@kynver-app/runtime 0.2.24 → 0.2.28

package/dist/vercel/vercel-api.d.ts

@@ -1,17 +0,0 @@
-export interface VercelDeploymentLookupResult {
-    ok: boolean;
-    readyState: string | null;
-    previewUrl: string | null;
-    error: string | null;
-}
-export interface VercelDeploymentLookupOptions {
-    token?: string | null;
-    teamId?: string | null;
-    fetchImpl?: typeof fetch;
-}
-/**
- * Fetch deployment state by id (`dpl_*`) or `*.vercel.app` host URL.
- * Requires `VERCEL_TOKEN` (or explicit token) — never shells out to the Vercel CLI.
- */
-export declare function fetchVercelDeploymentStatus(deploymentIdOrUrl: string, options?: VercelDeploymentLookupOptions): Promise<VercelDeploymentLookupResult>;
-export declare function mapVercelReadyStateToEvidenceStatus(readyState: string | null, githubPending: boolean): "ready" | "building" | "error";

package/dist/vercel/vercel-evidence.d.ts

@@ -1,48 +0,0 @@
-import { type VercelDeploymentLookupResult } from "./vercel-api.js";
-import { type GitHubCommitStatusRow, type GitHubStatusState, type GitHubVercelStatusContext } from "./vercel-github-status.js";
-import { type ClassifiedVercelUrl } from "./vercel-url.js";
-export type VercelEvidenceStatus = "ready" | "building" | "error" | "unavailable" | "not_run";
-export interface VercelEvidenceResult {
-    status: VercelEvidenceStatus;
-    previewUrl: string | null;
-    deploymentUrl: string | null;
-    summary: string | null;
-    observedAt: string | null;
-    /** True when Vercel API lookup was not run (GitHub-only or missing token). */
-    inspectSkipped: boolean;
-    inspectReason: string | null;
-    githubState: GitHubStatusState | null;
-    vercelContext: string | null;
-}
-/** @deprecated Renamed — use VercelDeploymentLookupResult from vercel-api. */
-export type VercelInspectCommandResult = VercelDeploymentLookupResult;
-export type RunVercelDeploymentLookup = (target: string) => Promise<VercelDeploymentLookupResult>;
-/** @deprecated Renamed — use RunVercelDeploymentLookup. */
-export type RunVercelInspect = RunVercelDeploymentLookup;
-/**
- * Resolve the deployment lookup target. Never returns a vercel.com dashboard page URL.
- */
-export declare function resolveVercelInspectTarget(rawUrl: string | null | undefined): {
-    target: string | null;
-    classified: ClassifiedVercelUrl | null;
-    reason: string | null;
-};
-export declare function evidenceFromGitHubVercelStatus(statuses: GitHubCommitStatusRow[] | null | undefined, options?: {
-    observedAt?: string;
-}): VercelEvidenceResult;
-export interface CollectVercelEvidenceInput {
-    statuses?: GitHubCommitStatusRow[] | null;
-    /** When false, never call Vercel REST API (GitHub status only). Default path. */
-    allowInspect?: boolean;
-    /** @deprecated waitSeconds was for CLI inspect; ignored for API lookup. */
-    waitSeconds?: number;
-    runInspect?: RunVercelDeploymentLookup;
-    observedAt?: string;
-}
-/**
- * Prefer GitHub Vercel StatusContext.state for gates. Call Vercel REST API only when
- * inspectable (deployment host or id), GitHub state is not terminal success, and
- * `allowInspect` is true with VERCEL_TOKEN configured.
- */
-export declare function collectVercelEvidence(input: CollectVercelEvidenceInput): Promise<VercelEvidenceResult>;
-export type { GitHubVercelStatusContext };

