@tokenfactory/acc-runner 0.12.0 → 0.14.0

package/dist/github-client.js

@@ -0,0 +1,234 @@
+/**
+ * v0.53 T-53-4 — runner-side, budget-aware GitHub REST client.
+ *
+ * A port of the api/ side's `api/_lib/github-client.ts` (T-52-4) into the
+ * runner package. The runner CANNOT import api/ code (separate build, no
+ * shared module graph), so the pattern is reproduced here. The three
+ * behaviours match the server client 1:1:
+ *
+ *   1. Quota tracking — x-ratelimit-remaining / x-ratelimit-reset per
+ *      resource (core, search, graphql, …) from every response, surfaced
+ *      via getQuotaSnapshot() for `acc-runner doctor`.
+ *
+ *   2. Secondary-limit backoff — a 429, or a 403 carrying retry-after /
+ *      x-ratelimit-remaining: 0, is a rate-limit response, not an answer.
+ *      The client sleeps once (retry-after if given, else an exponential
+ *      base, both jittered, capped at MAX_BACKOFF_MS) and retries once. A
+ *      second rate-limit response — or a retry-after beyond the cap —
+ *      surfaces as a typed RateLimitedError.
+ *
+ *   3. Per-task-execution soft budget — runTask arms a budget at the top
+ *      of a task (startTaskGithubBudget) and disarms it in its finally
+ *      (endTaskGithubBudget). Once the budget is spent, every further
+ *      githubFetch throws GithubBudgetExceededError WITHOUT hitting the
+ *      network. The caller treats this as a CLEAN, RETRYABLE infra failure
+ *      — NOT a code failure: it never reaches classifyClaudeExit, so the
+ *      runner is never quarantined for exhausting its GitHub budget.
+ *
+ * ── Coverage note (READ THIS) ──────────────────────────────────────────
+ * As of v0.53 the runner makes ALL of its GitHub calls through the `gh`
+ * CLI (see gh.ts, runtime/conflict-resolver.ts, runtime/rework.ts,
+ * runtime/reviewer.ts). Those `gh`/`gh api` invocations are SEPARATE
+ * processes with their own rate-limit handling and are out of scope for
+ * this client — they remain UNCOVERED by the budget/backoff here. This
+ * module is the sanctioned wrapper for any future *direct* REST call the
+ * runner adds (`fetch` against api.github.com); routing such calls through
+ * githubFetch is what keeps them budget- and rate-limit-aware.
+ *
+ * Reference: api/_lib/github-client.ts, planning/ACC_WORKFLOW_GAP_ANALYSIS.md §G13.
+ */
+/** Soft per-task-execution call budget. */
+export const DEFAULT_TASK_GITHUB_BUDGET = 50;
+/**
+ * Longest single backoff sleep. A secondary-limit retry-after can be 60s+;
+ * sleeping that long inside a task run wastes wall-clock the operator is
+ * paying for, so anything above the cap skips the retry and throws
+ * RateLimitedError instead.
+ */
+export const MAX_BACKOFF_MS = 15_000;
+/** Base for the exponential backoff when GitHub sends no retry-after. */
+export const BASE_BACKOFF_MS = 2_000;
+/**
+ * Typed rate-limit failure: GitHub said "back off" twice in a row (or
+ * asked for a longer wait than we can afford). A rate-limit storm is then
+ * diagnosable instead of looking like random github_http_403 noise. This
+ * is a RETRYABLE INFRA failure — see isRetryableGithubError.
+ */
+export class RateLimitedError extends Error {
+    status;
+    resource;
+    /** ISO timestamp the quota window resets at, when GitHub said. */
+    reset_at;
+    retry_after_s;
+    constructor(opts) {
+        super(`github rate limited (${opts.status})` +
+            (opts.resource ? ` on ${opts.resource}` : "") +
+            (opts.reset_at ? `, resets ${opts.reset_at}` : ""));
+        this.name = "RateLimitedError";
+        this.status = opts.status;
+        this.resource = opts.resource;
+        this.reset_at = opts.reset_at;
+        this.retry_after_s = opts.retry_after_s;
+    }
+}
+/**
+ * Soft-budget exhaustion. NOT a code failure: the task simply did as much
+ * direct GitHub work as one task execution is allowed. The caller should
+ * surface it as a clean, RETRYABLE infra failure and NEVER feed it to the
+ * claude-exit classifier (which would quarantine the runner).
+ */
+export class GithubBudgetExceededError extends Error {
+    used;
+    budget;
+    constructor(used, budget) {
+        super(`github task budget exhausted (${used}/${budget} calls)`);
+        this.name = "GithubBudgetExceededError";
+        this.used = used;
+        this.budget = budget;
+    }
+}
+/**
+ * v0.53 T-53-4: both client failure modes are retryable infra conditions,
+ * not task/code failures. The contract the runner relies on: an error for
+ * which this returns true must surface as `phase: "github"` / retryable and
+ * MUST NOT set `quarantine_cause` — i.e. it is classifier-neutral and never
+ * benches the runner.
+ */
+export function isRetryableGithubError(err) {
+    return err instanceof RateLimitedError || err instanceof GithubBudgetExceededError;
+}
+// ── Module state (per process) ───────────────────────────────────────────────
+const quotaByResource = new Map();
+let usedThisTask = 0;
+let taskBudget = null;
+/**
+ * Begin a budgeted task execution: resets the per-task counter and arms the
+ * soft budget. runTask calls this at the top of a task; the explicit reset
