@kynver-app/runtime 0.2.23 → 0.2.28

package/dist/repo-search.d.ts

@@ -1,53 +0,0 @@
-/**
- * Normalize and classify repo text-search commands for harness operators and chat agents.
- *
- * Codex/OpenClaw often emit `search "pattern" in <scope>` meta that maps poorly to ripgrep
- * (e.g. `in !node_modules` instead of `-g '!node_modules/**'`, or `in package.json` as a path).
- */
-export type RepoSearchKind = "not_repo_search" | "bad_scope" | "rg_exclude_syntax" | "no_matches";
-export interface RepoSearchContext {
-    kind: RepoSearchKind;
-    pattern?: string;
-    target?: string;
-}
-export declare function isSingleFileSearchTarget(target: string | undefined): boolean;
-/** `!node_modules` as a path is invalid — ripgrep needs `-g '!node_modules/**'`. */
-export declare function isRgExcludeScopeTarget(target: string | undefined): boolean;
-export declare function normalizeRgArgv(argv: string[]): {
-    argv: string[];
-    changed: boolean;
-};
-/** Peel `bash -lc '…'` / `sh -c "…"` wrappers so rg normalization sees the inner script. */
-export declare function unwrapShellWrapperCommand(command: string): {
-    command: string;
-    wrapped: boolean;
-};
-export declare function normalizeRepoSearchCommand(command: string): {
-    command: string;
-    changed: boolean;
-};
-export declare function isRgLikeCommand(command: string): boolean;
-/** Ripgrep exit 1 with no error text is a successful read-only search (no matches), not a shell failure. */
-export declare function shouldTreatRgNoMatchAsSuccess(input: {
-    command: string;
-    exitCode?: number;
-    stderr?: string;
-    interleaved?: string;
-}): boolean;
-export declare function extractSearchMeta(meta: string): {
-    pattern?: string;
-    target?: string;
-};
-export declare function classifyRepoSearchMeta(meta: string): RepoSearchContext;
-export declare function metaToNormalizedRgCommand(meta: string): {
-    command: string;
-    changed: boolean;
-} | null;
-export declare function formatRepoSearchGuidance(ctx: RepoSearchContext): string | null;
-/** Extract `search "…" in …` from a tool-failure line or command string. */
-export declare function extractSearchMetaFromToolLine(line: string): string | null;
-export declare function diagnoseRepoSearchFailure(input: {
-    meta?: string;
-    command?: string;
-    exitCode?: number;
-}): string | null;

package/dist/resource-gate.d.ts

@@ -1,74 +0,0 @@
-import { type KynverUserConfig } from "./config.js";
-import type { WorkerCapSource } from "./worker-cap-source.js";
-import type { DispatchNextDiskGateShape } from "./callbacks.js";
-import { workerProcessMatchesRecord } from "./harness-worker-active.js";
-export { workerProcessMatchesRecord };
-/** Default RAM budget per worker (~500 MiB, dogfood measured). Internal — not a setup knob. */
-export declare const DEFAULT_PER_WORKER_MEM_BYTES: number;
-/** Keep headroom for OS / IDE. Internal — not a setup knob. */
-export declare const DEFAULT_MEM_RESERVE_BYTES: number;
-/** Fraction of total RAM used when auto-sizing worker cap. Internal. */
-export declare const DEFAULT_MEM_UTILIZATION = 0.85;
-/** Auto cap when the user has not set maxConcurrentWorkers (safety on huge hosts). */
-export declare const AUTO_MAX_WORKERS_CEILING = 64;
-export interface RunnerResourceGateShape {
-    ok: boolean;
-    totalMemBytes: number;
-    freeMemBytes: number;
-    memReserveBytes: number;
-    perWorkerMemBytes: number;
-    configuredMaxWorkers: number | null;
-    /** Where the effective worker cap was resolved (workspace override, env, config, or auto). */
-    workerCapSource: WorkerCapSource;
-    /** Physical pool for this host (`forge` | `ghost`). */
-    boxKind: string;
-    autoCap: number;
-    capacityWorkers: number;
-    maxConcurrentWorkers: number;
-    activeWorkers: number;
-    slotsAvailable: number;
-    reason: string | null;
-    /** Present unless `KYNVER_RESOURCE_GATE_SKIP_DISK=1`. */
-    diskGate?: DispatchNextDiskGateShape;
-}
-export interface ObserveResourceGateInput {
-    runId: string;
-    config?: KynverUserConfig;
-    /** Command Center / workspace override — wins over local config when set. */
-    configuredMaxWorkersOverride?: number | null;
-    /** Override active worker count (tests). */
-    activeWorkers?: number;
-    totalMemBytes?: number;
-    freeMemBytes?: number;
-    diskPath?: string;
-    skipDiskGate?: boolean;
-}
-/** How many workers this host could run from RAM alone (before a user cap). */
-export declare function computeAutoMaxWorkers(totalMemBytes: number, opts?: {
-    perWorkerMemBytes?: number;
-    memReserveBytes?: number;
-    memUtilization?: number;
-}): number;
-/** Count active workers in ONE run (kept for callers/tests scoped to a run). */
-export declare function countActiveWorkers(runId: string): number;
-/**
- * Count active workers across EVERY run on disk. The harness creates a new run
- * per task, so a per-run count let concurrent runs each believe the machine was
- * idle — the configured cap was never a real global ceiling (the "spawns 4 or
- * infinity, never N" bug). This machine-wide count is what the gate must use.
- */
-export declare function countActiveWorkersGlobal(): number;
-/**
- * Identities of every active worker machine-wide (durable-harness D2a: the
- * admission-shadow reconcile refreshes/releases slot reservations against
- * exactly the records the gate counts).
- */
-export declare function listActiveWorkerIdentitiesGlobal(): Array<{
-    runId: string;
-    workerName: string;
-}>;
-/**
- * Compute how many workers this host can run and how many dispatch slots remain.
- * Uses total RAM for steady-state capacity and free RAM as a hard safety gate.
- */
-export declare function observeRunnerResourceGate(input: ObserveResourceGateInput): RunnerResourceGateShape;

