@kynver-app/runtime 0.1.172 → 0.2.1

package/dist/completion-response.d.ts

@@ -1,5 +1,5 @@
 /** Parsed outcome from POST /harness/completion (AgentOS handleHarnessWorkerCompletion). */
-export type HarnessCompletionRouteOutcome = "review_scheduled" | "review_already_scheduled" | "needs_attention" | "mirror_only" | "task_not_found" | "task_not_harness" | "skipped_terminal_task" | "closed" | "dispatched" | "dispatch_already_done" | "blocked" | "reviewer_no_parent" | "landing_no_parent";
+export type HarnessCompletionRouteOutcome = "review_scheduled" | "review_already_scheduled" | "needs_attention" | "mirror_only" | "task_not_found" | "task_not_harness" | "skipped_terminal_task" | "closed" | "dispatched" | "dispatch_already_done" | "steer_restart_required" | "blocked" | "reviewer_no_parent" | "landing_no_parent";
 export interface HarnessCompletionResponseSummary {
     routeOutcome: HarnessCompletionRouteOutcome | null;
     /** True when the board task should have moved into review (or already was). */

package/dist/config.d.ts

@@ -21,6 +21,8 @@ export interface KynverUserConfig {
     daemonSupervisionOwner?: "keeper" | "systemd";
     /** Physical box pool for capacity snapshots (`forge` | `ghost`). Set via `kynver setup --box-kind`. */
     boxKind?: "ghost" | "forge";
+    /** Stable runner id for lease attribution and cross-box dispatch guards. */
+    runnerId?: string;
     /** Stable physical box id for capacity snapshots, e.g. `forge:travelcase`. */
     boxId?: string;
     /**

