@kynver-app/runtime 0.2.24 → 0.2.28

package/dist/server/worker-policy.js

@@ -1,2 +1,2 @@
-var o=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(n){throw t=[n],n}};function $(e){let r=e[vr];return r?new Set(r.split(/[\s,]+/).map(t=>t.trim()).filter(Boolean)):new Set}function y(e,r={}){return pr.has(e)?!0:hr.has(e)||r.operatorAllow?.has(e)||yr.some(t=>e.endsWith(t))?!1:fr.some(t=>e.endsWith(t))}function de(e){let r=$(e);return Object.keys(e).filter(t=>y(t,{operatorAllow:r})).sort()}function me(e){let r=$(e);return r.size===0?[]:Object.keys(e).filter(t=>r.has(t)&&!y(t,{operatorAllow:r})&&y(t)).sort()}function E(e){let r=$(e),t={...e};for(let n of Object.keys(t))y(n,{operatorAllow:r})&&delete t[n];return t}function br(e){let r=de(e),t=me(e);return{forbiddenPresent:r,safe:r.length===0,...t.length?{operatorAllowedActive:t}:{}}}var mr,pr,fr,gr,hr,yr,vr,C=o(()=>{"use strict";mr=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY","MEMORY_CONTENT_KEK","LLM_BYOK_KEK","KYNVER_COMMAND_AUTH_KEY","KYNVER_INSTRUCTION_BUNDLE_KEY","KYNVER_MEMORY_LEDGER_KEY","KYNVER_JWKS_PRIVATE_KEY_JWK"],pr=new Set(mr),fr=["_SECRET","_API_KEY","_KEK","_KEY","_TOKEN","_PASSWORD","_PASSPHRASE","_SALT"],gr=["GITHUB_TOKEN","GH_TOKEN","CLAUDE_CODE_OAUTH_TOKEN"],hr=new Set(gr),yr=["_PUBLIC_KEY"],vr="KYNVER_WORKER_ENV_ALLOW"});function Y(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}var a=o(()=>{"use strict"});var G=o(()=>{"use strict";a();C()});var v=o(()=>{"use strict"});var z=o(()=>{"use strict";G();v()});var d=o(()=>{"use strict"});var P=o(()=>{"use strict"});var ve=o(()=>{"use strict"});var an,ln,q=o(()=>{"use strict";an=25*1024*1024*1024,ln=12*1024*1024*1024});var pn,fn,be=o(()=>{"use strict";q();pn=5*1024*1024*1024,fn=10*1024*1024*1024});var Rn,xn,J=o(()=>{"use strict";be();q();Rn=30*1024*1024*1024,xn=15*1024*1024*1024});var xe=o(()=>{"use strict";a()});import Wr from"node:path";var Pn,X=o(()=>{"use strict";v();xe();Pn=Wr.join(".openclaw","harness")});var N=o(()=>{"use strict";m();d();P();D();X()});var Se=o(()=>{"use strict";m();X();N();a()});var Z=o(()=>{"use strict";Se();a()});var Ee=o(()=>{"use strict";Z();a()});var Ce=o(()=>{"use strict"});var Oe=o(()=>{"use strict";Ce();a()});var Ae=o(()=>{"use strict"});var we=o(()=>{"use strict";Ae()});var Pe=o(()=>{"use strict";we();a()});var Ie=o(()=>{"use strict"});var Ne=o(()=>{"use strict"});var De=o(()=>{"use strict"});var ee=o(()=>{"use strict"});var Ke=o(()=>{"use strict"});var We=o(()=>{"use strict";ee();Ke()});var Te=o(()=>{"use strict";Oe();Pe();Ie();Ne();G();De();We();ee();a()});var Be=o(()=>{"use strict";Te()});var $r,jr,Ue=o(()=>{"use strict";ve();m();d();P();D();J();Z();Ee();Be();a();$r=500*1024*1024,jr=4*1024*1024*1024});var D=o(()=>{"use strict";Ue()});import{homedir as Vr}from"node:os";import Yr from"node:path";var Me,re=o(()=>{"use strict";Me=Yr.join(Vr(),".kynver",".env")});var Le=o(()=>{"use strict"});var Fe=o(()=>{"use strict";Le()});var He=o(()=>{"use strict"});var te=o(()=>{"use strict";Fe();He()});var $e=o(()=>{"use strict"});var je=o(()=>{"use strict";$e()});var W=o(()=>{"use strict";re();v();m();te();je()});var Ve=o(()=>{"use strict";d();d()});var Ye=o(()=>{"use strict";re();te();W()});var Ge=o(()=>{"use strict";z();d();Ve();m();W();Ye();a();N()});import{homedir as et,totalmem as Cs}from"node:os";import ne from"node:path";var ze,Us,Ms,Ls,Fs,m=o(()=>{"use strict";z();v();a();d();P();D();J();W();Ge();N();ze=ne.join(et(),".kynver"),Us=ne.join(ze,"config.json"),Ms=ne.join(ze,"credentials"),Ls=500*1024*1024,Fs=4*1024*1024*1024});C();C();var j="KYNVER_NO_PROD_DB_CREDENTIALS",Rr=["KYNVER_ENV_FILE"],xr=new Set(["1","true","yes","on"]);function fe(e){let r=e[j]?.trim().toLowerCase();return r!==void 0&&xr.has(r)}function f(e,r={}){let t=E(e);if(!r.reviewWorker)return t;let n={...t,[j]:"1"};for(let i of Rr)delete n[i];return n}var pe=["DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL"];function kr(e,r={}){let t=f(e,r),n=Object.keys(t).filter(c=>c.endsWith("_SECRET")||c.endsWith("_API_KEY")||pe.includes(c)),i=pe.every(c=>t[c]===void 0),s=r.reviewWorker?t.KYNVER_ENV_FILE===void 0:!0,l=fe(t);return{reviewMode:!!r.reviewWorker,noProdFlagPresent:r.reviewWorker?l:!0,forbiddenKeysAfterScrub:n.sort(),productionDbKeysAbsent:i,envFilePointerStripped:s,safe:i&&n.length===0&&s&&(!r.reviewWorker||l)}}var _r="expert-lane-pr-review:",Sr="plan-review-task",Er="scheduledjob:",O=new Set(["lorentz","dalton","rhea","sentinel"]);function Cr(e){if(!e)return null;let r=e.trim().toLowerCase();return r.length?r:null}function V(e){return/\b(deep[- ]?review|plan review|review .*plan|security review|red[- ]team|lb\d+|risk register|signoff|verification|evidence|prove|gate)\b/.test(e)}function Or(e,r){return e.startsWith("factory:")?e.includes("lb")||V(r):!1}function Ar(e){let r=(e.executorRef??"").toLowerCase(),t=(e.title??"").toLowerCase(),n=(e.description??"").toLowerCase(),i=`${t}
-${n}`,s=Cr(e.personaSlug);return!!(r.startsWith(_r)||r===Sr||r.startsWith("daemon-review:")||s&&O.has(s)&&(r.includes("evidence")||r.includes("validate")||r.includes("review")||Or(r,i)||V(i))||r.startsWith(Er)&&e.parentTaskId&&s&&O.has(s)||e.planId&&!e.parentTaskId&&s&&O.has(s)&&V(i)||t.includes("expert pr review")||e.parentTaskId&&(t.startsWith("review:")||t.includes("review required")||t.includes("runtime review"))&&s&&O.has(s))}var wr=/^claude[-_]/i,Pr=/^(?:opus|sonnet|haiku)\b/i;function ge(e){let r=e.trim();return wr.test(r)||Pr.test(r)}function he(e){let r=e.trim().toLowerCase();return r.startsWith("gpt-")||r.startsWith("gpt5")||r.includes("codex")}function ye(e){let r=e.trim().toLowerCase();return r.includes("composer")||r.includes("cursor")}function Ir(e){return he(e)?"codex":ge(e)?"claude":(ye(e),"cursor")}function Nr(e){if(!e.startsWith("provider:"))return null;let r=e.slice(9),t=r.indexOf(":"),n=(t>=0?r.slice(0,t):r).trim().toLowerCase(),i=t>=0&&r.slice(t+1).trim()||void 0;return n?n==="claude"||n==="opus"||n==="anthropic"?{provider:"claude",model:i,rule:i?"executor_ref:provider_claude_model":"executor_ref:provider_claude"}:n==="codex"?{provider:"codex",model:i,rule:"executor_ref:provider_codex"}:n==="openai-compatible"||n==="openai"||n==="openai_compatible"?{provider:"openai-compatible",model:i,rule:"executor_ref:provider_openai_compatible"}:n==="cursor"||n==="composer"?