@kynver-app/runtime 0.1.21 → 0.1.22

package/dist/cli.js

@@ -182,7 +182,7 @@ function resolveConfiguredBaseUrl(argsBaseUrl) {
   return baseUrl ? trimTrailingSlash(String(baseUrl)) : void 0;
 }
 function resolveConfiguredCallbackSecret(argsSecret, agentOsId) {
-  const scoped = argsSecret || loadRunnerToken(agentOsId) || loadRunnerToken(loadUserConfig().agentOsId);
+  const scoped = argsSecret || loadRunnerToken(agentOsId) || (agentOsId ? void 0 : loadRunnerToken(loadUserConfig().agentOsId));
   if (scoped) return String(scoped);
   const globalSecret = process.env.KYNVER_RUNTIME_SECRET || process.env.OPENCLAW_CRON_SECRET;
   if (globalSecret) {
@@ -223,6 +223,23 @@ async function refreshRunnerToken(agentOsId, opts) {
     return null;
   }
 }
+async function refreshRunnerTokenForAuthFailure(rejectedSecret, agentOsId, opts) {
+  const apiKey = loadApiKey();
+  const baseUrl = resolveConfiguredBaseUrl(opts?.baseUrl);
+  if (!apiKey) return { ok: false, reason: "KYNVER_API_KEY is required to refresh a rejected runner token" };
+  if (!agentOsId) return { ok: false, reason: "agentOsId is required to refresh a rejected runner token" };
+  if (!baseUrl) return { ok: false, reason: "KYNVER_API_URL or --base-url is required to refresh a rejected runner token" };
+  try {
+    const token = await fetchRunnerCredential(agentOsId, { baseUrl, apiKey });
+    if (token && token !== rejectedSecret) {
+      saveRunnerToken(agentOsId, token);
+      return { ok: true, token };
+    }
+    return { ok: false, reason: "runner credential refresh returned the rejected token" };
+  } catch (error) {
+    return { ok: false, reason: error.message };
+  }
+}
 async function fetchRunnerCredential(agentOsId, opts) {
   const apiKey = opts?.apiKey || loadApiKey();
   if (!apiKey) throw new Error("API key required \u2014 run `kynver login` first");
@@ -375,6 +392,14 @@ async function postJson(url, secret, body) {
   }
   return { ok: res.ok, status: res.status, response };
 }
+async function postJsonWithCredentialRefresh(url, secret, body, opts) {
+  const first = await postJson(url, secret, body);
+  if (first.ok || first.status !== 401) return first;
+  const refreshed = await refreshRunnerTokenForAuthFailure(secret, opts.agentOsId, { baseUrl: opts.baseUrl });
+  if (!refreshed.ok) return { ...first, authRefreshFailure: refreshed.reason };
+  const retry = await postJson(url, refreshed.token, body);
+  return { ...retry, refreshedAuth: true };
+}
 async function getJson(url, secret) {
   const res = await fetch(url, {
     method: "GET",
@@ -1055,6 +1080,59 @@ function observeRunnerResourceGate(input) {
   };
 }
 
+// src/model-routing-task-enrich.ts
+function taskString(task, key) {
+  const v = task[key];
+  return typeof v === "string" ? v.trim() : "";
+}
+function normalize(value) {
+  return value.toLowerCase();
+}
+var PERSONA_DEFAULT_LANE = {
+  dalton: "implementer",
+  lorentz: "report_reviewer"
+};
+function inferRoleLaneFromTask(task) {
+  const existing = taskString(task, "roleLane");
+  if (existing) return existing;
+  const ref = normalize(taskString(task, "executorRef"));
+  const title = normalize(taskString(task, "title"));
+  const persona = normalize(taskString(task, "personaSlug"));
+  const combined = `${ref} ${title}`;
+  if (combined.includes("deep review") || combined.includes("security review") || ref.includes("deep-reviewer")) {
+    return "deep_reviewer";
+  }
+  if (combined.includes("plan author") || combined.includes("plan-author") || title.includes("strategy plan")) {
+    return "plan_author";
+  }
+  if (combined.includes("plan review") || ref.includes("plan-reviewer")) {
+    return "plan_reviewer";
+  }
