@kynver-app/runtime 0.2.122 → 0.2.127

package/dist/daemon-tick-thread.js

@@ -1,45 +1,109 @@
-var A=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(n){throw t=[n],n}};import{spawnSync as mv}from"node:child_process";function hv(e){return["/PID",String(e),"/T","/F"]}function kv(e){return e.error?{method:"taskkill",outcome:"failed",detail:e.error.message}:e.status===0?{method:"taskkill",outcome:"signalled"}:e.status===fv||/not found/i.test(e.stderr)?{method:"taskkill",outcome:"not_found"}:{method:"taskkill",outcome:"failed",detail:`taskkill exit ${e.status??"null"}: ${e.stderr.trim().slice(0,300)}`}}function yv(e){let r=mv("taskkill",e,{encoding:"utf8",windowsHide:!0,stdio:["ignore","pipe","pipe"],timeout:gv});return{status:r.status,stderr:r.stderr??"",...r.error?{error:r.error}:{}}}function Rv(e){return Number.isInteger(e)&&e>0}function rr(e,r="SIGTERM",t={}){if(!Rv(e))return{method:"none",outcome:"not_found"};if((t.platform??process.platform)==="win32"){let s=t.runTaskkill??yv;return kv(s(hv(e)))}let o=t.kill??((s,i)=>{process.kill(s,i)});try{return o(-e,r),{method:"group",outcome:"signalled"}}catch{}try{return o(e,r),{method:"pid",outcome:"signalled"}}catch(s){let i=s.code;return i==="ESRCH"?{method:"pid",outcome:"not_found"}:{method:"pid",outcome:"failed",detail:i??s.message}}}function ce(e=process.platform){return e!=="win32"}var fv,gv,Ni=A(()=>{"use strict";fv=128,gv=15e3});import{existsSync as vv,mkdirSync as bv,readFileSync as yu,readdirSync as wM,renameSync as Sv,rmSync as wv,statSync as Ru,writeFileSync as xv}from"node:fs";import{randomBytes as _v}from"node:crypto";import Cv from"node:path";function $e(e){console.error(e),process.exit(1)}function ae(e){return process.platform!=="win32"?e:{windowsHide:!0,...e}}function fr(e,r){return e||$e(`missing ${r}`),e}function dn(e){try{return JSON.parse(e)}catch{return null}}function I(e,r){try{return JSON.parse(yu(e,"utf8"))}catch(t){if(arguments.length>1)return r;$e(`failed to read ${e}: ${t.message}`)}}function ue(e,r){bv(Cv.dirname(e),{recursive:!0});let t=`${e}.${process.pid}.${_v(4).toString("hex")}.tmp`;try{xv(t,`${JSON.stringify(r,null,2)}
-`),Sv(t,e)}catch(n){try{wv(t,{force:!0})}catch{}throw n}}function x(e){return String(e||"").toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"worker"}function Co(e){return String(e).replace(/\/+$/,"")}function Eo(e){try{return Ru(e).size}catch{return 0}}function Po(e){try{return Ru(e).mtime.toISOString()}catch{return null}}function Mi(e,r){return vv(e)?yu(e,"utf8").split(`
+var I=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(n){throw t=[n],n}};import{spawnSync as $v}from"node:child_process";function Gv(e){return["/PID",String(e),"/T","/F"]}function Yv(e){return e.error?{method:"taskkill",outcome:"failed",detail:e.error.message}:e.status===0?{method:"taskkill",outcome:"signalled"}:e.status===jv||/not found/i.test(e.stderr)?{method:"taskkill",outcome:"not_found"}:{method:"taskkill",outcome:"failed",detail:`taskkill exit ${e.status??"null"}: ${e.stderr.trim().slice(0,300)}`}}function qv(e){let r=$v("taskkill",e,{encoding:"utf8",windowsHide:!0,stdio:["ignore","pipe","pipe"],timeout:Vv});return{status:r.status,stderr:r.stderr??"",...r.error?{error:r.error}:{}}}function Jv(e){return Number.isInteger(e)&&e>0}function Ne(e,r="SIGTERM",t={}){if(!Jv(e))return{method:"none",outcome:"not_found"};if((t.platform??process.platform)==="win32"){let s=t.runTaskkill??qv;return Yv(s(Gv(e)))}let o=t.kill??((s,i)=>{process.kill(s,i)});try{return o(-e,r),{method:"group",outcome:"signalled"}}catch{}try{return o(e,r),{method:"pid",outcome:"signalled"}}catch(s){let i=s.code;return i==="ESRCH"?{method:"pid",outcome:"not_found"}:{method:"pid",outcome:"failed",detail:i??s.message}}}function ce(e=process.platform){return e!=="win32"}var jv,Vv,Hi=I(()=>{"use strict";jv=128,Vv=15e3});import{existsSync as zv,mkdirSync as Xv,readFileSync as Iu,readdirSync as ED,renameSync as Qv,rmSync as Zv,statSync as Ou,writeFileSync as eb}from"node:fs";import{randomBytes as rb}from"node:crypto";import tb from"node:path";function Ge(e){console.error(e),process.exit(1)}function ae(e){return process.platform!=="win32"?e:{windowsHide:!0,...e}}function gr(e,r){return e||Ge(`missing ${r}`),e}function hn(e){try{return JSON.parse(e)}catch{return null}}function A(e,r){try{return JSON.parse(Iu(e,"utf8"))}catch(t){if(arguments.length>1)return r;Ge(`failed to read ${e}: ${t.message}`)}}function ue(e,r){Xv(tb.dirname(e),{recursive:!0});let t=`${e}.${process.pid}.${rb(4).toString("hex")}.tmp`;try{eb(t,`${JSON.stringify(r,null,2)}
+`),Qv(t,e)}catch(n){try{Zv(t,{force:!0})}catch{}throw n}}function x(e){return String(e||"").toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"worker"}function To(e){return String(e).replace(/\/+$/,"")}function No(e){try{return Ou(e).size}catch{return 0}}function Mo(e){try{return Ou(e).mtime.toISOString()}catch{return null}}function At(e,r){return zv(e)?Iu(e,"utf8").split(`
 `).slice(-r).join(`
-`):""}function z(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}function vu(e){let r=null,t=-1/0;for(let n of e){if(!n)continue;let o=Date.parse(n);Number.isFinite(o)&&o>t&&(t=o,r=n)}return r}function Di(e){return Math.max(0,Math.round((Date.now()-e)/1e3))}var O=A(()=>{"use strict";Ni()});import{existsSync as Ev,readFileSync as Pv}from"node:fs";import{homedir as Av}from"node:os";import Iv from"node:path";function Li(e){return!e||typeof e!="object"||Array.isArray(e)?null:e}function Wi(e){return typeof e=="string"&&e.trim()?e:null}function bu(e){let r=Li(e);if(!r)return null;let t=r.desiredState;if(t!=="running"&&t!=="paused"&&t!=="stopped")return null;let n=r.policyVersion;if(typeof n!="number"||!Number.isInteger(n)||n<0)return null;let o=Wi(r.requestedAt);return o?{desiredState:t,policyVersion:n,requestedAt:o,requestedByLabel:Wi(r.requestedByLabel),reason:Wi(r.reason)}:null}function Su(e){let r=Li(Li(e)?.response);return!r||r.runtimeControl===void 0?null:bu(r.runtimeControl)}function wu(e,r=Av()){let t=e.replace(/[^A-Za-z0-9_-]/g,"_");return Iv.join(r,".kynver",`runtime-control-${t}.json`)}function xu(e,r,t){try{let n=Ct(e,t);if(n&&n.policyVersion>r.policyVersion)return;ue(wu(e,t),{contractVersion:1,agentOsId:e,control:r,deliveredAt:new Date().toISOString()})}catch{}}function Ct(e,r){try{let t=wu(e,r);if(!Ev(t))return null;let n=JSON.parse(Pv(t,"utf8"));return n.agentOsId!==e?null:bu(n.control)}catch{return null}}function Ao(e){return e?.desiredState??"running"}function Ov(e){return e==="keeper"||e==="desktop"}function Tv(e,r,t=!1){let n=Ao(e);return n==="paused"?"paused":n==="stopped"?t&&r===0?"stopped":"stopping":"running"}function _u(e){return e.control?{policyVersion:e.control.policyVersion,state:Tv(e.control,e.inFlightWorkers,e.exiting),supervised:Ov(e.supervisor),inFlightWorkers:Math.max(0,Math.floor(e.inFlightWorkers))}:null}function Cu(e){let r=Ao(e);return r==="paused"?"runtime_paused":r==="stopped"?"runtime_stopped":null}function Pu(e){Eu=e}function Au(){return Eu}var Eu,pn=A(()=>{"use strict";O();Eu=null});import{homedir as Iu}from"node:os";import Ou from"node:path";function Nv(e){return e==="~"?Iu():e.startsWith("~/")||e.startsWith("~\\")?Ou.join(Iu(),e.slice(2)):e}function je(e){return Ou.resolve(Nv(e))}var Wr=A(()=>{"use strict"});function Kv(e){let r=e[Fv];return r?new Set(r.split(/[\s,]+/).map(t=>t.trim()).filter(Boolean)):new Set}function Hv(e,r={}){return Dv.has(e)?!0:Uv.has(e)||r.operatorAllow?.has(e)||Bv.some(t=>e.endsWith(t))?!1:Wv.some(t=>e.endsWith(t))}function Ui(e){let r=Kv(e),t={...e};for(let n of Object.keys(t))Hv(n,{operatorAllow:r})&&delete t[n];return t}var Mv,Dv,Wv,Lv,Uv,Bv,Fv,Bi=A(()=>{"use strict";Mv=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY","MEMORY_CONTENT_KEK","LLM_BYOK_KEK","KYNVER_COMMAND_AUTH_KEY","KYNVER_INSTRUCTION_BUNDLE_KEY","KYNVER_MEMORY_LEDGER_KEY","KYNVER_JWKS_PRIVATE_KEY_JWK"],Dv=new Set(Mv),Wv=["_SECRET","_API_KEY","_KEK","_KEY","_TOKEN","_PASSWORD","_PASSPHRASE","_SALT"],Lv=["GITHUB_TOKEN","GH_TOKEN","CLAUDE_CODE_OAUTH_TOKEN","CODEX_API_KEY","GEMINI_API_KEY"],Uv=new Set(Lv),Bv=["_PUBLIC_KEY"],Fv="KYNVER_WORKER_ENV_ALLOW"});import{spawnSync as Nu}from"node:child_process";function Q(e,r,t={}){let n=Nu("git",r,ae({cwd:e,encoding:"utf8"}));if(n.status!==0&&!t.allowFailure){let o=$v(e,r,n);if(t.throwError)throw new Error(o);$e(o)}return n.stdout||""}function $v(e,r,t){let n=typeof t.stderr=="string"&&t.stderr.trim()||typeof t.stdout=="string"&&t.stdout.trim()||t.error?.message||`exit ${t.status??"unknown"}`;return`git ${r.join(" ")} failed in ${e}: ${n}`}function mn(e){return Q(e,["status","--short"],{allowFailure:!0}).split(`
-`).map(r=>r.trim()).filter(Boolean)}function te(e,r){try{let t=Nu("git",r,ae({cwd:e,encoding:"utf8"}));return{status:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function Tu(e,r,t){let n=te(e,["merge-base","--is-ancestor",r,t]);return n.status===0?{isAncestor:!0,error:null}:n.status===1?{isAncestor:!1,error:null}:{isAncestor:null,error:n.error||n.stderr||n.stdout||`git exited ${n.status}`}}function Io(e,r="origin/main"){let t=typeof r=="string"?{base:r}:r,n=t.baseCommit?.trim()||t.base?.trim()||"origin/main",o=t.baseCommit?.trim()||null;if(!e)return Et(n,"missing worktree path");let s=te(e,["rev-parse","HEAD"]);if(s.status!==0)return Et(n,s.error||s.stderr||s.stdout||"failed to resolve HEAD");let i;if(o)i=o;else{let p=te(e,["rev-parse",n]);if(p.status!==0)return Et(n,p.error||p.stderr||p.stdout||`failed to resolve ${n}`,s.stdout.trim());i=p.stdout.trim()}let a=s.stdout.trim();if(a===i)return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:!0,headIsAncestorOfBase:!0,relation:"synced"};let l=Tu(e,i,a),c=Tu(e,a,i),u=l.error||c.error||void 0;if(l.isAncestor==null||c.isAncestor==null)return{checked:!1,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:"unknown",...u?{error:u}:{}};let d=l.isAncestor?"ahead":c.isAncestor?"merged":"diverged";return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:d,...u?{error:u}:{}}}function Et(e,r,t=null){return{checked:!1,base:e,head:t,baseHead:null,baseIsAncestorOfHead:null,headIsAncestorOfBase:null,relation:"unknown",error:r}}var de=A(()=>{"use strict";Wr();O();Bi()});var Fi=A(()=>{"use strict";de()});import{existsSync as Hi,readFileSync as Du}from"node:fs";import{homedir as jv}from"node:os";import Ve from"node:path";import{fileURLToPath as Vv}from"node:url";function Yv(e){let r=Ve.join(e,"package.json");if(!Hi(r))return null;try{let t=JSON.parse(Du(r,"utf8"));return typeof t.name=="string"?t.name.trim():null}catch{return null}}function Wu(e){return Yv(e)==="kynver"}function Mu(e){let r=Ve.resolve(e);if(!Hi(r))return null;let t=te(r,["rev-parse","--show-toplevel"]);if(t.status!==0)return null;let n=t.stdout.trim();return n.length?Ve.resolve(n):null}function qv(e=import.meta.url){let r=Ve.dirname(Vv(e));for(let t=0;t<8;t+=1){let n=Ve.join(r,"package.json");if(Hi(n))try{if(JSON.parse(Du(n,"utf8")).name==="@kynver-app/runtime")return r}catch{}let o=Ve.dirname(r);if(o===r)break;r=o}return null}function Ki(e,r,t,n,o){if(!t)return;let s=Ve.resolve(t);e.has(s)||(o?.requireMonorepo??!0)&&!Wu(s)||(e.add(s),r.push({repo:s,source:n}))}function Jv(e){let r=e?.cwd??process.cwd(),t=new Set,n=[];Ki(t,n,Mu(r),"cwd_git",{requireMonorepo:!1});let o=qv(e?.runtimeModuleUrl??import.meta.url);o&&Ki(t,n,Mu(o),"runtime_checkout");let s=jv();for(let a of Gv)Ki(t,n,je(Ve.join(s,a)),"well_known_path");let i=Ve.resolve(e?.cwd??process.cwd());return n.filter(a=>{if(a.source!=="runtime_checkout"||!Wu(a.repo))return!0;let l=Ve.resolve(a.repo);return i===l||i.startsWith(`${l}${Ve.sep}`)})}function Oo(e){return Jv(e)[0]??null}var Gv,fn=A(()=>{"use strict";de();Wr();Fi();Gv=["Kynver","repos/Kynver","repos/kynver-source-main","code/Kynver","projects/Kynver"]});function Bu(e){let r=Co(e);try{let t=new URL(r);return t.hostname.toLowerCase()===Lu?(t.hostname=`www.${Lu}`,Co(t.toString())):r}catch{return r}}function gn(e){if(e?.trim())return Bu(Co(e.trim()))}async function hn(e,r,t=fetch){let n=Bu(e),o=new Headers(r?.headers),s=0;for(;s<=Uu;){let i=await t(n,{...r,headers:o,redirect:"manual"});if(![301,302,303,307,308].includes(i.status))return i;let a=i.headers.get("location");if(!a)return i;let l=new URL(a,n);if(l.origin!==new URL(n).origin||l.username||l.password)throw await i.body?.cancel(),new Error("kynver API fetch refused unsafe redirect (origin change or embedded credentials)");let c=(r?.method??"GET").toUpperCase();if(!["GET","HEAD"].includes(c)&&i.status!==307&&i.status!==308)return i;await i.body?.cancel(),n=l.toString(),s+=1}throw new Error(`kynver API fetch exceeded ${Uu} redirects for ${e}`)}var Lu,Uu,kn=A(()=>{"use strict";O();Lu="kynver.com";Uu=10});function Qr(e){let r=(e??"").trim().toLowerCase();return r==="ghost"||r==="forge"||r==="box"?r:r.includes("forge")?"forge":r.includes("ghost")||r.includes("openclaw")?"ghost":"box"}function To(e,r){return e[r]?.trim()||null}function Fu(e){let r=e?.split(":")[0]?.trim();return r?Qr(r):null}function gr(e=process.env,r={}){let t=[],n=Fu(r.boxId),o=Fu(To(e,"KYNVER_BOX_ID")),s=r.boxKind?.trim();if(s)return n&&n!==Qr(s)&&t.push(`config.boxId=${r.boxId} conflicts with boxKind=${s}; using explicit boxKind=${s}`),{boxKind:Qr(s),source:"config",slugInferenceBlocked:!1,warnings:t};let i=To(e,"KYNVER_BOX_KIND");if(i)return o&&o!==Qr(i)&&t.push(`KYNVER_BOX_ID=${To(e,"KYNVER_BOX_ID")} conflicts with KYNVER_BOX_KIND=${i}; using explicit KYNVER_BOX_KIND=${i}`),{boxKind:Qr(i),source:"env",slugInferenceBlocked:!1,warnings:t};if(n)return{boxKind:n,source:"config",slugInferenceBlocked:!1,warnings:t};if(o)return{boxKind:o,source:"env",slugInferenceBlocked:!1,warnings:t};let a=To(e,"KYNVER_AGENT_OS_SLUG");return a&&t.push(`KYNVER_AGENT_OS_SLUG=${a} is a workspace slug, not box identity \u2014 operators set boxKind via \`kynver setup --box-kind forge|ghost\` or KYNVER_BOX_KIND; customers default to box`),{boxKind:"box",source:"default",slugInferenceBlocked:!!a,warnings:t}}function hr(e={},r=process.env){return gr(r,e).boxKind}var Oe=A(()=>{"use strict"});function $i(e,r){return e==="forge"?4:Math.max(1,r)}function yn(e,r){return e==="forge"?Math.min(Math.max(1,r),4):Math.max(1,r)}var No=A(()=>{"use strict"});import{readFileSync as zv}from"node:fs";import Ku from"node:os";function Hu(e){if(e!==void 0){let r=e.match(/^MemAvailable:\s+(\d+)\s*kB/m);return r?Number(r[1])*1024:Ku.freemem()}if(process.platform==="linux")try{let t=zv("/proc/meminfo","utf8").match(/^MemAvailable:\s+(\d+)\s*kB/m);if(t)return Number(t[1])*1024}catch{}return Ku.freemem()}var $u=A(()=>{"use strict"});import{existsSync as Xv,readFileSync as Qv,statfsSync as Zv}from"node:fs";function ji(){if(process.platform!=="linux")return!1;for(let e of["/proc/sys/kernel/osrelease","/proc/version"])try{if(!Xv(e))continue;let r=Qv(e,"utf8");if(/microsoft|wsl/i.test(r))return!0}catch{}return!1}function ju(e={}){if(!(e.forceWsl===void 0?ji():e.forceWsl))return null;let t=e.wslHostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Pt,n=e.wslHostFreeWarnBytes??eb,o=e.wslHostFreeCriticalBytes??rb,s=e.statfs??Zv,i;try{i=s(t)}catch(b){return{ok:!1,path:t,freeBytes:0,totalBytes:0,usedPercent:100,warnBelowBytes:n,criticalBelowBytes:o,reason:`Windows host disk probe failed at ${t}: ${b.message}`,probeError:b.message}}let a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<n,d=a<o,p=!u&&!d,m=(a/(1024*1024*1024)).toFixed(1),f=null;return p||(f=`Windows host disk ${t} at ${d?"critical":"warning"}: ${m} GiB free (<${(d?o:n)/1024/1024/1024} GiB); WSL VHDX cannot grow safely. ${tb()}`),{ok:p,path:t,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:n,criticalBelowBytes:o,reason:f,probeError:null}}function tb(){return"Recovery: 1) free Windows C: (empty Recycle Bin / Storage Sense / clear %TEMP% and %LOCALAPPDATA%\\Temp\\wsl-crashes); 2) shut down WSL (`wsl --shutdown`) then compact the VHDX (`Optimize-VHD` or `diskpart compact vdisk`); 3) clear local node_modules / .next / harness worktrees before restarting workers; 4) disable recurring dumps via `%USERPROFILE%/.wslconfig` (`maxCrashDumpCount=-1`) or `kynver wsl-crashes --execute`. More help: https://www.kynver.com/help."}var eb,rb,Pt,Vi=A(()=>{"use strict";eb=25*1024*1024*1024,rb=12*1024*1024*1024,Pt="/mnt/c"});import{execFileSync as Vu}from"node:child_process";import{existsSync as Do,readFileSync as Gu,readdirSync as nb,statSync as ob}from"node:fs";import Gi from"node:path";function Mo(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function Yu(){let e=process.env.KYNVER_WSL_WIN_USER?.trim();if(e)return e;try{let n=Vu("cmd.exe",["/c","echo","%USERNAME%"],{encoding:"utf8",timeout:5e3,stdio:["ignore","pipe","ignore"]}).trim();if(n&&n!=="%USERNAME%"&&!n.includes("%"))return n}catch{}let r=process.env.USER?.trim()||process.env.LOGNAME?.trim(),t=process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Pt;return r&&Do(Gi.join(t,"Users",r))?r:null}function cb(e={}){let r=e.crashDumpDir?.trim()||process.env.KYNVER_WSL_CRASH_DUMP_DIR?.trim();if(r)return r;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Pt,n=e.windowsUser??Yu();return n?`${t.replace(/\\/g,"/").replace(/\/$/,"")}/Users/${n}/AppData/Local/Temp/wsl-crashes`:null}function ub(e){let r=/^wsl-crash-\d+-(\d+)-(.+)-(\d+)\.dmp$/i.exec(e);if(!r)return{executableHint:null,signal:null,pid:null};let t=Number(r[1]),n=r[2]??"",o=Number(r[3]),s=n.split("_").filter(Boolean);return{executableHint:s.length>0?s[s.length-1]:null,signal:Number.isFinite(o)?o:null,pid:Number.isFinite(t)?t:null}}function db(){try{if(Do("/proc/sys/kernel/core_pattern"))return Gu("/proc/sys/kernel/core_pattern","utf8").trim()}catch{}try{return Vu("sysctl",["-n","kernel.core_pattern"],{encoding:"utf8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim()||null}catch{return null}}function pb(e){return!!(e&&/wsl-capture-crash/i.test(e))}function mb(e,r=Pt){let t=Gi.join(r,"Users",e,".wslconfig");if(!Do(t))return{maxCrashDumpCount:null,crashDumpFolder:null};let n;try{n=Gu(t,"utf8")}catch{return null}let o=null,s=null;for(let i of n.split(/\r?\n/)){let a=i.replace(/#.*$/,"").trim();if(!a||a.startsWith("["))continue;let l=a.indexOf("=");if(l<0)continue;let c=a.slice(0,l).trim().toLowerCase(),u=a.slice(l+1).trim();if(c==="maxcrashdumpcount"){let d=Number(u);o=Number.isFinite(d)?d:null}else c==="crashdumpfolder"&&(s=u.replace(/^["']|["']$/g,"")||null)}return{maxCrashDumpCount:o,crashDumpFolder:s}}function fb(e){if(!Do(e))return[];let r=nb(e,{withFileTypes:!0}),t=[];for(let n of r){if(!n.isFile()||!n.name.toLowerCase().endsWith(".dmp"))continue;let o=Gi.join(e,n.name);try{let s=ob(o),i=ub(n.name);t.push({name:n.name,path:o,bytes:s.size,mtimeMs:s.mtimeMs,executableHint:i.executableHint,signal:i.signal,pid:i.pid})}catch{}}return t.sort((n,o)=>o.mtimeMs-n.mtimeMs),t}function At(e={}){if(!(e.forceWsl===void 0?ji():e.forceWsl))return null;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Pt,n=e.windowsUser??Yu(),o=e.warnBelowBytes??Mo("KYNVER_WSL_CRASH_DUMP_WARN_BYTES",sb),s=e.criticalBelowBytes??Mo("KYNVER_WSL_CRASH_DUMP_CRITICAL_BYTES",ib),i=e.warnCount??Mo("KYNVER_WSL_CRASH_DUMP_WARN_COUNT",ab),a=e.criticalCount??Mo("KYNVER_WSL_CRASH_DUMP_CRITICAL_COUNT",lb),l=(e.readCorePattern??db)(),c=pb(l),u=null;n&&(u=(e.readWslConfig??mb)(n,t));let d=u?.maxCrashDumpCount??null,p=d===-1,m=cb({hostMount:t,windowsUser:n,crashDumpDir:e.crashDumpDir});if(!m)return{ok:!0,path:null,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:p,reason:null,probeError:"windows_user_unresolved"};let f;try{f=(e.listDumps??fb)(m)}catch($){return{ok:!1,path:m,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:p,reason:`WSL crash dump probe failed at ${m}: ${$.message}`,probeError:$.message}}let b=f.reduce(($,_)=>$+_.bytes,0),k=f.length,R=[...new Set(f.map($=>$.executableHint).filter($=>!!$))],g=b>=s,h=b>=o,E=k>=a,P=k>=i,w=!(g||E||h||P),V=null;if(!w){let $=g||E?"critical":"warning",_=(b/1024**3).toFixed(1),Z=R.length>0?R.join(", "):"unknown";V=`WSL crash dumps ${$}: ${k} file(s), ${_} GiB at ${m} (executables: ${Z}). `+gb({wslCaptureEnabled:c,dumpsDisabledInWslConfig:p})}return{ok:w,path:m,windowsUser:n,dumpCount:k,totalBytes:b,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:f,executables:R,corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:p,reason:V,probeError:null}}function gb(e={}){let r=["Recovery:","1) run `kynver wsl-crashes --execute` or scripts/cleanup-wsl-crashes.ps1 to prune old .dmp files;"];return e.dumpsDisabledInWslConfig||r.push("2) add `[wsl2]\\nmaxCrashDumpCount=-1` to %USERPROFILE%/.wslconfig then `wsl --shutdown` to disable future dumps;"),e.wslCaptureEnabled&&r.push("3) investigate crashing executables (node OOM/SIGBUS often follows Windows C: pressure);"),r.push("More help: https://www.kynver.com/help."),r.join(" ")}var sb,ib,ab,lb,Wo=A(()=>{"use strict";Vi();sb=5*1024*1024*1024,ib=10*1024*1024*1024,ab=2,lb=4});import{statfsSync as hb}from"node:fs";function Lr(e={}){let r=e.diskPath?.trim()||"/",t=e.diskFreeWarnBytes??kb,n=e.diskFreeCriticalBytes??yb,o=e.diskMaxUsedPercent??Rb,s=e.diskHardMaxUsedPercent??vb,i=hb(r),a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<t,d=a<n,p=a<t*2,m=p&&c>o,f=p&&c>s,b=!u&&!d&&!m&&!f,k=e.skipWslHostCheck?null:ju(e.wslHost),R=e.skipWslCrashDumpCheck?null:At(e.wslCrashDumps),g=b&&(k?k.ok:!0)&&(R?R.ok:!0),h=null;return g||(h=[d?`free space below critical ${n} bytes`:null,u?`free space below warning ${t} bytes`:null,f?`used percent above hard cap ${s}%`:null,m?`used percent above cap ${o}%`:null,k&&!k.ok?k.reason:null,R&&!R.ok?R.reason:null].filter(Boolean).join("; ")),bb({ok:g,path:r,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:t,criticalBelowBytes:n,maxUsedPercent:o,hardMaxUsedPercent:s,reason:h,wslHost:k,wslCrashDumps:R?{ok:R.ok,path:R.path,dumpCount:R.dumpCount,totalBytes:R.totalBytes,executables:R.executables,wslCaptureEnabled:R.wslCaptureEnabled,dumpsDisabledInWslConfig:R.dumpsDisabledInWslConfig,reason:R.reason,probeError:R.probeError}:null})}function bb(e){let r=process.env.KYNVER_DISPATCH_DISK_GATE_FORCE?.trim().toLowerCase();return r?r==="ok"||r==="open"||r==="none"?e.ok?e:{...e,ok:!0,reason:`disk gate forced open by KYNVER_DISPATCH_DISK_GATE_FORCE (suppressed: ${e.reason??"no reason"})`}:r==="block"||r==="pressured"?{...e,ok:!1,reason:`disk gate forced closed by KYNVER_DISPATCH_DISK_GATE_FORCE${e.reason?` (underlying: ${e.reason})`:""}`}:e:e}var kb,yb,Rb,vb,Rn=A(()=>{"use strict";Wo();Vi();kb=30*1024*1024*1024,yb=15*1024*1024*1024,Rb=80,vb=90});import{existsSync as Sb,readdirSync as wb}from"node:fs";import xb from"node:path";function tr(e){let r=new Set;for(let n of Object.keys(e.workers||{}))r.add(x(n));let t=xb.join(M(e.id),"workers");if(!Sb(t))return[...r];for(let n of wb(t,{withFileTypes:!0}))n.isDirectory()&&r.add(x(n.name));return[...r]}var vn=A(()=>{"use strict";B();O()});function Yi(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function qu(e){let r=e.trim();if(!r)return null;let t=Yi(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let l=Yi(s[1]??"");l&&n.push(l)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let l=Yi(r.slice(i,a+1));l&&n.push(l)}return n.length>0?n[n.length-1]:null}function Ju(e){let r=e.finalResult??e.final_result;if(r!=null)return typeof r=="string"?qu(r)??(r.trim()||null):r;let t=typeof e.summary=="string"?e.summary.trim():"";if(!t)return null;let n=qu(t);return n||t}var zu=A(()=>{"use strict"});import{existsSync as _b,readFileSync as Cb}from"node:fs";function Xu(e){return e==="complete"}function kr(e){return Xu(e.lastHeartbeatPhase)?e.terminalFinalResult!==void 0&&e.terminalFinalResult!==null?e.terminalFinalResult:e.lastHeartbeatSummary?.trim()||"completed":null}function pe(e){let r={heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,terminalFinalResult:null,heartbeatBlocker:null,timestampAnomalies:[],lastBoxResourceSnapshot:null,lastPrEvidence:[]};if(!_b(e))return r;let t=Date.now()+Eb,n=new Date(t).toISOString(),o=Cb(e,"utf8").split(`
-`).filter(Boolean);for(let s of o){let i=dn(s);if(!i||typeof i!="object"||Array.isArray(i))continue;let a=i;if(r.heartbeatCount++,a.ts){let l=String(a.ts),c=Date.parse(l);Number.isFinite(c)&&c>t?r.timestampAnomalies.push({kind:"future_heartbeat_timestamp",observedAt:l,clampedTo:n}):r.lastHeartbeatAt=l}a.phase!==void 0&&a.phase!==null&&(r.lastHeartbeatPhase=String(a.phase)),a.summary!==void 0&&a.summary!==null&&(r.lastHeartbeatSummary=String(a.summary)),Xu(r.lastHeartbeatPhase)&&(r.terminalFinalResult=Ju(a)),r.heartbeatBlocker=a.blocker?String(a.blocker):null,a.boxResourceSnapshot&&typeof a.boxResourceSnapshot=="object"&&!Array.isArray(a.boxResourceSnapshot)&&(r.lastBoxResourceSnapshot=a.boxResourceSnapshot),Array.isArray(a.prEvidence)&&(r.lastPrEvidence=a.prEvidence.filter(l=>!!l&&typeof l=="object"&&typeof l.prUrl=="string"))}return r}var Eb,Zr=A(()=>{"use strict";zu();O();Eb=6e4});function Zu(e){return e?(e.split("/").pop()??e).replace(/\.exe$/i,"").toLowerCase():null}function Lo(e){if(!e)return[];let r=[],t="",n,o=!1;for(let s of e){if(o){t+=s,o=!1;continue}if(s==="\\"){o=!0;continue}if(n){s===n?n=void 0:t+=s;continue}if(s==='"'||s==="'"){n=s;continue}if(/\s/.test(s)){t&&(r.push(t),t="");continue}t+=s}return t&&r.push(t),r}function ed(e){let r=Zu(e[0]);return!!(r&&Pb.has(r))}function Ib(e){let r=e.trim();return r.includes("/")?r.split("/").pop()??r:r}function Ob(e){if(!e||e.includes("*"))return null;let r=Ib(e);return!r||r.includes("/")?null:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(r)?r:null}function rd(e){return!e||e.includes("/")||e.includes("*")?!1:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(e)}function qi(e){if(!e)return!1;let r=e.trim();return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")}function Tb(e){if(!e.startsWith("--glob="))return e;let r=e.slice(7);return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")?`--glob=${r}/**`:e}function Nb(e){let r=[];for(let t=1;t<e.length;t+=1){let n=e[t];if(n){if(n==="--"){r.push(...e.slice(t+1));break}if(n.startsWith("-")){if(n.includes("="))continue;Qu.has(n)&&(t+=1);continue}r.push(n)}}return r}function Mb(e){let r=!1,t=e.map((o,s)=>{let i=Tb(o),a=e[s-1];return a&&Qu.has(a)&&o.startsWith("!")&&!o.includes("/")&&!o.endsWith("/**")&&(i=`${o}/**`),i!==o&&(r=!0),i}),n=Nb(t);if(n.length===2){let[o,s]=n;if(qi(s))return{argv:[t[0]??"rg",o,"-g",`${s}/**`,"."],changed:!0};let i=Ob(s);if(i)return{argv:[t[0]??"rg","-g",i,o,"."],changed:!0}}return r&&n.length===1?{argv:[...t,"."],changed:!0}:{argv:t,changed:r}}function td(e){for(let r=1;r<e.length;r+=1){let t=e[r];if(t&&(t==="-c"||t==="-lc"||t==="-cl"||/^-[a-zA-Z]*c[a-zA-Z]*$/u.test(t)))return r+1}return-1}function Uo(e){let r=e.trim();if(!r)return{command:r,wrapped:!1};let t=Lo(r);if(!t.length)return{command:r,wrapped:!1};let n=Zu(t[0]);if(!n||!Ab.has(n))return{command:r,wrapped:!1};let o=td(t);if(o<0||o>=t.length)return{command:r,wrapped:!1};let s=t.slice(o).join(" ").trim();return s?{command:s,wrapped:!0}:{command:r,wrapped:!1}}function Db(e,r){let t=e.trim(),n=Lo(t),o=td(n);if(o<0)return r;let s=n.slice(0,o).join(" "),i=r.includes("'")?`"${r.replace(/"/g,'\\"')}"`:`'${r}'`;return`${s} ${i}`}function Wb(e){let r=e.trim(),t=Uo(r),n=Lo(t.command);if(!n.length||!ed(n))return{segment:r,changed:!1};let o=Mb(n);if(!o.changed)return{segment:r,changed:!1};let s=o.argv.join(" ");return t.wrapped?{segment:Db(r,s),changed:!0}:{segment:s,changed:!0}}function Ji(e){let r=e.trim();if(!r)return{command:r,changed:!1};let t=r.includes("&&")?" && ":r.includes("||")?" || ":"; ",n=r.split(/\s*(?:&&|\|\||;)\s*/u),o=!1,s=n.map(i=>{let a=Wb(i);return a.changed&&(o=!0),a.segment});return o?{command:s.join(t),changed:!0}:{command:r,changed:!1}}function nd(e){let r=Uo(e).command,t=Lo(r.trim());return t.length&&ed(t)?!0:/\b(rg|ripgrep)\b/i.test(r)}function od(e){if(!e)return{};let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(|$)/iu);if(r)return{pattern:r[1],target:r[2]?.trim()};let t=e.match(/^search\s+"(.+)"\s+in\s+(.+)$/iu);return t?{pattern:t[1],target:t[2]?.trim()}:{}}function Lb(e){let{pattern:r,target:t}=od(e);return r?qi(t)?{kind:"rg_exclude_syntax",pattern:r,target:t}:rd(t)?{kind:"bad_scope",pattern:r,target:t}:{kind:"not_repo_search",pattern:r,target:t}:{kind:"not_repo_search"}}function Ub(e){let{pattern:r,target:t}=od(e);if(!r)return null;if(qi(t)){let n=`${t.trim()}/**`;return{command:`rg "${r}" -g '${n}' .`,changed:!0}}return t&&rd(t)?{command:`rg -g ${t} "${r}" .`,changed:!0}:null}function Bb(e){if(e.kind==="bad_scope"&&e.pattern&&e.target)return`Use \`rg -g '${e.target}' ${e.pattern} .\` from the repo root instead of treating ${e.target} as a folder.`;if(e.kind==="rg_exclude_syntax"&&e.pattern){let r=e.target?`${e.target.trim()}/**`:"!node_modules/**";return`Repo search scope \`${e.target??"!node_modules"}\` is not a valid ripgrep path. Use \`rg "${e.pattern}" -g '${r}' .\` from the repo root (exclude globs need a \`/**\` suffix).`}return e.kind==="no_matches"&&e.pattern?`No matches for "${e.pattern}". Try a broader pattern, drop overly short tokens, or search from the repo root with \`rg "${e.pattern}" .\`.`:null}function Fb(e){let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(agent\)|\s*failed|$)/iu);return r?`search "${r[1]}" in ${r[2]?.trim()}`:null}function zi(e){let r=e.meta?.trim()||(e.command?Fb(e.command):null)||null;if(r){let t=Lb(r),n=Bb(t);if(n)return n;let o=Ub(r);if(o?.changed)return`Repo search used an invalid scope. Retry with: \`${o.command}\`.`}if(e.command&&/\b(rg|ripgrep)\b/i.test(e.command)){let t=Ji(e.command);if(t.changed)return`Ripgrep scope may be invalid. Retry with: \`${t.command}\`.`;if(e.exitCode===1)return"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root."}return null}var Pb,Ab,Qu,sd=A(()=>{"use strict";Pb=new Set(["rg","ripgrep","grep"]),Ab=new Set(["bash","sh","dash","zsh"]),Qu=new Set(["-e","--regexp","-f","--file","-m","--max-count","-A","--after-context","-B","--before-context","-C","--context","-g","--glob","--iglob"])});function bn(e,r=200){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function $b(e){let r=e.trim();if(!r)return null;if(r.startsWith("{"))try{return JSON.parse(r)}catch{}let t=r.indexOf("{"),n=r.lastIndexOf("}");if(t>=0&&n>t)try{return JSON.parse(r.slice(t,n+1))}catch{return null}return null}function Sn(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function jb(e){let r=e.metadata;if(!Sn(r))return null;let t=r.vulnerabilities;if(!Sn(t))return null;let n=s=>typeof t[s]=="number"?t[s]:0,o={info:n("info"),low:n("low"),moderate:n("moderate"),high:n("high"),critical:n("critical"),total:n("total")};return typeof t.total!="number"&&!o.critical&&!o.high&&!o.moderate&&!o.low&&!o.info?null:o}function Vb(e){let r=[];e.critical&&r.push(`${e.critical} critical`),e.high&&r.push(`${e.high} high`),e.moderate&&r.push(`${e.moderate} moderate`),e.low&&r.push(`${e.low} low`),e.info&&r.push(`${e.info} info`);let t=r.length?r.join(", "):"see report";return`npm audit: ${e.total} vulnerabilit${e.total===1?"y":"ies"} (${t}) \u2014 remediation required`}function Gb(e,r){let t=e.error;if(Sn(t)){let s=typeof t.summary=="string"?t.summary.trim():"",i=typeof t.code=="string"?t.code.trim():"";if(s)return i?`${i}: ${s}`:s;if(i)return i}let n=typeof e.message=="string"?e.message.trim():"";if(n)return n;let o=r.trim();return o?bn(o.split(`
-`).find(Boolean)??o,160):"npm audit failed"}function Yb(e){let r=`${e.stdout}
-${e.stderr}`.trim(),t=$b(r);if(!t||!Sn(t)){let o=bn(r||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit failed (invalid or missing JSON): ${o}`,parseError:"invalid_json"}}if(Sn(t.error))return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit command failed: ${Gb(t,e.stderr)}`};let n=jb(t);return n?e.exitCode===0&&n.total===0?{kind:"success",exitCode:0,summary:"npm audit: no vulnerabilities reported",audit:n}:{kind:"audit_findings",exitCode:e.exitCode,summary:Vb(n),audit:n}:{kind:"command_failure",exitCode:e.exitCode,summary:"npm audit failed: JSON response missing vulnerability metadata",parseError:"missing_metadata"}}function qb(e){return Kb.test(e)}function Jb(e){let r=Uo(e).command;return id.test(e)||id.test(r)||nd(e)}function zb(e){let r=zi({command:e.command,exitCode:e.exitCode});if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"ripgrep finished (exit 0)"};if(e.exitCode===1){let n=(e.stderr||e.interleaved).trim();if(n&&Hb.test(n)){let i=bn(n,160);return{kind:"command_failure",exitCode:1,summary:r??`ripgrep failed (exit 1): ${i}`}}let o=Ji(e.command),s=o.changed&&!r?` Retry with: \`${o.command}\`.`:"";return{kind:"search_no_matches",exitCode:1,summary:r??`ripgrep: no matches (exit 1).${s} Try a broader pattern or search from the repo root.`}}let t=bn(e.interleaved||e.stdout||e.stderr||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:r??`ripgrep failed (exit ${e.exitCode}): ${t}`}}function ad(e){let r=e.stdout??"",t=e.stderr??"",n=e.interleavedOutput??"";if(qb(e.command)){let i=r.trim()||n.trim()||t.trim();return Yb({exitCode:e.exitCode,stdout:i,stderr:t})}if(Jb(e.command))return zb({command:e.command,exitCode:e.exitCode,stdout:r,stderr:t,interleaved:n});let o=zi({command:e.command,exitCode:e.exitCode});if(o&&e.exitCode!==0)return{kind:"command_failure",exitCode:e.exitCode,summary:o};if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"command succeeded (exit 0)"};let s=bn(n||r||t||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`command failed (exit ${e.exitCode}): ${s}`}}var Kb,id,Hb,ld=A(()=>{"use strict";sd();Kb=/\bnpm\s+audit\b/i,id=/\b(rg|ripgrep)\b/i,Hb=/\b(error|invalid|unknown|panic|not found)\b/i});function wn(e){return typeof e=="string"&&Xb.test(e.trim())}function Bo(e){if(!e||typeof e!="object"||Array.isArray(e))return!1;let r=e;return r.is_error===!0||r.providerTerminalError===!0||typeof r.subtype=="string"&&/^error(?:_|$)/.test(r.subtype)}var Xb,Fo=A(()=>{"use strict";Xb=/^(?:provider authentication failed:\s*)?(?:(?:Failed to authenticate|authentication (?:failed|error))(?::\s*[^\n.!?]+)?|OAuth session expired and could not be refreshed)[.!]?$/i});function Xi(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function Qb(e){if(!e)return;let r=typeof e.input_tokens=="number"?e.input_tokens:void 0,t=typeof e.output_tokens=="number"?e.output_tokens:void 0;if(!((r===void 0||r<0)&&(t===void 0||t<0)))return{...r!==void 0&&r>=0?{inputTokens:r}:{},...t!==void 0&&t>=0?{outputTokens:t}:{}}}function cd(e){if(e.event==="step_update"&&Xi(e.step_update)){let s=e.step_update,i=s.step_type==="tool"&&typeof s.tool_name=="string"&&s.tool_name.trim()?s.tool_name.trim():void 0,a=typeof s.text_delta=="string"?s.text_delta:void 0;return!i&&a===void 0?null:{...i?{currentTool:i}:{},...a!==void 0?{textDelta:a}:{}}}if(e.event!=="result"||!Xi(e.result))return null;let r=e.result,t=typeof r.status=="string"?r.status.toUpperCase():"";if(t!=="SUCCESS"&&t!=="ERROR")return null;let n=Xi(r.usage)?Qb(r.usage):void 0;if(t==="ERROR"){let s=typeof r.error=="string"&&r.error.trim()?r.error.trim():"antigravity cli result error";return{...n?{usage:n}:{},terminal:{ok:!1,finalResult:null,error:s}}}let o=typeof r.response=="string"?r.response.trim():"";return{...n?{usage:n}:{},terminal:{ok:!0,finalResult:o||"completed",error:null}}}var ud=A(()=>{"use strict"});function Qi(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function dd(){return{assistantText:""}}function Zb(e,r){if(!(r.role!=="assistant"||typeof r.content!="string")){if(r.delta===!0){e.assistantText+=r.content;return}e.assistantText=r.content}}function eS(e){let r=typeof e.input_tokens=="number"?e.input_tokens:void 0,t=typeof e.output_tokens=="number"?e.output_tokens:void 0,o=(Qi(e.models)?Object.keys(e.models):[]).find(s=>s.trim())?.trim();if(!(r===void 0&&t===void 0&&!o))return{...r!==void 0&&r>=0?{inputTokens:r}:{},...t!==void 0&&t>=0?{outputTokens:t}:{},...o?{model:o}:{}}}function rS(e){return e.type!=="result"||e.status!=="success"&&e.status!=="error"?!1:typeof e.result!="string"}function pd(e,r){if(e.type==="message"&&(e.role==="assistant"||e.role==="user"))return Zb(r,e),{};if(e.type==="tool_use"&&typeof e.tool_name=="string"&&e.tool_name.trim())return{currentTool:e.tool_name.trim()};if(!rS(e))return null;let t=Qi(e.stats)?eS(e.stats):void 0;if(e.status==="error"){let o=Qi(e.error)&&typeof e.error.message=="string"?e.error.message:"gemini cli result error";return{...t?{usage:t}:{},terminal:{ok:!1,finalResult:null,error:o}}}let n=r.assistantText.trim();return{...t?{usage:t}:{},terminal:{ok:!0,finalResult:n||"completed",error:null}}}var md=A(()=>{"use strict"});import{existsSync as tS,readFileSync as nS}from"node:fs";function oS(e){let r=e.timestamp_ms;return e.timestamp||e.ts||(r?new Date(r).toISOString():void 0)}function sS(e){if(!e)return null;for(let r of Object.keys(e))if(r.endsWith("ToolCall")){let t=r.slice(0,-8);return t.length?t:r}return null}function iS(e,r){e.finalResult=r.result||r.subtype||r.terminal_reason||"completed",Bo(r)&&(e.providerTerminalError=!0,e.error=String(r.result||r.api_error_status||"stream result error"))}function It(e){return typeof e=="number"&&Number.isFinite(e)&&e>=0?e:void 0}function aS(e){let r=e.usage;return r&&typeof r=="object"&&!Array.isArray(r)?r:null}function lS(e){if(typeof e.model=="string"&&e.model.trim())return e.model.trim();let r=e.modelUsage;if(r&&typeof r=="object"&&!Array.isArray(r)){let t=Object.keys(r)[0];if(t?.trim())return t.trim()}}function cS(e,r){let t=aS(r);if(!t)return;let n=It(t.input_tokens)??It(t.inputTokens)??It(t.prompt_tokens),o=It(t.output_tokens)??It(t.outputTokens)??It(t.completion_tokens);if(n===void 0&&o===void 0)return;let s=lS(r)??e.usage?.model;e.usage={...n!==void 0?{inputTokens:n}:{},...o!==void 0?{outputTokens:o}:{},...s?{model:s}:{}}}function uS(e){if(e.type!=="tool_call"||e.subtype!=="completed")return null;let t=(e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:null)?.shellToolCall;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t,o=n.args,s=o&&typeof o=="object"&&!Array.isArray(o)&&typeof o.command=="string"?String(o.command):"",i=n.result;if(!i||typeof i!="object"||Array.isArray(i))return null;let a=i.success??i.failure;if(!a||typeof a!="object"||Array.isArray(a))return null;let l=a,c=typeof l.exitCode=="number"?l.exitCode:0;return{command:s,exitCode:c,stdout:typeof l.stdout=="string"?l.stdout:"",stderr:typeof l.stderr=="string"?l.stderr:"",interleaved:typeof l.interleavedOutput=="string"?l.interleavedOutput:""}}function dS(e,r){r.kind==="success"||r.kind==="search_no_matches"||(e.lastShellOutcome=r)}function et(e){let r={firstEventAt:null,lastEventAt:null,currentTool:null,finalResult:null,error:null,lastShellOutcome:null,usage:null};if(!tS(e))return r;let t=nS(e,"utf8").split(`
-`).filter(Boolean),n=null,o=dd();for(let s of t){let i=dn(s);if(!i||typeof i!="object"||Array.isArray(i))continue;if(i.type==="turn.started"&&(n=null,r.finalResult=null),i.type==="item.completed"){let p=i.item;if(p&&typeof p=="object"&&!Array.isArray(p)){let m=p;m.type==="agent_message"&&typeof m.text=="string"&&m.text.trim()&&(n=m.text)}}i.type==="turn.completed"&&n&&!r.providerTerminalError&&(r.finalResult=n,n=null);let a=oS(i);if(a&&(r.firstEventAt||=a,r.lastEventAt=a),i.type==="stream_event"&&i.event&&typeof i.event=="object"&&i.event.type==="content_block_start"){let p=i.event.content_block;p?.type==="tool_use"&&(r.currentTool=String(p.name||"tool"))}if(i.type==="assistant"&&i.message&&typeof i.message=="object"){let p=i.message.content;if(Array.isArray(p)){let m=p.find(f=>f?.type==="tool_use");m&&(r.currentTool=String(m.name||r.currentTool))}}if(i.type==="tool_call"&&i.subtype==="started"){let p=i.tool_call&&typeof i.tool_call=="object"&&!Array.isArray(i.tool_call)?i.tool_call:void 0,m=sS(p);m&&(r.currentTool=m)}let l=uS(i);l&&dS(r,ad({command:l.command,exitCode:l.exitCode,stdout:l.stdout,stderr:l.stderr,interleavedOutput:l.interleaved}));let c=cd(i),u=c?null:pd(i,o),d=c??u;if(d?.currentTool&&(r.currentTool=d.currentTool),d?.usage&&(r.usage={...r.usage??{},...d.usage}),d?.terminal?d.terminal.ok?r.finalResult=d.terminal.finalResult:(r.finalResult=null,r.providerTerminalError=!0,r.error=d.terminal.error):i.type==="result"&&iS(r,i),i.type==="turn.failed"){n=null,r.finalResult=null,r.providerTerminalError=!0;let p=i.error;r.error=typeof p?.message=="string"?p.message:"provider turn failed"}cS(r,i)}return r}var xn=A(()=>{"use strict";ld();O();Fo();ud();md()});function fd(e,r=240){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function _n(e){let r=(e??"").trim();if(!r)return null;if(wn(r))return{blocked:!0,reason:`provider authentication failed: ${fd(r)}`};for(let t of pS)if(t.test.test(r))return{blocked:!0,reason:`${t.label}: ${fd(r)}`};return null}var pS,Zi=A(()=>{"use strict";Fo();pS=[{test:/(?:claude provider refuses to spawn: worker prompt is empty after argv assembly|Input must be provided (?:either )?through stdin or as a prompt argument)/i,label:"provider prompt delivery failed"},{test:/\b(?:invalid|unknown|unsupported|unrecognized)\b[^.\n]*\bmodel\b/i,label:"provider rejected the requested model"},{test:/\bmodel\b[^.\n]*\b(?:not\s+(?:found|supported|available|recognized|valid)|is\s+not\s+valid|does\s+not\s+exist)/i,label:"provider rejected the requested model"},{test:/\b(?:did you mean|available models|choose (?:a|one of)|supported models)\b/i,label:"provider rejected the requested model"},{test:/model preflight failed/i,label:"model/provider preflight failed"},{test:/\b(?:command not found|ENOENT|is the .*CLI on PATH|executable not found|no such file or directory)\b/i,label:"provider CLI is missing or not on PATH"},{test:/\bfailed to spawn\b/i,label:"provider failed to spawn the worker process"},{test:/\b(?:not logged in|unauthorized|authentication (?:failed|required)|invalid api key|missing api key|401)\b/i,label:"provider authentication failed"},{test:/\b(?:out of usage|increase limits?|switch to auto|ask your admin to increase your limit|usage limits?|quota exceeded|insufficient_quota|credits? exhausted|billing|payment required)\b/i,label:"provider quota exhausted"}]});function gd(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function mS(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function fS(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:gd(e.head)}function gS(e,r,t){let n=["exited_with_changes_salvage"];if((e==="uncommitted"||e==="both")&&n.push(`${r} uncommitted change${r===1?"":"s"} with no final result`),(e==="committed_ahead"||e==="both")&&t){let o=t.length>12?t.slice(0,12):t;n.push(`commit ${o} ahead of base with no final result`)}return n.push("review worktree \u2014 commit, open a PR, or run a salvage worker before discarding"),n.join(": ")}function Ot(e){if(e.alive||mS(e.finalResult))return null;let r=(e.changedFiles??[]).filter(i=>i.trim()).length,t=gd(e.headCommit)??fS(e.gitAncestry),n=r>0,o=!!t;if(!n&&!o)return{kind:"none",salvageable:!1,uncommittedCount:0,headCommit:null,attentionReason:"process exited without a final result"};let s=n&&o?"both":n?"uncommitted":"committed_ahead";return{kind:s,salvageable:!0,uncommittedCount:r,headCommit:t,attentionReason:gS(s,r,t)}}var Ko=A(()=>{"use strict"});import{existsSync as hS,readFileSync as kS,statSync as yd}from"node:fs";import Ho from"node:path";function bS(e,r=process.env){let t=e?RS:yS,n=r.KYNVER_WORKER_GIT_PROBE_CACHE_TTL_MS?.trim();if(!n)return t;let o=Number(n);return Number.isFinite(o)&&o>=0?Math.floor(o):t}function SS(e){return e.baseCommit?.trim()||e.base?.trim()||"origin/main"}function ea(e){try{return yd(e).mtimeMs}catch{return-1}}function wS(e){let r=Ho.join(e,".git");try{if(yd(r).isDirectory())return r;let t=/^gitdir:\s*(.+)$/m.exec(kS(r,"utf8"));return t?Ho.resolve(e,t[1].trim()):null}catch{return null}}function hd(e){let r=wS(e);return[ea(e),r?ea(Ho.join(r,"HEAD")):-2,r?ea(Ho.join(r,"index")):-2].join(":")}function kd(e,r){return{changedFiles:mn(e),gitAncestry:Io(e,{base:r.base,baseCommit:r.baseCommit})}}function xS(e,r){for(Ur.delete(e),Ur.set(e,r);Ur.size>vS;){let t=Ur.keys().next().value;if(t===void 0)break;Ur.delete(t)}}function Rd(e,r,t){let n=SS(r);if(!e||!e.trim())return Cn.missingWorktree++,{changedFiles:[],gitAncestry:Et(n,"missing worktree path")};let o=`${e}\0${n}`;if(!hS(e))return Ur.delete(o),Cn.missingWorktree++,{changedFiles:[],gitAncestry:Et(n,`worktree no longer exists: ${e}`)};if(t.alive)return Ur.delete(o),Cn.liveProbes++,kd(e,r);let s=t.ttlMs??bS(!!r.baseCommit?.trim()),i=t.now??Date.now(),a=hd(e),l=Ur.get(o);if(s>0&&l&&l.fingerprint===a&&i<l.expiresAt)return Cn.hits++,l.probe;Cn.misses++;let c=kd(e,r);if(s>0){let u=.8+.4*(t.random??Math.random)();xS(o,{fingerprint:hd(e),expiresAt:i+Math.round(s*u),probe:c})}return c}var yS,RS,vS,Ur,Cn,vd=A(()=>{"use strict";de();yS=10*6e4,RS=60*6e4,vS=2048,Ur=new Map,Cn={hits:0,misses:0,liveProbes:0,missingWorktree:0}});function En(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function _S(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function CS(e){if(En(e.headCommit)||En(e.prUrl)||En(e.artifactBundlePath)||En(e.patchPath))return!0;let r=e.gitAncestry;return!!(r?.checked&&r.headIsAncestorOfBase===!1&&En(r.head))}function Tt(e){return _S(e.finalResult)?e.changedFiles.length===0?{blocked:!1}:CS(e)?{blocked:!0,detail:`Worktree has ${e.changedFiles.length} uncommitted change(s); commit or discard before landing`}:{blocked:!0,reason:"dirty_worktree_no_pr",detail:`Worktree has ${e.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`}:{blocked:!1}}function bd(e){if(e.blocked)return e.detail??e.reason??"dirty_worktree_no_pr"}var $o=A(()=>{"use strict"});function ra(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function Sd(e){let r=e.targetPrReconciliation??e.target_pr_reconciliation??e.targetPrs??e.target_prs;return Array.isArray(r)?r.length:0}function Nt(e){let r=e.trim();if(!r)return null;let t=ra(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let u=ra(s[1]??"");u&&n.push(u)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let u=ra(r.slice(i,a+1));u&&n.push(u)}if(n.length===0)return null;let l=n[n.length-1],c=Sd(l);for(let u of n){let d=Sd(u);d>c&&(l=u,c=d)}return l}var jo=A(()=>{"use strict"});function wd(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:e.trim()||null}function xd(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function ES(e){return new Set(e.map(r=>xd(wd(r)??r)).filter(Boolean))}function _d(e,r,t){let n=wd(e)??e;if(!n)return"unrelated";let o=xd(n);return ES(r).has(o)?"contract":t?(t.outcome==="skipped"||t.outcome==="blocked")&&t.reason?.trim()?"support":(t.outcome==="merged","unrelated"):"unrelated"}var Cd=A(()=>{"use strict"});function Mt(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function PS(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"?Object.keys(e).length>0:!0}function rt(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:Mt(e)}function Vo(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function Ed(e){let r=null;if(typeof e=="string"){let o=Nt(e);o&&(r=o)}else e&&typeof e=="object"&&!Array.isArray(e)&&(r=e);if(!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=rt(String(s.prUrl??s.pr_url??"")),a=Mt(s.outcome);!i||a!=="merged"&&a!=="skipped"&&a!=="blocked"||n.push({prUrl:i,outcome:a,mergeCommit:Mt(s.mergeCommit??s.merge_commit),reason:Mt(s.reason)})}return n}function Pd(e,r){let t=[],n=rt(Mt(e.prUrl)??"");if(n&&t.push(n),r&&typeof r=="object"&&!Array.isArray(r)){let o=r,s=rt(String(o.prUrl??o.pr_url??""));s&&t.push(s)}return[...new Set(t)]}function Ad(e){let{contract:r,snapshot:t}=e,n=e.finalResult??t.finalResult;if(!r.landingOnly&&r.targetPrUrls.length===0&&!r.repairEnforceOriginalPr)return{blocked:!1};if(!PS(n))return(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&r.targetPrUrls.length>0?{blocked:!0,reason:"missing_target_pr_reconciliation",detail:`Final result required to reconcile target PR(s): ${r.targetPrUrls.join(", ")}`}:{blocked:!1};if(!(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&!r.repairEnforceOriginalPr)return{blocked:!1};let s=r.repairEnforceOriginalPr?rt(Mt(r.targetPrUrl)??"")??(r.targetPrUrls.length===1?rt(r.targetPrUrls[0]):null):null;if(s){let d=Pd(t,n);if(!(n&&typeof n=="object"&&!Array.isArray(n)&&n.supersedesOriginalTargetPr===!0)){for(let b of d)if(b!==s)return{blocked:!0,reason:"duplicate_repair_pr",detail:`Repair worker opened or attached PR ${b} instead of canonical target ${s}`}}let f=Ed(n).find(b=>b.prUrl===s);if(!f||f.outcome!=="merged"&&!(f.reason?.trim()&&(f.outcome==="skipped"||f.outcome==="blocked")))return{blocked:!0,reason:"missing_repair_target_reconciliation",detail:`Repair worker must reconcile target PR ${s}`}}let i=Ed(n),a=new Map(i.map(d=>[Vo(d.prUrl),d])),l=new Set(r.targetPrUrls.map(d=>Vo(rt(d)??d)).filter(Boolean)),c=Pd(t,n);if(r.landingOnly)for(let d of c){let p=a.get(Vo(d)),m=_d(d,r.targetPrUrls,p);if(!(m==="contract"||m==="support"))return l.size>0?{blocked:!0,reason:"unrelated_implementation_pr",detail:`Landing-only worker attached unrelated PR ${d}`}:{blocked:!0,reason:"unrelated_implementation_pr",detail:"Landing-only worker must not open new implementation PRs"}}if(r.targetPrUrls.length===0)return{blocked:!1};let u=[];for(let d of r.targetPrUrls){let p=Vo(rt(d)??d),m=a.get(p);if(!m){u.push(p);continue}m.outcome!=="merged"&&!m.reason?.trim()&&u.push(p)}return u.length>0?{blocked:!0,reason:u.every(d=>a.has(d))?"incomplete_target_pr_landing":"missing_target_pr_reconciliation",detail:`Target PR reconciliation incomplete: ${u.join(", ")}`}:{blocked:!1}}function Id(e){if(e.blocked)return e.detail??e.reason}var Od=A(()=>{"use strict";jo();Cd()});function IS(e){let r=Date.now();if(e.providerTerminalError||Bo(e.finalResult)||e.finalResult&&e.error?.trim()||wn(e.error)||wn(e.finalResult)){let o=e.error||(typeof e.finalResult=="string"?e.finalResult:"provider terminal error");return{state:"blocked",reason:_n(o)?.reason??`provider terminal error: ${o}`}}if(e.completionBlocker&&!Td(e.completionBlocker))return{state:"blocked",reason:e.completionBlocker};if(e.finalResult){if(e.localOnly&&TS(e.finalResult))return{state:"done",reason:"local-only worker superseded by merged PR"};let o={finalResult:e.finalResult,changedFiles:e.changedFiles??[],gitAncestry:e.gitAncestry??null,prUrl:e.prUrl??null},s=Tt(o);if(s.blocked){let i=bd(s);return{state:"needs_attention",reason:s.reason?`landing blocked (${s.reason}): ${i}`:`landing blocked: ${i}`}}if(e.landingContract){let i=Ad({contract:e.landingContract,snapshot:o,finalResult:e.finalResult}),a=Id(i);if(a)return{state:"needs_attention",reason:i.reason?`landing contract (${i.reason}): ${a}`:`landing contract: ${a}`}}return{state:"done",reason:"final result recorded"}}if(!e.alive){if(OS(e))return{state:"done",reason:"empty abandoned worker record"};let o=_n(e.error);if(o)return{state:"blocked",reason:o.reason};let s=Ot({alive:!1,finalResult:null,changedFiles:e.changedFiles,gitAncestry:e.gitAncestry});if(s?.salvageable){let a=e.error?.trim();return{state:"needs_attention",reason:a?`${s.attentionReason} (${a})`:s.attentionReason}}let i=e.error?.trim();return{state:"needs_attention",reason:i?`process exited without a final result: ${i}`:s?.attentionReason??"process exited without a final result"}}if(e.heartbeatBlocker)return{state:"blocked",reason:`worker heartbeat reported blocker: ${e.heartbeatBlocker}`};let t=e.startedAt?Date.parse(e.startedAt):NaN;if(!e.firstEventAt&&e.stdoutBytes===0&&e.heartbeatBytes===0&&Number.isFinite(t)&&r-t>AS)return{state:"needs_attention",reason:`no first stream event ${Di(t)}s after start`};let n=e.lastActivityAt?Date.parse(e.lastActivityAt):NaN;return Number.isFinite(n)&&r-n>ta?{state:"stale",reason:`no log/event/heartbeat activity for ${Di(n)}s`}:{state:"ok",reason:"recent activity"}}function Td(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function OS(e){return e.finalResult||e.taskId||e.agentOsId||e.stdoutBytes>0||(e.stderrBytes??0)>0||e.heartbeatBytes>0||e.error?.trim()||(e.changedFiles??[]).some(r=>r.trim())?!1:/empty worker dir|marked abandoned/i.test(e.reconcileReason??"")}function TS(e){let r=null;if(typeof e=="string"?r=Nt(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return!1;let t=r.targetPrReconciliation??r.target_pr_reconciliation;return Array.isArray(t)?t.some(n=>!n||typeof n!="object"||Array.isArray(n)?!1:String(n.outcome??"").trim()==="merged"):!1}function Nd(e,r,t){let n=e.completionSnapshot?.finalResult;return e.completionAckSource==="local-pr-merged-reconcile"&&n!==void 0&&n!==null?n:r||(n??kr(t))}function Md(e){let r=et(e.stdoutPath),t=pe(e.heartbeatPath);return Nd(e,r.finalResult,t)}function Y(e,r={}){let t=et(e.stdoutPath),n=pe(e.heartbeatPath),o=typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim().length>0,s=Nd(e,t.finalResult,n),i=o?!1:z(e.pid),a=Eo(e.stdoutPath),l=Eo(e.stderrPath),c=Eo(e.heartbeatPath),{changedFiles:u,gitAncestry:d}=Rd(e.worktreePath,{base:r.base,baseCommit:r.baseCommit},{alive:i}),p=vu([t.lastEventAt,n.lastHeartbeatAt,Po(e.stdoutPath),Po(e.stderrPath),Po(e.heartbeatPath)]),m=t.error||!i&&!s&&Mi(e.stderrPath,10).trim()||void 0,f=typeof e.completionBlocker=="string"&&e.completionBlocker.trim()?e.completionBlocker.trim():null,b=Td(f)?null:f,k=e.repairTargetPrUrl?{landingOnly:!1,targetPrUrls:[e.repairTargetPrUrl],targetPrUrl:e.repairTargetPrUrl,repairEnforceOriginalPr:!0}:null,R=IS({alive:i,finalResult:s,firstEventAt:t.firstEventAt,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,lastActivityAt:p,heartbeatBlocker:n.heartbeatBlocker,startedAt:e.startedAt,error:m,providerTerminalError:t.providerTerminalError,changedFiles:u,gitAncestry:d,completionBlocker:b,landingContract:k,prUrl:e.repairTargetPrUrl??e.taskPrUrl??null,localOnly:e.localOnly===!0,taskId:e.taskId??null,agentOsId:e.agentOsId??null,reconcileReason:e.reconcileReason??null}),g=b||R.state==="blocked"?"blocked":o||R.state==="done"?"done":s?"exited":i?"running":"exited";return{runId:e.runId,worker:e.name,pid:e.pid,alive:i,status:g,attention:R,branch:e.branch,worktreePath:e.worktreePath,ownedPaths:e.ownedPaths,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,firstEventAt:t.firstEventAt,lastEventAt:t.lastEventAt,lastActivityAt:p,currentTool:o?null:t.currentTool,heartbeatCount:n.heartbeatCount,lastHeartbeatAt:n.lastHeartbeatAt,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,timestampAnomalies:n.timestampAnomalies,finalResult:s,error:m,providerTerminalError:t.providerTerminalError,changedFiles:u,gitAncestry:d,instructionPolicyFingerprint:e.instructionPolicyFingerprint??null,instructionPolicyEvidence:e.instructionPolicyEvidence??null,model:e.model??e.orchestrationAudit?.model??null,provider:e.provider??e.orchestrationAudit?.provider??null,usage:t.usage??null,boxKind:e.boxKind??null,boxId:e.boxId??null,runtimeId:e.runtimeId??null,personaSlug:e.personaSlug??null,dispatched:e.dispatched??null,localOnly:e.localOnly??null}}function Se(e){return!!(e.finalResult||e.alive===!1||e.status==="exited"||e.status==="done")}function Dd(e){return e.finalResult?e.attention.state==="needs_attention"||e.attention.state==="blocked":!1}function na(e,r){return r.length===0?e:r.some(t=>t.attention==="needs_attention"||t.attention==="stale"||t.attention==="blocked")?"needs_attention":r.every(t=>t.status==="done")?"done":r.some(t=>t.status==="running")?"running":e}var AS,ta,me=A(()=>{"use strict";Zr();xn();Fo();Zi();Ko();vd();$o();Od();jo();O();AS=18e4,ta=6e5});import{readFileSync as NS}from"node:fs";function MS(e){if(!e||process.platform!=="linux")return null;try{return NS(`/proc/${e}/cmdline`,"utf8").replace(/\0/g," ")}catch{return null}}function Wd(e){if(!e.pid||process.platform!=="linux")return!0;let r=MS(e.pid);return r?[e.worktreePath,e.workerDir,e.heartbeatPath].filter(n=>typeof n=="string"&&n.trim().length>0).some(n=>r.includes(n)):!1}function Br(e){return typeof e.completionBlocker=="string"&&e.completionBlocker.trim()||typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||!z(e.pid)||!Wd(e)?!1:!Md(e)}var Go=A(()=>{"use strict";me();O()});import Ud from"node:os";import Bd from"node:path";function Ld(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function DS(e=U(),r,t){let n=Ld(e.perWorkerMemBytes,Yo),o=Ld(e.memReserveBytes,qo),s=Math.min(1,Math.max(.1,Number(e.memUtilization)>0?Number(e.memUtilization):Jo)),i=Xo({config:e,configuredMaxWorkersOverride:r,totalMemBytes:t??Ud.totalmem()});return{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i.configuredMaxWorkers,autoCap:i.autoCap,workerCapSource:i.workerCapSource}}function Fd(e,r={}){let t=r.perWorkerMemBytes??Yo,n=r.memReserveBytes??qo,o=r.memUtilization??Jo,s=Math.max(0,Math.floor(e*o)-n),i=Math.max(1,Math.floor(s/t));return Math.min(i,zo)}function WS(){return Hu()}function LS(e){let r=0;for(let t of tr(e)){let n=I(Bd.join(M(e.id),"workers",x(t),"worker.json"),void 0);!n||!Br(n)||r++}return r}function oa(){let e=0;for(let r of Ge())e+=LS(r);return e}function Dt(){let e=[];for(let r of Ge())for(let t of tr(r)){let n=I(Bd.join(M(r.id),"workers",x(t),"worker.json"),void 0);n&&Br(n)&&e.push({runId:r.id,workerName:t})}return e}function Pn(e){let r=e.config??U(),t=e.totalMemBytes??Ud.totalmem(),{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i,autoCap:a,workerCapSource:l}=DS(r,e.configuredMaxWorkersOverride,t),c=hr(r),u=e.freeMemBytes??WS(),d=e.activeWorkers??oa(),p=Math.max(0,Math.floor(t*s)-o),m=Math.max(0,Math.floor(p/n)),f=Math.max(0,Math.floor(Math.max(0,u-o)/n)),b=a,k=yn(c,i??b),R=Math.max(0,Math.min(k,m)),g=Math.max(0,R-d),E=Math.min(g,f),S=e.skipDiskGate||process.env.KYNVER_RESOURCE_GATE_SKIP_DISK==="1"?void 0:Lr({diskPath:e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/"});S&&!S.ok&&(E=0);let w=null;return E<=0&&(S&&!S.ok?w=S.reason??"disk gate blocked worker admission":d>=R?w=`at worker limit (${d}/${R} running)`:f<=0?w="insufficient free memory \u2014 waiting for workers to finish":w="no worker slots available"),{ok:E>0,totalMemBytes:t,freeMemBytes:u,memReserveBytes:o,perWorkerMemBytes:n,configuredMaxWorkers:i,workerCapSource:l,boxKind:c,autoCap:b,capacityWorkers:m,maxConcurrentWorkers:R,activeWorkers:d,slotsAvailable:E,reason:w,...S?{diskGate:S}:{}}}var Yo,qo,Jo,zo,Wt=A(()=>{"use strict";$u();K();Oe();No();Qo();Rn();B();vn();Go();O();Yo=500*1024*1024,qo=4*1024*1024*1024,Jo=.85,zo=64});function An(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Xo(e){let r=e.config??{},t=e.env??process.env,n=An(r.perWorkerMemBytes,Yo),o=An(r.memReserveBytes,qo),s=Math.min(1,Math.max(.1,Number(r.memUtilization)>0?Number(r.memUtilization):Jo)),i=Fd(e.totalMemBytes,{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s});if(e.configuredMaxWorkersOverride!==void 0&&e.configuredMaxWorkersOverride!==null)return{configuredMaxWorkers:An(e.configuredMaxWorkersOverride,i),autoCap:i,workerCapSource:"workspace_override"};if(r.maxConcurrentWorkers!==void 0&&r.maxConcurrentWorkers!==null){let c=An(r.maxConcurrentWorkers,0)||null;if(c)return{configuredMaxWorkers:Math.min(c,zo),autoCap:i,workerCapSource:"config"}}let l=(t.KYNVER_MAX_WORKERS_INTENTIONAL==="1"||t.KYNVER_MAX_WORKERS_INTENTIONAL==="true")&&t.KYNVER_MAX_WORKERS&&An(t.KYNVER_MAX_WORKERS,0)||null;return l?{configuredMaxWorkers:Math.min(l,zo),autoCap:i,workerCapSource:"env"}:{configuredMaxWorkers:null,autoCap:i,workerCapSource:"auto"}}var Qo=A(()=>{"use strict";Wt()});import{homedir as US}from"node:os";import BS from"node:path";var Kd,sa=A(()=>{"use strict";Kd=BS.join(US(),".kynver",".env")});var Hd=A(()=>{"use strict"});var $d=A(()=>{"use strict";Hd()});var jd=A(()=>{"use strict"});var ia=A(()=>{"use strict";$d();jd();pn()});import{existsSync as FS,readFileSync as KS}from"node:fs";function aa(){if(process.platform==="win32")return"win32";if(process.platform==="darwin")return"darwin";if(process.platform==="linux"){if(process.env.WSL_DISTRO_NAME?.trim())return"wsl";try{if(FS("/proc/version")){let e=KS("/proc/version","utf8");if(/microsoft/i.test(e))return"wsl"}}catch{}return"linux"}return"linux"}var la=A(()=>{"use strict"});var Vd=A(()=>{"use strict";la()});var Zo=A(()=>{"use strict";sa();Wr();K();ia();Vd()});import $S from"node:os";function ca(e,r){let t=(r??$S.hostname()).trim().toLowerCase().replace(/\s+/g,"-")||"unknown-host";return`${e}:${t}`}function qd(e){return e.trim().toLowerCase().replace(/\s+/g,"-")}function Jd(e,r){let t=e.trim();if(!t)return ca(r);let n=t.indexOf(":");if(n>=0){let o=t.slice(0,n).trim().toLowerCase()||r,s=qd(t.slice(n+1));return s?`${o}:${s}`:ca(o)}return`${r}:${qd(t)}`}function es(e){let r=e.explicitBoxId?.trim()||e.env?.KYNVER_BOX_ID?.trim()||e.config?.boxId?.trim();return r?Jd(r,e.boxKind):ca(e.boxKind,e.hostLabel)}var rs=A(()=>{"use strict";Oe();Oe()});var zd=A(()=>{"use strict";sa();ia();Zo()});function ns(){return ts}function Qd(e){if(!ts)return e;if(!Xd)throw new ua;return Xd}function Ye(e,r=process.env){if(ts)return;let t=r[e]?.trim();return t||void 0}function pa(){if(ts)throw new da}var ua,da,ts,Xd,In=A(()=>{"use strict";ua=class extends Error{constructor(){super("desktop credential provider is not installed; refusing to fall back to file or env credentials"),this.name="DesktopCredentialProviderMissingError"}},da=class extends Error{constructor(){super("the credentials file is disabled in desktop mode"),this.name="LegacyCredentialStoreDisabledError"}},ts=!1,Xd=null});import{existsSync as yr,mkdirSync as jS,readdirSync as os,renameSync as Zd,statSync as VS}from"node:fs";import Rr from"node:path";function rp(e){try{return VS(e).isDirectory()}catch{return!1}}function GS(e){if(!yr(e))return!0;for(let r of ep){let t=Rr.join(e,r);if(yr(t)&&(!rp(t)||os(t).length>0))return!1}return!0}function YS(e){let r=Rr.join(e,"runs");if(!yr(r)||!rp(r))return!1;for(let t of os(r,{withFileTypes:!0})){if(!t.isDirectory()||t.name==="runs")continue;let n=Rr.join(r,t.name,"run.json");if(I(n,void 0)?.id)return!0}return!1}function qS(e){let r=Rr.join(e,"runs");if(!yr(r))return!1;for(let t of os(r,{withFileTypes:!0})){if(!t.isDirectory())continue;if(I(Rr.join(r,t.name,"run.json"),void 0)?.boxKind==="ghost")return!0}return!1}function JS(e){let r=Rr.join(e,"ghost");return yr(r)?!yr(Rr.join(r,"runs")):qS(e)}function tp(e){return YS(e.sharedRoot)?GS(e.forgeRoot)?JS(e.sharedRoot)?{action:"blocked",blocker:"Forge legacy harness migration blocked: Ghost pool is co-hosted on this host (ghost namespace or ghost-attributed runs under ~/.kynver/harness). Drain in-flight Ghost runs from the shared root, or get operator sign-off for a fresh Forge cutover before enabling box-scoped isolation."}:{action:"migrate"}:{action:"none"}:{action:"none"}}function np(e,r){jS(r,{recursive:!0});for(let t of ep){let n=Rr.join(e,t),o=Rr.join(r,t);if(yr(n)){if(yr(o)&&os(o).length>0)throw new Error(`Forge legacy harness migration failed: ${o} is not empty`);if(yr(o)){Zd(n,o);continue}Zd(n,o)}}}var ep,op=A(()=>{"use strict";O();ep=["runs","worktrees"]});import{existsSync as Re}from"node:fs";import{homedir as zS}from"node:os";import fe from"node:path";function ma(e=process.env){return e.HOME?.trim()||zS()}function fa(e=process.env){return fe.join(ma(e),".kynver","harness")}function ss(e){let r=fe.resolve(je(e.trim()));for(;XS.has(fe.basename(r));)r=fe.dirname(r);return r}function QS(e,r=process.env){return fe.join(fa(r),e)}function ZS(e=process.env){let r=fa(e);if(Re(fe.join(r,"runs")))return!0;if(Re(r)&&!Re(fe.join(r,"ghost"))&&!Re(fe.join(r,"forge")))return Re(r);let t=fe.join(ma(e),sp);return Re(t)}function is(e){let r=e.env??process.env,t=r.KYNVER_HARNESS_ROOT?.trim()||r.OPUS_HARNESS_ROOT?.trim();if(t)return{harnessRoot:ss(t),source:"env"};let n=e.configuredHarnessRoot?.trim();if(n)return{harnessRoot:ss(n),source:"config"};let o=QS(e.boxKind,r);if(Re(fe.join(o,"runs"))||Re(o)&&!ew(o))return{harnessRoot:o,source:"box_scoped"};let i=fa(r);if(e.boxKind==="forge"){let a=tp({sharedRoot:i,forgeRoot:o});if(a.action==="blocked")return{harnessRoot:o,source:"box_scoped",migrationBlocker:a.blocker};if(a.action==="migrate")return e.allowForgeLegacyMigration!==!1&&np(i,o),{harnessRoot:o,source:"legacy_migrated"}}if(e.boxKind==="ghost"&&ZS(r)){if(Re(fe.join(i,"runs")))return{harnessRoot:i,source:"legacy_shared"};if(Re(i)&&!Re(fe.join(i,"ghost"))&&!Re(fe.join(i,"forge")))return{harnessRoot:i,source:"legacy_shared"};let l=fe.join(ma(r),sp);if(Re(l))return{harnessRoot:l,source:"legacy_shared"}}return{harnessRoot:o,source:"box_scoped"}}function ew(e){if(!Re(e))return!0;for(let r of["runs","worktrees"]){let t=fe.join(e,r);if(Re(t))return!1}return!0}var sp,XS,ga=A(()=>{"use strict";Wr();op();sp=fe.join(".openclaw","harness");XS=new Set(["runs","worktrees"])});import ip from"node:os";function as(e){return e?.trim()?e.trim():null}function rw(e,r){let t=r.trim().toLowerCase()||"host";return`${e}-${t}`.replace(/[^a-z0-9._-]+/g,"-")}function tw(e){return e.KYNVER_DISPATCH_STRICT_IDENTITY==="1"||e.KYNVER_DISPATCH_STRICT_IDENTITY==="true"||e.KYNVER_DAEMON_STRICT_IDENTITY==="1"||e.KYNVER_DAEMON_STRICT_IDENTITY==="true"}function Lt(e=U(),r=process.env,t={}){let n=gr(r,e),o=[...n.warnings],s=[],i=!!(e.boxKind?.trim()||as(r.KYNVER_BOX_KIND)),a=t.strict===!0||tw(r);if((t.requireExplicitBoxKind||a)&&!i&&s.push("boxKind is not persisted in ~/.kynver/config.json and KYNVER_BOX_KIND is unset \u2014 run `kynver setup` (customers: boxKind=box) or `kynver setup --box-kind forge|ghost` for operator pools before dispatch"),n.slugInferenceBlocked&&!i){let b="ambiguous box identity: KYNVER_AGENT_OS_SLUG is set without KYNVER_BOX_KIND or config.boxKind";a||t.requireExplicitBoxKind?s.push(b):o.push(`${b} \u2014 defaulting box kind to box (customer), not forge/ghost`)}let l=as(e.runnerId),c=as(r.KYNVER_RUNTIME_ID)??as(r.OPENCLAW_RUNTIME_ID),u=l??c??rw(n.boxKind,ip.hostname()),d=l?"config":c?"env":"derived";d==="derived"&&o.push(`runnerId not persisted \u2014 using derived id "${u}"; run \`kynver setup --box-kind ${n.boxKind}\` to persist runner identity`);let p=Xo({config:e,env:r,totalMemBytes:ip.totalmem()}),m=yn(n.boxKind,p.configuredMaxWorkers??$i(n.boxKind,p.autoCap)),f=is({boxKind:n.boxKind,configuredHarnessRoot:e.harnessRoot,env:r});return f.migrationBlocker&&s.push(f.migrationBlocker),s.length>0?{ok:!1,identity:null,errors:s,warnings:o}:{ok:!0,identity:{boxKind:n.boxKind,boxKindSource:n.source,runnerId:u,runnerIdSource:d,maxConcurrentWorkers:m,workerCapSource:p.workerCapSource,harnessRoot:f.harnessRoot,harnessRootSource:f.source},errors:s,warnings:o}}var On=A(()=>{"use strict";K();Oe();No();Qo();ga()});var lp=A(()=>{"use strict";fn();Oe();rs();K();Zo();zd();kn();In();On()});function nr(e){let r=e.trim().toLowerCase();return sw[r]??r}var cp,ow,sw,ls=A(()=>{"use strict";cp=["claude","cursor","codex","gemini","gemini-api","openai-compatible"],ow=cp.join("|"),sw={anthropic:"claude",opus:"claude",openai:"openai-compatible",openai_compatible:"openai-compatible","openai-compat":"openai-compatible",chatgpt:"codex",gpt:"codex","openai-api":"openai-compatible",openai_api:"openai-compatible",google:"gemini",gemini_cli:"gemini",gemini_api:"gemini-api","google-api":"gemini-api",google_api:"gemini-api"}});var up=A(()=>{"use strict";Wr()});var dp=A(()=>{"use strict";up()});import{execFileSync as iw}from"node:child_process";function ya(e=process.env){let r=e[aw]?.trim().toLowerCase();return r==="file"?"file":r==="keychain"?"keychain":"auto"}function lw(e,r,t){let n={encoding:"utf8",timeout:t.timeoutMs,stdio:["pipe","pipe","pipe"],windowsHide:!0,...t.input!==void 0?{input:t.input}:{}};return iw(e,r,n)}function cw(e=process.platform){return e==="darwin"?"macos":e==="linux"?"libsecret":e==="win32"?"windows":null}function ha(e,r){let t=JSON.stringify(tt),n=JSON.stringify(r),o="[void][Windows.Security.Credentials.PasswordVault,Windows.Security.Credentials,ContentType=WindowsRuntime]; $v = New-Object Windows.Security.Credentials.PasswordVault;";return e==="get"?`${o} try { $c = $v.Retrieve(${t}, ${n}); $c.RetrievePassword(); [Console]::Out.Write($c.Password) } catch { exit 3 }`:e==="set"?`${o} $s = [Console]::In.ReadToEnd().TrimEnd("\`r","\`n"); try { $old = $v.Retrieve(${t}, ${n}); $v.Remove($old) } catch {}; $v.Add((New-Object Windows.Security.Credentials.PasswordCredential(${t}, ${n}, $s)))`:`${o} try { $old = $v.Retrieve(${t}, ${n}); $v.Remove($old) } catch {}`}function pp(e={}){if(ya(e.env??process.env)==="file")return null;let t=cw(e.platform??process.platform);return t?new ka(t,e.exec):null}var tt,aw,vr,ka,mp=A(()=>{"use strict";tt="kynver",aw="KYNVER_CREDENTIAL_STORE";vr=5e3;ka=class{constructor(r,t=lw){this.backend=r;this.exec=t}backend;exec;get(r){try{if(this.backend==="macos"){let s=this.exec("security",["find-generic-password","-s",tt,"-a",r,"-w"],{timeoutMs:vr}).replace(/\r?\n$/,"");return s||null}if(this.backend==="libsecret"){let s=this.exec("secret-tool",["lookup","service",tt,"account",r],{timeoutMs:vr}).replace(/\r?\n$/,"");return s||null}let n=this.exec("powershell.exe",["-NoProfile","-NonInteractive","-Command",ha("get",r)],{timeoutMs:vr}).replace(/\r?\n$/,"");return n||null}catch{return null}}set(r,t){if(!t||/[\r\n]/.test(t))return!1;try{this.backend==="macos"?this.exec("security",["add-generic-password","-U","-s",tt,"-a",r,"-l",`Kynver (${r})`,"-w",t],{timeoutMs:vr}):this.backend==="libsecret"?this.exec("secret-tool",["store",`--label=Kynver (${r})`,"service",tt,"account",r],{input:`${t}
-`,timeoutMs:vr}):this.exec("powershell.exe",["-NoProfile","-NonInteractive","-Command",ha("set",r)],{input:`${t}
-`,timeoutMs:vr})}catch{return!1}return this.get(r)===t}delete(r){try{this.backend==="macos"?this.exec("security",["delete-generic-password","-s",tt,"-a",r],{timeoutMs:vr}):this.backend==="libsecret"?this.exec("secret-tool",["clear","service",tt,"account",r],{timeoutMs:vr}):this.exec("powershell.exe",["-NoProfile","-NonInteractive","-Command",ha("delete",r)],{timeoutMs:vr})}catch{}}}});function Sa(){return Ra||(Ra=new va),Ra}var ba,uw,cs,va,Ra,fp=A(()=>{"use strict";mp();ba="api-key",uw=6e4,cs=class extends Error{constructor(r){super(`KYNVER_CREDENTIAL_STORE=keychain but the OS keychain could not store "${r}"; refusing to write the secret to disk`),this.name="KeychainUnavailableError"}},va=class{cache=new Map;keychain;env;now;constructor(r={}){this.env=r.env??process.env,this.keychain=r.keychain===void 0?pp({env:this.env}):r.keychain,this.now=r.now??Date.now}get available(){return this.keychain!==null}get backend(){return this.keychain?.backend??null}read(r){if(!this.keychain)return null;let t=this.cache.get(r);if(t&&this.now()-t.at<uw)return t.value;let n=this.keychain.get(r);return this.cache.set(r,{value:n,at:this.now()}),n}write(r,t){let n=ya(this.env);if(!this.keychain){if(n==="keychain")throw new cs(r);return!1}let o=this.keychain.set(r,t);if(o)this.cache.set(r,{value:t,at:this.now()});else if(this.cache.delete(r),n==="keychain")throw new cs(r);return o}remove(r){this.cache.delete(r),this.keychain?.delete(r)}invalidate(r){r?this.cache.delete(r):this.cache.clear()}},Ra=null});import{existsSync as hp,mkdirSync as pw,readFileSync as kp,writeFileSync as mw}from"node:fs";import{homedir as fw,totalmem as f0}from"node:os";import _a from"node:path";function gw(e){return{...e,...e.harnessRoot?.trim()?{harnessRoot:je(e.harnessRoot.trim())}:{},...e.defaultRepo?.trim()?{defaultRepo:je(e.defaultRepo.trim())}:{}}}function U(){if(!hp(gp))return{};try{return gw(JSON.parse(kp(gp,"utf8")))}catch{return{}}}function us(){if(pa(),!hp(wa))return{};try{return JSON.parse(kp(wa,"utf8"))}catch{return{}}}function xa(e){pa(),pw(Ca,{recursive:!0}),mw(wa,`${JSON.stringify(e,null,2)}
-`,{mode:384})}function hw(e,r,t,n={}){let o=us();if(Sa().write(e,t)){let i={...o,...n};delete i[r],i.store="keychain",i.keychainAccounts=Array.from(new Set([...o.keychainAccounts??[],e])).sort(),xa(i);return}xa({...o,...n,[r]:t})}function kw(e,r){let t=Sa().read(e);return t||us()[r]}function Ea(){return Qd(yw)}function nt(){return Ea().getApiKey()}function ds(e){return Ea().getRunnerToken(e)}function Pa(e,r){Ea().persistRunnerToken(e,r)}function X(e){let r=Tn(e);return r||vp("requires --base-url, KYNVER_API_URL, KYNVER_CRON_FIRE_BASE_URL, or ~/.kynver/config.json apiBaseUrl"),r}function Aa(e){return Tn(e)}function Tn(e){let r=e||process.env.KYNVER_API_URL||process.env.KYNVER_CRON_FIRE_BASE_URL||process.env.OPENCLAW_CRON_FIRE_BASE_URL||U().apiBaseUrl;return gn(r)}function Rw(e,r){let t=e||ds(r)||(r?void 0:ds(U().agentOsId));if(t)return String(t);let n=Ye("KYNVER_RUNTIME_SECRET")||Ye("KYNVER_CRON_SECRET")||Ye("OPENCLAW_CRON_SECRET");if(n)return console.warn("[kynver] using deployment-level callback secret; run `kynver runner credential --agent-os-id <id>` for a scoped token"),String(n)}async function vw(e,r,t){let n=Rw(e,r);if(n)return{ok:!0,secret:n};let o=nt(),s=Tn(t?.baseUrl);if(o&&r&&s)try{let i=await Ia(r,{baseUrl:s,apiKey:o});return Pa(r,i),{ok:!0,secret:i}}catch(i){return{ok:!1,reason:`runner credential mint failed: ${i.message}`}}return{ok:!1,reason:"no runner credential: requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, or KYNVER_API_KEY + API base URL to mint one"}}async function re(e,r,t){let n=await vw(e,r,t);if(n.ok)return n.secret;vp(n.reason)}async function yp(e,r){let t=nt(),n=Tn(r?.baseUrl);if(!t||!e||!n)return null;try{let o=await Ia(e,{baseUrl:n,apiKey:t});return Pa(e,o),o}catch{return null}}async function Rp(e,r,t){let n=nt(),o=Tn(t?.baseUrl);if(!n)return{ok:!1,reason:"KYNVER_API_KEY is required to refresh a rejected runner token"};if(!r)return{ok:!1,reason:"agentOsId is required to refresh a rejected runner token"};if(!o)return{ok:!1,reason:"KYNVER_API_URL or --base-url is required to refresh a rejected runner token"};try{let s=await Ia(r,{baseUrl:o,apiKey:n});return s&&s!==e?(Pa(r,s),{ok:!0,token:s}):{ok:!1,reason:"runner credential refresh returned the rejected token"}}catch(s){return{ok:!1,reason:s.message}}}async function Ia(e,r){let t=r?.apiKey||nt();if(!t)throw new Error("API key required \u2014 run `kynver login` first");let o=`${X(r?.baseUrl)}/api/agent-os/by-id/${encodeURIComponent(e)}/runner-credentials`,s=await hn(o,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify(r?.enableMcpUpdates?{enableMcpUpdates:!0}:{})}),i=await s.text(),a=null;try{a=JSON.parse(i)}catch{a=null}if(!s.ok||!a?.token)throw new Error(`runner credential mint failed (${s.status}): ${a?.error??i.slice(0,200)}`);return a.token}function vp(e){console.error(e),process.exit(1)}var Ca,gp,wa,I0,O0,yw,K=A(()=>{"use strict";fn();Wr();kn();Oe();No();Qo();Rn();Zo();lp();ls();On();dp();In();fp();Ca=_a.join(fw(),".kynver"),gp=_a.join(Ca,"config.json"),wa=_a.join(Ca,"credentials");I0=500*1024*1024,O0=4*1024*1024*1024;yw={kind:"file",getApiKey(){return process.env.KYNVER_API_KEY?process.env.KYNVER_API_KEY:kw(ba,"apiKey")},getRunnerToken(e){let r=us();if(!!r.runnerToken&&!!e&&r.runnerTokenAgentOsId===e)return r.runnerToken;let n=process.env.KYNVER_RUNNER_TOKEN?.trim();if(n)return n;if(r.runnerToken&&!(e&&r.runnerTokenAgentOsId&&r.runnerTokenAgentOsId!==e))return r.runnerToken},persistApiKey(e){hw(ba,"apiKey",e)},persistRunnerToken(e,r){xa({...us(),runnerToken:r,runnerTokenAgentOsId:e})}}});import Oa from"node:path";function ge(e){return ss(e)}function Te(){let e=process.env.KYNVER_HARNESS_ROOT||process.env.OPUS_HARNESS_ROOT;if(e)return ge(e);let r=U(),t=r.harnessRoot?.trim();if(t)return ge(t);let n=Lt(r,process.env);return n.identity?n.identity.harnessRoot:is({boxKind:"forge",configuredHarnessRoot:null}).harnessRoot}function Ee(e){return Oa.join(ge(e),"runs")}function Ut(e){return Oa.join(ge(e),"worktrees")}function bp(){let e=Te();return{harnessRoot:e,runsDir:Ee(e),worktreesDir:Ut(e)}}function br(e,r){return Oa.join(e,x(r))}var qe=A(()=>{"use strict";K();ga();On();O()});import{existsSync as ps,readdirSync as bw,statSync as Sw}from"node:fs";import ot from"node:path";function le(){return bp()}function ee(e){let{runsDir:r}=le(),t=ot.join(br(r,x(e)),"run.json");return ps(t)||$e(`run '${e}' not found`),I(t)}function Ge(){let{runsDir:e}=le();return Sp(e)}function ms(e){return Sp(Ee(e))}function ww(e){try{return Sw(e).isDirectory()}catch{return!1}}function Sp(e){if(!ps(e))return[];let r=[];for(let t of bw(e,{withFileTypes:!0})){if(t.name==="runs")continue;let n=ot.join(e,t.name);if(!ww(n))continue;let o=I(ot.join(n,"run.json"),void 0);o?.id&&r.push(o)}return r}function Bt(e,r){let{runsDir:t}=le(),n=ot.join(br(t,x(e)),"run.json"),o=ot.join(br(t,x(e)),"workers",x(r),"worker.json");return ps(o)||(ps(n)||$e(`run '${e}' not found`),$e(`worker '${r}' not found in run '${e}'`)),I(o)}function Pe(e){let{runsDir:r}=le();ue(ot.join(br(r,e.id),"run.json"),e)}function F(e,r){let{runsDir:t}=le();ue(ot.join(br(t,e),"workers",r.name,"worker.json"),r)}function M(e){let{harnessRoot:r}=le();return Nn(r,e)}function Nn(e,r){return br(Ee(e),x(r))}var B=A(()=>{"use strict";qe();O()});import{parentPort as nv,workerData as mM}from"node:worker_threads";var ln=null,du=-1,pu=0;function mu(e){ln=e}function fu(e=Date.now()){return!ln||ln.stallCount===du&&e-pu<9e5?null:(du=ln.stallCount,pu=e,ln)}var lv="embedded-1",cv=[{slug:"ghost",displayName:"Ghost",description:"Orchestration persona.",dispatchLane:null,defaultRoleLane:"system"},{slug:"astra",displayName:"Astra",description:"Planning persona.",dispatchLane:"implementation",defaultRoleLane:"plan_author"},{slug:"rhea",displayName:"Rhea",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"mnemo",displayName:"Mnemo",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"sentinel",displayName:"Sentinel",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"deep_reviewer"},{slug:"pixel",displayName:"Pixel",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"schema",displayName:"Schema",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"atlas",displayName:"Atlas",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"runtime_verifier"},{slug:"bridge",displayName:"Bridge",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"catalyst",displayName:"Catalyst",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"lorentz",displayName:"Lorentz",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"report_reviewer"},{slug:"dalton",displayName:"Dalton",description:"Landing persona.",dispatchLane:"landing",defaultRoleLane:"implementer"}],uv={"worker.prompt.core_rules":["Structured final result (recommended): record completion as JSON with summary, files, PR URLs, verification, risks, and blockers.","Completion handoff (required): before you stop, summarize the outcome in your last message and append a heartbeat line with phase `complete` and a structured finalResult object. Commit your work cleanly and open a GitHub PR (draft OK) for substantial changes \u2014 never leave uncommitted changes behind without reporting them.","Review-only workers must not open new implementation PRs \u2014 review the existing PR and record a verdict in the final result. Prefer `gh pr view` / `gh pr diff`; if a local checkout is needed, use a disposable ref or detached worktree, not a checked-out `pr-*` branch.","Keep verification targeted to touched paths; avoid full-monorepo verification unless explicitly requested.","Do not run `npm publish`.","If verification fails, append a heartbeat line immediately with the failing command, reason, and next action."].join(`
+`):""}function Do(e){Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function Y(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}function Tu(e){let r=null,t=-1/0;for(let n of e){if(!n)continue;let o=Date.parse(n);Number.isFinite(o)&&o>t&&(t=o,r=n)}return r}function $i(e){return Math.max(0,Math.round((Date.now()-e)/1e3))}var O=I(()=>{"use strict";Hi()});import{existsSync as nb,readFileSync as ob}from"node:fs";import{homedir as sb}from"node:os";import ib from"node:path";function Vi(e){return!e||typeof e!="object"||Array.isArray(e)?null:e}function ji(e){return typeof e=="string"&&e.trim()?e:null}function Nu(e){let r=Vi(e);if(!r)return null;let t=r.desiredState;if(t!=="running"&&t!=="paused"&&t!=="stopped")return null;let n=r.policyVersion;if(typeof n!="number"||!Number.isInteger(n)||n<0)return null;let o=ji(r.requestedAt);return o?{desiredState:t,policyVersion:n,requestedAt:o,requestedByLabel:ji(r.requestedByLabel),reason:ji(r.reason)}:null}function Mu(e){let r=Vi(Vi(e)?.response);return!r||r.runtimeControl===void 0?null:Nu(r.runtimeControl)}function Du(e,r=sb()){let t=e.replace(/[^A-Za-z0-9_-]/g,"_");return ib.join(r,".kynver",`runtime-control-${t}.json`)}function Wu(e,r,t){try{let n=It(e,t);if(n&&n.policyVersion>r.policyVersion)return;ue(Du(e,t),{contractVersion:1,agentOsId:e,control:r,deliveredAt:new Date().toISOString()})}catch{}}function It(e,r){try{let t=Du(e,r);if(!nb(t))return null;let n=JSON.parse(ob(t,"utf8"));return n.agentOsId!==e?null:Nu(n.control)}catch{return null}}function Wo(e){return e?.desiredState??"running"}function ab(e){return e==="keeper"||e==="desktop"}function lb(e,r,t=!1){let n=Wo(e);return n==="paused"?"paused":n==="stopped"?t&&r===0?"stopped":"stopping":"running"}function Lu(e){return e.control?{policyVersion:e.control.policyVersion,state:lb(e.control,e.inFlightWorkers,e.exiting),supervised:ab(e.supervisor),inFlightWorkers:Math.max(0,Math.floor(e.inFlightWorkers))}:null}function Uu(e){let r=Wo(e);return r==="paused"?"runtime_paused":r==="stopped"?"runtime_stopped":null}function Fu(e){Bu=e}function Ku(){return Bu}var Bu,kn=I(()=>{"use strict";O();Bu=null});import{homedir as Hu}from"node:os";import $u from"node:path";function cb(e){return e==="~"?Hu():e.startsWith("~/")||e.startsWith("~\\")?$u.join(Hu(),e.slice(2)):e}function Ye(e){return $u.resolve(cb(e))}var Fr=I(()=>{"use strict"});function kb(e){let r=e[hb];return r?new Set(r.split(/[\s,]+/).map(t=>t.trim()).filter(Boolean)):new Set}function yb(e,r={}){return db.has(e)?!0:fb.has(e)||r.operatorAllow?.has(e)||gb.some(t=>e.endsWith(t))?!1:pb.some(t=>e.endsWith(t))}function Gi(e){let r=kb(e),t={...e};for(let n of Object.keys(t))yb(n,{operatorAllow:r})&&delete t[n];return t}var ub,db,pb,mb,fb,gb,hb,Yi=I(()=>{"use strict";ub=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY","MEMORY_CONTENT_KEK","LLM_BYOK_KEK","KYNVER_COMMAND_AUTH_KEY","KYNVER_INSTRUCTION_BUNDLE_KEY","KYNVER_MEMORY_LEDGER_KEY","KYNVER_JWKS_PRIVATE_KEY_JWK"],db=new Set(ub),pb=["_SECRET","_API_KEY","_KEK","_KEY","_TOKEN","_PASSWORD","_PASSPHRASE","_SALT"],mb=["GITHUB_TOKEN","GH_TOKEN","CLAUDE_CODE_OAUTH_TOKEN","CODEX_API_KEY","GEMINI_API_KEY"],fb=new Set(mb),gb=["_PUBLIC_KEY"],hb="KYNVER_WORKER_ENV_ALLOW"});import{spawnSync as Vu}from"node:child_process";function Z(e,r,t={}){let n=Vu("git",r,ae({cwd:e,encoding:"utf8"}));if(n.status!==0&&!t.allowFailure){let o=Rb(e,r,n);if(t.throwError)throw new Error(o);Ge(o)}return n.stdout||""}function Rb(e,r,t){let n=typeof t.stderr=="string"&&t.stderr.trim()||typeof t.stdout=="string"&&t.stdout.trim()||t.error?.message||`exit ${t.status??"unknown"}`;return`git ${r.join(" ")} failed in ${e}: ${n}`}function yn(e){return Z(e,["status","--short"],{allowFailure:!0}).split(`
+`).map(r=>r.trim()).filter(Boolean)}function ne(e,r){try{let t=Vu("git",r,ae({cwd:e,encoding:"utf8"}));return{status:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function ju(e,r,t){let n=ne(e,["merge-base","--is-ancestor",r,t]);return n.status===0?{isAncestor:!0,error:null}:n.status===1?{isAncestor:!1,error:null}:{isAncestor:null,error:n.error||n.stderr||n.stdout||`git exited ${n.status}`}}function Lo(e,r="origin/main"){let t=typeof r=="string"?{base:r}:r,n=t.baseCommit?.trim()||t.base?.trim()||"origin/main",o=t.baseCommit?.trim()||null;if(!e)return Ot(n,"missing worktree path");let s=ne(e,["rev-parse","HEAD"]);if(s.status!==0)return Ot(n,s.error||s.stderr||s.stdout||"failed to resolve HEAD");let i;if(o)i=o;else{let p=ne(e,["rev-parse",n]);if(p.status!==0)return Ot(n,p.error||p.stderr||p.stdout||`failed to resolve ${n}`,s.stdout.trim());i=p.stdout.trim()}let a=s.stdout.trim();if(a===i)return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:!0,headIsAncestorOfBase:!0,relation:"synced"};let l=ju(e,i,a),c=ju(e,a,i),u=l.error||c.error||void 0;if(l.isAncestor==null||c.isAncestor==null)return{checked:!1,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:"unknown",...u?{error:u}:{}};let d=l.isAncestor?"ahead":c.isAncestor?"merged":"diverged";return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:d,...u?{error:u}:{}}}function Ot(e,r,t=null){return{checked:!1,base:e,head:t,baseHead:null,baseIsAncestorOfHead:null,headIsAncestorOfBase:null,relation:"unknown",error:r}}var de=I(()=>{"use strict";Fr();O();Yi()});var qi=I(()=>{"use strict";de()});import{existsSync as zi,readFileSync as Yu}from"node:fs";import{homedir as vb}from"node:os";import qe from"node:path";import{fileURLToPath as bb}from"node:url";function wb(e){let r=qe.join(e,"package.json");if(!zi(r))return null;try{let t=JSON.parse(Yu(r,"utf8"));return typeof t.name=="string"?t.name.trim():null}catch{return null}}function qu(e){return wb(e)==="kynver"}function Gu(e){let r=qe.resolve(e);if(!zi(r))return null;let t=ne(r,["rev-parse","--show-toplevel"]);if(t.status!==0)return null;let n=t.stdout.trim();return n.length?qe.resolve(n):null}function xb(e=import.meta.url){let r=qe.dirname(bb(e));for(let t=0;t<8;t+=1){let n=qe.join(r,"package.json");if(zi(n))try{if(JSON.parse(Yu(n,"utf8")).name==="@kynver-app/runtime")return r}catch{}let o=qe.dirname(r);if(o===r)break;r=o}return null}function Ji(e,r,t,n,o){if(!t)return;let s=qe.resolve(t);e.has(s)||(o?.requireMonorepo??!0)&&!qu(s)||(e.add(s),r.push({repo:s,source:n}))}function _b(e){let r=e?.cwd??process.cwd(),t=new Set,n=[];Ji(t,n,Gu(r),"cwd_git",{requireMonorepo:!1});let o=xb(e?.runtimeModuleUrl??import.meta.url);o&&Ji(t,n,Gu(o),"runtime_checkout");let s=vb();for(let a of Sb)Ji(t,n,Ye(qe.join(s,a)),"well_known_path");let i=qe.resolve(e?.cwd??process.cwd());return n.filter(a=>{if(a.source!=="runtime_checkout"||!qu(a.repo))return!0;let l=qe.resolve(a.repo);return i===l||i.startsWith(`${l}${qe.sep}`)})}function Uo(e){return _b(e)[0]??null}var Sb,Rn=I(()=>{"use strict";de();Fr();qi();Sb=["Kynver","repos/Kynver","repos/kynver-source-main","code/Kynver","projects/Kynver"]});function Xu(e){let r=To(e);try{let t=new URL(r);return t.hostname.toLowerCase()===Ju?(t.hostname=`www.${Ju}`,To(t.toString())):r}catch{return r}}function vn(e){if(e?.trim())return Xu(To(e.trim()))}async function bn(e,r,t=fetch){let n=Xu(e),o=new Headers(r?.headers),s=0;for(;s<=zu;){let i=await t(n,{...r,headers:o,redirect:"manual"});if(![301,302,303,307,308].includes(i.status))return i;let a=i.headers.get("location");if(!a)return i;let l=new URL(a,n);if(l.origin!==new URL(n).origin||l.username||l.password)throw await i.body?.cancel(),new Error("kynver API fetch refused unsafe redirect (origin change or embedded credentials)");let c=(r?.method??"GET").toUpperCase();if(!["GET","HEAD"].includes(c)&&i.status!==307&&i.status!==308)return i;await i.body?.cancel(),n=l.toString(),s+=1}throw new Error(`kynver API fetch exceeded ${zu} redirects for ${e}`)}var Ju,zu,Sn=I(()=>{"use strict";O();Ju="kynver.com";zu=10});function nt(e){let r=(e??"").trim().toLowerCase();return r==="ghost"||r==="forge"||r==="box"?r:r.includes("forge")?"forge":r.includes("ghost")||r.includes("openclaw")?"ghost":"box"}function Bo(e,r){return e[r]?.trim()||null}function Qu(e){let r=e?.split(":")[0]?.trim();return r?nt(r):null}function hr(e=process.env,r={}){let t=[],n=Qu(r.boxId),o=Qu(Bo(e,"KYNVER_BOX_ID")),s=r.boxKind?.trim();if(s)return n&&n!==nt(s)&&t.push(`config.boxId=${r.boxId} conflicts with boxKind=${s}; using explicit boxKind=${s}`),{boxKind:nt(s),source:"config",slugInferenceBlocked:!1,warnings:t};let i=Bo(e,"KYNVER_BOX_KIND");if(i)return o&&o!==nt(i)&&t.push(`KYNVER_BOX_ID=${Bo(e,"KYNVER_BOX_ID")} conflicts with KYNVER_BOX_KIND=${i}; using explicit KYNVER_BOX_KIND=${i}`),{boxKind:nt(i),source:"env",slugInferenceBlocked:!1,warnings:t};if(n)return{boxKind:n,source:"config",slugInferenceBlocked:!1,warnings:t};if(o)return{boxKind:o,source:"env",slugInferenceBlocked:!1,warnings:t};let a=Bo(e,"KYNVER_AGENT_OS_SLUG");return a&&t.push(`KYNVER_AGENT_OS_SLUG=${a} is a workspace slug, not box identity \u2014 operators set boxKind via \`kynver setup --box-kind forge|ghost\` or KYNVER_BOX_KIND; customers default to box`),{boxKind:"box",source:"default",slugInferenceBlocked:!!a,warnings:t}}function kr(e={},r=process.env){return hr(r,e).boxKind}var Me=I(()=>{"use strict"});function Xi(e,r){return e==="forge"?4:Math.max(1,r)}function wn(e,r){return e==="forge"?Math.min(Math.max(1,r),4):Math.max(1,r)}var Fo=I(()=>{"use strict"});import{readFileSync as Eb}from"node:fs";import Zu from"node:os";function ed(e){if(e!==void 0){let r=e.match(/^MemAvailable:\s+(\d+)\s*kB/m);return r?Number(r[1])*1024:Zu.freemem()}if(process.platform==="linux")try{let t=Eb("/proc/meminfo","utf8").match(/^MemAvailable:\s+(\d+)\s*kB/m);if(t)return Number(t[1])*1024}catch{}return Zu.freemem()}var rd=I(()=>{"use strict"});import{existsSync as Cb,readFileSync as Pb,statfsSync as Ab}from"node:fs";function Qi(){if(process.platform!=="linux")return!1;for(let e of["/proc/sys/kernel/osrelease","/proc/version"])try{if(!Cb(e))continue;let r=Pb(e,"utf8");if(/microsoft|wsl/i.test(r))return!0}catch{}return!1}function td(e={}){if(!(e.forceWsl===void 0?Qi():e.forceWsl))return null;let t=e.wslHostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Tt,n=e.wslHostFreeWarnBytes??Ib,o=e.wslHostFreeCriticalBytes??Ob,s=e.statfs??Ab,i;try{i=s(t)}catch(y){return{ok:!1,path:t,freeBytes:0,totalBytes:0,usedPercent:100,warnBelowBytes:n,criticalBelowBytes:o,reason:`Windows host disk probe failed at ${t}: ${y.message}`,probeError:y.message}}let a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<n,d=a<o,p=!u&&!d,m=(a/(1024*1024*1024)).toFixed(1),f=null;return p||(f=`Windows host disk ${t} at ${d?"critical":"warning"}: ${m} GiB free (<${(d?o:n)/1024/1024/1024} GiB); WSL VHDX cannot grow safely. ${Tb()}`),{ok:p,path:t,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:n,criticalBelowBytes:o,reason:f,probeError:null}}function Tb(){return"Recovery: 1) free Windows C: (empty Recycle Bin / Storage Sense / clear %TEMP% and %LOCALAPPDATA%\\Temp\\wsl-crashes); 2) shut down WSL (`wsl --shutdown`) then compact the VHDX (`Optimize-VHD` or `diskpart compact vdisk`); 3) clear local node_modules / .next / harness worktrees before restarting workers; 4) disable recurring dumps via `%USERPROFILE%/.wslconfig` (`maxCrashDumpCount=-1`) or `kynver wsl-crashes --execute`. More help: https://www.kynver.com/help."}var Ib,Ob,Tt,Zi=I(()=>{"use strict";Ib=25*1024*1024*1024,Ob=12*1024*1024*1024,Tt="/mnt/c"});import{execFileSync as nd}from"node:child_process";import{existsSync as Ho,readFileSync as od,readdirSync as Nb,statSync as Mb}from"node:fs";import ea from"node:path";function Ko(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function sd(){let e=process.env.KYNVER_WSL_WIN_USER?.trim();if(e)return e;try{let n=nd("cmd.exe",["/c","echo","%USERNAME%"],{encoding:"utf8",timeout:5e3,stdio:["ignore","pipe","ignore"]}).trim();if(n&&n!=="%USERNAME%"&&!n.includes("%"))return n}catch{}let r=process.env.USER?.trim()||process.env.LOGNAME?.trim(),t=process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Tt;return r&&Ho(ea.join(t,"Users",r))?r:null}function Bb(e={}){let r=e.crashDumpDir?.trim()||process.env.KYNVER_WSL_CRASH_DUMP_DIR?.trim();if(r)return r;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Tt,n=e.windowsUser??sd();return n?`${t.replace(/\\/g,"/").replace(/\/$/,"")}/Users/${n}/AppData/Local/Temp/wsl-crashes`:null}function Fb(e){let r=/^wsl-crash-\d+-(\d+)-(.+)-(\d+)\.dmp$/i.exec(e);if(!r)return{executableHint:null,signal:null,pid:null};let t=Number(r[1]),n=r[2]??"",o=Number(r[3]),s=n.split("_").filter(Boolean);return{executableHint:s.length>0?s[s.length-1]:null,signal:Number.isFinite(o)?o:null,pid:Number.isFinite(t)?t:null}}function Kb(){try{if(Ho("/proc/sys/kernel/core_pattern"))return od("/proc/sys/kernel/core_pattern","utf8").trim()}catch{}try{return nd("sysctl",["-n","kernel.core_pattern"],{encoding:"utf8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim()||null}catch{return null}}function Hb(e){return!!(e&&/wsl-capture-crash/i.test(e))}function $b(e,r=Tt){let t=ea.join(r,"Users",e,".wslconfig");if(!Ho(t))return{maxCrashDumpCount:null,crashDumpFolder:null};let n;try{n=od(t,"utf8")}catch{return null}let o=null,s=null;for(let i of n.split(/\r?\n/)){let a=i.replace(/#.*$/,"").trim();if(!a||a.startsWith("["))continue;let l=a.indexOf("=");if(l<0)continue;let c=a.slice(0,l).trim().toLowerCase(),u=a.slice(l+1).trim();if(c==="maxcrashdumpcount"){let d=Number(u);o=Number.isFinite(d)?d:null}else c==="crashdumpfolder"&&(s=u.replace(/^["']|["']$/g,"")||null)}return{maxCrashDumpCount:o,crashDumpFolder:s}}function jb(e){if(!Ho(e))return[];let r=Nb(e,{withFileTypes:!0}),t=[];for(let n of r){if(!n.isFile()||!n.name.toLowerCase().endsWith(".dmp"))continue;let o=ea.join(e,n.name);try{let s=Mb(o),i=Fb(n.name);t.push({name:n.name,path:o,bytes:s.size,mtimeMs:s.mtimeMs,executableHint:i.executableHint,signal:i.signal,pid:i.pid})}catch{}}return t.sort((n,o)=>o.mtimeMs-n.mtimeMs),t}function Nt(e={}){if(!(e.forceWsl===void 0?Qi():e.forceWsl))return null;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Tt,n=e.windowsUser??sd(),o=e.warnBelowBytes??Ko("KYNVER_WSL_CRASH_DUMP_WARN_BYTES",Db),s=e.criticalBelowBytes??Ko("KYNVER_WSL_CRASH_DUMP_CRITICAL_BYTES",Wb),i=e.warnCount??Ko("KYNVER_WSL_CRASH_DUMP_WARN_COUNT",Lb),a=e.criticalCount??Ko("KYNVER_WSL_CRASH_DUMP_CRITICAL_COUNT",Ub),l=(e.readCorePattern??Kb)(),c=Hb(l),u=null;n&&(u=(e.readWslConfig??$b)(n,t));let d=u?.maxCrashDumpCount??null,p=d===-1,m=Bb({hostMount:t,windowsUser:n,crashDumpDir:e.crashDumpDir});if(!m)return{ok:!0,path:null,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:p,reason:null,probeError:"windows_user_unresolved"};let f;try{f=(e.listDumps??jb)(m)}catch($){return{ok:!1,path:m,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:p,reason:`WSL crash dump probe failed at ${m}: ${$.message}`,probeError:$.message}}let y=f.reduce(($,C)=>$+C.bytes,0),k=f.length,b=[...new Set(f.map($=>$.executableHint).filter($=>!!$))],g=y>=s,h=y>=o,w=k>=a,E=k>=i,_=!(g||w||h||E),K=null;if(!_){let $=g||w?"critical":"warning",C=(y/1024**3).toFixed(1),re=b.length>0?b.join(", "):"unknown";K=`WSL crash dumps ${$}: ${k} file(s), ${C} GiB at ${m} (executables: ${re}). `+Vb({wslCaptureEnabled:c,dumpsDisabledInWslConfig:p})}return{ok:_,path:m,windowsUser:n,dumpCount:k,totalBytes:y,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:f,executables:b,corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:p,reason:K,probeError:null}}function Vb(e={}){let r=["Recovery:","1) run `kynver wsl-crashes --execute` or scripts/cleanup-wsl-crashes.ps1 to prune old .dmp files;"];return e.dumpsDisabledInWslConfig||r.push("2) add `[wsl2]\\nmaxCrashDumpCount=-1` to %USERPROFILE%/.wslconfig then `wsl --shutdown` to disable future dumps;"),e.wslCaptureEnabled&&r.push("3) investigate crashing executables (node OOM/SIGBUS often follows Windows C: pressure);"),r.push("More help: https://www.kynver.com/help."),r.join(" ")}var Db,Wb,Lb,Ub,$o=I(()=>{"use strict";Zi();Db=5*1024*1024*1024,Wb=10*1024*1024*1024,Lb=2,Ub=4});import{statfsSync as Gb}from"node:fs";function Kr(e={}){let r=e.diskPath?.trim()||"/",t=e.diskFreeWarnBytes??Yb,n=e.diskFreeCriticalBytes??qb,o=e.diskMaxUsedPercent??Jb,s=e.diskHardMaxUsedPercent??zb,i=Gb(r),a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<t,d=a<n,p=a<t*2,m=p&&c>o,f=p&&c>s,y=!u&&!d&&!m&&!f,k=e.skipWslHostCheck?null:td(e.wslHost),b=e.skipWslCrashDumpCheck?null:Nt(e.wslCrashDumps),g=y&&(k?k.ok:!0)&&(b?b.ok:!0),h=null;return g||(h=[d?`free space below critical ${n} bytes`:null,u?`free space below warning ${t} bytes`:null,f?`used percent above hard cap ${s}%`:null,m?`used percent above cap ${o}%`:null,k&&!k.ok?k.reason:null,b&&!b.ok?b.reason:null].filter(Boolean).join("; ")),Xb({ok:g,path:r,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:t,criticalBelowBytes:n,maxUsedPercent:o,hardMaxUsedPercent:s,reason:h,wslHost:k,wslCrashDumps:b?{ok:b.ok,path:b.path,dumpCount:b.dumpCount,totalBytes:b.totalBytes,executables:b.executables,wslCaptureEnabled:b.wslCaptureEnabled,dumpsDisabledInWslConfig:b.dumpsDisabledInWslConfig,reason:b.reason,probeError:b.probeError}:null})}function Xb(e){let r=process.env.KYNVER_DISPATCH_DISK_GATE_FORCE?.trim().toLowerCase();return r?r==="ok"||r==="open"||r==="none"?e.ok?e:{...e,ok:!0,reason:`disk gate forced open by KYNVER_DISPATCH_DISK_GATE_FORCE (suppressed: ${e.reason??"no reason"})`}:r==="block"||r==="pressured"?{...e,ok:!1,reason:`disk gate forced closed by KYNVER_DISPATCH_DISK_GATE_FORCE${e.reason?` (underlying: ${e.reason})`:""}`}:e:e}var Yb,qb,Jb,zb,xn=I(()=>{"use strict";$o();Zi();Yb=30*1024*1024*1024,qb=15*1024*1024*1024,Jb=80,zb=90});import{existsSync as Qb,readdirSync as Zb}from"node:fs";import eS from"node:path";function nr(e){let r=new Set;for(let n of Object.keys(e.workers||{}))r.add(x(n));let t=eS.join(N(e.id),"workers");if(!Qb(t))return[...r];for(let n of Zb(t,{withFileTypes:!0}))n.isDirectory()&&r.add(x(n.name));return[...r]}var _n=I(()=>{"use strict";U();O()});function ra(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function id(e){let r=e.trim();if(!r)return null;let t=ra(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let l=ra(s[1]??"");l&&n.push(l)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let l=ra(r.slice(i,a+1));l&&n.push(l)}return n.length>0?n[n.length-1]:null}function ad(e){let r=e.finalResult??e.final_result;if(r!=null)return typeof r=="string"?id(r)??(r.trim()||null):r;let t=typeof e.summary=="string"?e.summary.trim():"";if(!t)return null;let n=id(t);return n||t}var ld=I(()=>{"use strict"});import{existsSync as rS,readFileSync as tS}from"node:fs";function cd(e){return e==="complete"}function yr(e){return cd(e.lastHeartbeatPhase)?e.terminalFinalResult!==void 0&&e.terminalFinalResult!==null?e.terminalFinalResult:e.lastHeartbeatSummary?.trim()||"completed":null}function pe(e){let r={heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,terminalFinalResult:null,heartbeatBlocker:null,timestampAnomalies:[],lastBoxResourceSnapshot:null,lastPrEvidence:[]};if(!rS(e))return r;let t=Date.now()+nS,n=new Date(t).toISOString(),o=tS(e,"utf8").split(`
