@kynver-app/runtime 0.2.24 → 0.2.28

package/dist/daemon-supervision/policy.d.ts

@@ -1,16 +0,0 @@
-import type { KynverUserConfig } from "../config.js";
-import { type SupportedHostKind } from "./host.js";
-/** Who owns daemon process restarts on this box (Kynver-owned, not Hermes cron). */
-export type DaemonSupervisionOwner = "keeper" | "systemd";
-export interface DaemonSupervisionPolicy {
-    hostKind: SupportedHostKind;
-    owner: DaemonSupervisionOwner;
-    /** Env keys written during setup/start so the server knows a local daemon owns cron. */
-    envUpdates: Record<string, string>;
-    guidance: string[];
-}
-export declare function defaultSupervisionOwner(hostKind: SupportedHostKind): DaemonSupervisionOwner;
-export declare function resolveSupervisionOwner(config: KynverUserConfig, hostKind: SupportedHostKind, args?: Record<string, string | boolean>): DaemonSupervisionOwner;
-export declare function supervisionEnvUpdates(): Record<string, string>;
-export declare function formatSupervisionGuidance(hostKind: SupportedHostKind, owner: DaemonSupervisionOwner): string[];
-export declare function buildDaemonSupervisionPolicy(config: KynverUserConfig, args?: Record<string, string | boolean>, hostKind?: SupportedHostKind): DaemonSupervisionPolicy;

package/dist/daemon-supervision/setup.d.ts

@@ -1,23 +0,0 @@
-import { type KynverUserConfig } from "../config.js";
-import { type DaemonSupervisionOwner, type DaemonSupervisionPolicy } from "./policy.js";
-import type { SupportedHostKind } from "./host.js";
-export interface DaemonSupervisionSetupResult {
-    policy: DaemonSupervisionPolicy;
-    configPath: string;
-    envFilePath: string;
-    envChanged: boolean;
-    configUpdated: boolean;
-}
-export interface DaemonSupervisionPersistIdentity {
-    agentOsId: string;
-    runId: string;
-}
-export interface DaemonSupervisionConfigIdentity extends DaemonSupervisionPersistIdentity {
-    owner: DaemonSupervisionOwner;
-}
-/** Partial ~/.kynver/config.json updates for restart/watchdog supervision identity. */
-export declare function buildDaemonSupervisionConfigUpdates(config: KynverUserConfig, identity: DaemonSupervisionConfigIdentity): Partial<KynverUserConfig>;
-export declare function defaultSystemdUserUnitPath(): string;
-export declare function isSystemdSupervisionInstalled(): boolean;
-export declare function applyDaemonSupervisionSetup(config: KynverUserConfig, args?: Record<string, string | boolean>, hostKind?: SupportedHostKind, identity?: DaemonSupervisionPersistIdentity): DaemonSupervisionSetupResult;
-export declare function supervisionOwnerForDoctor(config: KynverUserConfig, hostKind: SupportedHostKind): DaemonSupervisionOwner;

package/dist/daemon-supervision/start.d.ts

@@ -1,26 +0,0 @@
-import { installSystemdUserDaemon } from "../cron/cron-install-systemd.js";
-import { type KynverUserConfig } from "../config.js";
-export interface EnsureDaemonSupervisionInput {
-    config: KynverUserConfig;
-    agentOsId: string;
-    runId: string;
-    args: Record<string, string | boolean>;
-}
-export interface EnsureDaemonSupervisionResult {
-    action: "keeper" | "systemd_installed" | "systemd_guided" | "systemd_skipped";
-    owner: "keeper" | "systemd";
-    systemd?: ReturnType<typeof installSystemdUserDaemon>;
-    blockers?: string[];
-}
-/**
- * Before `kynver start` hands off to the keeper, persist supervision env and
- * optionally install the Linux systemd user unit (logout-surviving restarts).
- */
-export declare function ensureDaemonSupervisionForStart(input: EnsureDaemonSupervisionInput): Promise<EnsureDaemonSupervisionResult>;
-/** When systemd install succeeds, `kynver start` must not spawn a foreground keeper. */
-export declare function shouldDelegateStartToSystemd(result: EnsureDaemonSupervisionResult): boolean;
-export declare function formatSystemdDelegationGuidance(unitName?: string): string[];
-export declare function summarizeSupervisionForStart(config: KynverUserConfig, args: Record<string, string | boolean>): {
-    owner: "keeper" | "systemd";
-    guidance: string[];
-};