{provider:"cursor",model:i,rule:"executor_ref:provider_cursor"}:null:null}function Dr(e){if(!e.startsWith("harness-lane:"))return null;let r=e.split(":").map(i=>i.trim()).filter(Boolean);if(r.length<2)return null;let t=r[1],n=r.slice(2).join(":");return n?ge(n)||he(n)||ye(n)?{lane:t,model:n,provider:Ir(n),rule:"executor_ref:harness_lane_model"}:{lane:t,rule:"executor_ref:harness_lane"}:{lane:t,rule:"executor_ref:harness_lane"}}function A(e){let r=typeof e=="string"?e.trim():"";return r?Nr(r)??Dr(r):null}m();a();a();a();var Wa=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4";function it(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4"}var st=it();a();var Xa=600*1e3;var Xe="composer-2.5";var p="cursor",at={anthropic:"claude",opus:"claude",openai:"openai-compatible",openai_compatible:"openai-compatible","openai-compat":"openai-compatible"};function Ze(e){let r=e.trim().toLowerCase();return at[r]??r}var lt=new Set(["claude","opus","anthropic"]),ct=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function R(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function u(e){if(!e?.trim())return!1;let r=e.trim().toLowerCase();return lt.has(r)?!0:r.includes("claude")||r.includes("opus")}function oe(e){if(!e)return!1;let r=e.workerProviderOverride;if(typeof r=="string"&&u(r))return!0;let t=R(e,"executorRef").toLowerCase();if(t==="provider:claude"||t.startsWith("provider:claude:")||t.includes("claude-worker-override")||t.includes("operator-claude"))return!0;let n=A(R(e,"executorRef"));if(n?.provider&&u(n.provider)||n?.model&&u(ut(n.model)))return!0;let i=R(e,"description");if(ct.some(l=>l.test(i)))return!0;let s=R(e,"title");return!!/\[use-claude-worker\]/i.test(s)}function ut(e){let r=e.trim().toLowerCase();return/^claude[-_]/.test(r)||/^(?:opus|sonnet|haiku)\b/.test(r)?"claude":r}function dt(e,r){return{provider:p,model:Xe,rule:`policy:cursor_default${r}`,requestedModel:e}}var mt=["explicit:","executor_ref:","factory:","task:"];function pt(e){return mt.some(r=>e.startsWith(r))}function er(e){if(!e)return!1;let r=e.workerProviderOverride;return typeof r=="string"&&r.trim()||A(R(e,"executorRef"))?.provider?!0:oe(e)}function Qe(e){let{routing:r,task:t}=e,n=e.explicitProvider?.trim().toLowerCase();if(e.explicitProviderIsOperatorOverride&&u(n))return{...r,provider:"claude",rule:r.rule.startsWith("explicit:")?r.rule:"explicit:operator_provider"};if(n||pt(r.rule)||er(t)||!u(r.provider))return r;let i=r.rule&&r.rule!=="default:global"?`:${r.rule.replace(/:/g,"_")}`:"";return dt(r.model,i)}function ft(e,r=p){let t=e?.trim();return t?Ze(t):r}function gt(e){let r=[...new Set(e.map(t=>t.trim().toLowerCase()).filter(Boolean))];return r.includes(p)?[...new Set(r.map(t=>u(t)?p:t))]:r.every(t=>u(t))?[p]:r}var ht=/\b(npm run typecheck|tsc\b[^|&;]*--noEmit|node scripts\/verify-pr-local\.mjs|kynver (harness )?verify)\b/i,yt=/\b(npm run build\b|next build\b)\b/i,vt=/\b(vercel (build|deploy|--prod))\b/i,bt=/\b(openai|anthropic|perplexity|voyage)\b.*\b(api|cli)\b|\b(paid|billable)[-_ ]?compute\b/i;function ie(e){let r=e.trim();return r?bt.test(r)?{heavy:!0,commandClass:"paid_compute",reason:"paid external compute requires heavy-verification token and operator approval"}:vt.test(r)?{heavy:!0,commandClass:"vercel_verify",reason:"Vercel build/deploy verification requires heavy-verification token"}:yt.test(r)?{heavy:!0,commandClass:"full_build",reason:"full app build requires heavy-verification token"}:ht.test(r)?{heavy:!0,commandClass:"full_typecheck",reason:"full repo typecheck requires heavy-verification token"}:{heavy:!1,commandClass:"allowed",reason:null}:{heavy:!1,commandClass:"allowed",reason:null}}var U="heavy_verification_token_required";import{spawnSync as Bt}from"node:child_process";a();import{closeSync as Et,existsSync as k,mkdirSync as Ct,openSync as Ot,readdirSync as or,readFileSync as At,statSync as wt,unlinkSync as ir,writeFileSync as Pt}from"node:fs";import le from"node:path";import{mkdirSync as xt}from"node:fs";import{tmpdir as kt}from"node:os";import M from"node:path";import{homedir as Rt}from"node:os";import rr from"node:path";function tr(){let e=process.env.KYNVER_STATE_ROOT;return e?rr.resolve(e):rr.join(Rt(),".kynver","state")}function _t(){return!!(process.env.VERCEL||process.env.VERCEL_ENV||process.env.AWS_LAMBDA_FUNCTION_NAME||process.env.AWS_EXECUTION_ENV)}function St(){let e=process.env.KYNVER_HEAVY_VERIFICATION_STATE_ROOT;return e?M.resolve(e):_t()?M.join(kt(),"kynver","state","heavy-verification"):M.join(tr(),"heavy-verification")}function se(){return M.join(St(),"slots")}function x(){let e=se();return xt(e,{recursive:!0}),e}var _=120*6e4,nr=1;function It(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function F(){let e=process.env.KYNVER_HEAVY_VERIFICATION_SKIP?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function L(){let e=process.env.KYNVER_HEAVY_VERIFICATION_MAX_CONCURRENT;return e?It(e,nr):nr}function Nt(e){return`slot-${e}`}function Dt(e,r=se()){return le.join(r,`${e}.json`)}function ce(e){if(!k(e))return null;try{let r=JSON.parse(At(e,"utf8"));if(typeof r.slotId=="string"&&typeof r.pid=="number"&&typeof r.acquiredAt=="string"&&typeof r.command=="string")return r}catch{return null}return null}function sr(e,r=_){if(!e||!Y(e.pid))return!0;let t=Date.parse(e.acquiredAt);return Number.isNaN(t)?!0:Date.now()-t>r}function ar(e,r){let t=ce(e);if(t)return sr(t,r);if(!k(e))return!0;try{return Date.now()-wt(e).mtimeMs>r}catch{return!0}}function Kt(e,r){if(ar(e,r))try{ir(e)}catch{}}function Wt(e){return Ct(e,{recursive:!0}),e}function ue(e={}){let r=Wt(e.slotsDir??x()),t=e.staleMs??_,n=0;for(let i of or(r)){if(!i.endsWith(".json"))continue;let s=le.join(r,i),l=k(s);Kt(s,t),l&&!k(s)&&(n+=1)}return n}function Tt(e={}){let r=e.slotsDir??x(),t=e.staleMs??_;ue({slotsDir:r,staleMs:t});let n=[];for(let i of or(r)){if(!i.endsWith(".json"))continue;let s=ce(le.join(r,i));s&&!sr(s,t)&&n.push(s)}return n}function ae(e={}){return Tt(e).length}function S(e,r={}){if(F())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:L(),reason:null};let t=r.slotsDir??x(),n=r.staleMs??