@chrysb/alphaclaw 0.2.3 → 0.3.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 chrysb
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,179 @@
+<p align="center">
+  <img width="771" height="339" alt="image" src="https://github.com/user-attachments/assets/99e194dd-902b-46db-ad0c-aaf723592271" />
+</p>
+<h1 align="center">AlphaClaw</h1>
+<p align="center">
+  <strong>The ops layer for OpenClaw. Deploy in minutes. Stay running for months.</strong><br>
+  <strong>Observability. Reliability. Agent discipline. Zero SSH rescue missions.</strong>
+</p>
+
+<p align="center">
+  <a href="https://github.com/chrysb/alphaclaw/actions/workflows/ci.yml"><img src="https://github.com/chrysb/alphaclaw/actions/workflows/ci.yml/badge.svg" alt="CI" /></a>
+  <a href="https://www.npmjs.com/package/@chrysb/alphaclaw"><img src="https://img.shields.io/npm/v/@chrysb/alphaclaw" alt="npm version" /></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT" /></a>
+</p>
+
+<p align="center">AlphaClaw wraps <a href="https://github.com/openclaw/openclaw">OpenClaw</a> with a convenient setup wizard, self-healing watchdog, Git-backed rollback, and full browser-based observability. Ships with anti-drift prompt hardening to keep your agent disciplined, and simplifies integrations (e.g. Google Workspace, Telegram Topics) so you can manage everything from one UI instead of config files.</p>
+
+<p align="center"><em>First deploy to first message in under five minutes.</em></p>
+
+<p align="center">
+  <a href="https://railway.com/deploy/openclaw-fast-start?referralCode=jcFhp_&utm_medium=integration&utm_source=template&utm_campaign=generic"><img src="https://railway.com/button.svg" alt="Deploy on Railway" /></a>
+  <a href="https://render.com/deploy?repo=https://github.com/chrysb/openclaw-render-template"><img src="https://render.com/images/deploy-to-render-button.svg" alt="Deploy to Render" /></a>
+</p>
+
+> **Platform:** AlphaClaw currently targets Docker/Linux deployments. macOS local development is not yet supported.
+
+## Features
+
+- **Setup UI:** Password-protected web dashboard for onboarding, configuration, and day-to-day management.
+- **Guided Onboarding:** Step-by-step setup wizard — model selection, provider credentials, GitHub repo, channel pairing.
+- **Gateway Manager:** Spawns, monitors, restarts, and proxies the OpenClaw gateway as a managed child process.
+- **Watchdog:** Crash detection, crash-loop recovery, auto-repair (`openclaw doctor --fix`), and Telegram/Discord notifications.
+- **Channel Orchestration:** Telegram and Discord bot pairing, credential sync, and a guided wizard for splitting Telegram into multi-threaded topic groups as your usage grows.
+- **Webhooks:** Named webhook endpoints with per-hook transform modules, request logging, and payload inspection.
+- **Google Workspace:** OAuth integration for Gmail, Calendar, Drive, Docs, Sheets, Tasks, Contacts, and Meet.
+- **Prompt Hardening:** Ships anti-drift bootstrap prompts (`AGENTS.md`, `TOOLS.md`) injected into your agent's system prompt on every message — enforcing safe practices, commit discipline, and change summaries out of the box.
+- **Git Sync:** Automatic hourly commits of your OpenClaw workspace to GitHub with configurable cron schedule. Combined with prompt hardening, every agent action is version-controlled and auditable.
+- **Version Management:** In-place updates for both AlphaClaw and OpenClaw with changelog review and one-click apply.
+- **Codex OAuth:** Built-in PKCE flow for OpenAI Codex CLI model access.
+
+## Why AlphaClaw
+
+- **Zero to production in one deploy:** Railway/Render templates ship a complete stack — no manual gateway setup.
+- **Self-healing:** Watchdog detects crashes, enters repair mode, relaunches the gateway, and notifies you.
+- **Everything in the browser:** No SSH, no config files to hand-edit, no CLI required after first deploy.
+- **Stays out of the way:** AlphaClaw manages infrastructure; OpenClaw handles the AI.
+
+## No Lock-in. Eject Anytime.
