@kynver-app/runtime 0.2.24 → 0.2.29

package/dist/harness-storage-snapshot.d.ts

@@ -1,26 +0,0 @@
-export interface HarnessStorageSnapshot {
-    harnessRoot: string;
-    worktreesDir: string;
-    /** Sum of per-run directory sizes. `null` when scan exceeded entry cap. */
-    worktreesBytes: number | null;
-    /** Top-level run directory count under `worktreesDir`. */
-    runCount: number;
-    /** Total worktree (worker) directories across all runs. */
-    workerCount: number;
-    /** Earliest run-directory mtime, ISO string. `null` when no runs present. */
-    oldestRunAt: string | null;
-    scannedAt: string;
-}
-interface ScanOptions {
-    harnessRoot?: string;
-    /** Cap per directorySizeBytes call. Default 50k entries — keeps the snapshot fast for monitor ticks. Set null/0 to return bytes=null without scanning. */
-    perRunEntryCap?: number | null;
-    now?: number;
-}
-/**
- * Read-only summary of harness worktree storage usage. Surfaced in cleanup
- * summaries and consumable by monitor/Command Center to flag disk pressure
- * before WSL runs out of space again.
- */
-export declare function harnessStorageSnapshot(opts?: ScanOptions): HarnessStorageSnapshot;
-export {};

package/dist/harness-verify-cli.d.ts

@@ -1 +0,0 @@
-export declare function runHarnessVerifyCli(args: Record<string, string | boolean>): void;

package/dist/harness-verify.d.ts

@@ -1,30 +0,0 @@
-import { type BoundedBuildExecResult } from "./bounded-build/index.js";
-/** Default expensive checks for harness / plan runtime verification. */
-export declare const DEFAULT_HARNESS_VERIFY_COMMANDS: readonly ["npm run typecheck", "npm run test"];
-export interface HarnessVerifyStep {
-    command: string;
-    result: BoundedBuildExecResult;
-}
-export interface HarnessVerifySummary {
-    passed: boolean;
-    steps: HarnessVerifyStep[];
-}
-/**
- * Run plan/harness verification commands through the cross-process heavy-verification
- * gate and memory-bounded subprocess execution. Parallel workers queue here instead
- * of launching simultaneous typecheck/build commands.
- */
-export declare function runHarnessVerifyCommands(cwd: string, commands?: readonly string[], opts?: {
-    waitForAdmissionMs?: number;
-    timeoutMs?: number;
-    /** Called synchronously before each command starts — safe for stderr progress logs. */
-    onBeforeCommand?: (cmd: string, index: number, total: number) => void;
-    /**
-     * Stop after the first failing command (plan §7.5): a failed typecheck
-     * already fails the verify — running the full test suite after it wastes
-     * minutes of box time per broken-typecheck landing. Default ON; pass
-     * false to force every command (e.g. a diagnostics lane that wants the
-     * complete failure picture).
-     */
-    failFast?: boolean;
-}): HarnessVerifySummary;

package/dist/harness-worker-active.d.ts

@@ -1,12 +0,0 @@
-import type { HarnessWorkerRecord } from "./status.js";
-/**
- * PID existence is not enough on long-running hosts: Linux can reuse an old
- * worker PID for an unrelated process, which makes stale worker.json records
- * look alive and can falsely saturate the global worker gate.
- */
-export declare function workerProcessMatchesRecord(worker: HarnessWorkerRecord): boolean;
-/**
- * Whether a worker still occupies a machine-wide harness capacity slot.
- * Ignores completion-acknowledged workers even when the recorded PID was reused.
- */
-export declare function isActiveHarnessWorker(worker: HarnessWorkerRecord): boolean;

package/dist/harness-worktree-build-guard.d.ts

@@ -1,12 +0,0 @@
-export declare function isPathUnderHarnessWorktree(cwd: string): boolean;
-export type HarnessWorktreeBuildGuardVerdict = {
-    ok: true;
-} | {
-    ok: false;
-    reason: string;
-};
-/**
- * Prevent root-owned generated caches: npm/build as uid 0 inside harness worktrees
- * creates node_modules/.next the daemon user cannot reclaim during cleanup.
- */
-export declare function assessHarnessWorktreeBuildGuard(cwd: string): HarnessWorktreeBuildGuardVerdict;

package/dist/heartbeat-final-result.d.ts

@@ -1,5 +0,0 @@
-/**
- * Prefer an explicit heartbeat `finalResult`, else structured JSON embedded in
- * `summary`, else the summary string (legacy contract).
- */
-export declare function terminalFinalResultFromHeartbeatRow(row: Record<string, unknown>): unknown;

package/dist/heartbeat.d.ts

@@ -1,27 +0,0 @@
-import type { RuntimeBoxResourceSnapshot, RuntimeBoxResourceSnapshotPrEvidence } from "./box-resource-snapshot.js";
-export interface ParsedHeartbeat {
-    heartbeatCount: number;
-    lastHeartbeatAt: string | null;
-    lastHeartbeatPhase: string | null;
-    lastHeartbeatSummary: string | null;
-    /** Structured finalResult from the terminal `phase: complete` heartbeat line. */
-    terminalFinalResult: unknown;
-    heartbeatBlocker: string | null;
-    timestampAnomalies: ParsedHeartbeatTimestampAnomaly[];
-    lastBoxResourceSnapshot: RuntimeBoxResourceSnapshot | null;
-    lastPrEvidence: RuntimeBoxResourceSnapshotPrEvidence[];
-}
-export interface ParsedHeartbeatTimestampAnomaly {
-    kind: "future_heartbeat_timestamp";
-    observedAt: string;
-    clampedTo: string;
-}
-/** Worker contract: append `phase: "complete"` when productively finished. */
-export declare function isTerminalHeartbeatPhase(phase: string | null | undefined): boolean;
-/**
- * When stdout has no stream-json `result` yet (common for Cursor workers mid-exit),
- * treat the worker's completion heartbeat as a synthetic final result so lifecycle
- * sync, completion replay, and resource gates advance.
- */
-export declare function terminalFinalResultFromHeartbeat(heartbeat: ParsedHeartbeat): unknown;
-export declare function parseHeartbeat(file: string): ParsedHeartbeat;