package/dist/vercel/vercel-github-status.d.ts

@@ -1,19 +0,0 @@
-export type GitHubStatusState = "success" | "pending" | "failure" | "error" | "unknown";
-export interface GitHubCommitStatusRow {
-    context?: string | null;
-    state?: string | null;
-    target_url?: string | null;
-    description?: string | null;
-}
-export interface GitHubVercelStatusContext {
-    context: string;
-    state: GitHubStatusState;
-    targetUrl: string | null;
-    description: string | null;
-    deploymentId: string | null;
-    previewUrl: string | null;
-    dashboardUrl: string | null;
-}
-export declare function normalizeGitHubStatusState(state: unknown): GitHubStatusState;
-export declare function isVercelStatusContext(context: unknown): boolean;
-export declare function pickVercelStatusContext(statuses: GitHubCommitStatusRow[] | null | undefined): GitHubVercelStatusContext | null;

package/dist/vercel/vercel-url.d.ts

@@ -1,18 +0,0 @@
-export type VercelUrlKind = "deployment_host" | "dashboard" | "deployment_id" | "unknown";
-export interface ClassifiedVercelUrl {
-    kind: VercelUrlKind;
-    /** Original URL when it is a usable preview/deployment host. */
-    previewUrl: string | null;
-    /** Deployment id or host URL suitable for Vercel REST API lookup — never a dashboard page URL. */
-    inspectTarget: string | null;
-    /** Deployment id extracted from dashboard paths when present. */
-    deploymentId: string | null;
-}
-/** True when the string is safe for Vercel REST API deployment lookup (never a dashboard page URL). */
-export declare function isInspectableVercelTarget(target: string): boolean;
-/**
- * Classify a Vercel-related URL from GitHub commit status target_url.
- * Vercel REST API accepts deployment ids and `*.vercel.app` hosts — not vercel.com dashboard links.
- */
-export declare function classifyVercelUrl(raw: string): ClassifiedVercelUrl;
-export declare function isDashboardVercelUrl(raw: string): boolean;

package/dist/verify-live/verify-live-prompt.d.ts

@@ -1,2 +0,0 @@
-/** Instruction block appended to verify_live harness dispatch tasks. */
-export declare function formatVerifyLiveCompletionContract(): string;

package/dist/worker-cap-source.d.ts

@@ -1,29 +0,0 @@
-import type { KynverUserConfig } from "./config.js";
-export type WorkerCapSource = "workspace_override" | "env" | "config" | "auto";
-export interface ResolvedWorkerCap {
-    configuredMaxWorkers: number | null;
-    autoCap: number;
-    workerCapSource: WorkerCapSource;
-}
-export declare function resolveWorkerCap(input: {
-    config?: KynverUserConfig;
-    configuredMaxWorkersOverride?: number | null;
-    totalMemBytes: number;
-    env?: NodeJS.ProcessEnv;
-}): ResolvedWorkerCap;
-export interface SetupWorkerCapRecommendation {
-    totalMemBytes: number;
-    autoCap: number;
-    recommendedMaxWorkers: number;
-    diskPath: string;
-    diskGateOk: boolean;
-    diskFreeBytes: number | null;
-}
-/** RAM/disk-aware default for `kynver setup` when the operator omits --max-workers. */
-export declare function recommendSetupWorkerCap(input?: {
-    totalMemBytes?: number;
-    diskPath?: string;
-    diskGateOk?: boolean;
-    diskFreeBytes?: number | null;
-    config?: KynverUserConfig;
-}): SetupWorkerCapRecommendation;

