v0.2.0

Downloads

Platform	Archive
macOS Apple Silicon	runkite_0.2.0_Darwin_arm64.tar.gz
macOS Intel	runkite_0.2.0_Darwin_x86_64.tar.gz
Linux x86_64	runkite_0.2.0_Linux_x86_64.tar.gz
Linux arm64	runkite_0.2.0_Linux_arm64.tar.gz
Checksums	checksums.txt
OpenAPI	openapi.json · admin · internal

Install

# Binary (example: Linux x86_64)
curl -fsSL -o runkite.tgz \
  https://github.com/getrunkite/runkite/releases/download/v0.2.0/runkite_0.2.0_Linux_x86_64.tar.gz
tar -xzf runkite.tgz && sudo mv runkite /usr/local/bin/

# Docker
docker pull ghcr.io/getrunkite/runkite:0.2.0
docker pull ghcr.io/getrunkite/runkite-runner:0.2.0

# Runners
pip install runkite-runner==0.2.0
npm install -g runkite-runner@0.2.0

Site: https://getrunkite.github.io/runkite/ · Limitations: https://github.com/getrunkite/runkite/blob/main/docs/limitations.md

---

Changelog

Changes

• c373774: Accept comma-separated RUNNER_TOKEN_* allowlists per kind. (@sharanharsoor)
• 0edb705: Add A2A max_breadth and self-heal MySQL parent index. (@sharanharsoor)
• 092af5d: Add Admin API audit event search on Postgres. (@sharanharsoor)
• 9ef0c9e: Add Admin CRUD and hot-reload for mandatory_hitl overlays. (@sharanharsoor)
• bb00ddc: Add Admin CRUD for durable policy grant overlays. (@sharanharsoor)
• a4e360d: Add Admin UI Audit page for policy decisions. (@sharanharsoor)
• 472b7fe: Add Admin UI for kill and pause switches. (@sharanharsoor)
• 0c6c3b0: Add Admin UI for policy grants and pending HITL queue. (@sharanharsoor)
• ac69377: Add Postgres audit write/migration test and clarify policy defaults. (@sharanharsoor)
• 9d08e62: Add atomic admission_limits for concurrent and daily run caps. (@sharanharsoor)
• 6637c29: Add config mandatory_hitl to force connector tool.call pending. (@sharanharsoor)
• e5bb1c9: Add connector HITL pending actions with one-shot approve retry. (@sharanharsoor)
• 421daf1: Add connector policy engine with static grants and audit writes. (@sharanharsoor)
• bd7454d: Add governance announce-bar smoke for Phases 0–2. (@sharanharsoor)
• c4d5f42: Add governance-preview launch copy and site pitch. (@sharanharsoor)
• e00ad90: Add kind Helm Ingress + NetworkPolicy proof (K3). (@sharanharsoor)
• 368cb16: Add kind Helm install smoke for the Supported values overlay. (@sharanharsoor)
• e8a5c03: Add kind Helm mid-run reclaim proof (K2). (@sharanharsoor)
• 0a4924a: Add kind Helm runner-token rotation proof (K1). (@sharanharsoor)
• 6ea05c6: Add reference BYO sync policy webhook example. (@sharanharsoor)
• 7580c7c: Add run admission: agent-scoped authz and kill switches. (@sharanharsoor)
• d2662b6: Add short-lived MCP connector session tokens. (@sharanharsoor)
• 134ef6b: Add test for mandatory_hitl agent-scoped over tenant-wide match. (@sharanharsoor)
• 2429de0: Add time-bounded break-glass windows for policy bypass. (@sharanharsoor)
• f450dc6: Align quickstart runner token env example with uppercase convention. (@sharanharsoor)
• 12ec808: Bind proxy /internal paths to in-flight runs. (@sharanharsoor)
• a04a0eb: Bound non-MCP connector session TTL and drop vestigial assignment context. (@sharanharsoor)
• 810f23e: Bump admin-ui vite to clear nanoid audit failure. (@sharanharsoor)
• b1fb710: Clarify README hook: LangSmith-style category, then the extras. (@sharanharsoor)
• 510ec45: Close Phase 0 fast-follows: LookupInflight conformance and connector helpers. (@sharanharsoor)
• 9cbb4a4: Defer paid EKS soak; keep Kubernetes Compatible. (@sharanharsoor)
• 6726e6e: Document Supported Helm profile and multi-CP soak announce bar. (@sharanharsoor)
• bef7b64: Drop invalid Pages deploy timeout override (max is 600s). (@sharanharsoor)
• 9126e48: Emit policy.decide OTel events and optional SIEM export. (@sharanharsoor)
• d5497e1: Emit tool_auth RunEvents on connector policy denials. (@sharanharsoor)
• c14e1c6: Fix Kafka reclaim clearing inflight before redequeue. (@sharanharsoor)
• b90bcb3: Fix PROTOCOL.md runner auth to match X-Runner and gRPC metadata. (@sharanharsoor)
• 7ac2b54: Fix Prettier formatting in TypeScript runner sources. (@sharanharsoor)
• 266f5f5: Fix actionlint CI (SC2046) and sharpen README/site hook. (@sharanharsoor)
• 751f200: Fix invalid secrets-in-if in release.yml; add actionlint CI; fix skill bugs. (@sharanharsoor)
• a0c33db: Fix missing dependency-install step in quickstart/README/runners docs. (@sharanharsoor)
• b13cbdb: Fix npm release publish: try OIDC without NODE_AUTH_TOKEN. (@sharanharsoor)
• 1b0e132: Fix policy grant duplicate 409 and empty-policy bootstrap. (@sharanharsoor)
• cf466f3: Fix ruff format on factory graph generation check. (@sharanharsoor)
• 3a5bee9: Fix staticcheck SA1019 on OTel Value.Emit in policy test. (@sharanharsoor)
• e9ce7ff: Include principal in policy decision cache key. (@sharanharsoor)
• c03020b: Keep pending-actions routes in the OpenAPI generator. (@sharanharsoor)
• 1153dd6: Name governance announce-bar coverage in CI. (@sharanharsoor)
• 7f4dc2c: Poll SQL policy grants so multi-replica overlays converge. (@sharanharsoor)
• 7200da5: Port durable governance tables to MySQL and SQLite. (@sharanharsoor)
• dfca096: Rebuild TypeScript runner dist/ for connector session tokens. (@sharanharsoor)
• 928dd48: Refresh Admin walkthrough GIF and close discoverability gaps. (@sharanharsoor)
• ce8da79: Regenerate admin-ui lockfile with npm 10.9.2. (@sharanharsoor)
• d897041: Release v0.2.0: governance preview cut. (@sharanharsoor)
• be50f47: Score soak announce runs on start/end deltas, not end totals. (@sharanharsoor)
• d2d031e: Share Admin UI sessions via Redis when REDIS_URL is set. (@sharanharsoor)
• 41e8526: Slim README; keep diagrams, move prose to docs. (@sharanharsoor)
• b919109: Sync README, site, and docs with full Admin governance. (@sharanharsoor)
• a98f276: Trigger Pages redeploy after stuck GitHub Pages backend. (@sharanharsoor)
• f1830d9: Unstick GitHub Pages: stop cancel-in-progress, raise deploy timeout. (@sharanharsoor)
• 6a4be74: Wire Helm chart pod TLS/mTLS via existing app env contracts. (@sharanharsoor)
• b45df1d: gofmt break-glass admin and test alignment nits. (@sharanharsoor)