_,i=r.maxSlots??L();ue({slotsDir:t,staleMs:n});for(let l=0;l<i;l+=1){let c=Nt(l),g=Dt(c,t),cr=ce(g);if(ar(g,n))try{ir(g)}catch{}else if(cr||k(g))continue;let ur={slotId:c,pid:process.pid,acquiredAt:new Date().toISOString(),command:e};try{let h=Ot(g,"wx");Pt(h,JSON.stringify(ur,null,2),"utf8"),Et(h);let dr=ae({slotsDir:t,staleMs:n});return{admitted:!0,slotId:c,activeSlots:dr,maxSlots:i,reason:null}}catch(h){if(h.code==="EEXIST")continue;throw h}}let s=ae({slotsDir:t,staleMs:n});return{admitted:!1,slotId:null,activeSlots:s,maxSlots:i,reason:`heavy verification at capacity (${s}/${i} slots)`}}function H(e,r={}){if(F())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:L(),reason:null};let t=r.slotsDir??x(),n=r.staleMs??_,i=r.maxSlots??L();ue({slotsDir:t,staleMs:n});let s=ae({slotsDir:t,staleMs:n}),l=s<i;return{admitted:l,slotId:null,activeSlots:s,maxSlots:i,reason:l?null:`heavy verification at capacity (${s}/${i} slots); waiting for ${e}`}}function Ut(e){e<=0||Bt(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function lr(e,r,t=2e3,n={}){let i=Date.now()+Math.max(0,r),s=S(e,n);for(;!s.admitted&&Date.now()<i;)Ut(Math.min(t,i-Date.now())),s=S(e,n);return s}function Mt(e,r={}){let t=ie(e);if(!t.heavy)return{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:"command does not require heavy-verification token",verificationGate:{...H(e),slotId:null}};if(F())return{allowed:!0,outcome:"heavy_verification_skipped",commandClass:t.commandClass,reason:"KYNVER_HEAVY_VERIFICATION_SKIP bypasses gate",verificationGate:{...H(e),slotId:null}};let n=r.waitMs??0,i=n>0?lr(e,n,r.pollMs):S(e);return i.admitted?{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:t.reason??"heavy-verification token acquired",verificationGate:i}:{allowed:!1,outcome:U,commandClass:t.commandClass,reason:t.reason??i.reason??U,verificationGate:i}}export{p as DEFAULT_WORKER_PROVIDER,U as HEAVY_VERIFICATION_TOKEN_REQUIRED,j as KYNVER_NO_PROD_DB_CREDENTIALS_ENV,kr as auditReviewWorkerCredentialScope,br as auditWorkerEnv,f as buildWorkerSpawnEnv,ie as classifyHeavyShellCommand,Qe as enforceCursorWorkerProvider,Mt as gateWorkerShellCommand,u as isClaudeFamilyProvider,y as isForbiddenWorkerEnvKey,Ar as isHarnessExpertReviewWorker,fe as isNoProdCredentialReviewEnvironment,de as listForbiddenWorkerEnvKeys,me as listOperatorAllowedWorkerEnvKeys,Ze as normalizeWorkerProviderName,gt as preferCursorExecutor,ft as resolveConfiguredWorkerProvider,E as scrubWorkerEnv,oe as taskAllowsClaudeWorker,er as taskExpressesWorkerProviderPreference};
+var o=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(n){throw t=[n],n}};function $(e){let r=e[vr];return r?new Set(r.split(/[\s,]+/).map(t=>t.trim()).filter(Boolean)):new Set}function y(e,r={}){return pr.has(e)?!0:hr.has(e)||r.operatorAllow?.has(e)||yr.some(t=>e.endsWith(t))?!1:fr.some(t=>e.endsWith(t))}function de(e){let r=$(e);return Object.keys(e).filter(t=>y(t,{operatorAllow:r})).sort()}function me(e){let r=$(e);return r.size===0?[]:Object.keys(e).filter(t=>r.has(t)&&!y(t,{operatorAllow:r})&&y(t)).sort()}function E(e){let r=$(e),t={...e};for(let n of Object.keys(t))y(n,{operatorAllow:r})&&delete t[n];return t}function br(e){let r=de(e),t=me(e);return{forbiddenPresent:r,safe:r.length===0,...t.length?{operatorAllowedActive:t}:{}}}var mr,pr,fr,gr,hr,yr,vr,C=o(()=>{"use strict";mr=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY","MEMORY_CONTENT_KEK","LLM_BYOK_KEK","KYNVER_COMMAND_AUTH_KEY","KYNVER_INSTRUCTION_BUNDLE_KEY","KYNVER_MEMORY_LEDGER_KEY","KYNVER_JWKS_PRIVATE_KEY_JWK"],pr=new Set(mr),fr=["_SECRET","_API_KEY","_KEK","_KEY","_TOKEN","_PASSWORD","_PASSPHRASE","_SALT"],gr=["GITHUB_TOKEN","GH_TOKEN","CLAUDE_CODE_OAUTH_TOKEN","CODEX_API_KEY"],hr=new Set(gr),yr=["_PUBLIC_KEY"],vr="KYNVER_WORKER_ENV_ALLOW"});function Y(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}var a=o(()=>{"use strict"});var G=o(()=>{"use strict";a();C()});var v=o(()=>{"use strict"});var z=o(()=>{"use strict";G();v()});var d=o(()=>{"use strict"});var P=o(()=>{"use strict"});var ve=o(()=>{"use strict"});var un,dn,q=o(()=>{"use strict";un=25*1024*1024*1024,dn=12*1024*1024*1024});var hn,yn,be=o(()=>{"use strict";q();hn=5*1024*1024*1024,yn=10*1024*1024*1024});var _n,Sn,J=o(()=>{"use strict";be();q();_n=30*1024*1024*1024,Sn=15*1024*1024*1024});var xe=o(()=>{"use strict";a()});import Kr from"node:path";var Dn,X=o(()=>{"use strict";v();xe();Dn=Kr.join(".openclaw","harness")});var N=o(()=>{"use strict";m();d();P();D();X()});var Se=o(()=>{"use strict";m();X();N();a()});var Z=o(()=>{"use strict";Se();a()});var Ee=o(()=>{"use strict";Z();a()});var Ce=o(()=>{"use strict"});var Oe=o(()=>{"use strict";Ce();a()});var Ae=o(()=>{"use strict"});var we=o(()=>{"use strict";Ae()});var Pe=o(()=>{"use strict";we();a()});var Ie=o(()=>{"use strict"});var Ne=o(()=>{"use strict"});var De=o(()=>{"use strict"});var ee=o(()=>{"use strict"});var Te=o(()=>{"use strict"});var Ke=o(()=>{"use strict";ee();Te()});var We=o(()=>{"use strict";Oe();Pe();Ie();Ne();G();De();Ke();ee();a()});var Be=o(()=>{"use strict";We()});var $r,jr,Me=o(()=>{"use strict";ve();m();d();P();D();J();Z();Ee();Be();a();$r=500*1024*1024,jr=4*1024*1024*1024});var D=o(()=>{"use strict";Me()});import{homedir as Vr}from"node:os";import Yr from"node:path";var Ue,re=o(()=>{"use strict";Ue=Yr.join(Vr(),".kynver",".env")});var Le=o(()=>{"use strict"});var Fe=o(()=>{"use strict";Le()});var He=o(()=>{"use strict"});var te=o(()=>{"use strict";Fe();He()});var $e=o(()=>{"use strict"});var je=o(()=>{"use strict";$e()});var K=o(()=>{"use strict";re();v();m();te();je()});var Ve=o(()=>{"use strict";d();d()});var Ye=o(()=>{"use strict";re();te();K()});var Ge=o(()=>{"use strict";z();d();Ve();m();K();Ye();a();N()});import{homedir as et,totalmem as ws}from"node:os";import ne from"node:path";var ze,Fs,Hs,$s,js,m=o(()=>{"use strict";z();v();a();d();P();D();J();K();Ge();N();ze=ne.join(et(),".kynver"),Fs=ne.join(ze,"config.json"),Hs=ne.join(ze,"credentials"),$s=500*1024*1024,js=4*1024*1024*1024});C();C();var j="KYNVER_NO_PROD_DB_CREDENTIALS",Rr=["KYNVER_ENV_FILE"],xr=new Set(["1","true","yes","on"]);function fe(e){let r=e[j]?.trim().toLowerCase();return r!