+`).filter(Boolean);for(let s of o){let i=hn(s);if(!i||typeof i!="object"||Array.isArray(i))continue;let a=i;if(r.heartbeatCount++,a.ts){let l=String(a.ts),c=Date.parse(l);Number.isFinite(c)&&c>t?r.timestampAnomalies.push({kind:"future_heartbeat_timestamp",observedAt:l,clampedTo:n}):r.lastHeartbeatAt=l}a.phase!==void 0&&a.phase!==null&&(r.lastHeartbeatPhase=String(a.phase)),a.summary!==void 0&&a.summary!==null&&(r.lastHeartbeatSummary=String(a.summary)),cd(r.lastHeartbeatPhase)&&(r.terminalFinalResult=ad(a)),r.heartbeatBlocker=a.blocker?String(a.blocker):null,a.boxResourceSnapshot&&typeof a.boxResourceSnapshot=="object"&&!Array.isArray(a.boxResourceSnapshot)&&(r.lastBoxResourceSnapshot=a.boxResourceSnapshot),Array.isArray(a.prEvidence)&&(r.lastPrEvidence=a.prEvidence.filter(l=>!!l&&typeof l=="object"&&typeof l.prUrl=="string"))}return r}var nS,ot=I(()=>{"use strict";ld();O();nS=6e4});function dd(e){return e?(e.split("/").pop()??e).replace(/\.exe$/i,"").toLowerCase():null}function jo(e){if(!e)return[];let r=[],t="",n,o=!1;for(let s of e){if(o){t+=s,o=!1;continue}if(s==="\\"){o=!0;continue}if(n){s===n?n=void 0:t+=s;continue}if(s==='"'||s==="'"){n=s;continue}if(/\s/.test(s)){t&&(r.push(t),t="");continue}t+=s}return t&&r.push(t),r}function pd(e){let r=dd(e[0]);return!!(r&&oS.has(r))}function iS(e){let r=e.trim();return r.includes("/")?r.split("/").pop()??r:r}function aS(e){if(!e||e.includes("*"))return null;let r=iS(e);return!r||r.includes("/")?null:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(r)?r:null}function md(e){return!e||e.includes("/")||e.includes("*")?!1:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(e)}function ta(e){if(!e)return!1;let r=e.trim();return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")}function lS(e){if(!e.startsWith("--glob="))return e;let r=e.slice(7);return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")?`--glob=${r}/**`:e}function cS(e){let r=[];for(let t=1;t<e.length;t+=1){let n=e[t];if(n){if(n==="--"){r.push(...e.slice(t+1));break}if(n.startsWith("-")){if(n.includes("="))continue;ud.has(n)&&(t+=1);continue}r.push(n)}}return r}function uS(e){let r=!1,t=e.map((o,s)=>{let i=lS(o),a=e[s-1];return a&&ud.has(a)&&o.startsWith("!")&&!o.includes("/")&&!o.endsWith("/**")&&(i=`${o}/**`),i!==o&&(r=!0),i}),n=cS(t);if(n.length===2){let[o,s]=n;if(ta(s))return{argv:[t[0]??"rg",o,"-g",`${s}/**`,"."],changed:!0};let i=aS(s);if(i)return{argv:[t[0]??"rg","-g",i,o,"."],changed:!0}}return r&&n.length===1?{argv:[...t,"."],changed:!0}:{argv:t,changed:r}}function fd(e){for(let r=1;r<e.length;r+=1){let t=e[r];if(t&&(t==="-c"||t==="-lc"||t==="-cl"||/^-[a-zA-Z]*c[a-zA-Z]*$/u.test(t)))return r+1}return-1}function Vo(e){let r=e.trim();if(!r)return{command:r,wrapped:!1};let t=jo(r);if(!t.length)return{command:r,wrapped:!1};let n=dd(t[0]);if(!n||!sS.has(n))return{command:r,wrapped:!1};let o=fd(t);if(o<0||o>=t.length)return{command:r,wrapped:!1};let s=t.slice(o).join(" ").trim();return s?{command:s,wrapped:!0}:{command:r,wrapped:!1}}function dS(e,r){let t=e.trim(),n=jo(t),o=fd(n);if(o<0)return r;let s=n.slice(0,o).join(" "),i=r.includes("'")?`"${r.replace(/"/g,'\\"')}"`:`'${r}'`;return`${s} ${i}`}function pS(e){let r=e.trim(),t=Vo(r),n=jo(t.command);if(!n.length||!pd(n))return{segment:r,changed:!1};let o=uS(n);if(!o.changed)return{segment:r,changed:!1};let s=o.argv.join(" ");return t.wrapped?{segment:dS(r,s),changed:!0}:{segment:s,changed:!0}}function na(e){let r=e.trim();if(!r)return{command:r,changed:!1};let t=r.includes("&&")?" && ":r.includes("||")?" || ":"; ",n=r.split(/\s*(?:&&|\|\||;)\s*/u),o=!1,s=n.map(i=>{let a=pS(i);return a.changed&&(o=!0),a.segment});return o?{command:s.join(t),changed:!0}:{command:r,changed:!1}}function gd(e){let r=Vo(e).command,t=jo(r.trim());return t.length&&pd(t)?!0:/\b(rg|ripgrep)\b/i.test(r)}function hd(e){if(!e)return{};let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(|$)/iu);if(r)return{pattern:r[1],target:r[2]?.trim()};let t=e.match(/^search\s+"(.+)"\s+in\s+(.+)$/iu);return t?{pattern:t[1],target:t[2]?.trim()}:{}}function mS(e){let{pattern:r,target:t}=hd(e);return r?ta(t)?{kind:"rg_exclude_syntax",pattern:r,target:t}:md(t)?{kind:"bad_scope",pattern:r,target:t}:{kind:"not_repo_search",pattern:r,target:t}:{kind:"not_repo_search"}}function fS(e){let{pattern:r,target:t}=hd(e);if(!r)return null;if(ta(t)){let n=`${t.trim()}/**`;return{command:`rg "${r}" -g '${n}' .`,changed:!0}}return t&&md(t)?{command:`rg -g ${t} "${r}" .`,changed:!0}:null}function gS(e){if(e.kind==="bad_scope"&&e.pattern&&e.target)return`Use \`rg -g '${e.target}' ${e.pattern} .\` from the repo root instead of treating ${e.target} as a folder.`;if(e.kind==="rg_exclude_syntax"&&e.pattern){let r=e.target?`${e.target.trim()}/**`:"!node_modules/**";return`Repo search scope \`${e.target??"!node_modules"}\` is not a valid ripgrep path. Use \`rg "${e.pattern}" -g '${r}' .\` from the repo root (exclude globs need a \`/**\` suffix).`}return e.kind==="no_matches"&&e.pattern?`No matches for "${e.pattern}". Try a broader pattern, drop overly short tokens, or search from the repo root with \`rg "${e.pattern}" .\`.`:null}function hS(e){let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(agent\)|\s*failed|$)/iu);return r?`search "${r[1]}" in ${r[2]?.trim()}`:null}function oa(e){let r=e.meta?.trim()||(e.command?hS(e.command):null)||null;if(r){let t=mS(r),n=gS(t);if(n)return n;let o=fS(r);if(o?.changed)return`Repo search used an invalid scope. Retry with: \`${o.command}\`.`}if(e.command&&/\b(rg|ripgrep)\b/i.test(e.command)){let t=na(e.command);if(t.changed)return`Ripgrep scope may be invalid. Retry with: \`${t.command}\`.`;if(e.exitCode===1)return"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root."}return null}var oS,sS,ud,kd=I(()=>{"use strict";oS=new Set(["rg","ripgrep","grep"]),sS=new Set(["bash","sh","dash","zsh"]),ud=new Set(["-e","--regexp","-f","--file","-m","--max-count","-A","--after-context","-B","--before-context","-C","--context","-g","--glob","--iglob"])});function En(e,r=200){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function RS(e){let r=e.trim();if(!r)return null;if(r.startsWith("{"))try{return JSON.parse(r)}catch{}let t=r.indexOf("{"),n=r.lastIndexOf("}");if(t>=0&&n>t)try{return JSON.parse(r.slice(t,n+1))}catch{return null}return null}function Cn(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function vS(e){let r=e.metadata;if(!Cn(r))return null;let t=r.vulnerabilities;if(!Cn(t))return null;let n=s=>typeof t[s]=="number"?t[s]:0,o={info:n("info"),low:n("low"),moderate:n("moderate"),high:n("high"),critical:n("critical"),total:n("total")};return typeof t.total!="number"&&!o.critical&&!o.high&&!o.moderate&&!o.low&&!o.info?null:o}function bS(e){let r=[];e.critical&&r.push(`${e.critical} critical`),e.high&&r.push(`${e.high} high`),e.moderate&&r.push(`${e.moderate} moderate`),e.low&&r.push(`${e.low} low`),e.info&&r.push(`${e.info} info`);let t=r.length?r.join(", "):"see report";return`npm audit: ${e.total} vulnerabilit${e.total===1?"y":"ies"} (${t}) \u2014 remediation required`}function SS(e,r){let t=e.error;if(Cn(t)){let s=typeof t.summary=="string"?t.summary.trim():"",i=typeof t.code=="string"?t.code.trim():"";if(s)return i?`${i}: ${s}`:s;if(i)return i}let n=typeof e.message=="string"?e.message.trim():"";if(n)return n;let o=r.trim();return o?En(o.split(`
+`).find(Boolean)??o,160):"npm audit failed"}function wS(e){let r=`${e.stdout}
+${e.stderr}`.trim(),t=RS(r);if(!t||!Cn(t)){let o=En(r||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit failed (invalid or missing JSON): ${o}`,parseError:"invalid_json"}}if(Cn(t.error))return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit command failed: ${SS(t,e.stderr)}`};let n=vS(t);return n?e.exitCode===0&&n.total===0?{kind:"success",exitCode:0,summary:"npm audit: no vulnerabilities reported",audit:n}:{kind:"audit_findings",exitCode:e.exitCode,summary:bS(n),audit:n}:{kind:"command_failure",exitCode:e.exitCode,summary:"npm audit failed: JSON response missing vulnerability metadata",parseError:"missing_metadata"}}function xS(e){return kS.test(e)}function _S(e){let r=Vo(e).command;return yd.test(e)||yd.test(r)||gd(e)}function ES(e){let r=oa({command:e.command,exitCode:e.exitCode});if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"ripgrep finished (exit 0)"};if(e.exitCode===1){let n=(e.stderr||e.interleaved).trim();if(n&&yS.test(n)){let i=En(n,160);return{kind:"command_failure",exitCode:1,summary:r??`ripgrep failed (exit 1): ${i}`}}let o=na(e.command),s=o.changed&&!r?` Retry with: \`${o.command}\`.`:"";return{kind:"search_no_matches",exitCode:1,summary:r??`ripgrep: no matches (exit 1).${s} Try a broader pattern or search from the repo root.`}}let t=En(e.interleaved||e.stdout||e.stderr||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:r??`ripgrep failed (exit ${e.exitCode}): ${t}`}}function Rd(e){let r=e.stdout??"",t=e.stderr??"",n=e.interleavedOutput??"";if(xS(e.command)){let i=r.trim()||n.trim()||t.trim();return wS({exitCode:e.exitCode,stdout:i,stderr:t})}if(_S(e.command))return ES({command:e.command,exitCode:e.exitCode,stdout:r,stderr:t,interleaved:n});let o=oa({command:e.command,exitCode:e.exitCode});if(o&&e.exitCode!==0)return{kind:"command_failure",exitCode:e.exitCode,summary:o};if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"command succeeded (exit 0)"};let s=En(n||r||t||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`command failed (exit ${e.exitCode}): ${s}`}}var kS,yd,yS,vd=I(()=>{"use strict";kd();kS=/\bnpm\s+audit\b/i,yd=/\b(rg|ripgrep)\b/i,yS=/\b(error|invalid|unknown|panic|not found)\b/i});function Pn(e){return typeof e=="string"&&CS.test(e.trim())}function Go(e){if(!e||typeof e!="object"||Array.isArray(e))return!1;let r=e;return r.is_error===!0||r.providerTerminalError===!0||typeof r.subtype=="string"&&/^error(?:_|$)/.test(r.subtype)}var CS,Yo=I(()=>{"use strict";CS=/^(?:provider authentication failed:\s*)?(?:(?:Failed to authenticate|authentication (?:failed|error))(?::\s*[^\n.!?]+)?|OAuth session expired and could not be refreshed)[.!]?$/i});function sa(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function PS(e){if(!e)return;let r=typeof e.input_tokens=="number"?e.input_tokens:void 0,t=typeof e.output_tokens=="number"?e.output_tokens:void 0;if(!((r===void 0||r<0)&&(t===void 0||t<0)))return{...r!==void 0&&r>=0?{inputTokens:r}:{},...t!==void 0&&t>=0?{outputTokens:t}:{}}}function bd(e){if(e.event==="step_update"&&sa(e.step_update)){let s=e.step_update,i=s.step_type==="tool"&&typeof s.tool_name=="string"&&s.tool_name.trim()?s.tool_name.trim():void 0,a=typeof s.text_delta=="string"?s.text_delta:void 0;return!i&&a===void 0?null:{...i?{currentTool:i}:{},...a!==void 0?{textDelta:a}:{}}}if(e.event!=="result"||!sa(e.result))return null;let r=e.result,t=typeof r.status=="string"?r.status.toUpperCase():"";if(t!=="SUCCESS"&&t!=="ERROR")return null;let n=sa(r.usage)?PS(r.usage):void 0;if(t==="ERROR"){let s=typeof r.error=="string"&&r.error.trim()?r.error.trim():"antigravity cli result error";return{...n?{usage:n}:{},terminal:{ok:!1,finalResult:null,error:s}}}let o=typeof r.response=="string"?r.response.trim():"";return{...n?{usage:n}:{},terminal:{ok:!0,finalResult:o||"completed",error:null}}}var Sd=I(()=>{"use strict"});function ia(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function wd(){return{assistantText:""}}function AS(e,r){if(!(r.role!=="assistant"||typeof r.content!="string")){if(r.delta===!0){e.assistantText+=r.content;return}e.assistantText=r.content}}function IS(e){let r=typeof e.input_tokens=="number"?e.input_tokens:void 0,t=typeof e.output_tokens=="number"?e.output_tokens:void 0,o=(ia(e.models)?Object.keys(e.models):[]).find(s=>s.trim())?.trim();if(!(r===void 0&&t===void 0&&!o))return{...r!==void 0&&r>=0?{inputTokens:r}:{},...t!==void 0&&t>=0?{outputTokens:t}:{},...o?{model:o}:{}}}function OS(e){return e.type!=="result"||e.status!=="success"&&e.status!=="error"?!1:typeof e.result!="string"}function xd(e,r){if(e.type==="message"&&(e.role==="assistant"||e.role==="user"))return AS(r,e),{};if(e.type==="tool_use"&&typeof e.tool_name=="string"&&e.tool_name.trim())return{currentTool:e.tool_name.trim()};if(!OS(e))return null;let t=ia(e.stats)?IS(e.stats):void 0;if(e.status==="error"){let o=ia(e.error)&&typeof e.error.message=="string"?e.error.message:"gemini cli result error";return{...t?{usage:t}:{},terminal:{ok:!1,finalResult:null,error:o}}}let n=r.assistantText.trim();return{...t?{usage:t}:{},terminal:{ok:!0,finalResult:n||"completed",error:null}}}var _d=I(()=>{"use strict"});import{existsSync as TS,readFileSync as NS}from"node:fs";function MS(e){let r=e.timestamp_ms;return e.timestamp||e.ts||(r?new Date(r).toISOString():void 0)}function DS(e){if(!e)return null;for(let r of Object.keys(e))if(r.endsWith("ToolCall")){let t=r.slice(0,-8);return t.length?t:r}return null}function WS(e,r){e.finalResult=r.result||r.subtype||r.terminal_reason||"completed",Go(r)&&(e.providerTerminalError=!0,e.error=String(r.result||r.api_error_status||"stream result error"))}function Mt(e){return typeof e=="number"&&Number.isFinite(e)&&e>=0?e:void 0}function LS(e){let r=e.usage;return r&&typeof r=="object"&&!Array.isArray(r)?r:null}function US(e){if(typeof e.model=="string"&&e.model.trim())return e.model.trim();let r=e.modelUsage;if(r&&typeof r=="object"&&!Array.isArray(r)){let t=Object.keys(r)[0];if(t?.trim())return t.trim()}}function BS(e,r){let t=LS(r);if(!t)return;let n=Mt(t.input_tokens)??Mt(t.inputTokens)??Mt(t.prompt_tokens),o=Mt(t.output_tokens)??Mt(t.outputTokens)??Mt(t.completion_tokens);if(n===void 0&&o===void 0)return;let s=US(r)??e.usage?.model;e.usage={...n!==void 0?{inputTokens:n}:{},...o!==void 0?{outputTokens:o}:{},...s?{model:s}:{}}}function FS(e){if(e.type!=="tool_call"||e.subtype!=="completed")return null;let t=(e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:null)?.shellToolCall;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t,o=n.args,s=o&&typeof o=="object"&&!Array.isArray(o)&&typeof o.command=="string"?String(o.command):"",i=n.result;if(!i||typeof i!="object"||Array.isArray(i))return null;let a=i.success??i.failure;if(!a||typeof a!="object"||Array.isArray(a))return null;let l=a,c=typeof l.exitCode=="number"?l.exitCode:0;return{command:s,exitCode:c,stdout:typeof l.stdout=="string"?l.stdout:"",stderr:typeof l.stderr=="string"?l.stderr:"",interleaved:typeof l.interleavedOutput=="string"?l.interleavedOutput:""}}function KS(e,r){r.kind==="success"||r.kind==="search_no_matches"||(e.lastShellOutcome=r)}function st(e){let r={firstEventAt:null,lastEventAt:null,currentTool:null,finalResult:null,error:null,lastShellOutcome:null,usage:null};if(!TS(e))return r;let t=NS(e,"utf8").split(`
+`).filter(Boolean),n=null,o=wd();for(let s of t){let i=hn(s);if(!i||typeof i!="object"||Array.isArray(i))continue;if(i.type==="turn.started"&&(n=null,r.finalResult=null),i.type==="item.completed"){let p=i.item;if(p&&typeof p=="object"&&!Array.isArray(p)){let m=p;m.type==="agent_message"&&typeof m.text=="string"&&m.text.trim()&&(n=m.text)}}i.type==="turn.completed"&&n&&!r.providerTerminalError&&(r.finalResult=n,n=null);let a=MS(i);if(a&&(r.firstEventAt||=a,r.lastEventAt=a),i.type==="stream_event"&&i.event&&typeof i.event=="object"&&i.event.type==="content_block_start"){let p=i.event.content_block;p?.type==="tool_use"&&(r.currentTool=String(p.name||"tool"))}if(i.type==="assistant"&&i.message&&typeof i.message=="object"){let p=i.message.content;if(Array.isArray(p)){let m=p.find(f=>f?.type==="tool_use");m&&(r.currentTool=String(m.name||r.currentTool))}}if(i.type==="tool_call"&&i.subtype==="started"){let p=i.tool_call&&typeof i.tool_call=="object"&&!Array.isArray(i.tool_call)?i.tool_call:void 0,m=DS(p);m&&(r.currentTool=m)}let l=FS(i);l&&KS(r,Rd({command:l.command,exitCode:l.exitCode,stdout:l.stdout,stderr:l.stderr,interleavedOutput:l.interleaved}));let c=bd(i),u=c?null:xd(i,o),d=c??u;if(d?.currentTool&&(r.currentTool=d.currentTool),d?.usage&&(r.usage={...r.usage??{},...d.usage}),d?.terminal?d.terminal.ok?r.finalResult=d.terminal.finalResult:(r.finalResult=null,r.providerTerminalError=!0,r.error=d.terminal.error):i.type==="result"&&WS(r,i),i.type==="turn.failed"){n=null,r.finalResult=null,r.providerTerminalError=!0;let p=i.error;r.error=typeof p?.message=="string"?p.message:"provider turn failed"}BS(r,i)}return r}var An=I(()=>{"use strict";vd();O();Yo();Sd();_d()});import{accessSync as HS,constants as $S,existsSync as jS,readFileSync as VS}from"node:fs";import aa from"node:path";function Cd(e){return aa.join(e,GS)}function YS(e=process.env,r=process.platform){if(r==="win32")return!1;let t=e.KYNVER_WORKER_EXIT_CAPTURE?.trim().toLowerCase();return!(t==="0"||t==="false"||t==="off")}function Ed(e){try{return HS(e,$S.X_OK),!0}catch{return!1}}function qS(e,r=process.env){if(!e)return!1;if(e.includes("/"))return Ed(e);for(let t of(r.PATH??"").split(aa.delimiter))if(t&&Ed(aa.join(t,e)))return!0;return!1}function Ce(e,r,t,n={}){let o=n.env??process.env;return!t||!YS(o,n.platform)?[e,r]:qS(e,o)?[n.nodeExecutable??process.execPath,["-e",JS,Cd(t),e,...r]]:[e,r]}function zS(e){return typeof e=="number"&&Number.isFinite(e)?e:null}function qo(e){if(!e)return null;let r=Cd(e);if(!jS(r))return null;try{let t=JSON.parse(VS(r,"utf8")),n=t.oomEvidence;return{exitCode:zS(t.exitCode),signal:typeof t.signal=="string"&&t.signal?t.signal:null,...typeof t.startedAt=="string"?{startedAt:t.startedAt}:{},...typeof t.endedAt=="string"?{endedAt:t.endedAt}:{},...typeof t.childPid=="number"?{childPid:t.childPid}:{},...typeof t.spawnError=="string"?{spawnError:t.spawnError}:{},oomEvidence:n&&(n.source==="cgroup"||n.source==="kernel_log")?{source:n.source,detail:String(n.detail??"").slice(0,300)}:null}}catch{return null}}function Pd(e){if(!e)return null;let r=e.oomEvidence?" (kernel out-of-memory kill)":"";return e.spawnError?`could not start: ${e.spawnError}`:e.signal?`killed by ${e.signal}${r}`:e.exitCode===null?null:`exited with code ${e.exitCode}${r}`}var GS,JS,Rr=I(()=>{"use strict";GS="exit.json";JS=String.raw`"use strict";
+const cp = require("child_process"), fs = require("fs");
+const argv = process.argv.slice(1);
+const exitFile = argv[0], cmd = argv[1], args = argv.slice(2);
+const startedMs = Date.now();
+function cgroupOomKills() {
+  try {
+    const line = fs.readFileSync("/proc/self/cgroup", "utf8").split("\n").find((l) => l.startsWith("0::"));
+    if (!line) return null;
+    const file = "/sys/fs/cgroup" + line.slice(3).trim().replace(/\/$/, "") + "/memory.events";
+    const m = /(?:^|\n)oom_kill (\d+)/.exec(fs.readFileSync(file, "utf8"));
+    return m ? Number(m[1]) : null;
+  } catch { return null; }
+}
+function kernelLog() {
+  const override = process.env.KYNVER_EXIT_CAPTURE_KERNEL_LOG_FILE;
+  if (override) { try { return fs.readFileSync(override, "utf8"); } catch { return ""; } }
+  const run = (bin, a) => {
+    try {
+      const r = cp.spawnSync(bin, a, { encoding: "utf8", timeout: 3000, maxBuffer: 8 * 1024 * 1024, stdio: ["ignore", "pipe", "ignore"] });
+      return r.status === 0 ? String(r.stdout || "") : "";
+    } catch { return ""; }
+  };
+  return run("journalctl", ["-k", "-q", "--no-pager", "--since", "@" + Math.floor(startedMs / 1000)]) || run("dmesg", []);
+}
+const oomBefore = cgroupOomKills();
+let child, finished = false;
+function write(rec) {
+  try { fs.writeFileSync(exitFile, JSON.stringify(rec, null, 2) + "\n"); } catch {}
+}
+function finish(code, signal, spawnError) {
+  if (finished) return;
+  finished = true;
+  const rec = { exitCode: code, signal: signal || null, startedAt: new Date(startedMs).toISOString(), endedAt: new Date().toISOString(), childPid: child && child.pid };
+  if (spawnError) rec.spawnError = spawnError;
+  if (signal === "SIGKILL" || code === 137 || (code !== 0 && code !== null)) {
+    const oomAfter = cgroupOomKills();
+    if (oomBefore !== null && oomAfter !== null && oomAfter > oomBefore) {
+      rec.oomEvidence = { source: "cgroup", detail: "memory.events oom_kill " + oomBefore + " -> " + oomAfter };
+    } else if (signal === "SIGKILL" || code === 137) {
+      const pid = child && child.pid;
+      const hit = kernelLog().split("\n").find((l) => pid && new RegExp("(?:Killed process|oom-kill:.*pid=|Memory cgroup out of memory: Killed process) ?" + pid + "\\b").test(l));
+      if (hit) rec.oomEvidence = { source: "kernel_log", detail: hit.trim().slice(0, 300) };
+    }
+  }
+  write(rec);
+  if (signal) {
+    const n = (require("os").constants.signals || {})[signal];
+    process.exit(128 + (n || 9));
+  }
+  process.exit(code === null ? 1 : code);
+}
+try {
+  child = cp.spawn(cmd, args, { stdio: "inherit" });
+} catch (e) {
+  process.stderr.write("failed to spawn worker process: " + (e && e.message) + "\n");
+  finish(127, null, String(e && e.message));
+}
+for (const s of ["SIGTERM", "SIGINT", "SIGHUP"]) process.on(s, () => { try { child.kill(s); } catch {} });
+child.on("error", (e) => {
+  process.stderr.write("failed to spawn worker process: " + (e && e.message) + "\n");
+  if (!child.pid) finish(127, null, String(e && e.message));
+});
+child.on("exit", (code, signal) => finish(code, signal));
+`});import XS from"node:path";function la(e){if(!e||typeof e!="object"||Array.isArray(e))return!1;let r=e.handoffState;return typeof r=="string"&&ZS.has(r)}function Jo(e){return!!(e&&QS.test(e))}function Od(e){if(e.noRestartAt?.trim())return"stopped_by_hand";if(e.finalResult&&!la(e.finalResult))return"finished";if(e.alive)return e.stale?"stuck":"running";let r=e.error?.trim()??"",t=e.exit??null;if(t?.oomEvidence||Jo(r))return"oom";let n=e.reconcileReason??"";return/reconciled stale worker/i.test(n)?"stuck":Ad.test(r)||Ad.test(n)?"timed_out":t&&t.exitCode===0&&!t.signal&&!t.spawnError?"no_report":t&&(t.signal||t.spawnError||t.exitCode!==null&&t.exitCode!==0)||r?"crashed":"no_report"}function Td(e){let r=[ew(e.stopClass)],t=Pd(e.exit);t&&r.push(t),e.exit?.oomEvidence&&r.push(`evidence: ${e.exit.oomEvidence.detail}`),e.stopClass==="no_report"&&e.exit?.exitCode===0&&r.push("it exited normally but never sent a final report");let n=e.error?.replace(/\s+/g," ").trim();return n?r.push(`last output: ${n.length>300?`${n.slice(-300)}`:n}`):e.stopClass==="stuck"&&e.reconcileReason&&r.push(e.reconcileReason),r.join(" \u2014 ").slice(0,600)}function ew(e){switch(e){case"finished":return"finished";case"oom":return"ran out of memory";case"crashed":return"crashed";case"no_report":return"stopped without reporting";case"timed_out":return"timed out";case"stuck":return"stuck (no progress)";case"stopped_by_hand":return"stopped on purpose";default:return"running"}}function Nd(e,r=process.env){if(e<=0)return null;let t=Number.parseInt(r.KYNVER_NODE_OLD_SPACE_SIZE_MB??"",10),n=Number.isFinite(t)&&t>0?Math.max(t,Id/2):Id/2;return Math.min(rw,n*2**e)}function Md(e,r,t){let n=0,o;try{o=q(e)}catch{return 0}for(let s of Object.keys(o.workers||{})){if(t&&s===t)continue;let i=A(XS.join(N(o.id),"workers",x(s),"worker.json"),void 0);if(!(!i||i.taskId!==r)){if(i.stopClass==="oom"||i.oomEvidence){n+=1;continue}if(qo(i.workerDir)?.oomEvidence){n+=1;continue}!i.stopClass&&i.stderrPath&&Jo(At(i.stderrPath,20))&&(n+=1)}}return n}function Dd(e,r){if(!e)return r();let t=process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB,n=process.env.NODE_OPTIONS;process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB=String(e);let o=`--max-old-space-size=${e}`,s=(n??"").replace(/--max-old-space-size=\d+/g,"").trim();process.env.NODE_OPTIONS=s?`${s} ${o}`:o;try{return r()}finally{t===void 0?delete process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB:process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB=t,n===void 0?delete process.env.NODE_OPTIONS:process.env.NODE_OPTIONS=n}}var QS,Ad,ZS,Id,rw,ca=I(()=>{"use strict";U();O();Rr();QS=/javascript heap out of memory|reached heap limit|allocation failed - process out of memory|\bout of memory\b|\boom[- ]?kill(?:ed|er)?\b|std::bad_alloc|cannot allocate memory|\benomem\b|exit(?:ed)? (?:with )?(?:code|status) 137\b|killed process \d+/i,Ad=/\btimed? ?out\b|\btimeout\b|deadline exceeded/i,ZS=new Set(["exited_without_final_result","exited_without_complete_heartbeat","exit_failure"]);Id=2048,rw=8192});function Wd(e,r=240){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function In(e){let r=(e??"").trim();if(!r)return null;if(Pn(r))return{blocked:!0,reason:`provider authentication failed: ${Wd(r)}`};for(let t of tw)if(t.test.test(r))return{blocked:!0,reason:`${t.label}: ${Wd(r)}`};return null}var tw,ua=I(()=>{"use strict";Yo();tw=[{test:/(?:claude provider refuses to spawn: worker prompt is empty after argv assembly|Input must be provided (?:either )?through stdin or as a prompt argument)/i,label:"provider prompt delivery failed"},{test:/\b(?:invalid|unknown|unsupported|unrecognized)\b[^.\n]*\bmodel\b/i,label:"provider rejected the requested model"},{test:/\bmodel\b[^.\n]*\b(?:not\s+(?:found|supported|available|recognized|valid)|is\s+not\s+valid|does\s+not\s+exist)/i,label:"provider rejected the requested model"},{test:/\b(?:did you mean|available models|choose (?:a|one of)|supported models)\b/i,label:"provider rejected the requested model"},{test:/model preflight failed/i,label:"model/provider preflight failed"},{test:/\b(?:command not found|ENOENT|is the .*CLI on PATH|executable not found|no such file or directory)\b/i,label:"provider CLI is missing or not on PATH"},{test:/\bfailed to spawn\b/i,label:"provider failed to spawn the worker process"},{test:/\b(?:not logged in|unauthorized|authentication (?:failed|required)|invalid api key|missing api key|401)\b/i,label:"provider authentication failed"},{test:/\b(?:out of usage|increase limits?|switch to auto|ask your admin to increase your limit|usage limits?|quota exceeded|insufficient_quota|credits? exhausted|billing|payment required)\b/i,label:"provider quota exhausted"}]});function Ld(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function nw(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function ow(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:Ld(e.head)}function sw(e,r,t){let n=["exited_with_changes_salvage"];if((e==="uncommitted"||e==="both")&&n.push(`${r} uncommitted change${r===1?"":"s"} with no final result`),(e==="committed_ahead"||e==="both")&&t){let o=t.length>12?t.slice(0,12):t;n.push(`commit ${o} ahead of base with no final result`)}return n.push("review worktree \u2014 commit, open a PR, or run a salvage worker before discarding"),n.join(": ")}function Dt(e){if(e.alive||nw(e.finalResult))return null;let r=(e.changedFiles??[]).filter(i=>i.trim()).length,t=Ld(e.headCommit)??ow(e.gitAncestry),n=r>0,o=!!t;if(!n&&!o)return{kind:"none",salvageable:!1,uncommittedCount:0,headCommit:null,attentionReason:"process exited without a final result"};let s=n&&o?"both":n?"uncommitted":"committed_ahead";return{kind:s,salvageable:!0,uncommittedCount:r,headCommit:t,attentionReason:sw(s,r,t)}}var zo=I(()=>{"use strict"});import{existsSync as iw,readFileSync as aw,statSync as Fd}from"node:fs";import Xo from"node:path";function dw(e,r=process.env){let t=e?cw:lw,n=r.KYNVER_WORKER_GIT_PROBE_CACHE_TTL_MS?.trim();if(!n)return t;let o=Number(n);return Number.isFinite(o)&&o>=0?Math.floor(o):t}function pw(e){return e.baseCommit?.trim()||e.base?.trim()||"origin/main"}function da(e){try{return Fd(e).mtimeMs}catch{return-1}}function mw(e){let r=Xo.join(e,".git");try{if(Fd(r).isDirectory())return r;let t=/^gitdir:\s*(.+)$/m.exec(aw(r,"utf8"));return t?Xo.resolve(e,t[1].trim()):null}catch{return null}}function Ud(e){let r=mw(e);return[da(e),r?da(Xo.join(r,"HEAD")):-2,r?da(Xo.join(r,"index")):-2].join(":")}function Bd(e,r){return{changedFiles:yn(e),gitAncestry:Lo(e,{base:r.base,baseCommit:r.baseCommit})}}function fw(e,r){for(Hr.delete(e),Hr.set(e,r);Hr.size>uw;){let t=Hr.keys().next().value;if(t===void 0)break;Hr.delete(t)}}function Kd(e,r,t){let n=pw(r);if(!e||!e.trim())return On.missingWorktree++,{changedFiles:[],gitAncestry:Ot(n,"missing worktree path")};let o=`${e}\0${n}`;if(!iw(e))return Hr.delete(o),On.missingWorktree++,{changedFiles:[],gitAncestry:Ot(n,`worktree no longer exists: ${e}`)};if(t.alive)return Hr.delete(o),On.liveProbes++,Bd(e,r);let s=t.ttlMs??dw(!!r.baseCommit?.trim()),i=t.now??Date.now(),a=Ud(e),l=Hr.get(o);if(s>0&&l&&l.fingerprint===a&&i<l.expiresAt)return On.hits++,l.probe;On.misses++;let c=Bd(e,r);if(s>0){let u=.8+.4*(t.random??Math.random)();fw(o,{fingerprint:Ud(e),expiresAt:i+Math.round(s*u),probe:c})}return c}var lw,cw,uw,Hr,On,Hd=I(()=>{"use strict";de();lw=10*6e4,cw=60*6e4,uw=2048,Hr=new Map,On={hits:0,misses:0,liveProbes:0,missingWorktree:0}});function Tn(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function gw(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function hw(e){if(Tn(e.headCommit)||Tn(e.prUrl)||Tn(e.artifactBundlePath)||Tn(e.patchPath))return!0;let r=e.gitAncestry;return!!(r?.checked&&r.headIsAncestorOfBase===!1&&Tn(r.head))}function Wt(e){return gw(e.finalResult)?e.changedFiles.length===0?{blocked:!1}:hw(e)?{blocked:!0,detail:`Worktree has ${e.changedFiles.length} uncommitted change(s); commit or discard before landing`}:{blocked:!0,reason:"dirty_worktree_no_pr",detail:`Worktree has ${e.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`}:{blocked:!1}}function $d(e){if(e.blocked)return e.detail??e.reason??"dirty_worktree_no_pr"}var Qo=I(()=>{"use strict"});function pa(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function jd(e){let r=e.targetPrReconciliation??e.target_pr_reconciliation??e.targetPrs??e.target_prs;return Array.isArray(r)?r.length:0}function Lt(e){let r=e.trim();if(!r)return null;let t=pa(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let u=pa(s[1]??"");u&&n.push(u)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let u=pa(r.slice(i,a+1));u&&n.push(u)}if(n.length===0)return null;let l=n[n.length-1],c=jd(l);for(let u of n){let d=jd(u);d>c&&(l=u,c=d)}return l}var Zo=I(()=>{"use strict"});function Vd(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:e.trim()||null}function Gd(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function kw(e){return new Set(e.map(r=>Gd(Vd(r)??r)).filter(Boolean))}function Yd(e,r,t){let n=Vd(e)??e;if(!n)return"unrelated";let o=Gd(n);return kw(r).has(o)?"contract":t?(t.outcome==="skipped"||t.outcome==="blocked")&&t.reason?.trim()?"support":(t.outcome==="merged","unrelated"):"unrelated"}var qd=I(()=>{"use strict"});function Ut(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function yw(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"?Object.keys(e).length>0:!0}function it(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:Ut(e)}function es(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function Jd(e){let r=null;if(typeof e=="string"){let o=Lt(e);o&&(r=o)}else e&&typeof e=="object"&&!Array.isArray(e)&&(r=e);if(!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=it(String(s.prUrl??s.pr_url??"")),a=Ut(s.outcome);!i||a!=="merged"&&a!=="skipped"&&a!=="blocked"||n.push({prUrl:i,outcome:a,mergeCommit:Ut(s.mergeCommit??s.merge_commit),reason:Ut(s.reason)})}return n}function zd(e,r){let t=[],n=it(Ut(e.prUrl)??"");if(n&&t.push(n),r&&typeof r=="object"&&!Array.isArray(r)){let o=r,s=it(String(o.prUrl??o.pr_url??""));s&&t.push(s)}return[...new Set(t)]}function Xd(e){let{contract:r,snapshot:t}=e,n=e.finalResult??t.finalResult;if(!r.landingOnly&&r.targetPrUrls.length===0&&!r.repairEnforceOriginalPr)return{blocked:!1};if(!yw(n))return(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&r.targetPrUrls.length>0?{blocked:!0,reason:"missing_target_pr_reconciliation",detail:`Final result required to reconcile target PR(s): ${r.targetPrUrls.join(", ")}`}:{blocked:!1};if(!(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&!r.repairEnforceOriginalPr)return{blocked:!1};let s=r.repairEnforceOriginalPr?it(Ut(r.targetPrUrl)??"")??(r.targetPrUrls.length===1?it(r.targetPrUrls[0]):null):null;if(s){let d=zd(t,n);if(!(n&&typeof n=="object"&&!Array.isArray(n)&&n.supersedesOriginalTargetPr===!0)){for(let y of d)if(y!==s)return{blocked:!0,reason:"duplicate_repair_pr",detail:`Repair worker opened or attached PR ${y} instead of canonical target ${s}`}}let f=Jd(n).find(y=>y.prUrl===s);if(!f||f.outcome!=="merged"&&!(f.reason?.trim()&&(f.outcome==="skipped"||f.outcome==="blocked")))return{blocked:!0,reason:"missing_repair_target_reconciliation",detail:`Repair worker must reconcile target PR ${s}`}}let i=Jd(n),a=new Map(i.map(d=>[es(d.prUrl),d])),l=new Set(r.targetPrUrls.map(d=>es(it(d)??d)).filter(Boolean)),c=zd(t,n);if(r.landingOnly)for(let d of c){let p=a.get(es(d)),m=Yd(d,r.targetPrUrls,p);if(!(m==="contract"||m==="support"))return l.size>0?{blocked:!0,reason:"unrelated_implementation_pr",detail:`Landing-only worker attached unrelated PR ${d}`}:{blocked:!0,reason:"unrelated_implementation_pr",detail:"Landing-only worker must not open new implementation PRs"}}if(r.targetPrUrls.length===0)return{blocked:!1};let u=[];for(let d of r.targetPrUrls){let p=es(it(d)??d),m=a.get(p);if(!m){u.push(p);continue}m.outcome!=="merged"&&!m.reason?.trim()&&u.push(p)}return u.length>0?{blocked:!0,reason:u.every(d=>a.has(d))?"incomplete_target_pr_landing":"missing_target_pr_reconciliation",detail:`Target PR reconciliation incomplete: ${u.join(", ")}`}:{blocked:!1}}function Qd(e){if(e.blocked)return e.detail??e.reason}var Zd=I(()=>{"use strict";Zo();qd()});function vw(e){let r=Date.now();if(e.providerTerminalError||Go(e.finalResult)||e.finalResult&&e.error?.trim()||Pn(e.error)||Pn(e.finalResult)){let o=e.error||(typeof e.finalResult=="string"?e.finalResult:"provider terminal error");return{state:"blocked",reason:In(o)?.reason??`provider terminal error: ${o}`}}if(e.completionBlocker&&!ep(e.completionBlocker))return{state:"blocked",reason:e.completionBlocker};if(e.finalResult){if(e.localOnly&&Sw(e.finalResult))return{state:"done",reason:"local-only worker superseded by merged PR"};let o={finalResult:e.finalResult,changedFiles:e.changedFiles??[],gitAncestry:e.gitAncestry??null,prUrl:e.prUrl??null},s=Wt(o);if(s.blocked){let i=$d(s);return{state:"needs_attention",reason:s.reason?`landing blocked (${s.reason}): ${i}`:`landing blocked: ${i}`}}if(e.landingContract){let i=Xd({contract:e.landingContract,snapshot:o,finalResult:e.finalResult}),a=Qd(i);if(a)return{state:"needs_attention",reason:i.reason?`landing contract (${i.reason}): ${a}`:`landing contract: ${a}`}}return{state:"done",reason:"final result recorded"}}if(!e.alive){if(bw(e))return{state:"done",reason:"empty abandoned worker record"};let o=In(e.error);if(o)return{state:"blocked",reason:o.reason};let s=Dt({alive:!1,finalResult:null,changedFiles:e.changedFiles,gitAncestry:e.gitAncestry});if(s?.salvageable){let l=e.error?.trim();return{state:"needs_attention",reason:l?`${s.attentionReason} (${l})`:s.attentionReason}}let i=e.error?.trim(),a=Jo(i);return{state:"needs_attention",reason:i?`process exited without a final result${a?" (ran out of memory)":""}: ${i}`:s?.attentionReason??"process exited without a final result"}}if(e.heartbeatBlocker)return{state:"blocked",reason:`worker heartbeat reported blocker: ${e.heartbeatBlocker}`};let t=e.startedAt?Date.parse(e.startedAt):NaN;if(!e.firstEventAt&&e.stdoutBytes===0&&e.heartbeatBytes===0&&Number.isFinite(t)&&r-t>Rw)return{state:"needs_attention",reason:`no first stream event ${$i(t)}s after start`};let n=e.lastActivityAt?Date.parse(e.lastActivityAt):NaN;return Number.isFinite(n)&&r-n>ma?{state:"stale",reason:`no log/event/heartbeat activity for ${$i(n)}s`}:{state:"ok",reason:"recent activity"}}function ep(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function bw(e){return e.finalResult||e.taskId||e.agentOsId||e.stdoutBytes>0||(e.stderrBytes??0)>0||e.heartbeatBytes>0||e.error?.trim()||(e.changedFiles??[]).some(r=>r.trim())?!1:/empty worker dir|marked abandoned/i.test(e.reconcileReason??"")}function Sw(e){let r=null;if(typeof e=="string"?r=Lt(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return!1;let t=r.targetPrReconciliation??r.target_pr_reconciliation;return Array.isArray(t)?t.some(n=>!n||typeof n!="object"||Array.isArray(n)?!1:String(n.outcome??"").trim()==="merged"):!1}function rp(e,r,t){let n=e.completionSnapshot?.finalResult;return e.completionAckSource==="local-pr-merged-reconcile"&&n!==void 0&&n!==null?n:r||(n??yr(t))}function tp(e){let r=st(e.stdoutPath),t=pe(e.heartbeatPath);return rp(e,r.finalResult,t)}function J(e,r={}){let t=st(e.stdoutPath),n=pe(e.heartbeatPath),o=typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim().length>0,s=rp(e,t.finalResult,n),i=o?!1:Y(e.pid),a=No(e.stdoutPath),l=No(e.stderrPath),c=No(e.heartbeatPath),{changedFiles:u,gitAncestry:d}=Kd(e.worktreePath,{base:r.base,baseCommit:r.baseCommit},{alive:i}),p=Tu([t.lastEventAt,n.lastHeartbeatAt,Mo(e.stdoutPath),Mo(e.stderrPath),Mo(e.heartbeatPath)]),m=i?null:qo(e.workerDir),f=s&&!la(s)?s:null,y=t.error||!i&&!s&&At(e.stderrPath,10).trim()||void 0,k=y||!i&&s&&!f&&At(e.stderrPath,10).trim()||void 0,b=typeof e.completionBlocker=="string"&&e.completionBlocker.trim()?e.completionBlocker.trim():null,g=ep(b)?null:b,h=e.repairTargetPrUrl?{landingOnly:!1,targetPrUrls:[e.repairTargetPrUrl],targetPrUrl:e.repairTargetPrUrl,repairEnforceOriginalPr:!0}:null,w=vw({alive:i,finalResult:s,firstEventAt:t.firstEventAt,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,lastActivityAt:p,heartbeatBlocker:n.heartbeatBlocker,startedAt:e.startedAt,error:y,providerTerminalError:t.providerTerminalError,changedFiles:u,gitAncestry:d,completionBlocker:g,landingContract:h,prUrl:e.repairTargetPrUrl??e.taskPrUrl??null,localOnly:e.localOnly===!0,taskId:e.taskId??null,agentOsId:e.agentOsId??null,reconcileReason:e.reconcileReason??null}),E=g||w.state==="blocked"?"blocked":o||w.state==="done"?"done":s?"exited":i?"running":"exited",S=e.stopClass&&e.stopClass!=="running"&&e.stopClass!=="finished"?e.stopClass:null,_=Od({alive:i,finalResult:s,error:k??null,stale:w.state==="stale",noRestartAt:e.noRestartAt??null,reconcileReason:e.reconcileReason??null,exit:m}),K=S&&!i&&!f?S:_,$=K==="running"||K==="finished"?null:(S===K?e.stopReason:void 0)??Td({stopClass:K,exit:m,error:k??null,reconcileReason:e.reconcileReason??null});return{runId:e.runId,worker:e.name,pid:e.pid,alive:i,status:E,stopClass:K,stopReason:$,exit:m,attention:w,branch:e.branch,worktreePath:e.worktreePath,ownedPaths:e.ownedPaths,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,firstEventAt:t.firstEventAt,lastEventAt:t.lastEventAt,lastActivityAt:p,currentTool:o?null:t.currentTool,heartbeatCount:n.heartbeatCount,lastHeartbeatAt:n.lastHeartbeatAt,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,timestampAnomalies:n.timestampAnomalies,finalResult:s,error:y,providerTerminalError:t.providerTerminalError,changedFiles:u,gitAncestry:d,instructionPolicyFingerprint:e.instructionPolicyFingerprint??null,instructionPolicyEvidence:e.instructionPolicyEvidence??null,model:e.model??e.orchestrationAudit?.model??null,provider:e.provider??e.orchestrationAudit?.provider??null,usage:t.usage??null,boxKind:e.boxKind??null,boxId:e.boxId??null,runtimeId:e.runtimeId??null,personaSlug:e.personaSlug??null,dispatched:e.dispatched??null,localOnly:e.localOnly??null}}function Se(e){return!!(e.finalResult||e.alive===!1||e.status==="exited"||e.status==="done")}function np(e){return e.finalResult?e.attention.state==="needs_attention"||e.attention.state==="blocked":!1}function fa(e,r){return r.length===0?e:r.some(t=>t.attention==="needs_attention"||t.attention==="stale"||t.attention==="blocked")?"needs_attention":r.every(t=>t.status==="done")?"done":r.some(t=>t.status==="running")?"running":e}var Rw,ma,me=I(()=>{"use strict";ot();An();ca();Rr();Yo();ua();zo();Hd();Qo();Zd();Zo();O();Rw=18e4,ma=6e5});import{readFileSync as ww}from"node:fs";function xw(e){if(!e||process.platform!=="linux")return null;try{return ww(`/proc/${e}/cmdline`,"utf8").replace(/\0/g," ")}catch{return null}}function op(e){if(!e.pid||process.platform!=="linux")return!0;let r=xw(e.pid);return r?[e.worktreePath,e.workerDir,e.heartbeatPath].filter(n=>typeof n=="string"&&n.trim().length>0).some(n=>r.includes(n)):!1}function $r(e){return typeof e.completionBlocker=="string"&&e.completionBlocker.trim()||typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||!Y(e.pid)||!op(e)?!1:!tp(e)}var rs=I(()=>{"use strict";me();O()});import ip from"node:os";import ap from"node:path";function sp(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function _w(e=F(),r,t){let n=sp(e.perWorkerMemBytes,ts),o=sp(e.memReserveBytes,ns),s=Math.min(1,Math.max(.1,Number(e.memUtilization)>0?Number(e.memUtilization):os)),i=is({config:e,configuredMaxWorkersOverride:r,totalMemBytes:t??ip.totalmem()});return{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i.configuredMaxWorkers,autoCap:i.autoCap,workerCapSource:i.workerCapSource}}function lp(e,r={}){let t=r.perWorkerMemBytes??ts,n=r.memReserveBytes??ns,o=r.memUtilization??os,s=Math.max(0,Math.floor(e*o)-n),i=Math.max(1,Math.floor(s/t));return Math.min(i,ss)}function Ew(){return ed()}function Cw(e){let r=0;for(let t of nr(e)){let n=A(ap.join(N(e.id),"workers",x(t),"worker.json"),void 0);!n||!$r(n)||r++}return r}function ga(){let e=0;for(let r of Je())e+=Cw(r);return e}function Bt(){let e=[];for(let r of Je())for(let t of nr(r)){let n=A(ap.join(N(r.id),"workers",x(t),"worker.json"),void 0);n&&$r(n)&&e.push({runId:r.id,workerName:t})}return e}function Nn(e){let r=e.config??F(),t=e.totalMemBytes??ip.totalmem(),{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i,autoCap:a,workerCapSource:l}=_w(r,e.configuredMaxWorkersOverride,t),c=kr(r),u=e.freeMemBytes??Ew(),d=e.activeWorkers??ga(),p=Math.max(0,Math.floor(t*s)-o),m=Math.max(0,Math.floor(p/n)),f=Math.max(0,Math.floor(Math.max(0,u-o)/n)),y=a,k=wn(c,i??y),b=Math.max(0,Math.min(k,m)),g=Math.max(0,b-d),w=Math.min(g,f),S=e.skipDiskGate||process.env.KYNVER_RESOURCE_GATE_SKIP_DISK==="1"?void 0:Kr({diskPath:e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/"});S&&!S.ok&&(w=0);let _=null;return w<=0&&(S&&!S.ok?_=S.reason??"disk gate blocked worker admission":d>=b?_=`at worker limit (${d}/${b} running)`:f<=0?_="insufficient free memory \u2014 waiting for workers to finish":_="no worker slots available"),{ok:w>0,totalMemBytes:t,freeMemBytes:u,memReserveBytes:o,perWorkerMemBytes:n,configuredMaxWorkers:i,workerCapSource:l,boxKind:c,autoCap:y,capacityWorkers:m,maxConcurrentWorkers:b,activeWorkers:d,slotsAvailable:w,reason:_,...S?{diskGate:S}:{}}}var ts,ns,os,ss,Ft=I(()=>{"use strict";rd();H();Me();Fo();as();xn();U();_n();rs();O();ts=500*1024*1024,ns=4*1024*1024*1024,os=.85,ss=64});function Mn(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function is(e){let r=e.config??{},t=e.env??process.env,n=Mn(r.perWorkerMemBytes,ts),o=Mn(r.memReserveBytes,ns),s=Math.min(1,Math.max(.1,Number(r.memUtilization)>0?Number(r.memUtilization):os)),i=lp(e.totalMemBytes,{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s});if(e.configuredMaxWorkersOverride!==void 0&&e.configuredMaxWorkersOverride!==null)return{configuredMaxWorkers:Mn(e.configuredMaxWorkersOverride,i),autoCap:i,workerCapSource:"workspace_override"};if(r.maxConcurrentWorkers!==void 0&&r.maxConcurrentWorkers!==null){let c=Mn(r.maxConcurrentWorkers,0)||null;if(c)return{configuredMaxWorkers:Math.min(c,ss),autoCap:i,workerCapSource:"config"}}let l=(t.KYNVER_MAX_WORKERS_INTENTIONAL==="1"||t.KYNVER_MAX_WORKERS_INTENTIONAL==="true")&&t.KYNVER_MAX_WORKERS&&Mn(t.KYNVER_MAX_WORKERS,0)||null;return l?{configuredMaxWorkers:Math.min(l,ss),autoCap:i,workerCapSource:"env"}:{configuredMaxWorkers:null,autoCap:i,workerCapSource:"auto"}}var as=I(()=>{"use strict";Ft()});import{homedir as Pw}from"node:os";import Aw from"node:path";var cp,ha=I(()=>{"use strict";cp=Aw.join(Pw(),".kynver",".env")});var up=I(()=>{"use strict"});var dp=I(()=>{"use strict";up()});var pp=I(()=>{"use strict"});var ka=I(()=>{"use strict";dp();pp();kn()});import{existsSync as Iw,readFileSync as Ow}from"node:fs";function ya(){if(process.platform==="win32")return"win32";if(process.platform==="darwin")return"darwin";if(process.platform==="linux"){if(process.env.WSL_DISTRO_NAME?.trim())return"wsl";try{if(Iw("/proc/version")){let e=Ow("/proc/version","utf8");if(/microsoft/i.test(e))return"wsl"}}catch{}return"linux"}return"linux"}var Ra=I(()=>{"use strict"});var mp=I(()=>{"use strict";Ra()});var ls=I(()=>{"use strict";ha();Fr();H();ka();mp()});import Nw from"node:os";function va(e,r){let t=(r??Nw.hostname()).trim().toLowerCase().replace(/\s+/g,"-")||"unknown-host";return`${e}:${t}`}function hp(e){return e.trim().toLowerCase().replace(/\s+/g,"-")}function kp(e,r){let t=e.trim();if(!t)return va(r);let n=t.indexOf(":");if(n>=0){let o=t.slice(0,n).trim().toLowerCase()||r,s=hp(t.slice(n+1));return s?`${o}:${s}`:va(o)}return`${r}:${hp(t)}`}function cs(e){let r=e.explicitBoxId?.trim()||e.env?.KYNVER_BOX_ID?.trim()||e.config?.boxId?.trim();return r?kp(r,e.boxKind):va(e.boxKind,e.hostLabel)}var us=I(()=>{"use strict";Me();Me()});var yp=I(()=>{"use strict";ha();ka();ls()});function ps(){return ds}function vp(e){if(!ds)return e;if(!Rp)throw new ba;return Rp}function ze(e,r=process.env){if(ds)return;let t=r[e]?.trim();return t||void 0}function wa(){if(ds)throw new Sa}var ba,Sa,ds,Rp,Dn=I(()=>{"use strict";ba=class extends Error{constructor(){super("desktop credential provider is not installed; refusing to fall back to file or env credentials"),this.name="DesktopCredentialProviderMissingError"}},Sa=class extends Error{constructor(){super("the credentials file is disabled in desktop mode"),this.name="LegacyCredentialStoreDisabledError"}},ds=!1,Rp=null});import{existsSync as vr,mkdirSync as Mw,readdirSync as ms,renameSync as bp,statSync as Dw}from"node:fs";import br from"node:path";function wp(e){try{return Dw(e).isDirectory()}catch{return!1}}function Ww(e){if(!vr(e))return!0;for(let r of Sp){let t=br.join(e,r);if(vr(t)&&(!wp(t)||ms(t).length>0))return!1}return!0}function Lw(e){let r=br.join(e,"runs");if(!vr(r)||!wp(r))return!1;for(let t of ms(r,{withFileTypes:!0})){if(!t.isDirectory()||t.name==="runs")continue;let n=br.join(r,t.name,"run.json");if(A(n,void 0)?.id)return!0}return!1}function Uw(e){let r=br.join(e,"runs");if(!vr(r))return!1;for(let t of ms(r,{withFileTypes:!0})){if(!t.isDirectory())continue;if(A(br.join(r,t.name,"run.json"),void 0)?.boxKind==="ghost")return!0}return!1}function Bw(e){let r=br.join(e,"ghost");return vr(r)?!vr(br.join(r,"runs")):Uw(e)}function xp(e){return Lw(e.sharedRoot)?Ww(e.forgeRoot)?Bw(e.sharedRoot)?{action:"blocked",blocker:"Forge legacy harness migration blocked: Ghost pool is co-hosted on this host (ghost namespace or ghost-attributed runs under ~/.kynver/harness). Drain in-flight Ghost runs from the shared root, or get operator sign-off for a fresh Forge cutover before enabling box-scoped isolation."}:{action:"migrate"}:{action:"none"}:{action:"none"}}function _p(e,r){Mw(r,{recursive:!0});for(let t of Sp){let n=br.join(e,t),o=br.join(r,t);if(vr(n)){if(vr(o)&&ms(o).length>0)throw new Error(`Forge legacy harness migration failed: ${o} is not empty`);if(vr(o)){bp(n,o);continue}bp(n,o)}}}var Sp,Ep=I(()=>{"use strict";O();Sp=["runs","worktrees"]});import{existsSync as Re}from"node:fs";import{homedir as Fw}from"node:os";import fe from"node:path";function xa(e=process.env){return e.HOME?.trim()||Fw()}function _a(e=process.env){return fe.join(xa(e),".kynver","harness")}function fs(e){let r=fe.resolve(Ye(e.trim()));for(;Kw.has(fe.basename(r));)r=fe.dirname(r);return r}function Hw(e,r=process.env){return fe.join(_a(r),e)}function $w(e=process.env){let r=_a(e);if(Re(fe.join(r,"runs")))return!0;if(Re(r)&&!Re(fe.join(r,"ghost"))&&!Re(fe.join(r,"forge")))return Re(r);let t=fe.join(xa(e),Cp);return Re(t)}function gs(e){let r=e.env??process.env,t=r.KYNVER_HARNESS_ROOT?.trim()||r.OPUS_HARNESS_ROOT?.trim();if(t)return{harnessRoot:fs(t),source:"env"};let n=e.configuredHarnessRoot?.trim();if(n)return{harnessRoot:fs(n),source:"config"};let o=Hw(e.boxKind,r);if(Re(fe.join(o,"runs"))||Re(o)&&!jw(o))return{harnessRoot:o,source:"box_scoped"};let i=_a(r);if(e.boxKind==="forge"){let a=xp({sharedRoot:i,forgeRoot:o});if(a.action==="blocked")return{harnessRoot:o,source:"box_scoped",migrationBlocker:a.blocker};if(a.action==="migrate")return e.allowForgeLegacyMigration!==!1&&_p(i,o),{harnessRoot:o,source:"legacy_migrated"}}if(e.boxKind==="ghost"&&$w(r)){if(Re(fe.join(i,"runs")))return{harnessRoot:i,source:"legacy_shared"};if(Re(i)&&!Re(fe.join(i,"ghost"))&&!Re(fe.join(i,"forge")))return{harnessRoot:i,source:"legacy_shared"};let l=fe.join(xa(r),Cp);if(Re(l))return{harnessRoot:l,source:"legacy_shared"}}return{harnessRoot:o,source:"box_scoped"}}function jw(e){if(!Re(e))return!0;for(let r of["runs","worktrees"]){let t=fe.join(e,r);if(Re(t))return!1}return!0}var Cp,Kw,Ea=I(()=>{"use strict";Fr();Ep();Cp=fe.join(".openclaw","harness");Kw=new Set(["runs","worktrees"])});import Pp from"node:os";function hs(e){return e?.trim()?e.trim():null}function Vw(e,r){let t=r.trim().toLowerCase()||"host";return`${e}-${t}`.replace(/[^a-z0-9._-]+/g,"-")}function Gw(e){return e.KYNVER_DISPATCH_STRICT_IDENTITY==="1"||e.KYNVER_DISPATCH_STRICT_IDENTITY==="true"||e.KYNVER_DAEMON_STRICT_IDENTITY==="1"||e.KYNVER_DAEMON_STRICT_IDENTITY==="true"}function Kt(e=F(),r=process.env,t={}){let n=hr(r,e),o=[...n.warnings],s=[],i=!!(e.boxKind?.trim()||hs(r.KYNVER_BOX_KIND)),a=t.strict===!0||Gw(r);if((t.requireExplicitBoxKind||a)&&!i&&s.push("boxKind is not persisted in ~/.kynver/config.json and KYNVER_BOX_KIND is unset \u2014 run `kynver setup` (customers: boxKind=box) or `kynver setup --box-kind forge|ghost` for operator pools before dispatch"),n.slugInferenceBlocked&&!i){let y="ambiguous box identity: KYNVER_AGENT_OS_SLUG is set without KYNVER_BOX_KIND or config.boxKind";a||t.requireExplicitBoxKind?s.push(y):o.push(`${y} \u2014 defaulting box kind to box (customer), not forge/ghost`)}let l=hs(e.runnerId),c=hs(r.KYNVER_RUNTIME_ID)??hs(r.OPENCLAW_RUNTIME_ID),u=l??c??Vw(n.boxKind,Pp.hostname()),d=l?"config":c?"env":"derived";d==="derived"&&o.push(`runnerId not persisted \u2014 using derived id "${u}"; run \`kynver setup --box-kind ${n.boxKind}\` to persist runner identity`);let p=is({config:e,env:r,totalMemBytes:Pp.totalmem()}),m=wn(n.boxKind,p.configuredMaxWorkers??Xi(n.boxKind,p.autoCap)),f=gs({boxKind:n.boxKind,configuredHarnessRoot:e.harnessRoot,env:r});return f.migrationBlocker&&s.push(f.migrationBlocker),s.length>0?{ok:!1,identity:null,errors:s,warnings:o}:{ok:!0,identity:{boxKind:n.boxKind,boxKindSource:n.source,runnerId:u,runnerIdSource:d,maxConcurrentWorkers:m,workerCapSource:p.workerCapSource,harnessRoot:f.harnessRoot,harnessRootSource:f.source},errors:s,warnings:o}}var Wn=I(()=>{"use strict";H();Me();Fo();as();Ea()});var Ip=I(()=>{"use strict";Rn();Me();us();H();ls();yp();Sn();Dn();Wn()});function or(e){let r=e.trim().toLowerCase();return Jw[r]??r}var Op,qw,Jw,ks=I(()=>{"use strict";Op=["claude","cursor","codex","gemini","gemini-api","openai-compatible"],qw=Op.join("|"),Jw={anthropic:"claude",opus:"claude",openai:"openai-compatible",openai_compatible:"openai-compatible","openai-compat":"openai-compatible",chatgpt:"codex",gpt:"codex","openai-api":"openai-compatible",openai_api:"openai-compatible",google:"gemini",gemini_cli:"gemini",gemini_api:"gemini-api","google-api":"gemini-api",google_api:"gemini-api"}});var Tp=I(()=>{"use strict";Fr()});var Np=I(()=>{"use strict";Tp()});import{execFileSync as zw}from"node:child_process";function Aa(e=process.env){let r=e[Xw]?.trim().toLowerCase();return r==="file"?"file":r==="keychain"?"keychain":"auto"}function Qw(e,r,t){let n={encoding:"utf8",timeout:t.timeoutMs,stdio:["pipe","pipe","pipe"],windowsHide:!0,...t.input!==void 0?{input:t.input}:{}};return zw(e,r,n)}function Zw(e=process.platform){return e==="darwin"?"macos":e==="linux"?"libsecret":e==="win32"?"windows":null}function Ca(e,r){let t=JSON.stringify(at),n=JSON.stringify(r),o="[void][Windows.Security.Credentials.PasswordVault,Windows.Security.Credentials,ContentType=WindowsRuntime]; $v = New-Object Windows.Security.Credentials.PasswordVault;";return e==="get"?`${o} try { $c = $v.Retrieve(${t}, ${n}); $c.RetrievePassword(); [Console]::Out.Write($c.Password) } catch { exit 3 }`:e==="set"?`${o} $s = [Console]::In.ReadToEnd().TrimEnd("\`r","\`n"); try { $old = $v.Retrieve(${t}, ${n}); $v.Remove($old) } catch {}; $v.Add((New-Object Windows.Security.Credentials.PasswordCredential(${t}, ${n}, $s)))`:`${o} try { $old = $v.Retrieve(${t}, ${n}); $v.Remove($old) } catch {}`}function Mp(e={}){if(Aa(e.env??process.env)==="file")return null;let t=Zw(e.platform??process.platform);return t?new Pa(t,e.exec):null}var at,Xw,Sr,Pa,Dp=I(()=>{"use strict";at="kynver",Xw="KYNVER_CREDENTIAL_STORE";Sr=5e3;Pa=class{constructor(r,t=Qw){this.backend=r;this.exec=t}backend;exec;get(r){try{if(this.backend==="macos"){let s=this.exec("security",["find-generic-password","-s",at,"-a",r,"-w"],{timeoutMs:Sr}).replace(/\r?\n$/,"");return s||null}if(this.backend==="libsecret"){let s=this.exec("secret-tool",["lookup","service",at,"account",r],{timeoutMs:Sr}).replace(/\r?\n$/,"");return s||null}let n=this.exec("powershell.exe",["-NoProfile","-NonInteractive","-Command",Ca("get",r)],{timeoutMs:Sr}).replace(/\r?\n$/,"");return n||null}catch{return null}}set(r,t){if(!t||/[\r\n]/.test(t))return!1;try{this.backend==="macos"?this.exec("security",["add-generic-password","-U","-s",at,"-a",r,"-l",`Kynver (${r})`,"-w",t],{timeoutMs:Sr}):this.backend==="libsecret"?this.exec("secret-tool",["store",`--label=Kynver (${r})`,"service",at,"account",r],{input:`${t}
+`,timeoutMs:Sr}):this.exec("powershell.exe",["-NoProfile","-NonInteractive","-Command",Ca("set",r)],{input:`${t}
+`,timeoutMs:Sr})}catch{return!1}return this.get(r)===t}delete(r){try{this.backend==="macos"?this.exec("security",["delete-generic-password","-s",at,"-a",r],{timeoutMs:Sr}):this.backend==="libsecret"?this.exec("secret-tool",["clear","service",at,"account",r],{timeoutMs:Sr}):this.exec("powershell.exe",["-NoProfile","-NonInteractive","-Command",Ca("delete",r)],{timeoutMs:Sr})}catch{}}}});function Na(){return Ia||(Ia=new Oa),Ia}var Ta,ex,ys,Oa,Ia,Wp=I(()=>{"use strict";Dp();Ta="api-key",ex=6e4,ys=class extends Error{constructor(r){super(`KYNVER_CREDENTIAL_STORE=keychain but the OS keychain could not store "${r}"; refusing to write the secret to disk`),this.name="KeychainUnavailableError"}},Oa=class{cache=new Map;keychain;env;now;constructor(r={}){this.env=r.env??process.env,this.keychain=r.keychain===void 0?Mp({env:this.env}):r.keychain,this.now=r.now??Date.now}get available(){return this.keychain!==null}get backend(){return this.keychain?.backend??null}read(r){if(!this.keychain)return null;let t=this.cache.get(r);if(t&&this.now()-t.at<ex)return t.value;let n=this.keychain.get(r);return this.cache.set(r,{value:n,at:this.now()}),n}write(r,t){let n=Aa(this.env);if(!this.keychain){if(n==="keychain")throw new ys(r);return!1}let o=this.keychain.set(r,t);if(o)this.cache.set(r,{value:t,at:this.now()});else if(this.cache.delete(r),n==="keychain")throw new ys(r);return o}remove(r){this.cache.delete(r),this.keychain?.delete(r)}invalidate(r){r?this.cache.delete(r):this.cache.clear()}},Ia=null});import{existsSync as Up,mkdirSync as tx,readFileSync as Bp,writeFileSync as nx}from"node:fs";import{homedir as ox,totalmem as CU}from"node:os";import Wa from"node:path";function sx(e){return{...e,...e.harnessRoot?.trim()?{harnessRoot:Ye(e.harnessRoot.trim())}:{},...e.defaultRepo?.trim()?{defaultRepo:Ye(e.defaultRepo.trim())}:{}}}function F(){if(!Up(Lp))return{};try{return sx(JSON.parse(Bp(Lp,"utf8")))}catch{return{}}}function Rs(){if(wa(),!Up(Ma))return{};try{return JSON.parse(Bp(Ma,"utf8"))}catch{return{}}}function Da(e){wa(),tx(La,{recursive:!0}),nx(Ma,`${JSON.stringify(e,null,2)}
+`,{mode:384})}function ix(e,r,t,n={}){let o=Rs();if(Na().write(e,t)){let i={...o,...n};delete i[r],i.store="keychain",i.keychainAccounts=Array.from(new Set([...o.keychainAccounts??[],e])).sort(),Da(i);return}Da({...o,...n,[r]:t})}function ax(e,r){let t=Na().read(e);return t||Rs()[r]}function Ua(){return vp(lx)}function wr(){return Ua().getApiKey()}function Ht(e){return Ua().getRunnerToken(e)}function Ba(e,r){Ua().persistRunnerToken(e,r)}function Q(e){let r=Ln(e);return r||Hp("requires --base-url, KYNVER_API_URL, KYNVER_CRON_FIRE_BASE_URL, or ~/.kynver/config.json apiBaseUrl"),r}function Fa(e){return Ln(e)}function Ln(e){let r=e||process.env.KYNVER_API_URL||process.env.KYNVER_CRON_FIRE_BASE_URL||process.env.OPENCLAW_CRON_FIRE_BASE_URL||F().apiBaseUrl;return vn(r)}function cx(e,r){let t=e||Ht(r)||(r?void 0:Ht(F().agentOsId));if(t)return String(t);let n=ze("KYNVER_RUNTIME_SECRET")||ze("KYNVER_CRON_SECRET")||ze("OPENCLAW_CRON_SECRET");if(n)return console.warn("[kynver] using deployment-level callback secret; run `kynver runner credential --agent-os-id <id>` for a scoped token"),String(n)}async function ux(e,r,t){let n=cx(e,r);if(n)return{ok:!0,secret:n};let o=wr(),s=Ln(t?.baseUrl);if(o&&r&&s)try{let i=await Ka(r,{baseUrl:s,apiKey:o});return Ba(r,i),{ok:!0,secret:i}}catch(i){return{ok:!1,reason:`runner credential mint failed: ${i.message}`}}return{ok:!1,reason:"no runner credential: requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, or KYNVER_API_KEY + API base URL to mint one"}}async function ee(e,r,t){let n=await ux(e,r,t);if(n.ok)return n.secret;Hp(n.reason)}async function Fp(e,r){let t=wr(),n=Ln(r?.baseUrl);if(!t||!e||!n)return null;try{let o=await Ka(e,{baseUrl:n,apiKey:t});return Ba(e,o),o}catch{return null}}async function Kp(e,r,t){let n=wr(),o=Ln(t?.baseUrl);if(!n)return{ok:!1,reason:"KYNVER_API_KEY is required to refresh a rejected runner token"};if(!r)return{ok:!1,reason:"agentOsId is required to refresh a rejected runner token"};if(!o)return{ok:!1,reason:"KYNVER_API_URL or --base-url is required to refresh a rejected runner token"};try{let s=await Ka(r,{baseUrl:o,apiKey:n});return s&&s!==e?(Ba(r,s),{ok:!0,token:s}):{ok:!1,reason:"runner credential refresh returned the rejected token"}}catch(s){return{ok:!1,reason:s.message}}}async function Ka(e,r){let t=r?.apiKey||wr();if(!t)throw new Error("API key required \u2014 run `kynver login` first");let o=`${Q(r?.baseUrl)}/api/agent-os/by-id/${encodeURIComponent(e)}/runner-credentials`,s=await bn(o,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify(r?.enableMcpUpdates?{enableMcpUpdates:!0}:{})}),i=await s.text(),a=null;try{a=JSON.parse(i)}catch{a=null}if(!s.ok||!a?.token)throw new Error(`runner credential mint failed (${s.status}): ${a?.error??i.slice(0,200)}`);return a.token}function Hp(e){console.error(e),process.exit(1)}var La,Lp,Ma,$U,jU,lx,H=I(()=>{"use strict";Rn();Fr();Sn();Me();Fo();as();xn();ls();Ip();ks();Wn();Np();Dn();Wp();La=Wa.join(ox(),".kynver"),Lp=Wa.join(La,"config.json"),Ma=Wa.join(La,"credentials");$U=500*1024*1024,jU=4*1024*1024*1024;lx={kind:"file",getApiKey(){return process.env.KYNVER_API_KEY?process.env.KYNVER_API_KEY:ax(Ta,"apiKey")},getRunnerToken(e){let r=Rs();if(!!r.runnerToken&&!!e&&r.runnerTokenAgentOsId===e)return r.runnerToken;let n=process.env.KYNVER_RUNNER_TOKEN?.trim();if(n)return n;if(r.runnerToken&&!(e&&r.runnerTokenAgentOsId&&r.runnerTokenAgentOsId!==e))return r.runnerToken},persistApiKey(e){ix(Ta,"apiKey",e)},persistRunnerToken(e,r){Da({...Rs(),runnerToken:r,runnerTokenAgentOsId:e})}}});import Ha from"node:path";function ge(e){return fs(e)}function De(){let e=process.env.KYNVER_HARNESS_ROOT||process.env.OPUS_HARNESS_ROOT;if(e)return ge(e);let r=F(),t=r.harnessRoot?.trim();if(t)return ge(t);let n=Kt(r,process.env);return n.identity?n.identity.harnessRoot:gs({boxKind:"forge",configuredHarnessRoot:null}).harnessRoot}function Pe(e){return Ha.join(ge(e),"runs")}function $t(e){return Ha.join(ge(e),"worktrees")}function $p(){let e=De();return{harnessRoot:e,runsDir:Pe(e),worktreesDir:$t(e)}}function xr(e,r){return Ha.join(e,x(r))}var Xe=I(()=>{"use strict";H();Ea();Wn();O()});import{existsSync as vs,readdirSync as dx,statSync as px}from"node:fs";import lt from"node:path";function le(){return $p()}function q(e){let{runsDir:r}=le(),t=lt.join(xr(r,x(e)),"run.json");return vs(t)||Ge(`run '${e}' not found`),A(t)}function Je(){let{runsDir:e}=le();return jp(e)}function bs(e){return jp(Pe(e))}function mx(e){try{return px(e).isDirectory()}catch{return!1}}function jp(e){if(!vs(e))return[];let r=[];for(let t of dx(e,{withFileTypes:!0})){if(t.name==="runs")continue;let n=lt.join(e,t.name);if(!mx(n))continue;let o=A(lt.join(n,"run.json"),void 0);o?.id&&r.push(o)}return r}function jt(e,r){let{runsDir:t}=le(),n=lt.join(xr(t,x(e)),"run.json"),o=lt.join(xr(t,x(e)),"workers",x(r),"worker.json");return vs(o)||(vs(n)||Ge(`run '${e}' not found`),Ge(`worker '${r}' not found in run '${e}'`)),A(o)}function Ae(e){let{runsDir:r}=le();ue(lt.join(xr(r,e.id),"run.json"),e)}function L(e,r){let{runsDir:t}=le();ue(lt.join(xr(t,e),"workers",r.name,"worker.json"),r)}function N(e){let{harnessRoot:r}=le();return Un(r,e)}function Un(e,r){return xr(Pe(e),x(r))}var U=I(()=>{"use strict";Xe();O()});import{parentPort as Nv,workerData as hD}from"node:worker_threads";var mn=null,wu=-1,xu=0;function _u(e){mn=e}function Eu(e=Date.now()){return!mn||mn.stallCount===wu&&e-xu<9e5?null:(wu=mn.stallCount,xu=e,mn)}var Uv="embedded-1",Bv=[{slug:"ghost",displayName:"Ghost",description:"Orchestration persona.",dispatchLane:null,defaultRoleLane:"system"},{slug:"astra",displayName:"Astra",description:"Planning persona.",dispatchLane:"implementation",defaultRoleLane:"plan_author"},{slug:"rhea",displayName:"Rhea",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"mnemo",displayName:"Mnemo",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"sentinel",displayName:"Sentinel",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"deep_reviewer"},{slug:"pixel",displayName:"Pixel",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"schema",displayName:"Schema",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"atlas",displayName:"Atlas",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"runtime_verifier"},{slug:"bridge",displayName:"Bridge",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"catalyst",displayName:"Catalyst",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"lorentz",displayName:"Lorentz",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"report_reviewer"},{slug:"dalton",displayName:"Dalton",description:"Landing persona.",dispatchLane:"landing",defaultRoleLane:"implementer"}],Fv={"worker.prompt.core_rules":["Structured final result (recommended): record completion as JSON with summary, files, PR URLs, verification, risks, and blockers.","Completion handoff (required): before you stop, summarize the outcome in your last message and append a heartbeat line with phase `complete` and a structured finalResult object. Commit your work cleanly and open a GitHub PR (draft OK) for substantial changes \u2014 never leave uncommitted changes behind without reporting them.","Review-only workers must not open new implementation PRs \u2014 review the existing PR and record a verdict in the final result. Prefer `gh pr view` / `gh pr diff`; if a local checkout is needed, use a disposable ref or detached worktree, not a checked-out `pr-*` branch.","Keep verification targeted to touched paths; avoid full-monorepo verification unless explicitly requested.","Do not run `npm publish`.","If verification fails, append a heartbeat line immediately with the failing command, reason, and next action."].join(`
 `),"worker.prompt.progress.compact":"Plan progress: when planId is set, report progress with `kynver plan progress --plan <planId> --row <rowKey> --role implementer --status in_progress|running|partial|blocked`. Do not mark rows done from the worker CLI.","worker.prompt.progress.full":["Structured plan progress (required when planId is set):","- Report checkpoints with `kynver plan progress --plan <planId> --row <rowKey> --role implementer --status in_progress|running|partial|blocked`.","- When a slice is finished, emit `partial` with evidence (`--evidence pr:<url>`, `--evidence path:<file>`, or `--evidence command:<cmd>`).","- Do not propose or confirm row `done` from the worker CLI."].join(`
 `),"worker.prompt.merge_gate.compact":"Verification cost control: prefer local verification before requesting CI runs; do not push empty commits to re-trigger CI; record verification evidence on the PR.","worker.prompt.merge_gate.full":["Verification cost control:","- Prefer local verification of touched paths before requesting any CI run.","- Do not push empty commits to re-trigger CI.","- Record verification evidence on the PR before requesting review."].join(`
 `),"worker.prompt.plan_artifacts.compact":"Plan artifacts: when authoring or revising plan documents, open a GitHub PR early and iterate from that PR branch; do not leave the canonical plan only in a local worktree.","worker.prompt.plan_artifacts.full":["Plan artifacts (when authoring or revising plan documents):","- Create a feature branch and open a GitHub PR (draft OK) before substantial drafting; commit and push the plan file.","- Iterate on that PR branch and link the PR URL on the related task and progress evidence."].join(`
-`)},dv={"harness.maxTaskAttempts":4,"harness.dispatchCooldownMs":5e3,"daemon.idleIntervalMs":5*6e4,"daemon.maxIdleStreak":10},_t={version:lv,generatedAt:"1970-01-01T00:00:00.000Z",personas:cv,instructions:uv,policyThresholds:dv};var cn=_t,pv="embedded";function gu(){return cn.version}function hu(e,r){cn=e,pv=r}function un(e){let r=cn.instructions[e];if(typeof r=="string"&&r.trim())return r;let t=_t.instructions[e];return typeof t=="string"?t:""}function Ti(e,r){let t=cn.policyThresholds[e];if(typeof t=="number"&&Number.isFinite(t))return t;let n=_t.policyThresholds[e];return typeof n=="number"&&Number.isFinite(n)?n:r}function ku(e){if(!e)return null;let r=e.trim().toLowerCase();return cn.personas.find(t=>t.slug===r)??null}pn();import QR from"node:path";B();Go();O();import xw from"node:path";function _w(e){let r=Array.isArray(e.ownedPaths)?e.ownedPaths.filter(n=>typeof n=="string"):[],t=Array.isArray(e.writeSetPrefixes)?(e.writeSetPrefixes??[]).filter(n=>typeof n=="string"):[];return{...r.length?{ownedPaths:r}:{},...t.length?{writeSetPrefixes:t}:{},...e.allowConcurrentHotspot?{allowConcurrentHotspot:!0}:{}}}function fs(e){let r=ee(e),t=[];for(let n of Object.keys(r.workers||{})){let o=I(xw.join(M(r.id),"workers",x(n),"worker.json"),void 0);!o?.taskId||!Br(o)||t.push({runId:r.id,workerName:n,taskId:o.taskId,pid:o.pid,..._w(o)})}return t}K();function Mn(e){let r=String(e).trim();return r.startsWith("krc1.")?{"Content-Type":"application/json","X-Kynver-Runner-Token":r}:{"Content-Type":"application/json","X-Kynver-Cron-Secret":r,"X-OpenClaw-Cron-Secret":r,"X-Kynver-Runtime-Secret":r}}kn();K();function xp(e){if(e!==void 0&&Number.isFinite(e)&&e>0)return Math.floor(e);let r=Number(process.env.KYNVER_CALLBACK_TIMEOUT_MS);return Number.isFinite(r)&&r>0?Math.floor(r):3e4}function wp(e){return new Error(`callback timeout after ${e}ms`)}async function _p(e,r){let t=xp(r),n=new AbortController,o,s=!1;try{return await Promise.race([e(n.signal),new Promise((i,a)=>{o=setTimeout(()=>{s=!0,n.abort(),a(wp(t))},t)})])}catch(i){throw s?wp(t):i}finally{o&&clearTimeout(o)}}function Cp(e,r){let t=xp(r);return{ok:!1,status:0,response:{error:e instanceof Error?e.message:String(e),timeoutMs:t}}}async function st(e,r,t,n){try{return await _p(async o=>{let s=await hn(e,{method:"POST",headers:Mn(r),body:JSON.stringify(t),signal:o}),i=null;try{i=await s.json()}catch{i=null}return{ok:s.ok,status:s.status,response:i}},n?.timeoutMs)}catch(o){return Cp(o,n?.timeoutMs)}}async function J(e,r,t,n){let o=await st(e,r,t,{timeoutMs:n.timeoutMs});if(o.ok||o.status!==401)return o;let s=await Rp(r,n.agentOsId,{baseUrl:n.baseUrl});return s.ok?{...await st(e,s.token,t,{timeoutMs:n.timeoutMs}),refreshedAuth:!0}:{...o,authRefreshFailure:s.reason}}async function Ta(e,r,t){try{return await _p(async n=>{let o=await hn(e,{method:"GET",headers:Mn(r),signal:n}),s=null;try{s=await o.json()}catch{s=null}return{ok:o.ok,status:o.status,response:s}},t?.timeoutMs)}catch(n){return Cp(n,t?.timeoutMs)}}K();In();import{spawnSync as Uw}from"node:child_process";import{randomBytes as Bw}from"node:crypto";import{createPublicKey as Ow,verify as Tw}from"node:crypto";import{createHash as Cw,createPublicKey as tU,verify as nU}from"node:crypto";function Ma(e){return JSON.stringify(Na(e))}function Na(e){if(Array.isArray(e))return e.map(Na);if(e&&typeof e=="object"){let r={};for(let t of Object.keys(e).sort())r[t]=Na(e[t]);return r}return e}function Da(e){if(!e)return null;let r=e.trim();if(!r)return null;if(/^[0-9a-fA-F]{64}$/.test(r))return new Uint8Array(r.match(/.{2}/g).map(t=>parseInt(t,16)));try{let t=Buffer.from(r,"base64");if(t.length===32)return new Uint8Array(t)}catch{}return null}function Ep(e=process.env){if(e.NODE_ENV==="production")return!1;let r=e.KYNVER_ALLOW_DEV_SIGNING_KEYS?.trim().toLowerCase();return r==="1"||r==="true"||r==="yes"||r==="on"?!0:e.NODE_ENV==="test"||e.VITEST==="true"}var sU=Buffer.from("302a300506032b6570032100","hex"),Pp="ca-6297fb8e1773",Ew={[Pp]:"16ae5cb2a61f8c94cf1b86e8258f9c2f2ff6aba5e6136250a422209b6e866881","ca-456fd128f3b3":"f29cbd559410c2578d7f9732ccd86570073355ccdb36af0d1b7dff15908466e7"};function Pw(e){return`ca-${Cw("sha256").update(Buffer.from(e)).digest("hex").slice(0,12)}`}function Ap(e,r=process.env){let t=Da(r.KYNVER_COMMAND_AUTH_PUBLIC_KEY);if(t)return Pw(t)!==e?null:t;let n=Ew[e];return!n||e===Pp&&!Ep(r)?null:Da(n)}var Aw=/\[execution-mode:\s*(write|read[_-]?only)\s*\]/gi,Iw=/<!--\s*harness-contract:\s*(\{[\s\S]*?\})\s*-->/gi;function gs(e){let r=typeof e.description=="string"?e.description:"",t=typeof e.executorRef=="string"?e.executorRef:"",o=[...r.matchAll(Aw)].at(-1)?.[1]?.toLowerCase();if(o)return o==="write"?"write":"read_only";if(/(?:^|:)read[_-]?only(?:$|:)/i.test(t))return"read_only";for(let s of r.matchAll(Iw))try{let i=JSON.parse(s[1]);if(i.readOnly===!0||i.executionMode==="read_only")return"read_only"}catch{}return"write"}var Nw=120,Ip=["write","read_only","land_pr","verify_live"],Mw=["agentOsId","attempt","exp","kind","leaseOwner","leaseToken","operationClass","repoIdentity","requestNonce","taskId","tenantId","v"];var Dw=/^[a-z0-9.-]+(?::\d+)?(?:\/[A-Za-z0-9._~-]+){2,}$/;function Op(e){let r=e.trim();if(!r||r.includes("\0")||/\s/.test(r))return null;let t,n,o=/^(?:[^@/:]+@)?([^/:]+):(?!\/\/)(.+)$/.exec(r);if(/^[a-z][a-z0-9+.-]*:\/\//i.test(r)){let a;try{a=new URL(r)}catch{return null}if(!["https:","http:","ssh:","git:","git+ssh:","ssh+git:"].includes(a.protocol))return null;t=a.port?`${a.hostname}:${a.port}`:a.hostname,n=decodeURIComponent(a.pathname)}else if(o&&!/^[A-Za-z]$/.test(o[1]))t=o[1],n=o[2];else return null;t=t.toLowerCase().replace(/\.$/,"");let s=n.replace(/\/+$/,"").replace(/\.git$/i,"").split("/").filter(Boolean);if(s.length<2||s.some(a=>a==="."||a===".."))return null;let i=`${t}/${s.join("/")}`;return Dw.test(i)&&i.length<=512?i:null}function Tp(e){let r=e.task??{};return e.landPrDispatch===!0||r.executor==="land_pr"?"land_pr":r.executor==="verify_live"?"verify_live":gs(r)==="read_only"?"read_only":"write"}function Ww(e){if(!e||typeof e!="object"||Array.isArray(e))return!1;let r=e;if(Object.keys(r).sort().join(",")!=="payload,publicKeyId,signature"||typeof r.signature!="string"||!r.signature||typeof r.publicKeyId!="string"||!r.publicKeyId)return!1;let t=r.payload;if(!t||typeof t!="object"||Array.isArray(t)||Object.keys(t).sort().join(",")!==[...Mw].join(",")||t.v!==1||t.kind!=="dispatch_claim")return!1;for(let n of["tenantId","agentOsId","taskId","leaseOwner","leaseToken","repoIdentity","requestNonce"])if(typeof t[n]!="string"||!t[n])return!1;return!(typeof t.attempt!="number"||!Number.isInteger(t.attempt)||t.attempt<0||typeof t.exp!="number"||!Number.isFinite(t.exp)||!Ip.includes(t.operationClass))}var Lw=Buffer.from("302a300506032b6570032100","hex");function Np(e,r,t=process.env,n=Math.floor(Date.now()/1e3)){if(!Ww(e))return{ok:!1,code:"malformed",reason:"malformed dispatch claim authorization"};let o=e.payload;for(let a of Object.keys(r))if(o[a]!==r[a])return{ok:!1,code:"binding_mismatch",reason:`${a} mismatch`};if(o.exp<=n)return{ok:!1,code:"expired",reason:"authorization expired"};if(o.exp>n+Nw+60)return{ok:!1,code:"malformed",reason:"authorization lifetime exceeds the allowed window"};let s=Ap(e.publicKeyId,t);if(!s)return{ok:!1,code:"unknown_key",reason:`no verification key for publicKeyId "${e.publicKeyId}"`};let i=Buffer.from(e.signature,"base64url");if(i.length!==64)return{ok:!1,code:"bad_signature",reason:"not a 64-byte Ed25519 signature"};try{let a=Ow({key:Buffer.concat([Lw,Buffer.from(s)]),format:"der",type:"spki"});return Tw(null,Buffer.from(Ma(o),"utf8"),a,i)?{ok:!0,payload:o}:{ok:!1,code:"bad_signature",reason:"Ed25519 signature mismatch"}}catch(a){return{ok:!1,code:"bad_signature",reason:`signature verification failed: ${a.message}`}}}O();var Wa=class{constructor(r=4096){this.capacity=r}capacity;order=[];keys=new Set;consume(r){if(this.keys.has(r))return!1;for(this.keys.add(r),this.order.push(r);this.order.length>this.capacity;)this.keys.delete(this.order.shift());return!0}};function Fw(e){let r=(c,u)=>({allow:!1,code:c,reason:u}),{policy:t,identity:n}=e;if(!n)return r("no_identity","the desktop runtime has not been prepared");if(!t)return r("no_policy","no approved execution policy on this computer");if(t.accountId!==n.accountId||t.agentOsId!==n.agentOsId)return r("policy_mismatch","the approved policy is for another account or workspace");if(!e.repoIdentity)return r("repo_identity_unavailable","the repository has no canonical remote identity");if(t.repoIdentity!==e.repoIdentity)return r("policy_mismatch","the approved policy is for another repository");let o=e.decision.claimAuthorization;if(o==null||!e.requestNonce)return r("missing_authorization","the claim carries no server authorization; the Kynver server must sign Desktop claims (KYNVER_COMMAND_AUTH_KEY, dispatch-claim-authorization diagnostic) and this runtime must be 0.2.87 or newer");let s=e.decision.task??{},i=Tp(e.decision),a=Np(o,{tenantId:n.accountId,agentOsId:n.agentOsId,taskId:typeof s.id=="string"?s.id:"",attempt:typeof s.attempt=="number"?s.attempt:-1,leaseOwner:e.leaseOwner,leaseToken:typeof s.leaseToken=="string"?s.leaseToken:"",operationClass:i,repoIdentity:e.repoIdentity,requestNonce:e.requestNonce},e.env??process.env,e.nowSec);if(!a.ok)return r(a.code,a.reason);let l=a.payload;return e.consumed.consume(`${l.taskId}\0${l.leaseToken}\0${l.requestNonce}`)?t.approvedOperationClasses.includes(i)?{allow:!0,operationClass:i}:{allow:!1,code:"operation_not_approved",reason:`${i} work in ${t.repoIdentity} has not been approved on this computer`,consentRequired:{repoIdentity:t.repoIdentity,operationClass:i}}:r("replayed","this claim authorization was already used")}var Kw=null,Hw=null,$w=new Wa,jw=new Set;function Mp(){return ns()}function Dp(e){return{v:1,repoIdentity:e,requestNonce:Bw(16).toString("base64url")}}function Wp(e){let r=Uw("git",["-C",e,"remote","get-url","origin"],ae({encoding:"utf8",timeout:1e4}));return r.status!==0||typeof r.stdout!="string"?null:Op(r.stdout.trim())}function Lp(e){let r=Fw({...e,policy:Kw,identity:Hw,consumed:$w});if(!r.allow){let t=e.decision.task??{},n={taskId:typeof t.id=="string"?t.id:"",code:r.code,reason:r.reason,...r.consentRequired?{consentRequired:r.consentRequired}:{}};for(let o of jw)try{o(n)}catch{}}return r}function Up(){let e=Number(process.env.KYNVER_DISPATCH_CALLBACK_TIMEOUT_MS);return Number.isFinite(e)&&e>0?Math.floor(e):3e5}function Dn(e){console.error(JSON.stringify({event:"dispatch_progress",ts:new Date().toISOString(),...e}))}function Bp(e){if(!e||typeof e!="object")return!1;let r=e;if(r.timeout===!0||r.timeoutMs!==void 0)return!0;let t=r.error;if(typeof t!="string"||!t.trim())return!1;let n=t.toLowerCase();return n.includes("abort")||n.includes("timeout")}function La(e){if(!e||typeof e!="object")return!1;let r=e;return r.timeout===!0?!0:(typeof r.error=="string"?r.error.toLowerCase():"").includes("timeout")}var Vw=["implementation","review","landing"],Gw=["plan_author","implementer","report_reviewer","deep_reviewer","runtime_verifier","system"];function Yw(e){return Vw.includes(e)}function qw(e){return Gw.includes(e)}function Fp(e){return{slug:e.slug,displayName:e.displayName,description:e.description,dispatchLane:e.dispatchLane===null||Yw(e.dispatchLane)?e.dispatchLane:null,defaultRoleLane:qw(e.defaultRoleLane)?e.defaultRoleLane:"implementer"}}var Kp=_t.personas.map(Fp),Jw=new Map(Kp.map(e=>[e.slug,e]));function zw(e){if(!e)return null;let r=e.trim().toLowerCase(),t=Jw.get(r)??null,n=ku(r);if(!n)return t;let o=Fp(n);return t?{...o,dispatchLane:t.dispatchLane,defaultRoleLane:t.defaultRoleLane}:o}function Ua(e){return zw(e)?.defaultRoleLane??null}function Hp(){return Kp.filter(e=>e.dispatchLane==="review").map(e=>e.slug)}function $p(e){return(e??"").trim().toLowerCase()}function Xw(e){switch($p(e)){case"implementer":case"repair_implementer":case"plan_author":case"runtime_verifier":return"implementation";case"plan_reviewer":case"report_reviewer":case"deep_reviewer":return"review";default:return null}}function Qw(e){let r=$p(e);if(!r)return;if(r==="implementation"||r==="review"||r==="landing"||r==="any")return r;let t=Xw(r);if(t)return t;if(r==="implement"||r==="repair"||r==="coding")return"implementation";if(r==="land"||r==="merge")return"landing"}function jp(e){return Qw(e)??"any"}Rn();K();Oe();function Zw(e=process.env){let r=U();return hr(r,e)!=="forge"}function hs(e,r=process.env){if(Zw(r))return e?.maxConcurrentWorkers??void 0}async function ks(e,r){let t=X(r.baseUrl?String(r.baseUrl):void 0),n=await re(r.secret?String(r.secret):void 0,e,{baseUrl:t}),o=`${t}/api/agent-os/by-id/${encodeURIComponent(e)}/runtime`;try{let s=await Ta(o,n);if(!s.ok)return null;let a=s.response?.preferences?.maxConcurrentWorkers;if(a==null)return{maxConcurrentWorkers:null};let l=Number(a);return!Number.isFinite(l)||l<=0?{maxConcurrentWorkers:null}:{maxConcurrentWorkers:Math.floor(l)}}catch{return null}}Wt();var ex={fetchPreferences:ks,configuredOverride:hs,observe:Pn};async function Vp(e,r=ex){let t=await r.fetchPreferences(e.agentOsId,e.args),n=r.configuredOverride(t,e.env);return r.observe({runId:e.runId,configuredMaxWorkersOverride:n})}Wt();B();B();function ys(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Ba(e){return e.toLowerCase()}function rx(e){let r=ys(e,"roleLane");if(r)return r;let t=Ba(ys(e,"executorRef")),n=Ba(ys(e,"title")),o=Ba(ys(e,"personaSlug")),s=`${t} ${n}`;if(s.includes("deep review")||s.includes("security review")||t.includes("deep-reviewer"))return"deep_reviewer";if(s.includes("plan author")||s.includes("plan-author")||n.includes("strategy plan"))return"plan_author";if(s.includes("plan review")||t.includes("plan-reviewer"))return"plan_reviewer";if(s.includes("report review")||s.includes("completion report"))return"report_reviewer";if(s.includes("repair")||n.startsWith("fix ")||t.includes("repair"))return"repair_implementer";if(t.includes("cursor")||t.includes("codex")||t.includes("composer")||n.includes("implement")||n.includes("land:"))return"implementer";let i=Ua(o);if(i)return o==="lorentz"&&(s.includes("deep")||s.includes("security"))?"deep_reviewer":i;if(s.includes("review"))return"report_reviewer"}function Gp(e){let r=rx(e);return r?{...e,roleLane:r}:e}K();var tx=/^claude[-_]/i,nx=/^(?:opus|sonnet|haiku)\b/i;function Yp(e){let r=e.trim();return tx.test(r)||nx.test(r)}function qp(e){let r=e.trim().toLowerCase();return r.startsWith("gpt-")||r.startsWith("gpt5")||r.includes("codex")}function Fa(e){let r=e.trim().toLowerCase();return r.includes("composer")||r.includes("cursor")}function Jp(e){return e.trim().toLowerCase().startsWith("gemini-")}function ox(e){return qp(e)?"codex":Yp(e)?"claude":Jp(e)?"gemini":(Fa(e),"cursor")}function sx(e){if(!e.startsWith("provider:"))return null;let r=e.slice(9),t=r.indexOf(":"),n=(t>=0?r.slice(0,t):r).trim().toLowerCase(),o=t>=0&&r.slice(t+1).trim()||void 0;return n?n==="claude"||n==="opus"||n==="anthropic"?{provider:"claude",model:o,rule:o?"executor_ref:provider_claude_model":"executor_ref:provider_claude"}:n==="codex"?{provider:"codex",model:o,rule:"executor_ref:provider_codex"}:n==="openai-compatible"||n==="openai"||n==="openai_compatible"?{provider:"openai-compatible",model:o,rule:"executor_ref:provider_openai_compatible"}:n==="chatgpt"||n==="gpt"?{provider:"codex",model:o,rule:"executor_ref:provider_codex"}:n==="openai-api"||n==="openai_api"?{provider:"openai-compatible",model:o,rule:"executor_ref:provider_openai_compatible"}:n==="cursor"||n==="composer"?{provider:"cursor",model:o,rule:"executor_ref:provider_cursor"}:n==="gemini-api"||n==="gemini_api"||n==="google-api"?{provider:"gemini-api",model:o,rule:"executor_ref:provider_gemini_api"}:n==="gemini"||n==="google"||n==="gemini_cli"?{provider:"gemini",model:o,rule:o?"executor_ref:provider_gemini_model":"executor_ref:provider_gemini"}:null:null}function ix(e){if(!e.startsWith("harness-lane:"))return null;let r=e.split(":").map(o=>o.trim()).filter(Boolean);if(r.length<2)return null;let t=r[1],n=r.slice(2).join(":");return n?Yp(n)||qp(n)||Fa(n)||Jp(n)?{lane:t,model:n,provider:ox(n),rule:"executor_ref:harness_lane_model"}:{lane:t,rule:"executor_ref:harness_lane"}:{lane:t,rule:"executor_ref:harness_lane"}}function Ne(e){let r=typeof e=="string"?e.trim():"";return r?sx(r)??ix(r):null}function zp(e){let r=Ne(e);return r?!!(r.provider&&r.provider!=="cursor"||r.model&&!Fa(r.model)):!1}ls();ls();var wr="cursor",ax=new Set(["claude","opus","anthropic"]),lx=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function Wn(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Sr(e){if(!e?.trim())return!1;let r=e.trim().toLowerCase();return ax.has(r)?!0:r.includes("claude")||r.includes("opus")}function Rs(e){if(!e)return!1;let r=e.workerProviderOverride;if(typeof r=="string"&&Sr(r))return!0;let t=Wn(e,"executorRef").toLowerCase();if(t==="provider:claude"||t.startsWith("provider:claude:")||t.includes("claude-worker-override")||t.includes("operator-claude"))return!0;let n=Ne(Wn(e,"executorRef"));if(n?.provider&&Sr(n.provider)||n?.model&&Sr(cx(n.model)))return!0;let o=Wn(e,"description");if(lx.some(i=>i.test(o)))return!0;let s=Wn(e,"title");return!!/\[use-claude-worker\]/i.test(s)}function cx(e){let r=e.trim().toLowerCase();return/^claude[-_]/.test(r)||/^(?:opus|sonnet|haiku)\b/.test(r)?"claude":r}function ux(e,r){return{provider:wr,model:vs,rule:`policy:cursor_default${r}`,requestedModel:e}}var dx=["explicit:","executor_ref:","factory:","task:"];function px(e){return dx.some(r=>e.startsWith(r))}function Ka(e){if(!e)return!1;let r=e.workerProviderOverride;return typeof r=="string"&&r.trim()||Ne(Wn(e,"executorRef"))?.provider?!0:Rs(e)}function Xp(e){let{routing:r,task:t}=e,n=e.explicitProvider?.trim().toLowerCase();if(e.explicitProviderIsOperatorOverride&&Sr(n))return{...r,provider:"claude",rule:r.rule.startsWith("explicit:")?r.rule:"explicit:operator_provider"};if(n||px(r.rule)||Ka(t)||!Sr(r.provider))return r;let o=r.rule&&r.rule!=="default:global"?`:${r.rule.replace(/:/g,"_")}`:"";return ux(r.model,o)}function Qp(e,r=wr){let t=e?.trim();return t?nr(t):r}var Zp={codex:{id:"codex",displayName:"Codex (BYO OAuth / Hermes openai-codex)",costTier:"low",authSources:["oauth_local","api_key_env","subscription_hermes"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!1,workerMcpTools:"supported"},cursor:{id:"cursor",displayName:"Cursor / Composer",costTier:"medium",authSources:["oauth_local","api_key_env"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0,workerMcpTools:"supported"},claude:{id:"claude",displayName:"Claude Code",costTier:"high",authSources:["oauth_local"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0,workerMcpTools:"supported"}};function Ft(e){return Zp[e]}function em(){return Object.values(Zp)}import{existsSync as wx}from"node:fs";import{homedir as xx}from"node:os";import Un from"node:path";import{createHash as om}from"node:crypto";import{statSync as Sx}from"node:fs";import{spawnSync as sm}from"node:child_process";import{existsSync as nm,readFileSync as mx}from"node:fs";import it from"node:path";var Ln=class extends Error{constructor(t){super(`${t} is a batch file that is not a Node CLI shim; it cannot be spawned without a shell. Point the matching KYNVER_*_BIN setting at the real .exe or the CLI's JS entry, or run the daemon inside WSL.`);this.shimPath=t;this.name="UnresolvableWindowsShimError"}shimPath},fx=".COM;.EXE;.BAT;.CMD";function gx(e){return e.includes("/")||e.includes("\\")}function hx(e){return(e.PATHEXT||fx).split(";").map(r=>r.trim().toLowerCase()).filter(r=>r.startsWith("."))}function kx(e){let r=Object.keys(e).find(t=>t.toUpperCase()==="PATH");return r?e[r]??"":""}function yx(e,r={}){let t=r.env??process.env,n=r.exists??nm,o=hx(t),s=it.win32.extname(e)!=="",i=a=>s?[a]:o.map(l=>`${a}${l}`);if(gx(e)||it.win32.isAbsolute(e))return i(e).find(a=>n(a))??null;for(let a of kx(t).split(";").map(l=>l.trim()).filter(Boolean)){let l=i(it.win32.join(a,e)).find(c=>n(c));if(l)return l}return null}var rm=/%~?dp0%?\\?([^"%\r\n]+?\.(?:c|m)?js)\b/i,Rx=/^\s*SET\s+"?([A-Za-z_]\w*)=([^"\r\n]*)"?\s*$/i;function tm(e){return e.replace(/^[\\/]+/,"")}function vx(e){let r=e.split(/\r?\n/),t=new Map;for(let s of r){let i=Rx.exec(s);i&&t.set(i[1].toUpperCase(),i[2])}let n=r.filter(s=>s.includes("%*")).pop();if(!n)return null;let o=rm.exec(n);if(o)return tm(o[1]);for(let s of n.matchAll(/%([A-Za-z_]\w*)%/g)){let i=t.get(s[1].toUpperCase()),a=i?rm.exec(i):null;if(a)return tm(a[1])}return null}function bx(e,r={}){if((r.platform??process.platform)!=="win32")return{executable:e,prefixArgs:[],kind:"passthrough"};let n=yx(e,r);if(!n)return{executable:e,prefixArgs:[],kind:"passthrough"};let o=it.win32.extname(n).toLowerCase();if(o!==".cmd"&&o!==".bat")return{executable:n,prefixArgs:[],kind:"exe"};let s=r.readText??(m=>mx(m,"utf8")),i=r.exists??nm,a;try{a=s(n)}catch{throw new Ln(n)}let l=vx(a);if(!l)throw new Ln(n);let c=it.win32.dirname(n),u=it.win32.join(c,l);if(!i(u))throw new Ln(n);let d=it.win32.join(c,"node.exe");return{executable:i(d)?d:r.nodeExecutable??process.execPath,prefixArgs:[u],kind:"node-shim"}}function ve(e,r,t={}){let n=bx(e,t);return[n.executable,[...n.prefixArgs,...r]]}function or(e){try{let r=Sx(e),t=`${e}|${r.size}|${r.mtimeMs}`;return om("sha256").update(t).digest("hex").slice(0,16)}catch{return}}function Kt(e){return om("sha256").update(`env:${e}`).digest("hex").slice(0,16)}function Me(e,r){for(let t of r){let n=process.env[t]?.trim();if(n)return n}return e}function Je(e,r,t={}){let n=t.timeoutMs??8e3;try{let[o,s]=ve(e,r),i=sm(o,s,{windowsHide:!0,encoding:"utf8",timeout:n,env:{...process.env,...t.env,CI:"1",NO_COLOR:"1"}});if(i.status===0)return{ok:!0,note:t.okNote??`${e} ${r.join(" ")}: ok`};let a=(i.stderr||i.stdout||"").trim(),l=t.failPrefix??`${e} ${r.join(" ")} failed`;return{ok:!1,note:a?`${l}: ${a.slice(0,200)}`:l}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} probe failed`}}}function bs(e,r,t={}){let n=t.timeoutMs??8e3;try{let[o,s]=ve(e,r);return sm(o,s,{windowsHide:!0,stdio:"ignore",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}}).status===0?{ok:!0,note:t.okNote??`${e} authenticated`}:{ok:!1,note:t.failNote??`${e} not authenticated`}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} auth probe failed`}}}var _x="codex";function Cx(){let e=xx();return[process.env.CODEX_HOME?.trim()?Un.join(Un.resolve(process.env.CODEX_HOME.trim()),"auth.json"):null,Un.join(e,".codex","auth.json"),Un.join(e,".config","codex","auth.json")].filter(t=>!!t)}function Ex(e){return Un.dirname(e)}function Px(e){let r,t;for(let n of Cx()){if(!wx(n))continue;r??=n;let o=Je(e,["login","status"],{okNote:"codex login status: authenticated",failPrefix:"codex login status",env:{CODEX_HOME:Ex(n)}});if(t??=o,o.ok)return{authPath:n,login:o}}return{authPath:r,login:t??Je(e,["login","status"],{okNote:"codex login status: authenticated",failPrefix:"codex login status"})}}function im(e=new Date().toISOString()){let r=Me(_x,["KYNVER_CODEX_BIN","CODEX_BIN"]);if(process.env.CODEX_API_KEY?.trim())return{providerId:"codex",ready:!0,authSource:"api_key_env",sessionFingerprint:Kt("CODEX_API_KEY"),checkedAt:e,note:"CODEX_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let{authPath:t,login:n}=Px(r),o=!!t&&n.ok;return{providerId:"codex",ready:o,authSource:"oauth_local",sessionFingerprint:t?or(t):void 0,checkedAt:e,note:o?"Local Codex OAuth session bound on runner":[n.note,t?void 0:"no Codex auth store found"].filter(Boolean).join("; ")}}import{existsSync as Ax}from"node:fs";import{homedir as Ix}from"node:os";import Ha from"node:path";function Ox(){let e=process.env.HERMES_HOME?.trim(),r=e?Ha.resolve(e):Ha.join(Ix(),".hermes");return Ha.join(r,"auth.json")}function Ss(e=new Date().toISOString()){let r=Me("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=Je(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=Ox(),o=Ax(n),s=bs(r,["auth","status","openai-codex"],{okNote:"hermes openai-codex: logged in",failNote:"hermes openai-codex: not logged in"}),i=t.ok&&s.ok;return{path:"hermes_openai_codex",ready:i,authSource:i?"subscription_hermes":"none",sessionFingerprint:o?or(n):void 0,checkedAt:e,note:i?"Hermes openai-codex subscription session bound (ChatGPT Codex OAuth)":[t.note,s.note,o?void 0:"no ~/.hermes/auth.json"].filter(Boolean).join("; ")}}function Ht(e=new Date().toISOString()){let r=im(e);if(r.ready)return{...r,path:"codex_cli"};let t=Ss(e);return t.ready?{providerId:"codex",ready:!0,authSource:t.authSource,sessionFingerprint:t.sessionFingerprint,checkedAt:t.checkedAt,note:t.note,path:"hermes_openai_codex",hermesOpenAiCodex:t}:{providerId:"codex",ready:!1,authSource:"none",checkedAt:e,path:"none",hermesOpenAiCodex:t,note:[r.note,t.note].filter(Boolean).join("; ")||"Codex CLI and Hermes openai-codex unavailable"}}var am=["low","medium","high"],lm={oauth_local:0,subscription_hermes:0,runner_token:1,api_key_env:2,none:3};function cm(e,r){let t=Ft(e);return r==="privileged"?t.supportsPrivilegedPlatformActions:r==="low"?t.supportsLowRiskOrchestration:!0}function Tx(e,r){let t=Ft(e.providerId),n=Ft(r.providerId),o=am.indexOf(t.costTier)-am.indexOf(n.costTier);if(o!==0)return o;let s=lm[e.binding.authSource]-lm[r.binding.authSource];return s!==0?s:e.providerId.localeCompare(r.providerId)}function $a(e){let r=em().map(a=>({providerId:a.id,binding:e.inventory.bindings[a.id]})).filter(a=>a.binding.ready&&cm(a.providerId,e.riskClass));if(r.length===0)return null;let n=[...r].sort(Tx)[0],o="codex";if(n.providerId===o)return{providerId:n.providerId,binding:n.binding};let s=e.inventory.bindings[o],i;return cm(o,e.riskClass)?s.ready||(i=s.note??`${o} not bound`):i=`${e.riskClass} orchestration requires privileged-capable provider`,{providerId:n.providerId,binding:n.binding,escalatedFrom:o,escalatedReason:i}}import{existsSync as Nx}from"node:fs";import{homedir as Mx}from"node:os";import Dx from"node:path";var Wx="claude";function Lx(){let e=Mx();return[Dx.join(e,".claude",".credentials.json")]}function um(e=new Date().toISOString()){let r=Me(Wx,["KYNVER_CLAUDE_BIN","CLAUDE_BIN"]);if(process.env.ANTHROPIC_API_KEY?.trim())return{providerId:"claude",ready:!1,authSource:"api_key_env",sessionFingerprint:Kt("ANTHROPIC_API_KEY"),checkedAt:e,note:"ANTHROPIC_API_KEY present but scrubbed from worker env (deployment secret) \u2014 use `claude` CLI login (OAuth) for harness workers"};let t=Je(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=Lx().find(i=>Nx(i)),o=bs(r,["auth","status"],{okNote:"claude auth status: authenticated",failNote:"claude auth status: not authenticated"}),s=t.ok&&(o.ok||!!n);return{providerId:"claude",ready:s,authSource:"oauth_local",sessionFingerprint:n?or(n):void 0,checkedAt:e,note:s?"Local Claude Code OAuth session bound on runner":[t.note,o.note,n?void 0:"no ~/.claude/.credentials.json"].filter(Boolean).join("; ")}}import{existsSync as c_}from"node:fs";import{homedir as l_}from"node:os";import Vt from"node:path";O();import{closeSync as qa,existsSync as fm,mkdirSync as qx,openSync as Ja,statSync as Jx,unlinkSync as mm}from"node:fs";import{spawn as zx}from"node:child_process";import Xx from"node:os";import sr from"node:path";Bi();var Ux="KYNVER_NO_PROD_DB_CREDENTIALS",Bx=["KYNVER_ENV_FILE"];function De(e,r={}){let t=Ui(e);if(!r.reviewWorker)return t;let n={...t,[Ux]:"1"};for(let o of Bx)delete n[o];return n}var Fx=/-(?:thinking(?:-(?:high|medium|low|minimal|max|none))?|high|medium|low|minimal)$/i;function dm(e){return e.replace(Fx,"")}var pm=/^(?:gpt-|gpt5|o1|o3|o4|gemini-|grok-|composer|deepseek|llama|mistral|qwen|command-)/i;function ws(e){return/^claude[-_]/i.test(e)||/^(?:opus|sonnet|haiku)\b/i.test(e)}function Kx(e){let r=e.trim().toLowerCase();return r.startsWith("gemini-")||r==="auto"||r==="pro"||r==="flash"||r==="flash-lite"}var Hx=new Set(["cursor"]);function $x(e){let r=e.trim().toLowerCase();return Hx.has(r)?"auto":null}function ja(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let o=dm(t).trim()||r;return pm.test(o)||!ws(o)&&o!==r?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is not a Claude model \u2014 the "claude" provider drives the Claude CLI, which only accepts claude-* model ids (got "${o}"). Pick a Claude model or switch the worker provider.`}:o!==t?{ok:!0,model:o,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${o}" (the Claude CLI rejects reasoning-effort suffixes)`}:{ok:!0,model:o,normalized:!1}}function $t(e,r){let t=(e??"").trim();return t?ws(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "codex". Switch the provider or pick a Codex/OpenAI model.`}:{ok:!0,model:t,normalized:!1}:{ok:!0,model:r,normalized:!1}}function Va(e,r){let t=(e??"").trim();if(t)return{ok:!0,model:t,normalized:!1};let n=(r??"").trim();return n?{ok:!0,model:n,normalized:!1}:{ok:!1,model:"",normalized:!1,note:'the "openai-compatible" provider has no universal default model \u2014 pass --model (any id your endpoint serves, e.g. llama3.1, qwen2.5-coder, gpt-4o-mini) or set KYNVER_WORKER_MODEL on the daemon host.'}}function jt(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let o=dm(t).trim()||r;return ws(o)||!Kx(o)&&pm.test(o)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is not a Gemini model \u2014 the gemini / gemini-api providers drive Google Gemini (got "${o}"). Pick a gemini-* model or an alias (auto, pro, flash, flash-lite), or switch the worker provider.`}:o!==t?{ok:!0,model:o,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${o}"`}:{ok:!0,model:o,normalized:!1}}function Ga(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let n=$x(t);return n?{ok:!0,model:n,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${n}" (Cursor provider alias \u2014 use "auto" or a composer id, not "cursor")`}:ws(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "cursor". Switch the provider to "claude" or pick a Cursor model.`}:{ok:!0,model:t,normalized:!1}}import{existsSync as Bn,readdirSync as jx}from"node:fs";import at from"node:path";var Vx=/^\d{4}\.\d{1,2}\.\d{1,2}-[a-f0-9]+$/i;function Gx(e){let t=e.split("-")[0].split(".");if(t.length!==3)return null;let[n,o,s]=t;return!n||!o||!s?null:+`${n}${o.padStart(2,"0")}${s.padStart(2,"0")}`}function Yx(e){let r=at.join(e,"versions");if(!Bn(r))return null;let t=null,n=-1;for(let o of jx(r,{withFileTypes:!0})){if(!o.isDirectory()||!Vx.test(o.name))continue;let s=Gx(o.name);s==null||s<=n||(n=s,t=at.join(r,o.name))}return t}function xs(e){let r=e?.trim()||at.join(process.env.LOCALAPPDATA||"","cursor-agent"),t=at.join(r,"node.exe"),n=at.join(r,"index.js");if(Bn(t)&&Bn(n))return{nodeExe:t,indexJs:n,versionDir:r};let o=Yx(r);if(!o)return null;let s=at.join(o,"node.exe"),i=at.join(o,"index.js");return!Bn(s)||!Bn(i)?null:{nodeExe:s,indexJs:i,versionDir:o}}var Ya="composer-2.5",Qx=15e3,Zx=6e4,e_=3e4;function r_(e,r,t){return{executable:e,prefixArgs:[r],shell:!1,detached:ce(),bundledVersionDir:t}}function Xa(e){if(process.platform==="win32"){let r=/\.(cmd|bat)$/i.test(e),t=/node\.exe$/i.test(e)&&fm(sr.join(sr.dirname(e),"index.js"));if(r||t||e==="agent"){let o=r?xs(sr.dirname(e)):t?{nodeExe:e,indexJs:sr.join(sr.dirname(e),"index.js"),versionDir:sr.dirname(e)}:xs();if(o)return r_(o.nodeExe,o.indexJs,o.versionDir);throw new Error("Cursor Agent on Windows has no headless bundled node.exe under %LOCALAPPDATA%\\cursor-agent\\versions\\\u2026. Run `agent login` / update Cursor Agent CLI, use `--provider claude`, or set KYNVER_CURSOR_AGENT_ROOT to the cursor-agent folder.")}}return{executable:e,prefixArgs:[],shell:!1,detached:ce()}}function t_(e,r,t){return De({...process.env,CI:"1",NO_COLOR:"1",...r.bundledVersionDir?{CURSOR_INVOKED_AS:sr.basename(e)||"agent.cmd"}:{}},{reviewWorker:t})}function gm(e){e<=0||Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function za(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?Math.floor(n):r}function n_(){let e=process.env.KYNVER_CURSOR_START_LOCK_DIR?.trim()||sr.join(Xx.homedir(),".kynver","locks");return qx(e,{recursive:!0}),sr.join(e,"cursor-agent-start.lock")}function o_(){if(process.env.KYNVER_CURSOR_START_LOCK==="0")return()=>{};let e=n_(),r=za("KYNVER_CURSOR_START_LOCK_TIMEOUT_MS",Zx),t=za("KYNVER_CURSOR_START_LOCK_STALE_MS",e_),n=Date.now();for(;;)try{let o=Ja(e,"wx");return qa(o),()=>{try{mm(e)}catch{}}}catch(o){if(o.code!=="EEXIST")throw o;try{if(Date.now()-Jx(e).mtimeMs>t){mm(e);continue}}catch{continue}if(Date.now()-n>r)throw new Error(`timed out waiting for Cursor agent start lock: ${e}`);gm(250)}}function hm(e=process.env){let r=e.KYNVER_CURSOR_AGENT_BIN?.trim()||e.CURSOR_AGENT_BIN?.trim();if(r)return r;if(process.platform==="win32"){let t=xs(e.KYNVER_CURSOR_AGENT_ROOT?.trim()||void 0);if(t)return t.nodeExe;let n=sr.join(e.LOCALAPPDATA||"","cursor-agent","agent.cmd");if(fm(n))return n}return"agent"}function s_(){return hm(process.env)}var km={name:"cursor",defaultModel:Ya,preflightModel(e){return Ga(e,Ya)},start(e){let r=Ga(e.model,Ya);if(!r.ok)throw new Error(`cursor provider model preflight failed: ${r.note}`);let t=r.model,n=Ja(e.stdoutPath,"a"),o=Ja(e.stderrPath,"a"),s=["ignore",n,o],i=s_(),a=Xa(i),l=o_(),c;try{c=zx(a.executable,i_(e,t,a.prefixArgs),ae({cwd:e.worktreePath,detached:a.detached,shell:a.shell,stdio:s,env:t_(i,a,e.reviewWorker)})),gm(za("KYNVER_CURSOR_START_LOCK_HOLD_MS",Qx))}finally{l(),qa(n),qa(o)}if(!c.pid)throw new Error(`failed to spawn Cursor agent worker (is \`${i}\` on PATH? run \`agent login\` or set CURSOR_API_KEY)`);return c.unref(),{pid:c.pid,model:t}}};function i_(e,r,t=[]){return[...t,"-p",...e.executionMode==="read_only"?["--mode","plan"]:["--force"],...e.mcpConfigPath?["--approve-mcps"]:[],"--trust","--workspace",e.worktreePath,"--output-format","stream-json","--stream-partial-output","--model",r,e.prompt]}import{spawnSync as a_}from"node:child_process";function Qa(e,r=process.env){try{let t;try{t=Xa(e)}catch{t={executable:e,prefixArgs:[]}}let n=a_(t.executable,[...t.prefixArgs,"status","--format","json"],{encoding:"utf8",windowsHide:!0,timeout:8e3,env:{...r,CI:"1",NO_COLOR:"1"}});if(n.status!==0)return{ok:!1,note:"agent status: not authenticated"};let o=(n.stdout||"").trim();if(!o)return{ok:!1,note:"agent status: empty response"};let s;try{s=JSON.parse(o)}catch{return{ok:!1,note:"agent status: unparseable response"}}return typeof s=="object"&&s!==null&&s.isAuthenticated===!0?{ok:!0,note:"agent status: authenticated"}:{ok:!1,note:"agent status: not authenticated"}}catch(t){return{ok:!1,note:t instanceof Error?t.message:"agent status probe failed"}}}function Za(e=process.env){let r=[],t=e.KYNVER_CURSOR_AUTH_HOME?.trim();t&&(r.push(Vt.join(t,".config","cursor","auth.json")),r.push(Vt.join(t,".cursor-agent","auth.json")));let n=l_();if(r.push(Vt.join(n,".config","cursor","auth.json")),r.push(Vt.join(n,".cursor-agent","auth.json")),process.platform==="win32"){let o=e.LOCALAPPDATA?.trim(),s=e.APPDATA?.trim();o&&r.push(Vt.join(o,"cursor-agent","auth.json")),s&&r.push(Vt.join(s,"cursor","auth.json"))}return r}var u_="agent";function ym(e=new Date().toISOString()){let r=Me(u_,["KYNVER_CURSOR_AGENT_BIN","CURSOR_AGENT_BIN"]);if(process.env.CURSOR_API_KEY?.trim())return{providerId:"cursor",ready:!1,authSource:"api_key_env",sessionFingerprint:Kt("CURSOR_API_KEY"),checkedAt:e,note:"CURSOR_API_KEY present but scrubbed from worker env (deployment secret) \u2014 use `agent login` (OAuth) for harness workers"};let t=Je(r,["-v"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=Za().find(a=>c_(a)),o=Qa(r),s=!!n||o.ok,i=t.ok&&s;return{providerId:"cursor",ready:i,authSource:"oauth_local",sessionFingerprint:n?or(n):void 0,checkedAt:e,note:i?"Local Cursor/Composer OAuth session bound on runner":[t.note,s?void 0:o.note??"no ~/.config/cursor/auth.json or `agent login` session"].filter(Boolean).join("; ")}}import{existsSync as d_,readFileSync as p_}from"node:fs";import{homedir as m_}from"node:os";import el from"node:path";var f_=["OPENAI_API_KEY","ANTHROPIC_API_KEY","KYNVER_API_KEY","KYNVER_BASE_URL"];function g_(){let e=process.env.HERMES_HOME?.trim(),r=e?el.resolve(e):el.join(m_(),".hermes");return el.join(r,".env")}function h_(e){try{let r=p_(e,"utf8"),t=[];for(let n of f_)new RegExp(`^${n}=`,"m").test(r)&&t.push(n);return t}catch{return[]}}function Rm(e=new Date().toISOString()){let r=Me("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=Je(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=g_(),o=d_(n),s=o?h_(n):[],a=s.some(c=>c.endsWith("_API_KEY"))?"api_key_env":o?"oauth_local":"none",l=t.ok&&o;return{adapterId:"hermes",cliAvailable:t.ok,profileBound:o,authSource:a,sessionFingerprint:o?or(n):void 0,checkedAt:e,note:l?`Hermes profile bound (${s.length?`keys: ${s.join(", ")}`:"no API keys detected"})`:[t.note,o?void 0:"no ~/.hermes/.env"].filter(Boolean).join("; ")}}function vm(e={}){let r=e.nowIso?.()??new Date().toISOString(),t=Ht(r),n={codex:t,cursor:ym(r),claude:um(r)},o=Object.values(n).filter(s=>s.ready).length;return{generatedAt:r,bindings:n,cloudApiCredits:{anthropicApiKey:!!process.env.ANTHROPIC_API_KEY?.trim(),openaiApiKey:!!process.env.OPENAI_API_KEY?.trim(),codexApiKey:!!process.env.CODEX_API_KEY?.trim()},workerEndpoint:{baseUrlConfigured:!!process.env.KYNVER_WORKER_BASE_URL?.trim(),apiKeyConfigured:!!process.env.KYNVER_WORKER_API_KEY?.trim()},hermes:Rm(r),hermesOpenAiCodex:Ss(r),codexAdapterPath:t.path,readyCount:o}}var k_=[/\bprivileged\b/i,/\bproduction\s+db\b/i,/\bdb:push\b/i,/\bmigration\b/i,/\bdeploy\b/i,/\bsecrets?\b/i,/\bstripe\b/i,/\[require-approval\]/i,/\[operator-only\]/i],y_=[/\borchestration\b/i,/\bplan[- ]?progress\b/i,/\bstatus\s+sync\b/i,/\bheartbeat\b/i,/\bboard[- ]?drain\b/i,/\bmaintenance\b/i,/\[orchestration:\s*low-risk\]/i];function rl(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function R_(e){let r=rl(e,"executorRef").toLowerCase(),t=rl(e,"title").toLowerCase(),n=rl(e,"description").toLowerCase(),o=`${r}