package/dist/worker-env.d.ts

@@ -1,52 +0,0 @@
-/**
- * Worker spawn env scrub — harness workers must not inherit host deployment secrets.
- *
- * §7.8 hardening (kernel-plan H8 phase 1, verified leaks 2026-07-19): the
- * original denylist stopped at `_SECRET`/`_API_KEY`, letting `MEMORY_CONTENT_KEK`,
- * `LLM_BYOK_KEK`, `KYNVER_COMMAND_AUTH_KEY`, `KYNVER_INSTRUCTION_BUNDLE_KEY`,
- * and `KYNVER_MEMORY_LEDGER_KEY` reach worker children. The suffix net now
- * covers the secret-shaped families (`_KEK`, `_KEY`, `_TOKEN`, `_PASSWORD`,
- * `_PASSPHRASE`, `_SALT`) with EXPLICIT allows for the keys workers
- * legitimately need — pass-through is a documented decision, never an
- * accident:
- *
- *  - `GITHUB_TOKEN` / `GH_TOKEN`: git-push + `gh` credential-helper auth for
- *    the worker's own branch pushes.
- *  - `CLAUDE_CODE_OAUTH_TOKEN`: the worker CLI's own auth on boxes that use
- *    env-based OAuth instead of the credentials file (same trust domain as
- *    `~/.claude` — it is the worker's credential, not a deployment secret).
- *  - `*_PUBLIC_KEY`: public verification material (command-auth /
- *    instruction-bundle / ledger pins), safe by definition.
- *
- * Operator escape hatch: `KYNVER_WORKER_ENV_ALLOW` on the host (comma- or
- * whitespace-separated key names) allows additional suffix-matched keys
- * through when a box workflow needs one — it can NEVER re-admit a key on the
- * exact forbidden list below (those are known deployment secrets).
- */
-/** Exact env keys that must never reach a worker child process (not overridable). */
-export declare const FORBIDDEN_WORKER_ENV_KEYS: readonly ["ANTHROPIC_API_KEY", "ANALYST_API_KEY", "RECRUITER_API_KEY", "AUTH_SECRET", "NEXTAUTH_SECRET", "DATABASE_URL", "PRODUCTION_DATABASE_URL", "KYNVER_PRODUCTION_DATABASE_URL", "REDIS_URL", "GOOGLE_CLIENT_SECRET", "GITHUB_CLIENT_SECRET", "KYNVER_API_KEY", "KYNVER_SERVICE_SECRET", "KYNVER_RUNTIME_SECRET", "KYNVER_CRON_SECRET", "OPENCLAW_CRON_SECRET", "QSTASH_TOKEN", "QSTASH_CURRENT_SIGNING_KEY", "QSTASH_NEXT_SIGNING_KEY", "TOOL_SECRETS_KEK", "TOOL_EXECUTOR_DISPATCH_SECRET", "CLOUDFLARE_API_TOKEN", "STRIPE_SECRET_KEY", "STRIPE_WEBHOOK_SECRET", "STRIPE_IDENTITY_WEBHOOK_SECRET", "VOYAGE_API_KEY", "PERPLEXITY_API_KEY", "FRED_API_KEY", "FMP_API_KEY", "CURSOR_API_KEY", "MEMORY_CONTENT_KEK", "LLM_BYOK_KEK", "KYNVER_COMMAND_AUTH_KEY", "KYNVER_INSTRUCTION_BUNDLE_KEY", "KYNVER_MEMORY_LEDGER_KEY", "KYNVER_JWKS_PRIVATE_KEY_JWK"];
-/** Suffix-matched keys workers legitimately need — explicit decisions, see module doc. */
-export declare const ALLOWED_WORKER_ENV_KEYS: readonly ["GITHUB_TOKEN", "GH_TOKEN", "CLAUDE_CODE_OAUTH_TOKEN"];
-/** Host env var naming extra suffix-matched keys to allow through (comma/whitespace separated). */
-export declare const KYNVER_WORKER_ENV_ALLOW = "KYNVER_WORKER_ENV_ALLOW";
-export declare function isForbiddenWorkerEnvKey(key: string, opts?: {
-    operatorAllow?: ReadonlySet<string>;
-}): boolean;
-export declare function listForbiddenWorkerEnvKeys(env: NodeJS.ProcessEnv): string[];
-/**
- * §7.8 review A3 — audit visibility for the escape hatch: the operator-allow
- * entries that are PRESENT in this env and would be scrubbed without the
- * hatch (key names only, never values). An armed hatch must be visible on
- * audit surfaces, not silently absent from the forbidden list.
- */
-export declare function listOperatorAllowedWorkerEnvKeys(env: NodeJS.ProcessEnv): string[];
-export declare function scrubWorkerEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
-export interface WorkerEnvAudit {
-    forbiddenPresent: string[];
-    safe: boolean;
-    /** Present (non-empty) only when the KYNVER_WORKER_ENV_ALLOW hatch is armed for live keys. */
-    operatorAllowedActive?: string[];
-}
-export declare function auditWorkerEnv(env: NodeJS.ProcessEnv): WorkerEnvAudit;
-/** @deprecated Use {@link scrubWorkerEnv} — kept for existing imports from git.ts */
-export declare function scrubClaudeEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/dist/worker-execution-mode.d.ts