==void 0&&xr.has(r)}function f(e,r={}){let t=E(e);if(!r.reviewWorker)return t;let n={...t,[j]:"1"};for(let i of Rr)delete n[i];return n}var pe=["DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL"];function kr(e,r={}){let t=f(e,r),n=Object.keys(t).filter(c=>c.endsWith("_SECRET")||c.endsWith("_API_KEY")||pe.includes(c)),i=pe.every(c=>t[c]===void 0),s=r.reviewWorker?t.KYNVER_ENV_FILE===void 0:!0,l=fe(t);return{reviewMode:!!r.reviewWorker,noProdFlagPresent:r.reviewWorker?l:!0,forbiddenKeysAfterScrub:n.sort(),productionDbKeysAbsent:i,envFilePointerStripped:s,safe:i&&n.length===0&&s&&(!r.reviewWorker||l)}}var _r="expert-lane-pr-review:",Sr="plan-review-task",Er="scheduledjob:",O=new Set(["lorentz","dalton","rhea","sentinel"]);function Cr(e){if(!e)return null;let r=e.trim().toLowerCase();return r.length?r:null}function V(e){return/\b(deep[- ]?review|plan review|review .*plan|security review|red[- ]team|lb\d+|risk register|signoff|verification|evidence|prove|gate)\b/.test(e)}function Or(e,r){return e.startsWith("factory:")?e.includes("lb")||V(r):!1}function Ar(e){let r=(e.executorRef??"").toLowerCase(),t=(e.title??"").toLowerCase(),n=(e.description??"").toLowerCase(),i=`${t}
+${n}`,s=Cr(e.personaSlug);return!!(r.startsWith(_r)||r===Sr||r.startsWith("daemon-review:")||s&&O.has(s)&&(r.includes("evidence")||r.includes("validate")||r.includes("review")||Or(r,i)||V(i))||r.startsWith(Er)&&e.parentTaskId&&s&&O.has(s)||e.planId&&!e.parentTaskId&&s&&O.has(s)&&V(i)||t.includes("expert pr review")||e.parentTaskId&&(t.startsWith("review:")||t.includes("review required")||t.includes("runtime review"))&&s&&O.has(s))}var wr=/^claude[-_]/i,Pr=/^(?:opus|sonnet|haiku)\b/i;function ge(e){let r=e.trim();return wr.test(r)||Pr.test(r)}function he(e){let r=e.trim().toLowerCase();return r.startsWith("gpt-")||r.startsWith("gpt5")||r.includes("codex")}function ye(e){let r=e.trim().toLowerCase();return r.includes("composer")||r.includes("cursor")}function Ir(e){return he(e)?"codex":ge(e)?"claude":(ye(e),"cursor")}function Nr(e){if(!e.startsWith("provider:"))return null;let r=e.slice(9),t=r.indexOf(":"),n=(t>=0?r.slice(0,t):r).trim().toLowerCase(),i=t>=0&&r.slice(t+1).trim()||void 0;return n?n==="claude"||n==="opus"||n==="anthropic"?{provider:"claude",model:i,rule:i?"executor_ref:provider_claude_model":"executor_ref:provider_claude"}:n==="codex"?{provider:"codex",model:i,rule:"executor_ref:provider_codex"}:n==="openai-compatible"||n==="openai"||n==="openai_compatible"?{provider:"openai-compatible",model:i,rule:"executor_ref:provider_openai_compatible"}:n==="cursor"||n==="composer"?{provider:"cursor",model:i,rule:"executor_ref:provider_cursor"}:null:null}function Dr(e){if(!e.startsWith("harness-lane:"))return null;let r=e.split(":").map(i=>i.trim()).filter(Boolean);if(r.length<2)return null;let t=r[1],n=r.slice(2).join(":");return n?ge(n)||he(n)||ye(n)?{lane:t,model:n,provider:Ir(n),rule:"executor_ref:harness_lane_model"}:{lane:t,rule:"executor_ref:harness_lane"}:{lane:t,rule:"executor_ref:harness_lane"}}function A(e){let r=typeof e=="string"?e.trim():"";return r?Nr(r)??Dr(r):null}m();a();var ot="kynver",it=["agent_os_context_envelope","agent_os_search_memory","agent_os_search_skills","agent_os_get_skill","agent_os_progress_note"],st=it.map(e=>`mcp__${ot}__${e}`);a();a();var La=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4";function lt(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4"}var ct=lt();a();var tl=600*1e3;var Xe="composer-2.5";var p="cursor",ut={anthropic:"claude",opus:"claude",openai:"openai-compatible",openai_compatible:"openai-compatible","openai-compat":"openai-compatible"};function Ze(e){let r=e.trim().toLowerCase();return ut[r]??r}var dt=new Set(["claude","opus","anthropic"]),mt=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function R(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function u(e){if(!e?.trim())return!1;let r=e.trim().toLowerCase();return dt.has(r)?!0:r.includes("claude")||r.includes("opus")}function oe(e){if(!e)return!1;let r=e.workerProviderOverride;if(typeof r=="string"&&u(r))return!0;let t=R(e,"executorRef").toLowerCase();if(t==="provider:claude"||t.startsWith("provider:claude:")||t.includes("claude-worker-override")||t.includes("operator-claude"))return!0;let n=A(R(e,"executorRef"));if(n?.provider&&u(n.provider)||n?.model&&u(pt(n.model)))return!0;let i=R(e,"description");if(mt.some(l=>l.test(i)))return!0;let s=R(e,"title");return!!/\[use-claude-worker\]/i.test(s)}function pt(e){let r=e.trim().toLowerCase();return/^claude[-_]/.test(r)||/^(?:opus|sonnet|haiku)\b/.test(r)?"claude":r}function ft(e,r){return{provider:p,model:Xe,rule:`policy:cursor_default${r}`,requestedModel:e}}var gt=["explicit:","executor_ref:","factory:","task:"];function ht(e){return gt.some(r=>e.startsWith(r))}function er(e){if(!e)return!1;let r=e.workerProviderOverride;return typeof r=="string"&&r.trim()||A(R(e,"executorRef"))?.provider?!0:oe(e)}function Qe(e){let{routing:r,task:t}=e,n=e.explicitProvider?.trim().toLowerCase();if(e.explicitProviderIsOperatorOverride&&u(n))return{...r,provider:"claude",rule:r.rule.startsWith("explicit:")?r.rule:"explicit:operator_provider"};if(n||ht(r.rule)||er(t)||!u(r.provider))return r;let i=r.rule&&r.rule!=="default:global"?`:${r.rule.replace(/:/g,"_")}`:"";return ft(r.model,i)}function yt(e,r=p){let t=e?.trim();return t?Ze(t):r}function vt(e){let r=[...new Set(e.map(t=>t.trim().toLowerCase()).filter(Boolean))];return r.includes(p)?[...new Set(r.map(t=>u(t)?p:t))]:r.every(t=>u(t))?[p]:r}var bt=/\b(npm run typecheck|tsc\b[^|&;]*--noEmit|node scripts\/verify-pr-local\.mjs|kynver (harness )?verify)\b/i,Rt=/\b(npm run build\b|next build\b)\b/i,xt=/\b(vercel (build|deploy|--prod))\b/i,kt=/\b(openai|anthropic|perplexity|voyage)\b.*\b(api|cli)\b|\b(paid|billable)[-_ ]?compute\b/i;function ie(e){let r=e.trim();return r?kt.test(r)?{heavy:!0,commandClass:"paid_compute",reason:"paid external compute requires heavy-verification token and operator approval"}:xt.test(r)?{heavy:!0,commandClass:"vercel_verify",reason:"Vercel build/deploy verification requires heavy-verification token"}:Rt.test(r)?{heavy:!0,commandClass:"full_build",reason:"full app build requires heavy-verification token"}:bt.test(r)?