@kynver-app/runtime 0.1.19 → 0.1.22

package/dist/cli.js

@@ -182,7 +182,7 @@ function resolveConfiguredBaseUrl(argsBaseUrl) {
   return baseUrl ? trimTrailingSlash(String(baseUrl)) : void 0;
 }
 function resolveConfiguredCallbackSecret(argsSecret, agentOsId) {
-  const scoped = argsSecret || loadRunnerToken(agentOsId) || loadRunnerToken(loadUserConfig().agentOsId);
+  const scoped = argsSecret || loadRunnerToken(agentOsId) || (agentOsId ? void 0 : loadRunnerToken(loadUserConfig().agentOsId));
   if (scoped) return String(scoped);
   const globalSecret = process.env.KYNVER_RUNTIME_SECRET || process.env.OPENCLAW_CRON_SECRET;
   if (globalSecret) {
@@ -223,6 +223,23 @@ async function refreshRunnerToken(agentOsId, opts) {
     return null;
   }
 }
+async function refreshRunnerTokenForAuthFailure(rejectedSecret, agentOsId, opts) {
+  const apiKey = loadApiKey();
+  const baseUrl = resolveConfiguredBaseUrl(opts?.baseUrl);
+  if (!apiKey) return { ok: false, reason: "KYNVER_API_KEY is required to refresh a rejected runner token" };
+  if (!agentOsId) return { ok: false, reason: "agentOsId is required to refresh a rejected runner token" };
+  if (!baseUrl) return { ok: false, reason: "KYNVER_API_URL or --base-url is required to refresh a rejected runner token" };
+  try {
+    const token = await fetchRunnerCredential(agentOsId, { baseUrl, apiKey });
+    if (token && token !== rejectedSecret) {
+      saveRunnerToken(agentOsId, token);
+      return { ok: true, token };
+    }
+    return { ok: false, reason: "runner credential refresh returned the rejected token" };
+  } catch (error) {
+    return { ok: false, reason: error.message };
+  }
+}
 async function fetchRunnerCredential(agentOsId, opts) {
   const apiKey = opts?.apiKey || loadApiKey();
   if (!apiKey) throw new Error("API key required \u2014 run `kynver login` first");
@@ -375,6 +392,14 @@ async function postJson(url, secret, body) {
   }
   return { ok: res.ok, status: res.status, response };
 }
+async function postJsonWithCredentialRefresh(url, secret, body, opts) {
+  const first = await postJson(url, secret, body);
+  if (first.ok || first.status !== 401) return first;
+  const refreshed = await refreshRunnerTokenForAuthFailure(secret, opts.agentOsId, { baseUrl: opts.baseUrl });
+  if (!refreshed.ok) return { ...first, authRefreshFailure: refreshed.reason };
+  const retry = await postJson(url, refreshed.token, body);
+  return { ...retry, refreshedAuth: true };
+}
 async function getJson(url, secret) {
   const res = await fetch(url, {
     method: "GET",
@@ -396,12 +421,12 @@ var DEFAULT_CRITICAL_FREE_BYTES = 15 * 1024 * 1024 * 1024;
 var DEFAULT_MAX_USED_PERCENT = 80;
 var DEFAULT_HARD_MAX_USED_PERCENT = 90;
 function observeRunnerDiskGate(input = {}) {
-  const path17 = input.diskPath?.trim() || "/";
+  const path18 = input.diskPath?.trim() || "/";
   const warnBelowBytes = input.diskFreeWarnBytes ?? DEFAULT_WARN_FREE_BYTES;
   const criticalBelowBytes = input.diskFreeCriticalBytes ?? DEFAULT_CRITICAL_FREE_BYTES;
   const maxUsedPercent = input.diskMaxUsedPercent ?? DEFAULT_MAX_USED_PERCENT;
   const hardMaxUsedPercent = input.diskHardMaxUsedPercent ?? DEFAULT_HARD_MAX_USED_PERCENT;
-  const stats = statfsSync(path17);
+  const stats = statfsSync(path18);
   const freeBytes = Number(stats.bavail) * Number(stats.bsize);
   const totalBytes = Number(stats.blocks) * Number(stats.bsize);
   const usedPercent = totalBytes > 0 ? (totalBytes - freeBytes) / totalBytes * 100 : 100;
@@ -421,7 +446,7 @@ function observeRunnerDiskGate(input = {}) {
   }
   return {
     ok,
-    path: path17,
+    path: path18,
     freeBytes,
     totalBytes,
     usedPercent,
@@ -695,22 +720,36 @@ function gitIsAncestor(cwd, ancestor, descendant) {
   if (res.status === 1) return { isAncestor: false, error: null };
   return { isAncestor: null, error: res.error || res.stderr || res.stdout || `git exited ${res.status}` };
 }
-function computeGitAncestry(worktreePath, base = "origin/main") {
+function computeGitAncestry(worktreePath, baseOrOptions = "origin/main") {
+  const options = typeof baseOrOptions === "string" ? { base: baseOrOptions } : baseOrOptions;
+  const baseLabel = options.baseCommit?.trim() || options.base?.trim() || "origin/main";
+  const pinnedBaseCommit = options.baseCommit?.trim() || null;
   if (!worktreePath) {
-    return unknownAncestry(base, "missing worktree path");
+    return unknownAncestry(baseLabel, "missing worktree path");
   }
   const head = gitCapture(worktreePath, ["rev-parse", "HEAD"]);
-  if (head.status !== 0) return unknownAncestry(base, head.error || head.stderr || head.stdout || "failed to resolve HEAD");
-  const baseHead = gitCapture(worktreePath, ["rev-parse", base]);
-  if (baseHead.status !== 0) {
-    return unknownAncestry(base, baseHead.error || baseHead.stderr || baseHead.stdout || `failed to resolve ${base}`, head.stdout.trim());
+  if (head.status !== 0) {
+    return unknownAncestry(baseLabel, head.error || head.stderr || head.stdout || "failed to resolve HEAD");
+  }
+  let baseSha;
+  if (pinnedBaseCommit) {
+    baseSha = pinnedBaseCommit;
+  } else {
+    const baseHead = gitCapture(worktreePath, ["rev-parse", baseLabel]);
+    if (baseHead.status !== 0) {
+      return unknownAncestry(
+        baseLabel,
+        baseHead.error || baseHead.stderr || baseHead.stdout || `failed to resolve ${baseLabel}`,
+        head.stdout.trim()
+      );
+    }
+    baseSha = baseHead.stdout.trim();
   }
   const headSha = head.stdout.trim();
-  const baseSha = baseHead.stdout.trim();
   if (headSha === baseSha) {
     return {
       checked: true,
-      base,
+      base: baseLabel,
       head: headSha,
       baseHead: baseSha,
