@kynver-app/runtime 0.1.172 → 0.2.1

package/dist/server/monitor.js

@@ -1,8 +1,8 @@
-var u=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(n){throw t=[n],n}};function N(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function ee(e){let r=e.trim();if(!r)return null;let t=N(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let l=N(s[1]??"");l&&n.push(l)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let l=N(r.slice(i,a+1));l&&n.push(l)}return n.length>0?n[n.length-1]:null}function re(e){let r=e.finalResult??e.final_result;if(r!=null)return typeof r=="string"?ee(r)??(r.trim()||null):r;let t=typeof e.summary=="string"?e.summary.trim():"";if(!t)return null;let n=ee(t);return n||t}var te=u(()=>{"use strict"});import{existsSync as fr,mkdirSync as Wt,readFileSync as pr,readdirSync as It,statSync as ne,writeFileSync as Ut}from"node:fs";function oe(e){console.error(e),process.exit(1)}function D(e){return process.platform!=="win32"?e:{windowsHide:!0,...e}}function E(e){try{return JSON.parse(e)}catch{return null}}function C(e){try{return ne(e).size}catch{return 0}}function A(e){try{return ne(e).mtime.toISOString()}catch{return null}}function se(e,r){return fr(e)?pr(e,"utf8").split(`
+var u=(e,r,n)=>()=>{if(n)throw n[0];try{return e&&(r=e(e=0)),r}catch(t){throw n=[t],t}};function L(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let n=JSON.parse(r);if(n&&typeof n=="object"&&!Array.isArray(n))return n}catch{return null}return null}function le(e){let r=e.trim();if(!r)return null;let n=L(r);if(n)return n;let t=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let l=L(s[1]??"");l&&t.push(l)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let l=L(r.slice(i,a+1));l&&t.push(l)}return t.length>0?t[t.length-1]:null}function ue(e){let r=e.finalResult??e.final_result;if(r!=null)return typeof r=="string"?le(r)??(r.trim()||null):r;let n=typeof e.summary=="string"?e.summary.trim():"";if(!n)return null;let t=le(n);return t||n}var ce=u(()=>{"use strict"});import{existsSync as Er,mkdirSync as zn,readFileSync as Cr,readdirSync as Jn,statSync as de,writeFileSync as qn}from"node:fs";function me(e){console.error(e),process.exit(1)}function $(e){return process.platform!=="win32"?e:{windowsHide:!0,...e}}function A(e){try{return JSON.parse(e)}catch{return null}}function O(e){try{return de(e).size}catch{return 0}}function w(e){try{return de(e).mtime.toISOString()}catch{return null}}function fe(e,r){return Er(e)?Cr(e,"utf8").split(`
 `).slice(-r).join(`
-`):""}function w(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}function ie(e){let r=null,t=-1/0;for(let n of e){if(!n)continue;let o=Date.parse(n);Number.isFinite(o)&&o>t&&(t=o,r=n)}return r}function K(e){return Math.max(0,Math.round((Date.now()-e)/1e3))}var p=u(()=>{"use strict"});import{existsSync as gr,readFileSync as hr}from"node:fs";function ae(e){return e==="complete"}function le(e){return ae(e.lastHeartbeatPhase)?e.terminalFinalResult!==void 0&&e.terminalFinalResult!==null?e.terminalFinalResult:e.lastHeartbeatSummary?.trim()||"completed":null}function ue(e){let r={heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,terminalFinalResult:null,heartbeatBlocker:null,timestampAnomalies:[],lastBoxResourceSnapshot:null,lastPrEvidence:[]};if(!gr(e))return r;let t=Date.now()+yr,n=new Date(t).toISOString(),o=hr(e,"utf8").split(`
-`).filter(Boolean);for(let s of o){let i=E(s);if(!i||typeof i!="object"||Array.isArray(i))continue;let a=i;if(r.heartbeatCount++,a.ts){let l=String(a.ts),m=Date.parse(l);Number.isFinite(m)&&m>t?r.timestampAnomalies.push({kind:"future_heartbeat_timestamp",observedAt:l,clampedTo:n}):r.lastHeartbeatAt=l}a.phase!==void 0&&a.phase!==null&&(r.lastHeartbeatPhase=String(a.phase)),a.summary!==void 0&&a.summary!==null&&(r.lastHeartbeatSummary=String(a.summary)),ae(r.lastHeartbeatPhase)&&(r.terminalFinalResult=re(a)),r.heartbeatBlocker=a.blocker?String(a.blocker):null,a.boxResourceSnapshot&&typeof a.boxResourceSnapshot=="object"&&!Array.isArray(a.boxResourceSnapshot)&&(r.lastBoxResourceSnapshot=a.boxResourceSnapshot),Array.isArray(a.prEvidence)&&(r.lastPrEvidence=a.prEvidence.filter(l=>!!l&&typeof l=="object"&&typeof l.prUrl=="string"))}return r}var yr,ce=u(()=>{"use strict";te();p();yr=6e4});function kr(e){return e?(e.split("/").pop()??e).replace(/\.exe$/i,"").toLowerCase():null}function Rr(e){if(!e)return[];let r=[],t="",n,o=!1;for(let s of e){if(o){t+=s,o=!1;continue}if(s==="\\"){o=!0;continue}if(n){s===n?n=void 0:t+=s;continue}if(s==='"'||s==="'"){n=s;continue}if(/\s/.test(s)){t&&(r.push(t),t="");continue}t+=s}return t&&r.push(t),r}function xr(e){let r=kr(e[0]);return!!(r&&br.has(r))}function M(e){return!e||e.includes("/")||e.includes("*")?!1:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(e)}function F(e){if(!e)return!1;let r=e.trim();return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")}function Sr(e){if(!e.startsWith("--glob="))return e;let r=e.slice(7);return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")?`--glob=${r}/**`:e}function _r(e){let r=[];for(let t=1;t<e.length;t+=1){let n=e[t];if(n){if(n==="--"){r.push(...e.slice(t+1));break}if(n.startsWith("-")){if(n.includes("="))continue;de.has(n)&&(t+=1);continue}r.push(n)}}return r}function vr(e){let r=!1,t=e.map((o,s)=>{let i=Sr(o),a=e[s-1];return a&&de.has(a)&&o.startsWith("!")&&!o.includes("/")&&!o.endsWith("/**")&&(i=`${o}/**`),i!==o&&(r=!0),i}),n=_r(t);if(n.length===2){let[o,s]=n;if(F(s))return{argv:[t[0]??"rg",o,"-g",`${s}/**`,"."],changed:!0};if(M(s))return{argv:[t[0]??"rg","-g",s,o,"."],changed:!0}}return r&&n.length===1?{argv:[...t,"."],changed:!0}:{argv:t,changed:r}}function H(e){let r=e.trim();if(!r)return{command:r,changed:!1};let t=r.includes("&&")?" && ":r.includes("||")?" || ":"; ",n=r.split(/\s*(?:&&|\|\||;)\s*/u),o=!1,s=n.map(i=>{let a=Rr(i.trim());if(!a.length||!xr(a))return i;let l=vr(a);return l.changed?(o=!0,l.argv.join(" ")):i});return o?{command:s.join(t),changed:!0}:{command:r,changed:!1}}function me(e){if(!e)return{};let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(|$)/iu);if(r)return{pattern:r[1],target:r[2]?.trim()};let t=e.match(/^search\s+"(.+)"\s+in\s+(.+)$/iu);return t?{pattern:t[1],target:t[2]?.trim()}:{}}function Er(e){let{pattern:r,target:t}=me(e);return r?F(t)?{kind:"rg_exclude_syntax",pattern:r,target:t}:M(t)?{kind:"bad_scope",pattern:r,target:t}:{kind:"not_repo_search",pattern:r,target:t}:{kind:"not_repo_search"}}function Cr(e){let{pattern:r,target:t}=me(e);if(!r)return null;if(F(t)){let n=`${t.trim()}/**`;return{command:`rg "${r}" -g '${n}' .`,changed:!0}}return t&&M(t)?{command:`rg -g ${t} "${r}" .`,changed:!0}:null}function Ar(e){if(e.kind==="bad_scope"&&e.pattern?.includes("agent-os-land-pr")&&e.target==="package.json")return"Search package.json with a glob from the repo root: `rg -g package.json agent-os-land-pr .` \u2014 or run `node scripts/agent-os-land-pr.mjs <pr-url>` directly.";if(e.kind==="bad_scope"&&e.pattern&&e.target)return`Use \`rg -g '${e.target}' ${e.pattern} .\` from the repo root instead of treating ${e.target} as a folder.`;if(e.kind==="rg_exclude_syntax"&&e.pattern){let r=e.target?`${e.target.trim()}/**`:"!node_modules/**";return`Repo search scope \`${e.target??"!node_modules"}\` is not a valid ripgrep path. Use \`rg "${e.pattern}" -g '${r}' .\` from the repo root (exclude globs need a \`/**\` suffix).`}return e.kind==="no_matches"&&e.pattern?`No matches for "${e.pattern}". Try a broader pattern, drop overly short tokens, or search from the repo root with \`rg "${e.pattern}" .\`.`:null}function wr(e){let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(agent\)|\s*failed|$)/iu);return r?`search "${r[1]}" in ${r[2]?.trim()}`:null}function $(e){let r=e.meta?.trim()||(e.command?wr(e.command):null)||null;if(r){let t=Er(r),n=Ar(t);if(n)return n;let o=Cr(r);if(o?.changed)return`Repo search used an invalid scope. Retry with: \`${o.command}\`.`}if(e.command&&/\b(rg|ripgrep)\b/i.test(e.command)){let t=H(e.command);if(t.changed)return`Ripgrep scope may be invalid. Retry with: \`${t.command}\`.`;if(e.exitCode===1)return"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root."}return null}var br,de,fe=u(()=>{"use strict";br=new Set(["rg","ripgrep","grep"]),de=new Set(["-e","--regexp","-f","--file","-m","--max-count","-A","--after-context","-B","--before-context","-C","--context","-g","--glob","--iglob"])});function R(e,r=200){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function Ir(e){let r=e.trim();if(!r)return null;if(r.startsWith("{"))try{return JSON.parse(r)}catch{}let t=r.indexOf("{"),n=r.lastIndexOf("}");if(t>=0&&n>t)try{return JSON.parse(r.slice(t,n+1))}catch{return null}return null}function x(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function Ur(e){let r=e.metadata;if(!x(r))return null;let t=r.vulnerabilities;if(!x(t))return null;let n=s=>typeof t[s]=="number"?t[s]:0,o={info:n("info"),low:n("low"),moderate:n("moderate"),high:n("high"),critical:n("critical"),total:n("total")};return typeof t.total!="number"&&!o.critical&&!o.high&&!o.moderate&&!o.low&&!o.info?null:o}function Tr(e){let r=[];e.critical&&r.push(`${e.critical} critical`),e.high&&r.push(`${e.high} high`),e.moderate&&r.push(`${e.moderate} moderate`),e.low&&r.push(`${e.low} low`),e.info&&r.push(`${e.info} info`);let t=r.length?r.join(", "):"see report";return`npm audit: ${e.total} vulnerabilit${e.total===1?"y":"ies"} (${t}) \u2014 remediation required`}function Br(e,r){let t=e.error;if(x(t)){let s=typeof t.summary=="string"?t.summary.trim():"",i=typeof t.code=="string"?t.code.trim():"";if(s)return i?`${i}: ${s}`:s;if(i)return i}let n=typeof e.message=="string"?e.message.trim():"";if(n)return n;let o=r.trim();return o?R(o.split(`
-`).find(Boolean)??o,160):"npm audit failed"}function Nr(e){let r=`${e.stdout}