package/dist/daemon-supervision/supervision-health.d.ts

@@ -1,20 +0,0 @@
-import type { KynverUserConfig } from "../config.js";
-import type { DaemonSupervisionOwner } from "./policy.js";
-export interface SupervisionHealthOptions {
-    envFilePath?: string;
-    /** Injectable for tests. */
-    systemdUnitActive?: () => boolean;
-}
-export interface SupervisionHealth {
-    owner: DaemonSupervisionOwner | null;
-    daemonPresentSignal: boolean;
-    systemdUnitInstalled: boolean;
-    systemdUnitActive: boolean;
-    /** True when restart policy is persisted or inferable from a healthy supervised daemon. */
-    effectivelyConfigured: boolean;
-}
-/**
- * Infer whether a keeper/systemd-owned daemon is already healthy on this host,
- * so doctor checks avoid stale warnings on upgraded installs.
- */
-export declare function assessSupervisionHealth(config: KynverUserConfig, options?: SupervisionHealthOptions): SupervisionHealth;

package/dist/daemon-supervision/verify.d.ts

@@ -1,13 +0,0 @@
-import type { KynverUserConfig } from "../config.js";
-export interface AssessDaemonSupervisionOptions {
-    /** Override for tests; defaults to ~/.kynver/.env */
-    envFilePath?: string;
-    systemdUnitActive?: () => boolean;
-}
-export interface DaemonSupervisionVerifyCheck {
-    id: string;
-    ok: boolean;
-    summary: string;
-    remediation?: string;
-}
-export declare function assessDaemonSupervisionChecks(config: KynverUserConfig, options?: AssessDaemonSupervisionOptions): DaemonSupervisionVerifyCheck[];

package/dist/daemon.d.ts

@@ -1,5 +0,0 @@
-export declare function runDaemon(args: Record<string, string | boolean>): Promise<void>;
-export { runPipelineTick } from "./pipeline-tick.js";
-export { dispatchRun } from "./dispatch.js";
-export { sweepRun } from "./sweep.js";
-export { completeWorker } from "./worker-ops.js";

package/dist/db-credential-env-paths.d.ts

@@ -1,13 +0,0 @@
-/** Expand a leading `~/` for filesystem use. */
-export declare function expandHomePath(filePath: string): string;
-/**
- * Candidate `.env` paths for selective production DB key reads.
- * Order: explicit `KYNVER_ENV_FILE` → walk up from `cwd` → `~/.kynver/.env` →
- * `defaultRepo` from `~/.kynver/config.json`.
- */
-export declare function discoverProductionDbEnvFilePaths(options?: {
-    cwd?: string;
-    env?: NodeJS.ProcessEnv;
-    /** Injectable for tests; defaults to `os.homedir()`. */
-    homeDir?: string;
-}): string[];