package/dist/heavy-verification/command-classify.d.ts

@@ -1,9 +0,0 @@
-export type HeavyCommandClass = "full_typecheck" | "full_build" | "vercel_verify" | "paid_compute" | "allowed";
-export interface HeavyCommandClassification {
-    heavy: boolean;
-    commandClass: HeavyCommandClass;
-    reason: string | null;
-}
-/** Pure classifier — unit-tested. */
-export declare function classifyHeavyShellCommand(command: string): HeavyCommandClassification;
-export declare const HEAVY_VERIFICATION_TOKEN_REQUIRED: "heavy_verification_token_required";

package/dist/heavy-verification/gate.d.ts

@@ -1,10 +0,0 @@
-import { assessHeavyVerificationGate, tryAcquireHeavyVerificationSlot, type HeavyVerificationGateVerdict } from "./slot.js";
-export declare function sleepMs(ms: number): void;
-/**
- * Poll until a heavy-verification slot is acquired or timeout elapses.
- * Serializes expensive typecheck/build across harness worker processes.
- */
-export declare function waitForHeavyVerificationSlot(command: string, timeoutMs: number, pollMs?: number, opts?: Parameters<typeof tryAcquireHeavyVerificationSlot>[1]): HeavyVerificationGateVerdict & {
-    slotId: string | null;
-};
-export { assessHeavyVerificationGate, type HeavyVerificationGateVerdict };

package/dist/heavy-verification/index.d.ts

@@ -1,5 +0,0 @@
-export { DEFAULT_HEAVY_VERIFICATION_MAX_CONCURRENT, DEFAULT_HEAVY_VERIFICATION_STALE_MS, assessHeavyVerificationGate, countActiveHeavyVerificationSlots, isHeavyVerificationGateSkipped, listActiveHeavyVerificationSlots, reclaimStaleHeavyVerificationSlots, releaseHeavyVerificationSlot, resolveHeavyVerificationMaxConcurrent, tryAcquireHeavyVerificationSlot, type HeavyVerificationGateVerdict, type HeavyVerificationSlotRecord, } from "./slot.js";
-export { waitForHeavyVerificationSlot } from "./gate.js";
-export { classifyHeavyShellCommand, HEAVY_VERIFICATION_TOKEN_REQUIRED, type HeavyCommandClassification, type HeavyCommandClass, } from "./command-classify.js";
-export { gateWorkerShellCommand, type GateWorkerShellCommandOpts, type WorkerCommandGateOutcome, type WorkerCommandGateResult, } from "./worker-command-gate.js";
-export { ensureHeavyVerificationDirs, heavyVerificationSlotsDir, resolveHeavyVerificationRoot, } from "./paths.js";

package/dist/heavy-verification/paths.d.ts

@@ -1,3 +0,0 @@
-export declare function resolveHeavyVerificationRoot(): string;
-export declare function heavyVerificationSlotsDir(): string;
-export declare function ensureHeavyVerificationDirs(): string;

package/dist/heavy-verification/slot.d.ts

@@ -1,49 +0,0 @@
-/** Reclaim slots held by dead PIDs or long-running orphans. */
-export declare const DEFAULT_HEAVY_VERIFICATION_STALE_MS: number;
-/** Default global cap — serialize typecheck/build across harness workers. */
-export declare const DEFAULT_HEAVY_VERIFICATION_MAX_CONCURRENT = 1;
-export interface HeavyVerificationSlotRecord {
-    slotId: string;
-    pid: number;
-    acquiredAt: string;
-    command: string;
-}
-export interface HeavyVerificationGateVerdict {
-    admitted: boolean;
-    slotId: string | null;
-    activeSlots: number;
-    maxSlots: number;
-    reason: string | null;
-}
-export declare function isHeavyVerificationGateSkipped(): boolean;
-export declare function resolveHeavyVerificationMaxConcurrent(): number;
-/** Remove dead/orphan slot files before admission attempts. */
-export declare function reclaimStaleHeavyVerificationSlots(opts?: {
-    slotsDir?: string;
-    staleMs?: number;
-}): number;
-export declare function listActiveHeavyVerificationSlots(opts?: {
-    slotsDir?: string;
-    staleMs?: number;
-}): HeavyVerificationSlotRecord[];
-export declare function countActiveHeavyVerificationSlots(opts?: {
-    slotsDir?: string;
-    staleMs?: number;
-}): number;
-/**
- * Try to acquire one heavy-verification slot using fixed index files (`slot-0.json`, …)
- * and exclusive `wx` create. Avoids count-then-UUID TOCTOU races under burst dispatch.
- */
-export declare function tryAcquireHeavyVerificationSlot(command: string, opts?: {
-    slotsDir?: string;
-    staleMs?: number;
-    maxSlots?: number;
-}): HeavyVerificationGateVerdict;
-export declare function releaseHeavyVerificationSlot(slotId: string | null | undefined, opts?: {
-    slotsDir?: string;
-}): void;
-export declare function assessHeavyVerificationGate(command: string, opts?: {
-    slotsDir?: string;
-    staleMs?: number;
-    maxSlots?: number;
-}): HeavyVerificationGateVerdict;

package/dist/heavy-verification/worker-command-gate.d.ts

@@ -1,23 +0,0 @@
-import { classifyHeavyShellCommand, HEAVY_VERIFICATION_TOKEN_REQUIRED } from "./command-classify.js";
-import { type HeavyVerificationGateVerdict } from "./slot.js";
-export { HEAVY_VERIFICATION_TOKEN_REQUIRED };
-export type WorkerCommandGateOutcome = typeof HEAVY_VERIFICATION_TOKEN_REQUIRED | "allowed" | "heavy_verification_skipped";
-export interface WorkerCommandGateResult {
-    allowed: boolean;
-    outcome: WorkerCommandGateOutcome;
-    commandClass: ReturnType<typeof classifyHeavyShellCommand>["commandClass"];
-    reason: string;
-    verificationGate: HeavyVerificationGateVerdict & {
-        slotId: string | null;
-    };
-}
-export interface GateWorkerShellCommandOpts {
-    /** Max ms to wait for a heavy-verification slot (0 = fail fast). */
-    waitMs?: number;
-    pollMs?: number;
-}
-/**
- * Gate a shell command before spawn. Heavy commands require an admitted slot;
- * denied attempts return a typed refusal (never a silent hang).
- */
-export declare function gateWorkerShellCommand(command: string, opts?: GateWorkerShellCommandOpts): WorkerCommandGateResult;

