@kynver-app/runtime 0.2.23 → 0.2.28

package/README.md

@@ -1,33 +1,49 @@
 # @kynver-app/runtime
 
-Standalone Kynver AgentOS execution runtime and CLI (`kynver`).
+Standalone Kynver AgentOS execution runtime and CLI (`kynver`) — run Kynver's agent harness on **your own machine**, on your own provider subscriptions. Provider credentials stay local to the box; the daemon talks to Kynver over scoped, revocable `krc1.*` runner tokens.
 
-## Supported Node.js
+## Requirements
 
-The Kynver fleet runs **Node.js 24.11.0+** (npm 11). The `0.1.x` line still
-declares `engines >=18` for compatibility, but new runner hosts should install
-Node 24 — the coming `0.2.0` release raises the enforced floor to `>=24.11.0`
-and startup will fail closed below it. Check any host with:
+- **Node.js 24.11.0+** (npm 11). This is a hard engine floor: below it the CLI **fails closed at startup** — every work-executing command refuses to run, and only `--version` and the `doctor` diagnostic commands stay reachable for diagnosis. Check any host with:
+
+  ```bash
+  kynver doctor node-runtime   # report-only JSON classification + remediation
+  ```
+
+- A worker-provider CLI on PATH with an active login/subscription (see [Worker providers](#worker-providers)).
+- **Agentic OS access** on your Kynver account. Access is **admin-approved**: if `kynver bootstrap` reports that your account has no access, request it at <https://www.kynver.com/agent-os/early-access> — once approved, your account works here with no further changes (just re-run `kynver bootstrap`).
+
+## Quick start
 
 ```bash
-kynver doctor node-runtime   # report-only JSON classification + remediation
+npm install -g @kynver-app/runtime
+kynver bootstrap --api-base-url https://www.kynver.com
+kynver start
 ```
 
-## Quick start
+That is the whole golden path: `bootstrap` links this machine to your account and workspace; `start` brings the agent online (keeper-supervised daemon — Ctrl-C stops it). For a persistent background agent on Linux: `kynver start --install-systemd`.
+
+### What `kynver bootstrap` does
+
+1. **Device login** — prints a URL and a short code; approve in the browser. No API-key pasting; the minted key is saved to `~/.kynver/credentials`.
+2. **Workspace resolution** — resolves your account's primary AgentOS workspace. If the account is not approved for Agentic OS yet, bootstrap says so and links the request page (see Requirements above).
+3. **Machine setup** — persists `~/.kynver/config.json` (API base URL, workspace id, repo discovery, worker caps, box identity) and mints a scoped `krc1.*` runner credential.
+
+Bootstrap does **not** start any work — bringing workers online is `kynver start`.
+
+### Troubleshooting → `kynver doctor runner-install`
+
+If `bootstrap` or `start` fails, or the agent seems dead:
 
 ```bash
-npm run kynver:build
-npm run kynver -- setup --api-base-url http://localhost:3000 --agent-os-id <id> [--repo /path/to/repo] --max-workers 13
-npm run kynver -- login --api-key "$KYNVER_API_KEY"
-npm run kynver -- runner credential --agent-os-id <id>
-npm run kynver -- config ensure-default-repo   # persist defaultRepo in ~/.kynver/config.json
-npm run kynver -- run create [--repo /path/to/repo] --name my-run
-npm run kynver -- daemon --run <runId> --agent-os-id <id> --execute
+kynver doctor runner-install
 ```
 
+It walks the whole first-run lifecycle — install, device login, workspace binding, repo selection, runner credential, daemon liveness — plus the first-run blockers: worker-provider CLI on PATH, `boxKind` identity, repo base ref (`origin/main` / remote default branch), and live API reachability/auth (a 401 means a revoked key → `kynver login`; a 403 means access is gated → request it at the early-access page). Every failing check carries the exact command that fixes it.
+
 ### Callback auth (scoped runner tokens)
 
-User-hosted runners should **not** use deployment-wide `OPENCLAW_CRON_SECRET` / `KYNVER_RUNTIME_SECRET`. After `kynver login`, mint a workspace-bound token:
+User-hosted runners should **not** use deployment-wide `OPENCLAW_CRON_SECRET` / `KYNVER_RUNTIME_SECRET`. `kynver bootstrap` mints a workspace-bound token automatically; to re-mint one:
 
 ```bash
 kynver runner credential --agent-os-id <id>
@@ -40,12 +56,15 @@ Global env secrets are accepted on by-id callbacks **only** when the deployment
 ## CLI verbs
 