-${e.stderr}`.trim(),t=Ir(r);if(!t||!x(t)){let o=R(r||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit failed (invalid or missing JSON): ${o}`,parseError:"invalid_json"}}if(x(t.error))return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit command failed: ${Br(t,e.stderr)}`};let n=Ur(t);return n?e.exitCode===0&&n.total===0?{kind:"success",exitCode:0,summary:"npm audit: no vulnerabilities reported",audit:n}:{kind:"audit_findings",exitCode:e.exitCode,summary:Tr(n),audit:n}:{kind:"command_failure",exitCode:e.exitCode,summary:"npm audit failed: JSON response missing vulnerability metadata",parseError:"missing_metadata"}}function Dr(e){return Or.test(e)}function Kr(e){return Pr.test(e)}function Mr(e){let r=$({command:e.command,exitCode:e.exitCode});if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"ripgrep finished (exit 0)"};if(e.exitCode===1){let n=(e.stderr||e.interleaved).trim();if(n&&Wr.test(n)){let i=R(n,160);return{kind:"command_failure",exitCode:1,summary:r??`ripgrep failed (exit 1): ${i}`}}let o=H(e.command),s=o.changed&&!r?` Retry with: \`${o.command}\`.`:"";return{kind:"search_no_matches",exitCode:1,summary:r??`ripgrep: no matches (exit 1).${s} Try a broader pattern or search from the repo root.`}}let t=R(e.interleaved||e.stdout||e.stderr||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:r??`ripgrep failed (exit ${e.exitCode}): ${t}`}}function pe(e){let r=e.stdout??"",t=e.stderr??"",n=e.interleavedOutput??"";if(Dr(e.command)){let i=r.trim()||n.trim()||t.trim();return Nr({exitCode:e.exitCode,stdout:i,stderr:t})}if(Kr(e.command))return Mr({command:e.command,exitCode:e.exitCode,stdout:r,stderr:t,interleaved:n});let o=$({command:e.command,exitCode:e.exitCode});if(o&&e.exitCode!==0)return{kind:"command_failure",exitCode:e.exitCode,summary:o};if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"command succeeded (exit 0)"};let s=R(n||r||t||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`command failed (exit ${e.exitCode}): ${s}`}}var Or,Pr,Wr,ge=u(()=>{"use strict";fe();Or=/\bnpm\s+audit\b/i,Pr=/\b(rg|ripgrep)\b/i,Wr=/\b(error|invalid|unknown|panic|not found)\b/i});import{existsSync as Fr,readFileSync as Hr}from"node:fs";function $r(e){let r=e.timestamp_ms;return e.timestamp||e.ts||(r?new Date(r).toISOString():void 0)}function Lr(e){if(!e)return null;for(let r of Object.keys(e))if(r.endsWith("ToolCall")){let t=r.slice(0,-8);return t.length?t:r}return null}function jr(e,r){e.finalResult=r.result||r.subtype||r.terminal_reason||"completed",r.is_error&&(e.error=String(r.result||r.api_error_status||"stream result error"))}function Yr(e){if(e.type!=="tool_call"||e.subtype!=="completed")return null;let t=(e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:null)?.shellToolCall;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t,o=n.args,s=o&&typeof o=="object"&&!Array.isArray(o)&&typeof o.command=="string"?String(o.command):"",i=n.result;if(!i||typeof i!="object"||Array.isArray(i))return null;let a=i.success??i.failure;if(!a||typeof a!="object"||Array.isArray(a))return null;let l=a,m=typeof l.exitCode=="number"?l.exitCode:0;return{command:s,exitCode:m,stdout:typeof l.stdout=="string"?l.stdout:"",stderr:typeof l.stderr=="string"?l.stderr:"",interleaved:typeof l.interleavedOutput=="string"?l.interleavedOutput:""}}function Gr(e,r){r.kind==="success"||r.kind==="search_no_matches"||(e.lastShellOutcome=r)}function he(e){let r={firstEventAt:null,lastEventAt:null,currentTool:null,finalResult:null,error:null,lastShellOutcome:null};if(!Fr(e))return r;let t=Hr(e,"utf8").split(`
-`).filter(Boolean);for(let n of t){let o=E(n);if(!o)continue;let s=$r(o);if(s&&(r.firstEventAt||=s,r.lastEventAt=s),o.type==="stream_event"&&o.event&&typeof o.event=="object"&&o.event.type==="content_block_start"){let a=o.event.content_block;a?.type==="tool_use"&&(r.currentTool=String(a.name||"tool"))}if(o.type==="assistant"&&o.message&&typeof o.message=="object"){let a=o.message.content;if(Array.isArray(a)){let l=a.find(m=>m?.type==="tool_use");l&&(r.currentTool=String(l.name||r.currentTool))}}if(o.type==="tool_call"&&o.subtype==="started"){let a=o.tool_call&&typeof o.tool_call=="object"&&!Array.isArray(o.tool_call)?o.tool_call:void 0,l=Lr(a);l&&(r.currentTool=l)}let i=Yr(o);i&&Gr(r,pe({command:i.command,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr,interleavedOutput:i.interleaved})),o.type==="result"&&jr(r,o)}return r}var ye=u(()=>{"use strict";ge();p()});function zr(e,r=240){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function be(e){let r=(e??"").trim();if(!r)return null;for(let t of Vr)if(t.test.test(r))return{blocked:!0,reason:`${t.label}: ${zr(r)}`};return null}var Vr,ke=u(()=>{"use strict";Vr=[{test:/\b(?:invalid|unknown|unsupported|unrecognized)\b[^.\n]*\bmodel\b/i,label:"provider rejected the requested model"},{test:/\bmodel\b[^.\n]*\b(?:not\s+(?:found|supported|available|recognized|valid)|is\s+not\s+valid|does\s+not\s+exist)/i,label:"provider rejected the requested model"},{test:/\b(?:did you mean|available models|choose (?:a|one of)|supported models)\b/i,label:"provider rejected the requested model"},{test:/model preflight failed/i,label:"model/provider preflight failed"},{test:/\b(?:command not found|ENOENT|is the .*CLI on PATH|executable not found|no such file or directory)\b/i,label:"provider CLI is missing or not on PATH"},{test:/\bfailed to spawn\b/i,label:"provider failed to spawn the worker process"},{test:/\b(?:not logged in|unauthorized|authentication (?:failed|required)|invalid api key|missing api key|401)\b/i,label:"provider authentication failed"},{test:/\b(?:out of usage|increase limits?|switch to auto|ask your admin to increase your limit|usage limits?|quota exceeded|insufficient_quota|credits? exhausted|billing|payment required)\b/i,label:"provider quota exhausted"}]});function Re(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Jr(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function qr(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:Re(e.head)}function Xr(e,r,t){let n=["exited_with_changes_salvage"];if((e==="uncommitted"||e==="both")&&n.push(`${r} uncommitted change${r===1?"":"s"} with no final result`),(e==="committed_ahead"||e==="both")&&t){let o=t.length>12?t.slice(0,12):t;n.push(`commit ${o} ahead of base with no final result`)}return n.push("review worktree \u2014 commit, open a PR, or run a salvage worker before discarding"),n.join(": ")}function xe(e){if(e.alive||Jr(e.finalResult))return null;let r=(e.changedFiles??[]).filter(i=>i.trim()).length,t=Re(e.headCommit)??qr(e.gitAncestry),n=r>0,o=!!t;if(!n&&!o)return{kind:"none",salvageable:!1,uncommittedCount:0,headCommit:null,attentionReason:"process exited without a final result"};let s=n&&o?"both":n?"uncommitted":"committed_ahead";return{kind:s,salvageable:!0,uncommittedCount:r,headCommit:t,attentionReason:Xr(s,r,t)}}var Se=u(()=>{"use strict"});var Qr,Jt,_e=u(()=>{"use strict";Qr=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY"],Jt=new Set(Qr)});import{spawnSync as Ee}from"node:child_process";function Zr(e,r,t={}){let n=Ee("git",r,D({cwd:e,encoding:"utf8"}));if(n.status!==0&&!t.allowFailure){let o=`git ${r.join(" ")} failed: ${n.stderr||n.stdout}`;if(t.throwError)throw new Error(o);oe(o)}return n.stdout||""}function Ce(e){return Zr(e,["status","--short"],{allowFailure:!0}).split(`
-`).map(r=>r.trim()).filter(Boolean)}function O(e,r){try{let t=Ee("git",r,D({cwd:e,encoding:"utf8"}));return{status:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function ve(e,r,t){let n=O(e,["merge-base","--is-ancestor",r,t]);return n.status===0?{isAncestor:!0,error:null}:n.status===1?{isAncestor:!1,error:null}:{isAncestor:null,error:n.error||n.stderr||n.stdout||`git exited ${n.status}`}}function Ae(e,r="origin/main"){let t=typeof r=="string"?{base:r}:r,n=t.baseCommit?.trim()||t.base?.trim()||"origin/main",o=t.baseCommit?.trim()||null;if(!e)return L(n,"missing worktree path");let s=O(e,["rev-parse","HEAD"]);if(s.status!==0)return L(n,s.error||s.stderr||s.stdout||"failed to resolve HEAD");let i;if(o)i=o;else{let f=O(e,["rev-parse",n]);if(f.status!==0)return L(n,f.error||f.stderr||f.stdout||`failed to resolve ${n}`,s.stdout.trim());i=f.stdout.trim()}let a=s.stdout.trim();if(a===i)return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:!0,headIsAncestorOfBase:!0,relation:"synced"};let l=ve(e,i,a),m=ve(e,a,i),d=l.error||m.error||void 0;if(l.isAncestor==null||m.isAncestor==null)return{checked:!1,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:m.isAncestor,relation:"unknown",...d?{error:d}:{}};let c=l.isAncestor?"ahead":m.isAncestor?"merged":"diverged";return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:m.isAncestor,relation:c,...d?{error:d}:{}}}function L(e,r,t=null){return{checked:!1,base:e,head:t,baseHead:null,baseIsAncestorOfHead:null,headIsAncestorOfBase:null,relation:"unknown",error:r}}var j=u(()=>{"use strict";p();_e()});function S(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function et(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function rt(e){if(S(e.headCommit)||S(e.prUrl)||S(e.artifactBundlePath)||S(e.patchPath))return!0;let r=e.gitAncestry;return!!(r?.checked&&r.headIsAncestorOfBase===!1&&S(r.head))}function we(e){return et(e.finalResult)?e.changedFiles.length===0?{blocked:!1}:rt(e)?{blocked:!0,detail:`Worktree has ${e.changedFiles.length} uncommitted change(s); commit or discard before landing`}:{blocked:!0,reason:"dirty_worktree_no_pr",detail:`Worktree has ${e.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`}:{blocked:!1}}function Oe(e){if(e.blocked)return e.detail??e.reason??"dirty_worktree_no_pr"}var Pe=u(()=>{"use strict"});function Y(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function We(e){let r=e.targetPrReconciliation??e.target_pr_reconciliation??e.targetPrs??e.target_prs;return Array.isArray(r)?r.length:0}function P(e){let r=e.trim();if(!r)return null;let t=Y(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let d=Y(s[1]??"");d&&n.push(d)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let d=Y(r.slice(i,a+1));d&&n.push(d)}if(n.length===0)return null;let l=n[n.length-1],m=We(l);for(let d of n){let c=We(d);c>m&&(l=d,m=c)}return l}var G=u(()=>{"use strict"});function Ie(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:e.trim()||null}function Ue(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function tt(e){return new Set(e.map(r=>Ue(Ie(r)??r)).filter(Boolean))}function Te(e,r,t){let n=Ie(e)??e;if(!n)return"unrelated";let o=Ue(n);return tt(r).has(o)?"contract":t?(t.outcome==="skipped"||t.outcome==="blocked")&&t.reason?.trim()?"support":(t.outcome==="merged","unrelated"):"unrelated"}var Be=u(()=>{"use strict"});function k(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function nt(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"?Object.keys(e).length>0:!0}function b(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:k(e)}function W(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function Ne(e){let r=null;if(typeof e=="string"){let o=P(e);o&&(r=o)}else e&&typeof e=="object"&&!Array.isArray(e)&&(r=e);if(!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=b(String(s.prUrl??s.pr_url??"")),a=k(s.outcome);!i||a!=="merged"&&a!=="skipped"&&a!=="blocked"||n.push({prUrl:i,outcome:a,mergeCommit:k(s.mergeCommit??s.merge_commit),reason:k(s.reason)})}return n}function De(e,r){let t=[],n=b(k(e.prUrl)??"");if(n&&t.push(n),r&&typeof r=="object"&&!Array.isArray(r)){let o=r,s=b(String(o.prUrl??o.pr_url??""));s&&t.push(s)}return[...new Set(t)]}function Ke(e){let{contract:r,snapshot:t}=e,n=e.finalResult??t.finalResult;if(!r.landingOnly&&r.targetPrUrls.length===0&&!r.repairEnforceOriginalPr)return{blocked:!1};if(!nt(n))return(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&r.targetPrUrls.length>0?{blocked:!0,reason:"missing_target_pr_reconciliation",detail:`Final result required to reconcile target PR(s): ${r.targetPrUrls.join(", ")}`}:{blocked:!1};if(!(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&!r.repairEnforceOriginalPr)return{blocked:!1};let s=r.repairEnforceOriginalPr?b(k(r.targetPrUrl)??"")??(r.targetPrUrls.length===1?b(r.targetPrUrls[0]):null):null;if(s){let c=De(t,n);if(!(n&&typeof n=="object"&&!Array.isArray(n)&&n.supersedesOriginalTargetPr===!0)){for(let y of c)if(y!==s)return{blocked:!0,reason:"duplicate_repair_pr",detail:`Repair worker opened or attached PR ${y} instead of canonical target ${s}`}}let h=Ne(n).find(y=>y.prUrl===s);if(!h||h.outcome!=="merged"&&!(h.reason?.trim()&&(h.outcome==="skipped"||h.outcome==="blocked")))return{blocked:!0,reason:"missing_repair_target_reconciliation",detail:`Repair worker must reconcile target PR ${s}`}}let i=Ne(n),a=new Map(i.map(c=>[W(c.prUrl),c])),l=new Set(r.targetPrUrls.map(c=>W(b(c)??c)).filter(Boolean)),m=De(t,n);if(r.landingOnly)for(let c of m){let f=a.get(W(c)),g=Te(c,r.targetPrUrls,f);if(!(g==="contract"||g==="support"))return l.size>0?