package/dist/retry-limits.d.ts

@@ -1,12 +0,0 @@
-/** Local dispatch retry/cooldown limits. */
-export interface HarnessRetryLimits {
-    /** Advisory max task attempts surfaced to operator/dispatch (default 4, matches AgentOS). */
-    maxTaskAttempts: number;
-    /** Minimum ms between dispatch starts for the same run (default 5s). */
-    dispatchCooldownMs: number;
-}
-/**
- * Precedence: env override → server-delivered instruction bundle threshold →
- * embedded default (M6 — policy values iterate via bundle push, no republish).
- */
-export declare function readHarnessRetryLimits(): HarnessRetryLimits;

package/dist/review-head-reconcile.d.ts

@@ -1,17 +0,0 @@
-export interface ReviewHeadReconcileResponse {
-    ok?: boolean;
-    dispatchable?: boolean;
-    outcome?: string;
-    reason?: string | null;
-    reviewTaskId?: string;
-    activeReviewTaskId?: string | null;
-    reviewTargetSha?: string | null;
-    merged?: boolean;
-}
-export declare function taskLooksLikeReviewDispatch(task: Record<string, unknown>): boolean;
-export declare function reconcileReviewHeadBeforeWorkerStart(input: {
-    agentOsId: string;
-    taskId: string;
-    baseUrl: string;
-    secret: string;
-}): Promise<ReviewHeadReconcileResponse | null>;

package/dist/run-list.d.ts

@@ -1,38 +0,0 @@
-export interface RunListWorkerEvidence {
-    worker: string;
-    workerStatus: string;
-    attention: string;
-    attentionReason?: string;
-    missingHeartbeat: boolean;
-    missingFinalResult: boolean;
-    landingBlocked: boolean;
-    completionBlocked: boolean;
-}
-export type RunListFinalizeBlockedReason = "landing_blocked" | "completion_blocked" | "active_workers" | null;
-export interface RunListRow {
-    id: string;
-    name: string;
-    /** Persisted `run.json` status (updated by `finalizeStaleRuns` after reconcile). */
-    status: string;
-    /** Derived from worker attention/status — aligns with operator board semantics. */
-    effectiveStatus: string;
-    repo: string;
-    createdAt: string;
-    /** Workers still alive without a terminal result. */
-    openWorkerCount: number;
-    /** Highest-severity attention across workers (matches board rollup semantics). */
-    attention: "ok" | "done" | "stale" | "needs_attention" | "blocked";
-    attentionReason?: string;
-    /** Why `finalizeStaleRuns` may keep `status` active while workers are dead. */
-    finalizeBlockedReason: RunListFinalizeBlockedReason;
-    evidence: {
-        missingHeartbeatWorkers: string[];
-        missingFinalResultWorkers: string[];
-        landingBlockedWorkers: string[];
-        completionBlockedWorkers: string[];
-        workers: RunListWorkerEvidence[];
-    };
-}
-export declare function buildRunListRows(): RunListRow[];
-/** `kynver run list` — reconciles stale workers first, then prints run rows (JSON array). */
-export declare function listRunsCli(): void;