+`)},Kv={"harness.maxTaskAttempts":4,"harness.dispatchCooldownMs":5e3,"daemon.idleIntervalMs":5*6e4,"daemon.maxIdleStreak":10},Pt={version:Uv,generatedAt:"1970-01-01T00:00:00.000Z",personas:Bv,instructions:Fv,policyThresholds:Kv};var fn=Pt,Hv="embedded";function Cu(){return fn.version}function Pu(e,r){fn=e,Hv=r}function gn(e){let r=fn.instructions[e];if(typeof r=="string"&&r.trim())return r;let t=Pt.instructions[e];return typeof t=="string"?t:""}function Ki(e,r){let t=fn.policyThresholds[e];if(typeof t=="number"&&Number.isFinite(t))return t;let n=Pt.policyThresholds[e];return typeof n=="number"&&Number.isFinite(n)?n:r}function Au(e){if(!e)return null;let r=e.trim().toLowerCase();return fn.personas.find(t=>t.slug===r)??null}kn();import Pv from"node:path";U();rs();O();import fx from"node:path";function gx(e){let r=Array.isArray(e.ownedPaths)?e.ownedPaths.filter(n=>typeof n=="string"):[],t=Array.isArray(e.writeSetPrefixes)?(e.writeSetPrefixes??[]).filter(n=>typeof n=="string"):[];return{...r.length?{ownedPaths:r}:{},...t.length?{writeSetPrefixes:t}:{},...e.allowConcurrentHotspot?{allowConcurrentHotspot:!0}:{}}}function Ss(e){let r=q(e),t=[];for(let n of Object.keys(r.workers||{})){let o=A(fx.join(N(r.id),"workers",x(n),"worker.json"),void 0);!o?.taskId||!$r(o)||t.push({runId:r.id,workerName:n,taskId:o.taskId,pid:o.pid,...gx(o)})}return t}H();function Bn(e){let r=String(e).trim();return r.startsWith("krc1.")?{"Content-Type":"application/json","X-Kynver-Runner-Token":r}:{"Content-Type":"application/json","X-Kynver-Cron-Secret":r,"X-OpenClaw-Cron-Secret":r,"X-Kynver-Runtime-Secret":r}}Sn();H();function Gp(e){if(e!==void 0&&Number.isFinite(e)&&e>0)return Math.floor(e);let r=Number(process.env.KYNVER_CALLBACK_TIMEOUT_MS);return Number.isFinite(r)&&r>0?Math.floor(r):3e4}function Vp(e){return new Error(`callback timeout after ${e}ms`)}async function Yp(e,r){let t=Gp(r),n=new AbortController,o,s=!1;try{return await Promise.race([e(n.signal),new Promise((i,a)=>{o=setTimeout(()=>{s=!0,n.abort(),a(Vp(t))},t)})])}catch(i){throw s?Vp(t):i}finally{o&&clearTimeout(o)}}function qp(e,r){let t=Gp(r);return{ok:!1,status:0,response:{error:e instanceof Error?e.message:String(e),timeoutMs:t}}}async function ct(e,r,t,n){try{return await Yp(async o=>{let s=await bn(e,{method:"POST",headers:Bn(r),body:JSON.stringify(t),signal:o}),i=null;try{i=await s.json()}catch{i=null}return{ok:s.ok,status:s.status,response:i}},n?.timeoutMs)}catch(o){return qp(o,n?.timeoutMs)}}async function X(e,r,t,n){let o=await ct(e,r,t,{timeoutMs:n.timeoutMs});if(o.ok||o.status!==401)return o;let s=await Kp(r,n.agentOsId,{baseUrl:n.baseUrl});return s.ok?{...await ct(e,s.token,t,{timeoutMs:n.timeoutMs}),refreshedAuth:!0}:{...o,authRefreshFailure:s.reason}}async function $a(e,r,t){try{return await Yp(async n=>{let o=await bn(e,{method:"GET",headers:Bn(r),signal:n}),s=null;try{s=await o.json()}catch{s=null}return{ok:o.ok,status:o.status,response:s}},t?.timeoutMs)}catch(n){return qp(n,t?.timeoutMs)}}H();Dn();import{spawnSync as Px}from"node:child_process";import{randomBytes as Ax}from"node:crypto";import{createPublicKey as bx,verify as Sx}from"node:crypto";import{createHash as hx,createPublicKey as gB,verify as hB}from"node:crypto";function Va(e){return JSON.stringify(ja(e))}function ja(e){if(Array.isArray(e))return e.map(ja);if(e&&typeof e=="object"){let r={};for(let t of Object.keys(e).sort())r[t]=ja(e[t]);return r}return e}function Ga(e){if(!e)return null;let r=e.trim();if(!r)return null;if(/^[0-9a-fA-F]{64}$/.test(r))return new Uint8Array(r.match(/.{2}/g).map(t=>parseInt(t,16)));try{let t=Buffer.from(r,"base64");if(t.length===32)return new Uint8Array(t)}catch{}return null}function Jp(e=process.env){if(e.NODE_ENV==="production")return!1;let r=e.KYNVER_ALLOW_DEV_SIGNING_KEYS?.trim().toLowerCase();return r==="1"||r==="true"||r==="yes"||r==="on"?!0:e.NODE_ENV==="test"||e.VITEST==="true"}var yB=Buffer.from("302a300506032b6570032100","hex"),zp="ca-6297fb8e1773",kx={[zp]:"16ae5cb2a61f8c94cf1b86e8258f9c2f2ff6aba5e6136250a422209b6e866881","ca-456fd128f3b3":"f29cbd559410c2578d7f9732ccd86570073355ccdb36af0d1b7dff15908466e7"};function yx(e){return`ca-${hx("sha256").update(Buffer.from(e)).digest("hex").slice(0,12)}`}function Xp(e,r=process.env){let t=Ga(r.KYNVER_COMMAND_AUTH_PUBLIC_KEY);if(t)return yx(t)!==e?null:t;let n=kx[e];return!n||e===zp&&!Jp(r)?null:Ga(n)}var Rx=/\[execution-mode:\s*(write|read[_-]?only)\s*\]/gi,vx=/<!--\s*harness-contract:\s*(\{[\s\S]*?\})\s*-->/gi;function ws(e){let r=typeof e.description=="string"?e.description:"",t=typeof e.executorRef=="string"?e.executorRef:"",o=[...r.matchAll(Rx)].at(-1)?.[1]?.toLowerCase();if(o)return o==="write"?"write":"read_only";if(/(?:^|:)read[_-]?only(?:$|:)/i.test(t))return"read_only";for(let s of r.matchAll(vx))try{let i=JSON.parse(s[1]);if(i.readOnly===!0||i.executionMode==="read_only")return"read_only"}catch{}return"write"}var wx=120,Qp=["write","read_only","land_pr","verify_live"],xx=["agentOsId","attempt","exp","kind","leaseOwner","leaseToken","operationClass","repoIdentity","requestNonce","taskId","tenantId","v"];var _x=/^[a-z0-9.-]+(?::\d+)?(?:\/[A-Za-z0-9._~-]+){2,}$/;function Zp(e){let r=e.trim();if(!r||r.includes("\0")||/\s/.test(r))return null;let t,n,o=/^(?:[^@/:]+@)?([^/:]+):(?!\/\/)(.+)$/.exec(r);if(/^[a-z][a-z0-9+.-]*:\/\//i.test(r)){let a;try{a=new URL(r)}catch{return null}if(!["https:","http:","ssh:","git:","git+ssh:","ssh+git:"].includes(a.protocol))return null;t=a.port?`${a.hostname}:${a.port}`:a.hostname,n=decodeURIComponent(a.pathname)}else if(o&&!/^[A-Za-z]$/.test(o[1]))t=o[1],n=o[2];else return null;t=t.toLowerCase().replace(/\.$/,"");let s=n.replace(/\/+$/,"").replace(/\.git$/i,"").split("/").filter(Boolean);if(s.length<2||s.some(a=>a==="."||a===".."))return null;let i=`${t}/${s.join("/")}`;return _x.test(i)&&i.length<=512?i:null}function em(e){let r=e.task??{};return e.landPrDispatch===!0||r.executor==="land_pr"?"land_pr":r.executor==="verify_live"?"verify_live":ws(r)==="read_only"?"read_only":"write"}function Ex(e){if(!e||typeof e!="object"||Array.isArray(e))return!1;let r=e;if(Object.keys(r).sort().join(",")!=="payload,publicKeyId,signature"||typeof r.signature!="string"||!r.signature||typeof r.publicKeyId!="string"||!r.publicKeyId)return!1;let t=r.payload;if(!t||typeof t!="object"||Array.isArray(t)||Object.keys(t).sort().join(",")!==[...xx].join(",")||t.v!==1||t.kind!=="dispatch_claim")return!1;for(let n of["tenantId","agentOsId","taskId","leaseOwner","leaseToken","repoIdentity","requestNonce"])if(typeof t[n]!="string"||!t[n])return!1;return!(typeof t.attempt!="number"||!Number.isInteger(t.attempt)||t.attempt<0||typeof t.exp!="number"||!Number.isFinite(t.exp)||!Qp.includes(t.operationClass))}var Cx=Buffer.from("302a300506032b6570032100","hex");function rm(e,r,t=process.env,n=Math.floor(Date.now()/1e3)){if(!Ex(e))return{ok:!1,code:"malformed",reason:"malformed dispatch claim authorization"};let o=e.payload;for(let a of Object.keys(r))if(o[a]!==r[a])return{ok:!1,code:"binding_mismatch",reason:`${a} mismatch`};if(o.exp<=n)return{ok:!1,code:"expired",reason:"authorization expired"};if(o.exp>n+wx+60)return{ok:!1,code:"malformed",reason:"authorization lifetime exceeds the allowed window"};let s=Xp(e.publicKeyId,t);if(!s)return{ok:!1,code:"unknown_key",reason:`no verification key for publicKeyId "${e.publicKeyId}"`};let i=Buffer.from(e.signature,"base64url");if(i.length!==64)return{ok:!1,code:"bad_signature",reason:"not a 64-byte Ed25519 signature"};try{let a=bx({key:Buffer.concat([Cx,Buffer.from(s)]),format:"der",type:"spki"});return Sx(null,Buffer.from(Va(o),"utf8"),a,i)?{ok:!0,payload:o}:{ok:!1,code:"bad_signature",reason:"Ed25519 signature mismatch"}}catch(a){return{ok:!1,code:"bad_signature",reason:`signature verification failed: ${a.message}`}}}O();var Ya=class{constructor(r=4096){this.capacity=r}capacity;order=[];keys=new Set;consume(r){if(this.keys.has(r))return!1;for(this.keys.add(r),this.order.push(r);this.order.length>this.capacity;)this.keys.delete(this.order.shift());return!0}};function Ix(e){let r=(c,u)=>({allow:!1,code:c,reason:u}),{policy:t,identity:n}=e;if(!n)return r("no_identity","the desktop runtime has not been prepared");if(!t)return r("no_policy","no approved execution policy on this computer");if(t.accountId!==n.accountId||t.agentOsId!==n.agentOsId)return r("policy_mismatch","the approved policy is for another account or workspace");if(!e.repoIdentity)return r("repo_identity_unavailable","the repository has no canonical remote identity");if(t.repoIdentity!==e.repoIdentity)return r("policy_mismatch","the approved policy is for another repository");let o=e.decision.claimAuthorization;if(o==null||!e.requestNonce)return r("missing_authorization","the claim carries no server authorization; the Kynver server must sign Desktop claims (KYNVER_COMMAND_AUTH_KEY, dispatch-claim-authorization diagnostic) and this runtime must be 0.2.87 or newer");let s=e.decision.task??{},i=em(e.decision),a=rm(o,{tenantId:n.accountId,agentOsId:n.agentOsId,taskId:typeof s.id=="string"?s.id:"",attempt:typeof s.attempt=="number"?s.attempt:-1,leaseOwner:e.leaseOwner,leaseToken:typeof s.leaseToken=="string"?s.leaseToken:"",operationClass:i,repoIdentity:e.repoIdentity,requestNonce:e.requestNonce},e.env??process.env,e.nowSec);if(!a.ok)return r(a.code,a.reason);let l=a.payload;return e.consumed.consume(`${l.taskId}\0${l.leaseToken}\0${l.requestNonce}`)?t.approvedOperationClasses.includes(i)?{allow:!0,operationClass:i}:{allow:!1,code:"operation_not_approved",reason:`${i} work in ${t.repoIdentity} has not been approved on this computer`,consentRequired:{repoIdentity:t.repoIdentity,operationClass:i}}:r("replayed","this claim authorization was already used")}var Ox=null,Tx=null,Nx=new Ya,Mx=new Set;function tm(){return ps()}function nm(e){return{v:1,repoIdentity:e,requestNonce:Ax(16).toString("base64url")}}function om(e){let r=Px("git",["-C",e,"remote","get-url","origin"],ae({encoding:"utf8",timeout:1e4}));return r.status!==0||typeof r.stdout!="string"?null:Zp(r.stdout.trim())}function sm(e){let r=Ix({...e,policy:Ox,identity:Tx,consumed:Nx});if(!r.allow){let t=e.decision.task??{},n={taskId:typeof t.id=="string"?t.id:"",code:r.code,reason:r.reason,...r.consentRequired?{consentRequired:r.consentRequired}:{}};for(let o of Mx)try{o(n)}catch{}}return r}function im(){let e=Number(process.env.KYNVER_DISPATCH_CALLBACK_TIMEOUT_MS);return Number.isFinite(e)&&e>0?Math.floor(e):3e5}function Fn(e){console.error(JSON.stringify({event:"dispatch_progress",ts:new Date().toISOString(),...e}))}function am(e){if(!e||typeof e!="object")return!1;let r=e;if(r.timeout===!0||r.timeoutMs!==void 0)return!0;let t=r.error;if(typeof t!="string"||!t.trim())return!1;let n=t.toLowerCase();return n.includes("abort")||n.includes("timeout")}function qa(e){if(!e||typeof e!="object")return!1;let r=e;return r.timeout===!0?!0:(typeof r.error=="string"?r.error.toLowerCase():"").includes("timeout")}var Dx=["implementation","review","landing"],Wx=["plan_author","implementer","report_reviewer","deep_reviewer","runtime_verifier","system"];function Lx(e){return Dx.includes(e)}function Ux(e){return Wx.includes(e)}function lm(e){return{slug:e.slug,displayName:e.displayName,description:e.description,dispatchLane:e.dispatchLane===null||Lx(e.dispatchLane)?e.dispatchLane:null,defaultRoleLane:Ux(e.defaultRoleLane)?e.defaultRoleLane:"implementer"}}var cm=Pt.personas.map(lm),Bx=new Map(cm.map(e=>[e.slug,e]));function Fx(e){if(!e)return null;let r=e.trim().toLowerCase(),t=Bx.get(r)??null,n=Au(r);if(!n)return t;let o=lm(n);return t?{...o,dispatchLane:t.dispatchLane,defaultRoleLane:t.defaultRoleLane}:o}function Ja(e){return Fx(e)?.defaultRoleLane??null}function um(){return cm.filter(e=>e.dispatchLane==="review").map(e=>e.slug)}function dm(e){return(e??"").trim().toLowerCase()}function Kx(e){switch(dm(e)){case"implementer":case"repair_implementer":case"plan_author":case"runtime_verifier":return"implementation";case"plan_reviewer":case"report_reviewer":case"deep_reviewer":return"review";default:return null}}function Hx(e){let r=dm(e);if(!r)return;if(r==="implementation"||r==="review"||r==="landing"||r==="any")return r;let t=Kx(r);if(t)return t;if(r==="implement"||r==="repair"||r==="coding")return"implementation";if(r==="land"||r==="merge")return"landing"}function pm(e){return Hx(e)??"any"}xn();H();Me();function $x(e=process.env){let r=F();return kr(r,e)!=="forge"}function xs(e,r=process.env){if($x(r))return e?.maxConcurrentWorkers??void 0}async function _s(e,r){let t=Q(r.baseUrl?String(r.baseUrl):void 0),n=await ee(r.secret?String(r.secret):void 0,e,{baseUrl:t}),o=`${t}/api/agent-os/by-id/${encodeURIComponent(e)}/runtime`;try{let s=await $a(o,n);if(!s.ok)return null;let a=s.response?.preferences?.maxConcurrentWorkers;if(a==null)return{maxConcurrentWorkers:null};let l=Number(a);return!Number.isFinite(l)||l<=0?{maxConcurrentWorkers:null}:{maxConcurrentWorkers:Math.floor(l)}}catch{return null}}Ft();var jx={fetchPreferences:_s,configuredOverride:xs,observe:Nn};async function mm(e,r=jx){let t=await r.fetchPreferences(e.agentOsId,e.args),n=r.configuredOverride(t,e.env);return r.observe({runId:e.runId,configuredMaxWorkersOverride:n})}Ft();U();U();function Es(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function za(e){return e.toLowerCase()}function Vx(e){let r=Es(e,"roleLane");if(r)return r;let t=za(Es(e,"executorRef")),n=za(Es(e,"title")),o=za(Es(e,"personaSlug")),s=`${t} ${n}`;if(s.includes("deep review")||s.includes("security review")||t.includes("deep-reviewer"))return"deep_reviewer";if(s.includes("plan author")||s.includes("plan-author")||n.includes("strategy plan"))return"plan_author";if(s.includes("plan review")||t.includes("plan-reviewer"))return"plan_reviewer";if(s.includes("report review")||s.includes("completion report"))return"report_reviewer";if(s.includes("repair")||n.startsWith("fix ")||t.includes("repair"))return"repair_implementer";if(t.includes("cursor")||t.includes("codex")||t.includes("composer")||n.includes("implement")||n.includes("land:"))return"implementer";let i=Ja(o);if(i)return o==="lorentz"&&(s.includes("deep")||s.includes("security"))?"deep_reviewer":i;if(s.includes("review"))return"report_reviewer"}function fm(e){let r=Vx(e);return r?{...e,roleLane:r}:e}H();var Gx=/^claude[-_]/i,Yx=/^(?:opus|sonnet|haiku)\b/i;function gm(e){let r=e.trim();return Gx.test(r)||Yx.test(r)}function hm(e){let r=e.trim().toLowerCase();return r.startsWith("gpt-")||r.startsWith("gpt5")||r.includes("codex")}function Xa(e){let r=e.trim().toLowerCase();return r.includes("composer")||r.includes("cursor")}function km(e){return e.trim().toLowerCase().startsWith("gemini-")}function qx(e){return hm(e)?"codex":gm(e)?"claude":km(e)?"gemini":(Xa(e),"cursor")}function Jx(e){if(!e.startsWith("provider:"))return null;let r=e.slice(9),t=r.indexOf(":"),n=(t>=0?r.slice(0,t):r).trim().toLowerCase(),o=t>=0&&r.slice(t+1).trim()||void 0;return n?n==="claude"||n==="opus"||n==="anthropic"?{provider:"claude",model:o,rule:o?"executor_ref:provider_claude_model":"executor_ref:provider_claude"}:n==="codex"?{provider:"codex",model:o,rule:"executor_ref:provider_codex"}:n==="openai-compatible"||n==="openai"||n==="openai_compatible"?{provider:"openai-compatible",model:o,rule:"executor_ref:provider_openai_compatible"}:n==="chatgpt"||n==="gpt"?{provider:"codex",model:o,rule:"executor_ref:provider_codex"}:n==="openai-api"||n==="openai_api"?{provider:"openai-compatible",model:o,rule:"executor_ref:provider_openai_compatible"}:n==="cursor"||n==="composer"?{provider:"cursor",model:o,rule:"executor_ref:provider_cursor"}:n==="gemini-api"||n==="gemini_api"||n==="google-api"?{provider:"gemini-api",model:o,rule:"executor_ref:provider_gemini_api"}:n==="gemini"||n==="google"||n==="gemini_cli"?{provider:"gemini",model:o,rule:o?"executor_ref:provider_gemini_model":"executor_ref:provider_gemini"}:null:null}function zx(e){if(!e.startsWith("harness-lane:"))return null;let r=e.split(":").map(o=>o.trim()).filter(Boolean);if(r.length<2)return null;let t=r[1],n=r.slice(2).join(":");return n?gm(n)||hm(n)||Xa(n)||km(n)?{lane:t,model:n,provider:qx(n),rule:"executor_ref:harness_lane_model"}:{lane:t,rule:"executor_ref:harness_lane"}:{lane:t,rule:"executor_ref:harness_lane"}}function We(e){let r=typeof e=="string"?e.trim():"";return r?Jx(r)??zx(r):null}function ym(e){let r=We(e);return r?!!(r.provider&&r.provider!=="cursor"||r.model&&!Xa(r.model)):!1}ks();ks();var Er="cursor",Xx=new Set(["claude","opus","anthropic"]),Qx=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function Kn(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function _r(e){if(!e?.trim())return!1;let r=e.trim().toLowerCase();return Xx.has(r)?!0:r.includes("claude")||r.includes("opus")}function Cs(e){if(!e)return!1;let r=e.workerProviderOverride;if(typeof r=="string"&&_r(r))return!0;let t=Kn(e,"executorRef").toLowerCase();if(t==="provider:claude"||t.startsWith("provider:claude:")||t.includes("claude-worker-override")||t.includes("operator-claude"))return!0;let n=We(Kn(e,"executorRef"));if(n?.provider&&_r(n.provider)||n?.model&&_r(Zx(n.model)))return!0;let o=Kn(e,"description");if(Qx.some(i=>i.test(o)))return!0;let s=Kn(e,"title");return!!/\[use-claude-worker\]/i.test(s)}function Zx(e){let r=e.trim().toLowerCase();return/^claude[-_]/.test(r)||/^(?:opus|sonnet|haiku)\b/.test(r)?"claude":r}function e_(e,r){return{provider:Er,model:Ps,rule:`policy:cursor_default${r}`,requestedModel:e}}var r_=["explicit:","executor_ref:","factory:","task:"];function t_(e){return r_.some(r=>e.startsWith(r))}function Qa(e){if(!e)return!1;let r=e.workerProviderOverride;return typeof r=="string"&&r.trim()||We(Kn(e,"executorRef"))?.provider?!0:Cs(e)}function Rm(e){let{routing:r,task:t}=e,n=e.explicitProvider?.trim().toLowerCase();if(e.explicitProviderIsOperatorOverride&&_r(n))return{...r,provider:"claude",rule:r.rule.startsWith("explicit:")?r.rule:"explicit:operator_provider"};if(n||t_(r.rule)||Qa(t)||!_r(r.provider))return r;let o=r.rule&&r.rule!=="default:global"?`:${r.rule.replace(/:/g,"_")}`:"";return e_(r.model,o)}function vm(e,r=Er){let t=e?.trim();return t?or(t):r}var bm={codex:{id:"codex",displayName:"Codex (BYO OAuth / Hermes openai-codex)",costTier:"low",authSources:["oauth_local","api_key_env","subscription_hermes"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!1,workerMcpTools:"supported"},cursor:{id:"cursor",displayName:"Cursor / Composer",costTier:"medium",authSources:["oauth_local","api_key_env"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0,workerMcpTools:"supported"},claude:{id:"claude",displayName:"Claude Code",costTier:"high",authSources:["oauth_local"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0,workerMcpTools:"supported"}};function Vt(e){return bm[e]}function Sm(){return Object.values(bm)}import{existsSync as m_}from"node:fs";import{homedir as f_}from"node:os";import $n from"node:path";import{createHash as Em}from"node:crypto";import{statSync as p_}from"node:fs";import{spawnSync as Cm}from"node:child_process";import{existsSync as _m,readFileSync as n_}from"node:fs";import ut from"node:path";var Hn=class extends Error{constructor(t){super(`${t} is a batch file that is not a Node CLI shim; it cannot be spawned without a shell. Point the matching KYNVER_*_BIN setting at the real .exe or the CLI's JS entry, or run the daemon inside WSL.`);this.shimPath=t;this.name="UnresolvableWindowsShimError"}shimPath},o_=".COM;.EXE;.BAT;.CMD";function s_(e){return e.includes("/")||e.includes("\\")}function i_(e){return(e.PATHEXT||o_).split(";").map(r=>r.trim().toLowerCase()).filter(r=>r.startsWith("."))}function a_(e){let r=Object.keys(e).find(t=>t.toUpperCase()==="PATH");return r?e[r]??"":""}function l_(e,r={}){let t=r.env??process.env,n=r.exists??_m,o=i_(t),s=ut.win32.extname(e)!=="",i=a=>s?[a]:o.map(l=>`${a}${l}`);if(s_(e)||ut.win32.isAbsolute(e))return i(e).find(a=>n(a))??null;for(let a of a_(t).split(";").map(l=>l.trim()).filter(Boolean)){let l=i(ut.win32.join(a,e)).find(c=>n(c));if(l)return l}return null}var wm=/%~?dp0%?\\?([^"%\r\n]+?\.(?:c|m)?js)\b/i,c_=/^\s*SET\s+"?([A-Za-z_]\w*)=([^"\r\n]*)"?\s*$/i;function xm(e){return e.replace(/^[\\/]+/,"")}function u_(e){let r=e.split(/\r?\n/),t=new Map;for(let s of r){let i=c_.exec(s);i&&t.set(i[1].toUpperCase(),i[2])}let n=r.filter(s=>s.includes("%*")).pop();if(!n)return null;let o=wm.exec(n);if(o)return xm(o[1]);for(let s of n.matchAll(/%([A-Za-z_]\w*)%/g)){let i=t.get(s[1].toUpperCase()),a=i?wm.exec(i):null;if(a)return xm(a[1])}return null}function d_(e,r={}){if((r.platform??process.platform)!=="win32")return{executable:e,prefixArgs:[],kind:"passthrough"};let n=l_(e,r);if(!n)return{executable:e,prefixArgs:[],kind:"passthrough"};let o=ut.win32.extname(n).toLowerCase();if(o!==".cmd"&&o!==".bat")return{executable:n,prefixArgs:[],kind:"exe"};let s=r.readText??(m=>n_(m,"utf8")),i=r.exists??_m,a;try{a=s(n)}catch{throw new Hn(n)}let l=u_(a);if(!l)throw new Hn(n);let c=ut.win32.dirname(n),u=ut.win32.join(c,l);if(!i(u))throw new Hn(n);let d=ut.win32.join(c,"node.exe");return{executable:i(d)?d:r.nodeExecutable??process.execPath,prefixArgs:[u],kind:"node-shim"}}function ve(e,r,t={}){let n=d_(e,t);return[n.executable,[...n.prefixArgs,...r]]}function sr(e){try{let r=p_(e),t=`${e}|${r.size}|${r.mtimeMs}`;return Em("sha256").update(t).digest("hex").slice(0,16)}catch{return}}function Gt(e){return Em("sha256").update(`env:${e}`).digest("hex").slice(0,16)}function Le(e,r){for(let t of r){let n=process.env[t]?.trim();if(n)return n}return e}function Qe(e,r,t={}){let n=t.timeoutMs??8e3;try{let[o,s]=ve(e,r),i=Cm(o,s,{windowsHide:!0,encoding:"utf8",timeout:n,env:{...process.env,...t.env,CI:"1",NO_COLOR:"1"}});if(i.status===0)return{ok:!0,note:t.okNote??`${e} ${r.join(" ")}: ok`};let a=(i.stderr||i.stdout||"").trim(),l=t.failPrefix??`${e} ${r.join(" ")} failed`;return{ok:!1,note:a?`${l}: ${a.slice(0,200)}`:l}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} probe failed`}}}function As(e,r,t={}){let n=t.timeoutMs??8e3;try{let[o,s]=ve(e,r);return Cm(o,s,{windowsHide:!0,stdio:"ignore",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}}).status===0?{ok:!0,note:t.okNote??`${e} authenticated`}:{ok:!1,note:t.failNote??`${e} not authenticated`}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} auth probe failed`}}}var g_="codex";function h_(){let e=f_();return[process.env.CODEX_HOME?.trim()?$n.join($n.resolve(process.env.CODEX_HOME.trim()),"auth.json"):null,$n.join(e,".codex","auth.json"),$n.join(e,".config","codex","auth.json")].filter(t=>!!t)}function k_(e){return $n.dirname(e)}function y_(e){let r,t;for(let n of h_()){if(!m_(n))continue;r??=n;let o=Qe(e,["login","status"],{okNote:"codex login status: authenticated",failPrefix:"codex login status",env:{CODEX_HOME:k_(n)}});if(t??=o,o.ok)return{authPath:n,login:o}}return{authPath:r,login:t??Qe(e,["login","status"],{okNote:"codex login status: authenticated",failPrefix:"codex login status"})}}function Pm(e=new Date().toISOString()){let r=Le(g_,["KYNVER_CODEX_BIN","CODEX_BIN"]);if(process.env.CODEX_API_KEY?.trim())return{providerId:"codex",ready:!0,authSource:"api_key_env",sessionFingerprint:Gt("CODEX_API_KEY"),checkedAt:e,note:"CODEX_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let{authPath:t,login:n}=y_(r),o=!!t&&n.ok;return{providerId:"codex",ready:o,authSource:"oauth_local",sessionFingerprint:t?sr(t):void 0,checkedAt:e,note:o?"Local Codex OAuth session bound on runner":[n.note,t?void 0:"no Codex auth store found"].filter(Boolean).join("; ")}}import{existsSync as R_}from"node:fs";import{homedir as v_}from"node:os";import Za from"node:path";function b_(){let e=process.env.HERMES_HOME?.trim(),r=e?Za.resolve(e):Za.join(v_(),".hermes");return Za.join(r,"auth.json")}function Is(e=new Date().toISOString()){let r=Le("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=Qe(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=b_(),o=R_(n),s=As(r,["auth","status","openai-codex"],{okNote:"hermes openai-codex: logged in",failNote:"hermes openai-codex: not logged in"}),i=t.ok&&s.ok;return{path:"hermes_openai_codex",ready:i,authSource:i?"subscription_hermes":"none",sessionFingerprint:o?sr(n):void 0,checkedAt:e,note:i?"Hermes openai-codex subscription session bound (ChatGPT Codex OAuth)":[t.note,s.note,o?void 0:"no ~/.hermes/auth.json"].filter(Boolean).join("; ")}}function Yt(e=new Date().toISOString()){let r=Pm(e);if(r.ready)return{...r,path:"codex_cli"};let t=Is(e);return t.ready?{providerId:"codex",ready:!0,authSource:t.authSource,sessionFingerprint:t.sessionFingerprint,checkedAt:t.checkedAt,note:t.note,path:"hermes_openai_codex",hermesOpenAiCodex:t}:{providerId:"codex",ready:!1,authSource:"none",checkedAt:e,path:"none",hermesOpenAiCodex:t,note:[r.note,t.note].filter(Boolean).join("; ")||"Codex CLI and Hermes openai-codex unavailable"}}var Am=["low","medium","high"],Im={oauth_local:0,subscription_hermes:0,runner_token:1,api_key_env:2,none:3};function Om(e,r){let t=Vt(e);return r==="privileged"?t.supportsPrivilegedPlatformActions:r==="low"?t.supportsLowRiskOrchestration:!0}function S_(e,r){let t=Vt(e.providerId),n=Vt(r.providerId),o=Am.indexOf(t.costTier)-Am.indexOf(n.costTier);if(o!==0)return o;let s=Im[e.binding.authSource]-Im[r.binding.authSource];return s!==0?s:e.providerId.localeCompare(r.providerId)}function el(e){let r=Sm().map(a=>({providerId:a.id,binding:e.inventory.bindings[a.id]})).filter(a=>a.binding.ready&&Om(a.providerId,e.riskClass));if(r.length===0)return null;let n=[...r].sort(S_)[0],o="codex";if(n.providerId===o)return{providerId:n.providerId,binding:n.binding};let s=e.inventory.bindings[o],i;return Om(o,e.riskClass)?s.ready||(i=s.note??`${o} not bound`):i=`${e.riskClass} orchestration requires privileged-capable provider`,{providerId:n.providerId,binding:n.binding,escalatedFrom:o,escalatedReason:i}}import{existsSync as w_}from"node:fs";import{homedir as x_}from"node:os";import __ from"node:path";var E_="claude";function C_(){let e=x_();return[__.join(e,".claude",".credentials.json")]}function Tm(e=new Date().toISOString()){let r=Le(E_,["KYNVER_CLAUDE_BIN","CLAUDE_BIN"]);if(process.env.ANTHROPIC_API_KEY?.trim())return{providerId:"claude",ready:!1,authSource:"api_key_env",sessionFingerprint:Gt("ANTHROPIC_API_KEY"),checkedAt:e,note:"ANTHROPIC_API_KEY present but scrubbed from worker env (deployment secret) \u2014 use `claude` CLI login (OAuth) for harness workers"};let t=Qe(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=C_().find(i=>w_(i)),o=As(r,["auth","status"],{okNote:"claude auth status: authenticated",failNote:"claude auth status: not authenticated"}),s=t.ok&&(o.ok||!!n);return{providerId:"claude",ready:s,authSource:"oauth_local",sessionFingerprint:n?sr(n):void 0,checkedAt:e,note:s?"Local Claude Code OAuth session bound on runner":[t.note,o.note,n?void 0:"no ~/.claude/.credentials.json"].filter(Boolean).join("; ")}}import{existsSync as Q_}from"node:fs";import{homedir as X_}from"node:os";import zt from"node:path";Rr();O();import{closeSync as sl,existsSync as Lm,mkdirSync as U_,openSync as il,statSync as B_,unlinkSync as Dm}from"node:fs";import{spawn as F_}from"node:child_process";import K_ from"node:os";import ir from"node:path";Yi();var P_="KYNVER_NO_PROD_DB_CREDENTIALS",A_=["KYNVER_ENV_FILE"];function Ue(e,r={}){let t=Gi(e);if(!r.reviewWorker)return t;let n={...t,[P_]:"1"};for(let o of A_)delete n[o];return n}var I_=/-(?:thinking(?:-(?:high|medium|low|minimal|max|none))?|high|medium|low|minimal)$/i;function Nm(e){return e.replace(I_,"")}var Mm=/^(?:gpt-|gpt5|o1|o3|o4|gemini-|grok-|composer|deepseek|llama|mistral|qwen|command-)/i;function Os(e){return/^claude[-_]/i.test(e)||/^(?:opus|sonnet|haiku)\b/i.test(e)}function O_(e){let r=e.trim().toLowerCase();return r.startsWith("gemini-")||r==="auto"||r==="pro"||r==="flash"||r==="flash-lite"}var T_=new Set(["cursor"]);function N_(e){let r=e.trim().toLowerCase();return T_.has(r)?"auto":null}function rl(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let o=Nm(t).trim()||r;return Mm.test(o)||!Os(o)&&o!==r?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is not a Claude model \u2014 the "claude" provider drives the Claude CLI, which only accepts claude-* model ids (got "${o}"). Pick a Claude model or switch the worker provider.`}:o!==t?{ok:!0,model:o,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${o}" (the Claude CLI rejects reasoning-effort suffixes)`}:{ok:!0,model:o,normalized:!1}}function qt(e,r){let t=(e??"").trim();return t?Os(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "codex". Switch the provider or pick a Codex/OpenAI model.`}:{ok:!0,model:t,normalized:!1}:{ok:!0,model:r,normalized:!1}}function tl(e,r){let t=(e??"").trim();if(t)return{ok:!0,model:t,normalized:!1};let n=(r??"").trim();return n?{ok:!0,model:n,normalized:!1}:{ok:!1,model:"",normalized:!1,note:'the "openai-compatible" provider has no universal default model \u2014 pass --model (any id your endpoint serves, e.g. llama3.1, qwen2.5-coder, gpt-4o-mini) or set KYNVER_WORKER_MODEL on the daemon host.'}}function Jt(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let o=Nm(t).trim()||r;return Os(o)||!O_(o)&&Mm.test(o)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is not a Gemini model \u2014 the gemini / gemini-api providers drive Google Gemini (got "${o}"). Pick a gemini-* model or an alias (auto, pro, flash, flash-lite), or switch the worker provider.`}:o!==t?{ok:!0,model:o,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${o}"`}:{ok:!0,model:o,normalized:!1}}function nl(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let n=N_(t);return n?{ok:!0,model:n,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${n}" (Cursor provider alias \u2014 use "auto" or a composer id, not "cursor")`}:Os(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "cursor". Switch the provider to "claude" or pick a Cursor model.`}:{ok:!0,model:t,normalized:!1}}import{existsSync as jn,readdirSync as M_}from"node:fs";import dt from"node:path";var D_=/^\d{4}\.\d{1,2}\.\d{1,2}-[a-f0-9]+$/i;function W_(e){let t=e.split("-")[0].split(".");if(t.length!==3)return null;let[n,o,s]=t;return!n||!o||!s?null:+`${n}${o.padStart(2,"0")}${s.padStart(2,"0")}`}function L_(e){let r=dt.join(e,"versions");if(!jn(r))return null;let t=null,n=-1;for(let o of M_(r,{withFileTypes:!0})){if(!o.isDirectory()||!D_.test(o.name))continue;let s=W_(o.name);s==null||s<=n||(n=s,t=dt.join(r,o.name))}return t}function Ts(e){let r=e?.trim()||dt.join(process.env.LOCALAPPDATA||"","cursor-agent"),t=dt.join(r,"node.exe"),n=dt.join(r,"index.js");if(jn(t)&&jn(n))return{nodeExe:t,indexJs:n,versionDir:r};let o=L_(r);if(!o)return null;let s=dt.join(o,"node.exe"),i=dt.join(o,"index.js");return!jn(s)||!jn(i)?null:{nodeExe:s,indexJs:i,versionDir:o}}var ol="composer-2.5",H_=15e3,$_=6e4,j_=3e4;function V_(e,r,t){return{executable:e,prefixArgs:[r],shell:!1,detached:ce(),bundledVersionDir:t}}function ll(e){if(process.platform==="win32"){let r=/\.(cmd|bat)$/i.test(e),t=/node\.exe$/i.test(e)&&Lm(ir.join(ir.dirname(e),"index.js"));if(r||t||e==="agent"){let o=r?Ts(ir.dirname(e)):t?{nodeExe:e,indexJs:ir.join(ir.dirname(e),"index.js"),versionDir:ir.dirname(e)}:Ts();if(o)return V_(o.nodeExe,o.indexJs,o.versionDir);throw new Error("Cursor Agent on Windows has no headless bundled node.exe under %LOCALAPPDATA%\\cursor-agent\\versions\\\u2026. Run `agent login` / update Cursor Agent CLI, use `--provider claude`, or set KYNVER_CURSOR_AGENT_ROOT to the cursor-agent folder.")}}return{executable:e,prefixArgs:[],shell:!1,detached:ce()}}function G_(e,r,t){return Ue({...process.env,CI:"1",NO_COLOR:"1",...r.bundledVersionDir?{CURSOR_INVOKED_AS:ir.basename(e)||"agent.cmd"}:{}},{reviewWorker:t})}function Um(e){e<=0||Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function al(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?Math.floor(n):r}function Y_(){let e=process.env.KYNVER_CURSOR_START_LOCK_DIR?.trim()||ir.join(K_.homedir(),".kynver","locks");return U_(e,{recursive:!0}),ir.join(e,"cursor-agent-start.lock")}function q_(){if(process.env.KYNVER_CURSOR_START_LOCK==="0")return()=>{};let e=Y_(),r=al("KYNVER_CURSOR_START_LOCK_TIMEOUT_MS",$_),t=al("KYNVER_CURSOR_START_LOCK_STALE_MS",j_),n=Date.now();for(;;)try{let o=il(e,"wx");return sl(o),()=>{try{Dm(e)}catch{}}}catch(o){if(o.code!=="EEXIST")throw o;try{if(Date.now()-B_(e).mtimeMs>t){Dm(e);continue}}catch{continue}if(Date.now()-n>r)throw new Error(`timed out waiting for Cursor agent start lock: ${e}`);Um(250)}}function Bm(e=process.env){let r=e.KYNVER_CURSOR_AGENT_BIN?.trim()||e.CURSOR_AGENT_BIN?.trim();if(r)return r;if(process.platform==="win32"){let t=Ts(e.KYNVER_CURSOR_AGENT_ROOT?.trim()||void 0);if(t)return t.nodeExe;let n=ir.join(e.LOCALAPPDATA||"","cursor-agent","agent.cmd");if(Lm(n))return n}return"agent"}function J_(){return Bm(process.env)}var Fm={name:"cursor",defaultModel:ol,preflightModel(e){return nl(e,ol)},start(e){let r=nl(e.model,ol);if(!r.ok)throw new Error(`cursor provider model preflight failed: ${r.note}`);let t=r.model,n=il(e.stdoutPath,"a"),o=il(e.stderrPath,"a"),s=["ignore",n,o],i=J_(),a=ll(i),l=q_(),c;try{let[u,d]=a.shell?[a.executable,Wm(e,t,a.prefixArgs)]:Ce(a.executable,Wm(e,t,a.prefixArgs),e.workerDir);c=F_(u,d,ae({cwd:e.worktreePath,detached:a.detached,shell:a.shell,stdio:s,env:G_(i,a,e.reviewWorker)})),Um(al("KYNVER_CURSOR_START_LOCK_HOLD_MS",H_))}finally{l(),sl(n),sl(o)}if(!c.pid)throw new Error(`failed to spawn Cursor agent worker (is \`${i}\` on PATH? run \`agent login\` or set CURSOR_API_KEY)`);return c.unref(),{pid:c.pid,model:t}}};function Wm(e,r,t=[]){return[...t,"-p",...e.executionMode==="read_only"?["--mode","plan"]:["--force"],...e.mcpConfigPath?["--approve-mcps"]:[],"--trust","--workspace",e.worktreePath,"--output-format","stream-json","--stream-partial-output","--model",r,e.prompt]}import{spawnSync as z_}from"node:child_process";function cl(e,r=process.env){try{let t;try{t=ll(e)}catch{t={executable:e,prefixArgs:[]}}let n=z_(t.executable,[...t.prefixArgs,"status","--format","json"],{encoding:"utf8",windowsHide:!0,timeout:8e3,env:{...r,CI:"1",NO_COLOR:"1"}});if(n.status!==0)return{ok:!1,note:"agent status: not authenticated"};let o=(n.stdout||"").trim();if(!o)return{ok:!1,note:"agent status: empty response"};let s;try{s=JSON.parse(o)}catch{return{ok:!1,note:"agent status: unparseable response"}}return typeof s=="object"&&s!==null&&s.isAuthenticated===!0?{ok:!0,note:"agent status: authenticated"}:{ok:!1,note:"agent status: not authenticated"}}catch(t){return{ok:!1,note:t instanceof Error?t.message:"agent status probe failed"}}}function ul(e=process.env){let r=[],t=e.KYNVER_CURSOR_AUTH_HOME?.trim();t&&(r.push(zt.join(t,".config","cursor","auth.json")),r.push(zt.join(t,".cursor-agent","auth.json")));let n=X_();if(r.push(zt.join(n,".config","cursor","auth.json")),r.push(zt.join(n,".cursor-agent","auth.json")),process.platform==="win32"){let o=e.LOCALAPPDATA?.trim(),s=e.APPDATA?.trim();o&&r.push(zt.join(o,"cursor-agent","auth.json")),s&&r.push(zt.join(s,"cursor","auth.json"))}return r}var Z_="agent";function Km(e=new Date().toISOString()){let r=Le(Z_,["KYNVER_CURSOR_AGENT_BIN","CURSOR_AGENT_BIN"]);if(process.env.CURSOR_API_KEY?.trim())return{providerId:"cursor",ready:!1,authSource:"api_key_env",sessionFingerprint:Gt("CURSOR_API_KEY"),checkedAt:e,note:"CURSOR_API_KEY present but scrubbed from worker env (deployment secret) \u2014 use `agent login` (OAuth) for harness workers"};let t=Qe(r,["-v"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=ul().find(a=>Q_(a)),o=cl(r),s=!!n||o.ok,i=t.ok&&s;return{providerId:"cursor",ready:i,authSource:"oauth_local",sessionFingerprint:n?sr(n):void 0,checkedAt:e,note:i?"Local Cursor/Composer OAuth session bound on runner":[t.note,s?void 0:o.note??"no ~/.config/cursor/auth.json or `agent login` session"].filter(Boolean).join("; ")}}import{existsSync as eE,readFileSync as rE}from"node:fs";import{homedir as tE}from"node:os";import dl from"node:path";var nE=["OPENAI_API_KEY","ANTHROPIC_API_KEY","KYNVER_API_KEY","KYNVER_BASE_URL"];function oE(){let e=process.env.HERMES_HOME?.trim(),r=e?dl.resolve(e):dl.join(tE(),".hermes");return dl.join(r,".env")}function sE(e){try{let r=rE(e,"utf8"),t=[];for(let n of nE)new RegExp(`^${n}=`,"m").test(r)&&t.push(n);return t}catch{return[]}}function Hm(e=new Date().toISOString()){let r=Le("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=Qe(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=oE(),o=eE(n),s=o?sE(n):[],a=s.some(c=>c.endsWith("_API_KEY"))?"api_key_env":o?"oauth_local":"none",l=t.ok&&o;return{adapterId:"hermes",cliAvailable:t.ok,profileBound:o,authSource:a,sessionFingerprint:o?sr(n):void 0,checkedAt:e,note:l?`Hermes profile bound (${s.length?`keys: ${s.join(", ")}`:"no API keys detected"})`:[t.note,o?void 0:"no ~/.hermes/.env"].filter(Boolean).join("; ")}}function $m(e={}){let r=e.nowIso?.()??new Date().toISOString(),t=Yt(r),n={codex:t,cursor:Km(r),claude:Tm(r)},o=Object.values(n).filter(s=>s.ready).length;return{generatedAt:r,bindings:n,cloudApiCredits:{anthropicApiKey:!!process.env.ANTHROPIC_API_KEY?.trim(),openaiApiKey:!!process.env.OPENAI_API_KEY?.trim(),codexApiKey:!!process.env.CODEX_API_KEY?.trim()},workerEndpoint:{baseUrlConfigured:!!process.env.KYNVER_WORKER_BASE_URL?.trim(),apiKeyConfigured:!!process.env.KYNVER_WORKER_API_KEY?.trim()},hermes:Hm(r),hermesOpenAiCodex:Is(r),codexAdapterPath:t.path,readyCount:o}}var iE=[/\bprivileged\b/i,/\bproduction\s+db\b/i,/\bdb:push\b/i,/\bmigration\b/i,/\bdeploy\b/i,/\bsecrets?\b/i,/\bstripe\b/i,/\[require-approval\]/i,/\[operator-only\]/i],aE=[/\borchestration\b/i,/\bplan[- ]?progress\b/i,/\bstatus\s+sync\b/i,/\bheartbeat\b/i,/\bboard[- ]?drain\b/i,/\bmaintenance\b/i,/\[orchestration:\s*low-risk\]/i];function pl(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function lE(e){let r=pl(e,"executorRef").toLowerCase(),t=pl(e,"title").toLowerCase(),n=pl(e,"description").toLowerCase(),o=`${r}
 ${t}
-${n}`;return k_.some(s=>s.test(o))?"privileged":r.includes("provider:claude")||r.includes("deep_review")||r.includes("security")||r.includes("landing")||r.includes("review")||t.startsWith("land:")||r.includes("implementer")||r.includes("repair")||t.includes("implement")?"elevated":y_.some(s=>s.test(o))?"low":"elevated"}function v_(e){let r=Ft(e.provider),t=e.escalatedFrom&&e.escalatedReason?`Escalated from ${e.escalatedFrom} (${e.escalatedReason}); using ${r.displayName} (${r.costTier} tier)`:`${r.displayName} selected for ${e.riskClass} orchestration (${r.costTier} tier, auth=${e.authSource})`;return{provider:e.provider,model:e.model,authSource:e.authSource,costTier:r.costTier,riskClass:e.riskClass,costRationale:t,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason}}function b_(e){let r=e.inventory??vm();return e.codexBinding?{...r,bindings:{...r.bindings,codex:e.codexBinding}}:r}function lt(e){let r=v_({provider:e.providerId,model:e.model,authSource:e.binding.authSource,riskClass:e.riskClass,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason});return{provider:e.providerId,model:e.model,rule:r.routingRule,audit:r}}function bm(e){let r=e.task??{},t=R_(r),n=b_({inventory:e.inventory,codexBinding:e.codexBinding??(e.inventory?null:Ht())}),o=e.preferLowCost===!1?null:e.explicitProvider?.trim().toLowerCase(),s=e.explicitModel?.trim()||void 0,i=wr;if(o==="codex"||o==="provider:codex"){let c=n.bindings.codex;if(!c.ready){let u=$a({inventory:n,riskClass:t});return lt(u?{providerId:u.providerId,binding:u.binding,riskClass:t,routingRule:"orchestration:explicit_codex_unavailable_cost_aware",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"}:{providerId:i,binding:n.bindings[i],riskClass:t,routingRule:"orchestration:codex_unavailable_escalate_cursor",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"})}return lt({providerId:"codex",binding:c,riskClass:t,routingRule:"orchestration:explicit_codex",model:s})}if(o==="cursor"||o==="provider:cursor"){let c=n.bindings.cursor;if(c.ready)return lt({providerId:"cursor",binding:c,riskClass:t,routingRule:"orchestration:explicit_cursor",model:s})}if(o==="claude"||o==="provider:claude"){let c=n.bindings.claude;if(c.ready)return lt({providerId:"claude",binding:c,riskClass:t,routingRule:"orchestration:explicit_claude",model:s})}let a=$a({inventory:n,riskClass:t});if(a)return lt({providerId:a.providerId,binding:a.binding,riskClass:t,routingRule:`orchestration:cost_aware_${a.providerId}`,model:s,escalatedFrom:a.escalatedFrom,escalatedReason:a.escalatedReason});let l=n.bindings.codex;return lt({providerId:i,binding:n.bindings[i],riskClass:t,routingRule:l.ready?"orchestration:inventory_empty_default_cursor":"orchestration:codex_unavailable_default_cursor",model:s,...l.ready?{}:{escalatedFrom:"codex",escalatedReason:l.note??"codex oauth not bound"}})}import{closeSync as Em,openSync as Pm}from"node:fs";import{spawn as O_}from"node:child_process";O();import{unlinkSync as S_,writeFileSync as w_}from"node:fs";import x_ from"node:path";var ze="KYNVER_WORKER_BROKER_SOCKET";function tl(e){return`${JSON.stringify(e)}
-`}function nl(e){let r;try{r=JSON.parse(e)}catch{return{ok:!1,reason:"malformed_request",error:"request was not valid JSON",id:""}}if(!r||typeof r!="object"||Array.isArray(r))return{ok:!1,reason:"malformed_request",error:"request must be a JSON object",id:""};let t=r,n=typeof t.id=="string"?t.id:"";if(t.v!==1)return{ok:!1,reason:"unsupported_protocol",error:"unsupported protocol version (expected 1)",id:n};if(!n)return{ok:!1,reason:"malformed_request",error:"request id must be a non-empty string",id:""};if(t.op==="list_tools")return{ok:!0,request:{v:1,id:n,op:"list_tools"}};if(t.op==="call_tool"){if(typeof t.name!="string"||!t.name)return{ok:!1,reason:"malformed_request",error:"call_tool requires a tool name",id:n};let o=t.args&&typeof t.args=="object"&&!Array.isArray(t.args)?t.args:{};return{ok:!0,request:{v:1,id:n,op:"call_tool",name:t.name,args:o}}}return{ok:!1,reason:"malformed_request",error:"unknown op",id:n}}var __="KYNVER_WORKER_MCP_TOOLS",C_="mcp-config.json",ne="kynver",Fn=["agent_os_context_envelope","agent_os_search_memory","agent_os_search_skills","agent_os_get_skill","agent_os_progress_note"],Sm=Fn.map(e=>`mcp__${ne}__${e}`),E_={"worker.context":["agent_os_context_envelope"],"worker.memory.read":["agent_os_search_memory"],"worker.skills.read":["agent_os_search_skills","agent_os_get_skill"],"worker.progress.report":["agent_os_progress_note"]};function Kn(e){if(!e||e.length===0)return[...Fn];let r=new Set;for(let t of e)for(let n of E_[t]??[])r.add(n);return Fn.filter(t=>r.has(t))}function wm(e){return Kn(e).map(r=>`mcp__${ne}__${r}`)}var P_=["claude","cursor","codex","openai-compatible","gemini","gemini-api"],A_=["openai-compatible","gemini-api"];function I_(e){return P_.includes(e)}function ol(e){return A_.includes(e)}function xm(e){return I_(e)&&!ol(e)}function Hn(e=process.env){let r=e[__]?.trim().toLowerCase();return r?r==="1"||r==="true"||r==="yes"||r==="on":!0}function _m(e){return x_.join(e,C_)}function Cm(e){let r=_m(e.workerDir),t={mcpServers:{[ne]:{command:"npx",args:["-y","-p","@kynver-app/mcp-agent-os","kynver-worker-mcp"],env:{[ze]:e.brokerSocketPath}}}};return w_(r,`${JSON.stringify(t,null,2)}
-`,{mode:384}),r}function _s(e){try{return S_(_m(e)),!0}catch{return!1}}var Fr="claude-sonnet-4-6",$n="claude-opus-4-8";function T_(e,r){let n=Im(e,r).at(-1);if(typeof n!="string"||!n.trim())throw new Error("claude provider refuses to spawn: worker prompt is empty after argv assembly (stdin is ignored \u2014 fix prompt delivery before retrying)")}var Am={name:"claude",defaultModel:Fr,preflightModel(e){return ja(e,Fr)},start(e){let r=ja(e.model,Fr);if(!r.ok)throw new Error(`claude provider model preflight failed: ${r.note}`);let t=r.model;T_(e,t);let[n,o]=ve("claude",Im(e,t)),s=Pm(e.stdoutPath,"a"),i=Pm(e.stderrPath,"a"),a=["ignore",s,i],l=O_(n,o,ae({cwd:e.worktreePath,detached:ce(),stdio:a,env:De(process.env,{reviewWorker:e.reviewWorker})}));if(Em(s),Em(i),!l.pid)throw new Error("failed to spawn claude worker process (is the `claude` CLI on PATH?)");return l.unref(),{pid:l.pid,model:t}}};function Im(e,r){return["--model",r,"-p","--verbose","--permission-mode",e.executionMode==="read_only"?"plan":"bypassPermissions","--output-format","stream-json","--include-partial-messages",...e.mcpConfigPath?["--mcp-config",e.mcpConfigPath,`--allowedTools=${(e.mcpAllowedTools?.length?e.mcpAllowedTools:Sm).join(",")}`]:[],"--",e.prompt]}import{closeSync as Dm,existsSync as B_,openSync as Wm}from"node:fs";import{spawn as il}from"node:child_process";O();import{closeSync as Om,openSync as Tm}from"node:fs";import{spawn as N_}from"node:child_process";O();var sl=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.5";function M_(e,r){return De({...process.env,CI:"1",NO_COLOR:"1",HERMES_ACCEPT_HOOKS:process.env.HERMES_ACCEPT_HOOKS??"1",...r?{CODEX_HOME:r}:{}},{reviewWorker:e})}function D_(e,r){let t=process.env.KYNVER_HERMES_CODEX_MAX_TURNS?.trim()||"40";return["chat","-q",r,"--provider","openai-codex","-m",e,"-Q","--accept-hooks","--max-turns",t,"--toolsets","hermes-cli"]}var Nm={name:"hermes-codex",defaultModel:sl,preflightModel(e){return $t(e,sl)},start(e){if(e.executionMode==="read_only")throw new Error("hermes-codex provider cannot enforce read_only execution mode (no sandbox flag); route read_only tasks to the direct codex exec path or another provider");let r=$t(e.model,sl);if(!r.ok)throw new Error(`hermes-codex provider model preflight failed: ${r.note}`);let t=r.model,n=Me("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),[o,s]=ve(n,D_(t,e.prompt)),i=Tm(e.stdoutPath,"a"),a=Tm(e.stderrPath,"a"),l=["ignore",i,a],c=N_(o,s,ae({cwd:e.worktreePath,detached:ce(),shell:!1,stdio:l,env:M_(e.reviewWorker,e.codexHome)}));if(Om(i),Om(a),!c.pid)throw new Error(`failed to spawn Hermes openai-codex worker (is \`${n}\` on PATH? run \`hermes auth status openai-codex\`)`);return c.unref(),{pid:c.pid,model:t}}};var W_="KYNVER_CODEX_WINDOWS_SANDBOX",L_="unelevated";function U_(e=process.env){return e[W_]?.trim().toLowerCase()==="elevated"?"elevated":L_}function Mm(e=process.platform,r=process.env){return e!=="win32"?[]:["-c",`windows.sandbox="${U_(r)}"`]}function F_(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.5"}var xr=F_();function al(){return process.env.KYNVER_CODEX_BIN?.trim()||process.env.CODEX_BIN?.trim()||"codex"}function K_(e,r){return De({...process.env,CI:"1",NO_COLOR:"1",...r?{CODEX_HOME:r}:{}},{reviewWorker:e})}function H_(e,r,t,n=process.platform,o=process.env){return["--ask-for-approval","never","exec",...Mm(n,o),"--json","--sandbox",t==="read_only"?"read-only":"workspace-write","--model",e,r]}function $_(e,r,t){if(process.platform==="win32"){let[s,i]=ve(e,r);return il(s,i,t)}if(!B_("/usr/bin/script"))return il(e,r,t);let o=[e,...r].map(s=>`'${s.replace(/'/g,"'\\''")}'`).join(" ");return il("script",["-qfc",o,"/dev/null"],t)}var Lm={name:"codex",defaultModel:xr,preflightModel(e){return $t(e,xr)},start(e){if(Ht().path==="hermes_openai_codex"&&e.executionMode!=="read_only")return Nm.start(e);let t=$t(e.model,xr);if(!t.ok)throw new Error(`codex provider model preflight failed: ${t.note}`);let n=t.model,o=Wm(e.stdoutPath,"a"),s=Wm(e.stderrPath,"a"),i=["ignore",o,s],a=al(),l=H_(n,e.prompt,e.executionMode),c;try{c=$_(a,l,ae({cwd:e.worktreePath,detached:ce(),shell:!1,stdio:i,env:K_(e.reviewWorker,e.codexHome)}))}finally{Dm(o),Dm(s)}if(!c.pid)throw new Error(`failed to spawn Codex worker (is \`${a}\` on PATH? run \`codex login\` or set CODEX_API_KEY)`);return c.unref(),{pid:c.pid,model:n}}};import{closeSync as Um,openSync as Bm}from"node:fs";import J_ from"node:path";import{fileURLToPath as z_}from"node:url";import{spawn as X_}from"node:child_process";O();import{existsSync as Cs}from"node:fs";import ct from"node:path";import{fileURLToPath as j_}from"node:url";function V_(e,r){let t=ct.resolve(e);for(;;){let n=ct.join(t,r);if(Cs(n))return n;let o=ct.dirname(t);if(o===t)return null;t=o}}function G_(e){return V_(e,ct.join("node_modules",".bin","tsx"))??"npx"}function ll(e,r){if(e.endsWith(".ts")){let t=G_(ct.dirname(e));return{command:t,argsPrefix:t==="npx"?["tsx",e]:[e],cliPath:e}}return{command:r,argsPrefix:[e],cliPath:e}}function Es(e){if(e.explicitCliPath)return Cs(e.explicitCliPath)?ll(e.explicitCliPath,e.nodeExecutable):null;let r=j_(new URL(".",e.importMetaUrl)),t=ct.join(r,"cli.js");if(Cs(t))return ll(t,e.nodeExecutable);let n=ct.join(r,"cli.ts");return Cs(n)?ll(n,e.nodeExecutable):null}var Y_="X-Kynver-Job-Token",Gn={agent_os_context_envelope:{name:"agent_os_context_envelope",description:"Fetch the context envelope for YOUR OWN task: goal/plan/task summaries, relevant memory, and recent session context. Optional memoryQuery focuses the memory portion.",inputSchema:{type:"object",properties:{memoryQuery:{type:"string",description:"Focus the memory portion of the envelope."},mode:{type:"string",description:"Envelope mode hint."}},additionalProperties:!1}},agent_os_search_memory:{name:"agent_os_search_memory",description:"Semantic search over the workspace's long-term memory. Returns a bounded top-N of relevant entries.",inputSchema:{type:"object",properties:{query:{type:"string",description:"What to search for."},k:{type:"integer",minimum:1,maximum:20,description:"How many entries to return."}},required:["query"],additionalProperties:!1}},agent_os_search_skills:{name:"agent_os_search_skills",description:"Search the workspace's skill library (bounded, metadata-only index). Use agent_os_get_skill to fetch one full skill by slug.",inputSchema:{type:"object",properties:{query:{type:"string"},limit:{type:"integer",minimum:1,maximum:25}},additionalProperties:!1}},agent_os_get_skill:{name:"agent_os_get_skill",description:"Fetch ONE full skill (including instructions) by slug.",inputSchema:{type:"object",properties:{slug:{type:"string"}},required:["slug"],additionalProperties:!1}},agent_os_progress_note:{name:"agent_os_progress_note",description:"Append a progress or blocker note to YOUR OWN task's journal. kind: 'progress' (default) or 'blocked'.",inputSchema:{type:"object",properties:{note:{type:"string"},kind:{type:"string",enum:["progress","blocked"]},eventKey:{type:"string"}},required:["note"],additionalProperties:!1}}};function q_(e){return`/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/worker`}async function jn(e,r,t){let n=await e.fetchImpl(`${e.apiBaseUrl}${r}`,{method:t?.method??"GET",headers:{[Y_]:e.token,...t?{"Content-Type":"application/json"}:{}},...t?{body:JSON.stringify(t.body)}:{}});if(!n.ok)throw new Error(`request failed (${n.status})`);return n.json()}function Vn(e){return typeof e=="string"&&e.trim()?e.trim():void 0}async function Ps(e,r,t){let n=q_(e);switch(r){case"agent_os_context_envelope":{let o=new URLSearchParams({task:e.taskId}),s=Vn(t.memoryQuery);s&&o.set("memoryQuery",s);let i=Vn(t.mode);return i&&o.set("mode",i),jn(e,`${n}/context-envelope?${o.toString()}`)}case"agent_os_search_memory":{let o=new URLSearchParams({q:String(t.query??"")});return typeof t.k=="number"&&o.set("k",String(t.k)),jn(e,`${n}/memory-search?${o.toString()}`)}case"agent_os_search_skills":{let o=new URLSearchParams,s=Vn(t.query);s&&o.set("q",s),typeof t.limit=="number"&&o.set("limit",String(t.limit));let i=o.toString();return jn(e,`${n}/skills${i?`?${i}`:""}`)}case"agent_os_get_skill":return jn(e,`${n}/skills/${encodeURIComponent(String(t.slug??""))}`);case"agent_os_progress_note":return jn(e,`${n}/progress-note`,{method:"POST",body:{note:String(t.note??""),...t.kind==="blocked"?{kind:"blocked"}:{},...Vn(t.eventKey)?{eventKey:Vn(t.eventKey)}:{}}})}}function Gt(e){return Fn.includes(e)}function As(e){return Kn(e).filter(Gt).map(r=>{let t=Gn[r];return{type:"function",function:{name:t.name,description:t.description,parameters:t.inputSchema}}})}var ut="openai-compatible",Q_=600*1e3;function cl(e=process.env){return e.KYNVER_WORKER_MODEL?.trim()||void 0}var Yn=class extends Error{};function Z_(e=process.env){let r=e.KYNVER_WORKER_BASE_URL?.trim();if(!r)throw new Yn(`the "openai-compatible" worker provider requires KYNVER_WORKER_BASE_URL on the daemon host \u2014 point it at any OpenAI-compatible chat-completions endpoint (e.g. http://localhost:11434/v1 for Ollama, http://localhost:8000/v1 for vLLM, or your gateway's /v1 URL). Set KYNVER_WORKER_API_KEY too when the endpoint requires auth.`);let t;try{t=new URL(r)}catch{throw new Yn(`KYNVER_WORKER_BASE_URL is not a valid URL: "${r}" \u2014 expected e.g. http://localhost:11434/v1`)}if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Yn(`KYNVER_WORKER_BASE_URL must be http(s), got "${t.protocol}//" \u2014 e.g. http://localhost:11434/v1`);let n=Number(e.KYNVER_WORKER_TIMEOUT_MS??""),o=Number.isFinite(n)&&n>0?Math.floor(n):Q_;return{baseUrl:r.replace(/\/+$/,""),...e.KYNVER_WORKER_API_KEY?.trim()?{apiKey:e.KYNVER_WORKER_API_KEY.trim()}:{},timeoutMs:o}}var eC="You are a Kynver harness worker executing one work unit end to end. Follow the task instructions exactly and produce the complete deliverable (analysis, answer, or unified diff as the task requires) in a single response. Be precise and complete \u2014 your response is recorded verbatim as the work unit's final result.";function ul(e,r,t,n){return{url:`${e.baseUrl}/chat/completions`,headers:{"content-type":"application/json",...e.apiKey?{authorization:`Bearer ${e.apiKey}`}:{}},body:{model:r,temperature:0,stream:!1,messages:[{role:"system",content:eC},{role:"user",content:t}],...n&&n.length?{tools:n,tool_choice:"auto"}:{}}}}function rC(){let e=z_(new URL(".",import.meta.url)),r=import.meta.url.endsWith(".ts"),t=J_.join(e,r?"openai-compatible-runner.ts":"openai-compatible-runner.js"),n=Es({importMetaUrl:import.meta.url,explicitCliPath:t,nodeExecutable:process.execPath});if(!n)throw new Error(`openai-compatible runner script not found at ${t} \u2014 is the @kynver-app/runtime install complete?`);return{command:n.command,argsPrefix:n.argsPrefix}}function tC(e,r,t){let n=e.workerToolGrant,o=n?As(n.capabilities):void 0;return{provider:ut,model:t,request:ul(r,t,e.prompt,o),timeoutMs:r.timeoutMs,heartbeatPath:e.heartbeatPath,endpointOrigin:new URL(r.baseUrl).origin,...n&&o&&o.length?{workerTools:n}:{}}}function dl(e,r,t){let n=rC(),o=Bm(e.stdoutPath,"a"),s=Bm(e.stderrPath,"a"),i=["pipe",o,s],a=X_(n.command,n.argsPrefix,ae({cwd:e.worktreePath,detached:ce(),shell:!1,stdio:i,env:De(process.env,{reviewWorker:e.reviewWorker})}));if(Um(o),Um(s),!a.pid)throw new Error(`failed to spawn ${r.provider} worker runner (node executable unavailable?)`);try{a.stdin?.on("error",()=>{}),a.stdin?.write(JSON.stringify(r)),a.stdin?.end()}catch(l){throw new Error(`failed to hand request config to ${r.provider} runner: ${l.message}`)}return a.unref(),{pid:a.pid,model:t}}var Fm={name:ut,get defaultModel(){return cl()},preflightModel(e){return Va(e,cl())},start(e){let r=Va(e.model,cl());if(!r.ok)throw new Error(`openai-compatible provider model preflight failed: ${r.note}`);let t=r.model,n=Z_(process.env),o=tC(e,n,t);return dl(e,o,t)}};import{closeSync as Vm,openSync as Gm}from"node:fs";import{spawn as sC}from"node:child_process";O();import nC from"node:path";var oC=new Set(["gemini-2.5-pro","gemini-2.5-flash","auto","pro","flash","flash-lite"]);function Is(e=process.env){return e.KYNVER_GEMINI_BIN?.trim()||e.GEMINI_BIN?.trim()||"agy"}function Os(e){let r=nC.basename(e).toLowerCase().replace(/\.cmd$/i,"").replace(/\.exe$/i,"");return r==="agy"||r==="antigravity"?"antigravity":"gemini"}function Km(e){return e.requested&&/-(?:high|medium|low)$/i.test(e.requested)?e.requested:e.model}function Hm(e){let r=e.trim().toLowerCase();return!r||oC.has(r)?[]:["--model",e.trim()]}function $m(e,r){return[...Hm(r),"--output-format","stream-json",...e.executionMode==="read_only"?[]:["--dangerously-skip-permissions"],"--prompt",e.prompt]}function jm(e,r){return["--model",r,"--approval-mode",e.executionMode==="read_only"?"plan":"yolo","--output-format","stream-json","--skip-trust",...e.mcpConfigPath?["--allowed-mcp-server-names",ne]:[],"--prompt",e.prompt]}var ir="gemini";function Ae(e=process.env){return e.KYNVER_GEMINI_DEFAULT_MODEL?.trim()||"gemini-2.5-pro"}function iC(e,r){return De({...process.env,CI:"1",NO_COLOR:"1",GEMINI_CLI_TRUST_WORKSPACE:"true",...r?{GEMINI_CLI_HOME:r}:{}},{reviewWorker:e})}var Ym={name:ir,get defaultModel(){return Ae()},preflightModel(e){return jt(e,Ae())},start(e){let r=jt(e.model,Ae());if(!r.ok)throw new Error(`gemini provider model preflight failed: ${r.note}`);let t=Is(),n=Os(t),o=n==="antigravity"?Km(r):r.model,s=n==="antigravity"?$m(e,o):jm(e,o),[i,a]=ve(t,s),l=Gm(e.stdoutPath,"a"),c=Gm(e.stderrPath,"a"),u=["ignore",l,c],d=sC(i,a,ae({cwd:e.worktreePath,detached:ce(),shell:!1,stdio:u,env:iC(e.reviewWorker,n==="gemini"?e.geminiCliHome:void 0)}));if(Vm(l),Vm(c),!d.pid)throw new Error(`failed to spawn Google Antigravity worker (is \`${t}\` on PATH? install Google Antigravity and run \`agy\` once to sign in`+(n==="antigravity"?'; GEMINI_API_KEY is used only when ~/.gemini/antigravity-cli/settings.json sets "modelProvider": "gemini")':", or set GEMINI_API_KEY)"));return d.unref(),{pid:d.pid,model:o}}};var ar="gemini-api",qm="https://generativelanguage.googleapis.com/v1beta/openai",aC=600*1e3,qn=class extends Error{};function lC(e=process.env){return e.KYNVER_GEMINI_API_KEY?.trim()||e.GEMINI_API_KEY?.trim()||void 0}function cC(e=process.env){let r=lC(e);if(!r)throw new qn('the "gemini-api" worker provider requires KYNVER_GEMINI_API_KEY or GEMINI_API_KEY on the daemon host \u2014 create a key at https://aistudio.google.com/apikey. To use Google Antigravity instead, set workerProvider / --provider gemini and run `agy` once to sign in.');let t=e.KYNVER_GEMINI_BASE_URL?.trim()||qm,n;try{n=new URL(t)}catch{throw new qn(`KYNVER_GEMINI_BASE_URL is not a valid URL: "${t}" \u2014 expected e.g. ${qm}`)}if(n.protocol!=="http:"&&n.protocol!=="https:")throw new qn(`KYNVER_GEMINI_BASE_URL must be http(s), got "${n.protocol}//"`);let o=Number(e.KYNVER_WORKER_TIMEOUT_MS??""),s=Number.isFinite(o)&&o>0?Math.floor(o):aC;return{baseUrl:t.replace(/\/+$/,""),apiKey:r,timeoutMs:s}}function uC(e,r,t){let n=e.workerToolGrant,o=n?As(n.capabilities):void 0,s=ul(r,t,e.prompt,o);return{provider:ar,model:t,request:s,timeoutMs:r.timeoutMs,heartbeatPath:e.heartbeatPath,endpointOrigin:new URL(r.baseUrl).origin,...n&&o&&o.length?{workerTools:n}:{}}}var Jm={name:ar,get defaultModel(){return Ae()},preflightModel(e){return jt(e,Ae())},start(e){let r=jt(e.model,Ae());if(!r.ok)throw new Error(`gemini-api provider model preflight failed: ${r.note}`);let t=r.model,n=cC(process.env),o=uC(e,n,t);return dl(e,o,t)}};var dC="claude-sonnet-4-6",vs="composer-2.5";function we(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function pC(e){if(!e)return;let r=we(e,"workerModelOverride")||we(e,"modelOverride");return r||`${we(e,"title")}
+${n}`;return iE.some(s=>s.test(o))?"privileged":r.includes("provider:claude")||r.includes("deep_review")||r.includes("security")||r.includes("landing")||r.includes("review")||t.startsWith("land:")||r.includes("implementer")||r.includes("repair")||t.includes("implement")?"elevated":aE.some(s=>s.test(o))?"low":"elevated"}function cE(e){let r=Vt(e.provider),t=e.escalatedFrom&&e.escalatedReason?`Escalated from ${e.escalatedFrom} (${e.escalatedReason}); using ${r.displayName} (${r.costTier} tier)`:`${r.displayName} selected for ${e.riskClass} orchestration (${r.costTier} tier, auth=${e.authSource})`;return{provider:e.provider,model:e.model,authSource:e.authSource,costTier:r.costTier,riskClass:e.riskClass,costRationale:t,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason}}function uE(e){let r=e.inventory??$m();return e.codexBinding?{...r,bindings:{...r.bindings,codex:e.codexBinding}}:r}function pt(e){let r=cE({provider:e.providerId,model:e.model,authSource:e.binding.authSource,riskClass:e.riskClass,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason});return{provider:e.providerId,model:e.model,rule:r.routingRule,audit:r}}function jm(e){let r=e.task??{},t=lE(r),n=uE({inventory:e.inventory,codexBinding:e.codexBinding??(e.inventory?null:Yt())}),o=e.preferLowCost===!1?null:e.explicitProvider?.trim().toLowerCase(),s=e.explicitModel?.trim()||void 0,i=Er;if(o==="codex"||o==="provider:codex"){let c=n.bindings.codex;if(!c.ready){let u=el({inventory:n,riskClass:t});return pt(u?{providerId:u.providerId,binding:u.binding,riskClass:t,routingRule:"orchestration:explicit_codex_unavailable_cost_aware",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"}:{providerId:i,binding:n.bindings[i],riskClass:t,routingRule:"orchestration:codex_unavailable_escalate_cursor",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"})}return pt({providerId:"codex",binding:c,riskClass:t,routingRule:"orchestration:explicit_codex",model:s})}if(o==="cursor"||o==="provider:cursor"){let c=n.bindings.cursor;if(c.ready)return pt({providerId:"cursor",binding:c,riskClass:t,routingRule:"orchestration:explicit_cursor",model:s})}if(o==="claude"||o==="provider:claude"){let c=n.bindings.claude;if(c.ready)return pt({providerId:"claude",binding:c,riskClass:t,routingRule:"orchestration:explicit_claude",model:s})}let a=el({inventory:n,riskClass:t});if(a)return pt({providerId:a.providerId,binding:a.binding,riskClass:t,routingRule:`orchestration:cost_aware_${a.providerId}`,model:s,escalatedFrom:a.escalatedFrom,escalatedReason:a.escalatedReason});let l=n.bindings.codex;return pt({providerId:i,binding:n.bindings[i],riskClass:t,routingRule:l.ready?"orchestration:inventory_empty_default_cursor":"orchestration:codex_unavailable_default_cursor",model:s,...l.ready?{}:{escalatedFrom:"codex",escalatedReason:l.note??"codex oauth not bound"}})}Rr();import{closeSync as zm,openSync as Xm}from"node:fs";import{spawn as vE}from"node:child_process";O();import{unlinkSync as dE,writeFileSync as pE}from"node:fs";import mE from"node:path";var Ze="KYNVER_WORKER_BROKER_SOCKET";function ml(e){return`${JSON.stringify(e)}
+`}function fl(e){let r;try{r=JSON.parse(e)}catch{return{ok:!1,reason:"malformed_request",error:"request was not valid JSON",id:""}}if(!r||typeof r!="object"||Array.isArray(r))return{ok:!1,reason:"malformed_request",error:"request must be a JSON object",id:""};let t=r,n=typeof t.id=="string"?t.id:"";if(t.v!==1)return{ok:!1,reason:"unsupported_protocol",error:"unsupported protocol version (expected 1)",id:n};if(!n)return{ok:!1,reason:"malformed_request",error:"request id must be a non-empty string",id:""};if(t.op==="list_tools")return{ok:!0,request:{v:1,id:n,op:"list_tools"}};if(t.op==="call_tool"){if(typeof t.name!="string"||!t.name)return{ok:!1,reason:"malformed_request",error:"call_tool requires a tool name",id:n};let o=t.args&&typeof t.args=="object"&&!Array.isArray(t.args)?t.args:{};return{ok:!0,request:{v:1,id:n,op:"call_tool",name:t.name,args:o}}}return{ok:!1,reason:"malformed_request",error:"unknown op",id:n}}var fE="KYNVER_WORKER_MCP_TOOLS",gE="mcp-config.json",oe="kynver",Vn=["agent_os_context_envelope","agent_os_search_memory","agent_os_search_skills","agent_os_get_skill","agent_os_progress_note"],Vm=Vn.map(e=>`mcp__${oe}__${e}`),hE={"worker.context":["agent_os_context_envelope"],"worker.memory.read":["agent_os_search_memory"],"worker.skills.read":["agent_os_search_skills","agent_os_get_skill"],"worker.progress.report":["agent_os_progress_note"]};function Gn(e){if(!e||e.length===0)return[...Vn];let r=new Set;for(let t of e)for(let n of hE[t]??[])r.add(n);return Vn.filter(t=>r.has(t))}function Gm(e){return Gn(e).map(r=>`mcp__${oe}__${r}`)}var kE=["claude","cursor","codex","openai-compatible","gemini","gemini-api"],yE=["openai-compatible","gemini-api"];function RE(e){return kE.includes(e)}function gl(e){return yE.includes(e)}function Ym(e){return RE(e)&&!gl(e)}function Yn(e=process.env){let r=e[fE]?.trim().toLowerCase();return r?r==="1"||r==="true"||r==="yes"||r==="on":!0}function qm(e){return mE.join(e,gE)}function Jm(e){let r=qm(e.workerDir),t={mcpServers:{[oe]:{command:"npx",args:["-y","-p","@kynver-app/mcp-agent-os","kynver-worker-mcp"],env:{[Ze]:e.brokerSocketPath}}}};return pE(r,`${JSON.stringify(t,null,2)}
+`,{mode:384}),r}function Ns(e){try{return dE(qm(e)),!0}catch{return!1}}var jr="claude-sonnet-4-6",qn="claude-opus-4-8";function bE(e,r){let n=Zm(e,r).at(-1);if(typeof n!="string"||!n.trim())throw new Error("claude provider refuses to spawn: worker prompt is empty after argv assembly (stdin is ignored \u2014 fix prompt delivery before retrying)")}var Qm={name:"claude",defaultModel:jr,preflightModel(e){return rl(e,jr)},start(e){let r=rl(e.model,jr);if(!r.ok)throw new Error(`claude provider model preflight failed: ${r.note}`);let t=r.model;bE(e,t);let[n,o]=ve("claude",Zm(e,t)),s=Xm(e.stdoutPath,"a"),i=Xm(e.stderrPath,"a"),a=["ignore",s,i],[l,c]=Ce(n,o,e.workerDir),u=vE(l,c,ae({cwd:e.worktreePath,detached:ce(),stdio:a,env:Ue(process.env,{reviewWorker:e.reviewWorker})}));if(zm(s),zm(i),!u.pid)throw new Error("failed to spawn claude worker process (is the `claude` CLI on PATH?)");return u.unref(),{pid:u.pid,model:t}}};function Zm(e,r){return["--model",r,"-p","--verbose","--permission-mode",e.executionMode==="read_only"?"plan":"bypassPermissions","--output-format","stream-json","--include-partial-messages",...e.mcpConfigPath?["--mcp-config",e.mcpConfigPath,`--allowedTools=${(e.mcpAllowedTools?.length?e.mcpAllowedTools:Vm).join(",")}`]:[],"--",e.prompt]}Rr();import{closeSync as of,existsSync as PE,openSync as sf}from"node:fs";import{spawn as kl}from"node:child_process";O();Rr();import{closeSync as ef,openSync as rf}from"node:fs";import{spawn as SE}from"node:child_process";O();var hl=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.5";function wE(e,r){return Ue({...process.env,CI:"1",NO_COLOR:"1",HERMES_ACCEPT_HOOKS:process.env.HERMES_ACCEPT_HOOKS??"1",...r?{CODEX_HOME:r}:{}},{reviewWorker:e})}function xE(e,r){let t=process.env.KYNVER_HERMES_CODEX_MAX_TURNS?.trim()||"40";return["chat","-q",r,"--provider","openai-codex","-m",e,"-Q","--accept-hooks","--max-turns",t,"--toolsets","hermes-cli"]}var tf={name:"hermes-codex",defaultModel:hl,preflightModel(e){return qt(e,hl)},start(e){if(e.executionMode==="read_only")throw new Error("hermes-codex provider cannot enforce read_only execution mode (no sandbox flag); route read_only tasks to the direct codex exec path or another provider");let r=qt(e.model,hl);if(!r.ok)throw new Error(`hermes-codex provider model preflight failed: ${r.note}`);let t=r.model,n=Le("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),[o,s]=ve(n,xE(t,e.prompt)),i=rf(e.stdoutPath,"a"),a=rf(e.stderrPath,"a"),l=["ignore",i,a],[c,u]=Ce(o,s,e.workerDir),d=SE(c,u,ae({cwd:e.worktreePath,detached:ce(),shell:!1,stdio:l,env:wE(e.reviewWorker,e.codexHome)}));if(ef(i),ef(a),!d.pid)throw new Error(`failed to spawn Hermes openai-codex worker (is \`${n}\` on PATH? run \`hermes auth status openai-codex\`)`);return d.unref(),{pid:d.pid,model:t}}};var _E="KYNVER_CODEX_WINDOWS_SANDBOX",EE="unelevated";function CE(e=process.env){return e[_E]?.trim().toLowerCase()==="elevated"?"elevated":EE}function nf(e=process.platform,r=process.env){return e!=="win32"?[]:["-c",`windows.sandbox="${CE(r)}"`]}function AE(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.5"}var Cr=AE();function yl(){return process.env.KYNVER_CODEX_BIN?.trim()||process.env.CODEX_BIN?.trim()||"codex"}function IE(e,r){return Ue({...process.env,CI:"1",NO_COLOR:"1",...r?{CODEX_HOME:r}:{}},{reviewWorker:e})}function OE(e,r,t,n=process.platform,o=process.env){return["--ask-for-approval","never","exec",...nf(n,o),"--json","--sandbox",t==="read_only"?"read-only":"workspace-write","--model",e,r]}function TE(e,r,t,n){if(process.platform==="win32"){let[l,c]=ve(e,r);return kl(l,c,t)}if(!PE("/usr/bin/script")){let[l,c]=Ce(e,r,n);return kl(l,c,t)}let s=[e,...r].map(l=>`'${l.replace(/'/g,"'\\''")}'`).join(" "),[i,a]=Ce("script",["-qfc",s,"/dev/null"],n);return kl(i,a,t)}var af={name:"codex",defaultModel:Cr,preflightModel(e){return qt(e,Cr)},start(e){if(Yt().path==="hermes_openai_codex"&&e.executionMode!=="read_only")return tf.start(e);let t=qt(e.model,Cr);if(!t.ok)throw new Error(`codex provider model preflight failed: ${t.note}`);let n=t.model,o=sf(e.stdoutPath,"a"),s=sf(e.stderrPath,"a"),i=["ignore",o,s],a=yl(),l=OE(n,e.prompt,e.executionMode),c;try{c=TE(a,l,ae({cwd:e.worktreePath,detached:ce(),shell:!1,stdio:i,env:IE(e.reviewWorker,e.codexHome)}),e.workerDir)}finally{of(o),of(s)}if(!c.pid)throw new Error(`failed to spawn Codex worker (is \`${a}\` on PATH? run \`codex login\` or set CODEX_API_KEY)`);return c.unref(),{pid:c.pid,model:n}}};Rr();import{closeSync as lf,openSync as cf}from"node:fs";import UE from"node:path";import{fileURLToPath as BE}from"node:url";import{spawn as FE}from"node:child_process";O();import{existsSync as Ms}from"node:fs";import mt from"node:path";import{fileURLToPath as NE}from"node:url";function ME(e,r){let t=mt.resolve(e);for(;;){let n=mt.join(t,r);if(Ms(n))return n;let o=mt.dirname(t);if(o===t)return null;t=o}}function DE(e){return ME(e,mt.join("node_modules",".bin","tsx"))??"npx"}function Rl(e,r){if(e.endsWith(".ts")){let t=DE(mt.dirname(e));return{command:t,argsPrefix:t==="npx"?["tsx",e]:[e],cliPath:e}}return{command:r,argsPrefix:[e],cliPath:e}}function Ds(e){if(e.explicitCliPath)return Ms(e.explicitCliPath)?Rl(e.explicitCliPath,e.nodeExecutable):null;let r=NE(new URL(".",e.importMetaUrl)),t=mt.join(r,"cli.js");if(Ms(t))return Rl(t,e.nodeExecutable);let n=mt.join(r,"cli.ts");return Ms(n)?Rl(n,e.nodeExecutable):null}var WE="X-Kynver-Job-Token",Xn={agent_os_context_envelope:{name:"agent_os_context_envelope",description:"Fetch the context envelope for YOUR OWN task: goal/plan/task summaries, relevant memory, and recent session context. Optional memoryQuery focuses the memory portion.",inputSchema:{type:"object",properties:{memoryQuery:{type:"string",description:"Focus the memory portion of the envelope."},mode:{type:"string",description:"Envelope mode hint."}},additionalProperties:!1}},agent_os_search_memory:{name:"agent_os_search_memory",description:"Semantic search over the workspace's long-term memory. Returns a bounded top-N of relevant entries.",inputSchema:{type:"object",properties:{query:{type:"string",description:"What to search for."},k:{type:"integer",minimum:1,maximum:20,description:"How many entries to return."}},required:["query"],additionalProperties:!1}},agent_os_search_skills:{name:"agent_os_search_skills",description:"Search the workspace's skill library (bounded, metadata-only index). Use agent_os_get_skill to fetch one full skill by slug.",inputSchema:{type:"object",properties:{query:{type:"string"},limit:{type:"integer",minimum:1,maximum:25}},additionalProperties:!1}},agent_os_get_skill:{name:"agent_os_get_skill",description:"Fetch ONE full skill (including instructions) by slug.",inputSchema:{type:"object",properties:{slug:{type:"string"}},required:["slug"],additionalProperties:!1}},agent_os_progress_note:{name:"agent_os_progress_note",description:"Append a progress or blocker note to YOUR OWN task's journal. kind: 'progress' (default) or 'blocked'.",inputSchema:{type:"object",properties:{note:{type:"string"},kind:{type:"string",enum:["progress","blocked"]},eventKey:{type:"string"}},required:["note"],additionalProperties:!1}}};function LE(e){return`/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/worker`}async function Jn(e,r,t){let n=await e.fetchImpl(`${e.apiBaseUrl}${r}`,{method:t?.method??"GET",headers:{[WE]:e.token,...t?{"Content-Type":"application/json"}:{}},...t?{body:JSON.stringify(t.body)}:{}});if(!n.ok)throw new Error(`request failed (${n.status})`);return n.json()}function zn(e){return typeof e=="string"&&e.trim()?e.trim():void 0}async function Ws(e,r,t){let n=LE(e);switch(r){case"agent_os_context_envelope":{let o=new URLSearchParams({task:e.taskId}),s=zn(t.memoryQuery);s&&o.set("memoryQuery",s);let i=zn(t.mode);return i&&o.set("mode",i),Jn(e,`${n}/context-envelope?${o.toString()}`)}case"agent_os_search_memory":{let o=new URLSearchParams({q:String(t.query??"")});return typeof t.k=="number"&&o.set("k",String(t.k)),Jn(e,`${n}/memory-search?${o.toString()}`)}case"agent_os_search_skills":{let o=new URLSearchParams,s=zn(t.query);s&&o.set("q",s),typeof t.limit=="number"&&o.set("limit",String(t.limit));let i=o.toString();return Jn(e,`${n}/skills${i?`?${i}`:""}`)}case"agent_os_get_skill":return Jn(e,`${n}/skills/${encodeURIComponent(String(t.slug??""))}`);case"agent_os_progress_note":return Jn(e,`${n}/progress-note`,{method:"POST",body:{note:String(t.note??""),...t.kind==="blocked"?{kind:"blocked"}:{},...zn(t.eventKey)?{eventKey:zn(t.eventKey)}:{}}})}}function Xt(e){return Vn.includes(e)}function Ls(e){return Gn(e).filter(Xt).map(r=>{let t=Xn[r];return{type:"function",function:{name:t.name,description:t.description,parameters:t.inputSchema}}})}var ft="openai-compatible",KE=600*1e3;function vl(e=process.env){return e.KYNVER_WORKER_MODEL?.trim()||void 0}var Qn=class extends Error{};function HE(e=process.env){let r=e.KYNVER_WORKER_BASE_URL?.trim();if(!r)throw new Qn(`the "openai-compatible" worker provider requires KYNVER_WORKER_BASE_URL on the daemon host \u2014 point it at any OpenAI-compatible chat-completions endpoint (e.g. http://localhost:11434/v1 for Ollama, http://localhost:8000/v1 for vLLM, or your gateway's /v1 URL). Set KYNVER_WORKER_API_KEY too when the endpoint requires auth.`);let t;try{t=new URL(r)}catch{throw new Qn(`KYNVER_WORKER_BASE_URL is not a valid URL: "${r}" \u2014 expected e.g. http://localhost:11434/v1`)}if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Qn(`KYNVER_WORKER_BASE_URL must be http(s), got "${t.protocol}//" \u2014 e.g. http://localhost:11434/v1`);let n=Number(e.KYNVER_WORKER_TIMEOUT_MS??""),o=Number.isFinite(n)&&n>0?Math.floor(n):KE;return{baseUrl:r.replace(/\/+$/,""),...e.KYNVER_WORKER_API_KEY?.trim()?{apiKey:e.KYNVER_WORKER_API_KEY.trim()}:{},timeoutMs:o}}var $E="You are a Kynver harness worker executing one work unit end to end. Follow the task instructions exactly and produce the complete deliverable (analysis, answer, or unified diff as the task requires) in a single response. Be precise and complete \u2014 your response is recorded verbatim as the work unit's final result.";function bl(e,r,t,n){return{url:`${e.baseUrl}/chat/completions`,headers:{"content-type":"application/json",...e.apiKey?{authorization:`Bearer ${e.apiKey}`}:{}},body:{model:r,temperature:0,stream:!1,messages:[{role:"system",content:$E},{role:"user",content:t}],...n&&n.length?{tools:n,tool_choice:"auto"}:{}}}}function jE(){let e=BE(new URL(".",import.meta.url)),r=import.meta.url.endsWith(".ts"),t=UE.join(e,r?"openai-compatible-runner.ts":"openai-compatible-runner.js"),n=Ds({importMetaUrl:import.meta.url,explicitCliPath:t,nodeExecutable:process.execPath});if(!n)throw new Error(`openai-compatible runner script not found at ${t} \u2014 is the @kynver-app/runtime install complete?`);return{command:n.command,argsPrefix:n.argsPrefix}}function VE(e,r,t){let n=e.workerToolGrant,o=n?Ls(n.capabilities):void 0;return{provider:ft,model:t,request:bl(r,t,e.prompt,o),timeoutMs:r.timeoutMs,heartbeatPath:e.heartbeatPath,endpointOrigin:new URL(r.baseUrl).origin,...n&&o&&o.length?{workerTools:n}:{}}}function Sl(e,r,t){let n=jE(),o=cf(e.stdoutPath,"a"),s=cf(e.stderrPath,"a"),i=["pipe",o,s],[a,l]=Ce(n.command,n.argsPrefix,e.workerDir),c=FE(a,l,ae({cwd:e.worktreePath,detached:ce(),shell:!1,stdio:i,env:Ue(process.env,{reviewWorker:e.reviewWorker})}));if(lf(o),lf(s),!c.pid)throw new Error(`failed to spawn ${r.provider} worker runner (node executable unavailable?)`);try{c.stdin?.on("error",()=>{}),c.stdin?.write(JSON.stringify(r)),c.stdin?.end()}catch(u){throw new Error(`failed to hand request config to ${r.provider} runner: ${u.message}`)}return c.unref(),{pid:c.pid,model:t}}var uf={name:ft,get defaultModel(){return vl()},preflightModel(e){return tl(e,vl())},start(e){let r=tl(e.model,vl());if(!r.ok)throw new Error(`openai-compatible provider model preflight failed: ${r.note}`);let t=r.model,n=HE(process.env),o=VE(e,n,t);return Sl(e,o,t)}};Rr();import{closeSync as gf,openSync as hf}from"node:fs";import{spawn as qE}from"node:child_process";O();import GE from"node:path";var YE=new Set(["gemini-2.5-pro","gemini-2.5-flash","auto","pro","flash","flash-lite"]);function Us(e=process.env){return e.KYNVER_GEMINI_BIN?.trim()||e.GEMINI_BIN?.trim()||"agy"}function Bs(e){let r=GE.basename(e).toLowerCase().replace(/\.cmd$/i,"").replace(/\.exe$/i,"");return r==="agy"||r==="antigravity"?"antigravity":"gemini"}function df(e){return e.requested&&/-(?:high|medium|low)$/i.test(e.requested)?e.requested:e.model}function pf(e){let r=e.trim().toLowerCase();return!r||YE.has(r)?[]:["--model",e.trim()]}function mf(e,r){return[...pf(r),"--output-format","stream-json",...e.executionMode==="read_only"?[]:["--dangerously-skip-permissions"],"--prompt",e.prompt]}function ff(e,r){return["--model",r,"--approval-mode",e.executionMode==="read_only"?"plan":"yolo","--output-format","stream-json","--skip-trust",...e.mcpConfigPath?["--allowed-mcp-server-names",oe]:[],"--prompt",e.prompt]}var ar="gemini";function Ie(e=process.env){return e.KYNVER_GEMINI_DEFAULT_MODEL?.trim()||"gemini-2.5-pro"}function JE(e,r){return Ue({...process.env,CI:"1",NO_COLOR:"1",GEMINI_CLI_TRUST_WORKSPACE:"true",...r?{GEMINI_CLI_HOME:r}:{}},{reviewWorker:e})}var kf={name:ar,get defaultModel(){return Ie()},preflightModel(e){return Jt(e,Ie())},start(e){let r=Jt(e.model,Ie());if(!r.ok)throw new Error(`gemini provider model preflight failed: ${r.note}`);let t=Us(),n=Bs(t),o=n==="antigravity"?df(r):r.model,s=n==="antigravity"?mf(e,o):ff(e,o),[i,a]=ve(t,s),l=hf(e.stdoutPath,"a"),c=hf(e.stderrPath,"a"),u=["ignore",l,c],[d,p]=Ce(i,a,e.workerDir),m=qE(d,p,ae({cwd:e.worktreePath,detached:ce(),shell:!1,stdio:u,env:JE(e.reviewWorker,n==="gemini"?e.geminiCliHome:void 0)}));if(gf(l),gf(c),!m.pid)throw new Error(`failed to spawn Google Antigravity worker (is \`${t}\` on PATH? install Google Antigravity and run \`agy\` once to sign in`+(n==="antigravity"?'; GEMINI_API_KEY is used only when ~/.gemini/antigravity-cli/settings.json sets "modelProvider": "gemini")':", or set GEMINI_API_KEY)"));return m.unref(),{pid:m.pid,model:o}}};var lr="gemini-api",yf="https://generativelanguage.googleapis.com/v1beta/openai",zE=600*1e3,Zn=class extends Error{};function XE(e=process.env){return e.KYNVER_GEMINI_API_KEY?.trim()||e.GEMINI_API_KEY?.trim()||void 0}function QE(e=process.env){let r=XE(e);if(!r)throw new Zn('the "gemini-api" worker provider requires KYNVER_GEMINI_API_KEY or GEMINI_API_KEY on the daemon host \u2014 create a key at https://aistudio.google.com/apikey. To use Google Antigravity instead, set workerProvider / --provider gemini and run `agy` once to sign in.');let t=e.KYNVER_GEMINI_BASE_URL?.trim()||yf,n;try{n=new URL(t)}catch{throw new Zn(`KYNVER_GEMINI_BASE_URL is not a valid URL: "${t}" \u2014 expected e.g. ${yf}`)}if(n.protocol!=="http:"&&n.protocol!=="https:")throw new Zn(`KYNVER_GEMINI_BASE_URL must be http(s), got "${n.protocol}//"`);let o=Number(e.KYNVER_WORKER_TIMEOUT_MS??""),s=Number.isFinite(o)&&o>0?Math.floor(o):zE;return{baseUrl:t.replace(/\/+$/,""),apiKey:r,timeoutMs:s}}function ZE(e,r,t){let n=e.workerToolGrant,o=n?Ls(n.capabilities):void 0,s=bl(r,t,e.prompt,o);return{provider:lr,model:t,request:s,timeoutMs:r.timeoutMs,heartbeatPath:e.heartbeatPath,endpointOrigin:new URL(r.baseUrl).origin,...n&&o&&o.length?{workerTools:n}:{}}}var Rf={name:lr,get defaultModel(){return Ie()},preflightModel(e){return Jt(e,Ie())},start(e){let r=Jt(e.model,Ie());if(!r.ok)throw new Error(`gemini-api provider model preflight failed: ${r.note}`);let t=r.model,n=QE(process.env),o=ZE(e,n,t);return Sl(e,o,t)}};var eC="claude-sonnet-4-6",Ps="composer-2.5";function we(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function rC(e){if(!e)return;let r=we(e,"workerModelOverride")||we(e,"modelOverride");return r||`${we(e,"title")}
 ${we(e,"description")}
-${we(e,"executorRef")}`.match(/\[(?:worker-)?model:\s*([^\]\n]+)\]/i)?.[1]?.trim()||void 0}function zm(e){return e.toLowerCase()}function ml(e=U()){let r=e.defaultModel?.trim();if(r)return r;let t=process.env.KYNVER_DEFAULT_MODEL?.trim();return t||dC}function Ts(e){let r=(e??"").toLowerCase();return!r||r.includes("composer")||r.includes("cursor")||r.includes("codex")||r.startsWith("gpt-")||r.startsWith("gpt5")?"cursor":/^claude[-_]/i.test(r)||/^(?:opus|sonnet|haiku)\b/i.test(r)?"claude":r.startsWith("gemini-")?ir:"cursor"}function mC(e,r){let t=e.trim().toLowerCase(),n=r?.trim();return t==="cursor"?{model:vs,provider:"cursor",rule:n&&n!=="cursor"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:t==="claude"||t==="anthropic"?{model:Fr,provider:"claude",rule:n&&n!=="claude"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:t==="gemini"||t==="google"?{model:Ae(),provider:ir,rule:n&&n!==ir?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:t==="gemini-api"||t==="gemini_api"||t==="google-api"?{model:Ae(),provider:ar,rule:n&&n!==ar?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:null}function Xm(e,r){return!!(e.includes("deep")&&e.includes("review")||e.includes("security")||e.includes("plan_author")||e.includes("plan-author")||r.includes("deep review")||r.includes("security review")||e.includes("plan")&&!e.includes("review")&&(e.includes("author")||e.includes("strategy")))}var fC=new Set(["report_reviewer","deep_reviewer","plan_reviewer"]);function Qm(e,r,t){return fC.has(e)?$n:r.includes("review")||/^review[\s:]/.test(t)||t.includes("critique")?$n:Fr}function gC(e){let r=zm(we(e,"executorRef")),t=we(e,"title").toLowerCase(),n=we(e,"priority")||"normal",o=zm(we(e,"roleLane"));if(r.includes("provider:claude")||r.startsWith("claude:")){let i=Qm(o,r,t);return{provider:"claude",model:i,rule:i===$n?"factory:claude_review":"factory:claude_implementation"}}if(r.includes("provider:codex")||r.startsWith("codex:"))return{provider:"codex",model:xr,rule:"lane:codex_orchestration"};if(r.includes("provider:chatgpt")||r.startsWith("chatgpt:")||r.includes("provider:gpt")||r.startsWith("gpt:")){let i=Ne(we(e,"executorRef"));return{provider:"codex",...i?.model?{model:i.model}:{model:xr},rule:"lane:codex_orchestration"}}if(r.includes("provider:openai")||r.startsWith("openai-compatible:")){let i=Ne(we(e,"executorRef"));return{provider:ut,...i?.model?{model:i.model}:{},rule:"lane:openai_compatible"}}if(r.includes("provider:gemini-api")||r.startsWith("gemini-api:")){let i=Ne(we(e,"executorRef"));return{provider:ar,...i?.model?{model:i.model}:{model:Ae()},rule:"lane:gemini_api"}}if(r.includes("provider:gemini")||r.startsWith("gemini:")){let i=Ne(we(e,"executorRef"));return{provider:ir,...i?.model?{model:i.model}:{model:Ae()},rule:"lane:gemini"}}if(r.includes("cursor")||r.includes("composer")||r.includes("copilot")||o==="implementer"||o==="repair_implementer")return{provider:"cursor",rule:"lane:implementation"};if(r.includes("codex"))return{provider:"codex",model:xr,rule:"lane:codex_orchestration"};if(r.includes("landing")||t.startsWith("land:")||t.includes(" merge"))return{provider:"cursor",rule:"lane:landing"};if(r.includes("review")||/^review[\s:]/.test(t)||o.includes("review"))return Xm(r,t)||o==="deep_reviewer"?{provider:"cursor",rule:"lane:deep_review"}:{provider:"cursor",rule:"lane:review"};if(Xm(r,t)||o==="plan_author")return{provider:"cursor",rule:"lane:planning"};if(n==="critical")return{provider:"cursor",rule:"priority:critical"};if(n==="high")return{provider:"cursor",rule:"priority:high"};if(n==="low")return{provider:"cursor",rule:"priority:low"};let s=ml();return{model:s,provider:Ts(s),rule:"default:global"}}function hC(e){return e?Ne(we(e,"executorRef")):null}function kC(e){switch(nr(e)){case ir:case ar:return Ae();case"claude":return Fr;case"codex":return xr;case"cursor":return vs;default:return}}var pl="explicit:cli_provider",Zm="config:worker_provider";function ef(e,r,t){let n=nr(r);return n===e.provider&&e.rule===t?e:{...e,provider:n,model:kC(n)??e.model,rule:t}}function yC(e,r){let t=r?.trim();return!t||e.rule.startsWith("explicit:")&&e.rule!==pl?e:ef(e,t,pl)}function RC(e,r){if(r.explicitProvider?.trim()||Ka(r.task))return e;let t=r.configuredProvider?.trim();if(!t)return e;let n=nr(t);return n===wr||n===e.provider?e:ef(e,n,Zm)}function Ns(e){let r,t=hC(e.task),n=e.explicitModel?.trim()?void 0:t?.model?.trim(),o=!e.explicitProvider?.trim()&&t?.provider?.trim()?t.provider.trim():void 0;if(e.explicitModel?.trim()){let l=e.explicitModel.trim(),c=mC(l,e.explicitProvider);c?r=c:r={model:l,provider:e.explicitProvider?.trim()||Ts(l),rule:"explicit:cli",requestedModel:l}}else if(n)r={model:n,provider:o||Ts(n),rule:t?.rule??"executor_ref:model",requestedModel:n};else if(e.task&&Rs(e.task)){let l=pC(e.task),c,u;if(l)c=l,u="task:provider_override";else{let d=typeof e.task.roleLane=="string"?e.task.roleLane.toLowerCase():"",p=typeof e.task.executorRef=="string"?e.task.executorRef.toLowerCase():"",m=typeof e.task.title=="string"?e.task.title.toLowerCase():"";c=Qm(d,p,m),u=c===$n?"factory:claude_review":"factory:claude_implementation"}r={model:c,provider:"claude",rule:u,requestedModel:c}}else if(e.task&&Object.keys(e.task).length>0){let l=gC(e.task);r={...l,requestedModel:l.model}}else{let l=ml();r={model:l,provider:e.explicitProvider?.trim()||Ts(l),rule:"default:global",requestedModel:l}}r=yC(r,e.explicitProvider),r=RC(r,{explicitProvider:e.explicitProvider,task:e.task,configuredProvider:e.configuredProvider});let s=!!e.configuredProvider?.trim()&&nr(e.configuredProvider)!==wr&&r.rule==="config:worker_provider",i=Xp({routing:r,task:e.task,explicitProvider:e.explicitProvider??(s?r.provider:void 0),explicitProviderIsOperatorOverride:!!e.explicitProviderIsOperatorOverride||s});if(!e.task||Object.keys(e.task).length===0||i.rule==="explicit:model_provider_alias"||i.rule==="explicit:model_provider_alias_overrode_provider"||i.rule==="explicit:cli"||i.rule===pl||i.rule===Zm||Sr(i.provider)&&(e.explicitProviderIsOperatorOverride||Rs(e.task))||i.provider===ut||i.provider===ir||i.provider===ar||i.provider==="codex")return i;let a=bm({task:e.task,explicitProvider:e.explicitProvider??i.provider,explicitModel:i.model,inventory:e.orchestrationInventory??void 0});return{provider:a.provider,model:a.provider==="codex"?a.model??i.model??xr:i.model,rule:a.rule,requestedModel:i.requestedModel,orchestrationAudit:a.audit}}function rf(e,r,t){return e||r||t||ml()||Fr}function vC(e){let r=e?.executorRef;return typeof r=="string"?r.trim():""}function tf(e){return e?.trim()||void 0}function nf(e){let r=vC(e.task),t=Ne(r),n=e.explicitProvider?.trim().toLowerCase(),o=tf(e.explicitModel??void 0),s=n||t?.provider,i=o||t?.model,a=n||o?"cli":t?.rule??"none";if(!s&&!i)return{ok:!0};!s&&i&&(/^claude[-_]/i.test(i)||/^(?:opus|sonnet|haiku)\b/i.test(i))&&(s="claude");let l=e.routing.provider,c=tf(e.routing.model),u={provider:l,model:c,rule:e.routing.rule};return s&&s!=="cursor"||r&&zp(r)||n&&n!=="cursor"?l==="cursor"?{ok:!1,error:`model_routing_mismatch: requested ${s??"non-cursor"}${i?` model=${i}`:""} (${a}) but routing resolved to cursor (${e.routing.rule})`,requested:{provider:s,model:i,source:a},resolved:u}:i&&c&&i!==c&&!Sr(l)?{ok:!1,error:`model_routing_mismatch: requested model=${i} (${a}) but routing resolved model=${c} (${e.routing.rule})`,requested:{provider:s,model:i,source:a},resolved:u}:{ok:!0,requested:{provider:s,model:i,source:a},resolved:u}:{ok:!0,resolved:u}}function of(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function sf(){return{maxTaskAttempts:of(process.env.KYNVER_MAX_TASK_ATTEMPTS,Math.floor(Ti("harness.maxTaskAttempts",4))),dispatchCooldownMs:of(process.env.KYNVER_DISPATCH_COOLDOWN_MS,Math.floor(Ti("harness.dispatchCooldownMs",5e3)))}}K();import wC from"node:path";B();me();O();var fl="kynver-harness:",af="@runner:";function gl(e){return e?.trim()?e.trim():null}function bC(e){let r=gl(e);if(!r?.startsWith(fl))return null;let t=r.slice(fl.length),n=t.indexOf(af);return n>=0?t.slice(0,n).trim()||null:t.trim()||null}function Jn(e,r){let t=e.trim(),n=r.trim();return`${fl}${t}${af}${n}`}function SC(e,r){let t=gl(r);return t?bC(e)===t:!1}function Ms(e){let r=gl(e.workerLeaseOwner);return r&&SC(r,e.runId)?r:Jn(e.runId,e.runnerId)}K();import lf from"node:os";Oe();function _r(e){return e?.trim()?e.trim():null}function We(e={}){let r=e.env??process.env,t=U();return{runnerId:_r(t.runnerId)??_r(r.KYNVER_RUNTIME_ID)??_r(r.OPENCLAW_RUNTIME_ID)??_r(r.HOSTNAME)??lf.hostname(),hostname:_r(r.HOSTNAME)??lf.hostname(),profile:_r(r.KYNVER_RUNNER_PROFILE)??_r(r.OPENCLAW_RUNNER_PROFILE),harnessRepo:_r(r.KYNVER_HARNESS_REPO)??_r(r.KYNVER_DEFAULT_REPO),runId:e.runId??null,instructionBundleVersion:gu()}}K();async function Ds(e){let r=new Map,t=e.agentOsId?.trim();if(!t||e.taskIds.length===0)return r;let n=X(e.baseUrl);try{let o=await re(e.secret,t,{baseUrl:n}),s=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/harness/monitor/task-leases`,i=await J(s,o,{taskIds:[...new Set(e.taskIds)]},{agentOsId:t,baseUrl:n});if(!i.ok||!i.response||typeof i.response!="object")return r;let a=i.response.tasks;if(!Array.isArray(a))return r;for(let l of a)l?.taskId&&r.set(l.taskId,l)}catch{}return r}B();async function Ws(e){let r=e.worker.leaseOwner?.trim()??null,t=e.worker.leaseToken?.trim()??null;if(t)return{leaseOwner:r,leaseToken:t};let n=e.worker.taskId?.trim();if(!n)return{leaseOwner:r,leaseToken:null};let s=(await Ds({agentOsId:e.agentOsId,taskIds:[n],baseUrl:e.baseUrl,secret:e.secret})).get(n),i=s?.leaseOwner?.trim()??null,a=s?.leaseToken?.trim()??null;if(!a)return{leaseOwner:r??i,leaseToken:null};let l=r??i;return(!e.worker.leaseToken||e.worker.leaseToken!==a)&&F(e.worker.runId,{...e.worker,...l?{leaseOwner:l}:{},leaseToken:a}),{leaseOwner:l,leaseToken:a}}function cf(e,r){return I(wC.join(M(e),"workers",x(r),"worker.json"),void 0)}async function uf(e,r){let t=ee(e),n=String(r.agentOsId||"");if(!n)return{renewed:[],failed:[],skipped:[]};let o=X(r.baseUrl?String(r.baseUrl):void 0),s=await re(r.secret?String(r.secret):void 0,n,{baseUrl:o}),i=Number(r.leaseMs)>0?Math.floor(Number(r.leaseMs)):hl,a=We({runId:e}).runnerId,l=[],c=[],u=[];for(let d of Object.keys(t.workers||{})){let p=cf(e,d);if(!p?.taskId||!p.agentOsId){u.push(d);continue}if(!z(p.pid)){u.push(d);continue}if(Y(p).status==="done"){u.push(d);continue}let f=Ms({runId:e,workerLeaseOwner:p.leaseOwner??null,runnerId:a}),b=await Ws({worker:p,agentOsId:n,baseUrl:o,secret:s}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(p.taskId)}/renew-lease`,R=await J(k,s,{leaseOwner:b.leaseOwner??f,leaseDurationMs:i,...b.leaseToken?{leaseToken:b.leaseToken}:{}},{agentOsId:n,baseUrl:o});if(R.ok){l.push(d);continue}let g=R.response&&typeof R.response=="object"&&"reason"in R.response?String(R.response.reason??`http ${R.status}`):`http ${R.status}`;c.push({worker:d,reason:g})}return{renewed:l,failed:c,skipped:u}}function df(e,r){let t=ee(e);for(let n of Object.keys(t.workers||{})){let o=cf(e,n);if(!(!o||o.taskId!==r||!z(o.pid)||Y(o).status==="done"))return!0}return!1}de();B();B();import{existsSync as SA,mkdirSync as wA}from"node:fs";import Xt from"node:path";var pf="unknown";function mf(e){let r=e.baseCommit?.trim()??"",t=[];r&&r!==pf&&t.push({ref:r,source:"baseCommit"});let n=e.base?.trim()??"";n&&n!==pf&&t.push({ref:n,source:"base"}),t.push({ref:"origin/main",source:"origin/main"}),t.push({ref:"origin/HEAD",source:"origin/HEAD"});let o=new Set;for(let s of t)if(!o.has(s.ref)&&(o.add(s.ref),e.verifyRef(s.ref)))return{ref:s.ref,repaired:s.source!=="baseCommit",source:s.source};throw new Error(`worktree base ref unresolvable: baseCommit=${r||"<empty>"} base=${n||"<empty>"} \u2014 origin/main and origin/HEAD also failed verification`)}var xC=/<!--\s*harness-contract:\s*(\{[\s\S]*?\})\s*-->/i,_C="next-action-fix:";function Ls(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function ff(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:Ls(e)}function CC(e){let r=(e.title??"").trim().toLowerCase();if(r.startsWith("fix:")||r.startsWith("repair:"))return!0;let t=(e.executorRef??"").toLowerCase();return!!(t.startsWith(_C)||t.includes("repair")||t.includes("unblock"))}function EC(e){let r={repairEnforceOriginalPr:!1,targetPrUrl:null,targetPrBranch:null};if(!e)return r;let t=e.match(xC);if(!t?.[1])return r;try{let n=JSON.parse(t[1]),o=Ls(String(n.targetPrUrl??n.target_pr_url??"")),s=Ls(String(n.targetPrBranch??n.target_pr_branch??""));return{repairEnforceOriginalPr:n.repairEnforceOriginalPr===!0||n.repair_enforce_original_pr===!0||!!o,targetPrUrl:o?ff(o):null,targetPrBranch:s}}catch{return r}}function gf(e){if(!CC(e))return null;let r=EC(e.description),t=e.prUrl?ff(e.prUrl):null,n=r.targetPrUrl??t;return n?{targetPrUrl:n,targetPrBranch:r.targetPrBranch??Ls(e.branch)}:null}function hf(e){return["Repair target PR policy:","- Work on the existing target PR branch \u2014 do not open a duplicate repair PR by default.",`- Canonical target PR: ${e.targetPrUrl}`,...e.targetPrBranch?[`- Canonical target branch: \`${e.targetPrBranch}\` (checkout is already on this branch).`]:[],`- Reconcile ${e.targetPrUrl} in structured finalResult.targetPrReconciliation.`,"- Only supersede the original when the branch is inaccessible: set supersedesOriginalTargetPr: true with reason and close/comment on the original PR."]}function kf(e){let r=e.ownedPaths.length?`Owned paths: ${e.ownedPaths.join(", ")}. Do not edit outside these paths without stopping and reporting why.`:"Owned paths: unrestricted for this worker, but keep edits tightly scoped.",t=!!e.model?.toLowerCase().includes("haiku"),n=t?"compact":"full",o=t?e.planId?`Active planId: ${e.planId}`:"No planId on this worker.":e.planId?`Active planId: ${e.planId}${e.taskId?` \xB7 taskId: ${e.taskId}`:""}`:"No planId on this worker \u2014 still emit progress when you touch plan-scoped work.",s=[...un(`worker.prompt.progress.${n}`).split(`
