@kynver-app/runtime 0.2.23 → 0.2.28

package/dist/worker-env.d.ts

@@ -1,52 +0,0 @@
-/**
- * Worker spawn env scrub — harness workers must not inherit host deployment secrets.
- *
- * §7.8 hardening (kernel-plan H8 phase 1, verified leaks 2026-07-19): the
- * original denylist stopped at `_SECRET`/`_API_KEY`, letting `MEMORY_CONTENT_KEK`,
- * `LLM_BYOK_KEK`, `KYNVER_COMMAND_AUTH_KEY`, `KYNVER_INSTRUCTION_BUNDLE_KEY`,
- * and `KYNVER_MEMORY_LEDGER_KEY` reach worker children. The suffix net now
- * covers the secret-shaped families (`_KEK`, `_KEY`, `_TOKEN`, `_PASSWORD`,
- * `_PASSPHRASE`, `_SALT`) with EXPLICIT allows for the keys workers
- * legitimately need — pass-through is a documented decision, never an
- * accident:
- *
- *  - `GITHUB_TOKEN` / `GH_TOKEN`: git-push + `gh` credential-helper auth for
- *    the worker's own branch pushes.
- *  - `CLAUDE_CODE_OAUTH_TOKEN`: the worker CLI's own auth on boxes that use
- *    env-based OAuth instead of the credentials file (same trust domain as
- *    `~/.claude` — it is the worker's credential, not a deployment secret).
- *  - `*_PUBLIC_KEY`: public verification material (command-auth /
- *    instruction-bundle / ledger pins), safe by definition.
- *
- * Operator escape hatch: `KYNVER_WORKER_ENV_ALLOW` on the host (comma- or
- * whitespace-separated key names) allows additional suffix-matched keys
- * through when a box workflow needs one — it can NEVER re-admit a key on the
- * exact forbidden list below (those are known deployment secrets).
- */
-/** Exact env keys that must never reach a worker child process (not overridable). */
-export declare const FORBIDDEN_WORKER_ENV_KEYS: readonly ["ANTHROPIC_API_KEY", "ANALYST_API_KEY", "RECRUITER_API_KEY", "AUTH_SECRET", "NEXTAUTH_SECRET", "DATABASE_URL", "PRODUCTION_DATABASE_URL", "KYNVER_PRODUCTION_DATABASE_URL", "REDIS_URL", "GOOGLE_CLIENT_SECRET", "GITHUB_CLIENT_SECRET", "KYNVER_API_KEY", "KYNVER_SERVICE_SECRET", "KYNVER_RUNTIME_SECRET", "KYNVER_CRON_SECRET", "OPENCLAW_CRON_SECRET", "QSTASH_TOKEN", "QSTASH_CURRENT_SIGNING_KEY", "QSTASH_NEXT_SIGNING_KEY", "TOOL_SECRETS_KEK", "TOOL_EXECUTOR_DISPATCH_SECRET", "CLOUDFLARE_API_TOKEN", "STRIPE_SECRET_KEY", "STRIPE_WEBHOOK_SECRET", "STRIPE_IDENTITY_WEBHOOK_SECRET", "VOYAGE_API_KEY", "PERPLEXITY_API_KEY", "FRED_API_KEY", "FMP_API_KEY", "CURSOR_API_KEY", "MEMORY_CONTENT_KEK", "LLM_BYOK_KEK", "KYNVER_COMMAND_AUTH_KEY", "KYNVER_INSTRUCTION_BUNDLE_KEY", "KYNVER_MEMORY_LEDGER_KEY", "KYNVER_JWKS_PRIVATE_KEY_JWK"];
-/** Suffix-matched keys workers legitimately need — explicit decisions, see module doc. */
-export declare const ALLOWED_WORKER_ENV_KEYS: readonly ["GITHUB_TOKEN", "GH_TOKEN", "CLAUDE_CODE_OAUTH_TOKEN"];
-/** Host env var naming extra suffix-matched keys to allow through (comma/whitespace separated). */
-export declare const KYNVER_WORKER_ENV_ALLOW = "KYNVER_WORKER_ENV_ALLOW";
-export declare function isForbiddenWorkerEnvKey(key: string, opts?: {
-    operatorAllow?: ReadonlySet<string>;
-}): boolean;
-export declare function listForbiddenWorkerEnvKeys(env: NodeJS.ProcessEnv): string[];
-/**
- * §7.8 review A3 — audit visibility for the escape hatch: the operator-allow
- * entries that are PRESENT in this env and would be scrubbed without the
- * hatch (key names only, never values). An armed hatch must be visible on
- * audit surfaces, not silently absent from the forbidden list.
- */
-export declare function listOperatorAllowedWorkerEnvKeys(env: NodeJS.ProcessEnv): string[];
-export declare function scrubWorkerEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
-export interface WorkerEnvAudit {
-    forbiddenPresent: string[];
-    safe: boolean;
-    /** Present (non-empty) only when the KYNVER_WORKER_ENV_ALLOW hatch is armed for live keys. */
-    operatorAllowedActive?: string[];
-}
-export declare function auditWorkerEnv(env: NodeJS.ProcessEnv): WorkerEnvAudit;
-/** @deprecated Use {@link scrubWorkerEnv} — kept for existing imports from git.ts */
-export declare function scrubClaudeEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/dist/worker-execution-mode.d.ts

