@kynver-app/runtime 0.2.24 → 0.2.28

package/dist/cleanup-orphan-safety.d.ts

@@ -1,17 +0,0 @@
-import type { CleanupSkipReason } from "./cleanup-types.js";
-export interface OrphanSafetyInput {
-    worktreePath: string;
-    harnessRoot: string;
-    runId?: string;
-    workerName?: string;
-    heartbeatFreshMs?: number;
-    now?: number;
-}
-/**
- * Inspect filesystem signals for an orphan worktree (no run/worker.json index entry).
- *
- * Returns a `CleanupSkipReason` when removal is unsafe, or `null` when the orphan
- * appears safe to delete. Conservative on errors — any unreadable git state or
- * unexpected layout returns `pr_or_unmerged_commits` so genuine work is preserved.
- */
-export declare function assessOrphanWorktreeSafety(input: OrphanSafetyInput): CleanupSkipReason | null;

package/dist/cleanup-path-ownership.d.ts

@@ -1,9 +0,0 @@
-export interface PathOwnershipInfo {
-    uid: number;
-    gid: number;
-    /** True when the entry is not owned by the current process user/group. */
-    foreign: boolean;
-}
-export declare function readPathOwnership(targetPath: string): PathOwnershipInfo | null;
-/** Shallow scan for foreign-owned entries (dependency caches are usually uniform). */
-export declare function pathHasForeignOwnedEntry(targetPath: string, maxEntries?: number): boolean;

package/dist/cleanup-privileged-remove.d.ts

@@ -1,13 +0,0 @@
-export type PrivilegedCleanupMode = "off" | "auto" | "force";
-export declare function resolvePrivilegedCleanupMode(): PrivilegedCleanupMode;
-export interface PrivilegedReclaimResult {
-    ok: boolean;
-    method?: "chown_then_rm" | "sudo_rm";
-    error?: string;
-}
-/**
- * Reclaim a harness generated cache directory that is not owned by the daemon user.
- * Only operates on validated `worktrees/<run>/<worker>/{node_modules,.next,...}` paths.
- */
-export declare function tryPrivilegedReclaimHarnessCache(targetPath: string, harnessRoot: string, worktreesDir: string): PrivilegedReclaimResult;
-export declare const HARNESS_ROOT_OWNED_CACHE_RUNBOOK = "Root-owned harness caches require operator reclaim: configure passwordless sudo for chown/rm under ~/.kynver/harness/worktrees, or run `node scripts/reclaim-harness-root-owned-cache.mjs --execute` as the harness owner with sudo available. See docs/runbooks/harness-root-owned-cache-reclaim.md.";

package/dist/cleanup-progress.d.ts

@@ -1,2 +0,0 @@
-/** stderr progress lines so broad cleanup scans do not appear hung before JSON output. */
-export declare function emitCleanupProgress(phase: string, detail?: string): void;

package/dist/cleanup-remove-path.d.ts

@@ -1,17 +0,0 @@
-import { rmSync } from "node:fs";
-import type { CleanupCandidate, CleanupSkipReason } from "./cleanup-types.js";
-import { pathHasForeignOwnedEntry } from "./cleanup-path-ownership.js";
-export interface RemoveHarnessPathOutcome {
-    executed: boolean;
-    skipped: boolean;
-    skipReason?: CleanupSkipReason;
-    error?: string;
-    bytes?: number;
-    privilegedReclaim?: boolean;
-}
-interface RemoveHarnessGeneratedPathDeps {
-    removePath?: typeof rmSync;
-    hasForeignOwnedEntry?: typeof pathHasForeignOwnedEntry;
-}
-export declare function removeHarnessGeneratedPath(candidate: CleanupCandidate, execute: boolean, deps?: RemoveHarnessGeneratedPathDeps): RemoveHarnessPathOutcome;
-export {};

