if(ve()){let A={started:!1,error:"dispatch_circuit_breaker: start readback failed; stopping top-up for this tick",nonFatal:!0};Q.push(A),Ge("circuit_breaker",{lastOutcome:A});break}let S=await F(1);if(!S.dispatch.ok||!S.result){let A=Lm(S.dispatch.response),j=Ot();Ve=A&&j>0;let ue={started:!1,error:"dispatch_next request failed during top-up",httpStatus:S.dispatch.status,response:S.dispatch.response,...Ve?{nonFatal:!0,partialTopUp:!0}:{}};Q.push(ue),Ge("top_up_failed",{partialTopUpInterrupted:Ve,lastOutcome:ue});break}It+=Number(S.result.inspected)||0,br.push(...S.result.skipped??[]);let v=S.result.started??[];if(v.length===0)break;for(let A of v){if(Q.length>=_)break;await us(A)}}let ds=Q.filter(S=>S.started).length,Nt=Fg(B),ps=Kg(B),Vd=ds===0&&(Nt?.capacityIdle===!0||Number(B.resourceGate?.slotsAvailable)>0);if(Vd&&Nt?.summary){let S=Nt.skipReasonCounts?.retry_ceiling_exceeded??0,v=B.overAttemptIdleRecovery??Nt.overAttemptIdleRecovery,A=v?.attempted===!0?`; over_attempt_recovery minted=${v.minted??0} started=${v.started??0}`:S>0?"; over_attempt_recovery not attempted":"",j=ps?`; dispatch_skip_drain scanned=${ps.scanned??0} advanced=${ps.advanced??0}`:"";console.error(`[dispatch] ${Nt.summary}${S>0?`; retry_ceiling_exceeded=${S}`:""}${A}${j}`)}let Gd={runId:i.id,agentOsId:a,dryRun:!1,leaseOwner:p,startedCount:ds,capacityIdle:Vd,admissionExhaustion:Nt,dispatchSkipDrain:ps,outcomes:Q,skipped:br.map(S=>({taskId:S.task.id,skipReason:S.skipReason})),inspected:It,pagesScanned:B.pagesScanned??null,candidatesExhausted:B.candidatesExhausted??null,diskGate:B.diskGate,resourceGate:B.resourceGate,...Ve?{partialTopUpInterrupted:!0}:{},dispatchCallbackTimeoutMs:$},Yd=S=>!S.started&&S.nonFatal!==!0,vv=Q.some(Yd),Jd=Ve&&ds>0?!0:!vv;if(Jl({runId:i.id,agentOsId:a,phase:"complete",partial:Ve,startedCount:ds,ok:Jd}),r)return{ok:Jd,...Gd};console.log(JSON.stringify(Gd,null,2)),Q.some(Yd)&&process.exit(1)}catch(i){if(r)return{ok:!1,error:i.message};console.error(`run dispatch failed: ${i.message}`),process.exit(1)}}Kt();_s();Ft();Ft();import{unlinkSync as tx}from"node:fs";function ji(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function jg(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function nx(e,r,t){return e.length===0?[]:t?[...e]:e.length<=r?[]:e.slice(r)}function No(e={}){let r=e.execute===!0||ji("KYNVER_WSL_CRASH_DUMP_EXECUTE")||ji("KYNVER_CLEANUP_EXECUTE"),t=e.purgeAll===!0||ji("KYNVER_WSL_CRASH_DUMP_PURGE_ALL"),n=Math.max(0,e.keepNewest??jg("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",t?0:1)),o=cr({forceWsl:e.forceWsl});if(!o?.path)return{observation:o,execute:r,keepNewest:n,removed:[],removedBytes:0,skipped:o?.probeError?[{path:o.path??"(unresolved)",reason:o.probeError}]:[]};let s=nx(o.dumps,n,t),i=[],a=[],l=0;for(let c of s){if(!r){a.push({path:c.path,reason:"dry_run"});continue}try{tx(c.path),i.push({path:c.path,bytes:c.bytes,name:c.name}),l+=c.bytes}catch(u){a.push({path:c.path,reason:u.message})}}return{observation:o,execute:r,keepNewest:n,removed:i,removedBytes:l,skipped:a}}function eu(e){return e?ji("KYNVER_WSL_CRASH_DUMP_CLEANUP")||!e.ok?!0:e.dumpCount>jg("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",1):!1}qn();Il();Al();Er();I();Oe();import ox from"node:os";function To(e,r={}){let t=(r.boxKind??qe(y())).trim().toLowerCase()||"forge",n=r.hostLabel??ox.hostname();return{boxId:r.boxId??ko(t,n),boxKind:t,displayName:r.displayName??null,hostLabel:n,observedAt:r.observedAt??new Date().toISOString(),totalMemBytes:e.totalMemBytes,freeMemBytes:e.freeMemBytes,activeWorkers:e.activeWorkers,maxConcurrentWorkers:e.maxConcurrentWorkers,autoCap:e.autoCap,slotsAvailable:e.slotsAvailable,harnessRunId:r.harnessRunId??null,queuedTasks:r.queuedTasks??null,reason:e.reason,...r.prEvidence?.length?{prEvidence:r.prEvidence}:{}}}function sx(e){let r={ts:e.ts??new Date().toISOString(),phase:e.phase,summary:e.summary,changedFiles:e.changedFiles??[],blocker:e.blocker??null};return e.boxResourceSnapshot&&(r.boxResourceSnapshot=e.boxResourceSnapshot),e.prEvidence?.length&&(r.prEvidence=e.prEvidence),`${JSON.stringify(r)}
-`}z();Qn();function ix(e){if(e.skipReason==="engagement_required")return!0;let r=e.reason??"";return r.includes("engagement_required")||r.includes("engagement_not_found")||r.includes("engagement_expired")||r.includes("engagement_revoked")}Ml();zn();import{createHash as Vg}from"node:crypto";function Vi(e){return JSON.stringify(ru(e))}function ru(e){if(Array.isArray(e))return e.map(ru);if(e&&typeof e=="object"){let r={};for(let t of Object.keys(e).sort())r[t]=ru(e[t]);return r}return e}function ax(e){return`ib1-${Vg("sha256").update(Vi(e),"utf8").digest("hex").slice(0,16)}`}function lx(e){return`ib-${Vg("sha256").update(Buffer.from(e)).digest("hex").slice(0,12)}`}function Gi(e){if(!e)return null;let r=e.trim();if(!r)return null;if(/^[0-9a-fA-F]{64}$/.test(r))return new Uint8Array(r.match(/.{2}/g).map(t=>parseInt(t,16)));try{let t=Buffer.from(r,"base64");if(t.length===32)return new Uint8Array(t)}catch{}return null}function fn(e){if(!e||typeof e!="object")return!1;let r=e;if(typeof r.signature!="string"||!r.signature||typeof r.publicKeyId!="string"||!r.publicKeyId)return!1;let t=r.bundle;return!(!t||typeof t!="object"||typeof t.version!="string"||!t.version||typeof t.generatedAt!="string"||!Array.isArray(t.personas)||!t.instructions||typeof t.instructions!="object"||!t.policyThresholds||typeof t.policyThresholds!="object")}var Gg={"ib-3bab6314f0ba":"53a2040646cd479e1f5f1aea9abf7848ce8b62e32001efb8044dfd90e8ab87ed","ib-26e6c695da06":"bb1700f25b2ee7d7cdcdb9f446f0f44ef2cc22a3096bc161232fb658e7cdaf38"};function tu(e,r=process.env){let t=Gi(r.KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY);if(t)return t;let n=Gg[e];return n?Gi(n):null}import{createPublicKey as cx,verify as ux}from"node:crypto";var dx=Buffer.from("302a300506032b6570032100","hex");function px(e){return cx({key:Buffer.concat([dx,Buffer.from(e)]),format:"der",type:"spki"})}function Yg(e,r){if(!fn(e))return{ok:!1,reason:"malformed signed bundle payload"};let t;try{t=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(t.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let n=Buffer.from(Vi(e.bundle),"utf8");return ux(null,n,px(r),t)?{ok:!0,bundle:e.bundle}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(n){return{ok:!1,reason:`signature verification failed: ${n.message}`}}}function nu(e,r=process.env){if(!fn(e))return{ok:!1,reason:"malformed signed bundle payload"};let t=tu(e.publicKeyId,r);return t?Yg(e,t):{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}" (not pinned; set KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY)`}}import{mkdirSync as mx,readFileSync as fx,renameSync as gx,writeFileSync as hx}from"node:fs";import{homedir as kx}from"node:os";import Jg from"node:path";function ou(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return Jg.join(kx(),".kynver",`instruction-bundle-${r}.json`)}function su(e,r){try{let t=ou(e);mx(Jg.dirname(t),{recursive:!0});let n=`${t}.tmp-${process.pid}`;hx(n,JSON.stringify(r),"utf8"),gx(n,t)}catch{}}function iu(e){try{let r=fx(ou(e),"utf8"),t=JSON.parse(r);return fn(t)?t:null}catch{return null}}var qg=15*6e4,yx=1e4,fr={lastAttemptAtMs:0,etag:null,diskCacheTried:!1,routeMissingLogged:!1};function Mo(e,r){console.error(JSON.stringify({event:e,...r}))}function zg(e,r,t){let n=nu(e);return n.ok?(ql(n.bundle,r),r==="server"&&su(t,e),!0):(Mo("instruction_bundle_signature_invalid",{agentOsId:t,source:r,publicKeyId:e.publicKeyId,reason:n.reason}),!1)}function Do(e){if(fr.diskCacheTried)return!1;fr.diskCacheTried=!0;let r=iu(e);return r?zg(r,"disk",e):!1}async function au(e){let r=e.nowMs??Date.now(),t=()=>({source:pr(),version:Ir(),updated:!1});if(!e.force&&r-fr.lastAttemptAtMs<qg)return t();fr.lastAttemptAtMs=r;let n=e.baseUrl?.trim().replace(/\/$/,""),o=e.secret?.trim();if(!n||!o)return pr()==="embedded"&&Do(e.agentOsId)?{...t(),updated:!0}:t();let s=e.fetchImpl??fetch,i=new AbortController,a=setTimeout(()=>i.abort(),yx);try{let l=He(o);delete l["Content-Type"],fr.etag&&pr()==="server"&&(l["If-None-Match"]=fr.etag);let c=await s(`${n}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/runtime/instruction-bundle`,{headers:l,signal:i.signal});if(c.status===304)return t();if(c.status===404)return fr.routeMissingLogged||(fr.routeMissingLogged=!0,Mo("instruction_bundle_route_missing",{agentOsId:e.agentOsId,baseUrl:n})),pr()==="embedded"&&Do(e.agentOsId)?{...t(),updated:!0}:t();if(!c.ok)return Mo("instruction_bundle_fetch_failed",{agentOsId:e.agentOsId,status:c.status}),pr()==="embedded"&&Do(e.agentOsId)?{...t(),updated:!0}:t();let u=await c.json().catch(()=>null);return!u||!zg(u,"server",e.agentOsId)?pr()==="embedded"&&Do(e.agentOsId)?{...t(),updated:!0}:t():(fr.etag=c.headers.get("etag"),Mo("instruction_bundle_loaded",{agentOsId:e.agentOsId,version:Ir(),publicKeyId:u.publicKeyId}),{...t(),updated:!0})}catch(l){return Mo("instruction_bundle_fetch_error",{agentOsId:e.agentOsId,error:l instanceof Error?l.message:String(l)}),pr()==="embedded"&&Do(e.agentOsId)?{...t(),updated:!0}:t()}finally{clearTimeout(a)}}var lu="openai-codex",Rx=new Set(["upstream_503","connection_refused","connection_reset","sse_no_event","sse_idle_timeout"]),vx=[/\bsk-[a-zA-Z0-9_-]{8,}\b/g,/\bBearer\s+[a-zA-Z0-9._-]{8,}\b/gi,/\baccess[_-]?token["\s:=]+[a-zA-Z0-9._-]{8,}/gi];function gr(e,r=400){let t=String(e??"").replace(/\s+/g," ").trim();for(let n of vx)t=t.replace(n,"[redacted]");return t.length>r?`${t.slice(0,r)}\u2026`:t}function bx(e,r){let t=[];e instanceof Error?(t.push(e.message),t.push(e.name)):typeof e=="string"?t.push(e):e!=null&&t.push(String(e));let n=e,o=r??n?.status_code??n?.statusCode??void 0;return o!=null&&t.push(`http ${o}`),{haystack:t.join(" ").toLowerCase(),statusCode:o}}function Qg(e,r){let{haystack:t,statusCode:n}=bx(e,r),o=e instanceof Error?e.message:typeof e=="string"?e:String(e??"");if(n===402||/billing|credit|payment required|insufficient_quota/.test(t))return{errorClass:"billing",summary:gr(o||"Billing or credits exhausted"),statusCode:n,transient:!1};if(n===401||n===403||/\bunauthorized\b|\bforbidden\b/.test(t))return{errorClass:"auth",summary:gr(o||"Authentication failed"),statusCode:n,transient:!1};if(n===429||/rate limit|too many requests|throttl/.test(t))return{errorClass:"rate_limit",summary:gr(o||"Rate limited"),statusCode:n,transient:!0};if(n===503||/upstream connect error|connection termination|remote connection failure|delayed connect error/.test(t))return{errorClass:"upstream_503",summary:gr(o||"ChatGPT Codex backend returned HTTP 503"),statusCode:n??503,transient:!0};if(/connection refused/.test(t))return{errorClass:"connection_refused",summary:gr(o||"Connection refused by ChatGPT Codex backend"),statusCode:n,transient:!0};if(/no sse events|no bytes within|no stream events|codex stream produced no/.test(t)){let s=/no bytes|ttfb|first byte/.test(t)?"sse_no_event":"sse_idle_timeout";return{errorClass:s,summary:gr(o||(s==="sse_no_event"?"Codex stream opened but sent no events":"Codex stream stalled after the first event")),statusCode:n,transient:!0}}return/connection reset|connection lost|connection closed|disconnect\/reset/.test(t)?{errorClass:"connection_reset",summary:gr(o||"Connection reset while talking to ChatGPT Codex"),statusCode:n,transient:!0}:{errorClass:"unknown",summary:gr(o||"Unknown provider error"),statusCode:n,transient:!1}}function Zg(e){let r=e.env??process.env,t=Math.max(1,e.defaultRetries??3),n=String(e.provider??"").toLowerCase(),o=String(e.platform??"").toLowerCase();if(n!==lu||o!=="cron")return t;let s=r.HERMES_CODEX_CRON_API_MAX_RETRIES?.trim();if(!s)return Math.max(t,5);let i=Number.parseInt(s,10);return!Number.isFinite(i)||i<1?Math.max(t,5):Math.max(t,i)}var Xg={upstream_503:"ChatGPT Codex backend outage (HTTP 503)",connection_refused:"ChatGPT Codex backend refused the connection",connection_reset:"ChatGPT Codex connection dropped mid-request",sse_no_event:"Codex stream never started (no SSE events)",sse_idle_timeout:"Codex stream stalled (no SSE events after the first byte)",rate_limit:"ChatGPT Codex rate limit",billing:"ChatGPT Codex billing or quota limit",auth:"ChatGPT Codex authentication problem",unknown:"ChatGPT Codex provider error"};function eh(e){let r=e.provider?.trim()||lu,t=e.model?.trim()||"(unknown model)",n=e.jobName?.trim()||"Scheduled Hermes job",o=Xg[e.errorClass]??Xg.unknown,s=e.degraded?"degraded":"failed";return[`\u26A0\uFE0F ${n} \u2014 AI provider ${s} (not a Kynver harness failure).`,"",`Provider: ${r} (ChatGPT Codex subscription)`,`Model: ${t}`,`What happened: ${o} after ${e.attempts} attempt(s) with backoff.`,`Details: ${e.summary}`,"","This is a ChatGPT/Codex API issue on chatgpt.com \u2014 not AgentOS, not the Kynver runtime, and not your local harness.","The cron job will run again on its next schedule. If it persists, check ChatGPT/Codex status or re-auth with: hermes auth status openai-codex"].join(`
-`)}function rh(e,r){return`\u26A0\uFE0F Cron job '${e}' \u2014 provider degraded
+${n}`;return jC.some(s=>s.test(o))?"privileged":r.includes("provider:claude")||r.includes("deep_review")||r.includes("security")||r.includes("landing")||r.includes("review")||t.startsWith("land:")||r.includes("implementer")||r.includes("repair")||t.includes("implement")?"elevated":VC.some(s=>s.test(o))?"low":"elevated"}function GC(e){let r=at(e.provider),t=e.escalatedFrom&&e.escalatedReason?`Escalated from ${e.escalatedFrom} (${e.escalatedReason}); using ${r.displayName} (${r.costTier} tier)`:`${r.displayName} selected for ${e.riskClass} orchestration (${r.costTier} tier, auth=${e.authSource})`;return{provider:e.provider,model:e.model,authSource:e.authSource,costTier:r.costTier,riskClass:e.riskClass,costRationale:t,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason}}function YC(e){let r=e.inventory??gc();return e.codexBinding?{...r,bindings:{...r.bindings,codex:e.codexBinding}}:r}function lt(e){let r=GC({provider:e.providerId,model:e.model,authSource:e.binding.authSource,riskClass:e.riskClass,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason});return{provider:e.providerId,model:e.model,rule:r.routingRule,audit:r}}function kc(e){let r=e.task??{},t=uf(r),n=YC({inventory:e.inventory,codexBinding:e.codexBinding??(e.inventory?null:Tr())}),o=e.preferLowCost===!1?null:e.explicitProvider?.trim().toLowerCase(),s=e.explicitModel?.trim()||void 0,i=Ie;if(o==="codex"||o==="provider:codex"){let c=n.bindings.codex;if(!c.ready){let u=ui({inventory:n,riskClass:t});return lt(u?{providerId:u.providerId,binding:u.binding,riskClass:t,routingRule:"orchestration:explicit_codex_unavailable_cost_aware",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"}:{providerId:i,binding:n.bindings[i],riskClass:t,routingRule:"orchestration:codex_unavailable_escalate_cursor",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"})}return lt({providerId:"codex",binding:c,riskClass:t,routingRule:"orchestration:explicit_codex",model:s})}if(o==="cursor"||o==="provider:cursor"){let c=n.bindings.cursor;if(c.ready)return lt({providerId:"cursor",binding:c,riskClass:t,routingRule:"orchestration:explicit_cursor",model:s})}if(o==="claude"||o==="provider:claude"){let c=n.bindings.claude;if(c.ready)return lt({providerId:"claude",binding:c,riskClass:t,routingRule:"orchestration:explicit_claude",model:s})}let a=ui({inventory:n,riskClass:t});if(a)return lt({providerId:a.providerId,binding:a.binding,riskClass:t,routingRule:`orchestration:cost_aware_${a.providerId}`,model:s,escalatedFrom:a.escalatedFrom,escalatedReason:a.escalatedReason});let l=n.bindings.codex;return lt({providerId:i,binding:n.bindings[i],riskClass:t,routingRule:l.ready?"orchestration:inventory_empty_default_cursor":"orchestration:codex_unavailable_default_cursor",model:s,...l.ready?{}:{escalatedFrom:"codex",escalatedReason:l.note??"codex oauth not bound"}})}jr();C();import{closeSync as pf,openSync as mf}from"node:fs";import{spawn as QC}from"node:child_process";var JC=/-(?:thinking(?:-(?:high|medium|low|minimal|max|none))?|high|medium|low|minimal)$/i;function qC(e){return e.replace(JC,"")}var zC=/^(?:gpt-|gpt5|o1|o3|o4|gemini-|grok-|composer|deepseek|llama|mistral|qwen|command-)/i;function yc(e){return/^claude[-_]/i.test(e)||/^(?:opus|sonnet|haiku)\b/i.test(e)}var XC=new Set(["cursor"]);function df(e){let r=e.trim().toLowerCase();return XC.has(r)?"auto":null}function mi(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let o=qC(t).trim()||r;return zC.test(o)||!yc(o)&&o!==r?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is not a Claude model \u2014 the "claude" provider drives the Claude CLI, which only accepts claude-* model ids (got "${o}"). Pick a Claude model or switch the worker provider.`}:o!==t?{ok:!0,model:o,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${o}" (the Claude CLI rejects reasoning-effort suffixes)`}:{ok:!0,model:o,normalized:!1}}function ct(e,r){let t=(e??"").trim();return t?yc(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "codex". Switch the provider or pick a Codex/OpenAI model.`}:{ok:!0,model:t,normalized:!1}:{ok:!0,model:r,normalized:!1}}function fi(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let n=df(t);return n?{ok:!0,model:n,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${n}" (Cursor provider alias \u2014 use "auto" or a composer id, not "cursor")`}:yc(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "cursor". Switch the provider to "claude" or pick a Cursor model.`}:{ok:!0,model:t,normalized:!1}}var dn="claude-sonnet-4-6",ff={name:"claude",defaultModel:dn,preflightModel(e){return mi(e,dn)},start(e){let r=mi(e.model,dn);if(!r.ok)throw new Error(`claude provider model preflight failed: ${r.note}`);let t=r.model,n=mf(e.stdoutPath,"a"),o=mf(e.stderrPath,"a"),s=["ignore",n,o],i=QC("claude",["--model",t,"-p","--verbose","--permission-mode","bypassPermissions","--output-format","stream-json","--include-partial-messages",e.prompt],pe({cwd:e.worktreePath,detached:!0,stdio:s,env:We(process.env)}));if(pf(n),pf(o),!i.pid)throw new Error("failed to spawn claude worker process (is the `claude` CLI on PATH?)");return i.unref(),{pid:i.pid,model:t}}};jr();C();import{closeSync as yf,existsSync as rw,openSync as Rf}from"node:fs";import{spawn as vf}from"node:child_process";jr();C();import{closeSync as gf,openSync as hf}from"node:fs";import{spawn as ZC}from"node:child_process";var gi=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4";function ew(){return We({...process.env,CI:"1",NO_COLOR:"1",HERMES_ACCEPT_HOOKS:process.env.HERMES_ACCEPT_HOOKS??"1"})}function kf(e,r){let t=process.env.KYNVER_HERMES_CODEX_MAX_TURNS?.trim()||"40";return["chat","-q",r,"--provider","openai-codex","-m",e,"-Q","--accept-hooks","--max-turns",t,"--toolsets","hermes-cli"]}var Rc={name:"hermes-codex",defaultModel:gi,preflightModel(e){return ct(e,gi)},start(e){let r=ct(e.model,gi);if(!r.ok)throw new Error(`hermes-codex provider model preflight failed: ${r.note}`);let t=r.model,n=hf(e.stdoutPath,"a"),o=hf(e.stderrPath,"a"),s=["ignore",n,o],i=Ne("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),a=kf(t,e.prompt),l=ZC(i,a,pe({cwd:e.worktreePath,detached:!0,shell:!1,stdio:s,env:ew()}));if(gf(n),gf(o),!l.pid)throw new Error(`failed to spawn Hermes openai-codex worker (is \`${i}\` on PATH? run \`hermes auth status openai-codex\`)`);return l.unref(),{pid:l.pid,model:t}}};function tw(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4"}var Dr=tw();function nw(){return process.env.KYNVER_CODEX_BIN?.trim()||process.env.CODEX_BIN?.trim()||"codex"}function ow(){return We({...process.env,CI:"1",NO_COLOR:"1"})}function bf(e,r){return["exec","--sandbox","read-only","--ask-for-approval","never","--model",e,r]}function sw(e,r,t){if(!(process.platform!=="win32"&&rw("/usr/bin/script")))return vf(e,r,t);let o=[e,...r].map(s=>`'${s.replace(/'/g,"'\\''")}'`).join(" ");return vf("script",["-qfc",o,"/dev/null"],t)}var vc={name:"codex",defaultModel:Dr,preflightModel(e){return ct(e,Dr)},start(e){if(Tr().path==="hermes_openai_codex")return Rc.start(e);let t=ct(e.model,Dr);if(!t.ok)throw new Error(`codex provider model preflight failed: ${t.note}`);let n=t.model,o=Rf(e.stdoutPath,"a"),s=Rf(e.stderrPath,"a"),i=["ignore",o,s],a=nw(),l=bf(n,e.prompt),c=sw(a,l,pe({cwd:e.worktreePath,detached:!0,shell:!1,stdio:i,env:ow()}));if(yf(o),yf(s),!c.pid)throw new Error(`failed to spawn Codex worker (is \`${a}\` on PATH? run \`codex login\` or set CODEX_API_KEY)`);return c.unref(),{pid:c.pid,model:n}}};var iw="claude-sonnet-4-6",lc="composer-2.5";function hi(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Sf(e){return e.toLowerCase()}function Sc(e=y()){let r=e.defaultModel?.trim();if(r)return r;let t=process.env.KYNVER_DEFAULT_MODEL?.trim();return t||iw}function bc(e){let r=(e??"").toLowerCase();return!r||r.includes("composer")||r.includes("cursor")||r.includes("codex")||r.startsWith("gpt-")||r.startsWith("gpt5")?"cursor":/^claude[-_]/i.test(r)||/^(?:opus|sonnet|haiku)\b/i.test(r)?"claude":"cursor"}function aw(e,r){let t=e.trim().toLowerCase(),n=r?.trim();return t==="cursor"?{model:lc,provider:"cursor",rule:n&&n!=="cursor"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:t==="claude"||t==="anthropic"?{model:dn,provider:"claude",rule:n&&n!=="claude"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:null}function Cf(e,r){return!!(e.includes("deep")&&e.includes("review")||e.includes("security")||e.includes("plan_author")||e.includes("plan-author")||r.includes("deep review")||r.includes("security review")||e.includes("plan")&&!e.includes("review")&&(e.includes("author")||e.includes("strategy")))}function lw(e){let r=Sf(hi(e,"executorRef")),t=hi(e,"title").toLowerCase(),n=hi(e,"priority")||"normal",o=Sf(hi(e,"roleLane"));if(r.includes("provider:codex")||r.startsWith("codex:"))return{provider:"codex",model:Dr,rule:"lane:codex_orchestration"};if(r.includes("cursor")||r.includes("composer")||r.includes("copilot")||o==="implementer"||o==="repair_implementer")return{provider:"cursor",rule:"lane:implementation"};if(r.includes("codex"))return{provider:"codex",model:Dr,rule:"lane:codex_orchestration"};if(r.includes("landing")||t.startsWith("land:")||t.includes(" merge"))return{provider:"cursor",rule:"lane:landing"};if(r.includes("review")||/^review[\s:]/.test(t)||o.includes("review"))return Cf(r,t)||o==="deep_reviewer"?{provider:"cursor",rule:"lane:deep_review"}:{provider:"cursor",rule:"lane:review"};if(Cf(r,t)||o==="plan_author")return{provider:"cursor",rule:"lane:planning"};if(n==="critical")return{provider:"cursor",rule:"priority:critical"};if(n==="high")return{provider:"cursor",rule:"priority:high"};if(n==="low")return{provider:"cursor",rule:"priority:low"};let s=Sc();return{model:s,provider:bc(s),rule:"default:global"}}function ki(e){let r;if(e.explicitModel?.trim()){let o=e.explicitModel.trim(),s=aw(o,e.explicitProvider);s?r=s:r={model:o,provider:e.explicitProvider?.trim()||bc(o),rule:"explicit:cli",requestedModel:o}}else if(e.task&&Object.keys(e.task).length>0){let o=lw(e.task);r={...o,requestedModel:o.model}}else{let o=Sc();r={model:o,provider:e.explicitProvider?.trim()||bc(o),rule:"default:global",requestedModel:o}}let t=ac({routing:r,task:e.task,explicitProvider:e.explicitProvider,explicitProviderIsOperatorOverride:e.explicitProviderIsOperatorOverride});if(!e.task||Object.keys(e.task).length===0||t.rule==="explicit:model_provider_alias"||t.rule==="explicit:model_provider_alias_overrode_provider"||t.rule==="explicit:cli"||Xe(t.provider)&&(e.explicitProviderIsOperatorOverride||li(e.task)))return t;let n=kc({task:e.task,explicitProvider:e.explicitProvider??t.provider,explicitModel:t.model});return{provider:n.provider,model:n.provider==="codex"?n.model??t.model??Dr:t.model,rule:n.rule,requestedModel:t.requestedModel,orchestrationAudit:n.audit}}function wf(e,r,t){return e||r||t||Sc()||dn}function _f(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function xf(){return{maxTaskAttempts:_f(process.env.KYNVER_MAX_TASK_ATTEMPTS,Math.floor(it("harness.maxTaskAttempts",4))),dispatchCooldownMs:_f(process.env.KYNVER_DISPATCH_COOLDOWN_MS,Math.floor(it("harness.dispatchCooldownMs",5e3)))}}I();import pw from"node:path";T();z();C();var Cc="kynver-harness:",Ef="@runner:";function wc(e){return e?.trim()?e.trim():null}function cw(e){let r=wc(e);if(!r?.startsWith(Cc))return null;let t=r.slice(Cc.length),n=t.indexOf(Ef);return n>=0?t.slice(0,n).trim()||null:t.trim()||null}function _c(e,r){let t=e.trim(),n=r.trim();return`${Cc}${t}${Ef}${n}`}function xc(e,r){let t=wc(r);return t?cw(e)===t:!1}function yi(e){let r=wc(e.workerLeaseOwner);return r&&xc(r,e.runId)?r:_c(e.runId,e.runnerId)}import Pf from"node:os";Oe();Oe();import uw from"node:os";function dw(e=process.env){return Ae(e).boxKind}function Ro(e,r){let t=(r??uw.hostname()).trim().toLowerCase().replace(/\s+/g,"-")||"unknown-host";return`${e}:${t}`}function Mr(e){return e?.trim()?e.trim():null}function er(e={}){let r=e.env??process.env;return{runnerId:Mr(r.KYNVER_RUNTIME_ID)??Mr(r.OPENCLAW_RUNTIME_ID)??Mr(r.HOSTNAME)??Pf.hostname(),hostname:Mr(r.HOSTNAME)??Pf.hostname(),profile:Mr(r.KYNVER_RUNNER_PROFILE)??Mr(r.OPENCLAW_RUNNER_PROFILE),harnessRepo:Mr(r.KYNVER_HARNESS_REPO)??Mr(r.KYNVER_DEFAULT_REPO),runId:e.runId??null,instructionBundleVersion:Nr()}}I();async function pn(e){let r=new Map,t=e.agentOsId?.trim();if(!t||e.taskIds.length===0)return r;let n=V(e.baseUrl);try{let o=await J(e.secret,t,{baseUrl:n}),s=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/harness/monitor/task-leases`,i=await re(s,o,{taskIds:[...new Set(e.taskIds)]},{agentOsId:t,baseUrl:n});if(!i.ok||!i.response||typeof i.response!="object")return r;let a=i.response.tasks;if(!Array.isArray(a))return r;for(let l of a)l?.taskId&&r.set(l.taskId,l)}catch{}return r}T();async function Ri(e){let r=e.worker.leaseOwner?.trim()??null,t=e.worker.leaseToken?.trim()??null;if(t)return{leaseOwner:r,leaseToken:t};let n=e.worker.taskId?.trim();if(!n)return{leaseOwner:r,leaseToken:null};let s=(await pn({agentOsId:e.agentOsId,taskIds:[n],baseUrl:e.baseUrl,secret:e.secret})).get(n),i=s?.leaseOwner?.trim()??null,a=s?.leaseToken?.trim()??null;if(!a)return{leaseOwner:r??i,leaseToken:null};let l=r??i;return(!e.worker.leaseToken||e.worker.leaseToken!==a)&&K(e.worker.runId,{...e.worker,...l?{leaseOwner:l}:{},leaseToken:a}),{leaseOwner:l,leaseToken:a}}function Af(e,r){return w(pw.join(x(e),"workers",b(r),"worker.json"),void 0)}async function vi(e,r){let t=L(e),n=String(r.agentOsId||"");if(!n)return{renewed:[],failed:[],skipped:[]};let o=V(r.baseUrl?String(r.baseUrl):void 0),s=await J(r.secret?String(r.secret):void 0,n,{baseUrl:o}),i=Number(r.leaseMs)>0?Math.floor(Number(r.leaseMs)):bi,a=er({runId:e}).runnerId,l=[],c=[],u=[];for(let d of Object.keys(t.workers||{})){let m=Af(e,d);if(!m?.taskId||!m.agentOsId){u.push(d);continue}if(!H(m.pid)){u.push(d);continue}if(D(m).status==="done"){u.push(d);continue}let f=yi({runId:e,workerLeaseOwner:m.leaseOwner??null,runnerId:a}),h=await Ri({worker:m,agentOsId:n,baseUrl:o,secret:s}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(m.taskId)}/renew-lease`,g=await re(k,s,{leaseOwner:h.leaseOwner??f,leaseDurationMs:i,...h.leaseToken?{leaseToken:h.leaseToken}:{}},{agentOsId:n,baseUrl:o});if(g.ok){l.push(d);continue}let R=g.response&&typeof g.response=="object"&&"reason"in g.response?String(g.response.reason??`http ${g.status}`):`http ${g.status}`;c.push({worker:d,reason:R})}return{renewed:l,failed:c,skipped:u}}function If(e,r){let t=L(e);for(let n of Object.keys(t.workers||{})){let o=Af(e,n);if(!(!o||o.taskId!==r||!H(o.pid)||D(o).status==="done"))return!0}return!1}Pe();T();T();import{existsSync as N_,mkdirSync as T_}from"node:fs";import mn from"node:path";var mw=/<!--\s*harness-contract:\s*(\{[\s\S]*?\})\s*-->/i,fw="next-action-fix:";function Si(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Of(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:Si(e)}function gw(e){let r=(e.title??"").trim().toLowerCase();if(r.startsWith("fix:")||r.startsWith("repair:"))return!0;let t=(e.executorRef??"").toLowerCase();return!!(t.startsWith(fw)||t.includes("repair")||t.includes("unblock"))}function hw(e){let r={repairEnforceOriginalPr:!1,targetPrUrl:null,targetPrBranch:null};if(!e)return r;let t=e.match(mw);if(!t?.[1])return r;try{let n=JSON.parse(t[1]),o=Si(String(n.targetPrUrl??n.target_pr_url??"")),s=Si(String(n.targetPrBranch??n.target_pr_branch??""));return{repairEnforceOriginalPr:n.repairEnforceOriginalPr===!0||n.repair_enforce_original_pr===!0||!!o,targetPrUrl:o?Of(o):null,targetPrBranch:s}}catch{return r}}function Nf(e){if(!gw(e))return null;let r=hw(e.description),t=e.prUrl?Of(e.prUrl):null,n=r.targetPrUrl??t;return n?{targetPrUrl:n,targetPrBranch:r.targetPrBranch??Si(e.branch)}:null}function Tf(e){return["Repair target PR policy:","- Work on the existing target PR branch \u2014 do not open a duplicate repair PR by default.",`- Canonical target PR: ${e.targetPrUrl}`,...e.targetPrBranch?[`- Canonical target branch: \`${e.targetPrBranch}\` (checkout is already on this branch).`]:[],`- Reconcile ${e.targetPrUrl} in structured finalResult.targetPrReconciliation.`,"- Only supersede the original when the branch is inaccessible: set supersedesOriginalTargetPr: true with reason and close/comment on the original PR."]}function Ec(e){let r=e.ownedPaths.length?`Owned paths: ${e.ownedPaths.join(", ")}. Do not edit outside these paths without stopping and reporting why.`:"Owned paths: unrestricted for this worker, but keep edits tightly scoped.",t=!!e.model?.toLowerCase().includes("haiku"),n=t?"compact":"full",o=t?e.planId?`Active planId: ${e.planId}`:"No planId on this worker.":e.planId?`Active planId: ${e.planId}${e.taskId?` \xB7 taskId: ${e.taskId}`:""}`:"No planId on this worker \u2014 still emit progress when you touch plan-scoped work.",s=[...cn(`worker.prompt.progress.${n}`).split(`
+`),o],i=cn(`worker.prompt.merge_gate.${n}`).split(`
+`),a=cn(`worker.prompt.plan_artifacts.${n}`).split(`
+`);return["You are running under the Kynver AgentOS runtime.","Immediately state your plan before editing.",r,`Worktree: ${e.worktreePath}`,`Progress heartbeat file: ${e.heartbeatPath}`,"After each major step, append one JSON line to the heartbeat file with fields: ts, phase, summary, changedFiles, blocker.","Before exiting, append a terminal heartbeat with phase `complete` and a structured finalResult object; if you cannot complete, append blocker plus the recovery next action instead of exiting silently.","Final response must include files changed, verification commands, and unresolved risks.",...cn("worker.prompt.core_rules").split(`
+`),"",...s,"",...i,"",...a,"",...e.contextEnvelopeMarkdown?.trim()?[e.contextEnvelopeMarkdown.trim(),""]:[],...e.personaMarkdown?.trim()?[e.personaMarkdown.trim(),""]:[],...e.instructionPolicyMarkdown?.trim()?["Operating rules (from AgentOS memory policy):",e.instructionPolicyMarkdown.trim(),""]:[],...e.memoryQualityMarkdown?.trim()?[e.memoryQualityMarkdown.trim(),""]:[],...e.repairTargetPrUrl?[...Tf({targetPrUrl:e.repairTargetPrUrl,targetPrBranch:e.repairTargetBranch??null}),""]:[],"Task:",e.task].join(`
+`)}C();I();C();jr();import{closeSync as Ac,existsSync as Mf,mkdirSync as bw,openSync as Ic,statSync as Sw,unlinkSync as Df}from"node:fs";import{spawn as Cw}from"node:child_process";import ww from"node:os";import rr from"node:path";import{existsSync as vo,readdirSync as kw}from"node:fs";import ut from"node:path";var yw=/^\d{4}\.\d{1,2}\.\d{1,2}-[a-f0-9]+$/i;function Rw(e){let t=e.split("-")[0].split(".");if(t.length!==3)return null;let[n,o,s]=t;return!n||!o||!s?null:+`${n}${o.padStart(2,"0")}${s.padStart(2,"0")}`}function vw(e){let r=ut.join(e,"versions");if(!vo(r))return null;let t=null,n=-1;for(let o of kw(r,{withFileTypes:!0})){if(!o.isDirectory()||!yw.test(o.name))continue;let s=Rw(o.name);s==null||s<=n||(n=s,t=ut.join(r,o.name))}return t}function Ci(e){let r=e?.trim()||ut.join(process.env.LOCALAPPDATA||"","cursor-agent"),t=ut.join(r,"node.exe"),n=ut.join(r,"index.js");if(vo(t)&&vo(n))return{nodeExe:t,indexJs:n,versionDir:r};let o=vw(r);if(!o)return null;let s=ut.join(o,"node.exe"),i=ut.join(o,"index.js");return!vo(s)||!vo(i)?null:{nodeExe:s,indexJs:i,versionDir:o}}var Pc="composer-2.5",_w=15e3,xw=6e4,Ew=3e4;function Pw(e,r,t){return{executable:e,prefixArgs:[r],shell:!1,detached:!0,bundledVersionDir:t}}function Aw(e){if(process.platform==="win32"){let r=/\.(cmd|bat)$/i.test(e),t=/node\.exe$/i.test(e)&&Mf(rr.join(rr.dirname(e),"index.js"));if(r||t||e==="agent"){let o=r?Ci(rr.dirname(e)):t?{nodeExe:e,indexJs:rr.join(rr.dirname(e),"index.js"),versionDir:rr.dirname(e)}:Ci();if(o)return Pw(o.nodeExe,o.indexJs,o.versionDir);throw new Error("Cursor Agent on Windows has no headless bundled node.exe under %LOCALAPPDATA%\\cursor-agent\\versions\\\u2026. Run `agent login` / update Cursor Agent CLI, use `--provider claude`, or set KYNVER_CURSOR_AGENT_ROOT to the cursor-agent folder.")}}return{executable:e,prefixArgs:[],shell:!1,detached:!0}}function Iw(){let e=process.env.KYNVER_CURSOR_AGENT_BIN?.trim()||process.env.CURSOR_AGENT_BIN?.trim();if(e)return e;if(process.platform==="win32"){let r=Ci(process.env.KYNVER_CURSOR_AGENT_ROOT?.trim()||void 0);if(r)return r.nodeExe;let t=rr.join(process.env.LOCALAPPDATA||"","cursor-agent","agent.cmd");if(Mf(t))return t}return"agent"}function Ow(e,r){return We({...process.env,CI:"1",NO_COLOR:"1",...r.bundledVersionDir?{CURSOR_INVOKED_AS:rr.basename(e)||"agent.cmd"}:{}})}function Uf(e){e<=0||Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function Oc(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?Math.floor(n):r}function Nw(){let e=process.env.KYNVER_CURSOR_START_LOCK_DIR?.trim()||rr.join(ww.homedir(),".kynver","locks");return bw(e,{recursive:!0}),rr.join(e,"cursor-agent-start.lock")}function Tw(){if(process.env.KYNVER_CURSOR_START_LOCK==="0")return()=>{};let e=Nw(),r=Oc("KYNVER_CURSOR_START_LOCK_TIMEOUT_MS",xw),t=Oc("KYNVER_CURSOR_START_LOCK_STALE_MS",Ew),n=Date.now();for(;;)try{let o=Ic(e,"wx");return Ac(o),()=>{try{Df(e)}catch{}}}catch(o){if(o.code!=="EEXIST")throw o;try{if(Date.now()-Sw(e).mtimeMs>t){Df(e);continue}}catch{continue}if(Date.now()-n>r)throw new Error(`timed out waiting for Cursor agent start lock: ${e}`);Uf(250)}}var Wf={name:"cursor",defaultModel:Pc,preflightModel(e){return fi(e,Pc)},start(e){let r=fi(e.model,Pc);if(!r.ok)throw new Error(`cursor provider model preflight failed: ${r.note}`);let t=r.model,n=Ic(e.stdoutPath,"a"),o=Ic(e.stderrPath,"a"),s=["ignore",n,o],i=Iw(),a=Aw(i),l=Tw(),c;try{c=Cw(a.executable,[...a.prefixArgs,"-p","--force","--trust","--workspace",e.worktreePath,"--output-format","stream-json","--stream-partial-output","--model",t,e.prompt],pe({cwd:e.worktreePath,detached:a.detached,shell:a.shell,stdio:s,env:Ow(i,a)})),Uf(Oc("KYNVER_CURSOR_START_LOCK_HOLD_MS",_w))}finally{l(),Ac(n),Ac(o)}if(!c.pid)throw new Error(`failed to spawn Cursor agent worker (is \`${i}\` on PATH? run \`agent login\` or set CURSOR_API_KEY)`);return c.unref(),{pid:c.pid,model:t}}};var wi={claude:ff,codex:vc,cursor:Wf},Lf=null;function Bf(e){if(Lf)return Lf;let r=e?.trim();if(r){let o=wi[r];if(!o)throw new Error(`unknown worker provider "${r}" \u2014 supported: ${Object.keys(wi).join(", ")}`);return o}let t=ko(y().workerProvider),n=wi[t];if(!n)throw new Error(`unknown worker provider "${t}" \u2014 supported: ${Object.keys(wi).join(", ")}`);return n}C();import{spawn as C_}from"node:child_process";import{existsSync as w_,openSync as __,closeSync as bg}from"node:fs";import x_ from"node:path";T();function _i(e){return!!e.completionReportedAt?.trim()}function Nc(e,r,t){e.completionReportedAt=t.completionReportedAt,e.completionOutcome=t.completionOutcome,t.completionResponse!==void 0&&(e.completionResponse=t.completionResponse),K(r,e)}function Dw(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Tc(e){return!!(Dw(e.completionBlocker)||e.completionOutcome==="rejected")}function dt(e){return _i(e)&&!Tc(e)}T();z();I();import xo from"node:path";function Dc(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function bo(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}var Mw=new Set(["review_scheduled","review_already_scheduled","skipped_terminal_task","closed","dispatched","dispatch_already_done"]);function Hf(e){let r=Dc(e);if(!r)return{routeOutcome:null,taskAdvanced:!1,detail:null};let t=bo(r.outcome),n=bo(r.detail)??bo(r.error),o=Dc(r.task),s=Dc(r.closedTask),i=o?bo(o.status):null,a=s?bo(s.status):null,l=t!==null&&Mw.has(t)||i==="awaiting_review"||i==="done"||a==="done";return{routeOutcome:t,taskAdvanced:l,detail:n}}function Ff(e){return e.taskAdvanced}T();Qn();var Uw="expert-lane-pr-review:",Ww="plan-review-task",Lw="scheduledjob:";function Kf(e){if(!e)return null;let r=e.trim().toLowerCase();return r.length?r:null}function $f(e){let r=(e.executorRef??"").toLowerCase();if(r.startsWith(Uw)||r===Ww||r.startsWith("daemon-review:"))return!0;if(r.startsWith(Lw)&&e.parentTaskId){let n=Kf(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}let t=(e.title??"").toLowerCase();if(t.includes("expert pr review"))return!0;if(e.parentTaskId&&(t.startsWith("review:")||t.includes("review required")||t.includes("runtime review"))){let n=Kf(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}return!1}var jf=/^(lane:)?(review|deep_review|planning|landing)(:|$)/i,Bw=new Set(oc()),Hw=/no commits between/i;function Vf(e){return!!(e&&Hw.test(e))}function ye(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Gf(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:ye(e.head)}function Mc(e){if(e==null)return null;let t=(typeof e=="string"?e:typeof e=="object"&&e!==null&&"summary"in e?String(e.summary??""):JSON.stringify(e)).match(/https?:\/\/[^\s)>"]+\/(?:pull|pulls|merge_requests|pull-requests)\/\d+/i);return t?ye(t[0]):null}function Fw(e,r,t){let n=r.trim();if(!n)return null;let o=t.git(e,["rev-list","--count",`${n}..HEAD`]);if(o.status!==0)return null;let s=Number.parseInt(o.stdout.trim(),10);return Number.isFinite(s)?s:null}function Kw(e,r){if(r.changedFiles.length>0)return!1;let t=ye(e.personaSlug)?.toLowerCase();if(t&&Bw.has(t))return!0;let n=ye(e.routingRule)??"";return!!(n&&jf.test(n))}function $w(e,r){if(e.changedFiles.length>0)return!0;let t=ye(r?.baseRef);if(t&&r?.exec&&r.worktreePath){let n=Fw(r.worktreePath,t,r.exec);if(n===0)return!1;if(n!==null&&n>0)return!0}return!!(ye(e.headCommit)||Gf(e.gitAncestry))}function Uc(e){if(!e.dispatched)return{required:!1,reason:"not_dispatched"};if($f({title:e.taskTitle??void 0,personaSlug:e.personaSlug,parentTaskId:e.parentTaskId,executorRef:e.executorRef}))return{required:!1,reason:"expert_review_task"};let r=ye(e.routingRule)??"";if(r&&jf.test(r))return{required:!1,reason:"review_lane"};let t=e.worker??{personaSlug:e.personaSlug,routingRule:e.routingRule};if(Kw(t,e.snapshot))return{required:!1,reason:"review_artifact"};if(ye(e.patchPath)||ye(e.artifactBundlePath))return{required:!1,reason:"patch_or_bundle"};if(ye(e.repairTargetPrUrl))return{required:!1,reason:"repair_target_pr"};if(ye(e.prUrl)??ye(e.taskPrUrl)??ye(e.snapshot.prUrl))return{required:!1,reason:"already_has_pr"};let s=e.exec&&e.baseRef?{baseRef:e.baseRef,exec:e.exec,worktreePath:e.snapshot.worktreePath}:void 0;return $w(e.snapshot,s)?{required:!0,snapshot:e.snapshot}:{required:!1,reason:"no_work_product"}}function Yf(e,r){return{changedFiles:e.changedFiles,branch:e.branch,worktreePath:e.worktreePath,gitAncestry:e.gitAncestry,finalResult:e.finalResult,headCommit:ye(r?.headCommit)??Gf(e.gitAncestry),prUrl:ye(r?.prUrl)??null}}import{spawnSync as jw}from"node:child_process";function qf(e){let r=e.trim();if(!r)return null;let t=r.match(/^git@github\.com:([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(t)return Jf(t[1]);let n=r.match(/^ssh:\/\/git@github\.com\/([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(n)return Jf(n[1]);try{let o=new URL(r.includes("://")?r:`https://${r}`);if(o.hostname.toLowerCase()!=="github.com")return null;let s=o.pathname.replace(/^\/+|\/+$/g,"").split("/");if(s.length<2)return null;let[i,a]=s;return!i||!a?null:`${i}/${a.replace(/\.git$/i,"")}`}catch{return null}}function Jf(e){let r=e.split("/").filter(Boolean);if(r.length<2)return null;let t=r[0],n=r[1].replace(/\.git$/i,"");return t&&n?`${t}/${n}`:null}Pe();function Vw(e,r,t){try{let n=jw(e,t,{cwd:r,encoding:"utf8"});return{status:n.status,stdout:(n.stdout||"").trim(),stderr:(n.stderr||"").trim(),error:n.error?n.error.message:null}}catch(n){return{status:null,stdout:"",stderr:"",error:n.message}}}var Ei={git:(e,r)=>ne(e,r),gh:(e,r)=>Vw("gh",e,r)};function Gw(e){return e.split(`
+`).map(r=>r.trim()).find(Boolean)??""}function zf(e,r){let t=r.git(e,["remote","get-url","origin"]);return t.status!==0?null:qf(t.stdout)}function So(e,r){let t=r.git(e,["rev-parse","HEAD"]);return t.status!==0?null:t.stdout.trim()||null}function xi(e,r,t,n){let o=n.gh(e,["pr","list","--repo",r,"--head",t,"--state","open","--json","url","--limit","1"]);if(o.status!==0)return null;try{return JSON.parse(o.stdout)[0]?.url?.trim()||null}catch{return null}}function Pi(e){let{worktreePath:r,branch:t,commitMessage:n,hasDirtyFiles:o,exec:s}=e;if(o){let l=s.git(r,["add","-A"]);if(l.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:l.stderr||l.stdout||l.error||"git add failed"};let c=s.git(r,["commit","-m",n]);if(c.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:c.stderr||c.stdout||c.error||"git commit failed"}}let i=s.git(r,["push","-u","origin",t]);if(i.status!==0)return{ok:!1,committed:o,pushed:!1,detail:i.stderr||i.stdout||i.error||"git push failed"};let a=So(r,s)??void 0;return{ok:!0,committed:o,pushed:!0,headCommit:a}}function Xf(e){let r=xi(e.worktreePath,e.repo,e.branch,e.exec);if(r)return{ok:!0,prUrl:r,created:!1};let t=e.exec.gh(e.worktreePath,["pr","create","--repo",e.repo,"--base",e.base,"--head",e.branch,"--title",e.title,"--body",e.body,"--draft"]);if(t.status!==0)return{ok:!1,detail:t.stderr||t.stdout||t.error||"gh pr create failed"};let n=Yw(t.stdout)??xi(e.worktreePath,e.repo,e.branch,e.exec);return n?{ok:!0,prUrl:n,created:!0}:{ok:!1,detail:"gh pr create succeeded but no PR URL was parsed"}}function Yw(e){let t=Gw(e).match(/https?:\/\/[^\s]+\/pull\/\d+/i);return t?t[0]:null}function Qf(e,r,t,n){let o=t.trim();if(!o||!r.trim())return null;let s=n.gh(e,["api",`repos/${r}/commits/${o}/pulls`]);if(s.status!==0||!s.stdout)return null;try{let l=JSON.parse(s.stdout).filter(c=>c.merged_at&&c.html_url?.trim()).sort((c,u)=>(typeof c.number=="number"?c.number:Number.MAX_SAFE_INTEGER)-(typeof u.number=="number"?u.number:Number.MAX_SAFE_INTEGER))[0];return l?.html_url?.trim()?{prUrl:l.html_url.trim(),number:typeof l.number=="number"?l.number:null}:null}catch{return null}}function Jw(e){return e.gh(process.cwd(),["--version"]).status===0}function qw(e,r){return`AgentOS harness: ${e} (${r})`}function zw(e,r,t){return["Automated PR-ready handoff from the Kynver harness runtime.","",e?`AgentOS task: \`${e}\``:"",`Harness worker: \`${r}\` \xB7 run \`${t}\``,"","Opened by orchestrator completion enforcement so production review receives a reviewable artifact."].filter(Boolean).join(`
+`)}function Wc(e){if(e.snapshot.changedFiles.length===0)return{ok:!0,prUrl:e.prUrl,headCommit:e.snapshot.headCommit??So(e.snapshot.worktreePath,e.exec)??void 0};let r=Pi({worktreePath:e.snapshot.worktreePath,branch:e.snapshot.branch,commitMessage:e.commitMessage,hasDirtyFiles:!0,exec:e.exec});return r.ok?{ok:!0,prUrl:e.prUrl,headCommit:r.headCommit??e.snapshot.headCommit??void 0,committed:r.committed,pushed:r.pushed}:{ok:!1,reason:`PR-ready handoff blocked: ${r.detail??"git commit/push failed"}`,nextAction:"Commit and push the dirty worker changes to the existing PR branch, then rerun `kynver worker complete`."}}function Ai(e,r=Ei){let t=e.prUrlHint??Mc(e.status.finalResult)??null,n=Yf(e.status,{prUrl:t,headCommit:null}),o=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main";if(!Uc({dispatched:e.worker.dispatched,routingRule:e.worker.routingRule,personaSlug:e.worker.personaSlug,prUrl:t,taskTitle:e.worker.taskTitle,executorRef:e.worker.executorRef,parentTaskId:e.worker.parentTaskId,taskPrUrl:e.worker.taskPrUrl,repairTargetPrUrl:e.worker.repairTargetPrUrl,baseRef:o,exec:r,worker:e.worker,snapshot:n}).required)return t?Wc({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r}):{ok:!0};if(t)return Wc({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});if(!Jw(r)){let g=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${g?`${g} uncommitted change(s) with no PR URL`:"committed branch with no PR URL"}`,nextAction:"Install and authenticate GitHub CLI (`gh auth login`), then commit, push, and run `gh pr create` (or rerun `kynver worker complete` after the PR exists)."}}let i=zf(n.worktreePath,r);if(!i)return{ok:!1,reason:"PR-ready handoff blocked: could not resolve github.com origin for the worktree",nextAction:"Ensure `origin` points at GitHub, push the branch, open a PR, and rerun `kynver worker complete`."};let a=e.worker.repairTargetPrUrl?.trim();if(a){let g=!1,R=!1,O=n.headCommit??So(n.worktreePath,r)??void 0;if(n.changedFiles.length>0){let _=Pi({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`fix(harness): repair target PR ${a}`,hasDirtyFiles:!0,exec:r});if(!_.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${_.detail??"git commit/push failed"}`,nextAction:"Commit and push to the target PR branch, then rerun `kynver worker complete`."};g=_.committed,R=_.pushed,O=_.headCommit??O}else{let _=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(_.status!==0&&!/already up to date/i.test(_.stderr||_.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${_.stderr||_.stdout||"git push failed"}`,nextAction:"Push the target branch to origin, then rerun `kynver worker complete`."};R=_.status===0}return{ok:!0,prUrl:a,headCommit:O,committed:g,pushed:R}}let l=xi(n.worktreePath,i,n.branch,r);if(l)return Wc({snapshot:n,prUrl:l,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});let c=n.changedFiles.length>0,u=!1,d=!1,m=n.headCommit??void 0,p=Pi({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`chore(harness): PR-ready handoff for ${e.worker.name}`,hasDirtyFiles:c,exec:r});if(c&&!p.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${p.detail??"git commit/push failed"}`,nextAction:"Commit and push the branch, run `gh pr create`, then rerun `kynver worker complete`."};if(c){if(u=p.committed,d=p.pushed,!p.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${p.detail??"git push failed"}`,nextAction:"Fix git auth or merge conflicts, push the branch, run `gh pr create`, then rerun `kynver worker complete`."}}else{let g=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(g.status!==0&&!/already up to date/i.test(g.stderr||g.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${g.stderr||g.stdout||g.error||"git push failed"}`,nextAction:"Push the branch to origin, run `gh pr create`, then rerun `kynver worker complete`."};d=g.status===0}m=p.headCommit??m??So(n.worktreePath,r)??void 0;let f=m?Qf(n.worktreePath,i,m,r):null;if(f)return{ok:!0,prUrl:f.prUrl,headCommit:m,committed:u,pushed:d,created:!1};let h=e.run.base?.trim()||"main",k=Xf({worktreePath:n.worktreePath,repo:i,branch:n.branch,base:h.replace(/^origin\//,""),title:qw(e.worker.name,e.worker.runId),body:zw(e.worker.taskId,e.worker.name,e.worker.runId),exec:r});if(!k.ok||!k.prUrl){if(Vf(k.detail))return{ok:!0,headCommit:m??void 0,committed:u,pushed:d};let g=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${g?`${g} uncommitted change(s) and no PR URL after handoff attempt`:"no PR URL after handoff attempt"}${k.detail?` (${k.detail})`:""}`,nextAction:"Run `gh pr create` on the worker branch (or fix `gh` auth), attach the PR URL to the task, then rerun `kynver worker complete`."}}return{ok:!0,prUrl:k.prUrl,headCommit:m??void 0,committed:u,pushed:d,created:k.created}}z();Jt();function Ii(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return n!=="node_modules"&&!n.startsWith("node_modules/")})}function Zf(e){let r=e.trim();return r.startsWith("??")?r.slice(2).trim():r.length>3&&/^[ MADRCU?!]{2} /.test(r.slice(0,3))?r.slice(3).trim():r}function eg(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function rg(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function ng(e){let r=rg(e);if(!r)return[];let t=rg(r.worktreeHandoff),n=eg(t?.disposableArtifactsRemoved);return n.length?n:eg(r.disposableArtifactsRemoved)}function tg(e){return e.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"")}function og(e,r){let t=Ii(e);if(t.length===0)return!0;if(r.length===0)return!1;let n=new Set(r.map(o=>tg(o)));return t.every(o=>{let s=tg(Zf(o));return n.has(s)})}function Oi(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function sg(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function Xw(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function Qw(e){let r=sg(e.disposableArtifactsRemoved),t=ng(e.finalResult);return[...new Set([...r,...t])]}function ig(e){let r=sg(e.changedFiles),t=Ii(r),n=Qw(e),o=t.length===0||og(r,n);return Oi(e.prUrl)?o?{allowed:!0,state:"pr_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a PR attached; commit or discard before completing`}:Oi(e.headCommit)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) on top of a commit; commit or discard before completing`}:Oi(e.artifactBundlePath)||Oi(e.patchPath)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a patch/bundle handoff; clean the tree before completing`}:o?{allowed:!0,state:"clean",materialDirtyCount:0}:Xw(e.finalResult)?{allowed:!1,state:"dirty_worktree_no_pr",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no commit or PR; commit, open a PR, discard, or remove one-off files via \`kynver worker discard-disposable\` before completing`}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no final result`}}T();z();C();import Zw from"node:path";var e_=new Set(["awaiting_review","blocked","done","needs_input","waiting","scheduled","ready","cancelled","failed"]);function ag(e){return!!(typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim())}function r_(e){if(typeof e=="string"){let r=e.trim();return r.length?r:null}if(e&&typeof e=="object"&&!Array.isArray(e)){let r=e,t=r.summary??r.finalSummary??r.message;if(typeof t=="string"&&t.trim())return t.trim();try{return JSON.stringify(e)}catch{return null}}return null}function pt(e){let r=e.finalResult??null,t=typeof e.lastHeartbeatSummary=="string"?e.lastHeartbeatSummary:r_(r);return{finalResult:r??t??"completed",summary:t}}function Lc(e,r,t){if(ag(e)&&e.status==="done"&&e.completionSnapshot!=null)return;let n=new Date().toISOString(),o=pt(r),s=t?.source?.trim();e.completionReportedAt=n,e.completionSnapshot=o,e.status="done",s&&(e.completionAckSource=s),K(e.runId,e)}function t_(e){let r=new Map,n=e.response?.tick?.filteredItems;if(!Array.isArray(n))return r;for(let o of n){if(o.kind!=="task"||typeof o.id!="string")continue;let s=typeof o.taskStatus=="string"?o.taskStatus.trim():"";s&&r.set(o.id,s)}return r}function lg(e,r){let t=t_(r);if(t.size===0)return[];let n=L(e),o=[];for(let s of Object.keys(n.workers||{})){let i=w(Zw.join(x(n.id),"workers",b(s),"worker.json"),void 0);if(!i?.taskId||ag(i))continue;let a=t.get(i.taskId);if(!a||a==="running"||!e_.has(a))continue;let l=D(i,{base:n.base,baseCommit:n.baseCommit});Lc(i,l,{source:`board-task-${a}`}),o.push({worker:s,taskId:i.taskId,taskStatus:a})}return o}C();C();import Ni from"node:path";var n_=/^[a-z0-9][a-z0-9._-]{0,127}$/i,o_=/^[a-z0-9][a-z0-9._-]{0,63}$/i,Bc=new Set(["undefined","null"]),cg="usage: kynver worker <action> --run RUN_ID --name WORKER_NAME";function Co(e){let r=e.trim();if(!n_.test(r))throw new Error(`invalid run id: ${e}`);return r}function ug(e){let r=e.trim();if(!o_.test(r))throw new Error(`invalid worker name: ${e}`);return r}function Hc(e){return typeof e=="string"?e.trim():""}function Fe(e){let r=Hc(e.run),t=Hc(e.name);return(!r||Bc.has(r))&&_r(`missing --run RUN_ID (${cg})`),(!t||Bc.has(t))&&_r(`missing --name WORKER_NAME (${cg})`),{runId:Co(r),workerName:ug(t)}}function Ti(e){let r=Hc(e.run);return(!r||Bc.has(r))&&_r("missing --run RUN_ID (usage: kynver run status --run RUN_ID)"),Co(r)}function Fc(e){let r=Ni.resolve(e);if(r.includes(".."))throw new Error("repo path must not contain .. segments");return r}function s_(e,r){return r.map(t=>{let n=Ni.resolve(e,t),o=Ni.relative(e,n);if(o.startsWith("..")||Ni.isAbsolute(o))throw new Error(`owned path escapes repo: ${t}`);return n})}function i_(e){return!Number.isFinite(e)||e<=0||e>500?40:Math.floor(e)}async function dg(e,r,t){let n=await fetch(e,{method:"POST",headers:He(r),body:JSON.stringify(t)}),o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,parsed:o}}function a_(e){if(e&&typeof e=="object"){let r=e.error;if(typeof r=="string"&&r.trim())return r.trim()}}function pg(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function wo(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function l_(e){return e.completionBlocker?`blocked:${e.completionBlocker}`:e.completionOutcome?e.completionOutcome:e.completionReportedAt?"completion_acknowledged":e.finished?"worker_finished":"in_progress"}function c_(e){return e.completionBlocker?"Resolve completion blocker, then rerun `kynver worker complete`.":e.completionOutcome==="review_scheduled"||e.completionOutcome==="review_already_scheduled"?"Await review lane and landing decision in Command Center.":e.completionOutcome==="needs_attention"?"Inspect blocker/attention reason in Command Center and dispatch a repair task.":e.finished&&!e.completionReportedAt?"Post completion acknowledgement to AgentOS (`kynver worker complete`).":null}function fg(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function u_(e){return e.prUrl?"pr_handoff":e.headCommit?"commit_handoff":e.changedFiles.length>0?"dirty_worktree":"none"}function _o(e,r){(e.completionBlocker??void 0)!==(r??void 0)&&(r?e.completionBlocker=r:delete e.completionBlocker,K(e.runId,e))}function d_(e){e.completionBlocker&&(delete e.completionBlocker,K(e.runId,e))}function Di(e){return e?{base:e.base,baseCommit:e.baseCommit}:{}}function p_(e,r){return{...e,...r.prUrl?{prUrl:r.prUrl}:{},...r.headCommit?{headCommit:r.headCommit}:{}}}async function Eo(e){let{runId:r,workerName:t}=Fe(e),n=he(r,t),o=L(n.runId),s=D(n,Di(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!oe(s))return{ok:!0,skipped:!0,reason:"worker-not-finished"};if(n.localOnly)return{ok:!0,skipped:!0,reason:"local-only-worker"};if(!i)return{ok:!1,reason:"missing agentOsId"};let l=e.force===!0||e.force==="true";if(!l&&dt(n))return{ok:!0,skipped:!0,reason:"completion-already-acknowledged",httpStatus:200};if(!l&&Tc(n)&&d_(n),!(e.skipPrHandoff===!0||e.skipPrHandoff==="true")&&n.dispatched&&a){let E=Ai({worker:n,run:o,status:s});if(!E.ok)return _o(n,E.reason),{ok:!1,reason:E.reason,nextAction:E.nextAction,completionBlocked:!0};(E.prUrl||E.headCommit)&&(s=D(n,Di(o)),s=p_(s,E))}let u=s.gitAncestry.headIsAncestorOfBase===!1&&s.gitAncestry.head?s.gitAncestry.head:s.headCommit;if(n.dispatched){let E=ig({changedFiles:s.changedFiles,finalResult:s.finalResult,prUrl:s.prUrl,headCommit:u,disposableArtifactsRemoved:n.disposableArtifactsRemoved});if(!E.allowed){let U=E.detail??`worktree completion blocked (${E.state})`;return _o(n,U),{ok:!1,reason:U,nextAction:"Clean the worktree (commit, open a PR, or `kynver worker discard-disposable --path <file>`), then rerun `kynver worker complete`.",completionBlocked:!0}}}let d=V(e.baseUrl?String(e.baseUrl):void 0),m=e.secret?String(e.secret):void 0,p=await J(m,i,{baseUrl:d});a&&(await Ri({worker:n,agentOsId:i,baseUrl:d,secret:p}),n=he(r,t));let f=`${d}/api/agent-os/by-id/${encodeURIComponent(i)}/harness/completion`,h={...s};n.disposableArtifactsRemoved?.length&&(h.disposableArtifactsRemoved=n.disposableArtifactsRemoved);let k={source:"kynver-harness",agentOsId:i,runId:n.runId,workerName:n.name,taskId:a,leaseToken:n.leaseToken??null,startedAt:n.startedAt,finishedAt:s.lastActivityAt||new Date().toISOString(),status:n.leaseToken?{...h,leaseToken:n.leaseToken}:h,workerInjection:{instructionPolicyFingerprint:n.instructionPolicyFingerprint??null,instructionPolicyEvidence:n.instructionPolicyEvidence??null,memoryQualityCapture:n.memoryQualityCapture??null,policyAt:n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence=="object"&&"policyAt"in n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence.policyAt=="string"?n.instructionPolicyEvidence.policyAt:null,personaSlug:n.personaSlug??null,personaEvidence:n.personaEvidence??null,contextEnvelopeEvidence:n.contextEnvelopeEvidence??null}},g=await dg(f,p,k);if((g.status===401||g.status===403)&&!m){let E=await Bm(i,{baseUrl:d});E&&E!==p&&(p=E,g=await dg(f,p,k))}if(g.ok){let E=Hf(g.parsed);if(!Ff(E)){let P=`completion acknowledged but board not advanced: ${E.detail??(E.routeOutcome?`harness completion returned ${E.routeOutcome}`:"harness completion did not advance the linked task")}`;_o(n,P);let B={completionReportedAt:new Date().toISOString(),completionOutcome:"rejected",completionResponse:g.parsed};return Nc(n,n.runId,B),{ok:!1,httpStatus:g.status,response:g.parsed,reason:P,completionBlocked:!0}}_o(n,void 0);let U=E.routeOutcome??"acknowledged",Y={completionReportedAt:new Date().toISOString(),completionOutcome:"acknowledged",completionResponse:g.parsed};Nc(n,n.runId,Y),Lc(n,s,{source:"harness-completion"});let $=s.prUrl;return{ok:!0,httpStatus:g.status,response:g.parsed,reason:U,...$?{prHandoff:{prUrl:$}}:{}}}let R=g.status===401||g.status===403,O=a_(g.parsed)??(R?"runner token unauthorized":"non-2xx response"),_=R?`completion replay rejected (${g.status}): ${O}`:`completion replay failed (${g.status}): ${O}`;return _o(n,_),{ok:!1,httpStatus:g.status,response:g.parsed,completionBlocked:!0}}async function Mi(e){try{let{runId:r,workerName:t}=Fe(e),n=he(r,t),o=L(n.runId),s=D(n,Di(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!oe(s)){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"worker-not-finished",workerStatus:s.status,alive:s.alive},null,2));return}if(n.localOnly){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"local-only-worker"},null,2));return}i||(console.error("worker complete requires --agent-os-id (or an agentOsId persisted at worker start)"),process.exit(1));let l=await Eo(e);console.log(JSON.stringify({worker:n.name,runId:n.runId,...l.skipped?{status:"skipped"}:{},...l.reason?{reason:l.reason}:{},...l.nextAction?{nextAction:l.nextAction}:{},...l.completionBlocked?{completionBlocked:l.completionBlocked}:{},agentOsId:i,taskId:a,httpStatus:l.httpStatus,response:l.response},null,2)),l.ok||process.exit(1)}catch(r){console.error(`worker complete failed: ${r.message}`),process.exit(1)}}function $c(e){let{runId:r,workerName:t}=Fe(e),n=he(r,t),o=L(n.runId),s=D(n,Di(o));ae(xo.join(n.workerDir,"last-status.json"),s),console.log(JSON.stringify(s,null,2))}function m_(e){return{full:`kynver worker list --run ${e} --full`,blocked:`kynver worker list --run ${e} --blocked`,running:`kynver worker list --run ${e} --running`,task:`kynver worker list --run ${e} --task <task-id>`,worker:`kynver worker list --run ${e} --worker <worker>`,runFull:`kynver run status --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`}}function Kc(e){if(typeof e!="string")return;let r=e.trim();return r.length?r:void 0}function f_(e){let r={};(e.blocked===!0||e.blocked==="true")&&(r.blocked=!0),(e.running===!0||e.running==="true")&&(r.running=!0);let t=Kc(e.task??e.taskId);t&&(r.task=t);let n=Kc(e.worker??e.name);n&&(r.worker=n);let o=Kc(e.status);return o&&(r.status=o),r}function g_(e,r){if(r.blocked){let t=typeof e.attention=="string"?e.attention:"",n=typeof e.status=="string"?e.status:"";if(!(t==="blocked"||t==="needs_attention"||t==="stale"||n==="blocked"))return!1}return!(r.running&&!(e.status==="running"&&e.attention!=="blocked"&&e.attention!=="needs_attention")||typeof r.task=="string"&&e.taskId!==r.task||typeof r.worker=="string"&&e.worker!==r.worker||typeof r.status=="string"&&e.status!==r.status)}function gg(e,r){let t=f_(r);if(Object.keys(t).length===0)return e;let n=e.workers.filter(s=>g_(s,t)),o={...e,workerCount:n.length,needsAttention:n.filter(s=>s.attention&&s.attention!=="ok"&&s.attention!=="done").map(s=>s.worker),workers:n,activeFilters:t};return e.summary&&(o.summary={statusCounts:Ur(n,"status"),attentionCounts:Ur(n,"attention"),lifecycleCounts:Ur(n,"lifecycleStage")}),e.controller&&(o.controller=yg(n)),o}function hg(e){let r=Ti(e),t=e.full===!0||e.full==="true",n=gg(t?Po(r):Ao(r),e),o=n.workers;console.log(JSON.stringify({runId:n.runId,status:n.status,projection:t?"full":"compact",workerCount:n.workerCount,...n.activeFilters?{activeFilters:n.activeFilters}:{},...t?{}:{resultContract:{projection:"compact",rawWorkerPayloadsOmitted:!0,deepDetailAvailableVia:["--full","worker status","worker tail","run status --full"]},drilldownCommands:m_(r)},needsAttention:n.needsAttention,..."summary"in n?{summary:n.summary}:{},..."controller"in n?{controller:n.controller}:{},workers:o},null,2))}function kg(e){let{run:r,workerName:t,worker:n}=e,o=D(n,{base:r.base,baseCommit:r.baseCommit}),s=o.gitAncestry.headIsAncestorOfBase===!1&&o.gitAncestry.head?o.gitAncestry.head:void 0,i=Xr({alive:o.alive,finalResult:o.finalResult,changedFiles:o.changedFiles,gitAncestry:o.gitAncestry,headCommit:s}),a=n.completionBlocker,l=typeof a=="string"&&a?a:void 0,c=fg(l)?void 0:l,u=c?"blocked":o.status,d=c?"blocked":o.attention.state,m=pg(n.completionResponse),p=pg(m?.task),f=wo(m?.outcome),h=wo(m?.status),k=Array.isArray(m?.warnings)?m.warnings.filter(U=>typeof U=="string"&&U.trim().length>0):[],g=wo(p?.prUrl)??wo(m?.prUrl),R=wo(n.completionReportedAt),O=l_({finished:oe(o),completionBlocker:c,completionOutcome:f,completionReportedAt:R}),_=c_({completionBlocker:c,completionOutcome:f,completionReportedAt:R,finished:oe(o)}),E=u_({changedFiles:o.changedFiles,headCommit:s,prUrl:g??void 0});return{worker:o.worker,status:u,attention:d,attentionReason:c??o.attention.reason,landingBlocked:o.finalResult?d==="needs_attention"||d==="blocked":!1,exitedWithoutFinalResult:!o.finalResult&&!o.alive,salvageState:i?.salvageable?"review_needed":"none",salvageReason:i?.salvageable?i.attentionReason:void 0,pid:o.pid,alive:o.alive,currentTool:o.currentTool,lastActivityAt:o.lastActivityAt,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary,heartbeatBlocker:o.heartbeatBlocker,changedFileCount:o.changedFiles.length,changedFiles:o.changedFiles,branch:o.branch,taskId:n.taskId??null,planId:n.planId??null,instructionPolicyFingerprint:typeof n.instructionPolicyFingerprint=="string"?n.instructionPolicyFingerprint:null,instructionPolicyRuleCount:(()=>{let U=n.instructionPolicyEvidence;if(!U||typeof U!="object")return null;let Y=U.ruleSlugs;return Array.isArray(Y)?Y.length:null})(),leaseOwner:n.leaseOwner??null,model:typeof n.model=="string"?n.model:void 0,routingRule:typeof n.routingRule=="string"?n.routingRule:void 0,requestedModel:typeof n.requestedModel=="string"?n.requestedModel:void 0,headCommit:s,prUrl:g,handoffState:E,gitAncestry:o.gitAncestry,finalResult:o.finalResult,lifecycleStage:O,completionReportedAt:R,completionOutcome:n.completionOutcome??null,completionRouteStatus:h,completionRouteOutcome:f,completionWarnings:k,completionBlocker:c??null,checkpoint:{phase:o.lastHeartbeatPhase,summary:o.lastHeartbeatSummary,blocker:o.heartbeatBlocker},lastCommandHint:o.currentTool??o.lastHeartbeatSummary,failureReason:c??o.error??null,nextAction:_,ancestry:o.gitAncestry.relation,ancestryChecked:o.gitAncestry.checked}}function h_(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!fg(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function k_(e,r){return{worker:e,status:"done",attention:"done",attentionReason:"metadata terminal worker; full status skipped in compact snapshot",alive:!1,pid:typeof r.pid=="number"?r.pid:void 0,branch:typeof r.branch=="string"?r.branch:void 0,taskId:r.taskId??null,planId:r.planId??null,model:typeof r.model=="string"?r.model:void 0,routingRule:typeof r.routingRule=="string"?r.routingRule:void 0,requestedModel:typeof r.requestedModel=="string"?r.requestedModel:void 0,lifecycleStage:r.completionReportedAt?"completion_acknowledged":"worker_finished",completionReportedAt:typeof r.completionReportedAt=="string"?r.completionReportedAt:null,completionOutcome:r.completionOutcome??null,localOnly:r.localOnly===!0,compactStatus:!0}}function Ur(e,r){let t={};for(let n of e){let o=n[r],s=typeof o=="string"&&o.trim()?o:"unknown";t[s]=(t[s]??0)+1}return t}function mg(e){if(e.attention!=="blocked")return!1;let r=typeof e.attentionReason=="string"?e.attentionReason:"";return r.includes("cli-config.json.tmp")||r.includes("Invalid authentication credentials")||r.includes("provider CLI is missing or not on PATH")||r.includes("unknown command:")}function yg(e){let r=e.filter(mg),t=e.filter(n=>{if(mg(n))return!1;let o=n.attention;return o==="needs_attention"||o==="blocked"||o==="stale"||n.status==="running"});return{actionableCount:t.length,runningCount:e.filter(n=>n.status==="running").length,blockedCount:e.filter(n=>n.attention==="blocked").length,staleCount:e.filter(n=>n.attention==="stale").length,needsAttentionCount:e.filter(n=>n.attention==="needs_attention").length,doneCount:e.filter(n=>n.status==="done").length,systemHealthBlockerCount:r.length,systemHealthBlockers:r.slice(0,10).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt})),actionableWorkers:t.slice(0,25).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,taskId:n.taskId,planId:n.planId,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt,nextAction:n.nextAction}))}}function Rg(e,r,t){let n={runId:e.id,name:e.name,status:Qt(e.status,r),repo:e.repo,workerCount:r.length,needsAttention:r.filter(o=>o.attention&&o.attention!=="ok"&&o.attention!=="done").map(o=>o.worker),workers:r};return t&&(n.summary={statusCounts:Ur(r,"status"),attentionCounts:Ur(r,"attention"),lifecycleCounts:Ur(r,"lifecycleStage")},n.controller=yg(r)),n}function y_(e){return e.status==="done"&&e.attention==="done"}function Po(e){let r=L(e),n=Object.keys(r.workers||{}).map(s=>{let i=w(xo.join(x(r.id),"workers",b(s),"worker.json"),void 0);return i?kg({run:r,workerName:s,worker:i}):{worker:s,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=Rg(r,n,!1);return ae(xo.join(x(r.id),"last-board.json"),o),o}function Ao(e){let r=L(e),n=Object.keys(r.workers||{}).map(i=>{let a=w(xo.join(x(r.id),"workers",b(i),"worker.json"),void 0);return a?h_(a)?k_(i,a):kg({run:r,workerName:i,worker:a}):{worker:i,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=n.filter(i=>!y_(i)),s=Rg(r,o,!0);return s.status=Qt(r.status,n),s.summary={...s.summary??{},totalWorkerCount:n.length,shownWorkerCount:o.length,omittedTerminalDoneWorkerCount:n.length-o.length,allStatusCounts:Ur(n,"status"),allAttentionCounts:Ur(n,"attention")},ae(xo.join(x(r.id),"last-board-compact.json"),s),s}async function vg(e,r){let t=String(e.run||""),n=String(e.agentOsId||"");if(!t||!n)return null;let o=Po(t),s=V(e.baseUrl?String(e.baseUrl):void 0),i=await J(e.secret?String(e.secret):void 0,n,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(n)}/harness/snapshot`,l=await re(a,i,{agentOsId:n,runId:t,source:r,snapshot:o},{agentOsId:n,baseUrl:s});return{ok:l.ok,httpStatus:l.status,response:l.response,authRefreshed:l.refreshedAuth,authRefreshFailure:l.authRefreshFailure}}function R_(e){return{full:`kynver run status --run ${e} --full`,blocked:`kynver status --run ${e} --blocked`,running:`kynver status --run ${e} --running`,task:`kynver status --run ${e} --task <task-id>`,worker:`kynver status --run ${e} --worker <worker>`,workersFull:`kynver worker list --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`,monitorTick:`kynver monitor status --run ${e} --tick`}}function jc(e){let r=Ti(e),t=e.full===!0||e.full==="true",n=gg(t?Po(r):Ao(r),e);n.projection=t?"full":"compact",t||(n.resultContract={projection:"compact",rawWorkerPayloadsOmitted:!0,omittedWorkerFields:["finalResult","changedFiles","gitAncestry","completionResponse","stdout/stderr tails"],deepDetailAvailableVia:["--full","worker status","worker tail","monitor status --tick"]},n.drilldownCommands=R_(r)),console.log(JSON.stringify(n,null,2))}function Vc(e){let{runId:r,workerName:t}=Fe(e),n=he(r,t),o=vs(n.stdoutPath,Number(e.lines||40));if(e.raw===!0||e.raw==="true"){process.stdout.write(o);return}for(let s of o.split(`
