@kynver-app/runtime 0.2.23 → 0.2.28

package/dist/local-run-store/surface-flags.d.ts

@@ -1,47 +0,0 @@
-/**
- * Durable-harness D0 — per-surface migration flags for the local run store.
- *
- * Every surface migrates independently through `off` (default — today's
- * behavior, byte-identical) → `shadow` (store written alongside the existing
- * path; existing path authoritative; divergences counted) → `enforce` (store
- * authoritative for the LOCAL decision). Unknown/empty values resolve to
- * `off` with a recorded warning — a typo must never silently enable a mode.
- *
- * D0 lands the parser only; no surface consults its flag yet.
- */
-export type LocalRunStoreSurfaceMode = "off" | "shadow" | "enforce";
-export type LocalRunStoreSurfaceKey = "dispatchReceipts" | "admission" | "planOutbox" | "keeper" | "meshLease" | "quota";
-export interface LocalRunStoreSurfaceDefinition {
-    key: LocalRunStoreSurfaceKey;
-    env: string;
-    /** Plan milestone that wires the surface (operator orientation). */
-    milestone: string;
-}
-export declare const LOCAL_RUN_STORE_SURFACES: readonly LocalRunStoreSurfaceDefinition[];
-export type LocalRunStoreSurfaceFlags = Record<LocalRunStoreSurfaceKey, LocalRunStoreSurfaceMode>;
-/** Where each surface's effective mode came from (confirmation loop). */
-export type LocalRunStoreSurfaceFlagSource = "env" | "server" | "default";
-export interface ResolvedLocalRunStoreSurfaceFlags {
-    flags: LocalRunStoreSurfaceFlags;
-    sources: Record<LocalRunStoreSurfaceKey, LocalRunStoreSurfaceFlagSource>;
-    /** One entry per env var whose value was set but not a recognized mode. */
-    warnings: string[];
-}
-export declare function parseLocalRunStoreSurfaceMode(raw: string | undefined | null): {
-    mode: LocalRunStoreSurfaceMode;
-    unknown: boolean;
-};
-/**
- * Effective per-surface modes with precedence
- * env (explicitly set) > server-delivered policy > default `off`.
- *
- * The env var is the host-level override and local emergency brake; on the
- * normal box (env unset everywhere) the server-delivered policy governs —
- * boxes are administered from the backend, never by shell access
- * (`remote-surface-flags.ts`). An UNKNOWN env value still wins the
- * precedence as `off` (a typo must fail safe, not silently fall through to
- * a server-delivered `enforce`).
- */
-export declare function resolveLocalRunStoreSurfaceFlags(env?: NodeJS.ProcessEnv): ResolvedLocalRunStoreSurfaceFlags;
-/** True when any surface is past `off` (store activity expected on this host). */
-export declare function anyLocalRunStoreSurfaceActive(flags: LocalRunStoreSurfaceFlags): boolean;

package/dist/local-run-store/tick-posture.d.ts

@@ -1,27 +0,0 @@
-import { type LocalRunStoreSurfaceFlags } from "./surface-flags.js";
-export interface LocalRunStoreTickPosture {
-    contractVersion: 1;
-    observedAt: string;
-    /** `open` | `unavailable` (a tick posture always probes, so never `unopened`). */
-    state: "open" | "unavailable" | "unopened";
-    schemaVersion: number | null;
-    /** True when this open had to quarantine a corrupt db and rebuild. */
-    recovered: boolean;
-    /** Failure class when unavailable (error name only — no message payload). */
-    unavailableClass: string | null;
-    flags: LocalRunStoreSurfaceFlags;
-    /** Where each effective mode came from — env override, server policy, or default. */
-    flagSources: Record<string, "env" | "server" | "default">;
-    flagWarningCount: number;
-    /** Per-surface shadow divergence counters (D1+; empty in D0). */
-    divergenceCounters: Record<string, number>;
-}
-export declare function buildLocalRunStoreTickPosture(options?: {
-    env?: NodeJS.ProcessEnv;
-    now?: () => Date;
-    /** Liveness probe for the stranded-claim scan (injected to avoid run-store cycles). */
-    hasLiveWorker?: (intent: {
-        runId: string;
-        workerName: string;
-    }) => boolean;
-}): LocalRunStoreTickPosture;