@@ -1,5 +0,0 @@
-export type WorkerExecutionMode = "write" | "read_only";
-export declare function resolveWorkerExecutionMode(task: {
-    description?: unknown;
-    executorRef?: unknown;
-}): WorkerExecutionMode;

package/dist/worker-final-result-embed.d.ts

@@ -1 +0,0 @@
-export declare function extractEmbeddedWorkerFinalResultRecord(value: string): Record<string, unknown> | null;

package/dist/worker-lease-sync.d.ts

@@ -1,15 +0,0 @@
-import type { HarnessWorkerRecord } from "./status.js";
-export interface ResolveWorkerLeaseForCallbackInput {
-    worker: HarnessWorkerRecord;
-    agentOsId: string;
-    baseUrl?: string;
-    secret?: string;
-}
-/**
- * Ensure completion/renewal uses the same lease token the board holds for this
- * worker's task. Persists a fetched token onto worker.json when missing locally.
- */
-export declare function resolveWorkerLeaseForCallback(input: ResolveWorkerLeaseForCallbackInput): Promise<{
-    leaseOwner: string | null;
-    leaseToken: string | null;
-}>;

package/dist/worker-lifecycle.d.ts

@@ -1,28 +0,0 @@
-import type { HarnessWorkerRecord, RawHarnessWorkerStatus } from "./status.js";
-export interface CompletionSnapshot {
-    finalResult?: unknown;
-    prUrl?: string | null;
-    summary?: string | null;
-}
-export declare function isCompletionAcknowledged(worker: HarnessWorkerRecord): boolean;
-export declare function completionSnapshotFromStatus(status: RawHarnessWorkerStatus): CompletionSnapshot;
-/**
- * Persist local terminal lifecycle after AgentOS acknowledges harness completion.
- * Prevents a later PID reuse or still-running wrapper from re-reporting the worker
- * as `running` once the board task has advanced.
- */
-export declare function persistCompletionAcknowledged(worker: HarnessWorkerRecord, status: RawHarnessWorkerStatus, opts?: {
-    source?: string;
-}): void;
-/**
- * When the board task has left `running` but the local worker still looks live
- * (common after server-side completion reconcile), mirror the terminal lifecycle
- * on disk so harness status matches AgentOS.
- */
-export declare function syncCompletionAcknowledgedFromOperatorTick(runId: string, operatorTick: unknown): Array<{
-    worker: string;
-    taskId: string;
-    taskStatus: string;
-}>;
-/** Reload helper for callers that already hold a worker name. */
-export declare function acknowledgeWorkerIfBoardTaskAdvanced(runId: string, workerName: string, operatorTick: unknown): boolean;

