@kynver-app/runtime 0.2.24 → 0.2.29

package/dist/security-review-environment.d.ts

@@ -1,27 +0,0 @@
-/**
- * LB1 — review workers must not receive unrestricted production DB credentials.
- * Spawn sets KYNVER_NO_PROD_DB_CREDENTIALS; db-credential-resolver refuses when set.
- */
-/** Truthy when the worker is a source-only / expert review lane (no prod DB). */
-export declare const KYNVER_NO_PROD_DB_CREDENTIALS_ENV = "KYNVER_NO_PROD_DB_CREDENTIALS";
-/** Extra env keys stripped for review workers (operator file pointers). */
-export declare const REVIEW_WORKER_EXTRA_FORBIDDEN_ENV_KEYS: readonly ["KYNVER_ENV_FILE"];
-export declare function isNoProdCredentialReviewEnvironment(env: NodeJS.ProcessEnv): boolean;
-export interface BuildWorkerSpawnEnvOptions {
-    reviewWorker?: boolean;
-}
-export declare function buildWorkerSpawnEnv(hostEnv: NodeJS.ProcessEnv, opts?: BuildWorkerSpawnEnvOptions): NodeJS.ProcessEnv;
-export declare class ProductionDatabaseCredentialBlockedError extends Error {
-    constructor();
-}
-export declare function assertProductionDatabaseResolutionAllowed(env: NodeJS.ProcessEnv): void;
-export interface ReviewWorkerCredentialScopeAudit {
-    reviewMode: boolean;
-    noProdFlagPresent: boolean;
-    forbiddenKeysAfterScrub: string[];
-    productionDbKeysAbsent: boolean;
-    envFilePointerStripped: boolean;
-    safe: boolean;
-}
-/** Audit credential scope for diagnostics and security-boundary proofs (no secret values). */
-export declare function auditReviewWorkerCredentialScope(env: NodeJS.ProcessEnv, opts?: BuildWorkerSpawnEnvOptions): ReviewWorkerCredentialScopeAudit;

package/dist/server/adapter-contract.d.ts

@@ -1 +0,0 @@
-export { getAdapterContextContract, listAdapterContextContracts, type AdapterContextCapability, type AdapterContextContract, type AdapterContextContractId, } from "../orchestration-providers/adapter-contract.js";

package/dist/server/cleanup.d.ts

@@ -1,3 +0,0 @@
-export { runHarnessCleanup } from "../cleanup.js";
-export { DEFAULT_MAX_ACTIONS_PER_SWEEP, DEFAULT_NODE_MODULES_AGE_MS, DEFAULT_RUN_DIRECTORIES_AGE_MS, DEFAULT_WORKTREES_AGE_MS, } from "../cleanup-types.js";
-export type { CleanupSkipReason, HarnessCleanupSummary } from "../cleanup-types.js";

package/dist/server/context-budget-receipt.d.ts

@@ -1,2 +0,0 @@
-export { RUNTIME_CONTEXT_BUDGET_RECEIPT_SCHEMA_VERSION, RUNTIME_CONTEXT_BUDGET_RECEIPT_V2_SCHEMA_VERSION, buildContextBudgetReceiptV2, estimateTokensFromChars, finalizeReceiptTotals, isRuntimeContextBudgetReceiptV2, sectionReceiptFromMarkdown, upgradeReceiptToV2, type BuildContextBudgetReceiptV2Input, type ContextBudgetReceiptSurface, type ContextEnvelopeMode, type RuntimeContextActiveStateLookup, type RuntimeContextActiveStateLookupKind, type RuntimeContextActiveStateLookupStatus, type RuntimeContextBudgetReceipt, type RuntimeContextBudgetReceiptSchemaVersion, type RuntimeContextBudgetReceiptV2, type RuntimeContextRehydrationKind, type RuntimeContextRehydrationRoute, type RuntimeContextSection, type RuntimeContextSectionReceipt, type UsefulContextCoverage, } from "../context-budget-receipt.js";
-export { MEMORY_LANE_PREVIEW_CHARS, buildChatMemoryShadowPreview, buildLegacyChatMemorySection, chatMemoriesToPreviewItems, formatContextPreviewMemoryBlock, type ContextPreviewBlockInput, type ContextPreviewMemoryItem, } from "../context-preview/chat-memory-preview.js";

package/dist/server/db-credentials.d.ts

@@ -1 +0,0 @@
-export { resolveProductionDatabaseUrl, type DbCredentialFailure, type DbCredentialResolution, type DbCredentialSource, type ResolveProductionDatabaseOptions, type ResolveProductionDatabaseResult, } from "../db-credential-resolver.js";