package/dist/cleanup-retention-config.d.ts

@@ -1,26 +0,0 @@
-import type { DispatchNextDiskGateShape } from "./callbacks.js";
-import { type HarnessCleanupOptions } from "./cleanup-types.js";
-export interface ResolvedHarnessRetention {
-    execute: boolean;
-    finalizeStaleRuns: boolean;
-    /** When false, skip node_modules/.next/build-cache scans (worktree-only operator sweeps). */
-    scanDependencyCaches: boolean;
-    nodeModulesAgeMs: number;
-    worktreesAgeMs: number;
-    terminalWorktreesAgeMs: number;
-    runDirectoriesAgeMs: number;
-    maxActionsPerSweep: number;
-    includeOrphans: boolean;
-    runIdFilter?: string;
-    accountBytes: boolean;
-    /** Cap filesystem walk depth per run dir in `harnessStorageSnapshot` (0 = counts only). */
-    storagePerRunEntryCap: number | null;
-    /** Per-candidate walk cap when `du` is unavailable (default 2k). */
-    byteAccountingEntryCap: number;
-    diskPressure?: boolean;
-    diskGate?: DispatchNextDiskGateShape;
-}
-/** Merge CLI options with operator env defaults (pipeline + `kynver cleanup`). */
-export declare function resolveHarnessRetention(options?: HarnessCleanupOptions): ResolvedHarnessRetention;
-/** Pipeline tick: dry-run by default; global scope when `KYNVER_CLEANUP_SCOPE=all`. */
-export declare function resolvePipelineHarnessRetention(runId?: string): ResolvedHarnessRetention;

package/dist/cleanup-run-directory.d.ts

@@ -1,20 +0,0 @@
-import type { CleanupCandidate, CleanupSkipReason } from "./cleanup-types.js";
-import type { ActiveWorktreeGuardSnapshot } from "./cleanup-active-worktrees.js";
-export interface ScanRunDirectoryOptions {
-    harnessRoot: string;
-    worktreesDir: string;
-    runDirectoriesAgeMs: number;
-    runIdFilter?: string;
-    activeGuards: ActiveWorktreeGuardSnapshot;
-    now: number;
-}
-export declare function skipRunDirectoryRemoval(input: {
-    harnessRoot: string;
-    runId: string;
-    runPath: string;
-    ageMs: number;
-    runDirectoriesAgeMs: number;
-    activeGuards: ActiveWorktreeGuardSnapshot;
-}): CleanupSkipReason | null;
-/** Empty per-run folders under `worktrees/<runId>/` after worker worktrees are gone. */
-export declare function scanStaleRunDirectoryCandidates(opts: ScanRunDirectoryOptions): CleanupCandidate[];

package/dist/cleanup-run-liveness.d.ts

@@ -1,21 +0,0 @@
-import type { IndexedWorktree } from "./cleanup-worktree-index.js";
-import type { CleanupGitRevCache } from "./cleanup-git-rev-cache.js";
-import type { CleanupGitStatusCache } from "./cleanup-git-status-cache.js";
-import type { CleanupRunTerminalCache } from "./cleanup-run-terminal-cache.js";
-export interface CleanupRunLivenessContext {
-    runTerminalCache: CleanupRunTerminalCache;
-    gitStatusCache: CleanupGitStatusCache;
-    gitRevCache: CleanupGitRevCache;
-}
-/** True when the worker process or heartbeat still shows live harness activity. */
-export declare function isWorkerProcessLive(indexed: IndexedWorktree, now?: number): boolean;
-/**
- * Run record still marked active but every worker is finished — safe to treat as
- * terminal for GC after `finalizeStaleRuns()` (or when deriveTerminalRunStatus is set).
- */
-export declare function isRunStaleActive(indexed: IndexedWorktree, ctx?: CleanupRunLivenessContext): boolean;
-/**
- * Whether the harness run still has unfinished work that should block whole-worktree removal.
- * Does not block per-worker `node_modules` when only this worker is finished.
- */
-export declare function runBlocksWorktreeRemoval(indexed: IndexedWorktree, ctx?: CleanupRunLivenessContext, now?: number): boolean;

package/dist/cleanup-run-terminal-cache.d.ts

@@ -1,6 +0,0 @@
-import type { HarnessRunRecord } from "./run-store.js";
-/** Per-sweep memo so worktree guards do not re-derive terminal status for every worker in a run. */
-export declare class CleanupRunTerminalCache {
-    private readonly cache;
-    derive(run: HarnessRunRecord): string | null;
-}