package/dist/worker-metadata-paths.d.ts

@@ -1,26 +0,0 @@
-/** True when a persisted harness path contains the historical `runs/runs` segment. */
-export declare function hasNestedRunsSegment(filePath: string): boolean;
-/**
- * Rewrite a nested `.../runs/runs/<runId>/...` path to canonical `.../runs/<runId>/...`.
- * Returns the input unchanged when no nested segment is present.
- */
-export declare function repairNestedRunsPath(filePath: string, harnessRoot: string): string;
-export declare function canonicalRunDir(harnessRoot: string, runId: string): string;
-export declare function canonicalWorkerDir(harnessRoot: string, runId: string, workerName: string): string;
-/** Historical mistaken layout when harness root ended in `/runs`. */
-export declare function legacyNestedWorkerDir(harnessRoot: string, runId: string, workerName: string): string;
-export declare function workerArtifactFileNames(): readonly string[];
-export declare function workerArtifactPaths(workerDir: string): {
-    workerJsonPath: string;
-    stdoutPath: string;
-    stderrPath: string;
-    heartbeatPath: string;
-    lastStatusPath: string;
-};
-/** Resolve the best on-disk worker.json path for a run worker entry. */
-export declare function resolveWorkerJsonPath(input: {
-    harnessRoot: string;
-    runId: string;
-    workerName: string;
-    statusPath?: string;
-}): string;

package/dist/worker-metadata-reconcile.d.ts

@@ -1,21 +0,0 @@
-import { repairMissingRunMetadata } from "./run-metadata-retention.js";
-export interface WorkerMetadataReconcileOutcome {
-    runId: string;
-    worker: string;
-    action: "materialized_run_symlink" | "repaired_run_index" | "repaired_worker_paths" | "relocated_artifacts" | "synthesized_worker_json" | "marked_abandoned" | "skipped";
-    reason: string;
-}
-export interface WorkerMetadataReconcileResult {
-    workers: WorkerMetadataReconcileOutcome[];
-    runMetadataRetention: ReturnType<typeof repairMissingRunMetadata>;
-}
-/**
- * Repair historical harness worker metadata:
- * - fix run.json index paths that still reference nested `runs/runs`
- * - relocate split artifacts into canonical worker dirs
- * - synthesize missing worker.json from last-status/heartbeat/stdout when possible
- * - mark empty abandoned worker dirs truthfully
- */
-export declare function reconcileWorkerMetadata(): WorkerMetadataReconcileResult;
-/** JSON summary for CLI / verifier scripts. */
-export declare function reconcileWorkerMetadataCli(): void;

package/dist/worker-ops.d.ts

@@ -1,45 +0,0 @@
-export declare function tryCompleteWorker(args: Record<string, string | boolean>): Promise<{
-    ok: boolean;
-    skipped?: boolean;
-    reason?: string;
-    nextAction?: string;
-    httpStatus?: number;
-    response?: unknown;
-    completionBlocked?: boolean;
-    prHandoff?: {
-        prUrl?: string;
-        created?: boolean;
-    };
-}>;
-export declare function completeWorker(args: Record<string, string | boolean>): Promise<void>;
-export declare function workerStatus(args: Record<string, string | boolean>): void;
-export declare function workerList(args: Record<string, string | boolean>): void;
-type RunBoardWorker = Record<string, unknown> & {
-    worker: string;
-    status?: string;
-    attention?: string;
-    lifecycleStage?: string | null;
-    lastActivityAt?: string | null;
-};
-interface RunBoard {
-    runId: string;
-    name: string;
-    status: string;
-    repo: string;
-    workerCount: number;
-    needsAttention: string[];
-    workers: RunBoardWorker[];
-    projection?: "compact" | "full";
-    activeFilters?: Record<string, string | boolean>;
-    resultContract?: Record<string, unknown>;
-    drilldownCommands?: Record<string, string>;
-    summary?: Record<string, unknown>;
-    controller?: Record<string, unknown>;
-}
-export declare function buildRunBoard(runId: string): RunBoard;
-export declare function buildCompactRunBoard(runId: string): RunBoard;
-export declare function publishHarnessBoardSnapshot(args: Record<string, string | boolean>, source: string): Promise<Record<string, unknown> | null>;
-export declare function runStatus(args: Record<string, string | boolean>): void;
-export declare function tailWorker(args: Record<string, string | boolean>): void;
-export declare function stopWorker(args: Record<string, string | boolean>): void;
-export {};