package/dist/material-worktree-changes.d.ts

@@ -1,2 +0,0 @@
-export declare function materialWorktreeChanges(changedFiles: string[]): string[];
-export declare function pathFromGitStatusLine(line: string): string;

package/dist/memory-cost-package-version-guard-enforce.d.ts

@@ -1,10 +0,0 @@
-import { evaluateMemoryCostPackageVersionGuard, type MemoryCostManagedPackageName, type MemoryCostPackageGuardResult } from "./memory-cost-package-version-guard.js";
-export declare function buildMemoryCostPackageGuardInput(input?: {
-    cwd?: string;
-    repoRoot?: string;
-    selfPackageName?: MemoryCostManagedPackageName;
-    selfVersion?: string;
-}): Promise<Parameters<typeof evaluateMemoryCostPackageVersionGuard>[0]>;
-export declare function evaluateMemoryCostPackageGuardAtStartup(input?: Parameters<typeof buildMemoryCostPackageGuardInput>[0]): Promise<MemoryCostPackageGuardResult>;
-export declare function enforceMemoryCostPackageGuardAtStartup(input?: Parameters<typeof buildMemoryCostPackageGuardInput>[0]): Promise<MemoryCostPackageGuardResult>;
-export declare function shouldEnforceMemoryCostPackageGuardCli(scope?: string, action?: string): boolean;

package/dist/memory-cost-package-version-guard.d.ts

@@ -1,49 +0,0 @@
-/** Minimum versions that ship MARM memory cost controls (PR #1159). */
-export declare const MEMORY_COST_PACKAGE_MIN_VERSIONS: {
-    readonly "@kynver-app/runtime": "0.1.83";
-    readonly "@kynver-app/openclaw-agent-os": "0.1.43";
-    readonly "@kynver-app/mcp-agent-os": "0.3.34";
-};
-export type MemoryCostManagedPackageName = keyof typeof MEMORY_COST_PACKAGE_MIN_VERSIONS;
-export declare const MEMORY_COST_MANAGED_PACKAGES: MemoryCostManagedPackageName[];
-export type MemoryCostVersionSource = "self" | "installed" | "repo" | "unknown";
-export interface MemoryCostPackageVersionCandidate {
-    version: string;
-    source: MemoryCostVersionSource;
-    path?: string;
-}
-export interface MemoryCostPackageGuardRow {
-    packageName: MemoryCostManagedPackageName;
-    displayName: string;
-    minimumVersion: string;
-    effectiveVersion: string | null;
-    effectiveSource: MemoryCostVersionSource;
-    ok: boolean;
-    summary: string;
-    remediation: string[];
-}
-export interface MemoryCostPackageGuardResult {
-    ok: boolean;
-    summary: string;
-    packages: MemoryCostPackageGuardRow[];
-}
-/** Parse `major.minor.patch`; pre-release/build suffixes are ignored. */
-export declare function parseSemverParts(version: string): [number, number, number] | null;
-/** Returns 1 if a > b, -1 if a < b, 0 if equal or either unparsable. */
-export declare function compareSemver(a: string, b: string): number;
-export declare function semverAtLeast(version: string, minimum: string): boolean;
-export declare function probeRepoPackageVersions(input?: {
-    cwd?: string;
-    repoRoot?: string;
-}): Partial<Record<MemoryCostManagedPackageName, MemoryCostPackageVersionCandidate>>;
-export declare function evaluateMemoryCostPackageVersionGuard(input?: {
-    installed?: Partial<Record<MemoryCostManagedPackageName, string | MemoryCostPackageVersionCandidate>>;
-    repo?: Partial<Record<MemoryCostManagedPackageName, string | MemoryCostPackageVersionCandidate>>;
-    self?: Partial<Record<MemoryCostManagedPackageName, string | MemoryCostPackageVersionCandidate>>;
-}): MemoryCostPackageGuardResult;
-export declare class MemoryCostPackageVersionGuardError extends Error {
-    readonly result: MemoryCostPackageGuardResult;
-    constructor(result: MemoryCostPackageGuardResult);
-}
-export declare function assertMemoryCostPackageVersionGuard(input?: Parameters<typeof evaluateMemoryCostPackageVersionGuard>[0]): MemoryCostPackageGuardResult;
-export declare function formatMemoryCostPackageGuardError(result: MemoryCostPackageGuardResult): string;