package/dist/run-metadata-retention.d.ts

@@ -1,38 +0,0 @@
-/** Recent heartbeat/stdout activity — treat run metadata as live. */
-export declare const RUN_METADATA_ACTIVE_SIGNAL_MS: number;
-export declare const TERMINAL_WORKER_ARCHIVE_AGE_MS: number;
-export interface RunMetadataRetentionOutcome {
-    runId: string;
-    action: "repaired_run_json" | "skipped";
-    reason: string;
-}
-export interface RunMetadataRetentionResult {
-    runs: RunMetadataRetentionOutcome[];
-}
-export interface TerminalWorkerArchiveOutcome {
-    runId: string;
-    worker: string;
-    action: "archived" | "skipped";
-    reason: string;
-    archivePath?: string;
-}
-export interface TerminalWorkerArchiveResult {
-    workers: TerminalWorkerArchiveOutcome[];
-}
-/** True when `targetPath` lives under `{harnessRoot}/runs/` (run + worker metadata). */
-export declare function isHarnessRunMetadataPath(targetPath: string, harnessRoot: string): boolean;
-/** Worker dir still has live process or recent harness artifacts — retain metadata. */
-export declare function workerDirHasActiveRetentionSignals(workerDir: string, now?: number, windowMs?: number): boolean;
-/** Any worker under a run dir still looks active — block metadata deletion/relocation. */
-export declare function runDirHasActiveRetentionSignals(runDir: string, now?: number, windowMs?: number): boolean;
-/**
- * Rebuild missing `run.json` files from on-disk worker dirs so reconcile/status
- * cannot go blind while worker processes or fresh artifacts remain.
- */
-export declare function repairMissingRunMetadata(harnessRootInput?: string): RunMetadataRetentionResult;
-export declare function archiveTerminalWorkerMetadata(harnessRootInput?: string, options?: {
-    archiveAgeMs?: number;
-    now?: number;
-}): TerminalWorkerArchiveResult;
-/** `${harnessRoot}\0${runId}` keys for runs with filesystem active-retention signals. */
-export declare function collectFilesystemLiveRunKeys(harnessRoot: string, now?: number): Set<string>;

package/dist/run-resolve.d.ts

@@ -1,4 +0,0 @@
-import { type RunListRow } from "./run-list.js";
-/** Reconcile stale workers/runs first, then pick a non-completed run by name. */
-export declare function resolveHarnessRunByName(runName: string): RunListRow | null;
-export declare function resolveHarnessRunCli(args: Record<string, string | boolean>): void;

package/dist/run-store.d.ts

@@ -1,38 +0,0 @@
-import type { HarnessWorkerRecord } from "./status.js";
-export interface HarnessRunRecord {
-    id: string;
-    name: string;
-    repo: string;
-    base: string;
-    baseCommit: string;
-    status: string;
-    createdAt: string;
-    workers: Record<string, {
-        workerDir: string;
-        statusPath: string;
-    }>;
-    /** Physical pool that owns this run (`ghost` | `forge`). */
-    boxKind?: string;
-    /** Stable runner id that claimed this run namespace. */
-    runnerId?: string;
-    /** Harness root path isolating this run from other pools. */
-    harnessRoot?: string;
-}
-export declare function getPaths(): {
-    harnessRoot: string;
-    runsDir: string;
-    worktreesDir: string;
-};
-export declare function loadRun(id: string): HarnessRunRecord;
-/**
- * Load every run record on disk. Used for global, cross-run accounting (the
- * resource gate must see workers from ALL runs, and stale-run finalization
- * iterates the whole set). Unreadable/partial run dirs are skipped.
- */
-export declare function listRunRecords(): HarnessRunRecord[];
-export declare function listRunRecordsForHarnessRoot(harnessRoot: string): HarnessRunRecord[];
-export declare function loadWorker(runId: string, name: string): HarnessWorkerRecord;
-export declare function saveRun(run: HarnessRunRecord): void;
-export declare function saveWorker(runId: string, worker: HarnessWorkerRecord): void;
-export declare function runDirectory(id: string): string;
-export declare function runDirectoryAt(harnessRoot: string, id: string): string;

package/dist/run-worker-index.d.ts

@@ -1,10 +0,0 @@
-import { type HarnessRunRecord } from "./run-store.js";
-/**
- * Union of `run.json` worker keys and on-disk worker dirs for one run.
- *
- * Watchdog replenishment can spawn workers whose `worker.json` exists before
- * `run.json` is updated (or when concurrent spawns lose a last-write-wins race).
- * Finalization, capacity gates, and operator rollups must not treat those
- * live workers as absent.
- */
-export declare function listRunWorkerNames(run: HarnessRunRecord): string[];

package/dist/runner-boundary/index.d.ts

@@ -1,6 +0,0 @@
-export * from "./runner-boundary.types.js";
-export * from "./runner-boundary.harness-root.js";
-export * from "./runner-boundary.resolve.js";
-export * from "./runner-boundary.run-guard.js";
-export * from "./runner-boundary.dispatch-guard.js";
-export * from "./runner-boundary.forge-legacy-migration.js";

