@kynver-app/runtime 0.2.4 → 0.2.13

package/dist/dispatch-claim-release.d.ts

@@ -4,12 +4,18 @@ export interface ReleaseDispatchClaimInput {
     agentOsId: string;
     taskId: string;
     leaseOwner: string;
+    /** The lease token from claim time — the server refuses a superseded release (§7.7). */
+    leaseToken?: string | null;
     failureDetail?: string;
 }
 export interface ReleaseDispatchClaimOutcome {
     released: boolean;
     releaseResponse: unknown;
     httpOk: boolean;
+    /** True only when the POST itself failed (no HTTP response at all) — a
+     * transport failure is NOT a server refusal and callers that bracket on
+     * refusal must not bracket on it (D1b review A2). */
+    transportError: boolean;
 }
 /**
  * Hand a dispatch-next lease back to the board when local worker spawn did not start.

package/dist/doctor/local-store-cli.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `kynver doctor local-store [--no-probe]` — report-only in D0: always exits
+ * 0 (no surface consults the store yet, so nothing may gate on this); the
+ * posture lives in the printed report.
+ *
+ * The default openability probe CREATES `local-run-store.sqlite` under the
+ * harness root on a host that never opened it (inert — nothing reads it with
+ * flags off). Pass `--no-probe` to report current lifecycle state without
+ * touching disk.
+ */
+export declare function runLocalStoreDoctorCli(args?: Record<string, unknown>): void;

package/dist/doctor/local-store.d.ts

@@ -0,0 +1,35 @@
+import { type LocalRunStoreLifecycleStatus } from "../local-run-store/store-lifecycle.js";
+import { type LocalRunStoreSurfaceMode } from "../local-run-store/surface-flags.js";
+export interface LocalStoreQuarantineEntry {
+    file: string;
+    mtime: string | null;
+}
+export interface LocalStoreDoctorReport {
+    command: "doctor local-store";
+    contractVersion: 1;
+    harnessRoot: string;
+    store: {
+        state: LocalRunStoreLifecycleStatus["state"];
+        databasePath: string | null;
+        schemaVersion: number | null;
+        recovered: boolean;
+        quarantinedTo: string | null;
+        reason: string | null;
+    };
+    surfaces: Array<{
+        key: string;
+        env: string;
+        milestone: string;
+        mode: LocalRunStoreSurfaceMode;
+        /** env override / server-delivered policy / default off. */
+        source: "env" | "server" | "default";
+    }>;
+    flagWarnings: string[];
+    /** `*.quarantine-*` artifacts under the harness root (offline inspection). */
+    quarantineHistory: LocalStoreQuarantineEntry[];
+}
+export declare function buildLocalStoreDoctorReport(options?: {
+    env?: NodeJS.ProcessEnv;
+    /** Skip the open probe (report current lifecycle state only). */
+    probe?: boolean;
+}): LocalStoreDoctorReport;