package/dist/cleanup-salvage-evidence.d.ts

@@ -1,33 +0,0 @@
-import type { CleanupSkipReason } from "./cleanup-types.js";
-import type { IndexedWorktree } from "./cleanup-worktree-index.js";
-import type { RawHarnessWorkerStatus } from "./status.js";
-export interface WorktreeSalvageEvidenceRecord {
-    capturedAt: string;
-    skipReason: CleanupSkipReason;
-    runId: string;
-    workerName: string;
-    worktreePath: string;
-    taskId?: string;
-    agentOsId?: string;
-    branch?: string;
-    completionBlocker?: string;
-    finalResult?: unknown;
-    changedFiles: string[];
-    gitAncestry: RawHarnessWorkerStatus["gitAncestry"];
-    prUrl?: string | null;
-    patchPath?: string | null;
-}
-export declare function salvageEvidenceDir(harnessRoot: string, runId: string, workerName: string): string;
-export declare function hasSalvageEvidence(input: {
-    harnessRoot: string;
-    runId: string;
-    workerName: string;
-}): boolean;
-/** Persist worktree/git evidence before whole-worktree removal for operator salvage review. */
-export declare function writeWorktreeSalvageEvidence(input: {
-    harnessRoot: string;
-    indexed: IndexedWorktree;
-    skipReason: CleanupSkipReason;
-    status: RawHarnessWorkerStatus;
-    now?: number;
-}): WorktreeSalvageEvidenceRecord;

package/dist/cleanup-scan.d.ts

@@ -1,15 +0,0 @@
-import type { CleanupCandidate } from "./cleanup-types.js";
-import { type IndexedWorktree } from "./cleanup-worktree-index.js";
-export interface ScanHarnessOptions {
-    harnessRoot: string;
-    worktreesDir: string;
-    nodeModulesAgeMs: number;
-    worktreesAgeMs: number;
-    includeOrphans: boolean;
-    runIdFilter?: string;
-    index: Map<string, IndexedWorktree>;
-    now: number;
-}
-export declare function scanNodeModulesCandidates(opts: ScanHarnessOptions): CleanupCandidate[];
-export declare function scanBuildCacheCandidates(opts: ScanHarnessOptions): CleanupCandidate[];
-export declare function scanWorktreeCandidates(opts: ScanHarnessOptions): CleanupCandidate[];

package/dist/cleanup-summary.d.ts

@@ -1,29 +0,0 @@
-import type { CleanupActionKind, HarnessCleanupSummary, HarnessStorageSnapshotShape } from "./cleanup-types.js";
-export interface CleanupCompactSummary {
-    harnessRoot: string;
-    scanRoots: string[];
-    dryRun: boolean;
-    execute: boolean;
-    scannedAt: string;
-    finalizedRuns: number;
-    actionCount: number;
-    actionKinds: Partial<Record<CleanupActionKind, number>>;
-    totals: HarnessCleanupSummary["totals"];
-    storage?: HarnessStorageSnapshotShape;
-    preservedLivePaths?: HarnessCleanupSummary["preservedLivePaths"];
-    removedRunDirectories?: number;
-    sampleActions: Array<{
-        kind: CleanupActionKind;
-        path: string;
-        skipReason?: string;
-        bytes?: number | null;
-        runId?: string;
-        worker?: string;
-    }>;
-    sampleSkips: HarnessCleanupSummary["skips"];
-}
-/** Operator-facing rollup — bounded samples, no per-path megabyte JSON dumps. */
-export declare function buildCleanupCompactSummary(summary: HarnessCleanupSummary, options?: {
-    maxSampleActions?: number;
-    maxSampleSkips?: number;
-}): CleanupCompactSummary;