+  if (combined.includes("report review") || combined.includes("completion report")) {
+    return "report_reviewer";
+  }
+  if (combined.includes("repair") || title.startsWith("fix ") || ref.includes("repair")) {
+    return "repair_implementer";
+  }
+  if (ref.includes("cursor") || ref.includes("codex") || ref.includes("composer") || title.includes("implement") || title.includes("land:")) {
+    return "implementer";
+  }
+  if (persona && PERSONA_DEFAULT_LANE[persona]) {
+    const base = PERSONA_DEFAULT_LANE[persona];
+    if (persona === "lorentz" && (combined.includes("deep") || combined.includes("security"))) {
+      return "deep_reviewer";
+    }
+    return base;
+  }
+  if (combined.includes("review")) return "report_reviewer";
+  return void 0;
+}
+function enrichTaskForModelRouting(task) {
+  const roleLane = inferRoleLaneFromTask(task);
+  if (!roleLane) return task;
+  return { ...task, roleLane };
+}
+
 // src/providers/claude.ts
 import { closeSync, openSync } from "node:fs";
 import { spawn } from "node:child_process";
@@ -1161,7 +1239,7 @@ var claudeProvider = {
 
 // src/model-routing.ts
 var GLOBAL_DEFAULT_MODEL = "claude-sonnet-4-6";
-function taskString(task, key) {
+function taskString2(task, key) {
   const v = task[key];
   return typeof v === "string" ? v.trim() : "";
 }
@@ -1194,10 +1272,10 @@ function isOpusLane(ref, title) {
   return false;
 }
 function inferModelRoutingFromTask(task) {
-  const ref = normalizeRef(taskString(task, "executorRef"));
-  const title = taskString(task, "title").toLowerCase();
-  const priority = taskString(task, "priority") || "normal";
-  const roleLane = normalizeRef(taskString(task, "roleLane"));
+  const ref = normalizeRef(taskString2(task, "executorRef"));
+  const title = taskString2(task, "title").toLowerCase();
+  const priority = taskString2(task, "priority") || "normal";
+  const roleLane = normalizeRef(taskString2(task, "roleLane"));
   if (ref.includes("cursor") || ref.includes("codex") || ref.includes("composer") || ref.includes("copilot") || roleLane === "implementer" || roleLane === "repair_implementer") {
     return { provider: "cursor", rule: "lane:implementation" };
   }
@@ -1220,6 +1298,9 @@ function inferModelRoutingFromTask(task) {
   if (priority === "critical") {
     return { model: "claude-opus-4-7", provider: "claude", rule: "priority:critical" };
   }
+  if (priority === "high") {
+    return { model: "claude-sonnet-4-6", provider: "claude", rule: "priority:high" };
+  }
   if (priority === "low") {
     return {
       model: "claude-haiku-4-5-20251001",
@@ -1296,6 +1377,14 @@ function buildPrompt(input) {
     "- After implementation: wait for report_reviewer then deep_reviewer confirmation (via MCP/session agents) before follow-up rows close.",
     input.planId ? `Active planId: ${input.planId}${input.taskId ? ` \xB7 taskId: ${input.taskId}` : ""}` : "No planId on this worker \u2014 still emit progress when you touch plan-scoped work."
   ];
+  const planArtifactLines = compact ? [
+    "Plan artifacts: when authoring/revising docs/superpowers/plans/, open a GitHub PR early and iterate from that PR branch; do not leave the canonical plan only in the harness worktree."
+  ] : [
+    "PR-first plan artifacts (when authoring or revising docs/superpowers/plans/):",
+    "- Before substantial plan drafting: create a feature branch, open a GitHub PR (draft OK), commit and push the plan file \u2014 do not leave the canonical plan only in this harness worktree.",
+    "- Iterate review on that PR branch; link prUrl on the AgentOS task and plan progress evidence (`--evidence pr:<url>`).",
+    "- See docs/superpowers/plans/2026-05-25-pr-first-plan-artifact-preservation.md for the full checklist."