package/dist/server/default-repo.d.ts

@@ -1 +0,0 @@
-export { resolveDefaultRepo } from "../default-repo.js";

package/dist/server/harness-notice.d.ts

@@ -1,2 +0,0 @@
-export { extractWorkerStartRecordFromText, formatHarnessToolReadable, formatWorkerStartNotice, joinHarnessNotice, } from "../harness-notice/index.js";
-export type { HarnessReadableNotice, HarnessToolFormatContext } from "../harness-notice/index.js";

package/dist/server/heavy-verification.d.ts

@@ -1,3 +0,0 @@
-export { assessHeavyVerificationGate, countActiveHeavyVerificationSlots, isHeavyVerificationGateSkipped, resolveHeavyVerificationMaxConcurrent, } from "../heavy-verification/slot.js";
-export { waitForHeavyVerificationSlot } from "../heavy-verification/gate.js";
-export { compareSemver } from "../memory-cost-package-version-guard.js";

package/dist/server/landing.d.ts

@@ -1 +0,0 @@
-export { assessWorkerLanding, type WorkerLandingVerdict } from "../landing-gate.js";

package/dist/server/memory-cost-enforce.d.ts

@@ -1 +0,0 @@
-export { buildMemoryCostPackageGuardInput, enforceMemoryCostPackageGuardAtStartup, evaluateMemoryCostPackageGuardAtStartup, } from "../memory-cost-package-version-guard-enforce.js";

package/dist/server/memory-cost.d.ts

@@ -1 +0,0 @@
-export { compareSemver, evaluateMemoryCostPackageVersionGuard, assertMemoryCostPackageVersionGuard, MemoryCostPackageVersionGuardError, MEMORY_COST_PACKAGE_MIN_VERSIONS, type MemoryCostPackageGuardResult, } from "../memory-cost-package-version-guard.js";

package/dist/server/model-routing.d.ts

@@ -1,3 +0,0 @@
-export { parseExecutorRefRoutingIntent, executorRefRequestsNonCursorWorker, type ExecutorRefRoutingIntent, } from "../executor-ref-routing.js";
-export { assessDispatchModelGuard, type DispatchModelGuardInput, type DispatchModelGuardResult, } from "../dispatch-model-guard.js";
-export { GLOBAL_DEFAULT_MODEL, CURSOR_DEFAULT_MODEL, inferModelRoutingFromTask, resolveGlobalDefaultModel, resolveModelFallback, resolveWorkerLaunch, type ModelRoutingDecision, } from "../model-routing.js";

package/dist/server/monitor.d.ts

@@ -1,3 +0,0 @@
-export { computeWorkerStatus } from "../status.js";
-export { classifyWorkerHealth } from "../monitor/monitor.classify.js";
-export { assessAutoCompleteEligibility } from "../monitor/monitor.terminal.js";

package/dist/server/node-runtime-policy.d.ts

@@ -1 +0,0 @@
-export { evaluateNodeRuntimePolicy, KYNVER_NODE_PATCH_FLOOR, PRIVATE_ROOT_NODE_RANGE, PUBLISHED_NODE_RANGE, type NodeRuntimePolicyStatus, type NodeRuntimePolicyVerdict, } from "../node-runtime-policy.js";

package/dist/server/orchestration.d.ts

@@ -1,10 +0,0 @@
-export { buildOrchestrationProviderInventory } from "../orchestration-providers/inventory.js";
-export { listOrchestrationProviderCapabilities } from "../orchestration-providers/capabilities.js";
-export type { OrchestrationProviderBindingStatus, OrchestrationProviderCapability, OrchestrationProviderId, } from "../orchestration-providers/types.js";
-export type { OrchestrationCloudApiCredits, OrchestrationWorkerEndpoint, } from "../orchestration-providers/inventory.js";
-export type { HermesCliAdapterStatus } from "../orchestration-providers/hermes-cli-adapter.js";
-export type { HermesOpenAiCodexBindingStatus } from "../orchestration-providers/hermes-openai-codex-binding.js";
-export type { CodexOrchestrationPath } from "../orchestration-providers/codex-orchestration-adapter.js";
-export { evaluateOrchestrationPolicy } from "../orchestration-enforcement/evaluator.js";
-export { resolveOrchestrationPolicyMode, isOrchestrationEnforceTasksEnabled, } from "../orchestration-enforcement/config.js";
-export { buildForegroundHarnessIdempotencyKey } from "../orchestration-enforcement/idempotency.js";