package/dist/context-budget-receipt.d.ts

@@ -0,0 +1,96 @@
+/** Pure context-budget receipt schema — no AgentOS/app dependencies. */
+export declare const RUNTIME_CONTEXT_BUDGET_RECEIPT_SCHEMA_VERSION: "runtime-context-budget-receipt.v1";
+export declare const RUNTIME_CONTEXT_BUDGET_RECEIPT_V2_SCHEMA_VERSION: "runtime-context-budget-receipt.v2";
+export type RuntimeContextBudgetReceiptSchemaVersion = typeof RUNTIME_CONTEXT_BUDGET_RECEIPT_SCHEMA_VERSION | typeof RUNTIME_CONTEXT_BUDGET_RECEIPT_V2_SCHEMA_VERSION;
+export type ContextEnvelopeMode = "routine" | "review" | "ops" | "debug" | "handoff";
+export type ContextBudgetReceiptSurface = "chat_default" | "context_envelope" | "harness_worker" | "runtime_prompt" | "mcp_tool_context" | "agentos_handoff" | "operator_debug" | "full_expansion";
+export type RuntimeContextSection = "instruction_policy" | "persona" | "task_envelope" | "active_state" | "memory_preview" | "memory_quality" | "recent_failures" | "onboarding" | "structural";
+export type RuntimeContextRehydrationKind = "memory" | "task" | "plan" | "active_state" | "source";
+export interface RuntimeContextRehydrationRoute {
+    handle: string;
+    kind: RuntimeContextRehydrationKind;
+}
+export interface RuntimeContextSectionReceipt {
+    section: RuntimeContextSection;
+    chars: number;
+    estimatedTokens: number;
+    fingerprint?: string | null;
+    selectedSlugs?: string[];
+    omittedCount?: number;
+    duplicatesCollapsed?: number;
+    policyFingerprint?: string | null;
+    rehydrationRoutes?: RuntimeContextRehydrationRoute[];
+}
+export type RuntimeContextActiveStateLookupKind = "pr" | "branch" | "deploy" | "daemon" | "task" | "worker";
+export type RuntimeContextActiveStateLookupStatus = "used" | "missing" | "error";
+export interface RuntimeContextActiveStateLookup {
+    kind: RuntimeContextActiveStateLookupKind;
+    handle: string;
+    status: RuntimeContextActiveStateLookupStatus;
+}
+export interface UsefulContextCoverage {
+    requiredOperatingRuleSlugsPresent: string[];
+    requiredOperatingRuleDenominator: number;
+    activeTaskHandlePresent: boolean;
+    planHandlePresent: boolean;
+    selectedHandles: string[];
+    omittedHandles: string[];
+    expansionRoutes: string[];
+    memoryQualityTraceId?: string | null;
+}
+export interface RuntimeContextBudgetReceipt {
+    schemaVersion: typeof RUNTIME_CONTEXT_BUDGET_RECEIPT_SCHEMA_VERSION;
+    agentOsId: string;
+    taskId: string;
+    planId: string | null;
+    personaSlug: string | null;
+    mode: ContextEnvelopeMode;
+    generatedAt: string;
+    totalChars: number;
+    estimatedTokens: number;
+    duplicatesCollapsed: number;
+    omittedCount: number;
+    activeStateLookups: RuntimeContextActiveStateLookup[];
+    sections: RuntimeContextSectionReceipt[];
+}
+export interface RuntimeContextBudgetReceiptV2 extends Omit<RuntimeContextBudgetReceipt, "schemaVersion" | "agentOsId" | "taskId"> {
+    schemaVersion: typeof RUNTIME_CONTEXT_BUDGET_RECEIPT_V2_SCHEMA_VERSION;
+    surface: ContextBudgetReceiptSurface;
+    agentOsId: string | null;
+    taskId: string | null;
+    finalSerializedChars: number;
+    finalSerializedTokens: number;
+    usefulContextCoverage: UsefulContextCoverage;
+    budgetSatisfied: boolean;
+    overBudgetReason: string | null;
+}
+/** Deterministic chars → token estimate (4 UTF-16 code units per token, ceiling). */
+export declare function estimateTokensFromChars(chars: number): number;
+export declare function sectionReceiptFromMarkdown(section: RuntimeContextSection, markdown: string | null | undefined, extras?: Partial<Pick<RuntimeContextSectionReceipt, "fingerprint" | "selectedSlugs" | "omittedCount" | "duplicatesCollapsed" | "policyFingerprint" | "rehydrationRoutes">>): RuntimeContextSectionReceipt;
+export declare function finalizeReceiptTotals(sections: RuntimeContextSectionReceipt[], overrides?: {
+    duplicatesCollapsed?: number;
+    omittedCount?: number;
+}): Pick<RuntimeContextBudgetReceipt, "totalChars" | "estimatedTokens" | "duplicatesCollapsed" | "omittedCount">;
+export interface BuildContextBudgetReceiptV2Input {
+    surface: ContextBudgetReceiptSurface;
+    agentOsId?: string | null;
+    taskId?: string | null;
+    planId?: string | null;
+    personaSlug?: string | null;
+    mode: ContextEnvelopeMode;
+    generatedAt: string;
+    finalSerializedChars: number;
+    sections: RuntimeContextSectionReceipt[];
+    usefulContextCoverage: UsefulContextCoverage;
+    activeStateLookups?: RuntimeContextActiveStateLookup[];
+    duplicatesCollapsed?: number;
+    omittedCount?: number;
+    budgetSatisfied?: boolean;
+    overBudgetReason?: string | null;
+}
+export declare function buildContextBudgetReceiptV2(input: BuildContextBudgetReceiptV2Input): RuntimeContextBudgetReceiptV2;
+export declare function upgradeReceiptToV2(v1: RuntimeContextBudgetReceipt, input: Omit<BuildContextBudgetReceiptV2Input, "sections" | "mode" | "generatedAt"> & {
+    mode?: ContextEnvelopeMode;
+    generatedAt?: string;
+}): RuntimeContextBudgetReceiptV2;
+export declare function isRuntimeContextBudgetReceiptV2(receipt: RuntimeContextBudgetReceipt | RuntimeContextBudgetReceiptV2): receipt is RuntimeContextBudgetReceiptV2;

package/dist/daemon-heartbeat.d.ts

@@ -1,3 +1,4 @@
+import { type RuntimeIdentityV1 } from "./runtime-identity.js";
 export interface DaemonHeartbeat {
     observedAt: string;
     pid: number;
@@ -5,6 +6,12 @@ export interface DaemonHeartbeat {
     agentOsId: string;
     /** Active server-delivered instruction bundle version (M6); additive. */
     instructionBundleVersion?: string;
+    /**
+     * Versioned runtime identity (Node 24 migration N2b); additive. Absent on
+     * pre-N2b payloads — consumers MUST map absence to `unknown`, never
+     * `compatible`.
+     */
+    runtimeIdentity?: RuntimeIdentityV1;
 }
 export declare function daemonHeartbeatPath(agentOsId: string): string;
 /** Best-effort atomic write (temp + rename). Never throws. */