{blocked:!0,reason:"unrelated_implementation_pr",detail:`Landing-only worker attached unrelated PR ${c}`}:{blocked:!0,reason:"unrelated_implementation_pr",detail:"Landing-only worker must not open new implementation PRs"}}if(r.targetPrUrls.length===0)return{blocked:!1};let d=[];for(let c of r.targetPrUrls){let f=W(b(c)??c),g=a.get(f);if(!g){d.push(f);continue}g.outcome!=="merged"&&!g.reason?.trim()&&d.push(f)}return d.length>0?{blocked:!0,reason:d.every(c=>a.has(c))?"incomplete_target_pr_landing":"missing_target_pr_reconciliation",detail:`Target PR reconciliation incomplete: ${d.join(", ")}`}:{blocked:!1}}function Me(e){if(e.blocked)return e.detail??e.reason}var Fe=u(()=>{"use strict";G();Be()});function st(e){let r=Date.now();if(e.completionBlocker&&!He(e.completionBlocker))return{state:"blocked",reason:e.completionBlocker};if(e.finalResult){if(e.localOnly&&at(e.finalResult))return{state:"done",reason:"local-only worker superseded by merged PR"};let o={finalResult:e.finalResult,changedFiles:e.changedFiles??[],gitAncestry:e.gitAncestry??null,prUrl:e.prUrl??null},s=we(o);if(s.blocked){let i=Oe(s);return{state:"needs_attention",reason:s.reason?`landing blocked (${s.reason}): ${i}`:`landing blocked: ${i}`}}if(e.landingContract){let i=Ke({contract:e.landingContract,snapshot:o,finalResult:e.finalResult}),a=Me(i);if(a)return{state:"needs_attention",reason:i.reason?`landing contract (${i.reason}): ${a}`:`landing contract: ${a}`}}return{state:"done",reason:"final result recorded"}}if(!e.alive){if(it(e))return{state:"done",reason:"empty abandoned worker record"};let o=be(e.error);if(o)return{state:"blocked",reason:o.reason};let s=xe({alive:!1,finalResult:null,changedFiles:e.changedFiles,gitAncestry:e.gitAncestry});if(s?.salvageable){let a=e.error?.trim();return{state:"needs_attention",reason:a?`${s.attentionReason} (${a})`:s.attentionReason}}let i=e.error?.trim();return{state:"needs_attention",reason:i?`process exited without a final result: ${i}`:s?.attentionReason??"process exited without a final result"}}if(e.heartbeatBlocker)return{state:"blocked",reason:`worker heartbeat reported blocker: ${e.heartbeatBlocker}`};let t=e.startedAt?Date.parse(e.startedAt):NaN;if(!e.firstEventAt&&e.stdoutBytes===0&&e.heartbeatBytes===0&&Number.isFinite(t)&&r-t>ot)return{state:"needs_attention",reason:`no first stream event ${K(t)}s after start`};let n=e.lastActivityAt?Date.parse(e.lastActivityAt):NaN;return Number.isFinite(n)&&r-n>I?{state:"stale",reason:`no log/event/heartbeat activity for ${K(n)}s`}:{state:"ok",reason:"recent activity"}}function He(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function it(e){return e.finalResult||e.taskId||e.agentOsId||e.stdoutBytes>0||(e.stderrBytes??0)>0||e.heartbeatBytes>0||e.error?.trim()||(e.changedFiles??[]).some(r=>r.trim())?!1:/empty worker dir|marked abandoned/i.test(e.reconcileReason??"")}function at(e){let r=null;if(typeof e=="string"?r=P(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return!1;let t=r.targetPrReconciliation??r.target_pr_reconciliation;return Array.isArray(t)?t.some(n=>!n||typeof n!="object"||Array.isArray(n)?!1:String(n.outcome??"").trim()==="merged"):!1}function lt(e,r,t){let n=e.completionSnapshot?.finalResult;return e.completionAckSource==="local-pr-merged-reconcile"&&n!==void 0&&n!==null?n:r||(n??le(t))}function $e(e,r={}){let t=he(e.stdoutPath),n=ue(e.heartbeatPath),o=typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim().length>0,s=lt(e,t.finalResult,n),i=o?!1:w(e.pid),a=C(e.stdoutPath),l=C(e.stderrPath),m=C(e.heartbeatPath),d=Ce(e.worktreePath),c=Ae(e.worktreePath,{base:r.base,baseCommit:r.baseCommit}),f=ie([t.lastEventAt,n.lastHeartbeatAt,A(e.stdoutPath),A(e.stderrPath),A(e.heartbeatPath)]),g=t.error||!i&&!s&&se(e.stderrPath,10).trim()||void 0,h=typeof e.completionBlocker=="string"&&e.completionBlocker.trim()?e.completionBlocker.trim():null,y=He(h)?null:h,dr=e.repairTargetPrUrl?{landingOnly:!1,targetPrUrls:[e.repairTargetPrUrl],targetPrUrl:e.repairTargetPrUrl,repairEnforceOriginalPr:!0}:null,B=st({alive:i,finalResult:s,firstEventAt:t.firstEventAt,stdoutBytes:a,stderrBytes:l,heartbeatBytes:m,lastActivityAt:f,heartbeatBlocker:n.heartbeatBlocker,startedAt:e.startedAt,error:g,changedFiles:d,gitAncestry:c,completionBlocker:y,landingContract:dr,prUrl:e.repairTargetPrUrl??e.taskPrUrl??null,localOnly:e.localOnly===!0,taskId:e.taskId??null,agentOsId:e.agentOsId??null,reconcileReason:e.reconcileReason??null}),mr=y||B.state==="blocked"?"blocked":o||B.state==="done"?"done":s?"exited":i?"running":"exited";return{runId:e.runId,worker:e.name,pid:e.pid,alive:i,status:mr,attention:B,branch:e.branch,worktreePath:e.worktreePath,ownedPaths:e.ownedPaths,stdoutBytes:a,stderrBytes:l,heartbeatBytes:m,firstEventAt:t.firstEventAt,lastEventAt:t.lastEventAt,lastActivityAt:f,currentTool:o?null:t.currentTool,heartbeatCount:n.heartbeatCount,lastHeartbeatAt:n.lastHeartbeatAt,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,timestampAnomalies:n.timestampAnomalies,finalResult:s,error:g,changedFiles:d,gitAncestry:c,instructionPolicyFingerprint:e.instructionPolicyFingerprint??null,instructionPolicyEvidence:e.instructionPolicyEvidence??null,model:e.model??e.orchestrationAudit?.model??null,provider:e.provider??e.orchestrationAudit?.provider??null,boxKind:e.boxKind??null,boxId:e.boxId??null,runtimeId:e.runtimeId??null,personaSlug:e.personaSlug??null,dispatched:e.dispatched??null,localOnly:e.localOnly??null}}function Le(e){return!!(e.finalResult||e.alive===!1||e.status==="exited"||e.status==="done")}function je(e){return e.finalResult?e.attention.state==="needs_attention"||e.attention.state==="blocked":!1}var ot,I,_=u(()=>{"use strict";ce();ye();ke();Se();j();Pe();Fe();G();p();ot=18e4,I=6e5});var v=u(()=>{"use strict"});var ze=u(()=>{"use strict";j();v()});var V=u(()=>{"use strict"});var z=u(()=>{"use strict"});var Je=u(()=>{"use strict"});var In,Un,J=u(()=>{"use strict";In=25*1024*1024*1024,Un=12*1024*1024*1024});var Kn,Mn,qe=u(()=>{"use strict";J();Kn=5*1024*1024*1024,Mn=10*1024*1024*1024});var Yn,Gn,q=u(()=>{"use strict";qe();J();Yn=30*1024*1024*1024,Gn=15*1024*1024*1024});var Xe=u(()=>{"use strict";U();p()});var Qe=u(()=>{"use strict";_()});var yt,bt,Ze=u(()=>{"use strict";Je();T();V();z();Q();q();U();Xe();Qe();p();yt=500*1024*1024,bt=4*1024*1024*1024});var Q=u(()=>{"use strict";Ze()});import{homedir as Rt}from"node:os";import xt from"node:path";var St,er=u(()=>{"use strict";St=xt.join(Rt(),".kynver",".env")});var rr=u(()=>{"use strict"});var tr=u(()=>{"use strict";rr()});var nr=u(()=>{"use strict"});var or=u(()=>{"use strict";tr();nr()});var sr=u(()=>{"use strict"});var ir=u(()=>{"use strict";sr()});var ar=u(()=>{"use strict";er();v();T();or();ir()});import{homedir as vt,totalmem as ds}from"node:os";import Z from"node:path";var lr,xs,Ss,_s,vs,T=u(()=>{"use strict";ze();v();p();V();z();Q();q();ar();lr=Z.join(vt(),".kynver"),xs=Z.join(lr,"config.json"),Ss=Z.join(lr,"credentials"),_s=500*1024*1024,vs=4*1024*1024*1024});import{homedir as Et}from"node:os";import Ct from"node:path";var Ws,ur=u(()=>{"use strict";T();v();p();Ws=Ct.join(Et(),".openclaw","harness")});var U=u(()=>{"use strict";ur();p()});_();var Ye="kynver-harness:",ut="@runner:";function Ge(e){return e?.trim()?e.trim():null}function ct(e){let r=Ge(e);if(!r?.startsWith(Ye))return null;let t=r.slice(Ye.length),n=t.indexOf(ut);return n>=0?t.slice(0,n).trim()||null:t.trim()||null}function Ve(e,r){let t=Ge(r);return t?ct(e)===t:!1}_();p();function dt(e){let{worker:r,status:t,taskLease:n}=e,o=n?.leaseOwner??null;if(r.dispatched&&n){if(n.status==="running"&&o&&!Ve(o,r.runId))return{health:"orphaned",reason:`task lease held by ${o}, expected harness run ${r.runId}`};let i=r.leaseToken?.trim()??"",a=n.leaseToken?.trim()??"";if(n.status==="running"&&i&&a&&i!==a)return{health:"orphaned",reason:"task leaseToken superseded on board \u2014 completion replay would fail"};if(n.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"board task running but worker process is not alive"}}if(r.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"worker.json still running but process is dead"};if(t.attention.state==="stale")return{health:"stale",reason:t.attention.reason};let s=t.lastHeartbeatAt?Date.parse(t.lastHeartbeatAt):NaN;return t.alive&&Number.isFinite(s)&&Date.now()-s>I?{health:"stale",reason:`heartbeat older than ${Math.floor(I/1e3)}s`}:t.alive&&r.pid&&!w(r.pid)?{health:"orphaned",reason:"pid recorded but process is not alive"}:n?.status==="running"&&!t.alive&&t.finalResult?{health:"healthy",reason:"finished worker awaiting completion replay"}:{health:"healthy",reason:t.attention.reason||"worker within expected lifecycle bounds"}}U();function cr(e){return!!e.completionReportedAt?.trim()}_();function At(e){let{worker:r,status:t}=e,n=[];r.localOnly&&n.push("local-only worker (no board linkage)"),(!r.agentOsId||!r.taskId)&&n.push("missing agentOsId/taskId linkage"),cr(r)&&n.push("completion already acknowledged"),r.completionBlocker&&n.push(r.completionBlocker),t.heartbeatBlocker&&t.alive&&n.push(`worker heartbeat blocker: ${t.heartbeatBlocker}`),t.attention.state==="blocked"&&n.push(t.attention.reason||"worker attention blocked"),je(t)&&n.push(t.attention.reason||"landing gate blocked");let o=Le(t),s;return o?t.finalResult?s="final_result":t.alive?s="terminal_status":s="process_exited":n.push("worker has not reached a terminal condition"),{eligible:o&&n.length===0,terminalVerified:o,terminalReason:s,blockers:n}}export{At as assessAutoCompleteEligibility,dt as classifyWorkerHealth,$e as computeWorkerStatus};
+`):""}function I(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}function pe(e){let r=null,n=-1/0;for(let t of e){if(!t)continue;let o=Date.parse(t);Number.isFinite(o)&&o>n&&(n=o,r=t)}return r}function j(e){return Math.max(0,Math.round((Date.now()-e)/1e3))}var p=u(()=>{"use strict"});import{existsSync as Ar,readFileSync as Or}from"node:fs";function ge(e){return e==="complete"}function he(e){return ge(e.lastHeartbeatPhase)?e.terminalFinalResult!==void 0&&e.terminalFinalResult!==null?e.terminalFinalResult:e.lastHeartbeatSummary?.trim()||"completed":null}function ye(e){let r={heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,terminalFinalResult:null,heartbeatBlocker:null,timestampAnomalies:[],lastBoxResourceSnapshot:null,lastPrEvidence:[]};if(!Ar(e))return r;let n=Date.now()+wr,t=new Date(n).toISOString(),o=Or(e,"utf8").split(`