package/dist/db-credential-resolver.d.ts

@@ -1,38 +0,0 @@
-/** How production DATABASE_URL was obtained (no secrets in this enum). */
-export type DbCredentialSource = "neon-cli" | "env:KYNVER_PRODUCTION_DATABASE_URL" | "env:PRODUCTION_DATABASE_URL" | "env-file:PRODUCTION_DATABASE_URL" | "env-file:KYNVER_PRODUCTION_DATABASE_URL";
-export interface DbCredentialResolution {
-    ok: true;
-    databaseUrl: string;
-    source: DbCredentialSource;
-    hint: string;
-}
-export interface DbCredentialFailure {
-    ok: false;
-    reason: string;
-    attempted: DbCredentialSource[];
-}
-export type ResolveProductionDatabaseResult = DbCredentialResolution | DbCredentialFailure;
-declare const ENV_FILE_KEYS: readonly ["KYNVER_PRODUCTION_DATABASE_URL", "PRODUCTION_DATABASE_URL"];
-export interface ResolveProductionDatabaseOptions {
-    cwd?: string;
-    env?: NodeJS.ProcessEnv;
-    /** Injectable for tests — runs `neon connection-string`. */
-    neonConnectionString?: (args: {
-        branch: string;
-        projectId?: string;
-        databaseName?: string;
-        roleName?: string;
-        pooled?: boolean;
-    }) => string | null;
-}
-/** Parse only production DB keys from a dotenv file — never loads unrelated secrets. */
-export declare function readProductionDbKeysFromEnvFile(envPath: string): Partial<Record<(typeof ENV_FILE_KEYS)[number], string>>;
-/**
- * Resolve a production Prisma `DATABASE_URL` at CLI execution time.
- * Precedence: Neon CLI → explicit process env → selective `.env` keys
- * (`KYNVER_ENV_FILE`, walk-up from cwd, `~/.kynver/.env`, `defaultRepo/.env`).
- */
-export declare function resolveProductionDatabaseUrl(options?: ResolveProductionDatabaseOptions): ResolveProductionDatabaseResult;
-/** Set `process.env.DATABASE_URL` from resolver; logs source + host hint to stderr (no secrets). */
-export declare function applyProductionDatabaseToProcess(options?: ResolveProductionDatabaseOptions): DbCredentialResolution;
-export {};

package/dist/db-url-hint.d.ts

@@ -1,4 +0,0 @@
-/**
- * Host + database name only (no user/password) for logs and operator confirmation.
- */
-export declare function safeDatabaseUrlHint(url: string | undefined): string;

package/dist/default-repo-cli.d.ts

@@ -1,20 +0,0 @@
-import { presentUserConfig } from "./config.js";
-import { formatResolvedDefaultRepo, type ResolvedDefaultRepo } from "./default-repo.js";
-export interface EnsureDefaultRepoResult {
-    ok: boolean;
-    remediated: boolean;
-    alreadyPersisted: boolean;
-    configPath: string;
-    resolved: ReturnType<typeof formatResolvedDefaultRepo> | null;
-    config?: ReturnType<typeof presentUserConfig>;
-    reason?: string;
-    remediation?: string;
-}
-export declare function ensureDefaultRepo(opts?: {
-    cwd?: string;
-}): EnsureDefaultRepoResult;
-export declare function runEnsureDefaultRepoCli(json?: boolean): void;
-export declare function summarizeResolvedDefaultRepo(resolved: ResolvedDefaultRepo | null): {
-    status: "pass" | "warn";
-    remediation?: string;
-};

package/dist/default-repo-discovery.d.ts

@@ -1,25 +0,0 @@
-export type DefaultRepoDiscoverySource = "cwd_git" | "runtime_checkout" | "well_known_path";
-export interface DiscoveredDefaultRepo {
-    repo: string;
-    source: DefaultRepoDiscoverySource;
-}
-export declare function isKynverMonorepoRoot(repoRoot: string): boolean;
-export declare function gitRepoRoot(startDir: string): string | null;
-export declare function discoverDefaultRepoCandidates(opts?: {
-    cwd?: string;
-    runtimeModuleUrl?: string;
-}): DiscoveredDefaultRepo[];
-export declare function discoverDefaultRepo(opts?: {
-    cwd?: string;
-    runtimeModuleUrl?: string;
-}): DiscoveredDefaultRepo | null;
-/** Harness worker worktrees are valid for ephemeral resolution but poor durable defaultRepo targets. */
-export declare function isHarnessWorktreeRepo(repo: string): boolean;
-/**
- * Prefer stable monorepo checkouts when persisting defaultRepo (setup, doctor remediation).
- * Falls back to cwd when no durable candidate exists.
- */
-export declare function discoverDefaultRepoForPersistence(opts?: {
-    cwd?: string;
-    runtimeModuleUrl?: string;
-}): DiscoveredDefaultRepo | null;

