@kynver-app/runtime 0.2.24 → 0.2.28

package/dist/byoc/m6-golden-path.d.ts

@@ -1,86 +0,0 @@
-/**
- * M6 first-run local Codex golden path verifier.
- *
- * Validates a signed Kynver cloud job envelope against local runner state:
- * workspace binding, runner presence, Codex/Hermes auth, BYO entitlement,
- * and tool policy. Fails closed — any missing or mismatched prerequisite
- * returns a typed failure code rather than proceeding to execution.
- *
- * Secrets and tokens are never returned. Session fingerprints are sha256
- * prefixes of non-secret binding metadata (see oauth-binding-utils).
- */
-import { resolveCodexOrchestrationAdapter, type CodexOrchestrationPath } from "../orchestration-providers/codex-orchestration-adapter.js";
-import type { LocalCodexJobEnvelope } from "./job-envelope.js";
-/**
- * Failure codes for the M6 golden path. Each maps to an operator-visible
- * remediation action — never expose secret material in messages.
- */
-export type GoldenPathCheckCode = 
-/** Runner not configured or identity cannot be resolved. */
-"missing_runner"
-/** Codex CLI and Hermes openai-codex are both unavailable on this host. */
- | "missing_codex_auth"
-/** Job's agentOsId does not match the runner's configured workspace. */
- | "wrong_workspace"
-/**
- * Job envelope is structurally invalid (missing/blank required field or
- * malformed dates). Indicates a control-plane/serialization problem, not a
- * runner-config problem — distinct from `wrong_workspace`.
- */
- | "malformed_envelope"
-/** Job envelope has expired (expiresAt in the past). */
- | "job_expired"
-/**
- * BYO compute entitlement is not active for this runner.
- * Set KYNVER_BYOC_ENTITLED=1 or complete the workspace entitlement flow.
- */
- | "missing_entitlement"
-/**
- * Job requests a tool or toolset not permitted on local BYO runners, or
- * requests privileged platform actions (DB writes, deploy, secrets).
- */
- | "unauthorized_tool_policy";
-/** Non-secret audit evidence written back to the control plane. */
-export interface GoldenPathAuditEvidence {
-    jobId: string;
-    agentOsId: string;
-    taskId: string;
-    runnerId: string;
-    runnerIdHint: string | null;
-    codexPath: CodexOrchestrationPath;
-    codexReady: boolean;
-    sessionFingerprint: string | undefined;
-    toolsetsRequested: string[];
-    privilegedRequested: boolean;
-    checkedAt: string;
-}
-export type GoldenPathResult = {
-    passed: true;
-    envelope: LocalCodexJobEnvelope;
-    evidence: GoldenPathAuditEvidence;
-} | {
-    passed: false;
-    code: GoldenPathCheckCode;
-    detail: string;
-    evidence: GoldenPathAuditEvidence;
-};
-export interface GoldenPathOptions {
-    /** Override current time (ms) for testing. */
-    nowMs?: number;
-    /** Override process.env for testing. */
-    env?: NodeJS.ProcessEnv;
-    /** Injectable for tests — skips live Codex probe. */
-    codexAdapter?: ReturnType<typeof resolveCodexOrchestrationAdapter>;
-}
-/**
- * Run the M6 golden path checks in order. The first failure short-circuits
- * and returns the error code — callers must not proceed to execution.
- */
-export declare function verifyLocalCodexGoldenPath(rawEnvelope: unknown, options?: GoldenPathOptions): GoldenPathResult;
-/**
- * Format a human-readable remediation notice for a golden path failure.
- * Safe to log — contains no secrets or tokens.
- */
-export declare function formatGoldenPathFailureNotice(result: Extract<GoldenPathResult, {
-    passed: false;
-}>): string;