+`).filter(Boolean);for(let s of o){let i=A(s);if(!i||typeof i!="object"||Array.isArray(i))continue;let a=i;if(r.heartbeatCount++,a.ts){let l=String(a.ts),m=Date.parse(l);Number.isFinite(m)&&m>n?r.timestampAnomalies.push({kind:"future_heartbeat_timestamp",observedAt:l,clampedTo:t}):r.lastHeartbeatAt=l}a.phase!==void 0&&a.phase!==null&&(r.lastHeartbeatPhase=String(a.phase)),a.summary!==void 0&&a.summary!==null&&(r.lastHeartbeatSummary=String(a.summary)),ge(r.lastHeartbeatPhase)&&(r.terminalFinalResult=ue(a)),r.heartbeatBlocker=a.blocker?String(a.blocker):null,a.boxResourceSnapshot&&typeof a.boxResourceSnapshot=="object"&&!Array.isArray(a.boxResourceSnapshot)&&(r.lastBoxResourceSnapshot=a.boxResourceSnapshot),Array.isArray(a.prEvidence)&&(r.lastPrEvidence=a.prEvidence.filter(l=>!!l&&typeof l=="object"&&typeof l.prUrl=="string"))}return r}var wr,be=u(()=>{"use strict";ce();p();wr=6e4});function Pr(e){return e?(e.split("/").pop()??e).replace(/\.exe$/i,"").toLowerCase():null}function Nr(e){if(!e)return[];let r=[],n="",t,o=!1;for(let s of e){if(o){n+=s,o=!1;continue}if(s==="\\"){o=!0;continue}if(t){s===t?t=void 0:n+=s;continue}if(s==='"'||s==="'"){t=s;continue}if(/\s/.test(s)){n&&(r.push(n),n="");continue}n+=s}return n&&r.push(n),r}function Wr(e){let r=Pr(e[0]);return!!(r&&Ir.has(r))}function Y(e){return!e||e.includes("/")||e.includes("*")?!1:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(e)}function V(e){if(!e)return!1;let r=e.trim();return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")}function Br(e){if(!e.startsWith("--glob="))return e;let r=e.slice(7);return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")?`--glob=${r}/**`:e}function Ur(e){let r=[];for(let n=1;n<e.length;n+=1){let t=e[n];if(t){if(t==="--"){r.push(...e.slice(n+1));break}if(t.startsWith("-")){if(t.includes("="))continue;ke.has(t)&&(n+=1);continue}r.push(t)}}return r}function Tr(e){let r=!1,n=e.map((o,s)=>{let i=Br(o),a=e[s-1];return a&&ke.has(a)&&o.startsWith("!")&&!o.includes("/")&&!o.endsWith("/**")&&(i=`${o}/**`),i!==o&&(r=!0),i}),t=Ur(n);if(t.length===2){let[o,s]=t;if(V(s))return{argv:[n[0]??"rg",o,"-g",`${s}/**`,"."],changed:!0};if(Y(s))return{argv:[n[0]??"rg","-g",s,o,"."],changed:!0}}return r&&t.length===1?{argv:[...n,"."],changed:!0}:{argv:n,changed:r}}function G(e){let r=e.trim();if(!r)return{command:r,changed:!1};let n=r.includes("&&")?" && ":r.includes("||")?" || ":"; ",t=r.split(/\s*(?:&&|\|\||;)\s*/u),o=!1,s=t.map(i=>{let a=Nr(i.trim());if(!a.length||!Wr(a))return i;let l=Tr(a);return l.changed?(o=!0,l.argv.join(" ")):i});return o?{command:s.join(n),changed:!0}:{command:r,changed:!1}}function Re(e){if(!e)return{};let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(|$)/iu);if(r)return{pattern:r[1],target:r[2]?.trim()};let n=e.match(/^search\s+"(.+)"\s+in\s+(.+)$/iu);return n?{pattern:n[1],target:n[2]?.trim()}:{}}function Kr(e){let{pattern:r,target:n}=Re(e);return r?V(n)?{kind:"rg_exclude_syntax",pattern:r,target:n}:Y(n)?{kind:"bad_scope",pattern:r,target:n}:{kind:"not_repo_search",pattern:r,target:n}:{kind:"not_repo_search"}}function Dr(e){let{pattern:r,target:n}=Re(e);if(!r)return null;if(V(n)){let t=`${n.trim()}/**`;return{command:`rg "${r}" -g '${t}' .`,changed:!0}}return n&&Y(n)?{command:`rg -g ${n} "${r}" .`,changed:!0}:null}function Mr(e){if(e.kind==="bad_scope"&&e.pattern?.includes("agent-os-land-pr")&&e.target==="package.json")return"Search package.json with a glob from the repo root: `rg -g package.json agent-os-land-pr .` \u2014 or run `node scripts/agent-os-land-pr.mjs <pr-url>` directly.";if(e.kind==="bad_scope"&&e.pattern&&e.target)return`Use \`rg -g '${e.target}' ${e.pattern} .\` from the repo root instead of treating ${e.target} as a folder.`;if(e.kind==="rg_exclude_syntax"&&e.pattern){let r=e.target?`${e.target.trim()}/**`:"!node_modules/**";return`Repo search scope \`${e.target??"!node_modules"}\` is not a valid ripgrep path. Use \`rg "${e.pattern}" -g '${r}' .\` from the repo root (exclude globs need a \`/**\` suffix).`}return e.kind==="no_matches"&&e.pattern?`No matches for "${e.pattern}". Try a broader pattern, drop overly short tokens, or search from the repo root with \`rg "${e.pattern}" .\`.`:null}function Fr(e){let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(agent\)|\s*failed|$)/iu);return r?`search "${r[1]}" in ${r[2]?.trim()}`:null}function z(e){let r=e.meta?.trim()||(e.command?Fr(e.command):null)||null;if(r){let n=Kr(r),t=Mr(n);if(t)return t;let o=Dr(r);if(o?.changed)return`Repo search used an invalid scope. Retry with: \`${o.command}\`.`}if(e.command&&/\b(rg|ripgrep)\b/i.test(e.command)){let n=G(e.command);if(n.changed)return`Ripgrep scope may be invalid. Retry with: \`${n.command}\`.`;if(e.exitCode===1)return"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root."}return null}var Ir,ke,xe=u(()=>{"use strict";Ir=new Set(["rg","ripgrep","grep"]),ke=new Set(["-e","--regexp","-f","--file","-m","--max-count","-A","--after-context","-B","--before-context","-C","--context","-g","--glob","--iglob"])});function S(e,r=200){let n=e.replace(/\s+/g," ").trim();return n.length>r?`${n.slice(0,r-1)}\u2026`:n}function jr(e){let r=e.trim();if(!r)return null;if(r.startsWith("{"))try{return JSON.parse(r)}catch{}let n=r.indexOf("{"),t=r.lastIndexOf("}");if(n>=0&&t>n)try{return JSON.parse(r.slice(n,t+1))}catch{return null}return null}function v(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function Yr(e){let r=e.metadata;if(!v(r))return null;let n=r.vulnerabilities;if(!v(n))return null;let t=s=>typeof n[s]=="number"?n[s]:0,o={info:t("info"),low:t("low"),moderate:t("moderate"),high:t("high"),critical:t("critical"),total:t("total")};return typeof n.total!="number"&&!o.critical&&!o.high&&!o.moderate&&!o.low&&!o.info?null:o}function Vr(e){let r=[];e.critical&&r.push(`${e.critical} critical`),e.high&&r.push(`${e.high} high`),e.moderate&&r.push(`${e.moderate} moderate`),e.low&&r.push(`${e.low} low`),e.info&&r.push(`${e.info} info`);let n=r.length?r.join(", "):"see report";return`npm audit: ${e.total} vulnerabilit${e.total===1?"y":"ies"} (${n}) \u2014 remediation required`}function Gr(e,r){let n=e.error;if(v(n)){let s=typeof n.summary=="string"?n.summary.trim():"",i=typeof n.code=="string"?n.code.trim():"";if(s)return i?`${i}: ${s}`:s;if(i)return i}let t=typeof e.message=="string"?e.message.trim():"";if(t)return t;let o=r.trim();return o?S(o.split(`
+`).find(Boolean)??o,160):"npm audit failed"}function zr(e){let r=`${e.stdout}
+${e.stderr}`.trim(),n=jr(r);if(!n||!v(n)){let o=S(r||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit failed (invalid or missing JSON): ${o}`,parseError:"invalid_json"}}if(v(n.error))return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit command failed: ${Gr(n,e.stderr)}`};let t=Yr(n);return t?e.exitCode===0&&t.total===0?{kind:"success",exitCode:0,summary:"npm audit: no vulnerabilities reported",audit:t}:{kind:"audit_findings",exitCode:e.exitCode,summary:Vr(t),audit:t}:{kind:"command_failure",exitCode:e.exitCode,summary:"npm audit failed: JSON response missing vulnerability metadata",parseError:"missing_metadata"}}function Jr(e){return Hr.test(e)}function qr(e){return Lr.test(e)}function Xr(e){let r=z({command:e.command,exitCode:e.exitCode});if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"ripgrep finished (exit 0)"};if(e.exitCode===1){let t=(e.stderr||e.interleaved).trim();if(t&&$r.test(t)){let i=S(t,160);return{kind:"command_failure",exitCode:1,summary:r??`ripgrep failed (exit 1): ${i}`}}let o=G(e.command),s=o.changed&&!r?` Retry with: \`${o.command}\`.`:"";return{kind:"search_no_matches",exitCode:1,summary:r??`ripgrep: no matches (exit 1).${s} Try a broader pattern or search from the repo root.`}}let n=S(e.interleaved||e.stdout||e.stderr||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:r??`ripgrep failed (exit ${e.exitCode}): ${n}`}}function Se(e){let r=e.stdout??"",n=e.stderr??"",t=e.interleavedOutput??"";if(Jr(e.command)){let i=r.trim()||t.trim()||n.trim();return zr({exitCode:e.exitCode,stdout:i,stderr:n})}if(qr(e.command))return Xr({command:e.command,exitCode:e.exitCode,stdout:r,stderr:n,interleaved:t});let o=z({command:e.command,exitCode:e.exitCode});if(o&&e.exitCode!==0)return{kind:"command_failure",exitCode:e.exitCode,summary:o};if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"command succeeded (exit 0)"};let s=S(t||r||n||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`command failed (exit ${e.exitCode}): ${s}`}}var Hr,Lr,$r,ve=u(()=>{"use strict";xe();Hr=/\bnpm\s+audit\b/i,Lr=/\b(rg|ripgrep)\b/i,$r=/\b(error|invalid|unknown|panic|not found)\b/i});import{existsSync as Qr,readFileSync as Zr}from"node:fs";function en(e){let r=e.timestamp_ms;return e.timestamp||e.ts||(r?new Date(r).toISOString():void 0)}function rn(e){if(!e)return null;for(let r of Object.keys(e))if(r.endsWith("ToolCall")){let n=r.slice(0,-8);return n.length?n:r}return null}function nn(e,r){e.finalResult=r.result||r.subtype||r.terminal_reason||"completed",r.is_error&&(e.error=String(r.result||r.api_error_status||"stream result error"))}function tn(e){if(e.type!=="tool_call"||e.subtype!=="completed")return null;let n=(e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:null)?.shellToolCall;if(!n||typeof n!="object"||Array.isArray(n))return null;let t=n,o=t.args,s=o&&typeof o=="object"&&!Array.isArray(o)&&typeof o.command=="string"?String(o.command):"",i=t.result;if(!i||typeof i!="object"||Array.isArray(i))return null;let a=i.success??i.failure;if(!a||typeof a!="object"||Array.isArray(a))return null;let l=a,m=typeof l.exitCode=="number"?l.exitCode:0;return{command:s,exitCode:m,stdout:typeof l.stdout=="string"?l.stdout:"",stderr:typeof l.stderr=="string"?l.stderr:"",interleaved:typeof l.interleavedOutput=="string"?l.interleavedOutput:""}}function on(e,r){r.kind==="success"||r.kind==="search_no_matches"||(e.lastShellOutcome=r)}function _e(e){let r={firstEventAt:null,lastEventAt:null,currentTool:null,finalResult:null,error:null,lastShellOutcome:null};if(!Qr(e))return r;let n=Zr(e,"utf8").split(`
+`).filter(Boolean);for(let t of n){let o=A(t);if(!o)continue;let s=en(o);if(s&&(r.firstEventAt||=s,r.lastEventAt=s),o.type==="stream_event"&&o.event&&typeof o.event=="object"&&o.event.type==="content_block_start"){let a=o.event.content_block;a?.type==="tool_use"&&(r.currentTool=String(a.name||"tool"))}if(o.type==="assistant"&&o.message&&typeof o.message=="object"){let a=o.message.content;if(Array.isArray(a)){let l=a.find(m=>m?.type==="tool_use");l&&(r.currentTool=String(l.name||r.currentTool))}}if(o.type==="tool_call"&&o.subtype==="started"){let a=o.tool_call&&typeof o.tool_call=="object"&&!Array.isArray(o.tool_call)?o.tool_call:void 0,l=rn(a);l&&(r.currentTool=l)}let i=tn(o);i&&on(r,Se({command:i.command,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr,interleavedOutput:i.interleaved})),o.type==="result"&&nn(r,o)}return r}var Ee=u(()=>{"use strict";ve();p()});function an(e,r=240){let n=e.replace(/\s+/g," ").trim();return n.length>r?`${n.slice(0,r-1)}\u2026`:n}function Ce(e){let r=(e??"").trim();if(!r)return null;for(let n of sn)if(n.test.test(r))return{blocked:!0,reason:`${n.label}: ${an(r)}`};return null}var sn,Ae=u(()=>{"use strict";sn=[{test:/\b(?:invalid|unknown|unsupported|unrecognized)\b[^.\n]*\bmodel\b/i,label:"provider rejected the requested model"},{test:/\bmodel\b[^.\n]*\b(?:not\s+(?:found|supported|available|recognized|valid)|is\s+not\s+valid|does\s+not\s+exist)/i,label:"provider rejected the requested model"},{test:/\b(?:did you mean|available models|choose (?:a|one of)|supported models)\b/i,label:"provider rejected the requested model"},{test:/model preflight failed/i,label:"model/provider preflight failed"},{test:/\b(?:command not found|ENOENT|is the .*CLI on PATH|executable not found|no such file or directory)\b/i,label:"provider CLI is missing or not on PATH"},{test:/\bfailed to spawn\b/i,label:"provider failed to spawn the worker process"},{test:/\b(?:not logged in|unauthorized|authentication (?:failed|required)|invalid api key|missing api key|401)\b/i,label:"provider authentication failed"},{test:/\b(?:out of usage|increase limits?|switch to auto|ask your admin to increase your limit|usage limits?|quota exceeded|insufficient_quota|credits? exhausted|billing|payment required)\b/i,label:"provider quota exhausted"}]});function Oe(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function ln(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function un(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:Oe(e.head)}function cn(e,r,n){let t=["exited_with_changes_salvage"];if((e==="uncommitted"||e==="both")&&t.push(`${r} uncommitted change${r===1?"":"s"} with no final result`),(e==="committed_ahead"||e==="both")&&n){let o=n.length>12?n.slice(0,12):n;t.push(`commit ${o} ahead of base with no final result`)}return t.push("review worktree \u2014 commit, open a PR, or run a salvage worker before discarding"),t.join(": ")}function we(e){if(e.alive||ln(e.finalResult))return null;let r=(e.changedFiles??[]).filter(i=>i.trim()).length,n=Oe(e.headCommit)??un(e.gitAncestry),t=r>0,o=!!n;if(!t&&!o)return{kind:"none",salvageable:!1,uncommittedCount:0,headCommit:null,attentionReason:"process exited without a final result"};let s=t&&o?"both":t?"uncommitted":"committed_ahead";return{kind:s,salvageable:!0,uncommittedCount:r,headCommit:n,attentionReason:cn(s,r,n)}}var Ie=u(()=>{"use strict"});var dn,mt,Pe=u(()=>{"use strict";dn=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY"],mt=new Set(dn)});import{spawnSync as We}from"node:child_process";function mn(e,r,n={}){let t=We("git",r,$({cwd:e,encoding:"utf8"}));if(t.status!==0&&!n.allowFailure){let o=`git ${r.join(" ")} failed: ${t.stderr||t.stdout}`;if(n.throwError)throw new Error(o);me(o)}return t.stdout||""}function Be(e){return mn(e,["status","--short"],{allowFailure:!0}).split(`