       baseIsAncestorOfHead: true,
@@ -724,7 +763,7 @@ function computeGitAncestry(worktreePath, base = "origin/main") {
   if (baseIsAncestorOfHead.isAncestor == null || headIsAncestorOfBase.isAncestor == null) {
     return {
       checked: false,
-      base,
+      base: baseLabel,
       head: headSha,
       baseHead: baseSha,
       baseIsAncestorOfHead: baseIsAncestorOfHead.isAncestor,
@@ -736,7 +775,7 @@ function computeGitAncestry(worktreePath, base = "origin/main") {
   const relation = baseIsAncestorOfHead.isAncestor ? "ahead" : headIsAncestorOfBase.isAncestor ? "merged" : "diverged";
   return {
     checked: true,
-    base,
+    base: baseLabel,
     head: headSha,
     baseHead: baseSha,
     baseIsAncestorOfHead: baseIsAncestorOfHead.isAncestor,
@@ -763,12 +802,74 @@ function scrubClaudeEnv(env) {
   return next;
 }
 
+// src/landing-gate.ts
+function trimOrNull(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return trimmed.length ? trimmed : null;
+}
+function hasFinalResult(value) {
+  if (value === void 0 || value === null) return false;
+  if (typeof value === "string") return value.trim().length > 0;
+  if (typeof value === "boolean") return value;
+  if (Array.isArray(value)) return value.length > 0;
+  if (typeof value === "object") return Object.keys(value).length > 0;
+  return true;
+}
+function hasCommittedLandingRef(snapshot) {
+  if (trimOrNull(snapshot.headCommit)) return true;
+  if (trimOrNull(snapshot.prUrl)) return true;
+  if (trimOrNull(snapshot.artifactBundlePath)) return true;
+  if (trimOrNull(snapshot.patchPath)) return true;
+  const ancestry = snapshot.gitAncestry;
+  if (ancestry?.checked && ancestry.headIsAncestorOfBase === false && trimOrNull(ancestry.head)) {
+    return true;
+  }
+  return false;
+}
+function assessWorkerLanding(snapshot) {
+  if (!hasFinalResult(snapshot.finalResult)) return { blocked: false };
+  if (snapshot.changedFiles.length === 0) return { blocked: false };
+  if (!hasCommittedLandingRef(snapshot)) {
+    return {
+      blocked: true,
+      reason: "dirty_worktree_no_pr",
+      detail: `Worktree has ${snapshot.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`
+    };
+  }
+  return {
+    blocked: true,
+    detail: `Worktree has ${snapshot.changedFiles.length} uncommitted change(s); commit or discard before landing`
+  };
+}
+function landingAttentionReason(verdict) {
+  if (!verdict.blocked) return void 0;
+  return verdict.detail ?? verdict.reason ?? "dirty_worktree_no_pr";
+}
+
 // src/status.ts
 var NO_START_MS = 18e4;
 var STALE_MS = 6e5;
 function computeAttention(input) {
   const now = Date.now();
-  if (input.finalResult) return { state: "done", reason: "final result recorded" };
+  if (input.completionBlocker) {
+    return { state: "blocked", reason: input.completionBlocker };
+  }
+  if (input.finalResult) {
+    const landing = assessWorkerLanding({
+      finalResult: input.finalResult,
+      changedFiles: input.changedFiles ?? [],
+      gitAncestry: input.gitAncestry ?? null
+    });
+    if (landing.blocked) {
+      const detail = landingAttentionReason(landing);
+      return {
+        state: "needs_attention",
+        reason: landing.reason ? `landing blocked (${landing.reason}): ${detail}` : `landing blocked: ${detail}`
+      };
+    }
+    return { state: "done", reason: "final result recorded" };
+  }
   if (!input.alive) {
     const classified = classifyExitFailure(input.error);
     if (classified) return { state: "blocked", reason: classified.reason };
@@ -799,7 +900,10 @@ function computeWorkerStatus(worker, options = {}) {
   const stderrBytes = fileSize(worker.stderrPath);
   const heartbeatBytes = fileSize(worker.heartbeatPath);
   const changedFiles = gitStatusShort(worker.worktreePath);
-  const gitAncestry = computeGitAncestry(worker.worktreePath, options.base);
+  const gitAncestry = computeGitAncestry(worker.worktreePath, {
+    base: options.base,
+    baseCommit: options.baseCommit
+  });
   const lastActivityAt = latestIso([
     parsed.lastEventAt,
     heartbeat.lastHeartbeatAt,
@@ -808,6 +912,7 @@ function computeWorkerStatus(worker, options = {}) {
     fileMtime(worker.heartbeatPath)
   ]);
   const error = parsed.error || (!alive && !parsed.finalResult ? tailFile(worker.stderrPath, 10).trim() || void 0 : void 0);
+  const completionBlocker = typeof worker.completionBlocker === "string" && worker.completionBlocker.trim() ? worker.completionBlocker.trim() : null;
   const attention = computeAttention({
     alive,
     finalResult: parsed.finalResult,
@@ -817,14 +922,18 @@ function computeWorkerStatus(worker, options = {}) {
     lastActivityAt,
     heartbeatBlocker: heartbeat.heartbeatBlocker,
     startedAt: worker.startedAt,
-    error
+    error,
+    changedFiles,
+    gitAncestry,
+    completionBlocker
   });
+  const workerStatusLabel = completionBlocker || attention.state === "blocked" ? "blocked" : attention.state === "done" ? "done" : parsed.finalResult ? "exited" : alive ? "running" : "exited";
   return {
     runId: worker.runId,
     worker: worker.name,
     pid: worker.pid,
     alive,
-    status: parsed.finalResult ? "done" : alive ? "running" : "exited",
+    status: workerStatusLabel,
     attention,
     branch: worker.branch,
     worktreePath: worker.worktreePath,
@@ -853,6 +962,10 @@ function isFinishedWorkerStatus(status) {
   if (status.status === "exited" || status.status === "done") return true;
   return false;
 }
+function isLandingBlockedWorkerStatus(status) {
+  if (!status.finalResult) return false;
+  return status.attention.state === "needs_attention" || status.attention.state === "blocked";
+}
 function deriveRunStatus(fallback, workers) {