-`),o],i=un(`worker.prompt.merge_gate.${n}`).split(`
-`),a=un(`worker.prompt.plan_artifacts.${n}`).split(`
-`);return["You are running under the Kynver AgentOS runtime.","Immediately state your plan before editing.",r,`Worktree: ${e.worktreePath}`,`Progress heartbeat file: ${e.heartbeatPath}`,"After each major step, append one JSON line to the heartbeat file with fields: ts, phase, summary, changedFiles, blocker.","Before exiting, append a terminal heartbeat with phase `complete` and a structured finalResult object; if you cannot complete, append blocker plus the recovery next action instead of exiting silently.","Final response must include files changed, verification commands, and unresolved risks.","Also include a JSON code block containing the structured finalResult object itself (not a wrapper): summary, verification (actual commands and observed results), scope, risks, and changedFiles. This is required even if the heartbeat path is read-only or a terminal heartbeat cannot be written. Never invent verification evidence; disclose unverified surfaces and blockers.",...un("worker.prompt.core_rules").split(`
-`),"",...s,"",...i,"",...a,"",...e.runtimeEnvelopeMarkdown?.trim()?[e.runtimeEnvelopeMarkdown.trim(),""]:[],...e.contextEnvelopeMarkdown?.trim()?[e.contextEnvelopeMarkdown.trim(),""]:[],...e.personaMarkdown?.trim()?[e.personaMarkdown.trim(),""]:[],...e.instructionPolicyMarkdown?.trim()?["Operating rules (from AgentOS memory policy):",e.instructionPolicyMarkdown.trim(),""]:[],...e.memoryQualityMarkdown?.trim()?[e.memoryQualityMarkdown.trim(),""]:[],...e.repairTargetPrUrl?[...hf({targetPrUrl:e.repairTargetPrUrl,targetPrBranch:e.repairTargetBranch??null}),""]:[],"Task:",e.task].join(`
-`)}O();K();var Us={claude:Am,codex:Lm,cursor:km,[ir]:Ym,[ar]:Jm,[ut]:Fm},yf=null;function Rf(e){if(yf)return yf;let r=e?.trim();if(r){let o=Us[nr(r)];if(!o)throw new Error(`unknown worker provider "${r}" \u2014 supported: ${Object.keys(Us).join(", ")}`);return o}let t=Qp(U().workerProvider),n=Us[t];if(!n)throw new Error(`unknown worker provider "${t}" \u2014 supported: ${Object.keys(Us).join(", ")}`);return n}O();import{spawn as cA}from"node:child_process";import{existsSync as uA,openSync as dA,closeSync as ch}from"node:fs";import pA from"node:path";B();function vf(e){return!!e.completionReportedAt?.trim()}function Bs(e,r,t){e.completionReportedAt=t.completionReportedAt,e.completionOutcome=t.completionOutcome,t.completionResponse!==void 0&&(e.completionResponse=t.completionResponse),F(r,e)}function PC(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function kl(e){return!!(PC(e.completionBlocker)||e.completionOutcome==="rejected")}function zn(e){return vf(e)&&!kl(e)}B();me();K();import ai from"node:path";function yl(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function Xn(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}var AC=new Set(["review_scheduled","review_already_scheduled","closed","dispatched","dispatch_already_done","steer_restart_required"]),bf=new Set(["done","failed","cancelled"]);function Sf(e){let r=yl(e);if(!r)return{routeOutcome:null,taskAdvanced:!1,detail:null};let t=Xn(r.outcome),n=Xn(r.detail)??Xn(r.error),o=yl(r.task),s=yl(r.closedTask),i=o?Xn(o.status):null,a=s?Xn(s.status):null,c=t==="skipped_terminal_task"&&(i!==null&&bf.has(i)||a!==null&&bf.has(a))||t!==null&&AC.has(t)||i==="awaiting_review"||i==="done"||a==="done";return{routeOutcome:t,taskAdvanced:c,detail:n}}function wf(e){return e.taskAdvanced}B();Ko();var IC="expert-lane-pr-review:",OC="plan-review-task",TC="scheduledjob:",Fs=new Set(["lorentz","dalton","rhea","sentinel"]);function NC(e){if(!e)return null;let r=e.trim().toLowerCase();return r.length?r:null}function Rl(e){return/\b(deep[- ]?review|plan review|review .*plan|security review|red[- ]team|lb\d+|runtime verification)\b/.test(e)}function MC(e,r){return e.startsWith("factory:")?e.includes("lb")||Rl(r):!1}function Ks(e){let r=(e.executorRef??"").toLowerCase(),t=(e.title??"").toLowerCase(),n=(e.description??"").toLowerCase(),o=`${t}
-${n}`,s=NC(e.personaSlug);return r.startsWith("harness-lane:blocked-lane-unblock:")||r==="lane:over_attempt_recovery"||r.startsWith("next-action-fix:")||r.startsWith("next-action-landing:")||r.startsWith("code-work-lane-chain:release:")?!1:!!(r.startsWith(IC)||r===OC||r.startsWith("daemon-review:")||s&&Fs.has(s)&&(r.includes("evidence")||r.includes("validate")||r.includes("review")||MC(r,o)||Rl(o))||r.startsWith(TC)&&e.parentTaskId&&s&&Fs.has(s)||e.planId&&!e.parentTaskId&&s&&Fs.has(s)&&Rl(o)||t.includes("expert pr review")||e.parentTaskId&&(t.startsWith("review:")||t.includes("review required")||t.includes("runtime review"))&&s&&Fs.has(s))}var xf=/^(lane:)?(review|deep_review|planning|landing)(:|$)/i,DC=new Set(Hp()),WC=/no commits between/i;function _f(e){return!!(e&&WC.test(e))}function be(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Cf(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:be(e.head)}function Ef(e){if(e==null)return null;let t=(typeof e=="string"?e:typeof e=="object"&&e!==null&&"summary"in e?String(e.summary??""):JSON.stringify(e)).match(/https?:\/\/[^\s)>"]+\/(?:pull|pulls|merge_requests|pull-requests)\/\d+/i);return t?be(t[0]):null}function LC(e,r,t){let n=r.trim();if(!n)return null;let o=t.git(e,["rev-list","--count",`${n}..HEAD`]);if(o.status!==0)return null;let s=Number.parseInt(o.stdout.trim(),10);return Number.isFinite(s)?s:null}function UC(e,r){if(r.changedFiles.length>0)return!1;let t=be(e.personaSlug)?.toLowerCase();if(t&&DC.has(t))return!0;let n=be(e.routingRule)??"";return!!(n&&xf.test(n))}function BC(e,r){if(e.changedFiles.length>0)return!0;let t=be(r?.baseRef);if(t&&r?.exec&&r.worktreePath){let n=LC(r.worktreePath,t,r.exec);if(n===0)return!1;if(n!==null&&n>0)return!0}return!!(be(e.headCommit)||Cf(e.gitAncestry))}function Pf(e){if(!e.dispatched)return{required:!1,reason:"not_dispatched"};if(Ks({title:e.taskTitle??void 0,personaSlug:e.personaSlug,parentTaskId:e.parentTaskId,executorRef:e.executorRef}))return{required:!1,reason:"expert_review_task"};let r=be(e.routingRule)??"";if(r&&xf.test(r))return{required:!1,reason:"review_lane"};let t=e.worker??{personaSlug:e.personaSlug,routingRule:e.routingRule};if(UC(t,e.snapshot))return{required:!1,reason:"review_artifact"};if(be(e.patchPath)||be(e.artifactBundlePath))return{required:!1,reason:"patch_or_bundle"};if(be(e.repairTargetPrUrl))return{required:!1,reason:"repair_target_pr"};if(be(e.prUrl)??be(e.taskPrUrl)??be(e.snapshot.prUrl))return{required:!1,reason:"already_has_pr"};let s=e.exec&&e.baseRef?{baseRef:e.baseRef,exec:e.exec,worktreePath:e.snapshot.worktreePath}:void 0;return BC(e.snapshot,s)?{required:!0,snapshot:e.snapshot}:{required:!1,reason:"no_work_product"}}function Af(e,r){return{changedFiles:e.changedFiles,branch:e.branch,worktreePath:e.worktreePath,gitAncestry:e.gitAncestry,finalResult:e.finalResult,headCommit:be(r?.headCommit)??Cf(e.gitAncestry),prUrl:be(r?.prUrl)??null}}import{spawnSync as FC}from"node:child_process";function Of(e){let r=e.trim();if(!r)return null;let t=r.match(/^git@github\.com:([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(t)return If(t[1]);let n=r.match(/^ssh:\/\/git@github\.com\/([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(n)return If(n[1]);try{let o=new URL(r.includes("://")?r:`https://${r}`);if(o.hostname.toLowerCase()!=="github.com")return null;let s=o.pathname.replace(/^\/+|\/+$/g,"").split("/");if(s.length<2)return null;let[i,a]=s;return!i||!a?null:`${i}/${a.replace(/\.git$/i,"")}`}catch{return null}}function If(e){let r=e.split("/").filter(Boolean);if(r.length<2)return null;let t=r[0],n=r[1].replace(/\.git$/i,"");return t&&n?`${t}/${n}`:null}de();function KC(e,r,t){try{let n=FC(e,t,{windowsHide:!0,cwd:r,encoding:"utf8"});return{status:n.status,stdout:(n.stdout||"").trim(),stderr:(n.stderr||"").trim(),error:n.error?n.error.message:null}}catch(n){return{status:null,stdout:"",stderr:"",error:n.message}}}var $s={git:(e,r)=>te(e,r),gh:(e,r)=>KC("gh",e,r)};function HC(e){return e.split(`
-`).map(r=>r.trim()).find(Boolean)??""}function Tf(e,r){let t=r.git(e,["remote","get-url","origin"]);return t.status!==0?null:Of(t.stdout)}function dt(e,r){let t=r.git(e,["rev-parse","HEAD"]);return t.status!==0?null:t.stdout.trim()||null}function Hs(e,r,t,n){let o=n.gh(e,["pr","list","--repo",r,"--head",t,"--state","open","--json","url","--limit","1"]);if(o.status!==0)return null;try{return JSON.parse(o.stdout)[0]?.url?.trim()||null}catch{return null}}function Qn(e){let{worktreePath:r,branch:t,commitMessage:n,hasDirtyFiles:o,exec:s}=e;if(o){let l=s.git(r,["add","-A"]);if(l.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:l.stderr||l.stdout||l.error||"git add failed"};let c=s.git(r,["commit","-m",n]);if(c.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:c.stderr||c.stdout||c.error||"git commit failed"}}let i=s.git(r,["push","-u","origin",t]);if(i.status!==0)return{ok:!1,committed:o,pushed:!1,detail:i.stderr||i.stdout||i.error||"git push failed"};let a=dt(r,s)??void 0;return{ok:!0,committed:o,pushed:!0,headCommit:a}}function Nf(e){let r=e.remoteBranch.trim();if(!r)return{ok:!1,detail:"missing remote branch"};let t=e.exec.git(e.worktreePath,["push","-u","origin",`HEAD:refs/heads/${r}`]);return t.status!==0&&!/already up to date/i.test(t.stderr||t.stdout)?{ok:!1,detail:t.stderr||t.stdout||t.error||"git push to PR branch failed"}:{ok:!0}}function Mf(e){let r=Hs(e.worktreePath,e.repo,e.branch,e.exec);if(r)return{ok:!0,prUrl:r,created:!1};let t=e.exec.gh(e.worktreePath,["pr","create","--repo",e.repo,"--base",e.base,"--head",e.branch,"--title",e.title,"--body",e.body,"--draft"]);if(t.status!==0)return{ok:!1,detail:t.stderr||t.stdout||t.error||"gh pr create failed"};let n=$C(t.stdout)??Hs(e.worktreePath,e.repo,e.branch,e.exec);return n?{ok:!0,prUrl:n,created:!0}:{ok:!1,detail:"gh pr create succeeded but no PR URL was parsed"}}function $C(e){let t=HC(e).match(/https?:\/\/[^\s]+\/pull\/\d+/i);return t?t[0]:null}O();function Df(e){return`t-${x(e)}-a`}function Wf(e,r){let t=Df(r);if(e.headRefName.toLowerCase().includes(t))return!0;let n=r.trim();if(!n)return!1;let o=e.body??"",s=e.title??"";return o.includes(n)||o.includes(`\`${n}\``)||s.includes(n)}function Zn(e){return e.trim().toLowerCase()}function Lf(e,r){if(!e.length)return null;if(r){let t=Zn(r),n=e.find(o=>Zn(o.url)===t);if(n)return n}return[...e].sort((t,n)=>n.number-t.number)[0]??null}function Uf(e,r){let t=Zn(r);return e.filter(n=>Zn(n.url)!==t).map(n=>n.url)}function Bf(e){try{let r=JSON.parse(e);return Array.isArray(r)?r.map(t=>({url:t.url?.trim()??"",number:Number(t.number)||0,headRefName:t.headRefName?.trim()??"",createdAt:t.createdAt?.trim()??"",body:t.body,title:t.title})).filter(t=>t.url&&t.number>0&&t.headRefName):[]}catch{return[]}}function jC(e){let r=new Set,t=[];for(let n of e){let o=Zn(n.url);r.has(o)||(r.add(o),t.push(n))}return t}function VC(e,r,t,n){let o=n.gh(e,["search","prs",t,"--repo",r,"--state","open","--json","url,number,headRefName,createdAt,body,title","--limit","20"]);return o.status!==0?[]:Bf(o.stdout).filter(s=>Wf(s,t))}function GC(e,r,t,n){let o=n.gh(e,["pr","list","--repo",r,"--state","open","--json","url,number,headRefName,createdAt,body,title","--limit","100"]);if(o.status!==0)return[];let s=Df(t);return Bf(o.stdout).filter(i=>i.headRefName.toLowerCase().includes(s)||Wf(i,t))}function vl(e,r,t,n){let o=t.trim();if(!o)return[];let s=VC(e,r,o,n),i=GC(e,r,o,n);return jC([...s,...i])}function YC(e){let r=e.trim().match(/\/pull\/(\d+)(?:$|[?#])/i);if(!r)return null;let t=Number.parseInt(r[1],10);return Number.isFinite(t)?t:null}function bl(e){let r=Uf(e.rows,e.canonicalPrUrl),t=[],n=[];for(let o of r){let s=YC(o);if(!s){n.push({prUrl:o,detail:"could not parse PR number from URL"});continue}let i=`Superseded by ${e.canonicalPrUrl} (harness task retry dedupe).`,a=e.exec.gh(e.worktreePath,["pr","close",String(s),"--repo",e.repo,"--comment",i]);a.status===0?t.push(o):n.push({prUrl:o,detail:a.stderr||a.stdout||a.error||"gh pr close failed"})}return{closed:t,failed:n}}function Ff(e,r,t,n){let o=t.trim();if(!o||!r.trim())return null;let s=n.gh(e,["api",`repos/${r}/commits/${o}/pulls`]);if(s.status!==0||!s.stdout)return null;try{let l=JSON.parse(s.stdout).filter(c=>c.merged_at&&c.html_url?.trim()).sort((c,u)=>(typeof c.number=="number"?c.number:Number.MAX_SAFE_INTEGER)-(typeof u.number=="number"?u.number:Number.MAX_SAFE_INTEGER))[0];return l?.html_url?.trim()?{prUrl:l.html_url.trim(),number:typeof l.number=="number"?l.number:null}:null}catch{return null}}function qC(e){return e.gh(process.cwd(),["--version"]).status===0}function JC(e,r){return`AgentOS harness: ${e} (${r})`}function zC(e,r,t){return["Automated PR-ready handoff from the Kynver harness runtime.","",e?`AgentOS task: \`${e}\``:"",`Harness worker: \`${r}\` \xB7 run \`${t}\``,"","Opened by orchestrator completion enforcement so production review receives a reviewable artifact."].filter(Boolean).join(`
-`)}function wl(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function XC(e){return wl(e.prUrlHint)??Ef(e.status.finalResult)??wl(e.worker.taskPrUrl)??null}function QC(e){let{snapshot:r,canonical:t,workerName:n,exec:o}=e,s=!1,i=!1,a=r.headCommit??dt(r.worktreePath,o)??void 0;if(r.changedFiles.length>0){let l=Qn({worktreePath:r.worktreePath,branch:r.branch,commitMessage:`chore(harness): update PR handoff for ${n}`,hasDirtyFiles:!0,exec:o});if(!l.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${l.detail??"git commit/push failed"}`,nextAction:"Commit and push the dirty worker changes to the existing PR branch, then rerun `kynver worker complete`."};s=l.committed,i=l.pushed,a=l.headCommit??a}if(t.headRefName!==r.branch){let l=Nf({worktreePath:r.worktreePath,remoteBranch:t.headRefName,exec:o});if(!l.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${l.detail??"git push to canonical PR branch failed"}`,nextAction:"Push worker commits to the canonical PR branch, then rerun `kynver worker complete`."};i=!0,a=dt(r.worktreePath,o)??a}return{ok:!0,prUrl:t.url,headCommit:a,committed:s,pushed:i}}function Sl(e){if(e.snapshot.changedFiles.length===0)return{ok:!0,prUrl:e.prUrl,headCommit:e.snapshot.headCommit??dt(e.snapshot.worktreePath,e.exec)??void 0};let r=Qn({worktreePath:e.snapshot.worktreePath,branch:e.snapshot.branch,commitMessage:e.commitMessage,hasDirtyFiles:!0,exec:e.exec});return r.ok?{ok:!0,prUrl:e.prUrl,headCommit:r.headCommit??e.snapshot.headCommit??void 0,committed:r.committed,pushed:r.pushed}:{ok:!1,reason:`PR-ready handoff blocked: ${r.detail??"git commit/push failed"}`,nextAction:"Commit and push the dirty worker changes to the existing PR branch, then rerun `kynver worker complete`."}}function xl(e,r=$s){let t=XC(e),n=Af(e.status,{prUrl:t,headCommit:null}),o=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main";if(!Pf({dispatched:e.worker.dispatched,routingRule:e.worker.routingRule,personaSlug:e.worker.personaSlug,prUrl:t,taskTitle:e.worker.taskTitle,executorRef:e.worker.executorRef,parentTaskId:e.worker.parentTaskId,taskPrUrl:e.worker.taskPrUrl,repairTargetPrUrl:e.worker.repairTargetPrUrl,baseRef:o,exec:r,worker:e.worker,snapshot:n}).required)return t?Sl({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r}):{ok:!0};if(t)return Sl({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});if(!qC(r)){let h=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${h?`${h} uncommitted change(s) with no PR URL`:"committed branch with no PR URL"}`,nextAction:"Install and authenticate GitHub CLI (`gh auth login`), then commit, push, and run `gh pr create` (or rerun `kynver worker complete` after the PR exists)."}}let i=Tf(n.worktreePath,r);if(!i)return{ok:!1,reason:"PR-ready handoff blocked: could not resolve github.com origin for the worktree",nextAction:"Ensure `origin` points at GitHub, push the branch, open a PR, and rerun `kynver worker complete`."};let a=e.worker.repairTargetPrUrl?.trim();if(a){let h=!1,E=!1,P=n.headCommit??dt(n.worktreePath,r)??void 0;if(n.changedFiles.length>0){let S=Qn({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`fix(harness): repair target PR ${a}`,hasDirtyFiles:!0,exec:r});if(!S.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${S.detail??"git commit/push failed"}`,nextAction:"Commit and push to the target PR branch, then rerun `kynver worker complete`."};h=S.committed,E=S.pushed,P=S.headCommit??P}else{let S=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(S.status!==0&&!/already up to date/i.test(S.stderr||S.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${S.stderr||S.stdout||"git push failed"}`,nextAction:"Push the target branch to origin, then rerun `kynver worker complete`."};E=S.status===0}return{ok:!0,prUrl:a,headCommit:P,committed:h,pushed:E}}let l=wl(e.worker.taskId),c=[];if(l){c=vl(n.worktreePath,i,l,r);let h=Lf(c);if(h){let E=QC({snapshot:n,canonical:h,workerName:e.worker.name,exec:r});return E.ok&&E.prUrl&&bl({worktreePath:n.worktreePath,repo:i,rows:c,canonicalPrUrl:E.prUrl,exec:r}),E}}let u=Hs(n.worktreePath,i,n.branch,r);if(u)return Sl({snapshot:n,prUrl:u,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});let d=n.changedFiles.length>0,p=!1,m=!1,f=n.headCommit??void 0,b=Qn({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`chore(harness): PR-ready handoff for ${e.worker.name}`,hasDirtyFiles:d,exec:r});if(d&&!b.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${b.detail??"git commit/push failed"}`,nextAction:"Commit and push the branch, run `gh pr create`, then rerun `kynver worker complete`."};if(d){if(p=b.committed,m=b.pushed,!b.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${b.detail??"git push failed"}`,nextAction:"Fix git auth or merge conflicts, push the branch, run `gh pr create`, then rerun `kynver worker complete`."}}else{let h=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(h.status!==0&&!/already up to date/i.test(h.stderr||h.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${h.stderr||h.stdout||h.error||"git push failed"}`,nextAction:"Push the branch to origin, run `gh pr create`, then rerun `kynver worker complete`."};m=h.status===0}f=b.headCommit??f??dt(n.worktreePath,r)??void 0;let k=f?Ff(n.worktreePath,i,f,r):null;if(k)return{ok:!0,prUrl:k.prUrl,headCommit:f,committed:p,pushed:m,created:!1};let R=e.run.base?.trim()||"main",g=Mf({worktreePath:n.worktreePath,repo:i,branch:n.branch,base:R.replace(/^origin\//,""),title:JC(e.worker.name,e.worker.runId),body:zC(e.worker.taskId,e.worker.name,e.worker.runId),exec:r});if(!g.ok||!g.prUrl){if(_f(g.detail))return{ok:!0,headCommit:f??void 0,committed:p,pushed:m};let h=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${h?`${h} uncommitted change(s) and no PR URL after handoff attempt`:"no PR URL after handoff attempt"}${g.detail?` (${g.detail})`:""}`,nextAction:"Run `gh pr create` on the worker branch (or fix `gh` auth), attach the PR URL to the task, then rerun `kynver worker complete`."}}if(l&&g.prUrl){let E=[...c.length>0?c:vl(n.worktreePath,i,l,r),{url:g.prUrl,number:Number.parseInt(g.prUrl.match(/\/pull\/(\d+)/)?.[1]??"",10)||0,headRefName:n.branch,createdAt:""}];bl({worktreePath:n.worktreePath,repo:i,rows:E,canonicalPrUrl:g.prUrl,exec:r})}return{ok:!0,prUrl:g.prUrl,headCommit:f??void 0,committed:p,pushed:m,created:g.created}}me();Zr();Zi();B();me();O();import UE from"node:path";O();import ZC from"node:path";var eo=new Map,_l=new Map;function Cl(e){clearInterval(_l.get(e)),_l.delete(e)}function El(e,r){if(Cl(e),!eo.has(e))return;let t=setInterval(()=>{(I(ZC.join(e,"worker.json"),null)?.completionReportedAt||!z(r))&&Yt(e)},1e3);t.unref(),_l.set(e,t)}function Pl(e,r){Cl(e);let t=eo.get(e);t&&t.close(),eo.set(e,r)}async function Kr(e){Cl(e);let r=eo.get(e);return r?(eo.delete(e),await r.close(),!0):!1}function Yt(e){Kr(e).catch(()=>{})}de();import{appendFileSync as eE,existsSync as Hf,mkdirSync as $f,readFileSync as rE,rmSync as Kf,writeFileSync as tE}from"node:fs";import Cr from"node:path";var jf=Cr.join(".cursor","mcp.json");function Vf(e){return Cr.join(e,jf)}function nE(e){return Q(e,["ls-files","--error-unmatch",jf.split(Cr.sep).join("/")],{allowFailure:!0}).trim().length>0}function oE(e){let r=Q(e,["rev-parse","--git-common-dir"],{allowFailure:!0}).trim();if(!r)return;let t=Cr.isAbsolute(r)?r:Cr.join(e,r),n=Cr.join(t,"info","exclude"),o=".cursor/mcp.json";try{$f(Cr.dirname(n),{recursive:!0});let s=Hf(n)?rE(n,"utf8"):"";if(s.split(/\r?\n/).some(i=>i.trim()===o))return;eE(n,`${s.endsWith(`
+${we(e,"executorRef")}`.match(/\[(?:worker-)?model:\s*([^\]\n]+)\]/i)?.[1]?.trim()||void 0}function vf(e){return e.toLowerCase()}function xl(e=F()){let r=e.defaultModel?.trim();if(r)return r;let t=process.env.KYNVER_DEFAULT_MODEL?.trim();return t||eC}function Fs(e){let r=(e??"").toLowerCase();return!r||r.includes("composer")||r.includes("cursor")||r.includes("codex")||r.startsWith("gpt-")||r.startsWith("gpt5")?"cursor":/^claude[-_]/i.test(r)||/^(?:opus|sonnet|haiku)\b/i.test(r)?"claude":r.startsWith("gemini-")?ar:"cursor"}function tC(e,r){let t=e.trim().toLowerCase(),n=r?.trim();return t==="cursor"?{model:Ps,provider:"cursor",rule:n&&n!=="cursor"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:t==="claude"||t==="anthropic"?{model:jr,provider:"claude",rule:n&&n!=="claude"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:t==="gemini"||t==="google"?{model:Ie(),provider:ar,rule:n&&n!==ar?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:t==="gemini-api"||t==="gemini_api"||t==="google-api"?{model:Ie(),provider:lr,rule:n&&n!==lr?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:null}function bf(e,r){return!!(e.includes("deep")&&e.includes("review")||e.includes("security")||e.includes("plan_author")||e.includes("plan-author")||r.includes("deep review")||r.includes("security review")||e.includes("plan")&&!e.includes("review")&&(e.includes("author")||e.includes("strategy")))}var nC=new Set(["report_reviewer","deep_reviewer","plan_reviewer"]);function Sf(e,r,t){return nC.has(e)?qn:r.includes("review")||/^review[\s:]/.test(t)||t.includes("critique")?qn:jr}function oC(e){let r=vf(we(e,"executorRef")),t=we(e,"title").toLowerCase(),n=we(e,"priority")||"normal",o=vf(we(e,"roleLane"));if(r.includes("provider:claude")||r.startsWith("claude:")){let i=Sf(o,r,t);return{provider:"claude",model:i,rule:i===qn?"factory:claude_review":"factory:claude_implementation"}}if(r.includes("provider:codex")||r.startsWith("codex:"))return{provider:"codex",model:Cr,rule:"lane:codex_orchestration"};if(r.includes("provider:chatgpt")||r.startsWith("chatgpt:")||r.includes("provider:gpt")||r.startsWith("gpt:")){let i=We(we(e,"executorRef"));return{provider:"codex",...i?.model?{model:i.model}:{model:Cr},rule:"lane:codex_orchestration"}}if(r.includes("provider:openai")||r.startsWith("openai-compatible:")){let i=We(we(e,"executorRef"));return{provider:ft,...i?.model?{model:i.model}:{},rule:"lane:openai_compatible"}}if(r.includes("provider:gemini-api")||r.startsWith("gemini-api:")){let i=We(we(e,"executorRef"));return{provider:lr,...i?.model?{model:i.model}:{model:Ie()},rule:"lane:gemini_api"}}if(r.includes("provider:gemini")||r.startsWith("gemini:")){let i=We(we(e,"executorRef"));return{provider:ar,...i?.model?{model:i.model}:{model:Ie()},rule:"lane:gemini"}}if(r.includes("cursor")||r.includes("composer")||r.includes("copilot")||o==="implementer"||o==="repair_implementer")return{provider:"cursor",rule:"lane:implementation"};if(r.includes("codex"))return{provider:"codex",model:Cr,rule:"lane:codex_orchestration"};if(r.includes("landing")||t.startsWith("land:")||t.includes(" merge"))return{provider:"cursor",rule:"lane:landing"};if(r.includes("review")||/^review[\s:]/.test(t)||o.includes("review"))return bf(r,t)||o==="deep_reviewer"?{provider:"cursor",rule:"lane:deep_review"}:{provider:"cursor",rule:"lane:review"};if(bf(r,t)||o==="plan_author")return{provider:"cursor",rule:"lane:planning"};if(n==="critical")return{provider:"cursor",rule:"priority:critical"};if(n==="high")return{provider:"cursor",rule:"priority:high"};if(n==="low")return{provider:"cursor",rule:"priority:low"};let s=xl();return{model:s,provider:Fs(s),rule:"default:global"}}function sC(e){return e?We(we(e,"executorRef")):null}function iC(e){switch(or(e)){case ar:case lr:return Ie();case"claude":return jr;case"codex":return Cr;case"cursor":return Ps;default:return}}var wl="explicit:cli_provider",wf="config:worker_provider";function xf(e,r,t){let n=or(r);return n===e.provider&&e.rule===t?e:{...e,provider:n,model:iC(n)??e.model,rule:t}}function aC(e,r){let t=r?.trim();return!t||e.rule.startsWith("explicit:")&&e.rule!==wl?e:xf(e,t,wl)}function lC(e,r){if(r.explicitProvider?.trim()||Qa(r.task))return e;let t=r.configuredProvider?.trim();if(!t)return e;let n=or(t);return n===Er||n===e.provider?e:xf(e,n,wf)}function Ks(e){let r,t=sC(e.task),n=e.explicitModel?.trim()?void 0:t?.model?.trim(),o=!e.explicitProvider?.trim()&&t?.provider?.trim()?t.provider.trim():void 0;if(e.explicitModel?.trim()){let l=e.explicitModel.trim(),c=tC(l,e.explicitProvider);c?r=c:r={model:l,provider:e.explicitProvider?.trim()||Fs(l),rule:"explicit:cli",requestedModel:l}}else if(n)r={model:n,provider:o||Fs(n),rule:t?.rule??"executor_ref:model",requestedModel:n};else if(e.task&&Cs(e.task)){let l=rC(e.task),c,u;if(l)c=l,u="task:provider_override";else{let d=typeof e.task.roleLane=="string"?e.task.roleLane.toLowerCase():"",p=typeof e.task.executorRef=="string"?e.task.executorRef.toLowerCase():"",m=typeof e.task.title=="string"?e.task.title.toLowerCase():"";c=Sf(d,p,m),u=c===qn?"factory:claude_review":"factory:claude_implementation"}r={model:c,provider:"claude",rule:u,requestedModel:c}}else if(e.task&&Object.keys(e.task).length>0){let l=oC(e.task);r={...l,requestedModel:l.model}}else{let l=xl();r={model:l,provider:e.explicitProvider?.trim()||Fs(l),rule:"default:global",requestedModel:l}}r=aC(r,e.explicitProvider),r=lC(r,{explicitProvider:e.explicitProvider,task:e.task,configuredProvider:e.configuredProvider});let s=!!e.configuredProvider?.trim()&&or(e.configuredProvider)!==Er&&r.rule==="config:worker_provider",i=Rm({routing:r,task:e.task,explicitProvider:e.explicitProvider??(s?r.provider:void 0),explicitProviderIsOperatorOverride:!!e.explicitProviderIsOperatorOverride||s});if(!e.task||Object.keys(e.task).length===0||i.rule==="explicit:model_provider_alias"||i.rule==="explicit:model_provider_alias_overrode_provider"||i.rule==="explicit:cli"||i.rule===wl||i.rule===wf||_r(i.provider)&&(e.explicitProviderIsOperatorOverride||Cs(e.task))||i.provider===ft||i.provider===ar||i.provider===lr||i.provider==="codex")return i;let a=jm({task:e.task,explicitProvider:e.explicitProvider??i.provider,explicitModel:i.model,inventory:e.orchestrationInventory??void 0});return{provider:a.provider,model:a.provider==="codex"?a.model??i.model??Cr:i.model,rule:a.rule,requestedModel:i.requestedModel,orchestrationAudit:a.audit}}function _f(e,r,t){return e||r||t||xl()||jr}function cC(e){let r=e?.executorRef;return typeof r=="string"?r.trim():""}function Ef(e){return e?.trim()||void 0}function Cf(e){let r=cC(e.task),t=We(r),n=e.explicitProvider?.trim().toLowerCase(),o=Ef(e.explicitModel??void 0),s=n||t?.provider,i=o||t?.model,a=n||o?"cli":t?.rule??"none";if(!s&&!i)return{ok:!0};!s&&i&&(/^claude[-_]/i.test(i)||/^(?:opus|sonnet|haiku)\b/i.test(i))&&(s="claude");let l=e.routing.provider,c=Ef(e.routing.model),u={provider:l,model:c,rule:e.routing.rule};return s&&s!=="cursor"||r&&ym(r)||n&&n!=="cursor"?l==="cursor"?{ok:!1,error:`model_routing_mismatch: requested ${s??"non-cursor"}${i?` model=${i}`:""} (${a}) but routing resolved to cursor (${e.routing.rule})`,requested:{provider:s,model:i,source:a},resolved:u}:i&&c&&i!==c&&!_r(l)?{ok:!1,error:`model_routing_mismatch: requested model=${i} (${a}) but routing resolved model=${c} (${e.routing.rule})`,requested:{provider:s,model:i,source:a},resolved:u}:{ok:!0,requested:{provider:s,model:i,source:a},resolved:u}:{ok:!0,resolved:u}}function Pf(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Af(){return{maxTaskAttempts:Pf(process.env.KYNVER_MAX_TASK_ATTEMPTS,Math.floor(Ki("harness.maxTaskAttempts",4))),dispatchCooldownMs:Pf(process.env.KYNVER_DISPATCH_COOLDOWN_MS,Math.floor(Ki("harness.dispatchCooldownMs",5e3)))}}H();import pC from"node:path";U();me();O();var _l="kynver-harness:",If="@runner:";function El(e){return e?.trim()?e.trim():null}function uC(e){let r=El(e);if(!r?.startsWith(_l))return null;let t=r.slice(_l.length),n=t.indexOf(If);return n>=0?t.slice(0,n).trim()||null:t.trim()||null}function eo(e,r){let t=e.trim(),n=r.trim();return`${_l}${t}${If}${n}`}function dC(e,r){let t=El(r);return t?uC(e)===t:!1}function Hs(e){let r=El(e.workerLeaseOwner);return r&&dC(r,e.runId)?r:eo(e.runId,e.runnerId)}H();import Of from"node:os";Me();function Pr(e){return e?.trim()?e.trim():null}function Be(e={}){let r=e.env??process.env,t=F();return{runnerId:Pr(t.runnerId)??Pr(r.KYNVER_RUNTIME_ID)??Pr(r.OPENCLAW_RUNTIME_ID)??Pr(r.HOSTNAME)??Of.hostname(),hostname:Pr(r.HOSTNAME)??Of.hostname(),profile:Pr(r.KYNVER_RUNNER_PROFILE)??Pr(r.OPENCLAW_RUNNER_PROFILE),harnessRepo:Pr(r.KYNVER_HARNESS_REPO)??Pr(r.KYNVER_DEFAULT_REPO),runId:e.runId??null,instructionBundleVersion:Cu()}}H();async function $s(e){let r=new Map,t=e.agentOsId?.trim();if(!t||e.taskIds.length===0)return r;let n=Q(e.baseUrl);try{let o=await ee(e.secret,t,{baseUrl:n}),s=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/harness/monitor/task-leases`,i=await X(s,o,{taskIds:[...new Set(e.taskIds)]},{agentOsId:t,baseUrl:n});if(!i.ok||!i.response||typeof i.response!="object")return r;let a=i.response.tasks;if(!Array.isArray(a))return r;for(let l of a)l?.taskId&&r.set(l.taskId,l)}catch{}return r}U();async function js(e){let r=e.worker.leaseOwner?.trim()??null,t=e.worker.leaseToken?.trim()??null;if(t)return{leaseOwner:r,leaseToken:t};let n=e.worker.taskId?.trim();if(!n)return{leaseOwner:r,leaseToken:null};let s=(await $s({agentOsId:e.agentOsId,taskIds:[n],baseUrl:e.baseUrl,secret:e.secret})).get(n),i=s?.leaseOwner?.trim()??null,a=s?.leaseToken?.trim()??null;if(!a)return{leaseOwner:r??i,leaseToken:null};let l=r??i;return(!e.worker.leaseToken||e.worker.leaseToken!==a)&&L(e.worker.runId,{...e.worker,...l?{leaseOwner:l}:{},leaseToken:a}),{leaseOwner:l,leaseToken:a}}function Tf(e,r){return A(pC.join(N(e),"workers",x(r),"worker.json"),void 0)}async function Nf(e,r){let t=q(e),n=String(r.agentOsId||"");if(!n)return{renewed:[],failed:[],skipped:[]};let o=Q(r.baseUrl?String(r.baseUrl):void 0),s=await ee(r.secret?String(r.secret):void 0,n,{baseUrl:o}),i=Number(r.leaseMs)>0?Math.floor(Number(r.leaseMs)):Cl,a=Be({runId:e}).runnerId,l=[],c=[],u=[];for(let d of Object.keys(t.workers||{})){let p=Tf(e,d);if(!p?.taskId||!p.agentOsId){u.push(d);continue}if(!Y(p.pid)){u.push(d);continue}if(J(p).status==="done"){u.push(d);continue}let f=Hs({runId:e,workerLeaseOwner:p.leaseOwner??null,runnerId:a}),y=await js({worker:p,agentOsId:n,baseUrl:o,secret:s}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(p.taskId)}/renew-lease`,b=await X(k,s,{leaseOwner:y.leaseOwner??f,leaseDurationMs:i,...y.leaseToken?{leaseToken:y.leaseToken}:{}},{agentOsId:n,baseUrl:o});if(b.ok){l.push(d);continue}let g=b.response&&typeof b.response=="object"&&"reason"in b.response?String(b.response.reason??`http ${b.status}`):`http ${b.status}`;c.push({worker:d,reason:g})}return{renewed:l,failed:c,skipped:u}}function Mf(e,r){let t=q(e);for(let n of Object.keys(t.workers||{})){let o=Tf(e,n);if(!(!o||o.taskId!==r||!Y(o.pid)||J(o).status==="done"))return!0}return!1}import{existsSync as pI,mkdirSync as mI}from"node:fs";import tn from"node:path";U();O();import mC from"node:path";function Df(e){return typeof e?.noRestartAt=="string"&&e.noRestartAt.trim().length>0}function Wf(e,r,t,n){return Df(r)||(r.noRestartAt=new Date().toISOString(),r.noRestartSource=t,n&&(r.noRestartReason=n),r.steerRestartRequired=!1,L(e,r)),r}function Vs(e,r={}){let t=r.isAlive??Y,n=r.kill??Ne,o=r.sleep??Do;return!e||!t(e)?null:(n(e,"SIGTERM"),o(1e3),t(e)?(n(e,"SIGKILL"),"SIGKILL"):"SIGTERM")}function Pl(e,r,t,n,o={}){Wf(e,r,t,n);let s=Vs(r.pid,o),i=Vs(r.completionSidecarPid,o);return{workerSignal:s,sidecarSignal:i}}function Lf(e,r,t={}){let n=t.isAlive??Y,o=q(e),s=[];for(let i of Object.keys(o.workers||{})){if(t.except&&i===t.except)continue;let a=A(mC.join(N(o.id),"workers",x(i),"worker.json"),void 0);!a||a.taskId!==r||n(a.pid)||!a.completionSidecarPid||!n(a.completionSidecarPid)||(Vs(a.completionSidecarPid,t),a.completionSidecarPid=void 0,a.watcherClearedForRelaunchAt=new Date().toISOString(),L(o.id,a),s.push(i))}return s}function fC(e=process.env){let r=String(e.KYNVER_ALLOW_UNWATCHED_WORKER??"").trim().toLowerCase();return r==="1"||r==="true"||r==="yes"}function Uf(e,r,t,n={}){if(!fC(n.env))throw Pl(e,r,"watcher_attach_failed",t,n.deps),r.status="failed",L(e,r),new Error(`watcher_attach_failed: ${t}; worker stopped instead of running unwatched`)}ca();de();U();U();var Bf="unknown";function Ff(e){let r=e.baseCommit?.trim()??"",t=[];r&&r!==Bf&&t.push({ref:r,source:"baseCommit"});let n=e.base?.trim()??"";n&&n!==Bf&&t.push({ref:n,source:"base"}),t.push({ref:"origin/main",source:"origin/main"}),t.push({ref:"origin/HEAD",source:"origin/HEAD"});let o=new Set;for(let s of t)if(!o.has(s.ref)&&(o.add(s.ref),e.verifyRef(s.ref)))return{ref:s.ref,repaired:s.source!=="baseCommit",source:s.source};throw new Error(`worktree base ref unresolvable: baseCommit=${r||"<empty>"} base=${n||"<empty>"} \u2014 origin/main and origin/HEAD also failed verification`)}var gC=/<!--\s*harness-contract:\s*(\{[\s\S]*?\})\s*-->/i,hC="next-action-fix:";function Gs(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Kf(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:Gs(e)}function kC(e){let r=(e.title??"").trim().toLowerCase();if(r.startsWith("fix:")||r.startsWith("repair:"))return!0;let t=(e.executorRef??"").toLowerCase();return!!(t.startsWith(hC)||t.includes("repair")||t.includes("unblock"))}function yC(e){let r={repairEnforceOriginalPr:!1,targetPrUrl:null,targetPrBranch:null};if(!e)return r;let t=e.match(gC);if(!t?.[1])return r;try{let n=JSON.parse(t[1]),o=Gs(String(n.targetPrUrl??n.target_pr_url??"")),s=Gs(String(n.targetPrBranch??n.target_pr_branch??""));return{repairEnforceOriginalPr:n.repairEnforceOriginalPr===!0||n.repair_enforce_original_pr===!0||!!o,targetPrUrl:o?Kf(o):null,targetPrBranch:s}}catch{return r}}function Hf(e){if(!kC(e))return null;let r=yC(e.description),t=e.prUrl?Kf(e.prUrl):null,n=r.targetPrUrl??t;return n?{targetPrUrl:n,targetPrBranch:r.targetPrBranch??Gs(e.branch)}:null}function $f(e){return["Repair target PR policy:","- Work on the existing target PR branch \u2014 do not open a duplicate repair PR by default.",`- Canonical target PR: ${e.targetPrUrl}`,...e.targetPrBranch?[`- Canonical target branch: \`${e.targetPrBranch}\` (checkout is already on this branch).`]:[],`- Reconcile ${e.targetPrUrl} in structured finalResult.targetPrReconciliation.`,"- Only supersede the original when the branch is inaccessible: set supersedesOriginalTargetPr: true with reason and close/comment on the original PR."]}function jf(e){let r=e.ownedPaths.length?`Owned paths: ${e.ownedPaths.join(", ")}. Do not edit outside these paths without stopping and reporting why.`:"Owned paths: unrestricted for this worker, but keep edits tightly scoped.",t=!!e.model?.toLowerCase().includes("haiku"),n=t?"compact":"full",o=t?e.planId?`Active planId: ${e.planId}`:"No planId on this worker.":e.planId?`Active planId: ${e.planId}${e.taskId?` \xB7 taskId: ${e.taskId}`:""}`:"No planId on this worker \u2014 still emit progress when you touch plan-scoped work.",s=[...gn(`worker.prompt.progress.${n}`).split(`
+`),o],i=gn(`worker.prompt.merge_gate.${n}`).split(`
+`),a=gn(`worker.prompt.plan_artifacts.${n}`).split(`
+`);return["You are running under the Kynver AgentOS runtime.","Immediately state your plan before editing.",r,`Worktree: ${e.worktreePath}`,`Progress heartbeat file: ${e.heartbeatPath}`,"After each major step, append one JSON line to the heartbeat file with fields: ts, phase, summary, changedFiles, blocker.","Before exiting, append a terminal heartbeat with phase `complete` and a structured finalResult object; if you cannot complete, append blocker plus the recovery next action instead of exiting silently.","Final response must include files changed, verification commands, and unresolved risks.","Also include a JSON code block containing the structured finalResult object itself (not a wrapper): summary, verification (actual commands and observed results), scope, risks, and changedFiles. This is required even if the heartbeat path is read-only or a terminal heartbeat cannot be written. Never invent verification evidence; disclose unverified surfaces and blockers.",...gn("worker.prompt.core_rules").split(`
+`),"",...s,"",...i,"",...a,"",...e.runtimeEnvelopeMarkdown?.trim()?[e.runtimeEnvelopeMarkdown.trim(),""]:[],...e.contextEnvelopeMarkdown?.trim()?[e.contextEnvelopeMarkdown.trim(),""]:[],...e.personaMarkdown?.trim()?[e.personaMarkdown.trim(),""]:[],...e.instructionPolicyMarkdown?.trim()?["Operating rules (from AgentOS memory policy):",e.instructionPolicyMarkdown.trim(),""]:[],...e.memoryQualityMarkdown?.trim()?[e.memoryQualityMarkdown.trim(),""]:[],...e.repairTargetPrUrl?[...$f({targetPrUrl:e.repairTargetPrUrl,targetPrBranch:e.repairTargetBranch??null}),""]:[],"Task:",e.task].join(`
+`)}O();H();var Ys={claude:Qm,codex:af,cursor:Fm,[ar]:kf,[lr]:Rf,[ft]:uf},Vf=null;function Gf(e){if(Vf)return Vf;let r=e?.trim();if(r){let o=Ys[or(r)];if(!o)throw new Error(`unknown worker provider "${r}" \u2014 supported: ${Object.keys(Ys).join(", ")}`);return o}let t=vm(F().workerProvider),n=Ys[t];if(!n)throw new Error(`unknown worker provider "${t}" \u2014 supported: ${Object.keys(Ys).join(", ")}`);return n}O();import{spawn as ZA}from"node:child_process";import{existsSync as eI,openSync as rI,closeSync as Wh}from"node:fs";import tI from"node:path";U();function Yf(e){return!!e.completionReportedAt?.trim()}function qs(e,r,t){e.completionReportedAt=t.completionReportedAt,e.completionOutcome=t.completionOutcome,t.completionResponse!==void 0&&(e.completionResponse=t.completionResponse),L(r,e)}function RC(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Al(e){return!!(RC(e.completionBlocker)||e.completionOutcome==="rejected")}function ro(e){return Yf(e)&&!Al(e)}U();me();H();import hi from"node:path";function Il(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function to(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}var vC=new Set(["review_scheduled","review_already_scheduled","closed","dispatched","dispatch_already_done","steer_restart_required"]),qf=new Set(["done","failed","cancelled"]);function Jf(e){let r=Il(e);if(!r)return{routeOutcome:null,taskAdvanced:!1,detail:null};let t=to(r.outcome),n=to(r.detail)??to(r.error),o=Il(r.task),s=Il(r.closedTask),i=o?to(o.status):null,a=s?to(s.status):null,c=t==="skipped_terminal_task"&&(i!==null&&qf.has(i)||a!==null&&qf.has(a))||t!==null&&vC.has(t)||i==="awaiting_review"||i==="done"||a==="done";return{routeOutcome:t,taskAdvanced:c,detail:n}}function zf(e){return e.taskAdvanced}U();zo();var bC="expert-lane-pr-review:",SC="plan-review-task",wC="scheduledjob:",Js=new Set(["lorentz","dalton","rhea","sentinel"]);function xC(e){if(!e)return null;let r=e.trim().toLowerCase();return r.length?r:null}function Ol(e){return/\b(deep[- ]?review|plan review|review .*plan|security review|red[- ]team|lb\d+|runtime verification)\b/.test(e)}function _C(e,r){return e.startsWith("factory:")?e.includes("lb")||Ol(r):!1}function zs(e){let r=(e.executorRef??"").toLowerCase(),t=(e.title??"").toLowerCase(),n=(e.description??"").toLowerCase(),o=`${t}
+${n}`,s=xC(e.personaSlug);return r.startsWith("harness-lane:blocked-lane-unblock:")||r==="lane:over_attempt_recovery"||r.startsWith("next-action-fix:")||r.startsWith("next-action-landing:")||r.startsWith("code-work-lane-chain:release:")?!1:!!(r.startsWith(bC)||r===SC||r.startsWith("daemon-review:")||s&&Js.has(s)&&(r.includes("evidence")||r.includes("validate")||r.includes("review")||_C(r,o)||Ol(o))||r.startsWith(wC)&&e.parentTaskId&&s&&Js.has(s)||e.planId&&!e.parentTaskId&&s&&Js.has(s)&&Ol(o)||t.includes("expert pr review")||e.parentTaskId&&(t.startsWith("review:")||t.includes("review required")||t.includes("runtime review"))&&s&&Js.has(s))}var Xf=/^(lane:)?(review|deep_review|planning|landing)(:|$)/i,EC=new Set(um()),CC=/no commits between/i;function Qf(e){return!!(e&&CC.test(e))}function be(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Zf(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:be(e.head)}function eg(e){if(e==null)return null;let t=(typeof e=="string"?e:typeof e=="object"&&e!==null&&"summary"in e?String(e.summary??""):JSON.stringify(e)).match(/https?:\/\/[^\s)>"]+\/(?:pull|pulls|merge_requests|pull-requests)\/\d+/i);return t?be(t[0]):null}function PC(e,r,t){let n=r.trim();if(!n)return null;let o=t.git(e,["rev-list","--count",`${n}..HEAD`]);if(o.status!==0)return null;let s=Number.parseInt(o.stdout.trim(),10);return Number.isFinite(s)?s:null}function AC(e,r){if(r.changedFiles.length>0)return!1;let t=be(e.personaSlug)?.toLowerCase();if(t&&EC.has(t))return!0;let n=be(e.routingRule)??"";return!!(n&&Xf.test(n))}function IC(e,r){if(e.changedFiles.length>0)return!0;let t=be(r?.baseRef);if(t&&r?.exec&&r.worktreePath){let n=PC(r.worktreePath,t,r.exec);if(n===0)return!1;if(n!==null&&n>0)return!0}return!!(be(e.headCommit)||Zf(e.gitAncestry))}function rg(e){if(!e.dispatched)return{required:!1,reason:"not_dispatched"};if(zs({title:e.taskTitle??void 0,personaSlug:e.personaSlug,parentTaskId:e.parentTaskId,executorRef:e.executorRef}))return{required:!1,reason:"expert_review_task"};let r=be(e.routingRule)??"";if(r&&Xf.test(r))return{required:!1,reason:"review_lane"};let t=e.worker??{personaSlug:e.personaSlug,routingRule:e.routingRule};if(AC(t,e.snapshot))return{required:!1,reason:"review_artifact"};if(be(e.patchPath)||be(e.artifactBundlePath))return{required:!1,reason:"patch_or_bundle"};if(be(e.repairTargetPrUrl))return{required:!1,reason:"repair_target_pr"};if(be(e.prUrl)??be(e.taskPrUrl)??be(e.snapshot.prUrl))return{required:!1,reason:"already_has_pr"};let s=e.exec&&e.baseRef?{baseRef:e.baseRef,exec:e.exec,worktreePath:e.snapshot.worktreePath}:void 0;return IC(e.snapshot,s)?{required:!0,snapshot:e.snapshot}:{required:!1,reason:"no_work_product"}}function tg(e,r){return{changedFiles:e.changedFiles,branch:e.branch,worktreePath:e.worktreePath,gitAncestry:e.gitAncestry,finalResult:e.finalResult,headCommit:be(r?.headCommit)??Zf(e.gitAncestry),prUrl:be(r?.prUrl)??null}}import{spawnSync as OC}from"node:child_process";function og(e){let r=e.trim();if(!r)return null;let t=r.match(/^git@github\.com:([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(t)return ng(t[1]);let n=r.match(/^ssh:\/\/git@github\.com\/([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(n)return ng(n[1]);try{let o=new URL(r.includes("://")?r:`https://${r}`);if(o.hostname.toLowerCase()!=="github.com")return null;let s=o.pathname.replace(/^\/+|\/+$/g,"").split("/");if(s.length<2)return null;let[i,a]=s;return!i||!a?null:`${i}/${a.replace(/\.git$/i,"")}`}catch{return null}}function ng(e){let r=e.split("/").filter(Boolean);if(r.length<2)return null;let t=r[0],n=r[1].replace(/\.git$/i,"");return t&&n?`${t}/${n}`:null}de();function TC(e,r,t){try{let n=OC(e,t,{windowsHide:!0,cwd:r,encoding:"utf8"});return{status:n.status,stdout:(n.stdout||"").trim(),stderr:(n.stderr||"").trim(),error:n.error?n.error.message:null}}catch(n){return{status:null,stdout:"",stderr:"",error:n.message}}}var Qs={git:(e,r)=>ne(e,r),gh:(e,r)=>TC("gh",e,r)};function NC(e){return e.split(`
+`).map(r=>r.trim()).find(Boolean)??""}function sg(e,r){let t=r.git(e,["remote","get-url","origin"]);return t.status!==0?null:og(t.stdout)}function gt(e,r){let t=r.git(e,["rev-parse","HEAD"]);return t.status!==0?null:t.stdout.trim()||null}function Xs(e,r,t,n){let o=n.gh(e,["pr","list","--repo",r,"--head",t,"--state","open","--json","url","--limit","1"]);if(o.status!==0)return null;try{return JSON.parse(o.stdout)[0]?.url?.trim()||null}catch{return null}}function no(e){let{worktreePath:r,branch:t,commitMessage:n,hasDirtyFiles:o,exec:s}=e;if(o){let l=s.git(r,["add","-A"]);if(l.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:l.stderr||l.stdout||l.error||"git add failed"};let c=s.git(r,["commit","-m",n]);if(c.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:c.stderr||c.stdout||c.error||"git commit failed"}}let i=s.git(r,["push","-u","origin",t]);if(i.status!==0)return{ok:!1,committed:o,pushed:!1,detail:i.stderr||i.stdout||i.error||"git push failed"};let a=gt(r,s)??void 0;return{ok:!0,committed:o,pushed:!0,headCommit:a}}function ig(e){let r=e.remoteBranch.trim();if(!r)return{ok:!1,detail:"missing remote branch"};let t=e.exec.git(e.worktreePath,["push","-u","origin",`HEAD:refs/heads/${r}`]);return t.status!==0&&!/already up to date/i.test(t.stderr||t.stdout)?{ok:!1,detail:t.stderr||t.stdout||t.error||"git push to PR branch failed"}:{ok:!0}}function ag(e){let r=Xs(e.worktreePath,e.repo,e.branch,e.exec);if(r)return{ok:!0,prUrl:r,created:!1};let t=e.exec.gh(e.worktreePath,["pr","create","--repo",e.repo,"--base",e.base,"--head",e.branch,"--title",e.title,"--body",e.body,"--draft"]);if(t.status!==0)return{ok:!1,detail:t.stderr||t.stdout||t.error||"gh pr create failed"};let n=MC(t.stdout)??Xs(e.worktreePath,e.repo,e.branch,e.exec);return n?{ok:!0,prUrl:n,created:!0}:{ok:!1,detail:"gh pr create succeeded but no PR URL was parsed"}}function MC(e){let t=NC(e).match(/https?:\/\/[^\s]+\/pull\/\d+/i);return t?t[0]:null}O();function lg(e){return`t-${x(e)}-a`}function cg(e,r){let t=lg(r);if(e.headRefName.toLowerCase().includes(t))return!0;let n=r.trim();if(!n)return!1;let o=e.body??"",s=e.title??"";return o.includes(n)||o.includes(`\`${n}\``)||s.includes(n)}function oo(e){return e.trim().toLowerCase()}function ug(e,r){if(!e.length)return null;if(r){let t=oo(r),n=e.find(o=>oo(o.url)===t);if(n)return n}return[...e].sort((t,n)=>n.number-t.number)[0]??null}function dg(e,r){let t=oo(r);return e.filter(n=>oo(n.url)!==t).map(n=>n.url)}function pg(e){try{let r=JSON.parse(e);return Array.isArray(r)?r.map(t=>({url:t.url?.trim()??"",number:Number(t.number)||0,headRefName:t.headRefName?.trim()??"",createdAt:t.createdAt?.trim()??"",body:t.body,title:t.title})).filter(t=>t.url&&t.number>0&&t.headRefName):[]}catch{return[]}}function DC(e){let r=new Set,t=[];for(let n of e){let o=oo(n.url);r.has(o)||(r.add(o),t.push(n))}return t}function WC(e,r,t,n){let o=n.gh(e,["search","prs",t,"--repo",r,"--state","open","--json","url,number,headRefName,createdAt,body,title","--limit","20"]);return o.status!==0?[]:pg(o.stdout).filter(s=>cg(s,t))}function LC(e,r,t,n){let o=n.gh(e,["pr","list","--repo",r,"--state","open","--json","url,number,headRefName,createdAt,body,title","--limit","100"]);if(o.status!==0)return[];let s=lg(t);return pg(o.stdout).filter(i=>i.headRefName.toLowerCase().includes(s)||cg(i,t))}function Tl(e,r,t,n){let o=t.trim();if(!o)return[];let s=WC(e,r,o,n),i=LC(e,r,o,n);return DC([...s,...i])}function UC(e){let r=e.trim().match(/\/pull\/(\d+)(?:$|[?#])/i);if(!r)return null;let t=Number.parseInt(r[1],10);return Number.isFinite(t)?t:null}function Nl(e){let r=dg(e.rows,e.canonicalPrUrl),t=[],n=[];for(let o of r){let s=UC(o);if(!s){n.push({prUrl:o,detail:"could not parse PR number from URL"});continue}let i=`Superseded by ${e.canonicalPrUrl} (harness task retry dedupe).`,a=e.exec.gh(e.worktreePath,["pr","close",String(s),"--repo",e.repo,"--comment",i]);a.status===0?t.push(o):n.push({prUrl:o,detail:a.stderr||a.stdout||a.error||"gh pr close failed"})}return{closed:t,failed:n}}function mg(e,r,t,n){let o=t.trim();if(!o||!r.trim())return null;let s=n.gh(e,["api",`repos/${r}/commits/${o}/pulls`]);if(s.status!==0||!s.stdout)return null;try{let l=JSON.parse(s.stdout).filter(c=>c.merged_at&&c.html_url?.trim()).sort((c,u)=>(typeof c.number=="number"?c.number:Number.MAX_SAFE_INTEGER)-(typeof u.number=="number"?u.number:Number.MAX_SAFE_INTEGER))[0];return l?.html_url?.trim()?{prUrl:l.html_url.trim(),number:typeof l.number=="number"?l.number:null}:null}catch{return null}}function BC(e){return e.gh(process.cwd(),["--version"]).status===0}function FC(e,r){return`AgentOS harness: ${e} (${r})`}function KC(e,r,t){return["Automated PR-ready handoff from the Kynver harness runtime.","",e?`AgentOS task: \`${e}\``:"",`Harness worker: \`${r}\` \xB7 run \`${t}\``,"","Opened by orchestrator completion enforcement so production review receives a reviewable artifact."].filter(Boolean).join(`
+`)}function Dl(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function HC(e){return Dl(e.prUrlHint)??eg(e.status.finalResult)??Dl(e.worker.taskPrUrl)??null}function $C(e){let{snapshot:r,canonical:t,workerName:n,exec:o}=e,s=!1,i=!1,a=r.headCommit??gt(r.worktreePath,o)??void 0;if(r.changedFiles.length>0){let l=no({worktreePath:r.worktreePath,branch:r.branch,commitMessage:`chore(harness): update PR handoff for ${n}`,hasDirtyFiles:!0,exec:o});if(!l.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${l.detail??"git commit/push failed"}`,nextAction:"Commit and push the dirty worker changes to the existing PR branch, then rerun `kynver worker complete`."};s=l.committed,i=l.pushed,a=l.headCommit??a}if(t.headRefName!==r.branch){let l=ig({worktreePath:r.worktreePath,remoteBranch:t.headRefName,exec:o});if(!l.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${l.detail??"git push to canonical PR branch failed"}`,nextAction:"Push worker commits to the canonical PR branch, then rerun `kynver worker complete`."};i=!0,a=gt(r.worktreePath,o)??a}return{ok:!0,prUrl:t.url,headCommit:a,committed:s,pushed:i}}function Ml(e){if(e.snapshot.changedFiles.length===0)return{ok:!0,prUrl:e.prUrl,headCommit:e.snapshot.headCommit??gt(e.snapshot.worktreePath,e.exec)??void 0};let r=no({worktreePath:e.snapshot.worktreePath,branch:e.snapshot.branch,commitMessage:e.commitMessage,hasDirtyFiles:!0,exec:e.exec});return r.ok?{ok:!0,prUrl:e.prUrl,headCommit:r.headCommit??e.snapshot.headCommit??void 0,committed:r.committed,pushed:r.pushed}:{ok:!1,reason:`PR-ready handoff blocked: ${r.detail??"git commit/push failed"}`,nextAction:"Commit and push the dirty worker changes to the existing PR branch, then rerun `kynver worker complete`."}}function Wl(e,r=Qs){let t=HC(e),n=tg(e.status,{prUrl:t,headCommit:null}),o=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main";if(!rg({dispatched:e.worker.dispatched,routingRule:e.worker.routingRule,personaSlug:e.worker.personaSlug,prUrl:t,taskTitle:e.worker.taskTitle,executorRef:e.worker.executorRef,parentTaskId:e.worker.parentTaskId,taskPrUrl:e.worker.taskPrUrl,repairTargetPrUrl:e.worker.repairTargetPrUrl,baseRef:o,exec:r,worker:e.worker,snapshot:n}).required)return t?Ml({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r}):{ok:!0};if(t)return Ml({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});if(!BC(r)){let h=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${h?`${h} uncommitted change(s) with no PR URL`:"committed branch with no PR URL"}`,nextAction:"Install and authenticate GitHub CLI (`gh auth login`), then commit, push, and run `gh pr create` (or rerun `kynver worker complete` after the PR exists)."}}let i=sg(n.worktreePath,r);if(!i)return{ok:!1,reason:"PR-ready handoff blocked: could not resolve github.com origin for the worktree",nextAction:"Ensure `origin` points at GitHub, push the branch, open a PR, and rerun `kynver worker complete`."};let a=e.worker.repairTargetPrUrl?.trim();if(a){let h=!1,w=!1,E=n.headCommit??gt(n.worktreePath,r)??void 0;if(n.changedFiles.length>0){let S=no({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`fix(harness): repair target PR ${a}`,hasDirtyFiles:!0,exec:r});if(!S.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${S.detail??"git commit/push failed"}`,nextAction:"Commit and push to the target PR branch, then rerun `kynver worker complete`."};h=S.committed,w=S.pushed,E=S.headCommit??E}else{let S=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(S.status!==0&&!/already up to date/i.test(S.stderr||S.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${S.stderr||S.stdout||"git push failed"}`,nextAction:"Push the target branch to origin, then rerun `kynver worker complete`."};w=S.status===0}return{ok:!0,prUrl:a,headCommit:E,committed:h,pushed:w}}let l=Dl(e.worker.taskId),c=[];if(l){c=Tl(n.worktreePath,i,l,r);let h=ug(c);if(h){let w=$C({snapshot:n,canonical:h,workerName:e.worker.name,exec:r});return w.ok&&w.prUrl&&Nl({worktreePath:n.worktreePath,repo:i,rows:c,canonicalPrUrl:w.prUrl,exec:r}),w}}let u=Xs(n.worktreePath,i,n.branch,r);if(u)return Ml({snapshot:n,prUrl:u,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});let d=n.changedFiles.length>0,p=!1,m=!1,f=n.headCommit??void 0,y=no({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`chore(harness): PR-ready handoff for ${e.worker.name}`,hasDirtyFiles:d,exec:r});if(d&&!y.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${y.detail??"git commit/push failed"}`,nextAction:"Commit and push the branch, run `gh pr create`, then rerun `kynver worker complete`."};if(d){if(p=y.committed,m=y.pushed,!y.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${y.detail??"git push failed"}`,nextAction:"Fix git auth or merge conflicts, push the branch, run `gh pr create`, then rerun `kynver worker complete`."}}else{let h=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(h.status!==0&&!/already up to date/i.test(h.stderr||h.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${h.stderr||h.stdout||h.error||"git push failed"}`,nextAction:"Push the branch to origin, run `gh pr create`, then rerun `kynver worker complete`."};m=h.status===0}f=y.headCommit??f??gt(n.worktreePath,r)??void 0;let k=f?mg(n.worktreePath,i,f,r):null;if(k)return{ok:!0,prUrl:k.prUrl,headCommit:f,committed:p,pushed:m,created:!1};let b=e.run.base?.trim()||"main",g=ag({worktreePath:n.worktreePath,repo:i,branch:n.branch,base:b.replace(/^origin\//,""),title:FC(e.worker.name,e.worker.runId),body:KC(e.worker.taskId,e.worker.name,e.worker.runId),exec:r});if(!g.ok||!g.prUrl){if(Qf(g.detail))return{ok:!0,headCommit:f??void 0,committed:p,pushed:m};let h=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${h?`${h} uncommitted change(s) and no PR URL after handoff attempt`:"no PR URL after handoff attempt"}${g.detail?` (${g.detail})`:""}`,nextAction:"Run `gh pr create` on the worker branch (or fix `gh` auth), attach the PR URL to the task, then rerun `kynver worker complete`."}}if(l&&g.prUrl){let w=[...c.length>0?c:Tl(n.worktreePath,i,l,r),{url:g.prUrl,number:Number.parseInt(g.prUrl.match(/\/pull\/(\d+)/)?.[1]??"",10)||0,headRefName:n.branch,createdAt:""}];Nl({worktreePath:n.worktreePath,repo:i,rows:w,canonicalPrUrl:g.prUrl,exec:r})}return{ok:!0,prUrl:g.prUrl,headCommit:f??void 0,committed:p,pushed:m,created:g.created}}me();ot();ua();U();me();O();import AP from"node:path";O();import jC from"node:path";var so=new Map,Ll=new Map;function Ul(e){clearInterval(Ll.get(e)),Ll.delete(e)}function Bl(e,r){if(Ul(e),!so.has(e))return;let t=setInterval(()=>{(A(jC.join(e,"worker.json"),null)?.completionReportedAt||!Y(r))&&Qt(e)},1e3);t.unref(),Ll.set(e,t)}function Fl(e,r){Ul(e);let t=so.get(e);t&&t.close(),so.set(e,r)}async function Vr(e){Ul(e);let r=so.get(e);return r?(so.delete(e),await r.close(),!0):!1}function Qt(e){Vr(e).catch(()=>{})}de();import{appendFileSync as VC,existsSync as gg,mkdirSync as hg,readFileSync as GC,rmSync as fg,writeFileSync as YC}from"node:fs";import Ar from"node:path";var kg=Ar.join(".cursor","mcp.json");function yg(e){return Ar.join(e,kg)}function qC(e){return Z(e,["ls-files","--error-unmatch",kg.split(Ar.sep).join("/")],{allowFailure:!0}).trim().length>0}function JC(e){let r=Z(e,["rev-parse","--git-common-dir"],{allowFailure:!0}).trim();if(!r)return;let t=Ar.isAbsolute(r)?r:Ar.join(e,r),n=Ar.join(t,"info","exclude"),o=".cursor/mcp.json";try{hg(Ar.dirname(n),{recursive:!0});let s=gg(n)?GC(n,"utf8"):"";if(s.split(/\r?\n/).some(i=>i.trim()===o))return;VC(n,`${s.endsWith(`
 `)||!s?"":`
 `}${o}
-`)}catch{}}function Gf(e){if(nE(e.worktreePath))return{ok:!1,reason:"repo_owns_config",detail:"the repository tracks .cursor/mcp.json \u2014 refusing to modify a tracked file in the worker's worktree"};let r=Vf(e.worktreePath);$f(Cr.dirname(r),{recursive:!0});let t={mcpServers:{[ne]:{command:"npx",args:["-y","-p","@kynver-app/mcp-agent-os","kynver-worker-mcp"],env:{[ze]:e.brokerSocketPath}}}};return tE(r,`${JSON.stringify(t,null,2)}
-`,{mode:384}),oE(e.worktreePath),{ok:!0,configPath:r}}function js(e){let r=Vf(e);if(!Hf(r))return!1;try{Kf(r,{force:!0});let t=Cr.dirname(r);return Kf(t,{recursive:!1}),!0}catch{return!0}}import{copyFileSync as sE,existsSync as Vs,mkdirSync as iE,readFileSync as aE,rmSync as lE,symlinkSync as cE,writeFileSync as uE}from"node:fs";import{spawnSync as dE}from"node:child_process";import{homedir as pE}from"node:os";import Hr from"node:path";var mE="codex-home";function Yf(e){return Hr.join(e,mE)}function fE(e=process.env){let r=e.CODEX_HOME?.trim();if(r)return Hr.resolve(r);let t=pE();for(let n of[Hr.join(t,".codex"),Hr.join(t,".config","codex")])if(Vs(n))return n;return null}function gE(e){return["","# Added per task by the Kynver harness. Carries a broker socket path, never a credential.",`[mcp_servers.${ne}]`,'command = "npx"','args = ["-y", "-p", "@kynver-app/mcp-agent-os", "kynver-worker-mcp"]',"",`[mcp_servers.${ne}.env]`,`${ze} = ${JSON.stringify(e)}`,""].join(`
-`)}function hE(e){return new RegExp(String.raw`^\s*\[\s*mcp_servers\s*\.\s*"?${ne}"?\s*[\].]`,"m").test(e)}function qf(e){let r=fE(e.env??process.env),t=r?Hr.join(r,"config.toml"):null,n=t&&Vs(t)?aE(t,"utf8"):"";if(n&&hE(n))return{ok:!1,reason:"user_config_owns_server",detail:`the Codex config already declares an "${ne}" MCP server \u2014 refusing to write a duplicate stanza`};let o=Yf(e.workerDir);iE(o,{recursive:!0,mode:448});let s=!n||n.endsWith(`
+`)}catch{}}function Rg(e){if(qC(e.worktreePath))return{ok:!1,reason:"repo_owns_config",detail:"the repository tracks .cursor/mcp.json \u2014 refusing to modify a tracked file in the worker's worktree"};let r=yg(e.worktreePath);hg(Ar.dirname(r),{recursive:!0});let t={mcpServers:{[oe]:{command:"npx",args:["-y","-p","@kynver-app/mcp-agent-os","kynver-worker-mcp"],env:{[Ze]:e.brokerSocketPath}}}};return YC(r,`${JSON.stringify(t,null,2)}
+`,{mode:384}),JC(e.worktreePath),{ok:!0,configPath:r}}function Zs(e){let r=yg(e);if(!gg(r))return!1;try{fg(r,{force:!0});let t=Ar.dirname(r);return fg(t,{recursive:!1}),!0}catch{return!0}}import{copyFileSync as zC,existsSync as ei,mkdirSync as XC,readFileSync as QC,rmSync as ZC,symlinkSync as eP,writeFileSync as rP}from"node:fs";import{spawnSync as tP}from"node:child_process";import{homedir as nP}from"node:os";import Gr from"node:path";var oP="codex-home";function vg(e){return Gr.join(e,oP)}function sP(e=process.env){let r=e.CODEX_HOME?.trim();if(r)return Gr.resolve(r);let t=nP();for(let n of[Gr.join(t,".codex"),Gr.join(t,".config","codex")])if(ei(n))return n;return null}function iP(e){return["","# Added per task by the Kynver harness. Carries a broker socket path, never a credential.",`[mcp_servers.${oe}]`,'command = "npx"','args = ["-y", "-p", "@kynver-app/mcp-agent-os", "kynver-worker-mcp"]',"",`[mcp_servers.${oe}.env]`,`${Ze} = ${JSON.stringify(e)}`,""].join(`
+`)}function aP(e){return new RegExp(String.raw`^\s*\[\s*mcp_servers\s*\.\s*"?${oe}"?\s*[\].]`,"m").test(e)}function bg(e){let r=sP(e.env??process.env),t=r?Gr.join(r,"config.toml"):null,n=t&&ei(t)?QC(t,"utf8"):"";if(n&&aP(n))return{ok:!1,reason:"user_config_owns_server",detail:`the Codex config already declares an "${oe}" MCP server \u2014 refusing to write a duplicate stanza`};let o=vg(e.workerDir);XC(o,{recursive:!0,mode:448});let s=!n||n.endsWith(`
 `)?"":`
-`;return uE(Hr.join(o,"config.toml"),`${n}${s}${gE(e.brokerSocketPath)}`,{mode:384}),{ok:!0,codexHome:o,authMode:kE(r,o)}}function kE(e,r){let t=e?Hr.join(e,"auth.json"):null;if(!t||!Vs(t))return"none";let n=Hr.join(r,"auth.json");try{return cE(t,n,"file"),"symlink"}catch{try{return sE(t,n),"copy"}catch{return"none"}}}function ro(e){let r=Yf(e);if(!Vs(r))return!1;try{return lE(r,{recursive:!0,force:!0}),!0}catch{return!1}}function Jf(e,r,t=1e4){try{let[n,o]=ve(r,["--version"]),s=dE(n,o,{env:{...process.env,CODEX_HOME:e},encoding:"utf8",timeout:t,windowsHide:!0});return s.error&&s.error.code==="ENOENT"?{ok:!0}:s.status===0?{ok:!0}:{ok:!1,detail:(s.stderr||s.stdout||`exit ${s.status??"unknown"}`).toString().replace(/\s+/g," ").trim().slice(0,200)}}catch{return{ok:!0}}}de();import{appendFileSync as yE,existsSync as Al,mkdirSync as Xf,readFileSync as Qf,rmSync as zf,writeFileSync as RE}from"node:fs";import Er from"node:path";var Zf=Er.join(".agents","mcp_config.json");function eg(e){return Er.join(e,Zf)}function vE(e){return Q(e,["ls-files","--error-unmatch",Zf.split(Er.sep).join("/")],{allowFailure:!0}).trim().length>0}function bE(e){if(!Al(e))return{};try{let r=JSON.parse(Qf(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))return{};let t=r.mcpServers;return!t||typeof t!="object"||Array.isArray(t)?{}:t}catch{return{}}}function SE(e){let r=Q(e,["rev-parse","--git-common-dir"],{allowFailure:!0}).trim();if(!r)return;let t=Er.isAbsolute(r)?r:Er.join(e,r),n=Er.join(t,"info","exclude"),o=".agents/mcp_config.json";try{Xf(Er.dirname(n),{recursive:!0});let s=Al(n)?Qf(n,"utf8"):"";if(s.split(/\r?\n/).some(i=>i.trim()===o))return;yE(n,`${s.endsWith(`
+`;return rP(Gr.join(o,"config.toml"),`${n}${s}${iP(e.brokerSocketPath)}`,{mode:384}),{ok:!0,codexHome:o,authMode:lP(r,o)}}function lP(e,r){let t=e?Gr.join(e,"auth.json"):null;if(!t||!ei(t))return"none";let n=Gr.join(r,"auth.json");try{return eP(t,n,"file"),"symlink"}catch{try{return zC(t,n),"copy"}catch{return"none"}}}function io(e){let r=vg(e);if(!ei(r))return!1;try{return ZC(r,{recursive:!0,force:!0}),!0}catch{return!1}}function Sg(e,r,t=1e4){try{let[n,o]=ve(r,["--version"]),s=tP(n,o,{env:{...process.env,CODEX_HOME:e},encoding:"utf8",timeout:t,windowsHide:!0});return s.error&&s.error.code==="ENOENT"?{ok:!0}:s.status===0?{ok:!0}:{ok:!1,detail:(s.stderr||s.stdout||`exit ${s.status??"unknown"}`).toString().replace(/\s+/g," ").trim().slice(0,200)}}catch{return{ok:!0}}}de();import{appendFileSync as cP,existsSync as Kl,mkdirSync as xg,readFileSync as _g,rmSync as wg,writeFileSync as uP}from"node:fs";import Ir from"node:path";var Eg=Ir.join(".agents","mcp_config.json");function Cg(e){return Ir.join(e,Eg)}function dP(e){return Z(e,["ls-files","--error-unmatch",Eg.split(Ir.sep).join("/")],{allowFailure:!0}).trim().length>0}function pP(e){if(!Kl(e))return{};try{let r=JSON.parse(_g(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))return{};let t=r.mcpServers;return!t||typeof t!="object"||Array.isArray(t)?{}:t}catch{return{}}}function mP(e){let r=Z(e,["rev-parse","--git-common-dir"],{allowFailure:!0}).trim();if(!r)return;let t=Ir.isAbsolute(r)?r:Ir.join(e,r),n=Ir.join(t,"info","exclude"),o=".agents/mcp_config.json";try{xg(Ir.dirname(n),{recursive:!0});let s=Kl(n)?_g(n,"utf8"):"";if(s.split(/\r?\n/).some(i=>i.trim()===o))return;cP(n,`${s.endsWith(`
 `)||!s?"":`
 `}${o}
-`)}catch{}}function rg(e){if(vE(e.worktreePath))return{ok:!1,reason:"repo_owns_config",detail:"the repository tracks .agents/mcp_config.json \u2014 refusing to modify a tracked file in the worker's worktree"};let r=eg(e.worktreePath),t=bE(r);if(ne in t)return{ok:!1,reason:"user_config_owns_server",detail:`the workspace MCP config already declares an "${ne}" server \u2014 refusing to overwrite it`};Xf(Er.dirname(r),{recursive:!0});let n={mcpServers:{...t,[ne]:{command:"npx",args:["-y","-p","@kynver-app/mcp-agent-os","kynver-worker-mcp"],env:{[ze]:e.brokerSocketPath}}}};return RE(r,`${JSON.stringify(n,null,2)}
-`,{mode:384}),SE(e.worktreePath),{ok:!0,configPath:r}}function Gs(e){let r=eg(e);if(!Al(r))return!1;try{return zf(r,{force:!0}),zf(Er.dirname(r),{recursive:!1}),!0}catch{return!0}}import{copyFileSync as wE,existsSync as Il,mkdirSync as xE,readFileSync as _E,rmSync as CE,symlinkSync as EE,writeFileSync as PE}from"node:fs";import{homedir as AE}from"node:os";import Pr from"node:path";var IE="gemini-home";function tg(e){return Pr.join(e,IE)}function OE(e){return e.HOME?.trim()||e.USERPROFILE?.trim()||AE()}function TE(e=process.env){let r=e.GEMINI_CLI_HOME?.trim();return r?Pr.join(Pr.resolve(r),".gemini"):Pr.join(OE(e),".gemini")}function NE(e){if(!Il(e))return{};try{let r=JSON.parse(_E(e,"utf8"));return r&&typeof r=="object"&&!Array.isArray(r)?r:{}}catch{return{}}}function ME(e){let r=e.mcpServers;return!r||typeof r!="object"||Array.isArray(r)?!1:ne in r}function DE(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:{}}function WE(e){return{command:"npx",args:["-y","-p","@kynver-app/mcp-agent-os","kynver-worker-mcp"],env:{[ze]:e},trust:!0}}function ng(e){let r=e.env??process.env,t=TE(r),n=NE(Pr.join(t,"settings.json"));if(ME(n))return{ok:!1,reason:"user_config_owns_server",detail:`the Gemini CLI settings already declare an "${ne}" MCP server \u2014 refusing to write a duplicate stanza`};let o=tg(e.workerDir),s=Pr.join(o,".gemini");xE(s,{recursive:!0,mode:448});let i=n.mcpServers&&typeof n.mcpServers=="object"&&!Array.isArray(n.mcpServers)?n.mcpServers:{},a={...n,mcp:{...DE(n.mcp),autoAllowInHeadless:!0},mcpServers:{...i,[ne]:WE(e.brokerSocketPath)}};return PE(Pr.join(s,"settings.json"),`${JSON.stringify(a,null,2)}
-`,{mode:384}),{ok:!0,geminiCliHome:o,authMode:LE(t,s)}}function LE(e,r){let t=["oauth_creds.json","google_accounts.json"],n="none";for(let o of t){let s=Pr.join(e,o);if(!Il(s))continue;let i=Pr.join(r,o);try{EE(s,i,"file"),n==="none"&&(n="symlink")}catch{try{wE(s,i),n="copy"}catch{}}}return n}function Ys(e){let r=tg(e);if(!Il(r))return!1;try{return CE(r,{recursive:!0,force:!0}),!0}catch{return!1}}var BE=new Set(["awaiting_review","blocked","done","needs_input","waiting","scheduled","ready","cancelled","failed"]);function og(e){return!!(typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim())}function FE(e){if(typeof e=="string"){let r=e.trim();return r.length?r:null}if(e&&typeof e=="object"&&!Array.isArray(e)){let r=e,t=r.summary??r.finalSummary??r.message;if(typeof t=="string"&&t.trim())return t.trim();try{return JSON.stringify(e)}catch{return null}}return null}function $r(e){let r=e.finalResult??null,t=typeof e.lastHeartbeatSummary=="string"?e.lastHeartbeatSummary:FE(r);return{finalResult:r??t??"completed",summary:t}}function qs(e,r,t){if(og(e)&&e.status==="done"&&e.completionSnapshot!=null)return;let n=new Date().toISOString(),o=$r(r),s=t?.source?.trim();e.completionReportedAt=n,e.completionSnapshot=o,e.status="done",s&&(e.completionAckSource=s),F(e.runId,e),e.workerDir&&(Yt(e.workerDir),_s(e.workerDir),ro(e.workerDir),Ys(e.workerDir)),e.worktreePath&&(js(e.worktreePath),Gs(e.worktreePath))}function KE(e){let r=new Map,n=e.response?.tick?.filteredItems;if(!Array.isArray(n))return r;for(let o of n){if(o.kind!=="task"||typeof o.id!="string")continue;let s=typeof o.taskStatus=="string"?o.taskStatus.trim():"";s&&r.set(o.id,s)}return r}function sg(e,r){let t=KE(r);if(t.size===0)return[];let n=ee(e),o=[];for(let s of Object.keys(n.workers||{})){let i=I(UE.join(M(n.id),"workers",x(s),"worker.json"),void 0);if(!i?.taskId||og(i))continue;let a=t.get(i.taskId);if(!a||a==="running"||!BE.has(a))continue;let l=Y(i,{base:n.base,baseCommit:n.baseCommit});qs(i,l,{source:`board-task-${a}`}),o.push({worker:s,taskId:i.taskId,taskStatus:a})}return o}xn();function Js(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"&&!Array.isArray(e)?Object.keys(e).length>0:!0}function HE(e){let r=e.lastHeartbeatPhase?.trim();if(!r||r==="complete")return null;let t=e.lastHeartbeatSummary?.trim();return t?{summary:t,handoffState:"exited_without_complete_heartbeat",lastHeartbeatPhase:r,...e.heartbeatBlocker?{blocker:e.heartbeatBlocker}:{}}:null}function $E(e){let r=_n(e);return r?{summary:r.reason,handoffState:"exit_failure",blocked:r.blocked}:null}function jE(e){let r=e.status.attention.reason?.trim()||e.status.error?.trim()||"process exited without a final result";return{summary:`Worker exited with an error: ${r}`,handoffState:"exited_without_final_result",blocked:!0,attentionState:e.status.attention.state,attentionReason:r,...e.heartbeat.lastHeartbeatPhase?{lastHeartbeatPhase:e.heartbeat.lastHeartbeatPhase}:{},...e.heartbeat.lastHeartbeatSummary?{lastHeartbeatSummary:e.heartbeat.lastHeartbeatSummary}:{},...e.heartbeat.heartbeatBlocker?{blocker:e.heartbeat.heartbeatBlocker}:{}}}function zs(e){let{worker:r,status:t}=e;if(Js(t.finalResult)){let u=pe(r.heartbeatPath),d=kr(u),p=Js(d)&&JSON.stringify(d)===JSON.stringify(t.finalResult)?"heartbeat_complete":"stdout_stream";return{finalResult:t.finalResult,source:p,snapshot:$r(t)}}if(t.alive)return null;let n=et(r.stdoutPath);if(Js(n.finalResult)){let u={...t,finalResult:n.finalResult};return{finalResult:n.finalResult,source:"stdout_stream",snapshot:$r(u)}}let o=pe(r.heartbeatPath),s=kr(o);if(Js(s)){let u={...t,finalResult:s,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary};return{finalResult:s,source:"heartbeat_complete",snapshot:$r(u)}}let i=$E(t.error??n.error);if(i){let u={...t,finalResult:i};return{finalResult:i,source:"exit_failure",snapshot:$r(u)}}let a=HE(o);if(a){let u={...t,finalResult:a,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary};return{finalResult:a,source:"heartbeat_summary",snapshot:$r(u)}}let l=jE({status:t,heartbeat:o}),c={...t,finalResult:l,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary};return{finalResult:l,source:"exit_no_final_result",snapshot:$r(c)}}function Xs(e,r){return e.completionSnapshot?.finalResult!=null?!1:(e.completionSnapshot=r.snapshot,e.completionHandoffSource=r.source,!0)}xn();function Qs(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return n!=="node_modules"&&!n.startsWith("node_modules/")})}function ig(e){let r=e.trim();return r.startsWith("??")?r.slice(2).trim():r.length>3&&/^[ MADRCU?!]{2} /.test(r.slice(0,3))?r.slice(3).trim():r}function ag(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function lg(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function ug(e){let r=lg(e);if(!r)return[];let t=lg(r.worktreeHandoff),n=ag(t?.disposableArtifactsRemoved);return n.length?n:ag(r.disposableArtifactsRemoved)}function cg(e){return e.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"")}function dg(e,r){let t=Qs(e);if(t.length===0)return!0;if(r.length===0)return!1;let n=new Set(r.map(o=>cg(o)));return t.every(o=>{let s=cg(ig(o));return n.has(s)})}function Zs(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function pg(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function VE(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function GE(e){let r=pg(e.disposableArtifactsRemoved),t=ug(e.finalResult);return[...new Set([...r,...t])]}function mg(e){let r=pg(e.changedFiles),t=Qs(r),n=GE(e),o=t.length===0||dg(r,n);return Zs(e.prUrl)?o?{allowed:!0,state:"pr_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a PR attached; commit or discard before completing`}:Zs(e.headCommit)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) on top of a commit; commit or discard before completing`}:Zs(e.artifactBundlePath)||Zs(e.patchPath)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a patch/bundle handoff; clean the tree before completing`}:o?{allowed:!0,state:"clean",materialDirtyCount:0}:VE(e.finalResult)?{allowed:!1,state:"dirty_worktree_no_pr",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no commit or PR; commit, open a PR, discard, or remove one-off files via \`kynver worker discard-disposable\` before completing`}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no final result`}}qe();import{existsSync as dP,renameSync as pP}from"node:fs";import{mkdirSync as iP}from"node:fs";import aP from"node:path";import{DatabaseSync as lP}from"node:sqlite";var Ol=class extends Error{constructor(r,t){super(`local-run-store schema version ${r} is newer than this runtime supports (${t}); refusing to open. Upgrade the runtime or quarantine the database deliberately.`),this.name="SchemaDowngradeRefusedError"}},YE=[`CREATE TABLE IF NOT EXISTS local_meta (
+`)}catch{}}function Pg(e){if(dP(e.worktreePath))return{ok:!1,reason:"repo_owns_config",detail:"the repository tracks .agents/mcp_config.json \u2014 refusing to modify a tracked file in the worker's worktree"};let r=Cg(e.worktreePath),t=pP(r);if(oe in t)return{ok:!1,reason:"user_config_owns_server",detail:`the workspace MCP config already declares an "${oe}" server \u2014 refusing to overwrite it`};xg(Ir.dirname(r),{recursive:!0});let n={mcpServers:{...t,[oe]:{command:"npx",args:["-y","-p","@kynver-app/mcp-agent-os","kynver-worker-mcp"],env:{[Ze]:e.brokerSocketPath}}}};return uP(r,`${JSON.stringify(n,null,2)}
+`,{mode:384}),mP(e.worktreePath),{ok:!0,configPath:r}}function ri(e){let r=Cg(e);if(!Kl(r))return!1;try{return wg(r,{force:!0}),wg(Ir.dirname(r),{recursive:!1}),!0}catch{return!0}}import{copyFileSync as fP,existsSync as Hl,mkdirSync as gP,readFileSync as hP,rmSync as kP,symlinkSync as yP,writeFileSync as RP}from"node:fs";import{homedir as vP}from"node:os";import Or from"node:path";var bP="gemini-home";function Ag(e){return Or.join(e,bP)}function SP(e){return e.HOME?.trim()||e.USERPROFILE?.trim()||vP()}function wP(e=process.env){let r=e.GEMINI_CLI_HOME?.trim();return r?Or.join(Or.resolve(r),".gemini"):Or.join(SP(e),".gemini")}function xP(e){if(!Hl(e))return{};try{let r=JSON.parse(hP(e,"utf8"));return r&&typeof r=="object"&&!Array.isArray(r)?r:{}}catch{return{}}}function _P(e){let r=e.mcpServers;return!r||typeof r!="object"||Array.isArray(r)?!1:oe in r}function EP(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:{}}function CP(e){return{command:"npx",args:["-y","-p","@kynver-app/mcp-agent-os","kynver-worker-mcp"],env:{[Ze]:e},trust:!0}}function Ig(e){let r=e.env??process.env,t=wP(r),n=xP(Or.join(t,"settings.json"));if(_P(n))return{ok:!1,reason:"user_config_owns_server",detail:`the Gemini CLI settings already declare an "${oe}" MCP server \u2014 refusing to write a duplicate stanza`};let o=Ag(e.workerDir),s=Or.join(o,".gemini");gP(s,{recursive:!0,mode:448});let i=n.mcpServers&&typeof n.mcpServers=="object"&&!Array.isArray(n.mcpServers)?n.mcpServers:{},a={...n,mcp:{...EP(n.mcp),autoAllowInHeadless:!0},mcpServers:{...i,[oe]:CP(e.brokerSocketPath)}};return RP(Or.join(s,"settings.json"),`${JSON.stringify(a,null,2)}
+`,{mode:384}),{ok:!0,geminiCliHome:o,authMode:PP(t,s)}}function PP(e,r){let t=["oauth_creds.json","google_accounts.json"],n="none";for(let o of t){let s=Or.join(e,o);if(!Hl(s))continue;let i=Or.join(r,o);try{yP(s,i,"file"),n==="none"&&(n="symlink")}catch{try{fP(s,i),n="copy"}catch{}}}return n}function ti(e){let r=Ag(e);if(!Hl(r))return!1;try{return kP(r,{recursive:!0,force:!0}),!0}catch{return!1}}var IP=new Set(["awaiting_review","blocked","done","needs_input","waiting","scheduled","ready","cancelled","failed"]);function Og(e){return!!(typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim())}function OP(e){if(typeof e=="string"){let r=e.trim();return r.length?r:null}if(e&&typeof e=="object"&&!Array.isArray(e)){let r=e,t=r.summary??r.finalSummary??r.message;if(typeof t=="string"&&t.trim())return t.trim();try{return JSON.stringify(e)}catch{return null}}return null}function Yr(e){let r=e.finalResult??null,t=typeof e.lastHeartbeatSummary=="string"?e.lastHeartbeatSummary:OP(r);return{finalResult:r??t??"completed",summary:t}}function ni(e,r,t){if(Og(e)&&e.status==="done"&&e.completionSnapshot!=null)return;let n=new Date().toISOString(),o=Yr(r),s=t?.source?.trim();e.completionReportedAt=n,e.completionSnapshot=o,e.status="done",s&&(e.completionAckSource=s),L(e.runId,e),e.workerDir&&(Qt(e.workerDir),Ns(e.workerDir),io(e.workerDir),ti(e.workerDir)),e.worktreePath&&(Zs(e.worktreePath),ri(e.worktreePath))}function TP(e){let r=new Map,n=e.response?.tick?.filteredItems;if(!Array.isArray(n))return r;for(let o of n){if(o.kind!=="task"||typeof o.id!="string")continue;let s=typeof o.taskStatus=="string"?o.taskStatus.trim():"";s&&r.set(o.id,s)}return r}function Tg(e,r,t={}){let n=TP(r);if(n.size===0)return[];let o=q(e),s=[];for(let i of Object.keys(o.workers||{})){let a=A(AP.join(N(o.id),"workers",x(i),"worker.json"),void 0);if(!a?.taskId||Og(a))continue;let l=n.get(a.taskId);if(!l||l==="running"||!IP.has(l))continue;let c=J(a,{base:o.base,baseCommit:o.baseCommit}),u;if(l==="cancelled"){let d=Pl(o.id,a,"board_task_cancelled","board task cancelled",t);u=!!(d.workerSignal||d.sidecarSignal)}ni(a,c,{source:`board-task-${l}`}),s.push({worker:i,taskId:a.taskId,taskStatus:l,...u?{stopped:u}:{}})}return s}An();function oi(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"&&!Array.isArray(e)?Object.keys(e).length>0:!0}function NP(e){let r=e.lastHeartbeatPhase?.trim();if(!r||r==="complete")return null;let t=e.lastHeartbeatSummary?.trim();return t?{summary:t,handoffState:"exited_without_complete_heartbeat",lastHeartbeatPhase:r,...e.heartbeatBlocker?{blocker:e.heartbeatBlocker}:{}}:null}function MP(e){let r=In(e);return r?{summary:r.reason,handoffState:"exit_failure",blocked:r.blocked}:null}function DP(e){let r=e.status.attention.reason?.trim()||e.status.error?.trim()||"process exited without a final result";return{summary:`Worker exited with an error: ${r}`,handoffState:"exited_without_final_result",blocked:!0,attentionState:e.status.attention.state,attentionReason:r,...e.heartbeat.lastHeartbeatPhase?{lastHeartbeatPhase:e.heartbeat.lastHeartbeatPhase}:{},...e.heartbeat.lastHeartbeatSummary?{lastHeartbeatSummary:e.heartbeat.lastHeartbeatSummary}:{},...e.heartbeat.heartbeatBlocker?{blocker:e.heartbeat.heartbeatBlocker}:{}}}function si(e){let{worker:r,status:t}=e;if(oi(t.finalResult)){let u=pe(r.heartbeatPath),d=yr(u),p=oi(d)&&JSON.stringify(d)===JSON.stringify(t.finalResult)?"heartbeat_complete":"stdout_stream";return{finalResult:t.finalResult,source:p,snapshot:Yr(t)}}if(t.alive)return null;let n=st(r.stdoutPath);if(oi(n.finalResult)){let u={...t,finalResult:n.finalResult};return{finalResult:n.finalResult,source:"stdout_stream",snapshot:Yr(u)}}let o=pe(r.heartbeatPath),s=yr(o);if(oi(s)){let u={...t,finalResult:s,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary};return{finalResult:s,source:"heartbeat_complete",snapshot:Yr(u)}}let i=MP(t.error??n.error);if(i){let u={...t,finalResult:i};return{finalResult:i,source:"exit_failure",snapshot:Yr(u)}}let a=NP(o);if(a){let u={...t,finalResult:a,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary};return{finalResult:a,source:"heartbeat_summary",snapshot:Yr(u)}}let l=DP({status:t,heartbeat:o}),c={...t,finalResult:l,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary};return{finalResult:l,source:"exit_no_final_result",snapshot:Yr(c)}}function ii(e,r){return e.completionSnapshot?.finalResult!=null?!1:(e.completionSnapshot=r.snapshot,e.completionHandoffSource=r.source,!0)}An();function ai(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return n!=="node_modules"&&!n.startsWith("node_modules/")})}function Ng(e){let r=e.trim();return r.startsWith("??")?r.slice(2).trim():r.length>3&&/^[ MADRCU?!]{2} /.test(r.slice(0,3))?r.slice(3).trim():r}function Mg(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function Dg(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function Lg(e){let r=Dg(e);if(!r)return[];let t=Dg(r.worktreeHandoff),n=Mg(t?.disposableArtifactsRemoved);return n.length?n:Mg(r.disposableArtifactsRemoved)}function Wg(e){return e.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"")}function Ug(e,r){let t=ai(e);if(t.length===0)return!0;if(r.length===0)return!1;let n=new Set(r.map(o=>Wg(o)));return t.every(o=>{let s=Wg(Ng(o));return n.has(s)})}function li(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Bg(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function WP(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function LP(e){let r=Bg(e.disposableArtifactsRemoved),t=Lg(e.finalResult);return[...new Set([...r,...t])]}function Fg(e){let r=Bg(e.changedFiles),t=ai(r),n=LP(e),o=t.length===0||Ug(r,n);return li(e.prUrl)?o?{allowed:!0,state:"pr_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a PR attached; commit or discard before completing`}:li(e.headCommit)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) on top of a commit; commit or discard before completing`}:li(e.artifactBundlePath)||li(e.patchPath)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a patch/bundle handoff; clean the tree before completing`}:o?{allowed:!0,state:"clean",materialDirtyCount:0}:WP(e.finalResult)?{allowed:!1,state:"dirty_worktree_no_pr",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no commit or PR; commit, open a PR, discard, or remove one-off files via \`kynver worker discard-disposable\` before completing`}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no final result`}}Xe();import{existsSync as tA,renameSync as nA}from"node:fs";import{mkdirSync as XP}from"node:fs";import QP from"node:path";import{DatabaseSync as ZP}from"node:sqlite";var $l=class extends Error{constructor(r,t){super(`local-run-store schema version ${r} is newer than this runtime supports (${t}); refusing to open. Upgrade the runtime or quarantine the database deliberately.`),this.name="SchemaDowngradeRefusedError"}},UP=[`CREATE TABLE IF NOT EXISTS local_meta (
      key TEXT PRIMARY KEY,
      value TEXT NOT NULL
    ) STRICT`,`CREATE TABLE IF NOT EXISTS process_identity (
@@ -65,8 +129,8 @@ ${n}`,s=NC(e.personaSlug);return r.startsWith("harness-lane:blocked-lane-unblock
      payload_json TEXT NOT NULL,
      created_at TEXT NOT NULL,
      PRIMARY KEY (scope, seq)
-   ) STRICT`];function qE(e){if(!e.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'local_meta'").get())return null;let t=e.prepare("SELECT value FROM local_meta WHERE key = 'schema_version'").get();if(!t?.value)return null;let n=Number.parseInt(t.value,10);return Number.isFinite(n)?n:null}function fg(e,r){let t=qE(e);if(t!==null&&t>1)throw new Ol(t,1);e.exec("BEGIN IMMEDIATE");try{for(let n of YE)e.exec(n);e.prepare("INSERT INTO local_meta (key, value) VALUES ('schema_version', ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(String(1)),e.prepare("INSERT INTO local_meta (key, value) VALUES ('schema_applied_at', ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(r),e.exec("COMMIT")}catch(n){throw e.exec("ROLLBACK"),n}}import{existsSync as JE,realpathSync as zE,readFileSync as XE}from"node:fs";import gg from"node:path";var QE=new Set(["ext4","ext3","ext2","btrfs","xfs","f2fs","zfs","tmpfs","overlay","overlayfs"]),ZE=new Set(["9p","drvfs","nfs","nfs4","cifs","smb","smbfs","smb3","sshfs","fuse.sshfs","davfs","davfs2","glusterfs","ceph","lustre","afs","vboxsf","prl_fs","virtiofs"]);function eP(){try{return XE("/proc/self/mounts","utf8")}catch{return null}}function rP(e){let r=gg.resolve(e);for(let t=0;t<64;t+=1){if(JE(r))try{return zE.native(r)}catch{return r}let n=gg.dirname(r);if(n===r)return r;r=n}return r}function tP(e){return e.replace(/\\(\d{3})/g,(r,t)=>String.fromCharCode(Number.parseInt(t,8)))}function nP(e){let r=[];for(let t of e.split(`
-`)){let n=t.trim().split(/\s+/);n.length<3||r.push({mountPoint:tP(n[1]),fsType:n[2]})}return r}function hg(e,r=process.platform){return r==="win32"?e.replace(/\\/g,"/"):e}function oP(e,r){let t=null,n=hg(e);for(let o of r){let s=hg(o.mountPoint),i=s.endsWith("/")?s:`${s}/`;(n===s||`${n}/`.startsWith(i))&&(!t||o.mountPoint.length>t.mountPoint.length)&&(t=o)}return t}function kg(e,r){let n=(r?.resolveRealPath??rP)(e),o=(r?.mountsSource??eP)();if(o===null)return{verdict:"rejected",reason:"Mount information unavailable \u2014 the filesystem type cannot be established safely, so WAL mode is refused (fail closed).",filesystemType:null,mountPoint:null,resolvedPath:n};let s=oP(n,nP(o));if(!s)return{verdict:"rejected",reason:"No mount entry covers the resolved database path \u2014 refusing WAL mode (fail closed).",filesystemType:null,mountPoint:null,resolvedPath:n};let i=s.fsType.toLowerCase();return ZE.has(i)||i.startsWith("fuse.")?{verdict:"rejected",reason:`Filesystem '${i}' is network-like or crosses an OS boundary; SQLite WAL locking is not safe there.`,filesystemType:i,mountPoint:s.mountPoint,resolvedPath:n}:QE.has(i)?{verdict:"accepted",reason:`Local filesystem '${i}' accepted for WAL mode.`,filesystemType:i,mountPoint:s.mountPoint,resolvedPath:n}:{verdict:"rejected",reason:`Filesystem '${i}' is unknown to the qualification policy; WAL mode is refused rather than guessed (fail closed).`,filesystemType:i,mountPoint:s.mountPoint,resolvedPath:n}}var ei=class extends Error{constructor(r){super(`local-run-store refused: ${r}`),this.name="FilesystemPolicyError"}},cP="local-run-store.sqlite",uP=5e3,to=class e{db;now;databasePath;constructor(r,t,n){this.db=r,this.databasePath=t,this.now=n}static open(r){let t=kg(r.directory,r.classifyOptions);if(t.verdict!=="accepted")throw new ei(t.reason);iP(r.directory,{recursive:!0,mode:448});let n=aP.join(r.directory,r.filename??cP),o=new lP(n,{timeout:r.busyTimeoutMs??uP}),s=r.now??(()=>new Date);try{o.exec("PRAGMA journal_mode = WAL");let i=o.prepare("PRAGMA journal_mode").get();if(i?.journal_mode?.toLowerCase()!=="wal")throw new ei(`journal_mode did not switch to WAL (got '${i?.journal_mode}') \u2014 filesystem unsuitable.`);o.exec("PRAGMA synchronous = NORMAL"),fg(o,s().toISOString())}catch(i){throw o.close(),i}return new e(o,n,s)}inImmediateTransaction(r){this.db.exec("BEGIN IMMEDIATE");try{let t=r();return this.db.exec("COMMIT"),t}catch(t){throw this.db.exec("ROLLBACK"),t}}registerProcessIdentity(r){let t=this.now().toISOString();return this.inImmediateTransaction(()=>{this.db.prepare(`INSERT INTO process_identity
+   ) STRICT`];function BP(e){if(!e.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'local_meta'").get())return null;let t=e.prepare("SELECT value FROM local_meta WHERE key = 'schema_version'").get();if(!t?.value)return null;let n=Number.parseInt(t.value,10);return Number.isFinite(n)?n:null}function Kg(e,r){let t=BP(e);if(t!==null&&t>1)throw new $l(t,1);e.exec("BEGIN IMMEDIATE");try{for(let n of UP)e.exec(n);e.prepare("INSERT INTO local_meta (key, value) VALUES ('schema_version', ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(String(1)),e.prepare("INSERT INTO local_meta (key, value) VALUES ('schema_applied_at', ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(r),e.exec("COMMIT")}catch(n){throw e.exec("ROLLBACK"),n}}import{existsSync as FP,realpathSync as KP,readFileSync as HP}from"node:fs";import Hg from"node:path";var $P=new Set(["ext4","ext3","ext2","btrfs","xfs","f2fs","zfs","tmpfs","overlay","overlayfs"]),jP=new Set(["9p","drvfs","nfs","nfs4","cifs","smb","smbfs","smb3","sshfs","fuse.sshfs","davfs","davfs2","glusterfs","ceph","lustre","afs","vboxsf","prl_fs","virtiofs"]);function VP(){try{return HP("/proc/self/mounts","utf8")}catch{return null}}function GP(e){let r=Hg.resolve(e);for(let t=0;t<64;t+=1){if(FP(r))try{return KP.native(r)}catch{return r}let n=Hg.dirname(r);if(n===r)return r;r=n}return r}function YP(e){return e.replace(/\\(\d{3})/g,(r,t)=>String.fromCharCode(Number.parseInt(t,8)))}function qP(e){let r=[];for(let t of e.split(`
+`)){let n=t.trim().split(/\s+/);n.length<3||r.push({mountPoint:YP(n[1]),fsType:n[2]})}return r}function $g(e,r=process.platform){return r==="win32"?e.replace(/\\/g,"/"):e}function JP(e,r){let t=null,n=$g(e);for(let o of r){let s=$g(o.mountPoint),i=s.endsWith("/")?s:`${s}/`;(n===s||`${n}/`.startsWith(i))&&(!t||o.mountPoint.length>t.mountPoint.length)&&(t=o)}return t}function jg(e,r){let n=(r?.resolveRealPath??GP)(e),o=(r?.mountsSource??VP)();if(o===null)return{verdict:"rejected",reason:"Mount information unavailable \u2014 the filesystem type cannot be established safely, so WAL mode is refused (fail closed).",filesystemType:null,mountPoint:null,resolvedPath:n};let s=JP(n,qP(o));if(!s)return{verdict:"rejected",reason:"No mount entry covers the resolved database path \u2014 refusing WAL mode (fail closed).",filesystemType:null,mountPoint:null,resolvedPath:n};let i=s.fsType.toLowerCase();return jP.has(i)||i.startsWith("fuse.")?{verdict:"rejected",reason:`Filesystem '${i}' is network-like or crosses an OS boundary; SQLite WAL locking is not safe there.`,filesystemType:i,mountPoint:s.mountPoint,resolvedPath:n}:$P.has(i)?{verdict:"accepted",reason:`Local filesystem '${i}' accepted for WAL mode.`,filesystemType:i,mountPoint:s.mountPoint,resolvedPath:n}:{verdict:"rejected",reason:`Filesystem '${i}' is unknown to the qualification policy; WAL mode is refused rather than guessed (fail closed).`,filesystemType:i,mountPoint:s.mountPoint,resolvedPath:n}}var ci=class extends Error{constructor(r){super(`local-run-store refused: ${r}`),this.name="FilesystemPolicyError"}},eA="local-run-store.sqlite",rA=5e3,ao=class e{db;now;databasePath;constructor(r,t,n){this.db=r,this.databasePath=t,this.now=n}static open(r){let t=jg(r.directory,r.classifyOptions);if(t.verdict!=="accepted")throw new ci(t.reason);XP(r.directory,{recursive:!0,mode:448});let n=QP.join(r.directory,r.filename??eA),o=new ZP(n,{timeout:r.busyTimeoutMs??rA}),s=r.now??(()=>new Date);try{o.exec("PRAGMA journal_mode = WAL");let i=o.prepare("PRAGMA journal_mode").get();if(i?.journal_mode?.toLowerCase()!=="wal")throw new ci(`journal_mode did not switch to WAL (got '${i?.journal_mode}') \u2014 filesystem unsuitable.`);o.exec("PRAGMA synchronous = NORMAL"),Kg(o,s().toISOString())}catch(i){throw o.close(),i}return new e(o,n,s)}inImmediateTransaction(r){this.db.exec("BEGIN IMMEDIATE");try{let t=r();return this.db.exec("COMMIT"),t}catch(t){throw this.db.exec("ROLLBACK"),t}}registerProcessIdentity(r){let t=this.now().toISOString();return this.inImmediateTransaction(()=>{this.db.prepare(`INSERT INTO process_identity
              (process_key, pid, runtime_version, node_version, started_at, registered_at)
            VALUES (?, ?, ?, ?, ?, ?)