+  ];
   return [
     "You are running under the Kynver AgentOS runtime.",
     "Immediately state your plan before editing.",
@@ -1307,6 +1396,8 @@ function buildPrompt(input) {
     "",
     ...progressLines,
     "",
+    ...planArtifactLines,
+    "",
     "Task:",
     input.task
   ].join("\n");
@@ -1618,8 +1709,8 @@ function workerStatus(args) {
   writeJson(path8.join(worker.workerDir, "last-status.json"), status);
   console.log(JSON.stringify(status, null, 2));
 }
-function runStatus(args) {
-  const run = loadRun(String(args.run));
+function buildRunBoard(runId) {
+  const run = loadRun(runId);
   const names = Object.keys(run.workers || {});
   const workers = names.map((name) => {
     const worker = readJson(
@@ -1674,6 +1765,34 @@ function runStatus(args) {
     workers
   };
   writeJson(path8.join(runDirectory(run.id), "last-board.json"), board);
+  return board;
+}
+async function publishHarnessBoardSnapshot(args, source) {
+  const runId = String(args.run || "");
+  const agentOsId = String(args.agentOsId || "");
+  if (!runId || !agentOsId) return null;
+  const board = buildRunBoard(runId);
+  const base = resolveBaseUrl(args.baseUrl ? String(args.baseUrl) : void 0);
+  const secret = await resolveCallbackSecretWithMint(args.secret ? String(args.secret) : void 0, agentOsId, {
+    baseUrl: base
+  });
+  const url = `${base}/api/agent-os/by-id/${encodeURIComponent(agentOsId)}/harness/snapshot`;
+  const res = await postJsonWithCredentialRefresh(
+    url,
+    secret,
+    { agentOsId, runId, source, snapshot: board },
+    { agentOsId, baseUrl: base }
+  );
+  return {
+    ok: res.ok,
+    httpStatus: res.status,
+    response: res.response,
+    authRefreshed: res.refreshedAuth,
+    authRefreshFailure: res.authRefreshFailure
+  };
+}
+function runStatus(args) {
+  const board = buildRunBoard(String(args.run));
   console.log(JSON.stringify(board, null, 2));
 }
 function tailWorker(args) {
@@ -2066,9 +2185,10 @@ async function dispatchRun(args) {
       runnerDiskGate,
       runnerResourceGate,
       ...args.lane ? { lane: String(args.lane) } : {},
+      executor: args.executor ? String(args.executor) : "harness",
       ...args.diskPath ? { diskPath: String(args.diskPath) } : {}
     };
-    const dispatch = await postJson(dispatchUrl, secret, body);
+    const dispatch = await postJsonWithCredentialRefresh(dispatchUrl, secret, body, { agentOsId, baseUrl: base });
     const responseBody = dispatch.response;
     if (!dispatch.ok || !responseBody?.result) {
       const failure = {
@@ -2076,7 +2196,9 @@ async function dispatchRun(args) {
         agentOsId,
         action: "dispatch",
         httpStatus: dispatch.status,
-        response: dispatch.response
+        response: dispatch.response,
+        authRefreshed: dispatch.refreshedAuth === true,
+        authRefreshFailure: dispatch.authRefreshFailure
       };
       if (pipeline) return { ok: false, ...failure };
       console.log(JSON.stringify(failure, null, 2));
@@ -2133,7 +2255,7 @@ async function dispatchRun(args) {
       const name = safeSlug(`t-${task.id}-a${task.attempt}`);
       const routing = resolveWorkerLaunch({
         explicitModel: args.model ? String(args.model) : void 0,
-        task
+        task: enrichTaskForModelRouting(task)
       });
       try {
         const planId = task.planId ? String(task.planId) : void 0;
@@ -2165,7 +2287,7 @@ async function dispatchRun(args) {
         const releaseUrl = `${base}/api/agent-os/by-id/${encodeURIComponent(agentOsId)}/tasks/${encodeURIComponent(String(task.id))}/release`;
         let release;
         try {
-          release = await postJson(releaseUrl, secret, { agentOsId, leaseOwner });
+          release = await postJsonWithCredentialRefresh(releaseUrl, secret, { agentOsId, leaseOwner }, { agentOsId, baseUrl: base });
         } catch (relErr) {
           release = { ok: false, error: relErr.message };
         }
@@ -2214,6 +2336,7 @@ async function sweepRun(args) {
     const base = resolveBaseUrl(args.baseUrl ? String(args.baseUrl) : void 0);
     const secret = await resolveCallbackSecretWithMint(args.secret ? String(args.secret) : void 0, agentOsId, { baseUrl: base });