package/dist/mesh-liveness/mesh-cron-lease-store.d.ts

@@ -1,9 +0,0 @@
-export interface PersistedMeshCronLease {
-    leaseToken: string | null;
-    holderBoxId: string | null;
-    authorized: boolean;
-    updatedAt: string;
-}
-export declare function loadPersistedMeshCronLease(runId: string): PersistedMeshCronLease | null;
-export declare function persistMeshCronLease(runId: string, input: Pick<PersistedMeshCronLease, "leaseToken" | "holderBoxId" | "authorized">): void;
-export declare function extractMeshLivenessFromOperatorTickResponse(operatorTick: unknown): PersistedMeshCronLease | null;

package/dist/model-routing-task-enrich.d.ts

@@ -1,8 +0,0 @@
-/** Enrich dispatch task metadata with `roleLane` when the board row omits it. */
-/**
- * Best-effort plan role lane from persona, title, and executorRef.
- * Returns undefined when nothing confident matches.
- */
-export declare function inferRoleLaneFromTask(task: Record<string, unknown>): string | undefined;
-/** Attach inferred `roleLane` so `inferModelRoutingFromTask` can use plan-lane rules. */
-export declare function enrichTaskForModelRouting(task: Record<string, unknown>): Record<string, unknown>;

package/dist/model-routing.d.ts

@@ -1,49 +0,0 @@
-import { type KynverUserConfig } from "./config.js";
-import type { OrchestrationProviderInventory } from "./orchestration-providers/inventory.js";
-import type { OrchestrationRoutingAudit } from "./orchestration-providers/types.js";
-import { CLAUDE_REVIEW_MODEL } from "./providers/claude.js";
-export { CLAUDE_REVIEW_MODEL };
-/** Conservative default — Sonnet for ordinary harness work (not Opus). */
-export declare const GLOBAL_DEFAULT_MODEL = "claude-sonnet-4-6";
-export declare const CURSOR_DEFAULT_MODEL = "composer-2.5";
-export interface ModelRoutingDecision {
-    /** Model id passed to the provider CLI (undefined → provider default). */
-    model?: string;
-    /** Worker provider key (`claude` | `cursor` | `codex`). */
-    provider: string;
-    /** Audit trail for Command Center / worker.json. */
-    rule: string;
-    /** Original task/board model request when inferred from metadata. */
-    requestedModel?: string;
-    /** Provider/auth/cost audit for orchestration routing (no secrets). */
-    orchestrationAudit?: OrchestrationRoutingAudit;
-}
-/** Resolve global default: config → env → Sonnet. */
-export declare function resolveGlobalDefaultModel(config?: KynverUserConfig): string;
-/**
- * Resolve which Claude model to use when a task explicitly requests the claude provider.
- * Review/gate/critique lanes → Opus 4.8; all other lanes (implementation, repair, plan, etc.) → Sonnet 4.6.
- * Invariant: implementation must never silently receive Opus, review must never silently receive Sonnet.
- */
-export declare function resolveClaudeFactoryModel(roleLane: string, ref: string, title: string): string;
-/**
- * Infer model + provider from AgentOS task metadata when the dispatcher did not
- * pass an explicit `--model`. Explicit CLI/model args always win.
- */
-export declare function inferModelRoutingFromTask(task: Record<string, unknown>): ModelRoutingDecision;
-/** Resolve launch parameters: explicit CLI wins, then executorRef intent, then task inference. */
-export declare function resolveWorkerLaunch(input: {
-    explicitModel?: string;
-    explicitProvider?: string;
-    /** When true, `--provider claude` is honored without a task-level override. */
-    explicitProviderIsOperatorOverride?: boolean;
-    task?: Record<string, unknown>;
-    /**
-     * Pre-built provider inventory for the orchestration overlay. Callers that
-     * already probed bindings (or tests) pass this so routing does not re-probe
-     * the live host CLIs.
-     */
-    orchestrationInventory?: OrchestrationProviderInventory | null;
-}): ModelRoutingDecision;
-/** Fallback chain tail after provider start — never hard-code Opus here. */
-export declare function resolveModelFallback(startedModel: string | undefined, launchModel: string | undefined, providerDefault: string | undefined): string;