@@ -1,5 +0,0 @@
-export type WorkerExecutionMode = "write" | "read_only";
-export declare function resolveWorkerExecutionMode(task: {
-    description?: unknown;
-    executorRef?: unknown;
-}): WorkerExecutionMode;

package/dist/worker-final-result-embed.d.ts

@@ -1 +0,0 @@
-export declare function extractEmbeddedWorkerFinalResultRecord(value: string): Record<string, unknown> | null;

package/dist/worker-lease-sync.d.ts

@@ -1,15 +0,0 @@
-import type { HarnessWorkerRecord } from "./status.js";
-export interface ResolveWorkerLeaseForCallbackInput {
-    worker: HarnessWorkerRecord;
-    agentOsId: string;
-    baseUrl?: string;
-    secret?: string;
-}
-/**
- * Ensure completion/renewal uses the same lease token the board holds for this
- * worker's task. Persists a fetched token onto worker.json when missing locally.
- */
-export declare function resolveWorkerLeaseForCallback(input: ResolveWorkerLeaseForCallbackInput): Promise<{
-    leaseOwner: string | null;
-    leaseToken: string | null;
-}>;

package/dist/worker-lifecycle.d.ts

@@ -1,28 +0,0 @@
-import type { HarnessWorkerRecord, RawHarnessWorkerStatus } from "./status.js";
-export interface CompletionSnapshot {
-    finalResult?: unknown;
-    prUrl?: string | null;
-    summary?: string | null;
-}
-export declare function isCompletionAcknowledged(worker: HarnessWorkerRecord): boolean;
-export declare function completionSnapshotFromStatus(status: RawHarnessWorkerStatus): CompletionSnapshot;
-/**
- * Persist local terminal lifecycle after AgentOS acknowledges harness completion.
- * Prevents a later PID reuse or still-running wrapper from re-reporting the worker
- * as `running` once the board task has advanced.
- */
-export declare function persistCompletionAcknowledged(worker: HarnessWorkerRecord, status: RawHarnessWorkerStatus, opts?: {
-    source?: string;
-}): void;
-/**
- * When the board task has left `running` but the local worker still looks live
- * (common after server-side completion reconcile), mirror the terminal lifecycle
- * on disk so harness status matches AgentOS.
- */
-export declare function syncCompletionAcknowledgedFromOperatorTick(runId: string, operatorTick: unknown): Array<{
-    worker: string;
-    taskId: string;
-    taskStatus: string;
-}>;
-/** Reload helper for callers that already hold a worker name. */
-export declare function acknowledgeWorkerIfBoardTaskAdvanced(runId: string, workerName: string, operatorTick: unknown): boolean;

package/dist/worker-metadata-paths.d.ts

@@ -1,26 +0,0 @@
-/** True when a persisted harness path contains the historical `runs/runs` segment. */
-export declare function hasNestedRunsSegment(filePath: string): boolean;
-/**
- * Rewrite a nested `.../runs/runs/<runId>/...` path to canonical `.../runs/<runId>/...`.
- * Returns the input unchanged when no nested segment is present.
- */
-export declare function repairNestedRunsPath(filePath: string, harnessRoot: string): string;
-export declare function canonicalRunDir(harnessRoot: string, runId: string): string;
-export declare function canonicalWorkerDir(harnessRoot: string, runId: string, workerName: string): string;
-/** Historical mistaken layout when harness root ended in `/runs`. */
-export declare function legacyNestedWorkerDir(harnessRoot: string, runId: string, workerName: string): string;
-export declare function workerArtifactFileNames(): readonly string[];
-export declare function workerArtifactPaths(workerDir: string): {
-    workerJsonPath: string;
-    stdoutPath: string;
-    stderrPath: string;
-    heartbeatPath: string;
-    lastStatusPath: string;
-};
-/** Resolve the best on-disk worker.json path for a run worker entry. */
-export declare function resolveWorkerJsonPath(input: {
-    harnessRoot: string;
-    runId: string;
-    workerName: string;
-    statusPath?: string;
-}): string;