     const leaseOwner = `openclaw-harness:${run.id}`;
+    const snapshotPublished = await publishHarnessBoardSnapshot({ run: run.id, agentOsId, ...args }, "run_sweep");
     const releasedLocalOrphans = [];
     for (const name of Object.keys(run.workers || {})) {
       const worker = readJson(
@@ -2223,11 +2346,11 @@ async function sweepRun(args) {
       if (!worker || !worker.dispatched || !worker.taskId) continue;
       const status = computeWorkerStatus(worker);
       if (status.alive) continue;
-      if (status.finalResult) continue;
+      if (status.finalResult || worker.completionReportedAt) continue;
       const releaseUrl = `${base}/api/agent-os/by-id/${encodeURIComponent(agentOsId)}/tasks/${encodeURIComponent(String(worker.taskId))}/release`;
       let release;
       try {
-        release = await postJson(releaseUrl, secret, { agentOsId, leaseOwner });
+        release = await postJsonWithCredentialRefresh(releaseUrl, secret, { agentOsId, leaseOwner }, { agentOsId, baseUrl: base });
       } catch (relErr) {
         release = { ok: false, error: relErr.message };
       }
@@ -2242,14 +2365,14 @@ async function sweepRun(args) {
     const reapUrl = `${base}/api/agent-os/by-id/${encodeURIComponent(agentOsId)}/tasks/reap`;
     let reap;
     try {
-      reap = await postJson(reapUrl, secret, {
+      reap = await postJsonWithCredentialRefresh(reapUrl, secret, {
         agentOsId,
         ...Number(args.graceMs) >= 0 && args.graceMs !== void 0 && args.graceMs !== true ? { graceMs: Math.floor(Number(args.graceMs)) } : {}
-      });
+      }, { agentOsId, baseUrl: base });
     } catch (reapErr) {
       reap = { ok: false, error: reapErr.message };
     }
-    const summary = { runId: run.id, agentOsId, leaseOwner, releasedLocalOrphans, reap: reap.response ?? reap };
+    const summary = { runId: run.id, agentOsId, leaseOwner, snapshotPublished, releasedLocalOrphans, reap: reap.response ?? reap };
     if (pipeline) return { ok: true, ...summary };
     console.log(JSON.stringify(summary, null, 2));
   } catch (error) {
@@ -2455,12 +2578,12 @@ async function syncPlanProgress(args) {
   const base = resolveBaseUrl(args.baseUrl);
   const secret = await resolveCallbackSecretWithMint(args.secret, args.agentOsId, { baseUrl: base });
   const url = `${base}/api/agent-os/by-id/${encodeURIComponent(args.agentOsId)}/tasks/${encodeURIComponent(args.taskId)}/plan-progress-sync`;
-  const res = await postJson(url, secret, {
+  const res = await postJsonWithCredentialRefresh(url, secret, {
     phase: args.phase,
     taskId: args.taskId,
     blocker: args.blocker,
     artifact: args.artifact
-  });
+  }, { agentOsId: args.agentOsId, baseUrl: base });
   return { ok: res.ok, status: res.status, response: res.response };
 }
 
@@ -2551,6 +2674,7 @@ async function postOperatorTick(agentOsId, runId, resourceGate, args) {
     agentOsId,
     runId,
     ingestHarness: true,
+    harnessBoardSnapshot: buildRunBoard(runId),
     resourceGate
   });
   return { ok: res.ok, httpStatus: res.status, response: res.response };
@@ -2762,7 +2886,7 @@ function usage(code = 0) {
       "  kynver run create --repo /path/repo [--name name] [--base origin/main]",
       "  kynver run list",
       "  kynver run status --run RUN_ID",
-      "  kynver run dispatch --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--execute] [--lane any|implementation|review|landing] [--max-starts 1] [--lease-ms MS] [--owned path[,path]] [--model claude-opus-4-7] [--disk-path /]",
+      "  kynver run dispatch --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--execute] [--lane any|implementation|review|landing] [--executor harness] [--max-starts 1] [--lease-ms MS] [--owned path[,path]] [--model claude-opus-4-7] [--disk-path /]",
       "  kynver run sweep --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--grace-ms MS]",
       '  kynver worker start --run RUN_ID --name worker --task "..." [--owned path[,path]] [--model MODEL] [--provider claude|cursor] [--agent-os-id AOS_ID] [--task-id TASK_ID]',
       "  kynver worker status --run RUN_ID --name worker",