@kynver-app/runtime 0.1.56 → 0.1.59

package/dist/config.d.ts

@@ -7,6 +7,11 @@ export interface KynverUserConfig {
     /** Default Claude model when dispatch does not infer or pass `--model`. */
     defaultModel?: string;
     harnessRoot?: string;
+    /**
+     * Operator attestation that the hosted Kynver deployment uses this scheduler provider
+     * (set on user runners after Vercel env cutover — scheduling is deployment-owned).
+     */
+    deploymentSchedulerProvider?: "qstash" | "kynver-cron" | "openclaw-cron";
     /** Max concurrent workers on this machine. Omit to auto-size from RAM. */
     maxConcurrentWorkers?: number;
     /** @internal Advanced tuning — not required for setup. */

package/dist/db-credential-resolver.d.ts

@@ -0,0 +1,37 @@
+/** How production DATABASE_URL was obtained (no secrets in this enum). */
+export type DbCredentialSource = "neon-cli" | "env:KYNVER_PRODUCTION_DATABASE_URL" | "env:PRODUCTION_DATABASE_URL" | "env-file:PRODUCTION_DATABASE_URL" | "env-file:KYNVER_PRODUCTION_DATABASE_URL";
+export interface DbCredentialResolution {
+    ok: true;
+    databaseUrl: string;
+    source: DbCredentialSource;
+    hint: string;
+}
+export interface DbCredentialFailure {
+    ok: false;
+    reason: string;
+    attempted: DbCredentialSource[];
+}
+export type ResolveProductionDatabaseResult = DbCredentialResolution | DbCredentialFailure;
+declare const ENV_FILE_KEYS: readonly ["KYNVER_PRODUCTION_DATABASE_URL", "PRODUCTION_DATABASE_URL"];
+export interface ResolveProductionDatabaseOptions {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    /** Injectable for tests — runs `neon connection-string`. */
+    neonConnectionString?: (args: {
+        branch: string;
+        projectId?: string;
+        databaseName?: string;
+        roleName?: string;
+        pooled?: boolean;
+    }) => string | null;
+}
+/** Parse only production DB keys from a dotenv file — never loads unrelated secrets. */
+export declare function readProductionDbKeysFromEnvFile(envPath: string): Partial<Record<(typeof ENV_FILE_KEYS)[number], string>>;
+/**
+ * Resolve a production Prisma `DATABASE_URL` at CLI execution time.
+ * Precedence: Neon CLI → explicit process env → selective `.env` keys only.
+ */
+export declare function resolveProductionDatabaseUrl(options?: ResolveProductionDatabaseOptions): ResolveProductionDatabaseResult;
+/** Set `process.env.DATABASE_URL` from resolver; logs source + host hint to stderr (no secrets). */
+export declare function applyProductionDatabaseToProcess(options?: ResolveProductionDatabaseOptions): DbCredentialResolution;
+export {};

package/dist/db-url-hint.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Host + database name only (no user/password) for logs and operator confirmation.
+ */
+export declare function safeDatabaseUrlHint(url: string | undefined): string;

package/dist/discard-disposable.d.ts

@@ -0,0 +1,6 @@
+export declare function discardDisposableArtifacts(args: Record<string, string | boolean>): {
+    ok: boolean;
+    removed: string[];
+    reason?: string;
+};
+export declare function discardDisposableCli(args: Record<string, string | boolean>): void;

package/dist/disk-gate.d.ts

@@ -1,9 +1,14 @@
 import type { DispatchNextDiskGateShape } from "./callbacks.js";
+import { type ObserveWslHostDiskOptions } from "./wsl-host.js";
 export interface ObserveDiskGateInput {
     diskPath?: string;
     diskFreeWarnBytes?: number;
     diskFreeCriticalBytes?: number;
     diskMaxUsedPercent?: number;
     diskHardMaxUsedPercent?: number;
+    /** Opt-out for the WSL host disk probe — leave `false`/undefined by
+     * default so we always check `/mnt/c` under WSL. */
+    skipWslHostCheck?: boolean;
+    wslHost?: ObserveWslHostDiskOptions;
 }
 export declare function observeRunnerDiskGate(input?: ObserveDiskGateInput): DispatchNextDiskGateShape;