+`).filter(Boolean)){let i=Lt(s),a=i?Wl(i):s;a&&console.log(a)}}function Gc(e){let{runId:r,workerName:t}=Fe(e),n=he(r,t);if(!H(n.pid)){console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"not_running"},null,2));return}if(Er(n.pid,"SIGTERM"),$r(1500),H(n.pid)){Er(n.pid,"SIGKILL"),console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"sigkill_sent"},null,2));return}console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"stopped"},null,2))}C();import{existsSync as Ui}from"node:fs";import mt from"node:path";import{fileURLToPath as v_}from"node:url";function b_(e,r){let t=mt.resolve(e);for(;;){let n=mt.join(t,r);if(Ui(n))return n;let o=mt.dirname(t);if(o===t)return null;t=o}}function S_(e){return b_(e,mt.join("node_modules",".bin","tsx"))??"npx"}function Yc(e,r){if(e.endsWith(".ts")){let t=S_(mt.dirname(e));return{command:t,argsPrefix:t==="npx"?["tsx",e]:[e],cliPath:e}}return{command:r,argsPrefix:[e],cliPath:e}}function Wi(e){if(e.explicitCliPath)return Ui(e.explicitCliPath)?Yc(e.explicitCliPath,e.nodeExecutable):null;let r=v_(new URL(".",e.importMetaUrl)),t=mt.join(r,"cli.js");if(Ui(t))return Yc(t,e.nodeExecutable);let n=mt.join(r,"cli.ts");return Ui(n)?Yc(n,e.nodeExecutable):null}var E_=5e3,P_=360*60*1e3,A_=3,I_=5e3;function O_(e){let{runId:r,workerName:t}=Fe(e);return{run:r,name:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,maxTotalMs:Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):void 0,completeAttempts:Number(e.completeAttempts)>0?Math.floor(Number(e.completeAttempts)):void 0,completeBackoffMs:Number(e.completeBackoffMs)>0?Math.floor(Number(e.completeBackoffMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}}async function ft(e){let r=O_(e),t=r.pollMs??E_,n=r.maxTotalMs??P_,o=r.completeAttempts??A_,s=r.completeBackoffMs??I_,i=he(r.run,r.name);if(!i.agentOsId||!i.taskId)return{worker:i.name,runId:i.runId,outcome:"missing_link",attempts:0,reason:"worker has no agentOsId/taskId \u2014 nothing to attribute completion to"};if(dt(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let a=Date.now();for(;;){if(i=he(r.run,r.name),dt(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let u=D(i);if(oe(u)||!H(i.pid))break;if(Date.now()-a>n)return{worker:i.name,runId:i.runId,outcome:"timed_out",attempts:0,reason:`worker did not finish within ${n}ms`};$r(t)}let l,c;for(let u=1;u<=o;u++){let d=await Eo({run:r.run,name:r.name,...r.agentOsId?{agentOsId:r.agentOsId}:{},...r.baseUrl?{baseUrl:r.baseUrl}:{},...r.secret?{secret:r.secret}:{}});if(l=d.httpStatus,d.ok)return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:d.httpStatus,attempts:u};if(d.httpStatus===401||d.httpStatus===403)return c=typeof d.reason=="string"?d.reason:"completion replay refused",{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:d.httpStatus,attempts:u,reason:c};c=typeof d.reason=="string"?d.reason:"transient failure",u<o&&$r(s)}return{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:l,attempts:o,reason:c??"completion failed after retries"}}async function Jc(e){try{let r=await ft(e);console.log(JSON.stringify(r,null,2)),(r.outcome==="missing_link"||r.outcome==="timed_out")&&process.exit(1),process.exit(0)}catch(r){console.error(`worker auto-complete failed: ${r.message}`),process.exit(1)}}function qc(e){let r=e.nodeExecutable??process.execPath,t=Wi({importMetaUrl:import.meta.url,explicitCliPath:e.cliPath,nodeExecutable:r});if(!t)return;let n=t.cliPath;if(!w_(n))return;let o=x_.join(e.workerDir,"auto-complete.log"),s;try{s=__(o,"a")}catch{s=void 0}let i=["ignore",s??"ignore",s??"ignore"],a=[...t.argsPrefix,"worker","auto-complete","--run",e.runId,"--name",e.workerName];e.agentOsId&&a.push("--agent-os-id",e.agentOsId),e.baseUrl&&a.push("--base-url",e.baseUrl),e.secret&&a.push("--secret",e.secret);try{let l=C_(t.command,a,pe({detached:!0,stdio:i,env:process.env}));return s!==void 0&&bg(s),l.unref(),{pid:l.pid,logPath:o,cliPath:n}}catch{if(s!==void 0)try{bg(s)}catch{}return}}function Sg(e){let r=e.branch?.trim()||"unknown branch",t=e.pid!=null?`pid ${e.pid}`:"pid pending";return`Harness worker started: ${e.worker} (${t}, ${r})`}function zc(e){return JSON.stringify(e,null,2)}Pe();function Cg(e,r,t){me(e,["fetch","origin",t,"--prune"],{allowFailure:!0});let n=`origin/${t}`,o=ne(e,["worktree","add","-B",t,r,n]);if(o.status===0)return;let s=ne(e,["worktree","add","-b",t,r,"HEAD"]);if(s.status!==0){let i=o.stderr||o.stdout||s.stderr||s.stdout||"git worktree add failed for repair target branch";throw new Error(i)}}Oe();I();function Li(e,r){let t=typeof r.name=="string"?r.name.trim():"";if(!t||t==="undefined"||t==="null")throw new Error(`worker name is required and must be a real identifier (got: ${JSON.stringify(r.name)})`);let n=b(t);if(e.workers?.[n])throw new Error(`worker already exists in run ${e.id}: ${n}`);if(!r.task)throw new Error(`missing task text for worker ${n}`);let o=r.routingRule||r.requestedModel?{provider:r.provider||Ie,model:r.model,rule:r.routingRule||"explicit:spawn",requestedModel:r.requestedModel??r.model}:ki({explicitModel:r.model,explicitProvider:r.provider,explicitProviderIsOperatorOverride:!!r.provider?.trim()}),s=Bf(o.provider),i=o.model;if(s.preflightModel){let F=s.preflightModel(r.model);if(!F.ok)throw new Error(`model preflight failed for provider "${s.name}": ${F.note??"invalid model/provider combination"}`);F.normalized&&console.error(`[supervisor] ${n}: ${F.note}`),i=F.model}let{worktreesDir:a}=Z(),l=mn.join(x(e.id),"workers",n);T_(l,{recursive:!0});let c=mn.join(a,e.id,n),u=r.repairTargetBranch?.trim()||void 0,d=u||r.branch||`agent/${e.id}/${n}`;if(N_(c))throw new Error(`worktree path already exists: ${c}`);me(e.repo,["fetch","origin","--prune"],{allowFailure:!0}),u?Cg(e.repo,c,u):me(e.repo,["worktree","add","-b",d,c,e.baseCommit],{throwError:!0});let m=mn.join(l,"stdout.jsonl"),p=mn.join(l,"stderr.log"),f=mn.join(l,"heartbeat.jsonl"),h=Ec({task:r.task,ownedPaths:r.ownedPaths||[],worktreePath:c,heartbeatPath:f,planId:r.planId,taskId:r.taskId,instructionPolicyMarkdown:r.instructionPolicyMarkdown,memoryQualityMarkdown:r.memoryQualityPromptMarkdown??r.memoryQualityCapture?.promptMarkdown??null,personaMarkdown:r.personaMarkdown,contextEnvelopeMarkdown:r.contextEnvelopeMarkdown,model:i,repairTargetPrUrl:r.repairTargetPrUrl,repairTargetBranch:r.repairTargetBranch??(u||void 0)}),k=process.env.KYNVER_HARNESS_TASK_ID,g=process.env.KYNVER_HARNESS_AGENT_OS_ID;r.taskId&&(process.env.KYNVER_HARNESS_TASK_ID=String(r.taskId)),r.agentOsId&&(process.env.KYNVER_HARNESS_AGENT_OS_ID=String(r.agentOsId));let R;try{R=s.start({name:n,task:r.task,ownedPaths:r.ownedPaths,model:i,branch:d,worktreePath:c,workerDir:l,stdoutPath:m,stderrPath:p,heartbeatPath:f,prompt:h})}catch(F){throw me(e.repo,["worktree","remove","--force",c],{allowFailure:!0}),me(e.repo,["branch","-D",d],{allowFailure:!0}),F}finally{k===void 0?delete process.env.KYNVER_HARNESS_TASK_ID:process.env.KYNVER_HARNESS_TASK_ID=k,g===void 0?delete process.env.KYNVER_HARNESS_AGENT_OS_ID:process.env.KYNVER_HARNESS_AGENT_OS_ID=g}let O=wf(R.model,i,s.defaultModel),_=y(),E=Ae(process.env,_),U=er().runnerId,Y=Ro(E.boxKind),$={name:n,runId:e.id,status:"running",pid:R.pid,model:O,branch:d,worktreePath:c,workerDir:l,stdoutPath:m,stderrPath:p,heartbeatPath:f,ownedPaths:r.ownedPaths,...r.agentOsId?{agentOsId:String(r.agentOsId)}:{},...r.taskId?{taskId:String(r.taskId)}:{},...r.planId?{planId:String(r.planId)}:{},...r.instructionPolicyFingerprint?{instructionPolicyFingerprint:String(r.instructionPolicyFingerprint)}:{},...r.instructionPolicyEvidence?{instructionPolicyEvidence:r.instructionPolicyEvidence}:{},...r.memoryQualityCapture?{memoryQualityCapture:r.memoryQualityCapture}:{},...r.personaSlug?{personaSlug:String(r.personaSlug)}:{},...r.personaEvidence?{personaEvidence:r.personaEvidence}:{},...r.contextEnvelopeEvidence?{contextEnvelopeEvidence:r.contextEnvelopeEvidence}:{},...r.leaseOwner?{leaseOwner:String(r.leaseOwner)}:{},...r.leaseToken?{leaseToken:String(r.leaseToken)}:{},...r.dispatched?{dispatched:!0}:{},...!r.agentOsId||!r.taskId?{localOnly:!0}:{},routingRule:o.rule,...o.requestedModel?{requestedModel:o.requestedModel}:{},...o.orchestrationAudit?{orchestrationAudit:o.orchestrationAudit}:{},...r.executorRef?{executorRef:String(r.executorRef)}:{},...r.parentTaskId?{parentTaskId:String(r.parentTaskId)}:{},...r.taskTitle?{taskTitle:String(r.taskTitle)}:{},...r.taskPrUrl?{taskPrUrl:String(r.taskPrUrl)}:{},...r.repairTargetPrUrl?{repairTargetPrUrl:String(r.repairTargetPrUrl)}:{},...r.repairTargetBranch?{repairTargetBranch:String(r.repairTargetBranch)}:{},boxKind:E.boxKind,boxId:Y,runtimeId:U,startedAt:new Date().toISOString()};if(K(e.id,$),e.workers={...e.workers||{},[n]:{workerDir:l,statusPath:mn.join(l,"worker.json")}},e.status="running",Be(e),$.agentOsId&&$.taskId){let F;try{F=qc({runId:e.id,workerName:n,workerDir:l,agentOsId:$.agentOsId})}catch(P){let B=`completion sidecar failed to spawn: ${P.message}`;$.completionBlocker=B,K(e.id,$)}if(F)F.pid&&($.completionSidecarPid=F.pid,K(e.id,$));else{let P="completion sidecar failed to spawn (CLI not found or spawn error)";$.completionBlocker=P,$.completionSidecarSpawnFailedAt=new Date().toISOString(),K(e.id,$)}}return $}async function Xc(e){let r=L(String(e.run)),t=typeof e.name=="string"?e.name.trim():"";t||(console.error("worker start failed: --name is required"),process.exit(1));let n=e.task?String(e.task):fp(e.taskFile?String(e.taskFile):void 0);n||(console.error("missing --task or --task-file"),process.exit(1));let o=!!(e.agentOsId&&e.taskId),s=e.localOnly===!0||e.localOnly==="true";!o&&!s&&(e.agentOsId||e.taskId)&&(console.error("worker start: board-linked workers require both --agent-os-id and --task-id (or pass --local-only for direct runs)"),process.exit(1));let i=e.wait===!0||e.wait==="true",a=e.emitJson===!0||e.emitJson==="true",l;try{l=Li(r,{name:t,task:n,ownedPaths:e.owned?String(e.owned).split(",").map(d=>d.trim()).filter(Boolean):[],model:e.model?String(e.model):void 0,branch:e.branch?String(e.branch):void 0,agentOsId:e.agentOsId?String(e.agentOsId):void 0,taskId:e.taskId?String(e.taskId):void 0,provider:e.provider?String(e.provider):void 0});let u={runId:r.id,worker:l.name,pid:l.pid,branch:l.branch,worktreePath:l.worktreePath,workerDir:l.workerDir};a?console.log(zc(u)):(console.log(Sg(u)),console.error(zc(u)))}catch(u){console.error(`worker start failed: ${u.message}`),process.exit(1)}if(!i||!l)return;let c=await ft({run:String(e.run),name:l.name,...l.agentOsId?{agentOsId:l.agentOsId}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});console.error(JSON.stringify({event:"start_wait_outcome",...c})),c.outcome==="timed_out"&&(process.exitCode=1)}T();Zt();C();import D_ from"node:path";function M_(e){let r=Array.isArray(e.ownedPaths)?e.ownedPaths.filter(n=>typeof n=="string"):[],t=Array.isArray(e.writeSetPrefixes)?(e.writeSetPrefixes??[]).filter(n=>typeof n=="string"):[];return{...r.length?{ownedPaths:r}:{},...t.length?{writeSetPrefixes:t}:{},...e.allowConcurrentHotspot?{allowConcurrentHotspot:!0}:{}}}function Bi(e){let r=L(e),t=[];for(let n of Object.keys(r.workers||{})){let o=w(D_.join(x(r.id),"workers",b(n),"worker.json"),void 0);!o?.taskId||!rt(o)||t.push({runId:r.id,workerName:n,taskId:o.taskId,pid:o.pid,...M_(o)})}return t}C();import{createHash as wg}from"node:crypto";function gr(e){let r=e.replace(/\r\n/g,`
+`).trimEnd();return wg("sha256").update(r,"utf8").digest("hex")}function fn(e){if(e==null)return null;let r=e.trim();return r?wg("sha256").update(r,"utf8").digest("hex"):null}I();var ee=class extends Error{kind;httpStatus;constructor(r,t,n){super(t),this.name="PlanPersistError",this.kind=r,this.httpStatus=n}};function Io(e,r){return e===401||e===403?new ee("auth",r,e):e>=500?new ee("server",r,e):new ee("permanent",r,e)}function Qc(e){let r=e instanceof Error?e.message:String(e);return/ECONNREFUSED|ENOTFOUND|ETIMEDOUT|fetch failed|network/i.test(r)?new ee("network",r):new ee("tool_interruption",r)}function _g(e){return e!=="permanent"}function Fi(e){let r={"Content-Type":"application/json"};return e&&(r.Authorization=`Bearer ${e}`),r}async function Ki(e){let r=await e.text();try{return JSON.parse(r)}catch{return r}}async function xg(e,r,t={}){let n=V(t.baseUrl),o=t.apiKey??se(),s=t.fetchFn??fetch,i=`${n}/api/agent-os/${encodeURIComponent(e)}/plans/${encodeURIComponent(r)}`;try{let a=await s(i,{method:"GET",headers:Fi(o)}),l=await Ki(a);if(!a.ok){let c=typeof l=="object"&&l&&"error"in l?String(l.error):`GET plan failed (${a.status})`;throw Io(a.status,c)}return l}catch(a){throw a instanceof ee?a:Qc(a)}}async function Eg(e,r={}){let t=V(r.baseUrl),n=r.apiKey??se(),o=r.fetchFn??fetch,s=e.agentOsSlug;try{if(e.operation==="create"){let m=`${t}/api/agent-os/${encodeURIComponent(s)}/plans`,p={title:e.title,summary:e.summary??null,slug:e.planSlug??null,sourceRefs:Hi(e),initialVersion:{title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:Hi(e)}},f=await o(m,{method:"POST",headers:Fi(n),body:JSON.stringify(p)}),h=await Ki(f);if(!f.ok){let g=typeof h=="object"&&h&&"error"in h?String(h.error):`create plan failed (${f.status})`;throw Io(f.status,g)}let k=h;return{planId:k.plan.id,versionId:k.version.id,versionNumber:k.version.versionNumber}}let i=e.planId;if(!i)throw new ee("permanent","planId is required for this operation");if(e.operation==="update_metadata"){let m=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}`,p={title:e.title,summary:e.summary??null,sourceRefs:Hi(e)},f=await o(m,{method:"PATCH",headers:Fi(n),body:JSON.stringify(p)}),h=await Ki(f);if(!f.ok){let g=typeof h=="object"&&h&&"error"in h?String(h.error):`update plan failed (${f.status})`;throw Io(f.status,g)}let k=h;return{planId:k.id,versionId:k.currentVersionId,versionNumber:null}}let a=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}/versions`,l={title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:Hi(e),markCurrent:e.markCurrent!==!1},c=await o(a,{method:"POST",headers:Fi(n),body:JSON.stringify(l)}),u=await Ki(c);if(!c.ok){let m=typeof u=="object"&&u&&"error"in u?String(u.error):`add version failed (${c.status})`;throw Io(c.status,m)}let d=u;return{planId:d.version.planId,versionId:d.version.id,versionNumber:d.version.versionNumber}}catch(i){throw i instanceof ee?i:Qc(i)}}function Hi(e){let r={...e.sourceRefs??{}};return e.model&&(r.model=e.model),Object.keys(r).length?r:e.sourceRefs??null}import{createHash as U_}from"node:crypto";function $i(e){let r={operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??null,planSlug:e.planSlug??null,title:e.title.trim(),summaryHash:fn(e.summary),bodyHash:gr(e.body),changeSummary:e.changeSummary?.trim()??null,markCurrent:e.markCurrent??!0};return U_("sha256").update(JSON.stringify(r),"utf8").digest("hex")}import{mkdirSync as Pg}from"node:fs";import{homedir as W_}from"node:os";import gn from"node:path";function ji(){let e=process.env.KYNVER_STATE_ROOT;return e?gn.resolve(e):gn.join(W_(),".kynver","state")}function Vi(){return gn.join(ji(),"plan-outbox")}function L_(){return gn.join(ji(),"plan-outbox-archive")}function gt(){let e=Vi(),r=L_();return Pg(e,{recursive:!0}),Pg(r,{recursive:!0}),{outboxDir:e,archiveDir:r}}function Oo(e){if(e.startsWith("/tmp/")||e.startsWith("/var/folders/"))return!0;let r=gn.resolve(e);return r.startsWith("/tmp/")||r.startsWith(gn.join("/var","folders"))}import{existsSync as Zc,readFileSync as Ig,renameSync as Ag,readdirSync as B_,writeFileSync as eu,unlinkSync as nF}from"node:fs";import Ke from"node:path";import{randomUUID as H_}from"node:crypto";var F_=12;function ht(){let{outboxDir:e}=gt(),r=B_(e).filter(n=>n.endsWith(".json")),t=[];for(let n of r){let o=tu(Ke.join(e,n));o&&o.queueStatus==="queued"&&t.push(o)}return t.sort((n,o)=>n.createdAt.localeCompare(o.createdAt))}function ru(e){for(let r of ht())if(r.idempotencyKey===e)return r;return null}function tu(e){if(!Zc(e))return null;try{return JSON.parse(Ig(e,"utf8"))}catch{return null}}function Og(e){let{outboxDir:r}=gt(),t=Ke.join(r,e.bodyPath);return Ig(t,"utf8")}function nu(e,r){let{outboxDir:t}=gt(),n=new Date().toISOString(),o=r.existing?.id??H_(),s=r.existing?.bodyPath??`${o}.body.md`,i=Ke.join(t,`${o}.json`),a=Ke.join(t,s);r.existing||eu(a,e.body,"utf8");let l={id:o,idempotencyKey:$i(e),operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??r.existing?.planId??null,planSlug:e.planSlug??r.existing?.planSlug??null,title:e.title,summary:e.summary??null,bodyPath:s,bodyHash:gr(e.body),author:e.author??null,model:e.model??null,sourceRefs:e.sourceRefs??null,changeSummary:e.changeSummary??null,markCurrent:e.markCurrent??!0,createdAt:r.existing?.createdAt??n,updatedAt:n,retryCount:(r.existing?.retryCount??0)+(r.existing?1:0),maxRetries:e.maxRetries??r.existing?.maxRetries??F_,lastError:r.lastError,lastFailureKind:r.lastFailureKind,queueStatus:"queued",userStatus:"queued for retry",readbackEvidence:null};return eu(i,`${JSON.stringify(l,null,2)}
+`,{mode:384}),l}function Ng(e){let{outboxDir:r}=gt(),t=Ke.join(r,`${e.id}.json`);eu(t,`${JSON.stringify(e,null,2)}
+`,{mode:384})}function Tg(e){let{outboxDir:r,archiveDir:t}=gt(),n=Ke.join(r,`${e.id}.json`),o=Ke.join(r,e.bodyPath),s=Ke.join(t,`${e.id}.json`),i=Ke.join(t,e.bodyPath);Zc(n)&&Ag(n,s),Zc(o)&&Ag(o,i)}function No(e){let{outboxDir:r}=gt();return{jsonPath:Ke.join(r,`${e.id}.json`),bodyPath:Ke.join(r,e.bodyPath)}}function Dg(e,r){return{operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId,planSlug:e.planSlug,title:e.title,summary:e.summary,body:r,changeSummary:e.changeSummary??void 0,author:e.author??void 0,model:e.model??void 0,sourceRefs:e.sourceRefs,markCurrent:e.markCurrent??!0,maxRetries:e.maxRetries}}async function Mg(e,r,t={}){let n=await xg(e,r.planId,t),o=n.plan,s=n.currentVersion;if(o.title.trim()!==r.title.trim())throw new ee("verification_failed",`title mismatch: expected "${r.title}", got "${o.title}"`);let i=fn(r.summary),a=fn(o.summary);if(i!==a)throw new ee("verification_failed","summary mismatch on readback");if(r.versionId&&o.currentVersionId!==r.versionId)throw new ee("verification_failed",`currentVersionId mismatch: expected ${r.versionId}, got ${o.currentVersionId}`);if(r.versionNumber!=null&&(!s||s.versionNumber!==r.versionNumber))throw new ee("verification_failed",`versionNumber mismatch: expected ${r.versionNumber}, got ${s?.versionNumber??"none"}`);let l=s?.body??"",c=gr(l);if(r.bodyHash&&c!==r.bodyHash)throw new ee("verification_failed","body hash mismatch on readback");return{planId:o.id,currentVersionId:o.currentVersionId,versionNumber:s?.versionNumber??null,title:o.title,summary:o.summary,bodyHash:r.bodyHash||c,readAt:new Date().toISOString()}}function Ug(e,r){return{planId:r.planId,title:e.title,summary:e.summary??null,body:e.body,bodyHash:gr(e.body),versionId:r.versionId,versionNumber:r.versionNumber}}var Wg="persisted and read back",K_="queued for retry",ou="failed and needs action";async function hn(e,r={}){e.bodyPathHint&&Oo(e.bodyPathHint);let t=$i(e),n=ru(t);if(n?.readbackEvidence)return{userStatus:Wg,outboxId:n.id,planId:n.readbackEvidence.planId,readbackEvidence:n.readbackEvidence,idempotencyKey:t};if(e.immediateFailure)return Lg(e,e.immediateFailure.message,e.immediateFailure.kind,n);let o=r.writePlan??Eg,s=r.verifyReadback??Mg;try{let i=await o(e,r),a={...e,planId:i.planId},l=Ug(a,i),c=await s(e.agentOsSlug,$_(e,l),r);return n&&Tg(n),{userStatus:Wg,planId:i.planId,versionId:i.versionId??void 0,readbackEvidence:c,idempotencyKey:t}}catch(i){let a=i instanceof ee?i:new ee("tool_interruption",i instanceof Error?i.message:String(i));if(!_g(a.kind)){let l=nu(e,{lastError:a.message,lastFailureKind:a.kind,existing:n??void 0}),c=No(l),u=Bg(l,a.message);return{userStatus:ou,outboxId:u.id,outboxPath:c.jsonPath,bodyPath:c.bodyPath,lastError:a.message,idempotencyKey:t}}return Lg(e,a.message,a.kind,n)}}function $_(e,r){return e.operation==="update_metadata"?{...r,body:"",bodyHash:""}:r}function Lg(e,r,t,n){let o=nu(e,{lastError:r,lastFailureKind:t,existing:n??void 0}),s=No(o);if(o.retryCount>=o.maxRetries){let i=Bg(o,r);return{userStatus:ou,outboxId:i.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}return{userStatus:K_,outboxId:o.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}function Bg(e,r){let t={...e,queueStatus:"failed",userStatus:ou,lastError:r,updatedAt:new Date().toISOString()};return Ng(t),t}import j_ from"node:path";async function Gi(e={},r={}){let t=ht().filter(s=>e.outboxId?s.id===e.outboxId:!0),n=e.max&&e.max>0?t.slice(0,e.max):t,o={processed:0,succeeded:0,stillQueued:0,failed:0,results:[]};for(let s of n){o.processed+=1;let i=Og(s),a=Dg(s,i),l=await hn(a,r);l.userStatus==="persisted and read back"?o.succeeded+=1:l.userStatus==="failed and needs action"?o.failed+=1:o.stillQueued+=1,o.results.push({outboxId:s.id,userStatus:l.userStatus,lastError:l.lastError})}return o}function su(e){let r=j_.join(Vi(),`${e}.json`);return tu(r)}function Yi(e){let r=No(e);return["## Plan persistence risk","",`AgentOS plan write is **not** confirmed (${e.userStatus}).`,`- outboxId: \`${e.id}\``,e.planId?`- planId: \`${e.planId}\``:"- planId: (pending \u2014 create not yet applied)",`- outbox: \`${r.jsonPath}\``,`- body: \`${r.bodyPath}\``,"","Drain when approval/connectivity returns: `kynver plan outbox drain`"].join(`
+`)}function Ji(e){let r=e.metadata&&typeof e.metadata=="object"?e.metadata:null,t=typeof e.planPersistenceOutboxId=="string"&&e.planPersistenceOutboxId||(r&&typeof r.planPersistenceOutboxId=="string"?r.planPersistenceOutboxId:void 0);return t?{outboxId:t,jsonPath:typeof e.planPersistenceOutboxPath=="string"?e.planPersistenceOutboxPath:r&&typeof r.planPersistenceOutboxPath=="string"?r.planPersistenceOutboxPath:void 0,bodyPath:typeof e.planPersistenceBodyPath=="string"?e.planPersistenceBodyPath:r&&typeof r.planPersistenceBodyPath=="string"?r.planPersistenceBodyPath:void 0}:null}async function iu(e){let r=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/release`,t;try{t=await re(r,e.secret,{agentOsId:e.agentOsId,leaseOwner:e.leaseOwner,...e.failureDetail?{failureDetail:e.failureDetail}:{}},{agentOsId:e.agentOsId,baseUrl:e.baseUrl})}catch(s){return{released:!1,httpOk:!1,releaseResponse:{ok:!1,error:s.message}}}let n=t.response;return{released:t.ok===!0||n?.ok===!0,httpOk:t.ok===!0,releaseResponse:t.response??t}}import{spawnSync as Fg}from"node:child_process";import{spawnSync as V_}from"node:child_process";function Hg(){if(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim())return{source:"env",configured:!0,reason:"GitHub token already configured in environment"};let e=V_("gh",["auth","token"],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});if(e.status!==0)return{source:"missing",configured:!1,reason:typeof e.stderr=="string"&&e.stderr.trim()?e.stderr.trim():"gh auth token failed; run `gh auth login` on this machine"};let r=typeof e.stdout=="string"?e.stdout.trim():"";return r?(process.env.GH_TOKEN=r,{source:"gh-cli",configured:!0,reason:"Using local GitHub CLI auth for daemon land_pr merge"}):{source:"missing",configured:!1,reason:"gh auth token returned an empty token; run `gh auth login` on this machine"}}var Kg=new Set(["SUCCESS","SKIPPED","NEUTRAL"]),G_=new Set(["CLEAN","HAS_HOOKS"]);function lu(e){return e?.trim()?["--repo",e.trim()]:[]}function $g(e){let r=/github\.com\/([^/]+)\/([^/]+)\/pull\/\d+/i.exec(e.trim());return r?`${r[1]}/${r[2]}`:null}function jg(e,r,t){let n=e.gh(r,t);if(n.status!==0)throw new Error(n.stderr||n.stdout||`gh ${t.join(" ")} failed`);return JSON.parse(n.stdout||"{}")}function To(e){return typeof e.name=="string"&&e.name||typeof e.context=="string"&&e.context||typeof e.workflowName=="string"&&e.workflowName||"unknown check"}function Y_(e){let r=Array.isArray(e)?e:[],t=[],n=[];for(let o of r){let s=o&&typeof o=="object"?o:{},i=typeof s.conclusion=="string"?s.conclusion.toUpperCase():"",a=typeof s.status=="string"?s.status.toUpperCase():"",l=typeof s.state=="string"?s.state.toUpperCase():"";if(!(i&&Kg.has(i))){if(i){n.push(`${To(s)}=${i}`);continue}if(!(l&&Kg.has(l))){if(l&&l!=="PENDING"&&l!=="EXPECTED"){n.push(`${To(s)}=${l}`);continue}if(l==="PENDING"||l==="EXPECTED"){t.push(`${To(s)}=${l}`);continue}if(a&&a!=="COMPLETED"){t.push(`${To(s)}=${a}`);continue}t.push(`${To(s)}=PENDING`)}}}return{pending:t,failed:n}}function J_(e){return(Array.isArray(e)?e:[]).some(t=>{let n=t&&typeof t=="object"?t:{},o=typeof n.name=="string"&&n.name||typeof n.context=="string"&&n.context||"",s=typeof n.conclusion=="string"?n.conclusion.toUpperCase():"",i=typeof n.state=="string"?n.state.toUpperCase():"";return/^vercel/i.test(o)&&(s==="SUCCESS"||i==="SUCCESS")})}var q_=/^##\s*(test\s*plan|verification|test\s*evidence|verify)\b/im,z_=/typecheck|npm run (test|build|typecheck)|vitest|tsc\b|verify-pr-local|local verify|local-verify|tests? (pass|green)|build green|node --test/i,X_=/^docs[(:]/i,Q_=/docs[- ]only|documentation only|no[- ]code change|no code changes|low[- ]risk|plan tracker only|markdown only/i;function Z_(e){let r=typeof e.title=="string"?e.title.trim():"",t=typeof e.body=="string"?e.body.trim():"",n=X_.test(r)||Q_.test(t),o=q_.test(t),s=z_.test(t);return n||o||s||e.vercelCheckSuccess===!0}function ex(e){if(!Z_({title:e.title,body:e.body,vercelCheckSuccess:J_(e.statusCheckRollup)}))throw new Error(`PR #${e.number} lacks landing verification evidence \u2014 add ## Test plan / ## Verification with local commands, Vercel preview, or docs/no-code rationale`)}function rx(e){if(e.state!=="OPEN")throw new Error(`PR #${e.number} is ${e.state}, not OPEN`);if(e.isDraft)throw new Error(`PR #${e.number} is still a draft`);if(!G_.has(e.mergeStateStatus))throw new Error(`PR #${e.number} mergeStateStatus is ${e.mergeStateStatus}`);let r=Y_(e.statusCheckRollup);if(r.failed.length>0)throw new Error(`PR #${e.number} has failing checks: ${r.failed.join(", ")}`);if(r.pending.length>0)throw new Error(`PR #${e.number} has pending checks: ${r.pending.join(", ")}`);ex(e)}function tx(e){try{return rx(e),null}catch(r){return r instanceof Error?r.message:String(r)}}function nx(e,r,t,n){if(!n?.trim())return;let o=encodeURI(`heads/${n}`);e.gh(r,["api","-X","DELETE",`repos/${t}/git/refs/${o}`])}function ox(e,r,t){if(t?.trim())return t.trim();let n=e.gh(r,["repo","view","--json","nameWithOwner"]);if(n.status!==0)throw new Error(n.stderr||"Could not resolve GitHub repo");let o=JSON.parse(n.stdout||"{}");if(!o.nameWithOwner)throw new Error("Could not resolve GitHub repo");return o.nameWithOwner}function sx(e,r){if(!r?.trim())return;let t=Fg("git",["worktree","list","--porcelain"],{cwd:e,encoding:"utf8"});if(t.status!==0)return;let n=String(t.stdout||"").split(/\r?\n/),o=null,s=null;for(let i of n){if(i.startsWith("worktree ")){o=i.slice(9).trim(),s=null;continue}i.startsWith("branch ")&&o&&(s=i.slice(7).trim(),s.endsWith(`/${r}`)&&Fg("git",["worktree","remove","--force",o],{cwd:e,encoding:"utf8"}))}}async function Vg(e){let r=e.cwd??process.cwd(),t=e.exec??Ei,n=e.prUrl.trim();if(!n)throw new Error("prUrl is required");let o=Hg();if(!o.configured)return{prUrl:n,outcome:"blocked",reason:o.reason};let s=jg(t,r,["pr","view",n,...lu(e.repo),"--json",["number","url","title","body","state","isDraft","mergeStateStatus","statusCheckRollup","headRefName","mergedAt","mergeCommit"].join(",")]);if(s.state==="MERGED"||s.mergedAt)return{prUrl:s.url||n,outcome:"skipped",mergeCommit:s.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 land_pr no-op (redelivery)`};let i=tx(s);if(i)return e.skipNotReady?{prUrl:s.url||n,outcome:"skipped",reason:i}:{prUrl:s.url||n,outcome:"blocked",reason:i};if(e.dryRun)return{prUrl:s.url||n,outcome:"skipped",reason:"dry-run: PR is ready to merge"};let a=String(s.number),l=t.gh(r,["pr","merge",a,...lu(e.repo),"--squash"]);if(l.status!==0){let u=au(t,r,a,e.repo);return u?{prUrl:u.url||s.url||n,outcome:"skipped",mergeCommit:u.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 merged by another lane during land_pr (race)`}:{prUrl:s.url||n,outcome:"blocked",reason:l.stderr||l.stdout||"gh pr merge failed"}}let c=au(t,r,a,e.repo);c||(c=au(t,r,a,e.repo));try{let u=ox(t,r,e.repo);nx(t,r,u,s.headRefName),sx(r,s.headRefName)}catch{}return{prUrl:c?.url||s.url||n,outcome:"merged",mergeCommit:c?.mergeCommit?.oid??null,reason:`Daemon land_pr merged PR #${s.number}${c?"":" (post-merge view unavailable \u2014 merge verified by gh exit 0)"}`}}function au(e,r,t,n){try{let o=jg(e,r,["pr","view",t,...lu(n),"--json","number,url,mergedAt,mergeCommit,state"]);return o.state==="MERGED"||o.mergedAt?o:null}catch{return null}}I();async function Gg(e){let r=await J(e.secret,e.agentOsId,{baseUrl:e.baseUrl}),t=String(e.task.id),n=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/harness/completion`,o=new Date().toISOString(),s={source:"kynver-harness",agentOsId:e.agentOsId,runId:e.runId,workerName:`land-pr-${t}`,taskId:t,leaseToken:e.task.leaseToken??null,startedAt:o,finishedAt:o,status:{finalResult:e.report,prUrl:e.report.prUrl,summary:e.report.reason,leaseToken:e.task.leaseToken??null},workerInjection:null},i=await re(n,r,s,{agentOsId:e.agentOsId,baseUrl:e.baseUrl});return{ok:i.ok,status:i.status}}function Yg(){return["## verify_live completion contract","Finish with a JSON finalResult object:","{",'  "prUrl": "<landed pr>",','  "outcome": "passed" | "failed" | "skipped" | "no_mcp_surface",','  "reason": "<human summary>",','  "mergeCommit": "<sha optional>",','  "liveReadback": "<prod readback string from acceptance.liveReadbackQuery>",','  "mcpCalls": [{ "tool": "<name>", "ok": true, "summary": "..." }]',"}","","Drive the feature MCP tools against live production. Do not mark passed without exercising the MCP surface.","When the subject carries an acceptance snapshot, include liveReadback \u2014 the server oracle rejects passed if the original symptom still appears."].join(`
+`)}var ix="dispatch_start_readback_failed:";function kt(e){return`${ix} ${e.trim()}`}function ax(e){return e.branch?.trim()?e.worktreePath?.trim()?e.heartbeatPath?.trim()?e.startedAt?.trim()?null:"missing local worker startedAt":"missing local worker heartbeatPath":"missing local worker worktreePath":"missing local worker branch"}function lx(e){let{snapshot:r,leaseOwner:t,expectedLeaseToken:n,worker:o}=e;if(!r)return{ok:!1,error:kt("task lease snapshot missing after spawn"),detail:{taskId:o.taskId,leaseOwner:t,expectedLeaseToken:n}};if(r.status!=="running")return{ok:!1,error:kt(`AgentOS task status=${r.status} (expected running)`),detail:{taskId:r.taskId,status:r.status,leaseOwner:r.leaseOwner,blocker:r.blocker},snapshot:r};let s=r.leaseOwner?.trim()??"";if(!s||s!==t.trim())return{ok:!1,error:kt(`leaseOwner mismatch (board=${s||"null"}, expected=${t})`),detail:{taskId:r.taskId,boardLeaseOwner:s||null,expectedLeaseOwner:t},snapshot:r};let i=r.leaseToken?.trim()??"";if(!i||i!==n.trim())return{ok:!1,error:kt(`leaseToken mismatch (board=${i||"null"}, expected=${n})`),detail:{taskId:r.taskId,boardLeaseToken:i||null,expectedLeaseToken:n},snapshot:r};let a=ax(o);return a?{ok:!1,error:kt(a),detail:{taskId:o.taskId,worker:o.name},snapshot:r}:r.heartbeatAt?.trim()?o.executorRef?.trim()&&r.executorRef?.trim()&&o.executorRef.trim()!==r.executorRef.trim()?{ok:!1,error:kt(`executorRef mismatch (board=${r.executorRef}, worker=${o.executorRef})`),detail:{taskId:r.taskId,boardExecutorRef:r.executorRef,workerExecutorRef:o.executorRef},snapshot:r}:{ok:!0,snapshot:r}:{ok:!1,error:kt("AgentOS heartbeatAt missing after claim"),detail:{taskId:r.taskId},snapshot:r}}async function Jg(e){let r=await pn({agentOsId:e.agentOsId,taskIds:[e.taskId],baseUrl:e.baseUrl,secret:e.secret});return lx({snapshot:r.get(e.taskId)??null,leaseOwner:e.leaseOwner,expectedLeaseToken:e.expectedLeaseToken,worker:e.worker})}C();T();function qg(e,r,t){r.pid&&H(r.pid)&&(Er(r.pid,"SIGTERM"),H(r.pid)&&Er(r.pid,"SIGKILL"));let n={...r,status:"failed",pid:void 0,completionBlocker:t,dispatchStartReadbackFailed:!0};return K(e,n),n}T();var bi=3600*1e3;function zg(e){let r=e.admissionExhaustion;return!r||typeof r!="object"?null:r}function Xg(e){let r=e.dispatchSkipDrain;return!r||typeof r!="object"?null:r}function cx(e){let r=e.harnessWorkerContext;if(!r||typeof r!="object")return null;let t=r,n=typeof t.instructionPolicyMarkdown=="string"?t.instructionPolicyMarkdown:null,o=typeof t.instructionPolicyFingerprint=="string"?t.instructionPolicyFingerprint:null,s=t.instructionPolicyEvidence&&typeof t.instructionPolicyEvidence=="object"?t.instructionPolicyEvidence:null,i=typeof t.personaMarkdown=="string"?t.personaMarkdown:null,a=typeof t.personaEvidence=="object"&&t.personaEvidence&&typeof t.personaEvidence.injectedPersonaSlug=="string"?t.personaEvidence.injectedPersonaSlug:null,l=t.personaEvidence&&typeof t.personaEvidence=="object"?t.personaEvidence:null,c=t.personaInjectionReady===!0,u=typeof t.contextEnvelopeMarkdown=="string"?t.contextEnvelopeMarkdown:null,d=t.contextEnvelopeEvidence&&typeof t.contextEnvelopeEvidence=="object"?t.contextEnvelopeEvidence:null,m=t.contextEnvelopeReady===!0,p=t.memoryQualityCapture&&typeof t.memoryQualityCapture=="object"?t.memoryQualityCapture:null,f=typeof t.memoryQualityPromptMarkdown=="string"?t.memoryQualityPromptMarkdown:typeof p?.promptMarkdown=="string"?p.promptMarkdown:null;return{instructionPolicyMarkdown:n,instructionPolicyFingerprint:o,instructionPolicyEvidence:s,memoryQualityCapture:p,memoryQualityPromptMarkdown:f,personaMarkdown:i,personaSlug:a,personaEvidence:l,personaInjectionReady:c,contextEnvelopeMarkdown:u,contextEnvelopeEvidence:d,contextEnvelopeReady:m}}function ux(e){if(typeof e!="string")return null;let r=e.trim().toLowerCase();return r.length?r:null}function Qg(e,r){let t=[`[AgentOS task ${e.id}] ${e.title}`,"",e.description?String(e.description):"(no description on the board task)","",`Board linkage: agentOsId=${r}, taskId=${e.id}, attempt=${e.attempt}, executor=${e.executor}${e.executorRef?`, executorRef=${e.executorRef}`:""}.`,"This worker was dispatched from the AgentOS board. The harness reports your completion back to the board when you finish."];e.executor==="verify_live"&&t.push("",Yg());let n=Ji(e);if(n?.outboxId){let o=su(n.outboxId);o?t.push("",Yi(o)):t.push("","## Plan persistence risk","",`Unconfirmed AgentOS plan write (outboxId=${n.outboxId}).`)}return t.join(`
+`)}function dx(e){let r=new Set;if(e.targetTaskId)return r.add(String(e.targetTaskId)),r;if(e.targetTaskIds)for(let t of String(e.targetTaskIds).split(",")){let n=t.trim();n&&r.add(n)}return r}async function Wr(e){let r=e.pipeline===!0||e.pipeline==="true";try{let Dt=function(){return Q.filter(S=>S.started).length},Ge=function(S,v){rc({runId:i.id,agentOsId:a,phase:S,startedCount:Dt(),outcomeCount:Q.length,cappedStarts:_,...v})},ve=function(){return Q.some(S=>(typeof S.error=="string"?S.error:"").startsWith("dispatch_start_readback_failed:"))},W=function(S){return S.landPrDispatch===!0?!0:S.task?.executor==="land_pr"};var t=Dt,n=Ge,o=ve,s=W;let i=L(String(N(String(e.run||""),"--run"))),a=String(N(String(e.agentOsId||""),"--agent-os-id")),l=V(e.baseUrl?String(e.baseUrl):void 0),c=await J(e.secret?String(e.secret):void 0,a,{baseUrl:l}),d=!(e.execute===!0||e.execute==="true"),m=er({runId:i.id}),p=_c(i.id,m.runnerId),f=e.diskPath?Le({diskPath:String(e.diskPath)}):Le({diskPath:i.repo}),h=mr({runId:i.id}),k=dx(e),g=k.size>0,R=Number(e.maxStarts)>0?Math.floor(Number(e.maxStarts)):1,O=g?Math.min(R,k.size):R,_=d?O:Math.min(O,h.slotsAvailable);if(!d&&_<=0){let S={runId:i.id,agentOsId:a,dryRun:!1,skipped:!0,reason:h.reason??"no resource slots",resourceGate:h};if(r)return{ok:!0,...S};console.log(JSON.stringify(S,null,2));return}let E=Bi(i.id);if(e.reconcileStaleBlockers===!0||e.reconcileStaleBlockers==="true"){let S=`${l}/api/agent-os/by-id/${encodeURIComponent(a)}/lane-hygiene`;try{await re(S,c,{agentOsId:a,dryRun:!1,includeBoardReconcile:!0},{agentOsId:a,baseUrl:l})}catch(v){console.error(`[dispatch] reconcile-stale-blockers lane-hygiene call failed: ${v.message}`)}}let U=`${l}/api/agent-os/by-id/${encodeURIComponent(a)}/tasks/dispatch-next`,Y=S=>({agentOsId:a,dryRun:d,maxStarts:S,leaseOwner:p,leaseDurationMs:Number(e.leaseMs)>0?Math.floor(Number(e.leaseMs)):bi,runnerDiskGate:f,runnerResourceGate:h,activeHarnessWorkers:E,runnerPresence:m,harnessBoardSnapshot:Po(i.id),...e.lane?{lane:ef(String(e.lane))}:{},...e.executor?{executor:String(e.executor)}:{},...e.diskPath?{diskPath:String(e.diskPath)}:{},...e.targetTaskId?{targetTaskId:String(e.targetTaskId)}:{},...!e.targetTaskId&&e.targetTaskIds?{targetTaskIds:String(e.targetTaskIds).split(",").map(v=>v.trim()).filter(Boolean)}:{}}),$=Gm(),F=async S=>{let v=await re(U,c,Y(S),{agentOsId:a,baseUrl:l,timeoutMs:$})??{ok:!1,status:0,response:null},A=v.response;return{dispatch:v,result:A?.result}},P=await F(g||d?_:1);if(!P.dispatch.ok||!P.result){let S={runId:i.id,agentOsId:a,action:"dispatch",httpStatus:P.dispatch.status,response:P.dispatch.response,authRefreshed:P.dispatch.refreshedAuth===!0,authRefreshFailure:P.dispatch.authRefreshFailure};if(r)return{ok:!1,...S};console.log(JSON.stringify(S,null,2)),process.exit(1)}let B=P.result;if(d){let S=zg(B),v=Xg(B),A={runId:i.id,agentOsId:a,dryRun:!0,wouldStart:B.started.map(j=>({taskId:j.task.id,title:j.task.title,reason:j.reason})),skipped:B.skipped.map(j=>({taskId:j.task.id,skipReason:j.skipReason,reason:j.reason})),diskGate:B.diskGate,resourceGate:B.resourceGate,inspected:B.inspected,pagesScanned:B.pagesScanned??null,candidatesExhausted:B.candidatesExhausted??null,capacityIdle:S?.capacityIdle===!0,admissionExhaustion:S,dispatchSkipDrain:v};if(r)return{ok:!0,...A};console.log(JSON.stringify(A,null,2));return}let Kr=xf(),Q=[],Cr=[],Tt=Number(B.inspected)||0,Ve=!1;async function G(S,v,A){let j=await iu({baseUrl:l,secret:c,agentOsId:a,taskId:String(S.id),leaseOwner:p,failureDetail:v}),de={taskId:S.id,started:!1,error:v,released:j.released,releaseResponse:j.releaseResponse,...A};return Q.push(de),Ge("outcome",{lastOutcome:de}),!1}async function be(S){let v=S.task,A=String(v.id);if(g&&!k.has(A))return G(v,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...k]});let j=v.prUrl?String(v.prUrl):"";if(!j)return G(v,"land_pr task missing prUrl");try{let de=await Vg({prUrl:j,repo:$g(j),cwd:i.repo}),Ut=await Gg({baseUrl:l,secret:c,agentOsId:a,runId:i.id,task:v,report:de});return Ut.ok?(Q.push({taskId:A,started:!0,landPr:!0,outcome:de.outcome,completionStatus:Ut.status}),!0):G(v,`land_pr completion POST failed (HTTP ${Ut.status})`,{landPr:!0,outcome:de.outcome})}catch(de){return G(v,de.message)}}async function xe(S){let v="duplicate_dispatch_prevented: live local worker already owns this task",A=await iu({baseUrl:l,secret:c,agentOsId:a,taskId:String(S.id),leaseOwner:p,failureDetail:v}),j={taskId:S.id,started:!1,error:v,alreadyRunning:!0,nonFatal:!0,released:A.released,releaseResponse:A.releaseResponse};return Q.push(j),Ge("outcome",{lastOutcome:j}),!1}async function wr(S){let v=S.task,A=cx(S),j=String(v.id);if(g&&!k.has(j))return G(v,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...k]});let de=ux(v.personaSlug);if(de&&(!A?.personaInjectionReady||!A.personaMarkdown))return G(v,`persona_injection_required: missing anchored context-envelope persona block for "${de}"`);if(If(i.id,j))return xe(v);let Ut=Number(v.attempt)||1;if(Ut>Kr.maxTaskAttempts)return G(v,`task attempt ${Ut} exceeds KYNVER_MAX_TASK_ATTEMPTS (${Kr.maxTaskAttempts})`);let Fn=v.leaseToken?String(v.leaseToken).trim():"";if(!Fn)return G(v,"dispatch_start_failed: claimed task missing leaseToken \u2014 refusing local spawn");let Iv=b(`t-${v.id}-a${v.attempt}`),Wt=ki({explicitModel:e.model?String(e.model):void 0,explicitProvider:e.provider?String(e.provider):void 0,explicitProviderIsOperatorOverride:!!e.provider,task:rf(v)});try{let ll=v.planId?String(v.planId):void 0,gs=Nf({title:v.title?String(v.title):void 0,description:v.description?String(v.description):null,executorRef:v.executorRef?String(v.executorRef):null,prUrl:v.prUrl?String(v.prUrl):null,branch:v.branch?String(v.branch):null}),Ye=Li(i,{name:Iv,task:Qg(v,a),ownedPaths:e.owned?String(e.owned).split(",").map(Ov=>Ov.trim()).filter(Boolean):[],model:Wt.model,provider:Wt.provider,routingRule:Wt.rule,requestedModel:Wt.requestedModel,agentOsId:a,taskId:String(v.id),planId:ll,branch:gs?.targetPrBranch??void 0,executorRef:v.executorRef?String(v.executorRef):void 0,parentTaskId:v.parentTaskId?String(v.parentTaskId):void 0,taskTitle:v.title?String(v.title):void 0,taskPrUrl:gs?.targetPrUrl??(v.prUrl?String(v.prUrl):void 0),repairTargetPrUrl:gs?.targetPrUrl,repairTargetBranch:gs?.targetPrBranch??void 0,instructionPolicyMarkdown:A?.instructionPolicyMarkdown??null,instructionPolicyFingerprint:A?.instructionPolicyFingerprint??null,instructionPolicyEvidence:A?.instructionPolicyEvidence??null,memoryQualityCapture:A?.memoryQualityCapture??null,memoryQualityPromptMarkdown:A?.memoryQualityPromptMarkdown??null,personaMarkdown:A?.personaMarkdown??null,personaSlug:A?.personaSlug??de,personaEvidence:A?.personaEvidence??null,contextEnvelopeMarkdown:A?.contextEnvelopeMarkdown??null,contextEnvelopeEvidence:A?.contextEnvelopeEvidence??null,leaseOwner:p,leaseToken:Fn,dispatched:!0}),hs=await Jg({agentOsId:a,taskId:String(v.id),leaseOwner:p,expectedLeaseToken:Fn,worker:Ye,baseUrl:l,secret:c});if(!hs.ok)return qg(i.id,Ye,hs.error??"dispatch_start_readback_failed"),G(v,hs.error??"dispatch_start_readback_failed",{readback:hs.detail??null});Ye.leaseToken!==Fn&&(Ye.leaseToken=Fn,Ye.leaseOwner=p,K(i.id,Ye));let ip={taskId:v.id,started:!0,worker:Ye.name,pid:Ye.pid,branch:Ye.branch,model:Ye.model,provider:Wt.provider,routingRule:Wt.rule,instructionPolicyFingerprint:A?.instructionPolicyFingerprint??null,instructionPolicyRuleCount:Array.isArray(A?.instructionPolicyEvidence?.ruleSlugs)?A.instructionPolicyEvidence.ruleSlugs.length:null,personaSlug:A?.personaSlug??de,personaOperatingRuleCount:A?.personaEvidence?.operatingRuleCount??null};return Q.push(ip),Ge("worker_started",{lastOutcome:ip}),A?.instructionPolicyFingerprint&&console.error(`[dispatch] task ${j}: operating-rules policy injected fingerprint=${A.instructionPolicyFingerprint}`),A?.personaSlug&&console.error(`[dispatch] task ${j}: persona context injected slug=${A.personaSlug}`),A?.contextEnvelopeReady&&console.error(`[dispatch] task ${j}: context envelope injected anchor=${A.contextEnvelopeEvidence?.anchorTaskId??j}`),!0}catch(ll){return G(v,ll.message)}}let Ee=new Set;async function ps(S){let v=S.task,A=String(v.id);if(Ee.has(A))return G(v,"dispatch_retry_loop_prevented: task already failed to start this tick");let j=W(S)?await be(S):await wr(S);return j||Ee.add(A),j}for(let S of B.started)await ps(S);if(Cr.push(...B.skipped??[]),g)for(let S of Cr){let v=String(S.task.id);k.has(v)&&Q.push({taskId:v,started:!1,error:`exact_target_not_started:${S.skipReason}`,skipReason:S.skipReason,detail:S.reason??null,requestedTargetTaskIds:[...k]})}for(;!g&&Q.length<_;){if(ve()){let A={started:!1,error:"dispatch_circuit_breaker: start readback failed; stopping top-up for this tick",nonFatal:!0};Q.push(A),Ge("circuit_breaker",{lastOutcome:A});break}let S=await F(1);if(!S.dispatch.ok||!S.result){let A=Ym(S.dispatch.response),j=Dt();Ve=A&&j>0;let de={started:!1,error:"dispatch_next request failed during top-up",httpStatus:S.dispatch.status,response:S.dispatch.response,...Ve?{nonFatal:!0,partialTopUp:!0}:{}};Q.push(de),Ge("top_up_failed",{partialTopUpInterrupted:Ve,lastOutcome:de});break}Tt+=Number(S.result.inspected)||0,Cr.push(...S.result.skipped??[]);let v=S.result.started??[];if(v.length===0)break;for(let A of v){if(Q.length>=_)break;await ps(A)}}let ms=Q.filter(S=>S.started).length,Mt=zg(B),fs=Xg(B),tp=ms===0&&(Mt?.capacityIdle===!0||Number(B.resourceGate?.slotsAvailable)>0);if(tp&&Mt?.summary){let S=Mt.skipReasonCounts?.retry_ceiling_exceeded??0,v=B.overAttemptIdleRecovery??Mt.overAttemptIdleRecovery,A=v?.attempted===!0?`; over_attempt_recovery minted=${v.minted??0} started=${v.started??0}`:S>0?"; over_attempt_recovery not attempted":"",j=fs?`; dispatch_skip_drain scanned=${fs.scanned??0} advanced=${fs.advanced??0}`:"";console.error(`[dispatch] ${Mt.summary}${S>0?`; retry_ceiling_exceeded=${S}`:""}${A}${j}`)}let np={runId:i.id,agentOsId:a,dryRun:!1,leaseOwner:p,startedCount:ms,capacityIdle:tp,admissionExhaustion:Mt,dispatchSkipDrain:fs,outcomes:Q,skipped:Cr.map(S=>({taskId:S.task.id,skipReason:S.skipReason})),inspected:Tt,pagesScanned:B.pagesScanned??null,candidatesExhausted:B.candidatesExhausted??null,diskGate:B.diskGate,resourceGate:B.resourceGate,...Ve?{partialTopUpInterrupted:!0}:{},dispatchCallbackTimeoutMs:$},op=S=>!S.started&&S.nonFatal!==!0,Av=Q.some(op),sp=Ve&&ms>0?!0:!Av;if(rc({runId:i.id,agentOsId:a,phase:"complete",partial:Ve,startedCount:ms,ok:sp}),r)return{ok:sp,...np};console.log(JSON.stringify(np,null,2)),Q.some(op)&&process.exit(1)}catch(i){if(r)return{ok:!1,error:i.message};console.error(`run dispatch failed: ${i.message}`),process.exit(1)}}Vt();Es();jt();jt();import{unlinkSync as px}from"node:fs";function qi(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function Zg(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function mx(e,r,t){return e.length===0?[]:t?[...e]:e.length<=r?[]:e.slice(r)}function Do(e={}){let r=e.execute===!0||qi("KYNVER_WSL_CRASH_DUMP_EXECUTE")||qi("KYNVER_CLEANUP_EXECUTE"),t=e.purgeAll===!0||qi("KYNVER_WSL_CRASH_DUMP_PURGE_ALL"),n=Math.max(0,e.keepNewest??Zg("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",t?0:1)),o=ur({forceWsl:e.forceWsl});if(!o?.path)return{observation:o,execute:r,keepNewest:n,removed:[],removedBytes:0,skipped:o?.probeError?[{path:o.path??"(unresolved)",reason:o.probeError}]:[]};let s=mx(o.dumps,n,t),i=[],a=[],l=0;for(let c of s){if(!r){a.push({path:c.path,reason:"dry_run"});continue}try{px(c.path),i.push({path:c.path,bytes:c.bytes,name:c.name}),l+=c.bytes}catch(u){a.push({path:c.path,reason:u.message})}}return{observation:o,execute:r,keepNewest:n,removed:i,removedBytes:l,skipped:a}}function cu(e){return e?qi("KYNVER_WSL_CRASH_DUMP_CLEANUP")||!e.ok?!0:e.dumpCount>Zg("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",1):!1}Jt();Ul();Ml();pr();I();Oe();import fx from"node:os";function Mo(e,r={}){let t=(r.boxKind??qe(y())).trim().toLowerCase()||"forge",n=r.hostLabel??fx.hostname();return{boxId:r.boxId??Ro(t,n),boxKind:t,displayName:r.displayName??null,hostLabel:n,observedAt:r.observedAt??new Date().toISOString(),totalMemBytes:e.totalMemBytes,freeMemBytes:e.freeMemBytes,activeWorkers:e.activeWorkers,maxConcurrentWorkers:e.maxConcurrentWorkers,autoCap:e.autoCap,slotsAvailable:e.slotsAvailable,harnessRunId:r.harnessRunId??null,queuedTasks:r.queuedTasks??null,reason:e.reason,...r.prEvidence?.length?{prEvidence:r.prEvidence}:{}}}function gx(e){let r={ts:e.ts??new Date().toISOString(),phase:e.phase,summary:e.summary,changedFiles:e.changedFiles??[],blocker:e.blocker??null};return e.boxResourceSnapshot&&(r.boxResourceSnapshot=e.boxResourceSnapshot),e.prEvidence?.length&&(r.prEvidence=e.prEvidence),`${JSON.stringify(r)}
+`}z();eo();function hx(e){if(e.skipReason==="engagement_required")return!0;let r=e.reason??"";return r.includes("engagement_required")||r.includes("engagement_not_found")||r.includes("engagement_expired")||r.includes("engagement_revoked")}Kl();Qn();pr();Ll();Jt();function zi(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"&&!Array.isArray(e)?Object.keys(e).length>0:!0}function kx(e){let r=e.lastHeartbeatPhase?.trim();if(!r||r==="complete")return null;let t=e.lastHeartbeatSummary?.trim();return t?{summary:t,handoffState:"exited_without_complete_heartbeat",lastHeartbeatPhase:r,...e.heartbeatBlocker?{blocker:e.heartbeatBlocker}:{}}:null}function yx(e){let r=Us(e);return r?{summary:r.reason,handoffState:"exit_failure",blocked:r.blocked}:null}function uu(e){let{worker:r,status:t}=e;if(zi(t.finalResult)){let l=ce(r.heartbeatPath),c=ze(l),u=zi(c)&&JSON.stringify(c)===JSON.stringify(t.finalResult)?"heartbeat_complete":"stdout_stream";return{finalResult:t.finalResult,source:u,snapshot:pt(t)}}if(t.alive)return null;let n=Ar(r.stdoutPath);if(zi(n.finalResult)){let l={...t,finalResult:n.finalResult};return{finalResult:n.finalResult,source:"stdout_stream",snapshot:pt(l)}}let o=ce(r.heartbeatPath),s=ze(o);if(zi(s)){let l={...t,finalResult:s,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary};return{finalResult:s,source:"heartbeat_complete",snapshot:pt(l)}}let i=yx(t.error??n.error);if(i){let l={...t,finalResult:i};return{finalResult:i,source:"exit_failure",snapshot:pt(l)}}let a=kx(o);if(a){let l={...t,finalResult:a,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary};return{finalResult:a,source:"heartbeat_summary",snapshot:pt(l)}}return null}function du(e,r){return e.completionSnapshot?.finalResult!=null?!1:(e.completionSnapshot=r.snapshot,e.completionHandoffSource=r.source,!0)}import{createHash as eh}from"node:crypto";function Xi(e){return JSON.stringify(pu(e))}function pu(e){if(Array.isArray(e))return e.map(pu);if(e&&typeof e=="object"){let r={};for(let t of Object.keys(e).sort())r[t]=pu(e[t]);return r}return e}function Rx(e){return`ib1-${eh("sha256").update(Xi(e),"utf8").digest("hex").slice(0,16)}`}function vx(e){return`ib-${eh("sha256").update(Buffer.from(e)).digest("hex").slice(0,12)}`}function Qi(e){if(!e)return null;let r=e.trim();if(!r)return null;if(/^[0-9a-fA-F]{64}$/.test(r))return new Uint8Array(r.match(/.{2}/g).map(t=>parseInt(t,16)));try{let t=Buffer.from(r,"base64");if(t.length===32)return new Uint8Array(t)}catch{}return null}function kn(e){if(!e||typeof e!="object")return!1;let r=e;if(typeof r.signature!="string"||!r.signature||typeof r.publicKeyId!="string"||!r.publicKeyId)return!1;let t=r.bundle;return!(!t||typeof t!="object"||typeof t.version!="string"||!t.version||typeof t.generatedAt!="string"||!Array.isArray(t.personas)||!t.instructions||typeof t.instructions!="object"||!t.policyThresholds||typeof t.policyThresholds!="object")}var rh={"ib-3bab6314f0ba":"53a2040646cd479e1f5f1aea9abf7848ce8b62e32001efb8044dfd90e8ab87ed","ib-26e6c695da06":"bb1700f25b2ee7d7cdcdb9f446f0f44ef2cc22a3096bc161232fb658e7cdaf38"};function mu(e,r=process.env){let t=Qi(r.KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY);if(t)return t;let n=rh[e];return n?Qi(n):null}import{createPublicKey as bx,verify as Sx}from"node:crypto";var Cx=Buffer.from("302a300506032b6570032100","hex");function wx(e){return bx({key:Buffer.concat([Cx,Buffer.from(e)]),format:"der",type:"spki"})}function th(e,r){if(!kn(e))return{ok:!1,reason:"malformed signed bundle payload"};let t;try{t=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(t.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let n=Buffer.from(Xi(e.bundle),"utf8");return Sx(null,n,wx(r),t)?{ok:!0,bundle:e.bundle}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(n){return{ok:!1,reason:`signature verification failed: ${n.message}`}}}function fu(e,r=process.env){if(!kn(e))return{ok:!1,reason:"malformed signed bundle payload"};let t=mu(e.publicKeyId,r);return t?th(e,t):{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}" (not pinned; set KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY)`}}import{mkdirSync as _x,readFileSync as xx,renameSync as Ex,writeFileSync as Px}from"node:fs";import{homedir as Ax}from"node:os";import nh from"node:path";function gu(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return nh.join(Ax(),".kynver",`instruction-bundle-${r}.json`)}function hu(e,r){try{let t=gu(e);_x(nh.dirname(t),{recursive:!0});let n=`${t}.tmp-${process.pid}`;Px(n,JSON.stringify(r),"utf8"),Ex(n,t)}catch{}}function ku(e){try{let r=xx(gu(e),"utf8"),t=JSON.parse(r);return kn(t)?t:null}catch{return null}}var oh=15*6e4,Ix=1e4,hr={lastAttemptAtMs:0,etag:null,diskCacheTried:!1,routeMissingLogged:!1};function Wo(e,r){console.error(JSON.stringify({event:e,...r}))}function sh(e,r,t){let n=fu(e);return n.ok?(tc(n.bundle,r),r==="server"&&hu(t,e),!0):(Wo("instruction_bundle_signature_invalid",{agentOsId:t,source:r,publicKeyId:e.publicKeyId,reason:n.reason}),!1)}function Uo(e){if(hr.diskCacheTried)return!1;hr.diskCacheTried=!0;let r=ku(e);return r?sh(r,"disk",e):!1}async function yu(e){let r=e.nowMs??Date.now(),t=()=>({source:fr(),version:Nr(),updated:!1});if(!e.force&&r-hr.lastAttemptAtMs<oh)return t();hr.lastAttemptAtMs=r;let n=e.baseUrl?.trim().replace(/\/$/,""),o=e.secret?.trim();if(!n||!o)return fr()==="embedded"&&Uo(e.agentOsId)?{...t(),updated:!0}:t();let s=e.fetchImpl??fetch,i=new AbortController,a=setTimeout(()=>i.abort(),Ix);try{let l=He(o);delete l["Content-Type"],hr.etag&&fr()==="server"&&(l["If-None-Match"]=hr.etag);let c=await s(`${n}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/runtime/instruction-bundle`,{headers:l,signal:i.signal});if(c.status===304)return t();if(c.status===404)return hr.routeMissingLogged||(hr.routeMissingLogged=!0,Wo("instruction_bundle_route_missing",{agentOsId:e.agentOsId,baseUrl:n})),fr()==="embedded"&&Uo(e.agentOsId)?{...t(),updated:!0}:t();if(!c.ok)return Wo("instruction_bundle_fetch_failed",{agentOsId:e.agentOsId,status:c.status}),fr()==="embedded"&&Uo(e.agentOsId)?{...t(),updated:!0}:t();let u=await c.json().catch(()=>null);return!u||!sh(u,"server",e.agentOsId)?fr()==="embedded"&&Uo(e.agentOsId)?{...t(),updated:!0}:t():(hr.etag=c.headers.get("etag"),Wo("instruction_bundle_loaded",{agentOsId:e.agentOsId,version:Nr(),publicKeyId:u.publicKeyId}),{...t(),updated:!0})}catch(l){return Wo("instruction_bundle_fetch_error",{agentOsId:e.agentOsId,error:l instanceof Error?l.message:String(l)}),fr()==="embedded"&&Uo(e.agentOsId)?{...t(),updated:!0}:t()}finally{clearTimeout(a)}}var Ru="openai-codex",Ox=new Set(["upstream_503","connection_refused","connection_reset","sse_no_event","sse_idle_timeout"]),Nx=[/\bsk-[a-zA-Z0-9_-]{8,}\b/g,/\bBearer\s+[a-zA-Z0-9._-]{8,}\b/gi,/\baccess[_-]?token["\s:=]+[a-zA-Z0-9._-]{8,}/gi];function kr(e,r=400){let t=String(e??"").replace(/\s+/g," ").trim();for(let n of Nx)t=t.replace(n,"[redacted]");return t.length>r?`${t.slice(0,r)}\u2026`:t}function Tx(e,r){let t=[];e instanceof Error?(t.push(e.message),t.push(e.name)):typeof e=="string"?t.push(e):e!=null&&t.push(String(e));let n=e,o=r??n?.status_code??n?.statusCode??void 0;return o!=null&&t.push(`http ${o}`),{haystack:t.join(" ").toLowerCase(),statusCode:o}}function ah(e,r){let{haystack:t,statusCode:n}=Tx(e,r),o=e instanceof Error?e.message:typeof e=="string"?e:String(e??"");if(n===402||/billing|credit|payment required|insufficient_quota/.test(t))return{errorClass:"billing",summary:kr(o||"Billing or credits exhausted"),statusCode:n,transient:!1};if(n===401||n===403||/\bunauthorized\b|\bforbidden\b/.test(t))return{errorClass:"auth",summary:kr(o||"Authentication failed"),statusCode:n,transient:!1};if(n===429||/rate limit|too many requests|throttl/.test(t))return{errorClass:"rate_limit",summary:kr(o||"Rate limited"),statusCode:n,transient:!0};if(n===503||/upstream connect error|connection termination|remote connection failure|delayed connect error/.test(t))return{errorClass:"upstream_503",summary:kr(o||"ChatGPT Codex backend returned HTTP 503"),statusCode:n??503,transient:!0};if(/connection refused/.test(t))return{errorClass:"connection_refused",summary:kr(o||"Connection refused by ChatGPT Codex backend"),statusCode:n,transient:!0};if(/no sse events|no bytes within|no stream events|codex stream produced no/.test(t)){let s=/no bytes|ttfb|first byte/.test(t)?"sse_no_event":"sse_idle_timeout";return{errorClass:s,summary:kr(o||(s==="sse_no_event"?"Codex stream opened but sent no events":"Codex stream stalled after the first event")),statusCode:n,transient:!0}}return/connection reset|connection lost|connection closed|disconnect\/reset/.test(t)?{errorClass:"connection_reset",summary:kr(o||"Connection reset while talking to ChatGPT Codex"),statusCode:n,transient:!0}:{errorClass:"unknown",summary:kr(o||"Unknown provider error"),statusCode:n,transient:!1}}function lh(e){let r=e.env??process.env,t=Math.max(1,e.defaultRetries??3),n=String(e.provider??"").toLowerCase(),o=String(e.platform??"").toLowerCase();if(n!==Ru||o!=="cron")return t;let s=r.HERMES_CODEX_CRON_API_MAX_RETRIES?.trim();if(!s)return Math.max(t,5);let i=Number.parseInt(s,10);return!Number.isFinite(i)||i<1?Math.max(t,5):Math.max(t,i)}var ih={upstream_503:"ChatGPT Codex backend outage (HTTP 503)",connection_refused:"ChatGPT Codex backend refused the connection",connection_reset:"ChatGPT Codex connection dropped mid-request",sse_no_event:"Codex stream never started (no SSE events)",sse_idle_timeout:"Codex stream stalled (no SSE events after the first byte)",rate_limit:"ChatGPT Codex rate limit",billing:"ChatGPT Codex billing or quota limit",auth:"ChatGPT Codex authentication problem",unknown:"ChatGPT Codex provider error"};function ch(e){let r=e.provider?.trim()||Ru,t=e.model?.trim()||"(unknown model)",n=e.jobName?.trim()||"Scheduled Hermes job",o=ih[e.errorClass]??ih.unknown,s=e.degraded?"degraded":"failed";return[`\u26A0\uFE0F ${n} \u2014 AI provider ${s} (not a Kynver harness failure).`,"",`Provider: ${r} (ChatGPT Codex subscription)`,`Model: ${t}`,`What happened: ${o} after ${e.attempts} attempt(s) with backoff.`,`Details: ${e.summary}`,"","This is a ChatGPT/Codex API issue on chatgpt.com \u2014 not AgentOS, not the Kynver runtime, and not your local harness.","The cron job will run again on its next schedule. If it persists, check ChatGPT/Codex status or re-auth with: hermes auth status openai-codex"].join(`
+`)}function uh(e,r){return`\u26A0\uFE0F Cron job '${e}' \u2014 provider degraded
 
-${r}`}function th(e){let{provider:r,model:t,authSource:n,costTier:o,riskClass:s,costRationale:i,routingRule:a,escalatedFrom:l,escalatedReason:c}=e;return{provider:r,model:t,authSource:n,costTier:o,riskClass:s,costRationale:i,routingRule:a,escalatedFrom:l,escalatedReason:c}}function Sx(e){return th(e)}var cu=["off","observe","enforce"],Cx=["foreground_harness_spawn","shell_platform_dispatch"],wx=["allow_local","observe_bypass","enforce_harness_task"];function _x(e){let r=(e??"off").trim().toLowerCase();return cu.includes(r)?r:"off"}function Yi(e=process.env){return _x(e.KYNVER_ORCHESTRATION_POLICY_MODE)}function uu(e=process.env){let r=e.KYNVER_ORCHESTRATION_ENFORCE_TASKS?.trim().toLowerCase();return r?r==="1"||r==="true"||r==="yes"||r==="on":Yi(e)==="enforce"}import{createHash as xx}from"node:crypto";function Uo(e){if(e==null)return null;let r=e.trim();return r.length?r:null}function du(e){let r=Uo(e.sessionId)??"anonymous",t=Uo(e.title)??Uo(e.action)??"foreground",n=xx("sha256").update([Uo(e.planId)??"",Uo(e.parentTaskId)??"",t.toLowerCase()].join("|")).digest("hex").slice(0,16);return`hermes-foreground:${r}:${n}`}function Ex(e,r){return e==="enforce"&&r?"enforce_harness_task":e==="observe"?"observe_bypass":"allow_local"}function Px(e,r=process.env){let t=Yi(r),n=uu(r),o=Ex(t,n),s=o==="enforce_harness_task"?du({sessionId:e.sessionId,planId:e.planId,parentTaskId:e.parentTaskId,title:e.title,action:e.action}):null,i;return t==="off"?i="Orchestration policy off \u2014 local foreground path allowed.":o==="observe_bypass"?i=`Observe mode: ${e.action} bypass logged; local fallback preserved.`:o==="enforce_harness_task"?i=`Enforce mode: ${e.action} must create linked harness AgentTask (${s}).`:i="Local foreground path allowed.",{mode:t,decision:o,idempotencyKey:s,bypassLogged:o==="observe_bypass",reason:i}}function Ax(e,r){let t=e;return r&&(t=t.split(r).join("[REDACTED_SECRET]")),t=t.replace(/kynver_[a-z0-9_]+/gi,"[REDACTED_KYNVER_TOKEN]"),t=t.replace(/sk-[a-zA-Z0-9_-]+/g,"[REDACTED_API_KEY]"),t}Kr();import*as Ji from"node:fs";import{homedir as nh}from"node:os";import*as rr from"node:path";function oh(e){return e.startsWith("~/")?rr.join(nh(),e.slice(2)):e}function qi(e={}){let r=e.env??process.env,t=e.cwd??process.cwd(),n=e.homeDir??(r.HOME?.trim()||r.USERPROFILE?.trim()||nh()),o=new Set,s=[],i=c=>{let u=rr.resolve(oh(c));o.has(u)||(o.add(u),s.push(u))},a=r.KYNVER_ENV_FILE?.trim();a&&i(a);let l=t;for(let c=0;c<12;c+=1){i(rr.join(l,".env"));let u=rr.dirname(l);if(u===l)break;l=u}i(rr.join(n,".kynver",".env"));try{let c=rr.join(n,".kynver","config.json");if(Ji.existsSync(c)){let d=JSON.parse(Ji.readFileSync(c,"utf8")).defaultRepo?.trim();d&&i(rr.join(d,".env"))}}catch{}return s}import{execFileSync as Ix,spawnSync as Ox}from"node:child_process";import*as zi from"node:fs";import*as sh from"node:path";function Wo(e){if(!e?.trim())return"(not set)";try{let r=new URL(e),t=(r.pathname||"").replace(/^\//,"").split("?")[0]||"(no database name)";return`${r.hostname} / ${t}`}catch{return"(invalid URL)"}}var pu=["KYNVER_PRODUCTION_DATABASE_URL","PRODUCTION_DATABASE_URL"],mu=[...pu];function $e(e,r){return e[r]?.trim()||void 0}function ih(e){if(!zi.existsSync(e))return{};let r={},t=new Set(mu);for(let n of zi.readFileSync(e,"utf8").split(`
-`)){let o=n.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/);if(!o||!t.has(o[1]))continue;let s=o[1];r[s]=o[2].replace(/^["']|["']$/g,"").trim()}return r}function Nx(e){for(let r of pu){let t=$e(e,r);if(t)return{ok:!0,databaseUrl:t,source:`env:${r}`,hint:Wo(t)}}return null}function Tx(e,r){for(let t of qi({cwd:e,env:r})){let n=ih(t);for(let o of mu){let s=n[o]?.trim();if(s)return{ok:!0,databaseUrl:s,source:`env-file:${o}`,hint:`${Wo(s)} (${sh.basename(t)})`}}}return null}function Dx(e){let r=process.platform==="win32"?"neon.cmd":"neon",t=["connection-string",e.branch,"--prisma","-o","json","--no-color","--no-analytics"];e.projectId&&t.push("--project-id",e.projectId),e.databaseName&&t.push("--database-name",e.databaseName),e.roleName&&t.push("--role-name",e.roleName),e.pooled&&t.push("--pooled");let n;try{let o=Ox(r,t,{encoding:"utf8",env:process.env,timeout:3e4});if(o.status!==0)return null;n=(o.stdout||"").trim()}catch{try{n=Ix("neonctl",t,{encoding:"utf8",env:process.env,timeout:3e4}).trim()}catch{return null}}if(!n)return null;try{let o=JSON.parse(n),s=typeof o.connection_uri=="string"&&o.connection_uri||typeof o.connection_string=="string"&&o.connection_string||typeof o.connectionString=="string"&&o.connectionString;if(s)return s}catch{}return/^postgres(ql)?:\/\//i.test(n)?n:null}function Mx(e,r){let t=$e(e,"KYNVER_NEON_BRANCH")||$e(e,"NEON_BRANCH")||"production",n=r({branch:t,projectId:$e(e,"KYNVER_NEON_PROJECT_ID")||$e(e,"NEON_PROJECT_ID"),databaseName:$e(e,"KYNVER_NEON_DATABASE_NAME")||$e(e,"NEON_DATABASE_NAME"),roleName:$e(e,"KYNVER_NEON_ROLE_NAME")||$e(e,"NEON_ROLE_NAME"),pooled:$e(e,"KYNVER_NEON_POOLED")==="1"||$e(e,"NEON_POOLED")==="1"});return n?{ok:!0,databaseUrl:n,source:"neon-cli",hint:Wo(n)}:null}function ah(e={}){let r=e.env??process.env,t=e.cwd??process.cwd(),n=e.neonConnectionString??Dx,o=[],s=qi({cwd:t,env:r}),i=Mx(r,n);if(o.push("neon-cli"),i)return i;for(let u of pu)o.push(`env:${u}`);let a=Nx(r);if(a)return a;for(let u of mu)o.push(`env-file:${u}`);let l=Tx(t,r);return l||{ok:!1,reason:"No production database credentials found. Authenticate Neon CLI (`neon auth`), set KYNVER_NEON_* / NEON_* project hints, or provide PRODUCTION_DATABASE_URL / KYNVER_PRODUCTION_DATABASE_URL (process env, KYNVER_ENV_FILE, ~/.kynver/.env, or selective .env keys in the repo / defaultRepo checkout)."+(s.length>0?` Searched env files: ${s.slice(0,6).join(", ")}${s.length>6?"\u2026":""}.`:""),attempted:o}}function Ux(e={}){let r=ah(e);if(!r.ok)throw new Error(r.reason);return process.env.DATABASE_URL=r.databaseUrl,console.error(`[kynver-cli] database target: ${r.hint} (source: ${r.source})`),r}Pe();T();import{existsSync as EE,mkdirSync as PE}from"node:fs";import AE from"node:path";T();Jr();import{existsSync as vE,readFileSync as bE}from"node:fs";import yh from"node:path";import kE from"node:path";T();Jr();z();C();import Wx from"node:path";var Lx=new Set(["running","dispatching","pending","queued","needs_attention"]),hr=new Set(["completed","failed","cancelled","done"]);function gt(e){let r=he(e);if(r.length===0)return"failed";let t=!1,n=!1,o=!1,s=!1;for(let i of r){let a=w(Wx.join(x(e.id),"workers",b(i),"worker.json"),void 0);if(!a)continue;let l=D(a,{base:e.base,baseCommit:e.baseCommit});if(l.alive&&!l.finalResult){t=!0;break}typeof a.completionBlocker=="string"&&a.completionBlocker&&(o=!0),Zr(l)&&(s=!0),l.finalResult&&l.attention.state==="done"&&(n=!0)}return t||o||s?null:n?"completed":"failed"}function Lo(){let e=[];for(let r of X()){if(!Lx.has(r.status))continue;let t=gt(r);if(!t||t===r.status)continue;let n=r.status;r.status=t,Be(r),e.push({runId:r.id,from:n,to:t})}return e}T();Jr();z();C();Er();qn();import{existsSync as Wr,lstatSync as zx,readdirSync as Xx,readlinkSync as Qx,renameSync as Cu,unlinkSync as Zx}from"node:fs";import tr from"node:path";Ce();C();import Re from"node:path";var Bx=`${Re.sep}runs${Re.sep}runs${Re.sep}`;function gn(e){return e.includes(Bx)}function Hx(e,r){if(!gn(e))return e;let t=le(r),n=fe(t),o=`${Re.sep}runs${Re.sep}runs${Re.sep}`,s=e.indexOf(o);if(s<0)return e;let i=e.slice(s+o.length);return Re.join(n,i)}function fu(e,r){return Re.join(fe(le(e)),b(r))}function kr(e,r,t){return Re.join(fu(e,r),"workers",b(t))}function lh(e,r,t){let n=le(e);return Re.join(n,"runs","runs",b(r),"workers",b(t))}function gu(){return["stdout.jsonl","stderr.log","heartbeat.jsonl","last-status.json","auto-complete.log","worker.json"]}function ht(e){return{workerJsonPath:Re.join(e,"worker.json"),stdoutPath:Re.join(e,"stdout.jsonl"),stderrPath:Re.join(e,"stderr.log"),heartbeatPath:Re.join(e,"heartbeat.jsonl"),lastStatusPath:Re.join(e,"last-status.json")}}function hu(e){let r=ht(kr(e.harnessRoot,e.runId,e.workerName)).workerJsonPath;return e.statusPath&&!gn(e.statusPath)?e.statusPath:r}import{existsSync as Ur,mkdirSync as $x,readdirSync as ph,renameSync as jx,statSync as ku}from"node:fs";import te from"node:path";I();Kn();Je();import ch from"node:path";function Fx(e){return ch.resolve(Ut(e.trim()))}function hn(e,r,t){let n=e?.trim();return n?{repo:Fx(n),source:r,persistedInConfig:t}:null}function uh(e){return e?{repo:e.repo,source:e.source,persistedInConfig:!1}:null}function je(e={}){let r=e.env??process.env,t=e.config??y(),n=hn(t.defaultRepo,"config",!0);if(n)return n;let o=hn(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=hn(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);return s||uh(jr({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl}))}function Xi(e={}){let r=e.env??process.env,t=e.config??y(),n=hn(t.defaultRepo,"config",!0);if(n)return n;let o=hn(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=hn(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);return s||uh(Fn({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl}))}function Qi(e,r){let t={...r??y(),defaultRepo:Se(ch.resolve(e))};return ce(t),t}function Kx(e){let r=e?.config??y(),t=Xi({...e,config:r});if(!t)return{ok:!1,reason:"No Kynver git checkout found. Clone the repo, cd into it, then run `kynver setup --repo /path/to/Kynver` (or export KYNVER_DEFAULT_REPO)."};if(t.persistedInConfig)return{ok:!0,resolved:t,config:r};let n=Qi(t.repo,r);return{ok:!0,resolved:{...t,persistedInConfig:!0,source:"config"},config:n}}function kn(e){return{defaultRepo:q(e.repo),source:e.source,persistedInConfig:e.persistedInConfig}}Er();Ce();T();C();var yn=900*1e3,mh=3600*1e3;function yu(e,r){let t=te.resolve(e),n=te.resolve(fe(r)),o=te.relative(n,t);return o!==".."&&!o.startsWith("..")&&!te.isAbsolute(o)}function Ru(e){if(!Ur(e))return[];try{return ph(e,{withFileTypes:!0}).filter(r=>r.isDirectory()&&r.name!=="runs").map(r=>r.name)}catch{return[]}}function vu(e){let r=te.join(e,"workers");if(!Ur(r))return[];try{return ph(r,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name)}catch{return[]}}function fh(e){return te.join(e,"archived-workers")}function Vx(e,r){let t=te.join(fh(e),b(r));return Ur(t)?`${t}-${Date.now()}`:t}function dh(e,r,t){if(!Ur(e))return!1;try{let n=r-ku(e).mtimeMs;return Number.isFinite(n)&&n>=0&&n<t}catch{return!1}}function bu(e,r=Date.now(),t=yn){if(!Ur(e))return!1;let n=ht(e),o=w(n.workerJsonPath,void 0);if(o?.status==="running"&&H(o.pid))return!0;let s=ke(n.heartbeatPath);if(s.lastHeartbeatAt){let i=r-Date.parse(s.lastHeartbeatAt);if(Number.isFinite(i)&&i>=0&&i<t)return!0}return!!(dh(n.stdoutPath,r,t)||dh(n.heartbeatPath,r,t))}function Gx(e,r,t){let n=typeof r.completionReportedAt=="string"?Date.parse(r.completionReportedAt):NaN;if(Number.isFinite(n))return t-n;let o=(()=>{let s=r.completionResponse;if(!s||typeof s!="object")return NaN;let i=s.task;if(!i||typeof i!="object")return NaN;let a=i.updatedAt;return typeof a=="string"?Date.parse(a):NaN})();if(Number.isFinite(o))return t-o;try{return t-ku(te.join(e,"worker.json")).mtimeMs}catch{return 0}}function Yx(e,r,t,n){if(bu(e,t))return{eligible:!1,reason:"worker has active/recent retention signals"};let o=typeof r.status=="string"?r.status:"";if(typeof r.completionBlocker=="string"&&r.completionBlocker.trim().length>0)return{eligible:!1,reason:"worker has completion blocker"};let i=typeof r.completionReportedAt=="string"||r.completionOutcome==="acknowledged";if(o!=="done"&&!i)return{eligible:!1,reason:`worker status is ${o||"unknown"}`};let a=Gx(e,r,t);return!Number.isFinite(a)||a<n?{eligible:!1,reason:"terminal worker is still within archive grace window"}:{eligible:!0,reason:"terminal worker metadata archived"}}function kt(e,r=Date.now(),t=yn){for(let n of vu(e))if(bu(te.join(e,"workers",n),r,t))return!0;return!1}function Jx(){return{repo:je()?.repo??"",base:"origin/main",baseCommit:"unknown"}}function qx(e,r){let t=te.join(fe(e),b(r));if(!Ur(t))return null;let n=vu(t);if(n.length===0)return null;let o;try{o=ku(t).birthtime.toISOString()}catch{o=new Date().toISOString()}let s={};for(let a of n){let l=kr(e,r,a);s[a]={workerDir:l,statusPath:te.join(l,"worker.json")}}let i=kt(t);return{id:r,name:r,...Jx(),status:i?"running":"needs_attention",createdAt:o,workers:s}}function Zi(e){let r=le(e??me()),t=fe(r),n=[];for(let o of Ru(t)){let s=te.join(t,o,"run.json");if(Ur(s)){n.push({runId:o,action:"skipped",reason:"run.json present"});continue}let i=qx(r,o);if(!i){n.push({runId:o,action:"skipped",reason:"no worker dirs on disk"});continue}Be(i),n.push({runId:o,action:"repaired_run_json",reason:kt(te.join(t,o))?"synthesized run.json while worker artifacts still active":"synthesized run.json from orphan worker metadata dirs"})}return{runs:n}}function ea(e,r={}){let t=le(e??me()),n=fe(t),o=r.now??Date.now(),s=r.archiveAgeMs??mh,i=[];Zi(t);for(let a of Ru(n)){let l=te.join(n,a),c=te.join(l,"run.json"),u=w(c,void 0);if(!u?.id)continue;let d=new Set([...Object.keys(u.workers||{}),...vu(l)]),f=!1;for(let p of d){let m=te.join(l,"workers",b(p)),h=te.join(m,"worker.json"),k=w(h,void 0);if(!k){let O=te.join(fh(l),b(p));if(Ur(O)&&(u.workers[b(p)]||u.workers[p])){delete u.workers[b(p)],delete u.workers[p],f=!0,i.push({runId:u.id,worker:p,action:"archived",reason:"removed stale live index entry for archived worker metadata",archivePath:O});continue}i.push({runId:u.id,worker:p,action:"skipped",reason:"worker.json missing"});continue}let g=Yx(m,k,o,s);if(!g.eligible){i.push({runId:u.id,worker:p,action:"skipped",reason:g.reason});continue}let R=Vx(l,p);$x(te.dirname(R),{recursive:!0}),jx(m,R),delete u.workers[b(p)],delete u.workers[p],f=!0,i.push({runId:u.id,worker:p,action:"archived",reason:g.reason,archivePath:R})}f&&Be(u)}return{workers:i}}function Su(e,r=Date.now()){let t=new Set,n=fe(e);for(let o of Ru(n)){let s=te.join(n,o);kt(s,r)&&t.add(`${e}\0${o}`)}return t}T();C();function eE(e,r){let t=fu(e,r),n;try{n=zx(t)}catch{return null}if(!n.isSymbolicLink())return null;let o=tr.resolve(tr.dirname(t),Qx(t));if(kt(o)||kt(t))return null;let s=`${t}.materialize-${Date.now()}`;return Cu(o,s),Zx(t),Cu(s,t),o}function rE(e){let r=[];for(let t of gu()){let n=tr.join(e.fromDir,t),o=tr.join(e.toDir,t);!Wr(n)||Wr(o)||(Cu(n,o),r.push(t))}return r}function gh(e,r){let t=ht(r),n=!1;return e.workerDir!==r&&(e.workerDir=r,n=!0),e.stdoutPath!==t.stdoutPath&&(e.stdoutPath=t.stdoutPath,n=!0),e.stderrPath!==t.stderrPath&&(e.stderrPath=t.stderrPath,n=!0),e.heartbeatPath!==t.heartbeatPath&&(e.heartbeatPath=t.heartbeatPath,n=!0),n}function tE(e){let r=typeof e.lastStatus?.status=="string"?e.lastStatus.status:void 0,t=e.lastStatus?.attention&&typeof e.lastStatus.attention=="object"?e.lastStatus.attention.state:void 0;return r==="done"||t==="done"||e.stdoutFinalResult||e.heartbeatFinalResult?"done":r==="blocked"?"blocked":r==="running"?"exited":r??"exited"}function nE(e){let r=ht(e.canonicalDir),t=w(r.lastStatusPath,void 0),n=Wr(r.stdoutPath),o=Wr(r.heartbeatPath);if(!(n||o||t!=null))return null;let i=n?Vt(r.stdoutPath):{finalResult:null},a=o?ke(r.heartbeatPath):ke(""),l=qr(a),c=tE({lastStatus:t,stdoutFinalResult:i.finalResult,heartbeatFinalResult:l}),u={name:e.workerName,runId:e.run.id,status:c,branch:typeof t?.branch=="string"?t.branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:typeof t?.worktreePath=="string"?t.worktreePath:tr.join(Z().worktreesDir,e.run.id,e.workerName),workerDir:e.canonicalDir,stdoutPath:r.stdoutPath,stderrPath:r.stderrPath,heartbeatPath:r.heartbeatPath,startedAt:typeof t?.startedAt=="string"?t.startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"synthesized worker.json from on-disk artifacts after metadata repair"};return typeof t?.taskId=="string"&&(u.taskId=t.taskId),typeof t?.agentOsId=="string"&&(u.agentOsId=t.agentOsId),typeof t?.planId=="string"&&(u.planId=t.planId),typeof t?.pid=="number"&&(u.pid=t.pid),(i.finalResult||l)&&(u.completionSnapshot={finalResult:i.finalResult??l??"completed",summary:a.lastHeartbeatSummary}),gh(u,e.canonicalDir),u}function oE(e,r){let t=!1,n={...e.workers||{}};for(let[o,s]of Object.entries(n)){let i=kr(r,e.id,o),a=tr.join(i,"worker.json");(gn(s.workerDir)||gn(s.statusPath)||s.workerDir!==i||s.statusPath!==a)&&(n[o]={workerDir:i,statusPath:a},t=!0)}return t&&(e.workers=n,Be(e)),t}function sE(e){let r=[],t=kr(e.harnessRoot,e.run.id,e.workerName),n=lh(e.harnessRoot,e.run.id,e.workerName),o=ht(t),s=rE({fromDir:n,toDir:t});s.length>0&&r.push({runId:e.run.id,worker:e.workerName,action:"relocated_artifacts",reason:`moved ${s.join(", ")} from nested runs/runs layout`});let i=hu({harnessRoot:e.harnessRoot,runId:e.run.id,workerName:e.workerName,statusPath:e.statusPath}),a=w(i,void 0);if(!a&&Wr(o.workerJsonPath)&&(a=w(o.workerJsonPath,void 0)),!a){let l=nE({run:e.run,workerName:e.workerName,canonicalDir:t,harnessRoot:e.harnessRoot});if(l)return K(e.run.id,l),r.push({runId:e.run.id,worker:e.workerName,action:"synthesized_worker_json",reason:l.reconcileReason??"synthesized from artifacts"}),r;let c=Wr(t),u=gu().some(d=>Wr(tr.join(t,d)));if(c&&!u){let d={name:e.workerName,runId:e.run.id,status:"exited",branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:tr.join(Z().worktreesDir,e.run.id,e.workerName),workerDir:t,stdoutPath:o.stdoutPath,stderrPath:o.stderrPath,heartbeatPath:o.heartbeatPath,startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"empty worker dir \u2014 marked abandoned during metadata reconcile"};return K(e.run.id,d),r.push({runId:e.run.id,worker:e.workerName,action:"marked_abandoned",reason:d.reconcileReason??"empty worker dir"}),r}return r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker.json missing and no recoverable artifacts"}),r}return gh(a,t)?(a.reconciledAt=new Date().toISOString(),a.reconcileReason=a.reconcileReason??"repaired nested runs/runs path fields",K(e.run.id,a),r.push({runId:e.run.id,worker:e.workerName,action:"repaired_worker_paths",reason:a.reconcileReason})):r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker metadata already canonical"}),r}function iE(e,r){let t=tr.join(x(e.id),"workers");if(!Wr(t))return[];let n=new Set(Object.keys(e.workers||{})),o=[];for(let s of Xx(t,{withFileTypes:!0}))s.isDirectory()&&(n.has(s.name)||o.push(s.name));return o}function ra(){let{harnessRoot:e}=Z(),r=Zi(e),t=[];for(let n of X()){let o=eE(e,n.id);o&&t.push({runId:n.id,worker:"*",action:"materialized_run_symlink",reason:`replaced symlink with real run dir (was ${o})`}),oE(n,e)&&t.push({runId:n.id,worker:"*",action:"repaired_run_index",reason:"repaired nested runs/runs workerDir/statusPath entries in run.json"});let s=new Set(Object.keys(n.workers||{}));for(let i of iE(n,e))s.add(i),n.workers={...n.workers||{},[i]:{workerDir:kr(e,n.id,i),statusPath:tr.join(kr(e,n.id,i),"worker.json")}},Be(n),t.push({runId:n.id,worker:i,action:"repaired_run_index",reason:"indexed orphan worker dir into run.json"});for(let i of s){let a=n.workers?.[i];t.push(...sE({run:n,workerName:i,harnessRoot:e,statusPath:a?.statusPath}))}}return{workers:t,runMetadataRetention:r}}function aE(){let e=ra(),r=e.workers.reduce((n,o)=>(n[o.action]=(n[o.action]??0)+1,n),{}),t=e.runMetadataRetention.runs.reduce((n,o)=>(n[o.action]=(n[o.action]??0)+1,n),{});console.log(JSON.stringify({ok:!0,totals:r,runMetadataRetention:{totals:t,details:e.runMetadataRetention.runs},details:e.workers},null,2))}Er();Ds();z();T();Jr();C();import{execFileSync as hh}from"node:child_process";import kh from"node:path";function wu(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:null}function lE(e){let r=wu(e)?.match(/\/pull\/(\d+)$/);if(!r)return null;let t=Number.parseInt(r[1],10);return Number.isFinite(t)?t:null}function cE(e){if(e==null)return"";if(typeof e=="string")return e;try{return JSON.stringify(e)}catch{return""}}function uE(e){let r=new Set;for(let t of e.matchAll(/github\.com\/[^/\s)>"']+\/[^/\s)>"']+\/(?:pull|pulls)\/(\d+)/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bPR\s*#?\s*(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bpr[-_]?(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}return[...r]}function dE(e){let r=null;if(typeof e=="string"?r=Gt(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=wu(String(s.prUrl??s.pr_url??"")),a=String(s.outcome??"").trim();!i||a!=="merged"||n.push({prUrl:i,mergeCommit:typeof s.mergeCommit=="string"?s.mergeCommit:typeof s.merge_commit=="string"?s.merge_commit:null,reason:typeof s.reason=="string"?s.reason:null})}return n}function pE(e){try{let n=hh("git",["config","--get","remote.origin.url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim().match(/github\.com[:/]([^/]+\/[^/.]+)(?:\.git)?$/i)?.[1];if(!n)return null;let o=hh("gh",["pr","view",String(e.prNumber),"--repo",n,"--json","state,mergedAt,mergeCommit,url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}),s=JSON.parse(o);return{prUrl:wu(s.url??`https://github.com/${n}/pull/${e.prNumber}`)??`https://github.com/${n}/pull/${e.prNumber}`,state:s.state??"",mergedAt:s.mergedAt??null,mergeCommit:s.mergeCommit?.oid??null}}catch{return null}}function mE(e){let r=ke(e.heartbeatPath);return e.completionSnapshot?.finalResult??qr(r)}function fE(e){let r=new Map,t=x(e.id);for(let n of he(e)){let o=w(kh.join(t,"workers",b(n),"worker.json"),void 0);if(o)for(let s of dE(mE(o))){let i=lE(s.prUrl);i!=null&&!r.has(i)&&r.set(i,s)}}return r}function gE(e,r){let t=ke(e.heartbeatPath),n=[e.name,e.repairTargetPrUrl,e.taskPrUrl,e.branch,t.lastHeartbeatSummary,cE(r)].filter(Boolean).join(`