   if (workers.length === 0) return fallback;
   if (workers.some((w) => w.attention === "needs_attention" || w.attention === "stale" || w.attention === "blocked")) {
@@ -903,6 +1016,10 @@ function readAvailableMemBytes() {
   }
   return os.freemem();
 }
+function isActiveHarnessWorker(worker) {
+  const status = computeWorkerStatus(worker);
+  return status.alive && !status.finalResult && status.attention.state !== "done";
+}
 function countActiveWorkersForRun(run) {
   let active = 0;
   for (const name of Object.keys(run.workers || {})) {
@@ -910,11 +1027,8 @@ function countActiveWorkersForRun(run) {
       path5.join(runDirectory(run.id), "workers", safeSlug(name), "worker.json"),
       void 0
     );
-    if (!worker) continue;
-    const status = computeWorkerStatus(worker);
-    if (status.alive && !status.finalResult && status.attention.state !== "done") {
-      active++;
-    }
+    if (!worker || !isActiveHarnessWorker(worker)) continue;
+    active++;
   }
   return active;
 }
@@ -939,7 +1053,7 @@ function observeRunnerResourceGate(input) {
   const maxConcurrentWorkers = Math.max(0, Math.min(targetCap, capacityFromTotal));
   const slotsByCapacity = Math.max(0, maxConcurrentWorkers - activeWorkers);
   const slotsByFreeMem = capacityFromFree;
-  const slotsAvailable = Math.min(slotsByCapacity, slotsByFreeMem);
+  let slotsAvailable = Math.min(slotsByCapacity, slotsByFreeMem);
   let reason = null;
   if (slotsAvailable <= 0) {
     if (activeWorkers >= maxConcurrentWorkers) {
@@ -966,37 +1080,57 @@ function observeRunnerResourceGate(input) {
   };
 }
 
-// src/supervisor.ts
-import { existsSync as existsSync10, mkdirSync as mkdirSync3 } from "node:fs";
-import path10 from "node:path";
-
-// src/prompt.ts
-function buildPrompt(input) {
-  const ownership = input.ownedPaths.length ? `Owned paths: ${input.ownedPaths.join(", ")}. Do not edit outside these paths without stopping and reporting why.` : "Owned paths: unrestricted for this worker, but keep edits tightly scoped.";
-  const progressLines = [
-    "Structured plan progress (required when planId is set):",
-    "- Harness checkpoints only: `kynver plan progress --plan <planId> --row <rowKey> --role implementer --status running|partial|blocked` (the by-id harness route rejects `done` and confirm events).",
-    "- When a slice is finished, emit `partial` with evidence (`--evidence pr:<url>`, `--evidence path:<file>`, or `--evidence command:<cmd>`). Do not propose or confirm row `done` from the worker CLI.",
-    "- Propose/confirm row `done` is MCP/session only: chat agents use `agent_os_plan_progress_event_append` on the slug route (implementer proposes with `proposed: true`; report_reviewer/deep_reviewer confirm with `proposed: false`).",
-    "- When blocked on operator/Ghost/runtime review, create a linked review task (MCP `agent_os_plan_review_task_create` or API) and pass `--review-task <taskId>`.",
-    "- Before the completion report: mark completion-report rows partial with evidence; do not skip report review.",
-    "- After implementation: wait for report_reviewer then deep_reviewer confirmation (via MCP/session agents) before follow-up rows close.",
-    input.planId ? `Active planId: ${input.planId}${input.taskId ? ` \xB7 taskId: ${input.taskId}` : ""}` : "No planId on this worker \u2014 still emit progress when you touch plan-scoped work."
-  ];
-  return [
-    "You are running under the Kynver AgentOS runtime.",
-    "Immediately state your plan before editing.",
-    ownership,
-    `Worktree: ${input.worktreePath}`,
-    `Progress heartbeat file: ${input.heartbeatPath}`,
-    "After each major step, append one JSON line to the heartbeat file with fields: ts, phase, summary, changedFiles, blocker.",
-    "Final response must include files changed, verification commands, and unresolved risks.",
-    "",
-    ...progressLines,
-    "",
-    "Task:",
-    input.task
-  ].join("\n");
+// src/model-routing-task-enrich.ts
+function taskString(task, key) {
+  const v = task[key];
+  return typeof v === "string" ? v.trim() : "";
+}
+function normalize(value) {
+  return value.toLowerCase();
+}
+var PERSONA_DEFAULT_LANE = {
+  dalton: "implementer",
+  lorentz: "report_reviewer"
+};
+function inferRoleLaneFromTask(task) {
+  const existing = taskString(task, "roleLane");
+  if (existing) return existing;
+  const ref = normalize(taskString(task, "executorRef"));
+  const title = normalize(taskString(task, "title"));
+  const persona = normalize(taskString(task, "personaSlug"));
+  const combined = `${ref} ${title}`;
+  if (combined.includes("deep review") || combined.includes("security review") || ref.includes("deep-reviewer")) {
+    return "deep_reviewer";
+  }
+  if (combined.includes("plan author") || combined.includes("plan-author") || title.includes("strategy plan")) {
+    return "plan_author";
+  }
+  if (combined.includes("plan review") || ref.includes("plan-reviewer")) {
+    return "plan_reviewer";
+  }
+  if (combined.includes("report review") || combined.includes("completion report")) {
+    return "report_reviewer";
+  }
+  if (combined.includes("repair") || title.startsWith("fix ") || ref.includes("repair")) {
+    return "repair_implementer";
+  }
+  if (ref.includes("cursor") || ref.includes("codex") || ref.includes("composer") || title.includes("implement") || title.includes("land:")) {
+    return "implementer";
+  }
+  if (persona && PERSONA_DEFAULT_LANE[persona]) {
+    const base = PERSONA_DEFAULT_LANE[persona];
+    if (persona === "lorentz" && (combined.includes("deep") || combined.includes("security"))) {
+      return "deep_reviewer";
+    }
+    return base;
+  }
+  if (combined.includes("review")) return "report_reviewer";