package/dist/worker-persona-catalog.d.ts

@@ -1,29 +0,0 @@
-export declare const WORKER_PERSONA_DISPATCH_LANES: readonly ["implementation", "review", "landing"];
-export type WorkerPersonaDispatchLane = (typeof WORKER_PERSONA_DISPATCH_LANES)[number];
-export declare const WORKER_PERSONA_DEFAULT_ROLE_LANES: readonly ["plan_author", "implementer", "report_reviewer", "deep_reviewer", "runtime_verifier", "system"];
-export type WorkerPersonaDefaultRoleLane = (typeof WORKER_PERSONA_DEFAULT_ROLE_LANES)[number];
-export interface WorkerPersonaCatalogEntry {
-    slug: string;
-    displayName: string;
-    description: string;
-    /** Harness dispatch lane reserved for this persona (null = orchestration / no dispatch). */
-    dispatchLane: WorkerPersonaDispatchLane | null;
-    /** Default plan progress role when enriching harness tasks. */
-    defaultRoleLane: WorkerPersonaDefaultRoleLane;
-}
-/**
- * Embedded structural catalog (slugs, display names, lanes; generic
- * descriptions). Lane-derivation helpers use this so dispatch semantics are
- * stable regardless of bundle state.
- */
-export declare const WORKER_PERSONA_CATALOG: readonly WorkerPersonaCatalogEntry[];
-export type WorkerPersonaCatalogSlug = (typeof WORKER_PERSONA_CATALOG)[number]["slug"];
-export declare function getWorkerPersonaCatalogEntry(slug: string | null | undefined): WorkerPersonaCatalogEntry | null;
-/** Dispatch lane reserved for a persona; null when orchestration-only or unknown. */
-export declare function getPersonaDispatchLane(slug: string | null | undefined): WorkerPersonaDispatchLane | null;
-export declare function getPersonaDefaultRoleLane(slug: string | null | undefined): WorkerPersonaDefaultRoleLane | null;
-export declare function isKnownWorkerPersonaSlug(slug: string | null | undefined): boolean;
-/** Personas whose harness dispatch lane is `review` (derived — do not hardcode slugs). */
-export declare function workerPersonaReviewSlugs(): readonly WorkerPersonaCatalogSlug[];
-/** Personas whose harness dispatch lane is `landing` (derived — do not hardcode slugs). */
-export declare function workerPersonaLandingSlugs(): readonly WorkerPersonaCatalogSlug[];

package/dist/worker-provider-policy.d.ts

@@ -1,26 +0,0 @@
-import type { ModelRoutingDecision } from "./model-routing.js";
-/** Default harness worker CLI provider unless an operator override allows Claude. */
-export declare const DEFAULT_WORKER_PROVIDER = "cursor";
-export declare function isClaudeFamilyProvider(provider: string | null | undefined): boolean;
-/**
- * True when the board row explicitly opts into a Claude/Opus worker
- * (operator override on the task).
- */
-export declare function taskAllowsClaudeWorker(task: Record<string, unknown> | null | undefined): boolean;
-export interface EnforceCursorWorkerProviderInput {
-    routing: ModelRoutingDecision;
-    task?: Record<string, unknown> | null;
-    /** Per-invocation `--provider` from the harness CLI. */
-    explicitProvider?: string | null;
-    /** When true, `--provider claude` is treated as an operator run override. */
-    explicitProviderIsOperatorOverride?: boolean;
-}
-/**
- * Rewrites Claude/Opus routing to Cursor unless the task or an explicit operator
- * run override allows Claude workers.
- */
-export declare function enforceCursorWorkerProvider(input: EnforceCursorWorkerProviderInput): ModelRoutingDecision;
-/** Normalize config/registry defaults — legacy `claude` configs map to Cursor unless overridden. */
-export declare function resolveConfiguredWorkerProvider(configured: string | null | undefined, fallback?: string): string;
-/** Plan / Command Center executor lists — Cursor wins when both families appear. */
-export declare function preferCursorExecutor(executors: string[]): string[];

package/dist/workspace-runtime-config.d.ts

@@ -1,10 +0,0 @@
-export interface WorkspaceRuntimePreferences {
-    maxConcurrentWorkers: number | null;
-}
-export declare function shouldApplyWorkspaceRuntimePreferences(env?: NodeJS.ProcessEnv): boolean;
-export declare function configuredMaxWorkersOverrideForBox(preferences: WorkspaceRuntimePreferences | null | undefined, env?: NodeJS.ProcessEnv): number | undefined;
-/**
- * Pull the Command Center worker cap each pipeline tick so the daemon honors
- * workspace settings without restarting or editing ~/.kynver/config.json.
- */
-export declare function fetchWorkspaceRuntimePreferences(agentOsId: string, args: Record<string, string | boolean>): Promise<WorkspaceRuntimePreferences | null>;