package/dist/cleanup-types.d.ts

@@ -1,154 +0,0 @@
-export type CleanupActionKind = "remove_node_modules" | "remove_next_cache" | "remove_build_cache" | "remove_worktree" | "remove_run_directory";
-export type CleanupSkipReason = "dry_run" | "below_age_threshold" | "active_worker" | "dirty_worktree" | "landing_blocked" | "pr_or_unmerged_commits" | "completion_blocked" | "run_still_active" | "path_outside_harness" | "worktrees_disabled" | "orphan_without_flag" | "missing_worktree" | "remove_failed"
-/** Generated cache owned by another user (often root); daemon cannot unlink without privileged reclaim. */
- | "foreign_owner"
-/** Harness `runs/` metadata must never be removed by worktree GC. */
- | "run_metadata_protected"
-/** AgentOS / operator lifecycle overlay blocked removal (see `detail`). */
- | "board_lifecycle_blocked";
-export interface CleanupCandidate {
-    kind: CleanupActionKind;
-    path: string;
-    bytes: number | null;
-    harnessRoot?: string;
-    runId?: string;
-    worker?: string;
-    repo?: string;
-    ageMs: number;
-}
-export interface CleanupAction extends CleanupCandidate {
-    executed: boolean;
-    skipped: boolean;
-    skipReason?: CleanupSkipReason;
-    error?: string;
-}
-export interface RunFinalizeSummary {
-    runId: string;
-    from: string;
-    to: string;
-}
-export interface HarnessStorageSnapshotShape {
-    harnessRoot: string;
-    worktreesDir: string;
-    worktreesBytes: number | null;
-    runCount: number;
-    workerCount: number;
-    oldestRunAt: string | null;
-    scannedAt: string;
-}
-export interface HarnessCleanupSummary {
-    harnessRoot: string;
-    /** Every harness tree scanned (primary + well-known extras). */
-    scanRoots: string[];
-    dryRun: boolean;
-    execute: boolean;
-    nodeModulesAgeMs: number;
-    worktreesAgeMs: number;
-    includeOrphans: boolean;
-    diskPressure?: boolean;
-    diskGate?: {
-        ok: boolean;
-        path: string;
-        freeBytes: number;
-        usedPercent: number;
-        reason: string | null;
-    };
-    scannedAt: string;
-    finalizedRuns: RunFinalizeSummary[];
-    actions: CleanupAction[];
-    skips: Array<{
-        path: string;
-        reason: CleanupSkipReason;
-        detail?: string;
-    }>;
-    totals: {
-        candidateBytes: number;
-        reclaimableBytes: number;
-        removedBytes: number;
-        removedPaths: number;
-        skippedPaths: number;
-        skipReasons: Partial<Record<CleanupSkipReason, number>>;
-    };
-    /** Disk-pressure evidence — present when bytes accounting is enabled. */
-    storage?: HarnessStorageSnapshotShape;
-    /** Sample of paths kept because workers/runs are still live (for operator summaries). */
-    preservedLivePaths?: Array<{
-        path: string;
-        reason: CleanupSkipReason;
-        detail?: string;
-    }>;
-    /** Empty harness worktree run directories removed after worker worktrees were reclaimed. */
-    removedRunDirectories?: number;
-    /** Windows-side WSL crash dump prune evidence (when auto-cleanup ran or observed). */
-    wslCrashDumps?: {
-        observed: boolean;
-        execute: boolean;
-        dumpCount: number;
-        totalBytes: number;
-        removedCount: number;
-        removedBytes: number;
-        executables: string[];
-        path: string | null;
-        reason: string | null;
-    };
-    /** Bounded operator rollup (always attached; use `kynver cleanup --compact` to emit alone). */
-    compactSummary?: import("./cleanup-summary.js").CleanupCompactSummary;
-}
-export interface WorktreeRemovalGuardInput {
-    worktreePath: string;
-    /** True when `buildWorktreeIndex()` has a worker.json entry for this path. */
-    indexed: boolean;
-    runId?: string;
-    worker?: string;
-}
-/** Optional overlay (e.g. AgentOS board + lease checks) evaluated after runtime salvage gates. */
-export type WorktreeRemovalGuardHook = (input: WorktreeRemovalGuardInput) => {
-    reason: CleanupSkipReason;
-    detail?: string;
-} | null;
-export interface HarnessCleanupOptions {
-    harnessRoot?: string;
-    /** When false (default), only report candidates. */
-    execute?: boolean;
-    /** When true (default), call `finalizeStaleRuns()` before scanning. */
-    finalizeStaleRuns?: boolean;
-    /** When true, estimate candidate bytes for guard-passing removals only. CLI defaults false. */
-    accountBytes?: boolean;
-    /** Per-run entry cap for storage snapshot byte totals (`0` = counts only). */
-    storagePerRunEntryCap?: number | null;
-    /** Per-candidate filesystem walk cap when `du` is unavailable. */
-    byteAccountingEntryCap?: number;
-    /** When false, skip node_modules/.next/build-cache scans (worktree-only operator sweeps). */
-    scanDependencyCaches?: boolean;
-    /** Minimum age before removing generated `node_modules` (default 6h). */
-    nodeModulesAgeMs?: number;
-    /** When 0 or unset, worktree removal is disabled. */
-    worktreesAgeMs?: number;
-    /**
-     * Age threshold for worktrees whose harness run is already terminal
-     * (`completed` / `failed` / `cancelled` / `done`). Salvage gates still apply.
-     */
-    terminalWorktreesAgeMs?: number;
-    /** Minimum age before removing an empty `worktrees/<runId>/` directory. */
-    runDirectoriesAgeMs?: number;
-    /** Cap actions evaluated per sweep (cron/watchdog boundedness). */
-    maxActionsPerSweep?: number;
-    /** Allow cleaning `node_modules` under worktrees with no worker index entry. */
-    includeOrphans?: boolean;
-    /** When set, only consider workers for this harness run (pipeline tick scope). */
-    runIdFilter?: string;
-    now?: number;
-    /** When set, invoked for each worktree candidate after built-in salvage guards. */
-    worktreeRemovalGuard?: WorktreeRemovalGuardHook;
-}
-/** Conservative default aligned with 2026-05-27 manual harness cleanup (6h). */
-export declare const DEFAULT_NODE_MODULES_AGE_MS: number;
-/** Seven days — only used when worktree cleanup is explicitly enabled. */
-export declare const DEFAULT_WORKTREES_AGE_MS: number;
-/** Terminal runs: salvage-first worktree removal after workers finish (6h default). */
-export declare const DEFAULT_TERMINAL_WORKTREES_AGE_MS: number;
-/** Empty per-run worktree folders under `worktrees/<runId>/`. */
-export declare const DEFAULT_RUN_DIRECTORIES_AGE_MS: number;
-/** Bounded cron/watchdog scan — skip remaining candidates when exceeded. */
-export declare const DEFAULT_MAX_ACTIONS_PER_SWEEP = 120;
-export declare const MAX_PRESERVED_LIVE_PATH_SAMPLES = 24;