package/dist/dispatch.d.ts

@@ -1,10 +1,11 @@
 import { runDirectory } from "./run-store.js";
-import type { InstructionPolicyEvidenceSnapshot, PersonaContextEvidenceSnapshot } from "./status.js";
+import type { HarnessMemoryQualityCaptureSnapshot, InstructionPolicyEvidenceSnapshot, PersonaContextEvidenceSnapshot } from "./status.js";
 export declare const DEFAULT_DISPATCH_LEASE_MS: number;
 export interface HarnessWorkerDispatchContext {
     instructionPolicyMarkdown: string | null;
     instructionPolicyFingerprint: string | null;
     instructionPolicyEvidence: InstructionPolicyEvidenceSnapshot | null;
+    memoryQualityCapture: HarnessMemoryQualityCaptureSnapshot | null;
     personaMarkdown: string | null;
     personaSlug: string | null;
     personaEvidence: PersonaContextEvidenceSnapshot | null;

package/dist/disposable-artifacts.d.ts

@@ -0,0 +1,2 @@
+export declare function extractDisposableArtifactsRemoved(finalResult: unknown): string[];
+export declare function dirtyPathsCoveredByDisposableRemoval(changedFiles: string[], removed: readonly string[]): boolean;

package/dist/doctor/runtime-takeover-scheduler.d.ts

@@ -1,6 +1,9 @@
 import type { DoctorCheck } from "./doctor.types.js";
+export type DeploymentSchedulerProvider = "qstash" | "kynver-cron" | "openclaw-cron";
 export interface RuntimeTakeoverSchedulerEnv {
     kynverSchedulerProvider?: string;
+    /** Local durable openclaw-cron bridge (`OPENCLAW_CRON_STORE_PATH`). */
+    openclawCronStorePath?: boolean;
     /** True when this process has QStash credentials (typical Kynver server deploy). */
     qstashTokenPresent?: boolean;
     /** Explicit hosted-deploy marker (`KYNVER_HOSTED_DEPLOYMENT=1|true|yes`). */
@@ -10,6 +13,8 @@ export interface RuntimeTakeoverSchedulerContext {
     agentOsId?: string | null;
     apiBaseUrl?: string | null;
     hasScopedRunnerToken: boolean;
+    /** Operator attestation in ~/.kynver/config.json for the hosted deployment. */
+    deploymentSchedulerProvider?: DeploymentSchedulerProvider;
 }
 /**
  * Scheduler readiness for runtime takeover.

package/dist/doctor/runtime-takeover.probes.d.ts

@@ -26,6 +26,8 @@ export interface RuntimeTakeoverProbes {
         kynverHarnessRoot?: string;
         opusHarnessRoot?: string;
         kynverSchedulerProvider?: string;
+        /** Local durable openclaw-cron bridge (`OPENCLAW_CRON_STORE_PATH`). */
+        openclawCronStorePath?: boolean;
         qstashTokenPresent?: boolean;
         kynverHostedDeployment?: boolean;
     };

package/dist/harness-storage-snapshot.d.ts

@@ -0,0 +1,26 @@
+export interface HarnessStorageSnapshot {
+    harnessRoot: string;
+    worktreesDir: string;
+    /** Sum of per-run directory sizes. `null` when scan exceeded entry cap. */
+    worktreesBytes: number | null;
+    /** Top-level run directory count under `worktreesDir`. */
+    runCount: number;
+    /** Total worktree (worker) directories across all runs. */
+    workerCount: number;
+    /** Earliest run-directory mtime, ISO string. `null` when no runs present. */
+    oldestRunAt: string | null;
+    scannedAt: string;
+}
+interface ScanOptions {
+    harnessRoot?: string;
+    /** Cap per directorySizeBytes call. Default 50k entries — keeps the snapshot fast for monitor ticks. Set null/0 to return bytes=null without scanning. */
+    perRunEntryCap?: number | null;
+    now?: number;
+}
+/**
+ * Read-only summary of harness worktree storage usage. Surfaced in cleanup
+ * summaries and consumable by monitor/Command Center to flag disk pressure
+ * before WSL runs out of space again.
+ */
+export declare function harnessStorageSnapshot(opts?: ScanOptions): HarnessStorageSnapshot;
+export {};