package/dist/daemon-supervision/index.d.ts

@@ -3,3 +3,4 @@ export { buildDaemonSupervisionPolicy, defaultSupervisionOwner, formatSupervisio
 export { applyDaemonSupervisionSetup, defaultSystemdUserUnitPath, isSystemdSupervisionInstalled, supervisionOwnerForDoctor, type DaemonSupervisionSetupResult, } from "./setup.js";
 export { ensureDaemonSupervisionForStart, formatSystemdDelegationGuidance, shouldDelegateStartToSystemd, summarizeSupervisionForStart, type EnsureDaemonSupervisionInput, type EnsureDaemonSupervisionResult, } from "./start.js";
 export { assessDaemonSupervisionChecks, type AssessDaemonSupervisionOptions, type DaemonSupervisionVerifyCheck, } from "./verify.js";
+export { assessSupervisionHealth, type SupervisionHealth } from "./supervision-health.js";

package/dist/daemon-supervision/setup.d.ts

@@ -8,7 +8,16 @@ export interface DaemonSupervisionSetupResult {
     envChanged: boolean;
     configUpdated: boolean;
 }
+export interface DaemonSupervisionPersistIdentity {
+    agentOsId: string;
+    runId: string;
+}
+export interface DaemonSupervisionConfigIdentity extends DaemonSupervisionPersistIdentity {
+    owner: DaemonSupervisionOwner;
+}
+/** Partial ~/.kynver/config.json updates for restart/watchdog supervision identity. */
+export declare function buildDaemonSupervisionConfigUpdates(config: KynverUserConfig, identity: DaemonSupervisionConfigIdentity): Partial<KynverUserConfig>;
 export declare function defaultSystemdUserUnitPath(): string;
 export declare function isSystemdSupervisionInstalled(): boolean;
-export declare function applyDaemonSupervisionSetup(config: KynverUserConfig, args?: Record<string, string | boolean>, hostKind?: SupportedHostKind): DaemonSupervisionSetupResult;
+export declare function applyDaemonSupervisionSetup(config: KynverUserConfig, args?: Record<string, string | boolean>, hostKind?: SupportedHostKind, identity?: DaemonSupervisionPersistIdentity): DaemonSupervisionSetupResult;
 export declare function supervisionOwnerForDoctor(config: KynverUserConfig, hostKind: SupportedHostKind): DaemonSupervisionOwner;

package/dist/daemon-supervision/supervision-health.d.ts

@@ -0,0 +1,20 @@
+import type { KynverUserConfig } from "../config.js";
+import type { DaemonSupervisionOwner } from "./policy.js";
+export interface SupervisionHealthOptions {
+    envFilePath?: string;
+    /** Injectable for tests. */
+    systemdUnitActive?: () => boolean;
+}
+export interface SupervisionHealth {
+    owner: DaemonSupervisionOwner | null;
+    daemonPresentSignal: boolean;
+    systemdUnitInstalled: boolean;
+    systemdUnitActive: boolean;
+    /** True when restart policy is persisted or inferable from a healthy supervised daemon. */
+    effectivelyConfigured: boolean;
+}
+/**
+ * Infer whether a keeper/systemd-owned daemon is already healthy on this host,
+ * so doctor checks avoid stale warnings on upgraded installs.
+ */
+export declare function assessSupervisionHealth(config: KynverUserConfig, options?: SupervisionHealthOptions): SupervisionHealth;

package/dist/daemon-supervision/verify.d.ts

@@ -2,6 +2,7 @@ import type { KynverUserConfig } from "../config.js";
 export interface AssessDaemonSupervisionOptions {
     /** Override for tests; defaults to ~/.kynver/.env */
     envFilePath?: string;
+    systemdUnitActive?: () => boolean;
 }
 export interface DaemonSupervisionVerifyCheck {
     id: string;