package/dist/runner-boundary/runner-boundary.dispatch-guard.d.ts

@@ -1,4 +0,0 @@
-import type { RunnerBoundaryIdentity, RunnerBoundaryValidation } from "./runner-boundary.types.js";
-export declare function validateInteractiveDispatchBoundary(env?: NodeJS.ProcessEnv): RunnerBoundaryValidation;
-export declare function formatRunnerBoundaryFailure(validation: RunnerBoundaryValidation): string;
-export declare function assertInteractiveDispatchBoundaryOrThrow(env?: NodeJS.ProcessEnv): RunnerBoundaryIdentity;

package/dist/runner-boundary/runner-boundary.forge-legacy-migration.d.ts

@@ -1,23 +0,0 @@
-export type ForgeLegacyMigrationVerdict = {
-    action: "none";
-} | {
-    action: "migrate";
-} | {
-    action: "blocked";
-    blocker: string;
-};
-/** True when the forge box-scoped root has no harness layout yet. */
-export declare function isForgeScopedHarnessRootEmpty(forgeRoot: string): boolean;
-/** True when the legacy shared harness root still has run records on disk. */
-export declare function legacySharedHarnessHasRuns(sharedRoot: string): boolean;
-/**
- * Ghost is co-hosted when a ghost pool namespace exists or shared runs are
- * attributed to ghost — moving forge legacy content would orphan ghost work.
- */
-export declare function isGhostCoHostedAtHarnessRoot(sharedRoot: string): boolean;
-export declare function assessForgeLegacyHarnessMigration(input: {
-    sharedRoot: string;
-    forgeRoot: string;
-}): ForgeLegacyMigrationVerdict;
-/** Move legacy shared runs/worktrees into the empty forge box-scoped root. */
-export declare function executeForgeLegacyHarnessMigration(sharedRoot: string, forgeRoot: string): void;

package/dist/runner-boundary/runner-boundary.harness-root.d.ts

@@ -1,17 +0,0 @@
-import type { WorkerPoolBoxKind } from "../box-identity.js";
-import type { HarnessRootResolution } from "./runner-boundary.types.js";
-/** Strip mistaken trailing `runs` / `worktrees` segments from a harness root path. */
-export declare function normalizeHarnessRootPath(root: string): string;
-/** Per-pool namespace under ~/.kynver/harness/{ghost|forge}. */
-export declare function boxScopedHarnessRoot(boxKind: WorkerPoolBoxKind, env?: NodeJS.ProcessEnv): string;
-/**
- * Resolve the on-disk harness root for a runner boundary.
- * Order: env → config.harnessRoot → box-scoped dir → legacy shared (ghost only).
- */
-export declare function resolveHarnessRootForRunnerBoundary(input: {
-    boxKind: WorkerPoolBoxKind;
-    configuredHarnessRoot?: string | null;
-    env?: NodeJS.ProcessEnv;
-    /** When false, assess migration but do not move on-disk layout (tests). */
-    allowForgeLegacyMigration?: boolean;
-}): HarnessRootResolution;

package/dist/runner-boundary/runner-boundary.resolve.d.ts

@@ -1,4 +0,0 @@
-import type { KynverUserConfig } from "../config.js";
-import type { RunnerBoundaryResolveOptions, RunnerBoundaryValidation } from "./runner-boundary.types.js";
-export declare function deriveDefaultRunnerId(boxKind: string, hostname: string): string;
-export declare function resolveRunnerBoundary(config?: KynverUserConfig, env?: NodeJS.ProcessEnv, options?: RunnerBoundaryResolveOptions): RunnerBoundaryValidation;

package/dist/runner-boundary/runner-boundary.run-guard.d.ts

@@ -1,12 +0,0 @@
-import type { HarnessRunRecord } from "../run-store.js";
-import type { RunnerBoundaryIdentity } from "./runner-boundary.types.js";
-export interface RunBoundaryGuardResult {
-    ok: boolean;
-    reason?: string;
-    stamped?: boolean;
-}
-/**
- * Ensure a harness run belongs to the active runner boundary.
- * Legacy runs without stamps are migrated in-place on first dispatch.
- */
-export declare function assertRunMatchesRunnerBoundary(run: HarnessRunRecord, boundary: RunnerBoundaryIdentity): RunBoundaryGuardResult;

