@kynver-app/runtime 0.2.0 → 0.2.4

package/dist/instruction-bundle/contract.js

@@ -1,4 +1,4 @@
-import{createHash as u}from"node:crypto";function o(e){return JSON.stringify(i(e))}function i(e){if(Array.isArray(e))return e.map(i);if(e&&typeof e=="object"){let t={};for(let n of Object.keys(e).sort())t[n]=i(e[n]);return t}return e}function k(e){return`ib1-${u("sha256").update(o(e),"utf8").digest("hex").slice(0,16)}`}function L(e){return`ib-${u("sha256").update(Buffer.from(e)).digest("hex").slice(0,12)}`}function a(e){if(!e)return null;let t=e.trim();if(!t)return null;if(/^[0-9a-fA-F]{64}$/.test(t))return new Uint8Array(t.match(/.{2}/g).map(n=>parseInt(n,16)));try{let n=Buffer.from(t,"base64");if(n.length===32)return new Uint8Array(n)}catch{}return null}function s(e){if(!e||typeof e!="object")return!1;let t=e;if(typeof t.signature!="string"||!t.signature||typeof t.publicKeyId!="string"||!t.publicKeyId)return!1;let n=t.bundle;return!(!n||typeof n!="object"||typeof n.version!="string"||!n.version||typeof n.generatedAt!="string"||!Array.isArray(n.personas)||!n.instructions||typeof n.instructions!="object"||!n.policyThresholds||typeof n.policyThresholds!="object")}var c={"ib-3bab6314f0ba":"53a2040646cd479e1f5f1aea9abf7848ce8b62e32001efb8044dfd90e8ab87ed","ib-26e6c695da06":"bb1700f25b2ee7d7cdcdb9f446f0f44ef2cc22a3096bc161232fb658e7cdaf38"};function l(e,t=process.env){let n=a(t.KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY);if(n)return n;let r=c[e];return r?a(r):null}import{createPublicKey as f,verify as m}from"node:crypto";var g=Buffer.from("302a300506032b6570032100","hex");function y(e){return f({key:Buffer.concat([g,Buffer.from(e)]),format:"der",type:"spki"})}function d(e,t){if(!s(e))return{ok:!1,reason:"malformed signed bundle payload"};let n;try{n=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(n.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let r=Buffer.from(o(e.bundle),"utf8");return m(null,r,y(t),n)?{ok:!0,bundle:e.bundle}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(r){return{ok:!1,reason:`signature verification failed: ${r.message}`}}}function h(e,t=process.env){if(!s(e))return{ok:!1,reason:"malformed signed bundle payload"};let n=l(e.publicKeyId,t);return n?d(e,n):{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}" (not pinned; set KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY)`}}var p="embedded-1",I=[{slug:"ghost",displayName:"Ghost",description:"Orchestration persona.",dispatchLane:null,defaultRoleLane:"system"},{slug:"astra",displayName:"Astra",description:"Planning persona.",dispatchLane:"implementation",defaultRoleLane:"plan_author"},{slug:"rhea",displayName:"Rhea",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"mnemo",displayName:"Mnemo",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"sentinel",displayName:"Sentinel",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"deep_reviewer"},{slug:"pixel",displayName:"Pixel",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"schema",displayName:"Schema",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"atlas",displayName:"Atlas",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"runtime_verifier"},{slug:"bridge",displayName:"Bridge",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"catalyst",displayName:"Catalyst",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"lorentz",displayName:"Lorentz",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"report_reviewer"},{slug:"dalton",displayName:"Dalton",description:"Landing persona.",dispatchLane:"landing",defaultRoleLane:"implementer"}],b={"worker.prompt.core_rules":["Structured final result (recommended): record completion as JSON with summary, files, PR URLs, verification, risks, and blockers.","Completion handoff (required): before you stop, summarize the outcome in your last message and append a heartbeat line with phase `complete` and a structured finalResult object. Commit your work cleanly and open a GitHub PR (draft OK) for substantial changes \u2014 never leave uncommitted changes behind without reporting them.","Review-only workers must not open new implementation PRs \u2014 review the existing PR and record a verdict in the final result. Prefer `gh pr view` / `gh pr diff`; if a local checkout is needed, use a disposable ref or detached worktree, not a checked-out `pr-*` branch.","Keep verification targeted to touched paths; avoid full-monorepo verification unless explicitly requested.","Do not run `npm publish`.","If verification fails, append a heartbeat line immediately with the failing command, reason, and next action."].join(`
+import{createHash as u}from"node:crypto";function o(e){return JSON.stringify(i(e))}function i(e){if(Array.isArray(e))return e.map(i);if(e&&typeof e=="object"){let t={};for(let n of Object.keys(e).sort())t[n]=i(e[n]);return t}return e}function k(e){return`ib1-${u("sha256").update(o(e),"utf8").digest("hex").slice(0,16)}`}function L(e){return`ib-${u("sha256").update(Buffer.from(e)).digest("hex").slice(0,12)}`}function a(e){if(!e)return null;let t=e.trim();if(!t)return null;if(/^[0-9a-fA-F]{64}$/.test(t))return new Uint8Array(t.match(/.{2}/g).map(n=>parseInt(n,16)));try{let n=Buffer.from(t,"base64");if(n.length===32)return new Uint8Array(n)}catch{}return null}function s(e){if(!e||typeof e!="object")return!1;let t=e;if(typeof t.signature!="string"||!t.signature||typeof t.publicKeyId!="string"||!t.publicKeyId)return!1;let n=t.bundle;return!(!n||typeof n!="object"||typeof n.version!="string"||!n.version||typeof n.generatedAt!="string"||!Array.isArray(n.personas)||!n.instructions||typeof n.instructions!="object"||!n.policyThresholds||typeof n.policyThresholds!="object")}var c={"ib-3bab6314f0ba":"53a2040646cd479e1f5f1aea9abf7848ce8b62e32001efb8044dfd90e8ab87ed","ib-26e6c695da06":"bb1700f25b2ee7d7cdcdb9f446f0f44ef2cc22a3096bc161232fb658e7cdaf38","ib-49e76cb8052c":"8fc646b5c4f8f402120477452608398f035c3cddd2e7aa8bb328e97b84dcf6d8"};function l(e,t=process.env){let n=a(t.KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY);if(n)return n;let r=c[e];return r?a(r):null}import{createPublicKey as f,verify as m}from"node:crypto";var g=Buffer.from("302a300506032b6570032100","hex");function y(e){return f({key:Buffer.concat([g,Buffer.from(e)]),format:"der",type:"spki"})}function d(e,t){if(!s(e))return{ok:!1,reason:"malformed signed bundle payload"};let n;try{n=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(n.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let r=Buffer.from(o(e.bundle),"utf8");return m(null,r,y(t),n)?{ok:!0,bundle:e.bundle}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(r){return{ok:!1,reason:`signature verification failed: ${r.message}`}}}function h(e,t=process.env){if(!s(e))return{ok:!1,reason:"malformed signed bundle payload"};let n=l(e.publicKeyId,t);return n?d(e,n):{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}" (not pinned; set KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY)`}}var p="embedded-1",I=[{slug:"ghost",displayName:"Ghost",description:"Orchestration persona.",dispatchLane:null,defaultRoleLane:"system"},{slug:"astra",displayName:"Astra",description:"Planning