package/dist/default-repo.d.ts

@@ -1,32 +0,0 @@
-import { type KynverUserConfig } from "./config.js";
-import { type DefaultRepoDiscoverySource, type DiscoveredDefaultRepo } from "./default-repo-discovery.js";
-export type DefaultRepoSource = "config" | "env_default_repo" | "env_harness_repo" | DefaultRepoDiscoverySource;
-export interface ResolvedDefaultRepo {
-    repo: string;
-    source: DefaultRepoSource;
-    persistedInConfig: boolean;
-}
-export interface ResolveDefaultRepoOptions {
-    config?: KynverUserConfig;
-    env?: NodeJS.ProcessEnv;
-    cwd?: string;
-    runtimeModuleUrl?: string;
-}
-export declare function resolveDefaultRepo(opts?: ResolveDefaultRepoOptions): ResolvedDefaultRepo | null;
-/** Discovery for setup/doctor persistence — skips harness worktrees when a stable checkout exists. */
-export declare function resolveDefaultRepoForPersistence(opts?: ResolveDefaultRepoOptions): ResolvedDefaultRepo | null;
-export declare function persistDefaultRepo(repo: string, existing?: KynverUserConfig): KynverUserConfig;
-export declare function remediateDefaultRepo(opts?: ResolveDefaultRepoOptions): {
-    ok: true;
-    resolved: ResolvedDefaultRepo;
-    config: KynverUserConfig;
-} | {
-    ok: false;
-    reason: string;
-};
-export declare function formatResolvedDefaultRepo(resolved: ResolvedDefaultRepo): {
-    defaultRepo: string;
-    source: DefaultRepoSource;
-    persistedInConfig: boolean;
-};
-export type { DiscoveredDefaultRepo };

package/dist/device-login.d.ts

@@ -1,8 +0,0 @@
-/**
- * Run the device-authorization login flow. Returns `{ ok, apiKey }`. Prints
- * progress to the console. Does not exit the process (the caller decides).
- */
-export declare function runDeviceLogin(args: Record<string, string | boolean>): Promise<{
-    ok: boolean;
-    apiKey?: string;
-}>;

package/dist/discard-disposable.d.ts

@@ -1,6 +0,0 @@
-export declare function discardDisposableArtifacts(args: Record<string, string | boolean>): {
-    ok: boolean;
-    removed: string[];
-    reason?: string;
-};
-export declare function discardDisposableCli(args: Record<string, string | boolean>): void;

package/dist/disk-gate.d.ts

@@ -1,25 +0,0 @@
-import type { DispatchNextDiskGateShape } from "./callbacks.js";
-import { type ObserveWslCrashDumpsOptions } from "./wsl-crash-dumps.js";
-import { type ObserveWslHostDiskOptions } from "./wsl-host.js";
-export interface ObserveDiskGateInput {
-    diskPath?: string;
-    diskFreeWarnBytes?: number;
-    diskFreeCriticalBytes?: number;
-    diskMaxUsedPercent?: number;
-    diskHardMaxUsedPercent?: number;
-    /** Opt-out for the WSL host disk probe — leave `false`/undefined by
-     * default so we always check `/mnt/c` under WSL. */
-    skipWslHostCheck?: boolean;
-    wslHost?: ObserveWslHostDiskOptions;
-    /** Opt-out for the Windows-side wsl-crashes probe. */
-    skipWslCrashDumpCheck?: boolean;
-    wslCrashDumps?: ObserveWslCrashDumpsOptions;
-}
-export declare function observeRunnerDiskGate(input?: ObserveDiskGateInput): DispatchNextDiskGateShape;
-/**
- * Operator escape hatch (mirrors `KYNVER_CLEANUP_DISK_PRESSURE_FORCE`):
- * `KYNVER_DISPATCH_DISK_GATE_FORCE=ok|open|none` pins the gate open with the
- * suppressed reason kept visible; `block|pressured` forces it closed. The
- * hosted server honors the same env on its side, so either end can unblock.
- */
-export declare function applyDiskGateForce(gate: DispatchNextDiskGateShape): DispatchNextDiskGateShape;

package/dist/dispatch-callback-timeout.d.ts

@@ -1 +0,0 @@
-export declare function resolveDispatchCallbackTimeoutMs(): number;