package/dist/worktree-base-ref.d.ts

@@ -1,34 +0,0 @@
-/**
- * Worktree base-ref resolution + self-heal.
- *
- * Live incident (7-day event breakdown, 2026-08-05): 75 of 82 spawn-failure
- * claim releases — 91% of the week's compensator load — were
- * `git worktree add … unknown failed: fatal: invalid reference: unknown`.
- * The run-metadata repair path (`run-metadata-retention.ts`) synthesizes
- * rebuilt run.json records with `baseCommit: "unknown"`, and the supervisor
- * passed that literal to git; every spawn in a repaired run then failed
- * forever, each failure burning an attempt (the failure text was not
- * infrastructure-classified) and minting over-attempt recovery children.
- *
- * This resolver picks the first candidate ref that git can verify —
- * the recorded baseCommit (unless it is the known-invalid marker), the
- * run's base branch, `origin/main`, `origin/HEAD` — and reports when the
- * pick differs from the record so the caller can PERSIST the repair
- * (self-heal: one resolution fixes the run for all subsequent spawns).
- */
-/** Marker the metadata-repair path historically stamped on rebuilt runs. */
-export declare const INVALID_BASE_COMMIT_MARKER = "unknown";
-export interface ResolveWorktreeBaseRefInput {
-    baseCommit?: string | null;
-    base?: string | null;
-    /** Verify a ref resolves to a commit; injectable for tests. */
-    verifyRef: (ref: string) => boolean;
-}
-export interface ResolvedWorktreeBaseRef {
-    ref: string;
-    /** True when the pick differs from the recorded baseCommit — persist it. */
-    repaired: boolean;
-    /** Which candidate won (for the spawn log). */
-    source: "baseCommit" | "base" | "origin/main" | "origin/HEAD";
-}
-export declare function resolveWorktreeBaseRef(input: ResolveWorktreeBaseRefInput): ResolvedWorktreeBaseRef;

package/dist/worktree-completion-handoff.d.ts

@@ -1,17 +0,0 @@
-export type WorktreeCompletionHandoffState = "clean" | "pr_handoff" | "commit_handoff" | "dirty_worktree" | "dirty_worktree_no_pr";
-export interface WorktreeCompletionHandoffInput {
-    changedFiles?: unknown;
-    finalResult?: unknown;
-    prUrl?: string | null;
-    headCommit?: string | null;
-    artifactBundlePath?: string | null;
-    patchPath?: string | null;
-    disposableArtifactsRemoved?: string[] | null;
-}
-export interface WorktreeCompletionHandoffVerdict {
-    allowed: boolean;
-    state: WorktreeCompletionHandoffState;
-    materialDirtyCount: number;
-    detail?: string;
-}
-export declare function assessWorktreeCompletionHandoff(input: WorktreeCompletionHandoffInput): WorktreeCompletionHandoffVerdict;

package/dist/worktree.d.ts

@@ -1,11 +0,0 @@
-import { loadRun, runDirectory, saveRun } from "./run-store.js";
-export interface CreatedRunInfo {
-    runId: string;
-    runDir: string;
-    repo: string;
-    base: string;
-    baseCommit: string;
-}
-export declare function createRun(args: Record<string, string | boolean>): CreatedRunInfo;
-export declare function listRuns(): void;
-export { loadRun, saveRun, runDirectory };

package/dist/wsl-crash-dumps-cleanup.d.ts

@@ -1,31 +0,0 @@
-import { type WslCrashDumpObservation } from "./wsl-crash-dumps.js";
-export interface WslCrashDumpCleanupResult {
-    observation: WslCrashDumpObservation | null;
-    execute: boolean;
-    keepNewest: number;
-    removed: Array<{
-        path: string;
-        bytes: number;
-        name: string;
-    }>;
-    removedBytes: number;
-    skipped: Array<{
-        path: string;
-        reason: string;
-    }>;
-}
-export interface WslCrashDumpCleanupOptions {
-    execute?: boolean;
-    /** Keep this many newest dumps; remove the rest when execute=true. */
-    keepNewest?: number;
-    /** When true, remove all dumps regardless of keepNewest (operator purge). */
-    purgeAll?: boolean;
-    forceWsl?: boolean;
-}
-/**
- * Prune Windows-side WSL crash dumps. Dry-run by default; pass execute=true
- * or `KYNVER_WSL_CRASH_DUMP_EXECUTE=1` to unlink files.
- */
-export declare function cleanupWslCrashDumps(options?: WslCrashDumpCleanupOptions): WslCrashDumpCleanupResult;
-/** True when automatic cleanup should run during harness retention sweeps. */
-export declare function shouldAutoCleanupWslCrashDumps(observation: WslCrashDumpObservation | null): boolean;