package/dist/index.d.ts

@@ -1,88 +0,0 @@
-export { PACKAGE_VERSION } from "./package-version.js";
-export { MEMORY_COST_PACKAGE_MIN_VERSIONS, MEMORY_COST_MANAGED_PACKAGES, MemoryCostPackageVersionGuardError, assertMemoryCostPackageVersionGuard, compareSemver, evaluateMemoryCostPackageVersionGuard, formatMemoryCostPackageGuardError, probeRepoPackageVersions, semverAtLeast, type MemoryCostManagedPackageName, type MemoryCostPackageGuardResult, type MemoryCostPackageGuardRow, } from "./memory-cost-package-version-guard.js";
-export { buildMemoryCostPackageGuardInput, enforceMemoryCostPackageGuardAtStartup, evaluateMemoryCostPackageGuardAtStartup, shouldEnforceMemoryCostPackageGuardCli, } from "./memory-cost-package-version-guard-enforce.js";
-export { buildDispatchTaskText, dispatchRun, DEFAULT_DISPATCH_LEASE_MS } from "./dispatch.js";
-export { observeRunnerDiskGate } from "./disk-gate.js";
-export { isWslHost, observeWslHostDisk, summarizeWslRecoverySteps, DEFAULT_WSL_HOST_MOUNT, DEFAULT_WSL_HOST_WARN_FREE_BYTES, DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES, type WslHostDiskShape, } from "./wsl-host.js";
-export { observeWslCrashDumps, parseWslCrashDumpFilename, readKernelCorePattern, readWslConfigCrashDumpSettings, resolveWslCrashDumpDir, resolveWslWindowsUsername, summarizeWslCrashDumpRecoverySteps, DEFAULT_WSL_CRASH_DUMP_WARN_BYTES, DEFAULT_WSL_CRASH_DUMP_CRITICAL_BYTES, type WslCrashDumpFile, type WslCrashDumpObservation, } from "./wsl-crash-dumps.js";
-export { cleanupWslCrashDumps, shouldAutoCleanupWslCrashDumps, type WslCrashDumpCleanupResult, } from "./wsl-crash-dumps-cleanup.js";
-export { postJson, type DispatchNextDiskGateShape, type DispatchNextWslHostShape, } from "./callbacks.js";
-export { parseClaudeStream, parseHarnessStream, summarizeEvent, summarizeShellToolCallEvent, } from "./stream.js";
-export { classifyNpmAuditOutcome, classifyShellCommandOutcome, summarizeNpmAuditReport, type NpmAuditSummary, type ShellCommandOutcome, type ShellCommandOutcomeKind, } from "./shell-command-outcome.js";
-export { classifyRepoSearchMeta, diagnoseRepoSearchFailure, extractSearchMeta, extractSearchMetaFromToolLine, formatRepoSearchGuidance, isRgExcludeScopeTarget, isSingleFileSearchTarget, metaToNormalizedRgCommand, normalizeRepoSearchCommand, normalizeRgArgv, shouldTreatRgNoMatchAsSuccess, unwrapShellWrapperCommand, type RepoSearchContext, type RepoSearchKind, } from "./repo-search.js";
-export { parseHeartbeat, isTerminalHeartbeatPhase, terminalFinalResultFromHeartbeat, } from "./heartbeat.js";
-export { buildBoxResourceSnapshotFromGate, formatHeartbeatLine, type RuntimeBoxResourceSnapshot, type RuntimeBoxResourceSnapshotPrEvidence, type HeartbeatLineInput, } from "./box-resource-snapshot.js";
-export { resolveBoxKindFromEnv, defaultBoxId } from "./box-resource-snapshot-shared.js";
-export { computeWorkerStatus, computeAttention, isFinishedWorkerStatus, isLandingBlockedWorkerStatus, deriveRunStatus, type RawHarnessWorkerStatus, type HarnessWorkerRecord, type WorkerAttention, } from "./status.js";
-export { assessWorkerLanding, type WorkerLandingVerdict } from "./landing-gate.js";
-export { isEngagementRequiredSkip } from "./fortress-engagement-gate.js";
-export { assessWorkerLandingContract, landingContractAttentionReason, type WorkerLandingContract, type WorkerLandingContractVerdict, type TargetPrReconciliation, } from "./landing-contract-gate.js";
-export { assessExitedWorkerSalvage, type ExitedSalvageAssessment, type ExitedSalvageKind, } from "./exited-salvage.js";
-export { persistExitedWorkerHandoffCapture, resolveExitedWorkerFinalResult, type ExitedHandoffCapture, type ExitedHandoffCaptureSource, } from "./exited-worker-handoff-capture.js";
-export { buildPrompt, buildPromptWithReceipt, RUNTIME_PROMPT_ENFORCEMENT, type BuildPromptInput, } from "./prompt.js";
-export { RUNTIME_CONTEXT_BUDGET_RECEIPT_SCHEMA_VERSION, RUNTIME_CONTEXT_BUDGET_RECEIPT_V2_SCHEMA_VERSION, buildContextBudgetReceiptV2, estimateTokensFromChars, finalizeReceiptTotals, isRuntimeContextBudgetReceiptV2, sectionReceiptFromMarkdown, upgradeReceiptToV2, type BuildContextBudgetReceiptV2Input, type ContextBudgetReceiptSurface, type ContextEnvelopeMode, type RuntimeContextActiveStateLookup, type RuntimeContextActiveStateLookupKind, type RuntimeContextActiveStateLookupStatus, type RuntimeContextBudgetReceipt, type RuntimeContextBudgetReceiptSchemaVersion, type RuntimeContextBudgetReceiptV2, type RuntimeContextRehydrationKind, type RuntimeContextRehydrationRoute, type RuntimeContextSection, type RuntimeContextSectionReceipt, type UsefulContextCoverage, } from "./context-budget-receipt.js";
-export { MEMORY_LANE_PREVIEW_CHARS, buildChatMemoryShadowPreview, buildLegacyChatMemorySection, chatMemoriesToPreviewItems, formatContextPreviewMemoryBlock, type ContextPreviewBlockInput, type ContextPreviewMemoryItem, } from "./context-preview/chat-memory-preview.js";
-export { canonicalJsonStringify, computeInstructionBundleVersion, deriveInstructionBundleKeyId, parseRawEd25519Key, isSignedInstructionBundleShape, PINNED_INSTRUCTION_BUNDLE_PUBLIC_KEYS, resolveInstructionBundlePublicKey, verifyInstructionBundleSignatureWithKey, verifySignedInstructionBundle, EMBEDDED_INSTRUCTION_BUNDLE, EMBEDDED_INSTRUCTION_BUNDLE_VERSION, getActiveInstructionBundle, getActiveInstructionBundleSource, getActiveInstructionBundleVersion, setActiveInstructionBundle, resolveInstructionText, resolvePolicyThreshold, resolveBundlePersona, ensureInstructionBundle, instructionBundleCachePath, loadInstructionBundleCache, saveInstructionBundleCache, INSTRUCTION_BUNDLE_REFRESH_TTL_MS, type InstructionBundle, type InstructionBundleContent, type InstructionBundlePersona, type SignedInstructionBundle, type InstructionBundleSource, type InstructionBundleVerifyResult, type EnsureInstructionBundleOptions, type EnsureInstructionBundleResult, } from "./instruction-bundle/index.js";
-export { WORKER_PERSONA_CATALOG, getWorkerPersonaCatalogEntry, getPersonaDispatchLane, getPersonaDefaultRoleLane, isKnownWorkerPersonaSlug, workerPersonaReviewSlugs, workerPersonaLandingSlugs, type WorkerPersonaCatalogEntry, type WorkerPersonaCatalogSlug, type WorkerPersonaDispatchLane, type WorkerPersonaDefaultRoleLane, } from "./worker-persona-catalog.js";