package/dist/worker-metadata-reconcile.d.ts

@@ -1,21 +0,0 @@
-import { repairMissingRunMetadata } from "./run-metadata-retention.js";
-export interface WorkerMetadataReconcileOutcome {
-    runId: string;
-    worker: string;
-    action: "materialized_run_symlink" | "repaired_run_index" | "repaired_worker_paths" | "relocated_artifacts" | "synthesized_worker_json" | "marked_abandoned" | "skipped";
-    reason: string;
-}
-export interface WorkerMetadataReconcileResult {
-    workers: WorkerMetadataReconcileOutcome[];
-    runMetadataRetention: ReturnType<typeof repairMissingRunMetadata>;
-}
-/**
- * Repair historical harness worker metadata:
- * - fix run.json index paths that still reference nested `runs/runs`
- * - relocate split artifacts into canonical worker dirs
- * - synthesize missing worker.json from last-status/heartbeat/stdout when possible
- * - mark empty abandoned worker dirs truthfully
- */
-export declare function reconcileWorkerMetadata(): WorkerMetadataReconcileResult;
-/** JSON summary for CLI / verifier scripts. */
-export declare function reconcileWorkerMetadataCli(): void;

package/dist/worker-ops.d.ts

@@ -1,45 +0,0 @@
-export declare function tryCompleteWorker(args: Record<string, string | boolean>): Promise<{
-    ok: boolean;
-    skipped?: boolean;
-    reason?: string;
-    nextAction?: string;
-    httpStatus?: number;
-    response?: unknown;
-    completionBlocked?: boolean;
-    prHandoff?: {
-        prUrl?: string;
-        created?: boolean;
-    };
-}>;
-export declare function completeWorker(args: Record<string, string | boolean>): Promise<void>;
-export declare function workerStatus(args: Record<string, string | boolean>): void;
-export declare function workerList(args: Record<string, string | boolean>): void;
-type RunBoardWorker = Record<string, unknown> & {
-    worker: string;
-    status?: string;
-    attention?: string;
-    lifecycleStage?: string | null;
-    lastActivityAt?: string | null;
-};
-interface RunBoard {
-    runId: string;
-    name: string;
-    status: string;
-    repo: string;
-    workerCount: number;
-    needsAttention: string[];
-    workers: RunBoardWorker[];
-    projection?: "compact" | "full";
-    activeFilters?: Record<string, string | boolean>;
-    resultContract?: Record<string, unknown>;
-    drilldownCommands?: Record<string, string>;
-    summary?: Record<string, unknown>;
-    controller?: Record<string, unknown>;
-}
-export declare function buildRunBoard(runId: string): RunBoard;
-export declare function buildCompactRunBoard(runId: string): RunBoard;
-export declare function publishHarnessBoardSnapshot(args: Record<string, string | boolean>, source: string): Promise<Record<string, unknown> | null>;
-export declare function runStatus(args: Record<string, string | boolean>): void;
-export declare function tailWorker(args: Record<string, string | boolean>): void;
-export declare function stopWorker(args: Record<string, string | boolean>): void;
-export {};