package/dist/server/pr-evidence.d.ts

@@ -1,2 +0,0 @@
-export { evidenceFromGitHubVercelStatus, type VercelEvidenceResult, } from "../vercel/vercel-evidence.js";
-export type { GitHubCommitStatusRow } from "../vercel/vercel-github-status.js";

package/dist/server/prompt.d.ts

@@ -1 +0,0 @@
-export { buildPrompt, buildPromptWithReceipt, RUNTIME_PROMPT_ENFORCEMENT, type BuildPromptInput, } from "../prompt.js";

package/dist/server/repo-search.d.ts

@@ -1 +0,0 @@
-export { classifyRepoSearchMeta, diagnoseRepoSearchFailure, extractSearchMetaFromToolLine, formatRepoSearchGuidance, normalizeRepoSearchCommand, shouldTreatRgNoMatchAsSuccess, unwrapShellWrapperCommand, } from "../repo-search.js";

package/dist/server/worker-policy.d.ts

@@ -1,6 +0,0 @@
-export { auditWorkerEnv, scrubWorkerEnv, listForbiddenWorkerEnvKeys, listOperatorAllowedWorkerEnvKeys, isForbiddenWorkerEnvKey, } from "../worker-env.js";
-export { auditReviewWorkerCredentialScope, buildWorkerSpawnEnv, isNoProdCredentialReviewEnvironment, KYNVER_NO_PROD_DB_CREDENTIALS_ENV, } from "../security-review-environment.js";
-export { isHarnessExpertReviewWorker } from "../harness-expert-review.js";
-export { DEFAULT_WORKER_PROVIDER, normalizeWorkerProviderName, resolveConfiguredWorkerProvider, isClaudeFamilyProvider, taskAllowsClaudeWorker, taskExpressesWorkerProviderPreference, enforceCursorWorkerProvider, preferCursorExecutor, type EnforceCursorWorkerProviderInput, } from "../worker-provider-policy.js";
-export { classifyHeavyShellCommand } from "../heavy-verification/command-classify.js";
-export { gateWorkerShellCommand, HEAVY_VERIFICATION_TOKEN_REQUIRED, type GateWorkerShellCommandOpts, type WorkerCommandGateOutcome, type WorkerCommandGateResult, } from "../heavy-verification/worker-command-gate.js";

package/dist/server/wsl-crash-dumps.d.ts

@@ -1,2 +0,0 @@
-export { observeWslCrashDumps, readKernelCorePattern, } from "../wsl-crash-dumps.js";
-export type { ObserveWslCrashDumpsOptions, WslCrashDumpObservation, } from "../wsl-crash-dumps.js";

package/dist/shell-command-outcome.d.ts

@@ -1,32 +0,0 @@
-export type ShellCommandOutcomeKind = "success" | "audit_findings" | "search_no_matches" | "command_failure";
-export interface NpmAuditSummary {
-    total: number;
-    critical: number;
-    high: number;
-    moderate: number;
-    low: number;
-    info: number;
-}
-export interface ShellCommandOutcome {
-    kind: ShellCommandOutcomeKind;
-    exitCode: number;
-    /** Short operator-facing line (no raw JSON blob). */
-    summary: string;
-    /** Present when kind === audit_findings and JSON parsed. */
-    audit?: NpmAuditSummary;
-    /** When JSON was expected but invalid. */
-    parseError?: string;
-}
-export declare function summarizeNpmAuditReport(report: Record<string, unknown>): NpmAuditSummary | null;
-export declare function classifyNpmAuditOutcome(input: {
-    exitCode: number;
-    stdout: string;
-    stderr: string;
-}): ShellCommandOutcome;
-export declare function classifyShellCommandOutcome(input: {
-    command: string;
-    exitCode: number;
-    stdout?: string;
-    stderr?: string;
-    interleavedOutput?: string;
-}): ShellCommandOutcome;

package/dist/sidecar-cli.d.ts

@@ -1,16 +0,0 @@
-export interface SidecarCliCommand {
-    command: string;
-    argsPrefix: string[];
-    cliPath: string;
-}
-/**
- * Runtime sidecars normally execute bundled `dist/cli.js`. During repo-source
- * daemon runs, however, `import.meta.url` points at `src/*.ts` and no sibling
- * `cli.js` exists until `npm run build`. Fall back to `tsx src/cli.ts` so
- * source-driven workers still get completion/monitor sidecars.
- */
-export declare function resolveSidecarCliCommand(input: {
-    importMetaUrl: string;
-    explicitCliPath?: string;
-    nodeExecutable: string;
-}): SidecarCliCommand | null;