-export { assessPrHandoffRequirement, ensurePrReadyHandoff, extractPrUrlFromText, } from "./pr-handoff/index.js";
-export { normalizeCursorModelAlias, preflightClaudeModel, preflightCodexModel, preflightCursorModel, preflightOpenAiCompatibleModel, } from "./providers/model-preflight.js";
-export { CODEX_DEFAULT_MODEL, codexProvider, buildCodexExecArgv } from "./providers/codex.js";
-export { OPENAI_COMPATIBLE_PROVIDER, OPENAI_COMPATIBLE_SYSTEM_PROMPT, OpenAiCompatibleConfigError, buildOpenAiCompatibleChatRequest, buildOpenAiCompatibleRunnerConfig, openAiCompatibleProvider, resolveOpenAiCompatibleDefaultModel, resolveOpenAiCompatibleEndpoint, type OpenAiCompatibleChatRequest, type OpenAiCompatibleEndpoint, type OpenAiCompatibleRunnerConfig, } from "./providers/openai-compatible.js";
-export { extractOpenAiCompatibleCompletion, type OpenAiCompatibleCompletion, type OpenAiCompatibleUsage, } from "./providers/openai-compatible-response.js";
-export { resolveWorkerUsagePayload, type ResolveWorkerUsageInput, type WorkerUsagePayload, } from "./worker-usage.js";
-export { HERMES_OPENAI_CODEX_DEFAULT_MODEL, hermesCodexProvider, buildHermesOpenAiCodexChatArgv, } from "./providers/hermes-codex.js";
-export { classifyOpenAiCodexError, formatCronJobDeliveryFailure, formatOpenAiCodexFailureNotice, redactProviderErrorText, resolveOpenAiCodexRetryBudget, TRANSIENT_OPENAI_CODEX_ERROR_CLASSES, OPENAI_CODEX_PROVIDER, type ClassifiedOpenAiCodexError, type CodexFailureNoticeInput, type OpenAiCodexErrorClass, } from "./providers/openai-codex-resilience.js";
-export * from "./cron/hermes-provider-notice.js";
-export { buildOrchestrationProviderInventory, classifyOrchestrationRisk, compareProviderCandidates, getOrchestrationProviderCapability, listOrchestrationProviderCapabilities, probeClaudeOAuthBinding, probeCodexOAuthBinding, probeCursorOAuthBinding, probeHermesCliAdapter, probeHermesOpenAiCodexBinding, probeOrchestrationProviderBinding, providerCapableForRisk, resolveCodexOrchestrationAdapter, resolveOrchestrationRouting, selectCheapestCapableProvider, sanitizeOrchestrationAudit, orchestrationAuditForWorkerJson, getAdapterContextContract, listAdapterContextContracts, type AdapterContextCapability, type AdapterContextContract, type AdapterContextContractId, type CodexOrchestrationAdapterStatus, type CodexOrchestrationPath, type HermesCliAdapterStatus, type HermesOpenAiCodexBindingStatus, type OrchestrationAuthSource, type OrchestrationCloudApiCredits, type OrchestrationCostTier, type OrchestrationProviderBindingStatus, type OrchestrationProviderCapability, type OrchestrationProviderId, type OrchestrationProviderInventory, type OrchestrationRiskClass, type OrchestrationRoutingAudit, type OrchestrationRoutingDecision, } from "./orchestration-providers/index.js";
-export { ORCHESTRATION_POLICY_MODES, ORCHESTRATION_ACTION_KINDS, ORCHESTRATION_POLICY_DECISIONS, resolveOrchestrationPolicyMode, isOrchestrationEnforceTasksEnabled, buildForegroundHarnessIdempotencyKey, evaluateOrchestrationPolicy, type OrchestrationPolicyMode, type OrchestrationActionKind, type OrchestrationPolicyDecision, type OrchestrationPolicyEvaluateInput, type OrchestrationPolicyEvaluateResult, } from "./orchestration-enforcement/index.js";
-export { DEFAULT_WORKER_PROVIDER, enforceCursorWorkerProvider, isClaudeFamilyProvider, normalizeWorkerProviderName, preferCursorExecutor, resolveConfiguredWorkerProvider, taskAllowsClaudeWorker, taskExpressesWorkerProviderPreference, type EnforceCursorWorkerProviderInput, } from "./worker-provider-policy.js";
-export { parseExecutorRefRoutingIntent, executorRefRequestsNonCursorWorker, type ExecutorRefRoutingIntent, } from "./executor-ref-routing.js";
-export { assessDispatchModelGuard, type DispatchModelGuardInput, type DispatchModelGuardResult, } from "./dispatch-model-guard.js";
-export { GLOBAL_DEFAULT_MODEL, CURSOR_DEFAULT_MODEL, inferModelRoutingFromTask, resolveGlobalDefaultModel, resolveModelFallback, resolveWorkerLaunch, type ModelRoutingDecision, } from "./model-routing.js";
-export { redactHarness } from "./redact.js";
-export { scrubWorkerEnv, scrubClaudeEnv, auditWorkerEnv, listForbiddenWorkerEnvKeys, listOperatorAllowedWorkerEnvKeys, isForbiddenWorkerEnvKey, FORBIDDEN_WORKER_ENV_KEYS, type WorkerEnvAudit, } from "./worker-env.js";
-export { KYNVER_NO_PROD_DB_CREDENTIALS_ENV, REVIEW_WORKER_EXTRA_FORBIDDEN_ENV_KEYS, ProductionDatabaseCredentialBlockedError, assertProductionDatabaseResolutionAllowed, auditReviewWorkerCredentialScope, buildWorkerSpawnEnv, isNoProdCredentialReviewEnvironment, type BuildWorkerSpawnEnvOptions, type ReviewWorkerCredentialScopeAudit, } from "./security-review-environment.js";
-export { isHarnessExpertReviewWorker } from "./harness-expert-review.js";
-export { discoverProductionDbEnvFilePaths, expandHomePath } from "./db-credential-env-paths.js";
-export { applyProductionDatabaseToProcess, readProductionDbKeysFromEnvFile, resolveProductionDatabaseUrl, type DbCredentialResolution, type DbCredentialFailure, type DbCredentialSource, type ResolveProductionDatabaseResult, type ResolveProductionDatabaseOptions, } from "./db-credential-resolver.js";
-export { safeDatabaseUrlHint } from "./db-url-hint.js";
-export { validateRunId, validateWorkerName, validateRepo, validateOwnedPaths, validateTailLines, resolveWorkerTargetArgs, resolveRunTargetArg, } from "./validate.js";
-export { spawnWorkerProcess, startWorker } from "./supervisor.js";
-export { createRun, listRuns } from "./worktree.js";
-export { buildRunListRows, listRunsCli, type RunListFinalizeBlockedReason, type RunListRow, type RunListWorkerEvidence, } from "./run-list.js";
-export { resolveHarnessRunByName, resolveHarnessRunCli } from "./run-resolve.js";
-export { isActiveHarnessWorker } from "./harness-worker-active.js";
-export { sweepRun } from "./sweep.js";
-export { completeWorker, runStatus, workerStatus, tailWorker, stopWorker } from "./worker-ops.js";
-export { autoCompleteWorker, autoCompleteWorkerCli, spawnCompletionSidecar, type AutoCompleteArgs, type AutoCompleteOutcome, type SpawnSidecarOptions, type SpawnedSidecar, } from "./auto-complete.js";