package/dist/monitor/index.d.ts

@@ -1,7 +0,0 @@
-export type { AutoCompleteAssessment, MonitorListEntry, MonitorSessionRecord, MonitorTickResult, TaskLeaseSnapshot, WorkerHealthClass, WorkerMonitorView, } from "./monitor.types.js";
-export { classifyWorkerHealth, type WorkerHealthClassification } from "./monitor.classify.js";
-export { assessAutoCompleteEligibility } from "./monitor.terminal.js";
-export { getMonitorStatus, listMonitors, monitorAutoCompleteCli, runMonitorTick, stopMonitor, } from "./monitor.service.js";
-export { spawnMonitorSidecar, type SpawnedMonitor, type SpawnMonitorOptions } from "./monitor-spawn.js";
-export { runMonitorLoop } from "./monitor-loop.js";
-export { deleteMonitorSession, loadMonitorSession, monitorIdFor, saveMonitorSession, } from "./monitor.store.js";

package/dist/monitor/monitor-cli.d.ts

@@ -1,9 +0,0 @@
-import { getMonitorStatus, listMonitors, monitorAutoCompleteCli, runMonitorTick, stopMonitor } from "./monitor.service.js";
-import type { StartMonitorResult } from "./monitor.service.js";
-export declare function startMonitorCli(args: Record<string, string | boolean>): Promise<StartMonitorResult>;
-export declare function monitorStatusCli(args: Record<string, string | boolean>): Promise<void>;
-export declare function monitorStopCli(args: Record<string, string | boolean>): void;
-export declare function monitorListCli(): void;
-export declare function monitorRunLoopCli(args: Record<string, string | boolean>): Promise<void>;
-export declare function monitorTickCli(args: Record<string, string | boolean>): Promise<void>;
-export { monitorAutoCompleteCli, startMonitorCli as startMonitor, getMonitorStatus, listMonitors, runMonitorTick, stopMonitor, };

package/dist/monitor/monitor-loop.d.ts

@@ -1 +0,0 @@
-export declare function runMonitorLoop(args: Record<string, string | boolean>): Promise<void>;

package/dist/monitor/monitor-spawn.d.ts

@@ -1,18 +0,0 @@
-import type { MonitorSessionRecord } from "./monitor.types.js";
-export interface SpawnMonitorOptions {
-    runId: string;
-    workerName?: string;
-    agentOsId?: string;
-    pollMs?: number;
-    cliPath?: string;
-    nodeExecutable?: string;
-    baseUrl?: string;
-    secret?: string;
-}
-export interface SpawnedMonitor {
-    monitorId: string;
-    pid?: number;
-    logPath: string;
-    session: MonitorSessionRecord;
-}
-export declare function spawnMonitorSidecar(opts: SpawnMonitorOptions): SpawnedMonitor | undefined;

package/dist/monitor/monitor.classify.d.ts

@@ -1,15 +0,0 @@
-import { type HarnessWorkerRecord, type RawHarnessWorkerStatus } from "../status.js";
-import type { TaskLeaseSnapshot, WorkerHealthClass } from "./monitor.types.js";
-export interface WorkerHealthClassification {
-    health: WorkerHealthClass;
-    reason: string;
-}
-/**
- * Classify harness worker disk state vs optional board lease snapshot.
- * `running` on AgentTask means live executor lease — not plan-row `in_progress`.
- */
-export declare function classifyWorkerHealth(input: {
-    worker: HarnessWorkerRecord;
-    status: RawHarnessWorkerStatus;
-    taskLease?: TaskLeaseSnapshot | null;
-}): WorkerHealthClassification;

package/dist/monitor/monitor.service.d.ts

@@ -1,17 +0,0 @@
-import type { MonitorListEntry, MonitorSessionRecord, MonitorTickResult } from "./monitor.types.js";
-/** One monitor poll: classify workers, renew leases, auto-complete when verified terminal. */
-export declare function runMonitorTick(args: Record<string, string | boolean>): Promise<MonitorTickResult>;
-export declare function getMonitorStatus(args: Record<string, string | boolean>): MonitorTickResult;
-export declare function listMonitors(): MonitorListEntry[];
-export interface StartMonitorResult {
-    monitorId: string;
-    session: MonitorSessionRecord;
-    spawned: boolean;
-    pid?: number;
-}
-export declare function stopMonitor(args: Record<string, string | boolean>): {
-    monitorId: string;
-    stopped: boolean;
-    pid?: number;
-};
-export declare function monitorAutoCompleteCli(args: Record<string, string | boolean>): Promise<void>;

