@kynver-app/runtime 0.1.171 → 0.2.0

package/README.md

@@ -2,6 +2,17 @@
 
 Standalone Kynver AgentOS execution runtime and CLI (`kynver`).
 
+## Supported Node.js
+
+The Kynver fleet runs **Node.js 24.11.0+** (npm 11). The `0.1.x` line still
+declares `engines >=18` for compatibility, but new runner hosts should install
+Node 24 — the coming `0.2.0` release raises the enforced floor to `>=24.11.0`
+and startup will fail closed below it. Check any host with:
+
+```bash
+kynver doctor node-runtime   # report-only JSON classification + remediation
+```
+
 ## Quick start
 
 ```bash
@@ -24,7 +35,7 @@ kynver runner credential --agent-os-id <id>
 
 The token (`krc1.*`) is stored in `~/.kynver/credentials` as `runnerToken` and sent as `X-Kynver-Runner-Token` on dispatch/sweep/completion/progress callbacks. It is bound to one `agentOsId` and a capability set (`tasks`, `harness`, `plans.progress`, `runtime.read`, `operator`). The server persists only a token hash plus audit metadata, so credentials can be listed, revoked, and rotated without exposing the clear token again.
 
-Global env secrets remain supported for first-party dogfood, QStash, and OpenClaw cron — server-side `verifyHarnessCallback` accepts QStash signatures, scoped tokens, or global secrets (in that precedence for non-QStash callers).
+Global env secrets are accepted on by-id callbacks **only** when the deployment lists the workspace in `KYNVER_HARNESS_GLOBAL_SECRET_AGENT_OS_IDS` (first-party dogfood). Self-serve runners must use scoped `krc1.*` tokens. QStash-signed scheduler callbacks and internal cron fire routes are unchanged.
 
 ## CLI verbs
 

package/dist/chat/command-auth-proof.js

@@ -1 +1 @@
-import{createHash as c,createPrivateKey as d,createPublicKey as l,randomBytes as p,sign as m,verify as h}from"node:crypto";function f(e){return JSON.stringify(u(e))}function u(e){if(Array.isArray(e))return e.map(u);if(e&&typeof e=="object"){let r={};for(let n of Object.keys(e).sort())r[n]=u(e[n]);return r}return e}function o(e){if(!e)return null;let r=e.trim();if(!r)return null;if(/^[0-9a-fA-F]{64}$/.test(r))return new Uint8Array(r.match(/.{2}/g).map(n=>parseInt(n,16)));try{let n=Buffer.from(r,"base64");if(n.length===32)return new Uint8Array(n)}catch{}return null}var b=120,A=Buffer.from("302a300506032b6570032100","hex"),g=Buffer.from("302e020100300506032b657004220420","hex"),I="c0021e9312b0a479dbd2eb8dec0deedbe0dd6445eff431e372fa49fa21d42ffa",P={"ca-6297fb8e1773":"16ae5cb2a61f8c94cf1b86e8258f9c2f2ff6aba5e6136250a422209b6e866881"};function y(e){return`ca-${c("sha256").update(Buffer.from(e)).digest("hex").slice(0,12)}`}function K(e,r=process.env){let n=o(r.KYNVER_COMMAND_AUTH_PUBLIC_KEY);if(n)return y(n)!==e?null:n;if(r.NODE_ENV==="production")return null;let t=P[e];return t?o(t):null}function B(e){return l({key:Buffer.concat([A,Buffer.from(e)]),format:"der",type:"spki"})}function x(e,r){return!Array.isArray(e)||e.length!==r.length?!1:e.every((n,t)=>typeof n=="string"&&n===r[t])}function C(e){if(!e||typeof e!="object")return!1;let r=e;if(typeof r.signature!="string"||!r.signature||typeof r.publicKeyId!="string"||!r.publicKeyId)return!1;let n=r.payload;return!