persona.",dispatchLane:"implementation",defaultRoleLane:"plan_author"},{slug:"rhea",displayName:"Rhea",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"mnemo",displayName:"Mnemo",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"sentinel",displayName:"Sentinel",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"deep_reviewer"},{slug:"pixel",displayName:"Pixel",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"schema",displayName:"Schema",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"atlas",displayName:"Atlas",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"runtime_verifier"},{slug:"bridge",displayName:"Bridge",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"catalyst",displayName:"Catalyst",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"lorentz",displayName:"Lorentz",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"report_reviewer"},{slug:"dalton",displayName:"Dalton",description:"Landing persona.",dispatchLane:"landing",defaultRoleLane:"implementer"}],b={"worker.prompt.core_rules":["Structured final result (recommended): record completion as JSON with summary, files, PR URLs, verification, risks, and blockers.","Completion handoff (required): before you stop, summarize the outcome in your last message and append a heartbeat line with phase `complete` and a structured finalResult object. Commit your work cleanly and open a GitHub PR (draft OK) for substantial changes \u2014 never leave uncommitted changes behind without reporting them.","Review-only workers must not open new implementation PRs \u2014 review the existing PR and record a verdict in the final result. Prefer `gh pr view` / `gh pr diff`; if a local checkout is needed, use a disposable ref or detached worktree, not a checked-out `pr-*` branch.","Keep verification targeted to touched paths; avoid full-monorepo verification unless explicitly requested.","Do not run `npm publish`.","If verification fails, append a heartbeat line immediately with the failing command, reason, and next action."].join(`
 `),"worker.prompt.progress.compact":"Plan progress: when planId is set, report progress with `kynver plan progress --plan <planId> --row <rowKey> --role implementer --status in_progress|running|partial|blocked`. Do not mark rows done from the worker CLI.","worker.prompt.progress.full":["Structured plan progress (required when planId is set):","- Report checkpoints with `kynver plan progress --plan <planId> --row <rowKey> --role implementer --status in_progress|running|partial|blocked`.","- When a slice is finished, emit `partial` with evidence (`--evidence pr:<url>`, `--evidence path:<file>`, or `--evidence command:<cmd>`).","- Do not propose or confirm row `done` from the worker CLI."].join(`
 `),"worker.prompt.merge_gate.compact":"Verification cost control: prefer local verification before requesting CI runs; do not push empty commits to re-trigger CI; record verification evidence on the PR.","worker.prompt.merge_gate.full":["Verification cost control:","- Prefer local verification of touched paths before requesting any CI run.","- Do not push empty commits to re-trigger CI.","- Record verification evidence on the PR before requesting review."].join(`
 `),"worker.prompt.plan_artifacts.compact":"Plan artifacts: when authoring or revising plan documents, open a GitHub PR early and iterate from that PR branch; do not leave the canonical plan only in a local worktree.","worker.prompt.plan_artifacts.full":["Plan artifacts (when authoring or revising plan documents):","- Create a feature branch and open a GitHub PR (draft OK) before substantial drafting; commit and push the plan file.","- Iterate on that PR branch and link the PR URL on the related task and progress evidence."].join(`