package/dist/index.d.ts

@@ -9,7 +9,7 @@ export { cleanupWslCrashDumps, shouldAutoCleanupWslCrashDumps, type WslCrashDump
 export { postJson, type DispatchNextDiskGateShape, type DispatchNextWslHostShape, } from "./callbacks.js";
 export { parseClaudeStream, parseHarnessStream, summarizeEvent, summarizeShellToolCallEvent, } from "./stream.js";
 export { classifyNpmAuditOutcome, classifyShellCommandOutcome, summarizeNpmAuditReport, type NpmAuditSummary, type ShellCommandOutcome, type ShellCommandOutcomeKind, } from "./shell-command-outcome.js";
-export { classifyRepoSearchMeta, diagnoseRepoSearchFailure, extractSearchMeta, extractSearchMetaFromToolLine, formatRepoSearchGuidance, isRgExcludeScopeTarget, isSingleFileSearchTarget, metaToNormalizedRgCommand, normalizeRepoSearchCommand, normalizeRgArgv, type RepoSearchContext, type RepoSearchKind, } from "./repo-search.js";
+export { classifyRepoSearchMeta, diagnoseRepoSearchFailure, extractSearchMeta, extractSearchMetaFromToolLine, formatRepoSearchGuidance, isRgExcludeScopeTarget, isSingleFileSearchTarget, metaToNormalizedRgCommand, normalizeRepoSearchCommand, normalizeRgArgv, shouldTreatRgNoMatchAsSuccess, unwrapShellWrapperCommand, type RepoSearchContext, type RepoSearchKind, } from "./repo-search.js";
 export { parseHeartbeat, isTerminalHeartbeatPhase, terminalFinalResultFromHeartbeat, } from "./heartbeat.js";
 export { buildBoxResourceSnapshotFromGate, formatHeartbeatLine, type RuntimeBoxResourceSnapshot, type RuntimeBoxResourceSnapshotPrEvidence, type HeartbeatLineInput, } from "./box-resource-snapshot.js";
 export { resolveBoxKindFromEnv, defaultBoxId } from "./box-resource-snapshot-shared.js";
@@ -37,7 +37,7 @@ export { parseExecutorRefRoutingIntent, executorRefRequestsNonCursorWorker, type
 export { assessDispatchModelGuard, type DispatchModelGuardInput, type DispatchModelGuardResult, } from "./dispatch-model-guard.js";
 export { GLOBAL_DEFAULT_MODEL, CURSOR_DEFAULT_MODEL, inferModelRoutingFromTask, resolveGlobalDefaultModel, resolveModelFallback, resolveWorkerLaunch, type ModelRoutingDecision, } from "./model-routing.js";
 export { redactHarness } from "./redact.js";
-export { scrubWorkerEnv, scrubClaudeEnv, auditWorkerEnv, listForbiddenWorkerEnvKeys, isForbiddenWorkerEnvKey, FORBIDDEN_WORKER_ENV_KEYS, type WorkerEnvAudit, } from "./worker-env.js";
+export { scrubWorkerEnv, scrubClaudeEnv, auditWorkerEnv, listForbiddenWorkerEnvKeys, listOperatorAllowedWorkerEnvKeys, isForbiddenWorkerEnvKey, FORBIDDEN_WORKER_ENV_KEYS, type WorkerEnvAudit, } from "./worker-env.js";
 export { KYNVER_NO_PROD_DB_CREDENTIALS_ENV, REVIEW_WORKER_EXTRA_FORBIDDEN_ENV_KEYS, ProductionDatabaseCredentialBlockedError, assertProductionDatabaseResolutionAllowed, auditReviewWorkerCredentialScope, buildWorkerSpawnEnv, isNoProdCredentialReviewEnvironment, type BuildWorkerSpawnEnvOptions, type ReviewWorkerCredentialScopeAudit, } from "./security-review-environment.js";
 export { isHarnessExpertReviewWorker } from "./harness-expert-review.js";
 export { discoverProductionDbEnvFilePaths, expandHomePath } from "./db-credential-env-paths.js";
@@ -74,7 +74,7 @@ export { runBoundedBuildCheck, assessBuildAdmission, mergeNodeOptionsForBuildChe
 export { assessHeavyVerificationGate, countActiveHeavyVerificationSlots, isHeavyVerificationGateSkipped, listActiveHeavyVerificationSlots, reclaimStaleHeavyVerificationSlots, releaseHeavyVerificationSlot, resolveHeavyVerificationMaxConcurrent, tryAcquireHeavyVerificationSlot, waitForHeavyVerificationSlot, DEFAULT_HEAVY_VERIFICATION_MAX_CONCURRENT, classifyHeavyShellCommand, gateWorkerShellCommand, HEAVY_VERIFICATION_TOKEN_REQUIRED, type HeavyCommandClass, type HeavyCommandClassification, type HeavyVerificationGateVerdict, type HeavyVerificationSlotRecord, type WorkerCommandGateOutcome, type WorkerCommandGateResult, } from "./heavy-verification/index.js";
 export { assessAutoCompleteEligibility, classifyWorkerHealth, getMonitorStatus, listMonitors, runMonitorTick, spawnMonitorSidecar, type AutoCompleteAssessment, type MonitorTickResult, type TaskLeaseSnapshot, type WorkerHealthClass, type WorkerMonitorView, } from "./monitor/index.js";
 export { formatHarnessToolReadable, formatMonitorTickNotice, formatAutoCompleteOutcomeNotice, formatWorkerStatusNotice, formatWorkerCompleteNotice, joinHarnessNotice, type HarnessReadableNotice, type HarnessToolFormatContext, } from "./harness-notice/index.js";
-export { persistPlan, drainPlanOutbox, listOutboxItems, formatPlanOutboxHandoffBlock, extractPlanOutboxFromTask, hashPlanBody, type PersistPlanInput, type PersistPlanResult, type PlanPersistUserStatus, } from "./plan-persist/index.js";
+export { persistPlan, drainPlanOutbox, listOutboxItems, writeOutboxItem, formatPlanOutboxHandoffBlock, extractPlanOutboxFromTask, hashPlanBody, type PersistPlanInput, type PersistPlanResult, type PlanPersistUserStatus, } from "./plan-persist/index.js";
 export { classifyVercelUrl, collectVercelEvidence, evidenceFromGitHubVercelStatus, isDashboardVercelUrl, isInspectableVercelTarget, isVercelStatusContext, pickVercelStatusContext, resolveVercelInspectTarget, type CollectVercelEvidenceInput, type GitHubCommitStatusRow, type VercelEvidenceResult, type VercelEvidenceStatus, } from "./vercel/index.js";
 export { validateJobEnvelope, type LocalCodexJobEnvelope, type LocalCodexJobToolPolicy, type JobEnvelopeValidationError, type JobEnvelopeValidationResult, } from "./byoc/job-envelope.js";
 export { verifyLocalCodexGoldenPath, formatGoldenPathFailureNotice, type GoldenPathCheckCode, type GoldenPathAuditEvidence, type GoldenPathOptions, type GoldenPathResult, } from "./byoc/m6-golden-path.js";
@@ -82,3 +82,4 @@ export { AGENT_RUNTIME_ENVELOPE_SCHEMA_VERSION, AGENT_RUNTIME_ENVELOPE_SCHEMA_VE
 export { evaluateNodeRuntimePolicy, KYNVER_NODE_PATCH_FLOOR, PUBLISHED_NODE_RANGE, PRIVATE_ROOT_NODE_RANGE, type NodeRuntimePolicyStatus, type NodeRuntimePolicyVerdict, } from "./node-runtime-policy.js";
 export { buildRuntimeIdentity, type RuntimeIdentityV1 } from "./runtime-identity.js";
 export { buildNodeRuntimeDoctorReport, type NodeRuntimeDoctorReport } from "./doctor/node-runtime.js";
+export { readJson, writeJson } from "./util.js";