+
+AlphaClaw writes standard OpenClaw config (`openclaw.json`, `.env`). Remove AlphaClaw and your agent keeps running — nothing proprietary, nothing to migrate.
+
+---
+
+## Quick Start
+
+### Deploy (recommended)
+
+[![Deploy on Railway](https://railway.com/button.svg)](https://railway.com/deploy/openclaw-fast-start?referralCode=jcFhp_&utm_medium=integration&utm_source=template&utm_campaign=generic)
+[![Deploy to Render](https://render.com/images/deploy-to-render-button.svg)](https://render.com/deploy?repo=https://github.com/chrysb/openclaw-render-template)
+
+Set `SETUP_PASSWORD` at deploy time and visit your deployment URL. The welcome wizard handles the rest.
+
+### Local / Docker
+
+```bash
+npm install @chrysb/alphaclaw
+npx alphaclaw start
+```
+
+Or with Docker:
+
+```dockerfile
+FROM node:22-slim
+RUN apt-get update && apt-get install -y git curl procps cron && rm -rf /var/lib/apt/lists/*
+WORKDIR /app
+COPY package.json ./
+RUN npm install --omit=dev
+ENV PATH="/app/node_modules/.bin:$PATH"
+ENV ALPHACLAW_ROOT_DIR=/data
+EXPOSE 3000
+CMD ["alphaclaw", "start"]
+```
+
+## Setup UI
+
+| Tab           | What it manages                                                                                            |
+| ------------- | ---------------------------------------------------------------------------------------------------------- |
+| **General**   | Gateway status, channel health, pending pairings, Google Workspace, repo sync schedule, OpenClaw dashboard |
+| **Watchdog**  | Health monitoring, crash-loop status, auto-repair toggle, notifications toggle, event log, live log tail   |
+| **Providers** | AI provider credentials (Anthropic, OpenAI, Gemini, Mistral, Voyage, Groq, Deepgram) and model selection   |
+| **Envars**    | Environment variables — view, edit, add — with gateway restart prompts                                     |
+| **Webhooks**  | Webhook endpoints, transform modules, request history, payload inspection                                  |
+
+## CLI
+
+| Command                                                    | Description                                   |
+| ---------------------------------------------------------- | --------------------------------------------- |
+| `alphaclaw start`                                          | Start the server (Setup UI + gateway manager) |
+| `alphaclaw git-sync -m "message"`                          | Commit and push the OpenClaw workspace        |
+| `alphaclaw telegram topic add --thread <id> --name <text>` | Register a Telegram topic mapping             |
+| `alphaclaw version`                                        | Print version                                 |
+| `alphaclaw help`                                           | Show help                                     |
+
+## Architecture
+
+```mermaid
+graph TD
+    subgraph AlphaClaw
+        UI["Setup UI<br/><small>Preact + htm + Wouter</small>"]
+        WD["Watchdog<br/><small>Crash recovery · Notifications</small>"]
+        WH["Webhooks<br/><small>Transforms · Request logging</small>"]
+        UI --> API
+        WD --> API
+        WH --> API
+        API["Express Server<br/><small>JSON APIs · Auth · Proxy</small>"]
+    end
+
+    API -- "proxy" --> GW["OpenClaw Gateway<br/><small>Child process · 127.0.0.1:18789</small>"]
+    GW --> DATA["ALPHACLAW_ROOT_DIR<br/><small>.openclaw/ · .env · logs · SQLite</small>"]
+```
+
+## Watchdog
+
+The built-in watchdog monitors gateway health and recovers from failures automatically.
+
+| Capability                  | Details                                                        |
+| --------------------------- | -------------------------------------------------------------- |
+| **Health checks**           | Periodic `openclaw health` with configurable interval          |
+| **Crash detection**         | Listens for gateway exit events                                |
+| **Crash-loop detection**    | Threshold-based (default: 3 crashes in 300s)                   |