package/dist/monitor/monitor.store.d.ts

@@ -1,6 +0,0 @@
-import type { MonitorListEntry, MonitorSessionRecord } from "./monitor.types.js";
-export declare function monitorIdFor(runId: string, workerName?: string): string;
-export declare function loadMonitorSession(monitorId: string): MonitorSessionRecord | undefined;
-export declare function saveMonitorSession(session: MonitorSessionRecord): void;
-export declare function deleteMonitorSession(monitorId: string): boolean;
-export declare function listMonitorSessions(): MonitorListEntry[];

package/dist/monitor/monitor.task-lease.d.ts

@@ -1,11 +0,0 @@
-import type { TaskLeaseSnapshot } from "./monitor.types.js";
-/**
- * Best-effort board lease snapshot for monitor classification. Failures return
- * an empty map — local disk classification still runs without server data.
- */
-export declare function fetchTaskLeasesForWorkers(input: {
-    agentOsId?: string;
-    taskIds: string[];
-    baseUrl?: string;
-    secret?: string;
-}): Promise<Map<string, TaskLeaseSnapshot>>;

package/dist/monitor/monitor.terminal.d.ts

@@ -1,11 +0,0 @@
-import { type HarnessWorkerRecord, type RawHarnessWorkerStatus } from "../status.js";
-import type { AutoCompleteAssessment } from "./monitor.types.js";
-/**
- * Auto-complete may only run when the worker has reached a verified terminal
- * condition and no structural blocker is present. Never paper over heartbeat
- * blockers, landing gates, or completion replay failures.
- */
-export declare function assessAutoCompleteEligibility(input: {
-    worker: HarnessWorkerRecord;
-    status: RawHarnessWorkerStatus;
-}): AutoCompleteAssessment;

package/dist/monitor/monitor.types.d.ts

@@ -1,77 +0,0 @@
-import type { RawHarnessWorkerStatus } from "../status.js";
-/** Local worker health — distinct from AgentTask `running` (live executor lease). */
-export type WorkerHealthClass = "healthy" | "stale" | "orphaned";
-export interface TaskLeaseSnapshot {
-    taskId: string;
-    /** AgentTask.status — `running` means a live executor lease on the board. */
-    status: string;
-    leaseOwner: string | null;
-    leaseToken: string | null;
-    leaseExpiresAt: string | null;
-    heartbeatAt: string | null;
-    blocker: string | null;
-    executorRef?: string | null;
-    attempt?: number | null;
-}
-export interface MonitorSessionRecord {
-    monitorId: string;
-    runId: string;
-    workerName?: string;
-    agentOsId?: string;
-    pid?: number;
-    startedAt: string;
-    stoppedAt?: string;
-    pollMs: number;
-    logPath: string;
-}
-export interface WorkerMonitorView {
-    runId: string;
-    worker: string;
-    health: WorkerHealthClass;
-    healthReason: string;
-    workerStatus: string;
-    attentionState: string;
-    attentionReason: string;
-    alive: boolean;
-    taskId?: string;
-    leaseOwner?: string;
-    taskStatus?: string;
-    autoComplete: AutoCompleteAssessment;
-    status: RawHarnessWorkerStatus;
-}
-export interface AutoCompleteAssessment {
-    eligible: boolean;
-    terminalVerified: boolean;
-    terminalReason?: string;
-    blockers: string[];
-}
-export interface MonitorTickResult {
-    runId: string;
-    agentOsId?: string;
-    workers: WorkerMonitorView[];
-    leaseRenewal?: {
-        renewed: string[];
-        failed: Array<{
-            worker: string;
-            reason: string;
-        }>;
-        skipped: string[];
-    };
-    autoCompleted: Array<{
-        worker: string;
-        outcome: string;
-        ok: boolean;
-        reason?: string;
-    }>;
-}
-export interface MonitorListEntry {
-    monitorId: string;
-    runId: string;
-    workerName?: string;
-    agentOsId?: string;
-    pid?: number;
-    alive: boolean;
-    startedAt: string;
-    pollMs: number;
-    logPath: string;
-}