-`);return uE(n)}function hE(e){return e.localOnly===!0&&!e.taskId&&!e.agentOsId}function ta(e={}){let r=e.lookupPr??pE,t=[],n=new Map;for(let o of X()){let s=fE(o),i=x(o.id);for(let a of he(o)){let l=kh.join(i,"workers",b(a),"worker.json"),c=w(l,void 0);if(!c||!hE(c))continue;let u=D(c,{base:o.base,baseCommit:o.baseCommit});if(u.attention.state!=="needs_attention")continue;let d=null;for(let p of gE(c,u.finalResult)){if(d=s.get(p)??null,!d){let m=o.repo||c.worktreePath,h=`${m}#${p}`,k=n.has(h)?n.get(h)??null:r({repoDir:m,prNumber:p});n.has(h)||n.set(h,k),k&&(k.state==="MERGED"||k.mergedAt)&&(d={prUrl:k.prUrl,mergeCommit:k.mergeCommit??null,reason:"GitHub reports PR merged"})}if(d)break}if(!d){t.push({runId:o.id,worker:a,action:"skipped",reason:"no merged PR evidence"});continue}let f=new Date().toISOString();c.status="done",c.completionSnapshot={prUrl:d.prUrl,summary:`Local-only worker superseded by merged PR ${d.prUrl}`,finalResult:{summary:`Local-only repair/salvage worker superseded by merged PR ${d.prUrl}`,targetPrReconciliation:[{prUrl:d.prUrl,outcome:"merged",mergeCommit:d.mergeCommit??null,reason:d.reason??"PR already merged; local-only worker no longer requires attention"}]}},c.completionAckSource="local-pr-merged-reconcile",c.reconciledAt=f,c.reconcileReason="local-only needs_attention superseded by merged PR",K(o.id,c),t.push({runId:o.id,worker:a,action:"marked_done",reason:c.reconcileReason,prUrl:d.prUrl,mergeCommit:d.mergeCommit??null})}}return{workers:t}}var yE=900*1e3;function RE(){return process.env.KYNVER_NO_STALE_CLEANUP==="1"}function Rn(){let e=ra();if(RE()){let s=ta(),i=ea();return{workers:[],finalizedRuns:Lo(),metadataReconcile:e,localPrAttentionReconcile:s,terminalWorkerArchive:i}}let r=[],t=Date.now();for(let s of X())for(let i of he(s)){let a=kE.join(x(s.id),"workers",b(i),"worker.json"),l=w(a,void 0);if(!l||l.status!=="running"){r.push({runId:s.id,worker:i,action:"skipped",reason:l?`worker status is ${l.status}`:"worker.json missing"});continue}let c=D(l,{base:s.base,baseCommit:s.baseCommit});if(c.finalResult){if(l.status==="running"){let u=c.attention.state==="blocked"?"blocked":c.attention.state==="done"||c.status==="done"?"done":"exited";l.status=u,l.reconciledAt=new Date().toISOString(),l.reconcileReason="synced finished worker record after terminal stdout/heartbeat",K(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:l.reconcileReason})}else r.push({runId:s.id,worker:i,action:"skipped",reason:"final result present"});continue}if(!c.alive){let u=c.attention.state==="blocked"?"blocked":c.status==="done"?"done":"exited";l.status=u,l.reconciledAt=new Date().toISOString(),l.reconcileReason=c.attention.reason,K(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:c.attention.reason});continue}if(c.attention.state==="stale"&&l.pid&&H(l.pid)){let u=c.lastHeartbeatAt?Date.parse(c.lastHeartbeatAt):NaN,d=c.lastActivityAt?Date.parse(c.lastActivityAt):NaN,f=!Number.isFinite(u)||t-u>yE,p=Number.isFinite(d)&&t-d>Jt;if(f&&p){_r(l.pid,"SIGTERM"),l.status="exited",l.reconciledAt=new Date().toISOString(),l.reconcileReason=`reconciled stale worker: ${c.attention.reason}`,K(s.id,l),r.push({runId:s.id,worker:i,action:"killed_stale",reason:c.attention.reason});continue}}r.push({runId:s.id,worker:i,action:"skipped",reason:c.attention.reason})}let n=ta(),o=ea();return{workers:r,finalizedRuns:Lo(),metadataReconcile:e,localPrAttentionReconcile:n,terminalWorkerArchive:o}}function _u(){let e=Rn(),r=e.workers.filter(l=>l.action==="marked_exited").length,t=e.workers.filter(l=>l.action==="killed_stale").length,n=e.workers.filter(l=>l.action==="skipped").length,o=e.metadataReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),s=e.localPrAttentionReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),i=e.metadataReconcile.runMetadataRetention.runs.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),a=e.terminalWorkerArchive.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{});console.log(JSON.stringify({ok:!0,workers:{markedExited:r,killedStale:t,skipped:n,total:e.workers.length},metadataReconcile:{totals:o,total:e.metadataReconcile.workers.length,runMetadataRetention:{totals:i,total:e.metadataReconcile.runMetadataRetention.runs.length}},localPrAttentionReconcile:{totals:s,total:e.localPrAttentionReconcile.workers.length},terminalWorkerArchive:{totals:a,total:e.terminalWorkerArchive.workers.length},finalizedRuns:e.finalizedRuns.length,details:{workers:e.workers,metadataReconcile:e.metadataReconcile.workers,localPrAttentionReconcile:e.localPrAttentionReconcile.workers,terminalWorkerArchive:e.terminalWorkerArchive.workers,runMetadataRetention:e.metadataReconcile.runMetadataRetention.runs,finalizedRuns:e.finalizedRuns}},null,2))}z();C();function SE(e){if(!e||!vE(e))return 0;try{return bE(e,"utf8").trim().length}catch{return 0}}function CE(e,r){let t=yh.join(x(e.id),"workers",b(r),"worker.json"),n=w(t,void 0);if(!n)return{worker:r,workerStatus:"missing",attention:"needs_attention",attentionReason:"worker.json missing",missingHeartbeat:!0,missingFinalResult:!0,landingBlocked:!1,completionBlocked:!1};let o=D(n,{base:e.base,baseCommit:e.baseCommit}),s=SE(n.heartbeatPath)===0,i=!o.finalResult&&!o.alive,a=typeof n.completionBlocker=="string"&&n.completionBlocker.length>0;return{worker:r,workerStatus:n.status,attention:o.attention.state,attentionReason:o.attention.reason,missingHeartbeat:s,missingFinalResult:i,landingBlocked:Zr(o),completionBlocked:a}}function wE(e){return e.openWorkerCount>0?"active_workers":e.workers.some(r=>r.completionBlocked)?"completion_blocked":e.workers.some(r=>r.landingBlocked)?"landing_blocked":null}function _E(e){let r={blocked:5,needs_attention:4,stale:3,done:2,ok:1},t="ok",n;for(let o of e){let s=o.attention;(r[s]??0)>=(r[t]??0)&&(t=s,n=o.attentionReason)}return{attention:t,attentionReason:n}}function xE(e){let r=0;for(let t of he(e)){let n=yh.join(x(e.id),"workers",b(t),"worker.json"),o=w(n,void 0);if(!o)continue;let s=D(o,{base:e.base,baseCommit:e.baseCommit});s.alive&&!s.finalResult&&(r+=1)}return r}function vn(){return Rn(),X().map(e=>{let t=he(e).map(d=>CE(e,d)),n=t.filter(d=>d.missingHeartbeat).map(d=>d.worker),o=t.filter(d=>d.missingFinalResult).map(d=>d.worker),s=t.filter(d=>d.landingBlocked).map(d=>d.worker),i=t.filter(d=>d.completionBlocked).map(d=>d.worker),{attention:a,attentionReason:l}=_E(t),c=xE(e),u=qt(e.status,t.map(d=>({attention:d.attention,status:d.workerStatus})));return{id:e.id,name:e.name,status:e.status,effectiveStatus:u,repo:e.repo,createdAt:e.createdAt,openWorkerCount:c,attention:a,attentionReason:l,finalizeBlockedReason:wE({run:e,workers:t,openWorkerCount:c}),evidence:{missingHeartbeatWorkers:n,missingFinalResultWorkers:o,landingBlockedWorkers:s,completionBlockedWorkers:i,workers:t}}})}function xu(){console.log(JSON.stringify(vn(),null,2))}C();function IE(e){let r=typeof e.repo=="string"?e.repo.trim():"";if(r)return r;let t=je();return t?t.repo:(N("","--repo (or set defaultRepo via `kynver setup` / KYNVER_DEFAULT_REPO)"),"")}function Bo(e){let r=Dc(IE(e));up(r);let t=e.id?bo(String(e.id)):tp(String(e.name||"run")),n=x(t);EE(n)&&OE(`run already exists: ${t}`),PE(n,{recursive:!0});let o=String(e.base||"origin/main"),s=pe(r,["rev-parse",o]).trim(),i={id:t,name:String(e.name||t),repo:r,base:o,baseCommit:s,status:"created",createdAt:new Date().toISOString(),workers:{}};ae(AE.join(n,"run.json"),i);let a={runId:t,runDir:n,repo:r,base:o,baseCommit:s};return console.log(JSON.stringify(a,null,2)),a}function Eu(){xu()}function OE(e){console.error(e),process.exit(1)}C();function Rh(e){let r=e.trim();return r?vn().find(n=>n.name===r&&n.status!=="completed")??null:null}function Pu(e){let r=String(N(String(e.name||""),"--name")),t=Rh(r);console.log(JSON.stringify({runId:t?.id??null,name:r,status:t?.status??null,effectiveStatus:t?.effectiveStatus??null},null,2))}zt();I();import NE from"node:path";T();z();C();async function bn(e){let r=e.pipeline===!0||e.pipeline==="true";try{let t=L(String(N(String(e.run||""),"--run"))),n=String(N(String(e.agentOsId||""),"--agent-os-id")),o=V(e.baseUrl?String(e.baseUrl):void 0),s=await J(e.secret?String(e.secret):void 0,n,{baseUrl:o}),i=Ze({runId:t.id}).runnerId,a=await dg({run:t.id,agentOsId:n,...e},"run_sweep"),l=[];for(let f of Object.keys(t.workers||{})){let p=w(NE.join(x(t.id),"workers",b(f),"worker.json"),void 0);if(!p||!p.dispatched||!p.taskId)continue;let m=D(p);if(m.alive||m.finalResult||p.completionReportedAt)continue;let h=gi({runId:t.id,workerLeaseOwner:p.leaseOwner??null,runnerId:i}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(String(p.taskId))}/release`,g;try{g=await re(k,s,{agentOsId:n,leaseOwner:h},{agentOsId:n,baseUrl:o})}catch(R){g={ok:!1,error:R.message}}l.push({worker:f,taskId:p.taskId,pid:p.pid,released:g.ok===!0||g.response?.ok===!0,response:g.response??g})}let c=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/reap`,u;try{u=await re(c,s,{agentOsId:n,...Number(e.graceMs)>=0&&e.graceMs!==void 0&&e.graceMs!==!0?{graceMs:Math.floor(Number(e.graceMs))}:{}},{agentOsId:n,baseUrl:o})}catch(f){u={ok:!1,error:f.message}}let d={runId:t.id,agentOsId:n,snapshotPublished:a,releasedLocalOrphans:l,reap:u.response??u};if(r)return{ok:!0,...d};console.log(JSON.stringify(d,null,2))}catch(t){if(r)return{ok:!1,error:t.message};console.error(`run sweep failed: ${t.message}`),process.exit(1)}}I();Kn();Ce();Ce();import{existsSync as BE,readdirSync as bh,statSync as HE}from"node:fs";import FE from"node:path";import{execFileSync as TE}from"node:child_process";import{existsSync as vh,readdirSync as DE,statSync as ME}from"node:fs";import UE from"node:path";var WE=2500;function LE(e,r=WE){if(!vh(e))return 0;try{let n=TE("du",["-sb",e],{encoding:"utf8",timeout:r,stdio:["ignore","pipe","ignore"]}).trim().split(/\s+/)[0],o=Number(n);return Number.isFinite(o)&&o>=0?o:null}catch{return null}}function yr(e,r=5e4){if(!vh(e))return 0;let t=LE(e);if(t!==null)return t;let n=0,o=0,s=[e];for(;s.length>0;){let i=s.pop(),a;try{a=DE(i)}catch{continue}for(let l of a){if(o++>r)return null;let c=UE.join(i,l),u;try{u=ME(c)}catch{continue}u.isDirectory()?s.push(c):n+=u.size}}return n}function Au(e={}){let r=le(e.harnessRoot??me()),t=ur(r),n=e.now??Date.now(),o=new Date(n).toISOString();if(!BE(t))return{harnessRoot:r,worktreesDir:t,worktreesBytes:0,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o};let s=0,i=0,a=0,l=null,c;try{c=bh(t,{withFileTypes:!0})}catch{return{harnessRoot:r,worktreesDir:t,worktreesBytes:null,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o}}for(let u of c){if(!u.isDirectory())continue;i+=1;let d=FE.join(t,u.name);try{let f=HE(d);l=l===null?f.mtimeMs:Math.min(l,f.mtimeMs)}catch{}try{for(let f of bh(d,{withFileTypes:!0}))f.isDirectory()&&(a+=1)}catch{}if(s!==null&&e.perRunEntryCap!==null){let f=e.perRunEntryCap??5e4;if(f<=0)s=null;else{let p=yr(d,f);p===null?s=null:s+=p}}}return{harnessRoot:r,worktreesDir:t,worktreesBytes:s,runCount:i,workerCount:a,oldestRunAt:l===null?null:new Date(l).toISOString(),scannedAt:o}}Ce();import Ue from"node:path";Qn();import ia from"node:path";Pe();z();var na=[".next",".turbo","dist","build",".cache","node_modules/.cache"];function Iu(e){let r=e.replace(/\\/g,"/").replace(/\/+$/,"");if(r==="node_modules"||r.startsWith("node_modules/"))return!0;for(let t of na)if(r===t||r.startsWith(`${t}/`))return!0;return!1}function Te(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return!Iu(n)})}function yt(e){if(typeof e=="string")return e.match(/https:\/\/github\.com\/[^\s]+\/pull\/\d+/i)?.[0]??null;if(e&&typeof e=="object"){let r=e;for(let t of["prUrl","pr_url","pullRequestUrl"]){let n=r[t];if(typeof n=="string"&&n.trim())return n.trim()}}return null}function Ho(e){let r=e.gitAncestry?.relation;return r==="merged"||r==="synced"?Te(e.changedFiles).length>0:!!(yt(e.finalResult)||r==="ahead"||r==="diverged"||e.changedFiles.length>0&&e.finalResult)}C();function Fo(e){return e.status||(e.status=D(e.worker,{base:e.run.base,baseCommit:e.run.baseCommit})),e.status}function Ou(e,r){if(e.status)return Te(e.status.changedFiles).length>0;let t=r?r.porcelain(e.worktreePath):Hn(e.worktreePath);return Te(t).length>0}function KE(e){let r=e.worker.completionSnapshot?.finalResult;return r??(e.worker.taskPrUrl?{prUrl:e.worker.taskPrUrl}:null)}function Nu(e,r){if(e.status)return e.status;let t=e.worker,n=typeof t.completionReportedAt=="string"&&t.completionReportedAt.trim().length>0,o=!!(t.status&&["done","exited","blocked","failed","abandoned"].includes(t.status))||n,s=KE(e);if(o&&!H(t.pid)){let i=r?.gitStatusCache?r.gitStatusCache.porcelain(e.worktreePath):Hn(e.worktreePath),a=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main",c=r?.gitRevCache?.countAheadOfMain(e.worktreePath,a)===0?{checked:!0,base:a,relation:"synced"}:Rs(e.worktreePath,{base:e.run.base,baseCommit:e.run.baseCommit}),u={runId:e.runId,worker:e.workerName,pid:t.pid,alive:!1,status:t.status??(n?"done":"exited"),attention:{state:n?"done":"stale"},branch:t.branch,worktreePath:e.worktreePath,ownedPaths:t.ownedPaths,stdoutBytes:0,stderrBytes:0,heartbeatBytes:0,firstEventAt:null,lastEventAt:null,lastActivityAt:t.completionReportedAt??null,currentTool:null,heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,heartbeatBlocker:null,changedFiles:i,gitAncestry:c,finalResult:s,completionBlocker:typeof t.completionBlocker=="string"&&t.completionBlocker.trim()||null,prUrl:t.repairTargetPrUrl??t.taskPrUrl??yt(s)};return e.status=u,u}return Fo(e)}z();z();Er();C();function Tu(e,r=Date.now(),t=yn){let n=ke(e.heartbeatPath);if(!n.lastHeartbeatAt)return!1;let o=r-Date.parse(n.lastHeartbeatAt);return Number.isFinite(o)&&o>=0&&o<t}function oa(e,r=Date.now(),t=yn){return H(e.pid)?!0:Tu(e,r,t)}function $E(e,r){return r?r.runTerminalCache.derive(e.run):gt(e.run)}function Rr(e,r=Date.now()){return oa(e.worker,r)}function Du(e,r){return hr.has(e.run.status)?!1:$E(e,r)!==null}function Sh(e,r,t=Date.now()){if(Rr(e,t))return!0;if(hr.has(e.run.status)||Du(e,r))return!1;let n=Fo(e);return oe(n)?!1:!!Rr(e,t)}Qn();z();function Ch(e,r){if(!(typeof e.worker.completionBlocker=="string"?e.worker.completionBlocker.trim():""))return!1;if(Rr(e))return!0;let n=r??Fo(e);return!!(!oe(n)||Ho(n)||Te(n.changedFiles).length>0||Xr({finalResult:n.finalResult,changedFiles:n.changedFiles,gitAncestry:n.gitAncestry,prUrl:yt(n.finalResult)}).blocked)}Pe();C();import{existsSync as _h,mkdirSync as jE,writeFileSync as wh}from"node:fs";import sa from"node:path";function xh(e,r,t){return sa.join(e,"salvage",b(r),b(t))}function Eh(e){return _h(sa.join(xh(e.harnessRoot,e.runId,e.workerName),"evidence.json"))}function Ph(e){let r=xh(e.harnessRoot,e.indexed.runId,e.indexed.workerName);jE(r,{recursive:!0});let t=sa.join(r,"salvage.patch"),n=!1;if(_h(e.indexed.worktreePath)){let s=ne(e.indexed.worktreePath,["diff","HEAD"]),i=ne(e.indexed.worktreePath,["diff","--cached"]),a=[s.stdout,i.stdout].filter(l=>l.trim()).join(`
-`);a.trim()&&(wh(t,a.endsWith(`
+${r}`}function dh(e){let{provider:r,model:t,authSource:n,costTier:o,riskClass:s,costRationale:i,routingRule:a,escalatedFrom:l,escalatedReason:c}=e;return{provider:r,model:t,authSource:n,costTier:o,riskClass:s,costRationale:i,routingRule:a,escalatedFrom:l,escalatedReason:c}}function Dx(e){return dh(e)}var vu=["off","observe","enforce"],Mx=["foreground_harness_spawn","shell_platform_dispatch"],Ux=["allow_local","observe_bypass","enforce_harness_task"];function Wx(e){let r=(e??"off").trim().toLowerCase();return vu.includes(r)?r:"off"}function Zi(e=process.env){return Wx(e.KYNVER_ORCHESTRATION_POLICY_MODE)}function bu(e=process.env){let r=e.KYNVER_ORCHESTRATION_ENFORCE_TASKS?.trim().toLowerCase();return r?r==="1"||r==="true"||r==="yes"||r==="on":Zi(e)==="enforce"}import{createHash as Lx}from"node:crypto";function Lo(e){if(e==null)return null;let r=e.trim();return r.length?r:null}function Su(e){let r=Lo(e.sessionId)??"anonymous",t=Lo(e.title)??Lo(e.action)??"foreground",n=Lx("sha256").update([Lo(e.planId)??"",Lo(e.parentTaskId)??"",t.toLowerCase()].join("|")).digest("hex").slice(0,16);return`hermes-foreground:${r}:${n}`}function Bx(e,r){return e==="enforce"&&r?"enforce_harness_task":e==="observe"?"observe_bypass":"allow_local"}function Hx(e,r=process.env){let t=Zi(r),n=bu(r),o=Bx(t,n),s=o==="enforce_harness_task"?Su({sessionId:e.sessionId,planId:e.planId,parentTaskId:e.parentTaskId,title:e.title,action:e.action}):null,i;return t==="off"?i="Orchestration policy off \u2014 local foreground path allowed.":o==="observe_bypass"?i=`Observe mode: ${e.action} bypass logged; local fallback preserved.`:o==="enforce_harness_task"?i=`Enforce mode: ${e.action} must create linked harness AgentTask (${s}).`:i="Local foreground path allowed.",{mode:t,decision:o,idempotencyKey:s,bypassLogged:o==="observe_bypass",reason:i}}function Fx(e,r){let t=e;return r&&(t=t.split(r).join("[REDACTED_SECRET]")),t=t.replace(/kynver_[a-z0-9_]+/gi,"[REDACTED_KYNVER_TOKEN]"),t=t.replace(/sk-[a-zA-Z0-9_-]+/g,"[REDACTED_API_KEY]"),t}jr();import*as ea from"node:fs";import{homedir as ph}from"node:os";import*as tr from"node:path";function mh(e){return e.startsWith("~/")?tr.join(ph(),e.slice(2)):e}function ra(e={}){let r=e.env??process.env,t=e.cwd??process.cwd(),n=e.homeDir??(r.HOME?.trim()||r.USERPROFILE?.trim()||ph()),o=new Set,s=[],i=c=>{let u=tr.resolve(mh(c));o.has(u)||(o.add(u),s.push(u))},a=r.KYNVER_ENV_FILE?.trim();a&&i(a);let l=t;for(let c=0;c<12;c+=1){i(tr.join(l,".env"));let u=tr.dirname(l);if(u===l)break;l=u}i(tr.join(n,".kynver",".env"));try{let c=tr.join(n,".kynver","config.json");if(ea.existsSync(c)){let d=JSON.parse(ea.readFileSync(c,"utf8")).defaultRepo?.trim();d&&i(tr.join(d,".env"))}}catch{}return s}import{execFileSync as Kx,spawnSync as $x}from"node:child_process";import*as ta from"node:fs";import*as fh from"node:path";function Bo(e){if(!e?.trim())return"(not set)";try{let r=new URL(e),t=(r.pathname||"").replace(/^\//,"").split("?")[0]||"(no database name)";return`${r.hostname} / ${t}`}catch{return"(invalid URL)"}}var Cu=["KYNVER_PRODUCTION_DATABASE_URL","PRODUCTION_DATABASE_URL"],wu=[...Cu];function $e(e,r){return e[r]?.trim()||void 0}function gh(e){if(!ta.existsSync(e))return{};let r={},t=new Set(wu);for(let n of ta.readFileSync(e,"utf8").split(`
+`)){let o=n.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/);if(!o||!t.has(o[1]))continue;let s=o[1];r[s]=o[2].replace(/^["']|["']$/g,"").trim()}return r}function jx(e){for(let r of Cu){let t=$e(e,r);if(t)return{ok:!0,databaseUrl:t,source:`env:${r}`,hint:Bo(t)}}return null}function Vx(e,r){for(let t of ra({cwd:e,env:r})){let n=gh(t);for(let o of wu){let s=n[o]?.trim();if(s)return{ok:!0,databaseUrl:s,source:`env-file:${o}`,hint:`${Bo(s)} (${fh.basename(t)})`}}}return null}function Gx(e){let r=process.platform==="win32"?"neon.cmd":"neon",t=["connection-string",e.branch,"--prisma","-o","json","--no-color","--no-analytics"];e.projectId&&t.push("--project-id",e.projectId),e.databaseName&&t.push("--database-name",e.databaseName),e.roleName&&t.push("--role-name",e.roleName),e.pooled&&t.push("--pooled");let n;try{let o=$x(r,t,{encoding:"utf8",env:process.env,timeout:3e4});if(o.status!==0)return null;n=(o.stdout||"").trim()}catch{try{n=Kx("neonctl",t,{encoding:"utf8",env:process.env,timeout:3e4}).trim()}catch{return null}}if(!n)return null;try{let o=JSON.parse(n),s=typeof o.connection_uri=="string"&&o.connection_uri||typeof o.connection_string=="string"&&o.connection_string||typeof o.connectionString=="string"&&o.connectionString;if(s)return s}catch{}return/^postgres(ql)?:\/\//i.test(n)?n:null}function Yx(e,r){let t=$e(e,"KYNVER_NEON_BRANCH")||$e(e,"NEON_BRANCH")||"production",n=r({branch:t,projectId:$e(e,"KYNVER_NEON_PROJECT_ID")||$e(e,"NEON_PROJECT_ID"),databaseName:$e(e,"KYNVER_NEON_DATABASE_NAME")||$e(e,"NEON_DATABASE_NAME"),roleName:$e(e,"KYNVER_NEON_ROLE_NAME")||$e(e,"NEON_ROLE_NAME"),pooled:$e(e,"KYNVER_NEON_POOLED")==="1"||$e(e,"NEON_POOLED")==="1"});return n?{ok:!0,databaseUrl:n,source:"neon-cli",hint:Bo(n)}:null}function hh(e={}){let r=e.env??process.env,t=e.cwd??process.cwd(),n=e.neonConnectionString??Gx,o=[],s=ra({cwd:t,env:r}),i=Yx(r,n);if(o.push("neon-cli"),i)return i;for(let u of Cu)o.push(`env:${u}`);let a=jx(r);if(a)return a;for(let u of wu)o.push(`env-file:${u}`);let l=Vx(t,r);return l||{ok:!1,reason:"No production database credentials found. Authenticate Neon CLI (`neon auth`), set KYNVER_NEON_* / NEON_* project hints, or provide PRODUCTION_DATABASE_URL / KYNVER_PRODUCTION_DATABASE_URL (process env, KYNVER_ENV_FILE, ~/.kynver/.env, or selective .env keys in the repo / defaultRepo checkout)."+(s.length>0?` Searched env files: ${s.slice(0,6).join(", ")}${s.length>6?"\u2026":""}.`:""),attempted:o}}function Jx(e={}){let r=hh(e);if(!r.ok)throw new Error(r.reason);return process.env.DATABASE_URL=r.databaseUrl,console.error(`[kynver-cli] database target: ${r.hint} (source: ${r.source})`),r}Pe();T();import{existsSync as BE,mkdirSync as HE}from"node:fs";import FE from"node:path";T();zr();import{existsSync as NE,readFileSync as TE}from"node:fs";import Ph from"node:path";import AE from"node:path";T();zr();z();C();import qx from"node:path";var zx=new Set(["running","dispatching","pending","queued","needs_attention"]),yr=new Set(["completed","failed","cancelled","done"]);function yt(e){let r=ke(e);if(r.length===0)return"failed";let t=!1,n=!1,o=!1,s=!1;for(let i of r){let a=w(qx.join(x(e.id),"workers",b(i),"worker.json"),void 0);if(!a)continue;let l=D(a,{base:e.base,baseCommit:e.baseCommit});if(l.alive&&!l.finalResult){t=!0;break}typeof a.completionBlocker=="string"&&a.completionBlocker&&(o=!0),et(l)&&(s=!0),l.finalResult&&l.attention.state==="done"&&(n=!0)}return t||o||s?null:n?"completed":"failed"}function Ho(){let e=[];for(let r of X()){if(!zx.has(r.status))continue;let t=yt(r);if(!t||t===r.status)continue;let n=r.status;r.status=t,Be(r),e.push({runId:r.id,from:n,to:t})}return e}T();zr();z();C();pr();Jt();import{existsSync as Br,lstatSync as lE,readdirSync as cE,readlinkSync as uE,renameSync as Du,unlinkSync as dE}from"node:fs";import nr from"node:path";Ce();C();import Re from"node:path";var Xx=`${Re.sep}runs${Re.sep}runs${Re.sep}`;function yn(e){return e.includes(Xx)}function Qx(e,r){if(!yn(e))return e;let t=le(r),n=ge(t),o=`${Re.sep}runs${Re.sep}runs${Re.sep}`,s=e.indexOf(o);if(s<0)return e;let i=e.slice(s+o.length);return Re.join(n,i)}function _u(e,r){return Re.join(ge(le(e)),b(r))}function Rr(e,r,t){return Re.join(_u(e,r),"workers",b(t))}function kh(e,r,t){let n=le(e);return Re.join(n,"runs","runs",b(r),"workers",b(t))}function xu(){return["stdout.jsonl","stderr.log","heartbeat.jsonl","last-status.json","auto-complete.log","worker.json"]}function Rt(e){return{workerJsonPath:Re.join(e,"worker.json"),stdoutPath:Re.join(e,"stdout.jsonl"),stderrPath:Re.join(e,"stderr.log"),heartbeatPath:Re.join(e,"heartbeat.jsonl"),lastStatusPath:Re.join(e,"last-status.json")}}function Eu(e){let r=Rt(Rr(e.harnessRoot,e.runId,e.workerName)).workerJsonPath;return e.statusPath&&!yn(e.statusPath)?e.statusPath:r}import{existsSync as Lr,mkdirSync as rE,readdirSync as bh,renameSync as tE,statSync as Pu}from"node:fs";import te from"node:path";I();Vn();Je();import yh from"node:path";function Zx(e){return yh.resolve(Bt(e.trim()))}function Rn(e,r,t){let n=e?.trim();return n?{repo:Zx(n),source:r,persistedInConfig:t}:null}function Rh(e){return e?{repo:e.repo,source:e.source,persistedInConfig:!1}:null}function je(e={}){let r=e.env??process.env,t=e.config??y(),n=Rn(t.defaultRepo,"config",!0);if(n)return n;let o=Rn(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=Rn(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);return s||Rh(Gr({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl}))}function na(e={}){let r=e.env??process.env,t=e.config??y(),n=Rn(t.defaultRepo,"config",!0);if(n)return n;let o=Rn(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=Rn(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);return s||Rh(jn({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl}))}function oa(e,r){let t={...r??y(),defaultRepo:Se(yh.resolve(e))};return ue(t),t}function eE(e){let r=e?.config??y(),t=na({...e,config:r});if(!t)return{ok:!1,reason:"No Kynver git checkout found. Clone the repo, cd into it, then run `kynver setup --repo /path/to/Kynver` (or export KYNVER_DEFAULT_REPO)."};if(t.persistedInConfig)return{ok:!0,resolved:t,config:r};let n=oa(t.repo,r);return{ok:!0,resolved:{...t,persistedInConfig:!0,source:"config"},config:n}}function vn(e){return{defaultRepo:q(e.repo),source:e.source,persistedInConfig:e.persistedInConfig}}pr();Ce();T();C();var bn=900*1e3,Sh=3600*1e3;function Au(e,r){let t=te.resolve(e),n=te.resolve(ge(r)),o=te.relative(n,t);return o!==".."&&!o.startsWith("..")&&!te.isAbsolute(o)}function Iu(e){if(!Lr(e))return[];try{return bh(e,{withFileTypes:!0}).filter(r=>r.isDirectory()&&r.name!=="runs").map(r=>r.name)}catch{return[]}}function Ou(e){let r=te.join(e,"workers");if(!Lr(r))return[];try{return bh(r,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name)}catch{return[]}}function Ch(e){return te.join(e,"archived-workers")}function nE(e,r){let t=te.join(Ch(e),b(r));return Lr(t)?`${t}-${Date.now()}`:t}function vh(e,r,t){if(!Lr(e))return!1;try{let n=r-Pu(e).mtimeMs;return Number.isFinite(n)&&n>=0&&n<t}catch{return!1}}function Nu(e,r=Date.now(),t=bn){if(!Lr(e))return!1;let n=Rt(e),o=w(n.workerJsonPath,void 0);if(o?.status==="running"&&H(o.pid))return!0;let s=ce(n.heartbeatPath);if(s.lastHeartbeatAt){let i=r-Date.parse(s.lastHeartbeatAt);if(Number.isFinite(i)&&i>=0&&i<t)return!0}return!!(vh(n.stdoutPath,r,t)||vh(n.heartbeatPath,r,t))}function oE(e,r,t){let n=typeof r.completionReportedAt=="string"?Date.parse(r.completionReportedAt):NaN;if(Number.isFinite(n))return t-n;let o=(()=>{let s=r.completionResponse;if(!s||typeof s!="object")return NaN;let i=s.task;if(!i||typeof i!="object")return NaN;let a=i.updatedAt;return typeof a=="string"?Date.parse(a):NaN})();if(Number.isFinite(o))return t-o;try{return t-Pu(te.join(e,"worker.json")).mtimeMs}catch{return 0}}function sE(e,r,t,n){if(Nu(e,t))return{eligible:!1,reason:"worker has active/recent retention signals"};let o=typeof r.status=="string"?r.status:"";if(typeof r.completionBlocker=="string"&&r.completionBlocker.trim().length>0)return{eligible:!1,reason:"worker has completion blocker"};let i=typeof r.completionReportedAt=="string"||r.completionOutcome==="acknowledged";if(o!=="done"&&!i)return{eligible:!1,reason:`worker status is ${o||"unknown"}`};let a=oE(e,r,t);return!Number.isFinite(a)||a<n?{eligible:!1,reason:"terminal worker is still within archive grace window"}:{eligible:!0,reason:"terminal worker metadata archived"}}function vt(e,r=Date.now(),t=bn){for(let n of Ou(e))if(Nu(te.join(e,"workers",n),r,t))return!0;return!1}function iE(){return{repo:je()?.repo??"",base:"origin/main",baseCommit:"unknown"}}function aE(e,r){let t=te.join(ge(e),b(r));if(!Lr(t))return null;let n=Ou(t);if(n.length===0)return null;let o;try{o=Pu(t).birthtime.toISOString()}catch{o=new Date().toISOString()}let s={};for(let a of n){let l=Rr(e,r,a);s[a]={workerDir:l,statusPath:te.join(l,"worker.json")}}let i=vt(t);return{id:r,name:r,...iE(),status:i?"running":"needs_attention",createdAt:o,workers:s}}function sa(e){let r=le(e??fe()),t=ge(r),n=[];for(let o of Iu(t)){let s=te.join(t,o,"run.json");if(Lr(s)){n.push({runId:o,action:"skipped",reason:"run.json present"});continue}let i=aE(r,o);if(!i){n.push({runId:o,action:"skipped",reason:"no worker dirs on disk"});continue}Be(i),n.push({runId:o,action:"repaired_run_json",reason:vt(te.join(t,o))?"synthesized run.json while worker artifacts still active":"synthesized run.json from orphan worker metadata dirs"})}return{runs:n}}function ia(e,r={}){let t=le(e??fe()),n=ge(t),o=r.now??Date.now(),s=r.archiveAgeMs??Sh,i=[];sa(t);for(let a of Iu(n)){let l=te.join(n,a),c=te.join(l,"run.json"),u=w(c,void 0);if(!u?.id)continue;let d=new Set([...Object.keys(u.workers||{}),...Ou(l)]),m=!1;for(let p of d){let f=te.join(l,"workers",b(p)),h=te.join(f,"worker.json"),k=w(h,void 0);if(!k){let O=te.join(Ch(l),b(p));if(Lr(O)&&(u.workers[b(p)]||u.workers[p])){delete u.workers[b(p)],delete u.workers[p],m=!0,i.push({runId:u.id,worker:p,action:"archived",reason:"removed stale live index entry for archived worker metadata",archivePath:O});continue}i.push({runId:u.id,worker:p,action:"skipped",reason:"worker.json missing"});continue}let g=sE(f,k,o,s);if(!g.eligible){i.push({runId:u.id,worker:p,action:"skipped",reason:g.reason});continue}let R=nE(l,p);rE(te.dirname(R),{recursive:!0}),tE(f,R),delete u.workers[b(p)],delete u.workers[p],m=!0,i.push({runId:u.id,worker:p,action:"archived",reason:g.reason,archivePath:R})}m&&Be(u)}return{workers:i}}function Tu(e,r=Date.now()){let t=new Set,n=ge(e);for(let o of Iu(n)){let s=te.join(n,o);vt(s,r)&&t.add(`${e}\0${o}`)}return t}T();C();function pE(e,r){let t=_u(e,r),n;try{n=lE(t)}catch{return null}if(!n.isSymbolicLink())return null;let o=nr.resolve(nr.dirname(t),uE(t));if(vt(o)||vt(t))return null;let s=`${t}.materialize-${Date.now()}`;return Du(o,s),dE(t),Du(s,t),o}function mE(e){let r=[];for(let t of xu()){let n=nr.join(e.fromDir,t),o=nr.join(e.toDir,t);!Br(n)||Br(o)||(Du(n,o),r.push(t))}return r}function wh(e,r){let t=Rt(r),n=!1;return e.workerDir!==r&&(e.workerDir=r,n=!0),e.stdoutPath!==t.stdoutPath&&(e.stdoutPath=t.stdoutPath,n=!0),e.stderrPath!==t.stderrPath&&(e.stderrPath=t.stderrPath,n=!0),e.heartbeatPath!==t.heartbeatPath&&(e.heartbeatPath=t.heartbeatPath,n=!0),n}function fE(e){let r=typeof e.lastStatus?.status=="string"?e.lastStatus.status:void 0,t=e.lastStatus?.attention&&typeof e.lastStatus.attention=="object"?e.lastStatus.attention.state:void 0;return r==="done"||t==="done"||e.stdoutFinalResult||e.heartbeatFinalResult?"done":r==="blocked"?"blocked":r==="running"?"exited":r??"exited"}function gE(e){let r=Rt(e.canonicalDir),t=w(r.lastStatusPath,void 0),n=Br(r.stdoutPath),o=Br(r.heartbeatPath);if(!(n||o||t!=null))return null;let i=n?Ar(r.stdoutPath):{finalResult:null},a=o?ce(r.heartbeatPath):ce(""),l=ze(a),c=fE({lastStatus:t,stdoutFinalResult:i.finalResult,heartbeatFinalResult:l}),u={name:e.workerName,runId:e.run.id,status:c,branch:typeof t?.branch=="string"?t.branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:typeof t?.worktreePath=="string"?t.worktreePath:nr.join(Z().worktreesDir,e.run.id,e.workerName),workerDir:e.canonicalDir,stdoutPath:r.stdoutPath,stderrPath:r.stderrPath,heartbeatPath:r.heartbeatPath,startedAt:typeof t?.startedAt=="string"?t.startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"synthesized worker.json from on-disk artifacts after metadata repair"};return typeof t?.taskId=="string"&&(u.taskId=t.taskId),typeof t?.agentOsId=="string"&&(u.agentOsId=t.agentOsId),typeof t?.planId=="string"&&(u.planId=t.planId),typeof t?.pid=="number"&&(u.pid=t.pid),(i.finalResult||l)&&(u.completionSnapshot={finalResult:i.finalResult??l??"completed",summary:a.lastHeartbeatSummary}),wh(u,e.canonicalDir),u}function hE(e,r){let t=!1,n={...e.workers||{}};for(let[o,s]of Object.entries(n)){let i=Rr(r,e.id,o),a=nr.join(i,"worker.json");(yn(s.workerDir)||yn(s.statusPath)||s.workerDir!==i||s.statusPath!==a)&&(n[o]={workerDir:i,statusPath:a},t=!0)}return t&&(e.workers=n,Be(e)),t}function kE(e){let r=[],t=Rr(e.harnessRoot,e.run.id,e.workerName),n=kh(e.harnessRoot,e.run.id,e.workerName),o=Rt(t),s=mE({fromDir:n,toDir:t});s.length>0&&r.push({runId:e.run.id,worker:e.workerName,action:"relocated_artifacts",reason:`moved ${s.join(", ")} from nested runs/runs layout`});let i=Eu({harnessRoot:e.harnessRoot,runId:e.run.id,workerName:e.workerName,statusPath:e.statusPath}),a=w(i,void 0);if(!a&&Br(o.workerJsonPath)&&(a=w(o.workerJsonPath,void 0)),!a){let l=gE({run:e.run,workerName:e.workerName,canonicalDir:t,harnessRoot:e.harnessRoot});if(l)return K(e.run.id,l),r.push({runId:e.run.id,worker:e.workerName,action:"synthesized_worker_json",reason:l.reconcileReason??"synthesized from artifacts"}),r;let c=Br(t),u=xu().some(d=>Br(nr.join(t,d)));if(c&&!u){let d={name:e.workerName,runId:e.run.id,status:"exited",branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:nr.join(Z().worktreesDir,e.run.id,e.workerName),workerDir:t,stdoutPath:o.stdoutPath,stderrPath:o.stderrPath,heartbeatPath:o.heartbeatPath,startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"empty worker dir \u2014 marked abandoned during metadata reconcile"};return K(e.run.id,d),r.push({runId:e.run.id,worker:e.workerName,action:"marked_abandoned",reason:d.reconcileReason??"empty worker dir"}),r}return r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker.json missing and no recoverable artifacts"}),r}return wh(a,t)?(a.reconciledAt=new Date().toISOString(),a.reconcileReason=a.reconcileReason??"repaired nested runs/runs path fields",K(e.run.id,a),r.push({runId:e.run.id,worker:e.workerName,action:"repaired_worker_paths",reason:a.reconcileReason})):r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker metadata already canonical"}),r}function yE(e,r){let t=nr.join(x(e.id),"workers");if(!Br(t))return[];let n=new Set(Object.keys(e.workers||{})),o=[];for(let s of cE(t,{withFileTypes:!0}))s.isDirectory()&&(n.has(s.name)||o.push(s.name));return o}function aa(){let{harnessRoot:e}=Z(),r=sa(e),t=[];for(let n of X()){let o=pE(e,n.id);o&&t.push({runId:n.id,worker:"*",action:"materialized_run_symlink",reason:`replaced symlink with real run dir (was ${o})`}),hE(n,e)&&t.push({runId:n.id,worker:"*",action:"repaired_run_index",reason:"repaired nested runs/runs workerDir/statusPath entries in run.json"});let s=new Set(Object.keys(n.workers||{}));for(let i of yE(n,e))s.add(i),n.workers={...n.workers||{},[i]:{workerDir:Rr(e,n.id,i),statusPath:nr.join(Rr(e,n.id,i),"worker.json")}},Be(n),t.push({runId:n.id,worker:i,action:"repaired_run_index",reason:"indexed orphan worker dir into run.json"});for(let i of s){let a=n.workers?.[i];t.push(...kE({run:n,workerName:i,harnessRoot:e,statusPath:a?.statusPath}))}}return{workers:t,runMetadataRetention:r}}function RE(){let e=aa(),r=e.workers.reduce((n,o)=>(n[o.action]=(n[o.action]??0)+1,n),{}),t=e.runMetadataRetention.runs.reduce((n,o)=>(n[o.action]=(n[o.action]??0)+1,n),{});console.log(JSON.stringify({ok:!0,totals:r,runMetadataRetention:{totals:t,details:e.runMetadataRetention.runs},details:e.workers},null,2))}pr();Ws();z();T();zr();C();import{execFileSync as _h}from"node:child_process";import xh from"node:path";function Mu(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:null}function vE(e){let r=Mu(e)?.match(/\/pull\/(\d+)$/);if(!r)return null;let t=Number.parseInt(r[1],10);return Number.isFinite(t)?t:null}function bE(e){if(e==null)return"";if(typeof e=="string")return e;try{return JSON.stringify(e)}catch{return""}}function SE(e){let r=new Set;for(let t of e.matchAll(/github\.com\/[^/\s)>"']+\/[^/\s)>"']+\/(?:pull|pulls)\/(\d+)/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bPR\s*#?\s*(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bpr[-_]?(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}return[...r]}function CE(e){let r=null;if(typeof e=="string"?r=qt(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=Mu(String(s.prUrl??s.pr_url??"")),a=String(s.outcome??"").trim();!i||a!=="merged"||n.push({prUrl:i,mergeCommit:typeof s.mergeCommit=="string"?s.mergeCommit:typeof s.merge_commit=="string"?s.merge_commit:null,reason:typeof s.reason=="string"?s.reason:null})}return n}function wE(e){try{let n=_h("git",["config","--get","remote.origin.url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim().match(/github\.com[:/]([^/]+\/[^/.]+)(?:\.git)?$/i)?.[1];if(!n)return null;let o=_h("gh",["pr","view",String(e.prNumber),"--repo",n,"--json","state,mergedAt,mergeCommit,url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}),s=JSON.parse(o);return{prUrl:Mu(s.url??`https://github.com/${n}/pull/${e.prNumber}`)??`https://github.com/${n}/pull/${e.prNumber}`,state:s.state??"",mergedAt:s.mergedAt??null,mergeCommit:s.mergeCommit?.oid??null}}catch{return null}}function _E(e){let r=ce(e.heartbeatPath);return e.completionSnapshot?.finalResult??ze(r)}function xE(e){let r=new Map,t=x(e.id);for(let n of ke(e)){let o=w(xh.join(t,"workers",b(n),"worker.json"),void 0);if(o)for(let s of CE(_E(o))){let i=vE(s.prUrl);i!=null&&!r.has(i)&&r.set(i,s)}}return r}function EE(e,r){let t=ce(e.heartbeatPath),n=[e.name,e.repairTargetPrUrl,e.taskPrUrl,e.branch,t.lastHeartbeatSummary,bE(r)].filter(Boolean).join(`
+`);return SE(n)}function PE(e){return e.localOnly===!0&&!e.taskId&&!e.agentOsId}function la(e={}){let r=e.lookupPr??wE,t=[],n=new Map;for(let o of X()){let s=xE(o),i=x(o.id);for(let a of ke(o)){let l=xh.join(i,"workers",b(a),"worker.json"),c=w(l,void 0);if(!c||!PE(c))continue;let u=D(c,{base:o.base,baseCommit:o.baseCommit});if(u.attention.state!=="needs_attention")continue;let d=null;for(let p of EE(c,u.finalResult)){if(d=s.get(p)??null,!d){let f=o.repo||c.worktreePath,h=`${f}#${p}`,k=n.has(h)?n.get(h)??null:r({repoDir:f,prNumber:p});n.has(h)||n.set(h,k),k&&(k.state==="MERGED"||k.mergedAt)&&(d={prUrl:k.prUrl,mergeCommit:k.mergeCommit??null,reason:"GitHub reports PR merged"})}if(d)break}if(!d){t.push({runId:o.id,worker:a,action:"skipped",reason:"no merged PR evidence"});continue}let m=new Date().toISOString();c.status="done",c.completionSnapshot={prUrl:d.prUrl,summary:`Local-only worker superseded by merged PR ${d.prUrl}`,finalResult:{summary:`Local-only repair/salvage worker superseded by merged PR ${d.prUrl}`,targetPrReconciliation:[{prUrl:d.prUrl,outcome:"merged",mergeCommit:d.mergeCommit??null,reason:d.reason??"PR already merged; local-only worker no longer requires attention"}]}},c.completionAckSource="local-pr-merged-reconcile",c.reconciledAt=m,c.reconcileReason="local-only needs_attention superseded by merged PR",K(o.id,c),t.push({runId:o.id,worker:a,action:"marked_done",reason:c.reconcileReason,prUrl:d.prUrl,mergeCommit:d.mergeCommit??null})}}return{workers:t}}var IE=900*1e3;function OE(){return process.env.KYNVER_NO_STALE_CLEANUP==="1"}function Eh(e,r){let t=uu({worker:e,status:r}),n=t?du(e,t):!1,o=r.attention.state==="blocked"?"blocked":r.attention.state==="done"||r.status==="done"||t?"done":"exited",s=t&&n?`captured exited-worker handoff (${t.source})`:t?"synced finished worker record after terminal stdout/heartbeat":r.attention.reason;return{nextStatus:o,reason:s,handoffCaptured:n}}function Sn(){let e=aa();if(OE()){let s=la(),i=ia();return{workers:[],finalizedRuns:Ho(),metadataReconcile:e,localPrAttentionReconcile:s,terminalWorkerArchive:i}}let r=[],t=Date.now();for(let s of X())for(let i of ke(s)){let a=AE.join(x(s.id),"workers",b(i),"worker.json"),l=w(a,void 0);if(!l||l.status!=="running"){r.push({runId:s.id,worker:i,action:"skipped",reason:l?`worker status is ${l.status}`:"worker.json missing"});continue}let c=D(l,{base:s.base,baseCommit:s.baseCommit});if(c.finalResult){if(l.status==="running"){let u=Eh(l,c);l.status=u.nextStatus,l.reconciledAt=new Date().toISOString(),l.reconcileReason=u.reason,K(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:l.reconcileReason})}else r.push({runId:s.id,worker:i,action:"skipped",reason:"final result present"});continue}if(!c.alive){let u=Eh(l,c);l.status=u.nextStatus,l.reconciledAt=new Date().toISOString(),l.reconcileReason=u.reason,K(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:c.attention.reason});continue}if(c.attention.state==="stale"&&l.pid&&H(l.pid)){let u=c.lastHeartbeatAt?Date.parse(c.lastHeartbeatAt):NaN,d=c.lastActivityAt?Date.parse(c.lastActivityAt):NaN,m=!Number.isFinite(u)||t-u>IE,p=Number.isFinite(d)&&t-d>Xt;if(m&&p){Er(l.pid,"SIGTERM"),l.status="exited",l.reconciledAt=new Date().toISOString(),l.reconcileReason=`reconciled stale worker: ${c.attention.reason}`,K(s.id,l),r.push({runId:s.id,worker:i,action:"killed_stale",reason:c.attention.reason});continue}}r.push({runId:s.id,worker:i,action:"skipped",reason:c.attention.reason})}let n=la(),o=ia();return{workers:r,finalizedRuns:Ho(),metadataReconcile:e,localPrAttentionReconcile:n,terminalWorkerArchive:o}}function Uu(){let e=Sn(),r=e.workers.filter(l=>l.action==="marked_exited").length,t=e.workers.filter(l=>l.action==="killed_stale").length,n=e.workers.filter(l=>l.action==="skipped").length,o=e.metadataReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),s=e.localPrAttentionReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),i=e.metadataReconcile.runMetadataRetention.runs.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),a=e.terminalWorkerArchive.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{});console.log(JSON.stringify({ok:!0,workers:{markedExited:r,killedStale:t,skipped:n,total:e.workers.length},metadataReconcile:{totals:o,total:e.metadataReconcile.workers.length,runMetadataRetention:{totals:i,total:e.metadataReconcile.runMetadataRetention.runs.length}},localPrAttentionReconcile:{totals:s,total:e.localPrAttentionReconcile.workers.length},terminalWorkerArchive:{totals:a,total:e.terminalWorkerArchive.workers.length},finalizedRuns:e.finalizedRuns.length,details:{workers:e.workers,metadataReconcile:e.metadataReconcile.workers,localPrAttentionReconcile:e.localPrAttentionReconcile.workers,terminalWorkerArchive:e.terminalWorkerArchive.workers,runMetadataRetention:e.metadataReconcile.runMetadataRetention.runs,finalizedRuns:e.finalizedRuns}},null,2))}z();C();function DE(e){if(!e||!NE(e))return 0;try{return TE(e,"utf8").trim().length}catch{return 0}}function ME(e,r){let t=Ph.join(x(e.id),"workers",b(r),"worker.json"),n=w(t,void 0);if(!n)return{worker:r,workerStatus:"missing",attention:"needs_attention",attentionReason:"worker.json missing",missingHeartbeat:!0,missingFinalResult:!0,landingBlocked:!1,completionBlocked:!1};let o=D(n,{base:e.base,baseCommit:e.baseCommit}),s=DE(n.heartbeatPath)===0,i=!o.finalResult&&!o.alive,a=typeof n.completionBlocker=="string"&&n.completionBlocker.length>0;return{worker:r,workerStatus:n.status,attention:o.attention.state,attentionReason:o.attention.reason,missingHeartbeat:s,missingFinalResult:i,landingBlocked:et(o),completionBlocked:a}}function UE(e){return e.openWorkerCount>0?"active_workers":e.workers.some(r=>r.completionBlocked)?"completion_blocked":e.workers.some(r=>r.landingBlocked)?"landing_blocked":null}function WE(e){let r={blocked:5,needs_attention:4,stale:3,done:2,ok:1},t="ok",n;for(let o of e){let s=o.attention;(r[s]??0)>=(r[t]??0)&&(t=s,n=o.attentionReason)}return{attention:t,attentionReason:n}}function LE(e){let r=0;for(let t of ke(e)){let n=Ph.join(x(e.id),"workers",b(t),"worker.json"),o=w(n,void 0);if(!o)continue;let s=D(o,{base:e.base,baseCommit:e.baseCommit});s.alive&&!s.finalResult&&(r+=1)}return r}function Cn(){return Sn(),X().map(e=>{let t=ke(e).map(d=>ME(e,d)),n=t.filter(d=>d.missingHeartbeat).map(d=>d.worker),o=t.filter(d=>d.missingFinalResult).map(d=>d.worker),s=t.filter(d=>d.landingBlocked).map(d=>d.worker),i=t.filter(d=>d.completionBlocked).map(d=>d.worker),{attention:a,attentionReason:l}=WE(t),c=LE(e),u=Qt(e.status,t.map(d=>({attention:d.attention,status:d.workerStatus})));return{id:e.id,name:e.name,status:e.status,effectiveStatus:u,repo:e.repo,createdAt:e.createdAt,openWorkerCount:c,attention:a,attentionReason:l,finalizeBlockedReason:UE({run:e,workers:t,openWorkerCount:c}),evidence:{missingHeartbeatWorkers:n,missingFinalResultWorkers:o,landingBlockedWorkers:s,completionBlockedWorkers:i,workers:t}}})}function Wu(){console.log(JSON.stringify(Cn(),null,2))}C();function KE(e){let r=typeof e.repo=="string"?e.repo.trim():"";if(r)return r;let t=je();return t?t.repo:(N("","--repo (or set defaultRepo via `kynver setup` / KYNVER_DEFAULT_REPO)"),"")}function Fo(e){let r=Fc(KE(e));bp(r);let t=e.id?Co(String(e.id)):mp(String(e.name||"run")),n=x(t);BE(n)&&$E(`run already exists: ${t}`),HE(n,{recursive:!0});let o=String(e.base||"origin/main"),s=me(r,["rev-parse",o]).trim(),i={id:t,name:String(e.name||t),repo:r,base:o,baseCommit:s,status:"created",createdAt:new Date().toISOString(),workers:{}};ae(FE.join(n,"run.json"),i);let a={runId:t,runDir:n,repo:r,base:o,baseCommit:s};return console.log(JSON.stringify(a,null,2)),a}function Lu(){Wu()}function $E(e){console.error(e),process.exit(1)}C();function Ah(e){let r=e.trim();return r?Cn().find(n=>n.name===r&&n.status!=="completed")??null:null}function Bu(e){let r=String(N(String(e.name||""),"--name")),t=Ah(r);console.log(JSON.stringify({runId:t?.id??null,name:r,status:t?.status??null,effectiveStatus:t?.effectiveStatus??null},null,2))}Zt();I();import jE from"node:path";T();z();C();async function wn(e){let r=e.pipeline===!0||e.pipeline==="true";try{let t=L(String(N(String(e.run||""),"--run"))),n=String(N(String(e.agentOsId||""),"--agent-os-id")),o=V(e.baseUrl?String(e.baseUrl):void 0),s=await J(e.secret?String(e.secret):void 0,n,{baseUrl:o}),i=er({runId:t.id}).runnerId,a=await vg({run:t.id,agentOsId:n,...e},"run_sweep"),l=[];for(let m of Object.keys(t.workers||{})){let p=w(jE.join(x(t.id),"workers",b(m),"worker.json"),void 0);if(!p||!p.dispatched||!p.taskId)continue;let f=D(p);if(f.alive||f.finalResult||p.completionReportedAt)continue;let h=yi({runId:t.id,workerLeaseOwner:p.leaseOwner??null,runnerId:i}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(String(p.taskId))}/release`,g;try{g=await re(k,s,{agentOsId:n,leaseOwner:h},{agentOsId:n,baseUrl:o})}catch(R){g={ok:!1,error:R.message}}l.push({worker:m,taskId:p.taskId,pid:p.pid,released:g.ok===!0||g.response?.ok===!0,response:g.response??g})}let c=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/reap`,u;try{u=await re(c,s,{agentOsId:n,...Number(e.graceMs)>=0&&e.graceMs!==void 0&&e.graceMs!==!0?{graceMs:Math.floor(Number(e.graceMs))}:{}},{agentOsId:n,baseUrl:o})}catch(m){u={ok:!1,error:m.message}}let d={runId:t.id,agentOsId:n,snapshotPublished:a,releasedLocalOrphans:l,reap:u.response??u};if(r)return{ok:!0,...d};console.log(JSON.stringify(d,null,2))}catch(t){if(r)return{ok:!1,error:t.message};console.error(`run sweep failed: ${t.message}`),process.exit(1)}}I();Vn();Ce();Ce();import{existsSync as XE,readdirSync as Oh,statSync as QE}from"node:fs";import ZE from"node:path";import{execFileSync as VE}from"node:child_process";import{existsSync as Ih,readdirSync as GE,statSync as YE}from"node:fs";import JE from"node:path";var qE=2500;function zE(e,r=qE){if(!Ih(e))return 0;try{let n=VE("du",["-sb",e],{encoding:"utf8",timeout:r,stdio:["ignore","pipe","ignore"]}).trim().split(/\s+/)[0],o=Number(n);return Number.isFinite(o)&&o>=0?o:null}catch{return null}}function vr(e,r=5e4){if(!Ih(e))return 0;let t=zE(e);if(t!==null)return t;let n=0,o=0,s=[e];for(;s.length>0;){let i=s.pop(),a;try{a=GE(i)}catch{continue}for(let l of a){if(o++>r)return null;let c=JE.join(i,l),u;try{u=YE(c)}catch{continue}u.isDirectory()?s.push(c):n+=u.size}}return n}function Hu(e={}){let r=le(e.harnessRoot??fe()),t=dr(r),n=e.now??Date.now(),o=new Date(n).toISOString();if(!XE(t))return{harnessRoot:r,worktreesDir:t,worktreesBytes:0,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o};let s=0,i=0,a=0,l=null,c;try{c=Oh(t,{withFileTypes:!0})}catch{return{harnessRoot:r,worktreesDir:t,worktreesBytes:null,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o}}for(let u of c){if(!u.isDirectory())continue;i+=1;let d=ZE.join(t,u.name);try{let m=QE(d);l=l===null?m.mtimeMs:Math.min(l,m.mtimeMs)}catch{}try{for(let m of Oh(d,{withFileTypes:!0}))m.isDirectory()&&(a+=1)}catch{}if(s!==null&&e.perRunEntryCap!==null){let m=e.perRunEntryCap??5e4;if(m<=0)s=null;else{let p=vr(d,m);p===null?s=null:s+=p}}}return{harnessRoot:r,worktreesDir:t,worktreesBytes:s,runCount:i,workerCount:a,oldestRunAt:l===null?null:new Date(l).toISOString(),scannedAt:o}}Ce();import Ue from"node:path";eo();import pa from"node:path";Pe();z();var ca=[".next",".turbo","dist","build",".cache","node_modules/.cache"];function Fu(e){let r=e.replace(/\\/g,"/").replace(/\/+$/,"");if(r==="node_modules"||r.startsWith("node_modules/"))return!0;for(let t of ca)if(r===t||r.startsWith(`${t}/`))return!0;return!1}function Te(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return!Fu(n)})}function bt(e){if(typeof e=="string")return e.match(/https:\/\/github\.com\/[^\s]+\/pull\/\d+/i)?.[0]??null;if(e&&typeof e=="object"){let r=e;for(let t of["prUrl","pr_url","pullRequestUrl"]){let n=r[t];if(typeof n=="string"&&n.trim())return n.trim()}}return null}function Ko(e){let r=e.gitAncestry?.relation;return r==="merged"||r==="synced"?Te(e.changedFiles).length>0:!!(bt(e.finalResult)||r==="ahead"||r==="diverged"||e.changedFiles.length>0&&e.finalResult)}C();function $o(e){return e.status||(e.status=D(e.worker,{base:e.run.base,baseCommit:e.run.baseCommit})),e.status}function Ku(e,r){if(e.status)return Te(e.status.changedFiles).length>0;let t=r?r.porcelain(e.worktreePath):$n(e.worktreePath);return Te(t).length>0}function eP(e){let r=e.worker.completionSnapshot?.finalResult;return r??(e.worker.taskPrUrl?{prUrl:e.worker.taskPrUrl}:null)}function $u(e,r){if(e.status)return e.status;let t=e.worker,n=typeof t.completionReportedAt=="string"&&t.completionReportedAt.trim().length>0,o=!!(t.status&&["done","exited","blocked","failed","abandoned"].includes(t.status))||n,s=eP(e);if(o&&!H(t.pid)){let i=r?.gitStatusCache?r.gitStatusCache.porcelain(e.worktreePath):$n(e.worktreePath),a=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main",c=r?.gitRevCache?.countAheadOfMain(e.worktreePath,a)===0?{checked:!0,base:a,relation:"synced"}:bs(e.worktreePath,{base:e.run.base,baseCommit:e.run.baseCommit}),u={runId:e.runId,worker:e.workerName,pid:t.pid,alive:!1,status:t.status??(n?"done":"exited"),attention:{state:n?"done":"stale"},branch:t.branch,worktreePath:e.worktreePath,ownedPaths:t.ownedPaths,stdoutBytes:0,stderrBytes:0,heartbeatBytes:0,firstEventAt:null,lastEventAt:null,lastActivityAt:t.completionReportedAt??null,currentTool:null,heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,heartbeatBlocker:null,changedFiles:i,gitAncestry:c,finalResult:s,completionBlocker:typeof t.completionBlocker=="string"&&t.completionBlocker.trim()||null,prUrl:t.repairTargetPrUrl??t.taskPrUrl??bt(s)};return e.status=u,u}return $o(e)}z();z();pr();C();function ju(e,r=Date.now(),t=bn){let n=ce(e.heartbeatPath);if(!n.lastHeartbeatAt)return!1;let o=r-Date.parse(n.lastHeartbeatAt);return Number.isFinite(o)&&o>=0&&o<t}function ua(e,r=Date.now(),t=bn){return H(e.pid)?!0:ju(e,r,t)}function rP(e,r){return r?r.runTerminalCache.derive(e.run):yt(e.run)}function br(e,r=Date.now()){return ua(e.worker,r)}function Vu(e,r){return yr.has(e.run.status)?!1:rP(e,r)!==null}function Nh(e,r,t=Date.now()){if(br(e,t))return!0;if(yr.has(e.run.status)||Vu(e,r))return!1;let n=$o(e);return oe(n)?!1:!!br(e,t)}eo();z();function Th(e,r){if(!(typeof e.worker.completionBlocker=="string"?e.worker.completionBlocker.trim():""))return!1;if(br(e))return!0;let n=r??$o(e);return!!(!oe(n)||Ko(n)||Te(n.changedFiles).length>0||Qr({finalResult:n.finalResult,changedFiles:n.changedFiles,gitAncestry:n.gitAncestry,prUrl:bt(n.finalResult)}).blocked)}Pe();C();import{existsSync as Mh,mkdirSync as tP,writeFileSync as Dh}from"node:fs";import da from"node:path";function Uh(e,r,t){return da.join(e,"salvage",b(r),b(t))}function Wh(e){return Mh(da.join(Uh(e.harnessRoot,e.runId,e.workerName),"evidence.json"))}function Lh(e){let r=Uh(e.harnessRoot,e.indexed.runId,e.indexed.workerName);tP(r,{recursive:!0});let t=da.join(r,"salvage.patch"),n=!1;if(Mh(e.indexed.worktreePath)){let s=ne(e.indexed.worktreePath,["diff","HEAD"]),i=ne(e.indexed.worktreePath,["diff","--cached"]),a=[s.stdout,i.stdout].filter(l=>l.trim()).join(`
+`);a.trim()&&(Dh(t,a.endsWith(`
 `)?a:`${a}
-`),n=!0)}let o={capturedAt:new Date(e.now??Date.now()).toISOString(),skipReason:e.skipReason,runId:e.indexed.runId,workerName:e.indexed.workerName,worktreePath:e.indexed.worktreePath,taskId:e.indexed.worker.taskId,agentOsId:e.indexed.worker.agentOsId,branch:e.indexed.worker.branch,completionBlocker:e.indexed.worker.completionBlocker,finalResult:e.status.finalResult,changedFiles:e.status.changedFiles,gitAncestry:e.status.gitAncestry,prUrl:e.status.prUrl??null,...n?{patchPath:t}:{}};return wh(sa.join(r,"evidence.json"),`${JSON.stringify(o,null,2)}
-`),o}var VE=new Set(["completion_blocked","dirty_worktree","pr_or_unmerged_commits","landing_blocked"]);function GE(e){return!VE.has(e.skipReason)||Rr(e.indexed,e.now)?!1:Eh({harnessRoot:e.harnessRoot,runId:e.indexed.runId,workerName:e.indexed.workerName})?!0:e.writeSalvageEvidence?(Ph({harnessRoot:e.harnessRoot,indexed:e.indexed,skipReason:e.skipReason,status:e.status,now:e.now}),!0):!1}function YE(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,terminalWorktreesAgeMs:o}=e;return r?hr.has(r.run.status)||e.liveness&&Du(r,e.liveness)||e.liveness&&oe(Nu(r,e.liveness))&&!Rr(r)?o:n:t?o:n}function JE(e,r){if(e.harnessRoot?.trim())return ia.resolve(e.harnessRoot);let t=r.worker.workerDir;if(!t)return null;let n=`${ia.sep}runs${ia.sep}`,o=t.indexOf(n);return o<0?null:t.slice(0,o+n.length-1)}function Ah(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,ageMs:o,orphanSafety:s,worktreeRemovalGuard:i}=e,a=e.now??Date.now();if(!r)return t?s??null:"orphan_without_flag";let l=YE(e);if(n<=0&&!t&&l<=0)return"worktrees_disabled";if(l>0&&o<l)return"below_age_threshold";if(Rr(r,a))return"active_worker";let c=Nu(r,e.liveness),u=JE(e,r),d=m=>u&&GE({indexed:r,harnessRoot:u,skipReason:m,status:c,now:a,writeSalvageEvidence:e.writeSalvageEvidence===!0})?null:m;if(Ch(r,c)){let m=d("completion_blocked");if(m)return m}if(Ou(r,e.liveness?.gitStatusCache)){let m=d("dirty_worktree");if(m)return m}let f=e.liveness?.gitRevCache?.countAheadOfMain(e.worktreePath);if(f!=null&&f>0){let m=d("pr_or_unmerged_commits");if(m)return m}if(Sh(r,e.liveness,a)||!oe(c))return"run_still_active";if(Ho(c)){let m=d("pr_or_unmerged_commits");if(m)return m}if(Te(c.changedFiles).length>0){let m=d("dirty_worktree");if(m)return m}if(Xr({finalResult:c.finalResult,changedFiles:c.changedFiles,gitAncestry:c.gitAncestry,prUrl:yt(c.finalResult)}).blocked){let m=d("landing_blocked");if(m)return m}if(i&&e.worktreePath){let m=i({worktreePath:e.worktreePath,indexed:!!r,runId:r?.runId,worker:r?.workerName});if(m)return m.detail?{reason:m.reason,detail:m.detail}:m.reason}return null}function Mu(e){let{indexed:r,nodeModulesAgeMs:t,ageMs:n,worktreePath:o,activeWorktreePaths:s,diskPressure:i}=e;return!i&&n<t?"below_age_threshold":s.has(ia.resolve(o))||r&&Rr(r)?"active_worker":r&&Ou(r,e.gitStatusCache)?"dirty_worktree":null}function Ih(e){return Mu(e)}var Ko=216e5,$o=6048e5,aa=216e5,la=36e5,ca=120;var Oh=new Set(["active_worker","run_still_active","completion_blocked","landing_blocked"]);function Nh(e,r){let t=[],n=new Set,o=(s,i,a)=>{let l=`${s}\0${i}`;n.has(l)||t.length>=24||(n.add(l),t.push({path:s,reason:i,...a?{detail:a}:{}}))};for(let s of r)Oh.has(s.reason)&&o(s.path,s.reason,s.detail);for(let s of e)!s.skipped||!s.skipReason||Oh.has(s.skipReason)&&o(s.path,s.skipReason);return t}import{existsSync as Uh,readdirSync as Wh,statSync as XE}from"node:fs";import Lh from"node:path";T();Ce();import Th from"node:path";C();function zE(e,r){return oa(e,r)}function Dh(e,r=Date.now()){let t=new Set,n=new Set;for(let o of e){for(let s of Ps(o)){let i=!1;for(let a of Object.keys(s.workers||{})){let l=w(Th.join(Gn(o,s.id),"workers",b(a),"worker.json"),void 0);if(!l?.worktreePath)continue;let c=Th.resolve(l.worktreePath);zE(l,r)&&(i=!0,t.add(c))}i&&n.add(`${o}\0${s.id}`)}for(let s of Su(o))n.add(s)}return{activeWorktreePaths:t,liveRunKeys:n}}function Mh(e,r,t,n){return t?n.has(`${r}\0${t}`):!1}C();function QE(e,r){try{let t=XE(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function ZE(e,r){let t=Lh.join(e,"runs",r,"run.json");return Uh(t)?w(t,null):null}function Bh(e){try{return Wh(e).length===0}catch{return!1}}function Hh(e){let{harnessRoot:r,runId:t,runPath:n,ageMs:o,runDirectoriesAgeMs:s,activeGuards:i}=e;if(Mh(n,r,t,i.liveRunKeys)||!Bh(n))return"run_still_active";let a=ZE(r,t);return a&&!hr.has(a.status)&&!gt(a)?"run_still_active":s>0&&o<s?"below_age_threshold":null}function Fh(e){if(!Uh(e.worktreesDir))return[];let r=[],t;try{t=Wh(e.worktreesDir,{withFileTypes:!0})}catch{return[]}for(let n of t){if(!n.isDirectory())continue;let o=n.name;if(e.runIdFilter&&o!==e.runIdFilter)continue;let s=Lh.join(e.worktreesDir,o);Bh(s)&&r.push({kind:"remove_run_directory",path:s,bytes:null,harnessRoot:e.harnessRoot,runId:o,ageMs:QE(s,e.now)})}return r}Pe();import{existsSync as Wu,rmSync as Xh}from"node:fs";import{existsSync as nP,rmSync as oP}from"node:fs";Ce();import{lstatSync as eP,readdirSync as rP}from"node:fs";function Kh(e){try{let r=eP(e),t=typeof process.getuid=="function"?process.getuid():null,n=typeof process.getgid=="function"?process.getgid():null,o=t!==null&&(r.uid!==t||n!==null&&r.gid!==n);return{uid:r.uid,gid:r.gid,foreign:o}}catch{return null}}function $h(e,r=32){let t=Kh(e);if(!t)return!1;if(t.foreign)return!0;try{let n=rP(e),o=0;for(let s of n){if(o>=r)break;let i=`${e.replace(/\/$/,"")}/${s}`,a=Kh(i);if(o+=1,a?.foreign)return!0}}catch{}return!1}import{spawnSync as tP}from"node:child_process";import Gh from"node:path";import De from"node:path";function jh(e,r,t,n){let o=De.resolve(e),s=`${De.sep}${n}`,i=o.endsWith(s)?o:null;if(!i)return"path_outside_harness";let a=De.relative(t,i);if(a.startsWith("..")||De.isAbsolute(a))return"path_outside_harness";let l=a.split(De.sep);return l.length<3||l[l.length-1]!==n||!o.startsWith(De.resolve(r))?"path_outside_harness":null}function ua(e,r,t){return jh(e,r,t,"node_modules")}function da(e,r,t){return jh(e,r,t,".next")}function pa(e,r,t){let n=De.resolve(e),o=De.relative(t,n);return o.startsWith("..")||De.isAbsolute(o)||o.split(De.sep).length<3||!n.startsWith(De.resolve(r))?"path_outside_harness":null}function Vh(e,r,t){let n=De.resolve(e);return ua(n,r,t)===null||da(n,r,t)===null||pa(n,r,t)===null}function Jh(){let e=(process.env.KYNVER_CLEANUP_PRIVILEGED??"auto").trim().toLowerCase();return e==="0"||e==="false"||e==="off"||e==="no"?"off":e==="1"||e==="true"||e==="force"||e==="yes"?"force":"auto"}function Yh(e){let r=tP("sudo",["-n",...e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});return{ok:r.status===0,stderr:`${r.stderr??""}${r.stdout??""}`.trim()}}function qh(e,r,t){if(!Vh(e,r,t))return{ok:!1,error:"path is not an allowed harness generated cache"};let n=typeof process.getuid=="function"?process.getuid():null,o=typeof process.getgid=="function"?process.getgid():null;if(n===null||o===null)return{ok:!1,error:"privileged reclaim requires POSIX uid/gid"};let s=Yh(["chown","-R",`${n}:${o}`,Gh.resolve(e)]);if(s.ok)return{ok:!0,method:"chown_then_rm"};let i=Yh(["rm","-rf",Gh.resolve(e)]);return i.ok?{ok:!0,method:"sudo_rm"}:{ok:!1,error:s.stderr||i.stderr||"sudo -n failed (password required or not permitted)"}}var Uu="Root-owned harness caches require operator reclaim: configure passwordless sudo for chown/rm under ~/.kynver/harness/worktrees, or run `node scripts/reclaim-harness-root-owned-cache.mjs --execute` as the harness owner with sudo available. See docs/runbooks/harness-root-owned-cache-reclaim.md.";function sP(e){let r=e?.code;return r==="EACCES"||r==="EPERM"}function zh(e,r,t={}){if(!nP(e.path))return{executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.harnessRoot,o=n?ur(n):null,i=e.bytes??yr(e.path)??void 0,a=t.removePath??oP,l=t.hasForeignOwnedEntry??$h;try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i}}catch(c){if(!sP(c)||!n||!o)return{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let u=l(e.path),d=Jh();if(!(d==="force"||d==="auto"&&u))return u?{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; ${Uu}`}:{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let p=qh(e.path,n,o);if(p.ok&&p.method==="sudo_rm")return{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0};if(p.ok)try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0}}catch(m){return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${m.message}; privileged chown succeeded but rm still failed`}}return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; privileged reclaim failed: ${p.error}; ${Uu}`}}}function Lu(e){let r=e.harnessRoot;return!r||!yu(e.path,r)?null:{...e,executed:!1,skipped:!0,skipReason:"run_metadata_protected"}}function Bu(e,r){let t=Lu(e);if(t)return t;let n=zh(e,r);return{...e,bytes:n.bytes??e.bytes,executed:n.executed,skipped:n.skipped,skipReason:n.skipReason,error:n.error}}function Qh(e,r){return Bu(e,r)}function Zh(e,r){return Bu(e,r)}function ek(e,r){return Bu(e,r)}function rk(e,r){let t=Lu(e);if(t)return t;if(!Wu(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};try{let n=e.bytes??yr(e.path);return Xh(e.path,{recursive:!0,force:!0}),{...e,bytes:n,executed:!0,skipped:!1}}catch(n){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:n.message}}}function tk(e,r){let t=Lu(e);if(t)return t;if(!Wu(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.repo;try{let o=e.bytes??yr(e.path);return n&&pe(n,["worktree","remove","--force",e.path],{allowFailure:!0}),Wu(e.path)&&Xh(e.path,{recursive:!0,force:!0}),{...e,bytes:o,executed:!0,skipped:!1}}catch(o){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:o.message}}}import{existsSync as ma,readdirSync as fa,statSync as iP}from"node:fs";import nr from"node:path";function Hu(e,r){try{let t=iP(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function ok(e,r){let t=nr.relative(r,e);return t===""||!t.startsWith("..")&&!nr.isAbsolute(t)}function nk(e,r,t,n){let o=[];for(let s of na){if(s===".next")continue;let i=nr.join(e,s);if(!ma(i))continue;let a=nr.resolve(i);t.has(a)||ok(a,r.harnessRoot)&&(t.add(a),o.push({kind:"remove_build_cache",path:a,bytes:null,runId:n.runId,worker:n.worker,repo:n.repo,ageMs:Hu(a,r.now)}))}return o}function sk(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||r.push(...nk(n.worktreePath,e,t,{runId:n.runId,worker:n.workerName,repo:n.run.repo}));if(!e.includeOrphans||!ma(e.worktreesDir))return r;for(let n of fa(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory())continue;let o=nr.join(e.worktreesDir,n.name);for(let s of fa(o,{withFileTypes:!0})){if(!s.isDirectory())continue;let i=nr.join(o,s.name);r.push(...nk(i,e,t,{runId:n.name,worker:s.name}))}}return r}function ik(e){let r=e.worktreesAgeMs>0||e.includeOrphans,t=e.includeOrphans;if(!r&&!t)return[];let n=[],o=new Set;if(r)for(let i of e.index.values()){if(e.runIdFilter&&i.runId!==e.runIdFilter)continue;let a=i.worktreePath;ma(a)&&(o.has(a)||(o.add(a),n.push({kind:"remove_worktree",path:a,bytes:null,runId:i.runId,worker:i.workerName,repo:i.run.repo,ageMs:Hu(a,e.now)})))}if(!t||!ma(e.worktreesDir))return n;let s=new Set;for(let i of e.index.values())s.add(nr.resolve(i.worktreePath));for(let i of fa(e.worktreesDir,{withFileTypes:!0})){if(!i.isDirectory()||e.runIdFilter&&i.name!==e.runIdFilter)continue;let a=nr.join(e.worktreesDir,i.name),l;try{l=fa(a,{withFileTypes:!0})}catch{continue}for(let c of l){if(!c.isDirectory())continue;let u=nr.resolve(nr.join(a,c.name));o.has(u)||s.has(u)||ok(u,e.harnessRoot)&&(o.add(u),n.push({kind:"remove_worktree",path:u,bytes:null,runId:i.name,worker:c.name,ageMs:Hu(u,e.now)}))}}return n}import{existsSync as ck,readdirSync as ak,statSync as aP}from"node:fs";import Sn from"node:path";var lP=[{dirName:"node_modules",kind:"remove_node_modules"},{dirName:".next",kind:"remove_next_cache"}];function cP(e,r){try{let t=aP(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function uP(e,r){let t=Sn.relative(r,e);return t===""||!t.startsWith("..")&&!Sn.isAbsolute(t)}function dP(e,r,t,n,o,s){if(!ck(n))return;let i=Sn.resolve(n);r.has(i)||uP(i,t.harnessRoot)&&(r.add(i),e.push({kind:o,path:i,bytes:null,harnessRoot:t.harnessRoot,runId:s.runId,worker:s.worker,repo:s.repo,ageMs:cP(i,t.now)}))}function lk(e,r,t,n,o){for(let s of lP)dP(e,r,t,Sn.join(n,s.dirName),s.kind,o)}function uk(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||lk(r,t,e,n.worktreePath,{runId:n.runId,worker:n.workerName,repo:n.run.repo});if(!e.includeOrphans||!ck(e.worktreesDir))return r;for(let n of ak(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory()||e.runIdFilter&&n.name!==e.runIdFilter)continue;let o=Sn.join(e.worktreesDir,n.name),s;try{s=ak(o,{withFileTypes:!0})}catch{continue}for(let i of s){if(!i.isDirectory())continue;let a=Sn.join(o,i.name);lk(r,t,e,a,{runId:n.name,worker:i.name})}}return r}Pe();import{existsSync as dk,statSync as pP}from"node:fs";import or from"node:path";function mP(e,r){try{let t=pP(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function fP(e){let r=[],t=null;for(let n of e.split(`
