@kynver-app/runtime 0.1.157 → 0.1.166

package/dist/config.d.ts

@@ -105,6 +105,14 @@ export declare function fetchRunnerCredential(agentOsId: string, opts?: {
     apiKey?: string;
 }): Promise<string>;
 export declare function mintRunnerCredential(args: Record<string, string | boolean>): Promise<void>;
+/** List runner credentials from the server for a given agentOsId. */
+export declare function listRunnerCredentialsCli(args: Record<string, string | boolean>): Promise<void>;
+/** Revoke a runner credential by tokenId. */
+export declare function revokeRunnerCredentialCli(args: Record<string, string | boolean>): Promise<void>;
+/** Rotate a runner credential by tokenId (revoke old + mint new). */
+export declare function rotateRunnerCredentialCli(args: Record<string, string | boolean>): Promise<void>;
+/** Show the local runner credential status (no server call). */
+export declare function runnerCredentialStatusCli(args: Record<string, string | boolean>): void;
 export declare function parseArgs(argv: string[]): Record<string, string | boolean>;
 export declare function runSetup(args: Record<string, string | boolean>): Promise<void>;
 export declare function runLogin(args: Record<string, string | boolean>): Promise<void>;

package/dist/doctor/doctor.types.d.ts

@@ -25,3 +25,26 @@ export interface RuntimeTakeoverDoctorReport {
     /** Optional remediation actions applied before this report was generated. */
     notes?: string[];
 }
+/**
+ * M0.3 self-serve runner install and device-binding lifecycle report.
+ *
+ * Covers: install → device login → workspace binding → repo selection →
+ * runner credential → supervised daemon.  Ready when stages 1–5 all pass
+ * (daemon liveness in stage 6 is advisory / warn-only).
+ */
+export interface RunnerInstallDoctorReport {
+    command: "doctor runner-install";
+    ready: boolean;
+    /**
+     * Highest lifecycle stage that has fully passed (0 = none).
+     * Stage definitions: 1=install, 2=login, 3=workspace, 4=repo, 5=credential, 6=daemon.
+     */
+    lifecycleStage: 0 | 1 | 2 | 3 | 4 | 5 | 6;
+    summary: string;
+    counts: {
+        pass: number;
+        warn: number;
+        fail: number;
+    };
+    sections: DoctorSection[];
+}

package/dist/doctor/runner-install-cli.d.ts

@@ -0,0 +1 @@
+export declare function runRunnerInstallDoctorCli(): void;

package/dist/doctor/runner-install.d.ts

@@ -0,0 +1,2 @@
+import type { RunnerInstallDoctorReport } from "./doctor.types.js";
+export declare function assessRunnerInstallReadiness(): RunnerInstallDoctorReport;

package/dist/harness-verify.d.ts

@@ -17,4 +17,6 @@ export interface HarnessVerifySummary {
 export declare function runHarnessVerifyCommands(cwd: string, commands?: readonly string[], opts?: {
     waitForAdmissionMs?: number;
     timeoutMs?: number;
+    /** Called synchronously before each command starts — safe for stderr progress logs. */
+    onBeforeCommand?: (cmd: string, index: number, total: number) => void;
 }): HarnessVerifySummary;