+| **Auto-repair**             | Runs `openclaw doctor --fix --yes`, relaunches gateway         |
+| **Notifications**           | Telegram and Discord alerts for crashes, repairs, and recovery |
+| **Event log**               | SQLite-backed incident history with API and UI access          |
+
+## Environment Variables
+
+| Variable                          | Required | Description                                        |
+| --------------------------------- | -------- | -------------------------------------------------- |
+| `SETUP_PASSWORD`                  | Yes      | Password for the Setup UI                          |
+| `OPENCLAW_GATEWAY_TOKEN`          | Auto     | Gateway auth token (auto-generated if unset)       |
+| `GITHUB_TOKEN`                    | Yes      | GitHub PAT for workspace repo                      |
+| `GITHUB_WORKSPACE_REPO`           | Yes      | GitHub repo for workspace sync (e.g. `owner/repo`) |
+| `TELEGRAM_BOT_TOKEN`              | Optional | Telegram bot token                                 |
+| `DISCORD_BOT_TOKEN`               | Optional | Discord bot token                                  |
+| `WATCHDOG_AUTO_REPAIR`            | Optional | Enable auto-repair on crash (`true`/`false`)       |
+| `WATCHDOG_NOTIFICATIONS_DISABLED` | Optional | Disable watchdog notifications (`true`/`false`)    |
+| `PORT`                            | Optional | Server port (default `3000`)                       |
+| `ALPHACLAW_ROOT_DIR`              | Optional | Data directory (default `/data`)                   |
+| `TRUST_PROXY_HOPS`                | Optional | Trust proxy hop count for correct client IP        |
+
+## Security Notes
+
+AlphaClaw is a convenience wrapper — it intentionally trades some of OpenClaw's default hardening for ease of setup. You should understand what's different:
+
+| Area                    | What AlphaClaw does                                                                                                                   | Trade-off                                                                                              |
+| ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------ |
+| **Setup password**      | All gateway access is gated behind a single `SETUP_PASSWORD`. Brute-force protection is built in (exponential backoff lockout).       | Simpler than OpenClaw's pairing code flow, but the password must be strong.                            |
+| **One-click pairing**   | Channel pairings (Telegram/Discord) can be approved from the Setup UI instead of the CLI.                                             | No terminal access required, but anyone with the setup password can approve pairings.                  |
+| **Auto CLI approval**   | The first CLI device pairing is auto-approved so you can connect without a second screen. Subsequent requests appear in the UI.       | Removes the manual pairing step for the initial CLI connection.                                        |
+| **Query-string tokens** | Webhook URLs support `?token=<WEBHOOK_TOKEN>` for providers that don't support `Authorization` headers. Warnings are shown in the UI. | Tokens may appear in server logs and referrer headers. Use header auth when your provider supports it. |
+| **Gateway token**       | `OPENCLAW_GATEWAY_TOKEN` is auto-generated and injected into the environment so the proxy can authenticate with the gateway.          | The token lives in the `.env` file on the server — standard for managed deployments but worth noting.  |
+
+If you need OpenClaw's full security posture (manual pairing codes, no query-string tokens, no auto-approval), use OpenClaw directly without AlphaClaw.
+
+## Development
+
+```bash
+npm install
+npm test                # Full suite (90 tests)
+npm run test:watchdog   # Watchdog-focused suite (14 tests)
+npm run test:watch      # Watch mode
+npm run test:coverage   # Coverage report
+```
+
+**Requirements:** Node.js ≥ 22.12.0
+
+## License
+
+MIT