-`)){if(!n.trim())continue;let[o,...s]=n.split(" "),i=s.join(" ");if(o==="worktree"){t&&r.push(t),t={path:i};continue}t&&(o==="branch"&&(t.branch=i),o==="HEAD"&&(t.head=i),o==="bare"&&(t.bare=!0))}return t&&r.push(t),r}function gP(e,r){let t=or.relative(or.resolve(r),or.resolve(e));return t!==""&&!t.startsWith("..")&&!or.isAbsolute(t)}var hP=200;function pk(e){if(!e.includeOrphans||!dk(e.worktreesDir))return[];let r=new Set;for(let s of e.index.values())s.run.repo&&r.add(or.resolve(s.run.repo));let t=new Set;for(let s of e.index.values())t.add(or.resolve(s.worktreePath));let n=[],o=new Set;for(let s of r){let i=0,a;try{a=pe(s,["worktree","list","--porcelain"],{allowFailure:!0})}catch{continue}let l=fP(a);for(let c of l){if(i>=hP)break;let u=or.resolve(c.path);if(u===or.resolve(s)||!gP(u,e.worktreesDir)||t.has(u)||o.has(u)||!dk(u))continue;let f=or.relative(e.worktreesDir,u).split(or.sep),p=f[0],m=f[1]??"unknown";o.add(u),i+=1,n.push({kind:"remove_worktree",path:u,bytes:null,runId:p,worker:m,repo:s,ageMs:mP(u,e.now)})}}return n}T();C();import jo from"node:path";function mk(e,r){let t=jo.resolve(r),n=new Map;for(let[o,s]of e){let i=s.harnessRoot?jo.resolve(s.harnessRoot):null;i&&i!==t||n.set(o,s)}return n}function fk(e){let r=new Map;for(let t of Ps(e))for(let n of Object.keys(t.workers||{})){let o=jo.join(Gn(e,t.id),"workers",b(n),"worker.json"),s=w(o,void 0);s?.worktreePath&&r.set(jo.resolve(s.worktreePath),{harnessRoot:e,worktreePath:jo.resolve(s.worktreePath),runId:t.id,workerName:n,run:t,worker:s})}return r}function Vo(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function Rt(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?n:r}function Fu(e={}){let r=e.execute===!0||e.execute!==!1&&Vo("KYNVER_CLEANUP_EXECUTE"),t=e.finalizeStaleRuns!==!1&&!Vo("KYNVER_CLEANUP_SKIP_FINALIZE"),n=e.nodeModulesAgeMs??Rt("KYNVER_CLEANUP_NODE_MODULES_AGE_MS",216e5),o=e.scanDependencyCaches??(e.nodeModulesAgeMs!==void 0||process.env.KYNVER_CLEANUP_NODE_MODULES_AGE_MS!=null),s=e.worktreesAgeMs??Rt("KYNVER_CLEANUP_WORKTREES_AGE_MS",0),i=e.terminalWorktreesAgeMs??Rt("KYNVER_CLEANUP_TERMINAL_WORKTREES_AGE_MS",216e5),a=e.runDirectoriesAgeMs??Rt("KYNVER_CLEANUP_RUN_DIRECTORIES_AGE_MS",36e5),l=e.maxActionsPerSweep??Rt("KYNVER_CLEANUP_MAX_ACTIONS_PER_SWEEP",120),c=e.includeOrphans===!0||Vo("KYNVER_CLEANUP_INCLUDE_ORPHANS"),d=Vo("KYNVER_CLEANUP_SCOPE_ALL")||process.env.KYNVER_CLEANUP_SCOPE==="all"?e.runIdFilter:e.runIdFilter??(process.env.KYNVER_CLEANUP_RUN_ID||void 0),f=e.accountBytes!==!1&&!Vo("KYNVER_CLEANUP_SKIP_BYTE_ACCOUNTING"),p=Rt("KYNVER_CLEANUP_STORAGE_ENTRY_CAP",2e3),m=e.storagePerRunEntryCap!==void 0?e.storagePerRunEntryCap:f&&p>0?p:null,h=Rt("KYNVER_CLEANUP_BYTE_ENTRY_CAP",2e3),k=e.byteAccountingEntryCap??(Number.isFinite(h)&&h>0?Math.floor(h):2e3);return{execute:r,finalizeStaleRuns:t,scanDependencyCaches:o,nodeModulesAgeMs:n,worktreesAgeMs:s>0?s:0,terminalWorktreesAgeMs:i>=0?i:0,runDirectoriesAgeMs:a>=0?a:0,maxActionsPerSweep:Number.isFinite(l)&&l>0?Math.floor(l):120,includeOrphans:c,runIdFilter:d?String(d):void 0,accountBytes:f,storagePerRunEntryCap:m,byteAccountingEntryCap:k}}function gk(e){let r=process.env.KYNVER_CLEANUP_SCOPE==="all",t=Number(process.env.KYNVER_CLEANUP_WORKTREES_AGE_MS),n=r?Number.isFinite(t)&&t>0?t:6048e5:Number.isFinite(t)&&t>0?t:0;return Fu({runIdFilter:r?void 0:e,worktreesAgeMs:n,terminalWorktreesAgeMs:r?216e5:void 0,runDirectoriesAgeMs:r?36e5:void 0,includeOrphans:r?!0:void 0,finalizeStaleRuns:!0,accountBytes:!0,scanDependencyCaches:!0})}Pe();import{existsSync as hk}from"node:fs";import Ku from"node:path";C();var kP=1800*1e3;function $u(e){let r=e.now??Date.now(),t=e.heartbeatFreshMs??kP;if(!hk(e.worktreePath))return null;if(e.runId&&e.workerName){let c=Ku.join(e.harnessRoot,"runs",e.runId,"workers",e.workerName),u=w(Ku.join(c,"worker.json"),void 0);if(u&&Tu(u,r,t))return"active_worker"}let n=Ku.join(e.worktreePath,".git");if(!hk(n))return null;let o=ne(e.worktreePath,["status","--porcelain"]);if(o.status!==0)return"pr_or_unmerged_commits";let s=o.stdout.split(`
-`).map(c=>c.trim()).filter(c=>c.length>0);if(Te(s).length>0)return"dirty_worktree";let i=ne(e.worktreePath,["rev-list","--count","@{u}..HEAD"]);if(i.status===0){let c=Number(i.stdout.trim());if(Number.isFinite(c)&&c>0)return"pr_or_unmerged_commits"}let a=ne(e.worktreePath,["rev-list","--count","origin/main..HEAD"]);if(a.status!==0)return i.status!==0?"pr_or_unmerged_commits":null;let l=Number(a.stdout.trim());return Number.isFinite(l)&&l>0?"pr_or_unmerged_commits":null}Ce();import{existsSync as yP}from"node:fs";import{homedir as RP}from"node:os";import kk from"node:path";var vP=["/var/tmp/kynver-harness",kk.join(RP(),".openclaw","harness")];function ju(e,r,t){if(!t?.trim())return;let n=le(t.trim());e.has(n)||(e.add(n),r.push(n))}function bP(e){return e.scanWellKnown!=null?e.scanWellKnown:process.env.VITEST==="true"?!1:process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN!=="0"&&!["0","false","no"].includes((process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN??"").toLowerCase())}function yk(e={}){let r=new Set,t=[];ju(r,t,e.harnessRoot??me());let n=process.env.KYNVER_CLEANUP_EXTRA_ROOTS?.split(",").map(o=>o.trim()).filter(Boolean);for(let o of n??[])ju(r,t,o);if(bP(e))for(let o of vP){let s=kk.resolve(o);!r.has(s)&&yP(s)&&ju(r,t,s)}return t}Kt();function SP(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function CP(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function Rk(e={}){let r=e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/",t=CP("KYNVER_DISK_GUARD_MAX_USED_PERCENT",75),n=Le({...e,diskPath:r,diskMaxUsedPercent:e.diskMaxUsedPercent??t}),o=!n.ok||n.usedPercent>=t,s=process.env.KYNVER_CLEANUP_DISK_PRESSURE_FORCE?.trim().toLowerCase();return s==="none"||s==="off"||s==="0"?o=!1:(s==="pressured"||s==="on"||s==="1")&&(o=!0),{diskGate:n,pressured:o,maxUsedPercent:t}}function vk(e,r){if(!r.pressured)return e;let t=e.execute||!SP("KYNVER_CLEANUP_DRY_RUN_ON_PRESSURE");return{...e,execute:t,nodeModulesAgeMs:0,runIdFilter:void 0,includeOrphans:!0,terminalWorktreesAgeMs:0,runDirectoriesAgeMs:0,worktreesAgeMs:e.worktreesAgeMs>0?e.worktreesAgeMs:6048e5,diskPressure:!0,diskGate:r.diskGate}}Ft();function Me(e,r){if(process.env.KYNVER_CLEANUP_QUIET==="1")return;let t=r?`: ${r}`:"";console.error(`[kynver cleanup] ${e}${t}`)}Pe();var ga=class{aheadOfMain=new Map;countAheadOfMain(r,t="origin/main"){let n=`${r}\0${t}`;if(this.aheadOfMain.has(n))return this.aheadOfMain.get(n)??null;let o=ne(r,["rev-list","--count",`${t}..HEAD`]);if(o.status!==0)return this.aheadOfMain.set(n,null),null;let s=Number(o.stdout.trim()),i=Number.isFinite(s)?s:null;return this.aheadOfMain.set(n,i),i}};import{spawnSync as wP}from"node:child_process";import{existsSync as _P}from"node:fs";import xP from"node:path";var EP=5e3;function PP(e,r){if(!_P(xP.join(e,".git")))return{status:null,stdout:"",stderr:"",error:"not_a_git_repo"};try{let t=wP("git",r,{cwd:e,encoding:"utf8",timeout:EP}),n=t.error?.message?.includes("ETIMEDOUT")===!0;return{status:n?null:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:n?"git_timeout":t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function bk(e){let r=PP(e,["status","--short"]);return r.error==="not_a_git_repo"?[]:r.error==="git_timeout"||r.status!==0?null:r.stdout.split(`
-`).map(t=>t.trim()).filter(Boolean)}var ha=class{cache=new Map;porcelain(r){let t=r,n=this.cache.get(t);if(n!==void 0)return n;let o=bk(t)??[];return this.cache.set(t,o),o}};var ka=class{cache=new Map;derive(r){let t=this.cache.get(r.id);if(t!==void 0)return t;let n=gt(r);return this.cache.set(r.id,n),n}};function AP(e){let r={};for(let t of e)r[t.kind]=(r[t.kind]??0)+1;return r}function Sk(e,r={}){let t=r.maxSampleActions??12,n=r.maxSampleSkips??8;return{harnessRoot:e.harnessRoot,scanRoots:e.scanRoots,dryRun:e.dryRun,execute:e.execute,scannedAt:e.scannedAt,finalizedRuns:e.finalizedRuns.length,actionCount:e.actions.length,actionKinds:AP(e.actions),totals:e.totals,...e.storage?{storage:e.storage}:{},...e.preservedLivePaths?.length?{preservedLivePaths:e.preservedLivePaths}:{},...e.removedRunDirectories!=null?{removedRunDirectories:e.removedRunDirectories}:{},sampleActions:e.actions.slice(0,t).map(o=>({kind:o.kind,path:o.path,...o.skipReason?{skipReason:o.skipReason}:{},...o.bytes!=null?{bytes:o.bytes}:{},...o.runId?{runId:o.runId}:{},...o.worker?{worker:o.worker}:{}})),sampleSkips:e.skips.slice(0,n)}}function IP(e={}){let r=e.harnessRoot?le(e.harnessRoot):me(),t=yk({harnessRoot:r}),n=e.now??Date.now();return{harnessRoot:r,scanRoots:t,now:n}}function OP(e){return typeof e=="string"?{reason:e}:e}function Cn(e,r,t,n){e.push({path:r,reason:t,...n?{detail:n}:{}})}function ya(e,r,t){return!r||e.bytes!=null?e:{...e,bytes:yr(e.path,t)}}function Ck(e,r){let t={};for(let n of r)t[n.reason]=(t[n.reason]??0)+1;for(let n of e)n.skipReason&&(t[n.skipReason]=(t[n.skipReason]??0)+1);return t}function NP(e,r){return e.kind==="remove_next_cache"?Zh(e,r):Qh(e,r)}function TP(e,r,t){return e.kind==="remove_next_cache"?da(e.path,r,t):ua(e.path,r,t)}function DP(e){let r=new Map;for(let t of e)for(let[n,o]of fk(t))r.set(n,o);return r}function wk(e,r){return e.runId&&e.worker?Ue.join(r,e.runId,e.worker):Ue.resolve(e.path,"..")}function Ra(e={}){let r=Fu(e),t=Rk();r=vk(r,t);let n=IP(e);Me("scan",`${n.scanRoots.length} harness root(s)`);let o=Dh(n.scanRoots,n.now),s=r.finalizeStaleRuns?Lo().map(P=>({runId:P.runId,from:P.from,to:P.to})):[];s.length>0&&Me("finalize",`${s.length} stale run(s) marked terminal`),Me("index","building worktree index");let i=DP(n.scanRoots);Me("index",`${i.size} indexed worktree(s)`);let a={runTerminalCache:new ka,gitStatusCache:new ha,gitRevCache:new ga},l=[],c=[],u=new Set,d=r.maxActionsPerSweep,f=()=>c.length>=d;for(let P of n.scanRoots){if(f())break;Me("root",P);let B=Ue.join(P,"worktrees"),Hr=mk(i,P),Q={harnessRoot:P,worktreesDir:B,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter,index:Hr,now:n.now},br=r.scanDependencyCaches?uk(Q):[];Me("dependency",r.scanDependencyCaches?`${br.length} cache candidate(s) at ${P}`:"skipped (worktree-only sweep)");let It=0;for(let ve of br){if(f())break;It+=1,It%50===0&&Me("dependency",`${It}/${br.length} evaluated`);let G=Ue.resolve(ve.path);if(u.has(G))continue;u.add(G);let W={...ve,path:G},be=TP(W,P,B);if(be){Cn(l,W.path,be),c.push({...W,executed:!1,skipped:!0,skipReason:be});continue}let xe=wk(W,B),Sr=Hr.get(Ue.resolve(xe))??null,Ee=Mu({indexed:Sr,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:W.ageMs,worktreePath:xe,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(Ee){Cn(l,W.path,Ee),c.push({...W,executed:!1,skipped:!0,skipReason:Ee});continue}c.push(NP(ya(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(r.scanDependencyCaches)for(let ve of sk(Q)){if(f())break;let G=Ue.resolve(ve.path);if(u.has(G))continue;u.add(G);let W={...ve,path:G},be=pa(W.path,P,B);if(be){Cn(l,W.path,be),c.push({...W,executed:!1,skipped:!0,skipReason:be});continue}let xe=wk(W,B),Sr=Hr.get(Ue.resolve(xe))??null,Ee=Ih({indexed:Sr,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:W.ageMs,worktreePath:xe,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(Ee){Cn(l,W.path,Ee),c.push({...W,executed:!1,skipped:!0,skipReason:Ee});continue}c.push(ek(ya(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}let Ve=[...ik(Q),...pk(Q)];Me("worktrees",`${Ve.length} candidate(s) at ${P}`);let Ot=new Set,Ge=0;for(let ve of Ve){if(f())break;Ge+=1,Ge%50===0&&Me("worktrees",`${Ge}/${Ve.length} evaluated`);let G=Ue.resolve(ve.path);if(Ot.has(G))continue;Ot.add(G);let W={...ve,path:G},be=Hr.get(Ue.resolve(W.path))??null,xe=be?null:$u({worktreePath:W.path,harnessRoot:P,runId:W.runId,workerName:W.worker,now:n.now}),Sr=Ah({indexed:be,worktreePath:Ue.resolve(W.path),includeOrphans:r.includeOrphans,worktreesAgeMs:r.worktreesAgeMs,terminalWorktreesAgeMs:r.terminalWorktreesAgeMs,ageMs:W.ageMs,orphanSafety:xe,worktreeRemovalGuard:e.worktreeRemovalGuard,liveness:a,now:n.now,harnessRoot:P,writeSalvageEvidence:r.execute});if(Sr){let{reason:Ee,detail:us}=OP(Sr);Cn(l,W.path,Ee,us),c.push({...W,executed:!1,skipped:!0,skipReason:Ee});continue}c.push(tk(ya(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(!f()&&r.runDirectoriesAgeMs>=0)for(let ve of Fh({harnessRoot:P,worktreesDir:B,runDirectoriesAgeMs:r.runDirectoriesAgeMs,runIdFilter:r.runIdFilter,activeGuards:o,now:n.now})){if(f())break;let G=Ue.resolve(ve.path);if(u.has(G))continue;u.add(G);let W={...ve,path:G},be=W.runId??Ue.basename(G),xe=Hh({harnessRoot:P,runId:be,runPath:G,ageMs:W.ageMs,runDirectoriesAgeMs:r.runDirectoriesAgeMs,activeGuards:o});if(xe){Cn(l,W.path,xe),c.push({...W,executed:!1,skipped:!0,skipReason:xe});continue}c.push(rk(ya(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}}let p=0,m=0,h=0,k=0,g=0,R=0;for(let P of c)P.bytes&&(p+=P.bytes),!P.skipped&&!P.executed&&P.bytes&&(h+=P.bytes),P.executed?(g+=1,k+=P.bytes??0,P.kind==="remove_run_directory"&&(m+=1)):P.skipped&&(R+=1,P.skipReason==="dry_run"&&P.bytes&&(h+=P.bytes));let O=r.accountBytes?Au({harnessRoot:n.harnessRoot,now:n.now,perRunEntryCap:r.storagePerRunEntryCap}):void 0,_=cr(),E=r.execute&&eu(_),U=E?No({execute:!0}):null,Y=_?{observed:!0,execute:E,dumpCount:_.dumpCount,totalBytes:_.totalBytes,removedCount:U?.removed.length??0,removedBytes:U?.removedBytes??0,executables:_.executables,path:_.path,reason:_.reason}:void 0;U&&U.removed.length>0&&(k+=U.removedBytes,g+=U.removed.length,Me("wsl-crashes",`removed ${U.removed.length} dump(s), ${U.removedBytes} bytes`)),Me("complete",`${c.length} action(s), ${R} skipped, ${g} removed`);let $=Nh(c,l),F=Sk({harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:p,reclaimableBytes:h,removedBytes:k,removedPaths:g,skippedPaths:R,skipReasons:Ck(c,l)},...O?{storage:O}:{},...$.length>0?{preservedLivePaths:$}:{},...m>0?{removedRunDirectories:m}:{},...Y?{wslCrashDumps:Y}:{}});return{harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:p,reclaimableBytes:h,removedBytes:k,removedPaths:g,skippedPaths:R,skipReasons:Ck(c,l)},...O?{storage:O}:{},...$.length>0?{preservedLivePaths:$}:{},...m>0?{removedRunDirectories:m}:{},...Y?{wslCrashDumps:Y}:{},compactSummary:F}}function Vu(e){let r=gk(e);return Ra({execute:r.execute,finalizeStaleRuns:r.finalizeStaleRuns,accountBytes:r.accountBytes,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter})}function Gu(){return process.env.KYNVER_PIPELINE_CLEANUP!=="0"}I();import{mkdirSync as dv,realpathSync as pv}from"node:fs";import{fileURLToPath as VN}from"node:url";I();C();jl();import MP from"node:os";function UP(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||y().apiBaseUrl;return r?ir(String(r)):void 0}async function WP(e,r){let t=await fetch(`${e}/api/agent-os`,{headers:{Authorization:`Bearer ${r}`}});if(!t.ok)return null;let n=await t.json().catch(()=>null);if(!n?.primarySlug)return null;let o=n.items?.find(s=>s.slug===n.primarySlug);return o?.id&&o.slug?{id:o.id,slug:o.slug}:{id:"",slug:n.primarySlug}}async function va(e){let r=UP(e);r||(console.error("kynver bootstrap requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site or set KYNVER_API_URL."),process.exit(1)),se()||(typeof e.apiKey=="string"?lo(e.apiKey):(await $l({...e,apiBaseUrl:r})).ok||process.exit(1));let t=se();t||(console.error("No API key after login \u2014 aborting."),process.exit(1));let n=await WP(r,t);n||(console.error("Could not resolve your AgentOS workspace from the account. Confirm this account has AgentOS access, then retry."),process.exit(1));let o={...e,apiBaseUrl:r,agentOsSlug:n.slug,...n.id?{agentOsId:n.id}:{},...typeof e.repo=="string"?{}:{discoverRepo:!0}};await Zs(o),console.log(""),console.log(`  Bootstrap complete \u2014 ${MP.hostname()} is linked to workspace "${n.slug}".`),console.log("  Next: `kynver start` \u2014 brings the agent online with Kynver-owned keeper supervision + local Kynver Cron when needed."),console.log("  Persistent background (Linux): `kynver start --install-systemd` or `kynver cron install --install-systemd`."),console.log("  (Advanced: `kynver run create --repo /path/to/repo` + `kynver daemon --run <RUN_ID> --agent-os-id <AOS_ID> --execute`.)")}I();import uO from"node:os";I();Je();I();import LP from"node:path";import{homedir as BP}from"node:os";var Yu=LP.join(BP(),".kynver","config.json");function Go(e){let r=y(),t=Xi({...e,config:r});if(!t)return{ok:!1,remediated:!1,alreadyPersisted:!1,configPath:q(Yu),resolved:null,reason:"No Kynver git checkout found. Clone the repo, cd into it, then run `kynver setup --repo /path/to/Kynver` (or export KYNVER_DEFAULT_REPO).",remediation:"Clone the Kynver monorepo, cd into it, then run `kynver config ensure-default-repo` (or `kynver setup --repo /path/to/Kynver`)."};if(t.persistedInConfig)return{ok:!0,remediated:!1,alreadyPersisted:!0,configPath:q(Yu),resolved:kn(t),config:nn(r)};let n=Qi(t.repo,r),o=kn({...t,persistedInConfig:!0,source:"config"});return{ok:!0,remediated:!0,alreadyPersisted:!1,configPath:q(Yu),resolved:o,config:nn(n),remediation:"defaultRepo persisted in ~/.kynver/config.json \u2014 `kynver run create` no longer requires --repo."}}function _k(e=!1){let r=Go();if(e){console.log(JSON.stringify(r,null,2)),r.ok||(process.exitCode=1);return}if(!r.ok){console.error(r.reason??"Could not resolve a Kynver git checkout."),r.remediation&&console.error(r.remediation),process.exitCode=1;return}if(r.alreadyPersisted){console.log(`defaultRepo already set (${r.resolved?.defaultRepo??"unknown"}) in ${r.configPath}`);return}console.log(`Persisted defaultRepo ${r.resolved?.defaultRepo??""} in ${r.configPath}. \`kynver run create\` can omit --repo.`)}function xk(e){return e?e.persistedInConfig?{status:"pass"}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` to persist defaultRepo in ~/.kynver/config.json (or `kynver doctor runtime-takeover --remediate-default-repo`)."}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` from a Kynver checkout (or `kynver setup --repo /path/to/Kynver`)."}}I();Oe();Vn();Bs();import HP from"node:os";function Ek(e,r){console.error(JSON.stringify({event:"daemon_identity",level:e,message:r}))}function Pk(e=y(),r=process.env){let t=Ae(r,e),n=Ls({config:e,totalMemBytes:HP.totalmem(),env:r}),o=[...t.warnings],s=[];if(!e.boxKind?.trim()&&!r.KYNVER_BOX_KIND?.trim()&&o.push("boxKind is not persisted in ~/.kynver/config.json \u2014 run `kynver setup --box-kind forge|ghost` so Command Center attributes snapshots to the correct pool"),t.slugInferenceBlocked){let c=r.KYNVER_DAEMON_STRICT_IDENTITY==="1"||r.KYNVER_DAEMON_STRICT_IDENTITY==="true",u="ambiguous box identity: KYNVER_AGENT_OS_SLUG is set without KYNVER_BOX_KIND or config.boxKind; treating this host as forge";c?s.push(u):o.push(u)}let i=n.configuredMaxWorkers??n.autoCap,a=lr(t.boxKind,i);Bt(t.boxKind,i)&&o.push(`Forge box maxConcurrentWorkers=${i} exceeds pool cap \u2014 using ${a}; run kynver setup --box-kind forge --max-workers 4`);let l=s.length===0;for(let c of o)Ek("warn",c);for(let c of s)Ek("error",c);return{ok:l,box:t,workerCapSource:n.workerCapSource,maxConcurrentWorkers:a,autoCap:n.autoCap,warnings:o,errors:s}}import{mkdirSync as FP,readFileSync as KP,renameSync as $P,writeFileSync as jP}from"node:fs";import{homedir as VP}from"node:os";import Ak from"node:path";function Ik(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return Ak.join(VP(),".kynver",`daemon-heartbeat-${r}.json`)}function Ok(e){try{let r=Ik(e.agentOsId);FP(Ak.dirname(r),{recursive:!0});let t={observedAt:(e.now??new Date).toISOString(),pid:process.pid,runId:e.runId,agentOsId:e.agentOsId,...e.instructionBundleVersion?{instructionBundleVersion:e.instructionBundleVersion}:{}},n=`${r}.tmp-${process.pid}`;jP(n,JSON.stringify(t),"utf8"),$P(n,r)}catch{}}function Nk(e){try{let r=KP(Ik(e),"utf8"),t=JSON.parse(r);return typeof t?.observedAt!="string"?null:t}catch{return null}}function Tk(e,r,t=Date.now()){if(!e)return!1;let n=Date.parse(e.observedAt);return Number.isNaN(n)?!0:t-n>r}function GP(e){let r=process.env[e]?.trim().toLowerCase();return r==="1"||r==="true"||r==="yes"||r==="on"}function wn(){process.platform==="win32"&&(GP("KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS")||(console.error(JSON.stringify({event:"daemon_start_blocked",reason:"native_windows_console_flash",remedy:"Run the daemon inside WSL: .\\scripts\\start-tier2-wsl.ps1 \u2014 or set KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS=1 to override (flashes visible consoles)."})),process.exit(1)))}I();import{existsSync as YP}from"node:fs";import{homedir as JP}from"node:os";import qP from"node:path";function Dk(e,r){let t=process.env[e]?.trim().toLowerCase();return t?t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r:r}function Yo(e,r,t=1){let n=Number(process.env[e]);return!Number.isFinite(n)||n<t?r:Math.floor(n)}function Lr(){let e=process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim();return e||qP.join(JP(),".kynver","agent-os-cron.json")}function zP(e=Lr()){let r=process.env.KYNVER_CRON_TICK_STATE_PATH?.trim();return r||`${e.replace(/\.json$/i,"")}.tick-state.json`}function XP(){let e=y();return process.env.KYNVER_API_URL?.trim()||e.apiBaseUrl?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}function Ju(){return process.env.KYNVER_CRON_SECRET?.trim()||process.env.OPENCLAW_CRON_SECRET?.trim()||process.env.KYNVER_RUNTIME_SECRET?.trim()||null}function vr(){let e=Lr(),r=zP(e),t=XP(),n=Ju(),o=!!(t&&n),s=YP(e),i=o&&(s||Dk("KYNVER_CRON_TICK_FORCE",!1));return{storePath:e,statePath:r,lockPath:`${r}.lock`,fireBaseUrl:t,secret:n,tickEnabled:Dk("KYNVER_CRON_TICK_ENABLED",i),tickIntervalMs:Yo("KYNVER_CRON_TICK_INTERVAL_MS",6e4,5e3),missedRunPolicy:process.env.KYNVER_CRON_MISSED_RUN_POLICY?.trim().toLowerCase()==="skip"?"skip":"catch_up",maxCatchUpPerTick:Yo("KYNVER_CRON_MAX_CATCH_UP_PER_TICK",3,0),maxRetries:Yo("KYNVER_CRON_MAX_RETRIES",3,0),retryBackoffMs:Yo("KYNVER_CRON_RETRY_BACKOFF_MS",6e4,1e3),inflightLeaseMs:Yo("KYNVER_CRON_INFLIGHT_LEASE_MS",12e4,5e3)}}function ba(e=vr()){return e.tickEnabled&&!!(e.fireBaseUrl&&e.secret)}function QP(e){return e.replace(/\/+$/,"")}async function Mk(e){let r=e.fetchFn??fetch,t=e.entry.spec.callbackPath.startsWith("/")?e.entry.spec.callbackPath:`/${e.entry.spec.callbackPath}`,n=`${QP(e.baseUrl)}${t}`,s={source:"kynver-cron",jobId:e.jobId??e.entry.spec.dedupeKey??null,agentOsId:e.entry.spec.target.agentOsId,kind:e.entry.spec.kind,target:e.entry.spec.target,...e.entry.spec.payload!==void 0&&{payload:e.entry.spec.payload}},i=await r(n,{method:"POST",headers:He(e.secret),body:JSON.stringify(s)}),a=null;try{a=await i.json()}catch{a=null}return{ok:i.ok,status:i.status,body:a}}C();import{closeSync as ZP,existsSync as qu,openSync as eA,readFileSync as rA,unlinkSync as Uk,writeFileSync as tA}from"node:fs";var nA=10*6e4;function Wk(e){if(!qu(e))return null;try{let r=JSON.parse(rA(e,"utf8"));if(typeof r.pid=="number"&&typeof r.at=="string")return r}catch{return null}return null}function oA(e){let r=Wk(e);if(!r||!H(r.pid))return!0;let t=Date.parse(r.at);return Number.isNaN(t)?!0:Date.now()-t>nA}function Lk(e){if(qu(e)&&!oA(e)){let r=Wk(e);return{acquired:!1,reason:r?`held by pid ${r.pid}`:"held by another process"}}if(qu(e))try{Uk(e)}catch{}try{let r=eA(e,"wx");return tA(r,JSON.stringify({pid:process.pid,at:new Date().toISOString()}),"utf8"),ZP(r),{acquired:!0}}catch(r){if(r.code==="EEXIST")return{acquired:!1,reason:"concurrent acquire"};throw r}}function Bk(e){try{Uk(e)}catch{}}var sA=/^[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+$/;function iA(e){return sA.test(e.trim())}function aA(e,r,t){let n=new Set;for(let o of e.split(",")){let s=o.trim();if(!s)continue;if(s==="*"){for(let d=r;d<=t;d++)n.add(d);continue}let i=/^(.+)\/(\d+)$/.exec(s),a=i?i[1]:s,l=i?Math.max(1,Number(i[2])):1;if(a==="*"){for(let d=r;d<=t;d+=l)n.add(d);continue}let c=/^(\d+)-(\d+)$/.exec(a);if(c){let d=Math.max(r,Number(c[1])),f=Math.min(t,Number(c[2]));for(let p=d;p<=f;p+=l)n.add(p);continue}let u=Number(a);Number.isInteger(u)&&u>=r&&u<=t&&n.add(u)}return n}function Jo(e,r,t,n){let o=e.trim();return o==="*"?!0:aA(o,t,n).has(r)}function lA(e,r){let t=e.trim().split(/\s+/);if(t.length!==5)return!1;let[n,o,s,i,a]=t;return Jo(n,r.getUTCMinutes(),0,59)&&Jo(o,r.getUTCHours(),0,23)&&Jo(s,r.getUTCDate(),1,31)&&Jo(i,r.getUTCMonth()+1,1,12)&&Jo(a,r.getUTCDay(),0,6)}var cA=366*24*60;function uA(e){return new Date(Date.UTC(e.getUTCFullYear(),e.getUTCMonth(),e.getUTCDate(),e.getUTCHours(),e.getUTCMinutes(),0,0))}function Hk(e,r){if(!iA(e))return null;let t=uA(r);t=new Date(t.getTime()+6e4);for(let n=0;n<cA;n++){if(lA(e,t))return t;t=new Date(t.getTime()+6e4)}return null}function Fk(e,r){if(e.scheduleKind==="runAt"&&e.runAt){let t=Date.parse(e.runAt);return Number.isNaN(t)?null:new Date(t).toISOString()}if(e.scheduleKind==="cron"&&e.cron){let t=Hk(e.cron.trim(),r);return t?t.toISOString():null}return null}function zu(e,r){if(e.scheduleKind!=="cron"||!e.cron?.trim())return null;let t=Hk(e.cron.trim(),r);return t?t.toISOString():null}import{promises as dA}from"node:fs";async function Kk(e){try{return await dA.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function pA(e){if(!e)return[];try{let r=JSON.parse(e);return Array.isArray(r.entries)?r.entries:[]}catch{return[]}}async function vt(e=Lr()){let r=await Kk(e);return pA(r)}async function $k(e,r){let{mkdir:t,writeFile:n,rename:o}=await import("node:fs/promises"),{randomBytes:s}=await import("node:crypto"),{dirname:i}=await import("node:path");await t(i(e),{recursive:!0});let a=`${e}.${s(4).toString("hex")}.tmp`,l=JSON.stringify({entries:r},null,2);await n(a,l,"utf8"),await o(a,e)}async function jk(e,r=Lr()){let t=await vt(r),n=t.findIndex(o=>o.providerScheduleId===e.providerScheduleId);n>=0?t[n]=e:t.push(e),await $k(r,t)}async function Vk(e=Lr()){return await Kk(e)!==null?{created:!1}:(await $k(e,[]),{created:!0})}import{randomBytes as mA}from"node:crypto";import{promises as qo}from"node:fs";import fA from"node:path";var Sa={version:1,jobs:{}};async function gA(e){try{return await qo.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function hA(e){if(!e)return{...Sa,jobs:{...Sa.jobs}};try{let r=JSON.parse(e);return r?.version!==1||typeof r.jobs!="object"||!r.jobs?{...Sa,jobs:{}}:r}catch{return{...Sa,jobs:{}}}}async function Ca(e){let r=await gA(e);return hA(r)}async function kA(e,r){await qo.mkdir(fA.dirname(e),{recursive:!0});let t=mA(6).toString("hex"),n=`${e}.tmp-${process.pid}-${Date.now()}-${t}`;await qo.writeFile(n,`${JSON.stringify(r,null,2)}
-`,"utf8");try{await qo.rename(n,e)}catch(o){let s=o.code;if(s!=="EPERM"&&s!=="EEXIST"&&s!=="EACCES")throw o;await qo.unlink(n).catch(()=>{})}}async function Gk(e,r){await kA(e,r)}function Yk(e,r){let t=e.jobs[r];if(t)return t;let n={providerScheduleId:r,nextFireAt:null,lastFiredAt:null,lastAttemptAt:null,consecutiveFailures:0,completedAt:null,inflightUntil:null};return e.jobs[r]=n,n}function yA(e,r){if(!e.inflightUntil)return!1;let t=Date.parse(e.inflightUntil);return!Number.isNaN(t)&&t>r}function RA(e){return!!e.completedAt}function vA(e,r,t,n){if(r.consecutiveFailures===0)return!0;if(e.spec.scheduleKind!=="cron"&&r.consecutiveFailures>t.maxRetries)return!1;if(!r.lastAttemptAt)return!0;let o=Date.parse(r.lastAttemptAt);return Number.isNaN(o)?!0:n-o>=t.retryBackoffMs}function bA(e,r,t){if(r.nextFireAt)return r.nextFireAt;let n=Fk(e.spec,t);return r.nextFireAt=n,n}function SA(e,r,t,n){if(e.paused||RA(r)||yA(r,t)||!vA(e,r,n,t))return!1;let o=r.nextFireAt?Date.parse(r.nextFireAt):NaN;return Number.isNaN(o)?!1:t>=o}function CA(e,r,t){e.spec.scheduleKind==="cron"&&(r.nextFireAt=zu(e.spec,t))}async function _n(e={}){let r=e.env??vr(),t=e.now??new Date,n=t.getTime();if(!r.tickEnabled)return{enabled:!1,skipped:"tick_disabled",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};if(!r.fireBaseUrl||!r.secret)return{enabled:!0,skipped:"missing_fire_credentials",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};let o=Lk(r.lockPath);if(!o.acquired)return{enabled:!0,skipped:o.reason??"lock_not_acquired",scanned:0,due:0,fired:0,skippedJobs:0,errors:0,lockHeld:!0};try{let s=await vt(r.storePath),i=e.agentOsIdFilter?s.filter(p=>p.spec.target.agentOsId===e.agentOsIdFilter):s,a=await Ca(r.statePath),l=[];for(let p of i){let m=Yk(a,p.providerScheduleId);bA(p,m,t),SA(p,m,n,r)&&l.push({entry:p,job:m})}l.sort((p,m)=>{let h=Date.parse(p.job.nextFireAt??"")||0,k=Date.parse(m.job.nextFireAt??"")||0;return h-k});let c=0,u=0,d=0,f=r.maxCatchUpPerTick;for(let{entry:p,job:m}of l){if(r.missedRunPolicy==="skip"&&p.spec.scheduleKind==="cron"){let h=Date.parse(m.nextFireAt??"");if(!Number.isNaN(h)&&h<n-r.tickIntervalMs*2){m.nextFireAt=zu(p.spec,t),d++;continue}}if(f<=0){d++;continue}m.inflightUntil=new Date(n+r.inflightLeaseMs).toISOString(),m.lastAttemptAt=t.toISOString(),CA(p,m,t);try{let h=await Mk({entry:p,baseUrl:r.fireBaseUrl,secret:r.secret,fetchFn:e.fetchFn});m.inflightUntil=null,h.ok?(m.lastFiredAt=t.toISOString(),m.consecutiveFailures=0,p.spec.scheduleKind==="runAt"&&(m.completedAt=t.toISOString(),m.nextFireAt=null),c++,f--):(m.consecutiveFailures+=1,u++)}catch{m.inflightUntil=null,m.consecutiveFailures+=1,u++}}return await Gk(r.statePath,a),{enabled:!0,scanned:i.length,due:l.length,fired:c,skippedJobs:d,errors:u}}finally{Bk(r.lockPath)}}C();T();import Jk from"node:path";var qk="mesh-cron-lease.json";function wa(e){return w(Jk.join(x(e),qk),null)}function zk(e,r){ae(Jk.join(x(e),qk),{...r,updatedAt:new Date().toISOString()})}function Xk(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.response;if(!r||typeof r!="object"||Array.isArray(r))return null;let t=r.meshLiveness;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t.cronLease;if(!n||typeof n!="object"||Array.isArray(n))return null;let o=n;return{leaseToken:typeof o.leaseToken=="string"?o.leaseToken:null,holderBoxId:typeof o.holderBoxId=="string"?o.holderBoxId:null,authorized:o.authorized===!0,updatedAt:new Date().toISOString()}}C();import iI from"node:path";I();var wA=1;function xn(e){if(!e||typeof e!="object")return 0;let r=e.startedCount;if(typeof r=="number")return r;let t=e.outcomes;return Array.isArray(t)?t.filter(n=>n.started).length:0}function _A(e){let{maxStarts:r,...t}=e;return t}async function Xu(e,r){if(r<=0)return{ok:!0,skipped:!0,reason:"no slots",maxStarts:0,startedCount:0};let t=_A(e);if(t.targetTaskId||t.targetTaskIds){let u=await Mr({...t,execute:!0,pipeline:!0,maxStarts:String(r)});return{...typeof u=="object"&&u!==null?u:{},passes:{target:u},startedCount:xn(u)}}let n=Math.min(r,wA),o=Math.max(0,r-n),s=await Mr({...t,execute:!0,pipeline:!0,lane:"review",maxStarts:String(n)}),i=xn(s),a=o+(n-i);if(a<=0)return{...typeof s=="object"&&s!==null?s:{},passes:{review:s},startedCount:i};let l=await Mr({...t,execute:!0,pipeline:!0,maxStarts:String(a)}),c=xn(l);return{passes:{review:s,work:l},startedCount:i+c,ok:!0}}function Qk(e){if(!e||typeof e!="object")return[];let t=e.response?.dispatch?.exactTargetTaskIds;if(!Array.isArray(t))return[];let n=new Set,o=[];for(let s of t){if(typeof s!="string")continue;let i=s.trim();!i||n.has(i)||(n.add(i),o.push(i))}return o}function xA(e){let t=e.response?.dispatch;return t&&typeof t=="object"?t:null}function zo(e){return typeof e!="number"||!Number.isFinite(e)?null:Math.max(0,Math.floor(e))}function EA(e){let r=Number(process.env[e]);return!Number.isFinite(r)||r<=0?null:Math.floor(r)}function Zk(e,r){let t=xA(r),n=zo(t?.recommendedMaxStarts),o=zo(t?.actionableReady),s=zo(t?.queuedTasks),i=zo(t?.boardAdvancedThisTick)??0,a=zo(t?.leaseReapedThisTick)??0,l=i+a,c=o??s,u=e.slotsAvailable;c!==null?u=Math.min(u,c):n!==null&&(u=Math.min(u,n)),c===null&&n!==null&&(u=Math.max(u,Math.min(e.slotsAvailable,n)));let d=t?.underutilized===!0||(c??0)>0&&e.slotsAvailable>0&&e.maxConcurrentWorkers>0&&e.activeWorkers<e.maxConcurrentWorkers;if(e.slotsAvailable>0&&u===0&&(d||l>0)){let m=c??(l>0?l:1);u=Math.min(e.slotsAvailable,Math.max(1,m))}let f=EA("KYNVER_DAEMON_MAX_DISPATCH_STARTS");f!==null&&(u=Math.min(u,f));let p=s!==null&&o!==null?Math.max(0,s-o):null;return{maxStarts:Math.max(0,u),underutilized:d,advisedStarts:n,actionableReady:o,queuedTasks:s,nonDispatchableReady:p,boardAdvancedThisTick:i,leaseReapedThisTick:a}}Xt();T();zn();z();C();z();T();C();import PA from"node:path";I();async function ey(e){let r=V(e.baseUrl),t=await J(e.secret,e.agentOsId,{baseUrl:r}),n=`${r}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/plan-progress-sync`,o=await re(n,t,{phase:e.phase,taskId:e.taskId,blocker:e.blocker,artifact:e.artifact},{agentOsId:e.agentOsId,baseUrl:r});return{ok:o.ok,status:o.status,response:o.response}}async function ry(e,r){let t=L(e),n=String(r.agentOsId||"");if(!n)return[];let o=[];for(let s of Object.keys(t.workers||{})){let i=w(PA.join(x(t.id),"workers",b(s),"worker.json"),void 0);if(!i?.dispatched||!i.taskId)continue;let a=D(i);if(!a.heartbeatBlocker)continue;if(i.lastSyncedHeartbeatBlocker===a.heartbeatBlocker){o.push({worker:s,phase:"heartbeat_blocker",ok:!0,skipped:!0});continue}let l=await ey({agentOsId:n,taskId:i.taskId,phase:"heartbeat_blocker",blocker:a.heartbeatBlocker,baseUrl:r.baseUrl?String(r.baseUrl):void 0,secret:r.secret?String(r.secret):void 0});l.ok&&(i.lastSyncedHeartbeatBlocker=a.heartbeatBlocker,K(t.id,i)),o.push({worker:s,phase:"heartbeat_blocker",ok:l.ok})}return o}zt();I();Oe();function AA(e=process.env){let r=y();return qe(r,e)!=="forge"}function ty(e,r=process.env){if(AA(r))return e?.maxConcurrentWorkers??void 0}async function ny(e,r){let t=V(r.baseUrl?String(r.baseUrl):void 0),n=await J(r.secret?String(r.secret):void 0,e,{baseUrl:t}),o=`${t}/api/agent-os/by-id/${encodeURIComponent(e)}/runtime`;try{let s=await ei(o,n);if(!s.ok)return null;let a=s.response?.preferences?.maxConcurrentWorkers;if(a==null)return{maxConcurrentWorkers:null};let l=Number(a);return!Number.isFinite(l)||l<=0?{maxConcurrentWorkers:null}:{maxConcurrentWorkers:Math.floor(l)}}catch{return null}}I();Oe();import{spawnSync as IA}from"node:child_process";var OA=1e4,NA=4*1024*1024,oy=(e,r,t)=>{try{let n=IA(e,r,{encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:t?.timeoutMs??OA,maxBuffer:NA});return{ok:n.status===0,stdout:typeof n.stdout=="string"?n.stdout:"",stderr:typeof n.stderr=="string"?n.stderr:""}}catch(n){return{ok:!1,stdout:"",stderr:n instanceof Error?n.message:String(n)}}};function _a(e,r,t){return`${e} ${r} ${t}`}function Xo(e){let r=e.lastIndexOf("@");if(r<=0||r===e.length-1)return null;let t=e.slice(0,r),n=e.slice(r+1);return!/^[^/\s]+\/[^/\s]+$/.test(t)||!/^[0-9a-f]{7,40}$/i.test(n)?null:{repo:t,sha:n}}function sy(e){let r=e.trim().match(/[/:]([^/]+\/[^/]+)\/(?:pull|pulls|merge_requests|pull-requests)\/(\d+)/i);if(!r)return null;let t=Number(r[2]);return!Number.isFinite(t)||t<=0?null:{repo:r[1],number:t}}var TA=8e3,DA=30,MA=100,UA=400,WA=3600*1e3,Qu=0;function ed(){return Date.now()<Qu}function LA(e){let r=`${e.stdout}
-${e.stderr}`.toLowerCase();return r.includes("api rate limit exceeded")||r.includes("rate limit exceeded")||r.includes("secondary rate limit")}function iy(e){LA(e)&&(Qu=Math.max(Qu,Date.now()+WA))}function Zu(e,r){if(ed())return null;let t=e("gh",["api",...r]);if(!t.ok||!t.stdout.trim())return iy(t),null;try{return JSON.parse(t.stdout)}catch{return null}}function BA(e,r,t,n){if(ed())return null;let o=e("gh",["pr","view",String(t),"--repo",r,"--json",n.join(",")]);if(!o.ok||!o.stdout.trim())return iy(o),null;try{return JSON.parse(o.stdout)}catch{return null}}function rd(e){return ed()?!1:process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()?!0:e("gh",["auth","token"]).ok}function En(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function HA(e){return Array.isArray(e)?e.map(r=>En(r)).filter(r=>r!==null).slice(0,DA).map(r=>({context:r.context??null,state:r.state??null,target_url:r.target_url??null,description:r.description??null})):[]}function FA(e,r,t){let n=Zu(e,[`repos/${r}/commits/${t}/status`]);return n?{state:n.state??null,statuses:HA(n.statuses)}:null}var ay={provider:"github",kind:"pr_snapshot",version:"2",isAvailable:rd,collect(e,r){let t=sy(e);if(!t)return null;let n=BA(r,t.repo,t.number,["url","title","body","author","state","isDraft","mergedAt","mergeCommit","mergeable","headRefName","headRefOid","headRepositoryOwner","statusCheckRollup","files"]);if(!n)return null;let o=En(n.author),s=En(n.mergeCommit),i=En(n.headRepositoryOwner),a=typeof n.body=="string"?n.body.slice(0,TA):null,l=Array.isArray(n.statusCheckRollup)?n.statusCheckRollup.map(u=>En(u)).filter(u=>u!==null).slice(0,MA).map(u=>({name:u.name??u.context??null,status:u.status??u.state??null,conclusion:u.conclusion??null})):[],c=Array.isArray(n.files)?n.files.map(u=>En(u)).map(u=>typeof u?.path=="string"?u.path.trim():"").filter(Boolean).slice(0,UA):[];return{pull:{html_url:n.url??null,title:n.title??null,body:a,user:{login:o?.login??null},state:typeof n.state=="string"?n.state.toLowerCase():null,draft:n.isDraft??null,merged:!!n.mergedAt,merged_at:n.mergedAt??null,merge_commit_sha:s?.oid??null,mergeable:null,mergeable_state:n.mergeable??null,head:{sha:n.headRefOid??null,ref:n.headRefName??null,repo:{owner:{login:i?.login??null}}}},checkRuns:l,combinedStatus:{state:null,statuses:[]},changedFiles:c}}},ly={provider:"github",kind:"commit_status",version:"1",isAvailable:rd,collect(e,r){let t=Xo(e);return t?FA(r,t.repo,t.sha):null}},cy={provider:"github",kind:"branch_reachability",version:"1",isAvailable:rd,collect(e,r){let t=Xo(e);if(!t)return null;let n=Zu(r,[`repos/${t.repo}`]),o=typeof n?.default_branch=="string"&&n.default_branch.trim()?n.default_branch.trim():null;if(!o)return null;let s=Zu(r,[`repos/${t.repo}/compare/${encodeURIComponent(o)}...${t.sha}`]);if(!s)return null;let i=typeof s.status=="string"?s.status:null;return{defaultBranch:o,compareStatus:i,reachable:i==="identical"||i==="behind"}}};var KA=5,$A=/\b(READY|ERROR|BUILDING|QUEUED|CANCELED|INITIALIZING)\b/i,jA=/https:\/\/[^\s]+/,uy={provider:"vercel",kind:"deployment_status",version:"1",isAvailable(e){return e("vercel",["whoami"]).ok},collect(e,r){let t=Xo(e);if(!t)return null;let n=r("vercel",["list","--prod","--meta",`githubCommitSha=${t.sha}`]);if(!n.ok)return null;let o=[];for(let s of n.stdout.split(`
-`)){let i=s.match(jA)?.[0];if(!i)continue;let a=s.match($A)?.[1]?.toUpperCase()??null;if(o.push({url:i,state:a}),o.length>=KA)break}return{found:o.length>0,deployments:o}}};var td=[];function xa(e){td.some(r=>r.provider===e.provider&&r.kind===e.kind)||td.push(e)}function dy(e,r){return td.find(t=>t.provider===e&&t.kind===r)??null}function py(){xa(ay),xa(ly),xa(cy),xa(uy)}var VA=1,GA=25e3;function my(e,r={}){py();let t=r.run??oy,n=r.now??(()=>new Date),o=r.maxSubjects??VA,s=Date.now()+(r.deadlineMs??GA),i=new Set,a=e.filter(p=>{let m=_a(p.provider,p.kind,p.subject);return i.has(m)?!1:(i.add(m),!0)}),l=a.length>0?Math.floor(n().getTime()/6e4)%a.length:0,u=a.map((p,m)=>a[(l+m)%a.length]).slice(0,o),d={attempted:0,collected:0,cached:0,items:[],skipped:[]},f=new Map;for(let p of u){let m=_a(p.provider,p.kind,p.subject),h=n(),k=r.cache?.get(m,h)??null;if(k){d.cached+=1,d.collected+=1,d.items.push(k);continue}if(Date.now()>s){d.skipped.push({...p,reason:"budget_exhausted"});continue}let g=dy(p.provider,p.kind);if(!g){d.skipped.push({...p,reason:"no_recipe"});continue}let R=`${g.provider} ${g.kind}`,O=f.get(R);if(O===void 0&&(O=g.isAvailable(t),f.set(R,O)),!O){d.skipped.push({...p,reason:"provider_unavailable"});continue}if(r.cache?.reserve?.(p,m,n())===!1){d.skipped.push({...p,reason:"budget_exhausted"});continue}d.attempted+=1;let _=g.collect(p.subject,t);if(_==null){d.skipped.push({...p,reason:"collect_failed"});continue}d.collected+=1;let E={provider:p.provider,kind:p.kind,subject:p.subject,payload:_,observedAt:n().toISOString(),collectorVersion:g.version};d.items.push(E),r.cache?.set(m,E,n())}return d}T();C();import XA from"node:path";T();C();import fy from"node:path";var YA="provider-evidence-wanted.json",JA="provider-evidence-cache.json",qA=600*1e3;function gy(e){return fy.join(x(e),YA)}function zA(e){return fy.join(x(e),JA)}function hy(e){if(!Array.isArray(e))return[];let r=[];for(let t of e){if(!t||typeof t!="object"||Array.isArray(t))continue;let n=t,o=typeof n.provider=="string"?n.provider.trim():"",s=typeof n.kind=="string"?n.kind.trim():"",i=typeof n.subject=="string"?n.subject.trim():"";!o||!s||!i||r.push({provider:o,kind:s,subject:i})}return r}function ky(e){let r=w(gy(e),null);return hy(r?.wanted)}function yy(e,r){ae(gy(e),{savedAt:new Date().toISOString(),wanted:r})}function Ry(e,r={}){let t=r.ttlMs??qA,n=zA(e),s={...w(n,null)?.items??{}},i=!1;return{get(l,c){let u=s[l];if(!u)return null;let d=Date.parse(u.observedAt);return!Number.isFinite(d)||c.getTime()-d>t?(delete s[l],i=!0,null):u},set(l,c){s[l]=c,i=!0},flush(){i&&(ae(n,{savedAt:new Date().toISOString(),items:s}),i=!1)}}}function vy(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.providerEvidenceWanted;return Array.isArray(r)?hy(r):null}var QA="provider-evidence-shared-cache.json",ZA=6e4,eI=1,rI=1;function nd(e,r){let t=process.env[e];if(!t)return r;let n=Number.parseInt(t,10);return Number.isFinite(n)&&n>=0?n:r}function tI(){return XA.join(Z().harnessRoot,QA)}function nI(e){let r=e.toUpperCase().replace(/[^A-Z0-9]+/g,"_"),t=e==="github"?eI:rI;return nd(`KYNVER_PROVIDER_EVIDENCE_${r}_PER_MINUTE`,nd("KYNVER_PROVIDER_EVIDENCE_LIVE_COLLECTS_PER_MINUTE",t))}function by(){return nd("KYNVER_PROVIDER_EVIDENCE_SHARED_CACHE_TTL_MS",ZA)}function oI(e){return Math.floor(e.getTime()/6e4)*6e4}function sI(e){return`${e.provider}:${e.kind}`}function Sy(e,r={}){let t=Ry(e,{ttlMs:r.ttlMs??by()}),n=r.file??tI(),o=w(n,null),s={...o?.items??{}},i={...o?.budget??{}},a=r.ttlMs??by(),l=!1;return{get(u,d){let f=t.get(u,d);if(f)return f;let p=s[u];if(!p)return null;let m=Date.parse(p.observedAt);return!Number.isFinite(m)||d.getTime()-m>a?(delete s[u],l=!0,null):(t.set(u,p,d),p)},set(u,d,f){t.set(u,d,f),s[u]=d,l=!0},reserve(u,d,f){let p=nI(u.provider);if(p===0)return!0;let m=sI(u),h=oI(f),k=i[m];return!k||k.windowStartMs!==h?(i[m]={windowStartMs:h,used:1},l=!0,!0):k.used>=p?!1:(k.used+=1,l=!0,!0)},flush(){t.flush(),l&&(ae(n,{savedAt:new Date().toISOString(),items:s,budget:i}),l=!1)}}}function aI(){let e=process.env.KYNVER_PIPELINE_SWEEP_ENABLED;return e?e==="1"||e.toLowerCase()==="true":!1}async function lI(e,r){let t=L(e),n=[],o=Math.max(0,Number.parseInt(process.env.KYNVER_PIPELINE_COMPLETION_REPLAY_MAX_DEEP_CHECKS_PER_TICK??"0",10)||0),s=0;for(let i of Object.keys(t.workers||{})){let a=w(iI.join(x(t.id),"workers",b(i),"worker.json"),void 0);if(!a?.taskId||a.localOnly||et(a))continue;if(ut(a)){n.push({worker:i,ok:!0,taskId:a.taskId??null,skipped:!0});continue}if(s>=o)break;s++;let l=D(a);if(!oe(l))continue;let c=zr({alive:l.alive,finalResult:l.finalResult,changedFiles:l.changedFiles,gitAncestry:l.gitAncestry});if(!a.dispatched&&!l.finalResult&&!c?.salvageable)continue;let u=await _o({run:e,name:i,agentOsId:String(r.agentOsId||a.agentOsId||""),...r});n.push({worker:i,ok:u.ok,taskId:a.taskId??null})}return n}async function cI(e,r,t,n,o){let s=V(n.baseUrl?String(n.baseUrl):void 0),i=await J(n.secret?String(n.secret):void 0,e,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(e)}/operator/tick`,l=await Ss(),c=Di(r),u=null;try{let h=ky(r);if(h.length>0){let k=Sy(r);u=my(h,{cache:k}),k.flush?.()}else u=null}catch{u=null}let d=wa(r),f=await Ar(a,i,{agentOsId:e,runId:r,ingestHarness:!0,harnessBoardSnapshot:Eo(r),resourceGate:t,boxResourceSnapshot:To(t,{harnessRunId:r,boxKind:qe(y())}),packageVersions:l,...o?{harnessCleanup:o}:{},runnerPresence:Ze({runId:r}),activeHarnessWorkers:c,...d?.leaseToken?{meshCronLeaseToken:d.leaseToken}:{},...u&&u.items.length>0?{providerEvidence:u.items}:{}}),p=vy(f.response);if(p)try{yy(r,p)}catch{}let m=Xk(f);if(m)try{zk(r,m)}catch{}return{ok:f.ok,httpStatus:f.status,response:f.response,...u?{providerEvidence:{attempted:u.attempted,collected:u.collected,skipped:u.skipped.length}}:{}}}async function od(e){let r=String(N(String(e.run||""),"--run")),t=String(N(String(e.agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false";Eo(r);let o=await ny(t,e),s=ty(o),i=dr({runId:r,configuredMaxWorkersOverride:s}),a=Gu()?Vu(r):void 0,l=await cI(t,r,i,e,a),c=Zf(r,l),u=await ki(r,e),d=await lI(r,e),f=dr({runId:r,configuredMaxWorkersOverride:s}),p=Rn(),m=await ry(r,e),h=Zk(f,l),k=h.maxStarts,g=aI()?await bn({run:r,agentOsId:t,pipeline:!0,...e}):{ok:!0,skipped:!0,reason:"pipeline_sweep_disabled"},R=null,O=0,_=Qk(l),E=k;if(n&&E>0&&_.length>0){let Y=Math.min(E,_.length),$=await Xu({...e,run:r,agentOsId:t,targetTaskIds:_.join(",")},Y),F=xn($);O+=F,E=Math.max(0,E-F),R={exactTargetTaskIds:_,exact:$,startedCount:O}}if(n&&E>0){let Y=await Xu({...e,run:r,agentOsId:t},E),$=xn(Y);O+=$,R=R&&typeof R=="object"?{...R,broad:Y,startedCount:O}:Y}else!n||k<=0?R||(R={ok:!0,skipped:!0,reason:n?f.reason??"no slots or queued work":"execute disabled",maxStarts:0,dispatchAdvice:h,..._.length?{exactTargetTaskIds:_,exactOnly:!0}:{}}):R&&typeof R=="object"&&(R={...R,broadSkipped:!0,startedCount:O});let U=!h.underutilized&&k===0&&d.length===0&&O===0;return{runId:r,agentOsId:t,execute:n,resourceGate:i,dispatchResourceGate:f,leaseRenewal:u,completedWorkers:d,staleReconcile:p,harnessCleanup:a,planProgressSync:m,completionAckSync:c,operatorTick:l,sweep:g,dispatchAdvice:h,dispatch:R,idle:U}}I();import PI from"node:os";import{readFileSync as uI}from"node:fs";import{homedir as dI,platform as pI}from"node:os";import mI from"node:path";import{execFileSync as fI}from"node:child_process";function Cy(e,r=Date.now()){try{let t=JSON.parse(e),n=t.claudeAiOauth?.accessToken,o=t.claudeAiOauth?.expiresAt;return typeof n!="string"||!n||typeof o=="number"&&o-r<6e4?null:n}catch{return null}}function gI(){if(pI()==="darwin")try{let e=fI("security",["find-generic-password","-s","Claude Code-credentials","-w"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return Cy(e.trim())}catch{return null}try{let e=uI(mI.join(dI(),".claude",".credentials.json"),"utf8");return Cy(e)}catch{return null}}function wy(e=process.env,r={}){let t=e.ANTHROPIC_API_KEY?.trim();if(t)return{kind:"api_key",key:t};let n=e.KYNVER_CHAT_USE_CLAUDE_OAUTH;if(r.oauthOptIn===!0||n==="1"||n==="true"||n==="yes"){let s=gI();if(s)return{kind:"oauth",token:s}}return null}var hI="You are Claude Code, Anthropic's official CLI for Claude.";function kI(){return{blocks:[],stopReason:null,inputTokens:0,outputTokens:0}}function yI(e,r){let t=r;switch(t.type){case"message_start":return e.inputTokens=t.message?.usage?.input_tokens??0,"";case"content_block_start":{let n=t.index??e.blocks.length;return e.blocks[n]={type:t.content_block?.type==="tool_use"?"tool_use":"text",text:"",id:t.content_block?.id,name:t.content_block?.name,inputJson:""},""}case"content_block_delta":{let n=e.blocks[t.index??e.blocks.length-1];return n?t.delta?.type==="text_delta"&&t.delta.text?(n.text+=t.delta.text,t.delta.text):(t.delta?.type==="input_json_delta"&&t.delta.partial_json&&(n.inputJson+=t.delta.partial_json),""):""}case"message_delta":return t.delta?.stop_reason&&(e.stopReason=t.delta.stop_reason),typeof t.usage?.output_tokens=="number"&&(e.outputTokens=t.usage.output_tokens),"";default:return""}}function RI(e){let r=[];for(let t of e.blocks)if(t)if(t.type==="tool_use"){let n={};try{n=t.inputJson?JSON.parse(t.inputJson):{}}catch{n={}}r.push({type:"tool_use",id:t.id??"",name:t.name??"",input:n})}else t.text&&r.push({type:"text",text:t.text});return{content:r,stop_reason:e.stopReason??"end_turn",usage:{input_tokens:e.inputTokens,output_tokens:e.outputTokens}}}async function*vI(e){let r=e.getReader(),t=new TextDecoder,n="";try{for(;;){let{done:o,value:s}=await r.read();if(o)break;n+=t.decode(s,{stream:!0});let i;for(;(i=n.indexOf(`
-`))!==-1;){let a=n.slice(0,i).trim();if(n=n.slice(i+1),!a.startsWith("data:"))continue;let l=a.slice(5).trim();if(!(!l||l==="[DONE]"))try{yield JSON.parse(l)}catch{}}}}finally{r.releaseLock()}}function bI(e=process.env){return(e.ANTHROPIC_BASE_URL?.trim()||"https://api.anthropic.com").replace(/\/$/,"")}async function _y(e){let{creds:r,model:t,payload:n}=e,o={"Content-Type":"application/json","anthropic-version":"2023-06-01"},s=n.system;r.kind==="api_key"?o["x-api-key"]=r.key:(o.Authorization=`Bearer ${r.token}`,o["anthropic-beta"]="oauth-2025-04-20",s=[{type:"text",text:hI},{type:"text",text:n.system}]);let i=await fetch(`${bI()}/v1/messages`,{method:"POST",headers:o,signal:e.signal,body:JSON.stringify({model:t,max_tokens:n.maxTokens,system:s,messages:n.messages,...Array.isArray(n.tools)&&n.tools.length>0?{tools:n.tools}:{},...n.temperature!==void 0?{temperature:n.temperature}:{},stream:!0})});if(!i.ok||!i.body){let l=await i.text().catch(()=>"");throw new Error(`Anthropic stream failed: HTTP ${i.status}${l?` \u2014 ${l.slice(0,300)}`:""}`)}let a=kI();for await(let l of vI(i.body)){let c=yI(a,l);c&&e.onDelta(c)}return RI(a)}var Pn=class{constructor(r,t=150){this.flushFn=r;this.floorMs=t}flushFn;floorMs;buffer="";timer=null;closed=!1;push(r){this.closed||!r||(this.buffer+=r,this.timer||(this.timer=setTimeout(()=>{this.timer=null,this.flushNow()},this.floorMs)))}flushNow(){if(!this.buffer)return;let r=this.buffer;this.buffer="",this.flushFn(r)}close(){this.closed||(this.closed=!0,this.timer&&(clearTimeout(this.timer),this.timer=null),this.flushNow())}};import{spawn as _I}from"node:child_process";var SI=new Set(["run list","run status","worker list","worker status","worker tail","status","cron status","monitor status","monitor list"]),CI=new Set(["run create","run dispatch","run sweep","worker start","worker stop","worker complete","cleanup"]),wI=["--secret","--api-key","--keeper-child"];function xy(e){if(!Array.isArray(e)||e.length===0||e.some(n=>typeof n!="string"))return{ok:!1,mutating:!1,reason:"argv must be a non-empty string array"};for(let n of e){if(wI.some(o=>n===o||n.startsWith(`${o}=`)))return{ok:!1,mutating:!1,reason:`forbidden flag: ${n}`};if(n.includes(`
-`)||n.includes("\0"))return{ok:!1,mutating:!1,reason:"control characters refused"}}let r=e[0],t=e.length>1&&!e[1].startsWith("--")?`${r} ${e[1]}`:r;return t==="doctor runtime-takeover"?e.includes("--remediate-default-repo")?{ok:!0,mutating:!0}:{ok:!0,mutating:!1}:r==="cleanup"?{ok:!0,mutating:e.includes("--execute")}:SI.has(t)?{ok:!0,mutating:!1}:CI.has(t)?{ok:!0,mutating:!0}:{ok:!1,mutating:!1,reason:`verb not allowlisted: ${t}`}}var xI=10*6e4,EI=5e3,Ey=2e5;async function Py(e,r,t={}){let n=xy(e);if(!n.ok)return{exitCode:null,timedOut:!1,refused:n.reason};let o=t.cliEntry??process.argv[1],s=t.timeoutMs??xI,i=new Pn(r);return new Promise(a=>{let l=0,c=!1,u=_I(process.execPath,[o,...e],{stdio:["ignore","pipe","pipe"],env:process.env}),d=p=>{if(l>=Ey)return;let m=p.toString("utf8").slice(0,Ey-l);l+=m.length,i.push(m)};u.stdout?.on("data",d),u.stderr?.on("data",d);let f=setTimeout(()=>{c=!0,u.kill("SIGTERM"),setTimeout(()=>u.kill("SIGKILL"),EI).unref()},s);u.on("error",p=>{clearTimeout(f),i.push(`spawn failed: ${p.message}`),i.close(),a({exitCode:null,timedOut:!1,refused:void 0})}),u.on("close",p=>{clearTimeout(f),i.close(),a({exitCode:p,timedOut:c})})})}var AI=25e3,II=32e3,OI=5e3,NI=6e4,Ay=5*6e4,TI=5e3,DI="claude-sonnet-4-6";async function MI(e,r,t){let n=t.KYNVER_RUNTIME_CHAT_BRIDGE_URL?.trim();if(n)return n;if(!e)return null;let o=new AbortController,s=setTimeout(()=>o.abort(),TI);try{let i=await fetch(`${e.replace(/\/$/,"")}/api/runtime/chat-bridge`,{headers:{Authorization:`Bearer ${r}`},signal:o.signal});if(!i.ok)return null;let a=await i.json().catch(()=>null);return typeof a?.bridgeUrl=="string"&&a.bridgeUrl.trim()?a.bridgeUrl.trim():null}catch{return null}finally{clearTimeout(s)}}async function Iy(e=process.env){let r=y(),t=r.agentOsId?.trim(),n=se();if(!t||!n)return null;let o=await MI(r.apiBaseUrl,n,e);return o?{bridgeUrl:o.replace(/\/$/,""),agentOsId:t,apiKey:n,boxId:PI.hostname(),model:e.KYNVER_CHAT_MODEL?.trim()||r.defaultModel?.trim()||DI,useClaudeOauth:r.chatUseClaudeOauth===!0}:null}async function UI(e,r){let t=new AbortController,n=setTimeout(()=>t.abort(),II),o=setInterval(()=>{r()&&t.abort()},500);try{let s=await fetch(`${e.bridgeUrl}/runtime-chat/claim`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,boxId:e.boxId,waitMs:AI}),signal:t.signal});if(s.status===204)return null;if(s.status===401||s.status===403)return"auth_error";if(!s.ok)throw new Error(`claim failed: HTTP ${s.status}`);return(await s.json().catch(()=>null))?.turn??null}catch(s){if(r())return null;throw s}finally{clearTimeout(n),clearInterval(o)}}async function bt(e,r,t){return(await fetch(`${e.bridgeUrl}/runtime-chat/turns/${encodeURIComponent(r)}/events`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,events:t})})).ok}async function WI(e,r){let t=0,n=Array.isArray(r.payload?.argv)?r.payload.argv:[],o=await Py(n,s=>{bt(e,r.turnId,[{seq:t++,kind:"delta",text:s}])});o.refused?await bt(e,r.turnId,[{seq:t++,kind:"error",error:`command_refused: ${o.refused}`}]).catch(()=>{}):await bt(e,r.turnId,[{seq:t++,kind:"final",message:{exitCode:o.exitCode,timedOut:o.timedOut}}]).catch(()=>{}),console.error(JSON.stringify({event:"command_turn_done",turnId:r.turnId,argv:n.slice(0,4),exitCode:o.exitCode,timedOut:o.timedOut,refused:o.refused??null}))}async function LI(e,r){let t=0,n=!1,o=new AbortController,s=l=>{n||bt(e,r.turnId,[{seq:t++,kind:"delta",text:l}]).then(c=>{c||(n=!0,o.abort())})},i=new Pn(s),a=wy(process.env,{oauthOptIn:e.useClaudeOauth});if(!a){await bt(e,r.turnId,[{seq:0,kind:"error",error:"no_local_credentials"}]).catch(()=>{});return}try{let l=await _y({creds:a,model:e.model,payload:r.payload,onDelta:c=>i.push(c),signal:o.signal});i.close(),n||await bt(e,r.turnId,[{seq:t++,kind:"final",message:l}]),console.error(JSON.stringify({event:"chat_turn_done",turnId:r.turnId,model:e.model}))}catch(l){i.close(),n||await bt(e,r.turnId,[{seq:t++,kind:"error",error:l instanceof Error?l.message:String(l)}]).catch(()=>{}),console.error(JSON.stringify({event:"chat_turn_error",turnId:r.turnId,error:l instanceof Error?l.message:String(l)}))}}async function sd(e,r){for(let n=0;n<e&&!r();n+=500)await new Promise(o=>setTimeout(o,Math.min(500,e-n)))}async function Oy(e){let r=await Iy();for(r||console.error(JSON.stringify({event:"chat_claim_loop_waiting",reason:!se()||!y().agentOsId?.trim()?"machine_not_linked":"bridge_not_discovered (rollout off, discovery route missing/404, or API unreachable)",rediscoverMs:Ay}));!r&&!e.shouldStop();){if(!se()||!y().agentOsId?.trim()||(await sd(Ay,e.shouldStop),e.shouldStop()))return;r=await Iy()}if(!(!r||e.shouldStop())){for(console.error(JSON.stringify({event:"chat_claim_loop_start",bridgeUrl:r.bridgeUrl,agentOsId:r.agentOsId,boxId:r.boxId,model:r.model,useClaudeOauth:r.useClaudeOauth}));!e.shouldStop();)try{let t=await UI(r,e.shouldStop);if(t==="auth_error"){console.error(JSON.stringify({event:"chat_claim_auth_error"})),await sd(NI,e.shouldStop);continue}t&&(t.payload?.kind==="command"?await WI(r,t):await LI(r,t))}catch(t){console.error(JSON.stringify({event:"chat_claim_error",error:t instanceof Error?t.message:String(t)})),await sd(OI,e.shouldStop)}console.error(JSON.stringify({event:"chat_claim_loop_stop"}))}}var BI=6e4,HI=5*6e4,FI=10,KI=250;async function id(e,r){let t=e;for(;t>0&&!r();){let n=Math.min(KI,t);await wr(n),t-=n}}async function Qo(e){wn();let r=String(N(String(e.run||""),"--run")),t=String(N(String(e.agentOsId||y().agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false",o=Number(e.intervalMs)>0?Math.floor(Number(e.intervalMs)):BI,s=!1,i=0;process.on("SIGINT",()=>{s=!0}),process.on("SIGTERM",()=>{s=!0});let a=Go();a.remediated&&console.error(JSON.stringify({event:"daemon_default_repo_remediated",defaultRepo:a.resolved?.defaultRepo??null,configPath:a.configPath}));let l=Pk(y());l.ok||(console.error(JSON.stringify({event:"daemon_start_blocked",runId:r,agentOsId:t,errors:l.errors})),process.exit(1)),console.error(JSON.stringify({event:"daemon_start",runId:r,agentOsId:t,execute:n,intervalMs:o,boxKind:l.box.boxKind,workerCapSource:l.workerCapSource,maxConcurrentWorkers:l.maxConcurrentWorkers}));let c=vr(),u=Oy({shouldStop:()=>s}).catch(f=>{console.error(JSON.stringify({event:"chat_claim_loop_crashed",error:f instanceof Error?f.message:String(f)}))}),d=!1;for(;!s;)try{Ok({agentOsId:t,runId:r,instructionBundleVersion:Ir()});let f=await Qs(e.secret?String(e.secret):void 0,t);if(!f.ok){d||(d=!0,console.error(JSON.stringify({event:"daemon_runner_credential_missing",agentOsId:t,reason:f.reason,remedy:`run \`kynver runner credential --agent-os-id ${t}\` (or \`kynver bootstrap\`); ticks resume automatically once the credential exists`}))),await id(o,()=>s);continue}d&&(d=!1,console.error(JSON.stringify({event:"daemon_runner_credential_recovered",agentOsId:t}))),await au({agentOsId:t,baseUrl:Yl(e.baseUrl?String(e.baseUrl):void 0),secret:f.secret});let p=await od({run:r,agentOsId:t,execute:n,...e});if(console.error(JSON.stringify({event:"daemon_tick",...p})),c.tickEnabled){let g=wa(r);if(g&&!g.authorized)console.error(JSON.stringify({event:"daemon_cron_tick_skipped",reason:"mesh_cron_lease_not_authorized",holderBoxId:g.holderBoxId}));else{let R=await _n({env:c,agentOsIdFilter:t});R.enabled&&(R.fired>0||R.errors>0||R.lockHeld)&&console.error(JSON.stringify({event:"daemon_cron_tick",...R}))}}p.idle?i++:i=0;let m=Math.floor(st("daemon.maxIdleStreak",FI)),h=Math.floor(st("daemon.idleIntervalMs",HI)),k=i>=m?h:o;await id(k,()=>s)}catch(f){console.error(JSON.stringify({event:"daemon_tick_error",error:f.message})),await id(o,()=>s)}await u,console.error(JSON.stringify({event:"daemon_stop",runId:r,agentOsId:t}))}I();import{spawn as $I}from"node:child_process";C();var jI=15*6e4,Ny=2*6e4,Ty=1e4,VI=5e3,GI=5*6e4,YI=30*6e4,Dy=5e3;function JI(e,r=process.env){let t=typeof e=="string"?Number.parseInt(e,10):NaN;if(Number.isFinite(t)&&t>0)return t;let n=Number.parseInt(r.KYNVER_DAEMON_STALL_MS??"",10);return Number.isFinite(n)&&n>0?n:jI}function Ea(e,r=process.env){if(e.keeperChild===!0||e.keeperChild==="true"||e.noSupervise===!0||e.noSupervise==="true"||e.supervised==="false")return!1;let t=(r.KYNVER_DAEMON_SUPERVISED??"").trim().toLowerCase();return!(t==="0"||t==="false"||t==="no"||t==="off")}function qI(e,r=VI,t=GI){let n=Math.min(Math.max(e,1)-1,10);return Math.min(r*2**n,t)}function zI(e,r,t=YI){return r-e>=t}function St(e,r={}){console.error(JSON.stringify({event:`daemon_keeper_${e}`,...r}))}function XI(e){let r=[];for(let t=0;t<e.length;t+=1){let n=e[t];if(!(n==="--supervised"||n==="--no-supervise"||n==="--keeper-child")){if(n==="--stall-ms"){t+1<e.length&&!e[t+1].startsWith("--")&&(t+=1);continue}n.startsWith("--stall-ms=")||n.startsWith("--supervised=")||r.push(n)}}return r.push("--keeper-child"),r}async function Pa(e,r=process.argv.slice(2)){let t=String(N(String(e.agentOsId||y().agentOsId||""),"--agent-os-id")),n=JI(e.stallMs),o=XI(r),s=process.argv[1],i=!1,a=null,l=0,c=u=>{i=!0,St("stop",{signal:u}),a?.pid&&a.kill(u)};for(process.on("SIGINT",()=>c("SIGINT")),process.on("SIGTERM",()=>c("SIGTERM")),St("start",{agentOsId:t,stallMs:n,childArgv:o});!i;){let u=Date.now(),d=!1,f=null,p=null;for(a=$I(process.execPath,[s,...o],{stdio:"inherit",env:process.env}),St("child_spawned",{pid:a.pid??null}),a.on("exit",(k,g)=>{d=!0,f=k,p=g});!d&&!i&&(await wr(Dy),!(d||i));){if(Date.now()-u<Ny)continue;let k=Nk(t),g=k&&k.pid===a.pid?k:null;if(g&&Tk(g,n)){St("stall_detected",{pid:a.pid??null,lastBeatAt:g.observedAt,stallMs:n}),a.kill("SIGTERM"),await wr(Ty),d||a.kill("SIGKILL");break}if(!g&&Date.now()-u>n+Ny){St("no_heartbeat_detected",{pid:a.pid??null,stallMs:n}),a.kill("SIGTERM"),await wr(Ty),d||a.kill("SIGKILL");break}}for(;!d&&!i;)await wr(Dy);if(i)break;let m=Date.now();zI(u,m)&&(l=0),l+=1;let h=qI(l);St("child_exited",{code:f,signal:p,uptimeMs:m-u,consecutiveFailures:l,respawnInMs:h}),await wr(h)}St("stopped",{agentOsId:t})}T();import{existsSync as Ia}from"node:fs";async function Aa(e=vr()){let r=await vt(e.storePath).catch(()=>[]),t=await Ca(e.statePath).catch(()=>({version:1,jobs:{}})),n=!!(e.fireBaseUrl&&e.secret),o=ba(e),s="disabled";return o?s="kynver-cron-daemon":process.env.QSTASH_TOKEN?.trim()&&(s="qstash"),{primary:s,env:{storePath:e.storePath,statePath:e.statePath,tickEnabled:e.tickEnabled,fireBaseUrl:e.fireBaseUrl,missedRunPolicy:e.missedRunPolicy,maxCatchUpPerTick:e.maxCatchUpPerTick,maxRetries:e.maxRetries},jobCount:r.length,stateJobCount:Object.keys(t.jobs).length,credentialsReady:n,daemonPrimary:o}}import{homedir as QI}from"node:os";import ZI from"node:path";Pr();var Br="watchdog:board-sweep",eO="*/5 * * * *",rO=["Set KYNVER_SCHEDULER_PROVIDER=kynver-cron on the hosted Kynver deployment (Vercel).","Set KYNVER_CRON_SECRET to the same value written to ~/.kynver/.env by this installer.","Unset KYNVER_CRON_STORE_PATH on Vercel \u2014 the connected box owns the local store.","Keep QSTASH_TOKEN only if other non-watchdog schedules still use QStash (analyst/market jobs)."];function My(e){let r=e.storePath?.trim()||Lr(),t=e.envFilePath?.trim()||we,n=ZI.join(QI(),".kynver","config.json"),o=`/api/agent-os/by-id/${e.agentOsId}/scheduler/fire`,s=[];e.apiBaseUrl?.trim()||s.push("apiBaseUrl \u2014 run `kynver setup --api-base-url \u2026`"),e.agentOsId?.trim()||s.push("agentOsId \u2014 run `kynver setup --agent-os-id \u2026`");let i={KYNVER_API_URL:e.apiBaseUrl,KYNVER_CRON_SECRET:e.cronSecret,KYNVER_CRON_STORE_PATH:r,KYNVER_CRON_TICK_ENABLED:"1",KYNVER_CRON_DAEMON_PRESENT:"1"},a=["OPENCLAW_CRON_STORE_PATH","OPENCLAW_CRON_SECRET","OPENCLAW_CRON_FIRE_BASE_URL"],l={deploymentSchedulerProvider:"kynver-cron",apiBaseUrl:e.apiBaseUrl,agentOsId:e.agentOsId,...e.defaultDaemonRunId?{defaultDaemonRunId:e.defaultDaemonRunId}:{}};return{envFilePath:t,configPath:n,storePath:r,envUpdates:i,envRemovals:a,configUpdates:l,deploymentSteps:rO,prerequisites:s,systemdSupported:process.platform==="linux",watchdogSpec:{kind:"watchdog",cron:eO,dedupeKey:Br,callbackPath:o}}}Pr();async function An(e){let r=e.envFilePath??we,t=[],n=vr(),o=await Aa(n),s=Qt(r);t.push({id:"config_agent_os",ok:!!e.config.agentOsId?.trim(),summary:e.config.agentOsId?`agentOsId configured (${e.config.agentOsId})`:"agentOsId missing in ~/.kynver/config.json",remediation:"Run `kynver setup --agent-os-id <id>`."}),t.push({id:"config_api_base",ok:!!(e.config.apiBaseUrl?.trim()||n.fireBaseUrl),summary:n.fireBaseUrl?`fire base URL resolved (${n.fireBaseUrl})`:"KYNVER_API_URL / apiBaseUrl not configured",remediation:"Run `kynver setup --api-base-url https://\u2026`."}),t.push({id:"deployment_provider",ok:e.config.deploymentSchedulerProvider==="kynver-cron",summary:`deploymentSchedulerProvider=${e.config.deploymentSchedulerProvider??"(unset)"}`,remediation:'Run `kynver cron install` or set deploymentSchedulerProvider to "kynver-cron".'}),t.push({id:"cron_secret",ok:!!n.secret,summary:n.secret?"KYNVER_CRON_SECRET present":"KYNVER_CRON_SECRET missing",remediation:"Run `kynver cron install` to generate and persist the shared secret."}),t.push({id:"env_file",ok:Ia(r)&&!!s.get("KYNVER_CRON_SECRET"),summary:Ia(r)?`~/.kynver/.env present (${s.size} keys)`:"~/.kynver/.env missing",remediation:"Run `kynver cron install` to write ~/.kynver/.env."}),t.push({id:"cron_store",ok:Ia(n.storePath),summary:Ia(n.storePath)?`cron store present (${n.storePath})`:`cron store missing (${n.storePath})`,remediation:"Run `kynver cron install` to initialize the local store."});let a=(await vt(n.storePath).catch(()=>[])).find(u=>u.spec.dedupeKey===Br);t.push({id:"watchdog_local",ok:!!a,summary:a?`watchdog entry in local store (${a.providerScheduleId})`:"watchdog entry not mirrored in local cron store",remediation:"Run `kynver cron install` (with API access) to register and mirror watchdog."}),t.push({id:"daemon_primary",ok:o.daemonPrimary,summary:o.daemonPrimary?"cron tick enabled with credentials (daemon-primary)":`cron primary=${o.primary}; tickEnabled=${o.env.tickEnabled}`,remediation:"Ensure KYNVER_CRON_TICK_ENABLED=1 and run `kynver daemon` (or enable the systemd user unit)."});let l=s.has("OPENCLAW_CRON_STORE_PATH")||s.has("OPENCLAW_CRON_SECRET")||s.has("OPENCLAW_CRON_FIRE_BASE_URL");return t.push({id:"legacy_openclaw_env",ok:!l,summary:l?"legacy OPENCLAW_CRON_* keys still present in ~/.kynver/.env":"no legacy OPENCLAW_CRON_* keys in env file",remediation:"Re-run `kynver cron install` to retire legacy aliases."}),{ok:t.every(u=>u.ok),checks:t}}I();Je();C();import{existsSync as Vy}from"node:fs";import{createHash as tO}from"node:crypto";function Uy(e){let r=JSON.stringify({cb:e.callbackPath,cron:e.cron??null,runAt:e.runAt??null,kind:e.kind,target:e.target,dedupeKey:e.dedupeKey??null});return`kc-cron:${tO("sha1").update(r).digest("hex").slice(0,16)}`}async function ad(e,r,t={}){return fetch(e,{...t,headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`,...t.headers}})}async function Wy(e,r,t,n={}){let o=new URLSearchParams(n),s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs?${o}`,i=await ad(s,t),a=await i.text(),l=null;try{l=JSON.parse(a)}catch{l=null}if(!i.ok)throw new Error(`list scheduler jobs failed (${i.status}): ${l?.error??a.slice(0,200)}`);return l?.items??[]}async function Ly(e,r,t,n,o={}){let s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/watchdog/ensure`,i={};n&&(i.cron=n),o.requireProvider&&(i.requireProvider=o.requireProvider);let a=await ad(s,t,{method:"POST",body:JSON.stringify(i)}),l=await a.text(),c=null;try{c=JSON.parse(l)}catch{c=null}if(!a.ok||!c?.job)throw new Error(`ensure watchdog failed (${a.status}): ${c?.error??l.slice(0,200)}`);return{job:c.job,route:c.route??`/api/agent-os/by-id/${r}/scheduler/fire`,dedupeKey:c.dedupeKey??Br,requestedCron:c.requestedCron??n??"*/5 * * * *",selectedProvider:c.selectedProvider??c.job.provider??null}}async function By(e,r,t,n){let o=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs/${encodeURIComponent(t)}/cancel`,s=await ad(o,n,{method:"POST",body:"{}"});if(!s.ok){let i=await s.text();throw new Error(`cancel job ${t} failed (${s.status}): ${i.slice(0,200)}`)}}function Hy(e,r,t=Br){return{kind:"watchdog",scheduleKind:"cron",cron:r,callbackPath:`/api/agent-os/by-id/${e}/scheduler/fire`,payload:{source:"agent-os.watchdog-schedule",agentOsId:e},target:{agentOsId:e},description:"Watchdog board sweep (repair loop)",dedupeKey:t}}function Fy(e){return e.filter(r=>r.kind==="watchdog"&&r.dedupeKey===Br&&r.provider==="qstash"&&r.status!=="cancelled")}function nO(e){return e.find(r=>r.kind==="watchdog"&&r.dedupeKey===Br&&r.provider==="kynver-cron"&&r.status!=="cancelled")}function Ky(e){return nO(e)?{allowed:!0}:{allowed:!1,reason:"Cannot cancel QStash watchdog until hosted KYNVER_SCHEDULER_PROVIDER=kynver-cron is live and a kynver-cron watchdog row exists. Set Vercel env, redeploy, re-run `kynver cron install`, then `--confirm-qstash-removal`."}}Pr();Pr();import{randomBytes as oO}from"node:crypto";function sO(){return oO(32).toString("base64url")}function $y(e=we){let r=Ju();if(r)return{secret:r,generated:!1,source:"env"};let n=Qt(e).get("KYNVER_CRON_SECRET")?.trim();return n?{secret:n,generated:!1,source:"env-file"}:{secret:sO(),generated:!0,source:"generated"}}$s();Vs();T();function jy(e,r){if(r?.trim())return r.trim();if(e.defaultDaemonRunId?.trim())return e.defaultDaemonRunId.trim();let t=Z().runsDir;return Vy(t)?X().sort((o,s)=>Date.parse(s.createdAt)-Date.parse(o.createdAt))[0]?.id??null:null}async function Oa(e={}){let r=e.execute!==!1,t=y(),n=ir(e.apiBaseUrl?.trim()||t.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||""),o=e.agentOsId?.trim()||t.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||"",s=$y(),i=My({config:t,apiBaseUrl:n,agentOsId:o,cronSecret:s.secret,defaultDaemonRunId:e.runId?.trim()||t.defaultDaemonRunId,installSystemd:e.installSystemd===!0}),a=[...i.prerequisites],l={ok:!1,dryRun:!r,plan:i,secretGenerated:s.generated,configPath:q(i.configPath),storeInitialized:!1,blockers:a};if(a.length)return l;if(r){let c=Hs(i.envUpdates,{filePath:i.envFilePath,removeKeys:i.envRemovals});l.envFile={path:q(c.path),changed:c.changed,keysWritten:c.keysWritten};let u={...t,...i.configUpdates},d=jy(u,e.runId);d&&(u.defaultDaemonRunId=d),ce(u),process.env.KYNVER_API_URL=n,process.env.KYNVER_CRON_SECRET=s.secret,process.env.KYNVER_CRON_STORE_PATH=i.storePath,process.env.KYNVER_CRON_TICK_ENABLED="1";let f=await Vk(i.storePath);l.storeInitialized=f.created||Vy(i.storePath);let p=se();if(p)try{let m=await nt(o,{baseUrl:n,apiKey:p});tt(o,m)}catch{}if(!e.skipWatchdog)if(!p)l.watchdog={error:"KYNVER_API_KEY required to register watchdog on server"},a.push("login \u2014 run `kynver login --api-key \u2026` to register watchdog remotely");else try{let m=await Ly(n,o,p,void 0,{requireProvider:"kynver-cron"}),h=Hy(o,m.requestedCron,m.dedupeKey),k={providerScheduleId:Uy(h),spec:h,registeredAt:new Date().toISOString(),paused:!1};await jk(k,i.storePath),l.watchdog={remoteJobId:m.job.id,provider:m.selectedProvider??m.job.provider,localProviderScheduleId:k.providerScheduleId};let g=await Wy(n,o,p),R=Fy(g),O=["Phase 1 (local): `kynver cron install` writes box env/store and may fail remote watchdog until Vercel cutover.","Phase 2 (hosted): set KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET on Vercel, redeploy, re-run install.","Phase 3 (cleanup): `kynver cron install --confirm-qstash-removal` after a kynver-cron watchdog row exists.","Analyst/market QStash schedules are never touched by this installer."],_=[];if(R.length)if(e.confirmQstashRemoval){let E=Ky(g);if(!E.allowed)a.push(E.reason);else for(let U of R)await By(n,o,U.id,p),_.push(U.id)}else a.push(`${R.length} QStash watchdog job(s) still active \u2014 complete Vercel cutover (KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET), re-run install, then --confirm-qstash-removal`);l.qstashWatchdog={found:R.map(E=>({id:E.id,provider:E.provider,status:E.status})),removed:_,manualSteps:O}}catch(m){l.watchdog={error:m.message},a.push(`watchdog registration failed: ${m.message}`)}if(e.installSystemd){let m=jy({...t,...i.configUpdates},e.runId);if(!m)l.systemd={supported:i.systemdSupported,unitPath:null,written:!1,enabled:!1,started:!1,note:"No harness run found \u2014 run `kynver run create` first or pass --run <runId>."},a.push("harness run \u2014 create a run before installing systemd unit");else{try{L(m)}catch{a.push(`harness run ${m} not found`)}if(l.systemd=js({envFilePath:i.envFilePath,agentOsId:o,runId:m,kynverBin:en()},r),r&&l.systemd.enabled){let h=y();ce({...h,daemonSupervisionOwner:"systemd"})}}}if(!e.skipTestFire&&a.length===0){let m=await _n({agentOsIdFilter:o});l.testFire={fired:m.fired,errors:m.errors},m.errors>0&&a.push(`test fire reported ${m.errors} error(s) \u2014 check server KYNVER_CRON_SECRET matches`)}else e.skipTestFire&&(l.testFire={fired:0,errors:0,skipped:!0});l.verify=await An({config:y(),envFilePath:i.envFilePath}),l.blockers=a,l.ok=a.length===0&&(l.verify?.ok??!1)}else l.ok=a.length===0;return l}var iO=["deployment_provider","cron_secret","env_file","cron_store"];function Gy(e){let r=e?.trim().toLowerCase();if(r==="qstash"||r==="kynver-cron"||r==="openclaw-cron")return r;if(r==="openclaw")return"openclaw-cron"}function aO(e){let r=Gy(process.env.KYNVER_SCHEDULER_PROVIDER);if(r==="qstash"||r==="openclaw-cron")return!1;if(r==="kynver-cron")return!0;let t=Gy(e.deploymentSchedulerProvider);return t==="qstash"||t==="openclaw-cron"?!1:t==="kynver-cron"?!0:!!