package/dist/dispatch-claim-release.d.ts

@@ -1,23 +0,0 @@
-export interface ReleaseDispatchClaimInput {
-    baseUrl: string;
-    secret: string;
-    agentOsId: string;
-    taskId: string;
-    leaseOwner: string;
-    /** The lease token from claim time — the server refuses a superseded release (§7.7). */
-    leaseToken?: string | null;
-    failureDetail?: string;
-}
-export interface ReleaseDispatchClaimOutcome {
-    released: boolean;
-    releaseResponse: unknown;
-    httpOk: boolean;
-    /** True only when the POST itself failed (no HTTP response at all) — a
-     * transport failure is NOT a server refusal and callers that bracket on
-     * refusal must not bracket on it (D1b review A2). */
-    transportError: boolean;
-}
-/**
- * Hand a dispatch-next lease back to the board when local worker spawn did not start.
- */
-export declare function releaseDispatchClaimAfterSpawnFailure(input: ReleaseDispatchClaimInput): Promise<ReleaseDispatchClaimOutcome>;

package/dist/dispatch-lane-normalization.d.ts

@@ -1,14 +0,0 @@
-/** Runtime mirror of server dispatch lane normalization (keep in sync). */
-export type DispatchNextLane = "implementation" | "review" | "landing" | "any";
-export type DispatchLaneTaskHints = {
-    title?: string | null;
-    executorRef?: string | null;
-    personaSlug?: string | null;
-    status?: string | null;
-    roleLane?: string | null;
-};
-export declare function roleLaneToDispatchLane(roleLane: string | null | undefined): DispatchNextLane | null;
-export declare function normalizeDispatchNextLaneFilter(raw: string | null | undefined): DispatchNextLane | undefined;
-export declare function inferRoleLaneFromTaskHints(task: DispatchLaneTaskHints): string | null;
-export declare function inferTaskDispatchLane(task: DispatchLaneTaskHints): DispatchNextLane;
-export declare function resolveDispatchNextLaneFilter(raw: string | null | undefined): DispatchNextLane;

package/dist/dispatch-model-guard.d.ts

@@ -1,26 +0,0 @@
-import type { ModelRoutingDecision } from "./model-routing.js";
-export interface DispatchModelGuardInput {
-    task?: Record<string, unknown> | null;
-    routing: ModelRoutingDecision;
-    explicitProvider?: string | null;
-    explicitModel?: string | null;
-}
-export interface DispatchModelGuardResult {
-    ok: boolean;
-    error?: string;
-    requested?: {
-        provider?: string;
-        model?: string;
-        source: string;
-    };
-    resolved?: {
-        provider: string;
-        model?: string;
-        rule: string;
-    };
-}
-/**
- * Block spawn when the board row (or CLI) requested a non-Cursor provider/model
- * but routing resolved to Cursor — silent downgrade is worse than an explicit skip.
- */
-export declare function assessDispatchModelGuard(input: DispatchModelGuardInput): DispatchModelGuardResult;

package/dist/dispatch-progress.d.ts

@@ -1,3 +0,0 @@
-/** Structured stderr progress for long multi-worker dispatch fanout (orchestrator-visible). */
-export declare function emitDispatchProgress(payload: Record<string, unknown>): void;
-export declare function isDispatchCallbackTransportFailure(response: unknown): boolean;

package/dist/dispatch-resource-gate.d.ts

@@ -1,20 +0,0 @@
-import { type WorkspaceRuntimePreferences } from "./workspace-runtime-config.js";
-import { type ObserveResourceGateInput, type RunnerResourceGateShape } from "./resource-gate.js";
-interface DispatchResourceGateDependencies {
-    fetchPreferences: (agentOsId: string, args: Record<string, string | boolean>) => Promise<WorkspaceRuntimePreferences | null>;
-    configuredOverride: (preferences: WorkspaceRuntimePreferences | null | undefined, env?: NodeJS.ProcessEnv) => number | undefined;
-    observe: (input: ObserveResourceGateInput) => RunnerResourceGateShape;
-}
-/**
- * Resolve interactive dispatch capacity from the same workspace preference as
- * the keeper daemon. Local config/env/auto sizing remains the fallback when
- * the workspace has no authoritative Ghost cap; Forge ignores the workspace
- * override through configuredMaxWorkersOverrideForBox.
- */
-export declare function observeInteractiveDispatchResourceGate(input: {
-    runId: string;
-    agentOsId: string;
-    args: Record<string, string | boolean>;
-    env?: NodeJS.ProcessEnv;
-}, dependencies?: DispatchResourceGateDependencies): Promise<RunnerResourceGateShape>;
-export {};