+`).map(r=>r.trim()).filter(Boolean)}function P(e,r){try{let n=We("git",r,$({cwd:e,encoding:"utf8"}));return{status:n.status,stdout:n.stdout||"",stderr:n.stderr||"",error:n.error?n.error.message:null}}catch(n){return{status:null,stdout:"",stderr:"",error:n.message}}}function Ne(e,r,n){let t=P(e,["merge-base","--is-ancestor",r,n]);return t.status===0?{isAncestor:!0,error:null}:t.status===1?{isAncestor:!1,error:null}:{isAncestor:null,error:t.error||t.stderr||t.stdout||`git exited ${t.status}`}}function Ue(e,r="origin/main"){let n=typeof r=="string"?{base:r}:r,t=n.baseCommit?.trim()||n.base?.trim()||"origin/main",o=n.baseCommit?.trim()||null;if(!e)return J(t,"missing worktree path");let s=P(e,["rev-parse","HEAD"]);if(s.status!==0)return J(t,s.error||s.stderr||s.stdout||"failed to resolve HEAD");let i;if(o)i=o;else{let f=P(e,["rev-parse",t]);if(f.status!==0)return J(t,f.error||f.stderr||f.stdout||`failed to resolve ${t}`,s.stdout.trim());i=f.stdout.trim()}let a=s.stdout.trim();if(a===i)return{checked:!0,base:t,head:a,baseHead:i,baseIsAncestorOfHead:!0,headIsAncestorOfBase:!0,relation:"synced"};let l=Ne(e,i,a),m=Ne(e,a,i),d=l.error||m.error||void 0;if(l.isAncestor==null||m.isAncestor==null)return{checked:!1,base:t,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:m.isAncestor,relation:"unknown",...d?{error:d}:{}};let c=l.isAncestor?"ahead":m.isAncestor?"merged":"diverged";return{checked:!0,base:t,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:m.isAncestor,relation:c,...d?{error:d}:{}}}function J(e,r,n=null){return{checked:!1,base:e,head:n,baseHead:null,baseIsAncestorOfHead:null,headIsAncestorOfBase:null,relation:"unknown",error:r}}var q=u(()=>{"use strict";p();Pe()});function _(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function fn(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function pn(e){if(_(e.headCommit)||_(e.prUrl)||_(e.artifactBundlePath)||_(e.patchPath))return!0;let r=e.gitAncestry;return!!(r?.checked&&r.headIsAncestorOfBase===!1&&_(r.head))}function Te(e){return fn(e.finalResult)?e.changedFiles.length===0?{blocked:!1}:pn(e)?{blocked:!0,detail:`Worktree has ${e.changedFiles.length} uncommitted change(s); commit or discard before landing`}:{blocked:!0,reason:"dirty_worktree_no_pr",detail:`Worktree has ${e.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`}:{blocked:!1}}function Ke(e){if(e.blocked)return e.detail??e.reason??"dirty_worktree_no_pr"}var De=u(()=>{"use strict"});function X(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let n=JSON.parse(r);if(n&&typeof n=="object"&&!Array.isArray(n))return n}catch{return null}return null}function Me(e){let r=e.targetPrReconciliation??e.target_pr_reconciliation??e.targetPrs??e.target_prs;return Array.isArray(r)?r.length:0}function N(e){let r=e.trim();if(!r)return null;let n=X(r);if(n)return n;let t=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let d=X(s[1]??"");d&&t.push(d)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let d=X(r.slice(i,a+1));d&&t.push(d)}if(t.length===0)return null;let l=t[t.length-1],m=Me(l);for(let d of t){let c=Me(d);c>m&&(l=d,m=c)}return l}var Q=u(()=>{"use strict"});function Fe(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:e.trim()||null}function He(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function gn(e){return new Set(e.map(r=>He(Fe(r)??r)).filter(Boolean))}function Le(e,r,n){let t=Fe(e)??e;if(!t)return"unrelated";let o=He(t);return gn(r).has(o)?"contract":n?(n.outcome==="skipped"||n.outcome==="blocked")&&n.reason?.trim()?"support":(n.outcome==="merged","unrelated"):"unrelated"}var $e=u(()=>{"use strict"});function R(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function hn(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"?Object.keys(e).length>0:!0}function b(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:R(e)}function W(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function je(e){let r=null;if(typeof e=="string"){let o=N(e);o&&(r=o)}else e&&typeof e=="object"&&!Array.isArray(e)&&(r=e);if(!r)return[];let n=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(n))return[];let t=[];for(let o of n){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=b(String(s.prUrl??s.pr_url??"")),a=R(s.outcome);!i||a!=="merged"&&a!=="skipped"&&a!=="blocked"||t.push({prUrl:i,outcome:a,mergeCommit:R(s.mergeCommit??s.merge_commit),reason:R(s.reason)})}return t}function Ye(e,r){let n=[],t=b(R(e.prUrl)??"");if(t&&n.push(t),r&&typeof r=="object"&&!Array.isArray(r)){let o=r,s=b(String(o.prUrl??o.pr_url??""));s&&n.push(s)}return[...new Set(n)]}function Ve(e){let{contract:r,snapshot:n}=e,t=e.finalResult??n.finalResult;if(!r.landingOnly&&r.targetPrUrls.length===0&&!r.repairEnforceOriginalPr)return{blocked:!1};if(!hn(t))return(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&r.targetPrUrls.length>0?{blocked:!0,reason:"missing_target_pr_reconciliation",detail:`Final result required to reconcile target PR(s): ${r.targetPrUrls.join(", ")}`}:{blocked:!1};if(!(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&!r.repairEnforceOriginalPr)return{blocked:!1};let s=r.repairEnforceOriginalPr?b(R(r.targetPrUrl)??"")??(r.targetPrUrls.length===1?b(r.targetPrUrls[0]):null):null;if(s){let c=Ye(n,t);if(!(t&&typeof t=="object"&&!Array.isArray(t)&&t.supersedesOriginalTargetPr===!0)){for(let y of c)if(y!==s)return{blocked:!0,reason:"duplicate_repair_pr",detail:`Repair worker opened or attached PR ${y} instead of canonical target ${s}`}}let h=je(t).find(y=>y.prUrl===s);if(!h||h.outcome!=="merged"&&!(h.reason?.trim()&&(h.outcome==="skipped"||h.outcome==="blocked")))return{blocked:!0,reason:"missing_repair_target_reconciliation",detail:`Repair worker must reconcile target PR ${s}`}}let i=je(t),a=new Map(i.map(c=>[W(c.prUrl),c])),l=new Set(r.targetPrUrls.map(c=>W(b(c)??c)).filter(Boolean)),m=Ye(n,t);if(r.landingOnly)for(let c of m){let f=a.get(W(c)),g=Le(c,r.targetPrUrls,f);if(!(g==="contract"||g==="support"))return l.size>0?{blocked:!0,reason:"unrelated_implementation_pr",detail:`Landing-only worker attached unrelated PR ${c}`}:{blocked:!0,reason:"unrelated_implementation_pr",detail:"Landing-only worker must not open new implementation PRs"}}if(r.targetPrUrls.length===0)return{blocked:!1};let d=[];for(let c of r.targetPrUrls){let f=W(b(c)??c),g=a.get(f);if(!g){d.push(f);continue}g.outcome!=="merged"&&!g.reason?.trim()&&d.push(f)}return d.length>0?{blocked:!0,reason:d.every(c=>a.has(c))?"incomplete_target_pr_landing":"missing_target_pr_reconciliation",detail:`Target PR reconciliation incomplete: ${d.join(", ")}`}:{blocked:!1}}function Ge(e){if(e.blocked)return e.detail??e.reason}var ze=u(()=>{"use strict";Q();$e()});function bn(e){let r=Date.now();if(e.completionBlocker&&!Je(e.completionBlocker))return{state:"blocked",reason:e.completionBlocker};if(e.finalResult){if(e.localOnly&&Rn(e.finalResult))return{state:"done",reason:"local-only worker superseded by merged PR"};let o={finalResult:e.finalResult,changedFiles:e.changedFiles??[],gitAncestry:e.gitAncestry??null,prUrl:e.prUrl??null},s=Te(o);if(s.blocked){let i=Ke(s);return{state:"needs_attention",reason:s.reason?`landing blocked (${s.reason}): ${i}`:`landing blocked: ${i}`}}if(e.landingContract){let i=Ve({contract:e.landingContract,snapshot:o,finalResult:e.finalResult}),a=Ge(i);if(a)return{state:"needs_attention",reason:i.reason?`landing contract (${i.reason}): ${a}`:`landing contract: ${a}`}}return{state:"done",reason:"final result recorded"}}if(!e.alive){if(kn(e))return{state:"done",reason:"empty abandoned worker record"};let o=Ce(e.error);if(o)return{state:"blocked",reason:o.reason};let s=we({alive:!1,finalResult:null,changedFiles:e.changedFiles,gitAncestry:e.gitAncestry});if(s?.salvageable){let a=e.error?.trim();return{state:"needs_attention",reason:a?`${s.attentionReason} (${a})`:s.attentionReason}}let i=e.error?.trim();return{state:"needs_attention",reason:i?`process exited without a final result: ${i}`:s?.attentionReason??"process exited without a final result"}}if(e.heartbeatBlocker)return{state:"blocked",reason:`worker heartbeat reported blocker: ${e.heartbeatBlocker}`};let n=e.startedAt?Date.parse(e.startedAt):NaN;if(!e.firstEventAt&&e.stdoutBytes===0&&e.heartbeatBytes===0&&Number.isFinite(n)&&r-n>yn)return{state:"needs_attention",reason:`no first stream event ${j(n)}s after start`};let t=e.lastActivityAt?Date.parse(e.lastActivityAt):NaN;return Number.isFinite(t)&&r-t>B?{state:"stale",reason:`no log/event/heartbeat activity for ${j(t)}s`}:{state:"ok",reason:"recent activity"}}function Je(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function kn(e){return e.finalResult||e.taskId||e.agentOsId||e.stdoutBytes>0||(e.stderrBytes??0)>0||e.heartbeatBytes>0||e.error?.trim()||(e.changedFiles??[]).some(r=>r.trim())?!1:/empty worker dir|marked abandoned/i.test(e.reconcileReason??"")}function Rn(e){let r=null;if(typeof e=="string"?r=N(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return!1;let n=r.targetPrReconciliation??r.target_pr_reconciliation;return Array.isArray(n)?n.some(t=>!t||typeof t!="object"||Array.isArray(t)?!1:String(t.outcome??"").trim()==="merged"):!1}function xn(e,r,n){let t=e.completionSnapshot?.finalResult;return e.completionAckSource==="local-pr-merged-reconcile"&&t!==void 0&&t!==null?t:r||(t??he(n))}function qe(e,r={}){let n=_e(e.stdoutPath),t=ye(e.heartbeatPath),o=typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim().length>0,s=xn(e,n.finalResult,t),i=o?!1:I(e.pid),a=O(e.stdoutPath),l=O(e.stderrPath),m=O(e.heartbeatPath),d=Be(e.worktreePath),c=Ue(e.worktreePath,{base:r.base,baseCommit:r.baseCommit}),f=pe([n.lastEventAt,t.lastHeartbeatAt,w(e.stdoutPath),w(e.stderrPath),w(e.heartbeatPath)]),g=n.error||!i&&!s&&fe(e.stderrPath,10).trim()||void 0,h=typeof e.completionBlocker=="string"&&e.completionBlocker.trim()?e.completionBlocker.trim():null,y=Je(h)?null:h,vr=e.repairTargetPrUrl?