package/dist/node-runtime-policy.d.ts

@@ -1,25 +0,0 @@
-/**
- * Node 24 migration N2b — the ONE shared semantic-version policy contract.
- *
- * The comparator takes the engine range as a parameter: one comparison
- * engine, two contracts. Published CLI/MCP artifacts use the unbounded
- * range; the private root app is bounded per-major. Do NOT duplicate this
- * comparison logic anywhere (N2d wraps it; the server diagnostic imports
- * it). During N2b the policy is report-only: callers may classify, but
- * nothing gates startup on the verdict.
- */
-export declare const KYNVER_NODE_PATCH_FLOOR = "24.11.0";
-/** Engine contract for published runtime-coupled packages (unbounded). */
-export declare const PUBLISHED_NODE_RANGE = ">=24.11.0";
-/** Engine contract for the private root app (bounded per qualified major). */
-export declare const PRIVATE_ROOT_NODE_RANGE = ">=24.11.0 <25";
-export type NodeRuntimePolicyStatus = "compatible" | "upgrade_required" | "unsupported_major" | "invalid_version";
-export interface NodeRuntimePolicyVerdict {
-    status: NodeRuntimePolicyStatus;
-    /** Normalized (no leading `v`) version that was evaluated, or the raw input when invalid. */
-    currentVersion: string;
-    requiredRange: string;
-    /** Bounded operator guidance; never environment values or paths. */
-    remediation: string | null;
-}
-export declare function evaluateNodeRuntimePolicy(rawVersion: string, requiredRange?: string): NodeRuntimePolicyVerdict;

package/dist/orchestration-enforcement/config.d.ts

@@ -1,5 +0,0 @@
-import type { OrchestrationPolicyMode } from "./types.js";
-/** Resolve orchestration policy mode from env (default off — local fallback preserved). */
-export declare function resolveOrchestrationPolicyMode(env?: NodeJS.ProcessEnv): OrchestrationPolicyMode;
-/** Feature gate for enforce-mode linked AgentTask creation (default false until explicitly on). */
-export declare function isOrchestrationEnforceTasksEnabled(env?: NodeJS.ProcessEnv): boolean;

package/dist/orchestration-enforcement/evaluator.d.ts

@@ -1,6 +0,0 @@
-import type { OrchestrationPolicyEvaluateInput, OrchestrationPolicyEvaluateResult } from "./types.js";
-/**
- * Evaluate whether a foreground orchestration action should stay local, be
- * observed (logged bypass), or route through linked harness AgentTask creation.
- */
-export declare function evaluateOrchestrationPolicy(input: OrchestrationPolicyEvaluateInput, env?: NodeJS.ProcessEnv): OrchestrationPolicyEvaluateResult;

package/dist/orchestration-enforcement/idempotency.d.ts

@@ -1,8 +0,0 @@
-/** Deterministic foreground harness task idempotency key for Hermes/Forge sessions. */
-export declare function buildForegroundHarnessIdempotencyKey(input: {
-    sessionId?: string | null;
-    planId?: string | null;
-    parentTaskId?: string | null;
-    title?: string | null;
-    action?: string | null;
-}): string;

package/dist/orchestration-enforcement/index.d.ts

@@ -1,4 +0,0 @@
-export * from "./types.js";
-export * from "./config.js";
-export * from "./idempotency.js";
-export * from "./evaluator.js";

package/dist/orchestration-enforcement/types.d.ts

@@ -1,24 +0,0 @@
-/** Kynver-first foreground orchestration policy — observe before enforce. */
-export declare const ORCHESTRATION_POLICY_MODES: readonly ["off", "observe", "enforce"];
-export type OrchestrationPolicyMode = (typeof ORCHESTRATION_POLICY_MODES)[number];
-export declare const ORCHESTRATION_ACTION_KINDS: readonly ["foreground_harness_spawn", "shell_platform_dispatch"];
-export type OrchestrationActionKind = (typeof ORCHESTRATION_ACTION_KINDS)[number];
-export declare const ORCHESTRATION_POLICY_DECISIONS: readonly ["allow_local", "observe_bypass", "enforce_harness_task"];
-export type OrchestrationPolicyDecision = (typeof ORCHESTRATION_POLICY_DECISIONS)[number];
-export interface OrchestrationPolicyEvaluateInput {
-    action: OrchestrationActionKind;
-    toolName?: string | null;
-    sessionId?: string | null;
-    planId?: string | null;
-    parentTaskId?: string | null;
-    title?: string | null;
-    description?: string | null;
-}
-export interface OrchestrationPolicyEvaluateResult {
-    mode: OrchestrationPolicyMode;
-    decision: OrchestrationPolicyDecision;
-    /** Stable idempotency key when enforce would create a linked harness task. */
-    idempotencyKey: string | null;
-    bypassLogged: boolean;
-    reason: string;
-}