 ```text
+bootstrap | start | status | setup | login | daemon
 run create | list | status | dispatch | sweep
 worker start | status | tail | stop | complete
-login | runner credential | setup | config ensure-default-repo | doctor runtime-takeover | daemon
+runner credential [mint|status|list|revoke|rotate]
+config ensure-default-repo
+doctor runner-install | node-runtime | local-store | context-envelope | runtime-takeover
 ```
 
-`scripts/opus-harness.mjs` is a compatibility shim that delegates to this package.
+Run `kynver help` for the full flag-level usage. `scripts/opus-harness.mjs` is a compatibility shim that delegates to this package.
 
 ## Worker providers
 
@@ -63,6 +82,21 @@ Install Cursor CLI (Windows PowerShell): `irm 'https://cursor.com/install?win32=
 
 Default Cursor model: `composer-2.5`. Override with `--model` on dispatch/worker start.
 
+## Advanced / monorepo development
+
+Power users and monorepo contributors can drive the harness explicitly instead of `kynver start` (from the Kynver repo root, `npm run kynver -- <verb…>` invokes the workspace build):
+
+```bash
+kynver setup --api-base-url http://localhost:3000 --agent-os-id <id> [--repo /path/to/repo] --max-workers 13
+kynver login --api-key "$KYNVER_API_KEY"
+kynver runner credential --agent-os-id <id>
+kynver config ensure-default-repo   # persist defaultRepo in ~/.kynver/config.json
+kynver run create [--repo /path/to/repo] --name my-run
+kynver daemon --run <runId> --agent-os-id <id> --execute
+```
+
+New runs are cut from `origin/main`; when that ref does not exist the run falls back to the remote default branch (`origin/HEAD`), and `--base <ref>` / `KYNVER_RUN_BASE_REF` / `defaultBase` in `~/.kynver/config.json` override the base explicitly.
+
 ### Targeted dispatch (after creating a board task)
 
 Broad `lane:any` dispatch still sweeps the ready queue (review lane first, then priority/age). To start **one specific task** you just created — without admitting an older ready row — pass the task id:

package/dist/chat/command-auth-proof.js

@@ -1 +1 @@
-import{createHash as c,createPrivateKey as d,createPublicKey as l,randomBytes as m,sign as b,verify as h}from"node:crypto";function f(e){return JSON.stringify(u(e))}function u(e){if(Array.isArray(e))return e.map(u);if(e&&typeof e=="object"){let r={};for(let n of Object.keys(e).sort())r[n]=u(e[n]);return r}return e}function o(e){if(!e)return null;let r=e.trim();if(!r)return null;if(/^[0-9a-fA-F]{64}$/.test(r))return new Uint8Array(r.match(/.{2}/g).map(n=>parseInt(n,16)));try{let n=Buffer.from(r,"base64");if(n.length===32)return new Uint8Array(n)}catch{}return null}var A=120,I=Buffer.from("302a300506032b6570032100","hex"),g=Buffer.from("302e020100300506032b657004220420","hex"),P="c0021e9312b0a479dbd2eb8dec0deedbe0dd6445eff431e372fa49fa21d42ffa",y="ca-6297fb8e1773",K={[y]:"16ae5cb2a61f8c94cf1b86e8258f9c2f2ff6aba5e6136250a422209b6e866881","ca-456fd128f3b3":"f29cbd559410c2578d7f9732ccd86570073355ccdb36af0d1b7dff15908466e7"};function p(e){return`ca-${c("sha256").update(Buffer.from(e)).digest("hex").slice(0,12)}`}function B(e,r=process.env){let n=o(r.KYNVER_COMMAND_AUTH_PUBLIC_KEY);if(n)return p(n)!==e?null:n;let t=K[e];return!t||r.NODE_ENV==="production"&&e===y?null:o(t)}function C(e){return l({key:Buffer.concat([I,Buffer.from(e)]),format:"der",type:"spki"})}function x(e,r){return!Array.isArray(e)||e.length!==r.length?!1:e.every((n,t)=>typeof n=="string"&&n===r[t])}function _(e){if(!e||typeof e!="object")return!1;let r=e;if(typeof r.signature!="string"||!r.signature||typeof r.publicKeyId!="string"||!r.publicKeyId)return!1;let n=r.payload;return!(!n||typeof n!="object"||n.v!==1||typeof n.agentOsId!="string"||!n.agentOsId||!Array.isArray(n.argv)||n.argv.some(t=>typeof t!="string")||typeof n.userId!="string"||!n.userId||typeof n.exp!="number"||!Number.isFinite(n.exp)||typeof n.nonce!="string"||!n.nonce)}function D(e,r,n=process.env,t=Math.floor(Date.now()/1e3)){if(!