            ON CONFLICT(process_key) DO UPDATE SET
@@ -90,22 +154,22 @@ ${n}`,s=NC(e.personaSlug);return r.startsWith("harness-lane:blocked-lane-unblock
          LIMIT ?`).all(...s,n).map(l=>({idempotencyKey:l.idempotency_key,operation:l.operation,resultJson:l.result_json,recordedAt:l.recorded_at}))}deleteOperationReceiptsByKeys(r){return r.length===0?0:this.inImmediateTransaction(()=>{let t=this.db.prepare("DELETE FROM operation_receipts WHERE idempotency_key = ?"),n=0;for(let o of r)n+=Number(t.run(o).changes);return n})}getOperationReceipt(r){let t=this.db.prepare(`SELECT idempotency_key, operation, result_json, recorded_at
          FROM operation_receipts WHERE idempotency_key = ?`).get(r);return t?{idempotencyKey:t.idempotency_key,operation:t.operation,resultJson:t.result_json,recordedAt:t.recorded_at}:null}saveRecoveryCheckpoint(r){return this.inImmediateTransaction(()=>{let t=this.db.prepare("SELECT COALESCE(MAX(seq), 0) AS max_seq FROM recovery_checkpoints WHERE scope = ?").get(r.scope),n=Number(t.max_seq)+1;return this.db.prepare(`INSERT INTO recovery_checkpoints (scope, seq, payload_json, created_at)
            VALUES (?, ?, ?, ?)`).run(r.scope,n,r.payloadJson,this.now().toISOString()),{seq:n}})}latestRecoveryCheckpoint(r){let t=this.db.prepare(`SELECT scope, seq, payload_json, created_at FROM recovery_checkpoints
-         WHERE scope = ? ORDER BY seq DESC LIMIT 1`).get(r);return t?{scope:t.scope,seq:t.seq,payloadJson:t.payload_json,createdAt:t.created_at}:null}localSchemaVersion(){return 1}checkpointTruncate(){this.db.exec("PRAGMA wal_checkpoint(TRUNCATE)")}integrityCheck(){return this.db.prepare("PRAGMA integrity_check").get()?.integrity_check==="ok"}pragma(r){let t=this.db.prepare(`PRAGMA ${r}`).get();return String(Object.values(t)[0])}close(){this.db.close()}};function mP(e,r){let t=`${e}.quarantine-${r}`;for(let n of["","-wal","-shm"]){let o=`${e}${n}`;dP(o)&&pP(o,`${t}${n}`)}return t}function yg(e){let r=e.quarantineStamp??(e.now??(()=>new Date))().toISOString().replace(/[:.]/g,"-"),t=null;try{let s=to.open(e);if(s.integrityCheck())return{store:s,recovered:!1,quarantinedTo:null};s.close()}catch(s){if(s.name==="SchemaDowngradeRefusedError"||s.name==="FilesystemPolicyError")throw s;t=s}let n=`${e.directory}/${e.filename??"local-run-store.sqlite"}`,o=mP(n,r);try{return{store:to.open(e),recovered:!0,quarantinedTo:o}}catch(s){throw new AggregateError([t,s].filter(Boolean),"local-run-store rebuild after quarantine failed")}}function fP(){if(process.env.KYNVER_LRS_TEST_CLASSIFY_BYPASS==="1")return{mountsSource:()=>"/dev/vda / ext4 rw 0 0",resolveRealPath:()=>"/tmp/kynver-lrs-test/db"}}function gP(){return hP.classifyOptions??fP()}var hP={};var kP=300*1e3,Ar=null,ri=0;function yP(e){ri+=1;try{let r=gP(),t=yg({directory:e,...r?{classifyOptions:r}:{}});return{store:t.store,status:{state:"open",harnessRoot:e,databasePath:t.store.databasePath,schemaVersion:t.store.localSchemaVersion(),recovered:t.recovered,quarantinedTo:t.quarantinedTo,reason:null,openAttempts:ri},failedAtMs:null,permanentRefusal:!1}}catch(r){return{store:null,status:{state:"unavailable",harnessRoot:e,databasePath:null,schemaVersion:null,recovered:!1,quarantinedTo:null,reason:`${r.name}: ${r.message}`,openAttempts:ri},failedAtMs:Date.now(),permanentRefusal:r.name==="FilesystemPolicyError"||r.name==="SchemaDowngradeRefusedError"}}}function RP(e,r){return e.store||e.permanentRefusal?!1:e.failedAtMs===null?!0:r-e.failedAtMs>=kP}function q(e=Date.now()){let r=Te();return(!Ar||Ar.status.harnessRoot!==r||RP(Ar,e))&&(bP(),Ar=yP(r)),Ar.store}function vP(){return Ar?Ar.status:{state:"unopened",harnessRoot:null,databasePath:null,schemaVersion:null,recovered:!1,quarantinedTo:null,reason:null,openAttempts:ri}}function Rg(){return q(),vP()}function bP(){try{Ar?.store?.close()}catch{}Ar=null}K();O();import{existsSync as SP,readFileSync as wP}from"node:fs";import{homedir as xP}from"node:os";import _P from"node:path";var CP=3e4,Xe=null;function vg(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return _P.join(xP(),".kynver",`local-run-store-flags-${r}.json`)}function Tl(e){if(!e||typeof e!="object"||Array.isArray(e))return{};let r=e,t={},n=["dispatchReceipts","admission","planOutbox","keeper","meshLease","quota"];for(let o of n){let s=r[o];(s==="off"||s==="shadow"||s==="enforce")&&(t[o]=s)}return t}function bg(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.response;if(!r||typeof r!="object"||Array.isArray(r))return null;let t=r.localRunStoreFlags;return t===void 0?null:Tl(t)}function Sg(e,r){try{let t=vg(e),n={contractVersion:1,agentOsId:e,flags:Tl(r),deliveredAt:new Date().toISOString()};ue(t,n),Xe={flags:n.flags,loadedAtMs:Date.now(),file:t}}catch{}}function wg(e=Date.now()){if(process.env.KYNVER_LRS_REMOTE_FLAGS_DISABLED==="1")return{};if(Xe&&e-Xe.loadedAtMs<CP)return Xe.flags;try{let r=U().agentOsId?.trim();if(!r)return Xe={flags:{},loadedAtMs:e,file:null},Xe.flags;let t=vg(r);if(!SP(t))return Xe={flags:{},loadedAtMs:e,file:t},Xe.flags;let n=JSON.parse(wP(t,"utf8")),o=n?.contractVersion===1?Tl(n.flags):{};return Xe={flags:o,loadedAtMs:e,file:t},o}catch{return Xe={flags:{},loadedAtMs:e,file:null},Xe.flags}}var EP=[{key:"dispatchReceipts",env:"KYNVER_LRS_DISPATCH_RECEIPTS",milestone:"D1"},{key:"admission",env:"KYNVER_LRS_ADMISSION",milestone:"D2"},{key:"planOutbox",env:"KYNVER_LRS_PLAN_OUTBOX",milestone:"D3"},{key:"keeper",env:"KYNVER_LRS_KEEPER",milestone:"D4"},{key:"meshLease",env:"KYNVER_LRS_MESH_LEASE",milestone:"D4"},{key:"quota",env:"KYNVER_LRS_QUOTA",milestone:"D4"}];function PP(e){let r=e?.trim().toLowerCase()??"";return r===""?{mode:"off",unknown:!1}:r==="off"||r==="shadow"||r==="enforce"?{mode:r,unknown:!1}:{mode:"off",unknown:!0}}function Ir(e=process.env){let r={},t={},n=[],o=wg();for(let s of EP){let i=e[s.env];if(typeof i=="string"&&i.trim()!==""){let c=PP(i);r[s.key]=c.mode,t[s.key]="env",c.unknown&&n.push(`${s.env}='${i}' is not off|shadow|enforce \u2014 treating as off`);continue}let l=o[s.key];if(l){r[s.key]=l,t[s.key]="server";continue}r[s.key]="off",t[s.key]="default"}return{flags:r,sources:t,warnings:n}}var Ie={storeFailures:0,completionReplaysObserved:0,completionReplaysShortCircuited:0,agedReceiptsPruned:0};function Or(e=process.env){return Ir(e).flags.dispatchReceipts}function Nl(e){return Or(e)!=="off"}function Ml(e,r){return`dispatch:${e}:${r.taskId}:${r.leaseToken}`}function oo(e,r,t){if(!Nl())return;let n=q();if(n)try{n.recordOperationReceipt({idempotencyKey:Ml(e,r),operation:`dispatch-${e}`,resultJson:t===void 0?null:JSON.stringify(t)})}catch{Ie.storeFailures+=1}}function _g(e){oo("claim",e,{runId:e.runId,workerName:e.workerName,provider:e.provider})}function ti(e){oo("spawned",e)}function qt(e,r){oo("released",e,{reasonClass:r})}function Cg(e){oo("completion-sent",e)}function Dl(e,r){oo("completion-acked",e,{outcome:r})}function Eg(e){if(!Nl())return!1;let r=q();if(!r)return!1;try{let t=r.getOperationReceipt(Ml("completion-acked",e));if(t){let n=null;try{n=t.resultJson?JSON.parse(t.resultJson).outcome??null:null}catch{n=null}if(n==="acknowledged")return Ie.completionReplaysObserved+=1,!0}}catch{Ie.storeFailures+=1}return!1}function Wl(e){let r=String(e??"").split(":")[0]?.trim()??"";return r.length>0?r.slice(0,64):"unknown"}function Pg(e){if(Or()!=="enforce")return!1;let r=q();if(!r)return!1;try{let t=r.getOperationReceipt(Ml("completion-acked",e));if(!t)return!1;let n=null;try{n=t.resultJson?JSON.parse(t.resultJson).outcome??null:null}catch{n=null}return n==="acknowledged"?(Ie.completionReplaysShortCircuited+=1,!0):!1}catch{return Ie.storeFailures+=1,!1}}var AP=600*1e3;function Ag(e,r){if(Or()!=="enforce")return;let t=q();if(t)try{t.recordOperationReceipt({idempotencyKey:`dispatch:start-failed:${e}:${r}`,operation:"dispatch-start-failed",resultJson:JSON.stringify({runId:r})})}catch{Ie.storeFailures+=1}}function Ig(e,r){if(Or()!=="enforce")return[];let t=q();if(!t)return[];let n=r?.nowMs??Date.now(),o=r?.windowMs??AP;try{return t.listOperationReceipts({operation:"dispatch-start-failed",recordedAfter:new Date(n-o).toISOString(),limit:200}).filter(s=>{try{return s.resultJson?JSON.parse(s.resultJson).runId===e:!1}catch{return!1}}).map(s=>{let i=s.idempotencyKey.slice(22);return i.slice(0,i.length-(e.length+1))}).filter(s=>s.length>0)}catch{return Ie.storeFailures+=1,[]}}function no(e){let r=e.split(":")[0]??"",t=Number(r);return Number.isInteger(t)&&t>=0?t:null}var IP=900*1e3,xg=10080*60*1e3,OP=1440*60*1e3,TP=500,NP=300;function Og(e){let r={scannedClaims:0,strandedClaimCandidates:0,prunedReceipts:0};if(!Nl())return r;let t=q();if(!t)return r;let n=e?.nowMs??Date.now(),o=e?.strandedAfterMs??IP;try{let s=t.listOperationReceipts({operation:"dispatch-claim",recordedAfter:new Date(n-xg).toISOString(),limit:TP}),i=0,a=[];for(let c of s){let u=c.idempotencyKey.slice(15),d=Date.parse(c.recordedAt);if(!Number.isFinite(d)||n-d<o)continue;let p=t.getOperationReceipt(`dispatch:spawned:${u}`),m=t.getOperationReceipt(`dispatch:released:${u}`);if(p||m){n-d>=OP&&a.length+5<=NP&&a.push(c.idempotencyKey,`dispatch:spawned:${u}`,`dispatch:released:${u}`,`dispatch:completion-sent:${u}`,`dispatch:completion-acked:${u}`);continue}let f=u.split(":")[0]??"",b=no(u.slice(f.length+1));if((f?t.listOperationReceipts({keyPrefix:`dispatch:completion-acked:${f}:`,limit:10}):[]).some(h=>{if(b===null)return!0;let E=h.idempotencyKey.slice(`dispatch:completion-acked:${f}:`.length),P=no(E);return P===null||P>=b}))continue;let g=!1;if(e?.hasLiveWorker&&c.resultJson)try{let h=JSON.parse(c.resultJson);h.runId&&h.workerName&&(g=e.hasLiveWorker({runId:h.runId,workerName:h.workerName}))}catch{g=!1}g||(i+=1)}let l=a.length>0?t.deleteOperationReceiptsByKeys(a):0;if(Or()==="enforce"){let c=t.listOperationReceipts({limit:100}).filter(u=>{let d=Date.parse(u.recordedAt);return Number.isFinite(d)&&n-d>=xg}).map(u=>u.idempotencyKey);if(c.length>0){let u=t.deleteOperationReceiptsByKeys(c);l+=u,Ie.agedReceiptsPruned+=u}}return{scannedClaims:s.length,strandedClaimCandidates:i,prunedReceipts:l}}catch{return Ie.storeFailures+=1,r}}function Tg(){return{"dispatchReceipts.storeFailures":Ie.storeFailures,"dispatchReceipts.completionReplaysObserved":Ie.completionReplaysObserved,"dispatchReceipts.completionReplaysShortCircuited":Ie.completionReplaysShortCircuited,"dispatchReceipts.agedReceiptsPruned":Ie.agedReceiptsPruned}}var Jt=900*1e3,Bl="admission-shadow",Ll="worker-slot:",jr={storeFailures:0,missingForLive:0,deadSlotsReleased:0},Ul=!1;function Ng(){Ul=!1}function Tr(e=process.env){return Ir(e).flags.admission}function ni(e,r){return`${Ll}${e}:${r}`}function Mg(e,r){if(Tr()==="off")return;let t=q();if(t)try{t.tryReserveAdmission(ni(e,r),Bl,Jt)}catch{jr.storeFailures+=1}}function so(e,r){if(Tr()==="off")return;let t=q();if(t)try{t.releaseAdmission(ni(e,r),Bl)}catch{jr.storeFailures+=1}}function Dg(e){let r={liveReservations:0,refreshed:0,deadReleased:0,missingForLive:0,orphaned:0,adoptionPass:!1};if(Tr()==="off")return r;let t=q();if(!t)return r;try{let n=new Set(e.liveWorkers.map(p=>ni(p.runId,p.workerName))),o=t.listAdmissionReservations({keyPrefix:Ll,limit:500}),s=new Set(o.map(p=>p.key)),i=[...n].filter(p=>!s.has(p)).length,a=o.filter(p=>!n.has(p.key)).length,l=!Ul;Ul=!0,!l&&i>0&&(jr.missingForLive+=i);let c=0;for(let p of e.liveWorkers)t.tryReserveAdmission(ni(p.runId,p.workerName),Bl,Jt),c+=1;let u=0;for(let p of o)n.has(p.key)||t.releaseAdmission(p.key,p.owner)&&(u+=1,jr.deadSlotsReleased+=1);return{liveReservations:t.listAdmissionReservations({keyPrefix:Ll,limit:500}).length,refreshed:c,deadReleased:u,missingForLive:i,orphaned:a,adoptionPass:l}}catch{return jr.storeFailures+=1,r}}function Wg(){return{"admission.storeFailures":jr.storeFailures,"admission.missingForLive":jr.missingForLive,"admission.deadSlotsReleased":jr.deadSlotsReleased}}var Fl="worker-slot-n:",oi=64;function Lg(e){return`${Fl}${e}`}function si(e,r){return`${e}:${r}`}var Vr={enforceStoreFailures:0,admissionsRefusedSlots:0,admissionsRefusedDiskBackstop:0};function Ug(e){if(Tr()!=="enforce")return{admitted:!0};let r=q();if(!r)return{admitted:!0};let t=Math.max(0,Math.min(oi,Math.floor(e.maxSlots)));if(e.diskActiveWorkers>=t)return Vr.admissionsRefusedDiskBackstop+=1,{admitted:!1,reason:"disk_backstop"};try{let n=si(e.runId,e.workerName);for(let o=0;o<t;o+=1)if(r.tryReserveAdmission(Lg(o),n,Jt).acquired)return{admitted:!0,slot:o};return Vr.admissionsRefusedSlots+=1,{admitted:!1,reason:"slots_exhausted"}}catch{return Vr.enforceStoreFailures+=1,{admitted:!0}}}function Gr(e,r){if(Tr()==="off")return;let t=q();if(t)try{let n=si(e,r),o=t.listAdmissionReservations({keyPrefix:Fl,limit:oi});for(let s of o)s.owner===n&&t.releaseAdmission(s.key,n)}catch{Vr.enforceStoreFailures+=1}}function Bg(e){let r={refreshed:0,deadReleased:0,adopted:0};if(Tr()!=="enforce")return r;let t=q();if(!t)return r;try{let n=new Set(e.liveWorkers.map(c=>si(c.runId,c.workerName))),o=t.listAdmissionReservations({keyPrefix:Fl,limit:oi}),s=0,i=0,a=new Set;for(let c of o)n.has(c.owner)?(t.tryReserveAdmission(c.key,c.owner,Jt),a.add(c.owner),s+=1):t.releaseAdmission(c.key,c.owner)&&(i+=1);let l=0;for(let c of e.liveWorkers){let u=si(c.runId,c.workerName);if(!a.has(u)){for(let d=0;d<oi;d+=1)if(t.tryReserveAdmission(Lg(d),u,Jt).acquired){l+=1;break}}}return{refreshed:s,deadReleased:i,adopted:l}}catch{return Vr.enforceStoreFailures+=1,r}}function Fg(){return{"admission.enforceStoreFailures":Vr.enforceStoreFailures,"admission.refusedSlotsExhausted":Vr.admissionsRefusedSlots,"admission.refusedDiskBackstop":Vr.admissionsRefusedDiskBackstop}}O();O();var MP=/^[a-z0-9][a-z0-9._-]{0,127}$/i,DP=/^[a-z0-9][a-z0-9._-]{0,63}$/i,Kg=new Set(["undefined","null"]),Hg="usage: kynver worker <action> --run RUN_ID --name WORKER_NAME";function WP(e){let r=e.trim();if(!MP.test(r))throw new Error(`invalid run id: ${e}`);return r}function LP(e){let r=e.trim();if(!DP.test(r))throw new Error(`invalid worker name: ${e}`);return r}function $g(e){return typeof e=="string"?e.trim():""}function Kl(e){let r=$g(e.run),t=$g(e.name);return(!r||Kg.has(r))&&$e(`missing --run RUN_ID (${Hg})`),(!t||Kg.has(t))&&$e(`missing --name WORKER_NAME (${Hg})`),{runId:WP(r),workerName:LP(t)}}import{existsSync as UP,mkdirSync as BP,readFileSync as FP,writeFileSync as KP}from"node:fs";import{homedir as HP}from"node:os";import Xg from"node:path";var xe={keeperStoreFailures:0,meshStoreFailures:0,quotaStoreFailures:0,meshLeaseDivergences:0,meshEnforceStaleInversions:0,quotaVerdictDivergences:0};function io(e){return Ir(process.env).flags[e]}var Wj=1800*1e3;function Hl(e){return`mesh-cron-lease:${e}`}function jg(e,r){if(io("meshLease")==="off")return;let t=q();if(t)try{let n=t.latestRecoveryCheckpoint(Hl(e));if(n){let o=JSON.parse(n.payloadJson);if((o.leaseToken??null)===(r.leaseToken??null)&&(o.holderBoxId??null)===(r.holderBoxId??null)&&o.authorized===r.authorized)return}t.saveRecoveryCheckpoint({scope:Hl(e),payloadJson:JSON.stringify(r)})}catch{xe.meshStoreFailures+=1}}function Vg(e,r){let t=io("meshLease");if(t==="off")return null;let n=q();if(!n)return null;try{let o=n.latestRecoveryCheckpoint(Hl(e)),s=o?JSON.parse(o.payloadJson):null,i=s!==null&&((s.leaseToken??null)!==(r?.leaseToken??null)||(s.holderBoxId??null)!==(r?.holderBoxId??null)||(s.authorized??null)!==(r?.authorized??null));return i&&(xe.meshLeaseDivergences+=1),t!=="enforce"?null:i&&r?.updatedAt&&s?.updatedAt&&Date.parse(r.updatedAt)>Date.parse(s.updatedAt)?(xe.meshEnforceStaleInversions+=1,null):s}catch{return xe.meshStoreFailures+=1,null}}function ii(e){return`quota-cooldown:${e}`}var Gg="quota-preflight";function Yg(e,r){if(io("quota")==="off")return;let t=q();if(t)try{t.tryReserveAdmission(ii(e),Gg,r)}catch{xe.quotaStoreFailures+=1}}function qg(e){if(io("quota")==="off")return;let r=q();if(r)try{r.releaseAdmission(ii(e),Gg)}catch{xe.quotaStoreFailures+=1}}function Jg(e,r){let t=io("quota");if(t==="off")return null;let n=q();if(!n)return null;try{let o=n.listAdmissionReservations({keyPrefix:ii(e),limit:50}).find(i=>i.key===ii(e)),s=!!o;return s!==r&&(xe.quotaVerdictDivergences+=1),t==="enforce"?{blocked:s,retryAtIso:o?.expiresAt??null}:null}catch{return xe.quotaStoreFailures+=1,null}}function zg(){return{"keeper.storeFailures":xe.keeperStoreFailures,"meshLease.storeFailures":xe.meshStoreFailures,"meshLease.divergences":xe.meshLeaseDivergences,"meshLease.enforceStaleInversions":xe.meshEnforceStaleInversions,"quota.storeFailures":xe.quotaStoreFailures,"quota.verdictDivergences":xe.quotaVerdictDivergences}}var $P=/\b(out of usage|increase limits?|switch to auto|ask your admin to increase your limit|(?:hit|reached|exceeded|over) (?:your |the )?usage limits?|usage limits? (?:hit|reached|exceeded)|exceeded your (?:current )?quota|quota (?:exceeded|exhausted)|insufficient_quota|insufficient (?:credits?|quota)|credits? exhausted|credit balance is too low|billing hard limit|check your plan and billing|402 payment required|provider quota exhausted|provider_quota_exhausted)\b/i,jP=30,VP=5,GP=240;function YP(e){let r=e?.trim();return!!(r&&$P.test(r))}function qP(){let e=(process.env.KYNVER_PROVIDER_QUOTA_PREFLIGHT??"on").trim().toLowerCase();return e!=="off"&&e!=="0"&&e!=="false"&&e!=="no"}function $l(){let e=Number.parseInt(process.env.KYNVER_PROVIDER_QUOTA_COOLDOWN_MINUTES??"",10);return Number.isFinite(e)?Math.min(GP,Math.max(VP,e)):jP}function Qg(){let e=process.env.KYNVER_PROVIDER_QUOTA_STORE_PATH?.trim();return e||Xg.join(HP(),".kynver","provider-quota-cooldowns.json")}function ao(e){return(e??"").trim().toLowerCase()}function jl(){let e=Qg();if(!UP(e))return{};try{let r=JSON.parse(FP(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))return{};let t={};for(let[n,o]of Object.entries(r)){if(!o||typeof o!="object")continue;let{lastExhaustedAt:s,reason:i}=o;typeof s!="string"||!Number.isFinite(Date.parse(s))||(t[ao(n)]={lastExhaustedAt:s,reason:typeof i=="string"?i.slice(0,500):""})}return t}catch{return{}}}function Vl(e){let r=Qg();try{BP(Xg.dirname(r),{recursive:!0}),KP(r,`${JSON.stringify(e,null,2)}
-`,"utf8")}catch{}}function JP(e,r,t=Date.now()){let n=ao(e);if(!n)return;let o=jl();o[n]={lastExhaustedAt:new Date(t).toISOString(),reason:r.trim().slice(0,500)},Vl(o),Yg(n,$l()*6e4)}function zP(e){let r=ao(e);if(!r)return!1;qg(r);let t=jl();return r in t?(delete t[r],Vl(t),!0):!1}function Zg(e,r=Date.now()){if(!qP())return{ok:!0};let t=ao(e);if(!t)return{ok:!0};let n=jl(),o=n[t],s=!!(o&&Number.isFinite(Date.parse(o.lastExhaustedAt))&&Date.parse(o.lastExhaustedAt)+$l()*6e4>r),i=Jg(t,s);if(i)return i.blocked?{ok:!1,provider:t,reason:`provider "${t}" is inside its local quota cooldown`+(i.retryAtIso?` \u2014 preflight declines spawn until ${i.retryAtIso}`:""),retryAtIso:i.retryAtIso??new Date(r).toISOString()}:{ok:!0};if(!o)return{ok:!0};let a=Date.parse(o.lastExhaustedAt),l=a+$l()*6e4;if(!Number.isFinite(a)||l<=r)return delete n[t],Vl(n),{ok:!0};let c=new Date(l).toISOString();return{ok:!1,provider:t,reason:`provider "${t}" reported quota exhaustion at ${o.lastExhaustedAt} \u2014 local preflight declines spawn until ${c}`+(o.reason?` (${o.reason.slice(0,160)})`:""),retryAtIso:c}}function XP(e){if(typeof e=="string"){let r=e.trim();return r.length?r:null}if(e&&typeof e=="object"&&!Array.isArray(e)){let r=e;for(let t of["result","summary","error"]){let n=r[t];if(typeof n=="string"&&n.trim())return n.trim()}}return null}function eh(e){let r=ao(e.provider);if(!r)return"none";let t=XP(e.finalResult)??(typeof e.error=="string"&&e.error.trim()?e.error.trim():null);return t?YP(t)?(JP(r,t,e.nowMs??Date.now()),"recorded"):zP(r)?"cleared":"none":"none"}function rh(e){let r=e.usage;return!r||r.inputTokens===void 0&&r.outputTokens===void 0?null:{provider:e.provider?.trim()||"unknown",model:r.model?.trim()||e.model?.trim()||null,inputTokens:r.inputTokens??null,outputTokens:r.outputTokens??null}}async function th(e,r,t){let n=await fetch(e,{method:"POST",headers:Mn(r),body:JSON.stringify(t)}),o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,parsed:o}}function ZP(e){if(e&&typeof e=="object"){let r=e.error;if(typeof r=="string"&&r.trim())return r.trim()}}function nh(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function lo(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function eA(e){return e.completionBlocker?`blocked:${e.completionBlocker}`:e.completionOutcome?e.completionOutcome:e.completionReportedAt?"completion_acknowledged":e.finished?"worker_finished":"in_progress"}function rA(e){return e.completionBlocker?"Resolve completion blocker, then rerun `kynver worker complete`.":e.completionOutcome==="review_scheduled"||e.completionOutcome==="review_already_scheduled"?"Await review lane and landing decision in Command Center.":e.completionOutcome==="needs_attention"?"Inspect blocker/attention reason in Command Center and dispatch a repair task.":e.finished&&!e.completionReportedAt?"Post completion acknowledgement to AgentOS (`kynver worker complete`).":null}function sh(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function tA(e){return e.prUrl?"pr_handoff":e.headCommit?"commit_handoff":e.changedFiles.length>0?"dirty_worktree":"none"}function zt(e,r){(e.completionBlocker??void 0)!==(r??void 0)&&(r?e.completionBlocker=r:delete e.completionBlocker,F(e.runId,e))}function nA(e){e.completionBlocker&&(delete e.completionBlocker,F(e.runId,e))}function Gl(e){return e?{base:e.base,baseCommit:e.baseCommit}:{}}function oA(e,r){return{...e,...r.prUrl?{prUrl:r.prUrl}:{},...r.headCommit?{headCommit:r.headCommit}:{}}}async function Yl(e){let{runId:r,workerName:t}=Kl(e),n=Bt(r,t),o=ee(n.runId),s=Y(n,Gl(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!Se(s))return{ok:!0,skipped:!0,reason:"worker-not-finished"};if(n.localOnly)return{ok:!0,skipped:!0,reason:"local-only-worker"};if(!i)return{ok:!1,reason:"missing agentOsId"};let l=e.force===!0||e.force==="true";if(!l&&zn(n))return{ok:!0,skipped:!0,reason:"completion-already-acknowledged",httpStatus:200};if(!l&&kl(n)&&nA(n),!s.finalResult&&s.alive===!1){let w=zs({worker:n,status:s});w&&Xs(n,w)&&(F(n.runId,n),n=Bt(r,t),s=Y(n,Gl(o)))}if(!(e.skipPrHandoff===!0||e.skipPrHandoff==="true")&&!n.steerRestartRequired&&n.dispatched&&a){let w=xl({worker:n,run:o,status:s});if(!w.ok)return zt(n,w.reason),{ok:!1,reason:w.reason,nextAction:w.nextAction,completionBlocked:!0};(w.prUrl||w.headCommit)&&(s=Y(n,Gl(o)),s=oA(s,w))}let u=s.gitAncestry.headIsAncestorOfBase===!1&&s.gitAncestry.head?s.gitAncestry.head:s.headCommit;if(n.dispatched&&!n.steerRestartRequired){let w=mg({changedFiles:s.changedFiles,finalResult:s.finalResult,prUrl:s.prUrl,headCommit:u,disposableArtifactsRemoved:n.disposableArtifactsRemoved});if(!w.allowed){let V=w.detail??`worktree completion blocked (${w.state})`;return zt(n,V),{ok:!1,reason:V,nextAction:"Clean the worktree (commit, open a PR, or `kynver worker discard-disposable --path <file>`), then rerun `kynver worker complete`.",completionBlocked:!0}}}try{eh({provider:n.provider??s.provider??null,finalResult:s.finalResult})}catch{}let d=X(e.baseUrl?String(e.baseUrl):void 0),p=e.secret?String(e.secret):void 0,m=await re(p,i,{baseUrl:d});a&&(await Ws({worker:n,agentOsId:i,baseUrl:d,secret:m}),n=Bt(r,t));let f=`${d}/api/agent-os/by-id/${encodeURIComponent(i)}/harness/completion`,b={...s};n.disposableArtifactsRemoved?.length&&(b.disposableArtifactsRemoved=n.disposableArtifactsRemoved),n.steerRestartRequired&&(b.steerRestartRequired=!0,b.pendingSteerEventIds=n.pendingSteerEventIds??[],n.dispatchSteerFenceEventId!=null&&(b.dispatchSteerFenceEventId=n.dispatchSteerFenceEventId));let k=rh({usage:s.usage,provider:n.provider??s.provider??null,model:typeof n.model=="string"?n.model:s.model??null}),R={source:"kynver-harness",agentOsId:i,runId:n.runId,workerName:n.name,taskId:a,leaseToken:n.leaseToken??null,startedAt:n.startedAt,finishedAt:s.lastActivityAt||new Date().toISOString(),...k?{workerUsage:k}:{},status:n.leaseToken?{...b,leaseToken:n.leaseToken}:b,workerInjection:{instructionPolicyFingerprint:n.instructionPolicyFingerprint??null,instructionPolicyEvidence:n.instructionPolicyEvidence??null,memoryQualityCapture:n.memoryQualityCapture??null,policyAt:n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence=="object"&&"policyAt"in n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence.policyAt=="string"?n.instructionPolicyEvidence.policyAt:null,personaSlug:n.personaSlug??null,personaEvidence:n.personaEvidence??null,contextEnvelopeEvidence:n.contextEnvelopeEvidence??null}},g=a&&n.leaseToken?{taskId:a,leaseToken:n.leaseToken}:null;if(g){if(Eg(g),Pg(g)){let w={completionReportedAt:new Date().toISOString(),completionOutcome:"acknowledged",completionResponse:{replayShortCircuited:!0}};return Bs(n,n.runId,w),qs(n,s,{source:"harness-completion"}),zt(n,void 0),so(n.runId,n.name),Gr(n.runId,n.name),{ok:!0,httpStatus:200,response:{ok:!0,replayShortCircuited:!0},reason:"completion_replay_short_circuited",...s.prUrl?{prHandoff:{prUrl:s.prUrl}}:{}}}Cg(g)}let h=await th(f,m,R);if((h.status===401||h.status===403)&&!p){let w=await yp(i,{baseUrl:d});w&&w!==m&&(m=w,h=await th(f,m,R))}if(h.ok){let w=Sf(h.parsed);if(!wf(w)){let he=`completion acknowledged but board not advanced: ${w.detail??(w.routeOutcome?`harness completion returned ${w.routeOutcome}`:"harness completion did not advance the linked task")}`;zt(n,he);let Ze={completionReportedAt:new Date().toISOString(),completionOutcome:"rejected",completionResponse:h.parsed};return Bs(n,n.runId,Ze),g&&Dl(g,"rejected"),{ok:!1,httpStatus:h.status,response:h.parsed,reason:he,completionBlocked:!0}}zt(n,void 0);let V=w.routeOutcome??"acknowledged",$={completionReportedAt:new Date().toISOString(),completionOutcome:"acknowledged",completionResponse:h.parsed};Bs(n,n.runId,$),qs(n,s,{source:"harness-completion"}),g&&Dl(g,"acknowledged"),so(n.runId,n.name),Gr(n.runId,n.name);let _=s.prUrl;return{ok:!0,httpStatus:h.status,response:h.parsed,reason:V,..._?{prHandoff:{prUrl:_}}:{}}}let E=h.status===401||h.status===403,P=ZP(h.parsed)??(E?"runner token unauthorized":"non-2xx response"),S=E?`completion replay rejected (${h.status}): ${P}`:`completion replay failed (${h.status}): ${P}`;return zt(n,S),{ok:!1,httpStatus:h.status,response:h.parsed,completionBlocked:!0}}function ih(e){let{run:r,workerName:t,worker:n}=e,o=Y(n,{base:r.base,baseCommit:r.baseCommit}),s=o.gitAncestry.headIsAncestorOfBase===!1&&o.gitAncestry.head?o.gitAncestry.head:void 0,i=Ot({alive:o.alive,finalResult:o.finalResult,changedFiles:o.changedFiles,gitAncestry:o.gitAncestry,headCommit:s}),a=n.completionBlocker,l=typeof a=="string"&&a?a:void 0,c=sh(l)?void 0:l,u=c?"blocked":o.status,d=c?"blocked":o.attention.state,p=nh(n.completionResponse),m=nh(p?.task),f=lo(p?.outcome),b=lo(p?.status),k=Array.isArray(p?.warnings)?p.warnings.filter(S=>typeof S=="string"&&S.trim().length>0):[],R=lo(m?.prUrl)??lo(p?.prUrl),g=lo(n.completionReportedAt),h=eA({finished:Se(o),completionBlocker:c,completionOutcome:f,completionReportedAt:g}),E=rA({completionBlocker:c,completionOutcome:f,completionReportedAt:g,finished:Se(o)}),P=tA({changedFiles:o.changedFiles,headCommit:s,prUrl:R??void 0});return{worker:o.worker,status:u,attention:d,attentionReason:c??o.attention.reason,landingBlocked:o.finalResult?d==="needs_attention"||d==="blocked":!1,exitedWithoutFinalResult:!o.finalResult&&!o.alive,salvageState:i?.salvageable?"review_needed":"none",salvageReason:i?.salvageable?i.attentionReason:void 0,pid:o.pid,alive:o.alive,currentTool:o.currentTool,lastActivityAt:o.lastActivityAt,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary,heartbeatBlocker:o.heartbeatBlocker,changedFileCount:o.changedFiles.length,changedFiles:o.changedFiles,branch:o.branch,taskId:n.taskId??null,planId:n.planId??null,instructionPolicyFingerprint:typeof n.instructionPolicyFingerprint=="string"?n.instructionPolicyFingerprint:null,instructionPolicyRuleCount:(()=>{let S=n.instructionPolicyEvidence;if(!S||typeof S!="object")return null;let w=S.ruleSlugs;return Array.isArray(w)?w.length:null})(),leaseOwner:n.leaseOwner??null,model:typeof n.model=="string"?n.model:void 0,routingRule:typeof n.routingRule=="string"?n.routingRule:void 0,requestedModel:typeof n.requestedModel=="string"?n.requestedModel:void 0,headCommit:s,prUrl:R,handoffState:P,gitAncestry:o.gitAncestry,finalResult:o.finalResult,lifecycleStage:h,completionReportedAt:g,completionOutcome:n.completionOutcome??null,completionRouteStatus:b,completionRouteOutcome:f,completionWarnings:k,completionBlocker:c??null,checkpoint:{phase:o.lastHeartbeatPhase,summary:o.lastHeartbeatSummary,blocker:o.heartbeatBlocker},lastCommandHint:o.currentTool??o.lastHeartbeatSummary,failureReason:c??o.error??null,nextAction:E,ancestry:o.gitAncestry.relation,ancestryChecked:o.gitAncestry.checked}}function sA(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!sh(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function iA(e,r){return{worker:e,status:"done",attention:"done",attentionReason:"metadata terminal worker; full status skipped in compact snapshot",alive:!1,pid:typeof r.pid=="number"?r.pid:void 0,branch:typeof r.branch=="string"?r.branch:void 0,taskId:r.taskId??null,planId:r.planId??null,model:typeof r.model=="string"?r.model:void 0,routingRule:typeof r.routingRule=="string"?r.routingRule:void 0,requestedModel:typeof r.requestedModel=="string"?r.requestedModel:void 0,lifecycleStage:r.completionReportedAt?"completion_acknowledged":"worker_finished",completionReportedAt:typeof r.completionReportedAt=="string"?r.completionReportedAt:null,completionOutcome:r.completionOutcome??null,localOnly:r.localOnly===!0,compactStatus:!0}}function co(e,r){let t={};for(let n of e){let o=n[r],s=typeof o=="string"&&o.trim()?o:"unknown";t[s]=(t[s]??0)+1}return t}function oh(e){if(e.attention!=="blocked")return!1;let r=typeof e.attentionReason=="string"?e.attentionReason:"";return r.includes("cli-config.json.tmp")||r.includes("Invalid authentication credentials")||r.includes("provider CLI is missing or not on PATH")||r.includes("unknown command:")}function aA(e){let r=e.filter(oh),t=e.filter(n=>{if(oh(n))return!1;let o=n.attention;return o==="needs_attention"||o==="blocked"||o==="stale"||n.status==="running"});return{actionableCount:t.length,runningCount:e.filter(n=>n.status==="running").length,blockedCount:e.filter(n=>n.attention==="blocked").length,staleCount:e.filter(n=>n.attention==="stale").length,needsAttentionCount:e.filter(n=>n.attention==="needs_attention").length,doneCount:e.filter(n=>n.status==="done").length,systemHealthBlockerCount:r.length,systemHealthBlockers:r.slice(0,10).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt})),actionableWorkers:t.slice(0,25).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,taskId:n.taskId,planId:n.planId,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt,nextAction:n.nextAction}))}}function ah(e,r,t){let n={runId:e.id,name:e.name,status:na(e.status,r),repo:e.repo,workerCount:r.length,needsAttention:r.filter(o=>o.attention&&o.attention!=="ok"&&o.attention!=="done").map(o=>o.worker),workers:r};return t&&(n.summary={statusCounts:co(r,"status"),attentionCounts:co(r,"attention"),lifecycleCounts:co(r,"lifecycleStage")},n.controller=aA(r)),n}function lA(e){return e.status==="done"&&e.attention==="done"}function ql(e){let r=ee(e),n=Object.keys(r.workers||{}).map(s=>{let i=I(ai.join(M(r.id),"workers",x(s),"worker.json"),void 0);return i?ih({run:r,workerName:s,worker:i}):{worker:s,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=ah(r,n,!1);return ue(ai.join(M(r.id),"last-board.json"),o),o}function Jl(e){let r=ee(e),n=Object.keys(r.workers||{}).map(i=>{let a=I(ai.join(M(r.id),"workers",x(i),"worker.json"),void 0);return a?sA(a)?iA(i,a):ih({run:r,workerName:i,worker:a}):{worker:i,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=n.filter(i=>!lA(i)),s=ah(r,o,!0);return s.status=na(r.status,n),s.summary={...s.summary??{},totalWorkerCount:n.length,shownWorkerCount:o.length,omittedTerminalDoneWorkerCount:n.length-o.length,allStatusCounts:co(n,"status"),allAttentionCounts:co(n,"attention")},ue(ai.join(M(r.id),"last-board-compact.json"),s),s}async function lh(e,r){let t=String(e.run||""),n=String(e.agentOsId||"");if(!t||!n)return null;let o=ql(t),s=X(e.baseUrl?String(e.baseUrl):void 0),i=await re(e.secret?String(e.secret):void 0,n,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(n)}/harness/snapshot`,l=await J(a,i,{agentOsId:n,runId:t,source:r,snapshot:o},{agentOsId:n,baseUrl:s});return{ok:l.ok,httpStatus:l.status,response:l.response,authRefreshed:l.refreshedAuth,authRefreshFailure:l.authRefreshFailure}}O();K();B();O();var MV=360*60*1e3;function uh(e){let r=e.nodeExecutable??process.execPath,t=Es({importMetaUrl:import.meta.url,explicitCliPath:e.cliPath,nodeExecutable:r});if(!t)return;let n=t.cliPath;if(!uA(n))return;let o=pA.join(e.workerDir,"auto-complete.log"),s;try{s=dA(o,"a")}catch{s=void 0}let i=["ignore",s??"ignore",s??"ignore"],a=[...t.argsPrefix,"worker","auto-complete","--run",e.runId,"--name",e.workerName];e.agentOsId&&a.push("--agent-os-id",e.agentOsId),e.baseUrl&&a.push("--base-url",e.baseUrl),e.secret&&a.push("--secret",e.secret);try{let l=cA(t.command,a,ae({detached:ce(),stdio:i,env:process.env}));return s!==void 0&&ch(s),l.unref(),{pid:l.pid,logPath:o,cliPath:n}}catch{if(s!==void 0)try{ch(s)}catch{}return}}de();function dh(e,r,t){Q(e,["fetch","origin",t,"--prune"],{allowFailure:!0});let n=`origin/${t}`,o=te(e,["worktree","add","-B",t,r,n]);if(o.status===0)return;let s=te(e,["worktree","add","-b",t,r,"HEAD"]);if(s.status!==0){let i=o.stderr||o.stdout||s.stderr||s.stdout||"git worktree add failed for repair target branch";throw new Error(i)}}Oe();rs();K();import RA from"node:net";import{chmodSync as vA,unlinkSync as bA}from"node:fs";import{createHash as mA}from"node:crypto";import{chmodSync as fA,mkdirSync as gA}from"node:fs";import ph from"node:os";import hA from"node:path";var kA=100,yA="\\\\.\\pipe\\";function mh(e,r){return mA("sha256").update(e).digest("hex").slice(0,r)}function zl(e){let r=e.platform??process.platform,t=mh(e.agentOsId,12),n=mh(e.workerKey,16);if(r==="win32")return{socketPath:`${yA}kynver-worker-${t}-${n}`,socketDir:null,isNamedPipe:!0,relocated:!1};let o=hA.posix,s=e.homeDir??ph.homedir(),i=o.join(s,".kynver","brokers",t),a=o.join(i,`${n}.sock`);if(Buffer.byteLength(a,"utf8")<=kA)return{socketPath:a,socketDir:i,isNamedPipe:!1,relocated:!1};let l=o.join(e.tmpDir??ph.tmpdir(),`kynver-brokers-${t}`);return{socketPath:o.join(l,`${n}.sock`),socketDir:l,isNamedPipe:!1,relocated:!0}}function Xl(e){e.socketDir&&(gA(e.socketDir,{recursive:!0,mode:448}),fA(e.socketDir,448))}var uo=class e{server;opts;now;fetchImpl;grantedTools;connections=new Set;sockets=new Set;revoked=!1;closed=!1;constructor(r){if(typeof r.identity?.verify!="function")throw new Error("WorkerBroker requires an explicit identity posture (S11) \u2014 see worker-broker/identity.ts");this.opts=r,this.now=r.now??Date.now,this.fetchImpl=r.fetchImpl??fetch,this.grantedTools=Kn(r.capabilities),this.server=RA.createServer(t=>{this.handleConnection(t)}),this.server.on("error",()=>{})}static async start(r){let t=new e(r);if(Xl(r.address),await new Promise((n,o)=>{t.server.once("error",o),t.server.listen(r.address.socketPath,()=>{t.server.removeListener("error",o),n()})}),!r.address.isNamedPipe)try{vA(r.address.socketPath,384)}catch{}return t}get identitySummary(){return this.opts.identity.summary}get toolDescriptors(){return this.grantedTools.filter(Gt).map(r=>Gn[r])}async revoke(){this.revoked=!0,await this.close()}async close(){if(!this.closed){this.closed=!0;for(let r of this.sockets)r.destroy();if(this.sockets.clear(),this.connections.clear(),await new Promise(r=>this.server.close(()=>r())),!this.opts.address.isNamedPipe)try{bA(this.opts.address.socketPath)}catch{}}}refuse(r,t){this.opts.onRefusal?.(r,t)}async handleConnection(r){this.sockets.add(r),r.on("close",()=>{this.sockets.delete(r),this.connections.delete(r)});for(let o of this.connections)(o.destroyed||o.readableEnded)&&this.connections.delete(o);if(this.connections.size>=1){this.refuse("concurrent_connection","a second concurrent connection was attempted while the worker's own connection was open"),this.write(r,{id:"",ok:!1,reason:"concurrent_connection",error:"worker tools are already in use for this task"}),r.end();return}this.connections.add(r);let t=await this.opts.identity.verify({socket:r,workerPid:this.opts.workerPid});if(!t.ok){this.refuse("identity_refused",t.detail),this.write(r,{id:"",ok:!1,reason:"identity_refused",error:"caller could not be identified as this worker"}),r.end();return}let n="";r.setEncoding("utf8"),r.on("data",o=>{if(n+=o,Buffer.byteLength(n,"utf8")>1048576){this.refuse("request_too_large","request exceeded the line cap"),this.write(r,{id:"",ok:!1,reason:"request_too_large",error:"request exceeded the maximum size"}),r.end();return}let s=n.indexOf(`
+         WHERE scope = ? ORDER BY seq DESC LIMIT 1`).get(r);return t?{scope:t.scope,seq:t.seq,payloadJson:t.payload_json,createdAt:t.created_at}:null}localSchemaVersion(){return 1}checkpointTruncate(){this.db.exec("PRAGMA wal_checkpoint(TRUNCATE)")}integrityCheck(){return this.db.prepare("PRAGMA integrity_check").get()?.integrity_check==="ok"}pragma(r){let t=this.db.prepare(`PRAGMA ${r}`).get();return String(Object.values(t)[0])}close(){this.db.close()}};function oA(e,r){let t=`${e}.quarantine-${r}`;for(let n of["","-wal","-shm"]){let o=`${e}${n}`;tA(o)&&nA(o,`${t}${n}`)}return t}function Vg(e){let r=e.quarantineStamp??(e.now??(()=>new Date))().toISOString().replace(/[:.]/g,"-"),t=null;try{let s=ao.open(e);if(s.integrityCheck())return{store:s,recovered:!1,quarantinedTo:null};s.close()}catch(s){if(s.name==="SchemaDowngradeRefusedError"||s.name==="FilesystemPolicyError")throw s;t=s}let n=`${e.directory}/${e.filename??"local-run-store.sqlite"}`,o=oA(n,r);try{return{store:ao.open(e),recovered:!0,quarantinedTo:o}}catch(s){throw new AggregateError([t,s].filter(Boolean),"local-run-store rebuild after quarantine failed")}}function sA(){if(process.env.KYNVER_LRS_TEST_CLASSIFY_BYPASS==="1")return{mountsSource:()=>"/dev/vda / ext4 rw 0 0",resolveRealPath:()=>"/tmp/kynver-lrs-test/db"}}function iA(){return aA.classifyOptions??sA()}var aA={};var lA=300*1e3,Tr=null,ui=0;function cA(e){ui+=1;try{let r=iA(),t=Vg({directory:e,...r?{classifyOptions:r}:{}});return{store:t.store,status:{state:"open",harnessRoot:e,databasePath:t.store.databasePath,schemaVersion:t.store.localSchemaVersion(),recovered:t.recovered,quarantinedTo:t.quarantinedTo,reason:null,openAttempts:ui},failedAtMs:null,permanentRefusal:!1}}catch(r){return{store:null,status:{state:"unavailable",harnessRoot:e,databasePath:null,schemaVersion:null,recovered:!1,quarantinedTo:null,reason:`${r.name}: ${r.message}`,openAttempts:ui},failedAtMs:Date.now(),permanentRefusal:r.name==="FilesystemPolicyError"||r.name==="SchemaDowngradeRefusedError"}}}function uA(e,r){return e.store||e.permanentRefusal?!1:e.failedAtMs===null?!0:r-e.failedAtMs>=lA}function z(e=Date.now()){let r=De();return(!Tr||Tr.status.harnessRoot!==r||uA(Tr,e))&&(pA(),Tr=cA(r)),Tr.store}function dA(){return Tr?Tr.status:{state:"unopened",harnessRoot:null,databasePath:null,schemaVersion:null,recovered:!1,quarantinedTo:null,reason:null,openAttempts:ui}}function Gg(){return z(),dA()}function pA(){try{Tr?.store?.close()}catch{}Tr=null}H();O();import{existsSync as mA,readFileSync as fA}from"node:fs";import{homedir as gA}from"node:os";import hA from"node:path";var kA=3e4,er=null;function Yg(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return hA.join(gA(),".kynver",`local-run-store-flags-${r}.json`)}function jl(e){if(!e||typeof e!="object"||Array.isArray(e))return{};let r=e,t={},n=["dispatchReceipts","admission","planOutbox","keeper","meshLease","quota"];for(let o of n){let s=r[o];(s==="off"||s==="shadow"||s==="enforce")&&(t[o]=s)}return t}function qg(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.response;if(!r||typeof r!="object"||Array.isArray(r))return null;let t=r.localRunStoreFlags;return t===void 0?null:jl(t)}function Jg(e,r){try{let t=Yg(e),n={contractVersion:1,agentOsId:e,flags:jl(r),deliveredAt:new Date().toISOString()};ue(t,n),er={flags:n.flags,loadedAtMs:Date.now(),file:t}}catch{}}function zg(e=Date.now()){if(process.env.KYNVER_LRS_REMOTE_FLAGS_DISABLED==="1")return{};if(er&&e-er.loadedAtMs<kA)return er.flags;try{let r=F().agentOsId?.trim();if(!r)return er={flags:{},loadedAtMs:e,file:null},er.flags;let t=Yg(r);if(!mA(t))return er={flags:{},loadedAtMs:e,file:t},er.flags;let n=JSON.parse(fA(t,"utf8")),o=n?.contractVersion===1?jl(n.flags):{};return er={flags:o,loadedAtMs:e,file:t},o}catch{return er={flags:{},loadedAtMs:e,file:null},er.flags}}var yA=[{key:"dispatchReceipts",env:"KYNVER_LRS_DISPATCH_RECEIPTS",milestone:"D1"},{key:"admission",env:"KYNVER_LRS_ADMISSION",milestone:"D2"},{key:"planOutbox",env:"KYNVER_LRS_PLAN_OUTBOX",milestone:"D3"},{key:"keeper",env:"KYNVER_LRS_KEEPER",milestone:"D4"},{key:"meshLease",env:"KYNVER_LRS_MESH_LEASE",milestone:"D4"},{key:"quota",env:"KYNVER_LRS_QUOTA",milestone:"D4"}];function RA(e){let r=e?.trim().toLowerCase()??"";return r===""?{mode:"off",unknown:!1}:r==="off"||r==="shadow"||r==="enforce"?{mode:r,unknown:!1}:{mode:"off",unknown:!0}}function Nr(e=process.env){let r={},t={},n=[],o=zg();for(let s of yA){let i=e[s.env];if(typeof i=="string"&&i.trim()!==""){let c=RA(i);r[s.key]=c.mode,t[s.key]="env",c.unknown&&n.push(`${s.env}='${i}' is not off|shadow|enforce \u2014 treating as off`);continue}let l=o[s.key];if(l){r[s.key]=l,t[s.key]="server";continue}r[s.key]="off",t[s.key]="default"}return{flags:r,sources:t,warnings:n}}var Oe={storeFailures:0,completionReplaysObserved:0,completionReplaysShortCircuited:0,agedReceiptsPruned:0};function Mr(e=process.env){return Nr(e).flags.dispatchReceipts}function Vl(e){return Mr(e)!=="off"}function Gl(e,r){return`dispatch:${e}:${r.taskId}:${r.leaseToken}`}function co(e,r,t){if(!Vl())return;let n=z();if(n)try{n.recordOperationReceipt({idempotencyKey:Gl(e,r),operation:`dispatch-${e}`,resultJson:t===void 0?null:JSON.stringify(t)})}catch{Oe.storeFailures+=1}}function Qg(e){co("claim",e,{runId:e.runId,workerName:e.workerName,provider:e.provider})}function di(e){co("spawned",e)}function Zt(e,r){co("released",e,{reasonClass:r})}function Zg(e){co("completion-sent",e)}function Yl(e,r){co("completion-acked",e,{outcome:r})}function eh(e){if(!Vl())return!1;let r=z();if(!r)return!1;try{let t=r.getOperationReceipt(Gl("completion-acked",e));if(t){let n=null;try{n=t.resultJson?JSON.parse(t.resultJson).outcome??null:null}catch{n=null}if(n==="acknowledged")return Oe.completionReplaysObserved+=1,!0}}catch{Oe.storeFailures+=1}return!1}function ql(e){let r=String(e??"").split(":")[0]?.trim()??"";return r.length>0?r.slice(0,64):"unknown"}function rh(e){if(Mr()!=="enforce")return!1;let r=z();if(!r)return!1;try{let t=r.getOperationReceipt(Gl("completion-acked",e));if(!t)return!1;let n=null;try{n=t.resultJson?JSON.parse(t.resultJson).outcome??null:null}catch{n=null}return n==="acknowledged"?(Oe.completionReplaysShortCircuited+=1,!0):!1}catch{return Oe.storeFailures+=1,!1}}var vA=600*1e3;function th(e,r){if(Mr()!=="enforce")return;let t=z();if(t)try{t.recordOperationReceipt({idempotencyKey:`dispatch:start-failed:${e}:${r}`,operation:"dispatch-start-failed",resultJson:JSON.stringify({runId:r})})}catch{Oe.storeFailures+=1}}function nh(e,r){if(Mr()!=="enforce")return[];let t=z();if(!t)return[];let n=r?.nowMs??Date.now(),o=r?.windowMs??vA;try{return t.listOperationReceipts({operation:"dispatch-start-failed",recordedAfter:new Date(n-o).toISOString(),limit:200}).filter(s=>{try{return s.resultJson?JSON.parse(s.resultJson).runId===e:!1}catch{return!1}}).map(s=>{let i=s.idempotencyKey.slice(22);return i.slice(0,i.length-(e.length+1))}).filter(s=>s.length>0)}catch{return Oe.storeFailures+=1,[]}}function lo(e){let r=e.split(":")[0]??"",t=Number(r);return Number.isInteger(t)&&t>=0?t:null}var bA=900*1e3,Xg=10080*60*1e3,SA=1440*60*1e3,wA=500,xA=300;function oh(e){let r={scannedClaims:0,strandedClaimCandidates:0,prunedReceipts:0};if(!Vl())return r;let t=z();if(!t)return r;let n=e?.nowMs??Date.now(),o=e?.strandedAfterMs??bA;try{let s=t.listOperationReceipts({operation:"dispatch-claim",recordedAfter:new Date(n-Xg).toISOString(),limit:wA}),i=0,a=[];for(let c of s){let u=c.idempotencyKey.slice(15),d=Date.parse(c.recordedAt);if(!Number.isFinite(d)||n-d<o)continue;let p=t.getOperationReceipt(`dispatch:spawned:${u}`),m=t.getOperationReceipt(`dispatch:released:${u}`);if(p||m){n-d>=SA&&a.length+5<=xA&&a.push(c.idempotencyKey,`dispatch:spawned:${u}`,`dispatch:released:${u}`,`dispatch:completion-sent:${u}`,`dispatch:completion-acked:${u}`);continue}let f=u.split(":")[0]??"",y=lo(u.slice(f.length+1));if((f?t.listOperationReceipts({keyPrefix:`dispatch:completion-acked:${f}:`,limit:10}):[]).some(h=>{if(y===null)return!0;let w=h.idempotencyKey.slice(`dispatch:completion-acked:${f}:`.length),E=lo(w);return E===null||E>=y}))continue;let g=!1;if(e?.hasLiveWorker&&c.resultJson)try{let h=JSON.parse(c.resultJson);h.runId&&h.workerName&&(g=e.hasLiveWorker({runId:h.runId,workerName:h.workerName}))}catch{g=!1}g||(i+=1)}let l=a.length>0?t.deleteOperationReceiptsByKeys(a):0;if(Mr()==="enforce"){let c=t.listOperationReceipts({limit:100}).filter(u=>{let d=Date.parse(u.recordedAt);return Number.isFinite(d)&&n-d>=Xg}).map(u=>u.idempotencyKey);if(c.length>0){let u=t.deleteOperationReceiptsByKeys(c);l+=u,Oe.agedReceiptsPruned+=u}}return{scannedClaims:s.length,strandedClaimCandidates:i,prunedReceipts:l}}catch{return Oe.storeFailures+=1,r}}function sh(){return{"dispatchReceipts.storeFailures":Oe.storeFailures,"dispatchReceipts.completionReplaysObserved":Oe.completionReplaysObserved,"dispatchReceipts.completionReplaysShortCircuited":Oe.completionReplaysShortCircuited,"dispatchReceipts.agedReceiptsPruned":Oe.agedReceiptsPruned}}var en=900*1e3,Xl="admission-shadow",Jl="worker-slot:",qr={storeFailures:0,missingForLive:0,deadSlotsReleased:0},zl=!1;function ih(){zl=!1}function Dr(e=process.env){return Nr(e).flags.admission}function pi(e,r){return`${Jl}${e}:${r}`}function ah(e,r){if(Dr()==="off")return;let t=z();if(t)try{t.tryReserveAdmission(pi(e,r),Xl,en)}catch{qr.storeFailures+=1}}function uo(e,r){if(Dr()==="off")return;let t=z();if(t)try{t.releaseAdmission(pi(e,r),Xl)}catch{qr.storeFailures+=1}}function lh(e){let r={liveReservations:0,refreshed:0,deadReleased:0,missingForLive:0,orphaned:0,adoptionPass:!1};if(Dr()==="off")return r;let t=z();if(!t)return r;try{let n=new Set(e.liveWorkers.map(p=>pi(p.runId,p.workerName))),o=t.listAdmissionReservations({keyPrefix:Jl,limit:500}),s=new Set(o.map(p=>p.key)),i=[...n].filter(p=>!s.has(p)).length,a=o.filter(p=>!n.has(p.key)).length,l=!zl;zl=!0,!l&&i>0&&(qr.missingForLive+=i);let c=0;for(let p of e.liveWorkers)t.tryReserveAdmission(pi(p.runId,p.workerName),Xl,en),c+=1;let u=0;for(let p of o)n.has(p.key)||t.releaseAdmission(p.key,p.owner)&&(u+=1,qr.deadSlotsReleased+=1);return{liveReservations:t.listAdmissionReservations({keyPrefix:Jl,limit:500}).length,refreshed:c,deadReleased:u,missingForLive:i,orphaned:a,adoptionPass:l}}catch{return qr.storeFailures+=1,r}}function ch(){return{"admission.storeFailures":qr.storeFailures,"admission.missingForLive":qr.missingForLive,"admission.deadSlotsReleased":qr.deadSlotsReleased}}var Ql="worker-slot-n:",mi=64;function uh(e){return`${Ql}${e}`}function fi(e,r){return`${e}:${r}`}var Jr={enforceStoreFailures:0,admissionsRefusedSlots:0,admissionsRefusedDiskBackstop:0};function dh(e){if(Dr()!=="enforce")return{admitted:!0};let r=z();if(!r)return{admitted:!0};let t=Math.max(0,Math.min(mi,Math.floor(e.maxSlots)));if(e.diskActiveWorkers>=t)return Jr.admissionsRefusedDiskBackstop+=1,{admitted:!1,reason:"disk_backstop"};try{let n=fi(e.runId,e.workerName);for(let o=0;o<t;o+=1)if(r.tryReserveAdmission(uh(o),n,en).acquired)return{admitted:!0,slot:o};return Jr.admissionsRefusedSlots+=1,{admitted:!1,reason:"slots_exhausted"}}catch{return Jr.enforceStoreFailures+=1,{admitted:!0}}}function zr(e,r){if(Dr()==="off")return;let t=z();if(t)try{let n=fi(e,r),o=t.listAdmissionReservations({keyPrefix:Ql,limit:mi});for(let s of o)s.owner===n&&t.releaseAdmission(s.key,n)}catch{Jr.enforceStoreFailures+=1}}function ph(e){let r={refreshed:0,deadReleased:0,adopted:0};if(Dr()!=="enforce")return r;let t=z();if(!t)return r;try{let n=new Set(e.liveWorkers.map(c=>fi(c.runId,c.workerName))),o=t.listAdmissionReservations({keyPrefix:Ql,limit:mi}),s=0,i=0,a=new Set;for(let c of o)n.has(c.owner)?(t.tryReserveAdmission(c.key,c.owner,en),a.add(c.owner),s+=1):t.releaseAdmission(c.key,c.owner)&&(i+=1);let l=0;for(let c of e.liveWorkers){let u=fi(c.runId,c.workerName);if(!a.has(u)){for(let d=0;d<mi;d+=1)if(t.tryReserveAdmission(uh(d),u,en).acquired){l+=1;break}}}return{refreshed:s,deadReleased:i,adopted:l}}catch{return Jr.enforceStoreFailures+=1,r}}function mh(){return{"admission.enforceStoreFailures":Jr.enforceStoreFailures,"admission.refusedSlotsExhausted":Jr.admissionsRefusedSlots,"admission.refusedDiskBackstop":Jr.admissionsRefusedDiskBackstop}}O();O();var _A=/^[a-z0-9][a-z0-9._-]{0,127}$/i,EA=/^[a-z0-9][a-z0-9._-]{0,63}$/i,fh=new Set(["undefined","null"]),gh="usage: kynver worker <action> --run RUN_ID --name WORKER_NAME";function CA(e){let r=e.trim();if(!_A.test(r))throw new Error(`invalid run id: ${e}`);return r}function PA(e){let r=e.trim();if(!EA.test(r))throw new Error(`invalid worker name: ${e}`);return r}function hh(e){return typeof e=="string"?e.trim():""}function Zl(e){let r=hh(e.run),t=hh(e.name);return(!r||fh.has(r))&&Ge(`missing --run RUN_ID (${gh})`),(!t||fh.has(t))&&Ge(`missing --name WORKER_NAME (${gh})`),{runId:CA(r),workerName:PA(t)}}import{existsSync as AA,mkdirSync as IA,readFileSync as OA,writeFileSync as TA}from"node:fs";import{homedir as NA}from"node:os";import xh from"node:path";var xe={keeperStoreFailures:0,meshStoreFailures:0,quotaStoreFailures:0,meshLeaseDivergences:0,meshEnforceStaleInversions:0,quotaVerdictDivergences:0};function po(e){return Nr(process.env).flags[e]}var iG=1800*1e3;function ec(e){return`mesh-cron-lease:${e}`}function kh(e,r){if(po("meshLease")==="off")return;let t=z();if(t)try{let n=t.latestRecoveryCheckpoint(ec(e));if(n){let o=JSON.parse(n.payloadJson);if((o.leaseToken??null)===(r.leaseToken??null)&&(o.holderBoxId??null)===(r.holderBoxId??null)&&o.authorized===r.authorized)return}t.saveRecoveryCheckpoint({scope:ec(e),payloadJson:JSON.stringify(r)})}catch{xe.meshStoreFailures+=1}}function yh(e,r){let t=po("meshLease");if(t==="off")return null;let n=z();if(!n)return null;try{let o=n.latestRecoveryCheckpoint(ec(e)),s=o?JSON.parse(o.payloadJson):null,i=s!==null&&((s.leaseToken??null)!==(r?.leaseToken??null)||(s.holderBoxId??null)!==(r?.holderBoxId??null)||(s.authorized??null)!==(r?.authorized??null));return i&&(xe.meshLeaseDivergences+=1),t!=="enforce"?null:i&&r?.updatedAt&&s?.updatedAt&&Date.parse(r.updatedAt)>Date.parse(s.updatedAt)?(xe.meshEnforceStaleInversions+=1,null):s}catch{return xe.meshStoreFailures+=1,null}}function gi(e){return`quota-cooldown:${e}`}var Rh="quota-preflight";function vh(e,r){if(po("quota")==="off")return;let t=z();if(t)try{t.tryReserveAdmission(gi(e),Rh,r)}catch{xe.quotaStoreFailures+=1}}function bh(e){if(po("quota")==="off")return;let r=z();if(r)try{r.releaseAdmission(gi(e),Rh)}catch{xe.quotaStoreFailures+=1}}function Sh(e,r){let t=po("quota");if(t==="off")return null;let n=z();if(!n)return null;try{let o=n.listAdmissionReservations({keyPrefix:gi(e),limit:50}).find(i=>i.key===gi(e)),s=!!o;return s!==r&&(xe.quotaVerdictDivergences+=1),t==="enforce"?{blocked:s,retryAtIso:o?.expiresAt??null}:null}catch{return xe.quotaStoreFailures+=1,null}}function wh(){return{"keeper.storeFailures":xe.keeperStoreFailures,"meshLease.storeFailures":xe.meshStoreFailures,"meshLease.divergences":xe.meshLeaseDivergences,"meshLease.enforceStaleInversions":xe.meshEnforceStaleInversions,"quota.storeFailures":xe.quotaStoreFailures,"quota.verdictDivergences":xe.quotaVerdictDivergences}}var MA=/\b(out of usage|increase limits?|switch to auto|ask your admin to increase your limit|(?:hit|reached|exceeded|over) (?:your |the )?usage limits?|usage limits? (?:hit|reached|exceeded)|exceeded your (?:current )?quota|quota (?:exceeded|exhausted)|insufficient_quota|insufficient (?:credits?|quota)|credits? exhausted|credit balance is too low|billing hard limit|check your plan and billing|402 payment required|provider quota exhausted|provider_quota_exhausted)\b/i,DA=30,WA=5,LA=240;function UA(e){let r=e?.trim();return!!(r&&MA.test(r))}function BA(){let e=(process.env.KYNVER_PROVIDER_QUOTA_PREFLIGHT??"on").trim().toLowerCase();return e!=="off"&&e!=="0"&&e!=="false"&&e!=="no"}function rc(){let e=Number.parseInt(process.env.KYNVER_PROVIDER_QUOTA_COOLDOWN_MINUTES??"",10);return Number.isFinite(e)?Math.min(LA,Math.max(WA,e)):DA}function _h(){let e=process.env.KYNVER_PROVIDER_QUOTA_STORE_PATH?.trim();return e||xh.join(NA(),".kynver","provider-quota-cooldowns.json")}function mo(e){return(e??"").trim().toLowerCase()}function tc(){let e=_h();if(!AA(e))return{};try{let r=JSON.parse(OA(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))return{};let t={};for(let[n,o]of Object.entries(r)){if(!o||typeof o!="object")continue;let{lastExhaustedAt:s,reason:i}=o;typeof s!="string"||!Number.isFinite(Date.parse(s))||(t[mo(n)]={lastExhaustedAt:s,reason:typeof i=="string"?i.slice(0,500):""})}return t}catch{return{}}}function nc(e){let r=_h();try{IA(xh.dirname(r),{recursive:!0}),TA(r,`${JSON.stringify(e,null,2)}
+`,"utf8")}catch{}}function FA(e,r,t=Date.now()){let n=mo(e);if(!n)return;let o=tc();o[n]={lastExhaustedAt:new Date(t).toISOString(),reason:r.trim().slice(0,500)},nc(o),vh(n,rc()*6e4)}function KA(e){let r=mo(e);if(!r)return!1;bh(r);let t=tc();return r in t?(delete t[r],nc(t),!0):!1}function Eh(e,r=Date.now()){if(!BA())return{ok:!0};let t=mo(e);if(!t)return{ok:!0};let n=tc(),o=n[t],s=!!(o&&Number.isFinite(Date.parse(o.lastExhaustedAt))&&Date.parse(o.lastExhaustedAt)+rc()*6e4>r),i=Sh(t,s);if(i)return i.blocked?{ok:!1,provider:t,reason:`provider "${t}" is inside its local quota cooldown`+(i.retryAtIso?` \u2014 preflight declines spawn until ${i.retryAtIso}`:""),retryAtIso:i.retryAtIso??new Date(r).toISOString()}:{ok:!0};if(!o)return{ok:!0};let a=Date.parse(o.lastExhaustedAt),l=a+rc()*6e4;if(!Number.isFinite(a)||l<=r)return delete n[t],nc(n),{ok:!0};let c=new Date(l).toISOString();return{ok:!1,provider:t,reason:`provider "${t}" reported quota exhaustion at ${o.lastExhaustedAt} \u2014 local preflight declines spawn until ${c}`+(o.reason?` (${o.reason.slice(0,160)})`:""),retryAtIso:c}}function HA(e){if(typeof e=="string"){let r=e.trim();return r.length?r:null}if(e&&typeof e=="object"&&!Array.isArray(e)){let r=e;for(let t of["result","summary","error"]){let n=r[t];if(typeof n=="string"&&n.trim())return n.trim()}}return null}function Ch(e){let r=mo(e.provider);if(!r)return"none";let t=HA(e.finalResult)??(typeof e.error=="string"&&e.error.trim()?e.error.trim():null);return t?UA(t)?(FA(r,t,e.nowMs??Date.now()),"recorded"):KA(r)?"cleared":"none":"none"}function Ph(e){let r=e.usage;return!r||r.inputTokens===void 0&&r.outputTokens===void 0?null:{provider:e.provider?.trim()||"unknown",model:r.model?.trim()||e.model?.trim()||null,inputTokens:r.inputTokens??null,outputTokens:r.outputTokens??null}}async function Ah(e,r,t){let n=await fetch(e,{method:"POST",headers:Bn(r),body:JSON.stringify(t)}),o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,parsed:o}}function $A(e){if(e&&typeof e=="object"){let r=e.error;if(typeof r=="string"&&r.trim())return r.trim()}}function Ih(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function fo(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function jA(e){return e.completionBlocker?`blocked:${e.completionBlocker}`:e.completionOutcome?e.completionOutcome:e.completionReportedAt?"completion_acknowledged":e.finished?"worker_finished":"in_progress"}function VA(e){return e.completionBlocker?"Resolve completion blocker, then rerun `kynver worker complete`.":e.completionOutcome==="review_scheduled"||e.completionOutcome==="review_already_scheduled"?"Await review lane and landing decision in Command Center.":e.completionOutcome==="needs_attention"?"Inspect blocker/attention reason in Command Center and dispatch a repair task.":e.finished&&!e.completionReportedAt?"Post completion acknowledgement to AgentOS (`kynver worker complete`).":null}function Th(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function GA(e){return e.prUrl?"pr_handoff":e.headCommit?"commit_handoff":e.changedFiles.length>0?"dirty_worktree":"none"}function rn(e,r){(e.completionBlocker??void 0)!==(r??void 0)&&(r?e.completionBlocker=r:delete e.completionBlocker,L(e.runId,e))}function YA(e){e.completionBlocker&&(delete e.completionBlocker,L(e.runId,e))}function oc(e){return e?{base:e.base,baseCommit:e.baseCommit}:{}}function qA(e,r){return{...e,...r.prUrl?{prUrl:r.prUrl}:{},...r.headCommit?{headCommit:r.headCommit}:{}}}async function ho(e){let{runId:r,workerName:t}=Zl(e),n=jt(r,t),o=q(n.runId),s=J(n,oc(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!Se(s))return{ok:!0,skipped:!0,reason:"worker-not-finished"};if(n.localOnly)return{ok:!0,skipped:!0,reason:"local-only-worker"};if(!i)return{ok:!1,reason:"missing agentOsId"};let l=e.force===!0||e.force==="true";if(!l&&ro(n))return{ok:!0,skipped:!0,reason:"completion-already-acknowledged",httpStatus:200};if(!l&&Al(n)&&YA(n),!s.finalResult&&s.alive===!1){let _=si({worker:n,status:s});_&&ii(n,_)&&(L(n.runId,n),n=jt(r,t),s=J(n,oc(o)))}if(!(e.skipPrHandoff===!0||e.skipPrHandoff==="true")&&!n.steerRestartRequired&&n.dispatched&&a){let _=Wl({worker:n,run:o,status:s});if(!_.ok)return rn(n,_.reason),{ok:!1,reason:_.reason,nextAction:_.nextAction,completionBlocked:!0};(_.prUrl||_.headCommit)&&(s=J(n,oc(o)),s=qA(s,_))}let u=s.gitAncestry.headIsAncestorOfBase===!1&&s.gitAncestry.head?s.gitAncestry.head:s.headCommit;if(n.dispatched&&!n.steerRestartRequired){let _=Fg({changedFiles:s.changedFiles,finalResult:s.finalResult,prUrl:s.prUrl,headCommit:u,disposableArtifactsRemoved:n.disposableArtifactsRemoved});if(!_.allowed){let K=_.detail??`worktree completion blocked (${_.state})`;return rn(n,K),{ok:!1,reason:K,nextAction:"Clean the worktree (commit, open a PR, or `kynver worker discard-disposable --path <file>`), then rerun `kynver worker complete`.",completionBlocked:!0}}}try{Ch({provider:n.provider??s.provider??null,finalResult:s.finalResult})}catch{}let d=Q(e.baseUrl?String(e.baseUrl):void 0),p=e.secret?String(e.secret):void 0,m=await ee(p,i,{baseUrl:d});a&&(await js({worker:n,agentOsId:i,baseUrl:d,secret:m}),n=jt(r,t));let f=`${d}/api/agent-os/by-id/${encodeURIComponent(i)}/harness/completion`,y={...s};n.disposableArtifactsRemoved?.length&&(y.disposableArtifactsRemoved=n.disposableArtifactsRemoved),n.steerRestartRequired&&(y.steerRestartRequired=!0,y.pendingSteerEventIds=n.pendingSteerEventIds??[],n.dispatchSteerFenceEventId!=null&&(y.dispatchSteerFenceEventId=n.dispatchSteerFenceEventId));let k=Ph({usage:s.usage,provider:n.provider??s.provider??null,model:typeof n.model=="string"?n.model:s.model??null}),b={source:"kynver-harness",agentOsId:i,runId:n.runId,workerName:n.name,taskId:a,leaseToken:n.leaseToken??null,startedAt:n.startedAt,finishedAt:s.lastActivityAt||new Date().toISOString(),...k?{workerUsage:k}:{},status:n.leaseToken?{...y,leaseToken:n.leaseToken}:y,workerInjection:{instructionPolicyFingerprint:n.instructionPolicyFingerprint??null,instructionPolicyEvidence:n.instructionPolicyEvidence??null,memoryQualityCapture:n.memoryQualityCapture??null,policyAt:n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence=="object"&&"policyAt"in n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence.policyAt=="string"?n.instructionPolicyEvidence.policyAt:null,personaSlug:n.personaSlug??null,personaEvidence:n.personaEvidence??null,contextEnvelopeEvidence:n.contextEnvelopeEvidence??null}},g=a&&n.leaseToken?{taskId:a,leaseToken:n.leaseToken}:null;if(g){if(eh(g),rh(g)){let _={completionReportedAt:new Date().toISOString(),completionOutcome:"acknowledged",completionResponse:{replayShortCircuited:!0}};return qs(n,n.runId,_),ni(n,s,{source:"harness-completion"}),rn(n,void 0),uo(n.runId,n.name),zr(n.runId,n.name),{ok:!0,httpStatus:200,response:{ok:!0,replayShortCircuited:!0},reason:"completion_replay_short_circuited",...s.prUrl?{prHandoff:{prUrl:s.prUrl}}:{}}}Zg(g)}let h=await Ah(f,m,b);if((h.status===401||h.status===403)&&!p){let _=await Fp(i,{baseUrl:d});_&&_!==m&&(m=_,h=await Ah(f,m,b))}if(h.ok){let _=Jf(h.parsed);if(!zf(_)){let he=`completion acknowledged but board not advanced: ${_.detail??(_.routeOutcome?`harness completion returned ${_.routeOutcome}`:"harness completion did not advance the linked task")}`;rn(n,he);let je={completionReportedAt:new Date().toISOString(),completionOutcome:"rejected",completionResponse:h.parsed};return qs(n,n.runId,je),g&&Yl(g,"rejected"),{ok:!1,httpStatus:h.status,response:h.parsed,reason:he,completionBlocked:!0}}rn(n,void 0);let K=_.routeOutcome??"acknowledged",$={completionReportedAt:new Date().toISOString(),completionOutcome:"acknowledged",completionResponse:h.parsed};qs(n,n.runId,$),ni(n,s,{source:"harness-completion"}),g&&Yl(g,"acknowledged"),uo(n.runId,n.name),zr(n.runId,n.name);let C=s.prUrl;return{ok:!0,httpStatus:h.status,response:h.parsed,reason:K,...C?{prHandoff:{prUrl:C}}:{}}}let w=h.status===401||h.status===403,E=$A(h.parsed)??(w?"runner token unauthorized":"non-2xx response"),S=w?`completion replay rejected (${h.status}): ${E}`:`completion replay failed (${h.status}): ${E}`;return rn(n,S),{ok:!1,httpStatus:h.status,response:h.parsed,completionBlocked:!0}}function Nh(e){let{run:r,workerName:t,worker:n}=e,o=J(n,{base:r.base,baseCommit:r.baseCommit}),s=o.gitAncestry.headIsAncestorOfBase===!1&&o.gitAncestry.head?o.gitAncestry.head:void 0,i=Dt({alive:o.alive,finalResult:o.finalResult,changedFiles:o.changedFiles,gitAncestry:o.gitAncestry,headCommit:s}),a=n.completionBlocker,l=typeof a=="string"&&a?a:void 0,c=Th(l)?void 0:l,u=c?"blocked":o.status,d=c?"blocked":o.attention.state,p=Ih(n.completionResponse),m=Ih(p?.task),f=fo(p?.outcome),y=fo(p?.status),k=Array.isArray(p?.warnings)?p.warnings.filter(S=>typeof S=="string"&&S.trim().length>0):[],b=fo(m?.prUrl)??fo(p?.prUrl),g=fo(n.completionReportedAt),h=jA({finished:Se(o),completionBlocker:c,completionOutcome:f,completionReportedAt:g}),w=VA({completionBlocker:c,completionOutcome:f,completionReportedAt:g,finished:Se(o)}),E=GA({changedFiles:o.changedFiles,headCommit:s,prUrl:b??void 0});return{worker:o.worker,status:u,attention:d,attentionReason:c??o.attention.reason,landingBlocked:o.finalResult?d==="needs_attention"||d==="blocked":!1,exitedWithoutFinalResult:!o.finalResult&&!o.alive,salvageState:i?.salvageable?"review_needed":"none",salvageReason:i?.salvageable?i.attentionReason:void 0,pid:o.pid,alive:o.alive,currentTool:o.currentTool,lastActivityAt:o.lastActivityAt,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary,heartbeatBlocker:o.heartbeatBlocker,changedFileCount:o.changedFiles.length,changedFiles:o.changedFiles,branch:o.branch,taskId:n.taskId??null,planId:n.planId??null,instructionPolicyFingerprint:typeof n.instructionPolicyFingerprint=="string"?n.instructionPolicyFingerprint:null,instructionPolicyRuleCount:(()=>{let S=n.instructionPolicyEvidence;if(!S||typeof S!="object")return null;let _=S.ruleSlugs;return Array.isArray(_)?_.length:null})(),leaseOwner:n.leaseOwner??null,model:typeof n.model=="string"?n.model:void 0,routingRule:typeof n.routingRule=="string"?n.routingRule:void 0,requestedModel:typeof n.requestedModel=="string"?n.requestedModel:void 0,headCommit:s,prUrl:b,handoffState:E,gitAncestry:o.gitAncestry,finalResult:o.finalResult,lifecycleStage:h,completionReportedAt:g,completionOutcome:n.completionOutcome??null,completionRouteStatus:y,completionRouteOutcome:f,completionWarnings:k,completionBlocker:c??null,checkpoint:{phase:o.lastHeartbeatPhase,summary:o.lastHeartbeatSummary,blocker:o.heartbeatBlocker},lastCommandHint:o.currentTool??o.lastHeartbeatSummary,failureReason:c??o.error??null,nextAction:w,ancestry:o.gitAncestry.relation,ancestryChecked:o.gitAncestry.checked}}function JA(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!Th(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function zA(e,r){return{worker:e,status:"done",attention:"done",attentionReason:"metadata terminal worker; full status skipped in compact snapshot",alive:!1,pid:typeof r.pid=="number"?r.pid:void 0,branch:typeof r.branch=="string"?r.branch:void 0,taskId:r.taskId??null,planId:r.planId??null,model:typeof r.model=="string"?r.model:void 0,routingRule:typeof r.routingRule=="string"?r.routingRule:void 0,requestedModel:typeof r.requestedModel=="string"?r.requestedModel:void 0,lifecycleStage:r.completionReportedAt?"completion_acknowledged":"worker_finished",completionReportedAt:typeof r.completionReportedAt=="string"?r.completionReportedAt:null,completionOutcome:r.completionOutcome??null,localOnly:r.localOnly===!0,compactStatus:!0}}function go(e,r){let t={};for(let n of e){let o=n[r],s=typeof o=="string"&&o.trim()?o:"unknown";t[s]=(t[s]??0)+1}return t}function Oh(e){if(e.attention!=="blocked")return!1;let r=typeof e.attentionReason=="string"?e.attentionReason:"";return r.includes("cli-config.json.tmp")||r.includes("Invalid authentication credentials")||r.includes("provider CLI is missing or not on PATH")||r.includes("unknown command:")}function XA(e){let r=e.filter(Oh),t=e.filter(n=>{if(Oh(n))return!1;let o=n.attention;return o==="needs_attention"||o==="blocked"||o==="stale"||n.status==="running"});return{actionableCount:t.length,runningCount:e.filter(n=>n.status==="running").length,blockedCount:e.filter(n=>n.attention==="blocked").length,staleCount:e.filter(n=>n.attention==="stale").length,needsAttentionCount:e.filter(n=>n.attention==="needs_attention").length,doneCount:e.filter(n=>n.status==="done").length,systemHealthBlockerCount:r.length,systemHealthBlockers:r.slice(0,10).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt})),actionableWorkers:t.slice(0,25).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,taskId:n.taskId,planId:n.planId,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt,nextAction:n.nextAction}))}}function Mh(e,r,t){let n={runId:e.id,name:e.name,status:fa(e.status,r),repo:e.repo,workerCount:r.length,needsAttention:r.filter(o=>o.attention&&o.attention!=="ok"&&o.attention!=="done").map(o=>o.worker),workers:r};return t&&(n.summary={statusCounts:go(r,"status"),attentionCounts:go(r,"attention"),lifecycleCounts:go(r,"lifecycleStage")},n.controller=XA(r)),n}function QA(e){return e.status==="done"&&e.attention==="done"}function sc(e){let r=q(e),n=Object.keys(r.workers||{}).map(s=>{let i=A(hi.join(N(r.id),"workers",x(s),"worker.json"),void 0);return i?Nh({run:r,workerName:s,worker:i}):{worker:s,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=Mh(r,n,!1);return ue(hi.join(N(r.id),"last-board.json"),o),o}function ic(e){let r=q(e),n=Object.keys(r.workers||{}).map(i=>{let a=A(hi.join(N(r.id),"workers",x(i),"worker.json"),void 0);return a?JA(a)?zA(i,a):Nh({run:r,workerName:i,worker:a}):{worker:i,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=n.filter(i=>!QA(i)),s=Mh(r,o,!0);return s.status=fa(r.status,n),s.summary={...s.summary??{},totalWorkerCount:n.length,shownWorkerCount:o.length,omittedTerminalDoneWorkerCount:n.length-o.length,allStatusCounts:go(n,"status"),allAttentionCounts:go(n,"attention")},ue(hi.join(N(r.id),"last-board-compact.json"),s),s}async function Dh(e,r){let t=String(e.run||""),n=String(e.agentOsId||"");if(!t||!n)return null;let o=sc(t),s=Q(e.baseUrl?String(e.baseUrl):void 0),i=await ee(e.secret?String(e.secret):void 0,n,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(n)}/harness/snapshot`,l=await X(a,i,{agentOsId:n,runId:t,source:r,snapshot:o},{agentOsId:n,baseUrl:s});return{ok:l.ok,httpStatus:l.status,response:l.response,authRefreshed:l.refreshedAuth,authRefreshFailure:l.authRefreshFailure}}O();H();U();O();var i1=360*60*1e3;function Lh(e){let r=e.nodeExecutable??process.execPath,t=Ds({importMetaUrl:import.meta.url,explicitCliPath:e.cliPath,nodeExecutable:r});if(!t)return;let n=t.cliPath;if(!eI(n))return;let o=tI.join(e.workerDir,"auto-complete.log"),s;try{s=rI(o,"a")}catch{s=void 0}let i=["ignore",s??"ignore",s??"ignore"],a=[...t.argsPrefix,"worker","auto-complete","--run",e.runId,"--name",e.workerName];e.agentOsId&&a.push("--agent-os-id",e.agentOsId),e.baseUrl&&a.push("--base-url",e.baseUrl),e.secret&&a.push("--secret",e.secret);try{let l=ZA(t.command,a,ae({detached:ce(),stdio:i,env:process.env}));return s!==void 0&&Wh(s),l.unref(),{pid:l.pid,logPath:o,cliPath:n}}catch{if(s!==void 0)try{Wh(s)}catch{}return}}de();function Uh(e,r,t){Z(e,["fetch","origin",t,"--prune"],{allowFailure:!0});let n=`origin/${t}`,o=ne(e,["worktree","add","-B",t,r,n]);if(o.status===0)return;let s=ne(e,["worktree","add","-b",t,r,"HEAD"]);if(s.status!==0){let i=o.stderr||o.stdout||s.stderr||s.stdout||"git worktree add failed for repair target branch";throw new Error(i)}}Me();us();H();import cI from"node:net";import{chmodSync as uI,unlinkSync as dI}from"node:fs";import{createHash as nI}from"node:crypto";import{chmodSync as oI,mkdirSync as sI}from"node:fs";import Bh from"node:os";import iI from"node:path";var aI=100,lI="\\\\.\\pipe\\";function Fh(e,r){return nI("sha256").update(e).digest("hex").slice(0,r)}function ac(e){let r=e.platform??process.platform,t=Fh(e.agentOsId,12),n=Fh(e.workerKey,16);if(r==="win32")return{socketPath:`${lI}kynver-worker-${t}-${n}`,socketDir:null,isNamedPipe:!0,relocated:!1};let o=iI.posix,s=e.homeDir??Bh.homedir(),i=o.join(s,".kynver","brokers",t),a=o.join(i,`${n}.sock`);if(Buffer.byteLength(a,"utf8")<=aI)return{socketPath:a,socketDir:i,isNamedPipe:!1,relocated:!1};let l=o.join(e.tmpDir??Bh.tmpdir(),`kynver-brokers-${t}`);return{socketPath:o.join(l,`${n}.sock`),socketDir:l,isNamedPipe:!1,relocated:!0}}function lc(e){e.socketDir&&(sI(e.socketDir,{recursive:!0,mode:448}),oI(e.socketDir,448))}var ko=class e{server;opts;now;fetchImpl;grantedTools;connections=new Set;sockets=new Set;revoked=!1;closed=!1;constructor(r){if(typeof r.identity?.verify!="function")throw new Error("WorkerBroker requires an explicit identity posture (S11) \u2014 see worker-broker/identity.ts");this.opts=r,this.now=r.now??Date.now,this.fetchImpl=r.fetchImpl??fetch,this.grantedTools=Gn(r.capabilities),this.server=cI.createServer(t=>{this.handleConnection(t)}),this.server.on("error",()=>{})}static async start(r){let t=new e(r);if(lc(r.address),await new Promise((n,o)=>{t.server.once("error",o),t.server.listen(r.address.socketPath,()=>{t.server.removeListener("error",o),n()})}),!r.address.isNamedPipe)try{uI(r.address.socketPath,384)}catch{}return t}get identitySummary(){return this.opts.identity.summary}get toolDescriptors(){return this.grantedTools.filter(Xt).map(r=>Xn[r])}async revoke(){this.revoked=!0,await this.close()}async close(){if(!this.closed){this.closed=!0;for(let r of this.sockets)r.destroy();if(this.sockets.clear(),this.connections.clear(),await new Promise(r=>this.server.close(()=>r())),!this.opts.address.isNamedPipe)try{dI(this.opts.address.socketPath)}catch{}}}refuse(r,t){this.opts.onRefusal?.(r,t)}async handleConnection(r){this.sockets.add(r),r.on("close",()=>{this.sockets.delete(r),this.connections.delete(r)});for(let o of this.connections)(o.destroyed||o.readableEnded)&&this.connections.delete(o);if(this.connections.size>=1){this.refuse("concurrent_connection","a second concurrent connection was attempted while the worker's own connection was open"),this.write(r,{id:"",ok:!1,reason:"concurrent_connection",error:"worker tools are already in use for this task"}),r.end();return}this.connections.add(r);let t=await this.opts.identity.verify({socket:r,workerPid:this.opts.workerPid});if(!t.ok){this.refuse("identity_refused",t.detail),this.write(r,{id:"",ok:!1,reason:"identity_refused",error:"caller could not be identified as this worker"}),r.end();return}let n="";r.setEncoding("utf8"),r.on("data",o=>{if(n+=o,Buffer.byteLength(n,"utf8")>1048576){this.refuse("request_too_large","request exceeded the line cap"),this.write(r,{id:"",ok:!1,reason:"request_too_large",error:"request exceeded the maximum size"}),r.end();return}let s=n.indexOf(`
 `);for(;s>=0;){let i=n.slice(0,s);n=n.slice(s+1),i.trim()&&this.handleLine(r,i),s=n.indexOf(`
-`)}})}write(r,t){if(!r.destroyed)try{r.write(tl(t))}catch{}}async handleLine(r,t){let n=nl(t);if(!n.ok){this.refuse(n.reason,n.error),this.write(r,{id:n.id,ok:!1,reason:n.reason,error:n.error});return}let{request:o}=n;if(this.revoked||this.closed){this.refuse("revoked","grant revoked"),this.write(r,{id:o.id,ok:!1,reason:"revoked",error:"worker tools are no longer available for this task"});return}if(this.now()>=this.opts.expiresAt){this.refuse("grant_expired","grant expired"),this.write(r,{id:o.id,ok:!1,reason:"grant_expired",error:"worker tools are no longer available for this task"});return}if(o.op==="list_tools"){this.write(r,{id:o.id,ok:!0,tools:this.toolDescriptors});return}if(!Gt(o.name)){this.refuse("unknown_tool",o.name),this.write(r,{id:o.id,ok:!1,reason:"unknown_tool",error:`unknown tool: ${o.name}`});return}if(!this.grantedTools.includes(o.name)){this.refuse("capability_not_granted",o.name),this.write(r,{id:o.id,ok:!1,reason:"capability_not_granted",error:`tool not granted for this task: ${o.name}`});return}try{let s=await Ps({apiBaseUrl:this.opts.apiBaseUrl,agentOsId:this.opts.agentOsId,taskId:this.opts.taskId,token:this.opts.token,fetchImpl:this.fetchImpl},o.name,o.args??{});this.write(r,{id:o.id,ok:!0,result:s})}catch(s){let i=s instanceof Error?s.message:"request failed";this.refuse("upstream_error",i),this.write(r,{id:o.id,ok:!1,reason:"upstream_error",error:i})}}};var kh={posture:"scoped",summary:"scoped: per-worker endpoint in an owner-only (0700) directory, one connection at a time. Peer identity is not observed \u2014 another process of the same OS user is not excluded.",verify:async()=>({ok:!0})};function Ql(){return kh}var xA=7200*1e3;async function yh(e,r){let t=typeof r.name=="string"?r.name.trim():"";if(!t||t==="undefined"||t==="null")throw new Error(`worker name is required and must be a real identifier (got: ${JSON.stringify(r.name)})`);let n=x(t);if(e.workers?.[n])throw new Error(`worker already exists in run ${e.id}: ${n}`);if(!r.task)throw new Error(`missing task text for worker ${n}`);let o=r.routingRule||r.requestedModel?{provider:r.provider||wr,model:r.model,rule:r.routingRule||"explicit:spawn",requestedModel:r.requestedModel??r.model}:Ns({explicitModel:r.model,explicitProvider:r.provider,explicitProviderIsOperatorOverride:!!r.provider?.trim(),configuredProvider:U().workerProvider}),s=Rf(o.provider),i=o.model;if(s.preflightModel){let D=s.preflightModel(r.model);if(!D.ok)throw new Error(`model preflight failed for provider "${s.name}": ${D.note??"invalid model/provider combination"}`);D.normalized&&console.error(`[supervisor] ${n}: ${D.note}`),i=D.model}let{worktreesDir:a}=le(),l=Xt.join(M(e.id),"workers",n);wA(l,{recursive:!0});let c=Xt.join(a,e.id,n),u=r.repairTargetBranch?.trim()||void 0,d=u||r.branch||`agent/${e.id}/${n}`;if(SA(c))throw new Error(`worktree path already exists: ${c}`);if(Q(e.repo,["fetch","origin","--prune"],{allowFailure:!0}),u)dh(e.repo,c,u);else{let D=mf({baseCommit:e.baseCommit,base:e.base,verifyRef:L=>Q(e.repo,["rev-parse","--verify","--quiet",`${L}^{commit}`],{allowFailure:!0}).trim().length>0});D.repaired&&(console.error(`[supervisor] ${n}: run baseCommit ${e.baseCommit||"<empty>"} invalid \u2014 repaired to ${D.ref} (${D.source})`),e.baseCommit=Q(e.repo,["rev-parse",D.ref],{allowFailure:!0}).trim()||D.ref,Pe(e)),Q(e.repo,["worktree","add","-b",d,c,e.baseCommit],{throwError:!0})}let p=Xt.join(l,"stdout.jsonl"),m=Xt.join(l,"stderr.log"),f=Xt.join(l,"heartbeat.jsonl"),b=kf({task:r.task,ownedPaths:r.ownedPaths||[],worktreePath:c,heartbeatPath:f,planId:r.planId,taskId:r.taskId,instructionPolicyMarkdown:r.instructionPolicyMarkdown,memoryQualityMarkdown:r.memoryQualityPromptMarkdown??r.memoryQualityCapture?.promptMarkdown??null,personaMarkdown:r.personaMarkdown,contextEnvelopeMarkdown:r.contextEnvelopeMarkdown,runtimeEnvelopeMarkdown:r.runtimeEnvelopeMarkdown,model:i,repairTargetPrUrl:r.repairTargetPrUrl,repairTargetBranch:r.repairTargetBranch??(u||void 0)}),k=process.env.KYNVER_HARNESS_TASK_ID,R=process.env.KYNVER_HARNESS_AGENT_OS_ID;r.taskId&&(process.env.KYNVER_HARNESS_TASK_ID=String(r.taskId)),r.agentOsId&&(process.env.KYNVER_HARNESS_AGENT_OS_ID=String(r.agentOsId));let g=Ks({title:r.taskTitle,personaSlug:r.personaSlug,parentTaskId:r.parentTaskId,executorRef:r.executorRef}),h,E,P,S,w=r.workerMcpToken?.trim();if(w&&ol(s.name)&&Hn()){let D=Aa();D&&r.agentOsId&&r.taskId?(E={apiBaseUrl:D,agentOsId:String(r.agentOsId),taskId:String(r.taskId),token:w,capabilities:r.workerMcpCapabilities??null},console.error(`[supervisor] ${n}: worker tools enabled (in-process, no config on disk)`)):console.error(`[supervisor] ${n}: worker tools skipped (missing API base URL or task identity) \u2014 spawning without tools`)}let V=xm(s.name);if(w&&V&&Hn()){let D=Aa();if(D&&r.agentOsId&&r.taskId){let L=zl({agentOsId:String(r.agentOsId),workerKey:l}),Ke=await uo.start({address:L,apiBaseUrl:D,agentOsId:String(r.agentOsId),taskId:String(r.taskId),token:w,capabilities:r.workerMcpCapabilities??null,expiresAt:r.workerMcpExpiresAt??Date.now()+xA,workerPid:process.pid,identity:Ql(),onRefusal:T=>console.error(`[supervisor] ${n}: worker tools refused a call (${T})`)});if(Pl(l,Ke),s.name==="codex"){let T=qf({workerDir:l,brokerSocketPath:L.socketPath});if(T.ok){let G=Jf(T.codexHome,al());G.ok?(P=T.codexHome,h=P):(ro(l),await Kr(l),console.error(`[supervisor] ${n}: worker tools skipped \u2014 codex rejected the generated config (${G.detail}); spawning with the normal environment`))}else await Kr(l),console.error(`[supervisor] ${n}: worker tools skipped \u2014 ${T.detail}`)}else if(s.name==="cursor"){let T=Gf({worktreePath:c,brokerSocketPath:L.socketPath});T.ok?h=T.configPath:(await Kr(l),console.error(`[supervisor] ${n}: worker tools skipped \u2014 ${T.detail}`))}else if(s.name==="gemini"&&Os(Is())==="antigravity"){let T=rg({worktreePath:c,brokerSocketPath:L.socketPath});T.ok?h=T.configPath:(await Kr(l),console.error(`[supervisor] ${n}: worker tools skipped \u2014 ${T.detail}`))}else if(s.name==="gemini"){let T=ng({workerDir:l,brokerSocketPath:L.socketPath});T.ok?(S=T.geminiCliHome,h=S):(await Kr(l),console.error(`[supervisor] ${n}: worker tools skipped \u2014 ${T.detail}`))}else h=Cm({workerDir:l,brokerSocketPath:L.socketPath});h&&console.error(`[supervisor] ${n}: worker tools enabled via broker (${Ke.identitySummary})`)}else console.error(`[supervisor] ${n}: worker MCP tools skipped (missing API base URL or task identity) \u2014 spawning without tools`)}let $;try{$=s.start({name:n,task:r.task,ownedPaths:r.ownedPaths,model:i,branch:d,worktreePath:c,workerDir:l,stdoutPath:p,stderrPath:m,heartbeatPath:f,prompt:b,reviewWorker:g,executionMode:r.executionMode??"write",...E?{workerToolGrant:E}:{},...P?{codexHome:P}:{},...S?{geminiCliHome:S}:{},...h?{mcpConfigPath:h,mcpAllowedTools:wm(r.workerMcpCapabilities)}:{}})}catch(D){throw h&&(_s(l),js(c),ro(l),Ys(l),Gs(c),Yt(l)),Q(e.repo,["worktree","remove","--force",c],{allowFailure:!0}),Q(e.repo,["branch","-D",d],{allowFailure:!0}),D}finally{k===void 0?delete process.env.KYNVER_HARNESS_TASK_ID:process.env.KYNVER_HARNESS_TASK_ID=k,R===void 0?delete process.env.KYNVER_HARNESS_AGENT_OS_ID:process.env.KYNVER_HARNESS_AGENT_OS_ID=R}let _=rf($.model,i,s.defaultModel),Z=U(),he=gr(process.env,Z),Ze=We().runnerId,dr=es({boxKind:he.boxKind,config:Z,env:process.env}),se={name:n,runId:e.id,status:"running",pid:$.pid,model:_,provider:o.provider,branch:d,worktreePath:c,workerDir:l,stdoutPath:p,stderrPath:m,heartbeatPath:f,ownedPaths:r.ownedPaths,...r.agentOsId?{agentOsId:String(r.agentOsId)}:{},...r.taskId?{taskId:String(r.taskId)}:{},...r.planId?{planId:String(r.planId)}:{},...r.instructionPolicyFingerprint?{instructionPolicyFingerprint:String(r.instructionPolicyFingerprint)}:{},...r.instructionPolicyEvidence?{instructionPolicyEvidence:r.instructionPolicyEvidence}:{},...r.memoryQualityCapture?{memoryQualityCapture:r.memoryQualityCapture}:{},...r.personaSlug?{personaSlug:String(r.personaSlug)}:{},...r.personaEvidence?{personaEvidence:r.personaEvidence}:{},...r.contextEnvelopeEvidence?{contextEnvelopeEvidence:r.contextEnvelopeEvidence}:{},...r.runtimeEnvelopeEvidence?{runtimeEnvelopeEvidence:r.runtimeEnvelopeEvidence}:{},...r.leaseOwner?{leaseOwner:String(r.leaseOwner)}:{},...r.leaseToken?{leaseToken:String(r.leaseToken)}:{},...r.dispatched?{dispatched:!0}:{},...!r.agentOsId||!r.taskId?{localOnly:!0}:{},routingRule:o.rule,...o.requestedModel?{requestedModel:o.requestedModel}:{},...o.orchestrationAudit?{orchestrationAudit:o.orchestrationAudit}:{},...r.executorRef?{executorRef:String(r.executorRef)}:{},...r.parentTaskId?{parentTaskId:String(r.parentTaskId)}:{},...r.taskTitle?{taskTitle:String(r.taskTitle)}:{},...r.taskPrUrl?{taskPrUrl:String(r.taskPrUrl)}:{},...r.repairTargetPrUrl?{repairTargetPrUrl:String(r.repairTargetPrUrl)}:{},...r.repairTargetBranch?{repairTargetBranch:String(r.repairTargetBranch)}:{},executionMode:r.executionMode??"write",boxKind:he.boxKind,boxId:dr,runtimeId:Ze,startedAt:new Date().toISOString()};if(F(e.id,se),El(l,$.pid),e.workers={...e.workers||{},[n]:{workerDir:l,statusPath:Xt.join(l,"worker.json")}},e.status="running",Pe(e),se.agentOsId&&se.taskId){let D;try{D=uh({runId:e.id,workerName:n,workerDir:l,agentOsId:se.agentOsId})}catch(L){let Ke=`completion sidecar failed to spawn: ${L.message}`;se.completionBlocker=Ke,F(e.id,se)}if(D)D.pid&&(se.completionSidecarPid=D.pid,F(e.id,se));else{let L="completion sidecar failed to spawn (CLI not found or spawn error)";se.completionBlocker=L,se.completionSidecarSpawnFailedAt=new Date().toISOString(),F(e.id,se)}}return se}K();In();function _A(e,r){let t=ds(r)?.trim();return t||Ye("KYNVER_RUNNER_TOKEN",e)||Ye("OPENCLAW_RUNNER_TOKEN",e)||null}function CA(e){let r=nt()?.trim();return r||Ye("KYNVER_API_KEY",e)||Ye("KYNVER_RUNTIME_SECRET",e)||Ye("KYNVER_CRON_SECRET",e)||Ye("OPENCLAW_CRON_SECRET",e)||null}async function Rh(e,r={}){let t=r.env??process.env,n=r.nowMs??Date.now(),o=r.timeoutMs??8e3,s=new Date(n).toISOString(),i=r.fetcher??fetch,a=_A(t,e.agentOsId),l=CA(t),c="none",u={};if(a)c="runner_token",u["X-Kynver-Runner-Token"]=a;else if(l)c="api_key",u["X-Kynver-Service-Secret"]=l;else return{reachable:!1,authSource:"none",endpoint:null,httpStatus:null,responseMs:null,probedAt:s,error:"No runner token or API key found \u2014 set KYNVER_RUNNER_TOKEN, store runnerToken in ~/.kynver/credentials, or complete M0.3 install"};let d=`${e.apiBaseUrl}/api/agent-os/runner-token/verify`,p=Date.now();try{let m=AbortSignal.timeout(o),f=await i(d,{method:"GET",headers:{...u,Accept:"application/json","X-Kynver-Agent-Os-Id":e.agentOsId},signal:m}),b=Date.now()-p,k=f.status<500;return{reachable:k,authSource:c,endpoint:d,httpStatus:f.status,responseMs:b,probedAt:s,error:k?null:`MCP endpoint returned HTTP ${f.status} \u2014 server error or misconfigured KYNVER_API_URL`}}catch(m){let f=Date.now()-p,b=m instanceof Error?m.message:String(m);return{reachable:!1,authSource:c,endpoint:d,httpStatus:null,responseMs:f,probedAt:s,error:`MCP endpoint unreachable: ${b}`}}}kn();function EA(e,r){let t=e.KYNVER_API_URL?.trim()||e.KYNVER_CRON_FIRE_BASE_URL?.trim()||r.apiBaseUrl?.trim()||null;return t?gn(t)??null:null}function PA(e,r){return(e.KYNVER_DEFAULT_REPO?.trim()||e.KYNVER_HARNESS_REPO?.trim()||r.defaultRepo?.trim()||null)??null}function AA(e,r,t){let n=e.KYNVER_HARNESS_ROOT?.trim()||r.harnessRoot?.trim()||null;return n||t||null}function vh(e,r={}){let t=r.env??process.env,n=r.nowMs??Date.now(),o=r.config??{},s=EA(t,o);if(!s)return{ok:!1,code:"missing_api_base_url",detail:"No API base URL found. Set KYNVER_API_URL, or run `kynver setup --api-base-url <url>`."};let i=(t.KYNVER_AGENT_OS_ID??t.OPENCLAW_AGENT_OS_ID??o.agentOsId??"").trim();if(i&&i!==e.agentOsId)return{ok:!1,code:"workspace_mismatch",detail:`envelope workspace "${e.agentOsId}" does not match local config "${i}"`};let a=PA(t,o),l=AA(t,o,a);return{ok:!0,context:{jobId:e.jobId,agentOsId:e.agentOsId,taskId:e.taskId,repoPath:a,worktreeBase:l,apiBaseUrl:s,hydratedAt:new Date(n).toISOString()}}}O();K();import{mkdirSync as Sh}from"node:fs";import{homedir as IA,tmpdir as l1}from"node:os";import li from"node:path";function wh(){let e=process.env.KYNVER_STATE_ROOT;return e?li.resolve(e):li.join(IA(),".kynver","state")}function ci(){return li.join(wh(),"plan-outbox")}function OA(){return li.join(wh(),"plan-outbox-archive")}function xh(){let e=ci(),r=OA();return Sh(e,{recursive:!0}),Sh(r,{recursive:!0}),{outboxDir:e,archiveDir:r}}var m1=600*1e3,po={storeFailures:0,corruptItemsSeen:0,corruptItemsQuarantined:0,duplicateDrainsObserved:0,halfArchivesCompleted:0};function _h(){return{"planOutbox.storeFailures":po.storeFailures,"planOutbox.corruptItemsSeen":po.corruptItemsSeen,"planOutbox.corruptItemsQuarantined":po.corruptItemsQuarantined,"planOutbox.duplicateDrainsObserved":po.duplicateDrainsObserved,"planOutbox.halfArchivesCompleted":po.halfArchivesCompleted}}import{existsSync as MA,readFileSync as DA,renameSync as k1,readdirSync as y1,rmSync as R1,writeFileSync as v1,unlinkSync as b1}from"node:fs";import Ch from"node:path";function Eh(e){if(!MA(e))return null;try{return JSON.parse(DA(e,"utf8"))}catch{return null}}function ui(e){let{outboxDir:r}=xh();return{jsonPath:Ch.join(r,`${e.id}.json`),bodyPath:Ch.join(r,e.bodyPath)}}import KA from"node:path";function rc(e){let r=KA.join(ci(),`${e}.json`);return Eh(r)}function tc(e){let r=ui(e);return["## Plan persistence risk","",`AgentOS plan write is **not** confirmed (${e.userStatus}).`,`- outboxId: \`${e.id}\``,e.planId?`- planId: \`${e.planId}\``:"- planId: (pending \u2014 create not yet applied)",`- outbox: \`${r.jsonPath}\``,`- body: \`${r.bodyPath}\``,"","Drain when approval/connectivity returns: `kynver plan outbox drain`"].join(`
-`)}function nc(e){let r=e.metadata&&typeof e.metadata=="object"?e.metadata:null,t=typeof e.planPersistenceOutboxId=="string"&&e.planPersistenceOutboxId||(r&&typeof r.planPersistenceOutboxId=="string"?r.planPersistenceOutboxId:void 0);return t?{outboxId:t,jsonPath:typeof e.planPersistenceOutboxPath=="string"?e.planPersistenceOutboxPath:r&&typeof r.planPersistenceOutboxPath=="string"?r.planPersistenceOutboxPath:void 0,bodyPath:typeof e.planPersistenceBodyPath=="string"?e.planPersistenceBodyPath:r&&typeof r.planPersistenceBodyPath=="string"?r.planPersistenceBodyPath:void 0}:null}B();function oc(e){return e?.trim()?e.trim():null}function Ph(e,r){let t=oc(e.boxKind),n=oc(e.runnerId),o=oc(e.harnessRoot);return t&&t!==r.boxKind?{ok:!1,reason:`run ${e.id} belongs to box "${t}" but this host is "${r.boxKind}" \u2014 use a run under ${r.harnessRoot}`}:n&&n!==r.runnerId?{ok:!1,reason:`run ${e.id} is bound to runner "${n}" but this host is "${r.runnerId}"`}:o&&o!==r.harnessRoot?{ok:!1,reason:`run ${e.id} harness root "${o}" does not match this host "${r.harnessRoot}"`}:!t||!n||!o?(e.boxKind=r.boxKind,e.runnerId=r.runnerId,e.harnessRoot=r.harnessRoot,Pe(e),{ok:!0,stamped:!0}):{ok:!0}}K();On();function Ah(e=process.env){return Lt(U(),e,{requireExplicitBoxKind:!0})}function Ih(e){return[...e.errors,...e.warnings].join("; ")}async function mo(e){let r=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/release`,t;try{t=await J(r,e.secret,{agentOsId:e.agentOsId,leaseOwner:e.leaseOwner,...e.leaseToken?.trim()?{leaseToken:e.leaseToken.trim()}:{},...e.failureDetail?{failureDetail:e.failureDetail}:{}},{agentOsId:e.agentOsId,baseUrl:e.baseUrl})}catch(s){return{released:!1,httpOk:!1,transportError:!0,releaseResponse:{ok:!1,error:s.message}}}let n=t.response;return{released:t.ok===!0||n?.ok===!0,httpOk:t.ok===!0,transportError:!1,releaseResponse:t.response??t}}function Qt(e){if(!e||typeof e!="object")return!1;let r=e;return[r.agentOsId,r.subjectTaskId,r.reviewTaskId,r.signature].every(t=>typeof t=="string"&&!!t)&&/^https:\/\/github\.com\/[^/]+\/[^/]+\/pull\/[1-9]\d*$/.test(r.prUrl)&&/^[a-f0-9]{40}$/.test(r.headSha)&&/^[a-f0-9]{64}$/.test(r.reviewGenerationSha256)&&Number.isSafeInteger(r.reviewAttempt)&&r.reviewAttempt>0&&typeof r.acceptedAt=="string"&&Number.isFinite(Date.parse(r.acceptedAt))}function Oh(e,r){return e.signature===r.signature&&e.agentOsId===r.agentOsId&&e.subjectTaskId===r.subjectTaskId&&e.prUrl===r.prUrl&&e.reviewTaskId===r.reviewTaskId&&e.reviewAttempt===r.reviewAttempt&&e.reviewGenerationSha256===r.reviewGenerationSha256&&e.headSha===r.headSha&&e.acceptedAt===r.acceptedAt}import{spawnSync as Vh}from"node:child_process";var Th=new Set(["SUCCESS","SKIPPED","NEUTRAL"]);function Yr(e){return typeof e.name=="string"&&e.name||typeof e.context=="string"&&e.context||typeof e.workflowName=="string"&&e.workflowName||"unknown check"}function Nh(e){let r=typeof e.completedAt=="string"&&e.completedAt||typeof e.startedAt=="string"&&e.startedAt;if(!r)return 0;let t=Date.parse(r);return Number.isFinite(t)?t:0}function Mh(e){let r=Array.isArray(e)?e:[],t=new Map;for(let n of r){let o=n&&typeof n=="object"?n:{},s=Yr(o),i=t.get(s);(!i||Nh(o)>=Nh(i))&&t.set(s,o)}return[...t.values()]}function HA(e){let r=typeof e.detailsUrl=="string"&&e.detailsUrl||typeof e.details_url=="string"&&e.details_url||typeof e.html_url=="string"&&e.html_url||"",t=typeof e.workflowName=="string"?e.workflowName.trim():"",n=e.app&&typeof e.app=="object"?e.app:null,o=typeof n?.slug=="string"?n.slug:"";return t.length>0||o==="github-actions"||/^https:\/\/github\.com\/[^/]+\/[^/]+\/actions\//i.test(r)}function Dh(e){let r=Mh(e),t=[],n=[],o=[];for(let s of r){if(HA(s)){o.push(Yr(s));continue}let i=typeof s.conclusion=="string"?s.conclusion.toUpperCase():"",a=typeof s.status=="string"?s.status.toUpperCase():"",l=typeof s.state=="string"?s.state.toUpperCase():"";if(!(i&&Th.has(i))){if(i){n.push(`${Yr(s)}=${i}`);continue}if(!(l&&Th.has(l))){if(l&&l!=="PENDING"&&l!=="EXPECTED"){n.push(`${Yr(s)}=${l}`);continue}if(l==="PENDING"||l==="EXPECTED"){t.push(`${Yr(s)}=${l}`);continue}if(a&&a!=="COMPLETED"){t.push(`${Yr(s)}=${a}`);continue}t.push(`${Yr(s)}=PENDING`)}}}return{pending:t,failed:n,ignoredActions:o}}function Wh(e){return Mh(e).some(t=>{let n=Yr(t),o=typeof t.conclusion=="string"?t.conclusion.toUpperCase():"",s=typeof t.state=="string"?t.state.toUpperCase():"";return/^vercel/i.test(n)&&(o==="SUCCESS"||s==="SUCCESS")})}var $A=new Set(["CLEAN","HAS_HOOKS"]);function Lh(e,r){let t=e==="UNSTABLE"&&r.ignoredActions.length>0;return!$A.has(e)&&!t?`mergeStateStatus is ${e}`:null}import{spawnSync as jA}from"node:child_process";function Uh(){if(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim())return{source:"env",configured:!0,reason:"GitHub token already configured in environment"};let e=jA("gh",["auth","token"],{windowsHide:!0,encoding:"utf8",stdio:["ignore","pipe","pipe"]});if(e.status!==0)return{source:"missing",configured:!1,reason:typeof e.stderr=="string"&&e.stderr.trim()?e.stderr.trim():"gh auth token failed; run `gh auth login` on this machine"};let r=typeof e.stdout=="string"?e.stdout.trim():"";return r?(process.env.GH_TOKEN=r,{source:"gh-cli",configured:!0,reason:"Using local GitHub CLI auth for daemon land_pr merge"}):{source:"missing",configured:!1,reason:"gh auth token returned an empty token; run `gh auth login` on this machine"}}import{createHash as VA,randomUUID as GA}from"node:crypto";import{closeSync as Bh,fsyncSync as Fh,mkdirSync as YA,openSync as Kh,realpathSync as qA,writeFileSync as JA}from"node:fs";import sc from"node:path";function $h(e){return!!e&&[e.agentOsId,e.taskId,e.runId,e.workerName,e.leaseOwner,e.leaseToken,e.receiptDir].every(r=>typeof r=="string"&&!!r.trim())}function Hh(e,r,t,n){YA(e,{recursive:!0,mode:448});let o=qA(e),s=Kh(sc.join(o,`${r}.${t}.json`),"wx",384);try{JA(s,JSON.stringify({...n,phase:t},null,2)+`