+ * also re-baselines a long-lived watch process between tasks.
+ */
+export function startTaskGithubBudget(budget = DEFAULT_TASK_GITHUB_BUDGET) {
+    usedThisTask = 0;
+    taskBudget = budget;
+}
+/**
+ * End a budgeted task execution: disarms the soft budget so any direct REST
+ * call made OUTSIDE a task run (e.g. doctor) is unbudgeted. Idempotent.
+ */
+export function endTaskGithubBudget() {
+    taskBudget = null;
+}
+export function getQuotaSnapshot() {
+    let min = null;
+    const resources = {};
+    for (const [name, q] of quotaByResource) {
+        resources[name] = { ...q };
+        if (q.remaining !== null &&
+            (min === null || min.remaining === null || q.remaining < min.remaining)) {
+            min = q;
+        }
+    }
+    return {
+        remaining: min?.remaining ?? null,
+        reset_at: min?.reset_at ?? null,
+        used_this_task: usedThisTask,
+        resources,
+    };
+}
+/** Test seam: wipe quota/budget state between unit tests. */
+export function resetGithubClientStateForTests() {
+    quotaByResource.clear();
+    usedThisTask = 0;
+    taskBudget = null;
+}
+function recordRateLimitHeaders(res) {
+    const remainingRaw = res.headers.get("x-ratelimit-remaining");
+    const resetRaw = res.headers.get("x-ratelimit-reset");
+    if (remainingRaw === null && resetRaw === null)
+        return;
+    const resource = res.headers.get("x-ratelimit-resource") ?? "core";
+    const remaining = remainingRaw !== null && remainingRaw !== "" ? Number(remainingRaw) : NaN;
+    const resetEpochS = resetRaw !== null && resetRaw !== "" ? Number(resetRaw) : NaN;
+    quotaByResource.set(resource, {
+        remaining: Number.isFinite(remaining) ? remaining : null,
+        reset_at: Number.isFinite(resetEpochS)
+            ? new Date(resetEpochS * 1000).toISOString()
+            : null,
+    });
+}
+/**
+ * A 429 is always "back off". A 403 is only a rate limit when it carries
+ * retry-after (secondary limit) or x-ratelimit-remaining: 0 (primary limit
+ * exhausted) — a plain 403 is a permissions error and passes through.
+ */
+function isRateLimitResponse(res) {
+    if (res.status === 429)
+        return true;
+    if (res.status !== 403)
+        return false;
+    if (res.headers.get("retry-after") !== null)
+        return true;
+    return res.headers.get("x-ratelimit-remaining") === "0";
+}
+function toRateLimitedError(res) {
+    const retryAfterRaw = res.headers.get("retry-after");
+    const retryAfter = retryAfterRaw !== null ? Number(retryAfterRaw) : NaN;
+    const resetRaw = res.headers.get("x-ratelimit-reset");
+    const resetEpochS = resetRaw !== null ? Number(resetRaw) : NaN;
+    return new RateLimitedError({
+        status: res.status,
+        resource: res.headers.get("x-ratelimit-resource"),
+        reset_at: Number.isFinite(resetEpochS)
+            ? new Date(resetEpochS * 1000).toISOString()
+            : null,
+        retry_after_s: Number.isFinite(retryAfter) ? retryAfter : null,
+    });
+}
+function defaultSleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+/**
+ * Authenticated GitHub REST fetch. The caller supplies whatever token is
+ * appropriate (the runner uses the operator's own gh/git credentials for
+ * CLI calls; a direct REST consumer would pass a token it already holds).
+ * An empty token sends an anonymous request rather than `Bearer <empty>`.
+ */
+export async function githubFetch(url, token, init = {}, deps = {}) {
+    const fetchImpl = deps.fetchImpl ?? fetch;
+    const sleep = deps.sleep ?? defaultSleep;
+    const random = deps.random ?? Math.random;
+    const headers = new Headers(init.headers);
+    if (token)
+        headers.set("Authorization", `Bearer ${token}`);
+    if (!headers.has("Accept")) {
+        headers.set("Accept", "application/vnd.github+json");
+    }
+    headers.set("X-GitHub-Api-Version", "2022-11-28");
+    headers.set("User-Agent", "acc-runner");
+    const doFetch = async () => {
+        if (taskBudget !== null && usedThisTask >= taskBudget) {
+            throw new GithubBudgetExceededError(usedThisTask, taskBudget);
+        }
+        usedThisTask++;
+        const res = await fetchImpl(url, { ...init, headers });
+        recordRateLimitHeaders(res);
+        return res;
+    };
+    const first = await doFetch();
+    if (!isRateLimitResponse(first))
+        return first;
+    // Rate limited: sleep jittered-exponential once, retry once.
+    const retryAfterRaw = first.headers.get("retry-after");
+    const retryAfterS = retryAfterRaw !== null ? Number(retryAfterRaw) : NaN;
+    const baseMs = Number.isFinite(retryAfterS) ? retryAfterS * 1000 : BASE_BACKOFF_MS;
+    if (baseMs > MAX_BACKOFF_MS) {
+        // GitHub asked for a longer pause than we want to burn mid-task —
+        // surface the typed error now instead of sleeping into the run.
+        throw toRateLimitedError(first);
+    }
+    await sleep(Math.round(baseMs * (1 + random() * 0.5)));
+    const second = await doFetch();
+    if (!isRateLimitResponse(second))
+        return second;
+    throw toRateLimitedError(second);
+}
+//# sourceMappingURL=github-client.js.map