package/bin/alphaclaw.js

@@ -660,6 +660,85 @@ if (fs.existsSync(configPath)) {
         console.log("[alphaclaw] Scrubbed tokenized GitHub remote URL");
       }
     } catch {}
+
+    const bootRestoreConfigFromRemote = () => {
+      const branch = (() => {
+        try {
+          return (
+            String(
+              execSync("git symbolic-ref --short HEAD", {
+                cwd: openclawDir,
+                stdio: ["ignore", "pipe", "ignore"],
+                encoding: "utf8",
+              }),
+            ).trim() || "main"
+          );
+        } catch {
+          return "main";
+        }
+      })();
+      const githubToken = String(process.env.GITHUB_TOKEN || "").trim();
+      const gitEnv = { ...process.env };
+      const askPassPath = path.join(
+        os.tmpdir(),
+        `alphaclaw-boot-git-askpass-${process.pid}.sh`,
+      );
+      try {
+        if (githubToken) {
+          fs.writeFileSync(
+            askPassPath,
+            [
+              "#!/usr/bin/env sh",
+              'case "$1" in',
+              '  *Username*) echo "x-access-token" ;;',
+              '  *Password*) echo "${GITHUB_TOKEN:-}" ;;',
+              '  *) echo "" ;;',
+              "esac",
+              "",
+            ].join("\n"),
+            { mode: 0o700 },
+          );
+          gitEnv.GITHUB_TOKEN = githubToken;
+          gitEnv.GIT_TERMINAL_PROMPT = "0";
+          gitEnv.GIT_ASKPASS = askPassPath;
+        }
+        execSync(`git ls-remote --exit-code --heads origin "${branch}"`, {
+          cwd: openclawDir,
+          stdio: "ignore",
+          env: gitEnv,
+        });
+        execSync(`git fetch --quiet origin "${branch}"`, {
+          cwd: openclawDir,
+          stdio: "ignore",
+          env: gitEnv,
+        });
+        const remoteConfig = String(
+          execSync(`git show "origin/${branch}:openclaw.json"`, {
+            cwd: openclawDir,
+            stdio: ["ignore", "pipe", "ignore"],
+            encoding: "utf8",
+            env: gitEnv,
+          }),
+        );
+        if (remoteConfig.trim()) {
+          fs.writeFileSync(configPath, remoteConfig);
+          console.log(
+            `[alphaclaw] Restored openclaw.json from origin/${branch}`,
+          );
+        }
+      } catch (e) {
+        console.log(
+          `[alphaclaw] Remote config restore skipped: ${String(e.message || "").slice(0, 200)}`,
+        );
+      } finally {
+        if (githubToken) {
+          try {
+            fs.rmSync(askPassPath, { force: true });
+          } catch {}
+        }
+      }
+    };
+    bootRestoreConfigFromRemote();
   }
 
   try {

package/lib/public/css/shell.css

@@ -3,13 +3,46 @@
 .app-shell {
   display: grid;
   grid-template-columns: 220px 1fr;
-  grid-template-rows: 1fr 24px;
+  grid-template-rows: auto 1fr 24px;
   height: 100vh;
   position: relative;
   z-index: 1;
 }
 
+.global-restart-banner {
+  grid-column: 1 / -1;
+  grid-row: 1;
+  background: rgba(234, 179, 8, 0.08);
+  border-bottom: 1px solid rgba(234, 179, 8, 0.32);
+  padding: 10px 32px;
+}
+
+.global-restart-banner__content {
+  margin: 0 auto;
+  max-width: 900px;
+  position: relative;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  gap: 12px;
+  min-height: 28px;
+}
+
+.global-restart-banner__text {
+  font-size: 12px;
+  color: #fde68a;
+  text-align: center;
+}
+
+.global-restart-banner__button {
+  position: absolute;
+  right: 0;
+  top: 50%;
+  transform: translateY(-50%);
+}
+
 .app-content {
+  grid-row: 2;
   overflow-y: auto;
   padding: 24px 32px;
   position: relative;
@@ -19,6 +52,7 @@
 /* ── Sidebar ───────────────────────────────────── */
 
 .app-sidebar {
+  grid-row: 2;
   background:
     linear-gradient(180deg, rgba(255, 255, 255, 0.03) 0%, rgba(255, 255, 255, 0.012) 100%),
     var(--bg-sidebar);
@@ -159,6 +193,7 @@
 /* ── Statusbar ─────────────────────────────────── */
 
 .app-statusbar {
+  grid-row: 3;
   grid-column: 1 / -1;
   background: var(--bg-sidebar);
   border-top: 1px solid var(--border-strong);
@@ -211,8 +246,28 @@
 /* ── Responsive ────────────────────────────────── */
 