package/dist/local-run-store/index.d.ts

@@ -0,0 +1,5 @@
+export type { AdmissionReservation, LocalRunStore, OperationReceiptRecord, ProcessIdentityRecord, RecoveryCheckpointRecord, ReserveOutcome, } from "./local-run-store.js";
+export { classifyDatabaseDirectory, type ClassifyOptions, type FilesystemClassification, } from "./sqlite/sqlite-filesystem-policy.js";
+export { LOCAL_SCHEMA_VERSION, SchemaDowngradeRefusedError, } from "./sqlite/sqlite-schema.js";
+export { FilesystemPolicyError, SqliteLocalRunStore, type OpenSqliteLocalRunStoreOptions, } from "./sqlite/sqlite-local-run-store.js";
+export { openSqliteLocalRunStoreWithRecovery, type OpenWithRecoveryResult, } from "./sqlite/sqlite-recovery.js";

package/dist/local-run-store/index.js

@@ -0,0 +1,46 @@
+import{existsSync as T,realpathSync as E,readFileSync as f}from"node:fs";import m from"node:path";var _=new Set(["ext4","ext3","ext2","btrfs","xfs","f2fs","zfs","tmpfs","overlay","overlayfs"]),S=new Set(["9p","drvfs","nfs","nfs4","cifs","smb","smbfs","smb3","sshfs","fuse.sshfs","davfs","davfs2","glusterfs","ceph","lustre","afs","vboxsf","prl_fs","virtiofs"]);function g(){try{return f("/proc/self/mounts","utf8")}catch{return null}}function h(n){let e=m.resolve(n);for(let t=0;t<64;t+=1){if(T(e))try{return E.native(e)}catch{return e}let r=m.dirname(e);if(r===e)return e;e=r}return e}function R(n){return n.replace(/\\(\d{3})/g,(e,t)=>String.fromCharCode(Number.parseInt(t,8)))}function O(n){let e=[];for(let t of n.split(`
+`)){let r=t.trim().split(/\s+/);r.length<3||e.push({mountPoint:R(r[1]),fsType:r[2]})}return e}function L(n,e){let t=null;for(let r of e){let s=r.mountPoint.endsWith("/")?r.mountPoint:`${r.mountPoint}/`;(n===r.mountPoint||`${n}/`.startsWith(s))&&(!t||r.mountPoint.length>t.mountPoint.length)&&(t=r)}return t}function d(n,e){let r=(e?.resolveRealPath??h)(n),s=(e?.mountsSource??g)();if(s===null)return{verdict:"rejected",reason:"Mount information unavailable \u2014 the filesystem type cannot be established safely, so WAL mode is refused (fail closed).",filesystemType:null,mountPoint:null,resolvedPath:r};let o=L(r,O(s));if(!o)return{verdict:"rejected",reason:"No mount entry covers the resolved database path \u2014 refusing WAL mode (fail closed).",filesystemType:null,mountPoint:null,resolvedPath:r};let i=o.fsType.toLowerCase();return S.has(i)||i.startsWith("fuse.")?{verdict:"rejected",reason:`Filesystem '${i}' is network-like or crosses an OS boundary; SQLite WAL locking is not safe there.`,filesystemType:i,mountPoint:o.mountPoint,resolvedPath:r}:_.has(i)?{verdict:"accepted",reason:`Local filesystem '${i}' accepted for WAL mode.`,filesystemType:i,mountPoint:o.mountPoint,resolvedPath:r}:{verdict:"rejected",reason:`Filesystem '${i}' is unknown to the qualification policy; WAL mode is refused rather than guessed (fail closed).`,filesystemType:i,mountPoint:o.mountPoint,resolvedPath:r}}var p=1,u=class extends Error{constructor(e,t){super(`local-run-store schema version ${e} is newer than this runtime supports (${t}); refusing to open. Upgrade the runtime or quarantine the database deliberately.`),this.name="SchemaDowngradeRefusedError"}},v=[`CREATE TABLE IF NOT EXISTS local_meta (
+     key TEXT PRIMARY KEY,
+     value TEXT NOT NULL
+   ) STRICT`,`CREATE TABLE IF NOT EXISTS process_identity (
+     process_key TEXT PRIMARY KEY,
+     pid INTEGER NOT NULL,
+     runtime_version TEXT NOT NULL,
+     node_version TEXT NOT NULL,
+     started_at TEXT NOT NULL,