+  return void 0;
+}
+function enrichTaskForModelRouting(task) {
+  const roleLane = inferRoleLaneFromTask(task);
+  if (!roleLane) return task;
+  return { ...task, roleLane };
 }
 
 // src/providers/claude.ts
@@ -1057,7 +1191,7 @@ function preflightCursorModel(model, defaultModel) {
 }
 
 // src/providers/claude.ts
-var CLAUDE_DEFAULT_MODEL = "claude-opus-4-7";
+var CLAUDE_DEFAULT_MODEL = "claude-sonnet-4-6";
 var claudeProvider = {
   name: "claude",
   defaultModel: CLAUDE_DEFAULT_MODEL,
@@ -1103,6 +1237,172 @@ var claudeProvider = {
   }
 };
 
+// src/model-routing.ts
+var GLOBAL_DEFAULT_MODEL = "claude-sonnet-4-6";
+function taskString2(task, key) {
+  const v = task[key];
+  return typeof v === "string" ? v.trim() : "";
+}
+function normalizeRef(ref) {
+  return ref.toLowerCase();
+}
+function resolveGlobalDefaultModel(config = loadUserConfig()) {
+  const fromConfig = config.defaultModel?.trim();
+  if (fromConfig) return fromConfig;
+  const fromEnv = process.env.KYNVER_DEFAULT_MODEL?.trim();
+  if (fromEnv) return fromEnv;
+  return GLOBAL_DEFAULT_MODEL;
+}
+function inferProviderFromModel(model) {
+  const m = (model ?? "").toLowerCase();
+  if (!m) return "claude";
+  if (m.includes("composer") || m.includes("cursor") || m.includes("codex") || m.startsWith("gpt-") || m.startsWith("gpt5")) {
+    return "cursor";
+  }
+  return "claude";
+}
+function isOpusLane(ref, title) {
+  if (ref.includes("deep") && ref.includes("review")) return true;
+  if (ref.includes("security")) return true;
+  if (ref.includes("plan_author") || ref.includes("plan-author")) return true;
+  if (title.includes("deep review") || title.includes("security review")) return true;
+  if (ref.includes("plan") && !ref.includes("review") && (ref.includes("author") || ref.includes("strategy"))) {
+    return true;
+  }
+  return false;
+}
+function inferModelRoutingFromTask(task) {
+  const ref = normalizeRef(taskString2(task, "executorRef"));
+  const title = taskString2(task, "title").toLowerCase();
+  const priority = taskString2(task, "priority") || "normal";
+  const roleLane = normalizeRef(taskString2(task, "roleLane"));
+  if (ref.includes("cursor") || ref.includes("codex") || ref.includes("composer") || ref.includes("copilot") || roleLane === "implementer" || roleLane === "repair_implementer") {
+    return { provider: "cursor", rule: "lane:implementation" };
+  }
+  if (ref.includes("landing") || title.startsWith("land:") || title.includes(" merge")) {
+    return {
+      model: "claude-haiku-4-5-20251001",
+      provider: "claude",
+      rule: "lane:landing"
+    };
+  }
+  if (ref.includes("review") || title.startsWith("review ") || roleLane.includes("review")) {
+    if (isOpusLane(ref, title) || roleLane === "deep_reviewer") {
+      return { model: "claude-opus-4-7", provider: "claude", rule: "lane:deep_review" };
+    }
+    return { model: "claude-sonnet-4-6", provider: "claude", rule: "lane:review" };
+  }
+  if (isOpusLane(ref, title) || roleLane === "plan_author") {
+    return { model: "claude-opus-4-7", provider: "claude", rule: "lane:planning" };
+  }
+  if (priority === "critical") {
+    return { model: "claude-opus-4-7", provider: "claude", rule: "priority:critical" };
+  }
+  if (priority === "high") {
+    return { model: "claude-sonnet-4-6", provider: "claude", rule: "priority:high" };
+  }
+  if (priority === "low") {
+    return {
+      model: "claude-haiku-4-5-20251001",
+      provider: "claude",
+      rule: "priority:low"
+    };
+  }
+  return {
+    model: resolveGlobalDefaultModel(),
+    provider: "claude",
+    rule: "default:sonnet"
+  };
+}
+function resolveWorkerLaunch(input) {
+  if (input.explicitModel?.trim()) {
+    const model2 = input.explicitModel.trim();
+    return {
+      model: model2,
+      provider: input.explicitProvider?.trim() || inferProviderFromModel(model2),
+      rule: "explicit:cli",
+      requestedModel: model2
+    };
+  }
+  if (input.task && Object.keys(input.task).length > 0) {
+    const inferred = inferModelRoutingFromTask(input.task);
+    return {
+      ...inferred,
+      requestedModel: inferred.model
+    };
+  }
+  const model = resolveGlobalDefaultModel();
+  return {
+    model,
+    provider: input.explicitProvider?.trim() || inferProviderFromModel(model),
+    rule: "default:global",
+    requestedModel: model
+  };
+}
+function resolveModelFallback(startedModel, launchModel, providerDefault) {
+  return startedModel || launchModel || providerDefault || resolveGlobalDefaultModel() || CLAUDE_DEFAULT_MODEL;
+}
+
+// src/retry-limits.ts
+function positiveInt2(value, fallback) {
+  const n = Number(value);
+  if (!Number.isFinite(n) || n <= 0) return fallback;
+  return Math.floor(n);
+}
+function readHarnessRetryLimits() {
+  return {
+    maxTaskAttempts: positiveInt2(process.env.KYNVER_MAX_TASK_ATTEMPTS, 3),
+    dispatchCooldownMs: positiveInt2(process.env.KYNVER_DISPATCH_COOLDOWN_MS, 5e3)
+  };
+}
+
+// src/supervisor.ts
+import { existsSync as existsSync10, mkdirSync as mkdirSync3 } from "node:fs";
+import path10 from "node:path";
+
+// src/prompt.ts
+function buildPrompt(input) {
+  const ownership = input.ownedPaths.length ? `Owned paths: ${input.ownedPaths.join(", ")}. Do not edit outside these paths without stopping and reporting why.` : "Owned paths: unrestricted for this worker, but keep edits tightly scoped.";
+  const compact = Boolean(input.model?.toLowerCase().includes("haiku"));
+  const progressLines = compact ? [
+    "Plan progress: when planId is set, use `kynver plan progress` for running|partial|blocked only; row `done` is MCP/session only.",
+    input.planId ? `Active planId: ${input.planId}` : "No planId on this worker."