package/dist/index.d.ts

@@ -1,7 +1,8 @@
 export { PACKAGE_VERSION } from "./package-version.js";
 export { buildDispatchTaskText, dispatchRun, DEFAULT_DISPATCH_LEASE_MS } from "./dispatch.js";
 export { observeRunnerDiskGate } from "./disk-gate.js";
-export { postJson, type DispatchNextDiskGateShape } from "./callbacks.js";
+export { isWslHost, observeWslHostDisk, summarizeWslRecoverySteps, DEFAULT_WSL_HOST_MOUNT, DEFAULT_WSL_HOST_WARN_FREE_BYTES, DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES, type WslHostDiskShape, } from "./wsl-host.js";
+export { postJson, type DispatchNextDiskGateShape, type DispatchNextWslHostShape, } from "./callbacks.js";
 export { parseClaudeStream, parseHarnessStream, summarizeEvent, summarizeShellToolCallEvent, } from "./stream.js";
 export { classifyNpmAuditOutcome, classifyShellCommandOutcome, summarizeNpmAuditReport, type NpmAuditSummary, type ShellCommandOutcome, type ShellCommandOutcomeKind, } from "./shell-command-outcome.js";
 export { parseHeartbeat, isTerminalHeartbeatPhase, terminalFinalResultFromHeartbeat, } from "./heartbeat.js";
@@ -15,6 +16,8 @@ export { assessPrHandoffRequirement, ensurePrReadyHandoff, extractPrUrlFromText,
 export { normalizeCursorModelAlias, preflightCursorModel } from "./providers/model-preflight.js";
 export { redactHarness } from "./redact.js";
 export { scrubWorkerEnv, scrubClaudeEnv, auditWorkerEnv, listForbiddenWorkerEnvKeys, isForbiddenWorkerEnvKey, FORBIDDEN_WORKER_ENV_KEYS, type WorkerEnvAudit, } from "./worker-env.js";
+export { applyProductionDatabaseToProcess, readProductionDbKeysFromEnvFile, resolveProductionDatabaseUrl, type DbCredentialResolution, type DbCredentialFailure, type DbCredentialSource, type ResolveProductionDatabaseResult, type ResolveProductionDatabaseOptions, } from "./db-credential-resolver.js";
+export { safeDatabaseUrlHint } from "./db-url-hint.js";
 export { validateRunId, validateWorkerName, validateRepo, validateOwnedPaths, validateTailLines, } from "./validate.js";
 export { spawnWorkerProcess, startWorker } from "./supervisor.js";
 export { createRun, listRuns } from "./worktree.js";
@@ -25,6 +28,10 @@ export { loadUserConfig, saveUserConfig, resolveBaseUrl, resolveCallbackSecret,
 export { discoverDefaultRepo, discoverDefaultRepoCandidates, isKynverMonorepoRoot, gitRepoRoot, type DiscoveredDefaultRepo, type DefaultRepoDiscoverySource, } from "./default-repo-discovery.js";
 export { resolveDefaultRepo, persistDefaultRepo, remediateDefaultRepo, formatResolvedDefaultRepo, type ResolvedDefaultRepo, type DefaultRepoSource, } from "./default-repo.js";
 export { getHarnessPaths, resolveHarnessRoot } from "./paths.js";
+export { harnessStorageSnapshot, type HarnessStorageSnapshot, } from "./harness-storage-snapshot.js";
+export { assessOrphanWorktreeSafety } from "./cleanup-orphan-safety.js";
+export { runHarnessCleanup, runPipelineHarnessCleanup, isPipelineCleanupEnabled, } from "./cleanup.js";
+export type { HarnessCleanupSummary, HarnessCleanupOptions, HarnessStorageSnapshotShape, WorktreeRemovalGuardHook, WorktreeRemovalGuardInput, CleanupSkipReason, } from "./cleanup-types.js";
 export { usage, main } from "./cli.js";
 export { reconcileRunsCli, reconcileStaleWorkers, type ReconcileStaleWorkersResult, type StaleWorkerReconcileOutcome } from "./stale-reconcile.js";
 export { runDaemon } from "./daemon.js";