package/dist/byoc/mcp-tool-proof.d.ts

@@ -1,42 +0,0 @@
-/**
- * BYOC M0.6 — MCP tool reachability proof.
- *
- * Proves the runner-credential auth pathway to the Kynver server works by making
- * a lightweight HTTP probe (GET /api/agent-os/runner-token/verify) using the
- * scoped runner token. Does not invoke any destructive MCP tools.
- *
- * Fail-closed on network errors — returns a typed result, never throws.
- * No secrets in the returned object.
- */
-import type { HydratedJobContext } from "./context-hydration.js";
-export type McpAuthSource = "runner_token" | "api_key" | "none";
-export interface McpToolProofResult {
-    /** Whether the MCP endpoint replied with a non-error HTTP status. */
-    reachable: boolean;
-    /** Which credential was used to probe. */
-    authSource: McpAuthSource;
-    /** The probe endpoint URL (no path secrets). */
-    endpoint: string | null;
-    /** HTTP status code returned, or null on network error. */
-    httpStatus: number | null;
-    /** Round-trip duration in ms, or null on failure. */
-    responseMs: number | null;
-    /** ISO timestamp when the probe ran. */
-    probedAt: string;
-    /** Error message if the probe failed, or null on success. */
-    error: string | null;
-}
-export interface McpToolProofOptions {
-    env?: NodeJS.ProcessEnv;
-    nowMs?: number;
-    /** Timeout for the HTTP probe. Default 8 000 ms. */
-    timeoutMs?: number;
-    /** Injectable fetch for tests — defaults to global fetch. */
-    fetcher?: typeof fetch;
-}
-/**
- * Probe MCP/API reachability using the runner credential.
- * Uses `GET /api/agent-os/runner-token/verify` — a read-only identity endpoint
- * added in M0.4 that requires only the runner token and returns the workspace ID.
- */
-export declare function probeMcpToolReachability(context: HydratedJobContext, options?: McpToolProofOptions): Promise<McpToolProofResult>;

package/dist/callback-headers.d.ts

@@ -1,2 +0,0 @@
-/** Build callback auth headers for AgentOS by-id harness routes. */
-export declare function buildHarnessCallbackHeaders(secret: string): Record<string, string>;

package/dist/callbacks.d.ts

@@ -1,74 +0,0 @@
-/** WSL host disk snapshot — present only when the runner is under WSL.
- * The field is optional/nullable so older runners (no probe) and non-WSL
- * runners both serialize as `wslHost: null` for the dispatch-next server. */
-export interface DispatchNextWslHostShape {
-    ok: boolean;
-    path: string;
-    freeBytes: number;
-    totalBytes: number;
-    usedPercent: number;
-    warnBelowBytes: number;
-    criticalBelowBytes: number;
-    reason: string | null;
-    probeError: string | null;
-}
-/** WSL crash-dump snapshot — present only when the runner is under WSL. */
-export interface DispatchNextWslCrashDumpsShape {
-    ok: boolean;
-    path: string | null;
-    dumpCount: number;
-    totalBytes: number;
-    executables: string[];
-    wslCaptureEnabled: boolean;
-    dumpsDisabledInWslConfig: boolean;
-    reason: string | null;
-    probeError: string | null;
-}
-export interface DispatchNextDiskGateShape {
-    ok: boolean;
-    path: string;
-    freeBytes: number;
-    totalBytes: number;
-    usedPercent: number;
-    warnBelowBytes: number;
-    criticalBelowBytes: number;
-    maxUsedPercent: number;
-    hardMaxUsedPercent: number;
-    reason: string | null;
-    /** Windows host disk under WSL (`/mnt/c` by default). `null` on non-WSL
-     * hosts and when the probe was opted out via `skipWslHostCheck`. */
-    wslHost?: DispatchNextWslHostShape | null;
-    /** Windows-side `%LOCALAPPDATA%\\Temp\\wsl-crashes` usage. `null` on non-WSL. */
-    wslCrashDumps?: DispatchNextWslCrashDumpsShape | null;
-}
-export interface DispatchNextResourceGateShape {
-    ok: boolean;
-    totalMemBytes: number;
-    freeMemBytes: number;
-    memReserveBytes: number;
-    perWorkerMemBytes: number;
-    configuredMaxWorkers: number | null;
-    capacityWorkers: number;
-    maxConcurrentWorkers: number;
-    activeWorkers: number;
-    slotsAvailable: number;
-    reason: string | null;
-}
-export interface PostJsonResult {
-    ok: boolean;
-    status: number;
-    response: unknown;
-    refreshedAuth?: boolean;
-    authRefreshFailure?: string;
-}
-export declare function postJson(url: string, secret: string, body: unknown, opts?: {
-    timeoutMs?: number;
-}): Promise<PostJsonResult>;
-export declare function postJsonWithCredentialRefresh(url: string, secret: string, body: unknown, opts: {
-    agentOsId: string;
-    baseUrl?: string;
-    timeoutMs?: number;
-}): Promise<PostJsonResult>;
-export declare function getJson(url: string, secret: string, opts?: {
-    timeoutMs?: number;
-}): Promise<PostJsonResult>;