{landingOnly:!1,targetPrUrls:[e.repairTargetPrUrl],targetPrUrl:e.repairTargetPrUrl,repairEnforceOriginalPr:!0}:null,H=bn({alive:i,finalResult:s,firstEventAt:n.firstEventAt,stdoutBytes:a,stderrBytes:l,heartbeatBytes:m,lastActivityAt:f,heartbeatBlocker:t.heartbeatBlocker,startedAt:e.startedAt,error:g,changedFiles:d,gitAncestry:c,completionBlocker:y,landingContract:vr,prUrl:e.repairTargetPrUrl??e.taskPrUrl??null,localOnly:e.localOnly===!0,taskId:e.taskId??null,agentOsId:e.agentOsId??null,reconcileReason:e.reconcileReason??null}),_r=y||H.state==="blocked"?"blocked":o||H.state==="done"?"done":s?"exited":i?"running":"exited";return{runId:e.runId,worker:e.name,pid:e.pid,alive:i,status:_r,attention:H,branch:e.branch,worktreePath:e.worktreePath,ownedPaths:e.ownedPaths,stdoutBytes:a,stderrBytes:l,heartbeatBytes:m,firstEventAt:n.firstEventAt,lastEventAt:n.lastEventAt,lastActivityAt:f,currentTool:o?null:n.currentTool,heartbeatCount:t.heartbeatCount,lastHeartbeatAt:t.lastHeartbeatAt,lastHeartbeatPhase:t.lastHeartbeatPhase,lastHeartbeatSummary:t.lastHeartbeatSummary,heartbeatBlocker:t.heartbeatBlocker,timestampAnomalies:t.timestampAnomalies,finalResult:s,error:g,changedFiles:d,gitAncestry:c,instructionPolicyFingerprint:e.instructionPolicyFingerprint??null,instructionPolicyEvidence:e.instructionPolicyEvidence??null,model:e.model??e.orchestrationAudit?.model??null,provider:e.provider??e.orchestrationAudit?.provider??null,boxKind:e.boxKind??null,boxId:e.boxId??null,runtimeId:e.runtimeId??null,personaSlug:e.personaSlug??null,dispatched:e.dispatched??null,localOnly:e.localOnly??null}}function Xe(e){return!!(e.finalResult||e.alive===!1||e.status==="exited"||e.status==="done")}function Qe(e){return e.finalResult?e.attention.state==="needs_attention"||e.attention.state==="blocked":!1}var yn,B,E=u(()=>{"use strict";be();Ee();Ae();Ie();q();De();ze();Q();p();yn=18e4,B=6e5});var C=u(()=>{"use strict"});var Z=u(()=>{"use strict";q();C()});var k=u(()=>{"use strict"});var U=u(()=>{"use strict"});var nr=u(()=>{"use strict"});var zt,Jt,ee=u(()=>{"use strict";zt=25*1024*1024*1024,Jt=12*1024*1024*1024});var eo,ro,tr=u(()=>{"use strict";ee();eo=5*1024*1024*1024,ro=10*1024*1024*1024});var ao,lo,re=u(()=>{"use strict";tr();ee();ao=30*1024*1024*1024,lo=15*1024*1024*1024});var or=u(()=>{"use strict";T();p()});var sr=u(()=>{"use strict";E()});var On,wn,lr=u(()=>{"use strict";nr();x();k();U();K();re();T();or();sr();p();On=500*1024*1024,wn=4*1024*1024*1024});var K=u(()=>{"use strict";lr()});import{homedir as Pn}from"node:os";import Nn from"node:path";var ur,oe=u(()=>{"use strict";ur=Nn.join(Pn(),".kynver",".env")});var cr=u(()=>{"use strict"});var dr=u(()=>{"use strict";cr()});var mr=u(()=>{"use strict"});var se=u(()=>{"use strict";dr();mr()});var fr=u(()=>{"use strict"});var pr=u(()=>{"use strict";fr()});var D=u(()=>{"use strict";oe();C();x();se();pr()});var gr=u(()=>{"use strict";k();k()});var hr=u(()=>{"use strict";oe();se();D()});var yr=u(()=>{"use strict";p()});import Kn from"node:path";var ws,ie=u(()=>{"use strict";C();yr();ws=Kn.join(".openclaw","harness")});var F=u(()=>{"use strict";x();k();U();K();ie()});var kr=u(()=>{"use strict";Z();k();gr();x();D();hr();p();F()});import{homedir as $n,totalmem as ri}from"node:os";import ae from"node:path";var Rr,fi,pi,gi,hi,x=u(()=>{"use strict";Z();C();p();k();U();K();re();D();kr();F();Rr=ae.join($n(),".kynver"),fi=ae.join(Rr,"config.json"),pi=ae.join(Rr,"credentials"),gi=500*1024*1024,hi=4*1024*1024*1024});var xr=u(()=>{"use strict";x();ie();F();p()});var T=u(()=>{"use strict";xr();p()});E();var Ze="kynver-harness:",Sn="@runner:";function er(e){return e?.trim()?e.trim():null}function vn(e){let r=er(e);if(!r?.startsWith(Ze))return null;let n=r.slice(Ze.length),t=n.indexOf(Sn);return t>=0?n.slice(0,t).trim()||null:n.trim()||null}function rr(e,r){let n=er(r);return n?vn(e)===n:!1}E();p();function _n(e){let{worker:r,status:n,taskLease:t}=e,o=t?.leaseOwner??null;if(r.dispatched&&t){if(t.status==="running"&&o&&!rr(o,r.runId))return{health:"orphaned",reason:`task lease held by ${o}, expected harness run ${r.runId}`};let i=r.leaseToken?.trim()??"",a=t.leaseToken?.trim()??"";if(t.status==="running"&&i&&a&&i!==a)return{health:"orphaned",reason:"task leaseToken superseded on board \u2014 completion replay would fail"};if(t.status==="running"&&!n.alive&&!n.finalResult)return{health:"orphaned",reason:"board task running but worker process is not alive"}}if(r.status==="running"&&!n.alive&&!n.finalResult)return{health:"orphaned",reason:"worker.json still running but process is dead"};if(n.attention.state==="stale")return{health:"stale",reason:n.attention.reason};let s=n.lastHeartbeatAt?Date.parse(n.lastHeartbeatAt):NaN;return n.alive&&Number.isFinite(s)&&Date.now()-s>B?{health:"stale",reason:`heartbeat older than ${Math.floor(B/1e3)}s`}:n.alive&&r.pid&&!I(r.pid)?{health:"orphaned",reason:"pid recorded but process is not alive"}:t?.status==="running"&&!n.alive&&n.finalResult?{health:"healthy",reason:"finished worker awaiting completion replay"}:{health:"healthy",reason:n.attention.reason||"worker within expected lifecycle bounds"}}T();function Sr(e){return!!e.completionReportedAt?.trim()}E();function jn(e){let{worker:r,status:n}=e,t=[];r.localOnly&&t.push("local-only worker (no board linkage)"),(!r.agentOsId||!r.taskId)&&t.push("missing agentOsId/taskId linkage"),Sr(r)&&t.push("completion already acknowledged"),r.completionBlocker&&t.push(r.completionBlocker),n.heartbeatBlocker&&n.alive&&t.push(`worker heartbeat blocker: ${n.heartbeatBlocker}`),n.attention.state==="blocked"&&t.push(n.attention.reason||"worker attention blocked"),Qe(n)&&t.push(n.attention.reason||"landing gate blocked");let o=Xe(n),s;return o?n.finalResult?s="final_result":n.alive?s="terminal_status":s="process_exited":t.push("worker has not reached a terminal condition"),{eligible:o&&t.length===0,terminalVerified:o,terminalReason:s,blockers:t}}export{jn as assessAutoCompleteEligibility,_n as classifyWorkerHealth,qe as computeWorkerStatus};

package/dist/server/worker-policy.d.ts

@@ -1,4 +1,6 @@
 export { auditWorkerEnv, scrubWorkerEnv, listForbiddenWorkerEnvKeys, isForbiddenWorkerEnvKey, } from "../worker-env.js";
+export { auditReviewWorkerCredentialScope, buildWorkerSpawnEnv, isNoProdCredentialReviewEnvironment, KYNVER_NO_PROD_DB_CREDENTIALS_ENV, } from "../security-review-environment.js";
+export { isHarnessExpertReviewWorker } from "../harness-expert-review.js";
 export { DEFAULT_WORKER_PROVIDER, resolveConfiguredWorkerProvider, isClaudeFamilyProvider, taskAllowsClaudeWorker, enforceCursorWorkerProvider, preferCursorExecutor, type EnforceCursorWorkerProviderInput, } from "../worker-provider-policy.js";
 export { classifyHeavyShellCommand } from "../heavy-verification/command-classify.js";
 export { gateWorkerShellCommand, HEAVY_VERIFICATION_TOKEN_REQUIRED, type GateWorkerShellCommandOpts, type WorkerCommandGateOutcome, type WorkerCommandGateResult, } from "../heavy-verification/worker-command-gate.js";

package/dist/server/worker-policy.js

@@ -1 +1 @@
-var n=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(o){throw t=[o],o}};function P(e){return He.has(e)?!0:$e.some(r=>e.endsWith(r))}function X(e){return Object.keys(e).filter(P).sort()}function f(e){let r={...e};for(let t of Object.keys(r))P(t)&&delete r[t];return r}function je(e){let r=X(e);return{forbiddenPresent:r,safe:r.length===0}}var Le,He,$e,d=n(()=>{"use strict";Le=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY"],He=new Set(Le),$e=["_SECRET","_API_KEY"]});function I(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}var a=n(()=>{"use strict"});var N=n(()=>{"use strict";a();d()});var g=n(()=>{"use strict"});var Q=n(()=>{"use strict";N();g()});var W=n(()=>{"use strict"});var B=n(()=>{"use strict"});var Z=n(()=>{"use strict"});var ot,it,M=n(()=>{"use strict";ot=25*1024*1024*1024,it=12*1024*1024*1024});var ut,dt,ee=n(()=>{"use strict";M();ut=5*1024*1024*1024,dt=10*1024*1024*1024});var yt,vt,T=n(()=>{"use strict";ee();M();yt=30*1024*1024*1024,vt=15*1024*1024*1024});import{homedir as Ye}from"node:os";import Ge from"node:path";var Ct,re=n(()=>{"use strict";h();g();a();Ct=Ge.join(Ye(),".openclaw","harness")});var K=n(()=>{"use strict";re();a()});var ne=n(()=>{"use strict";K();a()});var oe=n(()=>{"use strict"});var ie=n(()=>{"use strict";oe();a()});var se=n(()=>{"use strict"});var ae=n(()=>{"use strict";se()});var le=n(()=>{"use strict";ae();a()});var ce=n(()=>{"use strict"});var ue=n(()=>{"use strict"});var de=n(()=>{"use strict"});var F=n(()=>{"use strict"});var me=n(()=>{"use strict"});var pe=n(()=>{"use strict";F();me()});var fe=n(()=>{"use strict";ie();le();ce();ue();N();de();pe();F();a()});var ge=n(()=>{"use strict";fe()});var er,rr,he=n(()=>{"use strict";Z();h();W();B();L();T();K();ne();ge();a();er=500*1024*1024,rr=4*1024*1024*1024});var L=n(()=>{"use strict";he()});import{homedir as tr}from"node:os";import nr from"node:path";var or,ye=n(()=>{"use strict";or=nr.join(tr(),".kynver",".env")});var ve=n(()=>{"use strict"});var be=n(()=>{"use strict";ve()});var ke=n(()=>{"use strict"});var xe=n(()=>{"use strict";be();ke()});var Re=n(()=>{"use strict"});var Se=n(()=>{"use strict";Re()});var _e=n(()=>{"use strict";ye();g();h();xe();Se()});import{homedir as sr,totalmem as qo}from"node:os";import H from"node:path";var Ce,ii,si,ai,li,h=n(()=>{"use strict";Q();g();a();W();B();L();T();_e();Ce=H.join(sr(),".kynver"),ii=H.join(Ce,"config.json"),si=H.join(Ce,"credentials"),ai=500*1024*1024,li=4*1024*1024*1024});d();h();d();a();d();a();d();a();var ts=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4";function dr(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4"}var mr=dr();var Ae="composer-2.5";var u="cursor",pr=new Set(["claude","opus","anthropic"]),fr=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function j(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function l(e){if(!e?.trim())return!1;let r=e.trim().toLowerCase();return pr.has(r)?!0:r.includes("claude")||r.includes("opus")}function $(e){if(!e)return!1;let r=e.workerProviderOverride;if(typeof r=="string"&&l(r))return!0;let t=j(e,"executorRef").toLowerCase();if(t==="provider:claude"||t.startsWith("provider:claude:")||t.includes("claude-worker-override")||t.includes("operator-claude"))return!0;let o=j(e,"description");if(fr.some(s=>s.test(o)))return!0;let i=j(e,"title");return!!/\[use-claude-worker\]/i.test(i)}function gr(e,r){return{provider:u,model:Ae,rule:`policy:cursor_default${r}`,requestedModel:e}}function we(e){let{routing:r,task:t}=e,o=e.explicitProvider?.trim().toLowerCase();if(e.explicitProviderIsOperatorOverride&&l(o))return{...r,provider:"claude",rule:r.rule.startsWith("explicit:")?r.rule:"explicit:operator_provider"};if($(t)||r.rule==="explicit:cli"&&l(r.provider)||!l(r.provider))return r;let i=r.rule&&r.rule!=="default:global"?`:${r.rule.replace(/:/g,"_")}`:"";return gr(r.model,i)}function hr(e,r=u){let t=e?.trim();return t?l(t)?u:t==="codex"?"codex":t:r}function yr(e){let r=[...new Set(e.map(t=>t.trim().toLowerCase()).filter(Boolean))];return r.includes(u)?[...new Set(r.map(t=>l(t)?u:t))]:r.every(t=>l(t))?[u]:r}var vr=/\b(npm run typecheck|tsc\b[^|&;]*--noEmit|node scripts\/verify-pr-local\.mjs|kynver (harness )?verify)\b/i,br=/\b(npm run build\b|next build\b)\b/i,kr=/\b(vercel (build|deploy|--prod))\b/i,xr=/\b(openai|anthropic|perplexity|voyage)\b.