@kynver-app/runtime 0.1.51 → 0.1.59

package/dist/material-worktree-changes.d.ts

@@ -0,0 +1,2 @@
+export declare function materialWorktreeChanges(changedFiles: string[]): string[];
+export declare function pathFromGitStatusLine(line: string): string;

package/dist/paths.d.ts

@@ -1,3 +1,4 @@
+/** Canonical harness root for CLI/workers. Server mirror: agent-os.harness-root.ts */
 export declare function resolveHarnessRoot(): string;
 export declare function getHarnessPaths(): {
     harnessRoot: string;

package/dist/status.d.ts

@@ -28,6 +28,14 @@ export interface PersonaContextEvidenceSnapshot {
     injectedAt?: string;
     markdownChars?: number;
 }
+/** Dispatch-time retrieval probe replayed on harness completion. */
+export interface HarnessMemoryQualityCaptureSnapshot {
+    memoryQuery: string;
+    hitCount: number;
+    miss: boolean;
+    capturedAt: string;
+    retrievalEvidence?: Record<string, unknown> | null;
+}
 export interface HarnessWorkerRecord {
     name: string;
     runId: string;
@@ -47,6 +55,7 @@ export interface HarnessWorkerRecord {
     /** Lane A policy fingerprint when dispatch injected operating rules. */
     instructionPolicyFingerprint?: string;
     instructionPolicyEvidence?: InstructionPolicyEvidenceSnapshot;
+    memoryQualityCapture?: HarnessMemoryQualityCaptureSnapshot;
     personaSlug?: string;
     personaEvidence?: PersonaContextEvidenceSnapshot;
     leaseOwner?: string;
@@ -96,6 +105,8 @@ export interface HarnessWorkerRecord {
     /** Sidecar PID when detached; used for observability only. */
     completionSidecarPid?: number;
     completionSidecarSpawnFailedAt?: string;
+    /** One-off helper paths removed before completion (`kynver worker discard-disposable`). */
+    disposableArtifactsRemoved?: string[];
 }
 export interface RawHarnessWorkerStatus {
     runId: string;
@@ -132,6 +143,8 @@ export interface RawHarnessWorkerStatus {
     /** Set by PR-ready handoff before completion is posted. */
     prUrl?: string;
     headCommit?: string;
+    /** Paths removed via `kynver worker discard-disposable` before completion POST. */
+    disposableArtifactsRemoved?: string[];
 }
 export interface WorkerStatusOptions {
     /** Branch ref for ancestry when baseCommit is not set. */

package/dist/supervisor.d.ts

@@ -1,5 +1,5 @@
 import type { HarnessRunRecord } from "./run-store.js";
-import type { HarnessWorkerRecord, InstructionPolicyEvidenceSnapshot, PersonaContextEvidenceSnapshot } from "./status.js";
+import type { HarnessMemoryQualityCaptureSnapshot, HarnessWorkerRecord, InstructionPolicyEvidenceSnapshot, PersonaContextEvidenceSnapshot } from "./status.js";
 export interface SpawnWorkerOptions {
     name: string;
     task: string;
@@ -12,6 +12,7 @@ export interface SpawnWorkerOptions {
     instructionPolicyMarkdown?: string | null;
     instructionPolicyFingerprint?: string | null;
     instructionPolicyEvidence?: InstructionPolicyEvidenceSnapshot | null;
+    memoryQualityCapture?: HarnessMemoryQualityCaptureSnapshot | null;
     personaMarkdown?: string | null;
     personaSlug?: string | null;
     personaEvidence?: PersonaContextEvidenceSnapshot | null;

package/dist/worker-env.d.ts

@@ -2,7 +2,7 @@
  * Worker spawn env scrub — harness workers must not inherit host deployment secrets.
  */
 /** Exact env keys that must never reach a worker child process. */
-export declare const FORBIDDEN_WORKER_ENV_KEYS: readonly ["ANTHROPIC_API_KEY", "ANALYST_API_KEY", "RECRUITER_API_KEY", "AUTH_SECRET", "NEXTAUTH_SECRET", "DATABASE_URL", "PRODUCTION_DATABASE_URL", "REDIS_URL", "GOOGLE_CLIENT_SECRET", "GITHUB_CLIENT_SECRET", "KYNVER_API_KEY", "KYNVER_SERVICE_SECRET", "KYNVER_RUNTIME_SECRET", "OPENCLAW_CRON_SECRET", "QSTASH_TOKEN", "QSTASH_CURRENT_SIGNING_KEY", "QSTASH_NEXT_SIGNING_KEY", "TOOL_SECRETS_KEK", "TOOL_EXECUTOR_DISPATCH_SECRET", "CLOUDFLARE_API_TOKEN", "STRIPE_SECRET_KEY", "STRIPE_WEBHOOK_SECRET", "STRIPE_IDENTITY_WEBHOOK_SECRET", "VOYAGE_API_KEY", "PERPLEXITY_API_KEY", "FRED_API_KEY", "FMP_API_KEY", "CURSOR_API_KEY"];
+export declare const FORBIDDEN_WORKER_ENV_KEYS: readonly ["ANTHROPIC_API_KEY", "ANALYST_API_KEY", "RECRUITER_API_KEY", "AUTH_SECRET", "NEXTAUTH_SECRET", "DATABASE_URL", "PRODUCTION_DATABASE_URL", "KYNVER_PRODUCTION_DATABASE_URL", "REDIS_URL", "GOOGLE_CLIENT_SECRET", "GITHUB_CLIENT_SECRET", "KYNVER_API_KEY", "KYNVER_SERVICE_SECRET", "KYNVER_RUNTIME_SECRET", "KYNVER_CRON_SECRET", "OPENCLAW_CRON_SECRET", "QSTASH_TOKEN", "QSTASH_CURRENT_SIGNING_KEY", "QSTASH_NEXT_SIGNING_KEY", "TOOL_SECRETS_KEK", "TOOL_EXECUTOR_DISPATCH_SECRET", "CLOUDFLARE_API_TOKEN", "STRIPE_SECRET_KEY", "STRIPE_WEBHOOK_SECRET", "STRIPE_IDENTITY_WEBHOOK_SECRET", "VOYAGE_API_KEY", "PERPLEXITY_API_KEY", "FRED_API_KEY", "FMP_API_KEY", "CURSOR_API_KEY"];
 export declare function isForbiddenWorkerEnvKey(key: string): boolean;
 export declare function listForbiddenWorkerEnvKeys(env: NodeJS.ProcessEnv): string[];
 export declare function scrubWorkerEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/dist/worktree-completion-handoff.d.ts