_(e))return{ok:!1,reason:"malformed command authorization proof"};if(e.payload.agentOsId!==r.agentOsId)return{ok:!1,reason:"agentOsId mismatch"};if(!x(e.payload.argv,r.argv))return{ok:!1,reason:"argv mismatch"};if(e.payload.exp<=t)return{ok:!1,reason:"proof expired"};let i=B(e.publicKeyId,n);if(!i)return{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}"`};let a;try{a=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(a.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let s=Buffer.from(f(e.payload),"utf8");return h(null,s,C(i),a)?{ok:!0,payload:e.payload}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(s){return{ok:!1,reason:`signature verification failed: ${s.message}`}}}function k(e){let r=d({key:Buffer.concat([g,Buffer.from(e)]),format:"der",type:"pkcs8"}),n=l(r).export({format:"der",type:"spki"});return new Uint8Array(n.subarray(n.length-32))}function v(e=process.env){let r=o(e.KYNVER_COMMAND_AUTH_KEY);if(!r&&e.NODE_ENV==="production")throw new Error("KYNVER_COMMAND_AUTH_KEY must be set in production; refusing to sign command proofs with the committed dev key.");let n=r??o(P),t=k(n);return{seed:n,rawPublicKey:t,publicKeyId:p(t),usingDevFallbackKey:!r}}function S(e,r){let n=d({key:Buffer.concat([g,Buffer.from(r.seed)]),format:"der",type:"pkcs8"}),t=Buffer.from(f(e),"utf8");return{payload:e,signature:b(null,t,n).toString("base64url"),publicKeyId:r.publicKeyId}}function U(e){let r=e.env??process.env,n=e.nowSec??Math.floor(Date.now()/1e3),t=e.ttlSec??A,i={v:1,agentOsId:e.agentOsId,argv:[...e.argv],userId:e.userId,exp:n+t,nonce:m(16).toString("base64url")};return S(i,v(r))}function N(e){return c("sha256").update(Buffer.from(e.rawPublicKey)).digest("hex").slice(0,16)}export{y as COMMAND_AUTH_DEV_FALLBACK_PUBLIC_KEY_ID,A as COMMAND_AUTH_PROOF_TTL_SEC,K as PINNED_COMMAND_AUTH_PUBLIC_KEYS,x as argvMatchesProof,N as commandAuthProofKeyFingerprint,p as deriveCommandAuthKeyId,_ as isSignedCommandAuthProofShape,U as issueCommandAuthorizationProof,B as resolveCommandAuthPublicKey,v as resolveCommandAuthSigningKey,D as verifyCommandAuthorizationProof};
+import{createHash as g,createPrivateKey as d,createPublicKey as y,randomBytes as m,sign as h,verify as b}from"node:crypto";function s(e){return JSON.stringify(c(e))}function c(e){if(Array.isArray(e))return e.map(c);if(e&&typeof e=="object"){let n={};for(let r of Object.keys(e).sort())n[r]=c(e[r]);return n}return e}function u(e){if(!e)return null;let n=e.trim();if(!n)return null;if(/^[0-9a-fA-F]{64}$/.test(n))return new Uint8Array(n.match(/.{2}/g).map(r=>parseInt(r,16)));try{let r=Buffer.from(n,"base64");if(r.length===32)return new Uint8Array(r)}catch{}return null}function p(e=process.env){if(e.NODE_ENV==="production")return!1;let n=e.KYNVER_ALLOW_DEV_SIGNING_KEYS?.trim().toLowerCase();return n==="1"||n==="true"||n==="yes"||n==="on"?!0:e.NODE_ENV==="test"||e.VITEST==="true"}var k=120,S=Buffer.from("302a300506032b6570032100","hex"),l=Buffer.from("302e020100300506032b657004220420","hex"),x="c0021e9312b0a479dbd2eb8dec0deedbe0dd6445eff431e372fa49fa21d42ffa",A="ca-6297fb8e1773",v={[A]:"16ae5cb2a61f8c94cf1b86e8258f9c2f2ff6aba5e6136250a422209b6e866881","ca-456fd128f3b3":"f29cbd559410c2578d7f9732ccd86570073355ccdb36af0d1b7dff15908466e7"};function I(e){return`ca-${g("sha256").update(Buffer.from(e)).digest("hex").slice(0,12)}`}function P(e,n=process.env){let r=u(n.KYNVER_COMMAND_AUTH_PUBLIC_KEY);if(r)return I(r)!==e?null:r;let t=v[e];return!t||e===A&&!p(n)?null:u(t)}function K(e){return y({key:Buffer.concat([S,Buffer.from(e)]),format:"der",type:"spki"})}function _(e,n){return!Array.isArray(e)||e.length!==n.length?!1:e.every((r,t)=>typeof r=="string"&&r===n[t])}function B(e){if(!e||typeof e!="object")return!1;let n=e;if(typeof n.signature!="string"||!n.signature||typeof n.publicKeyId!="string"||!n.publicKeyId)return!1;let r=n.payload;return!(!r||typeof r!="object"||r.v!==1||typeof r.agentOsId!