package/dist/stale-reconcile.d.ts

@@ -1,31 +0,0 @@
-import { type RunFinalizeResult } from "./finalize.js";
-import { reconcileWorkerMetadata } from "./worker-metadata-reconcile.js";
-import { reconcileLocalOnlyMergedPrAttention } from "./local-pr-attention-reconcile.js";
-import { archiveTerminalWorkerMetadata } from "./run-metadata-retention.js";
-/** No heartbeat this long + dead PID → reconcile as exited. */
-export declare const STALE_RECONCILE_HEARTBEAT_MS: number;
-export interface StaleWorkerReconcileOutcome {
-    runId: string;
-    worker: string;
-    action: "marked_exited" | "killed_stale" | "skipped";
-    reason: string;
-}
-export interface ReconcileStaleWorkersResult {
-    workers: StaleWorkerReconcileOutcome[];
-    finalizedRuns: RunFinalizeResult[];
-    metadataReconcile: ReturnType<typeof reconcileWorkerMetadata>;
-    localPrAttentionReconcile: ReturnType<typeof reconcileLocalOnlyMergedPrAttention>;
-    terminalWorkerArchive: ReturnType<typeof archiveTerminalWorkerMetadata>;
-}
-/**
- * Reconcile workers that exited without updating worker.json, and optionally
- * terminate long-idle live processes. Paused workers with recent heartbeat
- * blockers are left alone (heartbeat freshness gate).
- */
-export declare function reconcileStaleWorkers(): ReconcileStaleWorkersResult;
-/**
- * One-shot CLI entry for `kynver run reconcile`: reconciles stale workers and
- * finalizes dead runs globally without requiring a running daemon. Prints a
- * JSON summary to stdout.
- */
-export declare function reconcileRunsCli(): void;

package/dist/start-box-identity.d.ts

@@ -1,12 +0,0 @@
-import type { KynverUserConfig } from "./config.js";
-export interface StartBoxIdentityRepair {
-    repaired: boolean;
-    boxKind: string;
-    maxConcurrentWorkers: number;
-    warnings: string[];
-}
-/**
- * On `kynver start`, persist explicit box identity and clamp mis-inherited Forge caps
- * so Command Center pools stay ghost 8 / forge 4.
- */
-export declare function repairStartBoxIdentity(config?: KynverUserConfig, env?: NodeJS.ProcessEnv): StartBoxIdentityRepair;

package/dist/start.d.ts

@@ -1,13 +0,0 @@
-import { type HarnessRunRecord } from "./run-store.js";
-/**
- * Pick the run `start` should attach the daemon to: the newest non-terminal
- * run whose repo matches. Returns null when none exists (create one).
- */
-export declare function resolveStartRunId(runs: HarnessRunRecord[], repo: string): string | null;
-export declare function runStart(args: Record<string, string | boolean>): Promise<void>;
-/**
- * The argv the keeper child re-invokes with: an explicit `kynver daemon`
- * command (NOT `start` — the child must skip bootstrap/run resolution and
- * just run the loop). Forwards the daemon-relevant flags `start` accepts.
- */
-export declare function buildStartDaemonArgv(runId: string, agentOsId: string, args: Record<string, string | boolean>): string[];