-`),Fh(s)}finally{Bh(s)}for(let i=o;;i=sc.dirname(i)){let a=Kh(i,"r");try{Fh(a)}catch(l){if(!zA(l))throw l}finally{Bh(a)}if(i===sc.dirname(i))break}}function zA(e,r=process.platform){return r==="win32"&&e?.code==="EPERM"}function jh(e,r,t,n){let o={acceptedReview:n,agentOsId:e.agentOsId,taskId:e.taskId,runId:e.runId,workerName:e.workerName,leaseOwner:e.leaseOwner,leaseTokenSha256:VA("sha256").update(e.leaseToken).digest("hex")},s={...o,prUrl:r,invocationId:GA(),startedAt:new Date().toISOString(),finishedAt:null,headSha:t,mergedAt:null,mergeCommit:null,source:"daemon_land_pr",mergeInvoked:!1};return Hh(e.receiptDir,s.invocationId,"pending",s),{finish(i){let a={...o,...i,invocationId:s.invocationId,startedAt:s.startedAt,finishedAt:new Date().toISOString()};return Hh(e.receiptDir,s.invocationId,"finished",{...s,...a}),a}}}function ac(e){return e?.trim()?["--repo",e.trim()]:[]}function Gh(e){let r=/github\.com\/([^/]+)\/([^/]+)\/pull\/\d+/i.exec(e.trim());return r?`${r[1]}/${r[2]}`:null}function Yh(e,r,t){let n=e.gh(r,t);if(n.status!==0)throw new Error(n.stderr||n.stdout||`gh ${t.join(" ")} failed`);return JSON.parse(n.stdout||"{}")}var XA=/^##\s*(test\s*plan|verification|test\s*evidence|verify)\b/im,QA=/typecheck|npm run (test|build|typecheck)|vitest|tsc\b|verify-pr-local|local verify|local-verify|tests? (pass|green)|build green|node --test/i,ZA=/^docs[(:]/i,eI=/docs[- ]only|documentation only|no[- ]code change|no code changes|low[- ]risk|plan tracker only|markdown only/i;function rI(e){let r=typeof e.title=="string"?e.title.trim():"",t=typeof e.body=="string"?e.body.trim():"",n=ZA.test(r)||eI.test(t),o=XA.test(t),s=QA.test(t);return n||o||s||e.vercelCheckSuccess===!0}function tI(e){if(!rI({title:e.title,body:e.body,vercelCheckSuccess:Wh(e.statusCheckRollup)}))throw new Error(`PR #${e.number} lacks landing verification evidence \u2014 add ## Test plan / ## Verification with local commands, Vercel preview, or docs/no-code rationale`)}function nI(e){if(e.state!=="OPEN")throw new Error(`PR #${e.number} is ${e.state}, not OPEN`);if(e.isDraft)throw new Error(`PR #${e.number} is still a draft`);let r=Dh(e.statusCheckRollup);if(r.failed.length>0)throw new Error(`PR #${e.number} has failing checks: ${r.failed.join(", ")}`);if(r.pending.length>0)throw new Error(`PR #${e.number} has pending checks: ${r.pending.join(", ")}`);let t=Lh(e.mergeStateStatus,r);if(t)throw new Error(`PR #${e.number} ${t}`)}function oI(e){nI(e),tI(e)}function sI(e){try{return oI(e),null}catch(r){return r instanceof Error?r.message:String(r)}}function iI(e,r,t,n){if(!n?.trim())return;let o=encodeURI(`heads/${n}`);e.gh(r,["api","-X","DELETE",`repos/${t}/git/refs/${o}`])}function aI(e,r,t){if(t?.trim())return t.trim();let n=e.gh(r,["repo","view","--json","nameWithOwner"]);if(n.status!==0)throw new Error(n.stderr||"Could not resolve GitHub repo");let o=JSON.parse(n.stdout||"{}");if(!o.nameWithOwner)throw new Error("Could not resolve GitHub repo");return o.nameWithOwner}function lI(e,r){if(!r?.trim())return;let t=Vh("git",["worktree","list","--porcelain"],{windowsHide:!0,cwd:e,encoding:"utf8"});if(t.status!==0)return;let n=String(t.stdout||"").split(/\r?\n/),o=null,s=null;for(let i of n){if(i.startsWith("worktree ")){o=i.slice(9).trim(),s=null;continue}i.startsWith("branch ")&&o&&(s=i.slice(7).trim(),s.endsWith(`/${r}`)&&Vh("git",["worktree","remove","--force",o],{windowsHide:!0,cwd:e,encoding:"utf8"}))}}async function qh(e){let r=e.cwd??process.cwd(),t=e.exec??$s,n=e.prUrl.trim();if(!n)throw new Error("prUrl is required");let o=e.acceptedReview,s=()=>({prUrl:n,outcome:"blocked",reason:"accepted_review_required: missing, stale or changed head; fresh independent review required"});if(!Qt(o)||o.prUrl!==n||o.agentOsId!==e.operation?.agentOsId||!e.revalidateAcceptedReview)return s();let i=Uh();if(!i.configured)return{prUrl:n,outcome:"blocked",reason:i.reason};let a=Yh(t,r,["pr","view",n,...ac(e.repo),"--json",["number","url","title","body","state","isDraft","mergeStateStatus","statusCheckRollup","headRefName","headRefOid","mergedAt","mergeCommit"].join(",")]);if(a.state==="MERGED")return{prUrl:a.url||n,outcome:"skipped",mergeCommit:a.mergeCommit?.oid??null,provenance:{attribution:"preexisting_merge",mergeInvoked:!1,headSha:a.headRefOid??null,mergedAt:a.mergedAt??null,mergeCommit:a.mergeCommit?.oid??null},reason:`PR #${a.number} is already merged \u2014 land_pr no-op (redelivery)`};if(a.headRefOid?.toLowerCase()!==o.headSha)return s();let l=sI(a);if(l)return e.skipNotReady?{prUrl:a.url||n,outcome:"skipped",reason:l}:{prUrl:a.url||n,outcome:"blocked",reason:l};if(e.dryRun)return{prUrl:a.url||n,outcome:"skipped",reason:"dry-run: PR is ready to merge"};if(!a.headRefOid||!/^[a-f0-9]{40}$/i.test(a.headRefOid)||!$h(e.operation))return{prUrl:n,outcome:"blocked",reason:"land_pr requires observed headRefOid and claimed dispatch operation identity"};let c=String(a.number),u=await e.revalidateAcceptedReview().catch(()=>null);if(!Qt(u)||!Oh(o,u))return s();let d=jh(e.operation,n,o.headSha,o),p;try{p=t.gh(r,["pr","merge",c,...ac(e.repo),"--squash","--match-head-commit",o.headSha])}catch{let k=d.finish({attribution:"unconfirmed",mergeInvoked:!0,headSha:a.headRefOid,mergedAt:null,mergeCommit:null,mergeExitCode:null});return{prUrl:n,outcome:"blocked",reason:"merge invocation threw; outcome unconfirmed",provenance:k}}let m=(k,R)=>d.finish({attribution:R,mergeInvoked:!0,headSha:a.headRefOid,mergedAt:k?.mergedAt??null,mergeCommit:k?.mergeCommit?.oid??null,mergeExitCode:p.status});if(p.status!==0){let k=ic(t,r,c,e.repo);return k?{prUrl:k.url||a.url||n,outcome:"skipped",mergeCommit:k.mergeCommit?.oid??null,provenance:m(k,"external_merge_observed"),reason:`PR #${a.number} is already merged \u2014 merged by another lane during land_pr (race)`}:{prUrl:a.url||n,outcome:"blocked",reason:p.stderr||p.stdout||"gh pr merge failed",provenance:m(null,"unconfirmed")}}let f=ic(t,r,c,e.repo);if(f||(f=ic(t,r,c,e.repo)),!f)return{prUrl:n,outcome:"blocked",reason:"merge command completed but merged state is unconfirmed",provenance:m(null,"unconfirmed")};let b=m(f,"invoked_merge_observed");try{let k=aI(t,r,e.repo);iI(t,r,k,a.headRefName),lI(r,a.headRefName)}catch{}return{prUrl:f?.url||a.url||n,outcome:"merged",provenance:b,mergeCommit:f?.mergeCommit?.oid??null,reason:`Daemon land_pr invoked merge; PR #${a.number} read back merged`}}function ic(e,r,t,n){try{let o=Yh(e,r,["pr","view",t,...ac(n),"--json","number,url,mergedAt,mergeCommit,state"]);return o.state==="MERGED"?o:null}catch{return null}}async function Jh(e){let r=e.decision.task,t=e.decision.acceptedReview,n=String(r.prUrl??"");return qh({prUrl:n,cwd:e.cwd,repo:Gh(n),exec:e.exec,operation:e.operation,acceptedReview:Qt(t)?t:void 0,revalidateAcceptedReview:async()=>{let o=await J(`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(String(r.id))}/landing-review`,e.secret,{leaseToken:r.leaseToken,leaseOwner:r.leaseOwner,attempt:r.attempt},{agentOsId:e.agentOsId,baseUrl:e.baseUrl}),s=o.response;return o.ok&&s?.ok===!0&&Qt(s.acceptedReview)?s.acceptedReview:null}})}K();async function zh(e){let r=await re(e.secret,e.agentOsId,{baseUrl:e.baseUrl}),t=String(e.task.id),n=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/harness/completion`,o=e.report.provenance?.finishedAt??new Date().toISOString(),s={source:"kynver-harness",agentOsId:e.agentOsId,runId:e.runId,workerName:`land-pr-${t}`,taskId:t,leaseToken:e.task.leaseToken??null,startedAt:e.report.provenance?.startedAt??o,finishedAt:o,status:{finalResult:e.report,prUrl:e.report.prUrl,summary:e.report.reason,leaseToken:e.task.leaseToken??null},workerInjection:null},i=await J(n,r,s,{agentOsId:e.agentOsId,baseUrl:e.baseUrl});return{ok:i.ok,status:i.status}}function Xh(){return["## verify_live completion contract","Finish with a JSON finalResult object:","{",'  "prUrl": "<landed pr>",','  "outcome": "passed" | "failed" | "skipped" | "no_mcp_surface",','  "reason": "<human summary>",','  "mergeCommit": "<sha optional>",','  "liveReadback": "<prod readback string from acceptance.liveReadbackQuery>",','  "mcpCalls": [{ "tool": "<name>", "ok": true, "summary": "..." }]',"}","","Drive the feature MCP tools against live production. Do not mark passed without exercising the MCP surface.","When the subject carries an acceptance snapshot, include liveReadback \u2014 the server oracle rejects passed if the original symptom still appears."].join(`
-`)}var cI="dispatch_start_readback_failed:";function pt(e){return`${cI} ${e.trim()}`}function uI(e){return e.branch?.trim()?e.worktreePath?.trim()?e.heartbeatPath?.trim()?e.startedAt?.trim()?null:"missing local worker startedAt":"missing local worker heartbeatPath":"missing local worker worktreePath":"missing local worker branch"}function dI(e){let{snapshot:r,leaseOwner:t,expectedLeaseToken:n,worker:o}=e;if(!r)return{ok:!1,error:pt("task lease snapshot missing after spawn"),detail:{taskId:o.taskId,leaseOwner:t,expectedLeaseToken:n}};if(r.status!=="running")return{ok:!1,error:pt(`AgentOS task status=${r.status} (expected running)`),detail:{taskId:r.taskId,status:r.status,leaseOwner:r.leaseOwner,blocker:r.blocker},snapshot:r};let s=r.leaseOwner?.trim()??"";if(!s||s!==t.trim())return{ok:!1,error:pt(`leaseOwner mismatch (board=${s||"null"}, expected=${t})`),detail:{taskId:r.taskId,boardLeaseOwner:s||null,expectedLeaseOwner:t},snapshot:r};let i=r.leaseToken?.trim()??"";if(!i||i!==n.trim())return{ok:!1,error:pt(`leaseToken mismatch (board=${i||"null"}, expected=${n})`),detail:{taskId:r.taskId,boardLeaseToken:i||null,expectedLeaseToken:n},snapshot:r};let a=uI(o);return a?{ok:!1,error:pt(a),detail:{taskId:o.taskId,worker:o.name},snapshot:r}:r.heartbeatAt?.trim()?o.executorRef?.trim()&&r.executorRef?.trim()&&o.executorRef.trim()!==r.executorRef.trim()?{ok:!1,error:pt(`executorRef mismatch (board=${r.executorRef}, worker=${o.executorRef})`),detail:{taskId:r.taskId,boardExecutorRef:r.executorRef,workerExecutorRef:o.executorRef},snapshot:r}:{ok:!0,snapshot:r}:{ok:!1,error:pt("AgentOS heartbeatAt missing after claim"),detail:{taskId:r.taskId},snapshot:r}}async function Qh(e){let r=await Ds({agentOsId:e.agentOsId,taskIds:[e.taskId],baseUrl:e.baseUrl,secret:e.secret});return dI({snapshot:r.get(e.taskId)??null,leaseOwner:e.leaseOwner,expectedLeaseToken:e.expectedLeaseToken,worker:e.worker})}O();B();function Zh(e,r,t){r.pid&&z(r.pid)&&(rr(r.pid,"SIGTERM"),z(r.pid)&&rr(r.pid,"SIGKILL"));let n={...r,status:"failed",pid:void 0,completionBlocker:t,dispatchStartReadbackFailed:!0};return F(e,n),n}B();function ek(e){let r=typeof e.personaSlug=="string"?e.personaSlug.trim().toLowerCase():"";if(r==="dalton"||r==="lorentz")return!0;let t=typeof e.executorRef=="string"?e.executorRef.trim().toLowerCase():"";if(t.startsWith("expert-lane-pr-review:")||t.startsWith("scheduledjob:")&&e.parentTaskId)return!0;let n=typeof e.title=="string"?e.title.toLowerCase():"";return n.includes("expert pr review")||n.startsWith("[dalton] review")||n.startsWith("[lorentz] review")}async function rk(e){let r=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/review-head-reconcile`,t=await J(r,e.secret,{phase:"worker_start"},{agentOsId:e.agentOsId,baseUrl:e.baseUrl});if(!t.ok)return null;let n=t.response;return n&&typeof n=="object"?n:null}var hl=3600*1e3;function tk(e){let r=e.admissionExhaustion;return!r||typeof r!="object"?null:r}function nk(e){let r=e.dispatchSkipDrain;return!r||typeof r!="object"?null:r}function pI(e){let r=e.harnessWorkerContext;if(!r||typeof r!="object")return null;let t=r,n=typeof t.instructionPolicyMarkdown=="string"?t.instructionPolicyMarkdown:null,o=typeof t.instructionPolicyFingerprint=="string"?t.instructionPolicyFingerprint:null,s=t.instructionPolicyEvidence&&typeof t.instructionPolicyEvidence=="object"?t.instructionPolicyEvidence:null,i=typeof t.personaMarkdown=="string"?t.personaMarkdown:null,a=typeof t.personaEvidence=="object"&&t.personaEvidence&&typeof t.personaEvidence.injectedPersonaSlug=="string"?t.personaEvidence.injectedPersonaSlug:null,l=t.personaEvidence&&typeof t.personaEvidence=="object"?t.personaEvidence:null,c=t.personaInjectionReady===!0,u=typeof t.contextEnvelopeMarkdown=="string"?t.contextEnvelopeMarkdown:null,d=t.contextEnvelopeEvidence&&typeof t.contextEnvelopeEvidence=="object"?t.contextEnvelopeEvidence:null,p=t.contextEnvelopeReady===!0,m=typeof t.runtimeEnvelopeMarkdown=="string"?t.runtimeEnvelopeMarkdown:null,f=fI(t.runtimeEnvelopeReceipt),b=t.runtimeEnvelopeReady===!0,k=t.memoryQualityCapture&&typeof t.memoryQualityCapture=="object"?t.memoryQualityCapture:null,R=typeof t.memoryQualityPromptMarkdown=="string"?t.memoryQualityPromptMarkdown:typeof k?.promptMarkdown=="string"?k.promptMarkdown:null,g=t.workerMcpToolGrant&&typeof t.workerMcpToolGrant=="object"?t.workerMcpToolGrant:null,h=g&&typeof g.token=="string"&&g.token.trim()?g.token.trim():null,E=h&&Array.isArray(g?.capabilities)?g.capabilities.filter(S=>typeof S=="string"&&S.trim().length>0):null,P=h&&typeof g?.exp=="number"&&Number.isFinite(g.exp)?g.exp*1e3:null;return{instructionPolicyMarkdown:n,instructionPolicyFingerprint:o,instructionPolicyEvidence:s,memoryQualityCapture:k,memoryQualityPromptMarkdown:R,personaMarkdown:i,personaSlug:a,personaEvidence:l,personaInjectionReady:c,contextEnvelopeMarkdown:u,contextEnvelopeEvidence:d,contextEnvelopeReady:p,runtimeEnvelopeMarkdown:m,runtimeEnvelopeEvidence:f,runtimeEnvelopeReady:b,workerMcpToken:h,workerMcpCapabilities:E,workerMcpExpiresAt:P}}function mI(e){if(typeof e!="string")return null;let r=e.trim().toLowerCase();return r.length?r:null}function fI(e){if(!e||typeof e!="object")return null;let r=e;return typeof r.envelopeId!="string"||!r.envelopeId.trim()?null:{envelopeId:r.envelopeId,envelopeSchemaVersion:typeof r.envelopeSchemaVersion=="string"?r.envelopeSchemaVersion:void 0,generatedAt:typeof r.generatedAt=="string"?r.generatedAt:void 0,injectedAt:typeof r.injectedAt=="string"?r.injectedAt:void 0,mode:typeof r.mode=="string"?r.mode:void 0,memoryIncludedCount:typeof r.memoryIncludedCount=="number"?r.memoryIncludedCount:void 0,memoryOmittedCount:typeof r.memoryOmittedCount=="number"?r.memoryOmittedCount:void 0,degraded:typeof r.degraded=="boolean"?r.degraded:void 0,degradedReason:typeof r.degradedReason=="string"?r.degradedReason:r.degradedReason===null?null:void 0,auditFingerprint:typeof r.auditFingerprint=="string"?r.auditFingerprint:void 0,promptMarkdownChars:typeof r.promptMarkdownChars=="number"?r.promptMarkdownChars:void 0}}function gI(e,r){let t=[`[AgentOS task ${e.id}] ${e.title}`,"",e.description?String(e.description):"(no description on the board task)","",`Board linkage: agentOsId=${r}, taskId=${e.id}, attempt=${e.attempt}, executor=${e.executor}${e.executorRef?`, executorRef=${e.executorRef}`:""}.`,"This worker was dispatched from the AgentOS board. The harness reports your completion back to the board when you finish."];e.executor==="verify_live"&&t.push("",Xh());let n=nc(e);if(n?.outboxId){let o=rc(n.outboxId);o?t.push("",tc(o)):t.push("","## Plan persistence risk","",`Unconfirmed AgentOS plan write (outboxId=${n.outboxId}).`)}return t.join(`
-`)}function hI(e){let r=new Set;if(e.targetTaskId)return r.add(String(e.targetTaskId)),r;if(e.targetTaskIds)for(let t of String(e.targetTaskIds).split(",")){let n=t.trim();n&&r.add(n)}return r}async function di(e){let r=e.pipeline===!0||e.pipeline==="true";try{let ke=function(){return T.filter(v=>v.started).length},ye=function(v,y){Dn({runId:l.id,agentOsId:u,phase:v,startedCount:ke(),outcomeCount:T.length,cappedStarts:_,...y})},pr=function(){return T.some(v=>(typeof v.error=="string"?v.error:"").startsWith("dispatch_start_readback_failed:"))},nu=function(v){return v.landPrDispatch===!0?!0:v.task?.executor==="land_pr"};var t=ke,n=ye,o=pr,s=nu;let i=Ah();if(!i.ok||!i.identity){let v=Ih(i);if(r)return{ok:!1,error:v,boundary:i};console.error(`run dispatch failed: ${v}`),process.exit(1)}let a=i.identity;for(let v of i.warnings)console.error(`[dispatch] runner-boundary warning: ${v}`);let l=ee(String(fr(String(e.run||""),"--run"))),c=Ph(l,a);if(!c.ok){let v=c.reason??"run does not belong to this runner boundary";if(r)return{ok:!1,error:v,runId:l.id,runnerBoundary:a};console.error(`run dispatch failed: ${v}`),process.exit(1)}c.stamped&&console.error(`[dispatch] stamped run ${l.id} with boxKind=${a.boxKind} runnerId=${a.runnerId}`);let u=String(fr(String(e.agentOsId||""),"--agent-os-id")),d=X(e.baseUrl?String(e.baseUrl):void 0),p=await re(e.secret?String(e.secret):void 0,u,{baseUrl:d}),m=e.execute===!0||e.execute==="true",f=!m,b=We({runId:l.id}),k=Jn(l.id,b.runnerId),R=Mp(),g=R?Wp(l.repo):null,h=new WeakMap;if(R&&m&&!g){let v="desktop_execution_policy_denied:repo_identity_unavailable: the repository has no origin remote";if(r)return{ok:!1,error:v,runId:l.id};console.error(`run dispatch failed: ${v}`),process.exit(1)}let E=e.diskPath?Lr({diskPath:String(e.diskPath)}):Lr({diskPath:l.repo}),P=await Vp({runId:l.id,agentOsId:u,args:e}),S=hI(e),w=S.size>0,V=Number(e.maxStarts)>0?Math.floor(Number(e.maxStarts)):1,$=w?Math.min(V,S.size):V;if(e.reconcileStaleBlockers===!0||e.reconcileStaleBlockers==="true"){let v=`${d}/api/agent-os/by-id/${encodeURIComponent(u)}/lane-hygiene`;try{await J(v,p,{agentOsId:u,dryRun:!1,includeBoardReconcile:!0},{agentOsId:u,baseUrl:d})}catch(y){console.error(`[dispatch] reconcile-stale-blockers lane-hygiene call failed: ${y.message}`)}}let _=f?$:Math.min($,P.slotsAvailable);if(!f&&_<=0){let v={runId:l.id,agentOsId:u,dryRun:!1,skipped:!0,reason:P.reason??"no resource slots",resourceGate:P};if(r)return{ok:!0,...v};console.log(JSON.stringify(v,null,2));return}let Z=fs(l.id),he=`${d}/api/agent-os/by-id/${encodeURIComponent(u)}/tasks/dispatch-next`,Ze=(v,y)=>({agentOsId:u,...y?{claimAuthorization:y}:{},dryRun:f,maxStarts:v,leaseOwner:k,leaseDurationMs:Number(e.leaseMs)>0?Math.floor(Number(e.leaseMs)):hl,runnerDiskGate:E,runnerResourceGate:P,activeHarnessWorkers:Z,runnerPresence:b,harnessBoardSnapshot:ql(l.id),...e.lane?{lane:jp(String(e.lane))}:{},...e.executor?{executor:String(e.executor)}:{},...e.diskPath?{diskPath:String(e.diskPath)}:{},...e.targetTaskId?{targetTaskId:String(e.targetTaskId)}:{},...!e.targetTaskId&&e.targetTaskIds?{targetTaskIds:String(e.targetTaskIds).split(",").map(C=>C.trim()).filter(Boolean)}:{}}),dr=Up(),se=async v=>{let y=R&&g?Dp(g):void 0,C=await J(he,p,Ze(v,y),{agentOsId:u,baseUrl:d,timeoutMs:dr})??{ok:!1,status:0,response:null},N=C.response;if(y&&Array.isArray(N?.result?.started))for(let j of N.result.started)j&&typeof j=="object"&&h.set(j,y.requestNonce);return{dispatch:C,result:N?.result}};f||Dn({runId:l.id,agentOsId:u,phase:"awaiting_dispatch_next",timeoutMs:dr});let D=await se(w||f?_:1);if(!D.dispatch.ok||!D.result){let v=La(D.dispatch.response),y={runId:l.id,agentOsId:u,action:"dispatch",httpStatus:D.dispatch.status,response:D.dispatch.response,authRefreshed:D.dispatch.refreshedAuth===!0,authRefreshFailure:D.dispatch.authRefreshFailure,...v?{timeout:!0}:{}};if(v&&Dn({runId:l.id,agentOsId:u,phase:"timeout",timeout:!0,httpStatus:D.dispatch.status}),r)return{ok:!1,...y};console.log(JSON.stringify(y,null,2)),process.exit(1)}let L=D.result;if(f){let v=tk(L),y=nk(L),C={runId:l.id,agentOsId:u,dryRun:!0,wouldStart:L.started.map(N=>({taskId:N.task.id,title:N.task.title,reason:N.reason})),skipped:L.skipped.map(N=>({taskId:N.task.id,skipReason:N.skipReason,reason:N.reason})),diskGate:L.diskGate,resourceGate:L.resourceGate,inspected:L.inspected,pagesScanned:L.pagesScanned??null,candidatesExhausted:L.candidatesExhausted??null,capacityIdle:v?.capacityIdle===!0,admissionExhaustion:v,dispatchSkipDrain:y};if(r)return{ok:!0,...C};console.log(JSON.stringify(C,null,2));return}let Ke=sf(),T=[],G=[],W=Number(L.inspected)||0,ie=!1;async function H(v,y,C){let N=await mo({baseUrl:d,secret:p,agentOsId:u,taskId:String(v.id),leaseOwner:k,leaseToken:v.leaseToken?String(v.leaseToken):null,failureDetail:y});v.leaseToken&&qt({taskId:String(v.id),leaseToken:String(v.leaseToken).trim()},Wl(y));let j={taskId:v.id,started:!1,error:y,released:N.released,releaseResponse:N.releaseResponse,...C};return T.push(j),ye("outcome",{lastOutcome:j}),!1}async function ov(v){let y=v.task,C=String(y.id);if(w&&!S.has(C))return H(y,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...S]});if(!(y.prUrl?String(y.prUrl):""))return H(y,"land_pr task missing prUrl");try{let j=await Jh({decision:v,baseUrl:d,secret:p,agentOsId:u,cwd:l.repo,operation:{agentOsId:u,taskId:C,runId:l.id,workerName:`land-pr-${C}`,leaseOwner:k,leaseToken:typeof y.leaseToken=="string"?y.leaseToken:"",receiptDir:`${M(l.id)}/land-pr-operations`}}),He=await zh({baseUrl:d,secret:p,agentOsId:u,runId:l.id,task:y,report:j});return He.ok?(T.push({taskId:C,started:!0,landPr:!0,outcome:j.outcome,completionStatus:He.status}),!0):H(y,`land_pr completion POST failed (HTTP ${He.status})`,{landPr:!0,outcome:j.outcome})}catch(j){return H(y,j.message)}}async function sv(v){let y="duplicate_dispatch_prevented: live local worker already owns this task",C=await mo({baseUrl:d,secret:p,agentOsId:u,taskId:String(v.id),leaseOwner:k,leaseToken:v.leaseToken?String(v.leaseToken):null,failureDetail:y});v.leaseToken&&qt({taskId:String(v.id),leaseToken:String(v.leaseToken).trim()},Wl(y));let N={taskId:v.id,started:!1,error:y,alreadyRunning:!0,nonFatal:!0,released:C.released,releaseResponse:C.releaseResponse};return T.push(N),ye("outcome",{lastOutcome:N}),!1}async function iv(v){let y=v.task,C=pI(v),N=String(y.id);if(w&&!S.has(N))return H(y,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...S]});let j=mI(y.personaSlug);if(j&&(!C?.personaInjectionReady||!C.personaMarkdown))return H(y,`persona_injection_required: missing anchored context-envelope persona block for "${j}"`);if(j&&!C?.runtimeEnvelopeReady)return H(y,`runtime_envelope_required: missing AgentRuntimeEnvelope launch receipt for persona "${j}"`);if(df(l.id,N))return sv(y);let He=Number(y.attempt)||1;if(He>Ke.maxTaskAttempts)return H(y,`task attempt ${He} exceeds KYNVER_MAX_TASK_ATTEMPTS (${Ke.maxTaskAttempts})`);let Xr=y.leaseToken?String(y.leaseToken).trim():"";if(!Xr)return H(y,"dispatch_start_failed: claimed task missing leaseToken \u2014 refusing local spawn");let wt=x(`t-${y.id}-a${y.attempt}`),mr=Ns({explicitModel:e.model?String(e.model):void 0,explicitProvider:e.provider?String(e.provider):void 0,explicitProviderIsOperatorOverride:!!e.provider,configuredProvider:U().workerProvider,task:Gp(y)});_g({taskId:N,leaseToken:Xr,runId:l.id,workerName:wt,provider:mr.provider??null});let Ii=nf({task:y,routing:mr,explicitProvider:e.provider?String(e.provider):void 0,explicitModel:e.model?String(e.model):void 0});if(!Ii.ok)return H(y,Ii.error??"model_routing_mismatch",{modelRoutingGuard:Ii});if(ek(y)){let Ce=await rk({agentOsId:u,taskId:N,baseUrl:d,secret:p});if(Ce&&Ce.dispatchable===!1)return H(y,`pr_review_head_reconcile_blocked: ${Ce.reason??Ce.outcome??"stale PR head"}`,{headReconcile:Ce});if(Ce?.activeReviewTaskId&&Ce.activeReviewTaskId!==N)return H(y,`pr_review_head_reconcile_retargeted: active review is ${Ce.activeReviewTaskId}`,{headReconcile:Ce})}let So=Zg(mr.provider);if(!So.ok)return H(y,`provider_quota_exhausted: ${So.reason}`,{nonFatal:!0,providerQuotaPreflight:{provider:So.provider,retryAt:So.retryAtIso}});try{let Ce=y.planId?String(y.planId):void 0,wo=gf({title:y.title?String(y.title):void 0,description:y.description?String(y.description):null,executorRef:y.executorRef?String(y.executorRef):null,prUrl:y.prUrl?String(y.prUrl):null,branch:y.branch?String(y.branch):null}),cu=Ug({runId:l.id,workerName:wt,maxSlots:P.maxConcurrentWorkers,diskActiveWorkers:oa()});if(!cu.admitted)return H(y,`admission_refused: ${cu.reason}`,{nonFatal:!0});let xo=C?.workerMcpToken??null;if(xo&&Hn()){let xt=vh({jobId:`dispatch:${String(y.id)}`,agentOsId:u,taskId:String(y.id)},{config:{agentOsId:u,apiBaseUrl:d}});if(!xt.ok)console.error(`[dispatch] worker tools skipped for task ${String(y.id)}: context hydration failed (${xt.code}: ${xt.detail}) \u2014 spawning without tools`),xo=null;else{let Oi=await Rh(xt.context);Oi.reachable||(console.error(`[dispatch] worker tools skipped for task ${String(y.id)}: tool endpoint probe failed (${Oi.error??`HTTP ${Oi.httpStatus}`}) \u2014 spawning without tools`),xo=null)}}let er=await yh(l,{name:wt,task:gI(y,u),ownedPaths:e.owned?String(e.owned).split(",").map(xt=>xt.trim()).filter(Boolean):[],model:mr.model,provider:mr.provider,routingRule:mr.rule,requestedModel:mr.requestedModel,agentOsId:u,taskId:String(y.id),planId:Ce,branch:wo?.targetPrBranch??void 0,executorRef:y.executorRef?String(y.executorRef):void 0,parentTaskId:y.parentTaskId?String(y.parentTaskId):void 0,taskTitle:y.title?String(y.title):void 0,taskPrUrl:wo?.targetPrUrl??(y.prUrl?String(y.prUrl):void 0),repairTargetPrUrl:wo?.targetPrUrl,repairTargetBranch:wo?.targetPrBranch??void 0,instructionPolicyMarkdown:C?.instructionPolicyMarkdown??null,instructionPolicyFingerprint:C?.instructionPolicyFingerprint??null,instructionPolicyEvidence:C?.instructionPolicyEvidence??null,memoryQualityCapture:C?.memoryQualityCapture??null,memoryQualityPromptMarkdown:C?.memoryQualityPromptMarkdown??null,personaMarkdown:C?.personaMarkdown??null,personaSlug:C?.personaSlug??j,personaEvidence:C?.personaEvidence??null,contextEnvelopeMarkdown:C?.contextEnvelopeMarkdown??null,contextEnvelopeEvidence:C?.contextEnvelopeEvidence??null,runtimeEnvelopeMarkdown:C?.runtimeEnvelopeMarkdown??null,runtimeEnvelopeEvidence:C?.runtimeEnvelopeEvidence??null,workerMcpToken:xo,workerMcpCapabilities:C?.workerMcpCapabilities??null,workerMcpExpiresAt:C?.workerMcpExpiresAt??null,leaseOwner:k,leaseToken:Xr,dispatched:!0,executionMode:gs(y)}),_o=await Qh({agentOsId:u,taskId:String(y.id),leaseOwner:k,expectedLeaseToken:Xr,worker:er,baseUrl:d,secret:p});if(!_o.ok)return Zh(l.id,er,_o.error??"dispatch_start_readback_failed"),Gr(l.id,wt),H(y,_o.error??"dispatch_start_readback_failed",{readback:_o.detail??null});er.leaseToken!==Xr&&(er.leaseToken=Xr,er.leaseOwner=k,F(l.id,er)),ti({taskId:N,leaseToken:Xr}),Mg(l.id,wt);let uu={taskId:y.id,started:!0,worker:er.name,pid:er.pid,branch:er.branch,model:er.model,provider:mr.provider,routingRule:mr.rule,instructionPolicyFingerprint:C?.instructionPolicyFingerprint??null,instructionPolicyRuleCount:Array.isArray(C?.instructionPolicyEvidence?.ruleSlugs)?C.instructionPolicyEvidence.ruleSlugs.length:null,personaSlug:C?.personaSlug??j,personaOperatingRuleCount:C?.personaEvidence?.operatingRuleCount??null};return T.push(uu),ye("worker_started",{lastOutcome:uu}),C?.instructionPolicyFingerprint&&console.error(`[dispatch] task ${N}: instruction policy injected fingerprint=${C.instructionPolicyFingerprint}`),C?.personaSlug&&console.error(`[dispatch] task ${N}: persona context injected slug=${C.personaSlug}`),C?.contextEnvelopeReady&&console.error(`[dispatch] task ${N}: context envelope injected anchor=${C.contextEnvelopeEvidence?.anchorTaskId??N}`),C?.runtimeEnvelopeReady&&console.error(`[dispatch] task ${N}: runtime envelope injected id=${C.runtimeEnvelopeEvidence?.envelopeId??"unknown"}`),!0}catch(Ce){return Gr(l.id,wt),H(y,Ce.message)}}let Ai=new Set;for(let v of Ig(l.id))Ai.add(v);async function ou(v){let y=v.task,C=String(y.id);if(Ai.has(C))return H(y,"dispatch_retry_loop_prevented: task already failed to start this tick");let N=R?Lp({decision:v,leaseOwner:k,repoIdentity:g,requestNonce:h.get(v)??null}):null,j=N&&!N.allow?await H(y,`desktop_execution_policy_denied:${N.code}: ${N.reason}`,{desktopPolicyDenied:N.code,...N.code==="operation_not_approved"?{nonFatal:!0}:{}}):nu(v)?await ov(v):await iv(v);return j||(Ai.add(C),Ag(C,l.id)),j}for(let v of L.started)await ou(v);if(G.push(...L.skipped??[]),w)for(let v of G){let y=String(v.task.id);S.has(y)&&T.push({taskId:y,started:!1,error:`exact_target_not_started:${v.skipReason}`,skipReason:v.skipReason,detail:v.reason??null,requestedTargetTaskIds:[...S]})}for(;!w&&T.length<_;){if(pr()){let C={started:!1,error:"dispatch_circuit_breaker: start readback failed; stopping top-up for this tick",nonFatal:!0};T.push(C),ye("circuit_breaker",{lastOutcome:C});break}let v=await se(1);if(!v.dispatch.ok||!v.result){let C=Bp(v.dispatch.response),N=ke();ie=C&&N>0;let j=La(v.dispatch.response),He={started:!1,error:j?"dispatch_next timed out during top-up":"dispatch_next request failed during top-up",httpStatus:v.dispatch.status,response:v.dispatch.response,...j?{timeout:!0}:{},...ie?{nonFatal:!0,partialTopUp:!0}:{}};T.push(He),ye("top_up_failed",{partialTopUpInterrupted:ie,lastOutcome:He});break}W+=Number(v.result.inspected)||0,G.push(...v.result.skipped??[]);let y=v.result.started??[];if(y.length===0)break;for(let C of y){if(T.length>=_)break;await ou(C)}}let bo=T.filter(v=>v.started).length,Dr=tk(L),St=nk(L),su=bo===0&&(Dr?.capacityIdle===!0||Number(L.resourceGate?.slotsAvailable)>0);if(su&&Dr?.summary){let v=Dr.skipReasonCounts?.retry_ceiling_exceeded??0,y=L.overAttemptIdleRecovery??Dr.overAttemptIdleRecovery,C=y?.attempted===!0?`; over_attempt_recovery minted=${y.minted??0} started=${y.started??0}`:v>0?"; over_attempt_recovery not attempted":"",N=St?`; dispatch_skip_drain scanned=${St.scanned??0} advanced=${St.advanced??0}`:"",j=Dr.progressionReport?.summary?`; ${Dr.progressionReport.summary}`:"",He=St?.prLifecycleAttempt?.summary?`; ${St.prLifecycleAttempt.summary}`:"";console.error(`[dispatch] ${Dr.summary}${v>0?`; retry_ceiling_exceeded=${v}`:""}${C}${N}${j}${He}`)}let iu={runId:l.id,agentOsId:u,dryRun:!1,leaseOwner:k,startedCount:bo,capacityIdle:su,admissionExhaustion:Dr,dispatchSkipDrain:St,outcomes:T,skipped:G.map(v=>({taskId:v.task.id,skipReason:v.skipReason})),inspected:W,pagesScanned:L.pagesScanned??null,candidatesExhausted:L.candidatesExhausted??null,diskGate:L.diskGate,resourceGate:L.resourceGate,...ie?{partialTopUpInterrupted:!0}:{},dispatchCallbackTimeoutMs:dr},au=v=>!v.started&&v.nonFatal!==!0,av=T.some(au),lu=ie&&bo>0?!0:!av;if(Dn({runId:l.id,agentOsId:u,phase:"complete",partial:ie,startedCount:bo,ok:lu}),r)return{ok:lu,...iu};console.log(JSON.stringify(iu,null,2)),T.some(au)&&process.exit(1)}catch(i){if(r)return{ok:!1,error:i.message};console.error(`run dispatch failed: ${i.message}`),process.exit(1)}}var kI=1;function Zt(e){if(!e||typeof e!="object")return 0;let r=e.startedCount;if(typeof r=="number")return r;let t=e.outcomes;return Array.isArray(t)?t.filter(n=>n.started).length:0}function yI(e){let{maxStarts:r,...t}=e;return t}async function lc(e,r){if(r<=0)return{ok:!0,skipped:!0,reason:"no slots",maxStarts:0,startedCount:0};let t=yI(e);if(t.targetTaskId||t.targetTaskIds){let u=await di({...t,execute:!0,pipeline:!0,maxStarts:String(r)});return{...typeof u=="object"&&u!==null?u:{},passes:{target:u},startedCount:Zt(u)}}let n=Math.min(r,kI),o=Math.max(0,r-n),s=await di({...t,execute:!0,pipeline:!0,lane:"review",maxStarts:String(n)}),i=Zt(s),a=o+(n-i);if(a<=0)return{...typeof s=="object"&&s!==null?s:{},passes:{review:s},startedCount:i};let l=await di({...t,execute:!0,pipeline:!0,maxStarts:String(a)}),c=Zt(l);return{passes:{review:s,work:l},startedCount:i+c,ok:!0}}function ok(e){if(!e||typeof e!="object")return[];let t=e.response?.dispatch?.exactTargetTaskIds;if(!Array.isArray(t))return[];let n=new Set,o=[];for(let s of t){if(typeof s!="string")continue;let i=s.trim();!i||n.has(i)||(n.add(i),o.push(i))}return o}function RI(e){let t=e.response?.dispatch;return t&&typeof t=="object"?t:null}function fo(e){return typeof e!="number"||!Number.isFinite(e)?null:Math.max(0,Math.floor(e))}function vI(e){let r=Number(process.env[e]);return!Number.isFinite(r)||r<=0?null:Math.floor(r)}function sk(e,r){let t=RI(r),n=fo(t?.recommendedMaxStarts),o=fo(t?.actionableReady),s=fo(t?.queuedTasks),i=fo(t?.boardAdvancedThisTick)??0,a=fo(t?.leaseReapedThisTick)??0,l=i+a,c=o??s,u=e.slotsAvailable;c!==null?u=Math.min(u,c):n!==null&&(u=Math.min(u,n)),c===null&&n!==null&&(u=Math.max(u,Math.min(e.slotsAvailable,n)));let d=t?.underutilized===!0||(c??0)>0&&e.slotsAvailable>0&&e.maxConcurrentWorkers>0&&e.activeWorkers<e.maxConcurrentWorkers;if(e.slotsAvailable>0&&u===0&&(d||l>0)){let f=c??(l>0?l:1);u=Math.min(e.slotsAvailable,Math.max(1,f))}let p=vI("KYNVER_DAEMON_MAX_DISPATCH_STARTS");p!==null&&(u=Math.min(u,p));let m=s!==null&&o!==null?Math.max(0,s-o):null;return{maxStarts:Math.max(0,u),underutilized:d,advisedStarts:n,actionableReady:o,queuedTasks:s,nonDispatchableReady:m,boardAdvancedThisTick:i,leaseReapedThisTick:a}}import rO from"node:path";B();vn();me();O();import bI from"node:path";var SI=new Set(["running","dispatching","pending","queued","needs_attention"]),mt=new Set(["completed","failed","cancelled","done"]);function ft(e){let r=tr(e);if(r.length===0)return"failed";let t=!1,n=!1,o=!1,s=!1;for(let i of r){let a=I(bI.join(M(e.id),"workers",x(i),"worker.json"),void 0);if(!a)continue;let l=Y(a,{base:e.base,baseCommit:e.baseCommit});if(l.alive&&!l.finalResult){t=!0;break}typeof a.completionBlocker=="string"&&a.completionBlocker&&(o=!0),Dd(l)&&(s=!0),l.finalResult&&l.attention.state==="done"&&(n=!0)}return t||o||s?null:n?"completed":"failed"}function go(){let e=[];for(let r of Ge()){if(!SI.has(r.status))continue;let t=ft(r);if(!t||t===r.status)continue;let n=r.status;r.status=t,Pe(r),e.push({runId:r.id,from:n,to:t})}return e}B();vn();me();O();Zr();xn();import{existsSync as zr,lstatSync as DI,readdirSync as WI,readlinkSync as LI,renameSync as kc,unlinkSync as UI}from"node:fs";import lr from"node:path";qe();O();import Qe from"node:path";var wI=`${Qe.sep}runs${Qe.sep}runs${Qe.sep}`;function pi(e){return e.includes(wI)}function cc(e,r){return Qe.join(Ee(ge(e)),x(r))}function qr(e,r,t){return Qe.join(cc(e,r),"workers",x(t))}function ik(e,r,t){let n=ge(e);return Qe.join(n,"runs","runs",x(r),"workers",x(t))}function uc(){return["stdout.jsonl","stderr.log","heartbeat.jsonl","last-status.json","auto-complete.log","worker.json"]}function gt(e){return{workerJsonPath:Qe.join(e,"worker.json"),stdoutPath:Qe.join(e,"stdout.jsonl"),stderrPath:Qe.join(e,"stderr.log"),heartbeatPath:Qe.join(e,"heartbeat.jsonl"),lastStatusPath:Qe.join(e,"last-status.json")}}function ak(e){let r=gt(qr(e.harnessRoot,e.runId,e.workerName)).workerJsonPath;return e.statusPath&&!pi(e.statusPath)?e.statusPath:r}import{existsSync as Jr,mkdirSync as EI,readdirSync as uk,renameSync as PI,statSync as pc}from"node:fs";import oe from"node:path";K();fn();Wr();Fi();import xI from"node:path";function _I(e){return xI.resolve(je(e.trim()))}function dc(e,r,t){let n=e?.trim();return n?{repo:_I(n),source:r,persistedInConfig:t}:null}function CI(e){return e?{repo:e.repo,source:e.source,persistedInConfig:!1}:null}function lk(e={}){let r=e.env??process.env,t=e.config??U(),n=dc(t.defaultRepo,"config",!0);if(n)return n;let o=dc(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=dc(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);return s||CI(Oo({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl}))}de();Zr();qe();B();O();var ho=900*1e3,AI=3600*1e3;function dk(e,r){let t=oe.resolve(e),n=oe.resolve(Ee(r)),o=oe.relative(n,t);return o!==".."&&!o.startsWith("..")&&!oe.isAbsolute(o)}function mc(e){if(!Jr(e))return[];try{return uk(e,{withFileTypes:!0}).filter(r=>r.isDirectory()&&r.name!=="runs").map(r=>r.name)}catch{return[]}}function fc(e){let r=oe.join(e,"workers");if(!Jr(r))return[];try{return uk(r,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name)}catch{return[]}}function pk(e){return oe.join(e,"archived-workers")}function II(e,r){let t=oe.join(pk(e),x(r));return Jr(t)?`${t}-${Date.now()}`:t}function ck(e,r,t){if(!Jr(e))return!1;try{let n=r-pc(e).mtimeMs;return Number.isFinite(n)&&n>=0&&n<t}catch{return!1}}function mk(e,r=Date.now(),t=ho){if(!Jr(e))return!1;let n=gt(e),o=I(n.workerJsonPath,void 0);if(o?.status==="running"&&z(o.pid))return!0;let s=pe(n.heartbeatPath);if(s.lastHeartbeatAt){let i=r-Date.parse(s.lastHeartbeatAt);if(Number.isFinite(i)&&i>=0&&i<t)return!0}return!!(ck(n.stdoutPath,r,t)||ck(n.heartbeatPath,r,t))}function OI(e,r,t){let n=typeof r.completionReportedAt=="string"?Date.parse(r.completionReportedAt):NaN;if(Number.isFinite(n))return t-n;let o=(()=>{let s=r.completionResponse;if(!s||typeof s!="object")return NaN;let i=s.task;if(!i||typeof i!="object")return NaN;let a=i.updatedAt;return typeof a=="string"?Date.parse(a):NaN})();if(Number.isFinite(o))return t-o;try{return t-pc(oe.join(e,"worker.json")).mtimeMs}catch{return 0}}function TI(e,r,t,n){if(mk(e,t))return{eligible:!1,reason:"worker has active/recent retention signals"};let o=typeof r.status=="string"?r.status:"";if(typeof r.completionBlocker=="string"&&r.completionBlocker.trim().length>0)return{eligible:!1,reason:"worker has completion blocker"};let i=typeof r.completionReportedAt=="string"||r.completionOutcome==="acknowledged";if(o!=="done"&&!i)return{eligible:!1,reason:`worker status is ${o||"unknown"}`};let a=OI(e,r,t);return!Number.isFinite(a)||a<n?{eligible:!1,reason:"terminal worker is still within archive grace window"}:{eligible:!0,reason:"terminal worker metadata archived"}}function en(e,r=Date.now(),t=ho){for(let n of fc(e))if(mk(oe.join(e,"workers",n),r,t))return!0;return!1}function NI(){let r=lk()?.repo??"",t="unknown";if(r)try{let n=Q(r,["rev-parse","origin/main"],{allowFailure:!0}).trim();n&&(t=n)}catch{}return{repo:r,base:"origin/main",baseCommit:t}}function MI(e,r){let t=oe.join(Ee(e),x(r));if(!Jr(t))return null;let n=fc(t);if(n.length===0)return null;let o;try{o=pc(t).birthtime.toISOString()}catch{o=new Date().toISOString()}let s={};for(let a of n){let l=qr(e,r,a);s[a]={workerDir:l,statusPath:oe.join(l,"worker.json")}}let i=en(t);return{id:r,name:r,...NI(),status:i?"running":"needs_attention",createdAt:o,workers:s}}function gc(e){let r=ge(e??Te()),t=Ee(r),n=[];for(let o of mc(t)){let s=oe.join(t,o,"run.json");if(Jr(s)){n.push({runId:o,action:"skipped",reason:"run.json present"});continue}let i=MI(r,o);if(!i){n.push({runId:o,action:"skipped",reason:"no worker dirs on disk"});continue}Pe(i),n.push({runId:o,action:"repaired_run_json",reason:en(oe.join(t,o))?"synthesized run.json while worker artifacts still active":"synthesized run.json from orphan worker metadata dirs"})}return{runs:n}}function hc(e,r={}){let t=ge(e??Te()),n=Ee(t),o=r.now??Date.now(),s=r.archiveAgeMs??AI,i=[];gc(t);for(let a of mc(n)){let l=oe.join(n,a),c=oe.join(l,"run.json"),u=I(c,void 0);if(!u?.id)continue;let d=new Set([...Object.keys(u.workers||{}),...fc(l)]),p=!1;for(let m of d){let f=oe.join(l,"workers",x(m)),b=oe.join(f,"worker.json"),k=I(b,void 0);if(!k){let h=oe.join(pk(l),x(m));if(Jr(h)&&(u.workers[x(m)]||u.workers[m])){delete u.workers[x(m)],delete u.workers[m],p=!0,i.push({runId:u.id,worker:m,action:"archived",reason:"removed stale live index entry for archived worker metadata",archivePath:h});continue}i.push({runId:u.id,worker:m,action:"skipped",reason:"worker.json missing"});continue}let R=TI(f,k,o,s);if(!R.eligible){i.push({runId:u.id,worker:m,action:"skipped",reason:R.reason});continue}let g=II(l,m);EI(oe.dirname(g),{recursive:!0}),PI(f,g),delete u.workers[x(m)],delete u.workers[m],p=!0,i.push({runId:u.id,worker:m,action:"archived",reason:R.reason,archivePath:g})}p&&Pe(u)}return{workers:i}}function fk(e,r=Date.now()){let t=new Set,n=Ee(e);for(let o of mc(n)){let s=oe.join(n,o);en(s,r)&&t.add(`${e}\0${o}`)}return t}B();O();function BI(e,r){let t=cc(e,r),n;try{n=DI(t)}catch{return null}if(!n.isSymbolicLink())return null;let o=lr.resolve(lr.dirname(t),LI(t));if(en(o)||en(t))return null;let s=`${t}.materialize-${Date.now()}`;return kc(o,s),UI(t),kc(s,t),o}function FI(e){let r=[];for(let t of uc()){let n=lr.join(e.fromDir,t),o=lr.join(e.toDir,t);!zr(n)||zr(o)||(kc(n,o),r.push(t))}return r}function gk(e,r){let t=gt(r),n=!1;return e.workerDir!==r&&(e.workerDir=r,n=!0),e.stdoutPath!==t.stdoutPath&&(e.stdoutPath=t.stdoutPath,n=!0),e.stderrPath!==t.stderrPath&&(e.stderrPath=t.stderrPath,n=!0),e.heartbeatPath!==t.heartbeatPath&&(e.heartbeatPath=t.heartbeatPath,n=!0),n}function KI(e){let r=typeof e.lastStatus?.status=="string"?e.lastStatus.status:void 0,t=e.lastStatus?.attention&&typeof e.lastStatus.attention=="object"?e.lastStatus.attention.state:void 0;return r==="done"||t==="done"||e.stdoutFinalResult||e.heartbeatFinalResult?"done":r==="blocked"?"blocked":r==="running"?"exited":r??"exited"}function HI(e){let r=gt(e.canonicalDir),t=I(r.lastStatusPath,void 0),n=zr(r.stdoutPath),o=zr(r.heartbeatPath);if(!(n||o||t!=null))return null;let i=n?et(r.stdoutPath):{finalResult:null},a=o?pe(r.heartbeatPath):pe(""),l=kr(a),c=KI({lastStatus:t,stdoutFinalResult:i.finalResult,heartbeatFinalResult:l}),u={name:e.workerName,runId:e.run.id,status:c,branch:typeof t?.branch=="string"?t.branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:typeof t?.worktreePath=="string"?t.worktreePath:lr.join(le().worktreesDir,e.run.id,e.workerName),workerDir:e.canonicalDir,stdoutPath:r.stdoutPath,stderrPath:r.stderrPath,heartbeatPath:r.heartbeatPath,startedAt:typeof t?.startedAt=="string"?t.startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"synthesized worker.json from on-disk artifacts after metadata repair"};return typeof t?.taskId=="string"&&(u.taskId=t.taskId),typeof t?.agentOsId=="string"&&(u.agentOsId=t.agentOsId),typeof t?.planId=="string"&&(u.planId=t.planId),typeof t?.pid=="number"&&(u.pid=t.pid),(i.finalResult||l)&&(u.completionSnapshot={finalResult:i.finalResult??l??"completed",summary:a.lastHeartbeatSummary}),gk(u,e.canonicalDir),u}function $I(e,r){let t=!1,n={...e.workers||{}};for(let[o,s]of Object.entries(n)){let i=qr(r,e.id,o),a=lr.join(i,"worker.json");(pi(s.workerDir)||pi(s.statusPath)||s.workerDir!==i||s.statusPath!==a)&&(n[o]={workerDir:i,statusPath:a},t=!0)}return t&&(e.workers=n,Pe(e)),t}function jI(e){let r=[],t=qr(e.harnessRoot,e.run.id,e.workerName),n=ik(e.harnessRoot,e.run.id,e.workerName),o=gt(t),s=FI({fromDir:n,toDir:t});s.length>0&&r.push({runId:e.run.id,worker:e.workerName,action:"relocated_artifacts",reason:`moved ${s.join(", ")} from nested runs/runs layout`});let i=ak({harnessRoot:e.harnessRoot,runId:e.run.id,workerName:e.workerName,statusPath:e.statusPath}),a=I(i,void 0);if(!a&&zr(o.workerJsonPath)&&(a=I(o.workerJsonPath,void 0)),!a){let l=HI({run:e.run,workerName:e.workerName,canonicalDir:t,harnessRoot:e.harnessRoot});if(l)return F(e.run.id,l),r.push({runId:e.run.id,worker:e.workerName,action:"synthesized_worker_json",reason:l.reconcileReason??"synthesized from artifacts"}),r;let c=zr(t),u=uc().some(d=>zr(lr.join(t,d)));if(c&&!u){let d={name:e.workerName,runId:e.run.id,status:"exited",branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:lr.join(le().worktreesDir,e.run.id,e.workerName),workerDir:t,stdoutPath:o.stdoutPath,stderrPath:o.stderrPath,heartbeatPath:o.heartbeatPath,startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"empty worker dir \u2014 marked abandoned during metadata reconcile"};return F(e.run.id,d),r.push({runId:e.run.id,worker:e.workerName,action:"marked_abandoned",reason:d.reconcileReason??"empty worker dir"}),r}return r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker.json missing and no recoverable artifacts"}),r}return gk(a,t)?(a.reconciledAt=new Date().toISOString(),a.reconcileReason=a.reconcileReason??"repaired nested runs/runs path fields",F(e.run.id,a),r.push({runId:e.run.id,worker:e.workerName,action:"repaired_worker_paths",reason:a.reconcileReason})):r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker metadata already canonical"}),r}function VI(e,r){let t=lr.join(M(e.id),"workers");if(!zr(t))return[];let n=new Set(Object.keys(e.workers||{})),o=[];for(let s of WI(t,{withFileTypes:!0}))s.isDirectory()&&(n.has(s.name)||o.push(s.name));return o}function hk(){let{harnessRoot:e}=le(),r=gc(e),t=[];for(let n of Ge()){let o=BI(e,n.id);o&&t.push({runId:n.id,worker:"*",action:"materialized_run_symlink",reason:`replaced symlink with real run dir (was ${o})`}),$I(n,e)&&t.push({runId:n.id,worker:"*",action:"repaired_run_index",reason:"repaired nested runs/runs workerDir/statusPath entries in run.json"});let s=new Set(Object.keys(n.workers||{}));for(let i of VI(n,e))s.add(i),n.workers={...n.workers||{},[i]:{workerDir:qr(e,n.id,i),statusPath:lr.join(qr(e,n.id,i),"worker.json")}},Pe(n),t.push({runId:n.id,worker:i,action:"repaired_run_index",reason:"indexed orphan worker dir into run.json"});for(let i of s){let a=n.workers?.[i];t.push(...jI({run:n,workerName:i,harnessRoot:e,statusPath:a?.statusPath}))}}return{workers:t,runMetadataRetention:r}}Zr();jo();me();B();vn();O();import{execFileSync as kk}from"node:child_process";import yk from"node:path";function yc(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:null}function GI(e){let r=yc(e)?.match(/\/pull\/(\d+)$/);if(!r)return null;let t=Number.parseInt(r[1],10);return Number.isFinite(t)?t:null}function YI(e){if(e==null)return"";if(typeof e=="string")return e;try{return JSON.stringify(e)}catch{return""}}function qI(e){let r=new Set;for(let t of e.matchAll(/github\.com\/[^/\s)>"']+\/[^/\s)>"']+\/(?:pull|pulls)\/(\d+)/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bPR\s*#?\s*(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bpr[-_]?(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}return[...r]}function JI(e){let r=null;if(typeof e=="string"?r=Nt(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=yc(String(s.prUrl??s.pr_url??"")),a=String(s.outcome??"").trim();!i||a!=="merged"||n.push({prUrl:i,mergeCommit:typeof s.mergeCommit=="string"?s.mergeCommit:typeof s.merge_commit=="string"?s.merge_commit:null,reason:typeof s.reason=="string"?s.reason:null})}return n}function zI(e){try{let n=kk("git",["config","--get","remote.origin.url"],{windowsHide:!0,cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim().match(/github\.com[:/]([^/]+\/[^/.]+)(?:\.git)?$/i)?.[1];if(!n)return null;let o=kk("gh",["pr","view",String(e.prNumber),"--repo",n,"--json","state,mergedAt,mergeCommit,url"],{windowsHide:!0,cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}),s=JSON.parse(o);return{prUrl:yc(s.url??`https://github.com/${n}/pull/${e.prNumber}`)??`https://github.com/${n}/pull/${e.prNumber}`,state:s.state??"",mergedAt:s.mergedAt??null,mergeCommit:s.mergeCommit?.oid??null}}catch{return null}}function XI(e){let r=pe(e.heartbeatPath);return e.completionSnapshot?.finalResult??kr(r)}function QI(e){let r=new Map,t=M(e.id);for(let n of tr(e)){let o=I(yk.join(t,"workers",x(n),"worker.json"),void 0);if(o)for(let s of JI(XI(o))){let i=GI(s.prUrl);i!=null&&!r.has(i)&&r.set(i,s)}}return r}function ZI(e,r){let t=pe(e.heartbeatPath),n=[e.name,e.repairTargetPrUrl,e.taskPrUrl,e.branch,t.lastHeartbeatSummary,YI(r)].filter(Boolean).join(`
-`);return qI(n)}function eO(e){return e.localOnly===!0&&!e.taskId&&!e.agentOsId}function Rc(e={}){let r=e.lookupPr??zI,t=[],n=new Map;for(let o of Ge()){let s=QI(o),i=M(o.id);for(let a of tr(o)){let l=yk.join(i,"workers",x(a),"worker.json"),c=I(l,void 0);if(!c||!eO(c))continue;let u=Y(c,{base:o.base,baseCommit:o.baseCommit});if(u.attention.state!=="needs_attention")continue;let d=null;for(let m of ZI(c,u.finalResult)){if(d=s.get(m)??null,!d){let f=o.repo||c.worktreePath,b=`${f}#${m}`,k=n.has(b)?n.get(b)??null:r({repoDir:f,prNumber:m});n.has(b)||n.set(b,k),k&&(k.state==="MERGED"||k.mergedAt)&&(d={prUrl:k.prUrl,mergeCommit:k.mergeCommit??null,reason:"GitHub reports PR merged"})}if(d)break}if(!d){t.push({runId:o.id,worker:a,action:"skipped",reason:"no merged PR evidence"});continue}let p=new Date().toISOString();c.status="done",c.completionSnapshot={prUrl:d.prUrl,summary:`Local-only worker superseded by merged PR ${d.prUrl}`,finalResult:{summary:`Local-only repair/salvage worker superseded by merged PR ${d.prUrl}`,targetPrReconciliation:[{prUrl:d.prUrl,outcome:"merged",mergeCommit:d.mergeCommit??null,reason:d.reason??"PR already merged; local-only worker no longer requires attention"}]}},c.completionAckSource="local-pr-merged-reconcile",c.reconciledAt=p,c.reconcileReason="local-only needs_attention superseded by merged PR",F(o.id,c),t.push({runId:o.id,worker:a,action:"marked_done",reason:c.reconcileReason,prUrl:d.prUrl,mergeCommit:d.mergeCommit??null})}}return{workers:t}}var tO=900*1e3;function nO(){return process.env.KYNVER_NO_STALE_CLEANUP==="1"}function Rk(e,r){let t=zs({worker:e,status:r}),n=t?Xs(e,t):!1,o=r.attention.state==="blocked"?"blocked":r.attention.state==="done"||r.status==="done"||t?"done":"exited",s=t&&n?`captured exited-worker handoff (${t.source})`:t?"synced finished worker record after terminal stdout/heartbeat":r.attention.reason;return{nextStatus:o,reason:s,handoffCaptured:n}}function vk(){let e=hk();if(nO()){let s=Rc(),i=hc();return{workers:[],finalizedRuns:go(),metadataReconcile:e,localPrAttentionReconcile:s,terminalWorkerArchive:i}}let r=[],t=Date.now();for(let s of Ge())for(let i of tr(s)){let a=rO.join(M(s.id),"workers",x(i),"worker.json"),l=I(a,void 0);if(!l||l.status!=="running"){r.push({runId:s.id,worker:i,action:"skipped",reason:l?`worker status is ${l.status}`:"worker.json missing"});continue}let c=Y(l,{base:s.base,baseCommit:s.baseCommit});if(c.finalResult){if(l.status==="running"){let u=Rk(l,c);l.status=u.nextStatus,l.reconciledAt=new Date().toISOString(),l.reconcileReason=u.reason,F(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:l.reconcileReason})}else r.push({runId:s.id,worker:i,action:"skipped",reason:"final result present"});continue}if(!c.alive){let u=Rk(l,c);l.status=u.nextStatus,l.reconciledAt=new Date().toISOString(),l.reconcileReason=u.reason,F(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:c.attention.reason});continue}if(c.attention.state==="stale"&&l.pid&&z(l.pid)){let u=c.lastHeartbeatAt?Date.parse(c.lastHeartbeatAt):NaN,d=c.lastActivityAt?Date.parse(c.lastActivityAt):NaN,p=!Number.isFinite(u)||t-u>tO,m=Number.isFinite(d)&&t-d>ta;if(p&&m){rr(l.pid,"SIGTERM"),l.status="exited",l.reconciledAt=new Date().toISOString(),l.reconcileReason=`reconciled stale worker: ${c.attention.reason}`,F(s.id,l),r.push({runId:s.id,worker:i,action:"killed_stale",reason:c.attention.reason});continue}}r.push({runId:s.id,worker:i,action:"skipped",reason:c.attention.reason})}let n=Rc(),o=hc();return{workers:r,finalizedRuns:go(),metadataReconcile:e,localPrAttentionReconcile:n,terminalWorkerArchive:o}}Wt();B();import dO from"node:path";import{readdirSync as oO,readFileSync as sO}from"node:fs";var iO="dispatch:claim:",aO=900*1e3,lO=10080*60*1e3,cO=200,ht={recoveredStrandedClaims:0,recoveryDeferredOrphans:0,recoveryStoreFailures:0};function uO(e){if(process.platform!=="linux"||!e.trim())return null;let r=[];try{r=oO("/proc")}catch{return null}for(let t of r)if(/^\d+$/.test(t)&&Number(t)!==process.pid)try{if(sO(`/proc/${t}/cmdline`,"utf8").replace(/\0/g," ").includes(e))return Number(t)}catch{}return null}async function bk(e){let r=Or(),t={mode:r,scanned:0,outcomes:[]};if(r!=="enforce")return t;let n=q();if(!n)return t;let o=e.nowMs??Date.now(),s=e.strandedAfterMs??aO,i=e.findOrphanPid??uO,a=[],l;try{l=n.listOperationReceipts({operation:"dispatch-claim",recordedAfter:new Date(o-lO).toISOString(),limit:cO})}catch{return ht.recoveryStoreFailures+=1,t}for(let c of l){let u=c.idempotencyKey.slice(iO.length),d=u.split(":")[0]??"",p=u.slice(d.length+1);if(!(!d||!p))try{let m=Date.parse(c.recordedAt);if(!Number.isFinite(m)||o-m<s||n.getOperationReceipt(`dispatch:spawned:${u}`)||n.getOperationReceipt(`dispatch:released:${u}`))continue;let f=no(p);if(n.listOperationReceipts({keyPrefix:`dispatch:completion-acked:${d}:`,limit:10}).some(P=>{if(f===null)return!0;let S=no(P.idempotencyKey.slice(`dispatch:completion-acked:${d}:`.length));return S===null||S>=f}))continue;let R={};try{R=c.resultJson?JSON.parse(c.resultJson):{}}catch{R={}}let g=R.runId??null,h=R.workerName??null;if(g&&h&&e.hasLiveWorker({runId:g,workerName:h})){ti({taskId:d,leaseToken:p}),a.push({taskId:d,leaseToken:p,runId:g,workerName:h,action:"finalized_late"});continue}if(g&&h){let P=e.worktreePathFor({runId:g,workerName:h}),S=P?i(P):null;if(S!==null){ht.recoveryDeferredOrphans+=1,a.push({taskId:d,leaseToken:p,runId:g,workerName:h,action:"deferred_orphan",detail:`live pid ${S} references ${P}`});continue}}if(!g){a.push({taskId:d,leaseToken:p,runId:g,workerName:h,action:"skipped",detail:"claim intent missing runId \u2014 cannot resolve lease owner"});continue}let E=await e.releaseClaim({taskId:d,leaseToken:p,runId:g});E.released?(qt({taskId:d,leaseToken:p},"restart_recovery"),h&&(so(g,h),Gr(g,h)),ht.recoveredStrandedClaims+=1,a.push({taskId:d,leaseToken:p,runId:g,workerName:h,action:"released"})):E.transportError?a.push({taskId:d,leaseToken:p,runId:g,workerName:h,action:"deferred_transport",detail:E.detail}):(qt({taskId:d,leaseToken:p},"restart_recovery_refused"),a.push({taskId:d,leaseToken:p,runId:g,workerName:h,action:"release_refused",detail:E.detail}))}catch{ht.recoveryStoreFailures+=1}}return{mode:r,scanned:l.length,outcomes:a}}function Sk(){return{"dispatchReceipts.recoveredStrandedClaims":ht.recoveredStrandedClaims,"dispatchReceipts.recoveryDeferredOrphans":ht.recoveryDeferredOrphans,"dispatchReceipts.recoveryStoreFailures":ht.recoveryStoreFailures}}var wk=!1;async function xk(e){if(wk||Or()!=="enforce")return null;wk=!0;try{let r=We().runnerId,t=await bk({hasLiveWorker:e.hasLiveWorker,worktreePathFor:({runId:n,workerName:o})=>dO.join(le().worktreesDir,n,o),releaseClaim:async({taskId:n,leaseToken:o,runId:s})=>{let i=await mo({baseUrl:e.baseUrl,secret:e.secret,agentOsId:e.agentOsId,taskId:n,leaseOwner:Jn(s,r),leaseToken:o});return{released:i.released,transportError:i.transportError,detail:i.httpOk?void 0:JSON.stringify(i.releaseResponse).slice(0,200)}}});return t.outcomes.length>0&&console.error(`[daemon] D1b claim recovery: ${t.outcomes.map(n=>`${n.taskId}:${n.action}`).join(", ")}`),t}catch{return null}}K();Oe();rs();import _O from"node:os";la();import{mkdirSync as hO,readFileSync as kO,renameSync as yO,writeFileSync as RO}from"node:fs";import{homedir as vO}from"node:os";import mi from"node:path";import{existsSync as pO,readFileSync as mO}from"node:fs";import{dirname as vc,join as Ck}from"node:path";import{fileURLToPath as _k}from"node:url";function fO(e){let r=vc(_k(e));for(let t=0;t<6;t+=1){if(pO(Ck(r,"package.json")))return r;let n=vc(r);if(n===r)break;r=n}throw new Error(`package.json not found above ${vc(_k(e))}`)}function gO(e=import.meta.url){let r=Ck(fO(e),"package.json"),t=JSON.parse(mO(r,"utf8"));if(typeof t.version!="string"||!t.version.trim())throw new Error(`Missing package.json version at ${r}`);return t.version}var Ek=gO();function Pk(){return mi.join(vO(),".kynver")}function bO(e=Pk()){return mi.join(e,"doctor-native-windows.json")}function Ak(e=Pk()){return mi.join(e,"native-windows-state.json")}function SO(e,r){hO(mi.dirname(e),{recursive:!0});let t=`${e}.tmp-${process.pid}`;RO(t,`${JSON.stringify(r,null,2)}
-`,{mode:384}),yO(t,e)}function Sc(e){try{return JSON.parse(kO(e,"utf8"))}catch{return null}}function wO(e){let r=Sc(bO(e));return!r||typeof r.checkedAt!="string"||typeof r.verdict!="string"?null:{checkedAt:r.checkedAt,runtimeVersion:typeof r.runtimeVersion=="string"?r.runtimeVersion:"unknown",verdict:r.verdict,failing:Array.isArray(r.failing)?r.failing.filter(t=>typeof t=="string"):[],warnings:Array.isArray(r.warnings)?r.warnings.filter(t=>typeof t=="string"):[],providers:r.providers&&typeof r.providers=="object"?Object.fromEntries(Object.entries(r.providers).filter(t=>typeof t[1]=="string")):{},orphanedProcesses:typeof r.orphanedProcesses=="number"?r.orphanedProcesses:0}}function Ik(e=new Date,r){try{let t=Ak(r),n=Sc(t)??{};SO(t,{...n,lastWorkerCompletedAt:e.toISOString()})}catch{}}function xO(e){let r=Sc(Ak(e));return typeof r?.lastWorkerCompletedAt=="string"?r.lastWorkerCompletedAt:null}var bc=null,Ok=null;function Tk(e){bc=e.admission,Ok=e.ownerKind}function Nk(e={}){let r=e.platform??process.platform,t=e.hostKind??aa(),n=t==="win32";return{hostKind:t,wsl:t==="wsl",platform:r,arch:process.arch,nodeVersion:process.versions.node,runtimeVersion:Ek,ownerKind:Ok,nativeWindows:n?{admission:bc?.basis??null,hostCapability:bc?.hostCapability??null,lastDoctor:wO(e.root),lastWorkerCompletedAt:xO(e.root)}:null}}function Mk(e,r={}){let t=U(),n=(r.boxKind??hr(t)).trim().toLowerCase()||"forge",o=r.hostLabel??_O.hostname();return{boxId:es({boxKind:n,hostLabel:o,explicitBoxId:r.boxId,config:t,env:process.env}),boxKind:n,displayName:r.displayName??null,hostLabel:o,observedAt:r.observedAt??new Date().toISOString(),totalMemBytes:e.totalMemBytes,freeMemBytes:e.freeMemBytes,activeWorkers:e.activeWorkers,maxConcurrentWorkers:e.maxConcurrentWorkers,autoCap:e.autoCap,slotsAvailable:e.slotsAvailable,harnessRunId:r.harnessRunId??null,queuedTasks:r.queuedTasks??null,reason:e.reason,...r.prEvidence?.length?{prEvidence:r.prEvidence}:{},host:Nk()}}B();qe();Ko();me();K();import CO from"node:path";B();me();O();async function Dk(e){let r=e.pipeline===!0||e.pipeline==="true";try{let t=ee(String(fr(String(e.run||""),"--run"))),n=String(fr(String(e.agentOsId||""),"--agent-os-id")),o=X(e.baseUrl?String(e.baseUrl):void 0),s=await re(e.secret?String(e.secret):void 0,n,{baseUrl:o}),i=We({runId:t.id}).runnerId,a=await lh({run:t.id,agentOsId:n,...e},"run_sweep"),l=[];for(let p of Object.keys(t.workers||{})){let m=I(CO.join(M(t.id),"workers",x(p),"worker.json"),void 0);if(!m||!m.dispatched||!m.taskId)continue;let f=Y(m);if(f.alive||f.finalResult||m.completionReportedAt)continue;let b=Ms({runId:t.id,workerLeaseOwner:m.leaseOwner??null,runnerId:i}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(String(m.taskId))}/release`,R;try{R=await J(k,s,{agentOsId:n,leaseOwner:b,...m.leaseToken?.trim()?{leaseToken:m.leaseToken.trim()}:{}},{agentOsId:n,baseUrl:o})}catch(g){R={ok:!1,error:g.message}}l.push({worker:p,taskId:m.taskId,pid:m.pid,released:R.ok===!0||R.response?.ok===!0,response:R.response??R})}let c=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/reap`,u;try{u=await J(c,s,{agentOsId:n,...Number(e.graceMs)>=0&&e.graceMs!==void 0&&e.graceMs!==!0?{graceMs:Math.floor(Number(e.graceMs))}:{}},{agentOsId:n,baseUrl:o})}catch(p){u={ok:!1,error:p.message}}let d={runId:t.id,agentOsId:n,snapshotPublished:a,releasedLocalOrphans:l,reap:u.response??u};if(r)return{ok:!0,...d};console.log(JSON.stringify(d,null,2))}catch(t){if(r)return{ok:!1,error:t.message};console.error(`run sweep failed: ${t.message}`),process.exit(1)}}O();me();B();O();import EO from"node:path";K();async function Wk(e){let r=X(e.baseUrl),t=await re(e.secret,e.agentOsId,{baseUrl:r}),n=`${r}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/plan-progress-sync`,o=await J(n,t,{phase:e.phase,taskId:e.taskId,blocker:e.blocker,artifact:e.artifact},{agentOsId:e.agentOsId,baseUrl:r});return{ok:o.ok,status:o.status,response:o.response}}async function Lk(e,r){let t=ee(e),n=String(r.agentOsId||"");if(!n)return[];let o=[];for(let s of Object.keys(t.workers||{})){let i=I(EO.join(M(t.id),"workers",x(s),"worker.json"),void 0);if(!i?.dispatched||!i.taskId)continue;let a=Y(i);if(!a.heartbeatBlocker)continue;if(i.lastSyncedHeartbeatBlocker===a.heartbeatBlocker){o.push({worker:s,phase:"heartbeat_blocker",ok:!0,skipped:!0});continue}let l=await Wk({agentOsId:n,taskId:i.taskId,phase:"heartbeat_blocker",blocker:a.heartbeatBlocker,baseUrl:r.baseUrl?String(r.baseUrl):void 0,secret:r.secret?String(r.secret):void 0});l.ok&&(i.lastSyncedHeartbeatBlocker=a.heartbeatBlocker,F(t.id,i)),o.push({worker:s,phase:"heartbeat_blocker",ok:l.ok})}return o}Go();K();Oe();qe();import Fe from"node:path";$o();import gi from"node:path";de();me();var wc=[".next",".turbo","dist","build",".cache","node_modules/.cache"];function Uk(e){let r=e.replace(/\\/g,"/").replace(/\/+$/,"");if(r==="node_modules"||r.startsWith("node_modules/"))return!0;for(let t of wc)if(r===t||r.startsWith(`${t}/`))return!0;return!1}function Le(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return!Uk(n)})}function kt(e){if(typeof e=="string")return e.match(/https:\/\/github\.com\/[^\s]+\/pull\/\d+/i)?.[0]??null;if(e&&typeof e=="object"){let r=e;for(let t of["prUrl","pr_url","pullRequestUrl"]){let n=r[t];if(typeof n=="string"&&n.trim())return n.trim()}}return null}function ko(e){let r=e.gitAncestry?.relation;return r==="merged"||r==="synced"?Le(e.changedFiles).length>0:!!(kt(e.finalResult)||r==="ahead"||r==="diverged"||e.changedFiles.length>0&&e.finalResult)}O();function yo(e){return e.status||(e.status=Y(e.worker,{base:e.run.base,baseCommit:e.run.baseCommit})),e.status}function xc(e,r){if(e.status)return Le(e.status.changedFiles).length>0;let t=r?r.porcelain(e.worktreePath):mn(e.worktreePath);return Le(t).length>0}function PO(e){let r=e.worker.completionSnapshot?.finalResult;return r??(e.worker.taskPrUrl?{prUrl:e.worker.taskPrUrl}:null)}function _c(e,r){if(e.status)return e.status;let t=e.worker,n=typeof t.completionReportedAt=="string"&&t.completionReportedAt.trim().length>0,o=!!(t.status&&["done","exited","blocked","failed","abandoned"].includes(t.status))||n,s=PO(e);if(o&&!z(t.pid)){let i=r?.gitStatusCache?r.gitStatusCache.porcelain(e.worktreePath):mn(e.worktreePath),a=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main",c=r?.gitRevCache?.countAheadOfMain(e.worktreePath,a)===0?{checked:!0,base:a,relation:"synced"}:Io(e.worktreePath,{base:e.run.base,baseCommit:e.run.baseCommit}),u={runId:e.runId,worker:e.workerName,pid:t.pid,alive:!1,status:t.status??(n?"done":"exited"),attention:{state:n?"done":"stale"},branch:t.branch,worktreePath:e.worktreePath,ownedPaths:t.ownedPaths,stdoutBytes:0,stderrBytes:0,heartbeatBytes:0,firstEventAt:null,lastEventAt:null,lastActivityAt:t.completionReportedAt??null,currentTool:null,heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,heartbeatBlocker:null,changedFiles:i,gitAncestry:c,finalResult:s,completionBlocker:typeof t.completionBlocker=="string"&&t.completionBlocker.trim()||null,prUrl:t.repairTargetPrUrl??t.taskPrUrl??kt(s)};return e.status=u,u}return yo(e)}me();me();Zr();O();function AO(e,r=Date.now(),t=ho){let n=pe(e.heartbeatPath);if(!n.lastHeartbeatAt)return!1;let o=r-Date.parse(n.lastHeartbeatAt);return Number.isFinite(o)&&o>=0&&o<t}function rn(e,r=Date.now(),t=ho){return z(e.pid)?!0:AO(e,r,t)}function IO(e,r){return r?r.runTerminalCache.derive(e.run):ft(e.run)}function Nr(e,r=Date.now()){return rn(e.worker,r)}function Cc(e,r){return mt.has(e.run.status)?!1:IO(e,r)!==null}function Bk(e,r,t=Date.now()){if(Nr(e,t))return!0;if(mt.has(e.run.status)||Cc(e,r))return!1;let n=yo(e);return Se(n)?!1:!!Nr(e,t)}$o();me();function Fk(e,r){if(!(typeof e.worker.completionBlocker=="string"?e.worker.completionBlocker.trim():""))return!1;if(Nr(e))return!0;let n=r??yo(e);return!!(!Se(n)||ko(n)||Le(n.changedFiles).length>0||Tt({finalResult:n.finalResult,changedFiles:n.changedFiles,gitAncestry:n.gitAncestry,prUrl:kt(n.finalResult)}).blocked)}de();O();import{existsSync as Hk,mkdirSync as OO,writeFileSync as Kk}from"node:fs";import fi from"node:path";function $k(e,r,t){return fi.join(e,"salvage",x(r),x(t))}function jk(e){return Hk(fi.join($k(e.harnessRoot,e.runId,e.workerName),"evidence.json"))}function Vk(e){let r=$k(e.harnessRoot,e.indexed.runId,e.indexed.workerName);OO(r,{recursive:!0});let t=fi.join(r,"salvage.patch"),n=!1;if(Hk(e.indexed.worktreePath)){let s=te(e.indexed.worktreePath,["diff","HEAD"]),i=te(e.indexed.worktreePath,["diff","--cached"]),a=[s.stdout,i.stdout].filter(l=>l.trim()).join(`
-`);a.trim()&&(Kk(t,a.endsWith(`
+`)}})}write(r,t){if(!r.destroyed)try{r.write(ml(t))}catch{}}async handleLine(r,t){let n=fl(t);if(!n.ok){this.refuse(n.reason,n.error),this.write(r,{id:n.id,ok:!1,reason:n.reason,error:n.error});return}let{request:o}=n;if(this.revoked||this.closed){this.refuse("revoked","grant revoked"),this.write(r,{id:o.id,ok:!1,reason:"revoked",error:"worker tools are no longer available for this task"});return}if(this.now()>=this.opts.expiresAt){this.refuse("grant_expired","grant expired"),this.write(r,{id:o.id,ok:!1,reason:"grant_expired",error:"worker tools are no longer available for this task"});return}if(o.op==="list_tools"){this.write(r,{id:o.id,ok:!0,tools:this.toolDescriptors});return}if(!Xt(o.name)){this.refuse("unknown_tool",o.name),this.write(r,{id:o.id,ok:!1,reason:"unknown_tool",error:`unknown tool: ${o.name}`});return}if(!this.grantedTools.includes(o.name)){this.refuse("capability_not_granted",o.name),this.write(r,{id:o.id,ok:!1,reason:"capability_not_granted",error:`tool not granted for this task: ${o.name}`});return}try{let s=await Ws({apiBaseUrl:this.opts.apiBaseUrl,agentOsId:this.opts.agentOsId,taskId:this.opts.taskId,token:this.opts.token,fetchImpl:this.fetchImpl},o.name,o.args??{});this.write(r,{id:o.id,ok:!0,result:s})}catch(s){let i=s instanceof Error?s.message:"request failed";this.refuse("upstream_error",i),this.write(r,{id:o.id,ok:!1,reason:"upstream_error",error:i})}}};var jh={posture:"scoped",summary:"scoped: per-worker endpoint in an owner-only (0700) directory, one connection at a time. Peer identity is not observed \u2014 another process of the same OS user is not excluded.",verify:async()=>({ok:!0})};function cc(){return jh}var fI=7200*1e3;async function Vh(e,r){let t=typeof r.name=="string"?r.name.trim():"";if(!t||t==="undefined"||t==="null")throw new Error(`worker name is required and must be a real identifier (got: ${JSON.stringify(r.name)})`);let n=x(t);if(e.workers?.[n])throw new Error(`worker already exists in run ${e.id}: ${n}`);if(!r.task)throw new Error(`missing task text for worker ${n}`);let o=r.routingRule||r.requestedModel?{provider:r.provider||Er,model:r.model,rule:r.routingRule||"explicit:spawn",requestedModel:r.requestedModel??r.model}:Ks({explicitModel:r.model,explicitProvider:r.provider,explicitProviderIsOperatorOverride:!!r.provider?.trim(),configuredProvider:F().workerProvider}),s=Gf(o.provider),i=o.model;if(s.preflightModel){let T=s.preflightModel(r.model);if(!T.ok)throw new Error(`model preflight failed for provider "${s.name}": ${T.note??"invalid model/provider combination"}`);T.normalized&&console.error(`[supervisor] ${n}: ${T.note}`),i=T.model}let{worktreesDir:a}=le(),l=tn.join(N(e.id),"workers",n);mI(l,{recursive:!0});let c=tn.join(a,e.id,n),u=r.repairTargetBranch?.trim()||void 0,d=u||r.branch||`agent/${e.id}/${n}`;if(pI(c))throw new Error(`worktree path already exists: ${c}`);if(Z(e.repo,["fetch","origin","--prune"],{allowFailure:!0}),u)Uh(e.repo,c,u);else{let T=Ff({baseCommit:e.baseCommit,base:e.base,verifyRef:te=>Z(e.repo,["rev-parse","--verify","--quiet",`${te}^{commit}`],{allowFailure:!0}).trim().length>0});T.repaired&&(console.error(`[supervisor] ${n}: run baseCommit ${e.baseCommit||"<empty>"} invalid \u2014 repaired to ${T.ref} (${T.source})`),e.baseCommit=Z(e.repo,["rev-parse",T.ref],{allowFailure:!0}).trim()||T.ref,Ae(e)),Z(e.repo,["worktree","add","-b",d,c,e.baseCommit],{throwError:!0})}let p=tn.join(l,"stdout.jsonl"),m=tn.join(l,"stderr.log"),f=tn.join(l,"heartbeat.jsonl"),y=jf({task:r.task,ownedPaths:r.ownedPaths||[],worktreePath:c,heartbeatPath:f,planId:r.planId,taskId:r.taskId,instructionPolicyMarkdown:r.instructionPolicyMarkdown,memoryQualityMarkdown:r.memoryQualityPromptMarkdown??r.memoryQualityCapture?.promptMarkdown??null,personaMarkdown:r.personaMarkdown,contextEnvelopeMarkdown:r.contextEnvelopeMarkdown,runtimeEnvelopeMarkdown:r.runtimeEnvelopeMarkdown,model:i,repairTargetPrUrl:r.repairTargetPrUrl,repairTargetBranch:r.repairTargetBranch??(u||void 0)}),k=process.env.KYNVER_HARNESS_TASK_ID,b=process.env.KYNVER_HARNESS_AGENT_OS_ID;r.taskId&&(process.env.KYNVER_HARNESS_TASK_ID=String(r.taskId)),r.agentOsId&&(process.env.KYNVER_HARNESS_AGENT_OS_ID=String(r.agentOsId));let g=zs({title:r.taskTitle,personaSlug:r.personaSlug,parentTaskId:r.parentTaskId,executorRef:r.executorRef}),h,w,E,S,_=r.workerMcpToken?.trim();if(_&&gl(s.name)&&Yn()){let T=Fa();T&&r.agentOsId&&r.taskId?(w={apiBaseUrl:T,agentOsId:String(r.agentOsId),taskId:String(r.taskId),token:_,capabilities:r.workerMcpCapabilities??null},console.error(`[supervisor] ${n}: worker tools enabled (in-process, no config on disk)`)):console.error(`[supervisor] ${n}: worker tools skipped (missing API base URL or task identity) \u2014 spawning without tools`)}let K=Ym(s.name);if(_&&K&&Yn()){let T=Fa();if(T&&r.agentOsId&&r.taskId){let te=ac({agentOsId:String(r.agentOsId),workerKey:l}),B=await ko.start({address:te,apiBaseUrl:T,agentOsId:String(r.agentOsId),taskId:String(r.taskId),token:_,capabilities:r.workerMcpCapabilities??null,expiresAt:r.workerMcpExpiresAt??Date.now()+fI,workerPid:process.pid,identity:cc(),onRefusal:M=>console.error(`[supervisor] ${n}: worker tools refused a call (${M})`)});if(Fl(l,B),s.name==="codex"){let M=bg({workerDir:l,brokerSocketPath:te.socketPath});if(M.ok){let D=Sg(M.codexHome,yl());D.ok?(E=M.codexHome,h=E):(io(l),await Vr(l),console.error(`[supervisor] ${n}: worker tools skipped \u2014 codex rejected the generated config (${D.detail}); spawning with the normal environment`))}else await Vr(l),console.error(`[supervisor] ${n}: worker tools skipped \u2014 ${M.detail}`)}else if(s.name==="cursor"){let M=Rg({worktreePath:c,brokerSocketPath:te.socketPath});M.ok?h=M.configPath:(await Vr(l),console.error(`[supervisor] ${n}: worker tools skipped \u2014 ${M.detail}`))}else if(s.name==="gemini"&&Bs(Us())==="antigravity"){let M=Pg({worktreePath:c,brokerSocketPath:te.socketPath});M.ok?h=M.configPath:(await Vr(l),console.error(`[supervisor] ${n}: worker tools skipped \u2014 ${M.detail}`))}else if(s.name==="gemini"){let M=Ig({workerDir:l,brokerSocketPath:te.socketPath});M.ok?(S=M.geminiCliHome,h=S):(await Vr(l),console.error(`[supervisor] ${n}: worker tools skipped \u2014 ${M.detail}`))}else h=Jm({workerDir:l,brokerSocketPath:te.socketPath});h&&console.error(`[supervisor] ${n}: worker tools enabled via broker (${B.identitySummary})`)}else console.error(`[supervisor] ${n}: worker MCP tools skipped (missing API base URL or task identity) \u2014 spawning without tools`)}let $=r.taskId?Nd(Md(e.id,String(r.taskId),n)):null,C;try{C=Dd($,()=>s.start({name:n,task:r.task,ownedPaths:r.ownedPaths,model:i,branch:d,worktreePath:c,workerDir:l,stdoutPath:p,stderrPath:m,heartbeatPath:f,prompt:y,reviewWorker:g,executionMode:r.executionMode??"write",...w?{workerToolGrant:w}:{},...E?{codexHome:E}:{},...S?{geminiCliHome:S}:{},...h?{mcpConfigPath:h,mcpAllowedTools:Gm(r.workerMcpCapabilities)}:{}}))}catch(T){throw h&&(Ns(l),Zs(c),io(l),ti(l),ri(c),Qt(l)),Z(e.repo,["worktree","remove","--force",c],{allowFailure:!0}),Z(e.repo,["branch","-D",d],{allowFailure:!0}),T}finally{k===void 0?delete process.env.KYNVER_HARNESS_TASK_ID:process.env.KYNVER_HARNESS_TASK_ID=k,b===void 0?delete process.env.KYNVER_HARNESS_AGENT_OS_ID:process.env.KYNVER_HARNESS_AGENT_OS_ID=b}let re=_f(C.model,i,s.defaultModel),he=F(),je=hr(process.env,he),pr=Be().runnerId,Ur=cs({boxKind:je.boxKind,config:he,env:process.env}),j={name:n,runId:e.id,status:"running",pid:C.pid,model:re,provider:o.provider,branch:d,worktreePath:c,workerDir:l,stdoutPath:p,stderrPath:m,heartbeatPath:f,ownedPaths:r.ownedPaths,...r.agentOsId?{agentOsId:String(r.agentOsId)}:{},...r.taskId?{taskId:String(r.taskId)}:{},...r.planId?{planId:String(r.planId)}:{},...r.instructionPolicyFingerprint?{instructionPolicyFingerprint:String(r.instructionPolicyFingerprint)}:{},...r.instructionPolicyEvidence?{instructionPolicyEvidence:r.instructionPolicyEvidence}:{},...r.memoryQualityCapture?{memoryQualityCapture:r.memoryQualityCapture}:{},...r.personaSlug?{personaSlug:String(r.personaSlug)}:{},...r.personaEvidence?{personaEvidence:r.personaEvidence}:{},...r.contextEnvelopeEvidence?{contextEnvelopeEvidence:r.contextEnvelopeEvidence}:{},...r.runtimeEnvelopeEvidence?{runtimeEnvelopeEvidence:r.runtimeEnvelopeEvidence}:{},...r.leaseOwner?{leaseOwner:String(r.leaseOwner)}:{},...r.leaseToken?{leaseToken:String(r.leaseToken)}:{},...r.dispatched?{dispatched:!0}:{},...!r.agentOsId||!r.taskId?{localOnly:!0}:{},routingRule:o.rule,...o.requestedModel?{requestedModel:o.requestedModel}:{},...o.orchestrationAudit?{orchestrationAudit:o.orchestrationAudit}:{},...r.executorRef?{executorRef:String(r.executorRef)}:{},...r.parentTaskId?{parentTaskId:String(r.parentTaskId)}:{},...r.taskTitle?{taskTitle:String(r.taskTitle)}:{},...r.taskPrUrl?{taskPrUrl:String(r.taskPrUrl)}:{},...r.repairTargetPrUrl?{repairTargetPrUrl:String(r.repairTargetPrUrl)}:{},...r.repairTargetBranch?{repairTargetBranch:String(r.repairTargetBranch)}:{},executionMode:r.executionMode??"write",boxKind:je.boxKind,boxId:Ur,runtimeId:pr,startedAt:new Date().toISOString(),...$?{oomRetryHeapMb:$}:{}};if(L(e.id,j),Bl(l,C.pid),e.workers={...e.workers||{},[n]:{workerDir:l,statusPath:tn.join(l,"worker.json")}},e.status="running",Ae(e),j.agentOsId&&j.taskId){let T;try{T=Lh({runId:e.id,workerName:n,workerDir:l,agentOsId:j.agentOsId})}catch(te){let B=`completion sidecar failed to spawn: ${te.message}`;j.completionBlocker=B,L(e.id,j)}if(T)T.pid&&(j.completionSidecarPid=T.pid,L(e.id,j));else{let te=j.completionBlocker??"completion sidecar failed to spawn (CLI not found or spawn error)";j.completionBlocker=te,j.completionSidecarSpawnFailedAt=new Date().toISOString(),L(e.id,j),Uf(e.id,j,te)}}return j}H();Dn();function gI(e,r){let t=Ht(r)?.trim();return t||ze("KYNVER_RUNNER_TOKEN",e)||ze("OPENCLAW_RUNNER_TOKEN",e)||null}function hI(e){let r=wr()?.trim();return r||ze("KYNVER_API_KEY",e)||ze("KYNVER_RUNTIME_SECRET",e)||ze("KYNVER_CRON_SECRET",e)||ze("OPENCLAW_CRON_SECRET",e)||null}async function Gh(e,r={}){let t=r.env??process.env,n=r.nowMs??Date.now(),o=r.timeoutMs??8e3,s=new Date(n).toISOString(),i=r.fetcher??fetch,a=gI(t,e.agentOsId),l=hI(t),c="none",u={};if(a)c="runner_token",u["X-Kynver-Runner-Token"]=a;else if(l)c="api_key",u["X-Kynver-Service-Secret"]=l;else return{reachable:!1,authSource:"none",endpoint:null,httpStatus:null,responseMs:null,probedAt:s,error:"No runner token or API key found \u2014 set KYNVER_RUNNER_TOKEN, store runnerToken in ~/.kynver/credentials, or complete M0.3 install"};let d=`${e.apiBaseUrl}/api/agent-os/runner-token/verify`,p=Date.now();try{let m=AbortSignal.timeout(o),f=await i(d,{method:"GET",headers:{...u,Accept:"application/json","X-Kynver-Agent-Os-Id":e.agentOsId},signal:m}),y=Date.now()-p,k=f.status<500;return{reachable:k,authSource:c,endpoint:d,httpStatus:f.status,responseMs:y,probedAt:s,error:k?null:`MCP endpoint returned HTTP ${f.status} \u2014 server error or misconfigured KYNVER_API_URL`}}catch(m){let f=Date.now()-p,y=m instanceof Error?m.message:String(m);return{reachable:!1,authSource:c,endpoint:d,httpStatus:null,responseMs:f,probedAt:s,error:`MCP endpoint unreachable: ${y}`}}}Sn();function kI(e,r){let t=e.KYNVER_API_URL?.trim()||e.KYNVER_CRON_FIRE_BASE_URL?.trim()||r.apiBaseUrl?.trim()||null;return t?vn(t)??null:null}function yI(e,r){return(e.KYNVER_DEFAULT_REPO?.trim()||e.KYNVER_HARNESS_REPO?.trim()||r.defaultRepo?.trim()||null)??null}function RI(e,r,t){let n=e.KYNVER_HARNESS_ROOT?.trim()||r.harnessRoot?.trim()||null;return n||t||null}function Yh(e,r={}){let t=r.env??process.env,n=r.nowMs??Date.now(),o=r.config??{},s=kI(t,o);if(!s)return{ok:!1,code:"missing_api_base_url",detail:"No API base URL found. Set KYNVER_API_URL, or run `kynver setup --api-base-url <url>`."};let i=(t.KYNVER_AGENT_OS_ID??t.OPENCLAW_AGENT_OS_ID??o.agentOsId??"").trim();if(i&&i!==e.agentOsId)return{ok:!1,code:"workspace_mismatch",detail:`envelope workspace "${e.agentOsId}" does not match local config "${i}"`};let a=yI(t,o),l=RI(t,o,a);return{ok:!0,context:{jobId:e.jobId,agentOsId:e.agentOsId,taskId:e.taskId,repoPath:a,worktreeBase:l,apiBaseUrl:s,hydratedAt:new Date(n).toISOString()}}}O();H();import{mkdirSync as Jh}from"node:fs";import{homedir as vI,tmpdir as WY}from"node:os";import ki from"node:path";function zh(){let e=process.env.KYNVER_STATE_ROOT;return e?ki.resolve(e):ki.join(vI(),".kynver","state")}function yi(){return ki.join(zh(),"plan-outbox")}function bI(){return ki.join(zh(),"plan-outbox-archive")}function Xh(){let e=yi(),r=bI();return Jh(e,{recursive:!0}),Jh(r,{recursive:!0}),{outboxDir:e,archiveDir:r}}var KY=600*1e3,yo={storeFailures:0,corruptItemsSeen:0,corruptItemsQuarantined:0,duplicateDrainsObserved:0,halfArchivesCompleted:0};function Qh(){return{"planOutbox.storeFailures":yo.storeFailures,"planOutbox.corruptItemsSeen":yo.corruptItemsSeen,"planOutbox.corruptItemsQuarantined":yo.corruptItemsQuarantined,"planOutbox.duplicateDrainsObserved":yo.duplicateDrainsObserved,"planOutbox.halfArchivesCompleted":yo.halfArchivesCompleted}}import{existsSync as xI,readFileSync as _I,renameSync as VY,readdirSync as GY,rmSync as YY,writeFileSync as qY,unlinkSync as JY}from"node:fs";import Zh from"node:path";function ek(e){if(!xI(e))return null;try{return JSON.parse(_I(e,"utf8"))}catch{return null}}function Ri(e){let{outboxDir:r}=Xh();return{jsonPath:Zh.join(r,`${e.id}.json`),bodyPath:Zh.join(r,e.bodyPath)}}import OI from"node:path";function pc(e){let r=OI.join(yi(),`${e}.json`);return ek(r)}function mc(e){let r=Ri(e);return["## Plan persistence risk","",`AgentOS plan write is **not** confirmed (${e.userStatus}).`,`- outboxId: \`${e.id}\``,e.planId?`- planId: \`${e.planId}\``:"- planId: (pending \u2014 create not yet applied)",`- outbox: \`${r.jsonPath}\``,`- body: \`${r.bodyPath}\``,"","Drain when approval/connectivity returns: `kynver plan outbox drain`"].join(`
+`)}function fc(e){let r=e.metadata&&typeof e.metadata=="object"?e.metadata:null,t=typeof e.planPersistenceOutboxId=="string"&&e.planPersistenceOutboxId||(r&&typeof r.planPersistenceOutboxId=="string"?r.planPersistenceOutboxId:void 0);return t?{outboxId:t,jsonPath:typeof e.planPersistenceOutboxPath=="string"?e.planPersistenceOutboxPath:r&&typeof r.planPersistenceOutboxPath=="string"?r.planPersistenceOutboxPath:void 0,bodyPath:typeof e.planPersistenceBodyPath=="string"?e.planPersistenceBodyPath:r&&typeof r.planPersistenceBodyPath=="string"?r.planPersistenceBodyPath:void 0}:null}U();function gc(e){return e?.trim()?e.trim():null}function rk(e,r){let t=gc(e.boxKind),n=gc(e.runnerId),o=gc(e.harnessRoot);return t&&t!==r.boxKind?{ok:!1,reason:`run ${e.id} belongs to box "${t}" but this host is "${r.boxKind}" \u2014 use a run under ${r.harnessRoot}`}:n&&n!==r.runnerId?{ok:!1,reason:`run ${e.id} is bound to runner "${n}" but this host is "${r.runnerId}"`}:o&&o!==r.harnessRoot?{ok:!1,reason:`run ${e.id} harness root "${o}" does not match this host "${r.harnessRoot}"`}:!t||!n||!o?(e.boxKind=r.boxKind,e.runnerId=r.runnerId,e.harnessRoot=r.harnessRoot,Ae(e),{ok:!0,stamped:!0}):{ok:!0}}H();Wn();function tk(e=process.env){return Kt(F(),e,{requireExplicitBoxKind:!0})}function nk(e){return[...e.errors,...e.warnings].join("; ")}async function Ro(e){let r=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/release`,t;try{t=await X(r,e.secret,{agentOsId:e.agentOsId,leaseOwner:e.leaseOwner,...e.leaseToken?.trim()?{leaseToken:e.leaseToken.trim()}:{},...e.failureDetail?{failureDetail:e.failureDetail}:{}},{agentOsId:e.agentOsId,baseUrl:e.baseUrl})}catch(s){return{released:!1,httpOk:!1,transportError:!0,releaseResponse:{ok:!1,error:s.message}}}let n=t.response;return{released:t.ok===!0||n?.ok===!0,httpOk:t.ok===!0,transportError:!1,releaseResponse:t.response??t}}function nn(e){if(!e||typeof e!="object")return!1;let r=e;return[r.agentOsId,r.subjectTaskId,r.reviewTaskId,r.signature].every(t=>typeof t=="string"&&!!t)&&/^https:\/\/github\.com\/[^/]+\/[^/]+\/pull\/[1-9]\d*$/.test(r.prUrl)&&/^[a-f0-9]{40}$/.test(r.headSha)&&/^[a-f0-9]{64}$/.test(r.reviewGenerationSha256)&&Number.isSafeInteger(r.reviewAttempt)&&r.reviewAttempt>0&&typeof r.acceptedAt=="string"&&Number.isFinite(Date.parse(r.acceptedAt))}function ok(e,r){return e.signature===r.signature&&e.agentOsId===r.agentOsId&&e.subjectTaskId===r.subjectTaskId&&e.prUrl===r.prUrl&&e.reviewTaskId===r.reviewTaskId&&e.reviewAttempt===r.reviewAttempt&&e.reviewGenerationSha256===r.reviewGenerationSha256&&e.headSha===r.headSha&&e.acceptedAt===r.acceptedAt}import{spawnSync as yk}from"node:child_process";var sk=new Set(["SUCCESS","SKIPPED","NEUTRAL"]);function Xr(e){return typeof e.name=="string"&&e.name||typeof e.context=="string"&&e.context||typeof e.workflowName=="string"&&e.workflowName||"unknown check"}function ik(e){let r=typeof e.completedAt=="string"&&e.completedAt||typeof e.startedAt=="string"&&e.startedAt;if(!r)return 0;let t=Date.parse(r);return Number.isFinite(t)?t:0}function ak(e){let r=Array.isArray(e)?e:[],t=new Map;for(let n of r){let o=n&&typeof n=="object"?n:{},s=Xr(o),i=t.get(s);(!i||ik(o)>=ik(i))&&t.set(s,o)}return[...t.values()]}function TI(e){let r=typeof e.detailsUrl=="string"&&e.detailsUrl||typeof e.details_url=="string"&&e.details_url||typeof e.html_url=="string"&&e.html_url||"",t=typeof e.workflowName=="string"?e.workflowName.trim():"",n=e.app&&typeof e.app=="object"?e.app:null,o=typeof n?.slug=="string"?n.slug:"";return t.length>0||o==="github-actions"||/^https:\/\/github\.com\/[^/]+\/[^/]+\/actions\//i.test(r)}function lk(e){let r=ak(e),t=[],n=[],o=[];for(let s of r){if(TI(s)){o.push(Xr(s));continue}let i=typeof s.conclusion=="string"?s.conclusion.toUpperCase():"",a=typeof s.status=="string"?s.status.toUpperCase():"",l=typeof s.state=="string"?s.state.toUpperCase():"";if(!(i&&sk.has(i))){if(i){n.push(`${Xr(s)}=${i}`);continue}if(!(l&&sk.has(l))){if(l&&l!=="PENDING"&&l!=="EXPECTED"){n.push(`${Xr(s)}=${l}`);continue}if(l==="PENDING"||l==="EXPECTED"){t.push(`${Xr(s)}=${l}`);continue}if(a&&a!=="COMPLETED"){t.push(`${Xr(s)}=${a}`);continue}t.push(`${Xr(s)}=PENDING`)}}}return{pending:t,failed:n,ignoredActions:o}}function ck(e){return ak(e).some(t=>{let n=Xr(t),o=typeof t.conclusion=="string"?t.conclusion.toUpperCase():"",s=typeof t.state=="string"?t.state.toUpperCase():"";return/^vercel/i.test(n)&&(o==="SUCCESS"||s==="SUCCESS")})}var NI=new Set(["CLEAN","HAS_HOOKS"]);function uk(e,r){let t=e==="UNSTABLE"&&r.ignoredActions.length>0;return!NI.has(e)&&!t?`mergeStateStatus is ${e}`:null}import{spawnSync as MI}from"node:child_process";function dk(){if(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim())return{source:"env",configured:!0,reason:"GitHub token already configured in environment"};let e=MI("gh",["auth","token"],{windowsHide:!0,encoding:"utf8",stdio:["ignore","pipe","pipe"]});if(e.status!==0)return{source:"missing",configured:!1,reason:typeof e.stderr=="string"&&e.stderr.trim()?e.stderr.trim():"gh auth token failed; run `gh auth login` on this machine"};let r=typeof e.stdout=="string"?e.stdout.trim():"";return r?(process.env.GH_TOKEN=r,{source:"gh-cli",configured:!0,reason:"Using local GitHub CLI auth for daemon land_pr merge"}):{source:"missing",configured:!1,reason:"gh auth token returned an empty token; run `gh auth login` on this machine"}}import{createHash as DI,randomUUID as WI}from"node:crypto";import{closeSync as pk,fsyncSync as mk,mkdirSync as LI,openSync as fk,realpathSync as UI,writeFileSync as BI}from"node:fs";import hc from"node:path";function hk(e){return!!e&&[e.agentOsId,e.taskId,e.runId,e.workerName,e.leaseOwner,e.leaseToken,e.receiptDir].every(r=>typeof r=="string"&&!!r.trim())}function gk(e,r,t,n){LI(e,{recursive:!0,mode:448});let o=UI(e),s=fk(hc.join(o,`${r}.${t}.json`),"wx",384);try{BI(s,JSON.stringify({...n,phase:t},null,2)+`
+`),mk(s)}finally{pk(s)}for(let i=o;;i=hc.dirname(i)){let a=fk(i,"r");try{mk(a)}catch(l){if(!FI(l))throw l}finally{pk(a)}if(i===hc.dirname(i))break}}function FI(e,r=process.platform){return r==="win32"&&e?.code==="EPERM"}function kk(e,r,t,n){let o={acceptedReview:n,agentOsId:e.agentOsId,taskId:e.taskId,runId:e.runId,workerName:e.workerName,leaseOwner:e.leaseOwner,leaseTokenSha256:DI("sha256").update(e.leaseToken).digest("hex")},s={...o,prUrl:r,invocationId:WI(),startedAt:new Date().toISOString(),finishedAt:null,headSha:t,mergedAt:null,mergeCommit:null,source:"daemon_land_pr",mergeInvoked:!1};return gk(e.receiptDir,s.invocationId,"pending",s),{finish(i){let a={...o,...i,invocationId:s.invocationId,startedAt:s.startedAt,finishedAt:new Date().toISOString()};return gk(e.receiptDir,s.invocationId,"finished",{...s,...a}),a}}}function yc(e){return e?.trim()?["--repo",e.trim()]:[]}function Rk(e){let r=/github\.com\/([^/]+)\/([^/]+)\/pull\/\d+/i.exec(e.trim());return r?`${r[1]}/${r[2]}`:null}function vk(e,r,t){let n=e.gh(r,t);if(n.status!==0)throw new Error(n.stderr||n.stdout||`gh ${t.join(" ")} failed`);return JSON.parse(n.stdout||"{}")}var KI=/^##\s*(test\s*plan|verification|test\s*evidence|verify)\b/im,HI=/typecheck|npm run (test|build|typecheck)|vitest|tsc\b|verify-pr-local|local verify|local-verify|tests? (pass|green)|build green|node --test/i,$I=/^docs[(:]/i,jI=/docs[- ]only|documentation only|no[- ]code change|no code changes|low[- ]risk|plan tracker only|markdown only/i;function VI(e){let r=typeof e.title=="string"?e.title.trim():"",t=typeof e.body=="string"?e.body.trim():"",n=$I.test(r)||jI.test(t),o=KI.test(t),s=HI.test(t);return n||o||s||e.vercelCheckSuccess===!0}function GI(e){if(!VI({title:e.title,body:e.body,vercelCheckSuccess:ck(e.statusCheckRollup)}))throw new Error(`PR #${e.number} lacks landing verification evidence \u2014 add ## Test plan / ## Verification with local commands, Vercel preview, or docs/no-code rationale`)}function YI(e){if(e.state!=="OPEN")throw new Error(`PR #${e.number} is ${e.state}, not OPEN`);if(e.isDraft)throw new Error(`PR #${e.number} is still a draft`);let r=lk(e.statusCheckRollup);if(r.failed.length>0)throw new Error(`PR #${e.number} has failing checks: ${r.failed.join(", ")}`);if(r.pending.length>0)throw new Error(`PR #${e.number} has pending checks: ${r.pending.join(", ")}`);let t=uk(e.mergeStateStatus,r);if(t)throw new Error(`PR #${e.number} ${t}`)}function qI(e){YI(e),GI(e)}function JI(e){try{return qI(e),null}catch(r){return r instanceof Error?r.message:String(r)}}function zI(e,r,t,n){if(!n?.trim())return;let o=encodeURI(`heads/${n}`);e.gh(r,["api","-X","DELETE",`repos/${t}/git/refs/${o}`])}function XI(e,r,t){if(t?.trim())return t.trim();let n=e.gh(r,["repo","view","--json","nameWithOwner"]);if(n.status!==0)throw new Error(n.stderr||"Could not resolve GitHub repo");let o=JSON.parse(n.stdout||"{}");if(!o.nameWithOwner)throw new Error("Could not resolve GitHub repo");return o.nameWithOwner}function QI(e,r){if(!r?.trim())return;let t=yk("git",["worktree","list","--porcelain"],{windowsHide:!0,cwd:e,encoding:"utf8"});if(t.status!==0)return;let n=String(t.stdout||"").split(/\r?\n/),o=null,s=null;for(let i of n){if(i.startsWith("worktree ")){o=i.slice(9).trim(),s=null;continue}i.startsWith("branch ")&&o&&(s=i.slice(7).trim(),s.endsWith(`/${r}`)&&yk("git",["worktree","remove","--force",o],{windowsHide:!0,cwd:e,encoding:"utf8"}))}}async function bk(e){let r=e.cwd??process.cwd(),t=e.exec??Qs,n=e.prUrl.trim();if(!n)throw new Error("prUrl is required");let o=e.acceptedReview,s=()=>({prUrl:n,outcome:"blocked",reason:"accepted_review_required: missing, stale or changed head; fresh independent review required"});if(!nn(o)||o.prUrl!==n||o.agentOsId!==e.operation?.agentOsId||!e.revalidateAcceptedReview)return s();let i=dk();if(!i.configured)return{prUrl:n,outcome:"blocked",reason:i.reason};let a=vk(t,r,["pr","view",n,...yc(e.repo),"--json",["number","url","title","body","state","isDraft","mergeStateStatus","statusCheckRollup","headRefName","headRefOid","mergedAt","mergeCommit"].join(",")]);if(a.state==="MERGED")return{prUrl:a.url||n,outcome:"skipped",mergeCommit:a.mergeCommit?.oid??null,provenance:{attribution:"preexisting_merge",mergeInvoked:!1,headSha:a.headRefOid??null,mergedAt:a.mergedAt??null,mergeCommit:a.mergeCommit?.oid??null},reason:`PR #${a.number} is already merged \u2014 land_pr no-op (redelivery)`};if(a.headRefOid?.toLowerCase()!==o.headSha)return s();let l=JI(a);if(l)return e.skipNotReady?{prUrl:a.url||n,outcome:"skipped",reason:l}:{prUrl:a.url||n,outcome:"blocked",reason:l};if(e.dryRun)return{prUrl:a.url||n,outcome:"skipped",reason:"dry-run: PR is ready to merge"};if(!a.headRefOid||!/^[a-f0-9]{40}$/i.test(a.headRefOid)||!hk(e.operation))return{prUrl:n,outcome:"blocked",reason:"land_pr requires observed headRefOid and claimed dispatch operation identity"};let c=String(a.number),u=await e.revalidateAcceptedReview().catch(()=>null);if(!nn(u)||!ok(o,u))return s();let d=kk(e.operation,n,o.headSha,o),p;try{p=t.gh(r,["pr","merge",c,...yc(e.repo),"--squash","--match-head-commit",o.headSha])}catch{let k=d.finish({attribution:"unconfirmed",mergeInvoked:!0,headSha:a.headRefOid,mergedAt:null,mergeCommit:null,mergeExitCode:null});return{prUrl:n,outcome:"blocked",reason:"merge invocation threw; outcome unconfirmed",provenance:k}}let m=(k,b)=>d.finish({attribution:b,mergeInvoked:!0,headSha:a.headRefOid,mergedAt:k?.mergedAt??null,mergeCommit:k?.mergeCommit?.oid??null,mergeExitCode:p.status});if(p.status!==0){let k=kc(t,r,c,e.repo);return k?{prUrl:k.url||a.url||n,outcome:"skipped",mergeCommit:k.mergeCommit?.oid??null,provenance:m(k,"external_merge_observed"),reason:`PR #${a.number} is already merged \u2014 merged by another lane during land_pr (race)`}:{prUrl:a.url||n,outcome:"blocked",reason:p.stderr||p.stdout||"gh pr merge failed",provenance:m(null,"unconfirmed")}}let f=kc(t,r,c,e.repo);if(f||(f=kc(t,r,c,e.repo)),!f)return{prUrl:n,outcome:"blocked",reason:"merge command completed but merged state is unconfirmed",provenance:m(null,"unconfirmed")};let y=m(f,"invoked_merge_observed");try{let k=XI(t,r,e.repo);zI(t,r,k,a.headRefName),QI(r,a.headRefName)}catch{}return{prUrl:f?.url||a.url||n,outcome:"merged",provenance:y,mergeCommit:f?.mergeCommit?.oid??null,reason:`Daemon land_pr invoked merge; PR #${a.number} read back merged`}}function kc(e,r,t,n){try{let o=vk(e,r,["pr","view",t,...yc(n),"--json","number,url,mergedAt,mergeCommit,state"]);return o.state==="MERGED"?o:null}catch{return null}}async function Sk(e){let r=e.decision.task,t=e.decision.acceptedReview,n=String(r.prUrl??"");return bk({prUrl:n,cwd:e.cwd,repo:Rk(n),exec:e.exec,operation:e.operation,acceptedReview:nn(t)?t:void 0,revalidateAcceptedReview:async()=>{let o=await X(`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(String(r.id))}/landing-review`,e.secret,{leaseToken:r.leaseToken,leaseOwner:r.leaseOwner,attempt:r.attempt},{agentOsId:e.agentOsId,baseUrl:e.baseUrl}),s=o.response;return o.ok&&s?.ok===!0&&nn(s.acceptedReview)?s.acceptedReview:null}})}H();async function wk(e){let r=await ee(e.secret,e.agentOsId,{baseUrl:e.baseUrl}),t=String(e.task.id),n=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/harness/completion`,o=e.report.provenance?.finishedAt??new Date().toISOString(),s={source:"kynver-harness",agentOsId:e.agentOsId,runId:e.runId,workerName:`land-pr-${t}`,taskId:t,leaseToken:e.task.leaseToken??null,startedAt:e.report.provenance?.startedAt??o,finishedAt:o,status:{finalResult:e.report,prUrl:e.report.prUrl,summary:e.report.reason,leaseToken:e.task.leaseToken??null},workerInjection:null},i=await X(n,r,s,{agentOsId:e.agentOsId,baseUrl:e.baseUrl});return{ok:i.ok,status:i.status}}function xk(){return["## verify_live completion contract","Finish with a JSON finalResult object:","{",'  "prUrl": "<landed pr>",','  "outcome": "passed" | "failed" | "skipped" | "no_mcp_surface",','  "reason": "<human summary>",','  "mergeCommit": "<sha optional>",','  "liveReadback": "<prod readback string from acceptance.liveReadbackQuery>",','  "mcpCalls": [{ "tool": "<name>", "ok": true, "summary": "..." }]',"}","","Drive the feature MCP tools against live production. Do not mark passed without exercising the MCP surface.","When the subject carries an acceptance snapshot, include liveReadback \u2014 the server oracle rejects passed if the original symptom still appears."].join(`