package/dist/cleanup-worker-harness-live.d.ts

@@ -1,9 +0,0 @@
-import type { HarnessWorkerRecord } from "./status.js";
-/** True when parsed heartbeat JSON has a recent `ts` (not file mtime alone). */
-export declare function heartbeatContentIsFresh(worker: HarnessWorkerRecord, now?: number, windowMs?: number): boolean;
-/**
- * Whether a harness worker still has live execution signals: OS process and/or
- * fresh heartbeat content. Ignores stale `worker.json` status and file mtimes
- * that daemons or scanners may touch without a running worker.
- */
-export declare function isHarnessWorkerHarnessLive(worker: HarnessWorkerRecord, now?: number, windowMs?: number): boolean;

package/dist/cleanup-worktree-index.d.ts

@@ -1,18 +0,0 @@
-import { type HarnessRunRecord } from "./run-store.js";
-import type { HarnessWorkerRecord, RawHarnessWorkerStatus } from "./status.js";
-export interface IndexedWorktree {
-    harnessRoot?: string;
-    worktreePath: string;
-    runId: string;
-    workerName: string;
-    run: HarnessRunRecord;
-    worker: HarnessWorkerRecord;
-    /** Populated lazily via `indexedWorktreeStatus()` during guard evaluation. */
-    status?: RawHarnessWorkerStatus;
-}
-export declare function buildWorktreeIndex(): Map<string, IndexedWorktree>;
-/** Scope a merged multi-root index to one harness tree (avoids triple-scanning every worker). */
-export declare function filterWorktreeIndexForRoot(index: Map<string, IndexedWorktree>, harnessRoot: string): Map<string, IndexedWorktree>;
-export declare function buildWorktreeIndexAt(harnessRoot: string): Map<string, IndexedWorktree>;
-/** Load worker when index miss but path is known from disk layout. */
-export declare function loadIndexedWorker(runId: string, workerName: string): HarnessWorkerRecord | null;