package/dist/status.d.ts

@@ -1,262 +0,0 @@
-import { type GitAncestry } from "./git.js";
-import { type WorkerLandingContract } from "./landing-contract-gate.js";
-export declare const NO_START_MS = 180000;
-export declare const STALE_MS = 600000;
-export interface WorkerAttention {
-    state: "done" | "needs_attention" | "blocked" | "stale" | "ok";
-    reason: string;
-}
-/** Snapshot of operating-rules policy injection at worker spawn (from dispatch-next). */
-export interface InstructionPolicyEvidenceSnapshot {
-    fingerprint?: string;
-    ruleSlugs?: string[];
-    globalRuleCount?: number;
-    personaRuleCount?: number;
-    explicitKindCount?: number;
-    invariantCount?: number;
-    markdownChars?: number;
-    injectedAt?: string;
-}
-/** Snapshot of task-anchored context envelope injection at worker spawn. */
-export interface ContextEnvelopeEvidenceSnapshot {
-    anchorTaskId?: string;
-    envelopeGeneratedAt?: string;
-    injectedAt?: string;
-    hasPersonaBlock?: boolean;
-    personaSlug?: string | null;
-    operatingRuleCount?: number;
-    memoryHitCount?: number;
-    markdownChars?: number;
-    source?: "dispatch_injection" | "tool_call";
-}
-/** Snapshot of anchored persona context-envelope injection at worker spawn. */
-export interface PersonaContextEvidenceSnapshot {
-    expectedPersonaSlug?: string;
-    injectedPersonaSlug?: string;
-    displayName?: string;
-    operatingRuleCount?: number;
-    anchorTaskId?: string;
-    envelopeGeneratedAt?: string;
-    injectedAt?: string;
-    markdownChars?: number;
-}
-/** Snapshot of first-class runtime memory envelope injection at harness launch. */
-export interface RuntimeEnvelopeEvidenceSnapshot {
-    envelopeId?: string;
-    envelopeSchemaVersion?: string;
-    generatedAt?: string;
-    injectedAt?: string;
-    mode?: string;
-    memoryIncludedCount?: number;
-    memoryOmittedCount?: number;
-    degraded?: boolean;
-    degradedReason?: string | null;
-    auditFingerprint?: string;
-    promptMarkdownChars?: number;
-}
-/** Dispatch-time retrieval probe replayed on harness completion. */
-export interface HarnessMemoryQualityCaptureSnapshot {
-    memoryQuery: string;
-    hitCount: number;
-    miss: boolean;
-    capturedAt: string;
-    retrievalEvidence?: Record<string, unknown> | null;
-    /** P7 privacy-safe prompt block (trace summary + live-verification nudges). */
-    promptMarkdown?: string | null;
-}
-export interface HarnessWorkerRecord {
-    name: string;
-    runId: string;
-    status: string;
-    pid?: number;
-    /** Model id passed to the worker provider. */
-    model?: string;
-    /** Worker provider key frozen at spawn for status/completion readback. */
-    provider?: string;
-    executionMode?: import("./worker-execution-mode.js").WorkerExecutionMode;
-    /** Runtime observed unread operator steers and stopped this worker generation. */
-    steerRestartRequired?: boolean;
-    steerRestartRequestedAt?: string;
-    pendingSteerEventIds?: number[];
-    dispatchSteerFenceEventId?: number;
-    branch: string;
-    worktreePath: string;
-    workerDir: string;
-    stdoutPath: string;
-    stderrPath: string;
-    heartbeatPath: string;
-    ownedPaths?: string[];
-    agentOsId?: string;
-    taskId?: string;
-    planId?: string;
-    /** Operating-rules policy fingerprint when dispatch injected operating rules. */
-    instructionPolicyFingerprint?: string;
-    instructionPolicyEvidence?: InstructionPolicyEvidenceSnapshot;
-    memoryQualityCapture?: HarnessMemoryQualityCaptureSnapshot;
-    personaSlug?: string;
-    personaEvidence?: PersonaContextEvidenceSnapshot;
-    contextEnvelopeEvidence?: ContextEnvelopeEvidenceSnapshot;
-    runtimeEnvelopeEvidence?: RuntimeEnvelopeEvidenceSnapshot;
-    leaseOwner?: string;
-    /** Fencing token from claim — sent on renew/completion when set. */
-    leaseToken?: string;
-    dispatched?: boolean;
-    startedAt?: string;
-    /** Routing audit — which rule selected model/provider (dispatch inference). */
-    routingRule?: string;
-    requestedModel?: string;
-    /** Orchestration provider/model/auth-source/cost audit (no OAuth secrets). */
-    orchestrationAudit?: import("./orchestration-providers/types.js").OrchestrationRoutingAudit;
-    /** Board task metadata for landing/PR-handoff gates (set at dispatch). */
-    executorRef?: string;
-    parentTaskId?: string;
-    taskTitle?: string;
-    taskPrUrl?: string;
-    /** Canonical target PR for repair workers (must not spawn duplicate PRs). */
-    repairTargetPrUrl?: string;
-    repairTargetBranch?: string;
-    /** Set when stale-reconcile patches a dead/stale worker record. */
-    reconciledAt?: string;
-    reconcileReason?: string;
-    /** Last heartbeat blocker text successfully synced to plan-progress-sync (dedupe). */
-    lastSyncedHeartbeatBlocker?: string;
-    /**
-     * Set when the most recent AgentOS completion replay for this finished worker
-     * was rejected (e.g. a revoked / expired / cross-workspace runner token) or
-     * otherwise failed. While set, the worker is NOT treated as cleanly done:
-     * `finalizeStaleRuns` keeps the run non-terminal and the board surfaces it.
-     * Cleared once the completion is acknowledged (2xx). Local-only — never sent
-     * to the server as part of the worker's intrinsic status.
-     */
-    completionBlocker?: string;
-    /** Local worker aborted because post-dispatch AgentOS readback failed. */
-    dispatchStartReadbackFailed?: boolean;