-export { loadUserConfig, saveUserConfig, resolveBaseUrl, tryResolveBaseUrl, resolveCallbackSecret, resolveCallbackSecretWithMint, tryResolveCallbackSecretWithMint, parseArgs, } from "./config.js";
-export { discoverDefaultRepo, discoverDefaultRepoCandidates, discoverDefaultRepoForPersistence, isHarnessWorktreeRepo, isKynverMonorepoRoot, gitRepoRoot, type DiscoveredDefaultRepo, type DefaultRepoDiscoverySource, } from "./default-repo-discovery.js";
-export { resolveDefaultRepo, resolveDefaultRepoForPersistence, persistDefaultRepo, remediateDefaultRepo, formatResolvedDefaultRepo, type ResolvedDefaultRepo, type DefaultRepoSource, } from "./default-repo.js";
-export { getHarnessPaths, harnessRunsDir, harnessWorktreesDir, normalizeHarnessRoot, resolveHarnessRoot, } from "./paths.js";
-export { harnessStorageSnapshot, type HarnessStorageSnapshot, } from "./harness-storage-snapshot.js";
-export { runHarnessCleanup, runPipelineHarnessCleanup, isPipelineCleanupEnabled, } from "./cleanup.js";
-export type { HarnessCleanupSummary, HarnessCleanupOptions, HarnessStorageSnapshotShape, WorktreeRemovalGuardHook, WorktreeRemovalGuardInput, CleanupSkipReason, } from "./cleanup-types.js";
-export { DEFAULT_MAX_ACTIONS_PER_SWEEP, DEFAULT_NODE_MODULES_AGE_MS, DEFAULT_RUN_DIRECTORIES_AGE_MS, DEFAULT_TERMINAL_WORKTREES_AGE_MS, DEFAULT_WORKTREES_AGE_MS, } from "./cleanup-types.js";
-export { assessOrphanWorktreeSafety } from "./cleanup-orphan-safety.js";
-export { isGeneratedHarnessPath, HARNESS_BUILD_CACHE_RELATIVE_PATHS } from "./cleanup-build-cache-paths.js";
-export { usage, main } from "./cli.js";
-export { reconcileRunsCli, reconcileStaleWorkers, type ReconcileStaleWorkersResult, type StaleWorkerReconcileOutcome } from "./stale-reconcile.js";
-export { repairMissingRunMetadata, archiveTerminalWorkerMetadata, collectFilesystemLiveRunKeys, isHarnessRunMetadataPath, runDirHasActiveRetentionSignals, workerDirHasActiveRetentionSignals, RUN_METADATA_ACTIVE_SIGNAL_MS, TERMINAL_WORKER_ARCHIVE_AGE_MS, type TerminalWorkerArchiveOutcome, type TerminalWorkerArchiveResult, type RunMetadataRetentionOutcome, type RunMetadataRetentionResult, } from "./run-metadata-retention.js";
-export { reconcileWorkerMetadata, reconcileWorkerMetadataCli, type WorkerMetadataReconcileOutcome, type WorkerMetadataReconcileResult, } from "./worker-metadata-reconcile.js";
-export { reconcileLocalOnlyMergedPrAttention, type LocalPrAttentionReconcileOutcome, type LocalPrAttentionReconcileResult, } from "./local-pr-attention-reconcile.js";
-export { canonicalWorkerDir, hasNestedRunsSegment, repairNestedRunsPath, resolveWorkerJsonPath, } from "./worker-metadata-paths.js";
-export { runDaemon } from "./daemon.js";
-export { runHarnessVerifyCommands, DEFAULT_HARNESS_VERIFY_COMMANDS, type HarnessVerifySummary, type HarnessVerifyStep, } from "./harness-verify.js";
-export { runBoundedBuildCheck, assessBuildAdmission, mergeNodeOptionsForBuildCheck, buildSystemdRunArgv, isSystemdRunAvailable, readMemAvailableBytes, type BoundedBuildExecResult, type BuildAdmissionVerdict, } from "./bounded-build/index.js";
-export { assessHeavyVerificationGate, countActiveHeavyVerificationSlots, isHeavyVerificationGateSkipped, listActiveHeavyVerificationSlots, reclaimStaleHeavyVerificationSlots, releaseHeavyVerificationSlot, resolveHeavyVerificationMaxConcurrent, tryAcquireHeavyVerificationSlot, waitForHeavyVerificationSlot, DEFAULT_HEAVY_VERIFICATION_MAX_CONCURRENT, classifyHeavyShellCommand, gateWorkerShellCommand, HEAVY_VERIFICATION_TOKEN_REQUIRED, type HeavyCommandClass, type HeavyCommandClassification, type HeavyVerificationGateVerdict, type HeavyVerificationSlotRecord, type WorkerCommandGateOutcome, type WorkerCommandGateResult, } from "./heavy-verification/index.js";
-export { assessAutoCompleteEligibility, classifyWorkerHealth, getMonitorStatus, listMonitors, runMonitorTick, spawnMonitorSidecar, type AutoCompleteAssessment, type MonitorTickResult, type TaskLeaseSnapshot, type WorkerHealthClass, type WorkerMonitorView, } from "./monitor/index.js";
-export { formatHarnessToolReadable, formatMonitorTickNotice, formatAutoCompleteOutcomeNotice, formatWorkerStatusNotice, formatWorkerCompleteNotice, joinHarnessNotice, type HarnessReadableNotice, type HarnessToolFormatContext, } from "./harness-notice/index.js";
-export { persistPlan, drainPlanOutbox, listOutboxItems, writeOutboxItem, formatPlanOutboxHandoffBlock, extractPlanOutboxFromTask, hashPlanBody, type PersistPlanInput, type PersistPlanResult, type PlanPersistUserStatus, } from "./plan-persist/index.js";
-export { classifyVercelUrl, collectVercelEvidence, evidenceFromGitHubVercelStatus, isDashboardVercelUrl, isInspectableVercelTarget, isVercelStatusContext, pickVercelStatusContext, resolveVercelInspectTarget, type CollectVercelEvidenceInput, type GitHubCommitStatusRow, type VercelEvidenceResult, type VercelEvidenceStatus, } from "./vercel/index.js";
-export { validateJobEnvelope, type LocalCodexJobEnvelope, type LocalCodexJobToolPolicy, type JobEnvelopeValidationError, type JobEnvelopeValidationResult, } from "./byoc/job-envelope.js";
-export { verifyLocalCodexGoldenPath, formatGoldenPathFailureNotice, type GoldenPathCheckCode, type GoldenPathAuditEvidence, type GoldenPathOptions, type GoldenPathResult, } from "./byoc/m6-golden-path.js";
-export { AGENT_RUNTIME_ENVELOPE_SCHEMA_VERSION, AGENT_RUNTIME_ENVELOPE_SCHEMA_VERSION_V2, AGENT_RUNTIME_ENVELOPE_SCHEMA_VERSIONS, isAgentRuntimeEnvelopeSchemaVersion, resolveRuntimeEnvelopeWriterConfig, runtimeEnvelopeV2Enabled, type AgentRuntimeEnvelopeSchemaVersion, type RuntimeEnvelopeFlagSource, type RuntimeEnvelopeWriterConfig, } from "./runtime-memory-envelope.js";
-export { evaluateNodeRuntimePolicy, KYNVER_NODE_PATCH_FLOOR, PUBLISHED_NODE_RANGE, PRIVATE_ROOT_NODE_RANGE, type NodeRuntimePolicyStatus, type NodeRuntimePolicyVerdict, } from "./node-runtime-policy.js";
-export { buildRuntimeIdentity, type RuntimeIdentityV1 } from "./runtime-identity.js";
-export { buildNodeRuntimeDoctorReport, type NodeRuntimeDoctorReport } from "./doctor/node-runtime.js";
-export { readJson, writeJson } from "./util.js";

