Runtime Bindings init and interactive install onboarding

[zack-nova]

Parent

#136

What to build

Provide the first-run path for users who need Runtime Bindings but do not want to hand-write YAML. hyard vars init should generate schema 2 Runtime Bindings skeletons, and interactive Package Installation should collect missing required bindings before package-owned runtime output is written.

Acceptance criteria

• hyard vars init <package-source> generates a schema 2 .harness/vars.yaml skeleton using declared Package Variables.
• hyard vars init --defaults materializes declaration defaults as inline values only when explicitly requested.
• hyard vars init does not materialize declaration defaults by default.
• hyard vars init respects sensitive declarations by generating value_from.env shape instead of inline values for sensitive variables.
• Interactive hyard install prompts for missing required Runtime Bindings when attached to a TTY.
• Interactive install persists collected missing required Runtime Bindings to .harness/vars.yaml, validates them, and continues installation.
• Interactive install does not prompt for required Package Variables that are already satisfied by a scoped/global Runtime Binding or declaration default.

Blocked by

• Runtime Bindings resolution, defaults, doctor, and explain #138
• Sensitive Package Variable policy and redaction #139
• Strict non-interactive Package Installation #141

[zack-nova]

This was generated by AI during triage.

Triage Notes

• Dependency release closeout for Runtime Bindings resolution, defaults, doctor, and explain #138: PR Implement Runtime Bindings doctor and explain #145 landed successfully at merge commit 816afbf8d30ba71bc59fdf65e2d8686fa325dfa6.
• ## Blocked by lists Runtime Bindings resolution, defaults, doctor, and explain #138, Sensitive Package Variable policy and redaction #139, and Strict non-interactive Package Installation #141.
• Sensitive Package Variable policy and redaction #139 and Strict non-interactive Package Installation #141 remain open and unmerged, so blockers remain.
• State unchanged: keep state:blocked.

[zack-nova]

Triage Notes

• Blockers are resolved: Runtime Bindings resolution, defaults, doctor, and explain #138, Sensitive Package Variable policy and redaction #139, and Strict non-interactive Package Installation #141 are all closed and labeled state:merged.
• Scope is first-run Runtime Bindings onboarding: hyard vars init <package-source> skeleton generation plus interactive install persistence for missing required bindings before runtime output writes.
• Implementation should reuse existing template source resolution, declaration extraction, Runtime Bindings schema 2, and install binding merge/prompt machinery rather than adding a parallel bindings format.

Next state: ready for implementation on issue-142-vars-init-interactive-install.

[zack-nova]

Dev Brief

Scope for this pass:

• Add hyard vars init <package-source> to write schema 2 Runtime Bindings skeletons from Package Variable declarations.
• Support --defaults as an explicit opt-in for materializing declaration defaults.
• Generate value_from.env for sensitive declarations instead of inline values.
• Cover interactive hyard install --interactive collecting and persisting missing required bindings while skipping values satisfied by defaults or existing bindings.

Feedback loop: TDD first with focused hyard CLI integration tests, then implementation, then mise run fix and mise run ci before review/PR.