*\b(api|cli)\b|\b(paid|billable)[-_ ]?compute\b/i;function V(e){let r=e.trim();return r?xr.test(r)?{heavy:!0,commandClass:"paid_compute",reason:"paid external compute requires heavy-verification token and operator approval"}:kr.test(r)?{heavy:!0,commandClass:"vercel_verify",reason:"Vercel build/deploy verification requires heavy-verification token"}:br.test(r)?{heavy:!0,commandClass:"full_build",reason:"full app build requires heavy-verification token"}:vr.test(r)?{heavy:!0,commandClass:"full_typecheck",reason:"full repo typecheck requires heavy-verification token"}:{heavy:!1,commandClass:"allowed",reason:null}:{heavy:!1,commandClass:"allowed",reason:null}}var _="heavy_verification_token_required";import{spawnSync as Kr}from"node:child_process";a();import{closeSync as Or,existsSync as b,mkdirSync as Ar,openSync as wr,readdirSync as Ne,readFileSync as Pr,statSync as Ir,unlinkSync as We,writeFileSync as Dr}from"node:fs";import z from"node:path";import{mkdirSync as Sr}from"node:fs";import{tmpdir as _r}from"node:os";import C from"node:path";import{homedir as Rr}from"node:os";import Pe from"node:path";function Ie(){let e=process.env.KYNVER_STATE_ROOT;return e?Pe.resolve(e):Pe.join(Rr(),".kynver","state")}function Cr(){return!!(process.env.VERCEL||process.env.VERCEL_ENV||process.env.AWS_LAMBDA_FUNCTION_NAME||process.env.AWS_EXECUTION_ENV)}function Er(){let e=process.env.KYNVER_HEAVY_VERIFICATION_STATE_ROOT;return e?C.resolve(e):Cr()?C.join(_r(),"kynver","state","heavy-verification"):C.join(Ie(),"heavy-verification")}function Y(){return C.join(Er(),"slots")}function v(){let e=Y();return Sr(e,{recursive:!0}),e}var k=120*6e4,De=1;function Nr(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function O(){let e=process.env.KYNVER_HEAVY_VERIFICATION_SKIP?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function E(){let e=process.env.KYNVER_HEAVY_VERIFICATION_MAX_CONCURRENT;return e?Nr(e,De):De}function Wr(e){return`slot-${e}`}function Br(e,r=Y()){return z.join(r,`${e}.json`)}function q(e){if(!b(e))return null;try{let r=JSON.parse(Pr(e,"utf8"));if(typeof r.slotId=="string"&&typeof r.pid=="number"&&typeof r.acquiredAt=="string"&&typeof r.command=="string")return r}catch{return null}return null}function Be(e,r=k){if(!e||!I(e.pid))return!0;let t=Date.parse(e.acquiredAt);return Number.isNaN(t)?!0:Date.now()-t>r}function Me(e,r){let t=q(e);if(t)return Be(t,r);if(!b(e))return!0;try{return Date.now()-Ir(e).mtimeMs>r}catch{return!0}}function Mr(e,r){if(Me(e,r))try{We(e)}catch{}}function Tr(e){return Ar(e,{recursive:!0}),e}function J(e={}){let r=Tr(e.slotsDir??v()),t=e.staleMs??k,o=0;for(let i of Ne(r)){if(!i.endsWith(".json"))continue;let s=z.join(r,i),c=b(s);Mr(s,t),c&&!b(s)&&(o+=1)}return o}function Ur(e={}){let r=e.slotsDir??v(),t=e.staleMs??k;J({slotsDir:r,staleMs:t});let o=[];for(let i of Ne(r)){if(!i.endsWith(".json"))continue;let s=q(z.join(r,i));s&&!Be(s,t)&&o.push(s)}return o}function G(e={}){return Ur(e).length}function x(e,r={}){if(O())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:E(),reason:null};let t=r.slotsDir??v(),o=r.staleMs??k,i=r.maxSlots??E();J({slotsDir:t,staleMs:o});for(let c=0;c<i;c+=1){let w=Wr(c),m=Br(w,t),Ue=q(m);if(Me(m,o))try{We(m)}catch{}else if(Ue||b(m))continue;let Ke={slotId:w,pid:process.pid,acquiredAt:new Date().toISOString(),command:e};try{let p=wr(m,"wx");Dr(p,JSON.stringify(Ke,null,2),"utf8"),Or(p);let Fe=G({slotsDir:t,staleMs:o});return{admitted:!0,slotId:w,activeSlots:Fe,maxSlots:i,reason:null}}catch(p){if(p.code==="EEXIST")continue;throw p}}let s=G({slotsDir:t,staleMs:o});return{admitted:!1,slotId:null,activeSlots:s,maxSlots:i,reason:`heavy verification at capacity (${s}/${i} slots)`}}function A(e,r={}){if(O())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:E(),reason:null};let t=r.slotsDir??v(),o=r.staleMs??k,i=r.maxSlots??E();J({slotsDir:t,staleMs:o});let s=G({slotsDir:t,staleMs:o}),c=s<i;return{admitted:c,slotId:null,activeSlots:s,maxSlots:i,reason:c?null:`heavy verification at capacity (${s}/${i} slots); waiting for ${e}`}}function Fr(e){e<=0||Kr(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function Te(e,r,t=2e3,o={}){let i=Date.now()+Math.max(0,r),s=x(e,o);for(;!s.admitted&&Date.now()<i;)Fr(Math.min(t,i-Date.now())),s=x(e,o);return s}function Lr(e,r={}){let t=V(e);if(!t.heavy)return{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:"command does not require heavy-verification token",verificationGate:{...A(e),slotId:null}};if(O())return{allowed:!0,outcome:"heavy_verification_skipped",commandClass:t.commandClass,reason:"KYNVER_HEAVY_VERIFICATION_SKIP bypasses gate",verificationGate:{...A(e),slotId:null}};let o=r.waitMs??0,i=o>0?Te(e,o,r.pollMs):x(e);return i.admitted?{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:t.reason??"heavy-verification token acquired",verificationGate:i}:{allowed:!1,outcome:_,commandClass:t.commandClass,reason:t.reason??i.reason??_,verificationGate:i}}export{u as DEFAULT_WORKER_PROVIDER,_ as HEAVY_VERIFICATION_TOKEN_REQUIRED,je as auditWorkerEnv,V as classifyHeavyShellCommand,we as enforceCursorWorkerProvider,Lr as gateWorkerShellCommand,l as isClaudeFamilyProvider,P as isForbiddenWorkerEnvKey,X as listForbiddenWorkerEnvKeys,yr as preferCursorExecutor,hr as resolveConfiguredWorkerProvider,f as scrubWorkerEnv,$ as taskAllowsClaudeWorker};
+var o=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(n){throw t=[n],n}};function M(e){return lr.has(e)?!0:cr.some(r=>e.endsWith(r))}function le(e){return Object.keys(e).filter(M).sort()}function S(e){let r={...e};for(let t of Object.keys(r))M(t)&&delete r[t];return r}function ur(e){let r=le(e);return{forbiddenPresent:r,safe:r.length===0}}var ar,lr,cr,_=o(()=>{"use strict";ar=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY"],lr=new Set(ar),cr=["_SECRET","_API_KEY"]});function H(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}var a=o(()=>{"use strict"});var j=o(()=>{"use strict";a();_()});var y=o(()=>{"use strict"});var V=o(()=>{"use strict";j();y()});var m=o(()=>{"use strict"});var E=o(()=>{"use strict"});var ge=o(()=>{"use strict"});var Yt,Gt,Y=o(()=>{"use strict";Yt=25*1024*1024*1024,Gt=12*1024*1024*1024});var Qt,Zt,he=o(()=>{"use strict";Y();Qt=5*1024*1024*1024,Zt=10*1024*1024*1024});var sn,an,G=o(()=>{"use strict";he();Y();sn=30*1024*1024*1024,an=15*1024*1024*1024});var ve=o(()=>{"use strict";a()});import _r from"node:path";var hn,z=o(()=>{"use strict";y();ve();hn=_r.join(".openclaw","harness")});var O=o(()=>{"use strict";p();m();E();A();z()});var xe=o(()=>{"use strict";p();z();O();a()});var J=o(()=>{"use strict";xe();a()});var ke=o(()=>{"use strict";J();a()});var Se=o(()=>{"use strict"});var _e=o(()=>{"use strict";Se();a()});var Ee=o(()=>{"use strict"});var Ce=o(()=>{"use strict";Ee()});var Oe=o(()=>{"use strict";Ce();a()});var Ae=o(()=>{"use strict"});var Ie=o(()=>{"use strict"});var we=o(()=>{"use strict"});var X=o(()=>{"use strict"});var Pe=o(()=>{"use strict"});var Ne=o(()=>{"use strict";X();Pe()});var De=o(()=>{"use strict";_e();Oe();Ae();Ie();j();we();Ne();X();a()});var Be=o(()=>{"use strict";De()});var Nr,Dr,Te=o(()=>{"use strict";ge();p();m();E();A();G();J();ke();Be();a();Nr=500*1024*1024,Dr=4*1024*1024*1024});var A=o(()=>{"use strict";Te()});import{homedir as Br}from"node:os";import Tr from"node:path";var We,Q=o(()=>{"use strict";We=Tr.join(Br(),".kynver",".env")});var Ke=o(()=>{"use strict"});var Ue=o(()=>{"use strict";Ke()});var Me=o(()=>{"use strict"});var Z=o(()=>{"use strict";Ue();Me()});var Fe=o(()=>{"use strict"});var Le=o(()=>{"use strict";Fe()});var w=o(()=>{"use strict";Q();y();p();Z();Le()});var He=o(()=>{"use strict";m();m()});var $e=o(()=>{"use strict";Q();Z();w()});var je=o(()=>{"use strict";V();m();He();p();w();$e();a();O()});import{homedir as $r,totalmem as us}from"node:os";import ee from"node:path";var Ve,ks,Ss,_s,Es,p=o(()=>{"use strict";V();y();a();m();E();A();G();w();je();O();Ve=ee.join($r(),".kynver"),ks=ee.join(Ve,"config.json"),Ss=ee.join(Ve,"credentials"),_s=500*1024*1024,Es=4*1024*1024*1024});_();_();var F="KYNVER_NO_PROD_DB_CREDENTIALS",dr=["KYNVER_ENV_FILE"],mr=new Set(["1","true","yes","on"]);function ue(e){let r=e[F]?.trim().toLowerCase();return r!==void 0&&mr.has(r)}function h(e,r={}){let t=S(e);if(!r.reviewWorker)return t;let n={...t,[F]:"1"};for(let i of dr)delete n[i];return n}var ce=["DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL"];function pr(e,r={}){let t=h(e,r),n=Object.keys(t).filter(u=>u.endsWith("_SECRET")||u.endsWith("_API_KEY")||ce.includes(u)),i=ce.every(u=>t[u]===void 0),s=r.reviewWorker?t.KYNVER_ENV_FILE===void 0:!0,l=ue(t);return{reviewMode:!!r.reviewWorker,noProdFlagPresent:r.reviewWorker?l:!0,forbiddenKeysAfterScrub:n.sort(),productionDbKeysAbsent:i,envFilePointerStripped:s,safe:i&&n.length===0&&s&&(!r.reviewWorker||l)}}var fr="expert-lane-pr-review:",gr="plan-review-task",hr="scheduledjob:";function de(e){if(!e)return null;let r=e.trim().toLowerCase();return r.length?r:null}function yr(e){let r=(e.executorRef??"").toLowerCase();if(r.startsWith(fr)||r===gr||r.startsWith("daemon-review:"))return!0;if(r.startsWith(hr)&&e.parentTaskId){let n=de(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}let t=(e.title??"").toLowerCase();if(t.includes("expert pr review"))return!0;if(e.parentTaskId&&(t.startsWith("review:")||t.includes("review required")||t.includes("runtime review"))){let n=de(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}return!1}var vr=/^claude[-_]/i,br=/^(?:opus|sonnet|haiku)\b/i;function me(e){let r=e.trim();return vr.test(r)||br.test(r)}function pe(e){let r=e.trim().toLowerCase();return r.startsWith("gpt-")||r.startsWith("gpt5")||r.includes("codex")}function fe(e){let r=e.trim().toLowerCase();return r.includes("composer")||r.includes("cursor")}function Rr(e){return pe(e)?"codex":me(e)?"claude":(fe(e),"cursor")}function xr(e){if(!e.startsWith("provider:"))return null;let r=e.slice(9),t=r.indexOf(":"),n=(t>=0?r.slice(0,t):r).trim().toLowerCase(),i=t>=0&&r.slice(t+1).trim()||void 0;return n?n==="claude"||n==="opus"||n==="anthropic"?{provider:"claude",model:i,rule:i?"executor_ref:provider_claude_model":"executor_ref:provider_claude"}:n==="codex"?{provider:"codex",model:i,rule:"executor_ref:provider_codex"}:n==="cursor"||n==="composer"?{provider:"cursor",model:i,rule:"executor_ref:provider_cursor"}:null:null}function kr(e){if(!e.startsWith("harness-lane:"))return null;let r=e.split(":").map(i=>i.trim()).filter(Boolean);if(r.length<2)return null;let t=r[1],n=r.slice(2).join(":");return n?me(n)||pe(n)||fe(n)?{lane:t,model:n,provider:Rr(n),rule:"executor_ref:harness_lane_model"}:{lane:t,rule:"executor_ref:harness_lane"}:{lane:t,rule:"executor_ref:harness_lane"}}function L(e){let r=typeof e=="string"?e.trim():"";return r?xr(r)??kr(r):null}p();a();a();a();var ba=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4";function zr(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4"}var qr=zr();var ze="composer-2.5";var d="cursor",Jr=new Set(["claude","opus","anthropic"]),Xr=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function D(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function c(e){if(!e?.trim())return!1;let r=e.trim().toLowerCase();return Jr.has(r)?!0:r.includes("claude")||r.includes("opus")}function re(e){if(!e)return!1;let r=e.workerProviderOverride;if(typeof r=="string"&&c(r))return!0;let t=D(e,"executorRef").toLowerCase();if(t==="provider:claude"||t.startsWith("provider:claude:")||t.includes("claude-worker-override")||t.includes("operator-claude"))return!0;let n=L(D(e,"executorRef"));if(n?.provider&&c(n.provider)||n?.model&&c(Qr(n.model)))return!0;let i=D(e,"description");if(Xr.some(l=>l.test(i)))return!0;let s=D(e,"title");return!!