package/dist/runner-boundary/runner-boundary.types.d.ts

@@ -1,31 +0,0 @@
-import type { BoxKindSource, WorkerPoolBoxKind } from "../box-identity.js";
-import type { WorkerCapSource } from "../worker-cap-source.js";
-export type HarnessRootSource = "env" | "config" | "box_scoped" | "legacy_shared" | "legacy_migrated";
-export interface HarnessRootResolution {
-    harnessRoot: string;
-    source: HarnessRootSource;
-    /** Set when Forge legacy migration is required but blocked pending operator sign-off. */
-    migrationBlocker?: string;
-}
-export interface RunnerBoundaryIdentity {
-    boxKind: WorkerPoolBoxKind;
-    boxKindSource: BoxKindSource;
-    runnerId: string;
-    runnerIdSource: "config" | "env" | "derived";
-    maxConcurrentWorkers: number;
-    workerCapSource: WorkerCapSource;
-    harnessRoot: string;
-    harnessRootSource: HarnessRootSource;
-}
-export interface RunnerBoundaryValidation {
-    ok: boolean;
-    identity: RunnerBoundaryIdentity | null;
-    errors: string[];
-    warnings: string[];
-}
-export interface RunnerBoundaryResolveOptions {
-    /** Interactive dispatch always requires explicit box kind (config or env). */
-    requireExplicitBoxKind?: boolean;
-    /** Treat slug-only env as a hard error (daemon strict mode). */
-    strict?: boolean;
-}

package/dist/runner-config-backfill.d.ts

@@ -1,18 +0,0 @@
-import { type KynverUserConfig } from "./config.js";
-export interface RunnerConfigBackfillResult {
-    updated: boolean;
-    fields: string[];
-    skippedAmbiguous: string[];
-}
-/**
- * Safe migration/backfill of ~/.kynver/config.json from env and scoped credentials.
- * Never adopts ambiguous workspace identity or writes raw tokens.
- */
-export declare function buildRunnerConfigBackfillUpdates(config: KynverUserConfig, env?: NodeJS.ProcessEnv): {
-    updates: Partial<KynverUserConfig>;
-    fields: string[];
-    skippedAmbiguous: string[];
-};
-export declare function backfillRunnerConfigFromLegacySources(opts?: {
-    dryRun?: boolean;
-}): RunnerConfigBackfillResult;

package/dist/runner-identity.d.ts

@@ -1,21 +0,0 @@
-export interface RunnerPresencePayload {
-    runnerId: string;
-    hostname: string | null;
-    profile: string | null;
-    harnessRepo: string | null;
-    runId?: string | null;
-    /**
-     * Active server-delivered instruction bundle version (M6); additive. Reports
-     * the embedded fallback version (`embedded-1`) when no server bundle has
-     * loaded — the System console instruction-freshness panel reads this from
-     * the runner registry to flag daemons running stale content.
-     */
-    instructionBundleVersion?: string | null;
-}
-/** True when this host belongs to the Ghost orchestrator pool (not Hermes Forge). */
-export declare function isGhostPoolHost(env?: NodeJS.ProcessEnv): boolean;
-/** Stable runner identity for multi-box AgentOS coordination. */
-export declare function resolveRunnerPresencePayload(input?: {
-    runId?: string | null;
-    env?: NodeJS.ProcessEnv;
-}): RunnerPresencePayload;

package/dist/runtime-identity.d.ts

@@ -1,9 +0,0 @@
-export interface RuntimeIdentityV1 {
-    contractVersion: 1;
-    nodeVersion: string;
-    runtimePackageVersion: string;
-    buildIdentity: string | null;
-    platform: NodeJS.Platform;
-    arch: string;
-}
-export declare function buildRuntimeIdentity(): RuntimeIdentityV1;

package/dist/runtime-memory-envelope.d.ts

@@ -1,16 +0,0 @@
-/**
- * Dependency-free runtime-memory-envelope v2 schema + flag helpers for harness hosts.
- */
-export declare const AGENT_RUNTIME_ENVELOPE_SCHEMA_VERSION: "runtime-memory-envelope.v1";
-export declare const AGENT_RUNTIME_ENVELOPE_SCHEMA_VERSION_V2: "runtime-memory-envelope.v2";
-export declare const AGENT_RUNTIME_ENVELOPE_SCHEMA_VERSIONS: readonly ["runtime-memory-envelope.v1", "runtime-memory-envelope.v2"];
-export type AgentRuntimeEnvelopeSchemaVersion = (typeof AGENT_RUNTIME_ENVELOPE_SCHEMA_VERSIONS)[number];
-export declare function runtimeEnvelopeV2Enabled(): boolean;
-export type RuntimeEnvelopeFlagSource = "env_explicit_on" | "env_explicit_off" | "default_off";
-export interface RuntimeEnvelopeWriterConfig {
-    schemaVersion: AgentRuntimeEnvelopeSchemaVersion;
-    v2WriterEnabled: boolean;
-    effectiveSource: RuntimeEnvelopeFlagSource;
-}
-export declare function resolveRuntimeEnvelopeWriterConfig(): RuntimeEnvelopeWriterConfig;
-export declare function isAgentRuntimeEnvelopeSchemaVersion(value: string): value is AgentRuntimeEnvelopeSchemaVersion;

package/dist/scheduler-cutover-cli.d.ts

@@ -1,2 +0,0 @@
-export declare function runSchedulerCutoverCheckCli(json?: boolean): void;
-export declare function runSchedulerAttestCutoverCli(json?: boolean): void;