package/dist/cleanup-worktree-salvage.d.ts

@@ -1,7 +0,0 @@
-import type { GitAncestry } from "./git.js";
-import type { RawHarnessWorkerStatus } from "./status.js";
-export declare function prUrlFromFinalResult(finalResult: unknown): string | null;
-/** True when git ancestry shows the worker branch is fully landed on the run base. */
-export declare function isLandedGitAncestry(ancestry: GitAncestry | null | undefined): boolean;
-/** Blocks whole-worktree removal when commits are not landed or tree is dirty. */
-export declare function isPrOrUnmergedWork(status: RawHarnessWorkerStatus): boolean;

package/dist/cleanup.d.ts

@@ -1,5 +0,0 @@
-import { type HarnessCleanupOptions, type HarnessCleanupSummary } from "./cleanup-types.js";
-export declare function runHarnessCleanup(options?: HarnessCleanupOptions): HarnessCleanupSummary;
-/** Pipeline-safe defaults: finalize stale runs, dry-run unless execute env is set. */
-export declare function runPipelineHarnessCleanup(runId?: string): HarnessCleanupSummary;
-export declare function isPipelineCleanupEnabled(): boolean;

package/dist/cli-output/worker-start-stdout.d.ts

@@ -1,11 +0,0 @@
-/** User-facing vs machine stdout for `kynver worker start`. */
-export interface WorkerStartDetails {
-    runId: string;
-    worker: string;
-    pid: number | undefined;
-    branch: string | undefined;
-    worktreePath: string | undefined;
-    workerDir: string | undefined;
-}
-export declare function formatWorkerStartSummary(details: WorkerStartDetails): string;
-export declare function formatWorkerStartJson(details: WorkerStartDetails): string;

package/dist/cli.d.ts

@@ -1,14 +0,0 @@
-#!/usr/bin/env node
-/**
- * Every routable CLI verb path, exactly as `main()` dispatches them. This is
- * the docs-truth contract: the README + user-hosted-runner runbook tests pin
- * every `kynver <verb…>` command they mention against this list, so a doc can
- * never again teach a command that does not exist (`kynver runner start`,
- * bare `kynver doctor`, `kynver selftest`). Keep in lockstep with the
- * scope/action routing in `main()` below.
- */
-export declare const KNOWN_CLI_VERBS: readonly string[];
-/** Snapshot of {@link KNOWN_CLI_VERBS} for docs-truth tests and tooling. */
-export declare function listKnownCliVerbs(): string[];
-export declare function usage(code?: number): never;
-export declare function main(argv?: string[]): Promise<void>;

package/dist/command-center-contract-cli.d.ts

@@ -1 +0,0 @@
-export declare function runCommandCenterContractCli(args: Record<string, string | boolean>): Promise<void>;

package/dist/completion-ack.d.ts

@@ -1,18 +0,0 @@
-import type { HarnessWorkerRecord } from "./status.js";
-export type CompletionOutcome = "acknowledged" | "skipped_already_acked" | "structural_blocker";
-export interface CompletionAckFields {
-    completionReportedAt: string;
-    completionOutcome: "acknowledged" | "rejected";
-    completionResponse?: unknown;
-}
-export declare function hasCompletionAck(worker: HarnessWorkerRecord): boolean;
-/** True when AgentOS acknowledged completion and the board advanced (or was already terminal). */
-export declare function hasSuccessfulCompletionAck(worker: HarnessWorkerRecord): boolean;
-/**
- * Finished workers with a prior completion POST that did not advance the board
- * (rejected route, structural blocker) must be eligible for replay so fresher
- * `finalResult` evidence can reach AgentOS.
- */
-export declare function needsCompletionReplay(worker: HarnessWorkerRecord): boolean;
-export declare function persistCompletionAck(worker: HarnessWorkerRecord, runId: string, fields: CompletionAckFields): void;
-export declare function clearCompletionAck(worker: HarnessWorkerRecord, runId: string): void;