 @media (max-width: 768px) {
-  .app-shell { grid-template-columns: 1fr; }
+  .app-shell {
+    grid-template-columns: 1fr;
+    grid-template-rows: auto 1fr 24px;
+  }
+  .global-restart-banner {
+    padding: 10px 14px;
+  }
+  .global-restart-banner__content {
+    max-width: none;
+    align-items: flex-start;
+    flex-direction: column;
+    min-height: 0;
+  }
+  .global-restart-banner__text {
+    text-align: left;
+  }
+  .global-restart-banner__button {
+    position: static;
+    transform: none;
+  }
   .app-content {
+    grid-row: 2;
     padding: 0 14px 12px;
   }
 

package/lib/public/css/theme.css

@@ -48,6 +48,53 @@ body::before {
   color: var(--text-muted);
 }
 
+/* Shared collapsible history rows (incidents, webhook requests). */
+.ac-history-list {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+}
+
+.ac-history-item {
+  border: 1px solid var(--panel-border-contrast);
+  border-radius: 10px;
+  background: rgba(0, 0, 0, 0.12);
+}
+
+.ac-history-summary {
+  cursor: pointer;
+  list-style: none;
+  padding: 8px 10px;
+  color: #d1d5db;
+}
+
+.ac-history-summary::-webkit-details-marker {
+  display: none;
+}
+
+.ac-history-summary-row {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 8px;
+}
+
+.ac-history-toggle {
+  color: var(--text-muted);
+  transition: transform 0.15s ease, color 0.15s ease;
+}
+
+.ac-history-item[open] .ac-history-toggle {
+  transform: rotate(90deg);
+  color: #d1d5db;
+}
+
+.ac-history-body {
+  margin: 4px 10px 10px;
+  padding-top: 8px;
+  border-top: 1px solid var(--panel-border-contrast);
+}
+
 /* Unified panel treatment across tabs/pages. */
 .bg-surface {
   background: var(--panel-bg-contrast) !important;
@@ -86,6 +133,15 @@ textarea:focus {
 ::-webkit-scrollbar-track { background: transparent; }
 ::-webkit-scrollbar-thumb { background: rgba(255, 255, 255, 0.08); border-radius: 3px; }
 
+.scrollbar-hidden {
+  -ms-overflow-style: none;
+  scrollbar-width: none;
+}
+
+.scrollbar-hidden::-webkit-scrollbar {
+  display: none;
+}
+
 /* Google scope picker toggle buttons */
 .scope-btn { background: rgba(255,255,255,0.03); color: var(--text-muted); border: 1px solid var(--border); transition: all 0.15s; }
 .scope-btn:hover { border-color: var(--text-dim); color: var(--text); }
@@ -182,6 +238,159 @@ textarea:focus {
   cursor: not-allowed;
 }
 