package/dist/dispatch-model-guard.d.ts

@@ -0,0 +1,26 @@
+import type { ModelRoutingDecision } from "./model-routing.js";
+export interface DispatchModelGuardInput {
+    task?: Record<string, unknown> | null;
+    routing: ModelRoutingDecision;
+    explicitProvider?: string | null;
+    explicitModel?: string | null;
+}
+export interface DispatchModelGuardResult {
+    ok: boolean;
+    error?: string;
+    requested?: {
+        provider?: string;
+        model?: string;
+        source: string;
+    };
+    resolved?: {
+        provider: string;
+        model?: string;
+        rule: string;
+    };
+}
+/**
+ * Block spawn when the board row (or CLI) requested a non-Cursor provider/model
+ * but routing resolved to Cursor — silent downgrade is worse than an explicit skip.
+ */
+export declare function assessDispatchModelGuard(input: DispatchModelGuardInput): DispatchModelGuardResult;

package/dist/dispatch-resource-gate.d.ts

@@ -0,0 +1,20 @@
+import { type WorkspaceRuntimePreferences } from "./workspace-runtime-config.js";
+import { type ObserveResourceGateInput, type RunnerResourceGateShape } from "./resource-gate.js";
+interface DispatchResourceGateDependencies {
+    fetchPreferences: (agentOsId: string, args: Record<string, string | boolean>) => Promise<WorkspaceRuntimePreferences | null>;
+    configuredOverride: (preferences: WorkspaceRuntimePreferences | null | undefined, env?: NodeJS.ProcessEnv) => number | undefined;
+    observe: (input: ObserveResourceGateInput) => RunnerResourceGateShape;
+}
+/**
+ * Resolve interactive dispatch capacity from the same workspace preference as
+ * the keeper daemon. Local config/env/auto sizing remains the fallback when
+ * the workspace has no authoritative Ghost cap; Forge ignores the workspace
+ * override through configuredMaxWorkersOverrideForBox.
+ */
+export declare function observeInteractiveDispatchResourceGate(input: {
+    runId: string;
+    agentOsId: string;
+    args: Record<string, string | boolean>;
+    env?: NodeJS.ProcessEnv;
+}, dependencies?: DispatchResourceGateDependencies): Promise<RunnerResourceGateShape>;
+export {};

package/dist/doctor/context-envelope-cli.d.ts

@@ -0,0 +1 @@
+export declare function runContextEnvelopeDoctorCli(args: Record<string, string | boolean>): Promise<void>;

package/dist/doctor/context-envelope.d.ts

@@ -0,0 +1,13 @@
+import { type ContextEnvelopeDoctorProbes } from "./context-envelope.probes.js";
+import type { ContextEnvelopeDoctorReport } from "./context-envelope.types.js";
+/** Stable non-existent anchor for fail-closed probe — never a real row id. */
+export declare const CONTEXT_ENVELOPE_SMOKE_MISSING_ANCHOR_ID = "00000000-0000-4000-8000-000000000001";
+export interface AssessContextEnvelopeDoctorInput {
+    slug?: string;
+    agentOsId?: string;
+    baseUrl?: string;
+    taskId?: string;
+    apiKey?: string;
+}
+export declare function assessContextEnvelopeDoctor(input?: AssessContextEnvelopeDoctorInput, probes?: ContextEnvelopeDoctorProbes): Promise<ContextEnvelopeDoctorReport>;
+export declare function redactContextEnvelopeDoctorReport(report: ContextEnvelopeDoctorReport, secret?: string): ContextEnvelopeDoctorReport;

package/dist/doctor/context-envelope.probes.d.ts

@@ -0,0 +1,25 @@
+export interface HttpJsonResult {
+    ok: boolean;
+    status: number;
+    response: unknown;
+}
+export interface ContextEnvelopeDoctorProbeConfig {
+    slug: string;
+    agentOsId: string;
+    baseUrl: string;
+    apiKey?: string;
+    runnerSecret?: string;
+}
+export interface ContextEnvelopeDoctorProbes {
+    loadConfig(): {
+        slug: string;
+        agentOsId: string;
+        baseUrl: string;
+        apiKey?: string;
+    };
+    resolveRunnerSecret(agentOsId: string, baseUrl: string): Promise<string | null>;
+    fetchContextEnvelope(config: ContextEnvelopeDoctorProbeConfig, anchorType: string, anchorId: string): Promise<HttpJsonResult>;
+    fetchTasks(config: ContextEnvelopeDoctorProbeConfig, limit?: number): Promise<HttpJsonResult>;
+    fetchRetrieveTelemetryDiagnostic(config: ContextEnvelopeDoctorProbeConfig): Promise<HttpJsonResult>;
+}
+export declare function defaultContextEnvelopeDoctorProbes(): ContextEnvelopeDoctorProbes;