+     registered_at TEXT NOT NULL
+   ) STRICT`,`CREATE TABLE IF NOT EXISTS admission_reservations (
+     reservation_key TEXT PRIMARY KEY,
+     owner TEXT NOT NULL,
+     expires_at TEXT NOT NULL,
+     created_at TEXT NOT NULL
+   ) STRICT`,`CREATE TABLE IF NOT EXISTS operation_receipts (
+     idempotency_key TEXT PRIMARY KEY,
+     operation TEXT NOT NULL,
+     result_json TEXT,
+     recorded_at TEXT NOT NULL
+   ) STRICT`,`CREATE TABLE IF NOT EXISTS recovery_checkpoints (
+     scope TEXT NOT NULL,
+     seq INTEGER NOT NULL,
+     payload_json TEXT NOT NULL,
+     created_at TEXT NOT NULL,
+     PRIMARY KEY (scope, seq)
+   ) STRICT`];function A(n){if(!n.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'local_meta'").get())return null;let t=n.prepare("SELECT value FROM local_meta WHERE key = 'schema_version'").get();if(!t?.value)return null;let r=Number.parseInt(t.value,10);return Number.isFinite(r)?r:null}function y(n,e){let t=A(n);if(t!==null&&t>1)throw new u(t,1);n.exec("BEGIN IMMEDIATE");try{for(let r of v)n.exec(r);n.prepare("INSERT INTO local_meta (key, value) VALUES ('schema_version', ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(String(1)),n.prepare("INSERT INTO local_meta (key, value) VALUES ('schema_applied_at', ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(e),n.exec("COMMIT")}catch(r){throw n.exec("ROLLBACK"),r}}import{mkdirSync as I}from"node:fs";import N from"node:path";import{DatabaseSync as C}from"node:sqlite";var l=class extends Error{constructor(e){super(`local-run-store refused: ${e}`),this.name="FilesystemPolicyError"}},b="local-run-store.sqlite",x=5e3,a=class n{db;now;databasePath;constructor(e,t,r){this.db=e,this.databasePath=t,this.now=r}static open(e){let t=d(e.directory,e.classifyOptions);if(t.verdict!=="accepted")throw new l(t.reason);I(e.directory,{recursive:!0,mode:448});let r=N.join(e.directory,e.filename??b),s=new C(r,{timeout:e.busyTimeoutMs??x}),o=e.now??(()=>new Date);try{s.exec("PRAGMA journal_mode = WAL");let i=s.prepare("PRAGMA journal_mode").get();if(i?.journal_mode?.toLowerCase()!=="wal")throw new l(`journal_mode did not switch to WAL (got '${i?.journal_mode}') \u2014 filesystem unsuitable.`);s.exec("PRAGMA synchronous = NORMAL"),y(s,o().toISOString())}catch(i){throw s.close(),i}return new n(s,r,o)}inImmediateTransaction(e){this.db.exec("BEGIN IMMEDIATE");try{let t=e();return this.db.exec("COMMIT"),t}catch(t){throw this.db.exec("ROLLBACK"),t}}registerProcessIdentity(e){let t=this.now().toISOString();return this.inImmediateTransaction(()=>{this.db.prepare(`INSERT INTO process_identity
+             (process_key, pid, runtime_version, node_version, started_at, registered_at)
+           VALUES (?, ?, ?, ?, ?, ?)
+           ON CONFLICT(process_key) DO UPDATE SET
+             pid = excluded.pid,
+             runtime_version = excluded.runtime_version,
+             node_version = excluded.node_version,
+             started_at = excluded.started_at,
+             registered_at = excluded.registered_at`).run(e.processKey,e.pid,e.runtimeVersion,e.nodeVersion,e.startedAt,t)}),{...e,registeredAt:t}}getProcessIdentity(e){let t=this.db.prepare(`SELECT process_key, pid, runtime_version, node_version, started_at, registered_at