+  ] : [
+    "Structured plan progress (required when planId is set):",
+    "- Harness checkpoints only: `kynver plan progress --plan <planId> --row <rowKey> --role implementer --status running|partial|blocked` (the by-id harness route rejects `done` and confirm events).",
+    "- When a slice is finished, emit `partial` with evidence (`--evidence pr:<url>`, `--evidence path:<file>`, or `--evidence command:<cmd>`). Do not propose or confirm row `done` from the worker CLI.",
+    "- Propose/confirm row `done` is MCP/session only: chat agents use `agent_os_plan_progress_event_append` on the slug route (implementer proposes with `proposed: true`; report_reviewer/deep_reviewer confirm with `proposed: false`).",
+    "- When blocked on operator/Ghost/runtime review, create a linked review task (MCP `agent_os_plan_review_task_create` or API) and pass `--review-task <taskId>`.",
+    "- Before the completion report: mark completion-report rows partial with evidence; do not skip report review.",
+    "- After implementation: wait for report_reviewer then deep_reviewer confirmation (via MCP/session agents) before follow-up rows close.",
+    input.planId ? `Active planId: ${input.planId}${input.taskId ? ` \xB7 taskId: ${input.taskId}` : ""}` : "No planId on this worker \u2014 still emit progress when you touch plan-scoped work."
+  ];
+  const planArtifactLines = compact ? [
+    "Plan artifacts: when authoring/revising docs/superpowers/plans/, open a GitHub PR early and iterate from that PR branch; do not leave the canonical plan only in the harness worktree."
+  ] : [
+    "PR-first plan artifacts (when authoring or revising docs/superpowers/plans/):",
+    "- Before substantial plan drafting: create a feature branch, open a GitHub PR (draft OK), commit and push the plan file \u2014 do not leave the canonical plan only in this harness worktree.",
+    "- Iterate review on that PR branch; link prUrl on the AgentOS task and plan progress evidence (`--evidence pr:<url>`).",
+    "- See docs/superpowers/plans/2026-05-25-pr-first-plan-artifact-preservation.md for the full checklist."
+  ];
+  return [
+    "You are running under the Kynver AgentOS runtime.",
+    "Immediately state your plan before editing.",
+    ownership,
+    `Worktree: ${input.worktreePath}`,
+    `Progress heartbeat file: ${input.heartbeatPath}`,
+    "After each major step, append one JSON line to the heartbeat file with fields: ts, phase, summary, changedFiles, blocker.",
+    "Final response must include files changed, verification commands, and unresolved risks.",
+    "",
+    ...progressLines,
+    "",
+    ...planArtifactLines,
+    "",
+    "Task:",
+    input.task
+  ].join("\n");
+}
+
 // src/providers/cursor.ts
 import { closeSync as closeSync2, existsSync as existsSync8, openSync as openSync2 } from "node:fs";
 import { spawn as spawn2 } from "node:child_process";
@@ -1306,9 +1606,13 @@ function persistCompletionBlocker(worker, reason) {
   else delete worker.completionBlocker;
   saveWorker(worker.runId, worker);
 }
+function workerStatusOptions(run) {
+  return run ? { base: run.base, baseCommit: run.baseCommit } : {};
+}
 async function tryCompleteWorker(args) {
   const worker = loadWorker(String(args.run), String(args.name));
-  const status = computeWorkerStatus(worker);
+  const run = loadRun(worker.runId);
+  const status = computeWorkerStatus(worker, workerStatusOptions(run));
   const agentOsId = (args.agentOsId ? String(args.agentOsId) : worker.agentOsId) || "";
   const taskId = (args.taskId ? String(args.taskId) : worker.taskId) || null;
   if (!agentOsId) {
@@ -1352,7 +1656,8 @@ async function tryCompleteWorker(args) {
 async function completeWorker(args) {
   try {
     const worker = loadWorker(String(args.run), String(args.name));
-    const status = computeWorkerStatus(worker);
+    const run = loadRun(worker.runId);
+    const status = computeWorkerStatus(worker, workerStatusOptions(run));
     const agentOsId = (args.agentOsId ? String(args.agentOsId) : worker.agentOsId) || "";
     const taskId = (args.taskId ? String(args.taskId) : worker.taskId) || null;
     if (!agentOsId) {
@@ -1399,12 +1704,13 @@ async function completeWorker(args) {
 }
 function workerStatus(args) {
   const worker = loadWorker(String(args.run), String(args.name));
-  const status = computeWorkerStatus(worker);
+  const run = loadRun(worker.runId);
+  const status = computeWorkerStatus(worker, workerStatusOptions(run));
   writeJson(path8.join(worker.workerDir, "last-status.json"), status);
   console.log(JSON.stringify(status, null, 2));
 }
-function runStatus(args) {
-  const run = loadRun(String(args.run));
+function buildRunBoard(runId) {
+  const run = loadRun(runId);
   const names = Object.keys(run.workers || {});
   const workers = names.map((name) => {
     const worker = readJson(
@@ -1414,14 +1720,21 @@ function runStatus(args) {
     if (!worker) {
       return { worker: name, status: "missing", attention: "needs_attention", attentionReason: "worker.json not found" };
     }
-    const status = computeWorkerStatus(worker, { base: run.base });
+    const status = computeWorkerStatus(worker, {
+      base: run.base,
+      baseCommit: run.baseCommit
+    });
+    const headCommit = status.gitAncestry.headIsAncestorOfBase === false && status.gitAncestry.head ? status.gitAncestry.head : void 0;
     const rawBlocker = worker.completionBlocker;
     const completionBlocker = typeof rawBlocker === "string" && rawBlocker ? rawBlocker : void 0;
+    const boardStatus = completionBlocker ? "blocked" : status.status;
+    const boardAttention = completionBlocker ? "blocked" : status.attention.state;
     return {
       worker: status.worker,
-      status: completionBlocker ? "blocked" : status.status,
-      attention: completionBlocker ? "blocked" : status.attention.state,
+      status: boardStatus,
+      attention: boardAttention,
       attentionReason: completionBlocker ?? status.attention.reason,
+      landingBlocked: status.finalResult ? boardAttention === "needs_attention" || boardAttention === "blocked" : false,
       pid: status.pid,
       alive: status.alive,
       currentTool: status.currentTool,
@@ -1430,7 +1743,14 @@ function runStatus(args) {