package/dist/wsl-crash-dumps-cli.d.ts

@@ -1 +0,0 @@
-export declare function runWslCrashesCli(args: Record<string, string | boolean>): void;

package/dist/wsl-crash-dumps.d.ts

@@ -1,90 +0,0 @@
-/** Default total bytes in wsl-crashes before the observer flags warning (5 GiB). */
-export declare const DEFAULT_WSL_CRASH_DUMP_WARN_BYTES: number;
-/** Default total bytes before critical — ~4× typical 2.2 GiB node dump (10 GiB). */
-export declare const DEFAULT_WSL_CRASH_DUMP_CRITICAL_BYTES: number;
-/** Default dump count before warning. */
-export declare const DEFAULT_WSL_CRASH_DUMP_WARN_COUNT = 2;
-/** Default dump count before critical. */
-export declare const DEFAULT_WSL_CRASH_DUMP_CRITICAL_COUNT = 4;
-export interface WslCrashDumpFile {
-    name: string;
-    path: string;
-    bytes: number;
-    mtimeMs: number;
-    /** Best-effort executable hint parsed from the WSL dump filename. */
-    executableHint: string | null;
-    signal: number | null;
-    pid: number | null;
-}
-export interface WslCrashDumpObservation {
-    ok: boolean;
-    /** Resolved host path (WSL mount) to the wsl-crashes directory. */
-    path: string | null;
-    windowsUser: string | null;
-    dumpCount: number;
-    totalBytes: number;
-    warnBelowBytes: number;
-    criticalBelowBytes: number;
-    warnCount: number;
-    criticalCount: number;
-    /** Newest dumps first. */
-    dumps: WslCrashDumpFile[];
-    /** Unique executable hints across dumps (e.g. node, cursor, vscode-server). */
-    executables: string[];
-    /** `kernel.core_pattern` when readable — surfaces wsl-capture-crash vs apport. */
-    corePattern: string | null;
-    wslCaptureEnabled: boolean;
-    /** Parsed MaxCrashDumpCount from %USERPROFILE%/.wslconfig when readable. */
-    maxCrashDumpCount: number | null;
-    dumpsDisabledInWslConfig: boolean;
-    reason: string | null;
-    probeError: string | null;
-}
-export interface ObserveWslCrashDumpsOptions {
-    forceWsl?: boolean;
-    hostMount?: string;
-    windowsUser?: string;
-    crashDumpDir?: string;
-    warnBelowBytes?: number;
-    criticalBelowBytes?: number;
-    warnCount?: number;
-    criticalCount?: number;
-    /** Test seam — inject listing instead of reading the filesystem. */
-    listDumps?: (dir: string) => WslCrashDumpFile[];
-    readCorePattern?: () => string | null;
-    readWslConfig?: (windowsUser: string, hostMount: string) => WslConfigCrashDumpSettings | null;
-}
-export interface WslConfigCrashDumpSettings {
-    maxCrashDumpCount: number | null;
-    crashDumpFolder: string | null;
-}
-/**
- * Resolve the Windows username for the WSL interop mount. Order: explicit env,
- * `cmd.exe echo %USERNAME%`, then Linux user matching `/mnt/c/Users/<user>`.
- */
-export declare function resolveWslWindowsUsername(): string | null;
-/** Default Windows-side folder: `%LOCALAPPDATA%\\Temp\\wsl-crashes` under the host mount. */
-export declare function resolveWslCrashDumpDir(options?: {
-    hostMount?: string;
-    windowsUser?: string | null;
-    crashDumpDir?: string;
-}): string | null;
-/** Parse WSL dump names like `wsl-crash-1726372480-366-_usr_bin_node-6.dmp`. */
-export declare function parseWslCrashDumpFilename(name: string): {
-    executableHint: string | null;
-    signal: number | null;
-    pid: number | null;
-};
-export declare function readKernelCorePattern(): string | null;
-export declare function isWslCaptureCrashPattern(corePattern: string | null): boolean;
-/** Best-effort parse of `%USERPROFILE%/.wslconfig` crash-dump knobs. */
-export declare function readWslConfigCrashDumpSettings(windowsUser: string, hostMount?: string): WslConfigCrashDumpSettings | null;
-/**
- * Observe Windows-side WSL crash dumps. Returns `null` on non-WSL hosts.
- * When the directory is missing, returns a healthy empty observation.
- */
-export declare function observeWslCrashDumps(options?: ObserveWslCrashDumpsOptions): WslCrashDumpObservation | null;
-export declare function summarizeWslCrashDumpRecoverySteps(input?: {
-    wslCaptureEnabled?: boolean;
-    dumpsDisabledInWslConfig?: boolean;
-}): string;