+         FROM process_identity WHERE process_key = ?`).get(e);return t?{processKey:t.process_key,pid:t.pid,runtimeVersion:t.runtime_version,nodeVersion:t.node_version,startedAt:t.started_at,registeredAt:t.registered_at}:null}tryReserveAdmission(e,t,r,s){let o=s??this.now(),i=new Date(o.getTime()+r).toISOString();return this.inImmediateTransaction(()=>{let c=this.db.prepare("SELECT reservation_key, owner, expires_at FROM admission_reservations WHERE reservation_key = ?").get(e);return c&&c.expires_at>o.toISOString()&&c.owner!==t?{acquired:!1,current:{key:e,owner:c.owner,expiresAt:c.expires_at}}:(this.db.prepare(`INSERT INTO admission_reservations (reservation_key, owner, expires_at, created_at)
+           VALUES (?, ?, ?, ?)
+           ON CONFLICT(reservation_key) DO UPDATE SET
+             owner = excluded.owner,
+             expires_at = excluded.expires_at`).run(e,t,i,o.toISOString()),{acquired:!0,current:{key:e,owner:t,expiresAt:i}})})}releaseAdmission(e,t){return this.inImmediateTransaction(()=>{let r=this.db.prepare("DELETE FROM admission_reservations WHERE reservation_key = ? AND owner = ?").run(e,t);return Number(r.changes)>0})}recordOperationReceipt(e){return this.inImmediateTransaction(()=>{let t=this.db.prepare(`INSERT INTO operation_receipts (idempotency_key, operation, result_json, recorded_at)
+           VALUES (?, ?, ?, ?)
+           ON CONFLICT(idempotency_key) DO NOTHING`).run(e.idempotencyKey,e.operation,e.resultJson??null,this.now().toISOString());return{deduplicated:Number(t.changes)===0}})}getOperationReceipt(e){let t=this.db.prepare(`SELECT idempotency_key, operation, result_json, recorded_at
+         FROM operation_receipts WHERE idempotency_key = ?`).get(e);return t?{idempotencyKey:t.idempotency_key,operation:t.operation,resultJson:t.result_json,recordedAt:t.recorded_at}:null}saveRecoveryCheckpoint(e){return this.inImmediateTransaction(()=>{let t=this.db.prepare("SELECT COALESCE(MAX(seq), 0) AS max_seq FROM recovery_checkpoints WHERE scope = ?").get(e.scope),r=Number(t.max_seq)+1;return this.db.prepare(`INSERT INTO recovery_checkpoints (scope, seq, payload_json, created_at)
+           VALUES (?, ?, ?, ?)`).run(e.scope,r,e.payloadJson,this.now().toISOString()),{seq:r}})}latestRecoveryCheckpoint(e){let t=this.db.prepare(`SELECT scope, seq, payload_json, created_at FROM recovery_checkpoints
+         WHERE scope = ? ORDER BY seq DESC LIMIT 1`).get(e);return t?{scope:t.scope,seq:t.seq,payloadJson:t.payload_json,createdAt:t.created_at}:null}localSchemaVersion(){return 1}checkpointTruncate(){this.db.exec("PRAGMA wal_checkpoint(TRUNCATE)")}integrityCheck(){return this.db.prepare("PRAGMA integrity_check").get()?.integrity_check==="ok"}pragma(e){let t=this.db.prepare(`PRAGMA ${e}`).get();return String(Object.values(t)[0])}close(){this.db.close()}};import{existsSync as w,renameSync as M}from"node:fs";function P(n,e){let t=`${n}.quarantine-${e}`;for(let r of["","-wal","-shm"]){let s=`${n}${r}`;w(s)&&M(s,`${t}${r}`)}return t}function k(n){let e=n.quarantineStamp??(n.now??(()=>new Date))().toISOString().replace(/[:.]/g,"-"),t=null;try{let o=a.open(n);if(o.integrityCheck())return{store:o,recovered:!1,quarantinedTo:null};o.close()}catch(o){if(o.name==="SchemaDowngradeRefusedError"||o.name==="FilesystemPolicyError")throw o;t=o}let r=`${n.directory}/${n.filename??"local-run-store.sqlite"}`,s=P(r,e);try{return{store:a.open(n),recovered:!0,quarantinedTo:s}}catch(o){throw new AggregateError([t,o].filter(Boolean),"local-run-store rebuild after quarantine failed")}}export{l as FilesystemPolicyError,p as LOCAL_SCHEMA_VERSION,u as SchemaDowngradeRefusedError,a as SqliteLocalRunStore,d as classifyDatabaseDirectory,k as openSqliteLocalRunStoreWithRecovery};