-    /** ISO timestamp when `/harness/completion` returned 2xx for this worker. */
-    completionReportedAt?: string;
-    /** Snapshot from the acknowledged completion POST — local-only. */
-    completionSnapshot?: {
-        finalResult?: unknown;
-        prUrl?: string | null;
-        summary?: string | null;
-    };
-    /** How `completionSnapshot` was captured before completion ack (reconcile path). */
-    completionHandoffSource?: string;
-    /** Audit tag for how `completionReportedAt` was set (`tryCompleteWorker`, `board-task-*`). */
-    completionAckSource?: string;
-    /** Local mirror of the last completion POST outcome. */
-    completionOutcome?: "acknowledged" | "rejected";
-    /** Truncated JSON body from the last acknowledged completion response. */
-    completionResponse?: unknown;
-    /**
-     * Direct/local worker with no board linkage — must not be mistaken for an
-     * AgentTask-backed harness worker in completion or dispatch paths.
-     */
-    localOnly?: boolean;
-    /** Sidecar PID when detached; used for observability only. */
-    completionSidecarPid?: number;
-    completionSidecarSpawnFailedAt?: string;
-    /** One-off helper paths removed before completion (`kynver worker discard-disposable`). */
-    disposableArtifactsRemoved?: string[];
-    /** Physical pool label frozen at spawn for orchestration usage attribution. */
-    boxKind?: string;
-    boxId?: string;
-    /** Runner/daemon identity frozen at spawn (KYNVER_RUNTIME_ID). */
-    runtimeId?: string;
-}
-export interface RawHarnessWorkerStatus {
-    runId: string;
-    worker: string;
-    pid?: number;
-    alive: boolean;
-    status: string;
-    attention: WorkerAttention;
-    branch: string;
-    worktreePath: string;
-    ownedPaths?: string[];
-    stdoutBytes: number;
-    stderrBytes: number;
-    heartbeatBytes: number;
-    firstEventAt: string | null;
-    lastEventAt: string | null;
-    lastActivityAt: string | null;
-    currentTool: string | null;
-    heartbeatCount: number;
-    lastHeartbeatAt: string | null;
-    lastHeartbeatPhase: string | null;
-    lastHeartbeatSummary: string | null;
-    heartbeatBlocker: string | null;
-    steerRestartRequired?: boolean;
-    pendingSteerEventIds?: number[];
-    dispatchSteerFenceEventId?: number;
-    /** Parser-detected timestamp anomalies (e.g., future heartbeat ts). */
-    timestampAnomalies?: Array<{
-        kind: "future_heartbeat_timestamp";
-        observedAt: string;
-        clampedTo: string;
-    }>;
-    finalResult: unknown;
-    error?: string;
-    changedFiles: string[];
-    gitAncestry: GitAncestry;
-    /** Set by PR-ready handoff before completion is posted. */
-    prUrl?: string;
-    headCommit?: string;
-    /** Paths removed via `kynver worker discard-disposable` before completion POST. */
-    disposableArtifactsRemoved?: string[];
-    /** Fencing token from claim — echoed on completion when set. */
-    leaseToken?: string;
-    /** Operating-rules policy fields echoed on completion status for mirror recovery. */
-    instructionPolicyFingerprint?: string | null;
-    instructionPolicyEvidence?: InstructionPolicyEvidenceSnapshot | null;
-    /** Model the worker was launched with — echoed from worker.json for usage tracking. */
-    model?: string | null;
-    /** Worker provider key (codex | cursor | claude | openai-compatible) frozen at spawn for usage/routing readback. */
-    provider?: string | null;
-    /** Token usage parsed from provider stream output (W2c), when the provider reported it. */
-    usage?: import("./stream.js").ParsedStreamUsage | null;
-    /** Physical pool label — ghost | forge (runtime ≥ 0.1.115). */
-    boxKind?: string | null;
-    boxId?: string | null;
-    /** Runner/daemon identity echoed from worker.json. */
-    runtimeId?: string | null;
-    personaSlug?: string | null;
-    /** True when dispatch-next spawned the worker on a daemon tick. */
-    dispatched?: boolean | null;
-    localOnly?: boolean | null;
-}
-export interface WorkerStatusOptions {
-    /** Branch ref for ancestry when baseCommit is not set. */
-    base?: string;
-    /** Pinned SHA from run creation — preferred for ancestry vs a moving branch tip. */
-    baseCommit?: string;
-}
-export declare function computeAttention(input: {
-    alive: boolean;
-    finalResult: unknown;
-    firstEventAt: string | null;
-    stdoutBytes: number;
-    stderrBytes?: number;
-    heartbeatBytes: number;
-    lastActivityAt: string | null;
-    heartbeatBlocker: string | null;
-    startedAt?: string;
-    /** stderr tail / parsed error for a worker that died without a final result. */
-    error?: string | null;
-    changedFiles?: string[];
-    gitAncestry?: GitAncestry | null;
-    completionBlocker?: string | null;
-    landingContract?: WorkerLandingContract | null;
-    prUrl?: string | null;
-    localOnly?: boolean;
-    taskId?: string | null;
-    agentOsId?: string | null;
-    reconcileReason?: string | null;
-}): WorkerAttention;
-export declare function computeWorkerStatus(worker: HarnessWorkerRecord, options?: WorkerStatusOptions): RawHarnessWorkerStatus;
-export declare function isFinishedWorkerStatus(status: RawHarnessWorkerStatus): boolean;
-/** True when a worker recorded a final result but failed the landing gate. */
-export declare function isLandingBlockedWorkerStatus(status: RawHarnessWorkerStatus): boolean;
-export declare function deriveRunStatus(fallback: string, workers: Array<{
-    attention?: string;
-    status?: string;
-}>): string;