="string"||!r.agentOsId||!Array.isArray(r.argv)||r.argv.some(t=>typeof t!="string")||typeof r.userId!="string"||!r.userId||typeof r.exp!="number"||!Number.isFinite(r.exp)||typeof r.nonce!="string"||!r.nonce)}function U(e,n,r=process.env,t=Math.floor(Date.now()/1e3)){if(!B(e))return{ok:!1,reason:"malformed command authorization proof"};if(e.payload.agentOsId!==n.agentOsId)return{ok:!1,reason:"agentOsId mismatch"};if(!_(e.payload.argv,n.argv))return{ok:!1,reason:"argv mismatch"};if(e.payload.exp<=t)return{ok:!1,reason:"proof expired"};let o=P(e.publicKeyId,r);if(!o)return{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}"`};let i;try{i=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(i.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let a=Buffer.from(s(e.payload),"utf8");return b(null,a,K(o),i)?{ok:!0,payload:e.payload}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(a){return{ok:!1,reason:`signature verification failed: ${a.message}`}}}function w(e){let n=d({key:Buffer.concat([l,Buffer.from(e)]),format:"der",type:"pkcs8"}),r=y(n).export({format:"der",type:"spki"});return new Uint8Array(r.subarray(r.length-32))}function C(e=process.env){let n=u(e.KYNVER_COMMAND_AUTH_KEY);if(!n&&e.NODE_ENV==="production")throw new Error("KYNVER_COMMAND_AUTH_KEY must be set in production; refusing to sign command proofs with the committed dev key.");let r=n??u(x),t=w(r);return{seed:r,rawPublicKey:t,publicKeyId:I(t),usingDevFallbackKey:!n}}function E(e,n){let r=d({key:Buffer.concat([l,Buffer.from(n.seed)]),format:"der",type:"pkcs8"}),t=Buffer.from(s(e),"utf8");return{payload:e,signature:h(null,t,r).toString("base64url"),publicKeyId:n.publicKeyId}}function L(e){let n=e.env??process.env,r=e.nowSec??Math.floor(Date.now()/1e3),t=e.ttlSec??k,o={v:1,agentOsId:e.agentOsId,argv:[...e.argv],userId:e.userId,exp:r+t,nonce:m(16).toString("base64url")};return E(o,C(n))}function V(e){return g("sha256").update(Buffer.from(e.rawPublicKey)).digest("hex").slice(0,16)}var O=120;function R(e){if(!e||typeof e!="object")return!1;let n=e;if(typeof n.signature!="string"||!n.signature||typeof n.publicKeyId!="string"||!n.publicKeyId)return!1;let r=n.payload;return!(!r||typeof r!="object"||r.v!==1||r.kind!=="chat"||typeof r.agentOsId!="string"||!r.agentOsId||typeof r.exp!="number"||!Number.isFinite(r.exp)||typeof r.nonce!="string"||!r.nonce)}function z(e){let n=e.env??process.env,r=e.nowSec??Math.floor(Date.now()/1e3),t=e.ttlSec??O,o={v:1,kind:"chat",agentOsId:e.agentOsId,exp:r+t,nonce:m(16).toString("base64url")},i=C(n),a=d({key:Buffer.concat([l,Buffer.from(i.seed)]),format:"der",type:"pkcs8"}),f=Buffer.from(s(o),"utf8");return{payload:o,signature:h(null,f,a).toString("base64url"),publicKeyId:i.publicKeyId}}function M(e,n,r=process.env,t=Math.floor(Date.now()/1e3)){if(!R(e))return{ok:!1,reason:"malformed chat-turn authorization proof"};if(e.payload.agentOsId!==n.agentOsId)return{ok:!1,reason:"agentOsId mismatch"};if(e.payload.exp<=t)return{ok:!1,reason:"proof expired"};let o=P(e.publicKeyId,r);if(!o)return{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}"`};let i;try{i=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(i.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let a=Buffer.from(s(e.payload),"utf8");return b(null,a,K(o),i)?{ok:!0,payload:e.payload}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(a){return{ok:!1,reason:`signature verification failed: ${a.message}`}}}export{O as CHAT_TURN_AUTH_PROOF_TTL_SEC,A as COMMAND_AUTH_DEV_FALLBACK_PUBLIC_KEY_ID,k as COMMAND_AUTH_PROOF_TTL_SEC,v as PINNED_COMMAND_AUTH_PUBLIC_KEYS,_ as argvMatchesProof,V as commandAuthProofKeyFingerprint,I as deriveCommandAuthKeyId,R as isSignedChatTurnAuthProofShape,B as isSignedCommandAuthProofShape,z as issueChatTurnAuthorizationProof,L as issueCommandAuthorizationProof,P as resolveCommandAuthPublicKey,C as resolveCommandAuthSigningKey,M as verifyChatTurnAuthorizationProof,U as verifyCommandAuthorizationProof};