{heavy:!0,commandClass:"full_typecheck",reason:"full repo typecheck requires heavy-verification token"}:{heavy:!1,commandClass:"allowed",reason:null}:{heavy:!1,commandClass:"allowed",reason:null}}var M="heavy_verification_token_required";import{spawnSync as Lt}from"node:child_process";a();import{closeSync as At,existsSync as k,mkdirSync as wt,openSync as Pt,readdirSync as or,readFileSync as It,statSync as Nt,unlinkSync as ir,writeFileSync as Dt}from"node:fs";import le from"node:path";import{mkdirSync as St}from"node:fs";import{tmpdir as Et}from"node:os";import U from"node:path";import{homedir as _t}from"node:os";import rr from"node:path";function tr(){let e=process.env.KYNVER_STATE_ROOT;return e?rr.resolve(e):rr.join(_t(),".kynver","state")}function Ct(){return!!(process.env.VERCEL||process.env.VERCEL_ENV||process.env.AWS_LAMBDA_FUNCTION_NAME||process.env.AWS_EXECUTION_ENV)}function Ot(){let e=process.env.KYNVER_HEAVY_VERIFICATION_STATE_ROOT;return e?U.resolve(e):Ct()?U.join(Et(),"kynver","state","heavy-verification"):U.join(tr(),"heavy-verification")}function se(){return U.join(Ot(),"slots")}function x(){let e=se();return St(e,{recursive:!0}),e}var _=120*6e4,nr=1;function Tt(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function F(){let e=process.env.KYNVER_HEAVY_VERIFICATION_SKIP?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function L(){let e=process.env.KYNVER_HEAVY_VERIFICATION_MAX_CONCURRENT;return e?Tt(e,nr):nr}function Kt(e){return`slot-${e}`}function Wt(e,r=se()){return le.join(r,`${e}.json`)}function ce(e){if(!k(e))return null;try{let r=JSON.parse(It(e,"utf8"));if(typeof r.slotId=="string"&&typeof r.pid=="number"&&typeof r.acquiredAt=="string"&&typeof r.command=="string")return r}catch{return null}return null}function sr(e,r=_){if(!e||!Y(e.pid))return!0;let t=Date.parse(e.acquiredAt);return Number.isNaN(t)?!0:Date.now()-t>r}function ar(e,r){let t=ce(e);if(t)return sr(t,r);if(!k(e))return!0;try{return Date.now()-Nt(e).mtimeMs>r}catch{return!0}}function Bt(e,r){if(ar(e,r))try{ir(e)}catch{}}function Mt(e){return wt(e,{recursive:!0}),e}function ue(e={}){let r=Mt(e.slotsDir??x()),t=e.staleMs??_,n=0;for(let i of or(r)){if(!i.endsWith(".json"))continue;let s=le.join(r,i),l=k(s);Bt(s,t),l&&!k(s)&&(n+=1)}return n}function Ut(e={}){let r=e.slotsDir??x(),t=e.staleMs??_;ue({slotsDir:r,staleMs:t});let n=[];for(let i of or(r)){if(!i.endsWith(".json"))continue;let s=ce(le.join(r,i));s&&!sr(s,t)&&n.push(s)}return n}function ae(e={}){return Ut(e).length}function S(e,r={}){if(F())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:L(),reason:null};let t=r.slotsDir??x(),n=r.staleMs??_,i=r.maxSlots??L();ue({slotsDir:t,staleMs:n});for(let l=0;l<i;l+=1){let c=Kt(l),g=Wt(c,t),cr=ce(g);if(ar(g,n))try{ir(g)}catch{}else if(cr||k(g))continue;let ur={slotId:c,pid:process.pid,acquiredAt:new Date().toISOString(),command:e};try{let h=Pt(g,"wx");Dt(h,JSON.stringify(ur,null,2),"utf8"),At(h);let dr=ae({slotsDir:t,staleMs:n});return{admitted:!0,slotId:c,activeSlots:dr,maxSlots:i,reason:null}}catch(h){if(h.code==="EEXIST")continue;throw h}}let s=ae({slotsDir:t,staleMs:n});return{admitted:!1,slotId:null,activeSlots:s,maxSlots:i,reason:`heavy verification at capacity (${s}/${i} slots)`}}function H(e,r={}){if(F())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:L(),reason:null};let t=r.slotsDir??x(),n=r.staleMs??_,i=r.maxSlots??L();ue({slotsDir:t,staleMs:n});let s=ae({slotsDir:t,staleMs:n}),l=s<i;return{admitted:l,slotId:null,activeSlots:s,maxSlots:i,reason:l?null:`heavy verification at capacity (${s}/${i} slots); waiting for ${e}`}}function Ft(e){e<=0||Lt(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function lr(e,r,t=2e3,n={}){let i=Date.now()+Math.max(0,r),s=S(e,n);for(;!s.admitted&&Date.now()<i;)Ft(Math.min(t,i-Date.now())),s=S(e,n);return s}function Ht(e,r={}){let t=ie(e);if(!t.heavy)return{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:"command does not require heavy-verification token",verificationGate:{...H(e),slotId:null}};if(F())return{allowed:!0,outcome:"heavy_verification_skipped",commandClass:t.commandClass,reason:"KYNVER_HEAVY_VERIFICATION_SKIP bypasses gate",verificationGate:{...H(e),slotId:null}};let n=r.waitMs??0,i=n>0?lr(e,n,r.pollMs):S(e);return i.admitted?{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:t.reason??"heavy-verification token acquired",verificationGate:i}:{allowed:!1,outcome:M,commandClass:t.commandClass,reason:t.reason??i.reason??M,verificationGate:i}}export{p as DEFAULT_WORKER_PROVIDER,M as HEAVY_VERIFICATION_TOKEN_REQUIRED,j as KYNVER_NO_PROD_DB_CREDENTIALS_ENV,kr as auditReviewWorkerCredentialScope,br as auditWorkerEnv,f as buildWorkerSpawnEnv,ie as classifyHeavyShellCommand,Qe as enforceCursorWorkerProvider,Ht as gateWorkerShellCommand,u as isClaudeFamilyProvider,y as isForbiddenWorkerEnvKey,Ar as isHarnessExpertReviewWorker,fe as isNoProdCredentialReviewEnvironment,de as listForbiddenWorkerEnvKeys,me as listOperatorAllowedWorkerEnvKeys,Ze as normalizeWorkerProviderName,vt as preferCursorExecutor,yt as resolveConfiguredWorkerProvider,E as scrubWorkerEnv,oe as taskAllowsClaudeWorker,er as taskExpressesWorkerProviderPreference};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kynver-app/runtime",
-  "version": "0.2.24",
+  "version": "0.2.28",
   "description": "Kynver AgentOS local execution runtime and CLI",
   "type": "module",
   "main": "./dist/index.js",
@@ -135,7 +135,9 @@
     "dist/**",
     "!dist/**/__tests__/**",
     "!dist/**/*.map",
-    "README.md"
+    "README.md",
+    "!dist/**/*.d.ts",
+    "!dist/**/*.d.ts.map"
   ],
   "scripts": {
     "build": "esbuild src/cli.ts src/index.ts src/node-runtime-policy.ts src/local-run-store/index.ts src/worker-persona-catalog.ts src/instruction-bundle/contract.ts src/chat/command-auth-proof.ts src/server/monitor.ts src/server/landing.ts src/server/worker-policy.ts src/server/orchestration.ts src/server/adapter-contract.ts src/server/context-budget-receipt.ts src/server/prompt.ts src/server/node-runtime-policy.ts src/server/model-routing.ts src/server/db-credentials.ts src/server/heavy-verification.ts src/server/memory-cost.ts src/server/pr-evidence.ts src/server/default-repo.ts src/server/cleanup.ts src/server/repo-search.ts src/server/harness-notice.ts src/server/memory-cost-enforce.ts src/server/wsl-crash-dumps.ts --bundle --platform=node --format=esm --packages=external --outbase=src --outdir=dist --minify && tsc -p tsconfig.json --emitDeclarationOnly && node scripts/chmod-cli-bin.mjs",