package/dist/installed-package-versions.d.ts

@@ -1,8 +0,0 @@
-export type InstalledPackageVersionMap = Record<string, {
-    version: string;
-    observedAt: string;
-    path: string;
-}>;
-/** Candidate install paths for one managed package across OpenClaw + global npm roots. */
-export declare function installedPackageJsonCandidates(packageName: string): string[];
-export declare function collectInstalledPackageVersions(observedAt?: string): Promise<InstalledPackageVersionMap>;

package/dist/instruction-bundle/cache.d.ts

@@ -1,6 +0,0 @@
-import { type SignedInstructionBundle } from "./types.js";
-export declare function instructionBundleCachePath(agentOsId: string): string;
-/** Best-effort atomic write (temp + rename). Never throws. */
-export declare function saveInstructionBundleCache(agentOsId: string, signed: SignedInstructionBundle): void;
-/** Load the cached signed payload. Caller MUST verify the signature before use. */
-export declare function loadInstructionBundleCache(agentOsId: string): SignedInstructionBundle | null;

package/dist/instruction-bundle/client.d.ts

@@ -1,25 +0,0 @@
-export declare const INSTRUCTION_BUNDLE_REFRESH_TTL_MS: number;
-export declare function __resetInstructionBundleClientForTest(): void;
-export interface EnsureInstructionBundleOptions {
-    agentOsId: string;
-    /** Kynver API base URL (e.g. from `resolveBaseUrl`). No fetch when absent. */
-    baseUrl?: string | null;
-    /** Runner credential / callback secret for the by-id route. */
-    secret?: string | null;
-    /** Bypass the TTL gate (startup / tests). */
-    force?: boolean;
-    fetchImpl?: typeof fetch;
-    nowMs?: number;
-}
-export interface EnsureInstructionBundleResult {
-    source: "server" | "disk" | "embedded" | "primed";
-    version: string;
-    /** True when this call changed the active bundle. */
-    updated: boolean;
-}
-/**
- * Ensure the active instruction bundle is fresh. TTL-gated (15 min) so the
- * daemon can call it every tick; the first call performs the startup fetch.
- * Never throws.
- */
-export declare function ensureInstructionBundle(opts: EnsureInstructionBundleOptions): Promise<EnsureInstructionBundleResult>;