package/dist/worker-persona-catalog.d.ts

@@ -1,29 +0,0 @@
-export declare const WORKER_PERSONA_DISPATCH_LANES: readonly ["implementation", "review", "landing"];
-export type WorkerPersonaDispatchLane = (typeof WORKER_PERSONA_DISPATCH_LANES)[number];
-export declare const WORKER_PERSONA_DEFAULT_ROLE_LANES: readonly ["plan_author", "implementer", "report_reviewer", "deep_reviewer", "runtime_verifier", "system"];
-export type WorkerPersonaDefaultRoleLane = (typeof WORKER_PERSONA_DEFAULT_ROLE_LANES)[number];
-export interface WorkerPersonaCatalogEntry {
-    slug: string;
-    displayName: string;
-    description: string;
-    /** Harness dispatch lane reserved for this persona (null = orchestration / no dispatch). */
-    dispatchLane: WorkerPersonaDispatchLane | null;
-    /** Default plan progress role when enriching harness tasks. */
-    defaultRoleLane: WorkerPersonaDefaultRoleLane;
-}
-/**
- * Embedded structural catalog (slugs, display names, lanes; generic
- * descriptions). Lane-derivation helpers use this so dispatch semantics are
- * stable regardless of bundle state.
- */
-export declare const WORKER_PERSONA_CATALOG: readonly WorkerPersonaCatalogEntry[];
-export type WorkerPersonaCatalogSlug = (typeof WORKER_PERSONA_CATALOG)[number]["slug"];
-export declare function getWorkerPersonaCatalogEntry(slug: string | null | undefined): WorkerPersonaCatalogEntry | null;
-/** Dispatch lane reserved for a persona; null when orchestration-only or unknown. */
-export declare function getPersonaDispatchLane(slug: string | null | undefined): WorkerPersonaDispatchLane | null;
-export declare function getPersonaDefaultRoleLane(slug: string | null | undefined): WorkerPersonaDefaultRoleLane | null;
-export declare function isKnownWorkerPersonaSlug(slug: string | null | undefined): boolean;
-/** Personas whose harness dispatch lane is `review` (derived — do not hardcode slugs). */
-export declare function workerPersonaReviewSlugs(): readonly WorkerPersonaCatalogSlug[];
-/** Personas whose harness dispatch lane is `landing` (derived — do not hardcode slugs). */
-export declare function workerPersonaLandingSlugs(): readonly WorkerPersonaCatalogSlug[];

package/dist/worker-provider-policy.d.ts

@@ -1,43 +0,0 @@
-import type { ModelRoutingDecision } from "./model-routing.js";
-/** Default harness worker CLI provider when the operator expressed no preference anywhere. */
-export declare const DEFAULT_WORKER_PROVIDER = "cursor";
-/** Normalize an operator-supplied worker provider name to its canonical key. */
-export declare function normalizeWorkerProviderName(name: string): string;
-export declare function isClaudeFamilyProvider(provider: string | null | undefined): boolean;
-/**
- * True when the board row explicitly opts into a Claude/Opus worker
- * (operator override on the task).
- */
-export declare function taskAllowsClaudeWorker(task: Record<string, unknown> | null | undefined): boolean;
-export interface EnforceCursorWorkerProviderInput {
-    routing: ModelRoutingDecision;
-    task?: Record<string, unknown> | null;
-    /** Per-invocation `--provider` from the harness CLI. */
-    explicitProvider?: string | null;
-    /** When true, `--provider claude` is treated as an operator run override. */
-    explicitProviderIsOperatorOverride?: boolean;
-}
-/**
- * True when the board row expresses ANY worker-provider preference (not just
- * Claude): `workerProviderOverride`, an executorRef `provider:*` intent, or the
- * Claude override markers handled by {@link taskAllowsClaudeWorker}.
- */
-export declare function taskExpressesWorkerProviderPreference(task: Record<string, unknown> | null | undefined): boolean;
-/**
- * W2b routing authority: the Cursor coercion is a *default-only* fallback.
- * An operator preference expressed anywhere — explicit CLI `--provider`,
- * explicit CLI model (incl. provider aliases), executorRef provider intent,
- * factory `provider:*` routing, or task override markers — is authoritative
- * and never rewritten. Only preference-free Claude-family routing (e.g. the
- * global default model inferring Claude) is coerced to the Cursor default.
- */
-export declare function enforceCursorWorkerProvider(input: EnforceCursorWorkerProviderInput): ModelRoutingDecision;
-/**
- * Resolve the configured worker provider. W2b: `config.workerProvider` is the
- * operator's explicit choice and is honored verbatim (after alias
- * normalization) — the legacy behavior of downgrading Claude-family configs to
- * Cursor is removed. Only an EMPTY config falls back to the Cursor default.
- */
-export declare function resolveConfiguredWorkerProvider(configured: string | null | undefined, fallback?: string): string;
-/** Plan / Command Center executor lists — Cursor wins when both families appear. */
-export declare function preferCursorExecutor(executors: string[]): string[];