package/dist/active-harness-workers.d.ts

@@ -1,11 +0,0 @@
-export interface ActiveHarnessWorkerRef {
-    runId: string;
-    workerName: string;
-    taskId: string;
-    pid?: number;
-    writeSetPrefixes?: string[];
-    ownedPaths?: string[];
-    allowConcurrentHotspot?: boolean;
-}
-/** Live harness workers in one run — matches dispatch-next occupancy reporting. */
-export declare function collectRunActiveHarnessWorkers(runId: string): ActiveHarnessWorkerRef[];

package/dist/auto-complete.d.ts

@@ -1,60 +0,0 @@
-export interface AutoCompleteArgs {
-    run: string;
-    name: string;
-    agentOsId?: string;
-    pollMs?: number;
-    maxTotalMs?: number;
-    completeAttempts?: number;
-    completeBackoffMs?: number;
-    baseUrl?: string;
-    secret?: string;
-}
-export interface AutoCompleteOutcome {
-    worker: string;
-    runId: string;
-    /** "completed" → finished + completion call returned ok. "blocked" → finished + completion replay refused (structural blocker set). "timed_out" → never finished within the cap. */
-    outcome: "completed" | "blocked" | "timed_out" | "missing_link";
-    httpStatus?: number;
-    attempts: number;
-    reason?: string;
-}
-/**
- * Sidecar body: poll the worker until it finishes, then POST completion (with a
- * small retry budget). Pure logic — the CLI just adapts `--`-args in/out.
- */
-export declare function autoCompleteWorker(raw: Record<string, string | boolean>): Promise<AutoCompleteOutcome>;
-/** CLI entry: write outcome JSON to stdout. Exit code 0 on completed/blocked (both record state); 1 on missing_link / timed_out. */
-export declare function autoCompleteWorkerCli(raw: Record<string, string | boolean>): Promise<void>;
-export interface SpawnSidecarOptions {
-    runId: string;
-    workerName: string;
-    workerDir: string;
-    /** Override the CLI script the sidecar invokes. Tests inject this. */
-    cliPath?: string;
-    /** Override the node executable. Tests inject this. */
-    nodeExecutable?: string;
-    /**
-     * Carry the agentOsId on the command line so the sidecar still resolves
-     * its callback target even if `worker.json` is rewritten/relocated.
-     */
-    agentOsId?: string;
-    /**
-     * Pass-through for callers that want a non-default base URL/secret (e.g.
-     * tests or operator overrides). Production reads them from env.
-     */
-    baseUrl?: string;
-    secret?: string;
-}
-export interface SpawnedSidecar {
-    pid?: number;
-    logPath: string;
-    cliPath: string;
-}
-/**
- * Detach a per-worker completion sidecar that owns the worker's
- * finalResult → AgentTask attribution. Returns the spawned pid (or undefined if
- * `dryRun`). Failures here MUST NOT crash `worker start`: the worker is already
- * running; missing the sidecar just means a daemon/watchdog has to replay
- * completion later.
- */
-export declare function spawnCompletionSidecar(opts: SpawnSidecarOptions): SpawnedSidecar | undefined;

package/dist/bootstrap.d.ts

@@ -1,49 +0,0 @@
-interface PrimaryAgentOs {
-    id: string;
-    slug: string;
-}
-/**
- * Workspace resolution outcome, discriminated so the CLI can tell "your
- * account is not approved for Agentic OS" (HTTP 401/403 — a human/approval
- * problem) apart from "the network/server is unhappy" (a retry problem).
- */
-export type PrimaryAgentOsResult = {
-    ok: true;
-    primary: PrimaryAgentOs;
-} | {
-    ok: false;
-    kind: "access_denied";
-    status: number;
-} | {
-    ok: false;
-    kind: "no_workspace";
-    status: number;
-} | {
-    ok: false;
-    kind: "server_error";
-    status: number;
-} | {
-    ok: false;
-    kind: "network";
-    detail: string;
-};
-/** Where a gated account requests Agentic OS access (admin-approved). */
-export declare function agentOsAccessRequestUrl(base?: string): string;
-/**
- * The access-gated message: Agentic OS access is admin-approved, so a 401/403
- * here is not a bug on the user's box — it means the account needs approval.
- */
-export declare function formatAgentOsAccessGatedMessage(base?: string): string;
-/** The retry-oriented message for network/transport failures (not an access problem). */
-export declare function formatBootstrapNetworkErrorMessage(base: string, detail: string): string;
-/** Resolve the account's primary AgentOS workspace (id + slug) via GET /api/agent-os. */
-export declare function fetchPrimaryAgentOs(base: string, apiKey: string, fetchImpl?: typeof fetch): Promise<PrimaryAgentOsResult>;
-/**
- * Classify a runner-credential mint failure by its error message.
- * `fetchRunnerCredential` embeds the HTTP status as `(NNN)`; 401/403 mean the
- * account/workspace is gated or the key was revoked — an approval problem the
- * early-access page solves, not something a retry fixes.
- */
-export declare function classifyRunnerCredentialMintError(message: string): "access_denied" | "transient";
-export declare function runBootstrap(args: Record<string, string | boolean>): Promise<void>;
-export {};

package/dist/bounded-build/admission.d.ts

@@ -1,30 +0,0 @@
-export interface BuildAdmissionConfig {
-    perBuildBudgetBytes: number;
-    reserveBytes: number;
-}
-export interface BuildAdmissionVerdict {
-    admitted: boolean;
-    memAvailableBytes: number;
-    requiredBytes: number;
-    activeBuilds: number;
-    reason: string | null;
-}
-export declare function resolveBuildAdmissionConfig(config?: import("../config.js").KynverUserConfig): BuildAdmissionConfig;
-export declare function getActiveBuildCount(): number;
-/** Reset active build counter (tests). */
-export declare function resetActiveBuildCountForTests(): void;
-export declare function registerBuildStart(): void;
-export declare function registerBuildEnd(): void;
-/**
- * RAM-aware admission: start another worktree build only when MemAvailable ≥
- * per-build budget + reserve. Cross-process serialization is enforced separately
- * by the heavy-verification gate before this check runs.
- */
-export declare function assessBuildAdmission(opts?: Partial<BuildAdmissionConfig> & {
-    memAvailableBytes?: number;
-}): BuildAdmissionVerdict;
-export declare function sleepMs(ms: number): void;
-/** Poll admission until admitted or timeout (ms). Returns last verdict. */
-export declare function waitForBuildAdmission(timeoutMs: number, pollMs?: number, opts?: Partial<BuildAdmissionConfig> & {
-    memAvailableBytes?: () => number;
-}): BuildAdmissionVerdict;

package/dist/bounded-build/constants.d.ts

@@ -1,10 +0,0 @@
-/** Per-build RAM budget for admission (aligns with Hermes autopipeline worker sizing). */
-export declare const DEFAULT_BUILD_MEM_BUDGET_BYTES: number;
-/** Headroom reserved for OS / gateway before admitting another build. */
-export declare const DEFAULT_BUILD_MEM_RESERVE_BYTES: number;
-/** Node heap cap for npm/tsc build/check subprocesses unless overridden. */
-export declare const DEFAULT_NODE_OLD_SPACE_SIZE_MB = 1024;
-/** systemd scope MemoryMax for build/check subprocesses. */
-export declare const DEFAULT_SYSTEMD_MEMORY_MAX = "1.5G";
-/** systemd scope MemorySwapMax for build/check subprocesses. */
-export declare const DEFAULT_SYSTEMD_MEMORY_SWAP_MAX = "2G";