package/dist/chat/anthropic-credentials.d.ts

@@ -1,11 +0,0 @@
-export type LocalAnthropicCredentials = {
-    kind: "api_key";
-    key: string;
-} | {
-    kind: "oauth";
-    token: string;
-};
-export declare function parseClaudeCredentials(raw: string, now?: number): string | null;
-export declare function resolveLocalAnthropicCredentials(env?: Record<string, string | undefined>, opts?: {
-    oauthOptIn?: boolean;
-}): LocalAnthropicCredentials | null;

package/dist/chat/anthropic-stream.d.ts

@@ -1,43 +0,0 @@
-import type { LocalAnthropicCredentials } from "./anthropic-credentials.js";
-export interface ChatTurnPayload {
-    system: string;
-    tools?: unknown[];
-    messages: unknown[];
-    maxTokens: number;
-    temperature?: number;
-}
-/** Anthropic-shaped final message — the relay's `final` event body. */
-export interface LocalTurnMessage {
-    content: unknown[];
-    stop_reason: string;
-    usage: {
-        input_tokens: number;
-        output_tokens: number;
-    };
-}
-interface ContentBlockAccumulator {
-    type: "text" | "tool_use";
-    text: string;
-    id?: string;
-    name?: string;
-    inputJson: string;
-}
-export interface AnthropicStreamAccumulator {
-    blocks: ContentBlockAccumulator[];
-    stopReason: string | null;
-    inputTokens: number;
-    outputTokens: number;
-}
-export declare function createAnthropicAccumulator(): AnthropicStreamAccumulator;
-/** Fold one parsed SSE event; returns the text delta it carried (if any). */
-export declare function foldAnthropicEvent(acc: AnthropicStreamAccumulator, event: unknown): string;
-export declare function toLocalTurnMessage(acc: AnthropicStreamAccumulator): LocalTurnMessage;
-export declare function getAnthropicBaseUrl(env?: Record<string, string | undefined>): string;
-export declare function streamLocalAnthropicTurn(input: {
-    creds: LocalAnthropicCredentials;
-    model: string;
-    payload: ChatTurnPayload;
-    onDelta: (text: string) => void;
-    signal?: AbortSignal;
-}): Promise<LocalTurnMessage>;
-export {};