+`)}var ZI="dispatch_start_readback_failed:";function ht(e){return`${ZI} ${e.trim()}`}function eO(e){return e.branch?.trim()?e.worktreePath?.trim()?e.heartbeatPath?.trim()?e.startedAt?.trim()?null:"missing local worker startedAt":"missing local worker heartbeatPath":"missing local worker worktreePath":"missing local worker branch"}function rO(e){let{snapshot:r,leaseOwner:t,expectedLeaseToken:n,worker:o}=e;if(!r)return{ok:!1,error:ht("task lease snapshot missing after spawn"),detail:{taskId:o.taskId,leaseOwner:t,expectedLeaseToken:n}};if(r.status!=="running")return{ok:!1,error:ht(`AgentOS task status=${r.status} (expected running)`),detail:{taskId:r.taskId,status:r.status,leaseOwner:r.leaseOwner,blocker:r.blocker},snapshot:r};let s=r.leaseOwner?.trim()??"";if(!s||s!==t.trim())return{ok:!1,error:ht(`leaseOwner mismatch (board=${s||"null"}, expected=${t})`),detail:{taskId:r.taskId,boardLeaseOwner:s||null,expectedLeaseOwner:t},snapshot:r};let i=r.leaseToken?.trim()??"";if(!i||i!==n.trim())return{ok:!1,error:ht(`leaseToken mismatch (board=${i||"null"}, expected=${n})`),detail:{taskId:r.taskId,boardLeaseToken:i||null,expectedLeaseToken:n},snapshot:r};let a=eO(o);return a?{ok:!1,error:ht(a),detail:{taskId:o.taskId,worker:o.name},snapshot:r}:r.heartbeatAt?.trim()?o.executorRef?.trim()&&r.executorRef?.trim()&&o.executorRef.trim()!==r.executorRef.trim()?{ok:!1,error:ht(`executorRef mismatch (board=${r.executorRef}, worker=${o.executorRef})`),detail:{taskId:r.taskId,boardExecutorRef:r.executorRef,workerExecutorRef:o.executorRef},snapshot:r}:{ok:!0,snapshot:r}:{ok:!1,error:ht("AgentOS heartbeatAt missing after claim"),detail:{taskId:r.taskId},snapshot:r}}async function _k(e){let r=await $s({agentOsId:e.agentOsId,taskIds:[e.taskId],baseUrl:e.baseUrl,secret:e.secret});return rO({snapshot:r.get(e.taskId)??null,leaseOwner:e.leaseOwner,expectedLeaseToken:e.expectedLeaseToken,worker:e.worker})}O();U();function Ek(e,r,t){r.pid&&Y(r.pid)&&(Ne(r.pid,"SIGTERM"),Y(r.pid)&&Ne(r.pid,"SIGKILL"));let n={...r,status:"failed",pid:void 0,completionBlocker:t,dispatchStartReadbackFailed:!0};return L(e,n),n}U();function Ck(e){let r=typeof e.personaSlug=="string"?e.personaSlug.trim().toLowerCase():"";if(r==="dalton"||r==="lorentz")return!0;let t=typeof e.executorRef=="string"?e.executorRef.trim().toLowerCase():"";if(t.startsWith("expert-lane-pr-review:")||t.startsWith("scheduledjob:")&&e.parentTaskId)return!0;let n=typeof e.title=="string"?e.title.toLowerCase():"";return n.includes("expert pr review")||n.startsWith("[dalton] review")||n.startsWith("[lorentz] review")}async function Pk(e){let r=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/review-head-reconcile`,t=await X(r,e.secret,{phase:"worker_start"},{agentOsId:e.agentOsId,baseUrl:e.baseUrl});if(!t.ok)return null;let n=t.response;return n&&typeof n=="object"?n:null}var Cl=3600*1e3;function Ak(e){let r=e.admissionExhaustion;return!r||typeof r!="object"?null:r}function Ik(e){let r=e.dispatchSkipDrain;return!r||typeof r!="object"?null:r}function tO(e){let r=e.harnessWorkerContext;if(!r||typeof r!="object")return null;let t=r,n=typeof t.instructionPolicyMarkdown=="string"?t.instructionPolicyMarkdown:null,o=typeof t.instructionPolicyFingerprint=="string"?t.instructionPolicyFingerprint:null,s=t.instructionPolicyEvidence&&typeof t.instructionPolicyEvidence=="object"?t.instructionPolicyEvidence:null,i=typeof t.personaMarkdown=="string"?t.personaMarkdown:null,a=typeof t.personaEvidence=="object"&&t.personaEvidence&&typeof t.personaEvidence.injectedPersonaSlug=="string"?t.personaEvidence.injectedPersonaSlug:null,l=t.personaEvidence&&typeof t.personaEvidence=="object"?t.personaEvidence:null,c=t.personaInjectionReady===!0,u=typeof t.contextEnvelopeMarkdown=="string"?t.contextEnvelopeMarkdown:null,d=t.contextEnvelopeEvidence&&typeof t.contextEnvelopeEvidence=="object"?t.contextEnvelopeEvidence:null,p=t.contextEnvelopeReady===!0,m=typeof t.runtimeEnvelopeMarkdown=="string"?t.runtimeEnvelopeMarkdown:null,f=oO(t.runtimeEnvelopeReceipt),y=t.runtimeEnvelopeReady===!0,k=t.memoryQualityCapture&&typeof t.memoryQualityCapture=="object"?t.memoryQualityCapture:null,b=typeof t.memoryQualityPromptMarkdown=="string"?t.memoryQualityPromptMarkdown:typeof k?.promptMarkdown=="string"?k.promptMarkdown:null,g=t.workerMcpToolGrant&&typeof t.workerMcpToolGrant=="object"?t.workerMcpToolGrant:null,h=g&&typeof g.token=="string"&&g.token.trim()?g.token.trim():null,w=h&&Array.isArray(g?.capabilities)?g.capabilities.filter(S=>typeof S=="string"&&S.trim().length>0):null,E=h&&typeof g?.exp=="number"&&Number.isFinite(g.exp)?g.exp*1e3:null;return{instructionPolicyMarkdown:n,instructionPolicyFingerprint:o,instructionPolicyEvidence:s,memoryQualityCapture:k,memoryQualityPromptMarkdown:b,personaMarkdown:i,personaSlug:a,personaEvidence:l,personaInjectionReady:c,contextEnvelopeMarkdown:u,contextEnvelopeEvidence:d,contextEnvelopeReady:p,runtimeEnvelopeMarkdown:m,runtimeEnvelopeEvidence:f,runtimeEnvelopeReady:y,workerMcpToken:h,workerMcpCapabilities:w,workerMcpExpiresAt:E}}function nO(e){if(typeof e!="string")return null;let r=e.trim().toLowerCase();return r.length?r:null}function oO(e){if(!e||typeof e!="object")return null;let r=e;return typeof r.envelopeId!="string"||!r.envelopeId.trim()?null:{envelopeId:r.envelopeId,envelopeSchemaVersion:typeof r.envelopeSchemaVersion=="string"?r.envelopeSchemaVersion:void 0,generatedAt:typeof r.generatedAt=="string"?r.generatedAt:void 0,injectedAt:typeof r.injectedAt=="string"?r.injectedAt:void 0,mode:typeof r.mode=="string"?r.mode:void 0,memoryIncludedCount:typeof r.memoryIncludedCount=="number"?r.memoryIncludedCount:void 0,memoryOmittedCount:typeof r.memoryOmittedCount=="number"?r.memoryOmittedCount:void 0,degraded:typeof r.degraded=="boolean"?r.degraded:void 0,degradedReason:typeof r.degradedReason=="string"?r.degradedReason:r.degradedReason===null?null:void 0,auditFingerprint:typeof r.auditFingerprint=="string"?r.auditFingerprint:void 0,promptMarkdownChars:typeof r.promptMarkdownChars=="number"?r.promptMarkdownChars:void 0}}function sO(e,r){let t=[`[AgentOS task ${e.id}] ${e.title}`,"",e.description?String(e.description):"(no description on the board task)","",`Board linkage: agentOsId=${r}, taskId=${e.id}, attempt=${e.attempt}, executor=${e.executor}${e.executorRef?`, executorRef=${e.executorRef}`:""}.`,"This worker was dispatched from the AgentOS board. The harness reports your completion back to the board when you finish."];e.executor==="verify_live"&&t.push("",xk());let n=fc(e);if(n?.outboxId){let o=pc(n.outboxId);o?t.push("",mc(o)):t.push("","## Plan persistence risk","",`Unconfirmed AgentOS plan write (outboxId=${n.outboxId}).`)}return t.join(`
+`)}function iO(e){let r=new Set;if(e.targetTaskId)return r.add(String(e.targetTaskId)),r;if(e.targetTaskIds)for(let t of String(e.targetTaskIds).split(",")){let n=t.trim();n&&r.add(n)}return r}async function vi(e){let r=e.pipeline===!0||e.pipeline==="true";try{let ke=function(){return B.filter(v=>v.started).length},ye=function(v,R){Fn({runId:l.id,agentOsId:u,phase:v,startedCount:ke(),outcomeCount:B.length,cappedStarts:C,...R})},mr=function(){return B.some(v=>(typeof v.error=="string"?v.error:"").startsWith("dispatch_start_readback_failed:"))},gu=function(v){return v.landPrDispatch===!0?!0:v.task?.executor==="land_pr"};var t=ke,n=ye,o=mr,s=gu;let i=tk();if(!i.ok||!i.identity){let v=nk(i);if(r)return{ok:!1,error:v,boundary:i};console.error(`run dispatch failed: ${v}`),process.exit(1)}let a=i.identity;for(let v of i.warnings)console.error(`[dispatch] runner-boundary warning: ${v}`);let l=q(String(gr(String(e.run||""),"--run"))),c=rk(l,a);if(!c.ok){let v=c.reason??"run does not belong to this runner boundary";if(r)return{ok:!1,error:v,runId:l.id,runnerBoundary:a};console.error(`run dispatch failed: ${v}`),process.exit(1)}c.stamped&&console.error(`[dispatch] stamped run ${l.id} with boxKind=${a.boxKind} runnerId=${a.runnerId}`);let u=String(gr(String(e.agentOsId||""),"--agent-os-id")),d=Q(e.baseUrl?String(e.baseUrl):void 0),p=await ee(e.secret?String(e.secret):void 0,u,{baseUrl:d}),m=e.execute===!0||e.execute==="true",f=!m,y=Be({runId:l.id}),k=eo(l.id,y.runnerId),b=tm(),g=b?om(l.repo):null,h=new WeakMap;if(b&&m&&!g){let v="desktop_execution_policy_denied:repo_identity_unavailable: the repository has no origin remote";if(r)return{ok:!1,error:v,runId:l.id};console.error(`run dispatch failed: ${v}`),process.exit(1)}let w=e.diskPath?Kr({diskPath:String(e.diskPath)}):Kr({diskPath:l.repo}),E=await mm({runId:l.id,agentOsId:u,args:e}),S=iO(e),_=S.size>0,K=Number(e.maxStarts)>0?Math.floor(Number(e.maxStarts)):1,$=_?Math.min(K,S.size):K;if(e.reconcileStaleBlockers===!0||e.reconcileStaleBlockers==="true"){let v=`${d}/api/agent-os/by-id/${encodeURIComponent(u)}/lane-hygiene`;try{await X(v,p,{agentOsId:u,dryRun:!1,includeBoardReconcile:!0},{agentOsId:u,baseUrl:d})}catch(R){console.error(`[dispatch] reconcile-stale-blockers lane-hygiene call failed: ${R.message}`)}}let C=f?$:Math.min($,E.slotsAvailable);if(!f&&C<=0){let v={runId:l.id,agentOsId:u,dryRun:!1,skipped:!0,reason:E.reason??"no resource slots",resourceGate:E};if(r)return{ok:!0,...v};console.log(JSON.stringify(v,null,2));return}let re=Ss(l.id),he=`${d}/api/agent-os/by-id/${encodeURIComponent(u)}/tasks/dispatch-next`,je=(v,R)=>({agentOsId:u,...R?{claimAuthorization:R}:{},dryRun:f,maxStarts:v,leaseOwner:k,leaseDurationMs:Number(e.leaseMs)>0?Math.floor(Number(e.leaseMs)):Cl,runnerDiskGate:w,runnerResourceGate:E,activeHarnessWorkers:re,runnerPresence:y,harnessBoardSnapshot:sc(l.id),...e.lane?{lane:pm(String(e.lane))}:{},...e.executor?{executor:String(e.executor)}:{},...e.diskPath?{diskPath:String(e.diskPath)}:{},...e.targetTaskId?{targetTaskId:String(e.targetTaskId)}:{},...!e.targetTaskId&&e.targetTaskIds?{targetTaskIds:String(e.targetTaskIds).split(",").map(P=>P.trim()).filter(Boolean)}:{}}),pr=im(),Ur=async v=>{let R=b&&g?nm(g):void 0,P=await X(he,p,je(v,R),{agentOsId:u,baseUrl:d,timeoutMs:pr})??{ok:!1,status:0,response:null},W=P.response;if(R&&Array.isArray(W?.result?.started))for(let G of W.result.started)G&&typeof G=="object"&&h.set(G,R.requestNonce);return{dispatch:P,result:W?.result}};f||Fn({runId:l.id,agentOsId:u,phase:"awaiting_dispatch_next",timeoutMs:pr});let j=await Ur(_||f?C:1);if(!j.dispatch.ok||!j.result){let v=qa(j.dispatch.response),R={runId:l.id,agentOsId:u,action:"dispatch",httpStatus:j.dispatch.status,response:j.dispatch.response,authRefreshed:j.dispatch.refreshedAuth===!0,authRefreshFailure:j.dispatch.authRefreshFailure,...v?{timeout:!0}:{}};if(v&&Fn({runId:l.id,agentOsId:u,phase:"timeout",timeout:!0,httpStatus:j.dispatch.status}),r)return{ok:!1,...R};console.log(JSON.stringify(R,null,2)),process.exit(1)}let T=j.result;if(f){let v=Ak(T),R=Ik(T),P={runId:l.id,agentOsId:u,dryRun:!0,wouldStart:T.started.map(W=>({taskId:W.task.id,title:W.task.title,reason:W.reason})),skipped:T.skipped.map(W=>({taskId:W.task.id,skipReason:W.skipReason,reason:W.reason})),diskGate:T.diskGate,resourceGate:T.resourceGate,inspected:T.inspected,pagesScanned:T.pagesScanned??null,candidatesExhausted:T.candidatesExhausted??null,capacityIdle:v?.capacityIdle===!0,admissionExhaustion:v,dispatchSkipDrain:R};if(r)return{ok:!0,...P};console.log(JSON.stringify(P,null,2));return}let te=Af(),B=[],M=[],D=Number(T.inspected)||0,ie=!1;async function V(v,R,P){let W=await Ro({baseUrl:d,secret:p,agentOsId:u,taskId:String(v.id),leaseOwner:k,leaseToken:v.leaseToken?String(v.leaseToken):null,failureDetail:R});v.leaseToken&&Zt({taskId:String(v.id),leaseToken:String(v.leaseToken).trim()},ql(R));let G={taskId:v.id,started:!1,error:R,released:W.released,releaseResponse:W.releaseResponse,...P};return B.push(G),ye("outcome",{lastOutcome:G}),!1}async function Mv(v){let R=v.task,P=String(R.id);if(_&&!S.has(P))return V(R,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...S]});if(!(R.prUrl?String(R.prUrl):""))return V(R,"land_pr task missing prUrl");try{let G=await Sk({decision:v,baseUrl:d,secret:p,agentOsId:u,cwd:l.repo,operation:{agentOsId:u,taskId:P,runId:l.id,workerName:`land-pr-${P}`,leaseOwner:k,leaseToken:typeof R.leaseToken=="string"?R.leaseToken:"",receiptDir:`${N(l.id)}/land-pr-operations`}}),Ve=await wk({baseUrl:d,secret:p,agentOsId:u,runId:l.id,task:R,report:G});return Ve.ok?(B.push({taskId:P,started:!0,landPr:!0,outcome:G.outcome,completionStatus:Ve.status}),!0):V(R,`land_pr completion POST failed (HTTP ${Ve.status})`,{landPr:!0,outcome:G.outcome})}catch(G){return V(R,G.message)}}async function Dv(v){let R="duplicate_dispatch_prevented: live local worker already owns this task",P=await Ro({baseUrl:d,secret:p,agentOsId:u,taskId:String(v.id),leaseOwner:k,leaseToken:v.leaseToken?String(v.leaseToken):null,failureDetail:R});v.leaseToken&&Zt({taskId:String(v.id),leaseToken:String(v.leaseToken).trim()},ql(R));let W={taskId:v.id,started:!1,error:R,alreadyRunning:!0,nonFatal:!0,released:P.released,releaseResponse:P.releaseResponse};return B.push(W),ye("outcome",{lastOutcome:W}),!1}async function Wv(v){let R=v.task,P=tO(v),W=String(R.id);if(_&&!S.has(W))return V(R,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...S]});let G=nO(R.personaSlug);if(G&&(!P?.personaInjectionReady||!P.personaMarkdown))return V(R,`persona_injection_required: missing anchored context-envelope persona block for "${G}"`);if(G&&!P?.runtimeEnvelopeReady)return V(R,`runtime_envelope_required: missing AgentRuntimeEnvelope launch receipt for persona "${G}"`);if(Mf(l.id,W))return Dv(R);let Ve=Number(R.attempt)||1;if(Ve>te.maxTaskAttempts)return V(R,`task attempt ${Ve} exceeds KYNVER_MAX_TASK_ATTEMPTS (${te.maxTaskAttempts})`);let rt=R.leaseToken?String(R.leaseToken).trim():"";if(!rt)return V(R,"dispatch_start_failed: claimed task missing leaseToken \u2014 refusing local spawn");let tt=x(`t-${R.id}-a${R.attempt}`),fr=Ks({explicitModel:e.model?String(e.model):void 0,explicitProvider:e.provider?String(e.provider):void 0,explicitProviderIsOperatorOverride:!!e.provider,configuredProvider:F().workerProvider,task:fm(R)});Qg({taskId:W,leaseToken:rt,runId:l.id,workerName:tt,provider:fr.provider??null});let Bi=Cf({task:R,routing:fr,explicitProvider:e.provider?String(e.provider):void 0,explicitModel:e.model?String(e.model):void 0});if(!Bi.ok)return V(R,Bi.error??"model_routing_mismatch",{modelRoutingGuard:Bi});if(Ck(R)){let Ee=await Pk({agentOsId:u,taskId:W,baseUrl:d,secret:p});if(Ee&&Ee.dispatchable===!1)return V(R,`pr_review_head_reconcile_blocked: ${Ee.reason??Ee.outcome??"stale PR head"}`,{headReconcile:Ee});if(Ee?.activeReviewTaskId&&Ee.activeReviewTaskId!==W)return V(R,`pr_review_head_reconcile_retargeted: active review is ${Ee.activeReviewTaskId}`,{headReconcile:Ee})}let Po=Eh(fr.provider);if(!Po.ok)return V(R,`provider_quota_exhausted: ${Po.reason}`,{nonFatal:!0,providerQuotaPreflight:{provider:Po.provider,retryAt:Po.retryAtIso}});try{let Ee=R.planId?String(R.planId):void 0,Ao=Hf({title:R.title?String(R.title):void 0,description:R.description?String(R.description):null,executorRef:R.executorRef?String(R.executorRef):null,prUrl:R.prUrl?String(R.prUrl):null,branch:R.branch?String(R.branch):null}),bu=dh({runId:l.id,workerName:tt,maxSlots:E.maxConcurrentWorkers,diskActiveWorkers:ga()});if(!bu.admitted)return V(R,`admission_refused: ${bu.reason}`,{nonFatal:!0});let Io=P?.workerMcpToken??null;if(Io&&Yn()){let Ct=Yh({jobId:`dispatch:${String(R.id)}`,agentOsId:u,taskId:String(R.id)},{config:{agentOsId:u,apiBaseUrl:d}});if(!Ct.ok)console.error(`[dispatch] worker tools skipped for task ${String(R.id)}: context hydration failed (${Ct.code}: ${Ct.detail}) \u2014 spawning without tools`),Io=null;else{let Fi=await Gh(Ct.context);Fi.reachable||(console.error(`[dispatch] worker tools skipped for task ${String(R.id)}: tool endpoint probe failed (${Fi.error??`HTTP ${Fi.httpStatus}`}) \u2014 spawning without tools`),Io=null)}}Lf(l.id,String(R.id),{except:tt});let tr=await Vh(l,{name:tt,task:sO(R,u),ownedPaths:e.owned?String(e.owned).split(",").map(Ct=>Ct.trim()).filter(Boolean):[],model:fr.model,provider:fr.provider,routingRule:fr.rule,requestedModel:fr.requestedModel,agentOsId:u,taskId:String(R.id),planId:Ee,branch:Ao?.targetPrBranch??void 0,executorRef:R.executorRef?String(R.executorRef):void 0,parentTaskId:R.parentTaskId?String(R.parentTaskId):void 0,taskTitle:R.title?String(R.title):void 0,taskPrUrl:Ao?.targetPrUrl??(R.prUrl?String(R.prUrl):void 0),repairTargetPrUrl:Ao?.targetPrUrl,repairTargetBranch:Ao?.targetPrBranch??void 0,instructionPolicyMarkdown:P?.instructionPolicyMarkdown??null,instructionPolicyFingerprint:P?.instructionPolicyFingerprint??null,instructionPolicyEvidence:P?.instructionPolicyEvidence??null,memoryQualityCapture:P?.memoryQualityCapture??null,memoryQualityPromptMarkdown:P?.memoryQualityPromptMarkdown??null,personaMarkdown:P?.personaMarkdown??null,personaSlug:P?.personaSlug??G,personaEvidence:P?.personaEvidence??null,contextEnvelopeMarkdown:P?.contextEnvelopeMarkdown??null,contextEnvelopeEvidence:P?.contextEnvelopeEvidence??null,runtimeEnvelopeMarkdown:P?.runtimeEnvelopeMarkdown??null,runtimeEnvelopeEvidence:P?.runtimeEnvelopeEvidence??null,workerMcpToken:Io,workerMcpCapabilities:P?.workerMcpCapabilities??null,workerMcpExpiresAt:P?.workerMcpExpiresAt??null,leaseOwner:k,leaseToken:rt,dispatched:!0,executionMode:ws(R)}),Oo=await _k({agentOsId:u,taskId:String(R.id),leaseOwner:k,expectedLeaseToken:rt,worker:tr,baseUrl:d,secret:p});if(!Oo.ok)return Ek(l.id,tr,Oo.error??"dispatch_start_readback_failed"),zr(l.id,tt),V(R,Oo.error??"dispatch_start_readback_failed",{readback:Oo.detail??null});tr.leaseToken!==rt&&(tr.leaseToken=rt,tr.leaseOwner=k,L(l.id,tr)),di({taskId:W,leaseToken:rt}),ah(l.id,tt);let Su={taskId:R.id,started:!0,worker:tr.name,pid:tr.pid,branch:tr.branch,model:tr.model,provider:fr.provider,routingRule:fr.rule,instructionPolicyFingerprint:P?.instructionPolicyFingerprint??null,instructionPolicyRuleCount:Array.isArray(P?.instructionPolicyEvidence?.ruleSlugs)?P.instructionPolicyEvidence.ruleSlugs.length:null,personaSlug:P?.personaSlug??G,personaOperatingRuleCount:P?.personaEvidence?.operatingRuleCount??null};return B.push(Su),ye("worker_started",{lastOutcome:Su}),P?.instructionPolicyFingerprint&&console.error(`[dispatch] task ${W}: instruction policy injected fingerprint=${P.instructionPolicyFingerprint}`),P?.personaSlug&&console.error(`[dispatch] task ${W}: persona context injected slug=${P.personaSlug}`),P?.contextEnvelopeReady&&console.error(`[dispatch] task ${W}: context envelope injected anchor=${P.contextEnvelopeEvidence?.anchorTaskId??W}`),P?.runtimeEnvelopeReady&&console.error(`[dispatch] task ${W}: runtime envelope injected id=${P.runtimeEnvelopeEvidence?.envelopeId??"unknown"}`),!0}catch(Ee){return zr(l.id,tt),V(R,Ee.message)}}let Ui=new Set;for(let v of nh(l.id))Ui.add(v);async function hu(v){let R=v.task,P=String(R.id);if(Ui.has(P))return V(R,"dispatch_retry_loop_prevented: task already failed to start this tick");let W=b?sm({decision:v,leaseOwner:k,repoIdentity:g,requestNonce:h.get(v)??null}):null,G=W&&!W.allow?await V(R,`desktop_execution_policy_denied:${W.code}: ${W.reason}`,{desktopPolicyDenied:W.code,...W.code==="operation_not_approved"?{nonFatal:!0}:{}}):gu(v)?await Mv(v):await Wv(v);return G||(Ui.add(P),th(P,l.id)),G}for(let v of T.started)await hu(v);if(M.push(...T.skipped??[]),_)for(let v of M){let R=String(v.task.id);S.has(R)&&B.push({taskId:R,started:!1,error:`exact_target_not_started:${v.skipReason}`,skipReason:v.skipReason,detail:v.reason??null,requestedTargetTaskIds:[...S]})}for(;!_&&B.length<C;){if(mr()){let P={started:!1,error:"dispatch_circuit_breaker: start readback failed; stopping top-up for this tick",nonFatal:!0};B.push(P),ye("circuit_breaker",{lastOutcome:P});break}let v=await Ur(1);if(!v.dispatch.ok||!v.result){let P=am(v.dispatch.response),W=ke();ie=P&&W>0;let G=qa(v.dispatch.response),Ve={started:!1,error:G?"dispatch_next timed out during top-up":"dispatch_next request failed during top-up",httpStatus:v.dispatch.status,response:v.dispatch.response,...G?{timeout:!0}:{},...ie?{nonFatal:!0,partialTopUp:!0}:{}};B.push(Ve),ye("top_up_failed",{partialTopUpInterrupted:ie,lastOutcome:Ve});break}D+=Number(v.result.inspected)||0,M.push(...v.result.skipped??[]);let R=v.result.started??[];if(R.length===0)break;for(let P of R){if(B.length>=C)break;await hu(P)}}let Co=B.filter(v=>v.started).length,Br=Ak(T),Et=Ik(T),ku=Co===0&&(Br?.capacityIdle===!0||Number(T.resourceGate?.slotsAvailable)>0);if(ku&&Br?.summary){let v=Br.skipReasonCounts?.retry_ceiling_exceeded??0,R=T.overAttemptIdleRecovery??Br.overAttemptIdleRecovery,P=R?.attempted===!0?`; over_attempt_recovery minted=${R.minted??0} started=${R.started??0}`:v>0?"; over_attempt_recovery not attempted":"",W=Et?`; dispatch_skip_drain scanned=${Et.scanned??0} advanced=${Et.advanced??0}`:"",G=Br.progressionReport?.summary?`; ${Br.progressionReport.summary}`:"",Ve=Et?.prLifecycleAttempt?.summary?`; ${Et.prLifecycleAttempt.summary}`:"";console.error(`[dispatch] ${Br.summary}${v>0?`; retry_ceiling_exceeded=${v}`:""}${P}${W}${G}${Ve}`)}let yu={runId:l.id,agentOsId:u,dryRun:!1,leaseOwner:k,startedCount:Co,capacityIdle:ku,admissionExhaustion:Br,dispatchSkipDrain:Et,outcomes:B,skipped:M.map(v=>({taskId:v.task.id,skipReason:v.skipReason})),inspected:D,pagesScanned:T.pagesScanned??null,candidatesExhausted:T.candidatesExhausted??null,diskGate:T.diskGate,resourceGate:T.resourceGate,...ie?{partialTopUpInterrupted:!0}:{},dispatchCallbackTimeoutMs:pr},Ru=v=>!v.started&&v.nonFatal!==!0,Lv=B.some(Ru),vu=ie&&Co>0?!0:!Lv;if(Fn({runId:l.id,agentOsId:u,phase:"complete",partial:ie,startedCount:Co,ok:vu}),r)return{ok:vu,...yu};console.log(JSON.stringify(yu,null,2)),B.some(Ru)&&process.exit(1)}catch(i){if(r)return{ok:!1,error:i.message};console.error(`run dispatch failed: ${i.message}`),process.exit(1)}}var aO=1;function on(e){if(!e||typeof e!="object")return 0;let r=e.startedCount;if(typeof r=="number")return r;let t=e.outcomes;return Array.isArray(t)?t.filter(n=>n.started).length:0}function lO(e){let{maxStarts:r,...t}=e;return t}async function Rc(e,r){if(r<=0)return{ok:!0,skipped:!0,reason:"no slots",maxStarts:0,startedCount:0};let t=lO(e);if(t.targetTaskId||t.targetTaskIds){let u=await vi({...t,execute:!0,pipeline:!0,maxStarts:String(r)});return{...typeof u=="object"&&u!==null?u:{},passes:{target:u},startedCount:on(u)}}let n=Math.min(r,aO),o=Math.max(0,r-n),s=await vi({...t,execute:!0,pipeline:!0,lane:"review",maxStarts:String(n)}),i=on(s),a=o+(n-i);if(a<=0)return{...typeof s=="object"&&s!==null?s:{},passes:{review:s},startedCount:i};let l=await vi({...t,execute:!0,pipeline:!0,maxStarts:String(a)}),c=on(l);return{passes:{review:s,work:l},startedCount:i+c,ok:!0}}function Ok(e){if(!e||typeof e!="object")return[];let t=e.response?.dispatch?.exactTargetTaskIds;if(!Array.isArray(t))return[];let n=new Set,o=[];for(let s of t){if(typeof s!="string")continue;let i=s.trim();!i||n.has(i)||(n.add(i),o.push(i))}return o}function cO(e){let t=e.response?.dispatch;return t&&typeof t=="object"?t:null}function vo(e){return typeof e!="number"||!Number.isFinite(e)?null:Math.max(0,Math.floor(e))}function uO(e){let r=Number(process.env[e]);return!Number.isFinite(r)||r<=0?null:Math.floor(r)}function Tk(e,r){let t=cO(r),n=vo(t?.recommendedMaxStarts),o=vo(t?.actionableReady),s=vo(t?.queuedTasks),i=vo(t?.boardAdvancedThisTick)??0,a=vo(t?.leaseReapedThisTick)??0,l=i+a,c=o??s,u=e.slotsAvailable;c!==null?u=Math.min(u,c):n!==null&&(u=Math.min(u,n)),c===null&&n!==null&&(u=Math.max(u,Math.min(e.slotsAvailable,n)));let d=t?.underutilized===!0||(c??0)>0&&e.slotsAvailable>0&&e.maxConcurrentWorkers>0&&e.activeWorkers<e.maxConcurrentWorkers;if(e.slotsAvailable>0&&u===0&&(d||l>0)){let f=c??(l>0?l:1);u=Math.min(e.slotsAvailable,Math.max(1,f))}let p=uO("KYNVER_DAEMON_MAX_DISPATCH_STARTS");p!==null&&(u=Math.min(u,p));let m=s!==null&&o!==null?Math.max(0,s-o):null;return{maxStarts:Math.max(0,u),underutilized:d,advisedStarts:n,actionableReady:o,queuedTasks:s,nonDispatchableReady:m,boardAdvancedThisTick:i,leaseReapedThisTick:a}}import nT from"node:path";U();_n();me();O();import dO from"node:path";var pO=new Set(["running","dispatching","pending","queued","needs_attention"]),kt=new Set(["completed","failed","cancelled","done"]);function yt(e){let r=nr(e);if(r.length===0)return"failed";let t=!1,n=!1,o=!1,s=!1;for(let i of r){let a=A(dO.join(N(e.id),"workers",x(i),"worker.json"),void 0);if(!a)continue;let l=J(a,{base:e.base,baseCommit:e.baseCommit});if(l.alive&&!l.finalResult){t=!0;break}typeof a.completionBlocker=="string"&&a.completionBlocker&&(o=!0),np(l)&&(s=!0),l.finalResult&&l.attention.state==="done"&&(n=!0)}return t||o||s?null:n?"completed":"failed"}function bo(){let e=[];for(let r of Je()){if(!pO.has(r.status))continue;let t=yt(r);if(!t||t===r.status)continue;let n=r.status;r.status=t,Ae(r),e.push({runId:r.id,from:n,to:t})}return e}U();_n();me();O();ot();An();import{existsSync as et,lstatSync as LO,readdirSync as UO,readlinkSync as BO,renameSync as Ac,unlinkSync as FO}from"node:fs";import cr from"node:path";Xe();O();import rr from"node:path";var mO=`${rr.sep}runs${rr.sep}runs${rr.sep}`;function bi(e){return e.includes(mO)}function vc(e,r){return rr.join(Pe(ge(e)),x(r))}function Qr(e,r,t){return rr.join(vc(e,r),"workers",x(t))}function Nk(e,r,t){let n=ge(e);return rr.join(n,"runs","runs",x(r),"workers",x(t))}function bc(){return["stdout.jsonl","stderr.log","heartbeat.jsonl","last-status.json","auto-complete.log","worker.json"]}function Rt(e){return{workerJsonPath:rr.join(e,"worker.json"),stdoutPath:rr.join(e,"stdout.jsonl"),stderrPath:rr.join(e,"stderr.log"),heartbeatPath:rr.join(e,"heartbeat.jsonl"),lastStatusPath:rr.join(e,"last-status.json")}}function Mk(e){let r=Rt(Qr(e.harnessRoot,e.runId,e.workerName)).workerJsonPath;return e.statusPath&&!bi(e.statusPath)?e.statusPath:r}import{existsSync as Zr,mkdirSync as AO,readdirSync as Fk,renameSync as IO,statSync as xc}from"node:fs";import se from"node:path";H();Rn();Fr();qi();import fO from"node:path";function gO(e){return fO.resolve(Ye(e.trim()))}function Sc(e,r,t){let n=e?.trim();return n?{repo:gO(n),source:r,persistedInConfig:t}:null}function hO(e){return e?{repo:e.repo,source:e.source,persistedInConfig:!1}:null}function Dk(e={}){let r=e.env??process.env,t=e.config??F(),n=Sc(t.defaultRepo,"config",!0);if(n)return n;let o=Sc(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=Sc(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);return s||hO(Uo({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl}))}de();ot();Xe();U();O();H();import{existsSync as kO,readFileSync as yO,readdirSync as RO,statSync as vO,writeFileSync as bO}from"node:fs";import SO from"node:path";var Te="<redacted>",wc=`[^\\s"'\\\\,}\\]]`,wO=[[new RegExp(`\\b(?:postgres(?:ql)?|mysql|mongodb(?:\\+srv)?|redis|rediss):\\/\\/${wc}+`,"gi"),Te],[new RegExp(`\\b[a-z][a-z0-9+.-]*:\\/\\/[^\\s/@:"']+:[^\\s/@"']+@${wc}+`,"gi"),Te],[/\bkynver_u_[A-Za-z0-9_-]+/g,Te],[/\bkyn_[A-Za-z0-9]{12,}/g,Te],[/\bsk-ant-[A-Za-z0-9_-]+/g,Te],[/\bsk-[A-Za-z0-9_-]{8,}/g,Te],[/\bkr[a-z]1\.[A-Za-z0-9._~+/=-]{8,}/g,Te],[/\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{16,}/g,Te],[/\bgithub_pat_[A-Za-z0-9_]{16,}/g,Te],[/\b(Bearer|Basic)\s+(?!<redacted>)[A-Za-z0-9._~+/=-]{8,}/gi,`$1 ${Te}`],[new RegExp(`(\\b(?:[A-Z0-9_]*(?:API_KEY|APIKEY|TOKEN|SECRET|PASSWORD)|DATABASE_URL|KYNVER_DATABASE_URL)\\s*=\\s*)(?!<redacted>)${wc}+`,"g"),`$1${Te}`]],xO=12,_O=/(?:API_KEY|APIKEY|TOKEN|SECRET|PASSWORD|CREDENTIAL)$/i,EO=/(?:\.jsonl|\.log|\.txt|^stdout.*|^stderr.*)$/i,CO=256*1024*1024;function PO(e,r=[]){if(!e)return e;let t=e,n=[...new Set(r.map(o=>o?.trim()).filter(o=>!!o&&o.length>=xO))].sort((o,s)=>s.length-o.length);for(let o of n){t.includes(o)&&(t=t.split(o).join(Te));let s=JSON.stringify(o).slice(1,-1);s!==o&&t.includes(s)&&(t=t.split(s).join(Te))}for(let[o,s]of wO)t=t.replace(o,s);return t}function Wk(e=process.env,r=[]){let t=[];for(let[n,o]of Object.entries(e))o&&_O.test(n)&&t.push(o);for(let n of r)try{let o=n();o&&t.push(o)}catch{}return t}function Lk(e,r=0){if(r>3||!kO(e))return[];let t=[];for(let n of RO(e,{withFileTypes:!0})){let o=SO.join(e,n.name);n.isDirectory()?t.push(...Lk(o,r+1)):n.isFile()&&EO.test(n.name)&&t.push(o)}return t}function Uk(e,r=[]){let t={masked:[],clean:0,failed:[]},n;try{n=Lk(e)}catch{return t}for(let o of n)try{if(vO(o).size>CO){t.failed.push(o);continue}let s=yO(o,"utf8"),i=PO(s,r);if(i===s){t.clean+=1;continue}bO(o,i,"utf8"),t.masked.push(o)}catch{t.failed.push(o)}return t}var So=900*1e3,OO=3600*1e3;function Kk(e,r){let t=se.resolve(e),n=se.resolve(Pe(r)),o=se.relative(n,t);return o!==".."&&!o.startsWith("..")&&!se.isAbsolute(o)}function _c(e){if(!Zr(e))return[];try{return Fk(e,{withFileTypes:!0}).filter(r=>r.isDirectory()&&r.name!=="runs").map(r=>r.name)}catch{return[]}}function Ec(e){let r=se.join(e,"workers");if(!Zr(r))return[];try{return Fk(r,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name)}catch{return[]}}function Hk(e){return se.join(e,"archived-workers")}function TO(e,r){let t=se.join(Hk(e),x(r));return Zr(t)?`${t}-${Date.now()}`:t}function Bk(e,r,t){if(!Zr(e))return!1;try{let n=r-xc(e).mtimeMs;return Number.isFinite(n)&&n>=0&&n<t}catch{return!1}}function $k(e,r=Date.now(),t=So){if(!Zr(e))return!1;let n=Rt(e),o=A(n.workerJsonPath,void 0);if(o?.status==="running"&&Y(o.pid))return!0;let s=pe(n.heartbeatPath);if(s.lastHeartbeatAt){let i=r-Date.parse(s.lastHeartbeatAt);if(Number.isFinite(i)&&i>=0&&i<t)return!0}return!!(Bk(n.stdoutPath,r,t)||Bk(n.heartbeatPath,r,t))}function NO(e,r,t){let n=typeof r.completionReportedAt=="string"?Date.parse(r.completionReportedAt):NaN;if(Number.isFinite(n))return t-n;let o=(()=>{let s=r.completionResponse;if(!s||typeof s!="object")return NaN;let i=s.task;if(!i||typeof i!="object")return NaN;let a=i.updatedAt;return typeof a=="string"?Date.parse(a):NaN})();if(Number.isFinite(o))return t-o;try{return t-xc(se.join(e,"worker.json")).mtimeMs}catch{return 0}}function MO(e,r,t,n){if($k(e,t))return{eligible:!1,reason:"worker has active/recent retention signals"};let o=typeof r.status=="string"?r.status:"";if(typeof r.completionBlocker=="string"&&r.completionBlocker.trim().length>0)return{eligible:!1,reason:"worker has completion blocker"};let i=typeof r.completionReportedAt=="string"||r.completionOutcome==="acknowledged";if(o!=="done"&&!i)return{eligible:!1,reason:`worker status is ${o||"unknown"}`};let a=NO(e,r,t);return!Number.isFinite(a)||a<n?{eligible:!1,reason:"terminal worker is still within archive grace window"}:{eligible:!0,reason:"terminal worker metadata archived"}}function sn(e,r=Date.now(),t=So){for(let n of Ec(e))if($k(se.join(e,"workers",n),r,t))return!0;return!1}function DO(){let r=Dk()?.repo??"",t="unknown";if(r)try{let n=Z(r,["rev-parse","origin/main"],{allowFailure:!0}).trim();n&&(t=n)}catch{}return{repo:r,base:"origin/main",baseCommit:t}}function WO(e,r){let t=se.join(Pe(e),x(r));if(!Zr(t))return null;let n=Ec(t);if(n.length===0)return null;let o;try{o=xc(t).birthtime.toISOString()}catch{o=new Date().toISOString()}let s={};for(let a of n){let l=Qr(e,r,a);s[a]={workerDir:l,statusPath:se.join(l,"worker.json")}}let i=sn(t);return{id:r,name:r,...DO(),status:i?"running":"needs_attention",createdAt:o,workers:s}}function Cc(e){let r=ge(e??De()),t=Pe(r),n=[];for(let o of _c(t)){let s=se.join(t,o,"run.json");if(Zr(s)){n.push({runId:o,action:"skipped",reason:"run.json present"});continue}let i=WO(r,o);if(!i){n.push({runId:o,action:"skipped",reason:"no worker dirs on disk"});continue}Ae(i),n.push({runId:o,action:"repaired_run_json",reason:sn(se.join(t,o))?"synthesized run.json while worker artifacts still active":"synthesized run.json from orphan worker metadata dirs"})}return{runs:n}}function Pc(e,r={}){let t=ge(e??De()),n=Pe(t),o=r.now??Date.now(),s=r.archiveAgeMs??OO,i=[],a=null,l=()=>a??=(r.knownSecrets??(()=>Wk(process.env,[wr,()=>Ht()])))();Cc(t);for(let c of _c(n)){let u=se.join(n,c),d=se.join(u,"run.json"),p=A(d,void 0);if(!p?.id)continue;let m=new Set([...Object.keys(p.workers||{}),...Ec(u)]),f=!1;for(let y of m){let k=se.join(u,"workers",x(y)),b=se.join(k,"worker.json"),g=A(b,void 0);if(!g){let E=se.join(Hk(u),x(y));if(Zr(E)&&(p.workers[x(y)]||p.workers[y])){delete p.workers[x(y)],delete p.workers[y],f=!0,i.push({runId:p.id,worker:y,action:"archived",reason:"removed stale live index entry for archived worker metadata",archivePath:E});continue}i.push({runId:p.id,worker:y,action:"skipped",reason:"worker.json missing"});continue}let h=MO(k,g,o,s);if(!h.eligible){i.push({runId:p.id,worker:y,action:"skipped",reason:h.reason});continue}let w=TO(u,y);AO(se.dirname(w),{recursive:!0}),IO(k,w),Uk(w,l()),delete p.workers[x(y)],delete p.workers[y],f=!0,i.push({runId:p.id,worker:y,action:"archived",reason:h.reason,archivePath:w})}f&&Ae(p)}return{workers:i}}function jk(e,r=Date.now()){let t=new Set,n=Pe(e);for(let o of _c(n)){let s=se.join(n,o);sn(s,r)&&t.add(`${e}\0${o}`)}return t}U();O();function KO(e,r){let t=vc(e,r),n;try{n=LO(t)}catch{return null}if(!n.isSymbolicLink())return null;let o=cr.resolve(cr.dirname(t),BO(t));if(sn(o)||sn(t))return null;let s=`${t}.materialize-${Date.now()}`;return Ac(o,s),FO(t),Ac(s,t),o}function HO(e){let r=[];for(let t of bc()){let n=cr.join(e.fromDir,t),o=cr.join(e.toDir,t);!et(n)||et(o)||(Ac(n,o),r.push(t))}return r}function Vk(e,r){let t=Rt(r),n=!1;return e.workerDir!==r&&(e.workerDir=r,n=!0),e.stdoutPath!==t.stdoutPath&&(e.stdoutPath=t.stdoutPath,n=!0),e.stderrPath!==t.stderrPath&&(e.stderrPath=t.stderrPath,n=!0),e.heartbeatPath!==t.heartbeatPath&&(e.heartbeatPath=t.heartbeatPath,n=!0),n}function $O(e){let r=typeof e.lastStatus?.status=="string"?e.lastStatus.status:void 0,t=e.lastStatus?.attention&&typeof e.lastStatus.attention=="object"?e.lastStatus.attention.state:void 0;return r==="done"||t==="done"||e.stdoutFinalResult||e.heartbeatFinalResult?"done":r==="blocked"?"blocked":r==="running"?"exited":r??"exited"}function jO(e){let r=Rt(e.canonicalDir),t=A(r.lastStatusPath,void 0),n=et(r.stdoutPath),o=et(r.heartbeatPath);if(!(n||o||t!=null))return null;let i=n?st(r.stdoutPath):{finalResult:null},a=o?pe(r.heartbeatPath):pe(""),l=yr(a),c=$O({lastStatus:t,stdoutFinalResult:i.finalResult,heartbeatFinalResult:l}),u={name:e.workerName,runId:e.run.id,status:c,branch:typeof t?.branch=="string"?t.branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:typeof t?.worktreePath=="string"?t.worktreePath:cr.join(le().worktreesDir,e.run.id,e.workerName),workerDir:e.canonicalDir,stdoutPath:r.stdoutPath,stderrPath:r.stderrPath,heartbeatPath:r.heartbeatPath,startedAt:typeof t?.startedAt=="string"?t.startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"synthesized worker.json from on-disk artifacts after metadata repair"};return typeof t?.taskId=="string"&&(u.taskId=t.taskId),typeof t?.agentOsId=="string"&&(u.agentOsId=t.agentOsId),typeof t?.planId=="string"&&(u.planId=t.planId),typeof t?.pid=="number"&&(u.pid=t.pid),(i.finalResult||l)&&(u.completionSnapshot={finalResult:i.finalResult??l??"completed",summary:a.lastHeartbeatSummary}),Vk(u,e.canonicalDir),u}function VO(e,r){let t=!1,n={...e.workers||{}};for(let[o,s]of Object.entries(n)){let i=Qr(r,e.id,o),a=cr.join(i,"worker.json");(bi(s.workerDir)||bi(s.statusPath)||s.workerDir!==i||s.statusPath!==a)&&(n[o]={workerDir:i,statusPath:a},t=!0)}return t&&(e.workers=n,Ae(e)),t}function GO(e){let r=[],t=Qr(e.harnessRoot,e.run.id,e.workerName),n=Nk(e.harnessRoot,e.run.id,e.workerName),o=Rt(t),s=HO({fromDir:n,toDir:t});s.length>0&&r.push({runId:e.run.id,worker:e.workerName,action:"relocated_artifacts",reason:`moved ${s.join(", ")} from nested runs/runs layout`});let i=Mk({harnessRoot:e.harnessRoot,runId:e.run.id,workerName:e.workerName,statusPath:e.statusPath}),a=A(i,void 0);if(!a&&et(o.workerJsonPath)&&(a=A(o.workerJsonPath,void 0)),!a){let l=jO({run:e.run,workerName:e.workerName,canonicalDir:t,harnessRoot:e.harnessRoot});if(l)return L(e.run.id,l),r.push({runId:e.run.id,worker:e.workerName,action:"synthesized_worker_json",reason:l.reconcileReason??"synthesized from artifacts"}),r;let c=et(t),u=bc().some(d=>et(cr.join(t,d)));if(c&&!u){let d={name:e.workerName,runId:e.run.id,status:"exited",branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:cr.join(le().worktreesDir,e.run.id,e.workerName),workerDir:t,stdoutPath:o.stdoutPath,stderrPath:o.stderrPath,heartbeatPath:o.heartbeatPath,startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"empty worker dir \u2014 marked abandoned during metadata reconcile"};return L(e.run.id,d),r.push({runId:e.run.id,worker:e.workerName,action:"marked_abandoned",reason:d.reconcileReason??"empty worker dir"}),r}return r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker.json missing and no recoverable artifacts"}),r}return Vk(a,t)?(a.reconciledAt=new Date().toISOString(),a.reconcileReason=a.reconcileReason??"repaired nested runs/runs path fields",L(e.run.id,a),r.push({runId:e.run.id,worker:e.workerName,action:"repaired_worker_paths",reason:a.reconcileReason})):r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker metadata already canonical"}),r}function YO(e,r){let t=cr.join(N(e.id),"workers");if(!et(t))return[];let n=new Set(Object.keys(e.workers||{})),o=[];for(let s of UO(t,{withFileTypes:!0}))s.isDirectory()&&(n.has(s.name)||o.push(s.name));return o}function Gk(){let{harnessRoot:e}=le(),r=Cc(e),t=[];for(let n of Je()){let o=KO(e,n.id);o&&t.push({runId:n.id,worker:"*",action:"materialized_run_symlink",reason:`replaced symlink with real run dir (was ${o})`}),VO(n,e)&&t.push({runId:n.id,worker:"*",action:"repaired_run_index",reason:"repaired nested runs/runs workerDir/statusPath entries in run.json"});let s=new Set(Object.keys(n.workers||{}));for(let i of YO(n,e))s.add(i),n.workers={...n.workers||{},[i]:{workerDir:Qr(e,n.id,i),statusPath:cr.join(Qr(e,n.id,i),"worker.json")}},Ae(n),t.push({runId:n.id,worker:i,action:"repaired_run_index",reason:"indexed orphan worker dir into run.json"});for(let i of s){let a=n.workers?.[i];t.push(...GO({run:n,workerName:i,harnessRoot:e,statusPath:a?.statusPath}))}}return{workers:t,runMetadataRetention:r}}ot();Zo();me();U();_n();O();import{execFileSync as Yk}from"node:child_process";import qk from"node:path";function Ic(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:null}function qO(e){let r=Ic(e)?.match(/\/pull\/(\d+)$/);if(!r)return null;let t=Number.parseInt(r[1],10);return Number.isFinite(t)?t:null}function JO(e){if(e==null)return"";if(typeof e=="string")return e;try{return JSON.stringify(e)}catch{return""}}function zO(e){let r=new Set;for(let t of e.matchAll(/github\.com\/[^/\s)>"']+\/[^/\s)>"']+\/(?:pull|pulls)\/(\d+)/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bPR\s*#?\s*(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bpr[-_]?(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}return[...r]}function XO(e){let r=null;if(typeof e=="string"?r=Lt(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=Ic(String(s.prUrl??s.pr_url??"")),a=String(s.outcome??"").trim();!i||a!=="merged"||n.push({prUrl:i,mergeCommit:typeof s.mergeCommit=="string"?s.mergeCommit:typeof s.merge_commit=="string"?s.merge_commit:null,reason:typeof s.reason=="string"?s.reason:null})}return n}function QO(e){try{let n=Yk("git",["config","--get","remote.origin.url"],{windowsHide:!0,cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim().match(/github\.com[:/]([^/]+\/[^/.]+)(?:\.git)?$/i)?.[1];if(!n)return null;let o=Yk("gh",["pr","view",String(e.prNumber),"--repo",n,"--json","state,mergedAt,mergeCommit,url"],{windowsHide:!0,cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}),s=JSON.parse(o);return{prUrl:Ic(s.url??`https://github.com/${n}/pull/${e.prNumber}`)??`https://github.com/${n}/pull/${e.prNumber}`,state:s.state??"",mergedAt:s.mergedAt??null,mergeCommit:s.mergeCommit?.oid??null}}catch{return null}}function ZO(e){let r=pe(e.heartbeatPath);return e.completionSnapshot?.finalResult??yr(r)}function eT(e){let r=new Map,t=N(e.id);for(let n of nr(e)){let o=A(qk.join(t,"workers",x(n),"worker.json"),void 0);if(o)for(let s of XO(ZO(o))){let i=qO(s.prUrl);i!=null&&!r.has(i)&&r.set(i,s)}}return r}function rT(e,r){let t=pe(e.heartbeatPath),n=[e.name,e.repairTargetPrUrl,e.taskPrUrl,e.branch,t.lastHeartbeatSummary,JO(r)].filter(Boolean).join(`
+`);return zO(n)}function tT(e){return e.localOnly===!0&&!e.taskId&&!e.agentOsId}function Oc(e={}){let r=e.lookupPr??QO,t=[],n=new Map;for(let o of Je()){let s=eT(o),i=N(o.id);for(let a of nr(o)){let l=qk.join(i,"workers",x(a),"worker.json"),c=A(l,void 0);if(!c||!tT(c))continue;let u=J(c,{base:o.base,baseCommit:o.baseCommit});if(u.attention.state!=="needs_attention")continue;let d=null;for(let m of rT(c,u.finalResult)){if(d=s.get(m)??null,!d){let f=o.repo||c.worktreePath,y=`${f}#${m}`,k=n.has(y)?n.get(y)??null:r({repoDir:f,prNumber:m});n.has(y)||n.set(y,k),k&&(k.state==="MERGED"||k.mergedAt)&&(d={prUrl:k.prUrl,mergeCommit:k.mergeCommit??null,reason:"GitHub reports PR merged"})}if(d)break}if(!d){t.push({runId:o.id,worker:a,action:"skipped",reason:"no merged PR evidence"});continue}let p=new Date().toISOString();c.status="done",c.completionSnapshot={prUrl:d.prUrl,summary:`Local-only worker superseded by merged PR ${d.prUrl}`,finalResult:{summary:`Local-only repair/salvage worker superseded by merged PR ${d.prUrl}`,targetPrReconciliation:[{prUrl:d.prUrl,outcome:"merged",mergeCommit:d.mergeCommit??null,reason:d.reason??"PR already merged; local-only worker no longer requires attention"}]}},c.completionAckSource="local-pr-merged-reconcile",c.reconciledAt=p,c.reconcileReason="local-only needs_attention superseded by merged PR",L(o.id,c),t.push({runId:o.id,worker:a,action:"marked_done",reason:c.reconcileReason,prUrl:d.prUrl,mergeCommit:d.mergeCommit??null})}}return{workers:t}}var oT=900*1e3;function sT(){return process.env.KYNVER_NO_STALE_CLEANUP==="1"}function Jk(e,r){let t=si({worker:e,status:r}),n=t?ii(e,t):!1,o=r.attention.state==="blocked"?"blocked":r.attention.state==="done"||r.status==="done"||t?"done":"exited",s=t&&n?`captured exited-worker handoff (${t.source})`:t?"synced finished worker record after terminal stdout/heartbeat":r.attention.reason;return{nextStatus:o,reason:s,handoffCaptured:n}}function iT(e,r){r.stopClass&&(e.stopClass=r.stopClass),r.stopReason&&(e.stopReason=r.stopReason),r.exit&&(e.exitCode=r.exit.exitCode,e.exitSignal=r.exit.signal,e.oomEvidence=r.exit.oomEvidence??null);let t=r.error?.trim();t&&(e.exitStderrTail=t.slice(-1e3))}function zk(){let e=Gk();if(sT()){let s=Oc(),i=Pc();return{workers:[],finalizedRuns:bo(),metadataReconcile:e,localPrAttentionReconcile:s,terminalWorkerArchive:i}}let r=[],t=Date.now();for(let s of Je())for(let i of nr(s)){let a=nT.join(N(s.id),"workers",x(i),"worker.json"),l=A(a,void 0);if(!l||l.status!=="running"){r.push({runId:s.id,worker:i,action:"skipped",reason:l?`worker status is ${l.status}`:"worker.json missing"});continue}let c=J(l,{base:s.base,baseCommit:s.baseCommit});if(c.finalResult){if(l.status==="running"){let u=Jk(l,c);l.status=u.nextStatus,l.reconciledAt=new Date().toISOString(),l.reconcileReason=u.reason,l.stopClass="finished",L(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:l.reconcileReason})}else r.push({runId:s.id,worker:i,action:"skipped",reason:"final result present"});continue}if(!c.alive){let u=Jk(l,c);l.status=u.nextStatus,l.reconciledAt=new Date().toISOString(),l.reconcileReason=u.reason,iT(l,c),L(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:c.attention.reason});continue}if(c.attention.state==="stale"&&l.pid&&Y(l.pid)){let u=c.lastHeartbeatAt?Date.parse(c.lastHeartbeatAt):NaN,d=c.lastActivityAt?Date.parse(c.lastActivityAt):NaN,p=!Number.isFinite(u)||t-u>oT,m=Number.isFinite(d)&&t-d>ma;if(p&&m){Ne(l.pid,"SIGTERM"),l.status="exited",l.reconciledAt=new Date().toISOString(),l.reconcileReason=`reconciled stale worker: ${c.attention.reason}`,l.stopClass="stuck",l.stopReason=`stuck (no progress) \u2014 ${c.attention.reason}`,L(s.id,l),r.push({runId:s.id,worker:i,action:"killed_stale",reason:c.attention.reason});continue}}r.push({runId:s.id,worker:i,action:"skipped",reason:c.attention.reason})}let n=Oc(),o=Pc();return{workers:r,finalizedRuns:bo(),metadataReconcile:e,localPrAttentionReconcile:n,terminalWorkerArchive:o}}Ft();U();import fT from"node:path";import{readdirSync as aT,readFileSync as lT}from"node:fs";var cT="dispatch:claim:",uT=900*1e3,dT=10080*60*1e3,pT=200,vt={recoveredStrandedClaims:0,recoveryDeferredOrphans:0,recoveryStoreFailures:0};function mT(e){if(process.platform!=="linux"||!e.trim())return null;let r=[];try{r=aT("/proc")}catch{return null}for(let t of r)if(/^\d+$/.test(t)&&Number(t)!==process.pid)try{if(lT(`/proc/${t}/cmdline`,"utf8").replace(/\0/g," ").includes(e))return Number(t)}catch{}return null}async function Xk(e){let r=Mr(),t={mode:r,scanned:0,outcomes:[]};if(r!=="enforce")return t;let n=z();if(!n)return t;let o=e.nowMs??Date.now(),s=e.strandedAfterMs??uT,i=e.findOrphanPid??mT,a=[],l;try{l=n.listOperationReceipts({operation:"dispatch-claim",recordedAfter:new Date(o-dT).toISOString(),limit:pT})}catch{return vt.recoveryStoreFailures+=1,t}for(let c of l){let u=c.idempotencyKey.slice(cT.length),d=u.split(":")[0]??"",p=u.slice(d.length+1);if(!(!d||!p))try{let m=Date.parse(c.recordedAt);if(!Number.isFinite(m)||o-m<s||n.getOperationReceipt(`dispatch:spawned:${u}`)||n.getOperationReceipt(`dispatch:released:${u}`))continue;let f=lo(p);if(n.listOperationReceipts({keyPrefix:`dispatch:completion-acked:${d}:`,limit:10}).some(E=>{if(f===null)return!0;let S=lo(E.idempotencyKey.slice(`dispatch:completion-acked:${d}:`.length));return S===null||S>=f}))continue;let b={};try{b=c.resultJson?JSON.parse(c.resultJson):{}}catch{b={}}let g=b.runId??null,h=b.workerName??null;if(g&&h&&e.hasLiveWorker({runId:g,workerName:h})){di({taskId:d,leaseToken:p}),a.push({taskId:d,leaseToken:p,runId:g,workerName:h,action:"finalized_late"});continue}if(g&&h){let E=e.worktreePathFor({runId:g,workerName:h}),S=E?i(E):null;if(S!==null){vt.recoveryDeferredOrphans+=1,a.push({taskId:d,leaseToken:p,runId:g,workerName:h,action:"deferred_orphan",detail:`live pid ${S} references ${E}`});continue}}if(!g){a.push({taskId:d,leaseToken:p,runId:g,workerName:h,action:"skipped",detail:"claim intent missing runId \u2014 cannot resolve lease owner"});continue}let w=await e.releaseClaim({taskId:d,leaseToken:p,runId:g});w.released?(Zt({taskId:d,leaseToken:p},"restart_recovery"),h&&(uo(g,h),zr(g,h)),vt.recoveredStrandedClaims+=1,a.push({taskId:d,leaseToken:p,runId:g,workerName:h,action:"released"})):w.transportError?a.push({taskId:d,leaseToken:p,runId:g,workerName:h,action:"deferred_transport",detail:w.detail}):(Zt({taskId:d,leaseToken:p},"restart_recovery_refused"),a.push({taskId:d,leaseToken:p,runId:g,workerName:h,action:"release_refused",detail:w.detail}))}catch{vt.recoveryStoreFailures+=1}}return{mode:r,scanned:l.length,outcomes:a}}function Qk(){return{"dispatchReceipts.recoveredStrandedClaims":vt.recoveredStrandedClaims,"dispatchReceipts.recoveryDeferredOrphans":vt.recoveryDeferredOrphans,"dispatchReceipts.recoveryStoreFailures":vt.recoveryStoreFailures}}var Zk=!1;async function ey(e){if(Zk||Mr()!=="enforce")return null;Zk=!0;try{let r=Be().runnerId,t=await Xk({hasLiveWorker:e.hasLiveWorker,worktreePathFor:({runId:n,workerName:o})=>fT.join(le().worktreesDir,n,o),releaseClaim:async({taskId:n,leaseToken:o,runId:s})=>{let i=await Ro({baseUrl:e.baseUrl,secret:e.secret,agentOsId:e.agentOsId,taskId:n,leaseOwner:eo(s,r),leaseToken:o});return{released:i.released,transportError:i.transportError,detail:i.httpOk?void 0:JSON.stringify(i.releaseResponse).slice(0,200)}}});return t.outcomes.length>0&&console.error(`[daemon] D1b claim recovery: ${t.outcomes.map(n=>`${n.taskId}:${n.action}`).join(", ")}`),t}catch{return null}}H();Me();us();import PT from"node:os";Ra();import{mkdirSync as RT,readFileSync as vT,renameSync as bT,writeFileSync as ST}from"node:fs";import{homedir as wT}from"node:os";import Si from"node:path";import{existsSync as gT,readFileSync as hT}from"node:fs";import{dirname as Tc,join as ty}from"node:path";import{fileURLToPath as ry}from"node:url";function kT(e){let r=Tc(ry(e));for(let t=0;t<6;t+=1){if(gT(ty(r,"package.json")))return r;let n=Tc(r);if(n===r)break;r=n}throw new Error(`package.json not found above ${Tc(ry(e))}`)}function yT(e=import.meta.url){let r=ty(kT(e),"package.json"),t=JSON.parse(hT(r,"utf8"));if(typeof t.version!="string"||!t.version.trim())throw new Error(`Missing package.json version at ${r}`);return t.version}var ny=yT();function oy(){return Si.join(wT(),".kynver")}function xT(e=oy()){return Si.join(e,"doctor-native-windows.json")}function sy(e=oy()){return Si.join(e,"native-windows-state.json")}function _T(e,r){RT(Si.dirname(e),{recursive:!0});let t=`${e}.tmp-${process.pid}`;ST(t,`${JSON.stringify(r,null,2)}
+`,{mode:384}),bT(t,e)}function Mc(e){try{return JSON.parse(vT(e,"utf8"))}catch{return null}}function ET(e){let r=Mc(xT(e));return!r||typeof r.checkedAt!="string"||typeof r.verdict!="string"?null:{checkedAt:r.checkedAt,runtimeVersion:typeof r.runtimeVersion=="string"?r.runtimeVersion:"unknown",verdict:r.verdict,failing:Array.isArray(r.failing)?r.failing.filter(t=>typeof t=="string"):[],warnings:Array.isArray(r.warnings)?r.warnings.filter(t=>typeof t=="string"):[],providers:r.providers&&typeof r.providers=="object"?Object.fromEntries(Object.entries(r.providers).filter(t=>typeof t[1]=="string")):{},orphanedProcesses:typeof r.orphanedProcesses=="number"?r.orphanedProcesses:0}}function iy(e=new Date,r){try{let t=sy(r),n=Mc(t)??{};_T(t,{...n,lastWorkerCompletedAt:e.toISOString()})}catch{}}function CT(e){let r=Mc(sy(e));return typeof r?.lastWorkerCompletedAt=="string"?r.lastWorkerCompletedAt:null}var Nc=null,ay=null;function ly(e){Nc=e.admission,ay=e.ownerKind}function cy(e={}){let r=e.platform??process.platform,t=e.hostKind??ya(),n=t==="win32";return{hostKind:t,wsl:t==="wsl",platform:r,arch:process.arch,nodeVersion:process.versions.node,runtimeVersion:ny,ownerKind:ay,nativeWindows:n?{admission:Nc?.basis??null,hostCapability:Nc?.hostCapability??null,lastDoctor:ET(e.root),lastWorkerCompletedAt:CT(e.root)}:null}}function uy(e,r={}){let t=F(),n=(r.boxKind??kr(t)).trim().toLowerCase()||"forge",o=r.hostLabel??PT.hostname();return{boxId:cs({boxKind:n,hostLabel:o,explicitBoxId:r.boxId,config:t,env:process.env}),boxKind:n,displayName:r.displayName??null,hostLabel:o,observedAt:r.observedAt??new Date().toISOString(),totalMemBytes:e.totalMemBytes,freeMemBytes:e.freeMemBytes,activeWorkers:e.activeWorkers,maxConcurrentWorkers:e.maxConcurrentWorkers,autoCap:e.autoCap,slotsAvailable:e.slotsAvailable,harnessRunId:r.harnessRunId??null,queuedTasks:r.queuedTasks??null,reason:e.reason,...r.prEvidence?.length?{prEvidence:r.prEvidence}:{},host:cy()}}U();Xe();zo();me();H();import AT from"node:path";U();me();O();async function dy(e){let r=e.pipeline===!0||e.pipeline==="true";try{let t=q(String(gr(String(e.run||""),"--run"))),n=String(gr(String(e.agentOsId||""),"--agent-os-id")),o=Q(e.baseUrl?String(e.baseUrl):void 0),s=await ee(e.secret?String(e.secret):void 0,n,{baseUrl:o}),i=Be({runId:t.id}).runnerId,a=await Dh({run:t.id,agentOsId:n,...e},"run_sweep"),l=[];for(let p of Object.keys(t.workers||{})){let m=A(AT.join(N(t.id),"workers",x(p),"worker.json"),void 0);if(!m||!m.dispatched||!m.taskId)continue;let f=J(m);if(f.alive||f.finalResult||m.completionReportedAt)continue;try{let g=await ho({run:t.id,name:p,agentOsId:n,...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});if(g.ok&&!g.skipped){l.push({worker:p,taskId:m.taskId,pid:m.pid,released:!1,deathReported:!0,stopClass:f.stopClass??null});continue}}catch{}let y=Hs({runId:t.id,workerLeaseOwner:m.leaseOwner??null,runnerId:i}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(String(m.taskId))}/release`,b;try{b=await X(k,s,{agentOsId:n,leaseOwner:y,...m.leaseToken?.trim()?{leaseToken:m.leaseToken.trim()}:{}},{agentOsId:n,baseUrl:o})}catch(g){b={ok:!1,error:g.message}}l.push({worker:p,taskId:m.taskId,pid:m.pid,released:b.ok===!0||b.response?.ok===!0,response:b.response??b})}let c=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/reap`,u;try{u=await X(c,s,{agentOsId:n,...Number(e.graceMs)>=0&&e.graceMs!==void 0&&e.graceMs!==!0?{graceMs:Math.floor(Number(e.graceMs))}:{}},{agentOsId:n,baseUrl:o})}catch(p){u={ok:!1,error:p.message}}let d={runId:t.id,agentOsId:n,snapshotPublished:a,releasedLocalOrphans:l,reap:u.response??u};if(r)return{ok:!0,...d};console.log(JSON.stringify(d,null,2))}catch(t){if(r)return{ok:!1,error:t.message};console.error(`run sweep failed: ${t.message}`),process.exit(1)}}O();me();U();O();import IT from"node:path";H();async function py(e){let r=Q(e.baseUrl),t=await ee(e.secret,e.agentOsId,{baseUrl:r}),n=`${r}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/plan-progress-sync`,o=await X(n,t,{phase:e.phase,taskId:e.taskId,blocker:e.blocker,artifact:e.artifact},{agentOsId:e.agentOsId,baseUrl:r});return{ok:o.ok,status:o.status,response:o.response}}async function my(e,r){let t=q(e),n=String(r.agentOsId||"");if(!n)return[];let o=[];for(let s of Object.keys(t.workers||{})){let i=A(IT.join(N(t.id),"workers",x(s),"worker.json"),void 0);if(!i?.dispatched||!i.taskId)continue;let a=J(i);if(!a.heartbeatBlocker)continue;if(i.lastSyncedHeartbeatBlocker===a.heartbeatBlocker){o.push({worker:s,phase:"heartbeat_blocker",ok:!0,skipped:!0});continue}let l=await py({agentOsId:n,taskId:i.taskId,phase:"heartbeat_blocker",blocker:a.heartbeatBlocker,baseUrl:r.baseUrl?String(r.baseUrl):void 0,secret:r.secret?String(r.secret):void 0});l.ok&&(i.lastSyncedHeartbeatBlocker=a.heartbeatBlocker,L(t.id,i)),o.push({worker:s,phase:"heartbeat_blocker",ok:l.ok})}return o}rs();H();Me();Xe();import $e from"node:path";Qo();import xi from"node:path";de();me();var Dc=[".next",".turbo","dist","build",".cache","node_modules/.cache"];function fy(e){let r=e.replace(/\\/g,"/").replace(/\/+$/,"");if(r==="node_modules"||r.startsWith("node_modules/"))return!0;for(let t of Dc)if(r===t||r.startsWith(`${t}/`))return!0;return!1}function Fe(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return!fy(n)})}function bt(e){if(typeof e=="string")return e.match(/https:\/\/github\.com\/[^\s]+\/pull\/\d+/i)?.[0]??null;if(e&&typeof e=="object"){let r=e;for(let t of["prUrl","pr_url","pullRequestUrl"]){let n=r[t];if(typeof n=="string"&&n.trim())return n.trim()}}return null}function wo(e){let r=e.gitAncestry?.relation;return r==="merged"||r==="synced"?Fe(e.changedFiles).length>0:!!(bt(e.finalResult)||r==="ahead"||r==="diverged"||e.changedFiles.length>0&&e.finalResult)}O();function xo(e){return e.status||(e.status=J(e.worker,{base:e.run.base,baseCommit:e.run.baseCommit})),e.status}function Wc(e,r){if(e.status)return Fe(e.status.changedFiles).length>0;let t=r?r.porcelain(e.worktreePath):yn(e.worktreePath);return Fe(t).length>0}function OT(e){let r=e.worker.completionSnapshot?.finalResult;return r??(e.worker.taskPrUrl?{prUrl:e.worker.taskPrUrl}:null)}function Lc(e,r){if(e.status)return e.status;let t=e.worker,n=typeof t.completionReportedAt=="string"&&t.completionReportedAt.trim().length>0,o=!!(t.status&&["done","exited","blocked","failed","abandoned"].includes(t.status))||n,s=OT(e);if(o&&!Y(t.pid)){let i=r?.gitStatusCache?r.gitStatusCache.porcelain(e.worktreePath):yn(e.worktreePath),a=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main",c=r?.gitRevCache?.countAheadOfMain(e.worktreePath,a)===0?{checked:!0,base:a,relation:"synced"}:Lo(e.worktreePath,{base:e.run.base,baseCommit:e.run.baseCommit}),u={runId:e.runId,worker:e.workerName,pid:t.pid,alive:!1,status:t.status??(n?"done":"exited"),attention:{state:n?"done":"stale"},branch:t.branch,worktreePath:e.worktreePath,ownedPaths:t.ownedPaths,stdoutBytes:0,stderrBytes:0,heartbeatBytes:0,firstEventAt:null,lastEventAt:null,lastActivityAt:t.completionReportedAt??null,currentTool:null,heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,heartbeatBlocker:null,changedFiles:i,gitAncestry:c,finalResult:s,completionBlocker:typeof t.completionBlocker=="string"&&t.completionBlocker.trim()||null,prUrl:t.repairTargetPrUrl??t.taskPrUrl??bt(s)};return e.status=u,u}return xo(e)}me();me();ot();O();function TT(e,r=Date.now(),t=So){let n=pe(e.heartbeatPath);if(!n.lastHeartbeatAt)return!1;let o=r-Date.parse(n.lastHeartbeatAt);return Number.isFinite(o)&&o>=0&&o<t}function an(e,r=Date.now(),t=So){return Y(e.pid)?!0:TT(e,r,t)}function NT(e,r){return r?r.runTerminalCache.derive(e.run):yt(e.run)}function Wr(e,r=Date.now()){return an(e.worker,r)}function Uc(e,r){return kt.has(e.run.status)?!1:NT(e,r)!==null}function gy(e,r,t=Date.now()){if(Wr(e,t))return!0;if(kt.has(e.run.status)||Uc(e,r))return!1;let n=xo(e);return Se(n)?!1:!!Wr(e,t)}Qo();me();function hy(e,r){if(!(typeof e.worker.completionBlocker=="string"?e.worker.completionBlocker.trim():""))return!1;if(Wr(e))return!0;let n=r??xo(e);return!!(!Se(n)||wo(n)||Fe(n.changedFiles).length>0||Wt({finalResult:n.finalResult,changedFiles:n.changedFiles,gitAncestry:n.gitAncestry,prUrl:bt(n.finalResult)}).blocked)}de();O();import{existsSync as yy,mkdirSync as MT,writeFileSync as ky}from"node:fs";import wi from"node:path";function Ry(e,r,t){return wi.join(e,"salvage",x(r),x(t))}function vy(e){return yy(wi.join(Ry(e.harnessRoot,e.runId,e.workerName),"evidence.json"))}function by(e){let r=Ry(e.harnessRoot,e.indexed.runId,e.indexed.workerName);MT(r,{recursive:!0});let t=wi.join(r,"salvage.patch"),n=!1;if(yy(e.indexed.worktreePath)){let s=ne(e.indexed.worktreePath,["diff","HEAD"]),i=ne(e.indexed.worktreePath,["diff","--cached"]),a=[s.stdout,i.stdout].filter(l=>l.trim()).join(`
+`);a.trim()&&(ky(t,a.endsWith(`
 `)?a:`${a}
-`),n=!0)}let o={capturedAt:new Date(e.now??Date.now()).toISOString(),skipReason:e.skipReason,runId:e.indexed.runId,workerName:e.indexed.workerName,worktreePath:e.indexed.worktreePath,taskId:e.indexed.worker.taskId,agentOsId:e.indexed.worker.agentOsId,branch:e.indexed.worker.branch,completionBlocker:e.indexed.worker.completionBlocker,finalResult:e.status.finalResult,changedFiles:e.status.changedFiles,gitAncestry:e.status.gitAncestry,prUrl:e.status.prUrl??null,...n?{patchPath:t}:{}};return Kk(fi.join(r,"evidence.json"),`${JSON.stringify(o,null,2)}
-`),o}var TO=new Set(["completion_blocked","dirty_worktree","pr_or_unmerged_commits","landing_blocked"]);function NO(e){e.writeSalvageEvidence&&TO.has(e.skipReason)&&(Nr(e.indexed,e.now)||jk({harnessRoot:e.harnessRoot,runId:e.indexed.runId,workerName:e.indexed.workerName})||Vk({harnessRoot:e.harnessRoot,indexed:e.indexed,skipReason:e.skipReason,status:e.status,now:e.now}))}function MO(e){let{indexed:r,worktreesAgeMs:t,terminalWorktreesAgeMs:n}=e;return r&&(mt.has(r.run.status)||e.liveness&&Cc(r,e.liveness)||e.liveness&&Se(_c(r,e.liveness))&&!Nr(r))?n:t}function DO(e){return!e.indexed||e.includeOrphans&&e.worktreesAgeMs<=0?0:MO(e)}function WO(e,r){if(e.harnessRoot?.trim())return gi.resolve(e.harnessRoot);let t=r.worker.workerDir;if(!t)return null;let n=`${gi.sep}runs${gi.sep}`,o=t.indexOf(n);return o<0?null:t.slice(0,o+n.length-1)}function Gk(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,ageMs:o,orphanSafety:s,worktreeRemovalGuard:i}=e,a=e.now??Date.now();if(!r)return t?s??null:"orphan_without_flag";let l=DO(e);if(n<=0&&!t&&l<=0)return"worktrees_disabled";if(l>0&&o<l)return"below_age_threshold";if(Nr(r,a))return"active_worker";let c=_c(r,e.liveness),u=WO(e,r),d=f=>{if(u)try{NO({indexed:r,harnessRoot:u,skipReason:f,status:c,now:a,writeSalvageEvidence:e.writeSalvageEvidence===!0})}catch{}return f};if(Fk(r,c)){let f=d("completion_blocked");if(f)return f}if(xc(r,e.liveness?.gitStatusCache)){let f=d("dirty_worktree");if(f)return f}let p=e.liveness?.gitRevCache?.countAheadOfMain(e.worktreePath);if(p!=null&&p>0){let f=d("pr_or_unmerged_commits");if(f)return f}if(Bk(r,e.liveness,a)||!Se(c))return"run_still_active";if(ko(c)){let f=d("pr_or_unmerged_commits");if(f)return f}if(Le(c.changedFiles).length>0){let f=d("dirty_worktree");if(f)return f}if(Tt({finalResult:c.finalResult,changedFiles:c.changedFiles,gitAncestry:c.gitAncestry,prUrl:kt(c.finalResult)}).blocked){let f=d("landing_blocked");if(f)return f}if(i&&e.worktreePath){let f=i({worktreePath:e.worktreePath,indexed:!!r,runId:r?.runId,worker:r?.workerName});if(f)return f.detail?{reason:f.reason,detail:f.detail}:f.reason}return null}function Ec(e){let{indexed:r,nodeModulesAgeMs:t,ageMs:n,worktreePath:o,activeWorktreePaths:s,workerFilesystemLive:i,diskPressure:a}=e;return!a&&n<t?"below_age_threshold":i||s.has(gi.resolve(o))||r&&Nr(r)?"active_worker":r&&xc(r,e.gitStatusCache)?"dirty_worktree":null}function Yk(e){return Ec(e)}var qk=new Set(["active_worker","run_still_active","completion_blocked","landing_blocked"]);function Jk(e,r){let t=[],n=new Set,o=(s,i,a)=>{let l=`${s}\0${i}`;n.has(l)||t.length>=24||(n.add(l),t.push({path:s,reason:i,...a?{detail:a}:{}}))};for(let s of r)qk.has(s.reason)&&o(s.path,s.reason,s.detail);for(let s of e)!s.skipped||!s.skipReason||qk.has(s.skipReason)&&o(s.path,s.skipReason);return t}import{existsSync as Zk,readdirSync as ey,statSync as BO}from"node:fs";import ry from"node:path";B();qe();import zk from"node:path";O();function UO(e,r){return rn(e,r)}function Xk(e,r=Date.now()){let t=new Set,n=new Set;for(let o of e){for(let s of ms(o)){let i=!1;for(let a of Object.keys(s.workers||{})){let l=I(zk.join(Nn(o,s.id),"workers",x(a),"worker.json"),void 0);if(!l?.worktreePath)continue;let c=zk.resolve(l.worktreePath);UO(l,r)&&(i=!0,t.add(c))}i&&n.add(`${o}\0${s.id}`)}for(let s of fk(o))n.add(s)}return{activeWorktreePaths:t,liveRunKeys:n}}function Qk(e,r,t,n){return t?n.has(`${r}\0${t}`):!1}O();function FO(e,r){try{let t=BO(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function KO(e,r){let t=ry.join(e,"runs",r,"run.json");return Zk(t)?I(t,null):null}function ty(e){try{return ey(e).length===0}catch{return!1}}function ny(e){let{harnessRoot:r,runId:t,runPath:n,ageMs:o,runDirectoriesAgeMs:s,activeGuards:i}=e;if(Qk(n,r,t,i.liveRunKeys)||!ty(n))return"run_still_active";let a=KO(r,t);return a&&!mt.has(a.status)&&!ft(a)?"run_still_active":s>0&&o<s?"below_age_threshold":null}function oy(e){if(!Zk(e.worktreesDir))return[];let r=[],t;try{t=ey(e.worktreesDir,{withFileTypes:!0})}catch{return[]}for(let n of t){if(!n.isDirectory())continue;let o=n.name;if(e.runIdFilter&&o!==e.runIdFilter)continue;let s=ry.join(e.worktreesDir,o);ty(s)&&r.push({kind:"remove_run_directory",path:s,bytes:null,harnessRoot:e.harnessRoot,runId:o,ageMs:FO(s,e.now)})}return r}de();import{existsSync as Ac,rmSync as gy}from"node:fs";import{execFileSync as HO}from"node:child_process";import{existsSync as sy,readdirSync as $O,statSync as jO}from"node:fs";import VO from"node:path";var GO=2500;function YO(e,r=GO){if(!sy(e))return 0;try{let n=HO("du",["-sb",e],{encoding:"utf8",timeout:r,stdio:["ignore","pipe","ignore"]}).trim().split(/\s+/)[0],o=Number(n);return Number.isFinite(o)&&o>=0?o:null}catch{return null}}function Mr(e,r=5e4){if(!sy(e))return 0;let t=YO(e);if(t!==null)return t;let n=0,o=0,s=[e];for(;s.length>0;){let i=s.pop(),a;try{a=$O(i)}catch{continue}for(let l of a){if(o++>r)return null;let c=VO.join(i,l),u;try{u=jO(c)}catch{continue}u.isDirectory()?s.push(c):n+=u.size}}return n}import{existsSync as XO,rmSync as QO}from"node:fs";qe();import{lstatSync as qO,readdirSync as JO}from"node:fs";function iy(e){try{let r=qO(e),t=typeof process.getuid=="function"?process.getuid():null,n=typeof process.getgid=="function"?process.getgid():null,o=t!==null&&(r.uid!==t||n!==null&&r.gid!==n);return{uid:r.uid,gid:r.gid,foreign:o}}catch{return null}}function ay(e,r=32){let t=iy(e);if(!t)return!1;if(t.foreign)return!0;try{let n=JO(e),o=0;for(let s of n){if(o>=r)break;let i=`${e.replace(/\/$/,"")}/${s}`,a=iy(i);if(o+=1,a?.foreign)return!0}}catch{}return!1}import{spawnSync as zO}from"node:child_process";import uy from"node:path";import Ue from"node:path";function ly(e,r,t,n){let o=Ue.resolve(e),s=`${Ue.sep}${n}`,i=o.endsWith(s)?o:null;if(!i)return"path_outside_harness";let a=Ue.relative(t,i);if(a.startsWith("..")||Ue.isAbsolute(a))return"path_outside_harness";let l=a.split(Ue.sep);return l.length<3||l[l.length-1]!==n||!o.startsWith(Ue.resolve(r))?"path_outside_harness":null}function hi(e,r,t){return ly(e,r,t,"node_modules")}function ki(e,r,t){return ly(e,r,t,".next")}function yi(e,r,t){let n=Ue.resolve(e),o=Ue.relative(t,n);return o.startsWith("..")||Ue.isAbsolute(o)||o.split(Ue.sep).length<3||!n.startsWith(Ue.resolve(r))?"path_outside_harness":null}function cy(e,r,t){let n=Ue.resolve(e);return hi(n,r,t)===null||ki(n,r,t)===null||yi(n,r,t)===null}function py(){let e=(process.env.KYNVER_CLEANUP_PRIVILEGED??"auto").trim().toLowerCase();return e==="0"||e==="false"||e==="off"||e==="no"?"off":e==="1"||e==="true"||e==="force"||e==="yes"?"force":"auto"}function dy(e){let r=zO("sudo",["-n",...e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});return{ok:r.status===0,stderr:`${r.stderr??""}${r.stdout??""}`.trim()}}function my(e,r,t){if(!cy(e,r,t))return{ok:!1,error:"path is not an allowed harness generated cache"};let n=typeof process.getuid=="function"?process.getuid():null,o=typeof process.getgid=="function"?process.getgid():null;if(n===null||o===null)return{ok:!1,error:"privileged reclaim requires POSIX uid/gid"};let s=dy(["chown","-R",`${n}:${o}`,uy.resolve(e)]);if(s.ok)return{ok:!0,method:"chown_then_rm"};let i=dy(["rm","-rf",uy.resolve(e)]);return i.ok?{ok:!0,method:"sudo_rm"}:{ok:!1,error:s.stderr||i.stderr||"sudo -n failed (password required or not permitted)"}}var Pc="Root-owned harness caches require operator reclaim: configure passwordless sudo for chown/rm under ~/.kynver/harness/worktrees, or remove them as the harness owner with sudo available. More help: https://www.kynver.com/help.";function ZO(e){let r=e?.code;return r==="EACCES"||r==="EPERM"}function fy(e,r,t={}){if(!XO(e.path))return{executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.harnessRoot,o=n?Ut(n):null,i=e.bytes??Mr(e.path)??void 0,a=t.removePath??QO,l=t.hasForeignOwnedEntry??ay;try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i}}catch(c){if(!ZO(c)||!n||!o)return{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let u=l(e.path),d=py();if(!(d==="force"||d==="auto"&&u))return u?{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; ${Pc}`}:{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let m=my(e.path,n,o);if(m.ok&&m.method==="sudo_rm")return{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0};if(m.ok)try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0}}catch(f){return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${f.message}; privileged chown succeeded but rm still failed`}}return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; privileged reclaim failed: ${m.error}; ${Pc}`}}}function Ic(e){let r=e.harnessRoot;return!r||!dk(e.path,r)?null:{...e,executed:!1,skipped:!0,skipReason:"run_metadata_protected"}}function Oc(e,r){let t=Ic(e);if(t)return t;let n=fy(e,r);return{...e,bytes:n.bytes??e.bytes,executed:n.executed,skipped:n.skipped,skipReason:n.skipReason,error:n.error}}function hy(e,r){return Oc(e,r)}function ky(e,r){return Oc(e,r)}function yy(e,r){return Oc(e,r)}function Ry(e,r){let t=Ic(e);if(t)return t;if(!Ac(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};try{let n=e.bytes??Mr(e.path);return gy(e.path,{recursive:!0,force:!0}),{...e,bytes:n,executed:!0,skipped:!1}}catch(n){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:n.message}}}function vy(e,r){let t=Ic(e);if(t)return t;if(!Ac(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.repo;try{let o=e.bytes??Mr(e.path);return n&&Q(n,["worktree","remove","--force",e.path],{allowFailure:!0}),Ac(e.path)&&gy(e.path,{recursive:!0,force:!0}),{...e,bytes:o,executed:!0,skipped:!1}}catch(o){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:o.message}}}import{existsSync as Ri,readdirSync as vi,statSync as eT}from"node:fs";import cr from"node:path";function Tc(e,r){try{let t=eT(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function Sy(e,r){let t=cr.relative(r,e);return t===""||!t.startsWith("..")&&!cr.isAbsolute(t)}function by(e,r,t,n){let o=[];for(let s of wc){if(s===".next")continue;let i=cr.join(e,s);if(!Ri(i))continue;let a=cr.resolve(i);t.has(a)||Sy(a,r.harnessRoot)&&(t.add(a),o.push({kind:"remove_build_cache",path:a,bytes:null,runId:n.runId,worker:n.worker,repo:n.repo,ageMs:Tc(a,r.now)}))}return o}function wy(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||r.push(...by(n.worktreePath,e,t,{runId:n.runId,worker:n.workerName,repo:n.run.repo}));if(!e.includeOrphans||!Ri(e.worktreesDir))return r;for(let n of vi(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory())continue;let o=cr.join(e.worktreesDir,n.name);for(let s of vi(o,{withFileTypes:!0})){if(!s.isDirectory())continue;let i=cr.join(o,s.name);r.push(...by(i,e,t,{runId:n.name,worker:s.name}))}}return r}function xy(e){let r=e.worktreesAgeMs>0||e.includeOrphans,t=e.includeOrphans;if(!r&&!t)return[];let n=[],o=new Set;if(r)for(let i of e.index.values()){if(e.runIdFilter&&i.runId!==e.runIdFilter)continue;let a=i.worktreePath;Ri(a)&&(o.has(a)||(o.add(a),n.push({kind:"remove_worktree",path:a,bytes:null,runId:i.runId,worker:i.workerName,repo:i.run.repo,ageMs:Tc(a,e.now)})))}if(!t||!Ri(e.worktreesDir))return n;let s=new Set;for(let i of e.index.values())s.add(cr.resolve(i.worktreePath));for(let i of vi(e.worktreesDir,{withFileTypes:!0})){if(!i.isDirectory()||e.runIdFilter&&i.name!==e.runIdFilter)continue;let a=cr.join(e.worktreesDir,i.name),l;try{l=vi(a,{withFileTypes:!0})}catch{continue}for(let c of l){if(!c.isDirectory())continue;let u=cr.resolve(cr.join(a,c.name));o.has(u)||s.has(u)||Sy(u,e.harnessRoot)&&(o.add(u),n.push({kind:"remove_worktree",path:u,bytes:null,runId:i.name,worker:c.name,ageMs:Tc(u,e.now)}))}}return n}import{existsSync as Ey,readdirSync as _y,statSync as rT}from"node:fs";import tn from"node:path";var tT=[{dirName:"node_modules",kind:"remove_node_modules"},{dirName:".next",kind:"remove_next_cache"}];function nT(e,r){try{let t=rT(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function oT(e,r){let t=tn.relative(r,e);return t===""||!t.startsWith("..")&&!tn.isAbsolute(t)}function sT(e,r,t,n,o,s){if(!Ey(n))return;let i=tn.resolve(n);r.has(i)||oT(i,t.harnessRoot)&&(r.add(i),e.push({kind:o,path:i,bytes:null,harnessRoot:t.harnessRoot,runId:s.runId,worker:s.worker,repo:s.repo,ageMs:nT(i,t.now)}))}function Cy(e,r,t,n,o){for(let s of tT)sT(e,r,t,tn.join(n,s.dirName),s.kind,o)}function Py(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||Cy(r,t,e,n.worktreePath,{runId:n.runId,worker:n.workerName,repo:n.run.repo});if(!e.includeOrphans||!Ey(e.worktreesDir))return r;for(let n of _y(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory()||e.runIdFilter&&n.name!==e.runIdFilter)continue;let o=tn.join(e.worktreesDir,n.name),s;try{s=_y(o,{withFileTypes:!0})}catch{continue}for(let i of s){if(!i.isDirectory())continue;let a=tn.join(o,i.name);Cy(r,t,e,a,{runId:n.name,worker:i.name})}}return r}de();import{existsSync as Ay,statSync as iT}from"node:fs";import ur from"node:path";function aT(e,r){try{let t=iT(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function lT(e){let r=[],t=null;for(let n of e.split(`
-`)){if(!n.trim())continue;let[o,...s]=n.split(" "),i=s.join(" ");if(o==="worktree"){t&&r.push(t),t={path:i};continue}t&&(o==="branch"&&(t.branch=i),o==="HEAD"&&(t.head=i),o==="bare"&&(t.bare=!0))}return t&&r.push(t),r}function cT(e,r){let t=ur.relative(ur.resolve(r),ur.resolve(e));return t!==""&&!t.startsWith("..")&&!ur.isAbsolute(t)}var uT=200;function Iy(e){if(!e.includeOrphans||!Ay(e.worktreesDir))return[];let r=new Set;for(let s of e.index.values())s.run.repo&&r.add(ur.resolve(s.run.repo));let t=new Set;for(let s of e.index.values())t.add(ur.resolve(s.worktreePath));let n=[],o=new Set;for(let s of r){let i=0,a;try{a=Q(s,["worktree","list","--porcelain"],{allowFailure:!0})}catch{continue}let l=lT(a);for(let c of l){if(i>=uT)break;let u=ur.resolve(c.path);if(u===ur.resolve(s)||!cT(u,e.worktreesDir)||t.has(u)||o.has(u)||!Ay(u))continue;let p=ur.relative(e.worktreesDir,u).split(ur.sep),m=p[0],f=p[1]??"unknown";o.add(u),i+=1,n.push({kind:"remove_worktree",path:u,bytes:null,runId:m,worker:f,repo:s,ageMs:aT(u,e.now)})}}return n}B();O();import Ro from"node:path";function Oy(e,r){let t=Ro.resolve(r),n=new Map;for(let[o,s]of e){let i=s.harnessRoot?Ro.resolve(s.harnessRoot):null;i&&i!==t||n.set(o,s)}return n}function Ty(e){let r=new Map;for(let t of ms(e))for(let n of Object.keys(t.workers||{})){let o=Ro.join(Nn(e,t.id),"workers",x(n),"worker.json"),s=I(o,void 0);s?.worktreePath&&r.set(Ro.resolve(s.worktreePath),{harnessRoot:e,worktreePath:Ro.resolve(s.worktreePath),runId:t.id,workerName:n,run:t,worker:s})}return r}function vo(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function yt(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?n:r}function Mc(e={}){let r=e.execute===!0||e.execute!==!1&&vo("KYNVER_CLEANUP_EXECUTE"),t=e.finalizeStaleRuns!==!1&&!vo("KYNVER_CLEANUP_SKIP_FINALIZE"),n=e.nodeModulesAgeMs??yt("KYNVER_CLEANUP_NODE_MODULES_AGE_MS",216e5),o=e.scanDependencyCaches??(e.nodeModulesAgeMs!==void 0||process.env.KYNVER_CLEANUP_NODE_MODULES_AGE_MS!=null),s=e.worktreesAgeMs??yt("KYNVER_CLEANUP_WORKTREES_AGE_MS",0),i=e.terminalWorktreesAgeMs??yt("KYNVER_CLEANUP_TERMINAL_WORKTREES_AGE_MS",216e5),a=e.runDirectoriesAgeMs??yt("KYNVER_CLEANUP_RUN_DIRECTORIES_AGE_MS",36e5),l=e.maxActionsPerSweep??yt("KYNVER_CLEANUP_MAX_ACTIONS_PER_SWEEP",120),c=e.includeOrphans===!0||vo("KYNVER_CLEANUP_INCLUDE_ORPHANS"),d=vo("KYNVER_CLEANUP_SCOPE_ALL")||process.env.KYNVER_CLEANUP_SCOPE==="all"?e.runIdFilter:e.runIdFilter??(process.env.KYNVER_CLEANUP_RUN_ID||void 0),p=e.accountBytes!==!1&&!vo("KYNVER_CLEANUP_SKIP_BYTE_ACCOUNTING"),m=yt("KYNVER_CLEANUP_STORAGE_ENTRY_CAP",2e3),f=e.storagePerRunEntryCap!==void 0?e.storagePerRunEntryCap:p&&m>0?m:null,b=yt("KYNVER_CLEANUP_BYTE_ENTRY_CAP",2e3),k=e.byteAccountingEntryCap??(Number.isFinite(b)&&b>0?Math.floor(b):2e3);return{execute:r,finalizeStaleRuns:t,scanDependencyCaches:o,nodeModulesAgeMs:n,worktreesAgeMs:s>0?s:0,terminalWorktreesAgeMs:i>=0?i:0,runDirectoriesAgeMs:a>=0?a:0,maxActionsPerSweep:Number.isFinite(l)&&l>0?Math.floor(l):120,includeOrphans:c,runIdFilter:d?String(d):void 0,accountBytes:p,storagePerRunEntryCap:f,byteAccountingEntryCap:k}}function Wy(e){let r=process.env.KYNVER_CLEANUP_SCOPE==="all",t=Number(process.env.KYNVER_CLEANUP_WORKTREES_AGE_MS),n=r?Number.isFinite(t)&&t>0?t:6048e5:Number.isFinite(t)&&t>0?t:0;return Mc({runIdFilter:r?void 0:e,worktreesAgeMs:n,terminalWorktreesAgeMs:r?216e5:void 0,runDirectoriesAgeMs:r?36e5:void 0,includeOrphans:r?!0:void 0,finalizeStaleRuns:!0,accountBytes:!0,scanDependencyCaches:!0})}de();import{existsSync as Dc,statSync as pT}from"node:fs";import Rt from"node:path";O();var Ly=1800*1e3;function mT(e,r){let t=Rt.relative(r,e);return t===""||!t.startsWith("..")&&!Rt.isAbsolute(t)}function fT(e,r,t){if(!Dc(e))return!1;try{let n=r-pT(e).mtimeMs;return Number.isFinite(n)&&n>=0&&n<t}catch{return!1}}function Wc(e){if(!e.runId||!e.workerName)return!1;let r=e.now??Date.now(),t=e.heartbeatFreshMs??Ly,n=Rt.resolve(e.harnessRoot,"runs"),o=Rt.resolve(n,e.runId,"workers",e.workerName);if(!mT(o,n))return!1;let s=I(Rt.join(o,"worker.json"),void 0);return s&&rn(s,r,t)?!0:s?!1:fT(Rt.join(o,"heartbeat.jsonl"),r,t)}function Uy(e){let r=e.now??Date.now(),t=e.heartbeatFreshMs??Ly;if(!Dc(e.worktreePath))return null;if(e.runId&&e.workerName&&Wc(e))return"active_worker";let n=Rt.join(e.worktreePath,".git");if(!Dc(n))return null;let o=te(e.worktreePath,["status","--porcelain"]);if(o.status!==0)return"pr_or_unmerged_commits";let s=o.stdout.split(`
-`).map(c=>c.trim()).filter(c=>c.length>0);if(Le(s).length>0)return"dirty_worktree";let i=te(e.worktreePath,["rev-list","--count","@{u}..HEAD"]);if(i.status===0){let c=Number(i.stdout.trim());if(Number.isFinite(c)&&c>0)return"pr_or_unmerged_commits"}let a=te(e.worktreePath,["rev-list","--count","origin/main..HEAD"]);if(a.status!==0)return i.status!==0?"pr_or_unmerged_commits":null;let l=Number(a.stdout.trim());return Number.isFinite(l)&&l>0?"pr_or_unmerged_commits":null}qe();import{existsSync as gT,readdirSync as By,statSync as hT}from"node:fs";import kT from"node:path";function Fy(e={}){let r=ge(e.harnessRoot??Te()),t=Ut(r),n=e.now??Date.now(),o=new Date(n).toISOString();if(!gT(t))return{harnessRoot:r,worktreesDir:t,worktreesBytes:0,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o};let s=0,i=0,a=0,l=null,c;try{c=By(t,{withFileTypes:!0})}catch{return{harnessRoot:r,worktreesDir:t,worktreesBytes:null,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o}}for(let u of c){if(!u.isDirectory())continue;i+=1;let d=kT.join(t,u.name);try{let p=hT(d);l=l===null?p.mtimeMs:Math.min(l,p.mtimeMs)}catch{}try{for(let p of By(d,{withFileTypes:!0}))p.isDirectory()&&(a+=1)}catch{}if(s!==null&&e.perRunEntryCap!==null){let p=e.perRunEntryCap??5e4;if(p<=0)s=null;else{let m=Mr(d,p);m===null?s=null:s+=m}}}return{harnessRoot:r,worktreesDir:t,worktreesBytes:s,runCount:i,workerCount:a,oldestRunAt:l===null?null:new Date(l).toISOString(),scannedAt:o}}qe();import{existsSync as yT}from"node:fs";import{homedir as RT}from"node:os";import Ky from"node:path";var vT=["/var/tmp/kynver-harness",Ky.join(RT(),".openclaw","harness")];function Lc(e,r,t){if(!t?.trim())return;let n=ge(t.trim());e.has(n)||(e.add(n),r.push(n))}function bT(e){return e.scanWellKnown!=null?e.scanWellKnown:process.env.VITEST==="true"?!1:process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN!=="0"&&!["0","false","no"].includes((process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN??"").toLowerCase())}function Hy(e={}){let r=new Set,t=[];Lc(r,t,e.harnessRoot??Te());let n=process.env.KYNVER_CLEANUP_EXTRA_ROOTS?.split(",").map(o=>o.trim()).filter(Boolean);for(let o of n??[])Lc(r,t,o);if(bT(e))for(let o of vT){let s=Ky.resolve(o);!r.has(s)&&yT(s)&&Lc(r,t,s)}return t}Rn();function ST(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function wT(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function $y(e={}){let r=e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/",t=wT("KYNVER_DISK_GUARD_MAX_USED_PERCENT",75),n=Lr({...e,diskPath:r,diskMaxUsedPercent:e.diskMaxUsedPercent??t}),o=!n.ok||n.usedPercent>=t,s=process.env.KYNVER_CLEANUP_DISK_PRESSURE_FORCE?.trim().toLowerCase();return s==="none"||s==="off"||s==="0"?o=!1:(s==="pressured"||s==="on"||s==="1")&&(o=!0),{diskGate:n,pressured:o,maxUsedPercent:t}}function jy(e,r){if(!r.pressured)return e;let t=e.execute||!ST("KYNVER_CLEANUP_DRY_RUN_ON_PRESSURE");return{...e,execute:t,nodeModulesAgeMs:0,runIdFilter:void 0,includeOrphans:!0,terminalWorktreesAgeMs:0,runDirectoriesAgeMs:0,worktreesAgeMs:e.worktreesAgeMs>0?e.worktreesAgeMs:6048e5,diskPressure:!0,diskGate:r.diskGate}}Wo();import{unlinkSync as xT}from"node:fs";function bi(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function Vy(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function _T(e,r,t){return e.length===0?[]:t?[...e]:e.length<=r?[]:e.slice(r)}function Gy(e={}){let r=e.execute===!0||bi("KYNVER_WSL_CRASH_DUMP_EXECUTE")||bi("KYNVER_CLEANUP_EXECUTE"),t=e.purgeAll===!0||bi("KYNVER_WSL_CRASH_DUMP_PURGE_ALL"),n=Math.max(0,e.keepNewest??Vy("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",t?0:1)),o=At({forceWsl:e.forceWsl});if(!o?.path)return{observation:o,execute:r,keepNewest:n,removed:[],removedBytes:0,skipped:o?.probeError?[{path:o.path??"(unresolved)",reason:o.probeError}]:[]};let s=_T(o.dumps,n,t),i=[],a=[],l=0;for(let c of s){if(!r){a.push({path:c.path,reason:"dry_run"});continue}try{xT(c.path),i.push({path:c.path,bytes:c.bytes,name:c.name}),l+=c.bytes}catch(u){a.push({path:c.path,reason:u.message})}}return{observation:o,execute:r,keepNewest:n,removed:i,removedBytes:l,skipped:a}}function Yy(e){return e?bi("KYNVER_WSL_CRASH_DUMP_CLEANUP")||!e.ok?!0:e.dumpCount>Vy("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",1):!1}Wo();function Be(e,r){if(process.env.KYNVER_CLEANUP_QUIET==="1")return;let t=r?`: ${r}`:"";console.error(`[kynver cleanup] ${e}${t}`)}de();var Si=class{aheadOfMain=new Map;countAheadOfMain(r,t="origin/main"){let n=`${r}\0${t}`;if(this.aheadOfMain.has(n))return this.aheadOfMain.get(n)??null;let o=te(r,["rev-list","--count",`${t}..HEAD`]);if(o.status!==0)return this.aheadOfMain.set(n,null),null;let s=Number(o.stdout.trim()),i=Number.isFinite(s)?s:null;return this.aheadOfMain.set(n,i),i}};import{spawnSync as CT}from"node:child_process";import{existsSync as ET}from"node:fs";import PT from"node:path";var AT=5e3;function IT(e,r){if(!ET(PT.join(e,".git")))return{status:null,stdout:"",stderr:"",error:"not_a_git_repo"};try{let t=CT("git",r,{windowsHide:!0,cwd:e,encoding:"utf8",timeout:AT}),n=t.error?.message?.includes("ETIMEDOUT")===!0;return{status:n?null:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:n?"git_timeout":t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function qy(e){let r=IT(e,["status","--short"]);return r.error==="not_a_git_repo"?[]:r.error==="git_timeout"||r.status!==0?null:r.stdout.split(`
-`).map(t=>t.trim()).filter(Boolean)}var wi=class{cache=new Map;porcelain(r){let t=r,n=this.cache.get(t);if(n!==void 0)return n;let o=qy(t)??[];return this.cache.set(t,o),o}};var xi=class{cache=new Map;derive(r){let t=this.cache.get(r.id);if(t!==void 0)return t;let n=ft(r);return this.cache.set(r.id,n),n}};function OT(e){let r={};for(let t of e)r[t.kind]=(r[t.kind]??0)+1;return r}function Jy(e,r={}){let t=r.maxSampleActions??12,n=r.maxSampleSkips??8;return{harnessRoot:e.harnessRoot,scanRoots:e.scanRoots,dryRun:e.dryRun,execute:e.execute,scannedAt:e.scannedAt,finalizedRuns:e.finalizedRuns.length,actionCount:e.actions.length,actionKinds:OT(e.actions),totals:e.totals,...e.storage?{storage:e.storage}:{},...e.preservedLivePaths?.length?{preservedLivePaths:e.preservedLivePaths}:{},...e.removedRunDirectories!=null?{removedRunDirectories:e.removedRunDirectories}:{},sampleActions:e.actions.slice(0,t).map(o=>({kind:o.kind,path:o.path,...o.skipReason?{skipReason:o.skipReason}:{},...o.bytes!=null?{bytes:o.bytes}:{},...o.runId?{runId:o.runId}:{},...o.worker?{worker:o.worker}:{}})),sampleSkips:e.skips.slice(0,n)}}function TT(e={}){let r=e.harnessRoot?ge(e.harnessRoot):Te(),t=Hy({harnessRoot:r}),n=e.now??Date.now();return{harnessRoot:r,scanRoots:t,now:n}}function NT(e){return typeof e=="string"?{reason:e}:e}function nn(e,r,t,n){e.push({path:r,reason:t,...n?{detail:n}:{}})}function _i(e,r,t){return!r||e.bytes!=null?e:{...e,bytes:Mr(e.path,t)}}function zy(e,r){let t={};for(let n of r)t[n.reason]=(t[n.reason]??0)+1;for(let n of e)n.skipReason&&(t[n.skipReason]=(t[n.skipReason]??0)+1);return t}function MT(e,r){return e.kind==="remove_next_cache"?ky(e,r):hy(e,r)}function DT(e,r,t){return e.kind==="remove_next_cache"?ki(e.path,r,t):hi(e.path,r,t)}function WT(e){let r=new Map;for(let t of e)for(let[n,o]of Ty(t))r.set(n,o);return r}function Xy(e,r){return e.runId&&e.worker?Fe.join(r,e.runId,e.worker):Fe.resolve(e.path,"..")}function Qy(e){return e.indexed?!1:Wc({harnessRoot:e.harnessRoot,runId:e.candidate.runId,workerName:e.candidate.worker,now:e.now})}function LT(e={}){let r=Mc(e),t=$y();r=jy(r,t);let n=TT(e);Be("scan",`${n.scanRoots.length} harness root(s)`);let o=Xk(n.scanRoots,n.now),s=r.finalizeStaleRuns?go().map(_=>({runId:_.runId,from:_.from,to:_.to})):[];s.length>0&&Be("finalize",`${s.length} stale run(s) marked terminal`),Be("index","building worktree index");let i=WT(n.scanRoots);Be("index",`${i.size} indexed worktree(s)`);let a={runTerminalCache:new xi,gitStatusCache:new wi,gitRevCache:new Si},l=[],c=[],u=new Set,d=r.maxActionsPerSweep,p=()=>c.length>=d;for(let _ of n.scanRoots){if(p())break;Be("root",_);let Z=Fe.join(_,"worktrees"),he=Oy(i,_),Ze={harnessRoot:_,worktreesDir:Z,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter,index:he,now:n.now},dr=r.scanDependencyCaches?Py(Ze):[];Be("dependency",r.scanDependencyCaches?`${dr.length} cache candidate(s) at ${_}`:"skipped (worktree-only sweep)");let se=0;for(let T of dr){if(p())break;se+=1,se%50===0&&Be("dependency",`${se}/${dr.length} evaluated`);let G=Fe.resolve(T.path);if(u.has(G))continue;u.add(G);let W={...T,path:G},ie=DT(W,_,Z);if(ie){nn(l,W.path,ie),c.push({...W,executed:!1,skipped:!0,skipReason:ie});continue}let ke=Xy(W,Z),ye=he.get(Fe.resolve(ke))??null,pr=Qy({candidate:W,indexed:ye,harnessRoot:_,now:n.now}),H=Ec({indexed:ye,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:W.ageMs,worktreePath:ke,activeWorktreePaths:o.activeWorktreePaths,workerFilesystemLive:pr,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(H){nn(l,W.path,H),c.push({...W,executed:!1,skipped:!0,skipReason:H});continue}c.push(MT(_i(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(r.scanDependencyCaches)for(let T of wy(Ze)){if(p())break;let G=Fe.resolve(T.path);if(u.has(G))continue;u.add(G);let W={...T,path:G},ie=yi(W.path,_,Z);if(ie){nn(l,W.path,ie),c.push({...W,executed:!1,skipped:!0,skipReason:ie});continue}let ke=Xy(W,Z),ye=he.get(Fe.resolve(ke))??null,pr=Qy({candidate:W,indexed:ye,harnessRoot:_,now:n.now}),H=Yk({indexed:ye,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:W.ageMs,worktreePath:ke,activeWorktreePaths:o.activeWorktreePaths,workerFilesystemLive:pr,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(H){nn(l,W.path,H),c.push({...W,executed:!1,skipped:!0,skipReason:H});continue}c.push(yy(_i(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}let D=[...xy(Ze),...Iy(Ze)];Be("worktrees",`${D.length} candidate(s) at ${_}`);let L=new Set,Ke=0;for(let T of D){if(p())break;Ke+=1,Ke%50===0&&Be("worktrees",`${Ke}/${D.length} evaluated`);let G=Fe.resolve(T.path);if(L.has(G))continue;L.add(G);let W={...T,path:G},ie=he.get(Fe.resolve(W.path))??null,ke=ie?null:Uy({worktreePath:W.path,harnessRoot:_,runId:W.runId,workerName:W.worker,now:n.now}),ye=Gk({indexed:ie,worktreePath:Fe.resolve(W.path),includeOrphans:r.includeOrphans,worktreesAgeMs:r.worktreesAgeMs,terminalWorktreesAgeMs:r.terminalWorktreesAgeMs,ageMs:W.ageMs,orphanSafety:ke,worktreeRemovalGuard:e.worktreeRemovalGuard,liveness:a,now:n.now,harnessRoot:_,writeSalvageEvidence:r.execute});if(ye){let{reason:pr,detail:H}=NT(ye);nn(l,W.path,pr,H),c.push({...W,executed:!1,skipped:!0,skipReason:pr});continue}c.push(vy(_i(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(!p()&&r.runDirectoriesAgeMs>=0)for(let T of oy({harnessRoot:_,worktreesDir:Z,runDirectoriesAgeMs:r.runDirectoriesAgeMs,runIdFilter:r.runIdFilter,activeGuards:o,now:n.now})){if(p())break;let G=Fe.resolve(T.path);if(u.has(G))continue;u.add(G);let W={...T,path:G},ie=W.runId??Fe.basename(G),ke=ny({harnessRoot:_,runId:ie,runPath:G,ageMs:W.ageMs,runDirectoriesAgeMs:r.runDirectoriesAgeMs,activeGuards:o});if(ke){nn(l,W.path,ke),c.push({...W,executed:!1,skipped:!0,skipReason:ke});continue}c.push(Ry(_i(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}}let m=0,f=0,b=0,k=0,R=0,g=0;for(let _ of c)_.bytes&&(m+=_.bytes),!_.skipped&&!_.executed&&_.bytes&&(b+=_.bytes),_.executed?(R+=1,k+=_.bytes??0,_.kind==="remove_run_directory"&&(f+=1)):_.skipped&&(g+=1,_.skipReason==="dry_run"&&_.bytes&&(b+=_.bytes));let h=r.accountBytes?Fy({harnessRoot:n.harnessRoot,now:n.now,perRunEntryCap:r.storagePerRunEntryCap}):void 0,E=At(),P=r.execute&&Yy(E),S=P?Gy({execute:!0}):null,w=E?{observed:!0,execute:P,dumpCount:E.dumpCount,totalBytes:E.totalBytes,removedCount:S?.removed.length??0,removedBytes:S?.removedBytes??0,executables:E.executables,path:E.path,reason:E.reason}:void 0;S&&S.removed.length>0&&(k+=S.removedBytes,R+=S.removed.length,Be("wsl-crashes",`removed ${S.removed.length} dump(s), ${S.removedBytes} bytes`)),Be("complete",`${c.length} action(s), ${g} skipped, ${R} removed`);let V=Jk(c,l),$=Jy({harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:m,reclaimableBytes:b,removedBytes:k,removedPaths:R,skippedPaths:g,skipReasons:zy(c,l)},...h?{storage:h}:{},...V.length>0?{preservedLivePaths:V}:{},...f>0?{removedRunDirectories:f}:{},...w?{wslCrashDumps:w}:{}});return{harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:m,reclaimableBytes:b,removedBytes:k,removedPaths:R,skippedPaths:g,skipReasons:zy(c,l)},...h?{storage:h}:{},...V.length>0?{preservedLivePaths:V}:{},...f>0?{removedRunDirectories:f}:{},...w?{wslCrashDumps:w}:{},compactSummary:$}}function Zy(e){let r=Wy(e);return LT({execute:r.execute,finalizeStaleRuns:r.finalizeStaleRuns,accountBytes:r.accountBytes,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter})}function eR(){return process.env.KYNVER_PIPELINE_CLEANUP!=="0"}import{readFile as BT}from"node:fs/promises";import{homedir as FT}from"node:os";import vt from"node:path";fn();var UT={"@kynver-app/runtime":"0.1.83","@kynver-app/openclaw-agent-os":"0.1.43","@kynver-app/mcp-agent-os":"0.3.34"},Z6=Object.keys(UT);function rR(e){let r=e.trim().split("-")[0]?.split("+")[0];if(!r)return null;let t=r.split(".");if(t.length<1||t.length>3)return null;let n=t.map(o=>Number.parseInt(o,10));if(n.some(o=>!Number.isFinite(o)||o<0))return null;for(;n.length<3;)n.push(0);return[n[0],n[1],n[2]]}function tR(e,r){let t=rR(e),n=rR(r);if(!t||!n)return 0;for(let o=0;o<3;o+=1){if(t[o]>n[o])return 1;if(t[o]<n[o])return-1}return 0}var KT=["@kynver-app/runtime","@kynver-app/openclaw-agent-os","@kynver-app/mcp-agent-os"];function on(e){let r=e?.trim();return r||null}function HT(e){return[...new Set(e.filter(r=>!!r))]}function $T(){let e=FT(),r=on(process.env.KYNVER_OPENCLAW_NPM_ROOT)??on(process.env.OPENCLAW_NPM_ROOT)??vt.join(e,".openclaw","npm"),t=on(process.env.KYNVER_NPM_GLOBAL_ROOT)??on(process.env.KYNVER_NPM_GLOBAL_MODULES_ROOT)??(on(process.env.NPM_CONFIG_PREFIX)?vt.join(on(process.env.NPM_CONFIG_PREFIX),"lib","node_modules"):vt.join(e,".npm-global","lib","node_modules"));return HT([vt.join(r,"lib","node_modules"),vt.join(r,"node_modules"),t.endsWith("node_modules")?t:vt.join(t,"lib","node_modules")])}async function jT(e){try{let r=JSON.parse(await BT(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function VT(e){let r=$T(),t=new Set,n=[];for(let o of r){let s=vt.join(o,e,"package.json");t.has(s)||(t.add(s),n.push(s))}return n}async function nR(e=new Date().toISOString()){let r={};for(let t of KT){let n=null;for(let o of VT(t)){let s=await jT(o);s&&(!n||tR(s,n.version)>0)&&(n={version:s,path:o})}n&&(r[t]={version:n.version,observedAt:e,path:n.path})}return r}import{spawnSync as GT}from"node:child_process";var YT=1e4,qT=4*1024*1024,oR=(e,r,t)=>{try{let n=GT(e,r,{windowsHide:!0,encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:t?.timeoutMs??YT,maxBuffer:qT});return{ok:n.status===0,stdout:typeof n.stdout=="string"?n.stdout:"",stderr:typeof n.stderr=="string"?n.stderr:""}}catch(n){return{ok:!1,stdout:"",stderr:n instanceof Error?n.message:String(n)}}};function Ci(e,r,t){return`${e} ${r} ${t}`}function Uc(e){let r=e.lastIndexOf("@");if(r<=0||r===e.length-1)return null;let t=e.slice(0,r),n=e.slice(r+1);return!/^[^/\s]+\/[^/\s]+$/.test(t)||!/^[0-9a-f]{7,40}$/i.test(n)?null:{repo:t,sha:n}}function sR(e){let r=e.trim().match(/[/:]([^/]+\/[^/]+)\/(?:pull|pulls|merge_requests|pull-requests)\/(\d+)/i);if(!r)return null;let t=Number(r[2]);return!Number.isFinite(t)||t<=0?null:{repo:r[1],number:t}}var JT=8e3,zT=30,XT=100,QT=400,ZT=3600*1e3,Bc=0;function Kc(){return Date.now()<Bc}function eN(e){let r=`${e.stdout}