@@ -0,0 +1,17 @@
+export type WorktreeCompletionHandoffState = "clean" | "pr_handoff" | "commit_handoff" | "dirty_worktree" | "dirty_worktree_no_pr";
+export interface WorktreeCompletionHandoffInput {
+    changedFiles?: unknown;
+    finalResult?: unknown;
+    prUrl?: string | null;
+    headCommit?: string | null;
+    artifactBundlePath?: string | null;
+    patchPath?: string | null;
+    disposableArtifactsRemoved?: string[] | null;
+}
+export interface WorktreeCompletionHandoffVerdict {
+    allowed: boolean;
+    state: WorktreeCompletionHandoffState;
+    materialDirtyCount: number;
+    detail?: string;
+}
+export declare function assessWorktreeCompletionHandoff(input: WorktreeCompletionHandoffInput): WorktreeCompletionHandoffVerdict;

package/dist/wsl-host.d.ts

@@ -0,0 +1,71 @@
+/**
+ * WSL host disk probe.
+ *
+ * Under WSL, the runtime VHDX (mounted at `/`) grows dynamically into the
+ * Windows host C: drive. When Windows C: fills up, the VHDX cannot expand:
+ * writes return SIGBUS, workers exit 135, and the Vmmem VM degrades while
+ * the Linux-side `statfs /` still reports plenty of free space inside the
+ * VHDX. This module gives the harness a cheap signal for that pressure so
+ * it can block dispatch *before* a large npm install/build pushes Windows
+ * C: into the ground.
+ */
+/** Default warn threshold for the Windows host disk (25 GiB free). */
+export declare const DEFAULT_WSL_HOST_WARN_FREE_BYTES: number;
+/** Default critical threshold for the Windows host disk (12 GiB free). Below
+ * this, large rebuilds have been observed to trigger SIGBUS / exit 135 on
+ * WSL when the VHDX cannot grow further. */
+export declare const DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES: number;
+/** Default Windows host mount point under WSL. Overridable via env or option. */
+export declare const DEFAULT_WSL_HOST_MOUNT = "/mnt/c";
+export interface WslHostDiskShape {
+    ok: boolean;
+    /** Mount point that was probed. */
+    path: string;
+    freeBytes: number;
+    totalBytes: number;
+    usedPercent: number;
+    warnBelowBytes: number;
+    criticalBelowBytes: number;
+    /** Human-readable explanation when the host disk is under pressure. */
+    reason: string | null;
+    /** True when the probe itself failed (mount missing, statfs error). */
+    probeError: string | null;
+}
+/**
+ * Cheap WSL detection. Reads `/proc/sys/kernel/osrelease` (kernel string
+ * contains "microsoft" / "WSL2" on Microsoft's WSL kernel) and falls back
+ * to `/proc/version`. Both reads are one-shot and gated by `existsSync`,
+ * so non-Linux hosts return false without throwing.
+ */
+export declare function isWslHost(): boolean;
+export interface ObserveWslHostDiskOptions {
+    /** Override the Windows host mount path (e.g. `/mnt/d`). Falls back to
+     * `KYNVER_WSL_HOST_MOUNT` env, then `/mnt/c`. */
+    wslHostMount?: string;
+    wslHostFreeWarnBytes?: number;
+    wslHostFreeCriticalBytes?: number;
+    /** Override WSL detection for tests / cross-platform CI:
+     * `true` → treat host as WSL; `false` → treat host as non-WSL;
+     * `undefined` → autodetect via `isWslHost()`. */
+    forceWsl?: boolean;
+    /** Test seam — swap in a fake statfs. */
+    statfs?: (path: string) => {
+        bavail: bigint | number;
+        blocks: bigint | number;
+        bsize: bigint | number;
+    };
+}
+/**
+ * Probe the Windows host disk under WSL. Returns `null` when this host is
+ * not WSL (so callers can treat the field as optional in the gate output).
+ * When WSL but the mount is unreachable, returns a `probeError` row with
+ * `ok = false` rather than throwing — the gate must still block dispatch
+ * because we can't prove the host disk is healthy.
+ */
+export declare function observeWslHostDisk(options?: ObserveWslHostDiskOptions): WslHostDiskShape | null;
+/**
+ * Short operator recovery hint embedded in gate reasons so AgentOS evidence
+ * surfaces actionable steps without a doc lookup. Keep terse — full runbook
+ * lives at `docs/runbooks/wsl-disk-pressure.md`.
+ */
+export declare function summarizeWslRecoverySteps(): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kynver-app/runtime",
-  "version": "0.1.51",
+  "version": "0.1.59",
   "description": "Kynver AgentOS local execution runtime and CLI",
   "type": "module",
   "main": "./dist/index.js",