package/dist/chat/chat-claim-loop.d.ts

@@ -1,41 +0,0 @@
-import { type ChatTurnPayload } from "./anthropic-stream.js";
-/** Stable box id for sticky chat routing (config/env before hostname). */
-export declare function resolveChatClaimBoxId(env?: Record<string, string | undefined>): string;
-export interface ChatBridgeTarget {
-    bridgeUrl: string;
-    agentOsId: string;
-    apiKey: string;
-    boxId: string;
-    model: string;
-    /** Claude Code OAuth opt-in (config `chatUseClaudeOauth` or env). */
-    useClaudeOauth: boolean;
-}
-/** Resolve the chat-bridge target; null when the feature is off/unconfigured. */
-export declare function resolveChatBridgeTarget(env?: Record<string, string | undefined>): Promise<ChatBridgeTarget | null>;
-interface ClaimedTurn {
-    turnId: string;
-    agentOsId: string;
-    payload: ChatTurnPayload;
-}
-/**
- * M5.6: execute a claimed COMMAND turn — allowlisted local `kynver` CLI argv,
- * output streamed as delta events, terminal `final` carries exitCode. Never
- * throws; refusals surface as a terminal error event.
- */
-export declare function executeCommandTurn(target: ChatBridgeTarget, turn: {
-    turnId: string;
-    payload: {
-        argv?: unknown;
-        authProof?: unknown;
-    };
-}): Promise<void>;
-/** Execute one claimed turn and stream its events back. Never throws. */
-export declare function executeChatTurn(target: ChatBridgeTarget, turn: ClaimedTurn): Promise<void>;
-/**
- * The forever loop the daemon runs alongside its pipeline ticks. Serial by
- * design (one turn at a time per box). Exits when `shouldStop()` flips.
- */
-export declare function runChatClaimLoop(opts: {
-    shouldStop: () => boolean;
-}): Promise<void>;
-export {};

package/dist/chat/chat-primary-cli.d.ts

@@ -1,2 +0,0 @@
-export declare function runChatPrimaryStatusCli(args: Record<string, string | boolean>): Promise<void>;
-export declare function runChatPrimarySetCli(args: Record<string, string | boolean>): Promise<void>;

package/dist/chat/command-allowlist.d.ts

@@ -1,8 +0,0 @@
-export interface CommandVerdict {
-    ok: boolean;
-    /** True when the verb mutates state — gateway requires approval first. */
-    mutating: boolean;
-    reason?: string;
-}
-/** Classify an argv against the allowlist. Pure — unit-tested. */
-export declare function classifyCommand(argv: readonly string[]): CommandVerdict;

package/dist/chat/command-auth-proof.d.ts

@@ -1,67 +0,0 @@
-/** Default proof lifetime — must cover one gateway command wait + relay latency. */
-export declare const COMMAND_AUTH_PROOF_TTL_SEC = 120;
-export interface CommandAuthorizationProofPayload {
-    v: 1;
-    agentOsId: string;
-    argv: string[];
-    userId: string;
-    /** Unix epoch seconds. */
-    exp: number;
-    /** Single-use replay guard (base64url). */
-    nonce: string;
-}
-export interface SignedCommandAuthorizationProof {
-    payload: CommandAuthorizationProofPayload;
-    /** base64url Ed25519 signature over `canonicalJsonStringify(payload)`. */
-    signature: string;
-    /** Identifies the signing key (`ca-<sha256(publicKey) prefix>`). */
-    publicKeyId: string;
-}
-export type CommandAuthProofVerifyResult = {
-    ok: true;
-    payload: CommandAuthorizationProofPayload;
-} | {
-    ok: false;
-    reason: string;
-};
-export interface CommandAuthSigningKey {
-    seed: Uint8Array;
-    rawPublicKey: Uint8Array;
-    publicKeyId: string;
-    usingDevFallbackKey: boolean;
-}
-/**
- * Committed DEV fallback public key id. Matching private seed is committed for
- * local/dev signing — NOT a production trust root (verifier refuses it when
- * `NODE_ENV=production` unless `KYNVER_COMMAND_AUTH_PUBLIC_KEY` overrides).
- */
-export declare const COMMAND_AUTH_DEV_FALLBACK_PUBLIC_KEY_ID = "ca-6297fb8e1773";
-/**
- * keyId → raw Ed25519 public key (hex). Public material ships in the published
- * package on purpose — baking it in is what lets bridge + daemon verify
- * command proofs without a per-host env. Rotation path:
- * `KYNVER_COMMAND_AUTH_PUBLIC_KEY` env override (raw 32-byte hex or base64)
- * outranks the pinned set (must match the proof's `publicKeyId`), then a
- * package republish pins the new key.
- */
-export declare const PINNED_COMMAND_AUTH_PUBLIC_KEYS: Readonly<Record<string, string>>;
-export declare function deriveCommandAuthKeyId(rawPublicKey: Uint8Array): string;
-export declare function resolveCommandAuthPublicKey(publicKeyId: string, env?: Record<string, string | undefined>): Uint8Array | null;
-export declare function argvMatchesProof(proofArgv: unknown, expectedArgv: readonly string[]): boolean;
-export declare function isSignedCommandAuthProofShape(value: unknown): value is SignedCommandAuthorizationProof;
-/** Verify signature + expiry + workspace/argv binding. */
-export declare function verifyCommandAuthorizationProof(signed: unknown, expected: {
-    agentOsId: string;
-    argv: readonly string[];
-}, env?: Record<string, string | undefined>, nowSec?: number): CommandAuthProofVerifyResult;
-export declare function resolveCommandAuthSigningKey(env?: Record<string, string | undefined>): CommandAuthSigningKey;
-/** Mint a signed proof after the app-side approval gate passes. */
-export declare function issueCommandAuthorizationProof(args: {
-    agentOsId: string;
-    argv: readonly string[];
-    userId: string;
-    ttlSec?: number;
-    nowSec?: number;
-    env?: Record<string, string | undefined>;
-}): SignedCommandAuthorizationProof;
-export declare function commandAuthProofKeyFingerprint(key: CommandAuthSigningKey): string;