package/dist/github-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-client.js","sourceRoot":"","sources":["../src/github-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AAErC,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC;AAErC;;;;;GAKG;AACH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,MAAM,CAAS;IACf,QAAQ,CAAgB;IACjC,kEAAkE;IACzD,QAAQ,CAAgB;IACxB,aAAa,CAAgB;IAEtC,YAAY,IAKX;QACC,KAAK,CACH,wBAAwB,IAAI,CAAC,MAAM,GAAG;YACpC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACrD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,IAAI,CAAS;IACb,MAAM,CAAS;IAExB,YAAY,IAAY,EAAE,MAAc;QACtC,KAAK,CAAC,iCAAiC,IAAI,IAAI,MAAM,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,OAAO,GAAG,YAAY,gBAAgB,IAAI,GAAG,YAAY,yBAAyB,CAAC;AACrF,CAAC;AAmBD,gFAAgF;AAChF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAyB,CAAC;AACzD,IAAI,YAAY,GAAG,CAAC,CAAC;AACrB,IAAI,UAAU,GAAkB,IAAI,CAAC;AAErC;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB,0BAA0B;IAC/E,YAAY,GAAG,CAAC,CAAC;IACjB,UAAU,GAAG,MAAM,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,IAAI,GAAG,GAAyB,IAAI,CAAC;IACrC,MAAM,SAAS,GAAkC,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC;QACxC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QAC3B,IACE,CAAC,CAAC,SAAS,KAAK,IAAI;YACpB,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC,EACvE,CAAC;YACD,GAAG,GAAG,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO;QACL,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;QACjC,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,IAAI;QAC/B,cAAc,EAAE,YAAY;QAC5B,SAAS;KACV,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,8BAA8B;IAC5C,eAAe,CAAC,KAAK,EAAE,CAAC;IACxB,YAAY,GAAG,CAAC,CAAC;IACjB,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAa;IAC3C,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACtD,IAAI,YAAY,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO;IACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,MAAM,CAAC;IACnE,MAAM,SAAS,GACb,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5E,MAAM,WAAW,GAAG,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAClF,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QACxD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YACpC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;YAC5C,CAAC,CAAC,IAAI;KACT,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,GAAa;IACxC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,KAAK,GAAG,CAAC;AAC1D,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAa;IACvC,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACxE,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/D,OAAO,IAAI,gBAAgB,CAAC;QAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YACpC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;YAC5C,CAAC,CAAC,IAAI;QACR,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;KAC/D,CAAC,CAAC;AACL,CAAC;AAUD,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,KAAa,EACb,OAAoB,EAAE,EACtB,OAAwB,EAAE;IAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAE1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAExC,MAAM,OAAO,GAAG,KAAK,IAAuB,EAAE;QAC5C,IAAI,UAAU,KAAK,IAAI,IAAI,YAAY,IAAI,UAAU,EAAE,CAAC;YACtD,MAAM,IAAI,yBAAyB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAChE,CAAC;QACD,YAAY,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAE9C,6DAA6D;IAC7D,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;IACnF,IAAI,MAAM,GAAG,cAAc,EAAE,CAAC;QAC5B,kEAAkE;QAClE,gEAAgE;QAChE,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IAEvD,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAChD,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC"}