package/dist/doctor/context-envelope.types.d.ts

@@ -0,0 +1,42 @@
+import type { DoctorSection } from "./doctor.types.js";
+/** Redacted operator summary for a live context-envelope smoke probe. */
+export interface ContextEnvelopeSmokeSummary {
+    slug: string;
+    agentOsId: string;
+    taskId: string;
+    anchor: {
+        type: string;
+        id: string;
+        exists: boolean;
+        title: string | null;
+        status: string | null;
+    };
+    personaSlug: string | null;
+    memoryCount: number;
+    operatingRuleCount: number;
+    withinBudget: boolean;
+    projection: string | null;
+    mode: string | null;
+    contractVersion: string | null;
+    serializedBytes: number | null;
+}
+export interface ContextEnvelopeTelemetrySummary {
+    slug: string;
+    status: string;
+    summary: string;
+    eventCount: number | null;
+    retrieveCount: number | null;
+}
+export interface ContextEnvelopeDoctorReport {
+    command: "doctor context-envelope";
+    ready: boolean;
+    summary: string;
+    counts: {
+        pass: number;
+        warn: number;
+        fail: number;
+    };
+    sections: DoctorSection[];
+    envelopeSummary: ContextEnvelopeSmokeSummary | null;
+    telemetryDiagnostic: ContextEnvelopeTelemetrySummary | null;
+}

package/dist/doctor/github-readiness.d.ts

@@ -0,0 +1,16 @@
+import type { CommandProbeResult } from "./runtime-takeover.probes.js";
+export type GitHubReadinessSource = "env" | "gh-cli" | "missing";
+export interface GitHubReadinessProbe {
+    envGithubToken?: boolean;
+    envGhToken?: boolean;
+    ghAuthToken(): CommandProbeResult;
+}
+export interface GitHubReadinessResult {
+    viable: boolean;
+    source: GitHubReadinessSource;
+    summary: string;
+}
+/**
+ * Read-only GitHub auth probe for doctor checks. Never prints or persists tokens.
+ */
+export declare function probeGitHubReadiness(probe: GitHubReadinessProbe): GitHubReadinessResult;

package/dist/doctor/index.d.ts

@@ -2,3 +2,6 @@ export type { DoctorCheck, DoctorCheckStatus, DoctorSection, RuntimeTakeoverDoct
 export { assessRuntimeTakeoverReadiness, } from "./runtime-takeover.js";
 export { defaultRuntimeTakeoverProbes, type CommandProbeResult, type RuntimeTakeoverProbes, } from "./runtime-takeover.probes.js";
 export { runRuntimeTakeoverDoctorCli } from "./runtime-takeover-cli.js";
+export { assessContextEnvelopeDoctor, redactContextEnvelopeDoctorReport, CONTEXT_ENVELOPE_SMOKE_MISSING_ANCHOR_ID, } from "./context-envelope.js";
+export type { ContextEnvelopeDoctorReport, ContextEnvelopeSmokeSummary, ContextEnvelopeTelemetrySummary, } from "./context-envelope.types.js";
+export { runContextEnvelopeDoctorCli } from "./context-envelope-cli.js";

package/dist/doctor/node-runtime-cli.d.ts

@@ -0,0 +1,6 @@
+/**
+ * `kynver doctor node-runtime [--json]` — report-only in N2b: always exits 0
+ * so nothing can gate on it before the N2d guard swap; the verdict lives in
+ * the printed report.
+ */
+export declare function runNodeRuntimeDoctorCli(): void;

package/dist/doctor/node-runtime.d.ts

@@ -0,0 +1,19 @@
+import { type NodeRuntimePolicyVerdict } from "../node-runtime-policy.js";
+import type { RuntimeIdentityV1 } from "../runtime-identity.js";
+export interface NodeRuntimeDoctorReport {
+    command: "doctor node-runtime";
+    contractVersion: 1;
+    nodeVersion: string;
+    requiredRange: string;
+    status: NodeRuntimePolicyVerdict["status"];
+    remediation: string | null;
+    platform: NodeJS.Platform;
+    arch: string;
+    runtimePackageVersion: string;
+    buildIdentity: string | null;
+}
+export declare function buildNodeRuntimeDoctorReport(options?: {
+    nodeVersion?: string;
+    requiredRange?: string;
+    identity?: RuntimeIdentityV1;
+}): NodeRuntimeDoctorReport;