package/dist/instruction-bundle/contract.d.ts

@@ -1,4 +0,0 @@
-export * from "./types.js";
-export { PINNED_INSTRUCTION_BUNDLE_PUBLIC_KEYS, resolveInstructionBundlePublicKey, } from "./keys.js";
-export { verifyInstructionBundleSignatureWithKey, verifySignedInstructionBundle, type InstructionBundleVerifyResult, } from "./verify.js";
-export { EMBEDDED_INSTRUCTION_BUNDLE, EMBEDDED_INSTRUCTION_BUNDLE_VERSION, } from "./embedded-bundle.js";

package/dist/instruction-bundle/embedded-bundle.d.ts

@@ -1,3 +0,0 @@
-import type { InstructionBundle } from "./types.js";
-export declare const EMBEDDED_INSTRUCTION_BUNDLE_VERSION = "embedded-1";
-export declare const EMBEDDED_INSTRUCTION_BUNDLE: InstructionBundle;

package/dist/instruction-bundle/index.d.ts

@@ -1,7 +0,0 @@
-export * from "./types.js";
-export * from "./keys.js";
-export * from "./verify.js";
-export * from "./embedded-bundle.js";
-export * from "./state.js";
-export * from "./cache.js";
-export * from "./client.js";

package/dist/instruction-bundle/keys.d.ts

@@ -1,14 +0,0 @@
-/**
- * keyId → raw Ed25519 public key (hex). `ib-3bab6314f0ba` is the committed
- * DEV fallback pair the server uses when `KYNVER_INSTRUCTION_BUNDLE_KEY` is
- * unset — fine for dev/first-boot, NOT a production trust root (its private
- * half is committed server-side). Production deployments set a real private
- * key on the server and `KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY` on daemon
- * hosts until the prod public key is pinned here in a republish.
- */
-export declare const PINNED_INSTRUCTION_BUNDLE_PUBLIC_KEYS: Readonly<Record<string, string>>;
-/**
- * Resolve the raw public key for a `publicKeyId`. The env override wins (key
- * rotation without a package republish); otherwise the pinned set by id.
- */
-export declare function resolveInstructionBundlePublicKey(publicKeyId: string, env?: Record<string, string | undefined>): Uint8Array | null;

package/dist/instruction-bundle/state.d.ts

@@ -1,24 +0,0 @@
-import type { InstructionBundle, InstructionBundlePersona } from "./types.js";
-export type InstructionBundleSource = "embedded" | "disk" | "server" | "primed";
-export declare function getActiveInstructionBundle(): InstructionBundle;
-export declare function getActiveInstructionBundleVersion(): string;
-export declare function getActiveInstructionBundleSource(): InstructionBundleSource;
-/**
- * Install a bundle as the active one. The fetch client calls this ONLY after
- * signature verification; `primed` is for in-process callers that already
- * hold canonical content (e.g. the Kynver server seeding its own runtime
- * imports) and for tests.
- */
-export declare function setActiveInstructionBundle(bundle: InstructionBundle, source: InstructionBundleSource): void;
-/** Reset to the embedded fallback (tests). */
-export declare function __resetActiveInstructionBundleForTest(): void;
-/**
- * Resolve a keyed instruction literal: active bundle first, then the embedded
- * fallback for that key, then empty string (never throws — a missing key must
- * never take a worker down).
- */
-export declare function resolveInstructionText(key: string): string;
-/** Resolve a numeric policy threshold: active bundle → embedded → fallback. */
-export declare function resolvePolicyThreshold(key: string, fallback: number): number;
-/** Persona entry from the active bundle (null when the slug is not present). */
-export declare function resolveBundlePersona(slug: string | null | undefined): InstructionBundlePersona | null;

package/dist/instruction-bundle/types.d.ts

@@ -1,42 +0,0 @@
-export type InstructionBundleDispatchLane = "implementation" | "review" | "landing";
-export type InstructionBundleRoleLane = "plan_author" | "implementer" | "report_reviewer" | "deep_reviewer" | "runtime_verifier" | "system";
-export interface InstructionBundlePersona {
-    slug: string;
-    displayName: string;
-    description: string;
-    dispatchLane: InstructionBundleDispatchLane | null;
-    defaultRoleLane: InstructionBundleRoleLane;
-}
-/** Content payload — everything the version hash covers. */
-export interface InstructionBundleContent {
-    personas: InstructionBundlePersona[];
-    /** Keyed instruction literals (e.g. `worker.prompt.core_rules`). */
-    instructions: Record<string, string>;
-    /** Keyed numeric policy thresholds (e.g. `harness.maxTaskAttempts`). */
-    policyThresholds: Record<string, number>;
-}
-export interface InstructionBundle extends InstructionBundleContent {
-    /** Content hash (`ib1-<sha256 prefix>`) — stable per content, used as ETag. */
-    version: string;
-    generatedAt: string;
-}
-export interface SignedInstructionBundle {
-    bundle: InstructionBundle;
-    /** base64url Ed25519 signature over `canonicalJsonStringify(bundle)`. */
-    signature: string;
-    /** Identifies the signing key (`ib-<sha256(publicKey) prefix>`). */
-    publicKeyId: string;
-}
-/**
- * Deterministic JSON: recursively sorted object keys so signer and verifier
- * agree on the signed bytes regardless of construction/parse order.
- */
-export declare function canonicalJsonStringify(value: unknown): string;
-/** Stable content-hash version: `ib1-` + first 16 hex of sha256(canonical content). */
-export declare function computeInstructionBundleVersion(content: InstructionBundleContent): string;
-/** Derive the key id used as `publicKeyId` from a raw 32-byte Ed25519 public key. */
-export declare function deriveInstructionBundleKeyId(rawPublicKey: Uint8Array): string;
-/** Parse a raw 32-byte key from hex (64 chars) or base64. Returns null when malformed. */
-export declare function parseRawEd25519Key(raw: string | null | undefined): Uint8Array | null;
-/** Structural validation of a parsed wire payload. */
-export declare function isSignedInstructionBundleShape(value: unknown): value is SignedInstructionBundle;