package/dist/runtime/cache-dir.d.ts

@@ -0,0 +1,2 @@
+export declare function cacheDir(): string;
+//# sourceMappingURL=cache-dir.d.ts.map

package/dist/runtime/cache-dir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-dir.d.ts","sourceRoot":"","sources":["../../src/runtime/cache-dir.ts"],"names":[],"mappings":"AAWA,wBAAgB,QAAQ,IAAI,MAAM,CAKjC"}

package/dist/runtime/cache-dir.js

@@ -0,0 +1,15 @@
+/**
+ * v0.14.0 (T-54-2): single source of truth for the runner cache root.
+ *
+ * `quarantine.ts` already honoured ACC_RUNNER_CACHE_DIR inline; the
+ * singleton-lock and last-task-env modules added in this release reuse the
+ * same resolution so tests can point all cache state at a tmpdir with one
+ * env var. Defaults to ~/.cache/acc-runner (unchanged from prior releases).
+ */
+import os from "node:os";
+import path from "node:path";
+export function cacheDir() {
+    return (process.env.ACC_RUNNER_CACHE_DIR?.trim() ||
+        path.join(os.homedir(), ".cache", "acc-runner"));
+}
+//# sourceMappingURL=cache-dir.js.map

package/dist/runtime/cache-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-dir.js","sourceRoot":"","sources":["../../src/runtime/cache-dir.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,QAAQ;IACtB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE;QACxC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,CAChD,CAAC;AACJ,CAAC"}

package/dist/runtime/quarantine.d.ts

@@ -4,6 +4,16 @@ export interface QuarantineState {
     classifiedAt: string;
     taskId: string;
     detail: string;
+    /**
+     * v0.53 T-53-4: how many consecutive instant-empty (heuristic) claude
+     * exits triggered the quarantine. Cache-schema additive — older readers
+     * ignore it; the keychain entry schema and the runner protocol message
+     * shapes are untouched. Definitive machine failures (dyld, exit 127,
+     * usage/auth patterns) record 1; a heuristic env_broken records 2 (the
+     * task-runner only quarantines after the retry also exits instantly).
+     * Optional so a state written by a pre-0.53 runner still parses.
+     */
+    consecutive?: number;
 }
 /** Path to the quarantine sentinel file. Configurable via ACC_RUNNER_CACHE_DIR for tests. */
 export declare function quarantineFile(): string;