package/dist/dispatch-start-abort.d.ts

@@ -1,3 +0,0 @@
-import type { HarnessWorkerRecord } from "./status.js";
-/** Stop a just-spawned worker when dispatch-start readback fails closed. */
-export declare function abortDispatchedWorkerAfterReadbackFailure(runId: string, worker: HarnessWorkerRecord, reason: string): HarnessWorkerRecord;

package/dist/dispatch-start-readback.d.ts

@@ -1,27 +0,0 @@
-import type { HarnessWorkerRecord } from "./status.js";
-import type { TaskLeaseSnapshot } from "./monitor/monitor.types.js";
-export declare const DISPATCH_START_READBACK_PREFIX = "dispatch_start_readback_failed:";
-export interface DispatchStartReadbackInput {
-    agentOsId: string;
-    taskId: string;
-    leaseOwner: string;
-    expectedLeaseToken: string;
-    worker: HarnessWorkerRecord;
-    baseUrl: string;
-    secret: string;
-}
-export interface DispatchStartReadbackResult {
-    ok: boolean;
-    error?: string;
-    detail?: Record<string, unknown>;
-    snapshot?: TaskLeaseSnapshot;
-}
-export declare function formatDispatchStartReadbackFailure(reason: string): string;
-export declare function assessDispatchStartReadback(input: {
-    snapshot: TaskLeaseSnapshot | null | undefined;
-    leaseOwner: string;
-    expectedLeaseToken: string;
-    worker: HarnessWorkerRecord;
-}): DispatchStartReadbackResult;
-/** Post-spawn AgentOS readback — board must show a live lease matching the claim token. */
-export declare function verifyDispatchStartReadback(input: DispatchStartReadbackInput): Promise<DispatchStartReadbackResult>;

package/dist/dispatch.d.ts

@@ -1,24 +0,0 @@
-import { runDirectory } from "./run-store.js";
-import type { ContextEnvelopeEvidenceSnapshot, HarnessMemoryQualityCaptureSnapshot, InstructionPolicyEvidenceSnapshot, PersonaContextEvidenceSnapshot, RuntimeEnvelopeEvidenceSnapshot } from "./status.js";
-export declare const DEFAULT_DISPATCH_LEASE_MS: number;
-export interface HarnessWorkerDispatchContext {
-    instructionPolicyMarkdown: string | null;
-    instructionPolicyFingerprint: string | null;
-    instructionPolicyEvidence: InstructionPolicyEvidenceSnapshot | null;
-    memoryQualityCapture: HarnessMemoryQualityCaptureSnapshot | null;
-    memoryQualityPromptMarkdown: string | null;
-    personaMarkdown: string | null;
-    personaSlug: string | null;
-    personaEvidence: PersonaContextEvidenceSnapshot | null;
-    personaInjectionReady: boolean;
-    contextEnvelopeMarkdown: string | null;
-    contextEnvelopeEvidence: ContextEnvelopeEvidenceSnapshot | null;
-    contextEnvelopeReady: boolean;
-    runtimeEnvelopeMarkdown: string | null;
-    runtimeEnvelopeEvidence: RuntimeEnvelopeEvidenceSnapshot | null;
-    runtimeEnvelopeReady: boolean;
-}
-export declare function readHarnessWorkerContext(decision: Record<string, unknown>): HarnessWorkerDispatchContext | null;
-export declare function buildDispatchTaskText(task: Record<string, unknown>, agentOsId: string): string;
-export declare function dispatchRun(args: Record<string, string | boolean>): Promise<Record<string, unknown> | void>;
-export { runDirectory };