package/dist/scheduler-cutover.d.ts

@@ -1,25 +0,0 @@
-import type { KynverUserConfig } from "./config.js";
-export type DeploymentSchedulerProvider = "qstash" | "kynver-cron" | "openclaw-cron";
-export declare const SCHEDULER_CUTOVER_RUNNER_ENV_KEYS: readonly ["KYNVER_SCHEDULER_PROVIDER", "KYNVER_CRON_STORE_PATH", "KYNVER_CRON_SECRET", "KYNVER_CRON_FIRE_BASE_URL", "OPENCLAW_CRON_STORE_PATH", "OPENCLAW_CRON_SECRET", "OPENCLAW_CRON_FIRE_BASE_URL"];
-export interface SchedulerCutoverEnvSnapshot {
-    kynverSchedulerProvider: string | null;
-    kynverCronStorePath: string | null;
-    kynverCronSecret: boolean;
-    kynverCronFireBaseUrl: string | null;
-    openclawCronStorePath: string | null;
-    openclawCronSecret: boolean;
-    openclawCronFireBaseUrl: string | null;
-}
-export interface SchedulerCutoverReport {
-    ok: boolean;
-    blockers: string[];
-    runnerEnv: SchedulerCutoverEnvSnapshot;
-    deploymentSchedulerProvider: DeploymentSchedulerProvider | null;
-    deploymentSteps: string[];
-    runnerSteps: string[];
-}
-export declare const DEPLOYMENT_SCHEDULER_CUTOVER_STEPS: readonly ["Railway/hosted: set KYNVER_SCHEDULER_PROVIDER=qstash", "Railway/hosted: ensure QSTASH_TOKEN (and QStash signing keys) are configured", "Railway/hosted: unset OPENCLAW_CRON_STORE_PATH if present"];
-export declare const RUNNER_SCHEDULER_CUTOVER_STEPS: readonly ["User runner: unset KYNVER_SCHEDULER_PROVIDER (scheduling is deployment-owned)", "User runner: unset OPENCLAW_CRON_STORE_PATH, OPENCLAW_CRON_SECRET, OPENCLAW_CRON_FIRE_BASE_URL", "User runner: after deployment cutover, run `kynver scheduler attest-cutover` (or set deploymentSchedulerProvider to \"qstash\" in ~/.kynver/config.json)", "Verify: kynver doctor runtime-takeover — hotspot_openclaw_scheduler should pass"];
-export declare function readSchedulerCutoverEnv(env?: NodeJS.ProcessEnv): SchedulerCutoverEnvSnapshot;
-export declare function assessSchedulerCutover(config: Pick<KynverUserConfig, "deploymentSchedulerProvider">, env?: SchedulerCutoverEnvSnapshot): SchedulerCutoverReport;
-export declare function applySchedulerCutoverAttestation(config: KynverUserConfig): KynverUserConfig;

package/dist/security-review-environment.d.ts

@@ -1,27 +0,0 @@
-/**
- * LB1 — review workers must not receive unrestricted production DB credentials.
- * Spawn sets KYNVER_NO_PROD_DB_CREDENTIALS; db-credential-resolver refuses when set.
- */
-/** Truthy when the worker is a source-only / expert review lane (no prod DB). */
-export declare const KYNVER_NO_PROD_DB_CREDENTIALS_ENV = "KYNVER_NO_PROD_DB_CREDENTIALS";
-/** Extra env keys stripped for review workers (operator file pointers). */
-export declare const REVIEW_WORKER_EXTRA_FORBIDDEN_ENV_KEYS: readonly ["KYNVER_ENV_FILE"];
-export declare function isNoProdCredentialReviewEnvironment(env: NodeJS.ProcessEnv): boolean;
-export interface BuildWorkerSpawnEnvOptions {
-    reviewWorker?: boolean;
-}
-export declare function buildWorkerSpawnEnv(hostEnv: NodeJS.ProcessEnv, opts?: BuildWorkerSpawnEnvOptions): NodeJS.ProcessEnv;
-export declare class ProductionDatabaseCredentialBlockedError extends Error {
-    constructor();
-}
-export declare function assertProductionDatabaseResolutionAllowed(env: NodeJS.ProcessEnv): void;
-export interface ReviewWorkerCredentialScopeAudit {
-    reviewMode: boolean;
-    noProdFlagPresent: boolean;
-    forbiddenKeysAfterScrub: string[];
-    productionDbKeysAbsent: boolean;
-    envFilePointerStripped: boolean;
-    safe: boolean;
-}
-/** Audit credential scope for diagnostics and security-boundary proofs (no secret values). */
-export declare function auditReviewWorkerCredentialScope(env: NodeJS.ProcessEnv, opts?: BuildWorkerSpawnEnvOptions): ReviewWorkerCredentialScopeAudit;