(e.agentOsId?.trim()&&e.apiBaseUrl?.trim())}async function lO(e){if(!aO(e))return{expectsKynverCron:!1,ready:!0,failedChecks:[]};let t=(await An({config:e})).checks.filter(n=>iO.includes(n.id)&&!n.ok);return{expectsKynverCron:!0,ready:t.length===0,failedChecks:t}}function cO(e){let r=["Run `kynver cron install` on this box."];for(let t of e)t.remediation&&r.push(`  \u2022 ${t.id}: ${t.remediation}`);return r}function ld(e){return e===!0||e==="true"||e==="1"||e==="yes"||e==="on"}async function Yy(e){if(ld(e.args.skipCron))return{action:"skipped"};let r=await lO(e.config);if(!r.expectsKynverCron||r.ready)return{action:"ready"};console.log(""),console.log("  Local Kynver Cron is not ready \u2014 running `kynver cron install`\u2026");let t=ld(e.args.installSystemd)||ld(e.args["install-systemd"]),n=await Oa({execute:!0,skipTestFire:!0,agentOsId:e.agentOsId,runId:e.runId,installSystemd:t});if(n.ok)return console.log("  Kynver Cron configured for this box."),console.log(""),{action:"installed",installOk:!0};console.log(""),console.log("  Cron install did not fully complete (daemon will still start):");for(let o of n.blockers)console.log(`    ! ${o}`);if(n.plan.deploymentSteps.length){console.log(""),console.log("  Hosted deployment (complete on Vercel, then re-run install):");for(let o of n.plan.deploymentSteps)console.log(`    - ${o}`)}for(let o of cO(r.failedChecks))console.log(`  ${o}`);return console.log(""),{action:"guided",installOk:!1,blockers:n.blockers}}I();Oe();Vn();function Jy(e=y(),r=process.env){let t=Ae(r,e),n=[...t.warnings],o=e.maxConcurrentWorkers,s=!1,i={...e};if(e.boxKind?.trim()||(i.boxKind=t.boxKind,s=!0,n.push(`persisted boxKind=${t.boxKind} to ~/.kynver/config.json \u2014 set explicitly via kynver setup --box-kind`)),Bt(t.boxKind,o??0))o=4,i.maxConcurrentWorkers=4,i.maxConcurrentWorkersSource="setup-auto",s=!0,n.push(`clamped Forge maxConcurrentWorkers to ${4} (was ${e.maxConcurrentWorkers}; workspace aggregate caps are Ghost-only)`);else if(o!=null){let a=lr(t.boxKind,o);a!==o&&(o=a,i.maxConcurrentWorkers=a,s=!0,n.push(`clamped maxConcurrentWorkers to ${a} for ${t.boxKind} pool`))}return s&&ce(i),{repaired:s,boxKind:t.boxKind,maxConcurrentWorkers:o??4,warnings:n}}Vs();$s();I();Pr();io();Gs();ao();T();async function qy(e){let r=Ys(e.config,e.args),{policy:t}=r;if(!(t.owner==="systemd"&&so(t.hostKind)))return{action:"keeper",owner:"keeper"};try{L(e.runId)}catch{return{action:"systemd_skipped",owner:"keeper",blockers:[`harness run ${e.runId} not found \u2014 cannot install systemd unit`]}}let o=js({envFilePath:we,agentOsId:e.agentOsId,runId:e.runId,kynverBin:en()},!0),s=[];if(!o.supported)return s.push(o.note??"systemd user units not supported on this host"),{action:"systemd_guided",owner:"keeper",systemd:o,blockers:s};if(!o.enabled)return s.push(o.note??"systemd unit write/enable failed"),{action:"systemd_guided",owner:"keeper",systemd:o,blockers:s};let i=y();return ce({...i,daemonSupervisionOwner:"systemd"}),console.log(""),console.log("  Daemon supervision: systemd user unit enabled (`kynver daemon` with Restart=always)."),o.unitPath&&console.log(`    unit: ${o.unitPath}`),console.log(""),{action:"systemd_installed",owner:"systemd",systemd:o}}function zy(e){return e.action==="systemd_installed"}function Xy(e="kynver-cron-daemon"){return["Daemon delegated to systemd user unit.","The unit runs `kynver daemon` with systemd Restart=always.",`Status:  systemctl --user status ${e}`,`Stop:    systemctl --user stop ${e}`]}function dO(e,r){return e.filter(n=>n.repo===r&&!hr.has(n.status)).sort((n,o)=>(o.createdAt??"").localeCompare(n.createdAt??""))[0]?.id??null}async function Qy(e){wn();let r=y();(!se()||!r.agentOsId?.trim())&&(console.log("  This machine isn't linked yet \u2014 running bootstrap first."),await va(e),r=y());let t=(typeof e.agentOsId=="string"?e.agentOsId.trim():"")||r.agentOsId?.trim()||"";t||(console.error("No AgentOS workspace configured \u2014 run `kynver bootstrap` (or pass --agent-os-id)."),process.exit(1)),co(t).ok||(console.error(Xs(t)),process.exit(1)),e.chatOauth===!0&&r.chatUseClaudeOauth!==!0&&(ce({...r,chatUseClaudeOauth:!0}),r=y(),console.log("  Chat: Claude Code OAuth opt-in saved (delegated turns may use your local subscription)."));let o=(typeof e.repo=="string"?e.repo.trim():"")||r.defaultRepo?.trim()||je()?.repo||"";o||(console.error("No repo configured \u2014 pass --repo /path/to/repo or run `kynver setup --discover-repo`."),process.exit(1));let s=Jy(r);if(s.repaired){r=y();for(let c of s.warnings)console.log(`  ${c}`)}let i=typeof e.run=="string"&&e.run.trim()?e.run.trim():"";i||(i=dO(X(),o)??"",i?console.log(`  Reusing run ${i} for ${o}.`):i=Bo({...e,repo:o,name:"agent"}).runId),await Yy({config:r,agentOsId:t,runId:i,args:e});let a=await qy({config:y(),agentOsId:t,runId:i,args:e});if(zy(a)){console.log("");for(let c of Xy())console.log(`  ${c}`);console.log("");return}console.log(""),console.log(`  ${uO.hostname()} \u2014 agent coming online`),console.log(`    workspace: ${t}`),console.log(`    repo:      ${o}`),console.log(`    run:       ${i}`),console.log("  Ctrl-C stops the agent. (Advanced control: `kynver daemon --help`.)"),console.log("");let l={...e,run:i,agentOsId:t};if(Ea(l)){await Pa(l,pO(i,t,e));return}await Qo(l)}function pO(e,r,t){if(!co(r).ok)throw new Error(Xs(r));let o=["daemon","--run",e,"--agent-os-id",r];return typeof t.intervalMs=="string"&&t.intervalMs.trim()&&o.push("--interval-ms",t.intervalMs.trim()),(t.execute===!1||t.execute==="false")&&o.push("--execute","false"),typeof t.stallMs=="string"&&t.stallMs.trim()&&o.push("--stall-ms",t.stallMs.trim()),o}T();T();z();import{existsSync as mO,rmSync as fO}from"node:fs";import cd from"node:path";function gO(e){let r=e.replace(/\\/g,"/").replace(/^\.\//,"").trim();if(!r||r.startsWith("/")||r.includes(".."))throw new Error(`unsafe path: ${e}`);return r}function hO(e){return typeof e!="string"||!e.trim()?[]:e.split(",").map(r=>r.trim()).filter(Boolean)}function kO(e){let{runId:r,workerName:t}=Fe(e),n=ge(r,t),o=[...hO(e.path),...Array.isArray(e.paths)?e.paths:[]];if(o.length===0)return{ok:!1,removed:[],reason:"requires at least one --path"};let s=cd.resolve(n.worktreePath),i=[];for(let c of o){let u=gO(c),d=cd.resolve(s,u);if(!d.startsWith(s+cd.sep)&&d!==s)return{ok:!1,removed:i,reason:`path escapes worktree: ${c}`};if(!mO(d))return{ok:!1,removed:i,reason:`path not found: ${c}`};fO(d,{recursive:!0,force:!0}),i.push(u)}let a=Array.isArray(n.disposableArtifactsRemoved)?n.disposableArtifactsRemoved.filter(c=>typeof c=="string"):[];n.disposableArtifactsRemoved=[...new Set([...a,...i])],K(n.runId,n);let l=D(n);return{ok:!0,removed:i,...l.changedFiles.length?{reason:"worktree still has other changes"}:{}}}function Zy(e){let r=kO(e);console.log(JSON.stringify(r,null,2)),r.ok||process.exit(1)}I();import $O from"node:path";to();Cs();to();var yO=/--max-old-space-size=(\d+)/;function RO(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function ud(){return RO(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB,1024)}function Ta(e=process.env){let r={...e};if(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB==="0")return r;let t=r.NODE_OPTIONS??"";if(yO.test(t))return r;let o=`--max-old-space-size=${ud()}`;return r.NODE_OPTIONS=t.trim()?`${t.trim()} ${o}`:o,r}function In(e=ud()){return`--max-old-space-size=${e}`}Ks();I();to();Cs();import{spawnSync as vO}from"node:child_process";function Da(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function rR(e=y()){let r=process.env.KYNVER_BUILD_MEM_BUDGET_BYTES?Da(process.env.KYNVER_BUILD_MEM_BUDGET_BYTES,1610612736):void 0,t=process.env.KYNVER_BUILD_MEM_RESERVE_BYTES?Da(process.env.KYNVER_BUILD_MEM_RESERVE_BYTES,2147483648):void 0;return{perBuildBudgetBytes:r??Da(e.perWorkerMemBytes,1610612736),reserveBytes:t??Da(e.memReserveBytes,2147483648)}}var Ma=0;function md(){Ma+=1}function fd(){Ma=Math.max(0,Ma-1)}function Ct(e={}){let r={...rR(),...e},t=e.memAvailableBytes??Ht(),n=r.perBuildBudgetBytes+r.reserveBytes,o=t>=n;return{admitted:o,memAvailableBytes:t,requiredBytes:n,activeBuilds:Ma,reason:o?null:`insufficient memory: need ${n} bytes available (budget ${r.perBuildBudgetBytes} + reserve ${r.reserveBytes}), have ${t}`}}function bO(e){e<=0||vO(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function gd(e,r=2e3,t={}){let n=Date.now()+Math.max(0,e),o=Ct({...t,memAvailableBytes:t.memAvailableBytes?.()});for(;!o.admitted&&Date.now()<n;)bO(Math.min(r,n-Date.now())),o=Ct({...t,memAvailableBytes:t.memAvailableBytes?.()});return o}import{spawnSync as FO}from"node:child_process";C();import{closeSync as _O,existsSync as hd,mkdirSync as xO,openSync as EO,readdirSync as nR,readFileSync as PO,unlinkSync as kd,writeFileSync as AO}from"node:fs";import yd from"node:path";import{mkdirSync as SO}from"node:fs";import{tmpdir as CO}from"node:os";import Ua from"node:path";function wO(){return!!(process.env.VERCEL||process.env.VERCEL_ENV||process.env.AWS_LAMBDA_FUNCTION_NAME||process.env.AWS_EXECUTION_ENV)}function tR(){let e=process.env.KYNVER_HEAVY_VERIFICATION_STATE_ROOT;return e?Ua.resolve(e):wO()?Ua.join(CO(),"kynver","state","heavy-verification"):Ua.join(Bi(),"heavy-verification")}function Zo(){return Ua.join(tR(),"slots")}function On(){let e=Zo();return SO(e,{recursive:!0}),e}var Tn=120*6e4,Wa=1;function IO(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Dn(){let e=process.env.KYNVER_HEAVY_VERIFICATION_SKIP?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function Nn(){let e=process.env.KYNVER_HEAVY_VERIFICATION_MAX_CONCURRENT;return e?IO(e,Wa):Wa}function OO(e){return`slot-${e}`}function oR(e,r=Zo()){return yd.join(r,`${e}.json`)}function Rd(e){if(!hd(e))return null;try{let r=JSON.parse(PO(e,"utf8"));if(typeof r.slotId=="string"&&typeof r.pid=="number"&&typeof r.acquiredAt=="string"&&typeof r.command=="string")return r}catch{return null}return null}function La(e,r=Tn){if(!e||!H(e.pid))return!0;let t=Date.parse(e.acquiredAt);return Number.isNaN(t)?!0:Date.now()-t>r}function NO(e,r){let t=Rd(e);if(La(t,r))try{kd(e)}catch{}}function TO(e){return xO(e,{recursive:!0}),e}function rs(e={}){let r=TO(e.slotsDir??On()),t=e.staleMs??Tn,n=0;for(let o of nR(r)){if(!o.endsWith(".json"))continue;let s=yd.join(r,o),i=hd(s);NO(s,t),i&&!hd(s)&&(n+=1)}return n}function vd(e={}){let r=e.slotsDir??On(),t=e.staleMs??Tn;rs({slotsDir:r,staleMs:t});let n=[];for(let o of nR(r)){if(!o.endsWith(".json"))continue;let s=Rd(yd.join(r,o));s&&!La(s,t)&&n.push(s)}return n}function es(e={}){return vd(e).length}function wt(e,r={}){if(Dn())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:Nn(),reason:null};let t=r.slotsDir??On(),n=r.staleMs??Tn,o=r.maxSlots??Nn();rs({slotsDir:t,staleMs:n});for(let i=0;i<o;i+=1){let a=OO(i),l=oR(a,t),c=Rd(l);if(c&&La(c,n))try{kd(l)}catch{}else if(c&&!La(c,n))continue;let u={slotId:a,pid:process.pid,acquiredAt:new Date().toISOString(),command:e};try{let d=EO(l,"wx");AO(d,JSON.stringify(u,null,2),"utf8"),_O(d);let f=es({slotsDir:t,staleMs:n});return{admitted:!0,slotId:a,activeSlots:f,maxSlots:o,reason:null}}catch(d){if(d.code==="EEXIST")continue;throw d}}let s=es({slotsDir:t,staleMs:n});return{admitted:!1,slotId:null,activeSlots:s,maxSlots:o,reason:`heavy verification at capacity (${s}/${o} slots)`}}function Mn(e,r={}){if(!e)return;let t=oR(e,r.slotsDir??Zo());try{kd(t)}catch{}}function Un(e,r={}){if(Dn())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:Nn(),reason:null};let t=r.slotsDir??On(),n=r.staleMs??Tn,o=r.maxSlots??Nn();rs({slotsDir:t,staleMs:n});let s=es({slotsDir:t,staleMs:n}),i=s<o;return{admitted:i,slotId:null,activeSlots:s,maxSlots:o,reason:i?null:`heavy verification at capacity (${s}/${o} slots); waiting for ${e}`}}import{spawnSync as DO}from"node:child_process";function MO(e){e<=0||DO(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function Ba(e,r,t=2e3,n={}){let o=Date.now()+Math.max(0,r),s=wt(e,n);for(;!s.admitted&&Date.now()<o;)MO(Math.min(t,o-Date.now())),s=wt(e,n);return s}var UO=/\b(npm run typecheck|tsc\b[^|&;]*--noEmit|node scripts\/verify-pr-local\.mjs|kynver (harness )?verify)\b/i,WO=/\b(npm run build\b|next build\b)\b/i,LO=/\b(vercel (build|deploy|--prod))\b/i,BO=/\b(openai|anthropic|perplexity|voyage)\b.*\b(api|cli)\b|\b(paid|billable)[-_ ]?compute\b/i;function Ha(e){let r=e.trim();return r?BO.test(r)?{heavy:!0,commandClass:"paid_compute",reason:"paid external compute requires heavy-verification token and operator approval"}:LO.test(r)?{heavy:!0,commandClass:"vercel_verify",reason:"Vercel build/deploy verification requires heavy-verification token"}:WO.test(r)?{heavy:!0,commandClass:"full_build",reason:"full app build requires heavy-verification token"}:UO.test(r)?{heavy:!0,commandClass:"full_typecheck",reason:"full repo typecheck requires heavy-verification token"}:{heavy:!1,commandClass:"allowed",reason:null}:{heavy:!1,commandClass:"allowed",reason:null}}var ts="heavy_verification_token_required";function Fa(e,r={}){let t=Ha(e);if(!t.heavy)return{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:"command does not require heavy-verification token",verificationGate:{...Un(e),slotId:null}};if(Dn())return{allowed:!0,outcome:"heavy_verification_skipped",commandClass:t.commandClass,reason:"KYNVER_HEAVY_VERIFICATION_SKIP bypasses gate",verificationGate:{...Un(e),slotId:null}};let n=r.waitMs??0,o=n>0?Ba(e,n,r.pollMs):wt(e);return o.admitted?{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:t.reason??"heavy-verification token acquired",verificationGate:o}:{allowed:!1,outcome:ts,commandClass:t.commandClass,reason:t.reason??o.reason??ts,verificationGate:o}}Ce();import bd from"node:path";function HO(e){let r=ur(me()),t=bd.relative(r,bd.resolve(e));return t.length>0&&!t.startsWith("..")&&!bd.isAbsolute(t)}function sR(e){return HO(e)?(typeof process.getuid=="function"?process.getuid():null)===0?{ok:!1,reason:"Refusing build/install as root inside a harness worktree \u2014 generated caches become root-owned and block daemon cleanup. Run kynver daemon and workers as the harness owner (never sudo kynver)."}:{ok:!0}:{ok:!0}}Ks();function KO(e){let r=[];for(let[t,n]of Object.entries(e))n!==void 0&&r.push(`${t}=${n}`);return r}function iR(e,r){let t=FO(e[0],e.slice(1),{cwd:r.cwd,env:r.env,encoding:"utf8",stdio:["ignore","pipe","pipe"],shell:r.shell,timeout:r.timeoutMs});return{exitCode:t.status??1,stdout:(t.stdout??"").trim(),stderr:(t.stderr??"").trim()}}function Ka(e){let r=e.waitForAdmissionMs??6e5,t=Fa(e.command,{waitMs:r}),n=t.verificationGate;if(!t.allowed)return{ok:!1,exitCode:1,stdout:"",stderr:t.reason,admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:In(),admission:Ct(),verificationGate:n,gateOutcome:t.outcome,command:e.command};let o=n.slotId,s=r>0?gd(r):Ct();if(!s.admitted)return Mn(o),{ok:!1,exitCode:1,stdout:"",stderr:s.reason??"build admission denied",admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:In(),admission:s,verificationGate:n,command:e.command};let i=sR(e.cwd);if(!i.ok)return Mn(o),{ok:!1,exitCode:1,stdout:"",stderr:i.reason,admitted:!0,wrappedWithSystemd:!1,nodeOptionsFlag:In(),admission:s,verificationGate:n,command:e.command};let a=Ta({...process.env,...e.env}),l=In(),c=Zt();md();try{let u;if(c){let d=Fs({cwd:e.cwd,command:["/usr/bin/env",...KO(a),"/bin/bash","-lc",e.command]});u=iR(d,{cwd:e.cwd,env:a,timeoutMs:e.timeoutMs})}else u=iR([e.command],{cwd:e.cwd,env:a,shell:!0,timeoutMs:e.timeoutMs});return{ok:u.exitCode===0,exitCode:u.exitCode,stdout:u.stdout,stderr:u.stderr,admitted:!0,wrappedWithSystemd:c,nodeOptionsFlag:l,admission:s,verificationGate:n,gateOutcome:t.outcome,command:e.command}}finally{fd(),Mn(o)}}var $a=["npm run typecheck","npm run test"];function ns(e,r=$a,t={}){let n=[],o=!0;for(let s of r){let i=Ka({cwd:e,command:s,waitForAdmissionMs:t.waitForAdmissionMs,timeoutMs:t.timeoutMs});n.push({command:s,result:i}),i.ok||(o=!1)}return{passed:o,steps:n}}C();function aR(e){let r=e.indexOf(":");if(r<=0)throw new Error(`invalid --evidence ${e} (expected type:value)`);return{type:e.slice(0,r),value:e.slice(r+1)}}async function lR(e){let r=N(e.plan?String(e.plan):void 0,"plan"),t=(e.agentOsId?String(e.agentOsId):y().agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=N(e.role?String(e.role):void 0,"role"),o=N(e.status?String(e.status):void 0,"status"),s=[],i=e.evidence;if(Array.isArray(i))for(let O of i)s.push(aR(String(O)));else typeof i=="string"&&s.push(aR(i));let a=V(e.baseUrl?String(e.baseUrl):void 0),l=await J(e.secret?String(e.secret):void 0,t,{baseUrl:a}),c=`${a}/api/agent-os/by-id/${encodeURIComponent(t)}/plans/${encodeURIComponent(r)}/progress-events`,u=y(),f=`provider:${go(u.workerProvider,Ie)}`,m=(e.proposed===!0||e.proposed==="true"?!0:e.proposed===!1||e.proposed==="false"?!1:void 0)??(o!=="done"&&(n==="implementer"||n==="repair_implementer")),h={rowKey:e.row?String(e.row):void 0,rowId:e.rowId?String(e.rowId):void 0,taskId:e.task?String(e.task):void 0,reviewTaskId:e.reviewTask?String(e.reviewTask):void 0,roleLane:n,status:o,note:e.note?String(e.note):void 0,remainingWork:e.remaining?String(e.remaining):void 0,evidence:s.length?s:void 0,executorRef:e.executorRef?String(e.executorRef):f};m!==void 0&&(h.proposed=m);let k=await fetch(c,{method:"POST",headers:He(l),body:JSON.stringify(h)}),g=await k.text(),R=null;try{R=JSON.parse(g)}catch{R=g}k.ok||(console.error(JSON.stringify({httpStatus:k.status,response:R},null,2)),process.exit(1)),console.log(JSON.stringify(R,null,2))}function jO(e){let r=N(e.worktree?String(e.worktree):void 0,"worktree"),t=$O.resolve(r),n=ns(t),o=e.json===!0||e.json==="true",s={passed:n.passed,worktree:t,steps:n.steps};console.log(o?JSON.stringify(s,null,2):n.passed?"local plan verify passed":"local plan verify failed"),n.passed||process.exit(1)}async function cR(e){let r=N(e.plan?String(e.plan):void 0,"plan");if(e.local===!0||e.local==="true"){jO(e);return}let n=y().agentOsSlug;n||(console.error("requires agentOsSlug in ~/.kynver/config.json for verify (session route)"),process.exit(1));let o=V(e.baseUrl?String(e.baseUrl):void 0),s=process.env.KYNVER_API_KEY,i={"Content-Type":"application/json"};s&&(i.Authorization=`Bearer ${s}`);let a=`${o}/api/agent-os/${encodeURIComponent(n)}/plans/${encodeURIComponent(r)}/verify`,l=await fetch(a,{method:"POST",headers:i,body:JSON.stringify({worktreePath:e.worktree?String(e.worktree):void 0,taskId:e.task?String(e.task):void 0,humanOverride:e.humanOverride===!0||e.humanOverride==="true"})}),c=await l.text(),u=null;try{u=JSON.parse(c)}catch{u=c}l.ok||(console.error(JSON.stringify({httpStatus:l.status,response:u},null,2)),process.exit(1)),console.log(JSON.stringify(u,null,2))}import VO from"node:path";C();function uR(e){let r=VO.resolve(N(e.worktree?String(e.worktree):void 0,"worktree")),t=e.json===!0||e.json==="true"||e.emitJson===!0||e.emitJson==="true",n=[],o=e.command;if(Array.isArray(o))for(let a of o)n.push(String(a));else typeof o=="string"&&n.push(o);let s=ns(r,n.length?n:$a,{waitForAdmissionMs:e.waitForAdmissionMs?Number(e.waitForAdmissionMs):void 0,timeoutMs:e.timeoutMs?Number(e.timeoutMs):void 0}),i={passed:s.passed,worktree:r,steps:s.steps.map(a=>({command:a.command,ok:a.result.ok,exitCode:a.result.exitCode,admitted:a.result.admitted,wrappedWithSystemd:a.result.wrappedWithSystemd,nodeOptionsFlag:a.result.nodeOptionsFlag,admission:a.result.admission,verificationGate:a.result.verificationGate,stderr:a.result.stderr.slice(0,4e3)}))};if(t)console.log(JSON.stringify(i,null,2));else{console.log(s.passed?"harness verify passed":"harness verify failed");for(let a of i.steps)console.log(`  ${a.ok?"\u2713":"\u2717"} ${a.command} (exit ${a.exitCode}, systemd=${a.wrappedWithSystemd})`),!a.ok&&a.stderr&&console.log(`    ${a.stderr.split(`
-`)[0]}`)}process.exit(s.passed?0:1)}I();import{readFileSync as GO}from"node:fs";C();var YO=["create","add_version","update_metadata"],JO=["approval_guard","auth","network","server","tool_interruption"];function qO(e){let r=e.bodyFile?String(e.bodyFile):void 0;if(r)return{body:GO(r,"utf8"),bodyPathHint:r};let t=e.body?String(e.body):void 0;if(t)return{body:t};throw new Error("requires --body-file PATH or --body TEXT")}async function dR(e){let r=N(e.operation?String(e.operation):void 0,"operation");if(!YO.includes(r))throw new Error(`invalid --operation ${r}`);let t=r,n=y(),o=N(e.slug?String(e.slug):n.agentOsSlug,"slug (or agentOsSlug in ~/.kynver/config.json)"),s=N(e.title?String(e.title):void 0,"title"),{body:i,bodyPathHint:a}=qO(e);a&&Ao(a)&&console.warn(JSON.stringify({warning:"/tmp-only body path is not durable; AgentOS persistence requires outbox or successful API write",bodyPathHint:a}));let l={operation:t,agentOsSlug:o,title:s,body:i,bodyPathHint:a,summary:e.summary?String(e.summary):void 0,planId:e.plan?String(e.plan):void 0,planSlug:e.planSlug?String(e.planSlug):void 0,changeSummary:e.changeSummary?String(e.changeSummary):void 0,author:e.author?String(e.author):void 0,model:e.model?String(e.model):void 0,maxRetries:e.maxRetries?Number(e.maxRetries):void 0,immediateFailure:zO(e)},c=await mn(l);console.log(JSON.stringify(c,null,2)),c.userStatus==="failed and needs action"&&process.exit(1)}function zO(e){let r=e.failureKind?String(e.failureKind):void 0;if(!r)return;if(!JO.includes(r))throw new Error(`invalid --failure-kind ${r}`);let t=e.failureMessage?String(e.failureMessage):`immediate failure (${r})`;return{kind:r,message:t}}async function pR(){let e=mt();console.log(JSON.stringify({count:e.length,items:e},null,2))}async function mR(e){let r=e.max?Number(e.max):void 0,t=e.id?String(e.id):void 0,n=await Fi({max:r,outboxId:t});console.log(JSON.stringify(n,null,2)),n.failed>0&&process.exit(1)}function fR(e){let r=e.execute===!0||e.execute==="true",t=e.skipFinalize===!0||e.skipFinalize==="true",n=e.accountBytes===!0||e.accountBytes==="true",o=e.compact===!0||e.compact==="true",s=e.nodeModulesAgeMs,i=s!=null&&s!=="",a=i?Number(s):void 0,l=e.worktreesAgeMs?Number(e.worktreesAgeMs):0,c=e.includeOrphans===!0||e.includeOrphans==="true",u=e.harnessRoot?String(e.harnessRoot):void 0,d=Ra({execute:r,finalizeStaleRuns:!t,accountBytes:n,scanDependencyCaches:i,nodeModulesAgeMs:a!==void 0&&Number.isFinite(a)?a:i?216e5:void 0,worktreesAgeMs:Number.isFinite(l)?l:0,includeOrphans:c,harnessRoot:u});o&&d.compactSummary?console.log(JSON.stringify(d.compactSummary,null,2)):console.log(JSON.stringify(d,null,2)),r&&d.totals.removedPaths===0&&d.actions.length===0&&(process.exitCode=0)}Ft();function gR(e){let r=e.execute===!0||e.execute==="true",t=e.json===!0||e.json==="true",n=e["purge-all"]===!0||e["purge-all"]==="true",o=e["keep-newest"]?Number(e["keep-newest"]):void 0;if(r||n){let a=No({execute:r,purgeAll:n,keepNewest:o}),l={...a,observation:a.observation?{...a.observation,dumps:a.observation.dumps.map(c=>({name:c.name,bytes:c.bytes,executableHint:c.executableHint,mtimeMs:c.mtimeMs}))}:null};console.log(JSON.stringify(l,null,t?2:0));return}let s=cr(),i=s?{...s,dumps:s.dumps.map(a=>({name:a.name,bytes:a.bytes,executableHint:a.executableHint,mtimeMs:a.mtimeMs}))}:{skipped:!0,reason:"not_wsl"};console.log(JSON.stringify(i,null,t?2:0))}function hR(e){let r=e.trim();if(!r.startsWith("{")&&!r.startsWith("["))return null;try{return JSON.parse(r)}catch{return null}}function ie(e,r=2400){if(e==null)return;let n=(typeof e=="string"?e:JSON.stringify(e,null,2)).trim();if(n)return n.length<=r?n:`${n.slice(0,r-1).trimEnd()}\u2026`}function ja(e){let r=e.trim();if(!r)return null;let t=hR(r);if(t!==null)return t;for(let n of r.split(`
-`)){let o=hR(n);if(o!==null)return o}return null}function Va(e){let r=[];switch(r.push(`Background auto-complete \xB7 ${e.runId} / ${e.worker}`),e.outcome){case"completed":r.push("Outcome: harness completion posted to AgentOS successfully."),r.push("AgentOS task should close or advance to review per completion routing."),r.push("Next: check Command Center \u2014 no manual complete needed unless the board still shows running.");break;case"blocked":r.push(`Outcome: worker finished but completion was blocked${e.httpStatus?` (HTTP ${e.httpStatus})`:""}.`),e.reason&&r.push(`Blocker: ${e.reason}`),r.push("Next: fix the blocker (auth, landing gate, dirty worktree) and replay completion from Command Center.");break;case"timed_out":r.push(`Outcome: monitor gave up waiting \u2014 ${e.reason??"worker did not finish in time"}.`),r.push("Next: inspect the worker process/logs; stop or unblock the worker, then retry auto-complete.");break;case"missing_link":r.push(`Outcome: cannot complete \u2014 ${e.reason??"worker missing agentOsId/taskId"}.`),r.push("Next: re-dispatch with board linkage or run `kynver worker complete` with --agent-os-id.");break;default:r.push(`Outcome: ${e.outcome}`)}return{primary:r.join(`
-`),diagnostic:ie(e)}}function Wn(e){let r=[],t=typeof e.monitorId=="string"?e.monitorId:void 0;if(r.push(t?`Harness monitor tick \xB7 ${e.runId} (${t})`:`Harness monitor tick \xB7 ${e.runId}`),!e.workers.length)return r.push("No workers in scope for this poll."),{primary:r.join(`
+`),n=!0)}let o={capturedAt:new Date(e.now??Date.now()).toISOString(),skipReason:e.skipReason,runId:e.indexed.runId,workerName:e.indexed.workerName,worktreePath:e.indexed.worktreePath,taskId:e.indexed.worker.taskId,agentOsId:e.indexed.worker.agentOsId,branch:e.indexed.worker.branch,completionBlocker:e.indexed.worker.completionBlocker,finalResult:e.status.finalResult,changedFiles:e.status.changedFiles,gitAncestry:e.status.gitAncestry,prUrl:e.status.prUrl??null,...n?{patchPath:t}:{}};return Dh(da.join(r,"evidence.json"),`${JSON.stringify(o,null,2)}
+`),o}var nP=new Set(["completion_blocked","dirty_worktree","pr_or_unmerged_commits","landing_blocked"]);function oP(e){return!nP.has(e.skipReason)||br(e.indexed,e.now)?!1:Wh({harnessRoot:e.harnessRoot,runId:e.indexed.runId,workerName:e.indexed.workerName})?!0:e.writeSalvageEvidence?(Lh({harnessRoot:e.harnessRoot,indexed:e.indexed,skipReason:e.skipReason,status:e.status,now:e.now}),!0):!1}function sP(e){let{indexed:r,worktreesAgeMs:t,terminalWorktreesAgeMs:n}=e;return r&&(yr.has(r.run.status)||e.liveness&&Vu(r,e.liveness)||e.liveness&&oe($u(r,e.liveness))&&!br(r))?n:t}function iP(e){return!e.indexed||e.includeOrphans&&e.worktreesAgeMs<=0?0:sP(e)}function aP(e,r){if(e.harnessRoot?.trim())return pa.resolve(e.harnessRoot);let t=r.worker.workerDir;if(!t)return null;let n=`${pa.sep}runs${pa.sep}`,o=t.indexOf(n);return o<0?null:t.slice(0,o+n.length-1)}function Bh(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,ageMs:o,orphanSafety:s,worktreeRemovalGuard:i}=e,a=e.now??Date.now();if(!r)return t?s??null:"orphan_without_flag";let l=iP(e);if(n<=0&&!t&&l<=0)return"worktrees_disabled";if(l>0&&o<l)return"below_age_threshold";if(br(r,a))return"active_worker";let c=$u(r,e.liveness),u=aP(e,r),d=f=>u&&oP({indexed:r,harnessRoot:u,skipReason:f,status:c,now:a,writeSalvageEvidence:e.writeSalvageEvidence===!0})?null:f;if(Th(r,c)){let f=d("completion_blocked");if(f)return f}if(Ku(r,e.liveness?.gitStatusCache)){let f=d("dirty_worktree");if(f)return f}let m=e.liveness?.gitRevCache?.countAheadOfMain(e.worktreePath);if(m!=null&&m>0){let f=d("pr_or_unmerged_commits");if(f)return f}if(Nh(r,e.liveness,a)||!oe(c))return"run_still_active";if(Ko(c)){let f=d("pr_or_unmerged_commits");if(f)return f}if(Te(c.changedFiles).length>0){let f=d("dirty_worktree");if(f)return f}if(Qr({finalResult:c.finalResult,changedFiles:c.changedFiles,gitAncestry:c.gitAncestry,prUrl:bt(c.finalResult)}).blocked){let f=d("landing_blocked");if(f)return f}if(i&&e.worktreePath){let f=i({worktreePath:e.worktreePath,indexed:!!r,runId:r?.runId,worker:r?.workerName});if(f)return f.detail?{reason:f.reason,detail:f.detail}:f.reason}return null}function Gu(e){let{indexed:r,nodeModulesAgeMs:t,ageMs:n,worktreePath:o,activeWorktreePaths:s,diskPressure:i}=e;return!i&&n<t?"below_age_threshold":s.has(pa.resolve(o))||r&&br(r)?"active_worker":r&&Ku(r,e.gitStatusCache)?"dirty_worktree":null}function Hh(e){return Gu(e)}var jo=216e5,Vo=6048e5,ma=216e5,fa=36e5,ga=120;var Fh=new Set(["active_worker","run_still_active","completion_blocked","landing_blocked"]);function Kh(e,r){let t=[],n=new Set,o=(s,i,a)=>{let l=`${s}\0${i}`;n.has(l)||t.length>=24||(n.add(l),t.push({path:s,reason:i,...a?{detail:a}:{}}))};for(let s of r)Fh.has(s.reason)&&o(s.path,s.reason,s.detail);for(let s of e)!s.skipped||!s.skipReason||Fh.has(s.skipReason)&&o(s.path,s.skipReason);return t}import{existsSync as Gh,readdirSync as Yh,statSync as uP}from"node:fs";import Jh from"node:path";T();Ce();import $h from"node:path";C();function cP(e,r){return ua(e,r)}function jh(e,r=Date.now()){let t=new Set,n=new Set;for(let o of e){for(let s of Is(o)){let i=!1;for(let a of Object.keys(s.workers||{})){let l=w($h.join(qn(o,s.id),"workers",b(a),"worker.json"),void 0);if(!l?.worktreePath)continue;let c=$h.resolve(l.worktreePath);cP(l,r)&&(i=!0,t.add(c))}i&&n.add(`${o}\0${s.id}`)}for(let s of Tu(o))n.add(s)}return{activeWorktreePaths:t,liveRunKeys:n}}function Vh(e,r,t,n){return t?n.has(`${r}\0${t}`):!1}C();function dP(e,r){try{let t=uP(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function pP(e,r){let t=Jh.join(e,"runs",r,"run.json");return Gh(t)?w(t,null):null}function qh(e){try{return Yh(e).length===0}catch{return!1}}function zh(e){let{harnessRoot:r,runId:t,runPath:n,ageMs:o,runDirectoriesAgeMs:s,activeGuards:i}=e;if(Vh(n,r,t,i.liveRunKeys)||!qh(n))return"run_still_active";let a=pP(r,t);return a&&!yr.has(a.status)&&!yt(a)?"run_still_active":s>0&&o<s?"below_age_threshold":null}function Xh(e){if(!Gh(e.worktreesDir))return[];let r=[],t;try{t=Yh(e.worktreesDir,{withFileTypes:!0})}catch{return[]}for(let n of t){if(!n.isDirectory())continue;let o=n.name;if(e.runIdFilter&&o!==e.runIdFilter)continue;let s=Jh.join(e.worktreesDir,o);qh(s)&&r.push({kind:"remove_run_directory",path:s,bytes:null,harnessRoot:e.harnessRoot,runId:o,ageMs:dP(s,e.now)})}return r}Pe();import{existsSync as Ju,rmSync as ak}from"node:fs";import{existsSync as hP,rmSync as kP}from"node:fs";Ce();import{lstatSync as mP,readdirSync as fP}from"node:fs";function Qh(e){try{let r=mP(e),t=typeof process.getuid=="function"?process.getuid():null,n=typeof process.getgid=="function"?process.getgid():null,o=t!==null&&(r.uid!==t||n!==null&&r.gid!==n);return{uid:r.uid,gid:r.gid,foreign:o}}catch{return null}}function Zh(e,r=32){let t=Qh(e);if(!t)return!1;if(t.foreign)return!0;try{let n=fP(e),o=0;for(let s of n){if(o>=r)break;let i=`${e.replace(/\/$/,"")}/${s}`,a=Qh(i);if(o+=1,a?.foreign)return!0}}catch{}return!1}import{spawnSync as gP}from"node:child_process";import tk from"node:path";import De from"node:path";function ek(e,r,t,n){let o=De.resolve(e),s=`${De.sep}${n}`,i=o.endsWith(s)?o:null;if(!i)return"path_outside_harness";let a=De.relative(t,i);if(a.startsWith("..")||De.isAbsolute(a))return"path_outside_harness";let l=a.split(De.sep);return l.length<3||l[l.length-1]!==n||!o.startsWith(De.resolve(r))?"path_outside_harness":null}function ha(e,r,t){return ek(e,r,t,"node_modules")}function ka(e,r,t){return ek(e,r,t,".next")}function ya(e,r,t){let n=De.resolve(e),o=De.relative(t,n);return o.startsWith("..")||De.isAbsolute(o)||o.split(De.sep).length<3||!n.startsWith(De.resolve(r))?"path_outside_harness":null}function rk(e,r,t){let n=De.resolve(e);return ha(n,r,t)===null||ka(n,r,t)===null||ya(n,r,t)===null}function ok(){let e=(process.env.KYNVER_CLEANUP_PRIVILEGED??"auto").trim().toLowerCase();return e==="0"||e==="false"||e==="off"||e==="no"?"off":e==="1"||e==="true"||e==="force"||e==="yes"?"force":"auto"}function nk(e){let r=gP("sudo",["-n",...e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});return{ok:r.status===0,stderr:`${r.stderr??""}${r.stdout??""}`.trim()}}function sk(e,r,t){if(!rk(e,r,t))return{ok:!1,error:"path is not an allowed harness generated cache"};let n=typeof process.getuid=="function"?process.getuid():null,o=typeof process.getgid=="function"?process.getgid():null;if(n===null||o===null)return{ok:!1,error:"privileged reclaim requires POSIX uid/gid"};let s=nk(["chown","-R",`${n}:${o}`,tk.resolve(e)]);if(s.ok)return{ok:!0,method:"chown_then_rm"};let i=nk(["rm","-rf",tk.resolve(e)]);return i.ok?{ok:!0,method:"sudo_rm"}:{ok:!1,error:s.stderr||i.stderr||"sudo -n failed (password required or not permitted)"}}var Yu="Root-owned harness caches require operator reclaim: configure passwordless sudo for chown/rm under ~/.kynver/harness/worktrees, or run `node scripts/reclaim-harness-root-owned-cache.mjs --execute` as the harness owner with sudo available. See docs/runbooks/harness-root-owned-cache-reclaim.md.";function yP(e){let r=e?.code;return r==="EACCES"||r==="EPERM"}function ik(e,r,t={}){if(!hP(e.path))return{executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.harnessRoot,o=n?dr(n):null,i=e.bytes??vr(e.path)??void 0,a=t.removePath??kP,l=t.hasForeignOwnedEntry??Zh;try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i}}catch(c){if(!yP(c)||!n||!o)return{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let u=l(e.path),d=ok();if(!(d==="force"||d==="auto"&&u))return u?{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; ${Yu}`}:{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let p=sk(e.path,n,o);if(p.ok&&p.method==="sudo_rm")return{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0};if(p.ok)try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0}}catch(f){return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${f.message}; privileged chown succeeded but rm still failed`}}return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; privileged reclaim failed: ${p.error}; ${Yu}`}}}function qu(e){let r=e.harnessRoot;return!r||!Au(e.path,r)?null:{...e,executed:!1,skipped:!0,skipReason:"run_metadata_protected"}}function zu(e,r){let t=qu(e);if(t)return t;let n=ik(e,r);return{...e,bytes:n.bytes??e.bytes,executed:n.executed,skipped:n.skipped,skipReason:n.skipReason,error:n.error}}function lk(e,r){return zu(e,r)}function ck(e,r){return zu(e,r)}function uk(e,r){return zu(e,r)}function dk(e,r){let t=qu(e);if(t)return t;if(!Ju(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};try{let n=e.bytes??vr(e.path);return ak(e.path,{recursive:!0,force:!0}),{...e,bytes:n,executed:!0,skipped:!1}}catch(n){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:n.message}}}function pk(e,r){let t=qu(e);if(t)return t;if(!Ju(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.repo;try{let o=e.bytes??vr(e.path);return n&&me(n,["worktree","remove","--force",e.path],{allowFailure:!0}),Ju(e.path)&&ak(e.path,{recursive:!0,force:!0}),{...e,bytes:o,executed:!0,skipped:!1}}catch(o){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:o.message}}}import{existsSync as Ra,readdirSync as va,statSync as RP}from"node:fs";import or from"node:path";function Xu(e,r){try{let t=RP(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function fk(e,r){let t=or.relative(r,e);return t===""||!t.startsWith("..")&&!or.isAbsolute(t)}function mk(e,r,t,n){let o=[];for(let s of ca){if(s===".next")continue;let i=or.join(e,s);if(!Ra(i))continue;let a=or.resolve(i);t.has(a)||fk(a,r.harnessRoot)&&(t.add(a),o.push({kind:"remove_build_cache",path:a,bytes:null,runId:n.runId,worker:n.worker,repo:n.repo,ageMs:Xu(a,r.now)}))}return o}function gk(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||r.push(...mk(n.worktreePath,e,t,{runId:n.runId,worker:n.workerName,repo:n.run.repo}));if(!e.includeOrphans||!Ra(e.worktreesDir))return r;for(let n of va(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory())continue;let o=or.join(e.worktreesDir,n.name);for(let s of va(o,{withFileTypes:!0})){if(!s.isDirectory())continue;let i=or.join(o,s.name);r.push(...mk(i,e,t,{runId:n.name,worker:s.name}))}}return r}function hk(e){let r=e.worktreesAgeMs>0||e.includeOrphans,t=e.includeOrphans;if(!r&&!t)return[];let n=[],o=new Set;if(r)for(let i of e.index.values()){if(e.runIdFilter&&i.runId!==e.runIdFilter)continue;let a=i.worktreePath;Ra(a)&&(o.has(a)||(o.add(a),n.push({kind:"remove_worktree",path:a,bytes:null,runId:i.runId,worker:i.workerName,repo:i.run.repo,ageMs:Xu(a,e.now)})))}if(!t||!Ra(e.worktreesDir))return n;let s=new Set;for(let i of e.index.values())s.add(or.resolve(i.worktreePath));for(let i of va(e.worktreesDir,{withFileTypes:!0})){if(!i.isDirectory()||e.runIdFilter&&i.name!==e.runIdFilter)continue;let a=or.join(e.worktreesDir,i.name),l;try{l=va(a,{withFileTypes:!0})}catch{continue}for(let c of l){if(!c.isDirectory())continue;let u=or.resolve(or.join(a,c.name));o.has(u)||s.has(u)||fk(u,e.harnessRoot)&&(o.add(u),n.push({kind:"remove_worktree",path:u,bytes:null,runId:i.name,worker:c.name,ageMs:Xu(u,e.now)}))}}return n}import{existsSync as Rk,readdirSync as kk,statSync as vP}from"node:fs";import _n from"node:path";var bP=[{dirName:"node_modules",kind:"remove_node_modules"},{dirName:".next",kind:"remove_next_cache"}];function SP(e,r){try{let t=vP(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function CP(e,r){let t=_n.relative(r,e);return t===""||!t.startsWith("..")&&!_n.isAbsolute(t)}function wP(e,r,t,n,o,s){if(!Rk(n))return;let i=_n.resolve(n);r.has(i)||CP(i,t.harnessRoot)&&(r.add(i),e.push({kind:o,path:i,bytes:null,harnessRoot:t.harnessRoot,runId:s.runId,worker:s.worker,repo:s.repo,ageMs:SP(i,t.now)}))}function yk(e,r,t,n,o){for(let s of bP)wP(e,r,t,_n.join(n,s.dirName),s.kind,o)}function vk(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||yk(r,t,e,n.worktreePath,{runId:n.runId,worker:n.workerName,repo:n.run.repo});if(!e.includeOrphans||!Rk(e.worktreesDir))return r;for(let n of kk(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory()||e.runIdFilter&&n.name!==e.runIdFilter)continue;let o=_n.join(e.worktreesDir,n.name),s;try{s=kk(o,{withFileTypes:!0})}catch{continue}for(let i of s){if(!i.isDirectory())continue;let a=_n.join(o,i.name);yk(r,t,e,a,{runId:n.name,worker:i.name})}}return r}Pe();import{existsSync as bk,statSync as _P}from"node:fs";import sr from"node:path";function xP(e,r){try{let t=_P(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function EP(e){let r=[],t=null;for(let n of e.split(`
+`)){if(!n.trim())continue;let[o,...s]=n.split(" "),i=s.join(" ");if(o==="worktree"){t&&r.push(t),t={path:i};continue}t&&(o==="branch"&&(t.branch=i),o==="HEAD"&&(t.head=i),o==="bare"&&(t.bare=!0))}return t&&r.push(t),r}function PP(e,r){let t=sr.relative(sr.resolve(r),sr.resolve(e));return t!==""&&!t.startsWith("..")&&!sr.isAbsolute(t)}var AP=200;function Sk(e){if(!e.includeOrphans||!bk(e.worktreesDir))return[];let r=new Set;for(let s of e.index.values())s.run.repo&&r.add(sr.resolve(s.run.repo));let t=new Set;for(let s of e.index.values())t.add(sr.resolve(s.worktreePath));let n=[],o=new Set;for(let s of r){let i=0,a;try{a=me(s,["worktree","list","--porcelain"],{allowFailure:!0})}catch{continue}let l=EP(a);for(let c of l){if(i>=AP)break;let u=sr.resolve(c.path);if(u===sr.resolve(s)||!PP(u,e.worktreesDir)||t.has(u)||o.has(u)||!bk(u))continue;let m=sr.relative(e.worktreesDir,u).split(sr.sep),p=m[0],f=m[1]??"unknown";o.add(u),i+=1,n.push({kind:"remove_worktree",path:u,bytes:null,runId:p,worker:f,repo:s,ageMs:xP(u,e.now)})}}return n}T();C();import Go from"node:path";function Ck(e,r){let t=Go.resolve(r),n=new Map;for(let[o,s]of e){let i=s.harnessRoot?Go.resolve(s.harnessRoot):null;i&&i!==t||n.set(o,s)}return n}function wk(e){let r=new Map;for(let t of Is(e))for(let n of Object.keys(t.workers||{})){let o=Go.join(qn(e,t.id),"workers",b(n),"worker.json"),s=w(o,void 0);s?.worktreePath&&r.set(Go.resolve(s.worktreePath),{harnessRoot:e,worktreePath:Go.resolve(s.worktreePath),runId:t.id,workerName:n,run:t,worker:s})}return r}function Yo(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function St(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?n:r}function Qu(e={}){let r=e.execute===!0||e.execute!==!1&&Yo("KYNVER_CLEANUP_EXECUTE"),t=e.finalizeStaleRuns!==!1&&!Yo("KYNVER_CLEANUP_SKIP_FINALIZE"),n=e.nodeModulesAgeMs??St("KYNVER_CLEANUP_NODE_MODULES_AGE_MS",216e5),o=e.scanDependencyCaches??(e.nodeModulesAgeMs!==void 0||process.env.KYNVER_CLEANUP_NODE_MODULES_AGE_MS!=null),s=e.worktreesAgeMs??St("KYNVER_CLEANUP_WORKTREES_AGE_MS",0),i=e.terminalWorktreesAgeMs??St("KYNVER_CLEANUP_TERMINAL_WORKTREES_AGE_MS",216e5),a=e.runDirectoriesAgeMs??St("KYNVER_CLEANUP_RUN_DIRECTORIES_AGE_MS",36e5),l=e.maxActionsPerSweep??St("KYNVER_CLEANUP_MAX_ACTIONS_PER_SWEEP",120),c=e.includeOrphans===!0||Yo("KYNVER_CLEANUP_INCLUDE_ORPHANS"),d=Yo("KYNVER_CLEANUP_SCOPE_ALL")||process.env.KYNVER_CLEANUP_SCOPE==="all"?e.runIdFilter:e.runIdFilter??(process.env.KYNVER_CLEANUP_RUN_ID||void 0),m=e.accountBytes!==!1&&!Yo("KYNVER_CLEANUP_SKIP_BYTE_ACCOUNTING"),p=St("KYNVER_CLEANUP_STORAGE_ENTRY_CAP",2e3),f=e.storagePerRunEntryCap!==void 0?e.storagePerRunEntryCap:m&&p>0?p:null,h=St("KYNVER_CLEANUP_BYTE_ENTRY_CAP",2e3),k=e.byteAccountingEntryCap??(Number.isFinite(h)&&h>0?Math.floor(h):2e3);return{execute:r,finalizeStaleRuns:t,scanDependencyCaches:o,nodeModulesAgeMs:n,worktreesAgeMs:s>0?s:0,terminalWorktreesAgeMs:i>=0?i:0,runDirectoriesAgeMs:a>=0?a:0,maxActionsPerSweep:Number.isFinite(l)&&l>0?Math.floor(l):120,includeOrphans:c,runIdFilter:d?String(d):void 0,accountBytes:m,storagePerRunEntryCap:f,byteAccountingEntryCap:k}}function _k(e){let r=process.env.KYNVER_CLEANUP_SCOPE==="all",t=Number(process.env.KYNVER_CLEANUP_WORKTREES_AGE_MS),n=r?Number.isFinite(t)&&t>0?t:6048e5:Number.isFinite(t)&&t>0?t:0;return Qu({runIdFilter:r?void 0:e,worktreesAgeMs:n,terminalWorktreesAgeMs:r?216e5:void 0,runDirectoriesAgeMs:r?36e5:void 0,includeOrphans:r?!0:void 0,finalizeStaleRuns:!0,accountBytes:!0,scanDependencyCaches:!0})}Pe();import{existsSync as xk}from"node:fs";import Zu from"node:path";C();var IP=1800*1e3;function ed(e){let r=e.now??Date.now(),t=e.heartbeatFreshMs??IP;if(!xk(e.worktreePath))return null;if(e.runId&&e.workerName){let c=Zu.join(e.harnessRoot,"runs",e.runId,"workers",e.workerName),u=w(Zu.join(c,"worker.json"),void 0);if(u&&ju(u,r,t))return"active_worker"}let n=Zu.join(e.worktreePath,".git");if(!xk(n))return null;let o=ne(e.worktreePath,["status","--porcelain"]);if(o.status!==0)return"pr_or_unmerged_commits";let s=o.stdout.split(`
+`).map(c=>c.trim()).filter(c=>c.length>0);if(Te(s).length>0)return"dirty_worktree";let i=ne(e.worktreePath,["rev-list","--count","@{u}..HEAD"]);if(i.status===0){let c=Number(i.stdout.trim());if(Number.isFinite(c)&&c>0)return"pr_or_unmerged_commits"}let a=ne(e.worktreePath,["rev-list","--count","origin/main..HEAD"]);if(a.status!==0)return i.status!==0?"pr_or_unmerged_commits":null;let l=Number(a.stdout.trim());return Number.isFinite(l)&&l>0?"pr_or_unmerged_commits":null}Ce();import{existsSync as OP}from"node:fs";import{homedir as NP}from"node:os";import Ek from"node:path";var TP=["/var/tmp/kynver-harness",Ek.join(NP(),".openclaw","harness")];function rd(e,r,t){if(!t?.trim())return;let n=le(t.trim());e.has(n)||(e.add(n),r.push(n))}function DP(e){return e.scanWellKnown!=null?e.scanWellKnown:process.env.VITEST==="true"?!1:process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN!=="0"&&!["0","false","no"].includes((process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN??"").toLowerCase())}function Pk(e={}){let r=new Set,t=[];rd(r,t,e.harnessRoot??fe());let n=process.env.KYNVER_CLEANUP_EXTRA_ROOTS?.split(",").map(o=>o.trim()).filter(Boolean);for(let o of n??[])rd(r,t,o);if(DP(e))for(let o of TP){let s=Ek.resolve(o);!r.has(s)&&OP(s)&&rd(r,t,s)}return t}Vt();function MP(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function UP(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function Ak(e={}){let r=e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/",t=UP("KYNVER_DISK_GUARD_MAX_USED_PERCENT",75),n=Le({...e,diskPath:r,diskMaxUsedPercent:e.diskMaxUsedPercent??t}),o=!n.ok||n.usedPercent>=t,s=process.env.KYNVER_CLEANUP_DISK_PRESSURE_FORCE?.trim().toLowerCase();return s==="none"||s==="off"||s==="0"?o=!1:(s==="pressured"||s==="on"||s==="1")&&(o=!0),{diskGate:n,pressured:o,maxUsedPercent:t}}function Ik(e,r){if(!r.pressured)return e;let t=e.execute||!MP("KYNVER_CLEANUP_DRY_RUN_ON_PRESSURE");return{...e,execute:t,nodeModulesAgeMs:0,runIdFilter:void 0,includeOrphans:!0,terminalWorktreesAgeMs:0,runDirectoriesAgeMs:0,worktreesAgeMs:e.worktreesAgeMs>0?e.worktreesAgeMs:6048e5,diskPressure:!0,diskGate:r.diskGate}}jt();function Me(e,r){if(process.env.KYNVER_CLEANUP_QUIET==="1")return;let t=r?`: ${r}`:"";console.error(`[kynver cleanup] ${e}${t}`)}Pe();var ba=class{aheadOfMain=new Map;countAheadOfMain(r,t="origin/main"){let n=`${r}\0${t}`;if(this.aheadOfMain.has(n))return this.aheadOfMain.get(n)??null;let o=ne(r,["rev-list","--count",`${t}..HEAD`]);if(o.status!==0)return this.aheadOfMain.set(n,null),null;let s=Number(o.stdout.trim()),i=Number.isFinite(s)?s:null;return this.aheadOfMain.set(n,i),i}};import{spawnSync as WP}from"node:child_process";import{existsSync as LP}from"node:fs";import BP from"node:path";var HP=5e3;function FP(e,r){if(!LP(BP.join(e,".git")))return{status:null,stdout:"",stderr:"",error:"not_a_git_repo"};try{let t=WP("git",r,{cwd:e,encoding:"utf8",timeout:HP}),n=t.error?.message?.includes("ETIMEDOUT")===!0;return{status:n?null:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:n?"git_timeout":t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function Ok(e){let r=FP(e,["status","--short"]);return r.error==="not_a_git_repo"?[]:r.error==="git_timeout"||r.status!==0?null:r.stdout.split(`
+`).map(t=>t.trim()).filter(Boolean)}var Sa=class{cache=new Map;porcelain(r){let t=r,n=this.cache.get(t);if(n!==void 0)return n;let o=Ok(t)??[];return this.cache.set(t,o),o}};var Ca=class{cache=new Map;derive(r){let t=this.cache.get(r.id);if(t!==void 0)return t;let n=yt(r);return this.cache.set(r.id,n),n}};function KP(e){let r={};for(let t of e)r[t.kind]=(r[t.kind]??0)+1;return r}function Nk(e,r={}){let t=r.maxSampleActions??12,n=r.maxSampleSkips??8;return{harnessRoot:e.harnessRoot,scanRoots:e.scanRoots,dryRun:e.dryRun,execute:e.execute,scannedAt:e.scannedAt,finalizedRuns:e.finalizedRuns.length,actionCount:e.actions.length,actionKinds:KP(e.actions),totals:e.totals,...e.storage?{storage:e.storage}:{},...e.preservedLivePaths?.length?{preservedLivePaths:e.preservedLivePaths}:{},...e.removedRunDirectories!=null?{removedRunDirectories:e.removedRunDirectories}:{},sampleActions:e.actions.slice(0,t).map(o=>({kind:o.kind,path:o.path,...o.skipReason?{skipReason:o.skipReason}:{},...o.bytes!=null?{bytes:o.bytes}:{},...o.runId?{runId:o.runId}:{},...o.worker?{worker:o.worker}:{}})),sampleSkips:e.skips.slice(0,n)}}function $P(e={}){let r=e.harnessRoot?le(e.harnessRoot):fe(),t=Pk({harnessRoot:r}),n=e.now??Date.now();return{harnessRoot:r,scanRoots:t,now:n}}function jP(e){return typeof e=="string"?{reason:e}:e}function xn(e,r,t,n){e.push({path:r,reason:t,...n?{detail:n}:{}})}function wa(e,r,t){return!r||e.bytes!=null?e:{...e,bytes:vr(e.path,t)}}function Tk(e,r){let t={};for(let n of r)t[n.reason]=(t[n.reason]??0)+1;for(let n of e)n.skipReason&&(t[n.skipReason]=(t[n.skipReason]??0)+1);return t}function VP(e,r){return e.kind==="remove_next_cache"?ck(e,r):lk(e,r)}function GP(e,r,t){return e.kind==="remove_next_cache"?ka(e.path,r,t):ha(e.path,r,t)}function YP(e){let r=new Map;for(let t of e)for(let[n,o]of wk(t))r.set(n,o);return r}function Dk(e,r){return e.runId&&e.worker?Ue.join(r,e.runId,e.worker):Ue.resolve(e.path,"..")}function _a(e={}){let r=Qu(e),t=Ak();r=Ik(r,t);let n=$P(e);Me("scan",`${n.scanRoots.length} harness root(s)`);let o=jh(n.scanRoots,n.now),s=r.finalizeStaleRuns?Ho().map(P=>({runId:P.runId,from:P.from,to:P.to})):[];s.length>0&&Me("finalize",`${s.length} stale run(s) marked terminal`),Me("index","building worktree index");let i=YP(n.scanRoots);Me("index",`${i.size} indexed worktree(s)`);let a={runTerminalCache:new Ca,gitStatusCache:new Sa,gitRevCache:new ba},l=[],c=[],u=new Set,d=r.maxActionsPerSweep,m=()=>c.length>=d;for(let P of n.scanRoots){if(m())break;Me("root",P);let B=Ue.join(P,"worktrees"),Kr=Ck(i,P),Q={harnessRoot:P,worktreesDir:B,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter,index:Kr,now:n.now},Cr=r.scanDependencyCaches?vk(Q):[];Me("dependency",r.scanDependencyCaches?`${Cr.length} cache candidate(s) at ${P}`:"skipped (worktree-only sweep)");let Tt=0;for(let ve of Cr){if(m())break;Tt+=1,Tt%50===0&&Me("dependency",`${Tt}/${Cr.length} evaluated`);let G=Ue.resolve(ve.path);if(u.has(G))continue;u.add(G);let W={...ve,path:G},be=GP(W,P,B);if(be){xn(l,W.path,be),c.push({...W,executed:!1,skipped:!0,skipReason:be});continue}let xe=Dk(W,B),wr=Kr.get(Ue.resolve(xe))??null,Ee=Gu({indexed:wr,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:W.ageMs,worktreePath:xe,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(Ee){xn(l,W.path,Ee),c.push({...W,executed:!1,skipped:!0,skipReason:Ee});continue}c.push(VP(wa(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(r.scanDependencyCaches)for(let ve of gk(Q)){if(m())break;let G=Ue.resolve(ve.path);if(u.has(G))continue;u.add(G);let W={...ve,path:G},be=ya(W.path,P,B);if(be){xn(l,W.path,be),c.push({...W,executed:!1,skipped:!0,skipReason:be});continue}let xe=Dk(W,B),wr=Kr.get(Ue.resolve(xe))??null,Ee=Hh({indexed:wr,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:W.ageMs,worktreePath:xe,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(Ee){xn(l,W.path,Ee),c.push({...W,executed:!1,skipped:!0,skipReason:Ee});continue}c.push(uk(wa(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}let Ve=[...hk(Q),...Sk(Q)];Me("worktrees",`${Ve.length} candidate(s) at ${P}`);let Dt=new Set,Ge=0;for(let ve of Ve){if(m())break;Ge+=1,Ge%50===0&&Me("worktrees",`${Ge}/${Ve.length} evaluated`);let G=Ue.resolve(ve.path);if(Dt.has(G))continue;Dt.add(G);let W={...ve,path:G},be=Kr.get(Ue.resolve(W.path))??null,xe=be?null:ed({worktreePath:W.path,harnessRoot:P,runId:W.runId,workerName:W.worker,now:n.now}),wr=Bh({indexed:be,worktreePath:Ue.resolve(W.path),includeOrphans:r.includeOrphans,worktreesAgeMs:r.worktreesAgeMs,terminalWorktreesAgeMs:r.terminalWorktreesAgeMs,ageMs:W.ageMs,orphanSafety:xe,worktreeRemovalGuard:e.worktreeRemovalGuard,liveness:a,now:n.now,harnessRoot:P,writeSalvageEvidence:r.execute});if(wr){let{reason:Ee,detail:ps}=jP(wr);xn(l,W.path,Ee,ps),c.push({...W,executed:!1,skipped:!0,skipReason:Ee});continue}c.push(pk(wa(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(!m()&&r.runDirectoriesAgeMs>=0)for(let ve of Xh({harnessRoot:P,worktreesDir:B,runDirectoriesAgeMs:r.runDirectoriesAgeMs,runIdFilter:r.runIdFilter,activeGuards:o,now:n.now})){if(m())break;let G=Ue.resolve(ve.path);if(u.has(G))continue;u.add(G);let W={...ve,path:G},be=W.runId??Ue.basename(G),xe=zh({harnessRoot:P,runId:be,runPath:G,ageMs:W.ageMs,runDirectoriesAgeMs:r.runDirectoriesAgeMs,activeGuards:o});if(xe){xn(l,W.path,xe),c.push({...W,executed:!1,skipped:!0,skipReason:xe});continue}c.push(dk(wa(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}}let p=0,f=0,h=0,k=0,g=0,R=0;for(let P of c)P.bytes&&(p+=P.bytes),!P.skipped&&!P.executed&&P.bytes&&(h+=P.bytes),P.executed?(g+=1,k+=P.bytes??0,P.kind==="remove_run_directory"&&(f+=1)):P.skipped&&(R+=1,P.skipReason==="dry_run"&&P.bytes&&(h+=P.bytes));let O=r.accountBytes?Hu({harnessRoot:n.harnessRoot,now:n.now,perRunEntryCap:r.storagePerRunEntryCap}):void 0,_=ur(),E=r.execute&&cu(_),U=E?Do({execute:!0}):null,Y=_?{observed:!0,execute:E,dumpCount:_.dumpCount,totalBytes:_.totalBytes,removedCount:U?.removed.length??0,removedBytes:U?.removedBytes??0,executables:_.executables,path:_.path,reason:_.reason}:void 0;U&&U.removed.length>0&&(k+=U.removedBytes,g+=U.removed.length,Me("wsl-crashes",`removed ${U.removed.length} dump(s), ${U.removedBytes} bytes`)),Me("complete",`${c.length} action(s), ${R} skipped, ${g} removed`);let $=Kh(c,l),F=Nk({harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:p,reclaimableBytes:h,removedBytes:k,removedPaths:g,skippedPaths:R,skipReasons:Tk(c,l)},...O?{storage:O}:{},...$.length>0?{preservedLivePaths:$}:{},...f>0?{removedRunDirectories:f}:{},...Y?{wslCrashDumps:Y}:{}});return{harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:p,reclaimableBytes:h,removedBytes:k,removedPaths:g,skippedPaths:R,skipReasons:Tk(c,l)},...O?{storage:O}:{},...$.length>0?{preservedLivePaths:$}:{},...f>0?{removedRunDirectories:f}:{},...Y?{wslCrashDumps:Y}:{},compactSummary:F}}function td(e){let r=_k(e);return _a({execute:r.execute,finalizeStaleRuns:r.finalizeStaleRuns,accountBytes:r.accountBytes,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter})}function nd(){return process.env.KYNVER_PIPELINE_CLEANUP!=="0"}I();import{mkdirSync as vv,realpathSync as bv}from"node:fs";import{fileURLToPath as nT}from"node:url";I();C();Xl();import JP from"node:os";function qP(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||y().apiBaseUrl;return r?ar(String(r)):void 0}async function zP(e,r){let t=await fetch(`${e}/api/agent-os`,{headers:{Authorization:`Bearer ${r}`}});if(!t.ok)return null;let n=await t.json().catch(()=>null);if(!n?.primarySlug)return null;let o=n.items?.find(s=>s.slug===n.primarySlug);return o?.id&&o.slug?{id:o.id,slug:o.slug}:{id:"",slug:n.primarySlug}}async function xa(e){let r=qP(e);r||(console.error("kynver bootstrap requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site or set KYNVER_API_URL."),process.exit(1)),se()||(typeof e.apiKey=="string"?uo(e.apiKey):(await zl({...e,apiBaseUrl:r})).ok||process.exit(1));let t=se();t||(console.error("No API key after login \u2014 aborting."),process.exit(1));let n=await zP(r,t);n||(console.error("Could not resolve your AgentOS workspace from the account. Confirm this account has AgentOS access, then retry."),process.exit(1));let o={...e,apiBaseUrl:r,agentOsSlug:n.slug,...n.id?{agentOsId:n.id}:{},...typeof e.repo=="string"?{}:{discoverRepo:!0}};await ti(o),console.log(""),console.log(`  Bootstrap complete \u2014 ${JP.hostname()} is linked to workspace "${n.slug}".`),console.log("  Next: `kynver start` \u2014 brings the agent online with Kynver-owned keeper supervision + local Kynver Cron when needed."),console.log("  Persistent background (Linux): `kynver start --install-systemd` or `kynver cron install --install-systemd`."),console.log("  (Advanced: `kynver run create --repo /path/to/repo` + `kynver daemon --run <RUN_ID> --agent-os-id <AOS_ID> --execute`.)")}I();import CO from"node:os";I();Je();I();import XP from"node:path";import{homedir as QP}from"node:os";var od=XP.join(QP(),".kynver","config.json");function Jo(e){let r=y(),t=na({...e,config:r});if(!t)return{ok:!1,remediated:!1,alreadyPersisted:!1,configPath:q(od),resolved:null,reason:"No Kynver git checkout found. Clone the repo, cd into it, then run `kynver setup --repo /path/to/Kynver` (or export KYNVER_DEFAULT_REPO).",remediation:"Clone the Kynver monorepo, cd into it, then run `kynver config ensure-default-repo` (or `kynver setup --repo /path/to/Kynver`)."};if(t.persistedInConfig)return{ok:!0,remediated:!1,alreadyPersisted:!0,configPath:q(od),resolved:vn(t),config:an(r)};let n=oa(t.repo,r),o=vn({...t,persistedInConfig:!0,source:"config"});return{ok:!0,remediated:!0,alreadyPersisted:!1,configPath:q(od),resolved:o,config:an(n),remediation:"defaultRepo persisted in ~/.kynver/config.json \u2014 `kynver run create` no longer requires --repo."}}function Mk(e=!1){let r=Jo();if(e){console.log(JSON.stringify(r,null,2)),r.ok||(process.exitCode=1);return}if(!r.ok){console.error(r.reason??"Could not resolve a Kynver git checkout."),r.remediation&&console.error(r.remediation),process.exitCode=1;return}if(r.alreadyPersisted){console.log(`defaultRepo already set (${r.resolved?.defaultRepo??"unknown"}) in ${r.configPath}`);return}console.log(`Persisted defaultRepo ${r.resolved?.defaultRepo??""} in ${r.configPath}. \`kynver run create\` can omit --repo.`)}function Uk(e){return e?e.persistedInConfig?{status:"pass"}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` to persist defaultRepo in ~/.kynver/config.json (or `kynver doctor runtime-takeover --remediate-default-repo`)."}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` from a Kynver checkout (or `kynver setup --repo /path/to/Kynver`)."}}I();Oe();Jn();Ks();import ZP from"node:os";function Wk(e,r){console.error(JSON.stringify({event:"daemon_identity",level:e,message:r}))}function Lk(e=y(),r=process.env){let t=Ae(r,e),n=Fs({config:e,totalMemBytes:ZP.totalmem(),env:r}),o=[...t.warnings],s=[];if(!e.boxKind?.trim()&&!r.KYNVER_BOX_KIND?.trim()&&o.push("boxKind is not persisted in ~/.kynver/config.json \u2014 run `kynver setup --box-kind forge|ghost` so Command Center attributes snapshots to the correct pool"),t.slugInferenceBlocked){let c=r.KYNVER_DAEMON_STRICT_IDENTITY==="1"||r.KYNVER_DAEMON_STRICT_IDENTITY==="true",u="ambiguous box identity: KYNVER_AGENT_OS_SLUG is set without KYNVER_BOX_KIND or config.boxKind; treating this host as forge";c?s.push(u):o.push(u)}let i=n.configuredMaxWorkers??n.autoCap,a=cr(t.boxKind,i);Kt(t.boxKind,i)&&o.push(`Forge box maxConcurrentWorkers=${i} exceeds pool cap \u2014 using ${a}; run kynver setup --box-kind forge --max-workers 4`);let l=s.length===0;for(let c of o)Wk("warn",c);for(let c of s)Wk("error",c);return{ok:l,box:t,workerCapSource:n.workerCapSource,maxConcurrentWorkers:a,autoCap:n.autoCap,warnings:o,errors:s}}import{mkdirSync as eA,readFileSync as rA,renameSync as tA,writeFileSync as nA}from"node:fs";import{homedir as oA}from"node:os";import Bk from"node:path";function Hk(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return Bk.join(oA(),".kynver",`daemon-heartbeat-${r}.json`)}function Fk(e){try{let r=Hk(e.agentOsId);eA(Bk.dirname(r),{recursive:!0});let t={observedAt:(e.now??new Date).toISOString(),pid:process.pid,runId:e.runId,agentOsId:e.agentOsId,...e.instructionBundleVersion?{instructionBundleVersion:e.instructionBundleVersion}:{}},n=`${r}.tmp-${process.pid}`;nA(n,JSON.stringify(t),"utf8"),tA(n,r)}catch{}}function Kk(e){try{let r=rA(Hk(e),"utf8"),t=JSON.parse(r);return typeof t?.observedAt!="string"?null:t}catch{return null}}function $k(e,r,t=Date.now()){if(!e)return!1;let n=Date.parse(e.observedAt);return Number.isNaN(n)?!0:t-n>r}function sA(e){let r=process.env[e]?.trim().toLowerCase();return r==="1"||r==="true"||r==="yes"||r==="on"}function En(){process.platform==="win32"&&(sA("KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS")||(console.error(JSON.stringify({event:"daemon_start_blocked",reason:"native_windows_console_flash",remedy:"Run the daemon inside WSL: .\\scripts\\start-tier2-wsl.ps1 \u2014 or set KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS=1 to override (flashes visible consoles)."})),process.exit(1)))}I();import{existsSync as iA}from"node:fs";import{homedir as aA}from"node:os";import lA from"node:path";function jk(e,r){let t=process.env[e]?.trim().toLowerCase();return t?t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r:r}function qo(e,r,t=1){let n=Number(process.env[e]);return!Number.isFinite(n)||n<t?r:Math.floor(n)}function Hr(){let e=process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim();return e||lA.join(aA(),".kynver","agent-os-cron.json")}function cA(e=Hr()){let r=process.env.KYNVER_CRON_TICK_STATE_PATH?.trim();return r||`${e.replace(/\.json$/i,"")}.tick-state.json`}function uA(){let e=y();return process.env.KYNVER_API_URL?.trim()||e.apiBaseUrl?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}function sd(){return process.env.KYNVER_CRON_SECRET?.trim()||process.env.OPENCLAW_CRON_SECRET?.trim()||process.env.KYNVER_RUNTIME_SECRET?.trim()||null}function Sr(){let e=Hr(),r=cA(e),t=uA(),n=sd(),o=!!(t&&n),s=iA(e),i=o&&(s||jk("KYNVER_CRON_TICK_FORCE",!1));return{storePath:e,statePath:r,lockPath:`${r}.lock`,fireBaseUrl:t,secret:n,tickEnabled:jk("KYNVER_CRON_TICK_ENABLED",i),tickIntervalMs:qo("KYNVER_CRON_TICK_INTERVAL_MS",6e4,5e3),missedRunPolicy:process.env.KYNVER_CRON_MISSED_RUN_POLICY?.trim().toLowerCase()==="skip"?"skip":"catch_up",maxCatchUpPerTick:qo("KYNVER_CRON_MAX_CATCH_UP_PER_TICK",3,0),maxRetries:qo("KYNVER_CRON_MAX_RETRIES",3,0),retryBackoffMs:qo("KYNVER_CRON_RETRY_BACKOFF_MS",6e4,1e3),inflightLeaseMs:qo("KYNVER_CRON_INFLIGHT_LEASE_MS",12e4,5e3)}}function Ea(e=Sr()){return e.tickEnabled&&!!(e.fireBaseUrl&&e.secret)}function dA(e){return e.replace(/\/+$/,"")}async function Vk(e){let r=e.fetchFn??fetch,t=e.entry.spec.callbackPath.startsWith("/")?e.entry.spec.callbackPath:`/${e.entry.spec.callbackPath}`,n=`${dA(e.baseUrl)}${t}`,s={source:"kynver-cron",jobId:e.jobId??e.entry.spec.dedupeKey??null,agentOsId:e.entry.spec.target.agentOsId,kind:e.entry.spec.kind,target:e.entry.spec.target,...e.entry.spec.payload!==void 0&&{payload:e.entry.spec.payload}},i=await r(n,{method:"POST",headers:He(e.secret),body:JSON.stringify(s)}),a=null;try{a=await i.json()}catch{a=null}return{ok:i.ok,status:i.status,body:a}}C();import{closeSync as pA,existsSync as id,openSync as mA,readFileSync as fA,unlinkSync as Gk,writeFileSync as gA}from"node:fs";var hA=10*6e4;function Yk(e){if(!id(e))return null;try{let r=JSON.parse(fA(e,"utf8"));if(typeof r.pid=="number"&&typeof r.at=="string")return r}catch{return null}return null}function kA(e){let r=Yk(e);if(!r||!H(r.pid))return!0;let t=Date.parse(r.at);return Number.isNaN(t)?!0:Date.now()-t>hA}function Jk(e){if(id(e)&&!kA(e)){let r=Yk(e);return{acquired:!1,reason:r?`held by pid ${r.pid}`:"held by another process"}}if(id(e))try{Gk(e)}catch{}try{let r=mA(e,"wx");return gA(r,JSON.stringify({pid:process.pid,at:new Date().toISOString()}),"utf8"),pA(r),{acquired:!0}}catch(r){if(r.code==="EEXIST")return{acquired:!1,reason:"concurrent acquire"};throw r}}function qk(e){try{Gk(e)}catch{}}var yA=/^[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+$/;function RA(e){return yA.test(e.trim())}function vA(e,r,t){let n=new Set;for(let o of e.split(",")){let s=o.trim();if(!s)continue;if(s==="*"){for(let d=r;d<=t;d++)n.add(d);continue}let i=/^(.+)\/(\d+)$/.exec(s),a=i?i[1]:s,l=i?Math.max(1,Number(i[2])):1;if(a==="*"){for(let d=r;d<=t;d+=l)n.add(d);continue}let c=/^(\d+)-(\d+)$/.exec(a);if(c){let d=Math.max(r,Number(c[1])),m=Math.min(t,Number(c[2]));for(let p=d;p<=m;p+=l)n.add(p);continue}let u=Number(a);Number.isInteger(u)&&u>=r&&u<=t&&n.add(u)}return n}function zo(e,r,t,n){let o=e.trim();return o==="*"?!0:vA(o,t,n).has(r)}function bA(e,r){let t=e.trim().split(/\s+/);if(t.length!==5)return!1;let[n,o,s,i,a]=t;return zo(n,r.getUTCMinutes(),0,59)&&zo(o,r.getUTCHours(),0,23)&&zo(s,r.getUTCDate(),1,31)&&zo(i,r.getUTCMonth()+1,1,12)&&zo(a,r.getUTCDay(),0,6)}var SA=366*24*60;function CA(e){return new Date(Date.UTC(e.getUTCFullYear(),e.getUTCMonth(),e.getUTCDate(),e.getUTCHours(),e.getUTCMinutes(),0,0))}function zk(e,r){if(!RA(e))return null;let t=CA(r);t=new Date(t.getTime()+6e4);for(let n=0;n<SA;n++){if(bA(e,t))return t;t=new Date(t.getTime()+6e4)}return null}function Xk(e,r){if(e.scheduleKind==="runAt"&&e.runAt){let t=Date.parse(e.runAt);return Number.isNaN(t)?null:new Date(t).toISOString()}if(e.scheduleKind==="cron"&&e.cron){let t=zk(e.cron.trim(),r);return t?t.toISOString():null}return null}function ad(e,r){if(e.scheduleKind!=="cron"||!e.cron?.trim())return null;let t=zk(e.cron.trim(),r);return t?t.toISOString():null}import{promises as wA}from"node:fs";async function Qk(e){try{return await wA.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function _A(e){if(!e)return[];try{let r=JSON.parse(e);return Array.isArray(r.entries)?r.entries:[]}catch{return[]}}async function Ct(e=Hr()){let r=await Qk(e);return _A(r)}async function Zk(e,r){let{mkdir:t,writeFile:n,rename:o}=await import("node:fs/promises"),{randomBytes:s}=await import("node:crypto"),{dirname:i}=await import("node:path");await t(i(e),{recursive:!0});let a=`${e}.${s(4).toString("hex")}.tmp`,l=JSON.stringify({entries:r},null,2);await n(a,l,"utf8"),await o(a,e)}async function ey(e,r=Hr()){let t=await Ct(r),n=t.findIndex(o=>o.providerScheduleId===e.providerScheduleId);n>=0?t[n]=e:t.push(e),await Zk(r,t)}async function ry(e=Hr()){return await Qk(e)!==null?{created:!1}:(await Zk(e,[]),{created:!0})}import{randomBytes as xA}from"node:crypto";import{promises as Xo}from"node:fs";import EA from"node:path";var Pa={version:1,jobs:{}};async function PA(e){try{return await Xo.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function AA(e){if(!e)return{...Pa,jobs:{...Pa.jobs}};try{let r=JSON.parse(e);return r?.version!==1||typeof r.jobs!="object"||!r.jobs?{...Pa,jobs:{}}:r}catch{return{...Pa,jobs:{}}}}async function Aa(e){let r=await PA(e);return AA(r)}async function IA(e,r){await Xo.mkdir(EA.dirname(e),{recursive:!0});let t=xA(6).toString("hex"),n=`${e}.tmp-${process.pid}-${Date.now()}-${t}`;await Xo.writeFile(n,`${JSON.stringify(r,null,2)}
+`,"utf8");try{await Xo.rename(n,e)}catch(o){let s=o.code;if(s!=="EPERM"&&s!=="EEXIST"&&s!=="EACCES")throw o;await Xo.unlink(n).catch(()=>{})}}async function ty(e,r){await IA(e,r)}function ny(e,r){let t=e.jobs[r];if(t)return t;let n={providerScheduleId:r,nextFireAt:null,lastFiredAt:null,lastAttemptAt:null,consecutiveFailures:0,completedAt:null,inflightUntil:null};return e.jobs[r]=n,n}function OA(e,r){if(!e.inflightUntil)return!1;let t=Date.parse(e.inflightUntil);return!Number.isNaN(t)&&t>r}function NA(e){return!!e.completedAt}function TA(e,r,t,n){if(r.consecutiveFailures===0)return!0;if(e.spec.scheduleKind!=="cron"&&r.consecutiveFailures>t.maxRetries)return!1;if(!r.lastAttemptAt)return!0;let o=Date.parse(r.lastAttemptAt);return Number.isNaN(o)?!0:n-o>=t.retryBackoffMs}function DA(e,r,t){if(r.nextFireAt)return r.nextFireAt;let n=Xk(e.spec,t);return r.nextFireAt=n,n}function MA(e,r,t,n){if(e.paused||NA(r)||OA(r,t)||!TA(e,r,n,t))return!1;let o=r.nextFireAt?Date.parse(r.nextFireAt):NaN;return Number.isNaN(o)?!1:t>=o}function UA(e,r,t){e.spec.scheduleKind==="cron"&&(r.nextFireAt=ad(e.spec,t))}async function Pn(e={}){let r=e.env??Sr(),t=e.now??new Date,n=t.getTime();if(!r.tickEnabled)return{enabled:!1,skipped:"tick_disabled",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};if(!r.fireBaseUrl||!r.secret)return{enabled:!0,skipped:"missing_fire_credentials",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};let o=Jk(r.lockPath);if(!o.acquired)return{enabled:!0,skipped:o.reason??"lock_not_acquired",scanned:0,due:0,fired:0,skippedJobs:0,errors:0,lockHeld:!0};try{let s=await Ct(r.storePath),i=e.agentOsIdFilter?s.filter(p=>p.spec.target.agentOsId===e.agentOsIdFilter):s,a=await Aa(r.statePath),l=[];for(let p of i){let f=ny(a,p.providerScheduleId);DA(p,f,t),MA(p,f,n,r)&&l.push({entry:p,job:f})}l.sort((p,f)=>{let h=Date.parse(p.job.nextFireAt??"")||0,k=Date.parse(f.job.nextFireAt??"")||0;return h-k});let c=0,u=0,d=0,m=r.maxCatchUpPerTick;for(let{entry:p,job:f}of l){if(r.missedRunPolicy==="skip"&&p.spec.scheduleKind==="cron"){let h=Date.parse(f.nextFireAt??"");if(!Number.isNaN(h)&&h<n-r.tickIntervalMs*2){f.nextFireAt=ad(p.spec,t),d++;continue}}if(m<=0){d++;continue}f.inflightUntil=new Date(n+r.inflightLeaseMs).toISOString(),f.lastAttemptAt=t.toISOString(),UA(p,f,t);try{let h=await Vk({entry:p,baseUrl:r.fireBaseUrl,secret:r.secret,fetchFn:e.fetchFn});f.inflightUntil=null,h.ok?(f.lastFiredAt=t.toISOString(),f.consecutiveFailures=0,p.spec.scheduleKind==="runAt"&&(f.completedAt=t.toISOString(),f.nextFireAt=null),c++,m--):(f.consecutiveFailures+=1,u++)}catch{f.inflightUntil=null,f.consecutiveFailures+=1,u++}}return await ty(r.statePath,a),{enabled:!0,scanned:i.length,due:l.length,fired:c,skippedJobs:d,errors:u}}finally{qk(r.lockPath)}}C();T();import oy from"node:path";var sy="mesh-cron-lease.json";function Ia(e){return w(oy.join(x(e),sy),null)}function iy(e,r){ae(oy.join(x(e),sy),{...r,updatedAt:new Date().toISOString()})}function ay(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.response;if(!r||typeof r!="object"||Array.isArray(r))return null;let t=r.meshLiveness;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t.cronLease;if(!n||typeof n!="object"||Array.isArray(n))return null;let o=n;return{leaseToken:typeof o.leaseToken=="string"?o.leaseToken:null,holderBoxId:typeof o.holderBoxId=="string"?o.holderBoxId:null,authorized:o.authorized===!0,updatedAt:new Date().toISOString()}}C();import RI from"node:path";I();var WA=1;function An(e){if(!e||typeof e!="object")return 0;let r=e.startedCount;if(typeof r=="number")return r;let t=e.outcomes;return Array.isArray(t)?t.filter(n=>n.started).length:0}function LA(e){let{maxStarts:r,...t}=e;return t}async function ld(e,r){if(r<=0)return{ok:!0,skipped:!0,reason:"no slots",maxStarts:0,startedCount:0};let t=LA(e);if(t.targetTaskId||t.targetTaskIds){let u=await Wr({...t,execute:!0,pipeline:!0,maxStarts:String(r)});return{...typeof u=="object"&&u!==null?u:{},passes:{target:u},startedCount:An(u)}}let n=Math.min(r,WA),o=Math.max(0,r-n),s=await Wr({...t,execute:!0,pipeline:!0,lane:"review",maxStarts:String(n)}),i=An(s),a=o+(n-i);if(a<=0)return{...typeof s=="object"&&s!==null?s:{},passes:{review:s},startedCount:i};let l=await Wr({...t,execute:!0,pipeline:!0,maxStarts:String(a)}),c=An(l);return{passes:{review:s,work:l},startedCount:i+c,ok:!0}}function ly(e){if(!e||typeof e!="object")return[];let t=e.response?.dispatch?.exactTargetTaskIds;if(!Array.isArray(t))return[];let n=new Set,o=[];for(let s of t){if(typeof s!="string")continue;let i=s.trim();!i||n.has(i)||(n.add(i),o.push(i))}return o}function BA(e){let t=e.response?.dispatch;return t&&typeof t=="object"?t:null}function Qo(e){return typeof e!="number"||!Number.isFinite(e)?null:Math.max(0,Math.floor(e))}function HA(e){let r=Number(process.env[e]);return!Number.isFinite(r)||r<=0?null:Math.floor(r)}function cy(e,r){let t=BA(r),n=Qo(t?.recommendedMaxStarts),o=Qo(t?.actionableReady),s=Qo(t?.queuedTasks),i=Qo(t?.boardAdvancedThisTick)??0,a=Qo(t?.leaseReapedThisTick)??0,l=i+a,c=o??s,u=e.slotsAvailable;c!==null?u=Math.min(u,c):n!==null&&(u=Math.min(u,n)),c===null&&n!==null&&(u=Math.max(u,Math.min(e.slotsAvailable,n)));let d=t?.underutilized===!0||(c??0)>0&&e.slotsAvailable>0&&e.maxConcurrentWorkers>0&&e.activeWorkers<e.maxConcurrentWorkers;if(e.slotsAvailable>0&&u===0&&(d||l>0)){let f=c??(l>0?l:1);u=Math.min(e.slotsAvailable,Math.max(1,f))}let m=HA("KYNVER_DAEMON_MAX_DISPATCH_STARTS");m!==null&&(u=Math.min(u,m));let p=s!==null&&o!==null?Math.max(0,s-o):null;return{maxStarts:Math.max(0,u),underutilized:d,advisedStarts:n,actionableReady:o,queuedTasks:s,nonDispatchableReady:p,boardAdvancedThisTick:i,leaseReapedThisTick:a}}en();T();Qn();z();C();z();T();C();import FA from"node:path";I();async function uy(e){let r=V(e.baseUrl),t=await J(e.secret,e.agentOsId,{baseUrl:r}),n=`${r}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/plan-progress-sync`,o=await re(n,t,{phase:e.phase,taskId:e.taskId,blocker:e.blocker,artifact:e.artifact},{agentOsId:e.agentOsId,baseUrl:r});return{ok:o.ok,status:o.status,response:o.response}}async function dy(e,r){let t=L(e),n=String(r.agentOsId||"");if(!n)return[];let o=[];for(let s of Object.keys(t.workers||{})){let i=w(FA.join(x(t.id),"workers",b(s),"worker.json"),void 0);if(!i?.dispatched||!i.taskId)continue;let a=D(i);if(!a.heartbeatBlocker)continue;if(i.lastSyncedHeartbeatBlocker===a.heartbeatBlocker){o.push({worker:s,phase:"heartbeat_blocker",ok:!0,skipped:!0});continue}let l=await uy({agentOsId:n,taskId:i.taskId,phase:"heartbeat_blocker",blocker:a.heartbeatBlocker,baseUrl:r.baseUrl?String(r.baseUrl):void 0,secret:r.secret?String(r.secret):void 0});l.ok&&(i.lastSyncedHeartbeatBlocker=a.heartbeatBlocker,K(t.id,i)),o.push({worker:s,phase:"heartbeat_blocker",ok:l.ok})}return o}Zt();I();Oe();function KA(e=process.env){let r=y();return qe(r,e)!=="forge"}function py(e,r=process.env){if(KA(r))return e?.maxConcurrentWorkers??void 0}async function my(e,r){let t=V(r.baseUrl?String(r.baseUrl):void 0),n=await J(r.secret?String(r.secret):void 0,e,{baseUrl:t}),o=`${t}/api/agent-os/by-id/${encodeURIComponent(e)}/runtime`;try{let s=await ni(o,n);if(!s.ok)return null;let a=s.response?.preferences?.maxConcurrentWorkers;if(a==null)return{maxConcurrentWorkers:null};let l=Number(a);return!Number.isFinite(l)||l<=0?{maxConcurrentWorkers:null}:{maxConcurrentWorkers:Math.floor(l)}}catch{return null}}I();Oe();import{spawnSync as $A}from"node:child_process";var jA=1e4,VA=4*1024*1024,fy=(e,r,t)=>{try{let n=$A(e,r,{encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:t?.timeoutMs??jA,maxBuffer:VA});return{ok:n.status===0,stdout:typeof n.stdout=="string"?n.stdout:"",stderr:typeof n.stderr=="string"?n.stderr:""}}catch(n){return{ok:!1,stdout:"",stderr:n instanceof Error?n.message:String(n)}}};function Oa(e,r,t){return`${e} ${r} ${t}`}function Zo(e){let r=e.lastIndexOf("@");if(r<=0||r===e.length-1)return null;let t=e.slice(0,r),n=e.slice(r+1);return!/^[^/\s]+\/[^/\s]+$/.test(t)||!/^[0-9a-f]{7,40}$/i.test(n)?null:{repo:t,sha:n}}function gy(e){let r=e.trim().match(/[/:]([^/]+\/[^/]+)\/(?:pull|pulls|merge_requests|pull-requests)\/(\d+)/i);if(!r)return null;let t=Number(r[2]);return!Number.isFinite(t)||t<=0?null:{repo:r[1],number:t}}var GA=8e3,YA=30,JA=100,qA=400,zA=3600*1e3,cd=0;function dd(){return Date.now()<cd}function XA(e){let r=`${e.stdout}
