@bridge4dev/runner 0.11.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 TrizAI Lab
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,86 @@
+# @bridge4dev/runner
+
+The DevBridge dev runner. It connects one of **your own** machines to
+[DevBridge](https://bridge4.dev) and runs coding-agent sessions on it — Claude Code or
+Codex — against a checkout that never leaves that machine.
+
+DevBridge gets no SSH access and no credentials for your server: the runner connects
+**outwards** over WSS and holds the only copy of its own token.
+
+## Requirements
+
+- Node.js ≥ 20
+- git
+- at least one agent CLI already installed and signed in on the machine:
+  [Claude Code](https://claude.com/claude-code) or [Codex](https://developers.openai.com/codex/cli)
+- a DevBridge account with a pairing code (dashboard → **Development** → _Connect server_)
+
+## Install
+
+```bash
+npm install -g @bridge4dev/runner
+```
+
+Then pair the machine with the code from the dashboard and install it as a service:
+
+```bash
+devbridge-runner pair DBR-XXXXXXXX
+devbridge-runner install-service
+devbridge-runner status          # exit code 0 = connected
+```
+
+`install-service` writes a **systemd user unit** (`CPUQuota=80%`, `MemoryMax=2G`) and starts
+it. If you would rather run it in the foreground, or under your own supervisor, use
+`devbridge-runner daemon`.
+
+> Installing globally may print `ERESOLVE` warnings about `zod`: the Claude Agent SDK asks
+> for zod 4 as a peer while the runner uses zod 3. The install succeeds — npm nests its own
+> copy — and nothing is broken. Add `--loglevel=error` if the noise bothers you.
+
+## Commands
+
+| Command                                         | What it does                                    |
+| ----------------------------------------------- | ----------------------------------------------- |
+| `pair <DBR-code> [--api <url>] [--name <name>]` | Claim a pairing code and store the runner token |
+| `install-service`                               | Install + start the systemd user service        |
+| `daemon`                                        | Run in the foreground                           |
+| `status`                                        | Connection status; exit code 0 when connected   |
+| `set-token <dbr_token>`                         | Store a token rotated from the dashboard        |
+
+## What it does on your machine
+
+- Creates a **git worktree and a branch per session**, so an agent never works in your
+  working copy and never touches your current branch.
+- Enforces a local policy layer the dashboard **cannot** raise: an allow/deny list for
+  commands, secret masking in everything it streams, and its own ceiling on how many
+  sessions may run at once. Anything the server asks for is bounded by what this config
+  permits.
+- Streams the session journal with sequence numbers and acknowledgements, so a restart of
+  either side resumes instead of losing work.
+- Never uploads your source. Diffs and file views are requested per file, and files
+  matching the secret denylist are refused.
+
+## Files it owns
+
+| Path                                     | Contents                                                                           |
+| ---------------------------------------- | ---------------------------------------------------------------------------------- |
+| `~/.config/devbridge-runner/config.toml` | API URL, server id, **runner token** (mode 0600 — this file _is_ the secret store) |
+| `~/.local/state/devbridge-runner/`       | Session journals and `status.json`                                                 |
+
+Both honour `XDG_CONFIG_HOME` / `XDG_STATE_HOME`.
+
+## Updating
+
+From the dashboard: the server card offers **Update runner** once a newer version is
+available, and the runner replaces itself — smoke-testing the new build before it
+restarts, and rolling back to the previous tarball if that test fails.
+
+By hand:
+
+```bash
+npm install -g @bridge4dev/runner && systemctl --user restart devbridge-runner
+```
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/adapters/claude.d.ts

@@ -0,0 +1,19 @@
+import { query } from '@anthropic-ai/claude-agent-sdk';
+import { type AgentAdapter, type AgentSession, type SessionSpec } from './types.js';
+export declare function truncate(text: string, limit?: number): string;
+/**
+ * Flatten the AskUserQuestion payload into plain text + option labels.
+ * Shape: `{ questions: [{ question, header, options: [{ label, description }] }] }`.
+ */
+export declare function parseAskUserQuestion(input: Record<string, unknown>): {
+    text: string;
+    options: string[];
+} | null;
+export declare function classifyRunError(message: string): string;
+export declare class ClaudeAdapter implements AgentAdapter {
+    private readonly queryFn;
+    readonly id: "claude";
+    constructor(queryFn?: typeof query);
+    startSession(spec: SessionSpec): AgentSession;
+}
+//# sourceMappingURL=claude.d.ts.map