package/dist/doctor/runtime-takeover-deploy-evidence.d.ts

@@ -0,0 +1,9 @@
+import type { DoctorSection } from "./doctor.types.js";
+import { type GitHubReadinessProbe } from "./github-readiness.js";
+import type { RuntimeTakeoverProbes } from "./runtime-takeover.probes.js";
+/**
+ * Optional deploy-evidence checks for merge-gate / PR handoff workflows.
+ * Core runtime takeover does not require Vercel CLI or VERCEL_TOKEN when GitHub
+ * commit-status evidence is viable.
+ */
+export declare function assessDeployEvidence(probes: RuntimeTakeoverProbes, githubProbe: GitHubReadinessProbe): DoctorSection;

package/dist/doctor/runtime-takeover.probes.d.ts

@@ -36,5 +36,10 @@ export interface RuntimeTakeoverProbes {
     legacyOpenclawHarnessRoot(): string;
     pathExists(target: string): boolean;
     pathWritable(target: string): boolean;
+    ghAuthToken(): CommandProbeResult;
+    /** When false, GitHub/Vercel deploy-evidence checks are advisory-only skips. */
+    deployEvidenceNeedsGithub?(): boolean;
+    /** Injectable systemd active probe for supervision checks. */
+    systemdDaemonActive?(): boolean;
 }
 export declare const defaultRuntimeTakeoverProbes: RuntimeTakeoverProbes;

package/dist/executor-ref-routing.d.ts

@@ -0,0 +1,14 @@
+/** Parse provider/model intent encoded in board `executorRef` strings. */
+export interface ExecutorRefRoutingIntent {
+    provider?: string;
+    model?: string;
+    lane?: string;
+    rule: string;
+}
+/**
+ * Best-effort decode of model/provider intent from task executorRef.
+ * Supports `harness-lane:{lane}:{model}` and `provider:{name}[:{model}]`.
+ */
+export declare function parseExecutorRefRoutingIntent(executorRef: string | null | undefined): ExecutorRefRoutingIntent | null;
+/** True when executorRef encodes a non-Cursor worker provider/model request. */
+export declare function executorRefRequestsNonCursorWorker(executorRef: string | null | undefined): boolean;

package/dist/factory-steer-delivery.d.ts

@@ -0,0 +1,7 @@
+import type { HarnessWorkerRecord } from "./status.js";
+export declare function pollAndInterruptForHarnessSteers(input: {
+    runId: string;
+    worker: HarnessWorkerRecord;
+    baseUrl: string;
+    secret: string;
+}): Promise<boolean>;