package/dist/runtime/quarantine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quarantine.d.ts","sourceRoot":"","sources":["../../src/runtime/quarantine.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,eAAe,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,IAAI,MAAM,CAMvC;AAED,0EAA0E;AAC1E,wBAAsB,aAAa,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAQrE;AAED,oEAAoE;AACpE,wBAAsB,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAIzE;AAED,yEAAyE;AACzE,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAMrD"}
+{"version":3,"file":"quarantine.d.ts","sourceRoot":"","sources":["../../src/runtime/quarantine.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,eAAe,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,IAAI,MAAM,CAMvC;AAED,0EAA0E;AAC1E,wBAAsB,aAAa,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAQrE;AAED,oEAAoE;AACpE,wBAAsB,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAIzE;AAED,yEAAyE;AACzE,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAMrD"}

package/dist/runtime/quarantine.js.map

@@ -1 +1 @@
-{"version":3,"file":"quarantine.js","sourceRoot":"","sources":["../../src/runtime/quarantine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAU7B,6FAA6F;AAC7F,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,IAAI,CACd,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE;QACtC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,EACjD,iBAAiB,CAClB,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAsB;IACxD,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IAClE,CAAC;AACH,CAAC"}
+{"version":3,"file":"quarantine.js","sourceRoot":"","sources":["../../src/runtime/quarantine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAoB7B,6FAA6F;AAC7F,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,IAAI,CACd,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE;QACtC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,EACjD,iBAAiB,CAClB,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAsB;IACxD,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IAClE,CAAC;AACH,CAAC"}

package/dist/runtime/singleton.d.ts

@@ -0,0 +1,47 @@
+export interface SingletonLockInfo {
+    pid: number;
+    /** Canonical (realpath-resolved where possible) repo path this runner serves. */
+    repoPath: string;
+    acquiredAt: string;
+    version: string;
+}
+export interface SingletonLock {
+    lockFile: string;
+    repoPath: string;
+    /** Remove the lock iff we still own it. Safe to call more than once. */
+    release(): Promise<void>;
+}
+export declare class SingletonLockHeldError extends Error {
+    readonly holder: SingletonLockInfo;
+    readonly lockFile: string;
+    constructor(holder: SingletonLockInfo, lockFile: string);
+}
+/**
+ * Resolve a repo path to a stable canonical form so two spellings of the
+ * same directory (trailing slash, symlink, `./`) map to one lock file.
+ * realpath fails if the path does not exist yet — fall back to resolve().
+ */
+export declare function canonicalRepoPath(repoPath: string): string;
+/** `<cache>/runner.<hash>.lock`, hash derived from the canonical repo path. */
+export declare function singletonLockPath(repoPath: string): string;
+/**
+ * Acquire the single-instance lock for `repoPath`. Throws
+ * SingletonLockHeldError when a *live* process already holds the lock for
+ * the same canonical repo path. A stale lock (dead pid, our own pid, or a
+ * corrupt file) is reclaimed with a stderr breadcrumb and then re-acquired.
+ */
+export declare function acquireSingletonLock(repoPath: string, pid?: number): Promise<SingletonLock>;
+/**
+ * Inspect the lock file for `repoPath` and return its holder iff a *live*
+ * process other than `selfPid` owns it. Used by `acc-runner doctor` to
+ * report a duplicate runner without trying to acquire the lock.
+ */
+export declare function findLiveLockHolder(repoPath: string, selfPid?: number): Promise<SingletonLockInfo | null>;
+/**
+ * pgrep-style scan for other `acc-runner watch` processes. Best-effort and
+ * offline of the lock file — used by doctor to catch a runner that predates
+ * the singleton lock (no lock file) or one whose lock was hand-deleted.
+ * Returns foreign pids; never throws (returns [] on any failure).
+ */
+export declare function listForeignRunnerPids(selfPid?: number): Promise<number[]>;
+//# sourceMappingURL=singleton.d.ts.map