package/dist/server/adapter-contract.d.ts

@@ -1 +0,0 @@
-export { getAdapterContextContract, listAdapterContextContracts, type AdapterContextCapability, type AdapterContextContract, type AdapterContextContractId, } from "../orchestration-providers/adapter-contract.js";

package/dist/server/cleanup.d.ts

@@ -1,3 +0,0 @@
-export { runHarnessCleanup } from "../cleanup.js";
-export { DEFAULT_MAX_ACTIONS_PER_SWEEP, DEFAULT_NODE_MODULES_AGE_MS, DEFAULT_RUN_DIRECTORIES_AGE_MS, DEFAULT_WORKTREES_AGE_MS, } from "../cleanup-types.js";
-export type { CleanupSkipReason, HarnessCleanupSummary } from "../cleanup-types.js";

package/dist/server/context-budget-receipt.d.ts

@@ -1,2 +0,0 @@
-export { RUNTIME_CONTEXT_BUDGET_RECEIPT_SCHEMA_VERSION, RUNTIME_CONTEXT_BUDGET_RECEIPT_V2_SCHEMA_VERSION, buildContextBudgetReceiptV2, estimateTokensFromChars, finalizeReceiptTotals, isRuntimeContextBudgetReceiptV2, sectionReceiptFromMarkdown, upgradeReceiptToV2, type BuildContextBudgetReceiptV2Input, type ContextBudgetReceiptSurface, type ContextEnvelopeMode, type RuntimeContextActiveStateLookup, type RuntimeContextActiveStateLookupKind, type RuntimeContextActiveStateLookupStatus, type RuntimeContextBudgetReceipt, type RuntimeContextBudgetReceiptSchemaVersion, type RuntimeContextBudgetReceiptV2, type RuntimeContextRehydrationKind, type RuntimeContextRehydrationRoute, type RuntimeContextSection, type RuntimeContextSectionReceipt, type UsefulContextCoverage, } from "../context-budget-receipt.js";
-export { MEMORY_LANE_PREVIEW_CHARS, buildChatMemoryShadowPreview, buildLegacyChatMemorySection, chatMemoriesToPreviewItems, formatContextPreviewMemoryBlock, type ContextPreviewBlockInput, type ContextPreviewMemoryItem, } from "../context-preview/chat-memory-preview.js";

package/dist/server/db-credentials.d.ts

@@ -1 +0,0 @@
-export { resolveProductionDatabaseUrl, type DbCredentialFailure, type DbCredentialResolution, type DbCredentialSource, type ResolveProductionDatabaseOptions, type ResolveProductionDatabaseResult, } from "../db-credential-resolver.js";

package/dist/server/default-repo.d.ts

@@ -1 +0,0 @@
-export { resolveDefaultRepo } from "../default-repo.js";

package/dist/server/harness-notice.d.ts

@@ -1,2 +0,0 @@
-export { extractWorkerStartRecordFromText, formatHarnessToolReadable, formatWorkerStartNotice, joinHarnessNotice, } from "../harness-notice/index.js";
-export type { HarnessReadableNotice, HarnessToolFormatContext } from "../harness-notice/index.js";

package/dist/server/heavy-verification.d.ts

@@ -1,3 +0,0 @@
-export { assessHeavyVerificationGate, countActiveHeavyVerificationSlots, isHeavyVerificationGateSkipped, resolveHeavyVerificationMaxConcurrent, } from "../heavy-verification/slot.js";
-export { waitForHeavyVerificationSlot } from "../heavy-verification/gate.js";
-export { compareSemver } from "../memory-cost-package-version-guard.js";

package/dist/server/landing.d.ts

@@ -1 +0,0 @@
-export { assessWorkerLanding, type WorkerLandingVerdict } from "../landing-gate.js";

package/dist/server/memory-cost-enforce.d.ts

@@ -1 +0,0 @@
-export { buildMemoryCostPackageGuardInput, enforceMemoryCostPackageGuardAtStartup, evaluateMemoryCostPackageGuardAtStartup, } from "../memory-cost-package-version-guard-enforce.js";

package/dist/server/memory-cost.d.ts

@@ -1 +0,0 @@
-export { compareSemver, evaluateMemoryCostPackageVersionGuard, assertMemoryCostPackageVersionGuard, MemoryCostPackageVersionGuardError, MEMORY_COST_PACKAGE_MIN_VERSIONS, type MemoryCostPackageGuardResult, } from "../memory-cost-package-version-guard.js";