package/dist/chat/command-executor.d.ts

@@ -1,18 +0,0 @@
-import { type SignedCommandAuthorizationProof } from "./command-auth-proof.js";
-export interface CommandTurnResult {
-    exitCode: number | null;
-    timedOut: boolean;
-    refused?: string;
-}
-export declare function verifyCommandTurnAuthorization(agentOsId: string, argv: readonly string[], authProof: unknown, env?: Record<string, string | undefined>): string | null;
-/**
- * Execute one command turn. `pushDelta` receives batched output text;
- * resolves with the terminal result (never throws).
- */
-export declare function executeLocalCommand(argv: string[], pushDelta: (text: string) => void, opts?: {
-    cliEntry?: string;
-    timeoutMs?: number;
-    agentOsId?: string;
-    authProof?: SignedCommandAuthorizationProof | unknown;
-    env?: Record<string, string | undefined>;
-}): Promise<CommandTurnResult>;

package/dist/chat/delta-batcher.d.ts

@@ -1,13 +0,0 @@
-export declare const DELTA_FLUSH_FLOOR_MS = 150;
-export declare class DeltaBatcher {
-    private readonly flushFn;
-    private readonly floorMs;
-    private buffer;
-    private timer;
-    private closed;
-    constructor(flushFn: (text: string) => void, floorMs?: number);
-    push(text: string): void;
-    private flushNow;
-    /** Flush any remainder and stop the timer. Idempotent. */
-    close(): void;
-}

package/dist/cleanup-active-worktrees.d.ts

@@ -1,14 +0,0 @@
-export interface ActiveWorktreeGuardSnapshot {
-    /** Resolved worktree paths that must keep dependency caches. */
-    activeWorktreePaths: Set<string>;
-    /** `${harnessRoot}\0${runId}` keys for runs with at least one live worker. */
-    liveRunKeys: Set<string>;
-}
-/** Collect worktrees/runs that still have live worker processes (current-run guard). */
-export declare function collectActiveWorktreeGuards(harnessRoots: string[], now?: number): ActiveWorktreeGuardSnapshot;
-/** True when a worktree path still exists under a live run (belt-and-suspenders). */
-export declare function isWorktreeOnLiveRun(worktreePath: string, harnessRoot: string, runId: string | undefined, liveRunKeys: Set<string>): boolean;
-export declare function worktreesDirForRoot(harnessRoot: string): string;
-export declare function runsDirForRoot(harnessRoot: string): string;
-export declare function harnessRootExists(harnessRoot: string): boolean;
-export declare function listWorktreeRunIds(worktreesDir: string): string[];