package/dist/disposable-artifacts.d.ts

@@ -1,2 +0,0 @@
-export declare function extractDisposableArtifactsRemoved(finalResult: unknown): string[];
-export declare function dirtyPathsCoveredByDisposableRemoval(changedFiles: string[], removed: readonly string[]): boolean;

package/dist/doctor/context-envelope-cli.d.ts

@@ -1 +0,0 @@
-export declare function runContextEnvelopeDoctorCli(args: Record<string, string | boolean>): Promise<void>;

package/dist/doctor/context-envelope.d.ts

@@ -1,13 +0,0 @@
-import { type ContextEnvelopeDoctorProbes } from "./context-envelope.probes.js";
-import type { ContextEnvelopeDoctorReport } from "./context-envelope.types.js";
-/** Stable non-existent anchor for fail-closed probe — never a real row id. */
-export declare const CONTEXT_ENVELOPE_SMOKE_MISSING_ANCHOR_ID = "00000000-0000-4000-8000-000000000001";
-export interface AssessContextEnvelopeDoctorInput {
-    slug?: string;
-    agentOsId?: string;
-    baseUrl?: string;
-    taskId?: string;
-    apiKey?: string;
-}
-export declare function assessContextEnvelopeDoctor(input?: AssessContextEnvelopeDoctorInput, probes?: ContextEnvelopeDoctorProbes): Promise<ContextEnvelopeDoctorReport>;
-export declare function redactContextEnvelopeDoctorReport(report: ContextEnvelopeDoctorReport, secret?: string): ContextEnvelopeDoctorReport;

package/dist/doctor/context-envelope.probes.d.ts

@@ -1,25 +0,0 @@
-export interface HttpJsonResult {
-    ok: boolean;
-    status: number;
-    response: unknown;
-}
-export interface ContextEnvelopeDoctorProbeConfig {
-    slug: string;
-    agentOsId: string;
-    baseUrl: string;
-    apiKey?: string;
-    runnerSecret?: string;
-}
-export interface ContextEnvelopeDoctorProbes {
-    loadConfig(): {
-        slug: string;
-        agentOsId: string;
-        baseUrl: string;
-        apiKey?: string;
-    };
-    resolveRunnerSecret(agentOsId: string, baseUrl: string): Promise<string | null>;
-    fetchContextEnvelope(config: ContextEnvelopeDoctorProbeConfig, anchorType: string, anchorId: string): Promise<HttpJsonResult>;
-    fetchTasks(config: ContextEnvelopeDoctorProbeConfig, limit?: number): Promise<HttpJsonResult>;
-    fetchRetrieveTelemetryDiagnostic(config: ContextEnvelopeDoctorProbeConfig): Promise<HttpJsonResult>;
-}
-export declare function defaultContextEnvelopeDoctorProbes(): ContextEnvelopeDoctorProbes;

package/dist/doctor/context-envelope.types.d.ts

@@ -1,42 +0,0 @@
-import type { DoctorSection } from "./doctor.types.js";
-/** Redacted operator summary for a live context-envelope smoke probe. */
-export interface ContextEnvelopeSmokeSummary {
-    slug: string;
-    agentOsId: string;
-    taskId: string;
-    anchor: {
-        type: string;
-        id: string;
-        exists: boolean;
-        title: string | null;
-        status: string | null;
-    };
-    personaSlug: string | null;
-    memoryCount: number;
-    operatingRuleCount: number;
-    withinBudget: boolean;
-    projection: string | null;
-    mode: string | null;
-    contractVersion: string | null;
-    serializedBytes: number | null;
-}
-export interface ContextEnvelopeTelemetrySummary {
-    slug: string;
-    status: string;
-    summary: string;
-    eventCount: number | null;
-    retrieveCount: number | null;
-}
-export interface ContextEnvelopeDoctorReport {
-    command: "doctor context-envelope";
-    ready: boolean;
-    summary: string;
-    counts: {
-        pass: number;
-        warn: number;
-        fail: number;
-    };
-    sections: DoctorSection[];
-    envelopeSummary: ContextEnvelopeSmokeSummary | null;
-    telemetryDiagnostic: ContextEnvelopeTelemetrySummary | null;
-}