(!n||typeof n!="object"||n.v!==1||typeof n.agentOsId!="string"||!n.agentOsId||!Array.isArray(n.argv)||n.argv.some(t=>typeof t!="string")||typeof n.userId!="string"||!n.userId||typeof n.exp!="number"||!Number.isFinite(n.exp)||typeof n.nonce!="string"||!n.nonce)}function O(e,r,n=process.env,t=Math.floor(Date.now()/1e3)){if(!C(e))return{ok:!1,reason:"malformed command authorization proof"};if(e.payload.agentOsId!==r.agentOsId)return{ok:!1,reason:"agentOsId mismatch"};if(!x(e.payload.argv,r.argv))return{ok:!1,reason:"argv mismatch"};if(e.payload.exp<=t)return{ok:!1,reason:"proof expired"};let i=K(e.publicKeyId,n);if(!i)return{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}"`};let a;try{a=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(a.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let s=Buffer.from(f(e.payload),"utf8");return h(null,s,B(i),a)?{ok:!0,payload:e.payload}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(s){return{ok:!1,reason:`signature verification failed: ${s.message}`}}}function k(e){let r=d({key:Buffer.concat([g,Buffer.from(e)]),format:"der",type:"pkcs8"}),n=l(r).export({format:"der",type:"spki"});return new Uint8Array(n.subarray(n.length-32))}function v(e=process.env){let r=o(e.KYNVER_COMMAND_AUTH_KEY);if(!r&&e.NODE_ENV==="production")throw new Error("KYNVER_COMMAND_AUTH_KEY must be set in production; refusing to sign command proofs with the committed dev key.");let n=r??o(I),t=k(n);return{seed:n,rawPublicKey:t,publicKeyId:y(t),usingDevFallbackKey:!r}}function S(e,r){let n=d({key:Buffer.concat([g,Buffer.from(r.seed)]),format:"der",type:"pkcs8"}),t=Buffer.from(f(e),"utf8");return{payload:e,signature:m(null,t,n).toString("base64url"),publicKeyId:r.publicKeyId}}function U(e){let r=e.env??process.env,n=e.nowSec??Math.floor(Date.now()/1e3),t=e.ttlSec??b,i={v:1,agentOsId:e.agentOsId,argv:[...e.argv],userId:e.userId,exp:n+t,nonce:p(16).toString("base64url")};return S(i,v(r))}function D(e){return c("sha256").update(Buffer.from(e.rawPublicKey)).digest("hex").slice(0,16)}export{b as COMMAND_AUTH_PROOF_TTL_SEC,P as PINNED_COMMAND_AUTH_PUBLIC_KEYS,x as argvMatchesProof,D as commandAuthProofKeyFingerprint,y as deriveCommandAuthKeyId,C as isSignedCommandAuthProofShape,U as issueCommandAuthorizationProof,K as resolveCommandAuthPublicKey,v as resolveCommandAuthSigningKey,O as verifyCommandAuthorizationProof};
+import{createHash as c,createPrivateKey as d,createPublicKey as l,randomBytes as p,sign as m,verify as h}from"node:crypto";function f(e){return JSON.stringify(u(e))}function u(e){if(Array.isArray(e))return e.map(u);if(e&&typeof e=="object"){let r={};for(let n of Object.keys(e).sort())r[n]=u(e[n]);return r}return e}function o(e){if(!e)return null;let r=e.trim();if(!r)return null;if(/^[0-9a-fA-F]{64}$/.test(r))return new Uint8Array(r.match(/.{2}/g).map(n=>parseInt(n,16)));try{let n=Buffer.from(r,"base64");if(n.length===32)return new Uint8Array(n)}catch{}return null}var b=120,A=Buffer.from("302a300506032b6570032100","hex"),g=Buffer.from("302e020100300506032b657004220420","hex"),I="c0021e9312b0a479dbd2eb8dec0deedbe0dd6445eff431e372fa49fa21d42ffa",P={"ca-6297fb8e1773":"16ae5cb2a61f8c94cf1b86e8258f9c2f2ff6aba5e6136250a422209b6e866881"};function y(e){return`ca-${c("sha256").update(Buffer.from(e)).digest("hex").slice(0,12)}`}function K(e,r=process.env){let n=o(r.KYNVER_COMMAND_AUTH_PUBLIC_KEY);if(n)return y(n)!