package/dist/server/model-routing.d.ts

@@ -1,3 +0,0 @@
-export { parseExecutorRefRoutingIntent, executorRefRequestsNonCursorWorker, type ExecutorRefRoutingIntent, } from "../executor-ref-routing.js";
-export { assessDispatchModelGuard, type DispatchModelGuardInput, type DispatchModelGuardResult, } from "../dispatch-model-guard.js";
-export { GLOBAL_DEFAULT_MODEL, CURSOR_DEFAULT_MODEL, inferModelRoutingFromTask, resolveGlobalDefaultModel, resolveModelFallback, resolveWorkerLaunch, type ModelRoutingDecision, } from "../model-routing.js";

package/dist/server/monitor.d.ts

@@ -1,3 +0,0 @@
-export { computeWorkerStatus } from "../status.js";
-export { classifyWorkerHealth } from "../monitor/monitor.classify.js";
-export { assessAutoCompleteEligibility } from "../monitor/monitor.terminal.js";

package/dist/server/node-runtime-policy.d.ts

@@ -1 +0,0 @@
-export { evaluateNodeRuntimePolicy, KYNVER_NODE_PATCH_FLOOR, PRIVATE_ROOT_NODE_RANGE, PUBLISHED_NODE_RANGE, type NodeRuntimePolicyStatus, type NodeRuntimePolicyVerdict, } from "../node-runtime-policy.js";

package/dist/server/orchestration.d.ts

@@ -1,10 +0,0 @@
-export { buildOrchestrationProviderInventory } from "../orchestration-providers/inventory.js";
-export { listOrchestrationProviderCapabilities } from "../orchestration-providers/capabilities.js";
-export type { OrchestrationProviderBindingStatus, OrchestrationProviderCapability, OrchestrationProviderId, } from "../orchestration-providers/types.js";
-export type { OrchestrationCloudApiCredits } from "../orchestration-providers/inventory.js";
-export type { HermesCliAdapterStatus } from "../orchestration-providers/hermes-cli-adapter.js";
-export type { HermesOpenAiCodexBindingStatus } from "../orchestration-providers/hermes-openai-codex-binding.js";
-export type { CodexOrchestrationPath } from "../orchestration-providers/codex-orchestration-adapter.js";
-export { evaluateOrchestrationPolicy } from "../orchestration-enforcement/evaluator.js";
-export { resolveOrchestrationPolicyMode, isOrchestrationEnforceTasksEnabled, } from "../orchestration-enforcement/config.js";
-export { buildForegroundHarnessIdempotencyKey } from "../orchestration-enforcement/idempotency.js";

package/dist/server/pr-evidence.d.ts

@@ -1,2 +0,0 @@
-export { evidenceFromGitHubVercelStatus, type VercelEvidenceResult, } from "../vercel/vercel-evidence.js";
-export type { GitHubCommitStatusRow } from "../vercel/vercel-github-status.js";

package/dist/server/prompt.d.ts

@@ -1 +0,0 @@
-export { buildPrompt, buildPromptWithReceipt, RUNTIME_PROMPT_ENFORCEMENT, type BuildPromptInput, } from "../prompt.js";

package/dist/server/repo-search.d.ts

@@ -1 +0,0 @@
-export { classifyRepoSearchMeta, diagnoseRepoSearchFailure, extractSearchMetaFromToolLine, formatRepoSearchGuidance, normalizeRepoSearchCommand, shouldTreatRgNoMatchAsSuccess, unwrapShellWrapperCommand, } from "../repo-search.js";

package/dist/server/worker-policy.d.ts

@@ -1,6 +0,0 @@
-export { auditWorkerEnv, scrubWorkerEnv, listForbiddenWorkerEnvKeys, listOperatorAllowedWorkerEnvKeys, isForbiddenWorkerEnvKey, } from "../worker-env.js";
-export { auditReviewWorkerCredentialScope, buildWorkerSpawnEnv, isNoProdCredentialReviewEnvironment, KYNVER_NO_PROD_DB_CREDENTIALS_ENV, } from "../security-review-environment.js";
-export { isHarnessExpertReviewWorker } from "../harness-expert-review.js";
-export { DEFAULT_WORKER_PROVIDER, resolveConfiguredWorkerProvider, isClaudeFamilyProvider, taskAllowsClaudeWorker, enforceCursorWorkerProvider, preferCursorExecutor, type EnforceCursorWorkerProviderInput, } from "../worker-provider-policy.js";
-export { classifyHeavyShellCommand } from "../heavy-verification/command-classify.js";
-export { gateWorkerShellCommand, HEAVY_VERIFICATION_TOKEN_REQUIRED, type GateWorkerShellCommandOpts, type WorkerCommandGateOutcome, type WorkerCommandGateResult, } from "../heavy-verification/worker-command-gate.js";

package/dist/server/wsl-crash-dumps.d.ts

@@ -1,2 +0,0 @@
-export { observeWslCrashDumps, readKernelCorePattern, } from "../wsl-crash-dumps.js";
-export type { ObserveWslCrashDumpsOptions, WslCrashDumpObservation, } from "../wsl-crash-dumps.js";