-${e.stderr}`.toLowerCase();return r.includes("api rate limit exceeded")||r.includes("rate limit exceeded")||r.includes("secondary rate limit")}function iR(e){eN(e)&&(Bc=Math.max(Bc,Date.now()+ZT))}function Fc(e,r){if(Kc())return null;let t=e("gh",["api",...r]);if(!t.ok||!t.stdout.trim())return iR(t),null;try{return JSON.parse(t.stdout)}catch{return null}}function rN(e,r,t,n){if(Kc())return null;let o=e("gh",["pr","view",String(t),"--repo",r,"--json",n.join(",")]);if(!o.ok||!o.stdout.trim())return iR(o),null;try{return JSON.parse(o.stdout)}catch{return null}}function Hc(e){return Kc()?!1:process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()?!0:e("gh",["auth","token"]).ok}function sn(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function tN(e){return Array.isArray(e)?e.map(r=>sn(r)).filter(r=>r!==null).slice(0,zT).map(r=>({context:r.context??null,state:r.state??null,target_url:r.target_url??null,description:r.description??null})):[]}function nN(e,r,t){let n=Fc(e,[`repos/${r}/commits/${t}/status`]);return n?{state:n.state??null,statuses:tN(n.statuses)}:null}var aR={provider:"github",kind:"pr_snapshot",version:"2",isAvailable:Hc,collect(e,r){let t=sR(e);if(!t)return null;let n=rN(r,t.repo,t.number,["url","title","body","author","state","isDraft","mergedAt","mergeCommit","mergeable","headRefName","headRefOid","headRepositoryOwner","statusCheckRollup","files"]);if(!n)return null;let o=sn(n.author),s=sn(n.mergeCommit),i=sn(n.headRepositoryOwner),a=typeof n.body=="string"?n.body.slice(0,JT):null,l=Array.isArray(n.statusCheckRollup)?n.statusCheckRollup.map(u=>sn(u)).filter(u=>u!==null).slice(0,XT).map(u=>({name:u.name??u.context??null,status:u.status??u.state??null,conclusion:u.conclusion??null,workflowName:u.workflowName??null,detailsUrl:u.detailsUrl??null})):[],c=Array.isArray(n.files)?n.files.map(u=>sn(u)).map(u=>typeof u?.path=="string"?u.path.trim():"").filter(Boolean).slice(0,QT):[];return{pull:{html_url:n.url??null,title:n.title??null,body:a,user:{login:o?.login??null},state:typeof n.state=="string"?n.state.toLowerCase():null,draft:n.isDraft??null,merged:!!n.mergedAt,merged_at:n.mergedAt??null,merge_commit_sha:s?.oid??null,mergeable:null,mergeable_state:n.mergeable??null,head:{sha:n.headRefOid??null,ref:n.headRefName??null,repo:{owner:{login:i?.login??null}}}},checkRuns:l,combinedStatus:{state:null,statuses:[]},changedFiles:c}}},lR={provider:"github",kind:"commit_status",version:"1",isAvailable:Hc,collect(e,r){let t=Uc(e);return t?nN(r,t.repo,t.sha):null}},cR={provider:"github",kind:"branch_reachability",version:"1",isAvailable:Hc,collect(e,r){let t=Uc(e);if(!t)return null;let n=Fc(r,[`repos/${t.repo}`]),o=typeof n?.default_branch=="string"&&n.default_branch.trim()?n.default_branch.trim():null;if(!o)return null;let s=Fc(r,[`repos/${t.repo}/compare/${encodeURIComponent(o)}...${t.sha}`]);if(!s)return null;let i=typeof s.status=="string"?s.status:null;return{defaultBranch:o,compareStatus:i,reachable:i==="identical"||i==="behind"}}};var jc=[];function $c(e){jc.some(r=>r.provider===e.provider&&r.kind===e.kind)||jc.push(e)}function uR(e,r){return jc.find(t=>t.provider===e&&t.kind===r)??null}function dR(){$c(aR),$c(lR),$c(cR)}var oN=1,sN=25e3;function pR(e,r={}){dR();let t=r.run??oR,n=r.now??(()=>new Date),o=r.maxSubjects??oN,s=Date.now()+(r.deadlineMs??sN),i=new Set,a=e.filter(m=>{let f=Ci(m.provider,m.kind,m.subject);return i.has(f)?!1:(i.add(f),!0)}),l=a.length>0?Math.floor(n().getTime()/6e4)%a.length:0,u=a.map((m,f)=>a[(l+f)%a.length]).slice(0,o),d={attempted:0,collected:0,cached:0,items:[],skipped:[]},p=new Map;for(let m of u){let f=Ci(m.provider,m.kind,m.subject),b=n(),k=r.cache?.get(f,b)??null;if(k){d.cached+=1,d.collected+=1,d.items.push(k);continue}if(Date.now()>s){d.skipped.push({...m,reason:"budget_exhausted"});continue}let R=uR(m.provider,m.kind);if(!R){d.skipped.push({...m,reason:"no_recipe"});continue}let g=`${R.provider} ${R.kind}`,h=p.get(g);if(h===void 0&&(h=R.isAvailable(t),p.set(g,h)),!h){d.skipped.push({...m,reason:"provider_unavailable"});continue}if(r.cache?.reserve?.(m,f,n())===!1){d.skipped.push({...m,reason:"budget_exhausted"});continue}d.attempted+=1;let E=R.collect(m.subject,t);if(E==null){d.skipped.push({...m,reason:"collect_failed"});continue}d.collected+=1;let P={provider:m.provider,kind:m.kind,subject:m.subject,payload:E,observedAt:n().toISOString(),collectorVersion:R.version};d.items.push(P),r.cache?.set(f,P,n())}return d}B();O();import uN from"node:path";B();O();import mR from"node:path";var iN="provider-evidence-wanted.json",aN="provider-evidence-cache.json",lN=600*1e3;function fR(e){return mR.join(M(e),iN)}function cN(e){return mR.join(M(e),aN)}function gR(e){if(!Array.isArray(e))return[];let r=[];for(let t of e){if(!t||typeof t!="object"||Array.isArray(t))continue;let n=t,o=typeof n.provider=="string"?n.provider.trim():"",s=typeof n.kind=="string"?n.kind.trim():"",i=typeof n.subject=="string"?n.subject.trim():"";!o||!s||!i||r.push({provider:o,kind:s,subject:i})}return r}function hR(e){let r=I(fR(e),null);return gR(r?.wanted)}function kR(e,r){ue(fR(e),{savedAt:new Date().toISOString(),wanted:r})}function yR(e,r={}){let t=r.ttlMs??lN,n=cN(e),s={...I(n,null)?.items??{}},i=!1;return{get(l,c){let u=s[l];if(!u)return null;let d=Date.parse(u.observedAt);return!Number.isFinite(d)||c.getTime()-d>t?(delete s[l],i=!0,null):u},set(l,c){s[l]=c,i=!0},flush(){i&&(ue(n,{savedAt:new Date().toISOString(),items:s}),i=!1)}}}function RR(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.providerEvidenceWanted;return Array.isArray(r)?gR(r):null}var dN="provider-evidence-shared-cache.json",pN=6e4,mN=1,fN=1;function Vc(e,r){let t=process.env[e];if(!t)return r;let n=Number.parseInt(t,10);return Number.isFinite(n)&&n>=0?n:r}function gN(){return uN.join(le().harnessRoot,dN)}function hN(e){let r=e.toUpperCase().replace(/[^A-Z0-9]+/g,"_"),t=e==="github"?mN:fN;return Vc(`KYNVER_PROVIDER_EVIDENCE_${r}_PER_MINUTE`,Vc("KYNVER_PROVIDER_EVIDENCE_LIVE_COLLECTS_PER_MINUTE",t))}function vR(){return Vc("KYNVER_PROVIDER_EVIDENCE_SHARED_CACHE_TTL_MS",pN)}function kN(e){return Math.floor(e.getTime()/6e4)*6e4}function yN(e){return`${e.provider}:${e.kind}`}function bR(e,r={}){let t=yR(e,{ttlMs:r.ttlMs??vR()}),n=r.file??gN(),o=I(n,null),s={...o?.items??{}},i={...o?.budget??{}},a=r.ttlMs??vR(),l=!1;return{get(u,d){let p=t.get(u,d);if(p)return p;let m=s[u];if(!m)return null;let f=Date.parse(m.observedAt);return!Number.isFinite(f)||d.getTime()-f>a?(delete s[u],l=!0,null):(t.set(u,m,d),m)},set(u,d,p){t.set(u,d,p),s[u]=d,l=!0},reserve(u,d,p){let m=hN(u.provider);if(m===0)return!0;let f=yN(u),b=kN(p),k=i[f];return!k||k.windowStartMs!==b?(i[f]={windowStartMs:b,used:1},l=!0,!0):k.used>=m?!1:(k.used+=1,l=!0,!0)},flush(){t.flush(),l&&(ue(n,{savedAt:new Date().toISOString(),items:s,budget:i}),l=!1)}}}O();B();import SR from"node:path";var wR="mesh-cron-lease.json";function xR(e){let r=I(SR.join(M(e),wR),null);return Vg(e,r)??r}function _R(e,r){let t={...r,updatedAt:new Date().toISOString()};ue(SR.join(M(e),wR),t),jg(e,t)}function CR(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.response;if(!r||typeof r!="object"||Array.isArray(r))return null;let t=r.meshLiveness;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t.cronLease;if(!n||typeof n!="object"||Array.isArray(n))return null;let o=n;return{leaseToken:typeof o.leaseToken=="string"?o.leaseToken:null,holderBoxId:typeof o.holderBoxId=="string"?o.holderBoxId:null,authorized:o.authorized===!0,updatedAt:new Date().toISOString()}}function ER(e){let r=Rg(),t=Ir(e?.env??process.env),n=(e?.now??(()=>new Date))().getTime(),o={};if(t.flags.dispatchReceipts!=="off"){Object.assign(o,Tg());let s=Og({nowMs:n,hasLiveWorker:e?.hasLiveWorker});o["dispatchReceipts.strandedClaimCandidates"]=s.strandedClaimCandidates,t.flags.dispatchReceipts==="enforce"&&Object.assign(o,Sk())}return t.flags.planOutbox!=="off"&&Object.assign(o,_h()),t.flags.admission!=="off"&&(Object.assign(o,Wg()),t.flags.admission==="enforce"&&Object.assign(o,Fg())),(t.flags.keeper!=="off"||t.flags.meshLease!=="off"||t.flags.quota!=="off")&&Object.assign(o,zg()),{contractVersion:1,observedAt:new Date(n).toISOString(),state:r.state,schemaVersion:r.schemaVersion,recovered:r.recovered,unavailableClass:r.reason?r.reason.split(":")[0]??null:null,flags:t.flags,flagSources:t.sources,flagWarningCount:t.warnings.length,divergenceCounters:o}}K();import{createHash as PR}from"node:crypto";import{access as RN,mkdir as $8,readFile as AR,rename as j8,writeFile as V8}from"node:fs/promises";import{constants as vN}from"node:fs";import{homedir as Gc}from"node:os";import _e from"node:path";var bN=/^(?:@[a-z0-9][a-z0-9._-]*\/[a-z0-9][a-z0-9._-]*|[a-z0-9][a-z0-9._-]*)$/i,SN=/^[A-Za-z0-9._:-]{8,128}$/;function wN(){return process.env.KYNVER_MCP_UPDATE_INVENTORY_FILE?.trim()||_e.join(Gc(),".kynver","mcp-installations.json")}function xN(e){return e==="openclaw"?process.env.KYNVER_OPENCLAW_NPM_ROOT?.trim()||_e.join(Gc(),".openclaw","npm"):process.env.KYNVER_NPM_GLOBAL_ROOT?.trim()||process.env.NPM_CONFIG_PREFIX?.trim()||_e.join(Gc(),".npm-global")}function _N(e){let r=_e.resolve(e);if(_e.basename(r)!=="node_modules")return r;let t=_e.dirname(r);return _e.basename(t)==="lib"?_e.dirname(t):t}function CN(e,r){return[_e.join(e,"lib","node_modules",r,"package.json"),_e.join(e,"node_modules",r,"package.json")]}async function EN(e){try{return await RN(e,vN.R_OK),!0}catch{return!1}}async function PN(e=wN()){let r;try{r=JSON.parse(await AR(e,"utf8"))}catch{return[]}if(r.version!==1||!Array.isArray(r.installations)||r.installations.length>100)throw new Error("invalid MCP installation inventory");return r.installations.map(t=>{if(!t||!SN.test(t.inventoryKey)||!bN.test(t.packageName)||!["kynver","openclaw"].includes(t.prefix))throw new Error("invalid adopted MCP installation");if(t.packageName.includes("..")||t.packageName.includes("%"))throw new Error("invalid adopted MCP package identity");if(t.connectionId&&t.connectionId.length>128)throw new Error("invalid connection identity");if(t.binName&&!/^[A-Za-z0-9._-]{1,80}$/.test(t.binName))throw new Error("invalid MCP bin name");let n=t.envAllowlist??[];if(!Array.isArray(n)||n.length>32||n.some(o=>!/^[A-Z][A-Z0-9_]{1,80}$/.test(o)))throw new Error("invalid MCP environment allow-list");return{...t,envAllowlist:[...new Set(n)],lifecycle:t.lifecycle??"runtime_stdio"}})}function AN(e,r,t){if(typeof e.bin=="string")return _e.join(t,e.bin);if(!e.bin||typeof e.bin!="object"||Array.isArray(e.bin))return null;let n=e.bin,o=r.binName??(Object.keys(n).length===1?Object.keys(n)[0]:void 0),s=o?n[o]:null;return typeof s=="string"&&!_e.isAbsolute(s)&&!s.split(/[\\/]/).includes("..")?_e.join(t,s):null}function IN(e){return PR("sha256").update(JSON.stringify({inventoryKey:e.inventoryKey,connectionId:e.connectionId,packageName:e.packageName,managerKind:e.managerKind,sourceKind:e.sourceKind,installedVersion:e.installedVersion,nodeVersion:e.nodeVersion,policyChannel:e.policyChannel,executionConfigDigest:e.executionConfigDigest,capabilities:[...e.capabilities].sort()})).digest("hex")}async function ON(e){let r=[];for(let t of e){let n=_N(xN(t.prefix)),o=(await Promise.all(CN(n,t.packageName).map(async m=>({candidate:m,ok:await EN(m)})))).find(m=>m.ok)?.candidate;if(!o)continue;let s=JSON.parse(await AR(o,"utf8"));if(s.name!==t.packageName||typeof s.version!="string"||!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(s.version))continue;let i=_e.dirname(o),a=AN(s,t,i),l=t.packageName==="@kynver-app/runtime",c=t.lifecycle??"runtime_stdio",u=PR("sha256").update(JSON.stringify({prefix:n,binName:t.binName??null,envAllowlist:[...t.envAllowlist??[]].sort(),lifecycle:c})).digest("hex"),d=l?[]:c==="runtime_stdio"&&a?["update","restart","rollback","verify_mcp"]:["update","rollback"],p={inventoryKey:t.inventoryKey,connectionId:t.connectionId??null,packageName:t.packageName,managerKind:"npm_global",sourceKind:"configured_stdio",installedVersion:s.version,nodeVersion:process.versions.node,policyChannel:"latest",executionConfigDigest:u,capabilities:d};r.push({report:{...p,displayName:t.displayName?.trim()||t.packageName,inventoryFingerprint:IN(p),capabilityExplanation:l?"Runtime self-update requires a supervisor-owned durable handoff and is not enabled by this adapter.":c==="runtime_stdio"&&a?"The authorized runtime can install, start, and verify this configured stdio package.":"The package can be installed, but its external supervisor must restart and verify it."},local:{prefix:n,packageJsonPath:o,packageDir:i,binPath:a,envAllowlist:t.envAllowlist??[],lifecycle:c}})}return r}async function IR(){return ON(await PN())}import{createHash as TN,createHmac as NN,timingSafeEqual as MN}from"node:crypto";function Yc(e){let r=e.trim().split(".");return r.length!==3||r[0]!=="krc1"||!r[1]||!r[2]?null:{tokenId:r[1],tokenHash:TN("sha256").update(`krc1.${r[1]}.${r[2]}`,"utf8").digest("hex")}}function OR(e,r,t){let n=Yc(r);if(!n||e.algorithm!=="hmac-sha256-runner-v1"||e.keyId!==n.tokenId)return!1;let o=Date.parse(e.claims.expiresAt);if(e.claims.version!==1||e.claims.agentOsId!==t||!Number.isFinite(o)||o<=Date.now()||o>Date.now()+10*6e4||![null,"installing","restarting","verifying"].includes(e.claims.resumePhase))return!1;let s=NN("sha256",Buffer.from(n.tokenHash,"hex")).update(JSON.stringify(e.claims),"utf8").digest(),i=Buffer.from(e.signature,"base64url");return i.length===s.length&&MN(i,s)}Ni();import{createHash as DN}from"node:crypto";import{access as qc,mkdtemp as WN,readFile as WR,rm as LN}from"node:fs/promises";import{constants as Jc}from"node:fs";import{tmpdir as UN}from"node:os";import an from"node:path";import{spawn as BN}from"node:child_process";import{Client as FN}from"@modelcontextprotocol/sdk/client/index.js";import{StdioClientTransport as KN}from"@modelcontextprotocol/sdk/client/stdio.js";var zc="https://registry.npmjs.org",TR=512*1024,Xc=2*6e4,HN=2e4;function LR(){return"npm"}function NR(e,r){return Buffer.byteLength(e)>=TR?e:(e+r.toString("utf8")).slice(0,TR)}function $N(e){let r=process.env.KYNVER_MCP_UPDATE_NPM_CACHE?.trim(),t=r&&an.isAbsolute(r)?r:e,n={PATH:process.env.PATH,SystemRoot:process.env.SystemRoot,TEMP:process.env.TEMP,TMP:process.env.TMP,npm_config_registry:zc,npm_config_audit:"false",npm_config_fund:"false",npm_config_update_notifier:"false",npm_config_cache:t};return Object.fromEntries(Object.entries(n).filter(o=>typeof o[1]=="string"))}async function UR(e,r,t=Xc,n){return new Promise((o,s)=>{let i,a;try{[i,a]=ve(e,r)}catch(m){s(m);return}let l=BN(i,a,{shell:!1,windowsHide:!0,detached:ce(),env:$N(n),stdio:["ignore","pipe","pipe"]}),c="",u="",d=!1;l.stdout.on("data",m=>{c=NR(c,m)}),l.stderr.on("data",m=>{u=NR(u,m)});let p=setTimeout(()=>{d=!0,l.pid&&rr(l.pid,"SIGKILL")},t);l.once("error",m=>{clearTimeout(p),s(m)}),l.once("close",m=>{clearTimeout(p),d?s(new Error("process_timeout")):o({code:m,stdout:c,stderr:u})})})}function jN(e,r){let[t,n]=r.split("-",2);return!n||!["sha256","sha384","sha512"].includes(t)?!1:DN(t).update(e).digest("base64")===n}async function VN(e,r,t,n){let o=await UR(LR(),["pack",`${e}@${r}`,"--json","--pack-destination",n,`--registry=${zc}`,"--ignore-scripts"],Xc,an.join(n,"npm-cache"));if(o.code!==0)throw new Error("artifact_download_failed");let s;try{s=JSON.parse(o.stdout)}catch{throw new Error("artifact_receipt_invalid")}let i=s[0]?.filename;if(typeof i!="string"||an.basename(i)!==i)throw new Error("artifact_receipt_invalid");let a=an.join(n,i);if(!jN(await WR(a),t))throw new Error("artifact_integrity_mismatch");return a}async function GN(e,r,t){if((await UR(LR(),["install","--global","--prefix",e,r,`--registry=${zc}`,"--no-audit","--fund=false"],Xc,t)).code!==0)throw new Error("package_install_failed")}async function BR(e){let r=JSON.parse(await WR(e.local.packageJsonPath,"utf8"));if(r.name!==e.report.packageName||typeof r.version!="string")throw new Error("installed_identity_mismatch");return r.version}function YN(e){let r={};for(let t of["PATH","SystemRoot","TEMP","TMP",...e]){let n=process.env[t];n!==void 0&&(r[t]=n)}return r}async function MR(e){if(!e.local.binPath)throw new Error("mcp_binary_missing");await qc(e.local.binPath,Jc.X_OK).catch(async()=>qc(e.local.binPath,Jc.R_OK));let r=new KN({command:e.local.binPath,args:[],env:YN(e.local.envAllowlist),stderr:"pipe"}),t=new FN({name:"kynver-managed-update-verifier",version:"1.0.0"}),n;try{await Promise.race([t.connect(r),new Promise((s,i)=>{n=setTimeout(()=>i(new Error("mcp_handshake_timeout")),HN)})]);let o=await t.listTools();return{toolCount:Array.isArray(o.tools)?o.tools.length:0}}finally{n&&clearTimeout(n),await t.close().catch(()=>{})}}async function DR(e,r,t,n,o){let s=await WN(an.join(UN(),"kynver-mcp-update-"));try{let i=await VN(r,t,n,s);if(await o(),await GN(e.local.prefix,i,an.join(s,"npm-cache")),await BR(e)!==t)throw new Error("installed_version_mismatch")}finally{await LN(s,{recursive:!0,force:!0})}}async function FR(e,r,t,n={}){if(typeof process.getuid=="function"&&process.getuid()===0)throw new Error("root_execution_refused");if(e.report.inventoryKey!==r.inventoryKey||e.report.inventoryFingerprint!==r.inventoryFingerprint||e.report.packageName!==r.packageName)throw new Error("local_inventory_mismatch");if(r.packageName==="@kynver-app/runtime")throw new Error("runtime_self_update_requires_supervisor");await t("preflight"),await qc(e.local.prefix,Jc.W_OK).catch(()=>{throw new Error("npm_prefix_not_writable")});let o=await BR(e),s=r.resumePhase!==null&&o===r.targetVersion,i=s&&n.recoveryVerifiedTargetInstalled===!0;if(!i&&o!==r.installedVersion&&!s)throw new Error("installed_version_changed");try{if(i?await t("installing"):(await DR(e,r.packageName,r.targetVersion,r.targetIntegrity,async()=>{await t("installing"),await n.beforePackageMutation?.()}),await n.onTargetInstalled?.()),e.local.lifecycle!=="runtime_stdio")return{outcome:"manual_restart_required",observedVersion:r.targetVersion,handshakeVerified:!1,toolCount:null,failureCode:"external_supervisor_restart_required"};await t("restarting"),await t("verifying");let a=await MR(e);return{outcome:"succeeded",observedVersion:r.targetVersion,handshakeVerified:!0,toolCount:a.toolCount}}catch(a){let l=a instanceof Error?a.message:"update_failed";if(l==="progress_rejected")throw a;if(!r.rollbackIntegrity)return{outcome:"failed",observedVersion:null,handshakeVerified:!1,toolCount:null,failureCode:l};await n.beforePackageMutation?.();try{if(await DR(e,r.packageName,r.installedVersion,r.rollbackIntegrity,async()=>{await n.beforePackageMutation?.()}),e.local.lifecycle==="runtime_stdio"){let c=await MR(e);return{outcome:"rollback_succeeded",observedVersion:r.installedVersion,handshakeVerified:!0,toolCount:c.toolCount,failureCode:l}}return{outcome:"manual_restart_required",observedVersion:r.installedVersion,handshakeVerified:!1,toolCount:null,failureCode:l}}catch(c){if(c instanceof Error&&c.message==="progress_rejected")throw c;return{outcome:"rollback_failed",observedVersion:null,handshakeVerified:!1,toolCount:null,failureCode:l}}}}import{randomBytes as eu}from"node:crypto";import{mkdir as ru,readFile as tu,rename as rM,rm as Ei,stat as tM,writeFile as VR}from"node:fs/promises";import bt from"node:path";import{createHmac as qN,timingSafeEqual as JN}from"node:crypto";import{mkdir as zN,readFile as XN,rename as QN,writeFile as ZN}from"node:fs/promises";import{homedir as eM}from"node:os";import Qc from"node:path";function Zc(){return process.env.KYNVER_MCP_UPDATE_STATE_ROOT?.trim()||Qc.join(eM(),".kynver","state","mcp-updates")}function KR(e){if(!/^[A-Za-z0-9_-]{8,128}$/.test(e))throw new Error("invalid update operation identity");return Qc.join(Zc(),`${e}.json`)}function HR(e,r){let t=Yc(r);return t?qN("sha256",Buffer.from(t.tokenHash,"hex")).update(JSON.stringify(e),"utf8").digest("base64url"):null}async function $R(e,r){try{let t=JSON.parse(await XN(KR(e),"utf8"));if(t.version!==2||t.operationId!==e||typeof t.integrityMac!="string")return null;let{integrityMac:n,...o}=t,s=HR(o,r);if(!s)return null;let i=Buffer.from(n,"utf8"),a=Buffer.from(s,"utf8");return i.length!==a.length||!JN(i,a)?null:t}catch{return null}}async function jR(e,r){let t=HR(e,r);if(!t)throw new Error("invalid_runner_credential_for_receipt");let n=KR(e.operationId);await zN(Qc.dirname(n),{recursive:!0,mode:448});let o=`${n}.${process.pid}.tmp`;await ZN(o,`${JSON.stringify({...e,integrityMac:t},null,2)}
-`,{mode:384}),await QN(o,n)}var nM="host-mutation.lock";function GR(){return bt.join(Zc(),nM)}async function YR(){try{let e=JSON.parse(await tu(bt.join(GR(),"owner.json"),"utf8"));return!Number.isSafeInteger(e.pid)||typeof e.acquiredAt!="string"?null:{holder:e.holder==="desktop_update"?"desktop_update":"mcp_update",pid:e.pid,acquiredAt:e.acquiredAt,alive:qR(e.pid)}}catch{return null}}function qR(e){if(!Number.isSafeInteger(e)||e<=0)return!0;try{return process.kill(e,0),!0}catch(r){return r.code==="EPERM"}}async function oM(e){try{return await tM(e),!0}catch(r){if(r.code==="ENOENT")return!1;throw r}}async function JR(){return sM("mcp_update")}async function sM(e){let r=GR(),t=`${r}.reclaiming`;await ru(bt.dirname(r),{recursive:!0,mode:448});let n=!1;try{if(await oM(t))return null;for(let o=0;o<2;o+=1)try{await ru(r,{mode:448});let s={pid:process.pid,nonce:eu(18).toString("base64url"),acquiredAt:new Date().toISOString(),holder:e};return await VR(bt.join(r,"owner.json"),JSON.stringify(s),{mode:384}),n&&(await Ei(t,{recursive:!0,force:!0}),n=!1),{release:async()=>{try{let i=JSON.parse(await tu(bt.join(r,"owner.json"),"utf8"));i.pid===s.pid&&i.nonce===s.nonce&&await Ei(r,{recursive:!0,force:!0})}catch{}}}}catch(s){if(s.code!=="EEXIST")throw s;if(!n)try{await ru(t,{mode:448}),n=!0,await VR(bt.join(t,"owner.json"),JSON.stringify({pid:process.pid,nonce:eu(18).toString("base64url"),acquiredAt:new Date().toISOString()}),{mode:384})}catch(l){if(l.code==="EEXIST")return null;throw l}let i=null;try{i=JSON.parse(await tu(bt.join(r,"owner.json"),"utf8"))}catch{return null}if(qR(i.pid))return null;let a=`${r}.stale-${process.pid}-${eu(8).toString("hex")}`;await rM(r,a),await Ei(a,{recursive:!0,force:!0})}return null}finally{n&&await Ei(t,{recursive:!0,force:!0})}}function Pi(e,r,t){return`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/mcp-updates/${t}`}function iM(e){if(!e||typeof e!="object")return null;let r=e.claim;if(!r||typeof r!="object"||r.waitingForIdle!==!1)return null;let t=r.command;return t&&typeof t=="object"?t:null}function zR(e,r){let t=r.claims;return e.inventoryKey===t.inventoryKey&&e.packageName===t.packageName&&e.installedVersion===t.installedVersion&&e.targetVersion===t.targetVersion&&e.targetIntegrity===t.targetIntegrity&&e.rollbackIntegrity===t.rollbackIntegrity&&e.item.report.inventoryKey===t.inventoryKey&&e.item.report.packageName===t.packageName}function aM(e,r){return{inventoryKey:r.claims.inventoryKey,packageName:r.claims.packageName,installedVersion:r.claims.installedVersion,targetVersion:r.claims.targetVersion,targetIntegrity:r.claims.targetIntegrity,rollbackIntegrity:r.claims.rollbackIntegrity,verifiedTargetInstalled:!1,item:e}}async function XR(e){let r=X(e.baseUrl),t=await IR();if(t.length===0)return{ok:!0,stage:"not_configured"};let n=await st(Pi(r,e.agentOsId,"inventory"),e.secret,{items:t.map(s=>s.report)});if(!n.ok)return{ok:!1,stage:"inventory",status:n.status};let o=await JR();if(!o){let s=await YR();return{ok:!0,stage:"host_mutation_busy",...s?{heldBy:s.holder}:{}}}try{let s=await st(Pi(r,e.agentOsId,"claim"),e.secret,{activeOwnedSessions:e.activeOwnedSessions});if(!s.ok)return{ok:!1,stage:"claim",status:s.status};let i=iM(s.response);if(!i)return{ok:!0,stage:"idle"};if(!OR(i,e.secret,e.agentOsId))return{ok:!1,stage:"command_auth"};let a=await $R(i.claims.operationId,e.secret);if(a?.terminal&&a.attempt===i.claims.attempt&&a.nonce===i.claims.nonce)return{ok:!0,stage:"already_completed",outcome:a.outcome};let l,c;if(i.claims.resumePhase!==null){if(!a||!zR(a.recovery,i))return{ok:!1,stage:"recovery_receipt_invalid"};c=a.recovery,l={...c.item,report:{...c.item.report,inventoryFingerprint:i.claims.inventoryFingerprint}}}else{let g=t.find(h=>h.report.inventoryKey===i.claims.inventoryKey);if(!g||g.report.inventoryFingerprint!==i.claims.inventoryFingerprint)return{ok:!1,stage:"inventory_changed"};l=g,c=a&&zR(a.recovery,i)?a.recovery:aM(g,i)}let u=a?.acceptedAt??new Date().toISOString(),d=async(g,h,E)=>{await jR({version:2,operationId:i.claims.operationId,attempt:i.claims.attempt,nonce:i.claims.nonce,acceptedAt:u,phase:g,terminal:h,...E?{outcome:E}:{},recovery:c},e.secret)};await d(a?.attempt===i.claims.attempt?a.phase:"claimed",!1);let p="claimed",m=async g=>{if(!(await st(Pi(r,e.agentOsId,`operations/${encodeURIComponent(i.claims.operationId)}/events`),e.secret,{attempt:i.claims.attempt,fenceToken:i.claims.fenceToken,phase:g})).ok)throw new Error("progress_rejected");p=g,await d(g,!1)},f=g=>m(g),b=()=>m(p),k;try{k=await FR(l,i.claims,f,{recoveryVerifiedTargetInstalled:c.verifiedTargetInstalled,beforePackageMutation:b,onTargetInstalled:async()=>{c={...c,verifiedTargetInstalled:!0},await d("target_installed",!1)}})}catch(g){k={outcome:"failed",observedVersion:null,handshakeVerified:!1,toolCount:null,failureCode:g instanceof Error?g.message:"update_failed"}}let R=await st(Pi(r,e.agentOsId,`operations/${encodeURIComponent(i.claims.operationId)}/complete`),e.secret,{attempt:i.claims.attempt,fenceToken:i.claims.fenceToken,...k});return R.ok?(await d(k.outcome,!0,k.outcome),{ok:k.outcome==="succeeded",stage:"complete",outcome:k.outcome}):{ok:!1,stage:"complete",status:R.status,outcome:k.outcome}}finally{await o.release()}}function lM(){let e=process.env.KYNVER_PIPELINE_SWEEP_ENABLED;return e?e==="1"||e.toLowerCase()==="true":!1}async function cM(e,r){let t=ee(e),n=[],o=Math.max(0,Number.parseInt(process.env.KYNVER_PIPELINE_COMPLETION_REPLAY_MAX_DEEP_CHECKS_PER_TICK??"0",10)||0),s=0;for(let i of Object.keys(t.workers||{})){let a=I(QR.join(M(t.id),"workers",x(i),"worker.json"),void 0);if(!a?.taskId||a.localOnly||Br(a))continue;if(zn(a)){n.push({worker:i,ok:!0,taskId:a.taskId??null,skipped:!0});continue}if(s>=o)break;s++;let l=Y(a);if(!Se(l))continue;let c=Ot({alive:l.alive,finalResult:l.finalResult,changedFiles:l.changedFiles,gitAncestry:l.gitAncestry});if(!a.dispatched&&!l.finalResult&&!c?.salvageable)continue;let u=await Yl({run:e,name:i,agentOsId:String(r.agentOsId||a.agentOsId||""),...r});n.push({worker:i,ok:u.ok,taskId:a.taskId??null})}return n}async function uM(e,r,t,n,o){let s=X(n.baseUrl?String(n.baseUrl):void 0),i=await re(n.secret?String(n.secret):void 0,e,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(e)}/operator/tick`,l=await nR(),c=fs(r),u=null;try{let P=hR(r);if(P.length>0){let S=bR(r);u=pR(P,{cache:S}),S.flush?.()}else u=null}catch{u=null}try{if(Tr()!=="off"){let P=Dt();Dg({liveWorkers:P}),Bg({liveWorkers:P})}else Ng()}catch{}let d=({runId:P,workerName:S})=>{try{let{runsDir:w}=le(),V=QR.join(br(w,x(P)),"workers",x(S),"worker.json"),$=I(V,null);return $?Br($):!1}catch{return!1}};await xk({agentOsId:e,baseUrl:s,secret:i,hasLiveWorker:d});let p=null;try{p=ER({hasLiveWorker:d})}catch{p=null}let m=null;try{m=_u({control:Ct(e),supervisor:Au(),inFlightWorkers:Dt().length})}catch{m=null}let f=xR(r),b=fu(),k=await J(a,i,{agentOsId:e,runId:r,ingestHarness:!0,harnessBoardSnapshot:Jl(r),resourceGate:t,boxResourceSnapshot:Mk(t,{harnessRunId:r,boxKind:hr(U())}),packageVersions:l,...o?{harnessCleanup:o}:{},runnerPresence:We({runId:r}),activeHarnessWorkers:c,...f?.leaseToken?{meshCronLeaseToken:f.leaseToken}:{},...p?{localRunStore:p}:{},...m?{runtimeControlAck:m}:{},...b?{daemonEventLoop:b}:{},...u&&u.items.length>0?{providerEvidence:u.items}:{}},{agentOsId:e,baseUrl:s}),R=RR(k.response);if(R)try{kR(r,R)}catch{}let g=CR(k);if(g)try{_R(r,g)}catch{}let h=bg(k);h&&Sg(e,h);let E=Su(k);return E&&xu(e,E),{ok:k.ok,httpStatus:k.status,response:k.response,...u?{providerEvidence:{attempted:u.attempted,collected:u.collected,skipped:u.skipped.length}}:{}}}async function ZR(e){let r=String(fr(String(e.run||""),"--run")),t=String(fr(String(e.agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false";Jl(r);let o=await ks(t,e),s=hs(o),i=Pn({runId:r,configuredMaxWorkersOverride:s}),a=eR()?Zy(r):void 0,l=await uM(t,r,i,e,a),c;if(n)try{let _=X(e.baseUrl?String(e.baseUrl):void 0),Z=await re(e.secret?String(e.secret):void 0,t,{baseUrl:_});c=await XR({agentOsId:t,secret:Z,baseUrl:_,activeOwnedSessions:Dt().length})}catch(_){c={ok:!1,stage:"cycle",error:_ instanceof Error?_.message:"update cycle failed"}}let u=sg(r,l),d=await uf(r,e),p=await cM(r,e);p.some(_=>_.ok&&!_.skipped)&&Ik();let m=Pn({runId:r,configuredMaxWorkersOverride:s}),f=vk(),b=await Lk(r,e),k=sk(m,l),R=k.maxStarts,g=Ct(t),h=Cu(g);h&&(R=0);let E=lM()?await Dk({run:r,agentOsId:t,pipeline:!0,...e}):{ok:!0,skipped:!0,reason:"pipeline_sweep_disabled"},P=null,S=0,w=ok(l),V=R;if(n&&V>0&&w.length>0){let _=Math.min(V,w.length),Z=await lc({...e,run:r,agentOsId:t,targetTaskIds:w.join(",")},_),he=Zt(Z);S+=he,V=Math.max(0,V-he),P={exactTargetTaskIds:w,exact:Z,startedCount:S}}if(n&&V>0){let _=await lc({...e,run:r,agentOsId:t},V),Z=Zt(_);S+=Z,P=P&&typeof P=="object"?{...P,broad:_,startedCount:S}:_}else!n||R<=0?P||(P={ok:!0,skipped:!0,reason:h??(n?m.reason??"no slots or queued work":"execute disabled"),maxStarts:0,dispatchAdvice:k,...w.length?{exactTargetTaskIds:w,exactOnly:!0}:{}}):P&&typeof P=="object"&&(P={...P,broadSkipped:!0,startedCount:S});let $=!k.underutilized&&R===0&&p.length===0&&S===0;return{runId:r,agentOsId:t,execute:n,resourceGate:i,dispatchResourceGate:m,leaseRenewal:d,completedWorkers:p,staleReconcile:f,harnessCleanup:a,planProgressSync:b,completionAckSync:u,operatorTick:l,mcpUpdates:c,sweep:E,dispatchAdvice:k,dispatch:P,idle:$,runtimeControl:g?{desiredState:g.desiredState,policyVersion:g.policyVersion}:null}}pn();Wt();pn();function ev(e){return Ao(Ct(e))!=="stopped"?null:Dt().length}function rv(e){if(!e||typeof e!="object")return!1;let r=e;return r.type==="tick"&&typeof r.id=="number"&&typeof r.agentOsId=="string"&&!!r.args&&typeof r.args=="object"}function dM(e){e&&(Tk({admission:e.admission,ownerKind:e.ownerKind}),Pu(e.ownerKind))}async function pM(e,r={}){try{e.instructionBundle&&hu(e.instructionBundle.bundle,e.instructionBundle.source),mu(e.eventLoopReport);let t=await(r.runTick??ZR)(e.args),n=(r.countInFlightWorkers??ev)(e.agentOsId);return{type:"result",id:e.id,ok:!0,tick:JSON.parse(JSON.stringify(t)),inFlightWorkers:n}}catch(t){return{type:"result",id:e.id,ok:!1,error:t instanceof Error?t.message:String(t)}}}function tv(e,r,t={}){dM(r);let n=Promise.resolve();e.on("message",o=>{rv(o)&&(n=n.then(async()=>{e.postMessage(await pM(o,t))}))})}nv?tv(nv,mM):(console.error(JSON.stringify({event:"daemon_tick_thread_misuse",error:"must run as a worker thread"})),process.exitCode=1);
+`),n=!0)}let o={capturedAt:new Date(e.now??Date.now()).toISOString(),skipReason:e.skipReason,runId:e.indexed.runId,workerName:e.indexed.workerName,worktreePath:e.indexed.worktreePath,taskId:e.indexed.worker.taskId,agentOsId:e.indexed.worker.agentOsId,branch:e.indexed.worker.branch,completionBlocker:e.indexed.worker.completionBlocker,finalResult:e.status.finalResult,changedFiles:e.status.changedFiles,gitAncestry:e.status.gitAncestry,prUrl:e.status.prUrl??null,...n?{patchPath:t}:{}};return ky(wi.join(r,"evidence.json"),`${JSON.stringify(o,null,2)}
+`),o}var DT=new Set(["completion_blocked","dirty_worktree","pr_or_unmerged_commits","landing_blocked"]);function WT(e){e.writeSalvageEvidence&&DT.has(e.skipReason)&&(Wr(e.indexed,e.now)||vy({harnessRoot:e.harnessRoot,runId:e.indexed.runId,workerName:e.indexed.workerName})||by({harnessRoot:e.harnessRoot,indexed:e.indexed,skipReason:e.skipReason,status:e.status,now:e.now}))}function LT(e){let{indexed:r,worktreesAgeMs:t,terminalWorktreesAgeMs:n}=e;return r&&(kt.has(r.run.status)||e.liveness&&Uc(r,e.liveness)||e.liveness&&Se(Lc(r,e.liveness))&&!Wr(r))?n:t}function UT(e){return!e.indexed||e.includeOrphans&&e.worktreesAgeMs<=0?0:LT(e)}function BT(e,r){if(e.harnessRoot?.trim())return xi.resolve(e.harnessRoot);let t=r.worker.workerDir;if(!t)return null;let n=`${xi.sep}runs${xi.sep}`,o=t.indexOf(n);return o<0?null:t.slice(0,o+n.length-1)}function Sy(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,ageMs:o,orphanSafety:s,worktreeRemovalGuard:i}=e,a=e.now??Date.now();if(!r)return t?s??null:"orphan_without_flag";let l=UT(e);if(n<=0&&!t&&l<=0)return"worktrees_disabled";if(l>0&&o<l)return"below_age_threshold";if(Wr(r,a))return"active_worker";let c=Lc(r,e.liveness),u=BT(e,r),d=f=>{if(u)try{WT({indexed:r,harnessRoot:u,skipReason:f,status:c,now:a,writeSalvageEvidence:e.writeSalvageEvidence===!0})}catch{}return f};if(hy(r,c)){let f=d("completion_blocked");if(f)return f}if(Wc(r,e.liveness?.gitStatusCache)){let f=d("dirty_worktree");if(f)return f}let p=e.liveness?.gitRevCache?.countAheadOfMain(e.worktreePath);if(p!=null&&p>0){let f=d("pr_or_unmerged_commits");if(f)return f}if(gy(r,e.liveness,a)||!Se(c))return"run_still_active";if(wo(c)){let f=d("pr_or_unmerged_commits");if(f)return f}if(Fe(c.changedFiles).length>0){let f=d("dirty_worktree");if(f)return f}if(Wt({finalResult:c.finalResult,changedFiles:c.changedFiles,gitAncestry:c.gitAncestry,prUrl:bt(c.finalResult)}).blocked){let f=d("landing_blocked");if(f)return f}if(i&&e.worktreePath){let f=i({worktreePath:e.worktreePath,indexed:!!r,runId:r?.runId,worker:r?.workerName});if(f)return f.detail?{reason:f.reason,detail:f.detail}:f.reason}return null}function Bc(e){let{indexed:r,nodeModulesAgeMs:t,ageMs:n,worktreePath:o,activeWorktreePaths:s,workerFilesystemLive:i,diskPressure:a}=e;return!a&&n<t?"below_age_threshold":i||s.has(xi.resolve(o))||r&&Wr(r)?"active_worker":r&&Wc(r,e.gitStatusCache)?"dirty_worktree":null}function wy(e){return Bc(e)}var xy=new Set(["active_worker","run_still_active","completion_blocked","landing_blocked"]);function _y(e,r){let t=[],n=new Set,o=(s,i,a)=>{let l=`${s}\0${i}`;n.has(l)||t.length>=24||(n.add(l),t.push({path:s,reason:i,...a?{detail:a}:{}}))};for(let s of r)xy.has(s.reason)&&o(s.path,s.reason,s.detail);for(let s of e)!s.skipped||!s.skipReason||xy.has(s.skipReason)&&o(s.path,s.skipReason);return t}import{existsSync as Ay,readdirSync as Iy,statSync as HT}from"node:fs";import Oy from"node:path";U();Xe();import Ey from"node:path";O();function KT(e,r){return an(e,r)}function Cy(e,r=Date.now()){let t=new Set,n=new Set;for(let o of e){for(let s of bs(o)){let i=!1;for(let a of Object.keys(s.workers||{})){let l=A(Ey.join(Un(o,s.id),"workers",x(a),"worker.json"),void 0);if(!l?.worktreePath)continue;let c=Ey.resolve(l.worktreePath);KT(l,r)&&(i=!0,t.add(c))}i&&n.add(`${o}\0${s.id}`)}for(let s of jk(o))n.add(s)}return{activeWorktreePaths:t,liveRunKeys:n}}function Py(e,r,t,n){return t?n.has(`${r}\0${t}`):!1}O();function $T(e,r){try{let t=HT(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function jT(e,r){let t=Oy.join(e,"runs",r,"run.json");return Ay(t)?A(t,null):null}function Ty(e){try{return Iy(e).length===0}catch{return!1}}function Ny(e){let{harnessRoot:r,runId:t,runPath:n,ageMs:o,runDirectoriesAgeMs:s,activeGuards:i}=e;if(Py(n,r,t,i.liveRunKeys)||!Ty(n))return"run_still_active";let a=jT(r,t);return a&&!kt.has(a.status)&&!yt(a)?"run_still_active":s>0&&o<s?"below_age_threshold":null}function My(e){if(!Ay(e.worktreesDir))return[];let r=[],t;try{t=Iy(e.worktreesDir,{withFileTypes:!0})}catch{return[]}for(let n of t){if(!n.isDirectory())continue;let o=n.name;if(e.runIdFilter&&o!==e.runIdFilter)continue;let s=Oy.join(e.worktreesDir,o);Ty(s)&&r.push({kind:"remove_run_directory",path:s,bytes:null,harnessRoot:e.harnessRoot,runId:o,ageMs:$T(s,e.now)})}return r}de();import{existsSync as Kc,rmSync as Vy}from"node:fs";import{execFileSync as VT}from"node:child_process";import{existsSync as Dy,readdirSync as GT,statSync as YT}from"node:fs";import qT from"node:path";var JT=2500;function zT(e,r=JT){if(!Dy(e))return 0;try{let n=VT("du",["-sb",e],{encoding:"utf8",timeout:r,stdio:["ignore","pipe","ignore"]}).trim().split(/\s+/)[0],o=Number(n);return Number.isFinite(o)&&o>=0?o:null}catch{return null}}function Lr(e,r=5e4){if(!Dy(e))return 0;let t=zT(e);if(t!==null)return t;let n=0,o=0,s=[e];for(;s.length>0;){let i=s.pop(),a;try{a=GT(i)}catch{continue}for(let l of a){if(o++>r)return null;let c=qT.join(i,l),u;try{u=YT(c)}catch{continue}u.isDirectory()?s.push(c):n+=u.size}}return n}import{existsSync as eN,rmSync as rN}from"node:fs";Xe();import{lstatSync as XT,readdirSync as QT}from"node:fs";function Wy(e){try{let r=XT(e),t=typeof process.getuid=="function"?process.getuid():null,n=typeof process.getgid=="function"?process.getgid():null,o=t!==null&&(r.uid!==t||n!==null&&r.gid!==n);return{uid:r.uid,gid:r.gid,foreign:o}}catch{return null}}function Ly(e,r=32){let t=Wy(e);if(!t)return!1;if(t.foreign)return!0;try{let n=QT(e),o=0;for(let s of n){if(o>=r)break;let i=`${e.replace(/\/$/,"")}/${s}`,a=Wy(i);if(o+=1,a?.foreign)return!0}}catch{}return!1}import{spawnSync as ZT}from"node:child_process";import Fy from"node:path";import Ke from"node:path";function Uy(e,r,t,n){let o=Ke.resolve(e),s=`${Ke.sep}${n}`,i=o.endsWith(s)?o:null;if(!i)return"path_outside_harness";let a=Ke.relative(t,i);if(a.startsWith("..")||Ke.isAbsolute(a))return"path_outside_harness";let l=a.split(Ke.sep);return l.length<3||l[l.length-1]!==n||!o.startsWith(Ke.resolve(r))?"path_outside_harness":null}function _i(e,r,t){return Uy(e,r,t,"node_modules")}function Ei(e,r,t){return Uy(e,r,t,".next")}function Ci(e,r,t){let n=Ke.resolve(e),o=Ke.relative(t,n);return o.startsWith("..")||Ke.isAbsolute(o)||o.split(Ke.sep).length<3||!n.startsWith(Ke.resolve(r))?"path_outside_harness":null}function By(e,r,t){let n=Ke.resolve(e);return _i(n,r,t)===null||Ei(n,r,t)===null||Ci(n,r,t)===null}function Hy(){let e=(process.env.KYNVER_CLEANUP_PRIVILEGED??"auto").trim().toLowerCase();return e==="0"||e==="false"||e==="off"||e==="no"?"off":e==="1"||e==="true"||e==="force"||e==="yes"?"force":"auto"}function Ky(e){let r=ZT("sudo",["-n",...e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});return{ok:r.status===0,stderr:`${r.stderr??""}${r.stdout??""}`.trim()}}function $y(e,r,t){if(!By(e,r,t))return{ok:!1,error:"path is not an allowed harness generated cache"};let n=typeof process.getuid=="function"?process.getuid():null,o=typeof process.getgid=="function"?process.getgid():null;if(n===null||o===null)return{ok:!1,error:"privileged reclaim requires POSIX uid/gid"};let s=Ky(["chown","-R",`${n}:${o}`,Fy.resolve(e)]);if(s.ok)return{ok:!0,method:"chown_then_rm"};let i=Ky(["rm","-rf",Fy.resolve(e)]);return i.ok?{ok:!0,method:"sudo_rm"}:{ok:!1,error:s.stderr||i.stderr||"sudo -n failed (password required or not permitted)"}}var Fc="Root-owned harness caches require operator reclaim: configure passwordless sudo for chown/rm under ~/.kynver/harness/worktrees, or remove them as the harness owner with sudo available. More help: https://www.kynver.com/help.";function tN(e){let r=e?.code;return r==="EACCES"||r==="EPERM"}function jy(e,r,t={}){if(!eN(e.path))return{executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.harnessRoot,o=n?$t(n):null,i=e.bytes??Lr(e.path)??void 0,a=t.removePath??rN,l=t.hasForeignOwnedEntry??Ly;try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i}}catch(c){if(!tN(c)||!n||!o)return{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let u=l(e.path),d=Hy();if(!(d==="force"||d==="auto"&&u))return u?{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; ${Fc}`}:{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let m=$y(e.path,n,o);if(m.ok&&m.method==="sudo_rm")return{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0};if(m.ok)try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0}}catch(f){return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${f.message}; privileged chown succeeded but rm still failed`}}return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; privileged reclaim failed: ${m.error}; ${Fc}`}}}function Hc(e){let r=e.harnessRoot;return!r||!Kk(e.path,r)?null:{...e,executed:!1,skipped:!0,skipReason:"run_metadata_protected"}}function $c(e,r){let t=Hc(e);if(t)return t;let n=jy(e,r);return{...e,bytes:n.bytes??e.bytes,executed:n.executed,skipped:n.skipped,skipReason:n.skipReason,error:n.error}}function Gy(e,r){return $c(e,r)}function Yy(e,r){return $c(e,r)}function qy(e,r){return $c(e,r)}function Jy(e,r){let t=Hc(e);if(t)return t;if(!Kc(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};try{let n=e.bytes??Lr(e.path);return Vy(e.path,{recursive:!0,force:!0}),{...e,bytes:n,executed:!0,skipped:!1}}catch(n){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:n.message}}}function zy(e,r){let t=Hc(e);if(t)return t;if(!Kc(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.repo;try{let o=e.bytes??Lr(e.path);return n&&Z(n,["worktree","remove","--force",e.path],{allowFailure:!0}),Kc(e.path)&&Vy(e.path,{recursive:!0,force:!0}),{...e,bytes:o,executed:!0,skipped:!1}}catch(o){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:o.message}}}import{existsSync as Pi,readdirSync as Ai,statSync as nN}from"node:fs";import ur from"node:path";function jc(e,r){try{let t=nN(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function Qy(e,r){let t=ur.relative(r,e);return t===""||!t.startsWith("..")&&!ur.isAbsolute(t)}function Xy(e,r,t,n){let o=[];for(let s of Dc){if(s===".next")continue;let i=ur.join(e,s);if(!Pi(i))continue;let a=ur.resolve(i);t.has(a)||Qy(a,r.harnessRoot)&&(t.add(a),o.push({kind:"remove_build_cache",path:a,bytes:null,runId:n.runId,worker:n.worker,repo:n.repo,ageMs:jc(a,r.now)}))}return o}function Zy(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||r.push(...Xy(n.worktreePath,e,t,{runId:n.runId,worker:n.workerName,repo:n.run.repo}));if(!e.includeOrphans||!Pi(e.worktreesDir))return r;for(let n of Ai(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory())continue;let o=ur.join(e.worktreesDir,n.name);for(let s of Ai(o,{withFileTypes:!0})){if(!s.isDirectory())continue;let i=ur.join(o,s.name);r.push(...Xy(i,e,t,{runId:n.name,worker:s.name}))}}return r}function eR(e){let r=e.worktreesAgeMs>0||e.includeOrphans,t=e.includeOrphans;if(!r&&!t)return[];let n=[],o=new Set;if(r)for(let i of e.index.values()){if(e.runIdFilter&&i.runId!==e.runIdFilter)continue;let a=i.worktreePath;Pi(a)&&(o.has(a)||(o.add(a),n.push({kind:"remove_worktree",path:a,bytes:null,runId:i.runId,worker:i.workerName,repo:i.run.repo,ageMs:jc(a,e.now)})))}if(!t||!Pi(e.worktreesDir))return n;let s=new Set;for(let i of e.index.values())s.add(ur.resolve(i.worktreePath));for(let i of Ai(e.worktreesDir,{withFileTypes:!0})){if(!i.isDirectory()||e.runIdFilter&&i.name!==e.runIdFilter)continue;let a=ur.join(e.worktreesDir,i.name),l;try{l=Ai(a,{withFileTypes:!0})}catch{continue}for(let c of l){if(!c.isDirectory())continue;let u=ur.resolve(ur.join(a,c.name));o.has(u)||s.has(u)||Qy(u,e.harnessRoot)&&(o.add(u),n.push({kind:"remove_worktree",path:u,bytes:null,runId:i.name,worker:c.name,ageMs:jc(u,e.now)}))}}return n}import{existsSync as nR,readdirSync as rR,statSync as oN}from"node:fs";import ln from"node:path";var sN=[{dirName:"node_modules",kind:"remove_node_modules"},{dirName:".next",kind:"remove_next_cache"}];function iN(e,r){try{let t=oN(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function aN(e,r){let t=ln.relative(r,e);return t===""||!t.startsWith("..")&&!ln.isAbsolute(t)}function lN(e,r,t,n,o,s){if(!nR(n))return;let i=ln.resolve(n);r.has(i)||aN(i,t.harnessRoot)&&(r.add(i),e.push({kind:o,path:i,bytes:null,harnessRoot:t.harnessRoot,runId:s.runId,worker:s.worker,repo:s.repo,ageMs:iN(i,t.now)}))}function tR(e,r,t,n,o){for(let s of sN)lN(e,r,t,ln.join(n,s.dirName),s.kind,o)}function oR(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||tR(r,t,e,n.worktreePath,{runId:n.runId,worker:n.workerName,repo:n.run.repo});if(!e.includeOrphans||!nR(e.worktreesDir))return r;for(let n of rR(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory()||e.runIdFilter&&n.name!==e.runIdFilter)continue;let o=ln.join(e.worktreesDir,n.name),s;try{s=rR(o,{withFileTypes:!0})}catch{continue}for(let i of s){if(!i.isDirectory())continue;let a=ln.join(o,i.name);tR(r,t,e,a,{runId:n.name,worker:i.name})}}return r}de();import{existsSync as sR,statSync as cN}from"node:fs";import dr from"node:path";function uN(e,r){try{let t=cN(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function dN(e){let r=[],t=null;for(let n of e.split(`
+`)){if(!n.trim())continue;let[o,...s]=n.split(" "),i=s.join(" ");if(o==="worktree"){t&&r.push(t),t={path:i};continue}t&&(o==="branch"&&(t.branch=i),o==="HEAD"&&(t.head=i),o==="bare"&&(t.bare=!0))}return t&&r.push(t),r}function pN(e,r){let t=dr.relative(dr.resolve(r),dr.resolve(e));return t!==""&&!t.startsWith("..")&&!dr.isAbsolute(t)}var mN=200;function iR(e){if(!e.includeOrphans||!sR(e.worktreesDir))return[];let r=new Set;for(let s of e.index.values())s.run.repo&&r.add(dr.resolve(s.run.repo));let t=new Set;for(let s of e.index.values())t.add(dr.resolve(s.worktreePath));let n=[],o=new Set;for(let s of r){let i=0,a;try{a=Z(s,["worktree","list","--porcelain"],{allowFailure:!0})}catch{continue}let l=dN(a);for(let c of l){if(i>=mN)break;let u=dr.resolve(c.path);if(u===dr.resolve(s)||!pN(u,e.worktreesDir)||t.has(u)||o.has(u)||!sR(u))continue;let p=dr.relative(e.worktreesDir,u).split(dr.sep),m=p[0],f=p[1]??"unknown";o.add(u),i+=1,n.push({kind:"remove_worktree",path:u,bytes:null,runId:m,worker:f,repo:s,ageMs:uN(u,e.now)})}}return n}U();O();import _o from"node:path";function aR(e,r){let t=_o.resolve(r),n=new Map;for(let[o,s]of e){let i=s.harnessRoot?_o.resolve(s.harnessRoot):null;i&&i!==t||n.set(o,s)}return n}function lR(e){let r=new Map;for(let t of bs(e))for(let n of Object.keys(t.workers||{})){let o=_o.join(Un(e,t.id),"workers",x(n),"worker.json"),s=A(o,void 0);s?.worktreePath&&r.set(_o.resolve(s.worktreePath),{harnessRoot:e,worktreePath:_o.resolve(s.worktreePath),runId:t.id,workerName:n,run:t,worker:s})}return r}function Eo(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function St(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?n:r}function Gc(e={}){let r=e.execute===!0||e.execute!==!1&&Eo("KYNVER_CLEANUP_EXECUTE"),t=e.finalizeStaleRuns!==!1&&!Eo("KYNVER_CLEANUP_SKIP_FINALIZE"),n=e.nodeModulesAgeMs??St("KYNVER_CLEANUP_NODE_MODULES_AGE_MS",216e5),o=e.scanDependencyCaches??(e.nodeModulesAgeMs!==void 0||process.env.KYNVER_CLEANUP_NODE_MODULES_AGE_MS!=null),s=e.worktreesAgeMs??St("KYNVER_CLEANUP_WORKTREES_AGE_MS",0),i=e.terminalWorktreesAgeMs??St("KYNVER_CLEANUP_TERMINAL_WORKTREES_AGE_MS",216e5),a=e.runDirectoriesAgeMs??St("KYNVER_CLEANUP_RUN_DIRECTORIES_AGE_MS",36e5),l=e.maxActionsPerSweep??St("KYNVER_CLEANUP_MAX_ACTIONS_PER_SWEEP",120),c=e.includeOrphans===!0||Eo("KYNVER_CLEANUP_INCLUDE_ORPHANS"),d=Eo("KYNVER_CLEANUP_SCOPE_ALL")||process.env.KYNVER_CLEANUP_SCOPE==="all"?e.runIdFilter:e.runIdFilter??(process.env.KYNVER_CLEANUP_RUN_ID||void 0),p=e.accountBytes!==!1&&!Eo("KYNVER_CLEANUP_SKIP_BYTE_ACCOUNTING"),m=St("KYNVER_CLEANUP_STORAGE_ENTRY_CAP",2e3),f=e.storagePerRunEntryCap!==void 0?e.storagePerRunEntryCap:p&&m>0?m:null,y=St("KYNVER_CLEANUP_BYTE_ENTRY_CAP",2e3),k=e.byteAccountingEntryCap??(Number.isFinite(y)&&y>0?Math.floor(y):2e3);return{execute:r,finalizeStaleRuns:t,scanDependencyCaches:o,nodeModulesAgeMs:n,worktreesAgeMs:s>0?s:0,terminalWorktreesAgeMs:i>=0?i:0,runDirectoriesAgeMs:a>=0?a:0,maxActionsPerSweep:Number.isFinite(l)&&l>0?Math.floor(l):120,includeOrphans:c,runIdFilter:d?String(d):void 0,accountBytes:p,storagePerRunEntryCap:f,byteAccountingEntryCap:k}}function pR(e){let r=process.env.KYNVER_CLEANUP_SCOPE==="all",t=Number(process.env.KYNVER_CLEANUP_WORKTREES_AGE_MS),n=r?Number.isFinite(t)&&t>0?t:6048e5:Number.isFinite(t)&&t>0?t:0;return Gc({runIdFilter:r?void 0:e,worktreesAgeMs:n,terminalWorktreesAgeMs:r?216e5:void 0,runDirectoriesAgeMs:r?36e5:void 0,includeOrphans:r?!0:void 0,finalizeStaleRuns:!0,accountBytes:!0,scanDependencyCaches:!0})}de();import{existsSync as Yc,statSync as gN}from"node:fs";import wt from"node:path";O();var mR=1800*1e3;function hN(e,r){let t=wt.relative(r,e);return t===""||!t.startsWith("..")&&!wt.isAbsolute(t)}function kN(e,r,t){if(!Yc(e))return!1;try{let n=r-gN(e).mtimeMs;return Number.isFinite(n)&&n>=0&&n<t}catch{return!1}}function qc(e){if(!e.runId||!e.workerName)return!1;let r=e.now??Date.now(),t=e.heartbeatFreshMs??mR,n=wt.resolve(e.harnessRoot,"runs"),o=wt.resolve(n,e.runId,"workers",e.workerName);if(!hN(o,n))return!1;let s=A(wt.join(o,"worker.json"),void 0);return s&&an(s,r,t)?!0:s?!1:kN(wt.join(o,"heartbeat.jsonl"),r,t)}function fR(e){let r=e.now??Date.now(),t=e.heartbeatFreshMs??mR;if(!Yc(e.worktreePath))return null;if(e.runId&&e.workerName&&qc(e))return"active_worker";let n=wt.join(e.worktreePath,".git");if(!Yc(n))return null;let o=ne(e.worktreePath,["status","--porcelain"]);if(o.status!==0)return"pr_or_unmerged_commits";let s=o.stdout.split(`
+`).map(c=>c.trim()).filter(c=>c.length>0);if(Fe(s).length>0)return"dirty_worktree";let i=ne(e.worktreePath,["rev-list","--count","@{u}..HEAD"]);if(i.status===0){let c=Number(i.stdout.trim());if(Number.isFinite(c)&&c>0)return"pr_or_unmerged_commits"}let a=ne(e.worktreePath,["rev-list","--count","origin/main..HEAD"]);if(a.status!==0)return i.status!==0?"pr_or_unmerged_commits":null;let l=Number(a.stdout.trim());return Number.isFinite(l)&&l>0?"pr_or_unmerged_commits":null}Xe();import{existsSync as yN,readdirSync as gR,statSync as RN}from"node:fs";import vN from"node:path";function hR(e={}){let r=ge(e.harnessRoot??De()),t=$t(r),n=e.now??Date.now(),o=new Date(n).toISOString();if(!yN(t))return{harnessRoot:r,worktreesDir:t,worktreesBytes:0,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o};let s=0,i=0,a=0,l=null,c;try{c=gR(t,{withFileTypes:!0})}catch{return{harnessRoot:r,worktreesDir:t,worktreesBytes:null,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o}}for(let u of c){if(!u.isDirectory())continue;i+=1;let d=vN.join(t,u.name);try{let p=RN(d);l=l===null?p.mtimeMs:Math.min(l,p.mtimeMs)}catch{}try{for(let p of gR(d,{withFileTypes:!0}))p.isDirectory()&&(a+=1)}catch{}if(s!==null&&e.perRunEntryCap!==null){let p=e.perRunEntryCap??5e4;if(p<=0)s=null;else{let m=Lr(d,p);m===null?s=null:s+=m}}}return{harnessRoot:r,worktreesDir:t,worktreesBytes:s,runCount:i,workerCount:a,oldestRunAt:l===null?null:new Date(l).toISOString(),scannedAt:o}}Xe();import{existsSync as bN}from"node:fs";import{homedir as SN}from"node:os";import kR from"node:path";var wN=["/var/tmp/kynver-harness",kR.join(SN(),".openclaw","harness")];function Jc(e,r,t){if(!t?.trim())return;let n=ge(t.trim());e.has(n)||(e.add(n),r.push(n))}function xN(e){return e.scanWellKnown!=null?e.scanWellKnown:process.env.VITEST==="true"?!1:process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN!=="0"&&!["0","false","no"].includes((process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN??"").toLowerCase())}function yR(e={}){let r=new Set,t=[];Jc(r,t,e.harnessRoot??De());let n=process.env.KYNVER_CLEANUP_EXTRA_ROOTS?.split(",").map(o=>o.trim()).filter(Boolean);for(let o of n??[])Jc(r,t,o);if(xN(e))for(let o of wN){let s=kR.resolve(o);!r.has(s)&&bN(s)&&Jc(r,t,s)}return t}xn();function _N(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function EN(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function RR(e={}){let r=e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/",t=EN("KYNVER_DISK_GUARD_MAX_USED_PERCENT",75),n=Kr({...e,diskPath:r,diskMaxUsedPercent:e.diskMaxUsedPercent??t}),o=!n.ok||n.usedPercent>=t,s=process.env.KYNVER_CLEANUP_DISK_PRESSURE_FORCE?.trim().toLowerCase();return s==="none"||s==="off"||s==="0"?o=!1:(s==="pressured"||s==="on"||s==="1")&&(o=!0),{diskGate:n,pressured:o,maxUsedPercent:t}}function vR(e,r){if(!r.pressured)return e;let t=e.execute||!_N("KYNVER_CLEANUP_DRY_RUN_ON_PRESSURE");return{...e,execute:t,nodeModulesAgeMs:0,runIdFilter:void 0,includeOrphans:!0,terminalWorktreesAgeMs:0,runDirectoriesAgeMs:0,worktreesAgeMs:e.worktreesAgeMs>0?e.worktreesAgeMs:6048e5,diskPressure:!0,diskGate:r.diskGate}}$o();import{unlinkSync as CN}from"node:fs";function Ii(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function bR(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function PN(e,r,t){return e.length===0?[]:t?[...e]:e.length<=r?[]:e.slice(r)}function SR(e={}){let r=e.execute===!0||Ii("KYNVER_WSL_CRASH_DUMP_EXECUTE")||Ii("KYNVER_CLEANUP_EXECUTE"),t=e.purgeAll===!0||Ii("KYNVER_WSL_CRASH_DUMP_PURGE_ALL"),n=Math.max(0,e.keepNewest??bR("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",t?0:1)),o=Nt({forceWsl:e.forceWsl});if(!o?.path)return{observation:o,execute:r,keepNewest:n,removed:[],removedBytes:0,skipped:o?.probeError?[{path:o.path??"(unresolved)",reason:o.probeError}]:[]};let s=PN(o.dumps,n,t),i=[],a=[],l=0;for(let c of s){if(!r){a.push({path:c.path,reason:"dry_run"});continue}try{CN(c.path),i.push({path:c.path,bytes:c.bytes,name:c.name}),l+=c.bytes}catch(u){a.push({path:c.path,reason:u.message})}}return{observation:o,execute:r,keepNewest:n,removed:i,removedBytes:l,skipped:a}}function wR(e){return e?Ii("KYNVER_WSL_CRASH_DUMP_CLEANUP")||!e.ok?!0:e.dumpCount>bR("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",1):!1}$o();function He(e,r){if(process.env.KYNVER_CLEANUP_QUIET==="1")return;let t=r?`: ${r}`:"";console.error(`[kynver cleanup] ${e}${t}`)}de();var Oi=class{aheadOfMain=new Map;countAheadOfMain(r,t="origin/main"){let n=`${r}\0${t}`;if(this.aheadOfMain.has(n))return this.aheadOfMain.get(n)??null;let o=ne(r,["rev-list","--count",`${t}..HEAD`]);if(o.status!==0)return this.aheadOfMain.set(n,null),null;let s=Number(o.stdout.trim()),i=Number.isFinite(s)?s:null;return this.aheadOfMain.set(n,i),i}};import{spawnSync as AN}from"node:child_process";import{existsSync as IN}from"node:fs";import ON from"node:path";var TN=5e3;function NN(e,r){if(!IN(ON.join(e,".git")))return{status:null,stdout:"",stderr:"",error:"not_a_git_repo"};try{let t=AN("git",r,{windowsHide:!0,cwd:e,encoding:"utf8",timeout:TN}),n=t.error?.message?.includes("ETIMEDOUT")===!0;return{status:n?null:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:n?"git_timeout":t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function xR(e){let r=NN(e,["status","--short"]);return r.error==="not_a_git_repo"?[]:r.error==="git_timeout"||r.status!==0?null:r.stdout.split(`
+`).map(t=>t.trim()).filter(Boolean)}var Ti=class{cache=new Map;porcelain(r){let t=r,n=this.cache.get(t);if(n!==void 0)return n;let o=xR(t)??[];return this.cache.set(t,o),o}};var Ni=class{cache=new Map;derive(r){let t=this.cache.get(r.id);if(t!==void 0)return t;let n=yt(r);return this.cache.set(r.id,n),n}};function MN(e){let r={};for(let t of e)r[t.kind]=(r[t.kind]??0)+1;return r}function _R(e,r={}){let t=r.maxSampleActions??12,n=r.maxSampleSkips??8;return{harnessRoot:e.harnessRoot,scanRoots:e.scanRoots,dryRun:e.dryRun,execute:e.execute,scannedAt:e.scannedAt,finalizedRuns:e.finalizedRuns.length,actionCount:e.actions.length,actionKinds:MN(e.actions),totals:e.totals,...e.storage?{storage:e.storage}:{},...e.preservedLivePaths?.length?{preservedLivePaths:e.preservedLivePaths}:{},...e.removedRunDirectories!=null?{removedRunDirectories:e.removedRunDirectories}:{},sampleActions:e.actions.slice(0,t).map(o=>({kind:o.kind,path:o.path,...o.skipReason?{skipReason:o.skipReason}:{},...o.bytes!=null?{bytes:o.bytes}:{},...o.runId?{runId:o.runId}:{},...o.worker?{worker:o.worker}:{}})),sampleSkips:e.skips.slice(0,n)}}function DN(e={}){let r=e.harnessRoot?ge(e.harnessRoot):De(),t=yR({harnessRoot:r}),n=e.now??Date.now();return{harnessRoot:r,scanRoots:t,now:n}}function WN(e){return typeof e=="string"?{reason:e}:e}function cn(e,r,t,n){e.push({path:r,reason:t,...n?{detail:n}:{}})}function Mi(e,r,t){return!r||e.bytes!=null?e:{...e,bytes:Lr(e.path,t)}}function ER(e,r){let t={};for(let n of r)t[n.reason]=(t[n.reason]??0)+1;for(let n of e)n.skipReason&&(t[n.skipReason]=(t[n.skipReason]??0)+1);return t}function LN(e,r){return e.kind==="remove_next_cache"?Yy(e,r):Gy(e,r)}function UN(e,r,t){return e.kind==="remove_next_cache"?Ei(e.path,r,t):_i(e.path,r,t)}function BN(e){let r=new Map;for(let t of e)for(let[n,o]of lR(t))r.set(n,o);return r}function CR(e,r){return e.runId&&e.worker?$e.join(r,e.runId,e.worker):$e.resolve(e.path,"..")}function PR(e){return e.indexed?!1:qc({harnessRoot:e.harnessRoot,runId:e.candidate.runId,workerName:e.candidate.worker,now:e.now})}function FN(e={}){let r=Gc(e),t=RR();r=vR(r,t);let n=DN(e);He("scan",`${n.scanRoots.length} harness root(s)`);let o=Cy(n.scanRoots,n.now),s=r.finalizeStaleRuns?bo().map(C=>({runId:C.runId,from:C.from,to:C.to})):[];s.length>0&&He("finalize",`${s.length} stale run(s) marked terminal`),He("index","building worktree index");let i=BN(n.scanRoots);He("index",`${i.size} indexed worktree(s)`);let a={runTerminalCache:new Ni,gitStatusCache:new Ti,gitRevCache:new Oi},l=[],c=[],u=new Set,d=r.maxActionsPerSweep,p=()=>c.length>=d;for(let C of n.scanRoots){if(p())break;He("root",C);let re=$e.join(C,"worktrees"),he=aR(i,C),je={harnessRoot:C,worktreesDir:re,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter,index:he,now:n.now},pr=r.scanDependencyCaches?oR(je):[];He("dependency",r.scanDependencyCaches?`${pr.length} cache candidate(s) at ${C}`:"skipped (worktree-only sweep)");let Ur=0;for(let B of pr){if(p())break;Ur+=1,Ur%50===0&&He("dependency",`${Ur}/${pr.length} evaluated`);let M=$e.resolve(B.path);if(u.has(M))continue;u.add(M);let D={...B,path:M},ie=UN(D,C,re);if(ie){cn(l,D.path,ie),c.push({...D,executed:!1,skipped:!0,skipReason:ie});continue}let ke=CR(D,re),ye=he.get($e.resolve(ke))??null,mr=PR({candidate:D,indexed:ye,harnessRoot:C,now:n.now}),V=Bc({indexed:ye,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:D.ageMs,worktreePath:ke,activeWorktreePaths:o.activeWorktreePaths,workerFilesystemLive:mr,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(V){cn(l,D.path,V),c.push({...D,executed:!1,skipped:!0,skipReason:V});continue}c.push(LN(Mi(D,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(r.scanDependencyCaches)for(let B of Zy(je)){if(p())break;let M=$e.resolve(B.path);if(u.has(M))continue;u.add(M);let D={...B,path:M},ie=Ci(D.path,C,re);if(ie){cn(l,D.path,ie),c.push({...D,executed:!1,skipped:!0,skipReason:ie});continue}let ke=CR(D,re),ye=he.get($e.resolve(ke))??null,mr=PR({candidate:D,indexed:ye,harnessRoot:C,now:n.now}),V=wy({indexed:ye,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:D.ageMs,worktreePath:ke,activeWorktreePaths:o.activeWorktreePaths,workerFilesystemLive:mr,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(V){cn(l,D.path,V),c.push({...D,executed:!1,skipped:!0,skipReason:V});continue}c.push(qy(Mi(D,r.accountBytes,r.byteAccountingEntryCap),r.execute))}let j=[...eR(je),...iR(je)];He("worktrees",`${j.length} candidate(s) at ${C}`);let T=new Set,te=0;for(let B of j){if(p())break;te+=1,te%50===0&&He("worktrees",`${te}/${j.length} evaluated`);let M=$e.resolve(B.path);if(T.has(M))continue;T.add(M);let D={...B,path:M},ie=he.get($e.resolve(D.path))??null,ke=ie?null:fR({worktreePath:D.path,harnessRoot:C,runId:D.runId,workerName:D.worker,now:n.now}),ye=Sy({indexed:ie,worktreePath:$e.resolve(D.path),includeOrphans:r.includeOrphans,worktreesAgeMs:r.worktreesAgeMs,terminalWorktreesAgeMs:r.terminalWorktreesAgeMs,ageMs:D.ageMs,orphanSafety:ke,worktreeRemovalGuard:e.worktreeRemovalGuard,liveness:a,now:n.now,harnessRoot:C,writeSalvageEvidence:r.execute});if(ye){let{reason:mr,detail:V}=WN(ye);cn(l,D.path,mr,V),c.push({...D,executed:!1,skipped:!0,skipReason:mr});continue}c.push(zy(Mi(D,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(!p()&&r.runDirectoriesAgeMs>=0)for(let B of My({harnessRoot:C,worktreesDir:re,runDirectoriesAgeMs:r.runDirectoriesAgeMs,runIdFilter:r.runIdFilter,activeGuards:o,now:n.now})){if(p())break;let M=$e.resolve(B.path);if(u.has(M))continue;u.add(M);let D={...B,path:M},ie=D.runId??$e.basename(M),ke=Ny({harnessRoot:C,runId:ie,runPath:M,ageMs:D.ageMs,runDirectoriesAgeMs:r.runDirectoriesAgeMs,activeGuards:o});if(ke){cn(l,D.path,ke),c.push({...D,executed:!1,skipped:!0,skipReason:ke});continue}c.push(Jy(Mi(D,r.accountBytes,r.byteAccountingEntryCap),r.execute))}}let m=0,f=0,y=0,k=0,b=0,g=0;for(let C of c)C.bytes&&(m+=C.bytes),!C.skipped&&!C.executed&&C.bytes&&(y+=C.bytes),C.executed?(b+=1,k+=C.bytes??0,C.kind==="remove_run_directory"&&(f+=1)):C.skipped&&(g+=1,C.skipReason==="dry_run"&&C.bytes&&(y+=C.bytes));let h=r.accountBytes?hR({harnessRoot:n.harnessRoot,now:n.now,perRunEntryCap:r.storagePerRunEntryCap}):void 0,w=Nt(),E=r.execute&&wR(w),S=E?SR({execute:!0}):null,_=w?{observed:!0,execute:E,dumpCount:w.dumpCount,totalBytes:w.totalBytes,removedCount:S?.removed.length??0,removedBytes:S?.removedBytes??0,executables:w.executables,path:w.path,reason:w.reason}:void 0;S&&S.removed.length>0&&(k+=S.removedBytes,b+=S.removed.length,He("wsl-crashes",`removed ${S.removed.length} dump(s), ${S.removedBytes} bytes`)),He("complete",`${c.length} action(s), ${g} skipped, ${b} removed`);let K=_y(c,l),$=_R({harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:m,reclaimableBytes:y,removedBytes:k,removedPaths:b,skippedPaths:g,skipReasons:ER(c,l)},...h?{storage:h}:{},...K.length>0?{preservedLivePaths:K}:{},...f>0?{removedRunDirectories:f}:{},..._?{wslCrashDumps:_}:{}});return{harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:m,reclaimableBytes:y,removedBytes:k,removedPaths:b,skippedPaths:g,skipReasons:ER(c,l)},...h?{storage:h}:{},...K.length>0?{preservedLivePaths:K}:{},...f>0?{removedRunDirectories:f}:{},..._?{wslCrashDumps:_}:{},compactSummary:$}}function AR(e){let r=pR(e);return FN({execute:r.execute,finalizeStaleRuns:r.finalizeStaleRuns,accountBytes:r.accountBytes,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter})}function IR(){return process.env.KYNVER_PIPELINE_CLEANUP!=="0"}import{readFile as HN}from"node:fs/promises";import{homedir as $N}from"node:os";import xt from"node:path";Rn();var KN={"@kynver-app/runtime":"0.1.83","@kynver-app/openclaw-agent-os":"0.1.43","@kynver-app/mcp-agent-os":"0.3.34"},N4=Object.keys(KN);function OR(e){let r=e.trim().split("-")[0]?.split("+")[0];if(!r)return null;let t=r.split(".");if(t.length<1||t.length>3)return null;let n=t.map(o=>Number.parseInt(o,10));if(n.some(o=>!Number.isFinite(o)||o<0))return null;for(;n.length<3;)n.push(0);return[n[0],n[1],n[2]]}function TR(e,r){let t=OR(e),n=OR(r);if(!t||!n)return 0;for(let o=0;o<3;o+=1){if(t[o]>n[o])return 1;if(t[o]<n[o])return-1}return 0}var jN=["@kynver-app/runtime","@kynver-app/openclaw-agent-os","@kynver-app/mcp-agent-os"];function un(e){let r=e?.trim();return r||null}function VN(e){return[...new Set(e.filter(r=>!!r))]}function GN(){let e=$N(),r=un(process.env.KYNVER_OPENCLAW_NPM_ROOT)??un(process.env.OPENCLAW_NPM_ROOT)??xt.join(e,".openclaw","npm"),t=un(process.env.KYNVER_NPM_GLOBAL_ROOT)??un(process.env.KYNVER_NPM_GLOBAL_MODULES_ROOT)??(un(process.env.NPM_CONFIG_PREFIX)?xt.join(un(process.env.NPM_CONFIG_PREFIX),"lib","node_modules"):xt.join(e,".npm-global","lib","node_modules"));return VN([xt.join(r,"lib","node_modules"),xt.join(r,"node_modules"),t.endsWith("node_modules")?t:xt.join(t,"lib","node_modules")])}async function YN(e){try{let r=JSON.parse(await HN(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function qN(e){let r=GN(),t=new Set,n=[];for(let o of r){let s=xt.join(o,e,"package.json");t.has(s)||(t.add(s),n.push(s))}return n}async function NR(e=new Date().toISOString()){let r={};for(let t of jN){let n=null;for(let o of qN(t)){let s=await YN(o);s&&(!n||TR(s,n.version)>0)&&(n={version:s,path:o})}n&&(r[t]={version:n.version,observedAt:e,path:n.path})}return r}import{spawnSync as JN}from"node:child_process";var zN=1e4,XN=4*1024*1024,MR=(e,r,t)=>{try{let n=JN(e,r,{windowsHide:!0,encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:t?.timeoutMs??zN,maxBuffer:XN});return{ok:n.status===0,stdout:typeof n.stdout=="string"?n.stdout:"",stderr:typeof n.stderr=="string"?n.stderr:""}}catch(n){return{ok:!1,stdout:"",stderr:n instanceof Error?n.message:String(n)}}};function Di(e,r,t){return`${e} ${r} ${t}`}function zc(e){let r=e.lastIndexOf("@");if(r<=0||r===e.length-1)return null;let t=e.slice(0,r),n=e.slice(r+1);return!/^[^/\s]+\/[^/\s]+$/.test(t)||!/^[0-9a-f]{7,40}$/i.test(n)?null:{repo:t,sha:n}}function DR(e){let r=e.trim().match(/[/:]([^/]+\/[^/]+)\/(?:pull|pulls|merge_requests|pull-requests)\/(\d+)/i);if(!r)return null;let t=Number(r[2]);return!Number.isFinite(t)||t<=0?null:{repo:r[1],number:t}}var QN=8e3,ZN=30,eM=100,rM=400,tM=3600*1e3,Xc=0;function Zc(){return Date.now()<Xc}function nM(e){let r=`${e.stdout}
+${e.stderr}`.toLowerCase();return r.includes("api rate limit exceeded")||r.includes("rate limit exceeded")||r.includes("secondary rate limit")}function WR(e){nM(e)&&(Xc=Math.max(Xc,Date.now()+tM))}function Qc(e,r){if(Zc())return null;let t=e("gh",["api",...r]);if(!t.ok||!t.stdout.trim())return WR(t),null;try{return JSON.parse(t.stdout)}catch{return null}}function oM(e,r,t,n){if(Zc())return null;let o=e("gh",["pr","view",String(t),"--repo",r,"--json",n.join(",")]);if(!o.ok||!o.stdout.trim())return WR(o),null;try{return JSON.parse(o.stdout)}catch{return null}}function eu(e){return Zc()?!1:process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()?!0:e("gh",["auth","token"]).ok}function dn(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function sM(e){return Array.isArray(e)?e.map(r=>dn(r)).filter(r=>r!==null).slice(0,ZN).map(r=>({context:r.context??null,state:r.state??null,target_url:r.target_url??null,description:r.description??null})):[]}function iM(e,r,t){let n=Qc(e,[`repos/${r}/commits/${t}/status`]);return n?{state:n.state??null,statuses:sM(n.statuses)}:null}var LR={provider:"github",kind:"pr_snapshot",version:"2",isAvailable:eu,collect(e,r){let t=DR(e);if(!t)return null;let n=oM(r,t.repo,t.number,["url","title","body","author","state","isDraft","mergedAt","mergeCommit","mergeable","headRefName","headRefOid","headRepositoryOwner","statusCheckRollup","files"]);if(!n)return null;let o=dn(n.author),s=dn(n.mergeCommit),i=dn(n.headRepositoryOwner),a=typeof n.body=="string"?n.body.slice(0,QN):null,l=Array.isArray(n.statusCheckRollup)?n.statusCheckRollup.map(u=>dn(u)).filter(u=>u!==null).slice(0,eM).map(u=>({name:u.name??u.context??null,status:u.status??u.state??null,conclusion:u.conclusion??null,workflowName:u.workflowName??null,detailsUrl:u.detailsUrl??null})):[],c=Array.isArray(n.files)?n.files.map(u=>dn(u)).map(u=>typeof u?.path=="string"?u.path.trim():"").filter(Boolean).slice(0,rM):[];return{pull:{html_url:n.url??null,title:n.title??null,body:a,user:{login:o?.login??null},state:typeof n.state=="string"?n.state.toLowerCase():null,draft:n.isDraft??null,merged:!!n.mergedAt,merged_at:n.mergedAt??null,merge_commit_sha:s?.oid??null,mergeable:null,mergeable_state:n.mergeable??null,head:{sha:n.headRefOid??null,ref:n.headRefName??null,repo:{owner:{login:i?.login??null}}}},checkRuns:l,combinedStatus:{state:null,statuses:[]},changedFiles:c}}},UR={provider:"github",kind:"commit_status",version:"1",isAvailable:eu,collect(e,r){let t=zc(e);return t?iM(r,t.repo,t.sha):null}},BR={provider:"github",kind:"branch_reachability",version:"1",isAvailable:eu,collect(e,r){let t=zc(e);if(!t)return null;let n=Qc(r,[`repos/${t.repo}`]),o=typeof n?.default_branch=="string"&&n.default_branch.trim()?n.default_branch.trim():null;if(!o)return null;let s=Qc(r,[`repos/${t.repo}/compare/${encodeURIComponent(o)}...${t.sha}`]);if(!s)return null;let i=typeof s.status=="string"?s.status:null;return{defaultBranch:o,compareStatus:i,reachable:i==="identical"||i==="behind"}}};var tu=[];function ru(e){tu.some(r=>r.provider===e.provider&&r.kind===e.kind)||tu.push(e)}function FR(e,r){return tu.find(t=>t.provider===e&&t.kind===r)??null}function KR(){ru(LR),ru(UR),ru(BR)}var aM=1,lM=25e3;function HR(e,r={}){KR();let t=r.run??MR,n=r.now??(()=>new Date),o=r.maxSubjects??aM,s=Date.now()+(r.deadlineMs??lM),i=new Set,a=e.filter(m=>{let f=Di(m.provider,m.kind,m.subject);return i.has(f)?!1:(i.add(f),!0)}),l=a.length>0?Math.floor(n().getTime()/6e4)%a.length:0,u=a.map((m,f)=>a[(l+f)%a.length]).slice(0,o),d={attempted:0,collected:0,cached:0,items:[],skipped:[]},p=new Map;for(let m of u){let f=Di(m.provider,m.kind,m.subject),y=n(),k=r.cache?.get(f,y)??null;if(k){d.cached+=1,d.collected+=1,d.items.push(k);continue}if(Date.now()>s){d.skipped.push({...m,reason:"budget_exhausted"});continue}let b=FR(m.provider,m.kind);if(!b){d.skipped.push({...m,reason:"no_recipe"});continue}let g=`${b.provider} ${b.kind}`,h=p.get(g);if(h===void 0&&(h=b.isAvailable(t),p.set(g,h)),!h){d.skipped.push({...m,reason:"provider_unavailable"});continue}if(r.cache?.reserve?.(m,f,n())===!1){d.skipped.push({...m,reason:"budget_exhausted"});continue}d.attempted+=1;let w=b.collect(m.subject,t);if(w==null){d.skipped.push({...m,reason:"collect_failed"});continue}d.collected+=1;let E={provider:m.provider,kind:m.kind,subject:m.subject,payload:w,observedAt:n().toISOString(),collectorVersion:b.version};d.items.push(E),r.cache?.set(f,E,n())}return d}U();O();import mM from"node:path";U();O();import $R from"node:path";var cM="provider-evidence-wanted.json",uM="provider-evidence-cache.json",dM=600*1e3;function jR(e){return $R.join(N(e),cM)}function pM(e){return $R.join(N(e),uM)}function VR(e){if(!Array.isArray(e))return[];let r=[];for(let t of e){if(!t||typeof t!="object"||Array.isArray(t))continue;let n=t,o=typeof n.provider=="string"?n.provider.trim():"",s=typeof n.kind=="string"?n.kind.trim():"",i=typeof n.subject=="string"?n.subject.trim():"";!o||!s||!i||r.push({provider:o,kind:s,subject:i})}return r}function GR(e){let r=A(jR(e),null);return VR(r?.wanted)}function YR(e,r){ue(jR(e),{savedAt:new Date().toISOString(),wanted:r})}function qR(e,r={}){let t=r.ttlMs??dM,n=pM(e),s={...A(n,null)?.items??{}},i=!1;return{get(l,c){let u=s[l];if(!u)return null;let d=Date.parse(u.observedAt);return!Number.isFinite(d)||c.getTime()-d>t?(delete s[l],i=!0,null):u},set(l,c){s[l]=c,i=!0},flush(){i&&(ue(n,{savedAt:new Date().toISOString(),items:s}),i=!1)}}}function JR(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.providerEvidenceWanted;return Array.isArray(r)?VR(r):null}var fM="provider-evidence-shared-cache.json",gM=6e4,hM=1,kM=1;function nu(e,r){let t=process.env[e];if(!t)return r;let n=Number.parseInt(t,10);return Number.isFinite(n)&&n>=0?n:r}function yM(){return mM.join(le().harnessRoot,fM)}function RM(e){let r=e.toUpperCase().replace(/[^A-Z0-9]+/g,"_"),t=e==="github"?hM:kM;return nu(`KYNVER_PROVIDER_EVIDENCE_${r}_PER_MINUTE`,nu("KYNVER_PROVIDER_EVIDENCE_LIVE_COLLECTS_PER_MINUTE",t))}function zR(){return nu("KYNVER_PROVIDER_EVIDENCE_SHARED_CACHE_TTL_MS",gM)}function vM(e){return Math.floor(e.getTime()/6e4)*6e4}function bM(e){return`${e.provider}:${e.kind}`}function XR(e,r={}){let t=qR(e,{ttlMs:r.ttlMs??zR()}),n=r.file??yM(),o=A(n,null),s={...o?.items??{}},i={...o?.budget??{}},a=r.ttlMs??zR(),l=!1;return{get(u,d){let p=t.get(u,d);if(p)return p;let m=s[u];if(!m)return null;let f=Date.parse(m.observedAt);return!Number.isFinite(f)||d.getTime()-f>a?(delete s[u],l=!0,null):(t.set(u,m,d),m)},set(u,d,p){t.set(u,d,p),s[u]=d,l=!0},reserve(u,d,p){let m=RM(u.provider);if(m===0)return!0;let f=bM(u),y=vM(p),k=i[f];return!k||k.windowStartMs!==y?(i[f]={windowStartMs:y,used:1},l=!0,!0):k.used>=m?!1:(k.used+=1,l=!0,!0)},flush(){t.flush(),l&&(ue(n,{savedAt:new Date().toISOString(),items:s,budget:i}),l=!1)}}}O();U();import QR from"node:path";var ZR="mesh-cron-lease.json";function ev(e){let r=A(QR.join(N(e),ZR),null);return yh(e,r)??r}function rv(e,r){let t={...r,updatedAt:new Date().toISOString()};ue(QR.join(N(e),ZR),t),kh(e,t)}function tv(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.response;if(!r||typeof r!="object"||Array.isArray(r))return null;let t=r.meshLiveness;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t.cronLease;if(!n||typeof n!="object"||Array.isArray(n))return null;let o=n;return{leaseToken:typeof o.leaseToken=="string"?o.leaseToken:null,holderBoxId:typeof o.holderBoxId=="string"?o.holderBoxId:null,authorized:o.authorized===!0,updatedAt:new Date().toISOString()}}function nv(e){let r=Gg(),t=Nr(e?.env??process.env),n=(e?.now??(()=>new Date))().getTime(),o={};if(t.flags.dispatchReceipts!=="off"){Object.assign(o,sh());let s=oh({nowMs:n,hasLiveWorker:e?.hasLiveWorker});o["dispatchReceipts.strandedClaimCandidates"]=s.strandedClaimCandidates,t.flags.dispatchReceipts==="enforce"&&Object.assign(o,Qk())}return t.flags.planOutbox!=="off"&&Object.assign(o,Qh()),t.flags.admission!=="off"&&(Object.assign(o,ch()),t.flags.admission==="enforce"&&Object.assign(o,mh())),(t.flags.keeper!=="off"||t.flags.meshLease!=="off"||t.flags.quota!=="off")&&Object.assign(o,wh()),{contractVersion:1,observedAt:new Date(n).toISOString(),state:r.state,schemaVersion:r.schemaVersion,recovered:r.recovered,unavailableClass:r.reason?r.reason.split(":")[0]??null:null,flags:t.flags,flagSources:t.sources,flagWarningCount:t.warnings.length,divergenceCounters:o}}H();import{createHash as ov}from"node:crypto";import{access as SM,mkdir as w3,readFile as sv,rename as x3,writeFile as _3}from"node:fs/promises";import{constants as wM}from"node:fs";import{homedir as ou}from"node:os";import _e from"node:path";var xM=/^(?:@[a-z0-9][a-z0-9._-]*\/[a-z0-9][a-z0-9._-]*|[a-z0-9][a-z0-9._-]*)$/i,_M=/^[A-Za-z0-9._:-]{8,128}$/;function EM(){return process.env.KYNVER_MCP_UPDATE_INVENTORY_FILE?.trim()||_e.join(ou(),".kynver","mcp-installations.json")}function CM(e){return e==="openclaw"?process.env.KYNVER_OPENCLAW_NPM_ROOT?.trim()||_e.join(ou(),".openclaw","npm"):process.env.KYNVER_NPM_GLOBAL_ROOT?.trim()||process.env.NPM_CONFIG_PREFIX?.trim()||_e.join(ou(),".npm-global")}function PM(e){let r=_e.resolve(e);if(_e.basename(r)!=="node_modules")return r;let t=_e.dirname(r);return _e.basename(t)==="lib"?_e.dirname(t):t}function AM(e,r){return[_e.join(e,"lib","node_modules",r,"package.json"),_e.join(e,"node_modules",r,"package.json")]}async function IM(e){try{return await SM(e,wM.R_OK),!0}catch{return!1}}async function OM(e=EM()){let r;try{r=JSON.parse(await sv(e,"utf8"))}catch{return[]}if(r.version!==1||!Array.isArray(r.installations)||r.installations.length>100)throw new Error("invalid MCP installation inventory");return r.installations.map(t=>{if(!t||!_M.test(t.inventoryKey)||!xM.test(t.packageName)||!["kynver","openclaw"].includes(t.prefix))throw new Error("invalid adopted MCP installation");if(t.packageName.includes("..")||t.packageName.includes("%"))throw new Error("invalid adopted MCP package identity");if(t.connectionId&&t.connectionId.length>128)throw new Error("invalid connection identity");if(t.binName&&!/^[A-Za-z0-9._-]{1,80}$/.test(t.binName))throw new Error("invalid MCP bin name");let n=t.envAllowlist??[];if(!Array.isArray(n)||n.length>32||n.some(o=>!/^[A-Z][A-Z0-9_]{1,80}$/.test(o)))throw new Error("invalid MCP environment allow-list");return{...t,envAllowlist:[...new Set(n)],lifecycle:t.lifecycle??"runtime_stdio"}})}function TM(e,r,t){if(typeof e.bin=="string")return _e.join(t,e.bin);if(!e.bin||typeof e.bin!="object"||Array.isArray(e.bin))return null;let n=e.bin,o=r.binName??(Object.keys(n).length===1?Object.keys(n)[0]:void 0),s=o?n[o]:null;return typeof s=="string"&&!_e.isAbsolute(s)&&!s.split(/[\\/]/).includes("..")?_e.join(t,s):null}function NM(e){return ov("sha256").update(JSON.stringify({inventoryKey:e.inventoryKey,connectionId:e.connectionId,packageName:e.packageName,managerKind:e.managerKind,sourceKind:e.sourceKind,installedVersion:e.installedVersion,nodeVersion:e.nodeVersion,policyChannel:e.policyChannel,executionConfigDigest:e.executionConfigDigest,capabilities:[...e.capabilities].sort()})).digest("hex")}async function MM(e){let r=[];for(let t of e){let n=PM(CM(t.prefix)),o=(await Promise.all(AM(n,t.packageName).map(async m=>({candidate:m,ok:await IM(m)})))).find(m=>m.ok)?.candidate;if(!o)continue;let s=JSON.parse(await sv(o,"utf8"));if(s.name!==t.packageName||typeof s.version!="string"||!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(s.version))continue;let i=_e.dirname(o),a=TM(s,t,i),l=t.packageName==="@kynver-app/runtime",c=t.lifecycle??"runtime_stdio",u=ov("sha256").update(JSON.stringify({prefix:n,binName:t.binName??null,envAllowlist:[...t.envAllowlist??[]].sort(),lifecycle:c})).digest("hex"),d=l?[]:c==="runtime_stdio"&&a?["update","restart","rollback","verify_mcp"]:["update","rollback"],p={inventoryKey:t.inventoryKey,connectionId:t.connectionId??null,packageName:t.packageName,managerKind:"npm_global",sourceKind:"configured_stdio",installedVersion:s.version,nodeVersion:process.versions.node,policyChannel:"latest",executionConfigDigest:u,capabilities:d};r.push({report:{...p,displayName:t.displayName?.trim()||t.packageName,inventoryFingerprint:NM(p),capabilityExplanation:l?"Runtime self-update requires a supervisor-owned durable handoff and is not enabled by this adapter.":c==="runtime_stdio"&&a?"The authorized runtime can install, start, and verify this configured stdio package.":"The package can be installed, but its external supervisor must restart and verify it."},local:{prefix:n,packageJsonPath:o,packageDir:i,binPath:a,envAllowlist:t.envAllowlist??[],lifecycle:c}})}return r}async function iv(){return MM(await OM())}import{createHash as DM,createHmac as WM,timingSafeEqual as LM}from"node:crypto";function su(e){let r=e.trim().split(".");return r.length!==3||r[0]!=="krc1"||!r[1]||!r[2]?null:{tokenId:r[1],tokenHash:DM("sha256").update(`krc1.${r[1]}.${r[2]}`,"utf8").digest("hex")}}function av(e,r,t){let n=su(r);if(!n||e.algorithm!=="hmac-sha256-runner-v1"||e.keyId!==n.tokenId)return!1;let o=Date.parse(e.claims.expiresAt);if(e.claims.version!==1||e.claims.agentOsId!==t||!Number.isFinite(o)||o<=Date.now()||o>Date.now()+10*6e4||![null,"installing","restarting","verifying"].includes(e.claims.resumePhase))return!1;let s=WM("sha256",Buffer.from(n.tokenHash,"hex")).update(JSON.stringify(e.claims),"utf8").digest(),i=Buffer.from(e.signature,"base64url");return i.length===s.length&&LM(i,s)}Hi();import{createHash as UM}from"node:crypto";import{access as iu,mkdtemp as BM,readFile as pv,rm as FM}from"node:fs/promises";import{constants as au}from"node:fs";import{tmpdir as KM}from"node:os";import pn from"node:path";import{spawn as HM}from"node:child_process";import{Client as $M}from"@modelcontextprotocol/sdk/client/index.js";import{StdioClientTransport as jM}from"@modelcontextprotocol/sdk/client/stdio.js";var lu="https://registry.npmjs.org",lv=512*1024,cu=2*6e4,VM=2e4;function mv(){return"npm"}function cv(e,r){return Buffer.byteLength(e)>=lv?e:(e+r.toString("utf8")).slice(0,lv)}function GM(e){let r=process.env.KYNVER_MCP_UPDATE_NPM_CACHE?.trim(),t=r&&pn.isAbsolute(r)?r:e,n={PATH:process.env.PATH,SystemRoot:process.env.SystemRoot,TEMP:process.env.TEMP,TMP:process.env.TMP,npm_config_registry:lu,npm_config_audit:"false",npm_config_fund:"false",npm_config_update_notifier:"false",npm_config_cache:t};return Object.fromEntries(Object.entries(n).filter(o=>typeof o[1]=="string"))}async function fv(e,r,t=cu,n){return new Promise((o,s)=>{let i,a;try{[i,a]=ve(e,r)}catch(m){s(m);return}let l=HM(i,a,{shell:!1,windowsHide:!0,detached:ce(),env:GM(n),stdio:["ignore","pipe","pipe"]}),c="",u="",d=!1;l.stdout.on("data",m=>{c=cv(c,m)}),l.stderr.on("data",m=>{u=cv(u,m)});let p=setTimeout(()=>{d=!0,l.pid&&Ne(l.pid,"SIGKILL")},t);l.once("error",m=>{clearTimeout(p),s(m)}),l.once("close",m=>{clearTimeout(p),d?s(new Error("process_timeout")):o({code:m,stdout:c,stderr:u})})})}function YM(e,r){let[t,n]=r.split("-",2);return!n||!["sha256","sha384","sha512"].includes(t)?!1:UM(t).update(e).digest("base64")===n}async function qM(e,r,t,n){let o=await fv(mv(),["pack",`${e}@${r}`,"--json","--pack-destination",n,`--registry=${lu}`,"--ignore-scripts"],cu,pn.join(n,"npm-cache"));if(o.code!==0)throw new Error("artifact_download_failed");let s;try{s=JSON.parse(o.stdout)}catch{throw new Error("artifact_receipt_invalid")}let i=s[0]?.filename;if(typeof i!="string"||pn.basename(i)!==i)throw new Error("artifact_receipt_invalid");let a=pn.join(n,i);if(!YM(await pv(a),t))throw new Error("artifact_integrity_mismatch");return a}async function JM(e,r,t){if((await fv(mv(),["install","--global","--prefix",e,r,`--registry=${lu}`,"--no-audit","--fund=false"],cu,t)).code!==0)throw new Error("package_install_failed")}async function gv(e){let r=JSON.parse(await pv(e.local.packageJsonPath,"utf8"));if(r.name!==e.report.packageName||typeof r.version!="string")throw new Error("installed_identity_mismatch");return r.version}function zM(e){let r={};for(let t of["PATH","SystemRoot","TEMP","TMP",...e]){let n=process.env[t];n!==void 0&&(r[t]=n)}return r}async function uv(e){if(!e.local.binPath)throw new Error("mcp_binary_missing");await iu(e.local.binPath,au.X_OK).catch(async()=>iu(e.local.binPath,au.R_OK));let r=new jM({command:e.local.binPath,args:[],env:zM(e.local.envAllowlist),stderr:"pipe"}),t=new $M({name:"kynver-managed-update-verifier",version:"1.0.0"}),n;try{await Promise.race([t.connect(r),new Promise((s,i)=>{n=setTimeout(()=>i(new Error("mcp_handshake_timeout")),VM)})]);let o=await t.listTools();return{toolCount:Array.isArray(o.tools)?o.tools.length:0}}finally{n&&clearTimeout(n),await t.close().catch(()=>{})}}async function dv(e,r,t,n,o){let s=await BM(pn.join(KM(),"kynver-mcp-update-"));try{let i=await qM(r,t,n,s);if(await o(),await JM(e.local.prefix,i,pn.join(s,"npm-cache")),await gv(e)!==t)throw new Error("installed_version_mismatch")}finally{await FM(s,{recursive:!0,force:!0})}}async function hv(e,r,t,n={}){if(typeof process.getuid=="function"&&process.getuid()===0)throw new Error("root_execution_refused");if(e.report.inventoryKey!==r.inventoryKey||e.report.inventoryFingerprint!==r.inventoryFingerprint||e.report.packageName!==r.packageName)throw new Error("local_inventory_mismatch");if(r.packageName==="@kynver-app/runtime")throw new Error("runtime_self_update_requires_supervisor");await t("preflight"),await iu(e.local.prefix,au.W_OK).catch(()=>{throw new Error("npm_prefix_not_writable")});let o=await gv(e),s=r.resumePhase!==null&&o===r.targetVersion,i=s&&n.recoveryVerifiedTargetInstalled===!0;if(!i&&o!==r.installedVersion&&!s)throw new Error("installed_version_changed");try{if(i?await t("installing"):(await dv(e,r.packageName,r.targetVersion,r.targetIntegrity,async()=>{await t("installing"),await n.beforePackageMutation?.()}),await n.onTargetInstalled?.()),e.local.lifecycle!=="runtime_stdio")return{outcome:"manual_restart_required",observedVersion:r.targetVersion,handshakeVerified:!1,toolCount:null,failureCode:"external_supervisor_restart_required"};await t("restarting"),await t("verifying");let a=await uv(e);return{outcome:"succeeded",observedVersion:r.targetVersion,handshakeVerified:!0,toolCount:a.toolCount}}catch(a){let l=a instanceof Error?a.message:"update_failed";if(l==="progress_rejected")throw a;if(!r.rollbackIntegrity)return{outcome:"failed",observedVersion:null,handshakeVerified:!1,toolCount:null,failureCode:l};await n.beforePackageMutation?.();try{if(await dv(e,r.packageName,r.installedVersion,r.rollbackIntegrity,async()=>{await n.beforePackageMutation?.()}),e.local.lifecycle==="runtime_stdio"){let c=await uv(e);return{outcome:"rollback_succeeded",observedVersion:r.installedVersion,handshakeVerified:!0,toolCount:c.toolCount,failureCode:l}}return{outcome:"manual_restart_required",observedVersion:r.installedVersion,handshakeVerified:!1,toolCount:null,failureCode:l}}catch(c){if(c instanceof Error&&c.message==="progress_rejected")throw c;return{outcome:"rollback_failed",observedVersion:null,handshakeVerified:!1,toolCount:null,failureCode:l}}}}import{randomBytes as pu}from"node:crypto";import{mkdir as mu,readFile as fu,rename as oD,rm as Wi,stat as sD,writeFile as bv}from"node:fs/promises";import _t from"node:path";import{createHmac as XM,timingSafeEqual as QM}from"node:crypto";import{mkdir as ZM,readFile as eD,rename as rD,writeFile as tD}from"node:fs/promises";import{homedir as nD}from"node:os";import uu from"node:path";function du(){return process.env.KYNVER_MCP_UPDATE_STATE_ROOT?.trim()||uu.join(nD(),".kynver","state","mcp-updates")}function kv(e){if(!/^[A-Za-z0-9_-]{8,128}$/.test(e))throw new Error("invalid update operation identity");return uu.join(du(),`${e}.json`)}function yv(e,r){let t=su(r);return t?XM("sha256",Buffer.from(t.tokenHash,"hex")).update(JSON.stringify(e),"utf8").digest("base64url"):null}async function Rv(e,r){try{let t=JSON.parse(await eD(kv(e),"utf8"));if(t.version!==2||t.operationId!==e||typeof t.integrityMac!="string")return null;let{integrityMac:n,...o}=t,s=yv(o,r);if(!s)return null;let i=Buffer.from(n,"utf8"),a=Buffer.from(s,"utf8");return i.length!==a.length||!QM(i,a)?null:t}catch{return null}}async function vv(e,r){let t=yv(e,r);if(!t)throw new Error("invalid_runner_credential_for_receipt");let n=kv(e.operationId);await ZM(uu.dirname(n),{recursive:!0,mode:448});let o=`${n}.${process.pid}.tmp`;await tD(o,`${JSON.stringify({...e,integrityMac:t},null,2)}
+`,{mode:384}),await rD(o,n)}var iD="host-mutation.lock";function Sv(){return _t.join(du(),iD)}async function wv(){try{let e=JSON.parse(await fu(_t.join(Sv(),"owner.json"),"utf8"));return!Number.isSafeInteger(e.pid)||typeof e.acquiredAt!="string"?null:{holder:e.holder==="desktop_update"?"desktop_update":"mcp_update",pid:e.pid,acquiredAt:e.acquiredAt,alive:xv(e.pid)}}catch{return null}}function xv(e){if(!Number.isSafeInteger(e)||e<=0)return!0;try{return process.kill(e,0),!0}catch(r){return r.code==="EPERM"}}async function aD(e){try{return await sD(e),!0}catch(r){if(r.code==="ENOENT")return!1;throw r}}async function _v(){return lD("mcp_update")}async function lD(e){let r=Sv(),t=`${r}.reclaiming`;await mu(_t.dirname(r),{recursive:!0,mode:448});let n=!1;try{if(await aD(t))return null;for(let o=0;o<2;o+=1)try{await mu(r,{mode:448});let s={pid:process.pid,nonce:pu(18).toString("base64url"),acquiredAt:new Date().toISOString(),holder:e};return await bv(_t.join(r,"owner.json"),JSON.stringify(s),{mode:384}),n&&(await Wi(t,{recursive:!0,force:!0}),n=!1),{release:async()=>{try{let i=JSON.parse(await fu(_t.join(r,"owner.json"),"utf8"));i.pid===s.pid&&i.nonce===s.nonce&&await Wi(r,{recursive:!0,force:!0})}catch{}}}}catch(s){if(s.code!=="EEXIST")throw s;if(!n)try{await mu(t,{mode:448}),n=!0,await bv(_t.join(t,"owner.json"),JSON.stringify({pid:process.pid,nonce:pu(18).toString("base64url"),acquiredAt:new Date().toISOString()}),{mode:384})}catch(l){if(l.code==="EEXIST")return null;throw l}let i=null;try{i=JSON.parse(await fu(_t.join(r,"owner.json"),"utf8"))}catch{return null}if(xv(i.pid))return null;let a=`${r}.stale-${process.pid}-${pu(8).toString("hex")}`;await oD(r,a),await Wi(a,{recursive:!0,force:!0})}return null}finally{n&&await Wi(t,{recursive:!0,force:!0})}}function Li(e,r,t){return`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/mcp-updates/${t}`}function cD(e){if(!e||typeof e!="object")return null;let r=e.claim;if(!r||typeof r!="object"||r.waitingForIdle!==!1)return null;let t=r.command;return t&&typeof t=="object"?t:null}function Ev(e,r){let t=r.claims;return e.inventoryKey===t.inventoryKey&&e.packageName===t.packageName&&e.installedVersion===t.installedVersion&&e.targetVersion===t.targetVersion&&e.targetIntegrity===t.targetIntegrity&&e.rollbackIntegrity===t.rollbackIntegrity&&e.item.report.inventoryKey===t.inventoryKey&&e.item.report.packageName===t.packageName}function uD(e,r){return{inventoryKey:r.claims.inventoryKey,packageName:r.claims.packageName,installedVersion:r.claims.installedVersion,targetVersion:r.claims.targetVersion,targetIntegrity:r.claims.targetIntegrity,rollbackIntegrity:r.claims.rollbackIntegrity,verifiedTargetInstalled:!1,item:e}}async function Cv(e){let r=Q(e.baseUrl),t=await iv();if(t.length===0)return{ok:!0,stage:"not_configured"};let n=await ct(Li(r,e.agentOsId,"inventory"),e.secret,{items:t.map(s=>s.report)});if(!n.ok)return{ok:!1,stage:"inventory",status:n.status};let o=await _v();if(!o){let s=await wv();return{ok:!0,stage:"host_mutation_busy",...s?{heldBy:s.holder}:{}}}try{let s=await ct(Li(r,e.agentOsId,"claim"),e.secret,{activeOwnedSessions:e.activeOwnedSessions});if(!s.ok)return{ok:!1,stage:"claim",status:s.status};let i=cD(s.response);if(!i)return{ok:!0,stage:"idle"};if(!av(i,e.secret,e.agentOsId))return{ok:!1,stage:"command_auth"};let a=await Rv(i.claims.operationId,e.secret);if(a?.terminal&&a.attempt===i.claims.attempt&&a.nonce===i.claims.nonce)return{ok:!0,stage:"already_completed",outcome:a.outcome};let l,c;if(i.claims.resumePhase!==null){if(!a||!Ev(a.recovery,i))return{ok:!1,stage:"recovery_receipt_invalid"};c=a.recovery,l={...c.item,report:{...c.item.report,inventoryFingerprint:i.claims.inventoryFingerprint}}}else{let g=t.find(h=>h.report.inventoryKey===i.claims.inventoryKey);if(!g||g.report.inventoryFingerprint!==i.claims.inventoryFingerprint)return{ok:!1,stage:"inventory_changed"};l=g,c=a&&Ev(a.recovery,i)?a.recovery:uD(g,i)}let u=a?.acceptedAt??new Date().toISOString(),d=async(g,h,w)=>{await vv({version:2,operationId:i.claims.operationId,attempt:i.claims.attempt,nonce:i.claims.nonce,acceptedAt:u,phase:g,terminal:h,...w?{outcome:w}:{},recovery:c},e.secret)};await d(a?.attempt===i.claims.attempt?a.phase:"claimed",!1);let p="claimed",m=async g=>{if(!(await ct(Li(r,e.agentOsId,`operations/${encodeURIComponent(i.claims.operationId)}/events`),e.secret,{attempt:i.claims.attempt,fenceToken:i.claims.fenceToken,phase:g})).ok)throw new Error("progress_rejected");p=g,await d(g,!1)},f=g=>m(g),y=()=>m(p),k;try{k=await hv(l,i.claims,f,{recoveryVerifiedTargetInstalled:c.verifiedTargetInstalled,beforePackageMutation:y,onTargetInstalled:async()=>{c={...c,verifiedTargetInstalled:!0},await d("target_installed",!1)}})}catch(g){k={outcome:"failed",observedVersion:null,handshakeVerified:!1,toolCount:null,failureCode:g instanceof Error?g.message:"update_failed"}}let b=await ct(Li(r,e.agentOsId,`operations/${encodeURIComponent(i.claims.operationId)}/complete`),e.secret,{attempt:i.claims.attempt,fenceToken:i.claims.fenceToken,...k});return b.ok?(await d(k.outcome,!0,k.outcome),{ok:k.outcome==="succeeded",stage:"complete",outcome:k.outcome}):{ok:!1,stage:"complete",status:b.status,outcome:k.outcome}}finally{await o.release()}}function dD(){let e=process.env.KYNVER_PIPELINE_SWEEP_ENABLED;return e?e==="1"||e.toLowerCase()==="true":!1}async function pD(e,r){let t=q(e),n=[],o=Math.max(0,Number.parseInt(process.env.KYNVER_PIPELINE_COMPLETION_REPLAY_MAX_DEEP_CHECKS_PER_TICK??"0",10)||0),s=0;for(let i of Object.keys(t.workers||{})){let a=A(Pv.join(N(t.id),"workers",x(i),"worker.json"),void 0);if(!a?.taskId||a.localOnly||$r(a))continue;if(ro(a)){n.push({worker:i,ok:!0,taskId:a.taskId??null,skipped:!0});continue}if(s>=o)break;s++;let l=J(a);if(!Se(l))continue;let c=Dt({alive:l.alive,finalResult:l.finalResult,changedFiles:l.changedFiles,gitAncestry:l.gitAncestry});if(!a.dispatched&&!l.finalResult&&!c?.salvageable)continue;let u=await ho({run:e,name:i,agentOsId:String(r.agentOsId||a.agentOsId||""),...r});n.push({worker:i,ok:u.ok,taskId:a.taskId??null})}return n}async function mD(e,r,t,n,o){let s=Q(n.baseUrl?String(n.baseUrl):void 0),i=await ee(n.secret?String(n.secret):void 0,e,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(e)}/operator/tick`,l=await NR(),c=Ss(r),u=null;try{let E=GR(r);if(E.length>0){let S=XR(r);u=HR(E,{cache:S}),S.flush?.()}else u=null}catch{u=null}try{if(Dr()!=="off"){let E=Bt();lh({liveWorkers:E}),ph({liveWorkers:E})}else ih()}catch{}let d=({runId:E,workerName:S})=>{try{let{runsDir:_}=le(),K=Pv.join(xr(_,x(E)),"workers",x(S),"worker.json"),$=A(K,null);return $?$r($):!1}catch{return!1}};await ey({agentOsId:e,baseUrl:s,secret:i,hasLiveWorker:d});let p=null;try{p=nv({hasLiveWorker:d})}catch{p=null}let m=null;try{m=Lu({control:It(e),supervisor:Ku(),inFlightWorkers:Bt().length})}catch{m=null}let f=ev(r),y=Eu(),k=await X(a,i,{agentOsId:e,runId:r,ingestHarness:!0,harnessBoardSnapshot:ic(r),resourceGate:t,boxResourceSnapshot:uy(t,{harnessRunId:r,boxKind:kr(F())}),packageVersions:l,...o?{harnessCleanup:o}:{},runnerPresence:Be({runId:r}),activeHarnessWorkers:c,...f?.leaseToken?{meshCronLeaseToken:f.leaseToken}:{},...p?{localRunStore:p}:{},...m?{runtimeControlAck:m}:{},...y?{daemonEventLoop:y}:{},...u&&u.items.length>0?{providerEvidence:u.items}:{}},{agentOsId:e,baseUrl:s}),b=JR(k.response);if(b)try{YR(r,b)}catch{}let g=tv(k);if(g)try{rv(r,g)}catch{}let h=qg(k);h&&Jg(e,h);let w=Mu(k);return w&&Wu(e,w),{ok:k.ok,httpStatus:k.status,response:k.response,...u?{providerEvidence:{attempted:u.attempted,collected:u.collected,skipped:u.skipped.length}}:{}}}async function Av(e){let r=String(gr(String(e.run||""),"--run")),t=String(gr(String(e.agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false";ic(r);let o=await _s(t,e),s=xs(o),i=Nn({runId:r,configuredMaxWorkersOverride:s}),a=IR()?AR(r):void 0,l=await mD(t,r,i,e,a),c;if(n)try{let C=Q(e.baseUrl?String(e.baseUrl):void 0),re=await ee(e.secret?String(e.secret):void 0,t,{baseUrl:C});c=await Cv({agentOsId:t,secret:re,baseUrl:C,activeOwnedSessions:Bt().length})}catch(C){c={ok:!1,stage:"cycle",error:C instanceof Error?C.message:"update cycle failed"}}let u=Tg(r,l),d=await Nf(r,e),p=await pD(r,e);p.some(C=>C.ok&&!C.skipped)&&iy();let m=Nn({runId:r,configuredMaxWorkersOverride:s}),f=zk(),y=await my(r,e),k=Tk(m,l),b=k.maxStarts,g=It(t),h=Uu(g);h&&(b=0);let w=dD()?await dy({run:r,agentOsId:t,pipeline:!0,...e}):{ok:!0,skipped:!0,reason:"pipeline_sweep_disabled"},E=null,S=0,_=Ok(l),K=b;if(n&&K>0&&_.length>0){let C=Math.min(K,_.length),re=await Rc({...e,run:r,agentOsId:t,targetTaskIds:_.join(",")},C),he=on(re);S+=he,K=Math.max(0,K-he),E={exactTargetTaskIds:_,exact:re,startedCount:S}}if(n&&K>0){let C=await Rc({...e,run:r,agentOsId:t},K),re=on(C);S+=re,E=E&&typeof E=="object"?{...E,broad:C,startedCount:S}:C}else!n||b<=0?E||(E={ok:!0,skipped:!0,reason:h??(n?m.reason??"no slots or queued work":"execute disabled"),maxStarts:0,dispatchAdvice:k,..._.length?{exactTargetTaskIds:_,exactOnly:!0}:{}}):E&&typeof E=="object"&&(E={...E,broadSkipped:!0,startedCount:S});let $=!k.underutilized&&b===0&&p.length===0&&S===0;return{runId:r,agentOsId:t,execute:n,resourceGate:i,dispatchResourceGate:m,leaseRenewal:d,completedWorkers:p,staleReconcile:f,harnessCleanup:a,planProgressSync:y,completionAckSync:u,operatorTick:l,mcpUpdates:c,sweep:w,dispatchAdvice:k,dispatch:E,idle:$,runtimeControl:g?{desiredState:g.desiredState,policyVersion:g.policyVersion}:null}}kn();Ft();kn();function Iv(e){return Wo(It(e))!=="stopped"?null:Bt().length}function Ov(e){if(!e||typeof e!="object")return!1;let r=e;return r.type==="tick"&&typeof r.id=="number"&&typeof r.agentOsId=="string"&&!!r.args&&typeof r.args=="object"}function fD(e){e&&(ly({admission:e.admission,ownerKind:e.ownerKind}),Fu(e.ownerKind))}async function gD(e,r={}){try{e.instructionBundle&&Pu(e.instructionBundle.bundle,e.instructionBundle.source),_u(e.eventLoopReport);let t=await(r.runTick??Av)(e.args),n=(r.countInFlightWorkers??Iv)(e.agentOsId);return{type:"result",id:e.id,ok:!0,tick:JSON.parse(JSON.stringify(t)),inFlightWorkers:n}}catch(t){return{type:"result",id:e.id,ok:!1,error:t instanceof Error?t.message:String(t)}}}function Tv(e,r,t={}){fD(r);let n=Promise.resolve();e.on("message",o=>{Ov(o)&&(n=n.then(async()=>{e.postMessage(await gD(o,t))}))})}Nv?Tv(Nv,hD):(console.error(JSON.stringify({event:"daemon_tick_thread_misuse",error:"must run as a worker thread"})),process.exitCode=1);