package/dist/doctor/doctor.types.d.ts

@@ -1,50 +0,0 @@
-export type DoctorCheckStatus = "pass" | "warn" | "fail";
-export interface DoctorCheck {
-    id: string;
-    label: string;
-    status: DoctorCheckStatus;
-    summary: string;
-    remediation?: string;
-    details?: Record<string, unknown>;
-}
-export interface DoctorSection {
-    id: string;
-    label: string;
-    checks: DoctorCheck[];
-}
-export interface RuntimeTakeoverDoctorReport {
-    command: "doctor runtime-takeover";
-    ready: boolean;
-    summary: string;
-    counts: {
-        pass: number;
-        warn: number;
-        fail: number;
-    };
-    sections: DoctorSection[];
-    /** Optional remediation actions applied before this report was generated. */
-    notes?: string[];
-}
-/**
- * M0.3 self-serve runner install and device-binding lifecycle report.
- *
- * Covers: install → device login → workspace binding → repo selection →
- * runner credential → supervised daemon.  Ready when stages 1–5 all pass
- * (daemon liveness in stage 6 is advisory / warn-only).
- */
-export interface RunnerInstallDoctorReport {
-    command: "doctor runner-install";
-    ready: boolean;
-    /**
-     * Highest lifecycle stage that has fully passed (0 = none).
-     * Stage definitions: 1=install, 2=login, 3=workspace, 4=repo, 5=credential, 6=daemon.
-     */
-    lifecycleStage: 0 | 1 | 2 | 3 | 4 | 5 | 6;
-    summary: string;
-    counts: {
-        pass: number;
-        warn: number;
-        fail: number;
-    };
-    sections: DoctorSection[];
-}

package/dist/doctor/github-readiness.d.ts

@@ -1,16 +0,0 @@
-import type { CommandProbeResult } from "./runtime-takeover.probes.js";
-export type GitHubReadinessSource = "env" | "gh-cli" | "missing";
-export interface GitHubReadinessProbe {
-    envGithubToken?: boolean;
-    envGhToken?: boolean;
-    ghAuthToken(): CommandProbeResult;
-}
-export interface GitHubReadinessResult {
-    viable: boolean;
-    source: GitHubReadinessSource;
-    summary: string;
-}
-/**
- * Read-only GitHub auth probe for doctor checks. Never prints or persists tokens.
- */
-export declare function probeGitHubReadiness(probe: GitHubReadinessProbe): GitHubReadinessResult;

package/dist/doctor/index.d.ts

@@ -1,7 +0,0 @@
-export type { DoctorCheck, DoctorCheckStatus, DoctorSection, RuntimeTakeoverDoctorReport, } from "./doctor.types.js";
-export { assessRuntimeTakeoverReadiness, } from "./runtime-takeover.js";
-export { defaultRuntimeTakeoverProbes, type CommandProbeResult, type RuntimeTakeoverProbes, } from "./runtime-takeover.probes.js";
-export { runRuntimeTakeoverDoctorCli } from "./runtime-takeover-cli.js";
-export { assessContextEnvelopeDoctor, redactContextEnvelopeDoctorReport, CONTEXT_ENVELOPE_SMOKE_MISSING_ANCHOR_ID, } from "./context-envelope.js";
-export type { ContextEnvelopeDoctorReport, ContextEnvelopeSmokeSummary, ContextEnvelopeTelemetrySummary, } from "./context-envelope.types.js";
-export { runContextEnvelopeDoctorCli } from "./context-envelope-cli.js";

package/dist/doctor/local-store-cli.d.ts

@@ -1,11 +0,0 @@
-/**
- * `kynver doctor local-store [--no-probe]` — report-only in D0: always exits
- * 0 (no surface consults the store yet, so nothing may gate on this); the
- * posture lives in the printed report.
- *
- * The default openability probe CREATES `local-run-store.sqlite` under the
- * harness root on a host that never opened it (inert — nothing reads it with
- * flags off). Pass `--no-probe` to report current lifecycle state without
- * touching disk.
- */
-export declare function runLocalStoreDoctorCli(args?: Record<string, unknown>): void;