+${e.stderr}`.toLowerCase();return r.includes("api rate limit exceeded")||r.includes("rate limit exceeded")||r.includes("secondary rate limit")}function hy(e){XA(e)&&(cd=Math.max(cd,Date.now()+zA))}function ud(e,r){if(dd())return null;let t=e("gh",["api",...r]);if(!t.ok||!t.stdout.trim())return hy(t),null;try{return JSON.parse(t.stdout)}catch{return null}}function QA(e,r,t,n){if(dd())return null;let o=e("gh",["pr","view",String(t),"--repo",r,"--json",n.join(",")]);if(!o.ok||!o.stdout.trim())return hy(o),null;try{return JSON.parse(o.stdout)}catch{return null}}function pd(e){return dd()?!1:process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()?!0:e("gh",["auth","token"]).ok}function In(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function ZA(e){return Array.isArray(e)?e.map(r=>In(r)).filter(r=>r!==null).slice(0,YA).map(r=>({context:r.context??null,state:r.state??null,target_url:r.target_url??null,description:r.description??null})):[]}function eI(e,r,t){let n=ud(e,[`repos/${r}/commits/${t}/status`]);return n?{state:n.state??null,statuses:ZA(n.statuses)}:null}var ky={provider:"github",kind:"pr_snapshot",version:"2",isAvailable:pd,collect(e,r){let t=gy(e);if(!t)return null;let n=QA(r,t.repo,t.number,["url","title","body","author","state","isDraft","mergedAt","mergeCommit","mergeable","headRefName","headRefOid","headRepositoryOwner","statusCheckRollup","files"]);if(!n)return null;let o=In(n.author),s=In(n.mergeCommit),i=In(n.headRepositoryOwner),a=typeof n.body=="string"?n.body.slice(0,GA):null,l=Array.isArray(n.statusCheckRollup)?n.statusCheckRollup.map(u=>In(u)).filter(u=>u!==null).slice(0,JA).map(u=>({name:u.name??u.context??null,status:u.status??u.state??null,conclusion:u.conclusion??null})):[],c=Array.isArray(n.files)?n.files.map(u=>In(u)).map(u=>typeof u?.path=="string"?u.path.trim():"").filter(Boolean).slice(0,qA):[];return{pull:{html_url:n.url??null,title:n.title??null,body:a,user:{login:o?.login??null},state:typeof n.state=="string"?n.state.toLowerCase():null,draft:n.isDraft??null,merged:!!n.mergedAt,merged_at:n.mergedAt??null,merge_commit_sha:s?.oid??null,mergeable:null,mergeable_state:n.mergeable??null,head:{sha:n.headRefOid??null,ref:n.headRefName??null,repo:{owner:{login:i?.login??null}}}},checkRuns:l,combinedStatus:{state:null,statuses:[]},changedFiles:c}}},yy={provider:"github",kind:"commit_status",version:"1",isAvailable:pd,collect(e,r){let t=Zo(e);return t?eI(r,t.repo,t.sha):null}},Ry={provider:"github",kind:"branch_reachability",version:"1",isAvailable:pd,collect(e,r){let t=Zo(e);if(!t)return null;let n=ud(r,[`repos/${t.repo}`]),o=typeof n?.default_branch=="string"&&n.default_branch.trim()?n.default_branch.trim():null;if(!o)return null;let s=ud(r,[`repos/${t.repo}/compare/${encodeURIComponent(o)}...${t.sha}`]);if(!s)return null;let i=typeof s.status=="string"?s.status:null;return{defaultBranch:o,compareStatus:i,reachable:i==="identical"||i==="behind"}}};var rI=5,tI=/\b(READY|ERROR|BUILDING|QUEUED|CANCELED|INITIALIZING)\b/i,nI=/https:\/\/[^\s]+/,vy={provider:"vercel",kind:"deployment_status",version:"1",isAvailable(e){return e("vercel",["whoami"]).ok},collect(e,r){let t=Zo(e);if(!t)return null;let n=r("vercel",["list","--prod","--meta",`githubCommitSha=${t.sha}`]);if(!n.ok)return null;let o=[];for(let s of n.stdout.split(`
+`)){let i=s.match(nI)?.[0];if(!i)continue;let a=s.match(tI)?.[1]?.toUpperCase()??null;if(o.push({url:i,state:a}),o.length>=rI)break}return{found:o.length>0,deployments:o}}};var md=[];function Na(e){md.some(r=>r.provider===e.provider&&r.kind===e.kind)||md.push(e)}function by(e,r){return md.find(t=>t.provider===e&&t.kind===r)??null}function Sy(){Na(ky),Na(yy),Na(Ry),Na(vy)}var oI=1,sI=25e3;function Cy(e,r={}){Sy();let t=r.run??fy,n=r.now??(()=>new Date),o=r.maxSubjects??oI,s=Date.now()+(r.deadlineMs??sI),i=new Set,a=e.filter(p=>{let f=Oa(p.provider,p.kind,p.subject);return i.has(f)?!1:(i.add(f),!0)}),l=a.length>0?Math.floor(n().getTime()/6e4)%a.length:0,u=a.map((p,f)=>a[(l+f)%a.length]).slice(0,o),d={attempted:0,collected:0,cached:0,items:[],skipped:[]},m=new Map;for(let p of u){let f=Oa(p.provider,p.kind,p.subject),h=n(),k=r.cache?.get(f,h)??null;if(k){d.cached+=1,d.collected+=1,d.items.push(k);continue}if(Date.now()>s){d.skipped.push({...p,reason:"budget_exhausted"});continue}let g=by(p.provider,p.kind);if(!g){d.skipped.push({...p,reason:"no_recipe"});continue}let R=`${g.provider} ${g.kind}`,O=m.get(R);if(O===void 0&&(O=g.isAvailable(t),m.set(R,O)),!O){d.skipped.push({...p,reason:"provider_unavailable"});continue}if(r.cache?.reserve?.(p,f,n())===!1){d.skipped.push({...p,reason:"budget_exhausted"});continue}d.attempted+=1;let _=g.collect(p.subject,t);if(_==null){d.skipped.push({...p,reason:"collect_failed"});continue}d.collected+=1;let E={provider:p.provider,kind:p.kind,subject:p.subject,payload:_,observedAt:n().toISOString(),collectorVersion:g.version};d.items.push(E),r.cache?.set(f,E,n())}return d}T();C();import uI from"node:path";T();C();import wy from"node:path";var iI="provider-evidence-wanted.json",aI="provider-evidence-cache.json",lI=600*1e3;function _y(e){return wy.join(x(e),iI)}function cI(e){return wy.join(x(e),aI)}function xy(e){if(!Array.isArray(e))return[];let r=[];for(let t of e){if(!t||typeof t!="object"||Array.isArray(t))continue;let n=t,o=typeof n.provider=="string"?n.provider.trim():"",s=typeof n.kind=="string"?n.kind.trim():"",i=typeof n.subject=="string"?n.subject.trim():"";!o||!s||!i||r.push({provider:o,kind:s,subject:i})}return r}function Ey(e){let r=w(_y(e),null);return xy(r?.wanted)}function Py(e,r){ae(_y(e),{savedAt:new Date().toISOString(),wanted:r})}function Ay(e,r={}){let t=r.ttlMs??lI,n=cI(e),s={...w(n,null)?.items??{}},i=!1;return{get(l,c){let u=s[l];if(!u)return null;let d=Date.parse(u.observedAt);return!Number.isFinite(d)||c.getTime()-d>t?(delete s[l],i=!0,null):u},set(l,c){s[l]=c,i=!0},flush(){i&&(ae(n,{savedAt:new Date().toISOString(),items:s}),i=!1)}}}function Iy(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.providerEvidenceWanted;return Array.isArray(r)?xy(r):null}var dI="provider-evidence-shared-cache.json",pI=6e4,mI=1,fI=1;function fd(e,r){let t=process.env[e];if(!t)return r;let n=Number.parseInt(t,10);return Number.isFinite(n)&&n>=0?n:r}function gI(){return uI.join(Z().harnessRoot,dI)}function hI(e){let r=e.toUpperCase().replace(/[^A-Z0-9]+/g,"_"),t=e==="github"?mI:fI;return fd(`KYNVER_PROVIDER_EVIDENCE_${r}_PER_MINUTE`,fd("KYNVER_PROVIDER_EVIDENCE_LIVE_COLLECTS_PER_MINUTE",t))}function Oy(){return fd("KYNVER_PROVIDER_EVIDENCE_SHARED_CACHE_TTL_MS",pI)}function kI(e){return Math.floor(e.getTime()/6e4)*6e4}function yI(e){return`${e.provider}:${e.kind}`}function Ny(e,r={}){let t=Ay(e,{ttlMs:r.ttlMs??Oy()}),n=r.file??gI(),o=w(n,null),s={...o?.items??{}},i={...o?.budget??{}},a=r.ttlMs??Oy(),l=!1;return{get(u,d){let m=t.get(u,d);if(m)return m;let p=s[u];if(!p)return null;let f=Date.parse(p.observedAt);return!Number.isFinite(f)||d.getTime()-f>a?(delete s[u],l=!0,null):(t.set(u,p,d),p)},set(u,d,m){t.set(u,d,m),s[u]=d,l=!0},reserve(u,d,m){let p=hI(u.provider);if(p===0)return!0;let f=yI(u),h=kI(m),k=i[f];return!k||k.windowStartMs!==h?(i[f]={windowStartMs:h,used:1},l=!0,!0):k.used>=p?!1:(k.used+=1,l=!0,!0)},flush(){t.flush(),l&&(ae(n,{savedAt:new Date().toISOString(),items:s,budget:i}),l=!1)}}}function vI(){let e=process.env.KYNVER_PIPELINE_SWEEP_ENABLED;return e?e==="1"||e.toLowerCase()==="true":!1}async function bI(e,r){let t=L(e),n=[],o=Math.max(0,Number.parseInt(process.env.KYNVER_PIPELINE_COMPLETION_REPLAY_MAX_DEEP_CHECKS_PER_TICK??"0",10)||0),s=0;for(let i of Object.keys(t.workers||{})){let a=w(RI.join(x(t.id),"workers",b(i),"worker.json"),void 0);if(!a?.taskId||a.localOnly||rt(a))continue;if(dt(a)){n.push({worker:i,ok:!0,taskId:a.taskId??null,skipped:!0});continue}if(s>=o)break;s++;let l=D(a);if(!oe(l))continue;let c=Xr({alive:l.alive,finalResult:l.finalResult,changedFiles:l.changedFiles,gitAncestry:l.gitAncestry});if(!a.dispatched&&!l.finalResult&&!c?.salvageable)continue;let u=await Eo({run:e,name:i,agentOsId:String(r.agentOsId||a.agentOsId||""),...r});n.push({worker:i,ok:u.ok,taskId:a.taskId??null})}return n}async function SI(e,r,t,n,o){let s=V(n.baseUrl?String(n.baseUrl):void 0),i=await J(n.secret?String(n.secret):void 0,e,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(e)}/operator/tick`,l=await ws(),c=Bi(r),u=null;try{let h=Ey(r);if(h.length>0){let k=Ny(r);u=Cy(h,{cache:k}),k.flush?.()}else u=null}catch{u=null}let d=Ia(r),m=await Or(a,i,{agentOsId:e,runId:r,ingestHarness:!0,harnessBoardSnapshot:Ao(r),resourceGate:t,boxResourceSnapshot:Mo(t,{harnessRunId:r,boxKind:qe(y())}),packageVersions:l,...o?{harnessCleanup:o}:{},runnerPresence:er({runId:r}),activeHarnessWorkers:c,...d?.leaseToken?{meshCronLeaseToken:d.leaseToken}:{},...u&&u.items.length>0?{providerEvidence:u.items}:{}}),p=Iy(m.response);if(p)try{Py(r,p)}catch{}let f=ay(m);if(f)try{iy(r,f)}catch{}return{ok:m.ok,httpStatus:m.status,response:m.response,...u?{providerEvidence:{attempted:u.attempted,collected:u.collected,skipped:u.skipped.length}}:{}}}async function gd(e){let r=String(N(String(e.run||""),"--run")),t=String(N(String(e.agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false";Ao(r);let o=await my(t,e),s=py(o),i=mr({runId:r,configuredMaxWorkersOverride:s}),a=nd()?td(r):void 0,l=await SI(t,r,i,e,a),c=lg(r,l),u=await vi(r,e),d=await bI(r,e),m=mr({runId:r,configuredMaxWorkersOverride:s}),p=Sn(),f=await dy(r,e),h=cy(m,l),k=h.maxStarts,g=vI()?await wn({run:r,agentOsId:t,pipeline:!0,...e}):{ok:!0,skipped:!0,reason:"pipeline_sweep_disabled"},R=null,O=0,_=ly(l),E=k;if(n&&E>0&&_.length>0){let Y=Math.min(E,_.length),$=await ld({...e,run:r,agentOsId:t,targetTaskIds:_.join(",")},Y),F=An($);O+=F,E=Math.max(0,E-F),R={exactTargetTaskIds:_,exact:$,startedCount:O}}if(n&&E>0){let Y=await ld({...e,run:r,agentOsId:t},E),$=An(Y);O+=$,R=R&&typeof R=="object"?{...R,broad:Y,startedCount:O}:Y}else!n||k<=0?R||(R={ok:!0,skipped:!0,reason:n?m.reason??"no slots or queued work":"execute disabled",maxStarts:0,dispatchAdvice:h,..._.length?{exactTargetTaskIds:_,exactOnly:!0}:{}}):R&&typeof R=="object"&&(R={...R,broadSkipped:!0,startedCount:O});let U=!h.underutilized&&k===0&&d.length===0&&O===0;return{runId:r,agentOsId:t,execute:n,resourceGate:i,dispatchResourceGate:m,leaseRenewal:u,completedWorkers:d,staleReconcile:p,harnessCleanup:a,planProgressSync:f,completionAckSync:c,operatorTick:l,sweep:g,dispatchAdvice:h,dispatch:R,idle:U}}I();import FI from"node:os";import{readFileSync as CI}from"node:fs";import{homedir as wI,platform as _I}from"node:os";import xI from"node:path";import{execFileSync as EI}from"node:child_process";function Ty(e,r=Date.now()){try{let t=JSON.parse(e),n=t.claudeAiOauth?.accessToken,o=t.claudeAiOauth?.expiresAt;return typeof n!="string"||!n||typeof o=="number"&&o-r<6e4?null:n}catch{return null}}function PI(){if(_I()==="darwin")try{let e=EI("security",["find-generic-password","-s","Claude Code-credentials","-w"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return Ty(e.trim())}catch{return null}try{let e=CI(xI.join(wI(),".claude",".credentials.json"),"utf8");return Ty(e)}catch{return null}}function Dy(e=process.env,r={}){let t=e.ANTHROPIC_API_KEY?.trim();if(t)return{kind:"api_key",key:t};let n=e.KYNVER_CHAT_USE_CLAUDE_OAUTH;if(r.oauthOptIn===!0||n==="1"||n==="true"||n==="yes"){let s=PI();if(s)return{kind:"oauth",token:s}}return null}var AI="You are Claude Code, Anthropic's official CLI for Claude.";function II(){return{blocks:[],stopReason:null,inputTokens:0,outputTokens:0}}function OI(e,r){let t=r;switch(t.type){case"message_start":return e.inputTokens=t.message?.usage?.input_tokens??0,"";case"content_block_start":{let n=t.index??e.blocks.length;return e.blocks[n]={type:t.content_block?.type==="tool_use"?"tool_use":"text",text:"",id:t.content_block?.id,name:t.content_block?.name,inputJson:""},""}case"content_block_delta":{let n=e.blocks[t.index??e.blocks.length-1];return n?t.delta?.type==="text_delta"&&t.delta.text?(n.text+=t.delta.text,t.delta.text):(t.delta?.type==="input_json_delta"&&t.delta.partial_json&&(n.inputJson+=t.delta.partial_json),""):""}case"message_delta":return t.delta?.stop_reason&&(e.stopReason=t.delta.stop_reason),typeof t.usage?.output_tokens=="number"&&(e.outputTokens=t.usage.output_tokens),"";default:return""}}function NI(e){let r=[];for(let t of e.blocks)if(t)if(t.type==="tool_use"){let n={};try{n=t.inputJson?JSON.parse(t.inputJson):{}}catch{n={}}r.push({type:"tool_use",id:t.id??"",name:t.name??"",input:n})}else t.text&&r.push({type:"text",text:t.text});return{content:r,stop_reason:e.stopReason??"end_turn",usage:{input_tokens:e.inputTokens,output_tokens:e.outputTokens}}}async function*TI(e){let r=e.getReader(),t=new TextDecoder,n="";try{for(;;){let{done:o,value:s}=await r.read();if(o)break;n+=t.decode(s,{stream:!0});let i;for(;(i=n.indexOf(`
+`))!==-1;){let a=n.slice(0,i).trim();if(n=n.slice(i+1),!a.startsWith("data:"))continue;let l=a.slice(5).trim();if(!(!l||l==="[DONE]"))try{yield JSON.parse(l)}catch{}}}}finally{r.releaseLock()}}function DI(e=process.env){return(e.ANTHROPIC_BASE_URL?.trim()||"https://api.anthropic.com").replace(/\/$/,"")}async function My(e){let{creds:r,model:t,payload:n}=e,o={"Content-Type":"application/json","anthropic-version":"2023-06-01"},s=n.system;r.kind==="api_key"?o["x-api-key"]=r.key:(o.Authorization=`Bearer ${r.token}`,o["anthropic-beta"]="oauth-2025-04-20",s=[{type:"text",text:AI},{type:"text",text:n.system}]);let i=await fetch(`${DI()}/v1/messages`,{method:"POST",headers:o,signal:e.signal,body:JSON.stringify({model:t,max_tokens:n.maxTokens,system:s,messages:n.messages,...Array.isArray(n.tools)&&n.tools.length>0?{tools:n.tools}:{},...n.temperature!==void 0?{temperature:n.temperature}:{},stream:!0})});if(!i.ok||!i.body){let l=await i.text().catch(()=>"");throw new Error(`Anthropic stream failed: HTTP ${i.status}${l?` \u2014 ${l.slice(0,300)}`:""}`)}let a=II();for await(let l of TI(i.body)){let c=OI(a,l);c&&e.onDelta(c)}return NI(a)}var On=class{constructor(r,t=150){this.flushFn=r;this.floorMs=t}flushFn;floorMs;buffer="";timer=null;closed=!1;push(r){this.closed||!r||(this.buffer+=r,this.timer||(this.timer=setTimeout(()=>{this.timer=null,this.flushNow()},this.floorMs)))}flushNow(){if(!this.buffer)return;let r=this.buffer;this.buffer="",this.flushFn(r)}close(){this.closed||(this.closed=!0,this.timer&&(clearTimeout(this.timer),this.timer=null),this.flushNow())}};import{spawn as LI}from"node:child_process";var MI=new Set(["run list","run status","worker list","worker status","worker tail","status","cron status","monitor status","monitor list"]),UI=new Set(["run create","run dispatch","run sweep","worker start","worker stop","worker complete","cleanup"]),WI=["--secret","--api-key","--keeper-child"];function Uy(e){if(!Array.isArray(e)||e.length===0||e.some(n=>typeof n!="string"))return{ok:!1,mutating:!1,reason:"argv must be a non-empty string array"};for(let n of e){if(WI.some(o=>n===o||n.startsWith(`${o}=`)))return{ok:!1,mutating:!1,reason:`forbidden flag: ${n}`};if(n.includes(`
+`)||n.includes("\0"))return{ok:!1,mutating:!1,reason:"control characters refused"}}let r=e[0],t=e.length>1&&!e[1].startsWith("--")?`${r} ${e[1]}`:r;return t==="doctor runtime-takeover"?e.includes("--remediate-default-repo")?{ok:!0,mutating:!0}:{ok:!0,mutating:!1}:r==="cleanup"?{ok:!0,mutating:e.includes("--execute")}:MI.has(t)?{ok:!0,mutating:!1}:UI.has(t)?{ok:!0,mutating:!0}:{ok:!1,mutating:!1,reason:`verb not allowlisted: ${t}`}}var BI=10*6e4,HI=5e3,Wy=2e5;async function Ly(e,r,t={}){let n=Uy(e);if(!n.ok)return{exitCode:null,timedOut:!1,refused:n.reason};let o=t.cliEntry??process.argv[1],s=t.timeoutMs??BI,i=new On(r);return new Promise(a=>{let l=0,c=!1,u=LI(process.execPath,[o,...e],{stdio:["ignore","pipe","pipe"],env:process.env}),d=p=>{if(l>=Wy)return;let f=p.toString("utf8").slice(0,Wy-l);l+=f.length,i.push(f)};u.stdout?.on("data",d),u.stderr?.on("data",d);let m=setTimeout(()=>{c=!0,u.kill("SIGTERM"),setTimeout(()=>u.kill("SIGKILL"),HI).unref()},s);u.on("error",p=>{clearTimeout(m),i.push(`spawn failed: ${p.message}`),i.close(),a({exitCode:null,timedOut:!1,refused:void 0})}),u.on("close",p=>{clearTimeout(m),i.close(),a({exitCode:p,timedOut:c})})})}var KI=25e3,$I=32e3,jI=5e3,VI=6e4,By=5*6e4,GI=5e3,YI="claude-sonnet-4-6";async function JI(e,r,t){let n=t.KYNVER_RUNTIME_CHAT_BRIDGE_URL?.trim();if(n)return n;if(!e)return null;let o=new AbortController,s=setTimeout(()=>o.abort(),GI);try{let i=await fetch(`${e.replace(/\/$/,"")}/api/runtime/chat-bridge`,{headers:{Authorization:`Bearer ${r}`},signal:o.signal});if(!i.ok)return null;let a=await i.json().catch(()=>null);return typeof a?.bridgeUrl=="string"&&a.bridgeUrl.trim()?a.bridgeUrl.trim():null}catch{return null}finally{clearTimeout(s)}}async function Hy(e=process.env){let r=y(),t=r.agentOsId?.trim(),n=se();if(!t||!n)return null;let o=await JI(r.apiBaseUrl,n,e);return o?{bridgeUrl:o.replace(/\/$/,""),agentOsId:t,apiKey:n,boxId:FI.hostname(),model:e.KYNVER_CHAT_MODEL?.trim()||r.defaultModel?.trim()||YI,useClaudeOauth:r.chatUseClaudeOauth===!0}:null}async function qI(e,r){let t=new AbortController,n=setTimeout(()=>t.abort(),$I),o=setInterval(()=>{r()&&t.abort()},500);try{let s=await fetch(`${e.bridgeUrl}/runtime-chat/claim`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,boxId:e.boxId,waitMs:KI}),signal:t.signal});if(s.status===204)return null;if(s.status===401||s.status===403)return"auth_error";if(!s.ok)throw new Error(`claim failed: HTTP ${s.status}`);return(await s.json().catch(()=>null))?.turn??null}catch(s){if(r())return null;throw s}finally{clearTimeout(n),clearInterval(o)}}async function wt(e,r,t){return(await fetch(`${e.bridgeUrl}/runtime-chat/turns/${encodeURIComponent(r)}/events`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,events:t})})).ok}async function zI(e,r){let t=0,n=Array.isArray(r.payload?.argv)?r.payload.argv:[],o=await Ly(n,s=>{wt(e,r.turnId,[{seq:t++,kind:"delta",text:s}])});o.refused?await wt(e,r.turnId,[{seq:t++,kind:"error",error:`command_refused: ${o.refused}`}]).catch(()=>{}):await wt(e,r.turnId,[{seq:t++,kind:"final",message:{exitCode:o.exitCode,timedOut:o.timedOut}}]).catch(()=>{}),console.error(JSON.stringify({event:"command_turn_done",turnId:r.turnId,argv:n.slice(0,4),exitCode:o.exitCode,timedOut:o.timedOut,refused:o.refused??null}))}async function XI(e,r){let t=0,n=!1,o=new AbortController,s=l=>{n||wt(e,r.turnId,[{seq:t++,kind:"delta",text:l}]).then(c=>{c||(n=!0,o.abort())})},i=new On(s),a=Dy(process.env,{oauthOptIn:e.useClaudeOauth});if(!a){await wt(e,r.turnId,[{seq:0,kind:"error",error:"no_local_credentials"}]).catch(()=>{});return}try{let l=await My({creds:a,model:e.model,payload:r.payload,onDelta:c=>i.push(c),signal:o.signal});i.close(),n||await wt(e,r.turnId,[{seq:t++,kind:"final",message:l}]),console.error(JSON.stringify({event:"chat_turn_done",turnId:r.turnId,model:e.model}))}catch(l){i.close(),n||await wt(e,r.turnId,[{seq:t++,kind:"error",error:l instanceof Error?l.message:String(l)}]).catch(()=>{}),console.error(JSON.stringify({event:"chat_turn_error",turnId:r.turnId,error:l instanceof Error?l.message:String(l)}))}}async function hd(e,r){for(let n=0;n<e&&!r();n+=500)await new Promise(o=>setTimeout(o,Math.min(500,e-n)))}async function Fy(e){let r=await Hy();for(r||console.error(JSON.stringify({event:"chat_claim_loop_waiting",reason:!se()||!y().agentOsId?.trim()?"machine_not_linked":"bridge_not_discovered (rollout off, discovery route missing/404, or API unreachable)",rediscoverMs:By}));!r&&!e.shouldStop();){if(!se()||!y().agentOsId?.trim()||(await hd(By,e.shouldStop),e.shouldStop()))return;r=await Hy()}if(!(!r||e.shouldStop())){for(console.error(JSON.stringify({event:"chat_claim_loop_start",bridgeUrl:r.bridgeUrl,agentOsId:r.agentOsId,boxId:r.boxId,model:r.model,useClaudeOauth:r.useClaudeOauth}));!e.shouldStop();)try{let t=await qI(r,e.shouldStop);if(t==="auth_error"){console.error(JSON.stringify({event:"chat_claim_auth_error"})),await hd(VI,e.shouldStop);continue}t&&(t.payload?.kind==="command"?await zI(r,t):await XI(r,t))}catch(t){console.error(JSON.stringify({event:"chat_claim_error",error:t instanceof Error?t.message:String(t)})),await hd(jI,e.shouldStop)}console.error(JSON.stringify({event:"chat_claim_loop_stop"}))}}var QI=6e4,ZI=5*6e4,eO=10,rO=250;async function kd(e,r){let t=e;for(;t>0&&!r();){let n=Math.min(rO,t);await xr(n),t-=n}}async function es(e){En();let r=String(N(String(e.run||""),"--run")),t=String(N(String(e.agentOsId||y().agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false",o=Number(e.intervalMs)>0?Math.floor(Number(e.intervalMs)):QI,s=!1,i=0;process.on("SIGINT",()=>{s=!0}),process.on("SIGTERM",()=>{s=!0});let a=Jo();a.remediated&&console.error(JSON.stringify({event:"daemon_default_repo_remediated",defaultRepo:a.resolved?.defaultRepo??null,configPath:a.configPath}));let l=Lk(y());l.ok||(console.error(JSON.stringify({event:"daemon_start_blocked",runId:r,agentOsId:t,errors:l.errors})),process.exit(1)),console.error(JSON.stringify({event:"daemon_start",runId:r,agentOsId:t,execute:n,intervalMs:o,boxKind:l.box.boxKind,workerCapSource:l.workerCapSource,maxConcurrentWorkers:l.maxConcurrentWorkers}));let c=Sr(),u=Fy({shouldStop:()=>s}).catch(m=>{console.error(JSON.stringify({event:"chat_claim_loop_crashed",error:m instanceof Error?m.message:String(m)}))}),d=!1;for(;!s;)try{Fk({agentOsId:t,runId:r,instructionBundleVersion:Nr()});let m=await ri(e.secret?String(e.secret):void 0,t);if(!m.ok){d||(d=!0,console.error(JSON.stringify({event:"daemon_runner_credential_missing",agentOsId:t,reason:m.reason,remedy:`run \`kynver runner credential --agent-os-id ${t}\` (or \`kynver bootstrap\`); ticks resume automatically once the credential exists`}))),await kd(o,()=>s);continue}d&&(d=!1,console.error(JSON.stringify({event:"daemon_runner_credential_recovered",agentOsId:t}))),await yu({agentOsId:t,baseUrl:ec(e.baseUrl?String(e.baseUrl):void 0),secret:m.secret});let p=await gd({run:r,agentOsId:t,execute:n,...e});if(console.error(JSON.stringify({event:"daemon_tick",...p})),c.tickEnabled){let g=Ia(r);if(g&&!g.authorized)console.error(JSON.stringify({event:"daemon_cron_tick_skipped",reason:"mesh_cron_lease_not_authorized",holderBoxId:g.holderBoxId}));else{let R=await Pn({env:c,agentOsIdFilter:t});R.enabled&&(R.fired>0||R.errors>0||R.lockHeld)&&console.error(JSON.stringify({event:"daemon_cron_tick",...R}))}}p.idle?i++:i=0;let f=Math.floor(it("daemon.maxIdleStreak",eO)),h=Math.floor(it("daemon.idleIntervalMs",ZI)),k=i>=f?h:o;await kd(k,()=>s)}catch(m){console.error(JSON.stringify({event:"daemon_tick_error",error:m.message})),await kd(o,()=>s)}await u,console.error(JSON.stringify({event:"daemon_stop",runId:r,agentOsId:t}))}I();import{spawn as tO}from"node:child_process";C();var nO=15*6e4,Ky=2*6e4,$y=1e4,oO=5e3,sO=5*6e4,iO=30*6e4,jy=5e3;function aO(e,r=process.env){let t=typeof e=="string"?Number.parseInt(e,10):NaN;if(Number.isFinite(t)&&t>0)return t;let n=Number.parseInt(r.KYNVER_DAEMON_STALL_MS??"",10);return Number.isFinite(n)&&n>0?n:nO}function Ta(e,r=process.env){if(e.keeperChild===!0||e.keeperChild==="true"||e.noSupervise===!0||e.noSupervise==="true"||e.supervised==="false")return!1;let t=(r.KYNVER_DAEMON_SUPERVISED??"").trim().toLowerCase();return!(t==="0"||t==="false"||t==="no"||t==="off")}function lO(e,r=oO,t=sO){let n=Math.min(Math.max(e,1)-1,10);return Math.min(r*2**n,t)}function cO(e,r,t=iO){return r-e>=t}function _t(e,r={}){console.error(JSON.stringify({event:`daemon_keeper_${e}`,...r}))}function uO(e){let r=[];for(let t=0;t<e.length;t+=1){let n=e[t];if(!(n==="--supervised"||n==="--no-supervise"||n==="--keeper-child")){if(n==="--stall-ms"){t+1<e.length&&!e[t+1].startsWith("--")&&(t+=1);continue}n.startsWith("--stall-ms=")||n.startsWith("--supervised=")||r.push(n)}}return r.push("--keeper-child"),r}async function Da(e,r=process.argv.slice(2)){let t=String(N(String(e.agentOsId||y().agentOsId||""),"--agent-os-id")),n=aO(e.stallMs),o=uO(r),s=process.argv[1],i=!1,a=null,l=0,c=u=>{i=!0,_t("stop",{signal:u}),a?.pid&&a.kill(u)};for(process.on("SIGINT",()=>c("SIGINT")),process.on("SIGTERM",()=>c("SIGTERM")),_t("start",{agentOsId:t,stallMs:n,childArgv:o});!i;){let u=Date.now(),d=!1,m=null,p=null;for(a=tO(process.execPath,[s,...o],{stdio:"inherit",env:process.env}),_t("child_spawned",{pid:a.pid??null}),a.on("exit",(k,g)=>{d=!0,m=k,p=g});!d&&!i&&(await xr(jy),!(d||i));){if(Date.now()-u<Ky)continue;let k=Kk(t),g=k&&k.pid===a.pid?k:null;if(g&&$k(g,n)){_t("stall_detected",{pid:a.pid??null,lastBeatAt:g.observedAt,stallMs:n}),a.kill("SIGTERM"),await xr($y),d||a.kill("SIGKILL");break}if(!g&&Date.now()-u>n+Ky){_t("no_heartbeat_detected",{pid:a.pid??null,stallMs:n}),a.kill("SIGTERM"),await xr($y),d||a.kill("SIGKILL");break}}for(;!d&&!i;)await xr(jy);if(i)break;let f=Date.now();cO(u,f)&&(l=0),l+=1;let h=lO(l);_t("child_exited",{code:m,signal:p,uptimeMs:f-u,consecutiveFailures:l,respawnInMs:h}),await xr(h)}_t("stopped",{agentOsId:t})}T();import{existsSync as Ua}from"node:fs";async function Ma(e=Sr()){let r=await Ct(e.storePath).catch(()=>[]),t=await Aa(e.statePath).catch(()=>({version:1,jobs:{}})),n=!!(e.fireBaseUrl&&e.secret),o=Ea(e),s="disabled";return o?s="kynver-cron-daemon":process.env.QSTASH_TOKEN?.trim()&&(s="qstash"),{primary:s,env:{storePath:e.storePath,statePath:e.statePath,tickEnabled:e.tickEnabled,fireBaseUrl:e.fireBaseUrl,missedRunPolicy:e.missedRunPolicy,maxCatchUpPerTick:e.maxCatchUpPerTick,maxRetries:e.maxRetries},jobCount:r.length,stateJobCount:Object.keys(t.jobs).length,credentialsReady:n,daemonPrimary:o}}import{homedir as dO}from"node:os";import pO from"node:path";Ir();var Fr="watchdog:board-sweep",mO="*/5 * * * *",fO=["Set KYNVER_SCHEDULER_PROVIDER=kynver-cron on the hosted Kynver deployment (Vercel).","Set KYNVER_CRON_SECRET to the same value written to ~/.kynver/.env by this installer.","Unset KYNVER_CRON_STORE_PATH on Vercel \u2014 the connected box owns the local store.","Keep QSTASH_TOKEN only if other non-watchdog schedules still use QStash (analyst/market jobs)."];function Vy(e){let r=e.storePath?.trim()||Hr(),t=e.envFilePath?.trim()||we,n=pO.join(dO(),".kynver","config.json"),o=`/api/agent-os/by-id/${e.agentOsId}/scheduler/fire`,s=[];e.apiBaseUrl?.trim()||s.push("apiBaseUrl \u2014 run `kynver setup --api-base-url \u2026`"),e.agentOsId?.trim()||s.push("agentOsId \u2014 run `kynver setup --agent-os-id \u2026`");let i={KYNVER_API_URL:e.apiBaseUrl,KYNVER_CRON_SECRET:e.cronSecret,KYNVER_CRON_STORE_PATH:r,KYNVER_CRON_TICK_ENABLED:"1",KYNVER_CRON_DAEMON_PRESENT:"1"},a=["OPENCLAW_CRON_STORE_PATH","OPENCLAW_CRON_SECRET","OPENCLAW_CRON_FIRE_BASE_URL"],l={deploymentSchedulerProvider:"kynver-cron",apiBaseUrl:e.apiBaseUrl,agentOsId:e.agentOsId,...e.defaultDaemonRunId?{defaultDaemonRunId:e.defaultDaemonRunId}:{}};return{envFilePath:t,configPath:n,storePath:r,envUpdates:i,envRemovals:a,configUpdates:l,deploymentSteps:fO,prerequisites:s,systemdSupported:process.platform==="linux",watchdogSpec:{kind:"watchdog",cron:mO,dedupeKey:Fr,callbackPath:o}}}Ir();async function Nn(e){let r=e.envFilePath??we,t=[],n=Sr(),o=await Ma(n),s=rn(r);t.push({id:"config_agent_os",ok:!!e.config.agentOsId?.trim(),summary:e.config.agentOsId?`agentOsId configured (${e.config.agentOsId})`:"agentOsId missing in ~/.kynver/config.json",remediation:"Run `kynver setup --agent-os-id <id>`."}),t.push({id:"config_api_base",ok:!!(e.config.apiBaseUrl?.trim()||n.fireBaseUrl),summary:n.fireBaseUrl?`fire base URL resolved (${n.fireBaseUrl})`:"KYNVER_API_URL / apiBaseUrl not configured",remediation:"Run `kynver setup --api-base-url https://\u2026`."}),t.push({id:"deployment_provider",ok:e.config.deploymentSchedulerProvider==="kynver-cron",summary:`deploymentSchedulerProvider=${e.config.deploymentSchedulerProvider??"(unset)"}`,remediation:'Run `kynver cron install` or set deploymentSchedulerProvider to "kynver-cron".'}),t.push({id:"cron_secret",ok:!!n.secret,summary:n.secret?"KYNVER_CRON_SECRET present":"KYNVER_CRON_SECRET missing",remediation:"Run `kynver cron install` to generate and persist the shared secret."}),t.push({id:"env_file",ok:Ua(r)&&!!s.get("KYNVER_CRON_SECRET"),summary:Ua(r)?`~/.kynver/.env present (${s.size} keys)`:"~/.kynver/.env missing",remediation:"Run `kynver cron install` to write ~/.kynver/.env."}),t.push({id:"cron_store",ok:Ua(n.storePath),summary:Ua(n.storePath)?`cron store present (${n.storePath})`:`cron store missing (${n.storePath})`,remediation:"Run `kynver cron install` to initialize the local store."});let a=(await Ct(n.storePath).catch(()=>[])).find(u=>u.spec.dedupeKey===Fr);t.push({id:"watchdog_local",ok:!!a,summary:a?`watchdog entry in local store (${a.providerScheduleId})`:"watchdog entry not mirrored in local cron store",remediation:"Run `kynver cron install` (with API access) to register and mirror watchdog."}),t.push({id:"daemon_primary",ok:o.daemonPrimary,summary:o.daemonPrimary?"cron tick enabled with credentials (daemon-primary)":`cron primary=${o.primary}; tickEnabled=${o.env.tickEnabled}`,remediation:"Ensure KYNVER_CRON_TICK_ENABLED=1 and run `kynver daemon` (or enable the systemd user unit)."});let l=s.has("OPENCLAW_CRON_STORE_PATH")||s.has("OPENCLAW_CRON_SECRET")||s.has("OPENCLAW_CRON_FIRE_BASE_URL");return t.push({id:"legacy_openclaw_env",ok:!l,summary:l?"legacy OPENCLAW_CRON_* keys still present in ~/.kynver/.env":"no legacy OPENCLAW_CRON_* keys in env file",remediation:"Re-run `kynver cron install` to retire legacy aliases."}),{ok:t.every(u=>u.ok),checks:t}}I();Je();C();import{existsSync as rR}from"node:fs";import{createHash as gO}from"node:crypto";function Gy(e){let r=JSON.stringify({cb:e.callbackPath,cron:e.cron??null,runAt:e.runAt??null,kind:e.kind,target:e.target,dedupeKey:e.dedupeKey??null});return`kc-cron:${gO("sha1").update(r).digest("hex").slice(0,16)}`}async function yd(e,r,t={}){return fetch(e,{...t,headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`,...t.headers}})}async function Yy(e,r,t,n={}){let o=new URLSearchParams(n),s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs?${o}`,i=await yd(s,t),a=await i.text(),l=null;try{l=JSON.parse(a)}catch{l=null}if(!i.ok)throw new Error(`list scheduler jobs failed (${i.status}): ${l?.error??a.slice(0,200)}`);return l?.items??[]}async function Jy(e,r,t,n,o={}){let s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/watchdog/ensure`,i={};n&&(i.cron=n),o.requireProvider&&(i.requireProvider=o.requireProvider);let a=await yd(s,t,{method:"POST",body:JSON.stringify(i)}),l=await a.text(),c=null;try{c=JSON.parse(l)}catch{c=null}if(!a.ok||!c?.job)throw new Error(`ensure watchdog failed (${a.status}): ${c?.error??l.slice(0,200)}`);return{job:c.job,route:c.route??`/api/agent-os/by-id/${r}/scheduler/fire`,dedupeKey:c.dedupeKey??Fr,requestedCron:c.requestedCron??n??"*/5 * * * *",selectedProvider:c.selectedProvider??c.job.provider??null}}async function qy(e,r,t,n){let o=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs/${encodeURIComponent(t)}/cancel`,s=await yd(o,n,{method:"POST",body:"{}"});if(!s.ok){let i=await s.text();throw new Error(`cancel job ${t} failed (${s.status}): ${i.slice(0,200)}`)}}function zy(e,r,t=Fr){return{kind:"watchdog",scheduleKind:"cron",cron:r,callbackPath:`/api/agent-os/by-id/${e}/scheduler/fire`,payload:{source:"agent-os.watchdog-schedule",agentOsId:e},target:{agentOsId:e},description:"Watchdog board sweep (repair loop)",dedupeKey:t}}function Xy(e){return e.filter(r=>r.kind==="watchdog"&&r.dedupeKey===Fr&&r.provider==="qstash"&&r.status!=="cancelled")}function hO(e){return e.find(r=>r.kind==="watchdog"&&r.dedupeKey===Fr&&r.provider==="kynver-cron"&&r.status!=="cancelled")}function Qy(e){return hO(e)?{allowed:!0}:{allowed:!1,reason:"Cannot cancel QStash watchdog until hosted KYNVER_SCHEDULER_PROVIDER=kynver-cron is live and a kynver-cron watchdog row exists. Set Vercel env, redeploy, re-run `kynver cron install`, then `--confirm-qstash-removal`."}}Ir();Ir();import{randomBytes as kO}from"node:crypto";function yO(){return kO(32).toString("base64url")}function Zy(e=we){let r=sd();if(r)return{secret:r,generated:!1,source:"env"};let n=rn(e).get("KYNVER_CRON_SECRET")?.trim();return n?{secret:n,generated:!1,source:"env-file"}:{secret:yO(),generated:!0,source:"generated"}}Gs();Js();T();function eR(e,r){if(r?.trim())return r.trim();if(e.defaultDaemonRunId?.trim())return e.defaultDaemonRunId.trim();let t=Z().runsDir;return rR(t)?X().sort((o,s)=>Date.parse(s.createdAt)-Date.parse(o.createdAt))[0]?.id??null:null}async function Wa(e={}){let r=e.execute!==!1,t=y(),n=ar(e.apiBaseUrl?.trim()||t.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||""),o=e.agentOsId?.trim()||t.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||"",s=Zy(),i=Vy({config:t,apiBaseUrl:n,agentOsId:o,cronSecret:s.secret,defaultDaemonRunId:e.runId?.trim()||t.defaultDaemonRunId,installSystemd:e.installSystemd===!0}),a=[...i.prerequisites],l={ok:!1,dryRun:!r,plan:i,secretGenerated:s.generated,configPath:q(i.configPath),storeInitialized:!1,blockers:a};if(a.length)return l;if(r){let c=$s(i.envUpdates,{filePath:i.envFilePath,removeKeys:i.envRemovals});l.envFile={path:q(c.path),changed:c.changed,keysWritten:c.keysWritten};let u={...t,...i.configUpdates},d=eR(u,e.runId);d&&(u.defaultDaemonRunId=d),ue(u),process.env.KYNVER_API_URL=n,process.env.KYNVER_CRON_SECRET=s.secret,process.env.KYNVER_CRON_STORE_PATH=i.storePath,process.env.KYNVER_CRON_TICK_ENABLED="1";let m=await ry(i.storePath);l.storeInitialized=m.created||rR(i.storePath);let p=se();if(p)try{let f=await ot(o,{baseUrl:n,apiKey:p});nt(o,f)}catch{}if(!e.skipWatchdog)if(!p)l.watchdog={error:"KYNVER_API_KEY required to register watchdog on server"},a.push("login \u2014 run `kynver login --api-key \u2026` to register watchdog remotely");else try{let f=await Jy(n,o,p,void 0,{requireProvider:"kynver-cron"}),h=zy(o,f.requestedCron,f.dedupeKey),k={providerScheduleId:Gy(h),spec:h,registeredAt:new Date().toISOString(),paused:!1};await ey(k,i.storePath),l.watchdog={remoteJobId:f.job.id,provider:f.selectedProvider??f.job.provider,localProviderScheduleId:k.providerScheduleId};let g=await Yy(n,o,p),R=Xy(g),O=["Phase 1 (local): `kynver cron install` writes box env/store and may fail remote watchdog until Vercel cutover.","Phase 2 (hosted): set KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET on Vercel, redeploy, re-run install.","Phase 3 (cleanup): `kynver cron install --confirm-qstash-removal` after a kynver-cron watchdog row exists.","Analyst/market QStash schedules are never touched by this installer."],_=[];if(R.length)if(e.confirmQstashRemoval){let E=Qy(g);if(!E.allowed)a.push(E.reason);else for(let U of R)await qy(n,o,U.id,p),_.push(U.id)}else a.push(`${R.length} QStash watchdog job(s) still active \u2014 complete Vercel cutover (KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET), re-run install, then --confirm-qstash-removal`);l.qstashWatchdog={found:R.map(E=>({id:E.id,provider:E.provider,status:E.status})),removed:_,manualSteps:O}}catch(f){l.watchdog={error:f.message},a.push(`watchdog registration failed: ${f.message}`)}if(e.installSystemd){let f=eR({...t,...i.configUpdates},e.runId);if(!f)l.systemd={supported:i.systemdSupported,unitPath:null,written:!1,enabled:!1,started:!1,note:"No harness run found \u2014 run `kynver run create` first or pass --run <runId>."},a.push("harness run \u2014 create a run before installing systemd unit");else{try{L(f)}catch{a.push(`harness run ${f} not found`)}if(l.systemd=Ys({envFilePath:i.envFilePath,agentOsId:o,runId:f,kynverBin:nn()},r),r&&l.systemd.enabled){let h=y();ue({...h,daemonSupervisionOwner:"systemd"})}}}if(!e.skipTestFire&&a.length===0){let f=await Pn({agentOsIdFilter:o});l.testFire={fired:f.fired,errors:f.errors},f.errors>0&&a.push(`test fire reported ${f.errors} error(s) \u2014 check server KYNVER_CRON_SECRET matches`)}else e.skipTestFire&&(l.testFire={fired:0,errors:0,skipped:!0});l.verify=await Nn({config:y(),envFilePath:i.envFilePath}),l.blockers=a,l.ok=a.length===0&&(l.verify?.ok??!1)}else l.ok=a.length===0;return l}var RO=["deployment_provider","cron_secret","env_file","cron_store"];function tR(e){let r=e?.trim().toLowerCase();if(r==="qstash"||r==="kynver-cron"||r==="openclaw-cron")return r;if(r==="openclaw")return"openclaw-cron"}function vO(e){let r=tR(process.env.KYNVER_SCHEDULER_PROVIDER);if(r==="qstash"||r==="openclaw-cron")return!1;if(r==="kynver-cron")return!0;let t=tR(e.deploymentSchedulerProvider);return t==="qstash"||t==="openclaw-cron"?!1:t==="kynver-cron"?!0:!!(e.agentOsId?.trim()&&e.apiBaseUrl?.trim())}async function bO(e){if(!vO(e))return{expectsKynverCron:!1,ready:!0,failedChecks:[]};let t=(await Nn({config:e})).checks.filter(n=>RO.includes(n.id)&&!n.ok);return{expectsKynverCron:!0,ready:t.length===0,failedChecks:t}}function SO(e){let r=["Run `kynver cron install` on this box."];for(let t of e)t.remediation&&r.push(`  \u2022 ${t.id}: ${t.remediation}`);return r}function Rd(e){return e===!0||e==="true"||e==="1"||e==="yes"||e==="on"}async function nR(e){if(Rd(e.args.skipCron))return{action:"skipped"};let r=await bO(e.config);if(!r.expectsKynverCron||r.ready)return{action:"ready"};console.log(""),console.log("  Local Kynver Cron is not ready \u2014 running `kynver cron install`\u2026");let t=Rd(e.args.installSystemd)||Rd(e.args["install-systemd"]),n=await Wa({execute:!0,skipTestFire:!0,agentOsId:e.agentOsId,runId:e.runId,installSystemd:t});if(n.ok)return console.log("  Kynver Cron configured for this box."),console.log(""),{action:"installed",installOk:!0};console.log(""),console.log("  Cron install did not fully complete (daemon will still start):");for(let o of n.blockers)console.log(`    ! ${o}`);if(n.plan.deploymentSteps.length){console.log(""),console.log("  Hosted deployment (complete on Vercel, then re-run install):");for(let o of n.plan.deploymentSteps)console.log(`    - ${o}`)}for(let o of SO(r.failedChecks))console.log(`  ${o}`);return console.log(""),{action:"guided",installOk:!1,blockers:n.blockers}}I();Oe();Jn();function oR(e=y(),r=process.env){let t=Ae(r,e),n=[...t.warnings],o=e.maxConcurrentWorkers,s=!1,i={...e};if(e.boxKind?.trim()||(i.boxKind=t.boxKind,s=!0,n.push(`persisted boxKind=${t.boxKind} to ~/.kynver/config.json \u2014 set explicitly via kynver setup --box-kind`)),Kt(t.boxKind,o??0))o=4,i.maxConcurrentWorkers=4,i.maxConcurrentWorkersSource="setup-auto",s=!0,n.push(`clamped Forge maxConcurrentWorkers to ${4} (was ${e.maxConcurrentWorkers}; workspace aggregate caps are Ghost-only)`);else if(o!=null){let a=cr(t.boxKind,o);a!==o&&(o=a,i.maxConcurrentWorkers=a,s=!0,n.push(`clamped maxConcurrentWorkers to ${a} for ${t.boxKind} pool`))}return s&&ue(i),{repaired:s,boxKind:t.boxKind,maxConcurrentWorkers:o??4,warnings:n}}Js();Gs();I();Ir();lo();qs();co();T();async function sR(e){let r=zs(e.config,e.args),{policy:t}=r;if(!(t.owner==="systemd"&&ao(t.hostKind)))return{action:"keeper",owner:"keeper"};try{L(e.runId)}catch{return{action:"systemd_skipped",owner:"keeper",blockers:[`harness run ${e.runId} not found \u2014 cannot install systemd unit`]}}let o=Ys({envFilePath:we,agentOsId:e.agentOsId,runId:e.runId,kynverBin:nn()},!0),s=[];if(!o.supported)return s.push(o.note??"systemd user units not supported on this host"),{action:"systemd_guided",owner:"keeper",systemd:o,blockers:s};if(!o.enabled)return s.push(o.note??"systemd unit write/enable failed"),{action:"systemd_guided",owner:"keeper",systemd:o,blockers:s};let i=y();return ue({...i,daemonSupervisionOwner:"systemd"}),console.log(""),console.log("  Daemon supervision: systemd user unit enabled (`kynver daemon` with Restart=always)."),o.unitPath&&console.log(`    unit: ${o.unitPath}`),console.log(""),{action:"systemd_installed",owner:"systemd",systemd:o}}function iR(e){return e.action==="systemd_installed"}function aR(e="kynver-cron-daemon"){return["Daemon delegated to systemd user unit.","The unit runs `kynver daemon` with systemd Restart=always.",`Status:  systemctl --user status ${e}`,`Stop:    systemctl --user stop ${e}`]}function wO(e,r){return e.filter(n=>n.repo===r&&!yr.has(n.status)).sort((n,o)=>(o.createdAt??"").localeCompare(n.createdAt??""))[0]?.id??null}async function lR(e){En();let r=y();(!se()||!r.agentOsId?.trim())&&(console.log("  This machine isn't linked yet \u2014 running bootstrap first."),await xa(e),r=y());let t=(typeof e.agentOsId=="string"?e.agentOsId.trim():"")||r.agentOsId?.trim()||"";t||(console.error("No AgentOS workspace configured \u2014 run `kynver bootstrap` (or pass --agent-os-id)."),process.exit(1)),po(t).ok||(console.error(ei(t)),process.exit(1)),e.chatOauth===!0&&r.chatUseClaudeOauth!==!0&&(ue({...r,chatUseClaudeOauth:!0}),r=y(),console.log("  Chat: Claude Code OAuth opt-in saved (delegated turns may use your local subscription)."));let o=(typeof e.repo=="string"?e.repo.trim():"")||r.defaultRepo?.trim()||je()?.repo||"";o||(console.error("No repo configured \u2014 pass --repo /path/to/repo or run `kynver setup --discover-repo`."),process.exit(1));let s=oR(r);if(s.repaired){r=y();for(let c of s.warnings)console.log(`  ${c}`)}let i=typeof e.run=="string"&&e.run.trim()?e.run.trim():"";i||(i=wO(X(),o)??"",i?console.log(`  Reusing run ${i} for ${o}.`):i=Fo({...e,repo:o,name:"agent"}).runId),await nR({config:r,agentOsId:t,runId:i,args:e});let a=await sR({config:y(),agentOsId:t,runId:i,args:e});if(iR(a)){console.log("");for(let c of aR())console.log(`  ${c}`);console.log("");return}console.log(""),console.log(`  ${CO.hostname()} \u2014 agent coming online`),console.log(`    workspace: ${t}`),console.log(`    repo:      ${o}`),console.log(`    run:       ${i}`),console.log("  Ctrl-C stops the agent. (Advanced control: `kynver daemon --help`.)"),console.log("");let l={...e,run:i,agentOsId:t};if(Ta(l)){await Da(l,_O(i,t,e));return}await es(l)}function _O(e,r,t){if(!po(r).ok)throw new Error(ei(r));let o=["daemon","--run",e,"--agent-os-id",r];return typeof t.intervalMs=="string"&&t.intervalMs.trim()&&o.push("--interval-ms",t.intervalMs.trim()),(t.execute===!1||t.execute==="false")&&o.push("--execute","false"),typeof t.stallMs=="string"&&t.stallMs.trim()&&o.push("--stall-ms",t.stallMs.trim()),o}T();T();z();import{existsSync as xO,rmSync as EO}from"node:fs";import vd from"node:path";function PO(e){let r=e.replace(/\\/g,"/").replace(/^\.\//,"").trim();if(!r||r.startsWith("/")||r.includes(".."))throw new Error(`unsafe path: ${e}`);return r}function AO(e){return typeof e!="string"||!e.trim()?[]:e.split(",").map(r=>r.trim()).filter(Boolean)}function IO(e){let{runId:r,workerName:t}=Fe(e),n=he(r,t),o=[...AO(e.path),...Array.isArray(e.paths)?e.paths:[]];if(o.length===0)return{ok:!1,removed:[],reason:"requires at least one --path"};let s=vd.resolve(n.worktreePath),i=[];for(let c of o){let u=PO(c),d=vd.resolve(s,u);if(!d.startsWith(s+vd.sep)&&d!==s)return{ok:!1,removed:i,reason:`path escapes worktree: ${c}`};if(!xO(d))return{ok:!1,removed:i,reason:`path not found: ${c}`};EO(d,{recursive:!0,force:!0}),i.push(u)}let a=Array.isArray(n.disposableArtifactsRemoved)?n.disposableArtifactsRemoved.filter(c=>typeof c=="string"):[];n.disposableArtifactsRemoved=[...new Set([...a,...i])],K(n.runId,n);let l=D(n);return{ok:!0,removed:i,...l.changedFiles.length?{reason:"worktree still has other changes"}:{}}}function cR(e){let r=IO(e);console.log(JSON.stringify(r,null,2)),r.ok||process.exit(1)}I();import tN from"node:path";oo();_s();oo();var OO=/--max-old-space-size=(\d+)/;function NO(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function bd(){return NO(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB,1024)}function Ba(e=process.env){let r={...e};if(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB==="0")return r;let t=r.NODE_OPTIONS??"";if(OO.test(t))return r;let o=`--max-old-space-size=${bd()}`;return r.NODE_OPTIONS=t.trim()?`${t.trim()} ${o}`:o,r}function Tn(e=bd()){return`--max-old-space-size=${e}`}Vs();I();oo();_s();import{spawnSync as TO}from"node:child_process";function Ha(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function dR(e=y()){let r=process.env.KYNVER_BUILD_MEM_BUDGET_BYTES?Ha(process.env.KYNVER_BUILD_MEM_BUDGET_BYTES,1610612736):void 0,t=process.env.KYNVER_BUILD_MEM_RESERVE_BYTES?Ha(process.env.KYNVER_BUILD_MEM_RESERVE_BYTES,2147483648):void 0;return{perBuildBudgetBytes:r??Ha(e.perWorkerMemBytes,1610612736),reserveBytes:t??Ha(e.memReserveBytes,2147483648)}}var Fa=0;function wd(){Fa+=1}function _d(){Fa=Math.max(0,Fa-1)}function xt(e={}){let r={...dR(),...e},t=e.memAvailableBytes??$t(),n=r.perBuildBudgetBytes+r.reserveBytes,o=t>=n;return{admitted:o,memAvailableBytes:t,requiredBytes:n,activeBuilds:Fa,reason:o?null:`insufficient memory: need ${n} bytes available (budget ${r.perBuildBudgetBytes} + reserve ${r.reserveBytes}), have ${t}`}}function DO(e){e<=0||TO(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function xd(e,r=2e3,t={}){let n=Date.now()+Math.max(0,e),o=xt({...t,memAvailableBytes:t.memAvailableBytes?.()});for(;!o.admitted&&Date.now()<n;)DO(Math.min(r,n-Date.now())),o=xt({...t,memAvailableBytes:t.memAvailableBytes?.()});return o}import{spawnSync as eN}from"node:child_process";C();import{closeSync as LO,existsSync as Ed,mkdirSync as BO,openSync as HO,readdirSync as mR,readFileSync as FO,unlinkSync as Pd,writeFileSync as KO}from"node:fs";import Ad from"node:path";import{mkdirSync as MO}from"node:fs";import{tmpdir as UO}from"node:os";import Ka from"node:path";function WO(){return!!(process.env.VERCEL||process.env.VERCEL_ENV||process.env.AWS_LAMBDA_FUNCTION_NAME||process.env.AWS_EXECUTION_ENV)}function pR(){let e=process.env.KYNVER_HEAVY_VERIFICATION_STATE_ROOT;return e?Ka.resolve(e):WO()?Ka.join(UO(),"kynver","state","heavy-verification"):Ka.join(ji(),"heavy-verification")}function rs(){return Ka.join(pR(),"slots")}function Dn(){let e=rs();return MO(e,{recursive:!0}),e}var Un=120*6e4,$a=1;function $O(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Wn(){let e=process.env.KYNVER_HEAVY_VERIFICATION_SKIP?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function Mn(){let e=process.env.KYNVER_HEAVY_VERIFICATION_MAX_CONCURRENT;return e?$O(e,$a):$a}function jO(e){return`slot-${e}`}function fR(e,r=rs()){return Ad.join(r,`${e}.json`)}function Id(e){if(!Ed(e))return null;try{let r=JSON.parse(FO(e,"utf8"));if(typeof r.slotId=="string"&&typeof r.pid=="number"&&typeof r.acquiredAt=="string"&&typeof r.command=="string")return r}catch{return null}return null}function ja(e,r=Un){if(!e||!H(e.pid))return!0;let t=Date.parse(e.acquiredAt);return Number.isNaN(t)?!0:Date.now()-t>r}function VO(e,r){let t=Id(e);if(ja(t,r))try{Pd(e)}catch{}}function GO(e){return BO(e,{recursive:!0}),e}function ns(e={}){let r=GO(e.slotsDir??Dn()),t=e.staleMs??Un,n=0;for(let o of mR(r)){if(!o.endsWith(".json"))continue;let s=Ad.join(r,o),i=Ed(s);VO(s,t),i&&!Ed(s)&&(n+=1)}return n}function Od(e={}){let r=e.slotsDir??Dn(),t=e.staleMs??Un;ns({slotsDir:r,staleMs:t});let n=[];for(let o of mR(r)){if(!o.endsWith(".json"))continue;let s=Id(Ad.join(r,o));s&&!ja(s,t)&&n.push(s)}return n}function ts(e={}){return Od(e).length}function Et(e,r={}){if(Wn())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:Mn(),reason:null};let t=r.slotsDir??Dn(),n=r.staleMs??Un,o=r.maxSlots??Mn();ns({slotsDir:t,staleMs:n});for(let i=0;i<o;i+=1){let a=jO(i),l=fR(a,t),c=Id(l);if(c&&ja(c,n))try{Pd(l)}catch{}else if(c&&!ja(c,n))continue;let u={slotId:a,pid:process.pid,acquiredAt:new Date().toISOString(),command:e};try{let d=HO(l,"wx");KO(d,JSON.stringify(u,null,2),"utf8"),LO(d);let m=ts({slotsDir:t,staleMs:n});return{admitted:!0,slotId:a,activeSlots:m,maxSlots:o,reason:null}}catch(d){if(d.code==="EEXIST")continue;throw d}}let s=ts({slotsDir:t,staleMs:n});return{admitted:!1,slotId:null,activeSlots:s,maxSlots:o,reason:`heavy verification at capacity (${s}/${o} slots)`}}function Ln(e,r={}){if(!e)return;let t=fR(e,r.slotsDir??rs());try{Pd(t)}catch{}}function Bn(e,r={}){if(Wn())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:Mn(),reason:null};let t=r.slotsDir??Dn(),n=r.staleMs??Un,o=r.maxSlots??Mn();ns({slotsDir:t,staleMs:n});let s=ts({slotsDir:t,staleMs:n}),i=s<o;return{admitted:i,slotId:null,activeSlots:s,maxSlots:o,reason:i?null:`heavy verification at capacity (${s}/${o} slots); waiting for ${e}`}}import{spawnSync as YO}from"node:child_process";function JO(e){e<=0||YO(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function Va(e,r,t=2e3,n={}){let o=Date.now()+Math.max(0,r),s=Et(e,n);for(;!s.admitted&&Date.now()<o;)JO(Math.min(t,o-Date.now())),s=Et(e,n);return s}var qO=/\b(npm run typecheck|tsc\b[^|&;]*--noEmit|node scripts\/verify-pr-local\.mjs|kynver (harness )?verify)\b/i,zO=/\b(npm run build\b|next build\b)\b/i,XO=/\b(vercel (build|deploy|--prod))\b/i,QO=/\b(openai|anthropic|perplexity|voyage)\b.*\b(api|cli)\b|\b(paid|billable)[-_ ]?compute\b/i;function Ga(e){let r=e.trim();return r?QO.test(r)?{heavy:!0,commandClass:"paid_compute",reason:"paid external compute requires heavy-verification token and operator approval"}:XO.test(r)?{heavy:!0,commandClass:"vercel_verify",reason:"Vercel build/deploy verification requires heavy-verification token"}:zO.test(r)?{heavy:!0,commandClass:"full_build",reason:"full app build requires heavy-verification token"}:qO.test(r)?{heavy:!0,commandClass:"full_typecheck",reason:"full repo typecheck requires heavy-verification token"}:{heavy:!1,commandClass:"allowed",reason:null}:{heavy:!1,commandClass:"allowed",reason:null}}var os="heavy_verification_token_required";function Ya(e,r={}){let t=Ga(e);if(!t.heavy)return{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:"command does not require heavy-verification token",verificationGate:{...Bn(e),slotId:null}};if(Wn())return{allowed:!0,outcome:"heavy_verification_skipped",commandClass:t.commandClass,reason:"KYNVER_HEAVY_VERIFICATION_SKIP bypasses gate",verificationGate:{...Bn(e),slotId:null}};let n=r.waitMs??0,o=n>0?Va(e,n,r.pollMs):Et(e);return o.admitted?{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:t.reason??"heavy-verification token acquired",verificationGate:o}:{allowed:!1,outcome:os,commandClass:t.commandClass,reason:t.reason??o.reason??os,verificationGate:o}}Ce();import Nd from"node:path";function ZO(e){let r=dr(fe()),t=Nd.relative(r,Nd.resolve(e));return t.length>0&&!t.startsWith("..")&&!Nd.isAbsolute(t)}function gR(e){return ZO(e)?(typeof process.getuid=="function"?process.getuid():null)===0?{ok:!1,reason:"Refusing build/install as root inside a harness worktree \u2014 generated caches become root-owned and block daemon cleanup. Run kynver daemon and workers as the harness owner (never sudo kynver)."}:{ok:!0}:{ok:!0}}Vs();function rN(e){let r=[];for(let[t,n]of Object.entries(e))n!==void 0&&r.push(`${t}=${n}`);return r}function hR(e,r){let t=eN(e[0],e.slice(1),{cwd:r.cwd,env:r.env,encoding:"utf8",stdio:["ignore","pipe","pipe"],shell:r.shell,timeout:r.timeoutMs});return{exitCode:t.status??1,stdout:(t.stdout??"").trim(),stderr:(t.stderr??"").trim()}}function Ja(e){let r=e.waitForAdmissionMs??6e5,t=Ya(e.command,{waitMs:r}),n=t.verificationGate;if(!t.allowed)return{ok:!1,exitCode:1,stdout:"",stderr:t.reason,admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:Tn(),admission:xt(),verificationGate:n,gateOutcome:t.outcome,command:e.command};let o=n.slotId,s=r>0?xd(r):xt();if(!s.admitted)return Ln(o),{ok:!1,exitCode:1,stdout:"",stderr:s.reason??"build admission denied",admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:Tn(),admission:s,verificationGate:n,command:e.command};let i=gR(e.cwd);if(!i.ok)return Ln(o),{ok:!1,exitCode:1,stdout:"",stderr:i.reason,admitted:!0,wrappedWithSystemd:!1,nodeOptionsFlag:Tn(),admission:s,verificationGate:n,command:e.command};let a=Ba({...process.env,...e.env}),l=Tn(),c=tn();wd();try{let u;if(c){let d=js({cwd:e.cwd,command:["/usr/bin/env",...rN(a),"/bin/bash","-lc",e.command]});u=hR(d,{cwd:e.cwd,env:a,timeoutMs:e.timeoutMs})}else u=hR([e.command],{cwd:e.cwd,env:a,shell:!0,timeoutMs:e.timeoutMs});return{ok:u.exitCode===0,exitCode:u.exitCode,stdout:u.stdout,stderr:u.stderr,admitted:!0,wrappedWithSystemd:c,nodeOptionsFlag:l,admission:s,verificationGate:n,gateOutcome:t.outcome,command:e.command}}finally{_d(),Ln(o)}}var qa=["npm run typecheck","npm run test"];function ss(e,r=qa,t={}){let n=[],o=!0;for(let s of r){let i=Ja({cwd:e,command:s,waitForAdmissionMs:t.waitForAdmissionMs,timeoutMs:t.timeoutMs});n.push({command:s,result:i}),i.ok||(o=!1)}return{passed:o,steps:n}}C();function kR(e){let r=e.indexOf(":");if(r<=0)throw new Error(`invalid --evidence ${e} (expected type:value)`);return{type:e.slice(0,r),value:e.slice(r+1)}}async function yR(e){let r=N(e.plan?String(e.plan):void 0,"plan"),t=(e.agentOsId?String(e.agentOsId):y().agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=N(e.role?String(e.role):void 0,"role"),o=N(e.status?String(e.status):void 0,"status"),s=[],i=e.evidence;if(Array.isArray(i))for(let O of i)s.push(kR(String(O)));else typeof i=="string"&&s.push(kR(i));let a=V(e.baseUrl?String(e.baseUrl):void 0),l=await J(e.secret?String(e.secret):void 0,t,{baseUrl:a}),c=`${a}/api/agent-os/by-id/${encodeURIComponent(t)}/plans/${encodeURIComponent(r)}/progress-events`,u=y(),m=`provider:${ko(u.workerProvider,Ie)}`,f=(e.proposed===!0||e.proposed==="true"?!0:e.proposed===!1||e.proposed==="false"?!1:void 0)??(o!=="done"&&(n==="implementer"||n==="repair_implementer")),h={rowKey:e.row?String(e.row):void 0,rowId:e.rowId?String(e.rowId):void 0,taskId:e.task?String(e.task):void 0,reviewTaskId:e.reviewTask?String(e.reviewTask):void 0,roleLane:n,status:o,note:e.note?String(e.note):void 0,remainingWork:e.remaining?String(e.remaining):void 0,evidence:s.length?s:void 0,executorRef:e.executorRef?String(e.executorRef):m};f!==void 0&&(h.proposed=f);let k=await fetch(c,{method:"POST",headers:He(l),body:JSON.stringify(h)}),g=await k.text(),R=null;try{R=JSON.parse(g)}catch{R=g}k.ok||(console.error(JSON.stringify({httpStatus:k.status,response:R},null,2)),process.exit(1)),console.log(JSON.stringify(R,null,2))}function nN(e){let r=N(e.worktree?String(e.worktree):void 0,"worktree"),t=tN.resolve(r),n=ss(t),o=e.json===!0||e.json==="true",s={passed:n.passed,worktree:t,steps:n.steps};console.log(o?JSON.stringify(s,null,2):n.passed?"local plan verify passed":"local plan verify failed"),n.passed||process.exit(1)}async function RR(e){let r=N(e.plan?String(e.plan):void 0,"plan");if(e.local===!0||e.local==="true"){nN(e);return}let n=y().agentOsSlug;n||(console.error("requires agentOsSlug in ~/.kynver/config.json for verify (session route)"),process.exit(1));let o=V(e.baseUrl?String(e.baseUrl):void 0),s=process.env.KYNVER_API_KEY,i={"Content-Type":"application/json"};s&&(i.Authorization=`Bearer ${s}`);let a=`${o}/api/agent-os/${encodeURIComponent(n)}/plans/${encodeURIComponent(r)}/verify`,l=await fetch(a,{method:"POST",headers:i,body:JSON.stringify({worktreePath:e.worktree?String(e.worktree):void 0,taskId:e.task?String(e.task):void 0,humanOverride:e.humanOverride===!0||e.humanOverride==="true"})}),c=await l.text(),u=null;try{u=JSON.parse(c)}catch{u=c}l.ok||(console.error(JSON.stringify({httpStatus:l.status,response:u},null,2)),process.exit(1)),console.log(JSON.stringify(u,null,2))}import oN from"node:path";C();function vR(e){let r=oN.resolve(N(e.worktree?String(e.worktree):void 0,"worktree")),t=e.json===!0||e.json==="true"||e.emitJson===!0||e.emitJson==="true",n=[],o=e.command;if(Array.isArray(o))for(let a of o)n.push(String(a));else typeof o=="string"&&n.push(o);let s=ss(r,n.length?n:qa,{waitForAdmissionMs:e.waitForAdmissionMs?Number(e.waitForAdmissionMs):void 0,timeoutMs:e.timeoutMs?Number(e.timeoutMs):void 0}),i={passed:s.passed,worktree:r,steps:s.steps.map(a=>({command:a.command,ok:a.result.ok,exitCode:a.result.exitCode,admitted:a.result.admitted,wrappedWithSystemd:a.result.wrappedWithSystemd,nodeOptionsFlag:a.result.nodeOptionsFlag,admission:a.result.admission,verificationGate:a.result.verificationGate,stderr:a.result.stderr.slice(0,4e3)}))};if(t)console.log(JSON.stringify(i,null,2));else{console.log(s.passed?"harness verify passed":"harness verify failed");for(let a of i.steps)console.log(`  ${a.ok?"\u2713":"\u2717"} ${a.command} (exit ${a.exitCode}, systemd=${a.wrappedWithSystemd})`),!a.ok&&a.stderr&&console.log(`    ${a.stderr.split(`
+`)[0]}`)}process.exit(s.passed?0:1)}I();import{readFileSync as sN}from"node:fs";C();var iN=["create","add_version","update_metadata"],aN=["approval_guard","auth","network","server","tool_interruption"];function lN(e){let r=e.bodyFile?String(e.bodyFile):void 0;if(r)return{body:sN(r,"utf8"),bodyPathHint:r};let t=e.body?String(e.body):void 0;if(t)return{body:t};throw new Error("requires --body-file PATH or --body TEXT")}async function bR(e){let r=N(e.operation?String(e.operation):void 0,"operation");if(!iN.includes(r))throw new Error(`invalid --operation ${r}`);let t=r,n=y(),o=N(e.slug?String(e.slug):n.agentOsSlug,"slug (or agentOsSlug in ~/.kynver/config.json)"),s=N(e.title?String(e.title):void 0,"title"),{body:i,bodyPathHint:a}=lN(e);a&&Oo(a)&&console.warn(JSON.stringify({warning:"/tmp-only body path is not durable; AgentOS persistence requires outbox or successful API write",bodyPathHint:a}));let l={operation:t,agentOsSlug:o,title:s,body:i,bodyPathHint:a,summary:e.summary?String(e.summary):void 0,planId:e.plan?String(e.plan):void 0,planSlug:e.planSlug?String(e.planSlug):void 0,changeSummary:e.changeSummary?String(e.changeSummary):void 0,author:e.author?String(e.author):void 0,model:e.model?String(e.model):void 0,maxRetries:e.maxRetries?Number(e.maxRetries):void 0,immediateFailure:cN(e)},c=await hn(l);console.log(JSON.stringify(c,null,2)),c.userStatus==="failed and needs action"&&process.exit(1)}function cN(e){let r=e.failureKind?String(e.failureKind):void 0;if(!r)return;if(!aN.includes(r))throw new Error(`invalid --failure-kind ${r}`);let t=e.failureMessage?String(e.failureMessage):`immediate failure (${r})`;return{kind:r,message:t}}async function SR(){let e=ht();console.log(JSON.stringify({count:e.length,items:e},null,2))}async function CR(e){let r=e.max?Number(e.max):void 0,t=e.id?String(e.id):void 0,n=await Gi({max:r,outboxId:t});console.log(JSON.stringify(n,null,2)),n.failed>0&&process.exit(1)}function wR(e){let r=e.execute===!0||e.execute==="true",t=e.skipFinalize===!0||e.skipFinalize==="true",n=e.accountBytes===!0||e.accountBytes==="true",o=e.compact===!0||e.compact==="true",s=e.nodeModulesAgeMs,i=s!=null&&s!=="",a=i?Number(s):void 0,l=e.worktreesAgeMs?Number(e.worktreesAgeMs):0,c=e.includeOrphans===!0||e.includeOrphans==="true",u=e.harnessRoot?String(e.harnessRoot):void 0,d=_a({execute:r,finalizeStaleRuns:!t,accountBytes:n,scanDependencyCaches:i,nodeModulesAgeMs:a!==void 0&&Number.isFinite(a)?a:i?216e5:void 0,worktreesAgeMs:Number.isFinite(l)?l:0,includeOrphans:c,harnessRoot:u});o&&d.compactSummary?console.log(JSON.stringify(d.compactSummary,null,2)):console.log(JSON.stringify(d,null,2)),r&&d.totals.removedPaths===0&&d.actions.length===0&&(process.exitCode=0)}jt();function _R(e){let r=e.execute===!0||e.execute==="true",t=e.json===!0||e.json==="true",n=e["purge-all"]===!0||e["purge-all"]==="true",o=e["keep-newest"]?Number(e["keep-newest"]):void 0;if(r||n){let a=Do({execute:r,purgeAll:n,keepNewest:o}),l={...a,observation:a.observation?{...a.observation,dumps:a.observation.dumps.map(c=>({name:c.name,bytes:c.bytes,executableHint:c.executableHint,mtimeMs:c.mtimeMs}))}:null};console.log(JSON.stringify(l,null,t?2:0));return}let s=ur(),i=s?{...s,dumps:s.dumps.map(a=>({name:a.name,bytes:a.bytes,executableHint:a.executableHint,mtimeMs:a.mtimeMs}))}:{skipped:!0,reason:"not_wsl"};console.log(JSON.stringify(i,null,t?2:0))}function xR(e){let r=e.trim();if(!r.startsWith("{")&&!r.startsWith("["))return null;try{return JSON.parse(r)}catch{return null}}function ie(e,r=2400){if(e==null)return;let n=(typeof e=="string"?e:JSON.stringify(e,null,2)).trim();if(n)return n.length<=r?n:`${n.slice(0,r-1).trimEnd()}\u2026`}function za(e){let r=e.trim();if(!r)return null;let t=xR(r);if(t!==null)return t;for(let n of r.split(`
+`)){let o=xR(n);if(o!==null)return o}return null}function Xa(e){let r=[];switch(r.push(`Background auto-complete \xB7 ${e.runId} / ${e.worker}`),e.outcome){case"completed":r.push("Outcome: harness completion posted to AgentOS successfully."),r.push("AgentOS task should close or advance to review per completion routing."),r.push("Next: check Command Center \u2014 no manual complete needed unless the board still shows running.");break;case"blocked":r.push(`Outcome: worker finished but completion was blocked${e.httpStatus?` (HTTP ${e.httpStatus})`:""}.`),e.reason&&r.push(`Blocker: ${e.reason}`),r.push("Next: fix the blocker (auth, landing gate, dirty worktree) and replay completion from Command Center.");break;case"timed_out":r.push(`Outcome: monitor gave up waiting \u2014 ${e.reason??"worker did not finish in time"}.`),r.push("Next: inspect the worker process/logs; stop or unblock the worker, then retry auto-complete.");break;case"missing_link":r.push(`Outcome: cannot complete \u2014 ${e.reason??"worker missing agentOsId/taskId"}.`),r.push("Next: re-dispatch with board linkage or run `kynver worker complete` with --agent-os-id.");break;default:r.push(`Outcome: ${e.outcome}`)}return{primary:r.join(`
+`),diagnostic:ie(e)}}function Hn(e){let r=[],t=typeof e.monitorId=="string"?e.monitorId:void 0;if(r.push(t?`Harness monitor tick \xB7 ${e.runId} (${t})`:`Harness monitor tick \xB7 ${e.runId}`),!e.workers.length)return r.push("No workers in scope for this poll."),{primary:r.join(`
 `),diagnostic:ie(e)};for(let i of e.workers){let a=i.autoComplete.eligible?"eligible for auto-complete":"not auto-completing",l=i.autoComplete.blockers.length>0?` (${i.autoComplete.blockers.slice(0,2).join("; ")})`:"";r.push(`\u2022 ${i.worker}: ${i.workerStatus}, ${i.health}${i.healthReason?` \u2014 ${i.healthReason}`:""}; ${a}${l}`),i.taskStatus&&r.push(`  Board task: ${i.taskStatus}${i.leaseOwner?` (lease: ${i.leaseOwner})`:""}`)}let n=e.autoCompleted?.filter(i=>i.outcome==="completed"&&i.ok)??[],o=e.autoCompleted?.filter(i=>!i.ok&&i.outcome!=="skipped")??[];n.length&&r.push(`Auto-completed: ${n.map(i=>i.worker).join(", ")} \u2014 AgentOS completion should be posted.`),o.length&&r.push(`Auto-complete blocked: ${o.map(i=>`${i.worker}${i.reason?` (${i.reason})`:""}`).join("; ")}`),e.leaseRenewal?.failed?.length&&r.push(`Lease renew failed for: ${e.leaseRenewal.failed.map(i=>i.worker).join(", ")}`);let s=e.workers.length>0&&e.workers.every(i=>i.autoComplete.terminalVerified)&&(e.autoCompleted?.every(i=>i.ok||i.outcome==="skipped")??!0);return r.push(s?"Next: monitor loop should stop \u2014 all workers terminal and handled.":"Next: monitor will poll again until workers are terminal-verified or max time elapses."),{primary:r.join(`
-`),diagnostic:ie(e)}}function Sd(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:null}function sr(e){return typeof e=="string"&&e.trim()?e.trim():null}function Ga(e){let r=Sd(e);if(!r)return{primary:"Harness worker complete finished with no parseable result.",diagnostic:ie(e)};let t=sr(r.worker)??"worker",n=sr(r.runId),o=sr(r.status)==="skipped",s=typeof r.httpStatus=="number"?r.httpStatus:null,i=Sd(r.response),a=[];if(a.push(`Harness worker complete \xB7 ${t}${n?` (${n})`:""}`),o)return a.push(`Outcome: skipped \u2014 ${sr(r.reason)??"worker not finished yet"}.`),a.push("Next: wait for the worker to exit or post a finalResult, then retry complete."),{primary:a.join(`
-`),diagnostic:ie(e)};let l=sr(i?.outcome),c=Sd(i?.task),u=sr(c?.status),d=sr(c?.prUrl)??sr(i?.prUrl);if(s&&s>=200&&s<300)a.push("Outcome: completion callback accepted by AgentOS."),l&&a.push(`Routing: ${l.replace(/_/g," ")}`),u&&a.push(`AgentOS task status: ${u}`),d&&a.push(`PR: ${d}`),a.push("Next: check Command Center for review scheduling or blockers.");else{a.push(`Outcome: completion failed${s!=null?` (HTTP ${s})`:""}.`);let f=sr(i?.detail)??sr(i?.error);f&&a.push(`Blocker: ${f}`),a.push("Next: fix the reported blocker and replay completion from the board.")}return{primary:a.join(`
-`),diagnostic:ie(e)}}function _e(e){return typeof e=="string"&&e.trim()?e.trim():null}function Cd(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:null}function XO(e){let r=Cd(e);return r?_e(r.prUrl)??_e(r.pr):null}function os(e){let r=Cd(e);if(!r)return{primary:"Harness worker status unavailable.",diagnostic:ie(e)};let t=_e(r.worker)??_e(r.name)??"worker",n=_e(r.runId),o=_e(r.status)??"unknown",s=r.alive===!0,i=Cd(r.attention),a=_e(i?.state)??_e(r.attentionState),l=_e(i?.reason)??_e(r.attentionReason),c=_e(r.taskId),u=_e(r.prUrl)??XO(r.finalResult),d=_e(r.branch),f=_e(r.headCommit),p=[];return p.push(`Harness worker ${t}${n?` (${n})`:""}`),p.push(`Process: ${s?"running":"stopped"} \xB7 harness status: ${o}`),a&&p.push(l?`Attention: ${a} \u2014 ${l}`:`Attention: ${a}`),c&&p.push(`AgentOS task: ${c}`),u&&p.push(`PR: ${u}`),d&&p.push(`Branch: ${d}`),f&&p.push(`Commit: ${f.slice(0,12)}`),o==="done"||o==="exited"?p.push(u?"Outcome: worker finished \u2014 open the PR or check Command Center for review routing.":"Outcome: worker finished \u2014 check Command Center for task status and next action."):a==="blocked"||a==="needs_attention"?p.push("Next: resolve the blocker on the board or wait for the monitor to auto-complete when terminal."):s&&p.push("Next: wait for completion or poll again; background monitor will auto-complete when eligible."),{primary:p.join(`
-`),diagnostic:ie(e)}}var QO="\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 Diagnostic (JSON) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500";function kR(e){return e.diagnostic?.trim()?`${e.primary}
+`),diagnostic:ie(e)}}function Td(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:null}function ir(e){return typeof e=="string"&&e.trim()?e.trim():null}function Qa(e){let r=Td(e);if(!r)return{primary:"Harness worker complete finished with no parseable result.",diagnostic:ie(e)};let t=ir(r.worker)??"worker",n=ir(r.runId),o=ir(r.status)==="skipped",s=typeof r.httpStatus=="number"?r.httpStatus:null,i=Td(r.response),a=[];if(a.push(`Harness worker complete \xB7 ${t}${n?` (${n})`:""}`),o)return a.push(`Outcome: skipped \u2014 ${ir(r.reason)??"worker not finished yet"}.`),a.push("Next: wait for the worker to exit or post a finalResult, then retry complete."),{primary:a.join(`
+`),diagnostic:ie(e)};let l=ir(i?.outcome),c=Td(i?.task),u=ir(c?.status),d=ir(c?.prUrl)??ir(i?.prUrl);if(s&&s>=200&&s<300)a.push("Outcome: completion callback accepted by AgentOS."),l&&a.push(`Routing: ${l.replace(/_/g," ")}`),u&&a.push(`AgentOS task status: ${u}`),d&&a.push(`PR: ${d}`),a.push("Next: check Command Center for review scheduling or blockers.");else{a.push(`Outcome: completion failed${s!=null?` (HTTP ${s})`:""}.`);let m=ir(i?.detail)??ir(i?.error);m&&a.push(`Blocker: ${m}`),a.push("Next: fix the reported blocker and replay completion from the board.")}return{primary:a.join(`
+`),diagnostic:ie(e)}}function _e(e){return typeof e=="string"&&e.trim()?e.trim():null}function Dd(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:null}function uN(e){let r=Dd(e);return r?_e(r.prUrl)??_e(r.pr):null}function is(e){let r=Dd(e);if(!r)return{primary:"Harness worker status unavailable.",diagnostic:ie(e)};let t=_e(r.worker)??_e(r.name)??"worker",n=_e(r.runId),o=_e(r.status)??"unknown",s=r.alive===!0,i=Dd(r.attention),a=_e(i?.state)??_e(r.attentionState),l=_e(i?.reason)??_e(r.attentionReason),c=_e(r.taskId),u=_e(r.prUrl)??uN(r.finalResult),d=_e(r.branch),m=_e(r.headCommit),p=[];return p.push(`Harness worker ${t}${n?` (${n})`:""}`),p.push(`Process: ${s?"running":"stopped"} \xB7 harness status: ${o}`),a&&p.push(l?`Attention: ${a} \u2014 ${l}`:`Attention: ${a}`),c&&p.push(`AgentOS task: ${c}`),u&&p.push(`PR: ${u}`),d&&p.push(`Branch: ${d}`),m&&p.push(`Commit: ${m.slice(0,12)}`),o==="done"||o==="exited"?p.push(u?"Outcome: worker finished \u2014 open the PR or check Command Center for review routing.":"Outcome: worker finished \u2014 check Command Center for task status and next action."):a==="blocked"||a==="needs_attention"?p.push("Next: resolve the blocker on the board or wait for the monitor to auto-complete when terminal."):s&&p.push("Next: wait for completion or poll again; background monitor will auto-complete when eligible."),{primary:p.join(`
+`),diagnostic:ie(e)}}var dN="\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 Diagnostic (JSON) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500";function ER(e){return e.diagnostic?.trim()?`${e.primary}
 
-${QO}
-${e.diagnostic}`:e.primary}function ZO(e){let r=[`Harness ${e.scope} ${e.action} failed.`];e.timedOut?r.push("Reason: command timed out on the runner host."):e.error?r.push(`Reason: ${e.error}`):e.exitCode!=null&&r.push(`Exit code: ${e.exitCode}`);let t=e.stderr.trim();t&&r.push(`Stderr: ${t.split(`
-`).slice(-3).join(" ")}`),r.push("Next: retry on the runner host or inspect harness logs.");let n=ja(e.stdout);return{primary:r.join(`
-`),diagnostic:ie(n??{stdout:e.stdout,stderr:e.stderr})}}function yR(e){if(!e.ok)return ZO(e);let r=ja(e.stdout);if(r===null){let t=e.stdout.trim()||e.stderr.trim()||"(no output)";return{primary:`Harness ${e.scope} ${e.action} finished.