package/dist/cleanup-build-cache-paths.d.ts

@@ -1,5 +0,0 @@
-/** Generated install/build trees safe to delete under a harness worktree. */
-export declare const HARNESS_BUILD_CACHE_RELATIVE_PATHS: readonly [".next", ".turbo", "dist", "build", ".cache", "node_modules/.cache"];
-export type HarnessBuildCacheRelativePath = (typeof HARNESS_BUILD_CACHE_RELATIVE_PATHS)[number];
-/** True when a porcelain path is only generated build/install noise. */
-export declare function isGeneratedHarnessPath(pathPart: string): boolean;

package/dist/cleanup-cli.d.ts

@@ -1 +0,0 @@
-export declare function runCleanupCli(args: Record<string, string | boolean>): void;

package/dist/cleanup-completion-blocker.d.ts

@@ -1,10 +0,0 @@
-import type { IndexedWorktree } from "./cleanup-worktree-index.js";
-import type { RawHarnessWorkerStatus } from "./status.js";
-/**
- * Whether a persisted `completionBlocker` should still block whole-worktree removal.
- *
- * Dead workers with landed/clean work may keep replay metadata on disk after the
- * board advanced externally — those blockers are stale for GC and must not pin
- * worktrees indefinitely.
- */
-export declare function completionBlockerBlocksWorktreeRemoval(indexed: IndexedWorktree, status?: RawHarnessWorkerStatus): boolean;

package/dist/cleanup-dependency-scan.d.ts

@@ -1,13 +0,0 @@
-import type { CleanupCandidate } from "./cleanup-types.js";
-import type { IndexedWorktree } from "./cleanup-worktree-index.js";
-export interface ScanDependencyCacheOptions {
-    harnessRoot: string;
-    worktreesDir: string;
-    nodeModulesAgeMs: number;
-    includeOrphans?: boolean;
-    runIdFilter?: string;
-    index: Map<string, IndexedWorktree>;
-    now: number;
-}
-/** Scan indexed + on-disk worktrees for generated dependency caches. */
-export declare function scanDependencyCacheCandidates(opts: ScanDependencyCacheOptions): CleanupCandidate[];

package/dist/cleanup-dir-size.d.ts

@@ -1,5 +0,0 @@
-/**
- * Best-effort directory size. Prefers `du -sb` (fast on large `node_modules`);
- * falls back to a capped walk. Returns null when entry cap is exceeded.
- */
-export declare function directorySizeBytes(root: string, maxEntries?: number): number | null;

package/dist/cleanup-disk-pressure.d.ts

@@ -1,15 +0,0 @@
-import type { DispatchNextDiskGateShape } from "./callbacks.js";
-import { type ObserveDiskGateInput } from "./disk-gate.js";
-import type { ResolvedHarnessRetention } from "./cleanup-retention-config.js";
-export interface CleanupDiskPressureShape {
-    diskGate: DispatchNextDiskGateShape;
-    /** Root filesystem (or override) is at/above the guard threshold. */
-    pressured: boolean;
-    maxUsedPercent: number;
-}
-export declare function observeCleanupDiskPressure(input?: ObserveDiskGateInput): CleanupDiskPressureShape;
-/**
- * Under disk pressure, reclaim generated dependency caches aggressively while
- * keeping source worktrees and stricter worktree deletion rules unchanged.
- */
-export declare function applyDiskPressureToRetention(retention: ResolvedHarnessRetention, pressure: CleanupDiskPressureShape): ResolvedHarnessRetention;

package/dist/cleanup-duplicate-worktrees.d.ts

@@ -1,8 +0,0 @@
-import type { CleanupCandidate } from "./cleanup-types.js";
-import type { ScanHarnessOptions } from "./cleanup-scan.js";
-/**
- * Secondary git worktrees under the harness layout that are not indexed
- * (aborted duplicate attempts). Salvage guards (orphan safety) run at evaluation
- * time — do not run per-worktree `git status` during the scan pass.
- */
-export declare function scanDuplicateWorktreeCandidates(opts: ScanHarnessOptions): CleanupCandidate[];