+.ac-btn-ghost {
+  border: none;
+  color: var(--text-muted);
+  background: transparent;
+  transition: color 0.15s ease;
+}
+
+.ac-btn-ghost:hover:not(:disabled) {
+  color: #f3f4f6;
+}
+
+.ac-btn-ghost:disabled {
+  opacity: 0.5;
+  cursor: not-allowed;
+}
+
+.ac-btn-danger {
+  border: 1px solid rgba(239, 68, 68, 0.45);
+  background: rgba(239, 68, 68, 0.08);
+  color: #fca5a5;
+  transition:
+    border-color 0.15s ease,
+    color 0.15s ease,
+    background 0.15s ease,
+    transform 0.15s ease;
+}
+
+.ac-btn-danger:hover:not(:disabled) {
+  border-color: rgba(239, 68, 68, 0.7);
+  background: rgba(239, 68, 68, 0.14);
+  color: #fecaca;
+}
+
+.ac-btn-danger:active:not(:disabled) {
+  transform: translateY(1px);
+}
+
+.ac-btn-danger:disabled {
+  opacity: 0.5;
+  cursor: not-allowed;
+}
+
+.ac-toggle {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  cursor: pointer;
+  user-select: none;
+}
+
+.ac-toggle-input {
+  position: absolute;
+  width: 1px;
+  height: 1px;
+  opacity: 0;
+  pointer-events: none;
+}
+
+.ac-toggle-track {
+  position: relative;
+  width: 34px;
+  height: 20px;
+  border-radius: 999px;
+  border: 1px solid var(--panel-border-contrast);
+  background: rgba(0, 0, 0, 0.35);
+  box-shadow: inset 0 0 0 1px rgba(255, 255, 255, 0.02);
+  transition:
+    border-color 0.18s ease,
+    background-color 0.18s ease,
+    box-shadow 0.18s ease;
+}
+
+.ac-toggle-thumb {
+  position: absolute;
+  top: 2px;
+  left: 2px;
+  width: 14px;
+  height: 14px;
+  border-radius: 999px;
+  background: #94a3b8;
+  box-shadow: 0 0 0 1px rgba(15, 21, 33, 0.3);
+  transition:
+    transform 0.18s ease,
+    background-color 0.18s ease,
+    box-shadow 0.18s ease;
+}
+
+.ac-toggle-label {
+  font-size: 12px;
+  color: #d1d5db;
+}
+
+.ac-toggle-input:checked + .ac-toggle-track {
+  border-color: rgba(99, 235, 255, 0.8);
+  background: rgba(99, 235, 255, 0.16);
+  box-shadow:
+    inset 0 0 0 1px rgba(99, 235, 255, 0.2),
+    0 0 10px rgba(99, 235, 255, 0.2);
+}
+
+.ac-toggle-input:checked + .ac-toggle-track .ac-toggle-thumb {
+  transform: translateX(14px);
+  background: #b6f6ff;
+  box-shadow:
+    0 0 0 1px rgba(15, 21, 33, 0.25),
+    0 0 10px rgba(99, 235, 255, 0.45);
+}
+
+.ac-toggle-input:focus-visible + .ac-toggle-track {
+  outline: 2px solid rgba(99, 235, 255, 0.55);
+  outline-offset: 2px;
+}
+
+.ac-toggle-input:disabled + .ac-toggle-track {
+  opacity: 0.55;
+  box-shadow: none;
+}
+
+.ac-toggle-input:disabled + .ac-toggle-track + .ac-toggle-label {
+  opacity: 0.6;
+}
+
+@keyframes acStatusDotPulse {
+  0%,
+  100% {
+    transform: scale(1);
+    box-shadow:
+      0 0 0 0 rgba(34, 197, 94, 0.14),
+      0 0 5px rgba(34, 197, 94, 0.18);
+  }
+  50% {
+    transform: scale(1.08);
+    box-shadow:
+      0 0 0 3px rgba(34, 197, 94, 0.08),
+      0 0 9px rgba(34, 197, 94, 0.32);
+  }
+}
+
+.ac-status-dot {
+  width: 8px;
+  height: 8px;
+  border-radius: 999px;
+}
+
+.ac-status-dot--healthy {
+  background: #22c55e;
+  animation: acStatusDotPulse 2.6s ease-in-out infinite;
+}
+
+.ac-status-dot--healthy-offset {
+  animation-delay: 0.95s;
+}
+
 .ac-btn-green {
   border: 1px solid rgba(34, 197, 94, 0.45);
   background: linear-gradient(
@@ -215,3 +424,25 @@ textarea:focus {
 .ac-btn-green:active:not(:disabled) {
   transform: translateY(1px);
 }
+
+@keyframes acSpinnerOrbit {
+  0% {
+    transform: rotate(0deg);
+  }
+  100% {
+    transform: rotate(360deg);
+  }
+}
+
+.ac-spinner {
+  animation: acSpinnerOrbit 1s cubic-bezier(0.3, 0.2, 0.7, 0.8) infinite;
+  transform-origin: center;
+  will-change: transform;
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .ac-spinner {
+    animation-duration: 1.8s;
+    animation-timing-function: linear;
+  }
+}