-${t.slice(0,800)}`,diagnostic:ie({stdout:e.stdout,stderr:e.stderr})}}if(e.scope==="worker"&&e.action==="status")return os(r);if(e.scope==="worker"&&e.action==="complete")return Ga(r);if(e.scope==="monitor"&&(e.action==="tick"||e.action==="run-loop"))return Wn(r);if(e.scope==="monitor"&&e.action==="auto-complete"){let t=r;if(t.outcome&&t.worker&&t.runId)return Va(r);if(Array.isArray(t.blockers))return{primary:[`Monitor auto-complete blocked \xB7 ${t.runId??"run"} / ${t.worker??"worker"}`,`Blockers: ${t.blockers.join("; ")}`,"Next: resolve blockers on the runner, then retry auto-complete."].join(`
-`),diagnostic:ie(r)}}if(e.scope==="run"&&e.action==="status"){let t=r.workers;return Array.isArray(t)&&t.length===1?os(t[0]):{primary:`Harness run status \xB7 ${r.runId??"run"} (${Array.isArray(t)?t.length:0} workers).`,diagnostic:ie(r)}}return{primary:`Harness ${e.scope} ${e.action} completed successfully on the runner.`,diagnostic:ie(r)}}import nN from"node:path";T();z();C();z();C();function Ya(e){let{worker:r,status:t,taskLease:n}=e,o=n?.leaseOwner??null;if(r.dispatched&&n){if(n.status==="running"&&o&&!Rc(o,r.runId))return{health:"orphaned",reason:`task lease held by ${o}, expected harness run ${r.runId}`};let i=r.leaseToken?.trim()??"",a=n.leaseToken?.trim()??"";if(n.status==="running"&&i&&a&&i!==a)return{health:"orphaned",reason:"task leaseToken superseded on board \u2014 completion replay would fail"};if(n.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"board task running but worker process is not alive"}}if(r.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"worker.json still running but process is dead"};if(t.attention.state==="stale")return{health:"stale",reason:t.attention.reason};let s=t.lastHeartbeatAt?Date.parse(t.lastHeartbeatAt):NaN;return t.alive&&Number.isFinite(s)&&Date.now()-s>Jt?{health:"stale",reason:`heartbeat older than ${Math.floor(Jt/1e3)}s`}:t.alive&&r.pid&&!H(r.pid)?{health:"orphaned",reason:"pid recorded but process is not alive"}:n?.status==="running"&&!t.alive&&t.finalResult?{health:"healthy",reason:"finished worker awaiting completion replay"}:{health:"healthy",reason:t.attention.reason||"worker within expected lifecycle bounds"}}Ce();C();import{existsSync as RR,mkdirSync as eN,readdirSync as rN,unlinkSync as tN}from"node:fs";import wd from"node:path";function vR(){let{harnessRoot:e}=Yr(),r=wd.join(e,"monitors");return eN(r,{recursive:!0}),r}function _t(e,r){return r?`${b(e)}--${b(r)}`:b(e)}function _d(e){return wd.join(vR(),`${e}.json`)}function xt(e){return w(_d(e),void 0)}function Et(e){ae(_d(e.monitorId),e)}function xd(e){let r=_d(e);return RR(r)?(tN(r),!0):!1}function bR(){let e=vR();if(!RR(e))return[];let r=[];for(let t of rN(e)){if(!t.endsWith(".json"))continue;let n=w(wd.join(e,t),void 0);n?.monitorId&&r.push({monitorId:n.monitorId,runId:n.runId,workerName:n.workerName,agentOsId:n.agentOsId,pid:n.pid,alive:n.pid?H(n.pid):!1,startedAt:n.startedAt,pollMs:n.pollMs,logPath:n.logPath})}return r.sort((t,n)=>t.startedAt.localeCompare(n.startedAt))}z();function ss(e){let{worker:r,status:t}=e,n=[];r.localOnly&&n.push("local-only worker (no board linkage)"),(!r.agentOsId||!r.taskId)&&n.push("missing agentOsId/taskId linkage"),Si(r)&&n.push("completion already acknowledged"),r.completionBlocker&&n.push(r.completionBlocker),t.heartbeatBlocker&&t.alive&&n.push(`worker heartbeat blocker: ${t.heartbeatBlocker}`),t.attention.state==="blocked"&&n.push(t.attention.reason||"worker attention blocked"),Zr(t)&&n.push(t.attention.reason||"landing gate blocked");let o=oe(t),s;return o?t.finalResult?s="final_result":t.alive?s="terminal_status":s="process_exited":n.push("worker has not reached a terminal condition"),{eligible:o&&n.length===0,terminalVerified:o,terminalReason:s,blockers:n}}function SR(e,r){return w(nN.join(x(e),"workers",b(r),"worker.json"),void 0)}function CR(e,r){let t=L(e),n=Object.keys(t.workers||{});if(!r)return n;let o=b(r);return n.filter(s=>b(s)===o)}function wR(e,r){let t=L(e.runId),n=D(e,{base:t.base,baseCommit:t.baseCommit}),o=e.taskId?r.get(e.taskId)??null:null,s=Ya({worker:e,status:n,taskLease:o}),i=ss({worker:e,status:n});return{runId:e.runId,worker:e.name,health:s.health,healthReason:s.reason,workerStatus:n.status,attentionState:n.attention.state,attentionReason:n.attention.reason,alive:n.alive,taskId:e.taskId,leaseOwner:o?.leaseOwner??void 0,taskStatus:o?.status,autoComplete:i,status:n}}async function Pt(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=e.agentOsId?String(e.agentOsId):void 0,o=L(r),s=CR(r,t),i=[];for(let m of s){let h=SR(r,m);h&&i.push(h)}let a=n||i.map(m=>m.agentOsId).find(m=>typeof m=="string"&&m.trim())||void 0,l=i.map(m=>m.taskId).filter(m=>!!m),c=await cn({agentOsId:a,taskIds:l,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}),u=i.map(m=>wR(m,c)),d;a&&e.renewLeases!==!1&&e.renewLeases!=="false"&&(d=await ki(r,{...e,agentOsId:a}));let f=[];if(e.autoComplete===!0||e.autoComplete==="true")for(let m of u){if(!m.autoComplete.eligible){f.push({worker:m.worker,outcome:"skipped",ok:!1,reason:m.autoComplete.blockers.join("; ")||"not eligible"});continue}let h=await dt({run:r,name:m.worker,...a?{agentOsId:a}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});f.push({worker:m.worker,outcome:h.outcome,ok:h.outcome==="completed",reason:h.reason})}return{runId:r,agentOsId:a,workers:u,leaseRenewal:d,autoCompleted:f}}function Ja(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=CR(r,t),o=[];for(let s of n){let i=SR(r,s);i&&o.push(wR(i,new Map))}return{runId:r,workers:o,autoCompleted:[]}}function is(){return bR()}function Ed(e){let r=String(e.run||"");N(r,"--run");let t=_t(r,e.name?String(e.name):void 0),n=xt(t);if(!n)return{monitorId:t,stopped:!1};if(n.pid&&H(n.pid))try{process.kill(n.pid,"SIGTERM")}catch{}return n.stoppedAt=new Date().toISOString(),Et(n),xd(t),{monitorId:t,stopped:!0,pid:n.pid}}async function qa(e){let r=String(e.run||""),t=String(e.name||"");N(r,"--run"),N(t,"--name");let n=ge(r,t),o=L(r),s=D(n,{base:o.base,baseCommit:o.baseCommit}),i=ss({worker:n,status:s});if(!i.eligible){console.log(JSON.stringify({runId:r,worker:t,outcome:"blocked",blockers:i.blockers,terminalVerified:i.terminalVerified},null,2)),process.exitCode=1;return}let a=await dt({...e,run:r,name:t});console.log(JSON.stringify(a,null,2)),a.outcome!=="completed"&&a.outcome!=="blocked"&&(process.exitCode=1)}C();var oN=5e3,sN=360*60*1e3;async function Pd(e){let r=String(e.monitorId||""),t=Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):oN,n=Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):sN,o=Date.now();for(;Date.now()-o<=n;){let s=r?xt(r):void 0;if(s?.stoppedAt)break;let i=await Pt({...e,autoComplete:e.autoComplete??!0,renewLeases:e.renewLeases??!0}),a=Wn({monitorId:r,phase:"tick",...i});if(console.log(a.primary),a.diagnostic&&console.error(`[monitor diagnostic] ${a.diagnostic}`),i.workers.length>0&&i.workers.every(c=>c.autoComplete.terminalVerified&&(c.autoComplete.eligible||c.autoComplete.blockers.some(u=>u.includes("already acknowledged"))))&&i.autoCompleted.every(c=>c.ok||c.outcome==="skipped")){r&&s&&(s.stoppedAt=new Date().toISOString(),Et(s));break}Fr(t)}}C();Ce();import{spawn as iN}from"node:child_process";import{closeSync as _R,existsSync as aN,openSync as lN}from"node:fs";import xR from"node:path";import{fileURLToPath as cN}from"node:url";function uN(){return xR.join(cN(new URL(".",import.meta.url)),"cli.js")}function za(e){let r=e.cliPath??uN();if(!aN(r))return;let t=_t(e.runId,e.workerName),{harnessRoot:n}=Yr(),o=xR.join(n,"monitors",`${t}.log`),s;try{s=lN(o,"a")}catch{s=void 0}let i=e.nodeExecutable??process.execPath,a=e.pollMs??5e3,l=[r,"monitor","run-loop","--run",e.runId,"--monitor-id",t,"--poll-ms",String(a),"--auto-complete","true","--renew-leases","true"];e.workerName&&l.push("--name",e.workerName),e.agentOsId&&l.push("--agent-os-id",e.agentOsId),e.baseUrl&&l.push("--base-url",e.baseUrl),e.secret&&l.push("--secret",e.secret);let c=["ignore",s??"ignore",s??"ignore"];try{let u=iN(i,l,de({detached:!0,stdio:c,env:process.env}));s!==void 0&&_R(s),u.unref();let d={monitorId:t,runId:e.runId,workerName:e.workerName,agentOsId:e.agentOsId,pid:u.pid,startedAt:new Date().toISOString(),pollMs:a,logPath:o};return Et(d),{monitorId:t,pid:u.pid,logPath:o,session:d}}catch{if(s!==void 0)try{_R(s)}catch{}return}}C();async function ER(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=_t(r,t),o=xt(n);if(o?.pid&&!o.stoppedAt)return{monitorId:n,session:o,spawned:!1,pid:o.pid};let s=za({runId:r,workerName:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0});if(!s)throw new Error("failed to spawn monitor sidecar (cli.js missing or spawn error)");return{monitorId:n,session:s.session,spawned:!0,pid:s.pid}}async function PR(e){if(String(e.run||"")){let t=e.tick===!0||e.tick==="true"?await Pt({...e,autoComplete:!1}):Ja(e);console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({monitors:is()},null,2))}function AR(e){console.log(JSON.stringify(Ed(e),null,2))}function IR(){console.log(JSON.stringify({monitors:is()},null,2))}async function OR(e){await Pd(e)}async function NR(e){let r=await Pt(e);console.log(JSON.stringify(r,null,2))}T();z();C();I();import dN from"node:path";function as(e,r,t,n,o,s){return{runId:e,worker:r,taskId:t,agentOsId:n,leaseOwner:o,action:"skipped",reason:s}}async function pN(e){let r=V(e.baseUrl?String(e.baseUrl):void 0),t=e.agentOsId?String(e.agentOsId).trim():null,n=e.dryRun===!0||e.dryRun==="true",o=[],s=[],i=[];for(let a of X())for(let l of Object.keys(a.workers??{})){let c=dN.join(x(a.id),"workers",b(l),"worker.json"),u=w(c,void 0);if(!u){s.push(as(a.id,l,"","","","worker.json missing"));continue}let d=u.taskId??"",f=u.agentOsId??"",p=u.leaseOwner??"";if(!u.dispatched||!d||!f||!p){s.push(as(a.id,l,d,f,p,"not a fully-leased dispatched worker"));continue}if(t&&f!==t)continue;if(u.completionReportedAt){s.push(as(a.id,l,d,f,p,"completion already reported"));continue}let m=D(u);if(m.finalResult){s.push(as(a.id,l,d,f,p,"has final result \u2014 let pipeline tick complete it"));continue}if(m.alive){s.push(as(a.id,l,d,f,p,"worker process is still alive"));continue}if(n){o.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:p,action:"released",reason:"dry-run: would release dead dispatched worker lease"});continue}try{let h=await J(e.secret?String(e.secret):void 0,f,{baseUrl:r}),k=`${r}/api/agent-os/by-id/${encodeURIComponent(f)}/tasks/${encodeURIComponent(d)}/release`,g=await re(k,h,{agentOsId:f,leaseOwner:p},{agentOsId:f,baseUrl:r});g.ok===!0||g.response?.ok===!0?o.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:p,action:"released",reason:"dead dispatched worker lease released; task requeued"}):s.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:p,action:"skipped",reason:`release returned ok:false (likely owner mismatch or already released): HTTP ${g.status}`})}catch(h){i.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:p,action:"error",reason:h.message})}}return{dryRun:n,released:o,skipped:s,errors:i}}async function TR(e){let r=await pN(e),t={ok:r.errors.length===0,dryRun:r.dryRun,released:r.released.length,skipped:r.skipped.length,errors:r.errors.length,details:r};console.log(JSON.stringify(t,null,2)),r.errors.length>0&&process.exit(1)}import KR from"node:path";Je();I();import{accessSync as mN,constants as fN,existsSync as Ad,readFileSync as gN}from"node:fs";import{homedir as Xa}from"node:os";import Qa from"node:path";import{spawnSync as hN}from"node:child_process";Ce();function DR(e,r){try{let t=hN(e,r,{encoding:"utf8"}),n=(t.stdout||"").trim(),o=(t.stderr||"").trim();return{ok:t.status===0,stdout:n,stderr:o,error:t.error?.message}}catch(t){return{ok:!1,stdout:"",stderr:"",error:t.message}}}function MR(e){let r=e?.trim();if(r)return r.length<=12?`${r}\u2026`:`${r.slice(0,12)}\u2026`}function kN(e){if(!Ad(e))return!1;try{return mN(e,fN.W_OK),!0}catch{return!1}}var UR={packageVersion:()=>Bn,commandOnPath:e=>DR(process.platform==="win32"?"where":"which",[e]),kynverVersion:e=>DR(e,["--version"]),loadConfig:()=>y(),configFilePath:()=>Qa.join(Xa(),".kynver","config.json"),credentialsFilePath:()=>Qa.join(Xa(),".kynver","credentials"),readCredentials:()=>{let e=Qa.join(Xa(),".kynver","credentials");if(!Ad(e))return{hasApiKey:!1};try{let r=JSON.parse(gN(e,"utf8"));return{hasApiKey:!!r.apiKey?.trim(),runnerTokenPrefix:MR(r.runnerToken),runnerTokenAgentOsId:r.runnerTokenAgentOsId}}catch{return{hasApiKey:!1}}},envSnapshot:()=>({kynverApiUrl:process.env.KYNVER_API_URL?.trim()||void 0,openclawCronFireBaseUrl:process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||void 0,kynverRunnerTokenPrefix:MR(process.env.KYNVER_RUNNER_TOKEN),kynverRuntimeSecret:!!process.env.KYNVER_RUNTIME_SECRET?.trim(),openclawCronSecret:!!process.env.OPENCLAW_CRON_SECRET?.trim(),kynverHarnessRoot:process.env.KYNVER_HARNESS_ROOT?.trim()||void 0,opusHarnessRoot:process.env.OPUS_HARNESS_ROOT?.trim()||void 0,kynverSchedulerProvider:process.env.KYNVER_SCHEDULER_PROVIDER?.trim()||void 0,openclawCronStorePath:!!(process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim()),kynverCronDaemonPrimary:ba(),qstashTokenPresent:!!process.env.QSTASH_TOKEN?.trim(),kynverHostedDeployment:(()=>{let e=process.env.KYNVER_HOSTED_DEPLOYMENT?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"})()}),harnessRoot:()=>me(),legacyOpenclawHarnessRoot:()=>Qa.join(Xa(),".openclaw","harness"),pathExists:e=>Ad(e),pathWritable:e=>kN(e)};function WR(e,r){return e.kynverSchedulerProvider==="openclaw-cron"||r.deploymentSchedulerProvider==="openclaw-cron"}function yN(e,r){return e.kynverSchedulerProvider==="kynver-cron"||r.deploymentSchedulerProvider==="kynver-cron"}function LR(e){return!!e.openclawCronStorePath}function RN(e,r){return e.kynverSchedulerProvider==="qstash"||r.deploymentSchedulerProvider==="qstash"}function BR(e,r){let t={schedulerProvider:e.kynverSchedulerProvider??null,deploymentSchedulerProvider:r.deploymentSchedulerProvider??null,openclawCronStorePath:!!e.openclawCronStorePath,kynverCronDaemonPrimary:!!e.kynverCronDaemonPrimary},n=!!r.agentOsId?.trim()&&!!r.apiBaseUrl?.trim()&&r.hasScopedRunnerToken;if(RN(e,r)&&!WR(e,r)){let u=e.kynverSchedulerProvider==="qstash"?"KYNVER_SCHEDULER_PROVIDER=qstash on this host":"deploymentSchedulerProvider=qstash in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler cut over to QStash (${u})`,details:t}}if(yN(e,r)&&!WR(e,r)){if(LR(e)&&e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=e.kynverSchedulerProvider==="kynver-cron"?"KYNVER_SCHEDULER_PROVIDER=kynver-cron on this host":"deploymentSchedulerProvider=kynver-cron in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler owned by Kynver Cron (${u})`,details:t}}if(LR(e)){if(e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=[];return e.openclawCronStorePath&&u.push("KYNVER_CRON_STORE_PATH or OPENCLAW_CRON_STORE_PATH set (local cron store)"),{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Local cron store without daemon tick (${u.join("; ")})`,remediation:"Run `kynver daemon` with KYNVER_CRON_SECRET + KYNVER_API_URL (or KYNVER_CRON_FIRE_BASE_URL) so the daemon-owned cron tick fires schedules. On hosted deploys use QStash (KYNVER_SCHEDULER_PROVIDER=qstash). Legacy OpenClaw cron env aliases still work during cutover.",details:t}}let o=e.kynverSchedulerProvider==="openclaw-cron",s=r.deploymentSchedulerProvider==="openclaw-cron",i=e.kynverSchedulerProvider==="qstash",a=!!e.qstashTokenPresent||!!e.kynverHostedDeployment,l=a&&!n,c=l&&e.kynverSchedulerProvider==="openclaw-cron";return s&&!o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"deploymentSchedulerProvider=openclaw-cron in ~/.kynver/config.json \u2014 migrate to kynver-cron or qstash",remediation:'Run `kynver scheduler attest-cutover` or set deploymentSchedulerProvider to "kynver-cron" or "qstash" in ~/.kynver/config.json.',details:t}:n&&o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 dispatch is owned by kynver daemon; unset the OpenClaw override",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:n?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:i?"Runner override qstash present; hosted dispatch still owned by kynver daemon pipeline-tick":"Hosted dispatch owned by kynver daemon (pipeline-tick \u2192 operator/tick); no OpenClaw cron on runner",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 hosted dispatch still depends on the OpenClaw local-cron adapter",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,hostedDeployment:a}}:c?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment has KYNVER_SCHEDULER_PROVIDER=openclaw-cron \u2014 AgentOS scheduled ticks should use QStash or kynver-cron",remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server (or kynver-cron for Kynver-owned local scheduling). User runners use `kynver daemon` for dispatch and should not set a scheduler provider.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:l&&e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"QSTASH_TOKEN present; hosted scheduler auto-selects qstash (explicit KYNVER_SCHEDULER_PROVIDER=qstash optional)",details:{schedulerProvider:null,qstashTokenPresent:!0,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment with no QSTASH_TOKEN and no KYNVER_SCHEDULER_PROVIDER \u2014 kynver-cron is an in-process stub here and will NOT fire; no firing scheduler is configured",remediation:"Set QSTASH_TOKEN + KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server for hosted AgentOS schedules. Only use kynver-cron when a `kynver daemon` (or local cron store) actually owns firing on this box.",details:{schedulerProvider:null,resolvedFallback:"none",qstashTokenPresent:!1,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&e.kynverSchedulerProvider&&e.kynverSchedulerProvider!=="qstash"&&e.kynverSchedulerProvider!=="kynver-cron"?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Hosted deployment without QSTASH_TOKEN (KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}) \u2014 use qstash or kynver-cron`,remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server, or kynver-cron for Kynver-owned local scheduling. User runners use `kynver daemon` for dispatch.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}`,details:{schedulerProvider:e.kynverSchedulerProvider??null}}:{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"No KYNVER_SCHEDULER_PROVIDER on runner (expected) \u2014 finish runner setup so daemon pipeline-tick owns dispatch",details:{schedulerProvider:null,dispatchPath:"kynver-daemon-pipeline-tick-pending"}}}Pr();io();ao();Gs();function HR(e,r={}){let t=rn(),n=Js(e,t),o=[],s=r.envFilePath??we,a=Qt(s).get("KYNVER_CRON_DAEMON_PRESENT")==="1";if(o.push({id:"daemon_supervision_owner",ok:!!e.daemonSupervisionOwner,summary:e.daemonSupervisionOwner?`daemonSupervisionOwner=${e.daemonSupervisionOwner} (${t})`:"daemonSupervisionOwner unset \u2014 run `kynver setup` to persist Kynver-owned restart policy",remediation:e.daemonSupervisionOwner?void 0:"Run `kynver setup` (or `kynver bootstrap`) on this box."}),o.push({id:"daemon_present_signal",ok:a,summary:a?`KYNVER_CRON_DAEMON_PRESENT=1 (persisted in ${s})`:`KYNVER_CRON_DAEMON_PRESENT not set in persisted env (${s})`,remediation:a?void 0:"Run `kynver setup` or `kynver start` once to write ~/.kynver/.env supervision keys."}),n==="systemd"){let c=Kl();o.push({id:"systemd_user_unit",ok:c,summary:c?"systemd user unit present (~/.config/systemd/user/kynver-cron-daemon.service)":"daemonSupervisionOwner=systemd but user unit missing",remediation:c?void 0:"Run `kynver start --install-systemd` or `kynver cron install --install-systemd`."})}let l=Hl(t,n);return o.push({id:"supervision_guidance",ok:!0,summary:l[0]??"Kynver keeper supervises daemon restarts by default."}),o}io();ao();function FR(e){let r=e.loadConfig(),t=rn(),n=Js(r,t),s=HR(r).map(i=>({id:i.id,label:i.id.replace(/_/g," "),status:i.ok?"pass":i.id==="daemon_supervision_owner"||i.id==="daemon_present_signal"?"warn":"fail",summary:i.summary,remediation:i.remediation}));return s.push({id:"daemon_keeper_default",label:"Kynver keeper owns in-process restarts",status:n==="keeper"||n==="systemd"?"pass":"warn",summary:n==="systemd"?"systemd persists the keeper parent \u2014 Hermes/OpenClaw cron is not required to restart the daemon":"`kynver start` / `kynver daemon` run the keeper by default (opt out with --no-supervise only when an external supervisor owns restarts)",details:{owner:n,hostKind:t}}),{id:"daemon_supervision",label:"Daemon restart supervision",checks:s}}function vN(e){let r={pass:0,warn:0,fail:0};for(let t of e)for(let n of t.checks)r[n.status]+=1;return r}function bN(e){let r=e.packageVersion(),t=e.commandOnPath("kynver"),n=t.ok&&t.stdout.length>0,o=n?t.stdout.split(/\r?\n/)[0]?.trim():void 0,s=o?q(o):void 0,i=[{id:"cli_running_version",label:"Running @kynver-app/runtime version",status:"pass",summary:`@kynver-app/runtime ${r}`,details:{version:r}},{id:"cli_on_path",label:"kynver executable on PATH",status:n?"pass":"warn",summary:n?`Found ${s}`:"kynver not found on PATH (invoked via node/npx?)",remediation:n?void 0:"Install globally (`npm i -g @kynver-app/runtime`) or invoke via `npx @kynver-app/runtime`.",details:{path:s}}];if(n&&o){let a=e.kynverVersion(o),l=a.stdout.replace(/^kynver\s+/i,"").trim()||void 0,c=a.ok&&(!l||l===r);i.push({id:"cli_installed_version",label:"Installed kynver CLI version matches running package",status:c?"pass":"warn",summary:a.ok&&l?c?`Installed ${l}`:`Installed ${l} differs from running ${r}`:a.error?`Could not read installed version (${a.error})`:a.stderr||"Could not read installed version",remediation:c?void 0:"Reinstall or rebuild @kynver-app/runtime so PATH kynver matches the harness worktree version.",details:{installedVersion:l,runningVersion:r,path:s}})}return{id:"cli_package",label:"CLI / package",checks:i}}function SN(e){let r=e.configFilePath(),t=q(r),n=e.pathExists(r),o=e.loadConfig(),s=[{id:"config_file",label:"~/.kynver/config.json present",status:n?"pass":"fail",summary:n?`Found ${t}`:`Missing ${t}`,remediation:n?void 0:"Run `kynver setup --api-base-url <url> --agent-os-id <id> --repo <path>`.",details:{configPath:t}}];if(n){let i=o.apiBaseUrl?.trim(),a=o.agentOsId?.trim(),l=je({config:o}),c=l?kn(l):null,u=xk(l);s.push({id:"config_api_base_url",label:"Default API base URL",status:i?"pass":"warn",summary:i??"Not set in config (KYNVER_API_URL / --base-url required per command)",remediation:i?void 0:"Set `apiBaseUrl` via `kynver setup --api-base-url https://\u2026`.",details:{apiBaseUrl:i??null}},{id:"config_agent_os_id",label:"Default AgentOS id",status:a?"pass":"warn",summary:a??"Not set (pass --agent-os-id on daemon/dispatch/worker commands)",remediation:a?void 0:"Set `agentOsId` via `kynver setup --agent-os-id <uuid>`.",details:{agentOsId:a??null,agentOsSlug:o.agentOsSlug??null}},{id:"config_default_repo",label:"Default repo path",status:u.status,summary:l?l.persistedInConfig?`${c.defaultRepo} (config)`:`${c.defaultRepo} (${l.source}, not persisted in ~/.kynver/config.json)`:"Not set in ~/.kynver/config.json (`kynver run create` requires --repo)",remediation:u.remediation,details:{defaultRepo:c?.defaultRepo??null,source:c?.source??null,persistedInConfig:c?.persistedInConfig??!1,harnessRoot:o.harnessRoot?Se(o.harnessRoot):null}})}return{id:"user_config",label:"User config (~/.kynver)",checks:s}}function CN(e){let t=e.loadConfig().agentOsId?.trim(),n=e.readCredentials(),o=e.envSnapshot(),s=e.credentialsFilePath(),i=q(s),a=o.kynverRunnerTokenPrefix,l=n.runnerTokenPrefix,c=n.runnerTokenAgentOsId,u=!!l&&(!t||!c||c===t),d=!!a?.startsWith("krc1.")||u&&l?.startsWith("krc1.");return{id:"runner_token",label:"Runner token readiness",checks:[{id:"runner_token_scoped",label:"Scoped runner token (krc1.*) ready",status:d?"pass":"fail",summary:d?a?"KYNVER_RUNNER_TOKEN is set (scoped prefix shown)":`Saved scoped token for agentOsId ${c??t??"(unknown)"}`:"No scoped runner token for the configured AgentOS workspace",remediation:d?void 0:"Run `kynver login` then `kynver runner credential --agent-os-id <id>` (or `kynver setup` with API key).",details:{source:a?"env":l?"credentials":"none",tokenPrefix:a??(u?l:void 0),agentOsId:t??c??null,credentialsPath:i}},{id:"runner_token_agent_os_match",label:"Saved runner token matches configured agentOsId",status:!l||!t||!c||c===t?"pass":"warn",summary:!l||!c?"No saved token agentOsId to compare":t?c===t?"Saved token scoped to configured agentOsId":`Saved token is for ${c}, config expects ${t}`:"Config agentOsId unset \u2014 token scope not validated against config",remediation:l&&t&&c&&c!==t?"`kynver runner credential --agent-os-id <configured-id>` to mint a workspace-bound token.":void 0,details:{configuredAgentOsId:t??null,savedAgentOsId:c??null}},{id:"runner_api_key_for_refresh",label:"API key available for token refresh",status:n.hasApiKey||process.env.KYNVER_API_KEY?.trim()?"pass":"warn",summary:n.hasApiKey||process.env.KYNVER_API_KEY?"KYNVER API key present for runner credential mint/refresh":"No API key \u2014 401 callback recovery cannot auto-mint a replacement token",remediation:n.hasApiKey||process.env.KYNVER_API_KEY?void 0:"Run `kynver login --api-key \u2026`.",details:{credentialsPath:i,hasApiKey:n.hasApiKey||!!process.env.KYNVER_API_KEY}}]}}function wN(e){let r=e.commandOnPath("vercel"),t=r.ok,n=!!(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()),o=!!process.env.VERCEL_TOKEN?.trim();return{id:"vercel_deploy_evidence",label:"Vercel deploy evidence",checks:[{id:"vercel_global_cli_absent",label:"Global Vercel CLI not installed",status:t?"warn":"pass",summary:t?`Global Vercel CLI found (${r.stdout||"on PATH"}) \u2014 uninstall after operator approval`:"No global Vercel CLI on PATH",remediation:t?"Uninstall global Vercel CLI (`npm uninstall -g vercel`) \u2014 use GitHub commit status or scoped VERCEL_TOKEN + REST API instead.":void 0,details:{path:t&&r.stdout||null}},{id:"github_token_for_vercel_status",label:"GitHub token for Vercel status",status:n?"pass":"warn",summary:n?"GITHUB_TOKEN/GH_TOKEN present for GitHub Vercel StatusContext evidence":"No GITHUB_TOKEN \u2014 merge-gate Vercel evidence requires GitHub commit status API",remediation:n?void 0:"Export GITHUB_TOKEN (or GH_TOKEN) for PR head commit status lookups."},{id:"vercel_api_token_optional",label:"Vercel API token (optional fallback)",status:o?"pass":"warn",summary:o?"VERCEL_TOKEN configured for optional REST API deployment lookup":"VERCEL_TOKEN unset \u2014 GitHub status is the default path; API fallback disabled",remediation:o?void 0:"Set ephemeral/scoped VERCEL_TOKEN only when GitHub status is insufficient; avoid persistent ~/.vercel auth on runner hosts."}]}}function _N(e){let r=e.harnessRoot(),t=KR.join(r,"runs"),n=KR.join(r,"worktrees"),o=Se(r),s=Se(t),i=Se(n),a=e.pathExists(t),l=e.pathExists(n);return{id:"harness_dirs",label:"Harness / daemon directories",checks:[{id:"harness_root",label:"Harness root resolved",status:"pass",summary:o,details:{harnessRoot:o}},{id:"harness_runs_dir",label:"Runs directory ready",status:a&&e.pathWritable(t)?"pass":"warn",summary:a?e.pathWritable(t)?`Writable ${s}`:`Exists but not writable: ${s}`:`Will be created on first run: ${s}`,remediation:a&&!e.pathWritable(t)?`Fix permissions on ${s} or set KYNVER_HARNESS_ROOT to a writable path.`:void 0,details:{runsDir:s,exists:a,writable:e.pathWritable(t)}},{id:"harness_worktrees_dir",label:"Worktrees directory ready",status:l&&e.pathWritable(n)?"pass":"warn",summary:l?e.pathWritable(n)?`Writable ${i}`:`Exists but not writable: ${i}`:`Will be created on first worker: ${i}`,remediation:l&&!e.pathWritable(n)?`Fix permissions on ${i}.`:void 0,details:{worktreesDir:i,exists:l,writable:e.pathWritable(n)}}]}}function xN(e){let r=e.loadConfig(),t=e.envSnapshot(),n=t.kynverApiUrl??r.apiBaseUrl?.trim()??t.openclawCronFireBaseUrl,o=!t.kynverApiUrl&&!r.apiBaseUrl&&!!t.openclawCronFireBaseUrl,s=t.openclawCronSecret||t.kynverRuntimeSecret,i=t.kynverRunnerTokenPrefix?.startsWith("krc1."),l=e.readCredentials().runnerTokenPrefix?.startsWith("krc1.");return{id:"callback_auth",label:"Callback auth / config",checks:[{id:"callback_base_url",label:"Callback base URL configured",status:n?o?"warn":"pass":"fail",summary:n?o?`Using legacy OPENCLAW_CRON_FIRE_BASE_URL (${n})`:n:"No KYNVER_API_URL, config apiBaseUrl, or legacy OpenClaw base URL",remediation:n?o?"Migrate to KYNVER_API_URL or `kynver setup --api-base-url` and drop OPENCLAW_CRON_FIRE_BASE_URL.":void 0:"Set KYNVER_API_URL or run `kynver setup --api-base-url https://\u2026`.",details:{source:t.kynverApiUrl?"KYNVER_API_URL":r.apiBaseUrl?"config.apiBaseUrl":t.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL":"none",baseUrl:n??null}},{id:"callback_auth_mode",label:"Callback auth uses scoped runner token",status:i||l?"pass":s?"warn":"fail",summary:i?"KYNVER_RUNNER_TOKEN scoped token will be sent as X-Kynver-Runner-Token":l?"Saved krc1.* token in ~/.kynver/credentials":s?"Deployment-level KYNVER_RUNTIME_SECRET / OPENCLAW_CRON_SECRET in use (legacy headers)":"No callback secret configured",remediation:i||l?void 0:"Mint a scoped token: `kynver runner credential --agent-os-id <id>`. Avoid shared OPENCLAW_CRON_SECRET on user runners.",details:{mode:i||l?"scoped":s?"legacy_global_secret":"missing",legacyHeadersWhenNotScoped:["X-OpenClaw-Cron-Secret","X-Kynver-Runtime-Secret"]}}]}}function EN(e){let r=e.envSnapshot(),t=e.loadConfig(),n=e.readCredentials(),o=e.harnessRoot(),s=e.legacyOpenclawHarnessRoot(),i=Se(o),a=Se(s),l=r.opusHarnessRoot?Se(r.opusHarnessRoot):null,c=o===s&&e.pathExists(s),u=t.agentOsId?.trim(),d=r.kynverRunnerTokenPrefix,f=n.runnerTokenPrefix,p=n.runnerTokenAgentOsId,m=!!f&&(!u||!p||p===u),h=!!d?.startsWith("krc1.")||m&&!!f?.startsWith("krc1.");return{id:"openclaw_hotspots",label:"OpenClaw dependency hotspots",checks:[{id:"hotspot_legacy_harness_root",label:"Legacy ~/.openclaw/harness still active",status:c?"warn":"pass",summary:c?`Harness root is legacy ${a}`:r.opusHarnessRoot?`OPUS_HARNESS_ROOT override in use (${l})`:`Using ${i}`,remediation:c?"Set KYNVER_HARNESS_ROOT=~/.kynver/harness (or run setup), migrate artifacts, retire OPUS_HARNESS_ROOT.":r.opusHarnessRoot?"Prefer KYNVER_HARNESS_ROOT over OPUS_HARNESS_ROOT.":void 0,details:{harnessRoot:i,legacyRoot:a,opusHarnessRoot:l}},{id:"hotspot_openclaw_env_secrets",label:"OpenClaw deployment secrets in runner env",status:r.openclawCronSecret||r.openclawCronFireBaseUrl?"warn":"pass",summary:r.openclawCronSecret||r.openclawCronFireBaseUrl?[r.openclawCronSecret?"OPENCLAW_CRON_SECRET set":null,r.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL set":null].filter(Boolean).join("; "):"No OpenClaw cron env overrides on this runner",remediation:r.openclawCronSecret||r.openclawCronFireBaseUrl?"Move to KYNVER_API_URL + scoped runner tokens; unset OpenClaw cron env on user-hosted runners.":void 0},BR(r,{agentOsId:u??null,apiBaseUrl:t.apiBaseUrl?.trim()??r.kynverApiUrl??null,hasScopedRunnerToken:h,deploymentSchedulerProvider:t.deploymentSchedulerProvider==="qstash"||t.deploymentSchedulerProvider==="kynver-cron"||t.deploymentSchedulerProvider==="openclaw-cron"?t.deploymentSchedulerProvider:void 0}),{id:"hotspot_lease_source_names",label:"Harness lease/completion source names",status:"pass",summary:"Runtime uses kynver-harness:* lease owners and completion source kynver-harness (OpenClaw names retired in runtime)",details:{leaseOwnerPattern:"kynver-harness:<runId>",completionSource:"kynver-harness",note:"OpenClaw adapter remains optional in packages/kynver-openclaw-agent-os only"}}]}}function $R(e=UR){let r=[bN(e),SN(e),CN(e),wN(e),_N(e),xN(e),FR(e),EN(e)],t=vN(r),n=t.fail===0,o=n?t.warn>0?`Ready with ${t.warn} warning(s) \u2014 review remediation before retiring OpenClaw as primary runtime agent.`:"Ready \u2014 Kynver runtime can serve as primary runtime agent on this host.":`${t.fail} blocking check(s) \u2014 fix failures before OpenClaw takeover.`;return{command:"doctor runtime-takeover",ready:n,summary:o,counts:t,sections:r}}function jR(e={}){let r;if(e.remediateDefaultRepo===!0){let n=Go();if(!n.ok){console.error(n.reason??"defaultRepo remediation failed"),n.remediation&&console.error(n.remediation),process.exitCode=1;return}n.remediated?r=`Remediated defaultRepo \u2192 ${n.resolved?.defaultRepo??"unknown"}`:r=`defaultRepo already persisted (${n.resolved?.defaultRepo??"unknown"})`}let t=$R();r&&(t.notes=[...t.notes??[],r]),console.log(JSON.stringify(t,null,2)),t.ready||(process.exitCode=1)}I();async function VR(e){let r=y(),t=(e.agentOsId?String(e.agentOsId):r.agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=V(e.baseUrl?String(e.baseUrl):r.apiBaseUrl),o=await J(e.secret?String(e.secret):void 0,t,{baseUrl:n}),s=new URLSearchParams;if(typeof e.since=="string"&&e.since.trim()&&s.set("since",e.since.trim()),e.limit!=null&&String(e.limit).trim()){let c=Number(e.limit);Number.isFinite(c)&&c>0&&s.set("limit",String(Math.floor(c)))}let i=s.toString()?`?${s.toString()}`:"",a=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/command-center/dashboard-contract${i}`,l=await ei(a,o);l.ok||(console.error(`dashboard-contract GET failed: HTTP ${l.status}`),l.response&&console.error(JSON.stringify(l.response,null,2)),process.exit(1)),console.log(JSON.stringify(l.response,null,2))}Je();var Id=["Vercel/hosted: set KYNVER_SCHEDULER_PROVIDER=qstash","Vercel/hosted: ensure QSTASH_TOKEN (and QStash signing keys) are configured","Vercel/hosted: unset OPENCLAW_CRON_STORE_PATH if present"],Od=["User runner: unset KYNVER_SCHEDULER_PROVIDER (scheduling is deployment-owned)","User runner: unset OPENCLAW_CRON_STORE_PATH, OPENCLAW_CRON_SECRET, OPENCLAW_CRON_FIRE_BASE_URL",'User runner: after deployment cutover, run `kynver scheduler attest-cutover` (or set deploymentSchedulerProvider to "qstash" in ~/.kynver/config.json)',"Verify: kynver doctor runtime-takeover \u2014 hotspot_openclaw_scheduler should pass"];function PN(e=process.env){return{kynverSchedulerProvider:e.KYNVER_SCHEDULER_PROVIDER?.trim()||null,kynverCronStorePath:e.KYNVER_CRON_STORE_PATH?.trim()||e.OPENCLAW_CRON_STORE_PATH?.trim()||null,kynverCronSecret:!!(e.KYNVER_CRON_SECRET?.trim()||e.OPENCLAW_CRON_SECRET?.trim()),kynverCronFireBaseUrl:e.KYNVER_CRON_FIRE_BASE_URL?.trim()||e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null,openclawCronStorePath:e.OPENCLAW_CRON_STORE_PATH?.trim()||null,openclawCronSecret:!!e.OPENCLAW_CRON_SECRET?.trim(),openclawCronFireBaseUrl:e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}}function Nd(e,r=PN()){let t=[];return r.kynverSchedulerProvider==="openclaw-cron"&&t.push("Runner still has KYNVER_SCHEDULER_PROVIDER=openclaw-cron"),r.kynverCronStorePath&&r.kynverSchedulerProvider!=="kynver-cron"&&t.push("Runner has KYNVER_CRON_STORE_PATH but KYNVER_SCHEDULER_PROVIDER is not kynver-cron \u2014 use `kynver daemon` cron tick or unset the store for QStash-only runners"),r.openclawCronStorePath&&!r.kynverCronStorePath&&t.push("Runner still has legacy OPENCLAW_CRON_STORE_PATH (prefer KYNVER_CRON_STORE_PATH)"),e.deploymentSchedulerProvider==="openclaw-cron"&&t.push("~/.kynver/config.json deploymentSchedulerProvider is still openclaw-cron"),{ok:t.length===0,blockers:t,runnerEnv:r,deploymentSchedulerProvider:e.deploymentSchedulerProvider??null,deploymentSteps:[...Id],runnerSteps:[...Od]}}function GR(e){return{...e,deploymentSchedulerProvider:"qstash"}}I();import AN from"node:path";import{homedir as IN}from"node:os";var YR=AN.join(IN(),".kynver","config.json");function JR(e=!1){let r=y(),t=Nd(r),n={...t,configPath:q(YR),configAttestationExample:{deploymentSchedulerProvider:"qstash"}};if(e){console.log(JSON.stringify(n,null,2)),t.ok||(process.exitCode=1);return}console.log(`AgentOS scheduler provider cutover checklist
-`),console.log("Deployment (Vercel):");for(let o of Id)console.log(`  - ${o}`);console.log(`
-User runner:`);for(let o of Od)console.log(`  - ${o}`);if(console.log(`
+${dN}
+${e.diagnostic}`:e.primary}function pN(e){let r=[`Harness ${e.scope} ${e.action} failed.`];e.timedOut?r.push("Reason: command timed out on the runner host."):e.error?r.push(`Reason: ${e.error}`):e.exitCode!=null&&r.push(`Exit code: ${e.exitCode}`);let t=e.stderr.trim();t&&r.push(`Stderr: ${t.split(`
+`).slice(-3).join(" ")}`),r.push("Next: retry on the runner host or inspect harness logs.");let n=za(e.stdout);return{primary:r.join(`
+`),diagnostic:ie(n??{stdout:e.stdout,stderr:e.stderr})}}function PR(e){if(!e.ok)return pN(e);let r=za(e.stdout);if(r===null){let t=e.stdout.trim()||e.stderr.trim()||"(no output)";return{primary:`Harness ${e.scope} ${e.action} finished.
+${t.slice(0,800)}`,diagnostic:ie({stdout:e.stdout,stderr:e.stderr})}}if(e.scope==="worker"&&e.action==="status")return is(r);if(e.scope==="worker"&&e.action==="complete")return Qa(r);if(e.scope==="monitor"&&(e.action==="tick"||e.action==="run-loop"))return Hn(r);if(e.scope==="monitor"&&e.action==="auto-complete"){let t=r;if(t.outcome&&t.worker&&t.runId)return Xa(r);if(Array.isArray(t.blockers))return{primary:[`Monitor auto-complete blocked \xB7 ${t.runId??"run"} / ${t.worker??"worker"}`,`Blockers: ${t.blockers.join("; ")}`,"Next: resolve blockers on the runner, then retry auto-complete."].join(`
+`),diagnostic:ie(r)}}if(e.scope==="run"&&e.action==="status"){let t=r.workers;return Array.isArray(t)&&t.length===1?is(t[0]):{primary:`Harness run status \xB7 ${r.runId??"run"} (${Array.isArray(t)?t.length:0} workers).`,diagnostic:ie(r)}}return{primary:`Harness ${e.scope} ${e.action} completed successfully on the runner.`,diagnostic:ie(r)}}import hN from"node:path";T();z();C();z();C();function Za(e){let{worker:r,status:t,taskLease:n}=e,o=n?.leaseOwner??null;if(r.dispatched&&n){if(n.status==="running"&&o&&!xc(o,r.runId))return{health:"orphaned",reason:`task lease held by ${o}, expected harness run ${r.runId}`};let i=r.leaseToken?.trim()??"",a=n.leaseToken?.trim()??"";if(n.status==="running"&&i&&a&&i!==a)return{health:"orphaned",reason:"task leaseToken superseded on board \u2014 completion replay would fail"};if(n.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"board task running but worker process is not alive"}}if(r.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"worker.json still running but process is dead"};if(t.attention.state==="stale")return{health:"stale",reason:t.attention.reason};let s=t.lastHeartbeatAt?Date.parse(t.lastHeartbeatAt):NaN;return t.alive&&Number.isFinite(s)&&Date.now()-s>Xt?{health:"stale",reason:`heartbeat older than ${Math.floor(Xt/1e3)}s`}:t.alive&&r.pid&&!H(r.pid)?{health:"orphaned",reason:"pid recorded but process is not alive"}:n?.status==="running"&&!t.alive&&t.finalResult?{health:"healthy",reason:"finished worker awaiting completion replay"}:{health:"healthy",reason:t.attention.reason||"worker within expected lifecycle bounds"}}Ce();C();import{existsSync as AR,mkdirSync as mN,readdirSync as fN,unlinkSync as gN}from"node:fs";import Md from"node:path";function IR(){let{harnessRoot:e}=qr(),r=Md.join(e,"monitors");return mN(r,{recursive:!0}),r}function Pt(e,r){return r?`${b(e)}--${b(r)}`:b(e)}function Ud(e){return Md.join(IR(),`${e}.json`)}function At(e){return w(Ud(e),void 0)}function It(e){ae(Ud(e.monitorId),e)}function Wd(e){let r=Ud(e);return AR(r)?(gN(r),!0):!1}function OR(){let e=IR();if(!AR(e))return[];let r=[];for(let t of fN(e)){if(!t.endsWith(".json"))continue;let n=w(Md.join(e,t),void 0);n?.monitorId&&r.push({monitorId:n.monitorId,runId:n.runId,workerName:n.workerName,agentOsId:n.agentOsId,pid:n.pid,alive:n.pid?H(n.pid):!1,startedAt:n.startedAt,pollMs:n.pollMs,logPath:n.logPath})}return r.sort((t,n)=>t.startedAt.localeCompare(n.startedAt))}z();function as(e){let{worker:r,status:t}=e,n=[];r.localOnly&&n.push("local-only worker (no board linkage)"),(!r.agentOsId||!r.taskId)&&n.push("missing agentOsId/taskId linkage"),_i(r)&&n.push("completion already acknowledged"),r.completionBlocker&&n.push(r.completionBlocker),t.heartbeatBlocker&&t.alive&&n.push(`worker heartbeat blocker: ${t.heartbeatBlocker}`),t.attention.state==="blocked"&&n.push(t.attention.reason||"worker attention blocked"),et(t)&&n.push(t.attention.reason||"landing gate blocked");let o=oe(t),s;return o?t.finalResult?s="final_result":t.alive?s="terminal_status":s="process_exited":n.push("worker has not reached a terminal condition"),{eligible:o&&n.length===0,terminalVerified:o,terminalReason:s,blockers:n}}function NR(e,r){return w(hN.join(x(e),"workers",b(r),"worker.json"),void 0)}function TR(e,r){let t=L(e),n=Object.keys(t.workers||{});if(!r)return n;let o=b(r);return n.filter(s=>b(s)===o)}function DR(e,r){let t=L(e.runId),n=D(e,{base:t.base,baseCommit:t.baseCommit}),o=e.taskId?r.get(e.taskId)??null:null,s=Za({worker:e,status:n,taskLease:o}),i=as({worker:e,status:n});return{runId:e.runId,worker:e.name,health:s.health,healthReason:s.reason,workerStatus:n.status,attentionState:n.attention.state,attentionReason:n.attention.reason,alive:n.alive,taskId:e.taskId,leaseOwner:o?.leaseOwner??void 0,taskStatus:o?.status,autoComplete:i,status:n}}async function Ot(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=e.agentOsId?String(e.agentOsId):void 0,o=L(r),s=TR(r,t),i=[];for(let f of s){let h=NR(r,f);h&&i.push(h)}let a=n||i.map(f=>f.agentOsId).find(f=>typeof f=="string"&&f.trim())||void 0,l=i.map(f=>f.taskId).filter(f=>!!f),c=await pn({agentOsId:a,taskIds:l,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}),u=i.map(f=>DR(f,c)),d;a&&e.renewLeases!==!1&&e.renewLeases!=="false"&&(d=await vi(r,{...e,agentOsId:a}));let m=[];if(e.autoComplete===!0||e.autoComplete==="true")for(let f of u){if(!f.autoComplete.eligible){m.push({worker:f.worker,outcome:"skipped",ok:!1,reason:f.autoComplete.blockers.join("; ")||"not eligible"});continue}let h=await ft({run:r,name:f.worker,...a?{agentOsId:a}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});m.push({worker:f.worker,outcome:h.outcome,ok:h.outcome==="completed",reason:h.reason})}return{runId:r,agentOsId:a,workers:u,leaseRenewal:d,autoCompleted:m}}function el(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=TR(r,t),o=[];for(let s of n){let i=NR(r,s);i&&o.push(DR(i,new Map))}return{runId:r,workers:o,autoCompleted:[]}}function ls(){return OR()}function Ld(e){let r=String(e.run||"");N(r,"--run");let t=Pt(r,e.name?String(e.name):void 0),n=At(t);if(!n)return{monitorId:t,stopped:!1};if(n.pid&&H(n.pid))try{process.kill(n.pid,"SIGTERM")}catch{}return n.stoppedAt=new Date().toISOString(),It(n),Wd(t),{monitorId:t,stopped:!0,pid:n.pid}}async function rl(e){let r=String(e.run||""),t=String(e.name||"");N(r,"--run"),N(t,"--name");let n=he(r,t),o=L(r),s=D(n,{base:o.base,baseCommit:o.baseCommit}),i=as({worker:n,status:s});if(!i.eligible){console.log(JSON.stringify({runId:r,worker:t,outcome:"blocked",blockers:i.blockers,terminalVerified:i.terminalVerified},null,2)),process.exitCode=1;return}let a=await ft({...e,run:r,name:t});console.log(JSON.stringify(a,null,2)),a.outcome!=="completed"&&a.outcome!=="blocked"&&(process.exitCode=1)}C();var kN=5e3,yN=360*60*1e3;async function Bd(e){let r=String(e.monitorId||""),t=Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):kN,n=Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):yN,o=Date.now();for(;Date.now()-o<=n;){let s=r?At(r):void 0;if(s?.stoppedAt)break;let i=await Ot({...e,autoComplete:e.autoComplete??!0,renewLeases:e.renewLeases??!0}),a=Hn({monitorId:r,phase:"tick",...i});if(console.log(a.primary),a.diagnostic&&console.error(`[monitor diagnostic] ${a.diagnostic}`),i.workers.length>0&&i.workers.every(c=>c.autoComplete.terminalVerified&&(c.autoComplete.eligible||c.autoComplete.blockers.some(u=>u.includes("already acknowledged"))))&&i.autoCompleted.every(c=>c.ok||c.outcome==="skipped")){r&&s&&(s.stoppedAt=new Date().toISOString(),It(s));break}$r(t)}}C();Ce();import{spawn as RN}from"node:child_process";import{closeSync as MR,existsSync as vN,openSync as bN}from"node:fs";import SN from"node:path";function tl(e){let r=e.nodeExecutable??process.execPath,t=Wi({importMetaUrl:import.meta.url,explicitCliPath:e.cliPath,nodeExecutable:r});if(!t)return;let n=t.cliPath;if(!vN(n))return;let o=Pt(e.runId,e.workerName),{harnessRoot:s}=qr(),i=SN.join(s,"monitors",`${o}.log`),a;try{a=bN(i,"a")}catch{a=void 0}let l=e.pollMs??5e3,c=[...t.argsPrefix,"monitor","run-loop","--run",e.runId,"--monitor-id",o,"--poll-ms",String(l),"--auto-complete","true","--renew-leases","true"];e.workerName&&c.push("--name",e.workerName),e.agentOsId&&c.push("--agent-os-id",e.agentOsId),e.baseUrl&&c.push("--base-url",e.baseUrl),e.secret&&c.push("--secret",e.secret);let u=["ignore",a??"ignore",a??"ignore"];try{let d=RN(t.command,c,pe({detached:!0,stdio:u,env:process.env}));a!==void 0&&MR(a),d.unref();let m={monitorId:o,runId:e.runId,workerName:e.workerName,agentOsId:e.agentOsId,pid:d.pid,startedAt:new Date().toISOString(),pollMs:l,logPath:i};return It(m),{monitorId:o,pid:d.pid,logPath:i,session:m}}catch{if(a!==void 0)try{MR(a)}catch{}return}}C();async function UR(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=Pt(r,t),o=At(n);if(o?.pid&&!o.stoppedAt)return{monitorId:n,session:o,spawned:!1,pid:o.pid};let s=tl({runId:r,workerName:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0});if(!s)throw new Error("failed to spawn monitor sidecar (cli.js missing or spawn error)");return{monitorId:n,session:s.session,spawned:!0,pid:s.pid}}async function WR(e){if(String(e.run||"")){let t=e.tick===!0||e.tick==="true"?await Ot({...e,autoComplete:!1}):el(e);console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({monitors:ls()},null,2))}function LR(e){console.log(JSON.stringify(Ld(e),null,2))}function BR(){console.log(JSON.stringify({monitors:ls()},null,2))}async function HR(e){await Bd(e)}async function FR(e){let r=await Ot(e);console.log(JSON.stringify(r,null,2))}T();z();C();I();import CN from"node:path";function cs(e,r,t,n,o,s){return{runId:e,worker:r,taskId:t,agentOsId:n,leaseOwner:o,action:"skipped",reason:s}}async function wN(e){let r=V(e.baseUrl?String(e.baseUrl):void 0),t=e.agentOsId?String(e.agentOsId).trim():null,n=e.dryRun===!0||e.dryRun==="true",o=[],s=[],i=[];for(let a of X())for(let l of Object.keys(a.workers??{})){let c=CN.join(x(a.id),"workers",b(l),"worker.json"),u=w(c,void 0);if(!u){s.push(cs(a.id,l,"","","","worker.json missing"));continue}let d=u.taskId??"",m=u.agentOsId??"",p=u.leaseOwner??"";if(!u.dispatched||!d||!m||!p){s.push(cs(a.id,l,d,m,p,"not a fully-leased dispatched worker"));continue}if(t&&m!==t)continue;if(u.completionReportedAt){s.push(cs(a.id,l,d,m,p,"completion already reported"));continue}let f=D(u);if(f.finalResult){s.push(cs(a.id,l,d,m,p,"has final result \u2014 let pipeline tick complete it"));continue}if(f.alive){s.push(cs(a.id,l,d,m,p,"worker process is still alive"));continue}if(n){o.push({runId:a.id,worker:l,taskId:d,agentOsId:m,leaseOwner:p,action:"released",reason:"dry-run: would release dead dispatched worker lease"});continue}try{let h=await J(e.secret?String(e.secret):void 0,m,{baseUrl:r}),k=`${r}/api/agent-os/by-id/${encodeURIComponent(m)}/tasks/${encodeURIComponent(d)}/release`,g=await re(k,h,{agentOsId:m,leaseOwner:p},{agentOsId:m,baseUrl:r});g.ok===!0||g.response?.ok===!0?o.push({runId:a.id,worker:l,taskId:d,agentOsId:m,leaseOwner:p,action:"released",reason:"dead dispatched worker lease released; task requeued"}):s.push({runId:a.id,worker:l,taskId:d,agentOsId:m,leaseOwner:p,action:"skipped",reason:`release returned ok:false (likely owner mismatch or already released): HTTP ${g.status}`})}catch(h){i.push({runId:a.id,worker:l,taskId:d,agentOsId:m,leaseOwner:p,action:"error",reason:h.message})}}return{dryRun:n,released:o,skipped:s,errors:i}}async function KR(e){let r=await wN(e),t={ok:r.errors.length===0,dryRun:r.dryRun,released:r.released.length,skipped:r.skipped.length,errors:r.errors.length,details:r};console.log(JSON.stringify(t,null,2)),r.errors.length>0&&process.exit(1)}import XR from"node:path";Je();I();import{accessSync as _N,constants as xN,existsSync as Hd,readFileSync as EN}from"node:fs";import{homedir as nl}from"node:os";import ol from"node:path";import{spawnSync as PN}from"node:child_process";Ce();function $R(e,r){try{let t=PN(e,r,{encoding:"utf8"}),n=(t.stdout||"").trim(),o=(t.stderr||"").trim();return{ok:t.status===0,stdout:n,stderr:o,error:t.error?.message}}catch(t){return{ok:!1,stdout:"",stderr:"",error:t.message}}}function jR(e){let r=e?.trim();if(r)return r.length<=12?`${r}\u2026`:`${r.slice(0,12)}\u2026`}function AN(e){if(!Hd(e))return!1;try{return _N(e,xN.W_OK),!0}catch{return!1}}var VR={packageVersion:()=>Kn,commandOnPath:e=>$R(process.platform==="win32"?"where":"which",[e]),kynverVersion:e=>$R(e,["--version"]),loadConfig:()=>y(),configFilePath:()=>ol.join(nl(),".kynver","config.json"),credentialsFilePath:()=>ol.join(nl(),".kynver","credentials"),readCredentials:()=>{let e=ol.join(nl(),".kynver","credentials");if(!Hd(e))return{hasApiKey:!1};try{let r=JSON.parse(EN(e,"utf8"));return{hasApiKey:!!r.apiKey?.trim(),runnerTokenPrefix:jR(r.runnerToken),runnerTokenAgentOsId:r.runnerTokenAgentOsId}}catch{return{hasApiKey:!1}}},envSnapshot:()=>({kynverApiUrl:process.env.KYNVER_API_URL?.trim()||void 0,openclawCronFireBaseUrl:process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||void 0,kynverRunnerTokenPrefix:jR(process.env.KYNVER_RUNNER_TOKEN),kynverRuntimeSecret:!!process.env.KYNVER_RUNTIME_SECRET?.trim(),openclawCronSecret:!!process.env.OPENCLAW_CRON_SECRET?.trim(),kynverHarnessRoot:process.env.KYNVER_HARNESS_ROOT?.trim()||void 0,opusHarnessRoot:process.env.OPUS_HARNESS_ROOT?.trim()||void 0,kynverSchedulerProvider:process.env.KYNVER_SCHEDULER_PROVIDER?.trim()||void 0,openclawCronStorePath:!!(process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim()),kynverCronDaemonPrimary:Ea(),qstashTokenPresent:!!process.env.QSTASH_TOKEN?.trim(),kynverHostedDeployment:(()=>{let e=process.env.KYNVER_HOSTED_DEPLOYMENT?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"})()}),harnessRoot:()=>fe(),legacyOpenclawHarnessRoot:()=>ol.join(nl(),".openclaw","harness"),pathExists:e=>Hd(e),pathWritable:e=>AN(e)};function GR(e,r){return e.kynverSchedulerProvider==="openclaw-cron"||r.deploymentSchedulerProvider==="openclaw-cron"}function IN(e,r){return e.kynverSchedulerProvider==="kynver-cron"||r.deploymentSchedulerProvider==="kynver-cron"}function YR(e){return!!e.openclawCronStorePath}function ON(e,r){return e.kynverSchedulerProvider==="qstash"||r.deploymentSchedulerProvider==="qstash"}function JR(e,r){let t={schedulerProvider:e.kynverSchedulerProvider??null,deploymentSchedulerProvider:r.deploymentSchedulerProvider??null,openclawCronStorePath:!!e.openclawCronStorePath,kynverCronDaemonPrimary:!!e.kynverCronDaemonPrimary},n=!!r.agentOsId?.trim()&&!!r.apiBaseUrl?.trim()&&r.hasScopedRunnerToken;if(ON(e,r)&&!GR(e,r)){let u=e.kynverSchedulerProvider==="qstash"?"KYNVER_SCHEDULER_PROVIDER=qstash on this host":"deploymentSchedulerProvider=qstash in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler cut over to QStash (${u})`,details:t}}if(IN(e,r)&&!GR(e,r)){if(YR(e)&&e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=e.kynverSchedulerProvider==="kynver-cron"?"KYNVER_SCHEDULER_PROVIDER=kynver-cron on this host":"deploymentSchedulerProvider=kynver-cron in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler owned by Kynver Cron (${u})`,details:t}}if(YR(e)){if(e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=[];return e.openclawCronStorePath&&u.push("KYNVER_CRON_STORE_PATH or OPENCLAW_CRON_STORE_PATH set (local cron store)"),{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Local cron store without daemon tick (${u.join("; ")})`,remediation:"Run `kynver daemon` with KYNVER_CRON_SECRET + KYNVER_API_URL (or KYNVER_CRON_FIRE_BASE_URL) so the daemon-owned cron tick fires schedules. On hosted deploys use QStash (KYNVER_SCHEDULER_PROVIDER=qstash). Legacy OpenClaw cron env aliases still work during cutover.",details:t}}let o=e.kynverSchedulerProvider==="openclaw-cron",s=r.deploymentSchedulerProvider==="openclaw-cron",i=e.kynverSchedulerProvider==="qstash",a=!!e.qstashTokenPresent||!!e.kynverHostedDeployment,l=a&&!n,c=l&&e.kynverSchedulerProvider==="openclaw-cron";return s&&!o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"deploymentSchedulerProvider=openclaw-cron in ~/.kynver/config.json \u2014 migrate to kynver-cron or qstash",remediation:'Run `kynver scheduler attest-cutover` or set deploymentSchedulerProvider to "kynver-cron" or "qstash" in ~/.kynver/config.json.',details:t}:n&&o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 dispatch is owned by kynver daemon; unset the OpenClaw override",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:n?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:i?"Runner override qstash present; hosted dispatch still owned by kynver daemon pipeline-tick":"Hosted dispatch owned by kynver daemon (pipeline-tick \u2192 operator/tick); no OpenClaw cron on runner",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 hosted dispatch still depends on the OpenClaw local-cron adapter",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,hostedDeployment:a}}:c?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment has KYNVER_SCHEDULER_PROVIDER=openclaw-cron \u2014 AgentOS scheduled ticks should use QStash or kynver-cron",remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server (or kynver-cron for Kynver-owned local scheduling). User runners use `kynver daemon` for dispatch and should not set a scheduler provider.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:l&&e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"QSTASH_TOKEN present; hosted scheduler auto-selects qstash (explicit KYNVER_SCHEDULER_PROVIDER=qstash optional)",details:{schedulerProvider:null,qstashTokenPresent:!0,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment with no QSTASH_TOKEN and no KYNVER_SCHEDULER_PROVIDER \u2014 kynver-cron is an in-process stub here and will NOT fire; no firing scheduler is configured",remediation:"Set QSTASH_TOKEN + KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server for hosted AgentOS schedules. Only use kynver-cron when a `kynver daemon` (or local cron store) actually owns firing on this box.",details:{schedulerProvider:null,resolvedFallback:"none",qstashTokenPresent:!1,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&e.kynverSchedulerProvider&&e.kynverSchedulerProvider!=="qstash"&&e.kynverSchedulerProvider!=="kynver-cron"?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Hosted deployment without QSTASH_TOKEN (KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}) \u2014 use qstash or kynver-cron`,remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server, or kynver-cron for Kynver-owned local scheduling. User runners use `kynver daemon` for dispatch.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}`,details:{schedulerProvider:e.kynverSchedulerProvider??null}}:{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"No KYNVER_SCHEDULER_PROVIDER on runner (expected) \u2014 finish runner setup so daemon pipeline-tick owns dispatch",details:{schedulerProvider:null,dispatchPath:"kynver-daemon-pipeline-tick-pending"}}}Ir();lo();co();qs();function qR(e,r={}){let t=on(),n=Xs(e,t),o=[],s=r.envFilePath??we,a=rn(s).get("KYNVER_CRON_DAEMON_PRESENT")==="1";if(o.push({id:"daemon_supervision_owner",ok:!!e.daemonSupervisionOwner,summary:e.daemonSupervisionOwner?`daemonSupervisionOwner=${e.daemonSupervisionOwner} (${t})`:"daemonSupervisionOwner unset \u2014 run `kynver setup` to persist Kynver-owned restart policy",remediation:e.daemonSupervisionOwner?void 0:"Run `kynver setup` (or `kynver bootstrap`) on this box."}),o.push({id:"daemon_present_signal",ok:a,summary:a?`KYNVER_CRON_DAEMON_PRESENT=1 (persisted in ${s})`:`KYNVER_CRON_DAEMON_PRESENT not set in persisted env (${s})`,remediation:a?void 0:"Run `kynver setup` or `kynver start` once to write ~/.kynver/.env supervision keys."}),n==="systemd"){let c=ql();o.push({id:"systemd_user_unit",ok:c,summary:c?"systemd user unit present (~/.config/systemd/user/kynver-cron-daemon.service)":"daemonSupervisionOwner=systemd but user unit missing",remediation:c?void 0:"Run `kynver start --install-systemd` or `kynver cron install --install-systemd`."})}let l=Yl(t,n);return o.push({id:"supervision_guidance",ok:!0,summary:l[0]??"Kynver keeper supervises daemon restarts by default."}),o}lo();co();function zR(e){let r=e.loadConfig(),t=on(),n=Xs(r,t),s=qR(r).map(i=>({id:i.id,label:i.id.replace(/_/g," "),status:i.ok?"pass":i.id==="daemon_supervision_owner"||i.id==="daemon_present_signal"?"warn":"fail",summary:i.summary,remediation:i.remediation}));return s.push({id:"daemon_keeper_default",label:"Kynver keeper owns in-process restarts",status:n==="keeper"||n==="systemd"?"pass":"warn",summary:n==="systemd"?"systemd persists the keeper parent \u2014 Hermes/OpenClaw cron is not required to restart the daemon":"`kynver start` / `kynver daemon` run the keeper by default (opt out with --no-supervise only when an external supervisor owns restarts)",details:{owner:n,hostKind:t}}),{id:"daemon_supervision",label:"Daemon restart supervision",checks:s}}function NN(e){let r={pass:0,warn:0,fail:0};for(let t of e)for(let n of t.checks)r[n.status]+=1;return r}function TN(e){let r=e.packageVersion(),t=e.commandOnPath("kynver"),n=t.ok&&t.stdout.length>0,o=n?t.stdout.split(/\r?\n/)[0]?.trim():void 0,s=o?q(o):void 0,i=[{id:"cli_running_version",label:"Running @kynver-app/runtime version",status:"pass",summary:`@kynver-app/runtime ${r}`,details:{version:r}},{id:"cli_on_path",label:"kynver executable on PATH",status:n?"pass":"warn",summary:n?`Found ${s}`:"kynver not found on PATH (invoked via node/npx?)",remediation:n?void 0:"Install globally (`npm i -g @kynver-app/runtime`) or invoke via `npx @kynver-app/runtime`.",details:{path:s}}];if(n&&o){let a=e.kynverVersion(o),l=a.stdout.replace(/^kynver\s+/i,"").trim()||void 0,c=a.ok&&(!l||l===r);i.push({id:"cli_installed_version",label:"Installed kynver CLI version matches running package",status:c?"pass":"warn",summary:a.ok&&l?c?`Installed ${l}`:`Installed ${l} differs from running ${r}`:a.error?`Could not read installed version (${a.error})`:a.stderr||"Could not read installed version",remediation:c?void 0:"Reinstall or rebuild @kynver-app/runtime so PATH kynver matches the harness worktree version.",details:{installedVersion:l,runningVersion:r,path:s}})}return{id:"cli_package",label:"CLI / package",checks:i}}function DN(e){let r=e.configFilePath(),t=q(r),n=e.pathExists(r),o=e.loadConfig(),s=[{id:"config_file",label:"~/.kynver/config.json present",status:n?"pass":"fail",summary:n?`Found ${t}`:`Missing ${t}`,remediation:n?void 0:"Run `kynver setup --api-base-url <url> --agent-os-id <id> --repo <path>`.",details:{configPath:t}}];if(n){let i=o.apiBaseUrl?.trim(),a=o.agentOsId?.trim(),l=je({config:o}),c=l?vn(l):null,u=Uk(l);s.push({id:"config_api_base_url",label:"Default API base URL",status:i?"pass":"warn",summary:i??"Not set in config (KYNVER_API_URL / --base-url required per command)",remediation:i?void 0:"Set `apiBaseUrl` via `kynver setup --api-base-url https://\u2026`.",details:{apiBaseUrl:i??null}},{id:"config_agent_os_id",label:"Default AgentOS id",status:a?"pass":"warn",summary:a??"Not set (pass --agent-os-id on daemon/dispatch/worker commands)",remediation:a?void 0:"Set `agentOsId` via `kynver setup --agent-os-id <uuid>`.",details:{agentOsId:a??null,agentOsSlug:o.agentOsSlug??null}},{id:"config_default_repo",label:"Default repo path",status:u.status,summary:l?l.persistedInConfig?`${c.defaultRepo} (config)`:`${c.defaultRepo} (${l.source}, not persisted in ~/.kynver/config.json)`:"Not set in ~/.kynver/config.json (`kynver run create` requires --repo)",remediation:u.remediation,details:{defaultRepo:c?.defaultRepo??null,source:c?.source??null,persistedInConfig:c?.persistedInConfig??!1,harnessRoot:o.harnessRoot?Se(o.harnessRoot):null}})}return{id:"user_config",label:"User config (~/.kynver)",checks:s}}function MN(e){let t=e.loadConfig().agentOsId?.trim(),n=e.readCredentials(),o=e.envSnapshot(),s=e.credentialsFilePath(),i=q(s),a=o.kynverRunnerTokenPrefix,l=n.runnerTokenPrefix,c=n.runnerTokenAgentOsId,u=!!l&&(!t||!c||c===t),d=!!a?.startsWith("krc1.")||u&&l?.startsWith("krc1.");return{id:"runner_token",label:"Runner token readiness",checks:[{id:"runner_token_scoped",label:"Scoped runner token (krc1.*) ready",status:d?"pass":"fail",summary:d?a?"KYNVER_RUNNER_TOKEN is set (scoped prefix shown)":`Saved scoped token for agentOsId ${c??t??"(unknown)"}`:"No scoped runner token for the configured AgentOS workspace",remediation:d?void 0:"Run `kynver login` then `kynver runner credential --agent-os-id <id>` (or `kynver setup` with API key).",details:{source:a?"env":l?"credentials":"none",tokenPrefix:a??(u?l:void 0),agentOsId:t??c??null,credentialsPath:i}},{id:"runner_token_agent_os_match",label:"Saved runner token matches configured agentOsId",status:!l||!t||!c||c===t?"pass":"warn",summary:!l||!c?"No saved token agentOsId to compare":t?c===t?"Saved token scoped to configured agentOsId":`Saved token is for ${c}, config expects ${t}`:"Config agentOsId unset \u2014 token scope not validated against config",remediation:l&&t&&c&&c!==t?"`kynver runner credential --agent-os-id <configured-id>` to mint a workspace-bound token.":void 0,details:{configuredAgentOsId:t??null,savedAgentOsId:c??null}},{id:"runner_api_key_for_refresh",label:"API key available for token refresh",status:n.hasApiKey||process.env.KYNVER_API_KEY?.trim()?"pass":"warn",summary:n.hasApiKey||process.env.KYNVER_API_KEY?"KYNVER API key present for runner credential mint/refresh":"No API key \u2014 401 callback recovery cannot auto-mint a replacement token",remediation:n.hasApiKey||process.env.KYNVER_API_KEY?void 0:"Run `kynver login --api-key \u2026`.",details:{credentialsPath:i,hasApiKey:n.hasApiKey||!!process.env.KYNVER_API_KEY}}]}}function UN(e){let r=e.commandOnPath("vercel"),t=r.ok,n=!!(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()),o=!!process.env.VERCEL_TOKEN?.trim();return{id:"vercel_deploy_evidence",label:"Vercel deploy evidence",checks:[{id:"vercel_global_cli_absent",label:"Global Vercel CLI not installed",status:t?"warn":"pass",summary:t?`Global Vercel CLI found (${r.stdout||"on PATH"}) \u2014 uninstall after operator approval`:"No global Vercel CLI on PATH",remediation:t?"Uninstall global Vercel CLI (`npm uninstall -g vercel`) \u2014 use GitHub commit status or scoped VERCEL_TOKEN + REST API instead.":void 0,details:{path:t&&r.stdout||null}},{id:"github_token_for_vercel_status",label:"GitHub token for Vercel status",status:n?"pass":"warn",summary:n?"GITHUB_TOKEN/GH_TOKEN present for GitHub Vercel StatusContext evidence":"No GITHUB_TOKEN \u2014 merge-gate Vercel evidence requires GitHub commit status API",remediation:n?void 0:"Export GITHUB_TOKEN (or GH_TOKEN) for PR head commit status lookups."},{id:"vercel_api_token_optional",label:"Vercel API token (optional fallback)",status:o?"pass":"warn",summary:o?"VERCEL_TOKEN configured for optional REST API deployment lookup":"VERCEL_TOKEN unset \u2014 GitHub status is the default path; API fallback disabled",remediation:o?void 0:"Set ephemeral/scoped VERCEL_TOKEN only when GitHub status is insufficient; avoid persistent ~/.vercel auth on runner hosts."}]}}function WN(e){let r=e.harnessRoot(),t=XR.join(r,"runs"),n=XR.join(r,"worktrees"),o=Se(r),s=Se(t),i=Se(n),a=e.pathExists(t),l=e.pathExists(n);return{id:"harness_dirs",label:"Harness / daemon directories",checks:[{id:"harness_root",label:"Harness root resolved",status:"pass",summary:o,details:{harnessRoot:o}},{id:"harness_runs_dir",label:"Runs directory ready",status:a&&e.pathWritable(t)?"pass":"warn",summary:a?e.pathWritable(t)?`Writable ${s}`:`Exists but not writable: ${s}`:`Will be created on first run: ${s}`,remediation:a&&!e.pathWritable(t)?`Fix permissions on ${s} or set KYNVER_HARNESS_ROOT to a writable path.`:void 0,details:{runsDir:s,exists:a,writable:e.pathWritable(t)}},{id:"harness_worktrees_dir",label:"Worktrees directory ready",status:l&&e.pathWritable(n)?"pass":"warn",summary:l?e.pathWritable(n)?`Writable ${i}`:`Exists but not writable: ${i}`:`Will be created on first worker: ${i}`,remediation:l&&!e.pathWritable(n)?`Fix permissions on ${i}.`:void 0,details:{worktreesDir:i,exists:l,writable:e.pathWritable(n)}}]}}function LN(e){let r=e.loadConfig(),t=e.envSnapshot(),n=t.kynverApiUrl??r.apiBaseUrl?.trim()??t.openclawCronFireBaseUrl,o=!t.kynverApiUrl&&!r.apiBaseUrl&&!!t.openclawCronFireBaseUrl,s=t.openclawCronSecret||t.kynverRuntimeSecret,i=t.kynverRunnerTokenPrefix?.startsWith("krc1."),l=e.readCredentials().runnerTokenPrefix?.startsWith("krc1.");return{id:"callback_auth",label:"Callback auth / config",checks:[{id:"callback_base_url",label:"Callback base URL configured",status:n?o?"warn":"pass":"fail",summary:n?o?`Using legacy OPENCLAW_CRON_FIRE_BASE_URL (${n})`:n:"No KYNVER_API_URL, config apiBaseUrl, or legacy OpenClaw base URL",remediation:n?o?"Migrate to KYNVER_API_URL or `kynver setup --api-base-url` and drop OPENCLAW_CRON_FIRE_BASE_URL.":void 0:"Set KYNVER_API_URL or run `kynver setup --api-base-url https://\u2026`.",details:{source:t.kynverApiUrl?"KYNVER_API_URL":r.apiBaseUrl?"config.apiBaseUrl":t.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL":"none",baseUrl:n??null}},{id:"callback_auth_mode",label:"Callback auth uses scoped runner token",status:i||l?"pass":s?"warn":"fail",summary:i?"KYNVER_RUNNER_TOKEN scoped token will be sent as X-Kynver-Runner-Token":l?"Saved krc1.* token in ~/.kynver/credentials":s?"Deployment-level KYNVER_RUNTIME_SECRET / OPENCLAW_CRON_SECRET in use (legacy headers)":"No callback secret configured",remediation:i||l?void 0:"Mint a scoped token: `kynver runner credential --agent-os-id <id>`. Avoid shared OPENCLAW_CRON_SECRET on user runners.",details:{mode:i||l?"scoped":s?"legacy_global_secret":"missing",legacyHeadersWhenNotScoped:["X-OpenClaw-Cron-Secret","X-Kynver-Runtime-Secret"]}}]}}function BN(e){let r=e.envSnapshot(),t=e.loadConfig(),n=e.readCredentials(),o=e.harnessRoot(),s=e.legacyOpenclawHarnessRoot(),i=Se(o),a=Se(s),l=r.opusHarnessRoot?Se(r.opusHarnessRoot):null,c=o===s&&e.pathExists(s),u=t.agentOsId?.trim(),d=r.kynverRunnerTokenPrefix,m=n.runnerTokenPrefix,p=n.runnerTokenAgentOsId,f=!!m&&(!u||!p||p===u),h=!!d?.startsWith("krc1.")||f&&!!m?.startsWith("krc1.");return{id:"openclaw_hotspots",label:"OpenClaw dependency hotspots",checks:[{id:"hotspot_legacy_harness_root",label:"Legacy ~/.openclaw/harness still active",status:c?"warn":"pass",summary:c?`Harness root is legacy ${a}`:r.opusHarnessRoot?`OPUS_HARNESS_ROOT override in use (${l})`:`Using ${i}`,remediation:c?"Set KYNVER_HARNESS_ROOT=~/.kynver/harness (or run setup), migrate artifacts, retire OPUS_HARNESS_ROOT.":r.opusHarnessRoot?"Prefer KYNVER_HARNESS_ROOT over OPUS_HARNESS_ROOT.":void 0,details:{harnessRoot:i,legacyRoot:a,opusHarnessRoot:l}},{id:"hotspot_openclaw_env_secrets",label:"OpenClaw deployment secrets in runner env",status:r.openclawCronSecret||r.openclawCronFireBaseUrl?"warn":"pass",summary:r.openclawCronSecret||r.openclawCronFireBaseUrl?[r.openclawCronSecret?"OPENCLAW_CRON_SECRET set":null,r.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL set":null].filter(Boolean).join("; "):"No OpenClaw cron env overrides on this runner",remediation:r.openclawCronSecret||r.openclawCronFireBaseUrl?"Move to KYNVER_API_URL + scoped runner tokens; unset OpenClaw cron env on user-hosted runners.":void 0},JR(r,{agentOsId:u??null,apiBaseUrl:t.apiBaseUrl?.trim()??r.kynverApiUrl??null,hasScopedRunnerToken:h,deploymentSchedulerProvider:t.deploymentSchedulerProvider==="qstash"||t.deploymentSchedulerProvider==="kynver-cron"||t.deploymentSchedulerProvider==="openclaw-cron"?t.deploymentSchedulerProvider:void 0}),{id:"hotspot_lease_source_names",label:"Harness lease/completion source names",status:"pass",summary:"Runtime uses kynver-harness:* lease owners and completion source kynver-harness (OpenClaw names retired in runtime)",details:{leaseOwnerPattern:"kynver-harness:<runId>",completionSource:"kynver-harness",note:"OpenClaw adapter remains optional in packages/kynver-openclaw-agent-os only"}}]}}function QR(e=VR){let r=[TN(e),DN(e),MN(e),UN(e),WN(e),LN(e),zR(e),BN(e)],t=NN(r),n=t.fail===0,o=n?t.warn>0?`Ready with ${t.warn} warning(s) \u2014 review remediation before retiring OpenClaw as primary runtime agent.`:"Ready \u2014 Kynver runtime can serve as primary runtime agent on this host.":`${t.fail} blocking check(s) \u2014 fix failures before OpenClaw takeover.`;return{command:"doctor runtime-takeover",ready:n,summary:o,counts:t,sections:r}}function ZR(e={}){let r;if(e.remediateDefaultRepo===!0){let n=Jo();if(!n.ok){console.error(n.reason??"defaultRepo remediation failed"),n.remediation&&console.error(n.remediation),process.exitCode=1;return}n.remediated?r=`Remediated defaultRepo \u2192 ${n.resolved?.defaultRepo??"unknown"}`:r=`defaultRepo already persisted (${n.resolved?.defaultRepo??"unknown"})`}let t=QR();r&&(t.notes=[...t.notes??[],r]),console.log(JSON.stringify(t,null,2)),t.ready||(process.exitCode=1)}I();async function ev(e){let r=y(),t=(e.agentOsId?String(e.agentOsId):r.agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=V(e.baseUrl?String(e.baseUrl):r.apiBaseUrl),o=await J(e.secret?String(e.secret):void 0,t,{baseUrl:n}),s=new URLSearchParams;if(typeof e.since=="string"&&e.since.trim()&&s.set("since",e.since.trim()),e.limit!=null&&String(e.limit).trim()){let c=Number(e.limit);Number.isFinite(c)&&c>0&&s.set("limit",String(Math.floor(c)))}let i=s.toString()?`?${s.toString()}`:"",a=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/command-center/dashboard-contract${i}`,l=await ni(a,o);l.ok||(console.error(`dashboard-contract GET failed: HTTP ${l.status}`),l.response&&console.error(JSON.stringify(l.response,null,2)),process.exit(1)),console.log(JSON.stringify(l.response,null,2))}Je();var Fd=["Vercel/hosted: set KYNVER_SCHEDULER_PROVIDER=qstash","Vercel/hosted: ensure QSTASH_TOKEN (and QStash signing keys) are configured","Vercel/hosted: unset OPENCLAW_CRON_STORE_PATH if present"],Kd=["User runner: unset KYNVER_SCHEDULER_PROVIDER (scheduling is deployment-owned)","User runner: unset OPENCLAW_CRON_STORE_PATH, OPENCLAW_CRON_SECRET, OPENCLAW_CRON_FIRE_BASE_URL",'User runner: after deployment cutover, run `kynver scheduler attest-cutover` (or set deploymentSchedulerProvider to "qstash" in ~/.kynver/config.json)',"Verify: kynver doctor runtime-takeover \u2014 hotspot_openclaw_scheduler should pass"];function HN(e=process.env){return{kynverSchedulerProvider:e.KYNVER_SCHEDULER_PROVIDER?.trim()||null,kynverCronStorePath:e.KYNVER_CRON_STORE_PATH?.trim()||e.OPENCLAW_CRON_STORE_PATH?.trim()||null,kynverCronSecret:!!(e.KYNVER_CRON_SECRET?.trim()||e.OPENCLAW_CRON_SECRET?.trim()),kynverCronFireBaseUrl:e.KYNVER_CRON_FIRE_BASE_URL?.trim()||e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null,openclawCronStorePath:e.OPENCLAW_CRON_STORE_PATH?.trim()||null,openclawCronSecret:!!e.OPENCLAW_CRON_SECRET?.trim(),openclawCronFireBaseUrl:e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}}function $d(e,r=HN()){let t=[];return r.kynverSchedulerProvider==="openclaw-cron"&&t.push("Runner still has KYNVER_SCHEDULER_PROVIDER=openclaw-cron"),r.kynverCronStorePath&&r.kynverSchedulerProvider!=="kynver-cron"&&t.push("Runner has KYNVER_CRON_STORE_PATH but KYNVER_SCHEDULER_PROVIDER is not kynver-cron \u2014 use `kynver daemon` cron tick or unset the store for QStash-only runners"),r.openclawCronStorePath&&!r.kynverCronStorePath&&t.push("Runner still has legacy OPENCLAW_CRON_STORE_PATH (prefer KYNVER_CRON_STORE_PATH)"),e.deploymentSchedulerProvider==="openclaw-cron"&&t.push("~/.kynver/config.json deploymentSchedulerProvider is still openclaw-cron"),{ok:t.length===0,blockers:t,runnerEnv:r,deploymentSchedulerProvider:e.deploymentSchedulerProvider??null,deploymentSteps:[...Fd],runnerSteps:[...Kd]}}function rv(e){return{...e,deploymentSchedulerProvider:"qstash"}}I();import FN from"node:path";import{homedir as KN}from"node:os";var tv=FN.join(KN(),".kynver","config.json");function nv(e=!1){let r=y(),t=$d(r),n={...t,configPath:q(tv),configAttestationExample:{deploymentSchedulerProvider:"qstash"}};if(e){console.log(JSON.stringify(n,null,2)),t.ok||(process.exitCode=1);return}console.log(`AgentOS scheduler provider cutover checklist