package/dist/orchestration-providers/adapter-contract.d.ts

@@ -1,50 +0,0 @@
-/**
- * Adapter context-envelope contract schema.
- *
- * Declares what ContextEnvelope fields each orchestration adapter can
- * consume when a harness worker is dispatched. Used by the server-side
- * context-envelope policy router
- * (src/modules/agent-os/context-envelope-policy/) to validate and record
- * what fields were routed before worker spawn.
- *
- * The canonical parity invariant: kynver-harness and hermes share the
- * same context_envelope_* capabilities so that Kynver-native workers
- * receive the same goal/plan/task/memory context as Hermes-dispatched
- * workers. Kynver-harness additionally supports instruction_policy,
- * persona_context, and memory_quality_capture for richer local context.
- */
-/** Fields from the AgentOS ContextEnvelope that an adapter can consume. */
-export type AdapterContextCapability = "instruction_policy" | "persona_context" | "memory_quality_capture" | "context_envelope_goal" | "context_envelope_plan" | "context_envelope_task" | "context_envelope_memories" | "context_envelope_sessions" | "context_envelope_persona";
-/** Canonical adapter identity for context-envelope policy routing. */
-export type AdapterContextContractId = "kynver-harness" | "hermes" | "cursor" | "codex" | "claude";
-/**
- * Describes what ContextEnvelope capabilities an orchestration adapter
- * can accept at dispatch time. The context-envelope policy router uses
- * this to determine which fields to route and whether dispatch should be
- * blocked due to missing required context.
- */
-export interface AdapterContextContract {
-    adapterId: AdapterContextContractId;
-    displayName: string;
-    /** All capabilities this adapter can consume when present. */
-    capabilities: AdapterContextCapability[];
-    /**
-     * Subset of `capabilities` that must be satisfiable before dispatch
-     * proceeds. An adapter with a required capability for which the
-     * context envelope has no data will produce `shouldBlock: true` in
-     * the policy slice. Most adapters have no required capabilities.
-     */
-    requiredCapabilities: AdapterContextCapability[];
-    /**
-     * How this adapter receives injected context. Operator and developer
-     * reference only — not machine-enforced.
-     */
-    compatibilityNotes: string;
-}
-/**
- * Look up the context-envelope contract for a given adapter. Returns a
- * no-capability contract for unknown adapter IDs so policy routing never
- * throws — it simply records zero satisfied capabilities.
- */
-export declare function getAdapterContextContract(adapterId: string): AdapterContextContract;
-export declare function listAdapterContextContracts(): AdapterContextContract[];

package/dist/orchestration-providers/audit.d.ts

@@ -1,3 +0,0 @@
-import type { OrchestrationRoutingAudit } from "./types.js";
-export declare function sanitizeOrchestrationAudit(audit: OrchestrationRoutingAudit): OrchestrationRoutingAudit;
-export declare function orchestrationAuditForWorkerJson(audit: OrchestrationRoutingAudit): OrchestrationRoutingAudit;

package/dist/orchestration-providers/capabilities.d.ts

@@ -1,3 +0,0 @@
-import type { OrchestrationProviderCapability, OrchestrationProviderId } from "./types.js";
-export declare function getOrchestrationProviderCapability(id: OrchestrationProviderId): OrchestrationProviderCapability;
-export declare function listOrchestrationProviderCapabilities(): OrchestrationProviderCapability[];

package/dist/orchestration-providers/claude-oauth-binding.d.ts

@@ -1,6 +0,0 @@
-import type { OrchestrationProviderBindingStatus } from "./types.js";
-/**
- * Probe Claude Code OAuth on the local runner. Never reads or returns raw OAuth tokens.
- * ANTHROPIC_API_KEY is reported separately as api_key_env (cloud credits path).
- */
-export declare function probeClaudeOAuthBinding(nowIso?: string): OrchestrationProviderBindingStatus;

package/dist/orchestration-providers/codex-oauth-binding.d.ts

@@ -1,5 +0,0 @@
-import type { OrchestrationProviderBindingStatus } from "./types.js";
-/**
- * Probe BYO Codex OAuth on the local runner. Never reads or returns raw OAuth tokens.
- */
-export declare function probeCodexOAuthBinding(nowIso?: string): OrchestrationProviderBindingStatus;