package/dist/cleanup-evidence.d.ts

@@ -1,10 +0,0 @@
-import type { CleanupAction, CleanupSkipReason } from "./cleanup-types.js";
-export declare function collectPreservedLivePaths(actions: CleanupAction[], skips: Array<{
-    path: string;
-    reason: CleanupSkipReason;
-    detail?: string;
-}>): Array<{
-    path: string;
-    reason: CleanupSkipReason;
-    detail?: string;
-}>;

package/dist/cleanup-execute.d.ts

@@ -1,7 +0,0 @@
-import type { CleanupAction, CleanupCandidate } from "./cleanup-types.js";
-export { isHarnessBuildCachePath, isHarnessNextCachePath, isHarnessNodeModulesPath } from "./cleanup-harness-path-validate.js";
-export declare function removeNodeModules(candidate: CleanupCandidate, execute: boolean): CleanupAction;
-export declare function removeNextCache(candidate: CleanupCandidate, execute: boolean): CleanupAction;
-export declare function removeBuildCache(candidate: CleanupCandidate, execute: boolean): CleanupAction;
-export declare function removeRunDirectory(candidate: CleanupCandidate, execute: boolean): CleanupAction;
-export declare function removeWorktree(candidate: CleanupCandidate, execute: boolean): CleanupAction;

package/dist/cleanup-git-probe.d.ts

@@ -1,5 +0,0 @@
-import type { GitCaptureResult } from "./git.js";
-/** Bounded git work during broad cleanup scans — hung repos must not stall the sweep. */
-export declare const CLEANUP_GIT_PROBE_TIMEOUT_MS = 5000;
-export declare function cleanupGitCapture(cwd: string, args: string[]): GitCaptureResult;
-export declare function gitStatusShortForCleanup(worktreePath: string): string[] | null;

package/dist/cleanup-git-rev-cache.d.ts

@@ -1,5 +0,0 @@
-/** Per-sweep memo for cheap ahead-of-main probes during worktree guard passes. */
-export declare class CleanupGitRevCache {
-    private readonly aheadOfMain;
-    countAheadOfMain(worktreePath: string, base?: string): number | null;
-}

package/dist/cleanup-git-status-cache.d.ts

@@ -1,5 +0,0 @@
-/** Per-sweep memo so dependency-cache guards do not re-run git per cache dir. */
-export declare class CleanupGitStatusCache {
-    private readonly cache;
-    porcelain(worktreePath: string): string[];
-}

package/dist/cleanup-guards-helpers.d.ts

@@ -1,2 +0,0 @@
-/** Strip generated install/build trees from porcelain — they are what cleanup removes. */
-export declare function materialWorktreeChanges(changedFiles: string[]): string[];