       lastHeartbeatSummary: status.lastHeartbeatSummary,
       heartbeatBlocker: status.heartbeatBlocker,
       changedFileCount: status.changedFiles.length,
+      changedFiles: status.changedFiles,
       branch: status.branch,
+      model: typeof worker.model === "string" ? worker.model : void 0,
+      routingRule: typeof worker.routingRule === "string" ? worker.routingRule : void 0,
+      requestedModel: typeof worker.requestedModel === "string" ? worker.requestedModel : void 0,
+      headCommit,
+      gitAncestry: status.gitAncestry,
+      finalResult: status.finalResult,
       ancestry: status.gitAncestry.relation,
       ancestryChecked: status.gitAncestry.checked
     };
@@ -1445,6 +1765,34 @@ function runStatus(args) {
     workers
   };
   writeJson(path8.join(runDirectory(run.id), "last-board.json"), board);
+  return board;
+}
+async function publishHarnessBoardSnapshot(args, source) {
+  const runId = String(args.run || "");
+  const agentOsId = String(args.agentOsId || "");
+  if (!runId || !agentOsId) return null;
+  const board = buildRunBoard(runId);
+  const base = resolveBaseUrl(args.baseUrl ? String(args.baseUrl) : void 0);
+  const secret = await resolveCallbackSecretWithMint(args.secret ? String(args.secret) : void 0, agentOsId, {
+    baseUrl: base
+  });
+  const url = `${base}/api/agent-os/by-id/${encodeURIComponent(agentOsId)}/harness/snapshot`;
+  const res = await postJsonWithCredentialRefresh(
+    url,
+    secret,
+    { agentOsId, runId, source, snapshot: board },
+    { agentOsId, baseUrl: base }
+  );
+  return {
+    ok: res.ok,
+    httpStatus: res.status,
+    response: res.response,
+    authRefreshed: res.refreshedAuth,
+    authRefreshFailure: res.authRefreshFailure
+  };
+}
+function runStatus(args) {
+  const board = buildRunBoard(String(args.run));
   console.log(JSON.stringify(board, null, 2));
 }
 function tailWorker(args) {
@@ -1646,8 +1994,17 @@ function spawnWorkerProcess(run, opts) {
   const name = safeSlug(rawName);
   if (run.workers?.[name]) throw new Error(`worker already exists in run ${run.id}: ${name}`);
   if (!opts.task) throw new Error(`missing task text for worker ${name}`);
-  const provider = resolveWorkerProvider(opts.provider);
-  let launchModel = opts.model;
+  const routing = opts.routingRule || opts.requestedModel ? {
+    provider: opts.provider || "claude",
+    model: opts.model,
+    rule: opts.routingRule || "explicit:spawn",
+    requestedModel: opts.requestedModel ?? opts.model
+  } : resolveWorkerLaunch({
+    explicitModel: opts.model,
+    explicitProvider: opts.provider
+  });
+  const provider = resolveWorkerProvider(routing.provider);
+  let launchModel = routing.model;
   if (provider.preflightModel) {
     const preflight = provider.preflightModel(opts.model);
     if (!preflight.ok) {
@@ -1675,7 +2032,10 @@ function spawnWorkerProcess(run, opts) {
     task: opts.task,
     ownedPaths: opts.ownedPaths || [],
     worktreePath,
-    heartbeatPath
+    heartbeatPath,
+    planId: opts.planId,
+    taskId: opts.taskId,
+    model: launchModel
   });
   let started;
   try {
@@ -1697,7 +2057,7 @@ function spawnWorkerProcess(run, opts) {
     git(run.repo, ["branch", "-D", branch], { allowFailure: true });
     throw error;
   }
-  const model = started.model || launchModel || provider.defaultModel || "claude-opus-4-7";
+  const model = resolveModelFallback(started.model, launchModel, provider.defaultModel);
   const worker = {
     name,
     runId: run.id,
@@ -1716,6 +2076,8 @@ function spawnWorkerProcess(run, opts) {
     ...opts.planId ? { planId: String(opts.planId) } : {},
     ...opts.leaseOwner ? { leaseOwner: String(opts.leaseOwner) } : {},
     ...opts.dispatched ? { dispatched: true } : {},
+    routingRule: routing.rule,
+    ...routing.requestedModel ? { requestedModel: routing.requestedModel } : {},
     startedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
   saveWorker(run.id, worker);
@@ -1723,14 +2085,23 @@ function spawnWorkerProcess(run, opts) {
   run.status = "running";
   saveRun(run);
   if (worker.agentOsId && worker.taskId) {
+    let sidecarSpawned;
     try {
-      spawnCompletionSidecar({
+      sidecarSpawned = spawnCompletionSidecar({
         runId: run.id,
         workerName: name,
         workerDir,
         agentOsId: worker.agentOsId
       });
-    } catch {
+    } catch (error) {
+      const reason = `completion sidecar failed to spawn: ${error.message}`;
+      worker.completionBlocker = reason;
+      saveWorker(run.id, worker);
+    }
+    if (!sidecarSpawned) {
+      const reason = "completion sidecar failed to spawn (CLI not found or spawn error)";
+      worker.completionBlocker = reason;
+      saveWorker(run.id, worker);
     }
   }
   return worker;
@@ -1814,9 +2185,10 @@ async function dispatchRun(args) {
       runnerDiskGate,
       runnerResourceGate,
       ...args.lane ? { lane: String(args.lane) } : {},
+      executor: args.executor ? String(args.executor) : "harness",
       ...args.diskPath ? { diskPath: String(args.diskPath) } : {}
     };
-    const dispatch = await postJson(dispatchUrl, secret, body);
+    const dispatch = await postJsonWithCredentialRefresh(dispatchUrl, secret, body, { agentOsId, baseUrl: base });
     const responseBody = dispatch.response;
     if (!dispatch.ok || !responseBody?.result) {
       const failure = {
@@ -1824,7 +2196,9 @@ async function dispatchRun(args) {
         agentOsId,
         action: "dispatch",
         httpStatus: dispatch.status,
-        response: dispatch.response
+        response: dispatch.response,
+        authRefreshed: dispatch.refreshedAuth === true,
+        authRefreshFailure: dispatch.authRefreshFailure
       };
       if (pipeline) return { ok: false, ...failure };
       console.log(JSON.stringify(failure, null, 2));
@@ -1865,17 +2239,34 @@ async function dispatchRun(args) {
       console.log(JSON.stringify(summary2, null, 2));
       return;
     }
+    const retryLimits = readHarnessRetryLimits();
     const outcomes = [];
     for (const decision of result.started) {
       const task = decision.task;
+      const attempt = Number(task.attempt) || 1;
+      if (attempt > retryLimits.maxTaskAttempts) {
+        outcomes.push({
+          taskId: task.id,