package/dist/stream.d.ts

@@ -1,33 +0,0 @@
-import { type ShellCommandOutcome } from "./shell-command-outcome.js";
-export interface ParsedStream {
-    firstEventAt: string | null;
-    lastEventAt: string | null;
-    currentTool: string | null;
-    finalResult: unknown;
-    error: string | null;
-    /** Most recent non-success shell outcome for operator error streams. */
-    lastShellOutcome: ShellCommandOutcome | null;
-    /** Token usage observed in provider stream output (W2c contract), when reported. */
-    usage: ParsedStreamUsage | null;
-}
-/**
- * Provider-observed token usage. Sources: the Claude CLI stream-json `result`
- * message (`usage.input_tokens`/`output_tokens` + `modelUsage`), Codex exec
- * JSONL usage events, and the openai-compatible runner's `result` event
- * (`usage.input_tokens`/`output_tokens` mapped from prompt/completion tokens).
- */
-export interface ParsedStreamUsage {
-    inputTokens?: number;
-    outputTokens?: number;
-    model?: string;
-}
-/**
- * Parse harness worker stdout (`stream-json` from Claude Code or Cursor Agent).
- * Cursor emits `tool_call` events and may only write `type: "result"` after exit;
- * completion heartbeats are merged in `computeWorkerStatus`.
- */
-export declare function parseHarnessStream(file: string): ParsedStream;
-/** @deprecated Use {@link parseHarnessStream} — kept for existing imports. */
-export declare function parseClaudeStream(file: string): ParsedStream;
-export declare function summarizeShellToolCallEvent(event: Record<string, unknown>): string | undefined;
-export declare function summarizeEvent(event: Record<string, unknown>): string | undefined;

package/dist/supervisor.d.ts

@@ -1,40 +0,0 @@
-import type { HarnessRunRecord } from "./run-store.js";
-import type { ContextEnvelopeEvidenceSnapshot, HarnessMemoryQualityCaptureSnapshot, HarnessWorkerRecord, InstructionPolicyEvidenceSnapshot, PersonaContextEvidenceSnapshot, RuntimeEnvelopeEvidenceSnapshot } from "./status.js";
-import type { WorkerExecutionMode } from "./worker-execution-mode.js";
-export interface SpawnWorkerOptions {
-    name: string;
-    task: string;
-    ownedPaths?: string[];
-    model?: string;
-    branch?: string;
-    agentOsId?: string;
-    taskId?: string;
-    planId?: string;
-    instructionPolicyMarkdown?: string | null;
-    instructionPolicyFingerprint?: string | null;
-    instructionPolicyEvidence?: InstructionPolicyEvidenceSnapshot | null;
-    memoryQualityCapture?: HarnessMemoryQualityCaptureSnapshot | null;
-    memoryQualityPromptMarkdown?: string | null;
-    personaMarkdown?: string | null;
-    personaSlug?: string | null;
-    personaEvidence?: PersonaContextEvidenceSnapshot | null;
-    contextEnvelopeMarkdown?: string | null;
-    contextEnvelopeEvidence?: ContextEnvelopeEvidenceSnapshot | null;
-    runtimeEnvelopeMarkdown?: string | null;
-    runtimeEnvelopeEvidence?: RuntimeEnvelopeEvidenceSnapshot | null;
-    leaseOwner?: string;
-    leaseToken?: string;
-    dispatched?: boolean;
-    provider?: string;
-    routingRule?: string;
-    requestedModel?: string;
-    executorRef?: string;
-    parentTaskId?: string;
-    taskTitle?: string;
-    taskPrUrl?: string;
-    repairTargetPrUrl?: string;
-    repairTargetBranch?: string;
-    executionMode?: WorkerExecutionMode;
-}
-export declare function spawnWorkerProcess(run: HarnessRunRecord, opts: SpawnWorkerOptions): HarnessWorkerRecord;
-export declare function startWorker(args: Record<string, string | boolean>): Promise<void>;