package/dist/bounded-build/exec.d.ts

@@ -1,35 +0,0 @@
-import { type HeavyVerificationGateVerdict, type WorkerCommandGateOutcome } from "../heavy-verification/index.js";
-import { type BuildAdmissionVerdict } from "./admission.js";
-export declare function isSystemdScopeError(stderr: string): boolean;
-export interface BoundedBuildExecResult {
-    ok: boolean;
-    exitCode: number;
-    stdout: string;
-    stderr: string;
-    admitted: boolean;
-    wrappedWithSystemd: boolean;
-    /** True when systemd scope creation failed and the command was retried via plain shell. */
-    systemdScopeFallback?: boolean;
-    nodeOptionsFlag: string;
-    admission: BuildAdmissionVerdict;
-    /** Cross-process heavy-verification lease (typecheck/build throttle). */
-    verificationGate: HeavyVerificationGateVerdict;
-    /** Typed M2 gate outcome when a heavy command is refused or bypassed. */
-    gateOutcome?: WorkerCommandGateOutcome;
-    command: string;
-}
-export interface RunBoundedBuildCheckInput {
-    cwd: string;
-    /** Shell command line (e.g. `npm run typecheck`). */
-    command: string;
-    env?: NodeJS.ProcessEnv;
-    /** Max ms to wait for RAM admission (0 = fail fast). Default 600_000. */
-    waitForAdmissionMs?: number;
-    timeoutMs?: number;
-}
-/**
- * Run an expensive build/check command with a cross-process heavy-verification
- * lease, NODE_OPTIONS heap cap, optional systemd-run memory scope, and
- * RAM-aware admission.
- */
-export declare function runBoundedBuildCheck(input: RunBoundedBuildCheckInput): BoundedBuildExecResult;

package/dist/bounded-build/index.d.ts

@@ -1,6 +0,0 @@
-export { DEFAULT_BUILD_MEM_BUDGET_BYTES, DEFAULT_BUILD_MEM_RESERVE_BYTES, DEFAULT_NODE_OLD_SPACE_SIZE_MB, DEFAULT_SYSTEMD_MEMORY_MAX, DEFAULT_SYSTEMD_MEMORY_SWAP_MAX, } from "./constants.js";
-export { readMemAvailableBytes } from "./meminfo.js";
-export { formatNodeOptionsFlag, mergeNodeOptionsForBuildCheck, resolveNodeOldSpaceSizeMb, } from "./node-options.js";
-export { buildSystemdRunArgv, isSystemdRunAvailable, type SystemdWrapOptions, } from "./systemd-wrap.js";
-export { assessBuildAdmission, getActiveBuildCount, registerBuildEnd, registerBuildStart, resetActiveBuildCountForTests, resolveBuildAdmissionConfig, waitForBuildAdmission, type BuildAdmissionConfig, type BuildAdmissionVerdict, } from "./admission.js";
-export { runBoundedBuildCheck, isSystemdScopeError, type BoundedBuildExecResult, type RunBoundedBuildCheckInput } from "./exec.js";

package/dist/bounded-build/meminfo.d.ts

@@ -1,5 +0,0 @@
-/**
- * Truly-usable memory. On Linux, prefer /proc/meminfo MemAvailable; fall back to
- * os.freemem() elsewhere (same semantics as resource-gate).
- */
-export declare function readMemAvailableBytes(meminfoText?: string): number;

package/dist/bounded-build/node-options.d.ts

@@ -1,9 +0,0 @@
-/** Resolved Node old-space cap in MiB (env override, else default 1024). */
-export declare function resolveNodeOldSpaceSizeMb(): number;
-/**
- * Merge NODE_OPTIONS for build/check subprocesses: set --max-old-space-size unless
- * the caller already set one in NODE_OPTIONS or KYNVER_NODE_OLD_SPACE_SIZE_MB=0
- * disables injection.
- */
-export declare function mergeNodeOptionsForBuildCheck(baseEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
-export declare function formatNodeOptionsFlag(mb?: number): string;

package/dist/bounded-build/systemd-wrap.d.ts

@@ -1,17 +0,0 @@
-export interface SystemdWrapOptions {
-    memoryMax?: string;
-    memorySwapMax?: string;
-    cwd?: string;
-    /** argv after `--` (no shell). */
-    command: string[];
-    env?: NodeJS.ProcessEnv;
-}
-/** Clear cached systemd probe (tests). */
-export declare function resetSystemdAvailabilityCacheForTests(): void;
-/** True when `systemd-run --version` succeeds (Linux hosts with systemd). */
-export declare function isSystemdRunAvailable(): boolean;
-/**
- * Build argv for `systemd-run --scope` with memory properties, then `-- command…`.
- * Does not execute the command.
- */
-export declare function buildSystemdRunArgv(opts: SystemdWrapOptions): string[];

package/dist/box-identity.d.ts

@@ -1,19 +0,0 @@
-import type { KynverUserConfig } from "./config.js";
-export type WorkerPoolBoxKind = "ghost" | "forge";
-export type BoxKindSource = "config" | "env" | "default";
-export interface ResolvedBoxIdentity {
-    boxKind: WorkerPoolBoxKind;
-    source: BoxKindSource;
-    /** True when identity would have been inferred from KYNVER_AGENT_OS_SLUG without an explicit box kind. */
-    slugInferenceBlocked: boolean;
-    warnings: string[];
-}
-/** Normalize host/box labels to ghost | forge for worker-pool attribution. */
-export declare function normalizeWorkerPoolBoxKind(raw: string | null | undefined): WorkerPoolBoxKind;
-/**
- * Resolve physical box identity for capacity snapshots and daemon policy.
- * Never maps AgentOS workspace slug alone to box kind — Forge installs must set
- * `boxKind` in ~/.kynver/config.json or `KYNVER_BOX_KIND`.
- */
-export declare function resolveBoxIdentity(env?: NodeJS.ProcessEnv, config?: Pick<KynverUserConfig, "boxKind" | "boxId">): ResolvedBoxIdentity;
-export declare function resolveBoxKindFromConfig(config?: Pick<KynverUserConfig, "boxKind" | "boxId">, env?: NodeJS.ProcessEnv): WorkerPoolBoxKind;

package/dist/box-resource-snapshot-shared.d.ts

@@ -1,13 +0,0 @@
-import type { KynverUserConfig } from "./config.js";
-export { normalizeWorkerPoolBoxKind, resolveBoxIdentity } from "./box-identity.js";
-/** @deprecated Prefer resolveBoxIdentity — kept for callers that only need the kind string. */
-export declare function resolveBoxKindFromEnv(env?: NodeJS.ProcessEnv): string;
-export declare function defaultBoxId(boxKind: string, hostLabel?: string | null): string;
-export declare function normalizeConfiguredBoxId(raw: string, boxKind: string): string;
-export declare function resolveConfiguredBoxId(input: {
-    boxKind: string;
-    hostLabel?: string | null;
-    explicitBoxId?: string | null;
-    config?: Pick<KynverUserConfig, "boxId"> | null;
-    env?: NodeJS.ProcessEnv;
-}): string;

package/dist/box-resource-snapshot.d.ts

@@ -1,45 +0,0 @@
-import type { RunnerResourceGateShape } from "./resource-gate.js";
-export interface RuntimeBoxResourceSnapshot {
-    boxId: string;
-    boxKind: string;
-    displayName?: string | null;
-    hostLabel?: string | null;
-    observedAt: string;
-    totalMemBytes: number;
-    freeMemBytes: number;
-    activeWorkers: number;
-    maxConcurrentWorkers: number;
-    autoCap: number;
-    slotsAvailable: number;
-    harnessRunId?: string | null;
-    queuedTasks?: number | null;
-    reason?: string | null;
-    prEvidence?: RuntimeBoxResourceSnapshotPrEvidence[];
-}
-export interface RuntimeBoxResourceSnapshotPrEvidence {
-    prUrl: string;
-    headSha?: string | null;
-    mergeable?: string | null;
-    observedAt: string;
-    source: "heartbeat" | "operator_tick" | "completion" | "handoff";
-}
-export declare function buildBoxResourceSnapshotFromGate(gate: RunnerResourceGateShape, input?: {
-    boxKind?: string | null;
-    boxId?: string | null;
-    displayName?: string | null;
-    hostLabel?: string | null;
-    harnessRunId?: string | null;
-    queuedTasks?: number | null;
-    prEvidence?: RuntimeBoxResourceSnapshotPrEvidence[];
-    observedAt?: string;
-}): RuntimeBoxResourceSnapshot;
-export interface HeartbeatLineInput {
-    ts?: string;
-    phase: string;
-    summary: string;
-    changedFiles?: string[];
-    blocker?: string | null;
-    boxResourceSnapshot?: RuntimeBoxResourceSnapshot;
-    prEvidence?: RuntimeBoxResourceSnapshotPrEvidence[];
-}
-export declare function formatHeartbeatLine(input: HeartbeatLineInput): string;