package/dist/index.d.ts

@@ -19,7 +19,8 @@ export { isEngagementRequiredSkip } from "./fortress-engagement-gate.js";
 export { assessWorkerLandingContract, landingContractAttentionReason, type WorkerLandingContract, type WorkerLandingContractVerdict, type TargetPrReconciliation, } from "./landing-contract-gate.js";
 export { assessExitedWorkerSalvage, type ExitedSalvageAssessment, type ExitedSalvageKind, } from "./exited-salvage.js";
 export { persistExitedWorkerHandoffCapture, resolveExitedWorkerFinalResult, type ExitedHandoffCapture, type ExitedHandoffCaptureSource, } from "./exited-worker-handoff-capture.js";
-export { buildPrompt } from "./prompt.js";
+export { buildPrompt, buildPromptWithReceipt, RUNTIME_PROMPT_ENFORCEMENT, type BuildPromptInput, } from "./prompt.js";
+export { RUNTIME_CONTEXT_BUDGET_RECEIPT_SCHEMA_VERSION, RUNTIME_CONTEXT_BUDGET_RECEIPT_V2_SCHEMA_VERSION, buildContextBudgetReceiptV2, estimateTokensFromChars, finalizeReceiptTotals, isRuntimeContextBudgetReceiptV2, sectionReceiptFromMarkdown, upgradeReceiptToV2, type BuildContextBudgetReceiptV2Input, type ContextBudgetReceiptSurface, type ContextEnvelopeMode, type RuntimeContextActiveStateLookup, type RuntimeContextActiveStateLookupKind, type RuntimeContextActiveStateLookupStatus, type RuntimeContextBudgetReceipt, type RuntimeContextBudgetReceiptSchemaVersion, type RuntimeContextBudgetReceiptV2, type RuntimeContextRehydrationKind, type RuntimeContextRehydrationRoute, type RuntimeContextSection, type RuntimeContextSectionReceipt, type UsefulContextCoverage, } from "./context-budget-receipt.js";
 export { canonicalJsonStringify, computeInstructionBundleVersion, deriveInstructionBundleKeyId, parseRawEd25519Key, isSignedInstructionBundleShape, PINNED_INSTRUCTION_BUNDLE_PUBLIC_KEYS, resolveInstructionBundlePublicKey, verifyInstructionBundleSignatureWithKey, verifySignedInstructionBundle, EMBEDDED_INSTRUCTION_BUNDLE, EMBEDDED_INSTRUCTION_BUNDLE_VERSION, getActiveInstructionBundle, getActiveInstructionBundleSource, getActiveInstructionBundleVersion, setActiveInstructionBundle, resolveInstructionText, resolvePolicyThreshold, resolveBundlePersona, ensureInstructionBundle, instructionBundleCachePath, loadInstructionBundleCache, saveInstructionBundleCache, INSTRUCTION_BUNDLE_REFRESH_TTL_MS, type InstructionBundle, type InstructionBundleContent, type InstructionBundlePersona, type SignedInstructionBundle, type InstructionBundleSource, type InstructionBundleVerifyResult, type EnsureInstructionBundleOptions, type EnsureInstructionBundleResult, } from "./instruction-bundle/index.js";
 export { WORKER_PERSONA_CATALOG, getWorkerPersonaCatalogEntry, getPersonaDispatchLane, getPersonaDefaultRoleLane, isKnownWorkerPersonaSlug, workerPersonaReviewSlugs, workerPersonaLandingSlugs, type WorkerPersonaCatalogEntry, type WorkerPersonaCatalogSlug, type WorkerPersonaDispatchLane, type WorkerPersonaDefaultRoleLane, } from "./worker-persona-catalog.js";
 export { assessPrHandoffRequirement, ensurePrReadyHandoff, extractPrUrlFromText, } from "./pr-handoff/index.js";
@@ -31,8 +32,13 @@ export * from "./cron/hermes-provider-notice.js";
 export { buildOrchestrationProviderInventory, classifyOrchestrationRisk, compareProviderCandidates, getOrchestrationProviderCapability, listOrchestrationProviderCapabilities, probeClaudeOAuthBinding, probeCodexOAuthBinding, probeCursorOAuthBinding, probeHermesCliAdapter, probeHermesOpenAiCodexBinding, probeOrchestrationProviderBinding, providerCapableForRisk, resolveCodexOrchestrationAdapter, resolveOrchestrationRouting, selectCheapestCapableProvider, sanitizeOrchestrationAudit, orchestrationAuditForWorkerJson, getAdapterContextContract, listAdapterContextContracts, type AdapterContextCapability, type AdapterContextContract, type AdapterContextContractId, type CodexOrchestrationAdapterStatus, type CodexOrchestrationPath, type HermesCliAdapterStatus, type HermesOpenAiCodexBindingStatus, type OrchestrationAuthSource, type OrchestrationCloudApiCredits, type OrchestrationCostTier, type OrchestrationProviderBindingStatus, type OrchestrationProviderCapability, type OrchestrationProviderId, type OrchestrationProviderInventory, type OrchestrationRiskClass, type OrchestrationRoutingAudit, type OrchestrationRoutingDecision, } from "./orchestration-providers/index.js";