package/dist/sweep.d.ts

@@ -1 +0,0 @@
-export declare function sweepRun(args: Record<string, string | boolean>): Promise<Record<string, unknown> | void>;

package/dist/util.d.ts

@@ -1,35 +0,0 @@
-export declare function fail(message: string): never;
-/** Avoid flashing a visible console on Windows when spawning worker/sidecar children. */
-export declare function hiddenSpawnOptions<T extends Record<string, unknown>>(opts: T): T;
-export declare function required(value: string | undefined, name: string): string;
-export declare function safeJson(line: string): unknown;
-export declare function readJson<T>(file: string, fallback?: T): T;
-/**
- * Atomic JSON write (temp + rename): a PROCESS crash mid-write leaves either
- * the old or the new content on disk, never a torn file (durable-harness D0
- * — the tear-class fix behind every run.json/worker.json/lease write). The
- * temp name is unique per writer so concurrent daemon+CLI writers to the
- * same target cannot collide on the temp path. Scope: the process-crash
- * (SIGKILL/OOM) tear class only — no fsync, so power-loss durability is
- * explicitly out of scope for host-local coordination state. Windows note:
- * rename over a target held open by another process can throw EPERM (a
- * throw path the old direct write did not have).
- */
-export declare function writeJson(file: string, value: unknown): void;
-export declare function safeSlug(value: string | undefined): string;
-export declare function timestampSlug(name: string): string;
-export declare function splitCsv(value: string | undefined): string[];
-export declare function trimTrailingSlash(url: string): string;
-export declare function oneLine(value: string): string;
-export declare function fileSize(file: string): number;
-export declare function fileMtime(file: string): string | null;
-export declare function tailFile(file: string, lines: number): string;
-export declare function readMaybeFile(file: string | undefined): string;
-export declare function listRunIds(runsDir: string): string[];
-export declare function sleepMs(ms: number): void;
-/** Non-blocking sleep for async loops (daemon backoff, interruptible shutdown). */
-export declare function sleepMsAsync(ms: number): Promise<void>;
-export declare function isPidAlive(pid: number | undefined): boolean;
-export declare function killWorkerProcess(pid: number, signal: NodeJS.Signals): void;
-export declare function latestIso(values: Array<string | null | undefined>): string | null;
-export declare function secsAgo(ms: number): number;

package/dist/validate.d.ts

@@ -1,15 +0,0 @@
-export declare function validateRunId(runId: string): string;
-export declare function validateWorkerName(name: string): string;
-/**
- * Require `--run` and `--name` before touching the filesystem. Missing flags used
- * to become `String(undefined)` → paths under `runs/undefined/workers/undefined`.
- */
-export declare function resolveWorkerTargetArgs(args: Record<string, string | boolean>): {
-    runId: string;
-    workerName: string;
-};
-/** Require `--run` before loading run.json or building a run board. */
-export declare function resolveRunTargetArg(args: Record<string, string | boolean>): string;
-export declare function validateRepo(repo: string): string;
-export declare function validateOwnedPaths(repoRoot: string, ownedPaths: string[]): string[];
-export declare function validateTailLines(lines: number): number;

package/dist/vercel/index.d.ts

@@ -1,4 +0,0 @@
-export { fetchVercelDeploymentStatus, mapVercelReadyStateToEvidenceStatus, type VercelDeploymentLookupOptions, type VercelDeploymentLookupResult, } from "./vercel-api.js";
-export { classifyVercelUrl, isDashboardVercelUrl, isInspectableVercelTarget, type ClassifiedVercelUrl, type VercelUrlKind, } from "./vercel-url.js";
-export { isVercelStatusContext, normalizeGitHubStatusState, pickVercelStatusContext, type GitHubCommitStatusRow, type GitHubStatusState, type GitHubVercelStatusContext, } from "./vercel-github-status.js";
-export { collectVercelEvidence, evidenceFromGitHubVercelStatus, resolveVercelInspectTarget, type CollectVercelEvidenceInput, type RunVercelDeploymentLookup, type RunVercelInspect, type VercelEvidenceResult, type VercelEvidenceStatus, type VercelInspectCommandResult, } from "./vercel-evidence.js";