package/dist/orchestration-providers/codex-orchestration-adapter.d.ts

@@ -1,13 +0,0 @@
-import { type HermesOpenAiCodexBindingStatus } from "./hermes-openai-codex-binding.js";
-import type { OrchestrationProviderBindingStatus } from "./types.js";
-/** How low-cost Codex orchestration authenticates on this host. */
-export type CodexOrchestrationPath = "codex_cli" | "hermes_openai_codex" | "none";
-export interface CodexOrchestrationAdapterStatus extends OrchestrationProviderBindingStatus {
-    path: CodexOrchestrationPath;
-    hermesOpenAiCodex?: HermesOpenAiCodexBindingStatus;
-}
-/**
- * Resolve the best local Codex/OpenAI orchestration path: standalone `codex` CLI first,
- * then Hermes-managed `openai-codex` subscription when the CLI is absent or unbound.
- */
-export declare function resolveCodexOrchestrationAdapter(nowIso?: string): CodexOrchestrationAdapterStatus;

package/dist/orchestration-providers/cost-router.d.ts

@@ -1,24 +0,0 @@
-import type { OrchestrationProviderInventory } from "./inventory.js";
-import type { OrchestrationProviderBindingStatus, OrchestrationProviderId, OrchestrationRiskClass } from "./types.js";
-export declare function providerCapableForRisk(providerId: OrchestrationProviderId, riskClass: OrchestrationRiskClass): boolean;
-export declare function compareProviderCandidates(a: {
-    providerId: OrchestrationProviderId;
-    binding: OrchestrationProviderBindingStatus;
-}, b: {
-    providerId: OrchestrationProviderId;
-    binding: OrchestrationProviderBindingStatus;
-}): number;
-export interface CheapestCapableSelection {
-    providerId: OrchestrationProviderId;
-    binding: OrchestrationProviderBindingStatus;
-    escalatedFrom?: OrchestrationProviderId;
-    escalatedReason?: string;
-}
-/**
- * Pick the lowest-cost ready provider that can run the given risk class.
- * Sorts by cost tier, then prefers local OAuth CLI over metered API-key paths.
- */
-export declare function selectCheapestCapableProvider(input: {
-    inventory: OrchestrationProviderInventory;
-    riskClass: OrchestrationRiskClass;
-}): CheapestCapableSelection | null;

package/dist/orchestration-providers/cursor-oauth-binding.d.ts

@@ -1,5 +0,0 @@
-import type { OrchestrationProviderBindingStatus } from "./types.js";
-/**
- * Probe Cursor/Composer OAuth on the local runner. Never reads or returns raw OAuth tokens.
- */
-export declare function probeCursorOAuthBinding(nowIso?: string): OrchestrationProviderBindingStatus;

package/dist/orchestration-providers/hermes-cli-adapter.d.ts

@@ -1,15 +0,0 @@
-import type { OrchestrationAuthSource } from "./types.js";
-export interface HermesCliAdapterStatus {
-    adapterId: "hermes";
-    cliAvailable: boolean;
-    profileBound: boolean;
-    authSource: OrchestrationAuthSource;
-    sessionFingerprint?: string;
-    checkedAt: string;
-    note?: string;
-}
-/**
- * Best-effort Hermes Forge CLI adapter probe. Cloud/API keys in ~/.hermes/.env are
- * reported as api_key_env — distinct from harness worker BYO OAuth inventory.
- */
-export declare function probeHermesCliAdapter(nowIso?: string): HermesCliAdapterStatus;

package/dist/orchestration-providers/hermes-openai-codex-binding.d.ts

@@ -1,15 +0,0 @@
-import type { OrchestrationAuthSource } from "./types.js";
-export type HermesOpenAiCodexPath = "hermes_openai_codex";
-export interface HermesOpenAiCodexBindingStatus {
-    path: HermesOpenAiCodexPath;
-    ready: boolean;
-    authSource: OrchestrationAuthSource;
-    sessionFingerprint?: string;
-    checkedAt: string;
-    note?: string;
-}
-/**
- * Probe Hermes-managed OpenAI Codex subscription (ChatGPT backend-api/codex).
- * Uses exit-code-only `hermes auth status` — never reads auth.json token payloads.
- */
-export declare function probeHermesOpenAiCodexBinding(nowIso?: string): HermesOpenAiCodexBindingStatus;