package/dist/local-run-store/local-run-store.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Node 24 migration N4.1 — the replaceable LocalRunStore adapter contract.
+ *
+ * Covers ONLY host-local concerns the durable-harness plan needs:
+ * attempt/process identity, admission reservations, operation
+ * receipts/idempotency, recovery checkpoints, and the local schema version.
+ * It deliberately does NOT model global AgentOS task authority —
+ * AgentOS/PostgreSQL stays authoritative; nothing here may become a source
+ * of truth for tasks, plans, or audit.
+ *
+ * Implementations: sqlite/ (qualification under N4). A future fallback
+ * implementation must pass the same contract suite
+ * (__tests__/local-run-store/contract-suite.ts).
+ */
+export interface ProcessIdentityRecord {
+    processKey: string;
+    pid: number;
+    runtimeVersion: string;
+    nodeVersion: string;
+    startedAt: string;
+    registeredAt: string;
+}
+export interface AdmissionReservation {
+    key: string;
+    owner: string;
+    expiresAt: string;
+}
+export interface ReserveOutcome {
+    acquired: boolean;
+    /** The live reservation after the attempt (the winner's, not necessarily the caller's). */
+    current: AdmissionReservation;
+}
+export interface OperationReceiptRecord {
+    idempotencyKey: string;
+    operation: string;
+    resultJson: string | null;
+    recordedAt: string;
+}
+export interface RecoveryCheckpointRecord {
+    scope: string;
+    seq: number;
+    payloadJson: string;
+    createdAt: string;
+}
+export interface LocalRunStore {
+    /** Upsert this process's identity row (idempotent per processKey). */
+    registerProcessIdentity(input: {
+        processKey: string;
+        pid: number;
+        runtimeVersion: string;
+        nodeVersion: string;
+        startedAt: string;
+    }): ProcessIdentityRecord;
+    getProcessIdentity(processKey: string): ProcessIdentityRecord | null;
+    /**
+     * Try to acquire a keyed admission slot. An unexpired reservation held by
+     * another owner loses; an expired one is replaced. Re-acquiring your own
+     * live reservation refreshes it.
+     */
+    tryReserveAdmission(key: string, owner: string, ttlMs: number, now?: Date): ReserveOutcome;
+    releaseAdmission(key: string, owner: string): boolean;
+    /** Record an operation receipt; a duplicate idempotency key is reported, never overwritten. */
+    recordOperationReceipt(input: {
+        idempotencyKey: string;
+        operation: string;
+        resultJson?: string | null;
+    }): {
+        deduplicated: boolean;
+    };
+    getOperationReceipt(idempotencyKey: string): OperationReceiptRecord | null;
+    saveRecoveryCheckpoint(input: {
+        scope: string;
+        payloadJson: string;
+    }): {
+        seq: number;
+    };
+    latestRecoveryCheckpoint(scope: string): RecoveryCheckpointRecord | null;
+    localSchemaVersion(): number;
+    close(): void;
+}