package/dist/cleanup-guards.d.ts

@@ -1,53 +0,0 @@
-import type { CleanupGitStatusCache } from "./cleanup-git-status-cache.js";
-import type { CleanupSkipReason, WorktreeRemovalGuardHook } from "./cleanup-types.js";
-import type { IndexedWorktree } from "./cleanup-worktree-index.js";
-import type { CleanupRunLivenessContext } from "./cleanup-run-liveness.js";
-export { materialWorktreeChanges } from "./cleanup-guards-helpers.js";
-export { isLandedGitAncestry, isPrOrUnmergedWork } from "./cleanup-worktree-salvage.js";
-export interface WorktreeGuardInput {
-    indexed: IndexedWorktree | null;
-    /** Resolved worktree directory (required for overlay guards on orphans). */
-    worktreePath: string;
-    includeOrphans: boolean;
-    worktreesAgeMs: number;
-    /** Shorter age gate for harness runs already marked terminal. */
-    terminalWorktreesAgeMs: number;
-    ageMs: number;
-    /**
-     * Filesystem-derived skip reason for orphan candidates (computed by
-     * `assessOrphanWorktreeSafety`). Used only when `indexed` is null.
-     */
-    orphanSafety?: CleanupSkipReason | null;
-    worktreeRemovalGuard?: WorktreeRemovalGuardHook;
-    liveness?: CleanupRunLivenessContext;
-    now?: number;
-    harnessRoot?: string;
-    /** When true (execute mode), persist salvage evidence before allowing removal. */
-    writeSalvageEvidence?: boolean;
-}
-export type WorktreeGuardSkip = CleanupSkipReason | {
-    reason: CleanupSkipReason;
-    detail?: string;
-};
-export declare function skipWorktreeRemoval(input: WorktreeGuardInput): WorktreeGuardSkip | null;
-export interface NodeModulesGuardInput {
-    indexed: IndexedWorktree | null;
-    includeOrphans: boolean;
-    nodeModulesAgeMs: number;
-    ageMs: number;
-}
-export interface DependencyCacheGuardInput extends NodeModulesGuardInput {
-    worktreePath: string;
-    activeWorktreePaths: Set<string>;
-    diskPressure?: boolean;
-    gitStatusCache?: CleanupGitStatusCache;
-}
-/**
- * Dependency caches (`node_modules`, `.next`) are safe to drop when the worker
- * process is dead and source files remain — even if the board still shows
- * completion/landing/PR blockers. Whole-worktree removal stays strict.
- */
-export declare function skipDependencyCacheRemoval(input: DependencyCacheGuardInput): CleanupSkipReason | null;
-/** Build caches (`.turbo`, `dist`, etc.) use the same relaxed guards as dependency caches. */
-export declare function skipBuildCacheRemoval(input: DependencyCacheGuardInput): CleanupSkipReason | null;
-export declare function skipNodeModulesRemoval(input: NodeModulesGuardInput): CleanupSkipReason | null;

package/dist/cleanup-harness-path-validate.d.ts

@@ -1,5 +0,0 @@
-import type { CleanupSkipReason } from "./cleanup-types.js";
-export declare function isHarnessNodeModulesPath(targetPath: string, harnessRoot: string, worktreesDir: string): CleanupSkipReason | null;
-export declare function isHarnessNextCachePath(targetPath: string, harnessRoot: string, worktreesDir: string): CleanupSkipReason | null;
-export declare function isHarnessBuildCachePath(targetPath: string, harnessRoot: string, worktreesDir: string): CleanupSkipReason | null;
-export declare function isHarnessGeneratedCachePath(targetPath: string, harnessRoot: string, worktreesDir: string): boolean;

package/dist/cleanup-harness-roots.d.ts

@@ -1,6 +0,0 @@
-/** Operator-known harness trees that accumulate stale dependency caches. */
-export declare const WELL_KNOWN_HARNESS_SCAN_ROOTS: readonly ["/var/tmp/kynver-harness", string];
-export declare function resolveHarnessScanRoots(options?: {
-    harnessRoot?: string;
-    scanWellKnown?: boolean;
-}): string[];

package/dist/cleanup-index-status.d.ts

@@ -1,16 +0,0 @@
-import { type RawHarnessWorkerStatus } from "./status.js";
-import type { CleanupGitStatusCache } from "./cleanup-git-status-cache.js";
-import type { CleanupRunLivenessContext } from "./cleanup-run-liveness.js";
-import type { IndexedWorktree } from "./cleanup-worktree-index.js";
-/** Lazily compute worker status — avoids git/stream work for every indexed worker up front. */
-export declare function indexedWorktreeStatus(entry: IndexedWorktree): RawHarnessWorkerStatus;
-/**
- * Porcelain-only dirty probe for dependency-cache guards. Skips ancestry/stream
- * work that whole-worktree removal needs but `node_modules` GC does not.
- */
-export declare function indexedWorktreeHasMaterialChanges(entry: IndexedWorktree, gitStatusCache?: CleanupGitStatusCache): boolean;
-/**
- * Guard-oriented status: avoids stdout/heartbeat stream parsing for terminal workers
- * while preserving salvage semantics (dirty / PR / landing checks).
- */
-export declare function resolveWorktreeGuardStatus(entry: IndexedWorktree, ctx?: CleanupRunLivenessContext): RawHarnessWorkerStatus;