+`),console.log("Deployment (Vercel):");for(let o of Fd)console.log(`  - ${o}`);console.log(`
+User runner:`);for(let o of Kd)console.log(`  - ${o}`);if(console.log(`
 This host:`),console.log(`  config: ${n.configPath}`),console.log(`  deploymentSchedulerProvider: ${t.deploymentSchedulerProvider??"(unset)"}`),console.log(`  KYNVER_SCHEDULER_PROVIDER: ${t.runnerEnv.kynverSchedulerProvider??"(unset)"}`),console.log(`  KYNVER_CRON_STORE_PATH: ${t.runnerEnv.kynverCronStorePath??"(unset)"}`),console.log(`  OPENCLAW_CRON_STORE_PATH (legacy): ${t.runnerEnv.openclawCronStorePath??"(unset)"}`),t.blockers.length){console.log(`
 Blockers:`);for(let o of t.blockers)console.log(`  ! ${o}`);process.exitCode=1;return}console.log(`
-No local blockers detected on this runner.`)}function qR(e=!1){let r=y(),t=Nd(r);if(!t.ok){let s={ok:!1,attested:!1,blockers:t.blockers,remediation:"Clear local OpenClaw scheduler blockers before attesting qstash cutover."};if(e)console.log(JSON.stringify(s,null,2));else{console.error("Cannot attest scheduler cutover \u2014 local blockers remain:");for(let i of t.blockers)console.error(`  ! ${i}`)}process.exitCode=1;return}let n=GR(r);ce(n);let o={ok:!0,attested:!0,configPath:q(YR),deploymentSchedulerProvider:"qstash",config:nn(n),note:"Recorded deploymentSchedulerProvider=qstash in ~/.kynver/config.json. Confirm Vercel has KYNVER_SCHEDULER_PROVIDER=qstash and QSTASH_TOKEN before relying on hosted schedules."};if(e){console.log(JSON.stringify(o,null,2));return}console.log(o.note),console.log(`  config: ${o.configPath}`)}async function zR(e){let r=await Aa();if(e){console.log(JSON.stringify(r,null,2));return}console.log(`Kynver Cron primary: ${r.primary}`),console.log(`  store: ${r.env.storePath} (${r.jobCount} jobs)`),console.log(`  tick state: ${r.env.statePath} (${r.stateJobCount} tracked)`),console.log(`  tick enabled: ${r.env.tickEnabled}`),console.log(`  fire base URL: ${r.env.fireBaseUrl??"(unset)"}`),console.log(`  credentials ready: ${r.credentialsReady}`),console.log(`  daemon-owned primary: ${r.daemonPrimary}`)}async function XR(e){let r=typeof e.agentOsId=="string"?e.agentOsId:void 0,t=await _n({agentOsIdFilter:r??null});if(e.json===!0){console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({event:"kynver_cron_tick",...t}))}I();function ON(e,r){if(e===void 0)return r;if(e===!0)return!0;if(e===!1)return!1;let t=String(e).trim().toLowerCase();return t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r}async function QR(e){let r=e.dryRun===!0||e["dry-run"]===!0,t=await Oa({execute:r?!1:ON(e.execute,!0),json:e.json===!0,installSystemd:e.installSystemd===!0||e["install-systemd"]===!0,confirmQstashRemoval:e.confirmQstashRemoval===!0||e["confirm-qstash-removal"]===!0,skipWatchdog:e.skipWatchdog===!0||e["skip-watchdog"]===!0,skipTestFire:e.skipTestFire===!0||e["skip-test-fire"]===!0,agentOsId:typeof e.agentOsId=="string"?e.agentOsId:void 0,apiBaseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0,runId:typeof e.run=="string"?e.run:void 0});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}if(console.log(t.dryRun?`Kynver Cron install (dry-run)
+No local blockers detected on this runner.`)}function ov(e=!1){let r=y(),t=$d(r);if(!t.ok){let s={ok:!1,attested:!1,blockers:t.blockers,remediation:"Clear local OpenClaw scheduler blockers before attesting qstash cutover."};if(e)console.log(JSON.stringify(s,null,2));else{console.error("Cannot attest scheduler cutover \u2014 local blockers remain:");for(let i of t.blockers)console.error(`  ! ${i}`)}process.exitCode=1;return}let n=rv(r);ue(n);let o={ok:!0,attested:!0,configPath:q(tv),deploymentSchedulerProvider:"qstash",config:an(n),note:"Recorded deploymentSchedulerProvider=qstash in ~/.kynver/config.json. Confirm Vercel has KYNVER_SCHEDULER_PROVIDER=qstash and QSTASH_TOKEN before relying on hosted schedules."};if(e){console.log(JSON.stringify(o,null,2));return}console.log(o.note),console.log(`  config: ${o.configPath}`)}async function sv(e){let r=await Ma();if(e){console.log(JSON.stringify(r,null,2));return}console.log(`Kynver Cron primary: ${r.primary}`),console.log(`  store: ${r.env.storePath} (${r.jobCount} jobs)`),console.log(`  tick state: ${r.env.statePath} (${r.stateJobCount} tracked)`),console.log(`  tick enabled: ${r.env.tickEnabled}`),console.log(`  fire base URL: ${r.env.fireBaseUrl??"(unset)"}`),console.log(`  credentials ready: ${r.credentialsReady}`),console.log(`  daemon-owned primary: ${r.daemonPrimary}`)}async function iv(e){let r=typeof e.agentOsId=="string"?e.agentOsId:void 0,t=await Pn({agentOsIdFilter:r??null});if(e.json===!0){console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({event:"kynver_cron_tick",...t}))}I();function $N(e,r){if(e===void 0)return r;if(e===!0)return!0;if(e===!1)return!1;let t=String(e).trim().toLowerCase();return t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r}async function av(e){let r=e.dryRun===!0||e["dry-run"]===!0,t=await Wa({execute:r?!1:$N(e.execute,!0),json:e.json===!0,installSystemd:e.installSystemd===!0||e["install-systemd"]===!0,confirmQstashRemoval:e.confirmQstashRemoval===!0||e["confirm-qstash-removal"]===!0,skipWatchdog:e.skipWatchdog===!0||e["skip-watchdog"]===!0,skipTestFire:e.skipTestFire===!0||e["skip-test-fire"]===!0,agentOsId:typeof e.agentOsId=="string"?e.agentOsId:void 0,apiBaseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0,runId:typeof e.run=="string"?e.run:void 0});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}if(console.log(t.dryRun?`Kynver Cron install (dry-run)
 `:`Kynver Cron install
 `),console.log(`  config: ${t.configPath}`),console.log(`  env file: ${t.plan.envFilePath}`),console.log(`  store: ${t.plan.storePath}`),t.secretGenerated&&console.log("  generated new KYNVER_CRON_SECRET"),t.envFile&&console.log(`  env merge: ${t.envFile.changed?"updated":"unchanged"} (${t.envFile.keysWritten.join(", ")||"no key changes"})`),t.watchdog?.remoteJobId?console.log(`  watchdog: job ${t.watchdog.remoteJobId} provider=${t.watchdog.provider} local=${t.watchdog.localProviderScheduleId}`):t.watchdog?.error&&console.log(`  watchdog: ERROR ${t.watchdog.error}`),t.qstashWatchdog?.found.length){console.log(`  qstash watchdog leftovers: ${t.qstashWatchdog.found.length}`);for(let n of t.qstashWatchdog.found)console.log(`    - ${n.id} (${n.status})`);t.qstashWatchdog.removed.length&&console.log(`  removed: ${t.qstashWatchdog.removed.join(", ")}`)}t.systemd&&console.log(`  systemd: ${t.systemd.note??(t.systemd.started?"running":"not started")}`),t.testFire&&!t.testFire.skipped&&console.log(`  test fire: fired=${t.testFire.fired} errors=${t.testFire.errors}`),console.log(`
 Hosted deployment (manual):`);for(let n of t.plan.deploymentSteps)console.log(`  - ${n}`);if(t.blockers.length){console.log(`
-Blockers:`);for(let n of t.blockers)console.log(`  ! ${n}`);process.exitCode=1;return}console.log("\nInstall complete \u2014 run `kynver cron verify` to re-check.")}async function ZR(e){let r=y(),t=await An({config:r});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}console.log(`Kynver Cron verify: ${t.ok?"PASS":"FAIL"}
-`);for(let n of t.checks){let o=n.ok?"ok":"FAIL";console.log(`  [${o}] ${n.id}: ${n.summary}`),!n.ok&&n.remediation&&console.log(`         \u2192 ${n.remediation}`)}t.ok||(process.exitCode=1)}I();import TN from"node:os";I();Oe();Xt();C();var ls={slug:"landing-maintainer",originCron:"maintain-8-blocker-and-pr-landing-workers",defaultRepo:"Totalsolutionsync/Kynver",landScript:"scripts/agent-os-land-pr.mjs",landScriptArgs:["--skip-not-ready"]};import{spawnSync as NN}from"node:child_process";import ev from"node:path";function rv(e,r,t){let o=[ev.join(r,ls.landScript),String(e),...ls.landScriptArgs];if(!t)return{action:{kind:"land_pr",prNumber:e,reason:"dry-run"},executed:!1,exitCode:0,stdout:`dry-run: node ${o.join(" ")}`,stderr:""};let s=NN("node",o,{cwd:r,encoding:"utf8",timeout:600*1e3});return{action:{kind:"land_pr",prNumber:e,reason:"landing wrapper invoked"},executed:!0,exitCode:s.status,stdout:s.stdout??"",stderr:s.stderr??""}}function tv(e){let r=e.repoPath?String(e.repoPath).trim():"";return r?ev.resolve(r):je()?.repo??process.cwd()}async function nv(e){let r=String(N(String(e.agentOsId||""),"--agent-os-id")),t=String(e.repo||ls.defaultRepo).trim(),n=e.fleet===!0||e.fleet==="true",o=e.execute===!0||e.execute==="true",s=e.run?String(e.run):void 0,i=dr({runId:s??"fleet-lane-tick"}),a={...To(i,{harnessRunId:s,boxKind:qe(y()),hostLabel:TN.hostname()}),providerHealthy:i.ok,authorizedForRepair:i.ok,authorizedForLanding:i.ok,systemHealthBlockers:i.ok?[]:[i.reason??"resource_gate_blocked"],actionableWorkers:i.activeWorkers},l=V(e.baseUrl?String(e.baseUrl):void 0),c=await J(e.secret?String(e.secret):void 0,r,{baseUrl:l}),u=`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/tick`,f=(await Ar(u,c,{repo:t,fleet:n,execute:o,runId:s,boxCapacity:a})).response,p=[],m=tv(e),h=Array.isArray(f?.localActions)?f.localActions:[],k=a.boxId;for(let g of h){if(g.kind==="land_pr"&&typeof g.prNumber=="number"){let R=rv(g.prNumber,m,o);if(p.push({action:R.action,executed:R.executed,exitCode:R.exitCode}),o&&R.executed){let O=R.exitCode===0,_=typeof g.prUrl=="string"&&g.prUrl.trim()?g.prUrl.trim():`https://github.com/${t}/pull/${g.prNumber}`;try{await Ar(`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/outcome`,c,{repo:t,prUrl:_,holderBoxId:k,merged:O})}catch{}}continue}p.push({action:g,executed:!1,exitCode:null})}return{repo:t,fleet:n,execute:o,coordinator:f,localOutcomes:p}}async function ov(e,r){let t=String(r??e.lane??"").trim();t!=="landing-maintainer"&&(console.error(`unknown lane: ${t||"(none)"}`),process.exit(1));let n=await nv(e);if(e.json===!0||e.json==="true"){console.log(JSON.stringify(n,null,2));return}console.log(["fleet landing-maintainer tick",`repo=${n.repo}`,`fleet=${n.fleet}`,`execute=${n.execute}`,`localOutcomes=${n.localOutcomes.length}`].join(" "));for(let o of n.localOutcomes)console.log(`  ${o.action.kind} pr=${o.action.prNumber??"-"} executed=${o.executed}`)}I();T();Jr();Xt();import WN from"node:path";C();Er();zt();T();C();import DN from"node:path";function sv(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function iv(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!sv(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function Td(e){return typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||!H(e.pid)?!1:Us(e)}function MN(e,r){let t=e.completionBlocker?.trim();if(t&&!sv(t))return{attention:"blocked",attentionReason:t,status:"blocked"};if(r.heartbeatBlocker)return{attention:"blocked",attentionReason:r.heartbeatBlocker,status:"blocked"};if(iv(e))return{attention:"done",attentionReason:"completion acknowledged",status:"done"};let n=Td(e);return n?{attention:"ok",status:e.status?.trim()||"running"}:e.status==="done"?{attention:"done",status:"done"}:n?{attention:"ok",status:e.status?.trim()||"unknown"}:{attention:"needs_attention",attentionReason:"process not alive",status:"exited"}}function UN(e){return typeof e.completionBlocker=="string"&&e.completionBlocker.trim()||iv(e)?!1:Td(e)}function Dd(e,r){let t=w(DN.join(x(e.id),"workers",b(r),"worker.json"),void 0);if(!t)return null;let n=ke(t.heartbeatPath),{attention:o,attentionReason:s,status:i}=MN(t,n),a=Td(t),l=UN(t);return{runId:e.id,runName:e.name,worker:r,status:i,attention:o,attentionReason:s,alive:a,isActive:l,taskId:t.taskId?.trim()||null,planId:t.planId?.trim()||null,leaseOwner:t.leaseOwner?.trim()||null,pid:t.pid,model:t.model,currentTask:n.lastHeartbeatSummary,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,completionBlocker:t.completionBlocker?.trim()||null}}function Md(e,r){let t={};for(let n of e){let o=r(n).trim()||"unknown";t[o]=(t[o]??0)+1}return t}function av(e){return e.filter(r=>r.attention==="blocked"||r.attention==="needs_attention"||r.attention==="stale").map(r=>({runId:r.runId,worker:r.worker,taskId:r.taskId,reason:r.completionBlocker??r.heartbeatBlocker??r.attentionReason??r.attention}))}function lv(e){return e.filter(r=>r.isActive&&r.taskId).map(r=>r.taskId.trim())}function LN(){let e=[];for(let r of X())for(let t of he(r)){let n=Dd(r,t);n&&e.push(n)}return e}function BN(e){let r=e.trim().toLowerCase();if(!r)return null;for(let t of X())for(let n of he(t)){let s=w(WN.join(x(t.id),"workers",b(n),"worker.json"),void 0)?.taskId?.trim();if(s&&(s.toLowerCase()===r||s.toLowerCase().endsWith(r)))return Dd(t,n)}return null}function Ud(e){if(e.mode==="full")return{mode:"full",runs:vn()};let r=y(),{harnessRoot:t}=Z(),n=X(),o=LN(),s=o.filter(l=>l.isActive).length,i=dr({runId:n[0]?.id??"fleet",activeWorkers:s}),a={generatedAt:new Date().toISOString(),mode:e.mode,harnessRoot:t,agentOsId:r.agentOsId?.trim()||null,resourceGate:i,runCount:n.length,runStatusCounts:Md(n,l=>l.status),workerCount:o.length,workerStatusCounts:Md(o,l=>l.status),workerAttentionCounts:Md(o,l=>l.attention),activeTaskIds:lv(o),blocked:av(o).slice(0,25),workers:o};if(e.mode==="task"){let l=e.taskId?.trim()??"",c=l?BN(l):null;return{...a,mode:"task",taskId:l,taskFound:!!c,workers:c?[c]:[]}}if(e.mode==="workers"){let l=o.filter(c=>c.alive||c.attention==="blocked"||c.attention==="needs_attention"||c.attention==="stale");return{...a,mode:"workers",workers:l,blocked:av(l).slice(0,25),activeTaskIds:lv(l)}}return a}function Wd(e,r=72){let t=e.trim();return t.length<=r?t:`${t.slice(0,r-1)}\u2026`}function HN(e){let r=[`${e.runId}/${e.worker}`,e.taskId?`task=${e.taskId}`:"task=\u2014",e.leaseOwner?`lease=${e.leaseOwner}`:"lease=\u2014",`${e.status}/${e.attention}`];return e.currentTask&&r.push(`tool=${Wd(e.currentTask,48)}`),r.join(" \xB7 ")}function FN(e){let r=e.resourceGate,t=[];if(t.push("Kynver factory status"),t.push(`Slots: ${r.activeWorkers}/${r.maxConcurrentWorkers} active \xB7 ${r.slotsAvailable} available`+(r.reason?` (${r.reason})`:"")),t.push(`Runs: ${e.runCount} \xB7 Workers: ${e.workerCount}`),e.activeTaskIds.length>0&&t.push(`Active tasks: ${e.activeTaskIds.slice(0,12).join(", ")}`),e.blocked.length>0){t.push(`Blocked (${e.blocked.length}):`);for(let n of e.blocked.slice(0,8)){let o=n.taskId?` task=${n.taskId}`:"";t.push(`  \xB7 ${n.runId}/${n.worker}${o}: ${Wd(n.reason)}`)}e.blocked.length>8&&t.push(`  \xB7 \u2026and ${e.blocked.length-8} more (use kynver status --workers)`)}else t.push("Blocked: none");return t.push("Drilldown: kynver status --workers | --task <id> | --json | --full"),t.join(`
-`)}function KN(e){let r=e.resourceGate,t=[];if(t.push(`Worker slots ${r.activeWorkers}/${r.maxConcurrentWorkers} \xB7 available ${r.slotsAvailable}`),e.workers.length===0)return t.push("No active or attention workers."),t.join(`
-`);for(let n of e.workers)t.push(HN(n));return t.join(`
-`)}function $N(e){if(!e.taskId)return"missing --task <id>";if(!e.taskFound||e.workers.length===0)return`No harness worker found for task ${e.taskId}`;let r=e.workers[0];return[`task ${e.taskId}`,`${r.runId}/${r.worker}`,r.status,r.attention,r.leaseOwner?`lease=${r.leaseOwner}`:null,r.model?`model=${r.model}`:null,r.currentTask?`tool=${Wd(r.currentTask)}`:null,r.completionBlocker??r.heartbeatBlocker??r.attentionReason??null].filter(n=>!!n).join(" \xB7 ")}function cv(e){return e.mode==="workers"?KN(e):e.mode==="task"?$N(e):FN(e)}function jN(e){return e.full===!0||e.full==="true"?"full":e.json===!0||e.json==="true"?"json":e.workers===!0||e.workers==="true"?"workers":typeof e.task=="string"&&e.task.trim()?"task":"compact"}function uv(e){let r=jN(e);if(r==="full"){let n=Ud({mode:"full"});console.log(JSON.stringify(n,null,2));return}let t=Ud({mode:r,taskId:typeof e.task=="string"?e.task:void 0});if(r==="json"){console.log(JSON.stringify(t,null,2));return}console.log(cv(t))}function Ld(e){return e==="help"||e==="--help"||e==="-h"}function mv(e,r){let t=[e,r].filter(Boolean).join(" ");console.error(`unknown command: ${t||"(none)"}`),Za(1)}function Za(e=0){(e===0?console.log:console.error)(["Usage:","  kynver login [--api-key KEY] [--api-base-url URL]   (omit --api-key to authorize in the browser)","  kynver bootstrap [--api-base-url URL] [--api-key KEY] [--repo PATH]   (login + setup + runner credential in one shot)","  kynver start [--repo PATH] [--api-base-url URL] [--run RUN_ID] [--interval-ms MS] [--chat-oauth] [--install-systemd]   (bring your agent online: bootstrap if needed + run + keeper-supervised daemon; --install-systemd enables Linux user unit)","  kynver runner credential [--agent-os-id ID] [--base-url URL]","  kynver setup [--api-base-url URL] [--agent-os-id ID] [--agent-os-slug SLUG] [--box-kind forge|ghost] [--repo PATH] [--discover-repo] [--max-workers N] [--provider claude|cursor] [--chat-oauth]","  kynver daemon --run RUN_ID --agent-os-id AOS_ID [--execute] [--interval-ms MS] [--stall-ms MS] [--no-supervise]","  kynver status [--compact] [--workers] [--task TASK_ID] [--json] [--full]  # factory-wide harness summary","  kynver run list","  kynver run resolve --name RUN_NAME","  kynver run status --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver run dispatch --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--execute] [--lane any|implementation|review|landing] [--target-task-id TASK_ID] [--executor harness] [--max-starts 1] [--lease-ms MS] [--owned path[,path]] [--model claude-opus-4-8] [--disk-path /] [--reconcile-stale-blockers]","  kynver run sweep --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--grace-ms MS]",'  kynver worker start --run RUN_ID --name worker --task "..." [--owned path[,path]] [--model MODEL] [--provider claude|cursor] [--agent-os-id AOS_ID] [--task-id TASK_ID] [--wait]',"  kynver worker list --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver worker status --run RUN_ID --name worker","  kynver worker tail --run RUN_ID --name worker [--lines 40] [--raw]","  kynver worker stop --run RUN_ID --name worker","  kynver worker complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--task-id TASK_ID] [--base-url URL] [--secret SECRET]","  kynver worker discard-disposable --run RUN_ID --name worker --path scripts/helper.mjs[,other]","  kynver worker auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--poll-ms 5000] [--max-total-ms 21600000] [--complete-attempts 3] [--complete-backoff-ms 5000] [--base-url URL] [--secret SECRET]","  kynver run reconcile","  kynver run unblock [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET] [--dry-run]","  kynver plan progress --plan PLAN_ID --row ROW_KEY --role ROLE --status STATUS [--task TASK_ID] [--note NOTE] [--evidence type:value] [--agent-os-id AOS_ID]","  kynver plan verify --plan PLAN_ID [--worktree PATH] [--task TASK_ID] [--human-override] [--local]","  kynver harness verify --worktree PATH [--command CMD] [--json] [--wait-for-admission-ms MS] [--timeout-ms MS]","  kynver plan persist --operation create|add_version|update_metadata --title TITLE (--body-file PATH | --body TEXT) [--slug SLUG] [--plan PLAN_ID] [--summary TEXT] [--failure-kind approval_guard|auth|network|server|tool_interruption]","  kynver plan outbox list","  kynver plan outbox drain [--max N] [--id OUTBOX_ID]","  kynver cleanup [--execute] [--compact] [--node-modules-age-ms MS] [--worktrees-age-ms MS] [--harness-root PATH] [--include-orphans] [--skip-finalize] [--account-bytes]","  kynver wsl-crashes [--json] [--execute] [--purge-all] [--keep-newest N]","    --include-orphans also scans whole worktree directories (<harnessRoot>/worktrees/<runId>/<workerId>/) that no run/worker.json references; orphans pass salvage gates (recent heartbeat, dirty git, ahead of origin/main) before removal.","    Dry-run defaults to fast scan (no byte accounting). Pass --account-bytes for reclaimable byte totals. Pass --compact for a bounded operator summary (no full action list).","  kynver monitor start --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS]","  kynver monitor status [--run RUN_ID] [--name worker] [--tick]","  kynver monitor stop --run RUN_ID [--name worker]","  kynver monitor list","  kynver monitor tick --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--auto-complete] [--renew-leases]","  kynver monitor auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET]","  kynver monitor run-loop --run RUN_ID --monitor-id ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS] [--auto-complete] [--renew-leases]","  kynver config ensure-default-repo [--json]","  kynver doctor runtime-takeover [--remediate-default-repo]","  kynver scheduler cutover-check [--json]","  kynver scheduler attest-cutover [--json]","  kynver cron install [--dry-run] [--json] [--install-systemd] [--confirm-qstash-removal] [--skip-watchdog] [--skip-test-fire] [--agent-os-id ID] [--api-base-url URL] [--run RUN_ID]","  kynver cron verify [--json]","  kynver cron status [--json]","  kynver cron tick [--agent-os-id AOS_ID] [--json]","  kynver lane tick landing-maintainer [--fleet] [--repo OWNER/NAME] [--agent-os-id AOS_ID] [--execute] [--json]","  kynver board contract [--agent-os-id ID] [--base-url URL] [--since ISO] [--limit N]"].join(`
-`)),process.exit(e)}async function fv(e=process.argv.slice(2)){if(Zd(e,import.meta.url,"kynver"))return;if(e.length===0||Ld(e[0]))return Za(0);let r=e.shift(),t,n;if((r==="run"||r==="worker"||r==="plan"||r==="runner"||r==="harness"||r==="monitor"||r==="doctor"||r==="config"||r==="scheduler"||r==="cron"||r==="lane"||r==="board")&&(t=e.shift()),n=e,t&&Ld(t)||n.some(Ld))return Za(0);let o=fo(n),{runsDir:s,worktreesDir:i}=Z();if(dv(s,{recursive:!0}),dv(i,{recursive:!0}),r==="daemon"&&wn(),bl(r,t)){let a,l=o.run?String(o.run).trim():"";if(l)try{a=L(l).repo}catch{a=void 0}await vl({repoRoot:a,cwd:a})}if(r==="login")return void await Tm(o);if(r==="bootstrap")return void await va(o);if(r==="start")return void await Qy(o);if(r==="runner"&&t==="credential")return void await Nm(o);if(r==="setup")return void await Zs(o);if(r==="status")return uv(o);if(r==="daemon")return Ea(o)?void await Pa(o):void await Qo(o);if(r==="plan"&&t==="progress")return void await lR(o);if(r==="plan"&&t==="verify")return void await cR(o);if(r==="harness"&&t==="verify")return uR(o);if(r==="plan"&&t==="persist")return void await dR(o);if(r==="plan"&&t==="outbox"){let a=n.shift();if(a==="list")return void await pR();if(a==="drain")return void await mR(fo(n));mv("plan",`outbox ${a??""}`.trim())}if(r==="cleanup")return fR(o);if(r==="wsl-crashes")return gR(o);if(r==="config"&&t==="ensure-default-repo")return _k(o.json===!0);if(r==="doctor"&&t==="runtime-takeover")return jR(o);if(r==="scheduler"&&t==="cutover-check")return JR(o.json===!0);if(r==="scheduler"&&t==="attest-cutover")return qR(o.json===!0);if(r==="cron"&&t==="install")return void await QR(o);if(r==="cron"&&t==="verify")return void await ZR(o);if(r==="cron"&&t==="status")return void await zR(o.json===!0);if(r==="cron"&&t==="tick")return void await XR(o);if(r==="lane"&&t==="tick"){let a=n.shift();return void await ov(fo(n),a)}if(r==="board"&&t==="contract")return void await VR(o);if(r==="run"&&t==="create")return void Bo(o);if(r==="run"&&t==="list")return Eu();if(r==="run"&&t==="resolve")return Pu(o);if(r==="run"&&t==="status")return Wc(o);if(r==="run"&&t==="dispatch")return void await Mr(o);if(r==="run"&&t==="sweep")return void await bn(o);if(r==="run"&&t==="reconcile")return _u();if(r==="run"&&t==="unblock")return void await TR(o);if(r==="worker"&&t==="start")return void await Kc(o);if(r==="worker"&&t==="list")return ag(o);if(r==="worker"&&t==="status")return Uc(o);if(r==="worker"&&t==="tail")return Lc(o);if(r==="worker"&&t==="stop")return Bc(o);if(r==="worker"&&t==="complete")return void await Ni(o);if(r==="worker"&&t==="discard-disposable")return Zy(o);if(r==="worker"&&t==="auto-complete")return void await Hc(o);if(r==="monitor"&&t==="start"){let a=await ER(o);console.log(JSON.stringify(a,null,2));return}if(r==="monitor"&&t==="status")return void await PR(o);if(r==="monitor"&&t==="stop")return AR(o);if(r==="monitor"&&t==="list")return IR();if(r==="monitor"&&t==="tick")return void await NR(o);if(r==="monitor"&&t==="auto-complete")return void await qa(o);if(r==="monitor"&&t==="run-loop")return void await OR(o);mv(r,t)}var GN=process.argv[1]&&pv.native(process.argv[1])===pv.native(VN(import.meta.url));GN&&fv().catch(e=>{console.error(e),process.exit(1)});var YN="https://api.vercel.com";function JN(e){let r=e?.trim();return r||process.env.VERCEL_TOKEN?.trim()||null}function gv(e){return(e??"").trim().toUpperCase()}function qN(e){if(typeof e!="string"||!e.trim())return null;let r=e.trim();return r.startsWith("http")?r:`https://${r}`}async function Bd(e,r={}){let t=e.trim();if(!t)return{ok:!1,readyState:null,previewUrl:null,error:"missing deployment id or URL"};let n=JN(r.token);if(!n)return{ok:!1,readyState:null,previewUrl:null,error:"VERCEL_TOKEN not configured"};let o=r.teamId?.trim()||process.env.VERCEL_TEAM_ID?.trim(),s=o?`?teamId=${encodeURIComponent(o)}`:"",i=r.fetchImpl??fetch;try{let a=await i(`${YN}/v13/deployments/${encodeURIComponent(t)}${s}`,{headers:{Authorization:`Bearer ${n}`}});if(!a.ok){let u=await a.text();return{ok:!1,readyState:null,previewUrl:null,error:`Vercel API ${a.status}: ${u.slice(0,200)}`}}let l=await a.json();return{ok:!0,readyState:gv(l.readyState??l.state)||null,previewUrl:qN(l.url),error:null}}catch(a){return{ok:!1,readyState:null,previewUrl:null,error:a instanceof Error?a.message:"Vercel API fetch failed"}}}function Hd(e,r){let t=gv(e);return t==="READY"?"ready":t==="ERROR"||t==="CANCELED"?"error":t==="BUILDING"||t==="QUEUED"||t==="INITIALIZING"||r?"building":"error"}var hv=/(^|\.)vercel\.app$/i,kv=/^dpl_[a-z0-9]+$/i;function el(e){let r=e.trim();if(!r||/vercel\.com/i.test(r))return!1;if(kv.test(r))return!0;try{let t=new URL(r.startsWith("http")?r:`https://${r}`);return hv.test(t.hostname)}catch{return!1}}function zN(e){let r=e.trim();if(!r)return null;try{return new URL(r)}catch{return null}}function XN(e){let r=e.pathname.split("/").filter(Boolean);if(r.length<3)return null;let t=r[r.length-1]?.trim();return!t||t==="deployments"?null:t}function QN(e){let r=e.pathname.split("/").filter(Boolean),t=r.indexOf("deployments");return t<0||t>=r.length-1?null:r[t+1]?.trim()||null}function At(e){let r={kind:"unknown",previewUrl:null,inspectTarget:null,deploymentId:null},t=e.trim();if(!t)return r;if(/^dpl_[a-z0-9]+$/i.test(t))return{kind:"deployment_id",previewUrl:null,inspectTarget:t,deploymentId:t};let n=zN(t);if(!n)return r;if(hv.test(n.hostname)){let o=n.origin;return{kind:"deployment_host",previewUrl:o,inspectTarget:o,deploymentId:null}}if(n.hostname==="vercel.com"||n.hostname.endsWith(".vercel.com")){let o=QN(n)??XN(n);return{kind:"dashboard",previewUrl:null,inspectTarget:o&&kv.test(o)?o:null,deploymentId:o}}return r}function yv(e){return At(e).kind==="dashboard"}var ZN=/vercel/i;function Fd(e){let r=typeof e=="string"?e.trim().toLowerCase():"";return r==="success"?"success":r==="pending"?"pending":r==="failure"?"failure":r==="error"?"error":"unknown"}function Kd(e){let r=typeof e=="string"?e.trim():"";return!!(r&&ZN.test(r))}function cs(e){let t=(Array.isArray(e)?e:[]).filter(l=>Kd(l.context));if(t.length===0)return null;let n=l=>l==="failure"||l==="error"?0:l==="pending"?1:l==="success"?2:1,o=null,s=1/0;for(let l of t){let c=n(Fd(l.state));c<s&&(o=l,s=c)}if(!o)return null;let i=typeof o.target_url=="string"&&o.target_url.trim()?o.target_url.trim():null,a=i?At(i):null;return{context:String(o.context??"Vercel").trim(),state:Fd(o.state),targetUrl:i,description:typeof o.description=="string"&&o.description.trim()?o.description.trim():null,deploymentId:a?.deploymentId??null,previewUrl:a?.previewUrl??null,dashboardUrl:a?.kind==="dashboard"?i:null}}function eT(e){return e==="success"?"ready":e==="pending"?"building":e==="failure"||e==="error"?"error":"unavailable"}function rl(e){return e.filter(Boolean).join("; ")}function $d(e){let r=typeof e=="string"?e.trim():"";if(!r)return{target:null,classified:null,reason:"missing target_url"};let t=At(r);return t.inspectTarget&&el(t.inspectTarget)?{target:t.inspectTarget,classified:t,reason:null}:t.kind==="dashboard"?{target:null,classified:t,reason:t.deploymentId?"dashboard deployment id is not API-inspectable; trust GitHub Vercel status":"dashboard URL is not valid for Vercel API lookup"}:{target:null,classified:t,reason:"unrecognized Vercel URL"}}function jd(e,r={}){let t=r.observedAt??new Date().toISOString(),n=cs(e);if(!n)return{status:"not_run",previewUrl:null,deploymentUrl:null,summary:"No Vercel GitHub status context on commit",observedAt:t,inspectSkipped:!0,inspectReason:"no_vercel_status_context",githubState:null,vercelContext:null};let o=eT(n.state),s=n.previewUrl??n.dashboardUrl,i=n.previewUrl??n.dashboardUrl;return{status:o,previewUrl:s,deploymentUrl:i,summary:rl([`GitHub ${n.context}=${n.state}`,n.description??"",n.dashboardUrl?"dashboard target_url (API lookup skipped)":""]),observedAt:t,inspectSkipped:!0,inspectReason:n.dashboardUrl&&n.state==="success"?"trusted_github_status_dashboard_url":n.dashboardUrl?"dashboard_url_not_api_inspectable":"github_status_only",githubState:n.state,vercelContext:n.context}}async function Rv(e){let r=e.observedAt??new Date().toISOString(),t=jd(e.statuses??[],{observedAt:r}),n=cs(e.statuses??[]);if(!n)return t;if(n.state==="success")return{...t,inspectSkipped:!0,inspectReason:n.dashboardUrl?"trusted_github_status_dashboard_url":"trusted_github_status"};if(!e.allowInspect)return{...t,inspectSkipped:!0,inspectReason:"api_lookup_disabled"};let{target:o,reason:s}=$d(n.targetUrl);if(!o)return{...t,inspectSkipped:!0,inspectReason:s??"not_api_inspectable",summary:rl([t.summary??"",s??"skipped Vercel API lookup"])};let a=await(e.runInspect??Bd)(o),l=new Date().toISOString();if(!a.ok&&a.error?.includes("VERCEL_TOKEN"))return{status:"unavailable",previewUrl:t.previewUrl,deploymentUrl:t.deploymentUrl,summary:"VERCEL_TOKEN not configured for API fallback",observedAt:l,inspectSkipped:!0,inspectReason:"vercel_token_missing",githubState:n.state,vercelContext:n.context};if(!a.ok)return{status:n.state==="pending"?"building":"error",previewUrl:t.previewUrl,deploymentUrl:o.startsWith("http")?o:t.deploymentUrl,summary:rl([`Vercel API lookup ${o} failed`,a.error??""]),observedAt:l,inspectSkipped:!1,inspectReason:null,githubState:n.state,vercelContext:n.context};let c=Hd(a.readyState,n.state==="pending"),u=a.previewUrl??(o.startsWith("http")?o:t.previewUrl);return{status:c,previewUrl:u,deploymentUrl:u??t.deploymentUrl,summary:rl([`Vercel API ${o}=${a.readyState??"unknown"}`,c==="ready"?"preview ready":""]),observedAt:l,inspectSkipped:!1,inspectReason:null,githubState:n.state,vercelContext:n.context}}export{Nr as CODEX_DEFAULT_MODEL,yi as DEFAULT_DISPATCH_LEASE_MS,$a as DEFAULT_HARNESS_VERIFY_COMMANDS,Wa as DEFAULT_HEAVY_VERIFICATION_MAX_CONCURRENT,ca as DEFAULT_MAX_ACTIONS_PER_SWEEP,Ko as DEFAULT_NODE_MODULES_AGE_MS,la as DEFAULT_RUN_DIRECTORIES_AGE_MS,aa as DEFAULT_TERMINAL_WORKTREES_AGE_MS,Ie as DEFAULT_WORKER_PROVIDER,$o as DEFAULT_WORKTREES_AGE_MS,_p as DEFAULT_WSL_CRASH_DUMP_CRITICAL_BYTES,wp as DEFAULT_WSL_CRASH_DUMP_WARN_BYTES,vp as DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES,Gr as DEFAULT_WSL_HOST_MOUNT,Rp as DEFAULT_WSL_HOST_WARN_FREE_BYTES,ot as EMBEDDED_INSTRUCTION_BUNDLE,Bm as EMBEDDED_INSTRUCTION_BUNDLE_VERSION,sp as FORBIDDEN_WORKER_ENV_KEYS,na as HARNESS_BUILD_CACHE_RELATIVE_PATHS,ts as HEAVY_VERIFICATION_TOKEN_REQUIRED,pi as HERMES_OPENAI_CODEX_DEFAULT_MODEL,qg as INSTRUCTION_BUNDLE_REFRESH_TTL_MS,gl as MEMORY_COST_MANAGED_PACKAGES,fl as MEMORY_COST_PACKAGE_MIN_VERSIONS,$n as MemoryCostPackageVersionGuardError,lu as OPENAI_CODEX_PROVIDER,Cx as ORCHESTRATION_ACTION_KINDS,wx as ORCHESTRATION_POLICY_DECISIONS,cu as ORCHESTRATION_POLICY_MODES,Bn as PACKAGE_VERSION,Gg as PINNED_INSTRUCTION_BUNDLE_PUBLIC_KEYS,yn as RUN_METADATA_ACTIVE_SIGNAL_MS,mh as TERMINAL_WORKER_ARCHIVE_AGE_MS,Rx as TRANSIENT_OPENAI_CODEX_ERROR_CLASSES,ti as WORKER_PERSONA_CATALOG,Ux as applyProductionDatabaseToProcess,ea as archiveTerminalWorkerMetadata,yl as assertMemoryCostPackageVersionGuard,ss as assessAutoCompleteEligibility,Ct as assessBuildAdmission,zr as assessExitedWorkerSalvage,Un as assessHeavyVerificationGate,$u as assessOrphanWorktreeSafety,Ac as assessPrHandoffRequirement,Xr as assessWorkerLanding,Tl as assessWorkerLandingContract,Mv as auditWorkerEnv,dt as autoCompleteWorker,Hc as autoCompleteWorkerCli,To as buildBoxResourceSnapshotFromGate,pf as buildCodexExecArgv,$g as buildDispatchTaskText,du as buildForegroundHarnessIdempotencyKey,lf as buildHermesOpenAiCodexChatArgv,Rl as buildMemoryCostPackageGuardInput,lc as buildOrchestrationProviderInventory,vc as buildPrompt,vn as buildRunListRows,Fs as buildSystemdRunArgv,Vi as canonicalJsonStringify,kr as canonicalWorkerDir,Ha as classifyHeavyShellCommand,Vp as classifyNpmAuditOutcome,Qg as classifyOpenAiCodexError,ef as classifyOrchestrationRisk,Hp as classifyRepoSearchMeta,Ts as classifyShellCommandOutcome,At as classifyVercelUrl,Ya as classifyWorkerHealth,No as cleanupWslCrashDumps,mc as codexProvider,Su as collectFilesystemLiveRunKeys,Rv as collectVercelEvidence,Zm as compareProviderCandidates,jn as compareSemver,Ni as completeWorker,im as computeAttention,ax as computeInstructionBundleVersion,D as computeWorkerStatus,es as countActiveHeavyVerificationSlots,Bo as createRun,ko as defaultBoxId,lx as deriveInstructionBundleKeyId,qt as deriveRunStatus,Ns as diagnoseRepoSearchFailure,jr as discoverDefaultRepo,pl as discoverDefaultRepoCandidates,Fn as discoverDefaultRepoForPersistence,qi as discoverProductionDbEnvFilePaths,Mr as dispatchRun,Fi as drainPlanOutbox,ec as enforceCursorWorkerProvider,vl as enforceMemoryCostPackageGuardAtStartup,au as ensureInstructionBundle,xi as ensurePrReadyHandoff,ob as evaluateMemoryCostPackageGuardAtStartup,bs as evaluateMemoryCostPackageVersionGuard,Px as evaluateOrchestrationPolicy,jd as evidenceFromGitHubVercelStatus,oh as expandHomePath,$i as extractPlanOutboxFromTask,Pc as extractPrUrlFromText,Pl as extractSearchMeta,$p as extractSearchMetaFromToolLine,Va as formatAutoCompleteOutcomeNotice,rh as formatCronJobDeliveryFailure,yR as formatHarnessToolReadable,sx as formatHeartbeatLine,qv as formatMemoryCostPackageGuardError,Wn as formatMonitorTickNotice,eh as formatOpenAiCodexFailureNotice,Ki as formatPlanOutboxHandoffBlock,Kp as formatRepoSearchGuidance,kn as formatResolvedDefaultRepo,Ga as formatWorkerCompleteNotice,os as formatWorkerStatusNotice,Fa as gateWorkerShellCommand,zS as getActiveInstructionBundle,pr as getActiveInstructionBundleSource,Ir as getActiveInstructionBundleVersion,Yr as getHarnessPaths,Ja as getMonitorStatus,it as getOrchestrationProviderCapability,ni as getPersonaDefaultRoleLane,$m as getPersonaDispatchLane,zl as getWorkerPersonaCatalogEntry,ul as gitRepoRoot,fe as harnessRunsDir,Au as harnessStorageSnapshot,ur as harnessWorktreesDir,gn as hasNestedRunsSegment,mr as hashPlanBody,pc as hermesCodexProvider,ou as instructionBundleCachePath,et as isActiveHarnessWorker,ze as isClaudeFamilyProvider,yv as isDashboardVercelUrl,ix as isEngagementRequiredSkip,oe as isFinishedWorkerStatus,il as isForbiddenWorkerEnvKey,Iu as isGeneratedHarnessPath,yu as isHarnessRunMetadataPath,fp as isHarnessWorktreeRepo,Dn as isHeavyVerificationGateSkipped,el as isInspectableVercelTarget,rC as isKnownWorkerPersonaSlug,mp as isKynverMonorepoRoot,Zr as isLandingBlockedWorkerStatus,uu as isOrchestrationEnforceTasksEnabled,Gu as isPipelineCleanupEnabled,Is as isRgExcludeScopeTarget,fn as isSignedInstructionBundleShape,As as isSingleFileSearchTarget,Zt as isSystemdRunAvailable,El as isTerminalHeartbeatPhase,Kd as isVercelStatusContext,ws as isWslHost,kR as joinHarnessNotice,Dl as landingContractAttentionReason,vd as listActiveHeavyVerificationSlots,ip as listForbiddenWorkerEnvKeys,is as listMonitors,tc as listOrchestrationProviderCapabilities,mt as listOutboxItems,Eu as listRuns,xu as listRunsCli,iu as loadInstructionBundleCache,y as loadUserConfig,fv as main,Ta as mergeNodeOptionsForBuildCheck,Fp as metaToNormalizedRgCommand,rf as normalizeCursorModelAlias,le as normalizeHarnessRoot,Os as normalizeRepoSearchCommand,Bp as normalizeRgArgv,Le as observeRunnerDiskGate,cr as observeWslCrashDumps,Cl as observeWslHostDisk,Sx as orchestrationAuditForWorkerJson,fo as parseArgs,Qb as parseClaudeStream,Vt as parseHarnessStream,ke as parseHeartbeat,Gi as parseRawEd25519Key,Ep as parseWslCrashDumpFilename,Qi as persistDefaultRepo,mn as persistPlan,cs as pickVercelStatusContext,Ar as postJson,cC as preferCursorExecutor,ui as preflightClaudeModel,lt as preflightCodexModel,di as preflightCursorModel,li as probeClaudeOAuthBinding,nc as probeCodexOAuthBinding,ci as probeCursorOAuthBinding,ac as probeHermesCliAdapter,ho as probeHermesOpenAiCodexBinding,DC as probeOrchestrationProviderBinding,kl as probeRepoPackageVersions,sc as providerCapableForRisk,Pp as readKernelCorePattern,Ht as readMemAvailableBytes,ih as readProductionDbKeysFromEnvFile,Ap as readWslConfigCrashDumpSettings,rs as reclaimStaleHeavyVerificationSlots,ta as reconcileLocalOnlyMergedPrAttention,_u as reconcileRunsCli,Rn as reconcileStaleWorkers,ra as reconcileWorkerMetadata,aE as reconcileWorkerMetadataCli,Ax as redactHarness,gr as redactProviderErrorText,Mn as releaseHeavyVerificationSlot,Kx as remediateDefaultRepo,Zi as repairMissingRunMetadata,Hx as repairNestedRunsPath,V as resolveBaseUrl,tw as resolveBoxKindFromEnv,ri as resolveBundlePersona,GS as resolveCallbackSecret,J as resolveCallbackSecretWithMint,Or as resolveCodexOrchestrationAdapter,go as resolveConfiguredWorkerProvider,je as resolveDefaultRepo,Xi as resolveDefaultRepoForPersistence,me as resolveHarnessRoot,Rh as resolveHarnessRunByName,Pu as resolveHarnessRunCli,Nn as resolveHeavyVerificationMaxConcurrent,tu as resolveInstructionBundlePublicKey,sn as resolveInstructionText,Zg as resolveOpenAiCodexRetryBudget,Yi as resolveOrchestrationPolicyMode,uc as resolveOrchestrationRouting,st as resolvePolicyThreshold,ah as resolveProductionDatabaseUrl,Ii as resolveRunTargetArg,$d as resolveVercelInspectTarget,hu as resolveWorkerJsonPath,Fe as resolveWorkerTargetArgs,xp as resolveWslCrashDumpDir,_l as resolveWslWindowsUsername,Ka as runBoundedBuildCheck,Qo as runDaemon,kt as runDirHasActiveRetentionSignals,Ra as runHarnessCleanup,ns as runHarnessVerifyCommands,Pt as runMonitorTick,Vu as runPipelineHarnessCleanup,Wc as runStatus,Wo as safeDatabaseUrlHint,th as sanitizeOrchestrationAudit,su as saveInstructionBundleCache,ce as saveUserConfig,ap as scrubClaudeEnv,We as scrubWorkerEnv,ai as selectCheapestCapableProvider,hl as semverAtLeast,ql as setActiveInstructionBundle,eu as shouldAutoCleanupWslCrashDumps,bl as shouldEnforceMemoryCostPackageGuardCli,Fc as spawnCompletionSidecar,za as spawnMonitorSidecar,Ti as spawnWorkerProcess,Kc as startWorker,Bc as stopWorker,Ol as summarizeEvent,jp as summarizeNpmAuditReport,Jp as summarizeShellToolCallEvent,Ip as summarizeWslCrashDumpRecoverySteps,bp as summarizeWslRecoverySteps,bn as sweepRun,Lc as tailWorker,si as taskAllowsClaudeWorker,qr as terminalFinalResultFromHeartbeat,wt as tryAcquireHeavyVerificationSlot,Yl as tryResolveBaseUrl,Qs as tryResolveCallbackSecretWithMint,Za as usage,Xw as validateOwnedPaths,Dc as validateRepo,bo as validateRunId,Qw as validateTailLines,rg as validateWorkerName,Yg as verifyInstructionBundleSignatureWithKey,nu as verifySignedInstructionBundle,Ba as waitForHeavyVerificationSlot,bu as workerDirHasActiveRetentionSignals,tC as workerPersonaLandingSlugs,Xl as workerPersonaReviewSlugs,Uc as workerStatus};
+Blockers:`);for(let n of t.blockers)console.log(`  ! ${n}`);process.exitCode=1;return}console.log("\nInstall complete \u2014 run `kynver cron verify` to re-check.")}async function lv(e){let r=y(),t=await Nn({config:r});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}console.log(`Kynver Cron verify: ${t.ok?"PASS":"FAIL"}
+`);for(let n of t.checks){let o=n.ok?"ok":"FAIL";console.log(`  [${o}] ${n.id}: ${n.summary}`),!n.ok&&n.remediation&&console.log(`         \u2192 ${n.remediation}`)}t.ok||(process.exitCode=1)}I();import VN from"node:os";I();Oe();en();C();var us={slug:"landing-maintainer",originCron:"maintain-8-blocker-and-pr-landing-workers",defaultRepo:"Totalsolutionsync/Kynver",landScript:"scripts/agent-os-land-pr.mjs",landScriptArgs:["--skip-not-ready"]};import{spawnSync as jN}from"node:child_process";import cv from"node:path";function uv(e,r,t){let o=[cv.join(r,us.landScript),String(e),...us.landScriptArgs];if(!t)return{action:{kind:"land_pr",prNumber:e,reason:"dry-run"},executed:!1,exitCode:0,stdout:`dry-run: node ${o.join(" ")}`,stderr:""};let s=jN("node",o,{cwd:r,encoding:"utf8",timeout:600*1e3});return{action:{kind:"land_pr",prNumber:e,reason:"landing wrapper invoked"},executed:!0,exitCode:s.status,stdout:s.stdout??"",stderr:s.stderr??""}}function dv(e){let r=e.repoPath?String(e.repoPath).trim():"";return r?cv.resolve(r):je()?.repo??process.cwd()}async function pv(e){let r=String(N(String(e.agentOsId||""),"--agent-os-id")),t=String(e.repo||us.defaultRepo).trim(),n=e.fleet===!0||e.fleet==="true",o=e.execute===!0||e.execute==="true",s=e.run?String(e.run):void 0,i=mr({runId:s??"fleet-lane-tick"}),a={...Mo(i,{harnessRunId:s,boxKind:qe(y()),hostLabel:VN.hostname()}),providerHealthy:i.ok,authorizedForRepair:i.ok,authorizedForLanding:i.ok,systemHealthBlockers:i.ok?[]:[i.reason??"resource_gate_blocked"],actionableWorkers:i.activeWorkers},l=V(e.baseUrl?String(e.baseUrl):void 0),c=await J(e.secret?String(e.secret):void 0,r,{baseUrl:l}),u=`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/tick`,m=(await Or(u,c,{repo:t,fleet:n,execute:o,runId:s,boxCapacity:a})).response,p=[],f=dv(e),h=Array.isArray(m?.localActions)?m.localActions:[],k=a.boxId;for(let g of h){if(g.kind==="land_pr"&&typeof g.prNumber=="number"){let R=uv(g.prNumber,f,o);if(p.push({action:R.action,executed:R.executed,exitCode:R.exitCode}),o&&R.executed){let O=R.exitCode===0,_=typeof g.prUrl=="string"&&g.prUrl.trim()?g.prUrl.trim():`https://github.com/${t}/pull/${g.prNumber}`;try{await Or(`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/outcome`,c,{repo:t,prUrl:_,holderBoxId:k,merged:O})}catch{}}continue}p.push({action:g,executed:!1,exitCode:null})}return{repo:t,fleet:n,execute:o,coordinator:m,localOutcomes:p}}async function mv(e,r){let t=String(r??e.lane??"").trim();t!=="landing-maintainer"&&(console.error(`unknown lane: ${t||"(none)"}`),process.exit(1));let n=await pv(e);if(e.json===!0||e.json==="true"){console.log(JSON.stringify(n,null,2));return}console.log(["fleet landing-maintainer tick",`repo=${n.repo}`,`fleet=${n.fleet}`,`execute=${n.execute}`,`localOutcomes=${n.localOutcomes.length}`].join(" "));for(let o of n.localOutcomes)console.log(`  ${o.action.kind} pr=${o.action.prNumber??"-"} executed=${o.executed}`)}I();T();zr();en();import qN from"node:path";C();pr();Zt();T();C();import GN from"node:path";function fv(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function gv(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!fv(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function jd(e){return typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||!H(e.pid)?!1:Bs(e)}function YN(e,r){let t=e.completionBlocker?.trim();if(t&&!fv(t))return{attention:"blocked",attentionReason:t,status:"blocked"};if(r.heartbeatBlocker)return{attention:"blocked",attentionReason:r.heartbeatBlocker,status:"blocked"};if(gv(e))return{attention:"done",attentionReason:"completion acknowledged",status:"done"};let n=jd(e);return n?{attention:"ok",status:e.status?.trim()||"running"}:e.status==="done"?{attention:"done",status:"done"}:n?{attention:"ok",status:e.status?.trim()||"unknown"}:{attention:"needs_attention",attentionReason:"process not alive",status:"exited"}}function JN(e){return typeof e.completionBlocker=="string"&&e.completionBlocker.trim()||gv(e)?!1:jd(e)}function Vd(e,r){let t=w(GN.join(x(e.id),"workers",b(r),"worker.json"),void 0);if(!t)return null;let n=ce(t.heartbeatPath),{attention:o,attentionReason:s,status:i}=YN(t,n),a=jd(t),l=JN(t);return{runId:e.id,runName:e.name,worker:r,status:i,attention:o,attentionReason:s,alive:a,isActive:l,taskId:t.taskId?.trim()||null,planId:t.planId?.trim()||null,leaseOwner:t.leaseOwner?.trim()||null,pid:t.pid,model:t.model,currentTask:n.lastHeartbeatSummary,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,completionBlocker:t.completionBlocker?.trim()||null}}function Gd(e,r){let t={};for(let n of e){let o=r(n).trim()||"unknown";t[o]=(t[o]??0)+1}return t}function hv(e){return e.filter(r=>r.attention==="blocked"||r.attention==="needs_attention"||r.attention==="stale").map(r=>({runId:r.runId,worker:r.worker,taskId:r.taskId,reason:r.completionBlocker??r.heartbeatBlocker??r.attentionReason??r.attention}))}function kv(e){return e.filter(r=>r.isActive&&r.taskId).map(r=>r.taskId.trim())}function zN(){let e=[];for(let r of X())for(let t of ke(r)){let n=Vd(r,t);n&&e.push(n)}return e}function XN(e){let r=e.trim().toLowerCase();if(!r)return null;for(let t of X())for(let n of ke(t)){let s=w(qN.join(x(t.id),"workers",b(n),"worker.json"),void 0)?.taskId?.trim();if(s&&(s.toLowerCase()===r||s.toLowerCase().endsWith(r)))return Vd(t,n)}return null}function Yd(e){if(e.mode==="full")return{mode:"full",runs:Cn()};let r=y(),{harnessRoot:t}=Z(),n=X(),o=zN(),s=o.filter(l=>l.isActive).length,i=mr({runId:n[0]?.id??"fleet",activeWorkers:s}),a={generatedAt:new Date().toISOString(),mode:e.mode,harnessRoot:t,agentOsId:r.agentOsId?.trim()||null,resourceGate:i,runCount:n.length,runStatusCounts:Gd(n,l=>l.status),workerCount:o.length,workerStatusCounts:Gd(o,l=>l.status),workerAttentionCounts:Gd(o,l=>l.attention),activeTaskIds:kv(o),blocked:hv(o).slice(0,25),workers:o};if(e.mode==="task"){let l=e.taskId?.trim()??"",c=l?XN(l):null;return{...a,mode:"task",taskId:l,taskFound:!!c,workers:c?[c]:[]}}if(e.mode==="workers"){let l=o.filter(c=>c.alive||c.attention==="blocked"||c.attention==="needs_attention"||c.attention==="stale");return{...a,mode:"workers",workers:l,blocked:hv(l).slice(0,25),activeTaskIds:kv(l)}}return a}function Jd(e,r=72){let t=e.trim();return t.length<=r?t:`${t.slice(0,r-1)}\u2026`}function QN(e){let r=[`${e.runId}/${e.worker}`,e.taskId?`task=${e.taskId}`:"task=\u2014",e.leaseOwner?`lease=${e.leaseOwner}`:"lease=\u2014",`${e.status}/${e.attention}`];return e.currentTask&&r.push(`tool=${Jd(e.currentTask,48)}`),r.join(" \xB7 ")}function ZN(e){let r=e.resourceGate,t=[];if(t.push("Kynver factory status"),t.push(`Slots: ${r.activeWorkers}/${r.maxConcurrentWorkers} active \xB7 ${r.slotsAvailable} available`+(r.reason?` (${r.reason})`:"")),t.push(`Runs: ${e.runCount} \xB7 Workers: ${e.workerCount}`),e.activeTaskIds.length>0&&t.push(`Active tasks: ${e.activeTaskIds.slice(0,12).join(", ")}`),e.blocked.length>0){t.push(`Blocked (${e.blocked.length}):`);for(let n of e.blocked.slice(0,8)){let o=n.taskId?` task=${n.taskId}`:"";t.push(`  \xB7 ${n.runId}/${n.worker}${o}: ${Jd(n.reason)}`)}e.blocked.length>8&&t.push(`  \xB7 \u2026and ${e.blocked.length-8} more (use kynver status --workers)`)}else t.push("Blocked: none");return t.push("Drilldown: kynver status --workers | --task <id> | --json | --full"),t.join(`
+`)}function eT(e){let r=e.resourceGate,t=[];if(t.push(`Worker slots ${r.activeWorkers}/${r.maxConcurrentWorkers} \xB7 available ${r.slotsAvailable}`),e.workers.length===0)return t.push("No active or attention workers."),t.join(`
+`);for(let n of e.workers)t.push(QN(n));return t.join(`
+`)}function rT(e){if(!e.taskId)return"missing --task <id>";if(!e.taskFound||e.workers.length===0)return`No harness worker found for task ${e.taskId}`;let r=e.workers[0];return[`task ${e.taskId}`,`${r.runId}/${r.worker}`,r.status,r.attention,r.leaseOwner?`lease=${r.leaseOwner}`:null,r.model?`model=${r.model}`:null,r.currentTask?`tool=${Jd(r.currentTask)}`:null,r.completionBlocker??r.heartbeatBlocker??r.attentionReason??null].filter(n=>!!n).join(" \xB7 ")}function yv(e){return e.mode==="workers"?eT(e):e.mode==="task"?rT(e):ZN(e)}function tT(e){return e.full===!0||e.full==="true"?"full":e.json===!0||e.json==="true"?"json":e.workers===!0||e.workers==="true"?"workers":typeof e.task=="string"&&e.task.trim()?"task":"compact"}function Rv(e){let r=tT(e);if(r==="full"){let n=Yd({mode:"full"});console.log(JSON.stringify(n,null,2));return}let t=Yd({mode:r,taskId:typeof e.task=="string"?e.task:void 0});if(r==="json"){console.log(JSON.stringify(t,null,2));return}console.log(yv(t))}function qd(e){return e==="help"||e==="--help"||e==="-h"}function Sv(e,r){let t=[e,r].filter(Boolean).join(" ");console.error(`unknown command: ${t||"(none)"}`),sl(1)}function sl(e=0){(e===0?console.log:console.error)(["Usage:","  kynver login [--api-key KEY] [--api-base-url URL]   (omit --api-key to authorize in the browser)","  kynver bootstrap [--api-base-url URL] [--api-key KEY] [--repo PATH]   (login + setup + runner credential in one shot)","  kynver start [--repo PATH] [--api-base-url URL] [--run RUN_ID] [--interval-ms MS] [--chat-oauth] [--install-systemd]   (bring your agent online: bootstrap if needed + run + keeper-supervised daemon; --install-systemd enables Linux user unit)","  kynver runner credential [--agent-os-id ID] [--base-url URL]","  kynver setup [--api-base-url URL] [--agent-os-id ID] [--agent-os-slug SLUG] [--box-kind forge|ghost] [--repo PATH] [--discover-repo] [--max-workers N] [--provider claude|cursor] [--chat-oauth]","  kynver daemon --run RUN_ID --agent-os-id AOS_ID [--execute] [--interval-ms MS] [--stall-ms MS] [--no-supervise]","  kynver status [--compact] [--workers] [--task TASK_ID] [--json] [--full]  # factory-wide harness summary","  kynver run list","  kynver run resolve --name RUN_NAME","  kynver run status --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver run dispatch --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--execute] [--lane any|implementation|review|landing] [--target-task-id TASK_ID] [--executor harness] [--max-starts 1] [--lease-ms MS] [--owned path[,path]] [--model claude-opus-4-8] [--disk-path /] [--reconcile-stale-blockers]","  kynver run sweep --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--grace-ms MS]",'  kynver worker start --run RUN_ID --name worker --task "..." [--owned path[,path]] [--model MODEL] [--provider claude|cursor] [--agent-os-id AOS_ID] [--task-id TASK_ID] [--wait] [--emit-json]',"  kynver worker list --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver worker status --run RUN_ID --name worker","  kynver worker tail --run RUN_ID --name worker [--lines 40] [--raw]","  kynver worker stop --run RUN_ID --name worker","  kynver worker complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--task-id TASK_ID] [--base-url URL] [--secret SECRET]","  kynver worker discard-disposable --run RUN_ID --name worker --path scripts/helper.mjs[,other]","  kynver worker auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--poll-ms 5000] [--max-total-ms 21600000] [--complete-attempts 3] [--complete-backoff-ms 5000] [--base-url URL] [--secret SECRET]","  kynver run reconcile","  kynver run unblock [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET] [--dry-run]","  kynver plan progress --plan PLAN_ID --row ROW_KEY --role ROLE --status STATUS [--task TASK_ID] [--note NOTE] [--evidence type:value] [--agent-os-id AOS_ID]","  kynver plan verify --plan PLAN_ID [--worktree PATH] [--task TASK_ID] [--human-override] [--local]","  kynver harness verify --worktree PATH [--command CMD] [--json] [--wait-for-admission-ms MS] [--timeout-ms MS]","  kynver plan persist --operation create|add_version|update_metadata --title TITLE (--body-file PATH | --body TEXT) [--slug SLUG] [--plan PLAN_ID] [--summary TEXT] [--failure-kind approval_guard|auth|network|server|tool_interruption]","  kynver plan outbox list","  kynver plan outbox drain [--max N] [--id OUTBOX_ID]","  kynver cleanup [--execute] [--compact] [--node-modules-age-ms MS] [--worktrees-age-ms MS] [--harness-root PATH] [--include-orphans] [--skip-finalize] [--account-bytes]","  kynver wsl-crashes [--json] [--execute] [--purge-all] [--keep-newest N]","    --include-orphans also scans whole worktree directories (<harnessRoot>/worktrees/<runId>/<workerId>/) that no run/worker.json references; orphans pass salvage gates (recent heartbeat, dirty git, ahead of origin/main) before removal.","    Dry-run defaults to fast scan (no byte accounting). Pass --account-bytes for reclaimable byte totals. Pass --compact for a bounded operator summary (no full action list).","  kynver monitor start --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS]","  kynver monitor status [--run RUN_ID] [--name worker] [--tick]","  kynver monitor stop --run RUN_ID [--name worker]","  kynver monitor list","  kynver monitor tick --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--auto-complete] [--renew-leases]","  kynver monitor auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET]","  kynver monitor run-loop --run RUN_ID --monitor-id ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS] [--auto-complete] [--renew-leases]","  kynver config ensure-default-repo [--json]","  kynver doctor runtime-takeover [--remediate-default-repo]","  kynver scheduler cutover-check [--json]","  kynver scheduler attest-cutover [--json]","  kynver cron install [--dry-run] [--json] [--install-systemd] [--confirm-qstash-removal] [--skip-watchdog] [--skip-test-fire] [--agent-os-id ID] [--api-base-url URL] [--run RUN_ID]","  kynver cron verify [--json]","  kynver cron status [--json]","  kynver cron tick [--agent-os-id AOS_ID] [--json]","  kynver lane tick landing-maintainer [--fleet] [--repo OWNER/NAME] [--agent-os-id AOS_ID] [--execute] [--json]","  kynver board contract [--agent-os-id ID] [--base-url URL] [--since ISO] [--limit N]"].join(`
+`)),process.exit(e)}async function Cv(e=process.argv.slice(2)){if(up(e,import.meta.url,"kynver"))return;if(e.length===0||qd(e[0]))return sl(0);let r=e.shift(),t,n;if((r==="run"||r==="worker"||r==="plan"||r==="runner"||r==="harness"||r==="monitor"||r==="doctor"||r==="config"||r==="scheduler"||r==="cron"||r==="lane"||r==="board")&&(t=e.shift()),n=e,t&&qd(t)||n.some(qd))return sl(0);let o=ho(n),{runsDir:s,worktreesDir:i}=Z();if(vv(s,{recursive:!0}),vv(i,{recursive:!0}),r==="daemon"&&En(),El(r,t)){let a,l=o.run?String(o.run).trim():"";if(l)try{a=L(l).repo}catch{a=void 0}await xl({repoRoot:a,cwd:a})}if(r==="login")return void await Km(o);if(r==="bootstrap")return void await xa(o);if(r==="start")return void await lR(o);if(r==="runner"&&t==="credential")return void await Fm(o);if(r==="setup")return void await ti(o);if(r==="status")return Rv(o);if(r==="daemon")return Ta(o)?void await Da(o):void await es(o);if(r==="plan"&&t==="progress")return void await yR(o);if(r==="plan"&&t==="verify")return void await RR(o);if(r==="harness"&&t==="verify")return vR(o);if(r==="plan"&&t==="persist")return void await bR(o);if(r==="plan"&&t==="outbox"){let a=n.shift();if(a==="list")return void await SR();if(a==="drain")return void await CR(ho(n));Sv("plan",`outbox ${a??""}`.trim())}if(r==="cleanup")return wR(o);if(r==="wsl-crashes")return _R(o);if(r==="config"&&t==="ensure-default-repo")return Mk(o.json===!0);if(r==="doctor"&&t==="runtime-takeover")return ZR(o);if(r==="scheduler"&&t==="cutover-check")return nv(o.json===!0);if(r==="scheduler"&&t==="attest-cutover")return ov(o.json===!0);if(r==="cron"&&t==="install")return void await av(o);if(r==="cron"&&t==="verify")return void await lv(o);if(r==="cron"&&t==="status")return void await sv(o.json===!0);if(r==="cron"&&t==="tick")return void await iv(o);if(r==="lane"&&t==="tick"){let a=n.shift();return void await mv(ho(n),a)}if(r==="board"&&t==="contract")return void await ev(o);if(r==="run"&&t==="create")return void Fo(o);if(r==="run"&&t==="list")return Lu();if(r==="run"&&t==="resolve")return Bu(o);if(r==="run"&&t==="status")return jc(o);if(r==="run"&&t==="dispatch")return void await Wr(o);if(r==="run"&&t==="sweep")return void await wn(o);if(r==="run"&&t==="reconcile")return Uu();if(r==="run"&&t==="unblock")return void await KR(o);if(r==="worker"&&t==="start")return void await Xc(o);if(r==="worker"&&t==="list")return hg(o);if(r==="worker"&&t==="status")return $c(o);if(r==="worker"&&t==="tail")return Vc(o);if(r==="worker"&&t==="stop")return Gc(o);if(r==="worker"&&t==="complete")return void await Mi(o);if(r==="worker"&&t==="discard-disposable")return cR(o);if(r==="worker"&&t==="auto-complete")return void await Jc(o);if(r==="monitor"&&t==="start"){let a=await UR(o);console.log(JSON.stringify(a,null,2));return}if(r==="monitor"&&t==="status")return void await WR(o);if(r==="monitor"&&t==="stop")return LR(o);if(r==="monitor"&&t==="list")return BR();if(r==="monitor"&&t==="tick")return void await FR(o);if(r==="monitor"&&t==="auto-complete")return void await rl(o);if(r==="monitor"&&t==="run-loop")return void await HR(o);Sv(r,t)}var oT=process.argv[1]&&bv.native(process.argv[1])===bv.native(nT(import.meta.url));oT&&Cv().catch(e=>{console.error(e),process.exit(1)});var sT="https://api.vercel.com";function iT(e){let r=e?.trim();return r||process.env.VERCEL_TOKEN?.trim()||null}function wv(e){return(e??"").trim().toUpperCase()}function aT(e){if(typeof e!="string"||!e.trim())return null;let r=e.trim();return r.startsWith("http")?r:`https://${r}`}async function zd(e,r={}){let t=e.trim();if(!t)return{ok:!1,readyState:null,previewUrl:null,error:"missing deployment id or URL"};let n=iT(r.token);if(!n)return{ok:!1,readyState:null,previewUrl:null,error:"VERCEL_TOKEN not configured"};let o=r.teamId?.trim()||process.env.VERCEL_TEAM_ID?.trim(),s=o?`?teamId=${encodeURIComponent(o)}`:"",i=r.fetchImpl??fetch;try{let a=await i(`${sT}/v13/deployments/${encodeURIComponent(t)}${s}`,{headers:{Authorization:`Bearer ${n}`}});if(!a.ok){let u=await a.text();return{ok:!1,readyState:null,previewUrl:null,error:`Vercel API ${a.status}: ${u.slice(0,200)}`}}let l=await a.json();return{ok:!0,readyState:wv(l.readyState??l.state)||null,previewUrl:aT(l.url),error:null}}catch(a){return{ok:!1,readyState:null,previewUrl:null,error:a instanceof Error?a.message:"Vercel API fetch failed"}}}function Xd(e,r){let t=wv(e);return t==="READY"?"ready":t==="ERROR"||t==="CANCELED"?"error":t==="BUILDING"||t==="QUEUED"||t==="INITIALIZING"||r?"building":"error"}var _v=/(^|\.)vercel\.app$/i,xv=/^dpl_[a-z0-9]+$/i;function il(e){let r=e.trim();if(!r||/vercel\.com/i.test(r))return!1;if(xv.test(r))return!0;try{let t=new URL(r.startsWith("http")?r:`https://${r}`);return _v.test(t.hostname)}catch{return!1}}function lT(e){let r=e.trim();if(!r)return null;try{return new URL(r)}catch{return null}}function cT(e){let r=e.pathname.split("/").filter(Boolean);if(r.length<3)return null;let t=r[r.length-1]?.trim();return!t||t==="deployments"?null:t}function uT(e){let r=e.pathname.split("/").filter(Boolean),t=r.indexOf("deployments");return t<0||t>=r.length-1?null:r[t+1]?.trim()||null}function Nt(e){let r={kind:"unknown",previewUrl:null,inspectTarget:null,deploymentId:null},t=e.trim();if(!t)return r;if(/^dpl_[a-z0-9]+$/i.test(t))return{kind:"deployment_id",previewUrl:null,inspectTarget:t,deploymentId:t};let n=lT(t);if(!n)return r;if(_v.test(n.hostname)){let o=n.origin;return{kind:"deployment_host",previewUrl:o,inspectTarget:o,deploymentId:null}}if(n.hostname==="vercel.com"||n.hostname.endsWith(".vercel.com")){let o=uT(n)??cT(n);return{kind:"dashboard",previewUrl:null,inspectTarget:o&&xv.test(o)?o:null,deploymentId:o}}return r}function Ev(e){return Nt(e).kind==="dashboard"}var dT=/vercel/i;function Qd(e){let r=typeof e=="string"?e.trim().toLowerCase():"";return r==="success"?"success":r==="pending"?"pending":r==="failure"?"failure":r==="error"?"error":"unknown"}function Zd(e){let r=typeof e=="string"?e.trim():"";return!!(r&&dT.test(r))}function ds(e){let t=(Array.isArray(e)?e:[]).filter(l=>Zd(l.context));if(t.length===0)return null;let n=l=>l==="failure"||l==="error"?0:l==="pending"?1:l==="success"?2:1,o=null,s=1/0;for(let l of t){let c=n(Qd(l.state));c<s&&(o=l,s=c)}if(!o)return null;let i=typeof o.target_url=="string"&&o.target_url.trim()?o.target_url.trim():null,a=i?Nt(i):null;return{context:String(o.context??"Vercel").trim(),state:Qd(o.state),targetUrl:i,description:typeof o.description=="string"&&o.description.trim()?o.description.trim():null,deploymentId:a?.deploymentId??null,previewUrl:a?.previewUrl??null,dashboardUrl:a?.kind==="dashboard"?i:null}}function pT(e){return e==="success"?"ready":e==="pending"?"building":e==="failure"||e==="error"?"error":"unavailable"}function al(e){return e.filter(Boolean).join("; ")}function ep(e){let r=typeof e=="string"?e.trim():"";if(!r)return{target:null,classified:null,reason:"missing target_url"};let t=Nt(r);return t.inspectTarget&&il(t.inspectTarget)?{target:t.inspectTarget,classified:t,reason:null}:t.kind==="dashboard"?{target:null,classified:t,reason:t.deploymentId?"dashboard deployment id is not API-inspectable; trust GitHub Vercel status":"dashboard URL is not valid for Vercel API lookup"}:{target:null,classified:t,reason:"unrecognized Vercel URL"}}function rp(e,r={}){let t=r.observedAt??new Date().toISOString(),n=ds(e);if(!n)return{status:"not_run",previewUrl:null,deploymentUrl:null,summary:"No Vercel GitHub status context on commit",observedAt:t,inspectSkipped:!0,inspectReason:"no_vercel_status_context",githubState:null,vercelContext:null};let o=pT(n.state),s=n.previewUrl??n.dashboardUrl,i=n.previewUrl??n.dashboardUrl;return{status:o,previewUrl:s,deploymentUrl:i,summary:al([`GitHub ${n.context}=${n.state}`,n.description??"",n.dashboardUrl?"dashboard target_url (API lookup skipped)":""]),observedAt:t,inspectSkipped:!0,inspectReason:n.dashboardUrl&&n.state==="success"?"trusted_github_status_dashboard_url":n.dashboardUrl?"dashboard_url_not_api_inspectable":"github_status_only",githubState:n.state,vercelContext:n.context}}async function Pv(e){let r=e.observedAt??new Date().toISOString(),t=rp(e.statuses??[],{observedAt:r}),n=ds(e.statuses??[]);if(!n)return t;if(n.state==="success")return{...t,inspectSkipped:!0,inspectReason:n.dashboardUrl?"trusted_github_status_dashboard_url":"trusted_github_status"};if(!e.allowInspect)return{...t,inspectSkipped:!0,inspectReason:"api_lookup_disabled"};let{target:o,reason:s}=ep(n.targetUrl);if(!o)return{...t,inspectSkipped:!0,inspectReason:s??"not_api_inspectable",summary:al([t.summary??"",s??"skipped Vercel API lookup"])};let a=await(e.runInspect??zd)(o),l=new Date().toISOString();if(!a.ok&&a.error?.includes("VERCEL_TOKEN"))return{status:"unavailable",previewUrl:t.previewUrl,deploymentUrl:t.deploymentUrl,summary:"VERCEL_TOKEN not configured for API fallback",observedAt:l,inspectSkipped:!0,inspectReason:"vercel_token_missing",githubState:n.state,vercelContext:n.context};if(!a.ok)return{status:n.state==="pending"?"building":"error",previewUrl:t.previewUrl,deploymentUrl:o.startsWith("http")?o:t.deploymentUrl,summary:al([`Vercel API lookup ${o} failed`,a.error??""]),observedAt:l,inspectSkipped:!1,inspectReason:null,githubState:n.state,vercelContext:n.context};let c=Xd(a.readyState,n.state==="pending"),u=a.previewUrl??(o.startsWith("http")?o:t.previewUrl);return{status:c,previewUrl:u,deploymentUrl:u??t.deploymentUrl,summary:al([`Vercel API ${o}=${a.readyState??"unknown"}`,c==="ready"?"preview ready":""]),observedAt:l,inspectSkipped:!1,inspectReason:null,githubState:n.state,vercelContext:n.context}}export{Dr as CODEX_DEFAULT_MODEL,bi as DEFAULT_DISPATCH_LEASE_MS,qa as DEFAULT_HARNESS_VERIFY_COMMANDS,$a as DEFAULT_HEAVY_VERIFICATION_MAX_CONCURRENT,ga as DEFAULT_MAX_ACTIONS_PER_SWEEP,jo as DEFAULT_NODE_MODULES_AGE_MS,fa as DEFAULT_RUN_DIRECTORIES_AGE_MS,ma as DEFAULT_TERMINAL_WORKTREES_AGE_MS,Ie as DEFAULT_WORKER_PROVIDER,Vo as DEFAULT_WORKTREES_AGE_MS,Up as DEFAULT_WSL_CRASH_DUMP_CRITICAL_BYTES,Mp as DEFAULT_WSL_CRASH_DUMP_WARN_BYTES,Op as DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES,Jr as DEFAULT_WSL_HOST_MOUNT,Ip as DEFAULT_WSL_HOST_WARN_FREE_BYTES,st as EMBEDDED_INSTRUCTION_BUNDLE,Jm as EMBEDDED_INSTRUCTION_BUNDLE_VERSION,hp as FORBIDDEN_WORKER_ENV_KEYS,ca as HARNESS_BUILD_CACHE_RELATIVE_PATHS,os as HEAVY_VERIFICATION_TOKEN_REQUIRED,gi as HERMES_OPENAI_CODEX_DEFAULT_MODEL,oh as INSTRUCTION_BUNDLE_REFRESH_TTL_MS,bl as MEMORY_COST_MANAGED_PACKAGES,vl as MEMORY_COST_PACKAGE_MIN_VERSIONS,Gn as MemoryCostPackageVersionGuardError,Ru as OPENAI_CODEX_PROVIDER,Mx as ORCHESTRATION_ACTION_KINDS,Ux as ORCHESTRATION_POLICY_DECISIONS,vu as ORCHESTRATION_POLICY_MODES,Kn as PACKAGE_VERSION,rh as PINNED_INSTRUCTION_BUNDLE_PUBLIC_KEYS,bn as RUN_METADATA_ACTIVE_SIGNAL_MS,Sh as TERMINAL_WORKER_ARCHIVE_AGE_MS,Ox as TRANSIENT_OPENAI_CODEX_ERROR_CLASSES,si as WORKER_PERSONA_CATALOG,Jx as applyProductionDatabaseToProcess,ia as archiveTerminalWorkerMetadata,wl as assertMemoryCostPackageVersionGuard,as as assessAutoCompleteEligibility,xt as assessBuildAdmission,Xr as assessExitedWorkerSalvage,Bn as assessHeavyVerificationGate,ed as assessOrphanWorktreeSafety,Uc as assessPrHandoffRequirement,Qr as assessWorkerLanding,Hl as assessWorkerLandingContract,jv as auditWorkerEnv,ft as autoCompleteWorker,Jc as autoCompleteWorkerCli,Mo as buildBoxResourceSnapshotFromGate,bf as buildCodexExecArgv,Qg as buildDispatchTaskText,Su as buildForegroundHarnessIdempotencyKey,kf as buildHermesOpenAiCodexChatArgv,_l as buildMemoryCostPackageGuardInput,gc as buildOrchestrationProviderInventory,Ec as buildPrompt,Cn as buildRunListRows,js as buildSystemdRunArgv,Xi as canonicalJsonStringify,Rr as canonicalWorkerDir,Ga as classifyHeavyShellCommand,tm as classifyNpmAuditOutcome,ah as classifyOpenAiCodexError,uf as classifyOrchestrationRisk,Xp as classifyRepoSearchMeta,Ms as classifyShellCommandOutcome,Nt as classifyVercelUrl,Za as classifyWorkerHealth,Do as cleanupWslCrashDumps,vc as codexProvider,Tu as collectFilesystemLiveRunKeys,Pv as collectVercelEvidence,cf as compareProviderCandidates,Yn as compareSemver,Mi as completeWorker,gm as computeAttention,Rx as computeInstructionBundleVersion,D as computeWorkerStatus,ts as countActiveHeavyVerificationSlots,Fo as createRun,Ro as defaultBoxId,vx as deriveInstructionBundleKeyId,Qt as deriveRunStatus,Ds as diagnoseRepoSearchFailure,Gr as discoverDefaultRepo,yl as discoverDefaultRepoCandidates,jn as discoverDefaultRepoForPersistence,ra as discoverProductionDbEnvFilePaths,Wr as dispatchRun,Gi as drainPlanOutbox,ac as enforceCursorWorkerProvider,xl as enforceMemoryCostPackageGuardAtStartup,yu as ensureInstructionBundle,Ai as ensurePrReadyHandoff,mb as evaluateMemoryCostPackageGuardAtStartup,Cs as evaluateMemoryCostPackageVersionGuard,Hx as evaluateOrchestrationPolicy,rp as evidenceFromGitHubVercelStatus,mh as expandHomePath,Ji as extractPlanOutboxFromTask,Mc as extractPrUrlFromText,Dl as extractSearchMeta,em as extractSearchMetaFromToolLine,Xa as formatAutoCompleteOutcomeNotice,uh as formatCronJobDeliveryFailure,PR as formatHarnessToolReadable,gx as formatHeartbeatLine,ob as formatMemoryCostPackageGuardError,Hn as formatMonitorTickNotice,ch as formatOpenAiCodexFailureNotice,Yi as formatPlanOutboxHandoffBlock,Zp as formatRepoSearchGuidance,vn as formatResolvedDefaultRepo,Qa as formatWorkerCompleteNotice,is as formatWorkerStatusNotice,Ya as gateWorkerShellCommand,sC as getActiveInstructionBundle,fr as getActiveInstructionBundleSource,Nr as getActiveInstructionBundleVersion,qr as getHarnessPaths,el as getMonitorStatus,at as getOrchestrationProviderCapability,ii as getPersonaDefaultRoleLane,Qm as getPersonaDispatchLane,nc as getWorkerPersonaCatalogEntry,hl as gitRepoRoot,ge as harnessRunsDir,Hu as harnessStorageSnapshot,dr as harnessWorktreesDir,yn as hasNestedRunsSegment,gr as hashPlanBody,Rc as hermesCodexProvider,gu as instructionBundleCachePath,rt as isActiveHarnessWorker,Xe as isClaudeFamilyProvider,Ev as isDashboardVercelUrl,hx as isEngagementRequiredSkip,oe as isFinishedWorkerStatus,pl as isForbiddenWorkerEnvKey,Fu as isGeneratedHarnessPath,Au as isHarnessRunMetadataPath,_p as isHarnessWorktreeRepo,Wn as isHeavyVerificationGateSkipped,il as isInspectableVercelTarget,uC as isKnownWorkerPersonaSlug,wp as isKynverMonorepoRoot,et as isLandingBlockedWorkerStatus,bu as isOrchestrationEnforceTasksEnabled,nd as isPipelineCleanupEnabled,Ns as isRgExcludeScopeTarget,kn as isSignedInstructionBundleShape,Os as isSingleFileSearchTarget,tn as isSystemdRunAvailable,Tl as isTerminalHeartbeatPhase,Zd as isVercelStatusContext,xs as isWslHost,ER as joinHarnessNotice,Fl as landingContractAttentionReason,Od as listActiveHeavyVerificationSlots,kp as listForbiddenWorkerEnvKeys,ls as listMonitors,cc as listOrchestrationProviderCapabilities,ht as listOutboxItems,Lu as listRuns,Wu as listRunsCli,ku as loadInstructionBundleCache,y as loadUserConfig,Cv as main,Ba as mergeNodeOptionsForBuildCheck,Qp as metaToNormalizedRgCommand,df as normalizeCursorModelAlias,le as normalizeHarnessRoot,Ts as normalizeRepoSearchCommand,zp as normalizeRgArgv,Le as observeRunnerDiskGate,ur as observeWslCrashDumps,Al as observeWslHostDisk,Dx as orchestrationAuditForWorkerJson,ho as parseArgs,aS as parseClaudeStream,Ar as parseHarnessStream,ce as parseHeartbeat,Qi as parseRawEd25519Key,Lp as parseWslCrashDumpFilename,oa as persistDefaultRepo,du as persistExitedWorkerHandoffCapture,hn as persistPlan,ds as pickVercelStatusContext,Or as postJson,yC as preferCursorExecutor,mi as preflightClaudeModel,ct as preflightCodexModel,fi as preflightCursorModel,di as probeClaudeOAuthBinding,uc as probeCodexOAuthBinding,pi as probeCursorOAuthBinding,fc as probeHermesCliAdapter,yo as probeHermesOpenAiCodexBinding,$C as probeOrchestrationProviderBinding,Cl as probeRepoPackageVersions,pc as providerCapableForRisk,Bp as readKernelCorePattern,$t as readMemAvailableBytes,gh as readProductionDbKeysFromEnvFile,Hp as readWslConfigCrashDumpSettings,ns as reclaimStaleHeavyVerificationSlots,la as reconcileLocalOnlyMergedPrAttention,Uu as reconcileRunsCli,Sn as reconcileStaleWorkers,aa as reconcileWorkerMetadata,RE as reconcileWorkerMetadataCli,Fx as redactHarness,kr as redactProviderErrorText,Ln as releaseHeavyVerificationSlot,eE as remediateDefaultRepo,sa as repairMissingRunMetadata,Qx as repairNestedRunsPath,V as resolveBaseUrl,dw as resolveBoxKindFromEnv,oi as resolveBundlePersona,rC as resolveCallbackSecret,J as resolveCallbackSecretWithMint,Tr as resolveCodexOrchestrationAdapter,ko as resolveConfiguredWorkerProvider,je as resolveDefaultRepo,na as resolveDefaultRepoForPersistence,uu as resolveExitedWorkerFinalResult,fe as resolveHarnessRoot,Ah as resolveHarnessRunByName,Bu as resolveHarnessRunCli,Mn as resolveHeavyVerificationMaxConcurrent,mu as resolveInstructionBundlePublicKey,cn as resolveInstructionText,lh as resolveOpenAiCodexRetryBudget,Zi as resolveOrchestrationPolicyMode,kc as resolveOrchestrationRouting,it as resolvePolicyThreshold,hh as resolveProductionDatabaseUrl,Ti as resolveRunTargetArg,ep as resolveVercelInspectTarget,Eu as resolveWorkerJsonPath,Fe as resolveWorkerTargetArgs,Wp as resolveWslCrashDumpDir,Ol as resolveWslWindowsUsername,Ja as runBoundedBuildCheck,es as runDaemon,vt as runDirHasActiveRetentionSignals,_a as runHarnessCleanup,ss as runHarnessVerifyCommands,Ot as runMonitorTick,td as runPipelineHarnessCleanup,jc as runStatus,Bo as safeDatabaseUrlHint,dh as sanitizeOrchestrationAudit,hu as saveInstructionBundleCache,ue as saveUserConfig,yp as scrubClaudeEnv,We as scrubWorkerEnv,ui as selectCheapestCapableProvider,Sl as semverAtLeast,tc as setActiveInstructionBundle,cu as shouldAutoCleanupWslCrashDumps,El as shouldEnforceMemoryCostPackageGuardCli,qc as spawnCompletionSidecar,tl as spawnMonitorSidecar,Li as spawnWorkerProcess,Xc as startWorker,Gc as stopWorker,Wl as summarizeEvent,rm as summarizeNpmAuditReport,sm as summarizeShellToolCallEvent,Fp as summarizeWslCrashDumpRecoverySteps,Np as summarizeWslRecoverySteps,wn as sweepRun,Vc as tailWorker,li as taskAllowsClaudeWorker,ze as terminalFinalResultFromHeartbeat,Et as tryAcquireHeavyVerificationSlot,ec as tryResolveBaseUrl,ri as tryResolveCallbackSecretWithMint,sl as usage,s_ as validateOwnedPaths,Fc as validateRepo,Co as validateRunId,i_ as validateTailLines,ug as validateWorkerName,th as verifyInstructionBundleSignatureWithKey,fu as verifySignedInstructionBundle,Va as waitForHeavyVerificationSlot,Nu as workerDirHasActiveRetentionSignals,dC as workerPersonaLandingSlugs,oc as workerPersonaReviewSlugs,$c as workerStatus};