package/dist/completion-replay.d.ts

@@ -1,10 +0,0 @@
-import type { HarnessWorkerRecord } from "./status.js";
-/**
- * A finished worker whose completion POST was recorded but did not advance the
- * linked AgentTask (structural blocker or rejected outcome) must be eligible for
- * idempotent completion replay on later pipeline ticks — not skipped as "already
- * acknowledged".
- */
-export declare function shouldReplayHarnessCompletion(worker: HarnessWorkerRecord): boolean;
-/** Terminal ack with no structural reason to replay completion to AgentOS. */
-export declare function hasTerminalCompletionAck(worker: HarnessWorkerRecord): boolean;

package/dist/completion-response.d.ts

@@ -1,15 +0,0 @@
-/** Parsed outcome from POST /harness/completion (AgentOS handleHarnessWorkerCompletion). */
-export type HarnessCompletionRouteOutcome = "review_scheduled" | "review_already_scheduled" | "needs_attention" | "mirror_only" | "task_not_found" | "task_not_harness" | "skipped_terminal_task" | "closed" | "dispatched" | "dispatch_already_done" | "steer_restart_required" | "blocked" | "reviewer_no_parent" | "landing_no_parent";
-export interface HarnessCompletionResponseSummary {
-    routeOutcome: HarnessCompletionRouteOutcome | null;
-    /** True when the board task should have moved into review (or already was). */
-    taskAdvanced: boolean;
-    detail: string | null;
-}
-/**
- * Classify a 2xx harness completion response. HTTP success alone is not enough:
- * `needs_attention` (policy gate, dirty tree, missing artifact) still leaves the
- * linked AgentTask blocked while the worker sidecar would otherwise report done.
- */
-export declare function summarizeHarnessCompletionResponse(parsed: unknown): HarnessCompletionResponseSummary;
-export declare function completionPostSucceeded(summary: HarnessCompletionResponseSummary): boolean;