+          started: false,
+          error: `task attempt ${attempt} exceeds KYNVER_MAX_TASK_ATTEMPTS (${retryLimits.maxTaskAttempts})`
+        });
+        continue;
+      }
       const name = safeSlug(`t-${task.id}-a${task.attempt}`);
+      const routing = resolveWorkerLaunch({
+        explicitModel: args.model ? String(args.model) : void 0,
+        task: enrichTaskForModelRouting(task)
+      });
       try {
         const planId = task.planId ? String(task.planId) : void 0;
         const worker = spawnWorkerProcess(run, {
           name,
           task: buildDispatchTaskText(task, agentOsId),
           ownedPaths: args.owned ? String(args.owned).split(",").map((s) => s.trim()).filter(Boolean) : [],
-          model: args.model ? String(args.model) : void 0,
+          model: routing.model,
+          provider: routing.provider,
+          routingRule: routing.rule,
+          requestedModel: routing.requestedModel,
           agentOsId,
           taskId: String(task.id),
           planId,
@@ -1887,13 +2278,16 @@ async function dispatchRun(args) {
           started: true,
           worker: worker.name,
           pid: worker.pid,
-          branch: worker.branch
+          branch: worker.branch,
+          model: worker.model,
+          provider: routing.provider,
+          routingRule: routing.rule
         });
       } catch (error) {
         const releaseUrl = `${base}/api/agent-os/by-id/${encodeURIComponent(agentOsId)}/tasks/${encodeURIComponent(String(task.id))}/release`;
         let release;
         try {
-          release = await postJson(releaseUrl, secret, { agentOsId, leaseOwner });
+          release = await postJsonWithCredentialRefresh(releaseUrl, secret, { agentOsId, leaseOwner }, { agentOsId, baseUrl: base });
         } catch (relErr) {
           release = { ok: false, error: relErr.message };
         }
@@ -1942,6 +2336,7 @@ async function sweepRun(args) {
     const base = resolveBaseUrl(args.baseUrl ? String(args.baseUrl) : void 0);
     const secret = await resolveCallbackSecretWithMint(args.secret ? String(args.secret) : void 0, agentOsId, { baseUrl: base });
     const leaseOwner = `openclaw-harness:${run.id}`;
+    const snapshotPublished = await publishHarnessBoardSnapshot({ run: run.id, agentOsId, ...args }, "run_sweep");
     const releasedLocalOrphans = [];
     for (const name of Object.keys(run.workers || {})) {
       const worker = readJson(
@@ -1951,11 +2346,11 @@ async function sweepRun(args) {
       if (!worker || !worker.dispatched || !worker.taskId) continue;
       const status = computeWorkerStatus(worker);
       if (status.alive) continue;
-      if (status.finalResult) continue;
+      if (status.finalResult || worker.completionReportedAt) continue;
       const releaseUrl = `${base}/api/agent-os/by-id/${encodeURIComponent(agentOsId)}/tasks/${encodeURIComponent(String(worker.taskId))}/release`;
       let release;
       try {
-        release = await postJson(releaseUrl, secret, { agentOsId, leaseOwner });
+        release = await postJsonWithCredentialRefresh(releaseUrl, secret, { agentOsId, leaseOwner }, { agentOsId, baseUrl: base });
       } catch (relErr) {
         release = { ok: false, error: relErr.message };
       }
@@ -1970,14 +2365,14 @@ async function sweepRun(args) {
     const reapUrl = `${base}/api/agent-os/by-id/${encodeURIComponent(agentOsId)}/tasks/reap`;
     let reap;
     try {
-      reap = await postJson(reapUrl, secret, {
+      reap = await postJsonWithCredentialRefresh(reapUrl, secret, {
         agentOsId,
         ...Number(args.graceMs) >= 0 && args.graceMs !== void 0 && args.graceMs !== true ? { graceMs: Math.floor(Number(args.graceMs)) } : {}
-      });
+      }, { agentOsId, baseUrl: base });
     } catch (reapErr) {
       reap = { ok: false, error: reapErr.message };
     }
-    const summary = { runId: run.id, agentOsId, leaseOwner, releasedLocalOrphans, reap: reap.response ?? reap };
+    const summary = { runId: run.id, agentOsId, leaseOwner, snapshotPublished, releasedLocalOrphans, reap: reap.response ?? reap };
     if (pipeline) return { ok: true, ...summary };
     console.log(JSON.stringify(summary, null, 2));
   } catch (error) {
@@ -2045,7 +2440,10 @@ function failExists(message) {
 }
 
 // src/pipeline-tick.ts
-import path16 from "node:path";
+import path17 from "node:path";
+
+// src/stale-reconcile.ts
+import path15 from "node:path";
 
 // src/finalize.ts
 import path14 from "node:path";
@@ -2056,13 +2454,17 @@ function terminalStatusFor(run) {
   let anyAlive = false;
   let anyResult = false;
   let anyCompletionBlocked = false;
+  let anyLandingBlocked = false;
   for (const name of names) {
     const worker = readJson(
       path14.join(runDirectory(run.id), "workers", safeSlug(name), "worker.json"),
       void 0
     );
     if (!worker) continue;
-    const status = computeWorkerStatus(worker);
+    const status = computeWorkerStatus(worker, {
+      base: run.base,
+      baseCommit: run.baseCommit
+    });
     if (status.alive && !status.finalResult) {
       anyAlive = true;
       break;
@@ -2070,10 +2472,14 @@ function terminalStatusFor(run) {
     if (typeof worker.completionBlocker === "string" && worker.completionBlocker) {
       anyCompletionBlocked = true;
     }
-    if (status.finalResult) anyResult = true;
+    if (isLandingBlockedWorkerStatus(status)) {
+      anyLandingBlocked = true;
+    }
+    if (status.finalResult && status.attention.state === "done") anyResult = true;
   }
   if (anyAlive) return null;
   if (anyCompletionBlocked) return null;
+  if (anyLandingBlocked) return null;
   return anyResult ? "completed" : "failed";
 }
 function finalizeStaleRuns() {
@@ -2090,20 +2496,94 @@ function finalizeStaleRuns() {
   return finalized;
 }
 
+// src/stale-reconcile.ts
+var STALE_RECONCILE_HEARTBEAT_MS = 15 * 60 * 1e3;
+function staleReconcileDisabled() {
+  return process.env.KYNVER_NO_STALE_CLEANUP === "1";
+}
+function reconcileStaleWorkers() {
+  if (staleReconcileDisabled()) {
+    return { workers: [], finalizedRuns: finalizeStaleRuns() };
+  }
+  const outcomes = [];
+  const now = Date.now();
+  for (const run of listRunRecords()) {
+    for (const name of Object.keys(run.workers || {})) {