==e?null:n;if(r.NODE_ENV==="production")return null;if(n)return n;if(r.NODE_ENV==="production")return null;let t=P[e];return t?o(t):null}function B(e){return l({key:Buffer.concat([A,Buffer.from(e)]),format:"der",type:"spki"})}function x(e,r){return!Array.isArray(e)||e.length!==r.length?!1:e.every((n,t)=>typeof n=="string"&&n===r[t])}function C(e){if(!e||typeof e!="object")return!1;let r=e;if(typeof r.signature!="string"||!r.signature||typeof r.publicKeyId!="string"||!r.publicKeyId)return!1;let n=r.payload;return!(!n||typeof n!="object"||n.v!==1||typeof n.agentOsId!="string"||!n.agentOsId||!Array.isArray(n.argv)||n.argv.some(t=>typeof t!="string")||typeof n.userId!="string"||!n.userId||typeof n.exp!="number"||!Number.isFinite(n.exp)||typeof n.nonce!="string"||!n.nonce)}function O(e,r,n=process.env,t=Math.floor(Date.now()/1e3)){if(!C(e))return{ok:!1,reason:"malformed command authorization proof"};if(e.payload.agentOsId!==r.agentOsId)return{ok:!1,reason:"agentOsId mismatch"};if(!x(e.payload.argv,r.argv))return{ok:!1,reason:"argv mismatch"};if(e.payload.exp<=t)return{ok:!1,reason:"proof expired"};let i=K(e.publicKeyId,n);if(!i)return{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}"`};let a;try{a=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(a.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let s=Buffer.from(f(e.payload),"utf8");return h(null,s,B(i),a)?{ok:!0,payload:e.payload}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(s){return{ok:!1,reason:`signature verification failed: ${s.message}`}}}function k(e){let r=d({key:Buffer.concat([g,Buffer.from(e)]),format:"der",type:"pkcs8"}),n=l(r).export({format:"der",type:"spki"});return new Uint8Array(n.subarray(n.length-32))}function S(e=process.env){let r=o(e.KYNVER_COMMAND_AUTH_KEY);if(!r&&e.NODE_ENV==="production")throw new Error("KYNVER_COMMAND_AUTH_KEY must be set in production; refusing to sign command proofs with the committed dev key.");let n=r??o(I),t=k(n);return{seed:n,rawPublicKey:t,publicKeyId:y(t),usingDevFallbackKey:!r}}function v(e,r){let n=d({key:Buffer.concat([g,Buffer.from(r.seed)]),format:"der",type:"pkcs8"}),t=Buffer.from(f(e),"utf8");return{payload:e,signature:m(null,t,n).toString("base64url"),publicKeyId:r.publicKeyId}}function D(e){let r=e.env??process.env,n=e.nowSec??Math.floor(Date.now()/1e3),t=e.ttlSec??b,i={v:1,agentOsId:e.agentOsId,argv:[...e.argv],userId:e.userId,exp:n+t,nonce:p(16).toString("base64url")};return v(i,S(r))}function N(e){return c("sha256").update(Buffer.from(e.rawPublicKey)).digest("hex").slice(0,16)}export{b as COMMAND_AUTH_PROOF_TTL_SEC,P as PINNED_COMMAND_AUTH_PUBLIC_KEYS,x as argvMatchesProof,N as commandAuthProofKeyFingerprint,y as deriveCommandAuthKeyId,C as isSignedCommandAuthProofShape,D as issueCommandAuthorizationProof,K as resolveCommandAuthPublicKey,S as resolveCommandAuthSigningKey,O as verifyCommandAuthorizationProof};