 export { ORCHESTRATION_POLICY_MODES, ORCHESTRATION_ACTION_KINDS, ORCHESTRATION_POLICY_DECISIONS, resolveOrchestrationPolicyMode, isOrchestrationEnforceTasksEnabled, buildForegroundHarnessIdempotencyKey, evaluateOrchestrationPolicy, type OrchestrationPolicyMode, type OrchestrationActionKind, type OrchestrationPolicyDecision, type OrchestrationPolicyEvaluateInput, type OrchestrationPolicyEvaluateResult, } from "./orchestration-enforcement/index.js";
 export { DEFAULT_WORKER_PROVIDER, enforceCursorWorkerProvider, isClaudeFamilyProvider, preferCursorExecutor, resolveConfiguredWorkerProvider, taskAllowsClaudeWorker, type EnforceCursorWorkerProviderInput, } from "./worker-provider-policy.js";
+export { parseExecutorRefRoutingIntent, executorRefRequestsNonCursorWorker, type ExecutorRefRoutingIntent, } from "./executor-ref-routing.js";
+export { assessDispatchModelGuard, type DispatchModelGuardInput, type DispatchModelGuardResult, } from "./dispatch-model-guard.js";
+export { GLOBAL_DEFAULT_MODEL, CURSOR_DEFAULT_MODEL, inferModelRoutingFromTask, resolveGlobalDefaultModel, resolveModelFallback, resolveWorkerLaunch, type ModelRoutingDecision, } from "./model-routing.js";
 export { redactHarness } from "./redact.js";
 export { scrubWorkerEnv, scrubClaudeEnv, auditWorkerEnv, listForbiddenWorkerEnvKeys, isForbiddenWorkerEnvKey, FORBIDDEN_WORKER_ENV_KEYS, type WorkerEnvAudit, } from "./worker-env.js";
+export { KYNVER_NO_PROD_DB_CREDENTIALS_ENV, REVIEW_WORKER_EXTRA_FORBIDDEN_ENV_KEYS, ProductionDatabaseCredentialBlockedError, assertProductionDatabaseResolutionAllowed, auditReviewWorkerCredentialScope, buildWorkerSpawnEnv, isNoProdCredentialReviewEnvironment, type BuildWorkerSpawnEnvOptions, type ReviewWorkerCredentialScopeAudit, } from "./security-review-environment.js";
+export { isHarnessExpertReviewWorker } from "./harness-expert-review.js";
 export { discoverProductionDbEnvFilePaths, expandHomePath } from "./db-credential-env-paths.js";
 export { applyProductionDatabaseToProcess, readProductionDbKeysFromEnvFile, resolveProductionDatabaseUrl, type DbCredentialResolution, type DbCredentialFailure, type DbCredentialSource, type ResolveProductionDatabaseResult, type ResolveProductionDatabaseOptions, } from "./db-credential-resolver.js";
 export { safeDatabaseUrlHint } from "./db-url-hint.js";
@@ -71,3 +77,7 @@ export { persistPlan, drainPlanOutbox, listOutboxItems, formatPlanOutboxHandoffB
 export { classifyVercelUrl, collectVercelEvidence, evidenceFromGitHubVercelStatus, isDashboardVercelUrl, isInspectableVercelTarget, isVercelStatusContext, pickVercelStatusContext, resolveVercelInspectTarget, type CollectVercelEvidenceInput, type GitHubCommitStatusRow, type VercelEvidenceResult, type VercelEvidenceStatus, } from "./vercel/index.js";
 export { validateJobEnvelope, type LocalCodexJobEnvelope, type LocalCodexJobToolPolicy, type JobEnvelopeValidationError, type JobEnvelopeValidationResult, } from "./byoc/job-envelope.js";
 export { verifyLocalCodexGoldenPath, formatGoldenPathFailureNotice, type GoldenPathCheckCode, type GoldenPathAuditEvidence, type GoldenPathOptions, type GoldenPathResult, } from "./byoc/m6-golden-path.js";
+export { AGENT_RUNTIME_ENVELOPE_SCHEMA_VERSION, AGENT_RUNTIME_ENVELOPE_SCHEMA_VERSION_V2, AGENT_RUNTIME_ENVELOPE_SCHEMA_VERSIONS, isAgentRuntimeEnvelopeSchemaVersion, resolveRuntimeEnvelopeWriterConfig, runtimeEnvelopeV2Enabled, type AgentRuntimeEnvelopeSchemaVersion, type RuntimeEnvelopeFlagSource, type RuntimeEnvelopeWriterConfig, } from "./runtime-memory-envelope.js";
+export { evaluateNodeRuntimePolicy, KYNVER_NODE_PATCH_FLOOR, PUBLISHED_NODE_RANGE, PRIVATE_ROOT_NODE_RANGE, type NodeRuntimePolicyStatus, type NodeRuntimePolicyVerdict, } from "./node-runtime-policy.js";
+export { buildRuntimeIdentity, type RuntimeIdentityV1 } from "./runtime-identity.js";
+export { buildNodeRuntimeDoctorReport, type NodeRuntimeDoctorReport } from "./doctor/node-runtime.js";