package/dist/index.d.ts

@@ -28,7 +28,7 @@ export { CODEX_DEFAULT_MODEL, codexProvider, buildCodexExecArgv } from "./provid
 export { HERMES_OPENAI_CODEX_DEFAULT_MODEL, hermesCodexProvider, buildHermesOpenAiCodexChatArgv, } from "./providers/hermes-codex.js";
 export { classifyOpenAiCodexError, formatCronJobDeliveryFailure, formatOpenAiCodexFailureNotice, redactProviderErrorText, resolveOpenAiCodexRetryBudget, TRANSIENT_OPENAI_CODEX_ERROR_CLASSES, OPENAI_CODEX_PROVIDER, type ClassifiedOpenAiCodexError, type CodexFailureNoticeInput, type OpenAiCodexErrorClass, } from "./providers/openai-codex-resilience.js";
 export * from "./cron/hermes-provider-notice.js";
-export { buildOrchestrationProviderInventory, classifyOrchestrationRisk, compareProviderCandidates, getOrchestrationProviderCapability, listOrchestrationProviderCapabilities, probeClaudeOAuthBinding, probeCodexOAuthBinding, probeCursorOAuthBinding, probeHermesCliAdapter, probeHermesOpenAiCodexBinding, probeOrchestrationProviderBinding, providerCapableForRisk, resolveCodexOrchestrationAdapter, resolveOrchestrationRouting, selectCheapestCapableProvider, sanitizeOrchestrationAudit, orchestrationAuditForWorkerJson, type CodexOrchestrationAdapterStatus, type CodexOrchestrationPath, type HermesCliAdapterStatus, type HermesOpenAiCodexBindingStatus, type OrchestrationAuthSource, type OrchestrationCloudApiCredits, type OrchestrationCostTier, type OrchestrationProviderBindingStatus, type OrchestrationProviderCapability, type OrchestrationProviderId, type OrchestrationProviderInventory, type OrchestrationRiskClass, type OrchestrationRoutingAudit, type OrchestrationRoutingDecision, } from "./orchestration-providers/index.js";
+export { buildOrchestrationProviderInventory, classifyOrchestrationRisk, compareProviderCandidates, getOrchestrationProviderCapability, listOrchestrationProviderCapabilities, probeClaudeOAuthBinding, probeCodexOAuthBinding, probeCursorOAuthBinding, probeHermesCliAdapter, probeHermesOpenAiCodexBinding, probeOrchestrationProviderBinding, providerCapableForRisk, resolveCodexOrchestrationAdapter, resolveOrchestrationRouting, selectCheapestCapableProvider, sanitizeOrchestrationAudit, orchestrationAuditForWorkerJson, getAdapterContextContract, listAdapterContextContracts, type AdapterContextCapability, type AdapterContextContract, type AdapterContextContractId, type CodexOrchestrationAdapterStatus, type CodexOrchestrationPath, type HermesCliAdapterStatus, type HermesOpenAiCodexBindingStatus, type OrchestrationAuthSource, type OrchestrationCloudApiCredits, type OrchestrationCostTier, type OrchestrationProviderBindingStatus, type OrchestrationProviderCapability, type OrchestrationProviderId, type OrchestrationProviderInventory, type OrchestrationRiskClass, type OrchestrationRoutingAudit, type OrchestrationRoutingDecision, } from "./orchestration-providers/index.js";
 export { ORCHESTRATION_POLICY_MODES, ORCHESTRATION_ACTION_KINDS, ORCHESTRATION_POLICY_DECISIONS, resolveOrchestrationPolicyMode, isOrchestrationEnforceTasksEnabled, buildForegroundHarnessIdempotencyKey, evaluateOrchestrationPolicy, type OrchestrationPolicyMode, type OrchestrationActionKind, type OrchestrationPolicyDecision, type OrchestrationPolicyEvaluateInput, type OrchestrationPolicyEvaluateResult, } from "./orchestration-enforcement/index.js";
 export { DEFAULT_WORKER_PROVIDER, enforceCursorWorkerProvider, isClaudeFamilyProvider, preferCursorExecutor, resolveConfiguredWorkerProvider, taskAllowsClaudeWorker, type EnforceCursorWorkerProviderInput, } from "./worker-provider-policy.js";
 export { redactHarness } from "./redact.js";
@@ -69,3 +69,5 @@ export { assessAutoCompleteEligibility, classifyWorkerHealth, getMonitorStatus,
 export { formatHarnessToolReadable, formatMonitorTickNotice, formatAutoCompleteOutcomeNotice, formatWorkerStatusNotice, formatWorkerCompleteNotice, joinHarnessNotice, type HarnessReadableNotice, type HarnessToolFormatContext, } from "./harness-notice/index.js";
 export { persistPlan, drainPlanOutbox, listOutboxItems, formatPlanOutboxHandoffBlock, extractPlanOutboxFromTask, hashPlanBody, type PersistPlanInput, type PersistPlanResult, type PlanPersistUserStatus, } from "./plan-persist/index.js";
 export { classifyVercelUrl, collectVercelEvidence, evidenceFromGitHubVercelStatus, isDashboardVercelUrl, isInspectableVercelTarget, isVercelStatusContext, pickVercelStatusContext, resolveVercelInspectTarget, type CollectVercelEvidenceInput, type GitHubCommitStatusRow, type VercelEvidenceResult, type VercelEvidenceStatus, } from "./vercel/index.js";
+export { validateJobEnvelope, type LocalCodexJobEnvelope, type LocalCodexJobToolPolicy, type JobEnvelopeValidationError, type JobEnvelopeValidationResult, } from "./byoc/job-envelope.js";
+export { verifyLocalCodexGoldenPath, formatGoldenPathFailureNotice, type GoldenPathCheckCode, type GoldenPathAuditEvidence, type GoldenPathOptions, type GoldenPathResult, } from "./byoc/m6-golden-path.js";