package/dist/config.d.ts

@@ -1,122 +0,0 @@
-export interface KynverUserConfig {
-    apiBaseUrl?: string;
-    agentOsSlug?: string;
-    agentOsId?: string;
-    defaultRepo?: string;
-    workerProvider?: string;
-    /** Default Claude model when dispatch does not infer or pass `--model`. */
-    defaultModel?: string;
-    harnessRoot?: string;
-    /**
-     * Operator attestation that the hosted Kynver deployment uses this scheduler provider
-     * (set on user runners after the hosted env cutover — scheduling is deployment-owned).
-     */
-    deploymentSchedulerProvider?: "qstash" | "kynver-cron" | "openclaw-cron";
-    /** Default harness run for `kynver daemon` / systemd user unit (set by `kynver cron install`). */
-    defaultDaemonRunId?: string;
-    /**
-     * Kynver-owned daemon restart owner (`keeper` = in-process keeper; `systemd` = user unit).
-     * Set during `kynver setup` / `kynver start --install-systemd`.
-     */
-    daemonSupervisionOwner?: "keeper" | "systemd";
-    /** Physical box pool for capacity snapshots (`forge` | `ghost`). Set via `kynver setup --box-kind`. */
-    boxKind?: "ghost" | "forge";
-    /** Stable runner id for lease attribution and cross-box dispatch guards. */
-    runnerId?: string;
-    /** Stable physical box id for capacity snapshots, e.g. `forge:travelcase`. */
-    boxId?: string;
-    /**
-     * Opt-in: delegated chat turns may use the Claude Code CLI's stored OAuth
-     * token on this machine (M5.4). Set via `kynver start --chat-oauth` or
-     * `kynver setup --chat-oauth`; the token itself never leaves the box.
-     */
-    chatUseClaudeOauth?: boolean;
-    /** Max concurrent workers on this machine. Omit to auto-size from RAM. */
-    maxConcurrentWorkers?: number;
-    /** Where maxConcurrentWorkers came from. */
-    maxConcurrentWorkersSource?: "setup-auto" | "setup-flag" | "operator";
-    /** @internal Advanced tuning — not required for setup. */
-    perWorkerMemBytes?: number;
-    /** @internal Advanced tuning — not required for setup. */
-    memReserveBytes?: number;
-    /** @internal Advanced tuning — not required for setup. */
-    memUtilization?: number;
-}
-export interface AgentOsIdValidationResult {
-    ok: boolean;
-    value?: string;
-    reason?: string;
-}
-export declare function validateAgentOsId(raw: unknown): AgentOsIdValidationResult;
-export declare function formatAgentOsIdValidationError(raw: unknown): string;
-export declare function loadUserConfig(): KynverUserConfig;
-export declare function saveUserConfig(config: KynverUserConfig): void;
-/** Persist path fields with `~` instead of absolute home directories. */
-export declare function normalizeConfigPaths(config: KynverUserConfig): KynverUserConfig;
-/** Values for setup output (never emit `/home/<user>/…`). */
-export declare function presentUserConfig(config: KynverUserConfig): KynverUserConfig;
-export declare function computeSetupAutoMaxWorkers(totalMemBytes: number): number;
-export declare function resolveSetupWorkerConfig(existing: KynverUserConfig, args: Record<string, string | boolean>, totalMemBytes?: number): Pick<KynverUserConfig, "maxConcurrentWorkers" | "maxConcurrentWorkersSource" | "boxKind">;
-export declare function loadApiKey(): string | undefined;
-export declare function saveApiKey(apiKey: string): void;
-export declare function loadRunnerToken(agentOsId?: string): string | undefined;
-export declare function saveRunnerToken(agentOsId: string, token: string): void;
-export declare function resolveBaseUrl(argsBaseUrl?: string): string;
-/** Non-exiting sibling of `resolveBaseUrl` for long-lived callers (the daemon). */
-export declare function tryResolveBaseUrl(argsBaseUrl?: string): string | undefined;
-export declare function resolveCallbackSecret(argsSecret?: string, agentOsId?: string): string;
-/**
- * Non-exiting sibling of `resolveCallbackSecretWithMint` for long-lived
- * callers (the supervised daemon): a missing/unmintable runner credential
- * must surface as a value, never `process.exit` — exiting inside the daemon
- * child turns the keeper into a silent crash loop ("service active, runtime
- * dead") and takes the chat claim loop down with it.
- */
-export declare function tryResolveCallbackSecretWithMint(argsSecret?: string, agentOsId?: string, opts?: {
-    baseUrl?: string;
-}): Promise<{
-    ok: true;
-    secret: string;
-} | {
-    ok: false;
-    reason: string;
-}>;
-export declare function resolveCallbackSecretWithMint(argsSecret?: string, agentOsId?: string, opts?: {
-    baseUrl?: string;
-}): Promise<string>;
-/**
- * Force-mint a fresh scoped runner token for `agentOsId`, bypassing any cached
- * or env token. Recovery path for a callback that 401s because the configured
- * token is revoked, expired, or scoped to a *different* workspace (the
- * self-linked repair case). Requires an API key + base URL to mint; returns
- * `null` when a fresh token cannot be obtained, so the caller degrades to a
- * structural blocker instead of papering the worker over as done.
- */
-export declare function refreshRunnerToken(agentOsId: string, opts?: {
-    baseUrl?: string;
-}): Promise<string | null>;
-export declare function refreshRunnerTokenForAuthFailure(rejectedSecret: string, agentOsId: string, opts?: {
-    baseUrl?: string;
-}): Promise<{
-    ok: true;
-    token: string;
-} | {
-    ok: false;
-    reason: string;
-}>;
-export declare function fetchRunnerCredential(agentOsId: string, opts?: {
-    baseUrl?: string;
-    apiKey?: string;
-}): Promise<string>;
-export declare function mintRunnerCredential(args: Record<string, string | boolean>): Promise<void>;
-/** List runner credentials from the server for a given agentOsId. */
-export declare function listRunnerCredentialsCli(args: Record<string, string | boolean>): Promise<void>;
-/** Revoke a runner credential by tokenId. */
-export declare function revokeRunnerCredentialCli(args: Record<string, string | boolean>): Promise<void>;
-/** Rotate a runner credential by tokenId (revoke old + mint new). */
-export declare function rotateRunnerCredentialCli(args: Record<string, string | boolean>): Promise<void>;
-/** Show the local runner credential status (no server call). */
-export declare function runnerCredentialStatusCli(args: Record<string, string | boolean>): void;
-export declare function parseArgs(argv: string[]): Record<string, string | boolean>;
-export declare function runSetup(args: Record<string, string | boolean>): Promise<void>;
-export declare function runLogin(args: Record<string, string | boolean>): Promise<void>;