package/dist/worker-usage.d.ts

@@ -1,20 +0,0 @@
-import type { ParsedStreamUsage } from "./stream.js";
-export interface WorkerUsagePayload {
-    provider: string;
-    model: string | null;
-    inputTokens: number | null;
-    outputTokens: number | null;
-}
-export interface ResolveWorkerUsageInput {
-    /** Usage parsed from the worker's stream output (null/undefined → no payload). */
-    usage?: ParsedStreamUsage | null;
-    /** Provider key frozen at spawn (worker.json), falling back to status readback. */
-    provider?: string | null;
-    /** Launch model from worker.json — used when the stream did not name a model. */
-    model?: string | null;
-}
-/**
- * Build the completion `workerUsage` payload, or null when the provider
- * reported no token usage (the field is then omitted from the POST entirely).
- */
-export declare function resolveWorkerUsagePayload(input: ResolveWorkerUsageInput): WorkerUsagePayload | null;

package/dist/workspace-runtime-config.d.ts

@@ -1,10 +0,0 @@
-export interface WorkspaceRuntimePreferences {
-    maxConcurrentWorkers: number | null;
-}
-export declare function shouldApplyWorkspaceRuntimePreferences(env?: NodeJS.ProcessEnv): boolean;
-export declare function configuredMaxWorkersOverrideForBox(preferences: WorkspaceRuntimePreferences | null | undefined, env?: NodeJS.ProcessEnv): number | undefined;
-/**
- * Pull the Command Center worker cap each pipeline tick so the daemon honors
- * workspace settings without restarting or editing ~/.kynver/config.json.
- */
-export declare function fetchWorkspaceRuntimePreferences(agentOsId: string, args: Record<string, string | boolean>): Promise<WorkspaceRuntimePreferences | null>;

package/dist/worktree-base-ref.d.ts

@@ -1,34 +0,0 @@
-/**
- * Worktree base-ref resolution + self-heal.
- *
- * Live incident (7-day event breakdown, 2026-08-05): 75 of 82 spawn-failure
- * claim releases — 91% of the week's compensator load — were
- * `git worktree add … unknown failed: fatal: invalid reference: unknown`.
- * The run-metadata repair path (`run-metadata-retention.ts`) synthesizes
- * rebuilt run.json records with `baseCommit: "unknown"`, and the supervisor
- * passed that literal to git; every spawn in a repaired run then failed
- * forever, each failure burning an attempt (the failure text was not
- * infrastructure-classified) and minting over-attempt recovery children.
- *
- * This resolver picks the first candidate ref that git can verify —
- * the recorded baseCommit (unless it is the known-invalid marker), the
- * run's base branch, `origin/main`, `origin/HEAD` — and reports when the
- * pick differs from the record so the caller can PERSIST the repair
- * (self-heal: one resolution fixes the run for all subsequent spawns).
- */
-/** Marker the metadata-repair path historically stamped on rebuilt runs. */
-export declare const INVALID_BASE_COMMIT_MARKER = "unknown";
-export interface ResolveWorktreeBaseRefInput {
-    baseCommit?: string | null;
-    base?: string | null;
-    /** Verify a ref resolves to a commit; injectable for tests. */
-    verifyRef: (ref: string) => boolean;
-}
-export interface ResolvedWorktreeBaseRef {
-    ref: string;
-    /** True when the pick differs from the recorded baseCommit — persist it. */
-    repaired: boolean;
-    /** Which candidate won (for the spawn log). */
-    source: "baseCommit" | "base" | "origin/main" | "origin/HEAD";
-}
-export declare function resolveWorktreeBaseRef(input: ResolveWorktreeBaseRefInput): ResolvedWorktreeBaseRef;

package/dist/worktree-completion-handoff.d.ts

@@ -1,17 +0,0 @@
-export type WorktreeCompletionHandoffState = "clean" | "pr_handoff" | "commit_handoff" | "dirty_worktree" | "dirty_worktree_no_pr";
-export interface WorktreeCompletionHandoffInput {
-    changedFiles?: unknown;
-    finalResult?: unknown;
-    prUrl?: string | null;
-    headCommit?: string | null;
-    artifactBundlePath?: string | null;
-    patchPath?: string | null;
-    disposableArtifactsRemoved?: string[] | null;
-}
-export interface WorktreeCompletionHandoffVerdict {
-    allowed: boolean;
-    state: WorktreeCompletionHandoffState;
-    materialDirtyCount: number;
-    detail?: string;
-}
-export declare function assessWorktreeCompletionHandoff(input: WorktreeCompletionHandoffInput): WorktreeCompletionHandoffVerdict;