package/dist/wsl-host.d.ts

@@ -1,71 +0,0 @@
-/**
- * WSL host disk probe.
- *
- * Under WSL, the runtime VHDX (mounted at `/`) grows dynamically into the
- * Windows host C: drive. When Windows C: fills up, the VHDX cannot expand:
- * writes return SIGBUS, workers exit 135, and the Vmmem VM degrades while
- * the Linux-side `statfs /` still reports plenty of free space inside the
- * VHDX. This module gives the harness a cheap signal for that pressure so
- * it can block dispatch *before* a large npm install/build pushes Windows
- * C: into the ground.
- */
-/** Default warn threshold for the Windows host disk (25 GiB free). */
-export declare const DEFAULT_WSL_HOST_WARN_FREE_BYTES: number;
-/** Default critical threshold for the Windows host disk (12 GiB free). Below
- * this, large rebuilds have been observed to trigger SIGBUS / exit 135 on
- * WSL when the VHDX cannot grow further. */
-export declare const DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES: number;
-/** Default Windows host mount point under WSL. Overridable via env or option. */
-export declare const DEFAULT_WSL_HOST_MOUNT = "/mnt/c";
-export interface WslHostDiskShape {
-    ok: boolean;
-    /** Mount point that was probed. */
-    path: string;
-    freeBytes: number;
-    totalBytes: number;
-    usedPercent: number;
-    warnBelowBytes: number;
-    criticalBelowBytes: number;
-    /** Human-readable explanation when the host disk is under pressure. */
-    reason: string | null;
-    /** True when the probe itself failed (mount missing, statfs error). */
-    probeError: string | null;
-}
-/**
- * Cheap WSL detection. Reads `/proc/sys/kernel/osrelease` (kernel string
- * contains "microsoft" / "WSL2" on Microsoft's WSL kernel) and falls back
- * to `/proc/version`. Both reads are one-shot and gated by `existsSync`,
- * so non-Linux hosts return false without throwing.
- */
-export declare function isWslHost(): boolean;
-export interface ObserveWslHostDiskOptions {
-    /** Override the Windows host mount path (e.g. `/mnt/d`). Falls back to
-     * `KYNVER_WSL_HOST_MOUNT` env, then `/mnt/c`. */
-    wslHostMount?: string;
-    wslHostFreeWarnBytes?: number;
-    wslHostFreeCriticalBytes?: number;
-    /** Override WSL detection for tests / cross-platform CI:
-     * `true` → treat host as WSL; `false` → treat host as non-WSL;
-     * `undefined` → autodetect via `isWslHost()`. */
-    forceWsl?: boolean;
-    /** Test seam — swap in a fake statfs. */
-    statfs?: (path: string) => {
-        bavail: bigint | number;
-        blocks: bigint | number;
-        bsize: bigint | number;
-    };
-}
-/**
- * Probe the Windows host disk under WSL. Returns `null` when this host is
- * not WSL (so callers can treat the field as optional in the gate output).
- * When WSL but the mount is unreachable, returns a `probeError` row with
- * `ok = false` rather than throwing — the gate must still block dispatch
- * because we can't prove the host disk is healthy.
- */
-export declare function observeWslHostDisk(options?: ObserveWslHostDiskOptions): WslHostDiskShape | null;
-/**
- * Short operator recovery hint embedded in gate reasons so AgentOS evidence
- * surfaces actionable steps without a doc lookup. Keep terse — full runbook
- * lives at `docs/runbooks/wsl-disk-pressure.md`.
- */
-export declare function summarizeWslRecoverySteps(): string;