package/dist/box-worker-cap.d.ts

@@ -1,9 +0,0 @@
-import type { WorkerPoolBoxKind } from "./box-identity.js";
-/** Hermes Forge pool cap — independent of Ghost workspace preference or aggregate totals. */
-export declare const FORGE_POOL_MAX_WORKERS = 4;
-/** Ghost/OpenClaw default when setup auto-sizes (workspace may override higher). */
-export declare const GHOST_POOL_DEFAULT_MAX_WORKERS = 8;
-export declare function defaultMaxWorkersForBoxKind(boxKind: WorkerPoolBoxKind, autoCap: number): number;
-export declare function clampMaxWorkersForBoxKind(boxKind: WorkerPoolBoxKind, maxWorkers: number): number;
-/** True when a persisted Forge cap looks like a Ghost/aggregate inheritance (e.g. 8 or 12). */
-export declare function forgeCapLooksMisInherited(boxKind: WorkerPoolBoxKind, maxWorkers: number): boolean;

package/dist/byoc/context-hydration.d.ts

@@ -1,54 +0,0 @@
-/**
- * BYOC M0.6 — context hydration.
- *
- * Takes a validated job envelope (jobId + agentOsId + taskId) and resolves
- * the local config needed to run the job: repo path, worktree base, API URL.
- *
- * Pure: reads env/config but makes no network calls and writes nothing.
- * Fail-closed: any missing required field returns a typed error code.
- * No secrets in the returned object.
- */
-import type { LocalCodexJobEnvelope } from "./job-envelope.js";
-export interface HydratedJobContext {
-    /** From the job envelope — unchanged. */
-    jobId: string;
-    agentOsId: string;
-    taskId: string;
-    /** Absolute path to the default repo on this host. null when not configured. */
-    repoPath: string | null;
-    /** Absolute path where worktrees for this job will be created. null = unresolved. */
-    worktreeBase: string | null;
-    /** Kynver API base URL (no trailing slash). */
-    apiBaseUrl: string;
-    /** ISO timestamp when hydration ran. */
-    hydratedAt: string;
-}
-export type ContextHydrationErrorCode = 
-/** No API base URL in env or config. */
-"missing_api_base_url"
-/** Workspace ID in envelope does not match locally configured agentOsId. */
- | "workspace_mismatch";
-export type ContextHydrationResult = {
-    ok: true;
-    context: HydratedJobContext;
-} | {
-    ok: false;
-    code: ContextHydrationErrorCode;
-    detail: string;
-};
-export interface ContextHydrationOptions {
-    env?: NodeJS.ProcessEnv;
-    nowMs?: number;
-    /** Override config values for tests. */
-    config?: {
-        agentOsId?: string;
-        defaultRepo?: string;
-        harnessRoot?: string;
-        apiBaseUrl?: string;
-    };
-}
-/**
- * Hydrate a validated job envelope with local runner config.
- * Call after `validateJobEnvelope` and `verifyLocalCodexGoldenPath` pass.
- */
-export declare function hydrateJobContext(envelope: LocalCodexJobEnvelope, options?: ContextHydrationOptions): ContextHydrationResult;

package/dist/byoc/execution-proof.d.ts

@@ -1,46 +0,0 @@
-/**
- * BYOC M0.6 — execution readiness proof.
- *
- * Verifies that the local Codex execution plane and target repo are accessible
- * enough to run a task. Does NOT spawn a Codex process — it probes fs
- * accessibility and binary location only.
- *
- * Fail-closed on unexpected errors; returns a typed result, never throws.
- * No secrets in the returned object.
- */
-import type { HydratedJobContext } from "./context-hydration.js";
-import type { CodexOrchestrationPath } from "../orchestration-providers/codex-orchestration-adapter.js";
-import { resolveCodexOrchestrationAdapter } from "../orchestration-providers/codex-orchestration-adapter.js";
-export interface ExecutionProofResult {
-    /** Whether a Codex binary or Hermes OpenAI-Codex path was resolved on this host. */
-    codexReachable: boolean;
-    /** Which orchestration path was resolved (codex_cli | hermes_openai_codex | none). */
-    codexPath: CodexOrchestrationPath;
-    /** Absolute path to the codex binary, or null when using Hermes or unavailable. */
-    codexBinaryPath: string | null;
-    /** Whether the configured repo path exists on disk. */
-    repoAccessible: boolean;
-    /** Absolute repo path that was probed, or null when not configured. */
-    repoPath: string | null;
-    /** Whether a worktree base directory exists and is accessible. */
-    worktreeBaseAccessible: boolean;
-    /** Absolute worktree base path that was probed, or null when not configured. */
-    worktreeBase: string | null;
-    /** ISO timestamp when the proof ran. */
-    probedAt: string;
-    /** Wall-clock probe duration. */
-    durationMs: number;
-    /** First error encountered, or null on full pass. */
-    error: string | null;
-}
-export interface ExecutionProofOptions {
-    env?: NodeJS.ProcessEnv;
-    nowMs?: number;
-    /** Injectable codex adapter for tests. */
-    codexAdapter?: ReturnType<typeof resolveCodexOrchestrationAdapter>;
-}
-/**
- * Probe execution readiness for the given hydrated job context.
- * All checks are local — no network calls.
- */
-export declare function probeExecutionReadiness(context: HydratedJobContext, options?: ExecutionProofOptions): ExecutionProofResult;

package/dist/byoc/index.d.ts

@@ -1,5 +0,0 @@
-export * from "./job-envelope.js";
-export * from "./m6-golden-path.js";
-export * from "./context-hydration.js";
-export * from "./execution-proof.js";
-export * from "./mcp-tool-proof.js";

package/dist/byoc/job-envelope.d.ts

@@ -1,39 +0,0 @@
-/**
- * Local Codex job envelope — the typed payload Kynver cloud sends to the
- * user's local runner for BYO-compute execution. Contains no secrets.
- *
- * The envelope is opaque to the cloud after dispatch; the local runner
- * validates it against local state (workspace, runner identity, expiry,
- * tool policy) before spawning a Codex worker.
- */
-export interface LocalCodexJobToolPolicy {
-    /** Toolsets the local Codex agent may activate (e.g. ["hermes-cli"]). */
-    allowedToolsets: string[];
-    /** Whether privileged platform actions (DB writes, deploy, secrets) are permitted. */
-    allowPrivilegedPlatformActions: boolean;
-}
-/** Envelope from the Kynver control plane. Never contains secrets or tokens. */
-export interface LocalCodexJobEnvelope {
-    jobId: string;
-    agentOsId: string;
-    taskId: string;
-    issuedAt: string;
-    expiresAt: string;
-    toolPolicy: LocalCodexJobToolPolicy;
-    /** Optional runner identity hint — reject if present and mismatched. */
-    runnerIdHint?: string | null;
-}
-export type JobEnvelopeValidationError = "missing_job_id" | "missing_agent_os_id" | "missing_task_id" | "missing_issued_at" | "missing_expires_at" | "missing_tool_policy" | "malformed_dates" | "job_expired";
-export type JobEnvelopeValidationResult = {
-    ok: true;
-    envelope: LocalCodexJobEnvelope;
-} | {
-    ok: false;
-    code: JobEnvelopeValidationError;
-    detail: string;
-};
-/**
- * Validate an envelope from the cloud. Fail closed on any structural or
- * temporal problem — never return partially-valid state.
- */
-export declare function validateJobEnvelope(input: unknown, nowMs?: number): JobEnvelopeValidationResult;