package/dist/worktree.d.ts

@@ -1,44 +0,0 @@
-import { loadRun, runDirectory, saveRun } from "./run-store.js";
-export interface CreatedRunInfo {
-    runId: string;
-    runDir: string;
-    repo: string;
-    base: string;
-    baseCommit: string;
-}
-export type RunBaseRefSource = "flag" | "env" | "config" | "origin/main" | "remote-head";
-export interface ResolveRunBaseRefInput {
-    /** `--base` on the command line. */
-    explicitBase?: string;
-    /** `KYNVER_RUN_BASE_REF` env override. */
-    envBaseRef?: string;
-    /** `defaultBase` from `~/.kynver/config.json`. */
-    configDefaultBase?: string;
-    /** Verify a ref resolves to a commit in the repo; injectable for tests. */
-    verifyRef: (ref: string) => boolean;
-    /** Resolve the remote default branch (e.g. `origin/master`); injectable for tests. */
-    resolveRemoteHeadRef: () => string | null;
-    /** Repo path for error messages. */
-    repoLabel?: string;
-}
-export interface ResolvedRunBaseRef {
-    base: string;
-    source: RunBaseRefSource;
-    /** Human note when the pick was a fallback (never fall back silently). */
-    note?: string;
-}
-/**
- * Resolve the base ref a new run is cut from. Precedence: `--base` flag >
- * `KYNVER_RUN_BASE_REF` env > config `defaultBase` > `origin/main` > the
- * remote HEAD default branch. An EXPLICIT override (flag/env/config) that
- * does not verify is an error — never silently substituted with another ref.
- * When `origin/main` is absent (repos whose default branch is `master`,
- * `develop`, …) the remote HEAD fallback is used with a visible note; when
- * nothing resolves the error names everything tried plus the fix.
- */
-export declare function resolveRunBaseRef(input: ResolveRunBaseRefInput): ResolvedRunBaseRef;
-/** Resolve the remote default branch without hitting `git remote show` (porcelain-free). */
-export declare function resolveRemoteHeadRefForRepo(repo: string): string | null;
-export declare function createRun(args: Record<string, string | boolean>): CreatedRunInfo;
-export declare function listRuns(): void;
-export { loadRun, saveRun, runDirectory };

package/dist/wsl-crash-dumps-cleanup.d.ts

@@ -1,31 +0,0 @@
-import { type WslCrashDumpObservation } from "./wsl-crash-dumps.js";
-export interface WslCrashDumpCleanupResult {
-    observation: WslCrashDumpObservation | null;
-    execute: boolean;
-    keepNewest: number;
-    removed: Array<{
-        path: string;
-        bytes: number;
-        name: string;
-    }>;
-    removedBytes: number;
-    skipped: Array<{
-        path: string;
-        reason: string;
-    }>;
-}
-export interface WslCrashDumpCleanupOptions {
-    execute?: boolean;
-    /** Keep this many newest dumps; remove the rest when execute=true. */
-    keepNewest?: number;
-    /** When true, remove all dumps regardless of keepNewest (operator purge). */
-    purgeAll?: boolean;
-    forceWsl?: boolean;
-}
-/**
- * Prune Windows-side WSL crash dumps. Dry-run by default; pass execute=true
- * or `KYNVER_WSL_CRASH_DUMP_EXECUTE=1` to unlink files.
- */
-export declare function cleanupWslCrashDumps(options?: WslCrashDumpCleanupOptions): WslCrashDumpCleanupResult;
-/** True when automatic cleanup should run during harness retention sweeps. */
-export declare function shouldAutoCleanupWslCrashDumps(observation: WslCrashDumpObservation | null): boolean;

package/dist/wsl-crash-dumps-cli.d.ts

@@ -1 +0,0 @@
-export declare function runWslCrashesCli(args: Record<string, string | boolean>): void;