/\[use-claude-worker\]/i.test(s)}function Qr(e){let r=e.trim().toLowerCase();return/^claude[-_]/.test(r)||/^(?:opus|sonnet|haiku)\b/.test(r)?"claude":r}function Zr(e,r){return{provider:d,model:ze,rule:`policy:cursor_default${r}`,requestedModel:e}}function qe(e){let{routing:r,task:t}=e,n=e.explicitProvider?.trim().toLowerCase();if(e.explicitProviderIsOperatorOverride&&c(n))return{...r,provider:"claude",rule:r.rule.startsWith("explicit:")?r.rule:"explicit:operator_provider"};if(re(t)||r.rule==="explicit:cli"&&c(r.provider)||!c(r.provider))return r;let i=r.rule&&r.rule!=="default:global"?`:${r.rule.replace(/:/g,"_")}`:"";return Zr(r.model,i)}function et(e,r=d){let t=e?.trim();return t?c(t)?d:t==="codex"?"codex":t:r}function rt(e){let r=[...new Set(e.map(t=>t.trim().toLowerCase()).filter(Boolean))];return r.includes(d)?[...new Set(r.map(t=>c(t)?d:t))]:r.every(t=>c(t))?[d]:r}var tt=/\b(npm run typecheck|tsc\b[^|&;]*--noEmit|node scripts\/verify-pr-local\.mjs|kynver (harness )?verify)\b/i,nt=/\b(npm run build\b|next build\b)\b/i,ot=/\b(vercel (build|deploy|--prod))\b/i,it=/\b(openai|anthropic|perplexity|voyage)\b.*\b(api|cli)\b|\b(paid|billable)[-_ ]?compute\b/i;function te(e){let r=e.trim();return r?it.test(r)?{heavy:!0,commandClass:"paid_compute",reason:"paid external compute requires heavy-verification token and operator approval"}:ot.test(r)?{heavy:!0,commandClass:"vercel_verify",reason:"Vercel build/deploy verification requires heavy-verification token"}:nt.test(r)?{heavy:!0,commandClass:"full_build",reason:"full app build requires heavy-verification token"}:tt.test(r)?{heavy:!0,commandClass:"full_typecheck",reason:"full repo typecheck requires heavy-verification token"}:{heavy:!1,commandClass:"allowed",reason:null}:{heavy:!1,commandClass:"allowed",reason:null}}var B="heavy_verification_token_required";import{spawnSync as St}from"node:child_process";a();import{closeSync as dt,existsSync as R,mkdirSync as mt,openSync as pt,readdirSync as Ze,readFileSync as ft,statSync as gt,unlinkSync as er,writeFileSync as ht}from"node:fs";import ie from"node:path";import{mkdirSync as at}from"node:fs";import{tmpdir as lt}from"node:os";import T from"node:path";import{homedir as st}from"node:os";import Je from"node:path";function Xe(){let e=process.env.KYNVER_STATE_ROOT;return e?Je.resolve(e):Je.join(st(),".kynver","state")}function ct(){return!!(process.env.VERCEL||process.env.VERCEL_ENV||process.env.AWS_LAMBDA_FUNCTION_NAME||process.env.AWS_EXECUTION_ENV)}function ut(){let e=process.env.KYNVER_HEAVY_VERIFICATION_STATE_ROOT;return e?T.resolve(e):ct()?T.join(lt(),"kynver","state","heavy-verification"):T.join(Xe(),"heavy-verification")}function ne(){return T.join(ut(),"slots")}function b(){let e=ne();return at(e,{recursive:!0}),e}var x=120*6e4,Qe=1;function yt(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function K(){let e=process.env.KYNVER_HEAVY_VERIFICATION_SKIP?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function W(){let e=process.env.KYNVER_HEAVY_VERIFICATION_MAX_CONCURRENT;return e?yt(e,Qe):Qe}function vt(e){return`slot-${e}`}function bt(e,r=ne()){return ie.join(r,`${e}.json`)}function se(e){if(!R(e))return null;try{let r=JSON.parse(ft(e,"utf8"));if(typeof r.slotId=="string"&&typeof r.pid=="number"&&typeof r.acquiredAt=="string"&&typeof r.command=="string")return r}catch{return null}return null}function rr(e,r=x){if(!e||!H(e.pid))return!0;let t=Date.parse(e.acquiredAt);return Number.isNaN(t)?!0:Date.now()-t>r}function tr(e,r){let t=se(e);if(t)return rr(t,r);if(!R(e))return!0;try{return Date.now()-gt(e).mtimeMs>r}catch{return!0}}function Rt(e,r){if(tr(e,r))try{er(e)}catch{}}function xt(e){return mt(e,{recursive:!0}),e}function ae(e={}){let r=xt(e.slotsDir??b()),t=e.staleMs??x,n=0;for(let i of Ze(r)){if(!i.endsWith(".json"))continue;let s=ie.join(r,i),l=R(s);Rt(s,t),l&&!R(s)&&(n+=1)}return n}function kt(e={}){let r=e.slotsDir??b(),t=e.staleMs??x;ae({slotsDir:r,staleMs:t});let n=[];for(let i of Ze(r)){if(!i.endsWith(".json"))continue;let s=se(ie.join(r,i));s&&!rr(s,t)&&n.push(s)}return n}function oe(e={}){return kt(e).length}function k(e,r={}){if(K())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:W(),reason:null};let t=r.slotsDir??b(),n=r.staleMs??x,i=r.maxSlots??W();ae({slotsDir:t,staleMs:n});for(let l=0;l<i;l+=1){let u=vt(l),f=bt(u,t),or=se(f);if(tr(f,n))try{er(f)}catch{}else if(or||R(f))continue;let ir={slotId:u,pid:process.pid,acquiredAt:new Date().toISOString(),command:e};try{let g=pt(f,"wx");ht(g,JSON.stringify(ir,null,2),"utf8"),dt(g);let sr=oe({slotsDir:t,staleMs:n});return{admitted:!0,slotId:u,activeSlots:sr,maxSlots:i,reason:null}}catch(g){if(g.code==="EEXIST")continue;throw g}}let s=oe({slotsDir:t,staleMs:n});return{admitted:!1,slotId:null,activeSlots:s,maxSlots:i,reason:`heavy verification at capacity (${s}/${i} slots)`}}function U(e,r={}){if(K())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:W(),reason:null};let t=r.slotsDir??b(),n=r.staleMs??x,i=r.maxSlots??W();ae({slotsDir:t,staleMs:n});let s=oe({slotsDir:t,staleMs:n}),l=s<i;return{admitted:l,slotId:null,activeSlots:s,maxSlots:i,reason:l?null:`heavy verification at capacity (${s}/${i} slots); waiting for ${e}`}}function _t(e){e<=0||St(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function nr(e,r,t=2e3,n={}){let i=Date.now()+Math.max(0,r),s=k(e,n);for(;!s.admitted&&Date.now()<i;)_t(Math.min(t,i-Date.now())),s=k(e,n);return s}function Et(e,r={}){let t=te(e);if(!t.heavy)return{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:"command does not require heavy-verification token",verificationGate:{...U(e),slotId:null}};if(K())return{allowed:!0,outcome:"heavy_verification_skipped",commandClass:t.commandClass,reason:"KYNVER_HEAVY_VERIFICATION_SKIP bypasses gate",verificationGate:{...U(e),slotId:null}};let n=r.waitMs??0,i=n>0?nr(e,n,r.pollMs):k(e);return i.admitted?{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:t.reason??"heavy-verification token acquired",verificationGate:i}:{allowed:!1,outcome:B,commandClass:t.commandClass,reason:t.reason??i.reason??B,verificationGate:i}}export{d as DEFAULT_WORKER_PROVIDER,B as HEAVY_VERIFICATION_TOKEN_REQUIRED,F as KYNVER_NO_PROD_DB_CREDENTIALS_ENV,pr as auditReviewWorkerCredentialScope,ur as auditWorkerEnv,h as buildWorkerSpawnEnv,te as classifyHeavyShellCommand,qe as enforceCursorWorkerProvider,Et as gateWorkerShellCommand,c as isClaudeFamilyProvider,M as isForbiddenWorkerEnvKey,yr as isHarnessExpertReviewWorker,ue as isNoProdCredentialReviewEnvironment,le as listForbiddenWorkerEnvKeys,rt as preferCursorExecutor,et as resolveConfiguredWorkerProvider,S as scrubWorkerEnv,re as taskAllowsClaudeWorker};

package/dist/status.d.ts

@@ -73,6 +73,12 @@ export interface HarnessWorkerRecord {
     model?: string;
     /** Worker provider key frozen at spawn for status/completion readback. */
     provider?: string;
+    executionMode?: import("./worker-execution-mode.js").WorkerExecutionMode;
+    /** Runtime observed unread operator steers and stopped this worker generation. */
+    steerRestartRequired?: boolean;
+    steerRestartRequestedAt?: string;
+    pendingSteerEventIds?: number[];
+    dispatchSteerFenceEventId?: number;
     branch: string;
     worktreePath: string;
     workerDir: string;
@@ -179,6 +185,9 @@ export interface RawHarnessWorkerStatus {
     lastHeartbeatPhase: string | null;
     lastHeartbeatSummary: string | null;
     heartbeatBlocker: string | null;
+    steerRestartRequired?: boolean;
+    pendingSteerEventIds?: number[];
+    dispatchSteerFenceEventId?: number;
     /** Parser-detected timestamp anomalies (e.g., future heartbeat ts). */
     timestampAnomalies?: Array<{
         kind: "future_heartbeat_timestamp";

package/dist/supervisor.d.ts

@@ -1,5 +1,6 @@
 import type { HarnessRunRecord } from "./run-store.js";
 import type { ContextEnvelopeEvidenceSnapshot, HarnessMemoryQualityCaptureSnapshot, HarnessWorkerRecord, InstructionPolicyEvidenceSnapshot, PersonaContextEvidenceSnapshot, RuntimeEnvelopeEvidenceSnapshot } from "./status.js";
+import type { WorkerExecutionMode } from "./worker-execution-mode.js";
 export interface SpawnWorkerOptions {
     name: string;
     task: string;
@@ -33,6 +34,7 @@ export interface SpawnWorkerOptions {
     taskPrUrl?: string;
     repairTargetPrUrl?: string;
     repairTargetBranch?: string;
+    executionMode?: WorkerExecutionMode;
 }
 export declare function spawnWorkerProcess(run: HarnessRunRecord, opts: SpawnWorkerOptions): HarnessWorkerRecord;
 export declare function startWorker(args: Record<string, string | boolean>): Promise<void>;

package/dist/worker-execution-mode.d.ts

@@ -0,0 +1,5 @@
+export type WorkerExecutionMode = "write" | "read_only";
+export declare function resolveWorkerExecutionMode(task: {
+    description?: unknown;
+    executorRef?: unknown;
+}): WorkerExecutionMode;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kynver-app/runtime",
-  "version": "0.1.172",
+  "version": "0.2.1",
   "description": "Kynver AgentOS local execution runtime and CLI",
   "type": "module",
   "main": "./dist/index.js",
@@ -98,17 +98,18 @@
   },
   "files": [
     "dist/**",
+    "!dist/**/__tests__/**",
     "!dist/**/*.map",
     "README.md"
   ],
   "scripts": {
-    "build": "esbuild src/cli.ts src/index.ts src/worker-persona-catalog.ts src/instruction-bundle/contract.ts src/chat/command-auth-proof.ts src/server/monitor.ts src/server/landing.ts src/server/worker-policy.ts src/server/orchestration.ts src/server/heavy-verification.ts src/server/memory-cost.ts src/server/pr-evidence.ts src/server/default-repo.ts src/server/cleanup.ts src/server/repo-search.ts src/server/harness-notice.ts src/server/memory-cost-enforce.ts src/server/wsl-crash-dumps.ts --bundle --platform=node --format=esm --packages=external --outbase=src --outdir=dist --minify && tsc -p tsconfig.json --emitDeclarationOnly && node scripts/chmod-cli-bin.mjs",
+    "build": "esbuild src/cli.ts src/index.ts src/node-runtime-policy.ts src/worker-persona-catalog.ts src/instruction-bundle/contract.ts src/chat/command-auth-proof.ts src/server/monitor.ts src/server/landing.ts src/server/worker-policy.ts src/server/orchestration.ts src/server/heavy-verification.ts src/server/memory-cost.ts src/server/pr-evidence.ts src/server/default-repo.ts src/server/cleanup.ts src/server/repo-search.ts src/server/harness-notice.ts src/server/memory-cost-enforce.ts src/server/wsl-crash-dumps.ts --bundle --platform=node --format=esm --packages=external --outbase=src --outdir=dist --minify && tsc -p tsconfig.json --emitDeclarationOnly && node scripts/chmod-cli-bin.mjs",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "vitest run --config vitest.config.ts",
     "prepublishOnly": "node ../../scripts/npm-publish-guard.mjs && npm run build"
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=24.11.0"
   },
   "publishConfig": {
     "access": "public"