package/dist/local-run-store/sqlite/sqlite-filesystem-policy.d.ts

@@ -0,0 +1,16 @@
+export interface FilesystemClassification {
+    verdict: "accepted" | "rejected";
+    /** Bounded operator-facing reason; never environment values. */
+    reason: string;
+    filesystemType: string | null;
+    mountPoint: string | null;
+    /** Realpath-resolved nearest existing ancestor the classification applied to. */
+    resolvedPath: string;
+}
+export interface ClassifyOptions {
+    /** Injectable mounts content (tests); default reads /proc/self/mounts. Return null when unavailable. */
+    mountsSource?: () => string | null;
+    /** Injectable realpath (tests); default resolves via the filesystem. */
+    resolveRealPath?: (p: string) => string;
+}
+export declare function classifyDatabaseDirectory(directory: string, options?: ClassifyOptions): FilesystemClassification;

package/dist/local-run-store/sqlite/sqlite-local-run-store.d.ts

@@ -0,0 +1,55 @@
+import type { LocalRunStore, OperationReceiptRecord, ProcessIdentityRecord, RecoveryCheckpointRecord, ReserveOutcome } from "../local-run-store.js";
+import { type ClassifyOptions } from "./sqlite-filesystem-policy.js";
+export declare class FilesystemPolicyError extends Error {
+    constructor(reason: string);
+}
+export interface OpenSqliteLocalRunStoreOptions {
+    directory: string;
+    filename?: string;
+    /** Busy timeout in ms (writer contention wait). */
+    busyTimeoutMs?: number;
+    /** Test injection for the filesystem policy. */
+    classifyOptions?: ClassifyOptions;
+    now?: () => Date;
+}
+export declare class SqliteLocalRunStore implements LocalRunStore {
+    private readonly db;
+    private readonly now;
+    readonly databasePath: string;
+    private constructor();
+    static open(options: OpenSqliteLocalRunStoreOptions): SqliteLocalRunStore;
+    /** Writer helper — every mutation runs inside BEGIN IMMEDIATE. */
+    private inImmediateTransaction;
+    registerProcessIdentity(input: {
+        processKey: string;
+        pid: number;
+        runtimeVersion: string;
+        nodeVersion: string;
+        startedAt: string;
+    }): ProcessIdentityRecord;
+    getProcessIdentity(processKey: string): ProcessIdentityRecord | null;
+    tryReserveAdmission(key: string, owner: string, ttlMs: number, now?: Date): ReserveOutcome;
+    releaseAdmission(key: string, owner: string): boolean;
+    recordOperationReceipt(input: {
+        idempotencyKey: string;
+        operation: string;
+        resultJson?: string | null;
+    }): {
+        deduplicated: boolean;
+    };
+    getOperationReceipt(idempotencyKey: string): OperationReceiptRecord | null;
+    saveRecoveryCheckpoint(input: {
+        scope: string;
+        payloadJson: string;
+    }): {
+        seq: number;
+    };
+    latestRecoveryCheckpoint(scope: string): RecoveryCheckpointRecord | null;
+    localSchemaVersion(): number;
+    /** Explicit checkpoint policy: truncate the WAL back into the main db. */
+    checkpointTruncate(): void;
+    integrityCheck(): boolean;
+    /** Read-only config readback used by qualification assertions. */
+    pragma(name: "journal_mode" | "synchronous"): string;
+    close(): void;
+}

package/dist/local-run-store/sqlite/sqlite-recovery.d.ts

@@ -0,0 +1,14 @@
+import { SqliteLocalRunStore, type OpenSqliteLocalRunStoreOptions } from "./sqlite-local-run-store.js";
+export interface OpenWithRecoveryResult {
+    store: SqliteLocalRunStore;
+    recovered: boolean;
+    quarantinedTo: string | null;
+}
+/**
+ * Open the store; on open failure or integrity failure, quarantine and
+ * rebuild fresh. Schema-downgrade refusals are NOT recovered — a newer
+ * schema is an operator decision, not corruption.
+ */
+export declare function openSqliteLocalRunStoreWithRecovery(options: OpenSqliteLocalRunStoreOptions & {
+    quarantineStamp?: string;
+}): OpenWithRecoveryResult;

package/dist/local-run-store/sqlite/sqlite-schema.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Node 24 migration N4.3 — explicit versioned schema for the SQLite
+ * local-run-store qualification. Upgrades run forward only; a database
+ * written by a NEWER schema is refused (downgrade is not assumed safe).
+ */
+import type { DatabaseSync } from "node:sqlite";
+export declare const LOCAL_SCHEMA_VERSION = 1;
+export declare class SchemaDowngradeRefusedError extends Error {
+    constructor(found: number, supported: number);
+}
+export declare function readStoredSchemaVersion(db: DatabaseSync): number | null;
+/** Apply/upgrade the schema; refuses downgrade. Caller must already hold the connection. */
+export declare function applyLocalRunStoreSchema(db: DatabaseSync, nowIso: string): void;

package/dist/runner-config-backfill.d.ts

@@ -0,0 +1,18 @@
+import { type KynverUserConfig } from "./config.js";
+export interface RunnerConfigBackfillResult {
+    updated: boolean;
+    fields: string[];
+    skippedAmbiguous: string[];
+}
+/**
+ * Safe migration/backfill of ~/.kynver/config.json from env and scoped credentials.
+ * Never adopts ambiguous workspace identity or writes raw tokens.
+ */
+export declare function buildRunnerConfigBackfillUpdates(config: KynverUserConfig, env?: NodeJS.ProcessEnv): {
+    updates: Partial<KynverUserConfig>;
+    fields: string[];
+    skippedAmbiguous: string[];
+};
+export declare function backfillRunnerConfigFromLegacySources(opts?: {
+    dryRun?: boolean;
+}): RunnerConfigBackfillResult;