+      const workerPath = path15.join(runDirectory(run.id), "workers", safeSlug(name), "worker.json");
+      const worker = readJson(workerPath, void 0);
+      if (!worker || worker.status !== "running") {
+        outcomes.push({
+          runId: run.id,
+          worker: name,
+          action: "skipped",
+          reason: worker ? `worker status is ${worker.status}` : "worker.json missing"
+        });
+        continue;
+      }
+      const status = computeWorkerStatus(worker, { base: run.base, baseCommit: run.baseCommit });
+      if (status.finalResult) {
+        outcomes.push({ runId: run.id, worker: name, action: "skipped", reason: "final result present" });
+        continue;
+      }
+      if (!status.alive) {
+        const nextStatus = status.attention.state === "blocked" ? "blocked" : status.status === "done" ? "done" : "exited";
+        worker.status = nextStatus;
+        worker.reconciledAt = (/* @__PURE__ */ new Date()).toISOString();
+        worker.reconcileReason = status.attention.reason;
+        saveWorker(run.id, worker);
+        outcomes.push({
+          runId: run.id,
+          worker: name,
+          action: "marked_exited",
+          reason: status.attention.reason
+        });
+        continue;
+      }
+      if (status.attention.state === "stale" && worker.pid && isPidAlive(worker.pid)) {
+        const hbMs = status.lastHeartbeatAt ? Date.parse(status.lastHeartbeatAt) : NaN;
+        const actMs = status.lastActivityAt ? Date.parse(status.lastActivityAt) : NaN;
+        const hbStale = !Number.isFinite(hbMs) || now - hbMs > STALE_RECONCILE_HEARTBEAT_MS;
+        const actStale = Number.isFinite(actMs) && now - actMs > STALE_MS;
+        if (hbStale && actStale) {
+          killWorkerProcess(worker.pid, "SIGTERM");
+          worker.status = "exited";
+          worker.reconciledAt = (/* @__PURE__ */ new Date()).toISOString();
+          worker.reconcileReason = `reconciled stale worker: ${status.attention.reason}`;
+          saveWorker(run.id, worker);
+          outcomes.push({
+            runId: run.id,
+            worker: name,
+            action: "killed_stale",
+            reason: status.attention.reason
+          });
+          continue;
+        }
+      }
+      outcomes.push({
+        runId: run.id,
+        worker: name,
+        action: "skipped",
+        reason: status.attention.reason
+      });
+    }
+  }
+  return { workers: outcomes, finalizedRuns: finalizeStaleRuns() };
+}
+
 // src/plan-progress-daemon-sync.ts
-import path15 from "node:path";
+import path16 from "node:path";
 
 // src/plan-progress-sync.ts
 async function syncPlanProgress(args) {
   const base = resolveBaseUrl(args.baseUrl);
   const secret = await resolveCallbackSecretWithMint(args.secret, args.agentOsId, { baseUrl: base });
   const url = `${base}/api/agent-os/by-id/${encodeURIComponent(args.agentOsId)}/tasks/${encodeURIComponent(args.taskId)}/plan-progress-sync`;
-  const res = await postJson(url, secret, {
+  const res = await postJsonWithCredentialRefresh(url, secret, {
     phase: args.phase,
     taskId: args.taskId,
     blocker: args.blocker,
     artifact: args.artifact
-  });
+  }, { agentOsId: args.agentOsId, baseUrl: base });
   return { ok: res.ok, status: res.status, response: res.response };
 }
 
@@ -2115,7 +2595,7 @@ async function syncActiveWorkerPlanProgress(runId, args) {
   const outcomes = [];
   for (const name of Object.keys(run.workers || {})) {
     const worker = readJson(
-      path15.join(runDirectory(run.id), "workers", safeSlug(name), "worker.json"),
+      path16.join(runDirectory(run.id), "workers", safeSlug(name), "worker.json"),
       void 0
     );
     if (!worker?.dispatched || !worker.taskId) continue;
@@ -2169,7 +2649,7 @@ async function completeFinishedWorkers(runId, args) {
   const outcomes = [];
   for (const name of Object.keys(run.workers || {})) {
     const worker = readJson(
-      path16.join(runDirectory(run.id), "workers", safeSlug(name), "worker.json"),
+      path17.join(runDirectory(run.id), "workers", safeSlug(name), "worker.json"),
       void 0
     );
     if (!worker?.taskId) continue;
@@ -2194,6 +2674,7 @@ async function postOperatorTick(agentOsId, runId, resourceGate, args) {
     agentOsId,
     runId,
     ingestHarness: true,
+    harnessBoardSnapshot: buildRunBoard(runId),
     resourceGate
   });
   return { ok: res.ok, httpStatus: res.status, response: res.response };
@@ -2204,7 +2685,7 @@ async function runPipelineTick(args) {
   const execute = args.execute !== false && args.execute !== "false";
   runStatus({ run: runId });
   const completedWorkers = await completeFinishedWorkers(runId, args);
-  const finalizedStaleRuns = finalizeStaleRuns();
+  const staleReconcile = reconcileStaleWorkers();
   const planProgressSync = await syncActiveWorkerPlanProgress(runId, args);
   const workspacePrefs = await fetchWorkspaceRuntimePreferences(agentOsId, args);
   const resourceGate = observeRunnerResourceGate({
@@ -2245,7 +2726,7 @@ async function runPipelineTick(args) {
     execute,
     resourceGate,
     completedWorkers,
-    finalizedStaleRuns,
+    staleReconcile,
     planProgressSync,
     operatorTick,
     sweep,
@@ -2405,7 +2886,7 @@ function usage(code = 0) {
       "  kynver run create --repo /path/repo [--name name] [--base origin/main]",
       "  kynver run list",
       "  kynver run status --run RUN_ID",
-      "  kynver run dispatch --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--execute] [--lane any|implementation|review|landing] [--max-starts 1] [--lease-ms MS] [--owned path[,path]] [--model claude-opus-4-7] [--disk-path /]",
+      "  kynver run dispatch --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--execute] [--lane any|implementation|review|landing] [--executor harness] [--max-starts 1] [--lease-ms MS] [--owned path[,path]] [--model claude-opus-4-7] [--disk-path /]",
       "  kynver run sweep --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--grace-ms MS]",
       '  kynver worker start --run RUN_ID --name worker --task "..." [--owned path[,path]] [--model MODEL] [--provider claude|cursor] [--agent-os-id AOS_ID] [--task-id TASK_ID]',
       "  kynver worker status --run RUN_ID --name worker",