package/dist/instruction-bundle/verify.d.ts

@@ -1,15 +0,0 @@
-import { type InstructionBundle } from "./types.js";
-export type InstructionBundleVerifyResult = {
-    ok: true;
-    bundle: InstructionBundle;
-} | {
-    ok: false;
-    reason: string;
-};
-/** Verify a signed bundle against an explicit raw 32-byte public key. */
-export declare function verifyInstructionBundleSignatureWithKey(signed: unknown, rawPublicKey: Uint8Array): InstructionBundleVerifyResult;
-/**
- * Verify a signed bundle resolving the key from the env override / pinned set.
- * This is the daemon's trust gate — a bundle that fails here is never used.
- */
-export declare function verifySignedInstructionBundle(signed: unknown, env?: Record<string, string | undefined>): InstructionBundleVerifyResult;

package/dist/landing/cli-auth.d.ts

@@ -1,11 +0,0 @@
-export interface EnsureGitHubCliAuthResult {
-    source: "env" | "gh-cli" | "missing";
-    configured: boolean;
-    reason: string;
-}
-/**
- * Intentional duplicate of `src/modules/agent-os/ready-pr-landing/ready-pr-landing.cli-auth.ts`.
- * The runtime package cannot import `@/src` server modules (standalone esbuild bundle), so gh
- * token resolution is mirrored here. Keep both copies in sync when auth probe logic changes.
- */
-export declare function ensureGitHubTokenFromCliAuth(): EnsureGitHubCliAuthResult;

package/dist/landing/land-pr-check-classify.d.ts

@@ -1,17 +0,0 @@
-export declare function checkName(check: Record<string, unknown>): string;
-/** Collapse rollup to the latest run per check name so stale failures do not block landing. */
-export declare function collapseCheckRollupByName(statusCheckRollup: unknown[] | undefined): Record<string, unknown>[];
-export declare function isGitHubActionsCheck(check: Record<string, unknown>): boolean;
-export declare function classifyChecks(statusCheckRollup: unknown[] | undefined): {
-    pending: string[];
-    failed: string[];
-    ignoredActions: string[];
-};
-/**
- * LEGACY (Vercel decommissioned 2026-08): no check named `vercel*` appears on
- * current PRs, so this always returns false post-cutover. Retained so landing
- * evidence for pre-cutover PRs still classifies; callers treat it as one
- * optional evidence source among several.
- */
-export declare function vercelCheckSuccess(statusCheckRollup: unknown[] | undefined): boolean;
-export declare function mergeStateReadinessError(mergeStateStatus: string, checks: ReturnType<typeof classifyChecks>): string | null;

package/dist/landing/land-pr-completion-post.d.ts

@@ -1,12 +0,0 @@
-import type { LandPrCompletionReport } from "./land-pr.js";
-export declare function postLandPrHarnessCompletion(input: {
-    baseUrl: string;
-    secret?: string;
-    agentOsId: string;
-    runId: string;
-    task: Record<string, unknown>;
-    report: LandPrCompletionReport;
-}): Promise<{
-    ok: boolean;
-    status: number;
-}>;

package/dist/landing/land-pr.d.ts

@@ -1,28 +0,0 @@
-import type { PrHandoffExec } from "../pr-handoff/pr-handoff-gh.js";
-export type LandPrOutcome = "merged" | "blocked" | "skipped";
-export interface LandPrCompletionReport {
-    prUrl: string;
-    outcome: LandPrOutcome;
-    mergeCommit?: string | null;
-    reason: string;
-}
-export interface ExecuteLandPrMergeInput {
-    prUrl: string;
-    repo?: string | null;
-    cwd?: string;
-    dryRun?: boolean;
-    skipNotReady?: boolean;
-    exec?: PrHandoffExec;
-}
-/** Parse `owner/repo` from a GitHub PR URL, e.g. https://github.com/acme/app/pull/42 -> "acme/app". Returns null on non-match. */
-export declare function repoFromPrUrl(prUrl: string): string | null;
-/** Pure predicate form of the runtime verification-evidence gate (for tests). */
-export declare function runtimeVerificationEvidenceSufficient(input: {
-    title?: string | null;
-    body?: string | null;
-    vercelCheckSuccess?: boolean;
-}): boolean;
-/**
- * Daemon-local PR merge — live readiness, squash merge, branch delete, worktree cleanup.
- */
-export declare function executeLandPrMerge(input: ExecuteLandPrMergeInput): Promise<LandPrCompletionReport>;

package/dist/landing-contract-gate.d.ts

@@ -1,27 +0,0 @@
-import type { WorkerLandingSnapshot } from "./landing-gate.js";
-export type TargetPrOutcome = "merged" | "skipped" | "blocked";
-export interface TargetPrReconciliation {
-    prUrl: string;
-    outcome: TargetPrOutcome;
-    mergeCommit?: string | null;
-    reason?: string | null;
-}
-export interface WorkerLandingContract {
-    landingOnly: boolean;
-    targetPrUrls: string[];
-    targetPrUrl?: string | null;
-    repairEnforceOriginalPr?: boolean;
-    requiresTargetPrReconciliation?: boolean;
-}
-export type WorkerLandingContractBlockReason = "unrelated_implementation_pr" | "missing_target_pr_reconciliation" | "incomplete_target_pr_landing" | "duplicate_repair_pr" | "missing_repair_target_reconciliation";
-export interface WorkerLandingContractVerdict {
-    blocked: boolean;
-    reason?: WorkerLandingContractBlockReason;
-    detail?: string;
-}
-export declare function assessWorkerLandingContract(input: {
-    contract: WorkerLandingContract;
-    snapshot: WorkerLandingSnapshot;
-    finalResult?: unknown;
-}): WorkerLandingContractVerdict;
-export declare function landingContractAttentionReason(verdict: WorkerLandingContractVerdict): string | undefined;

package/dist/landing-contract-pr-classify.d.ts

@@ -1,4 +0,0 @@
-import type { TargetPrReconciliation } from "./landing-contract-gate.js";
-export type WorkerReconciliationPrRole = "contract" | "support" | "unrelated";
-export declare function classifyWorkerReconciliationPrRole(prUrl: string, targetPrUrls: readonly string[], entry?: TargetPrReconciliation | null): WorkerReconciliationPrRole;
-export declare function unrelatedWorkerReconciliationPrUrls(reconciliation: readonly TargetPrReconciliation[], targetPrUrls: readonly string[]): string[];