package/dist/runtime/singleton.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"singleton.d.ts","sourceRoot":"","sources":["../../src/runtime/singleton.ts"],"names":[],"mappings":"AA4BA,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,qBAAa,sBAAuB,SAAQ,KAAK;aAE7B,MAAM,EAAE,iBAAiB;aACzB,QAAQ,EAAE,MAAM;gBADhB,MAAM,EAAE,iBAAiB,EACzB,QAAQ,EAAE,MAAM;CAOnC;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAO1D;AAED,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAO1D;AA0CD;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,MAAoB,GACxB,OAAO,CAAC,aAAa,CAAC,CA8CxB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,MAAoB,GAC5B,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAMnC;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,MAAoB,GAC5B,OAAO,CAAC,MAAM,EAAE,CAAC,CAqBnB"}

package/dist/runtime/singleton.js

@@ -0,0 +1,200 @@
+/**
+ * v0.14.0 (T-54-2, GA-3): single-instance runner lock.
+ *
+ * On 2026-06-05 two `acc-runner watch` processes came up on one machine
+ * sharing the same repo path. They collided on per-task worktree locks and
+ * raced git refs, double-failing an entire batch in under a second
+ * (CURRENT_CYCLE.md v0.53 incident (b)). No startup guard existed.
+ *
+ * This module gives any task-executing entrypoint (today: `watch`) an
+ * exclusive lock keyed by the *canonical repo path* it serves. Acquisition
+ * uses O_EXCL (`fs.openSync(file, "wx")`) so the create-or-fail is atomic;
+ * an existing lock whose pid is dead is reclaimed with a log line, while a
+ * live holder for the SAME repo path is rejected loudly.
+ *
+ * Different repo paths coexist (future multi-repo): the lock file name is
+ * derived from a hash of the canonical repo path, so one machine can run
+ * one runner per repo without contention. The conceptual name in the spec
+ * is `<cache>/runner.lock`; the per-repo hash suffix is what makes
+ * coexistence possible.
+ */
+import fs from "node:fs";
+import fsp from "node:fs/promises";
+import path from "node:path";
+import crypto from "node:crypto";
+import { cacheDir } from "./cache-dir.js";
+import { isProcessAlive } from "./locks.js";
+import { PACKAGE_VERSION } from "../pkg-version.js";
+export class SingletonLockHeldError extends Error {
+    holder;
+    lockFile;
+    constructor(holder, lockFile) {
+        super(`another acc-runner (pid ${holder.pid}) is already serving repo ${holder.repoPath}`);
+        this.holder = holder;
+        this.lockFile = lockFile;
+        this.name = "SingletonLockHeldError";
+    }
+}
+/**
+ * Resolve a repo path to a stable canonical form so two spellings of the
+ * same directory (trailing slash, symlink, `./`) map to one lock file.
+ * realpath fails if the path does not exist yet — fall back to resolve().
+ */
+export function canonicalRepoPath(repoPath) {
+    const resolved = path.resolve(repoPath);
+    try {
+        return fs.realpathSync(resolved);
+    }
+    catch {
+        return resolved;
+    }
+}
+/** `<cache>/runner.<hash>.lock`, hash derived from the canonical repo path. */
+export function singletonLockPath(repoPath) {
+    const hash = crypto
+        .createHash("sha1")
+        .update(canonicalRepoPath(repoPath))
+        .digest("hex")
+        .slice(0, 12);
+    return path.join(cacheDir(), `runner.${hash}.lock`);
+}
+async function readLockInfo(file) {
+    let raw;
+    try {
+        raw = await fsp.readFile(file, "utf8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return null;
+        throw err;
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (typeof parsed.pid !== "number" || !Number.isFinite(parsed.pid))
+            return null;
+        return {
+            pid: parsed.pid,
+            repoPath: typeof parsed.repoPath === "string" ? parsed.repoPath : "<unknown>",
+            acquiredAt: typeof parsed.acquiredAt === "string" ? parsed.acquiredAt : "<unknown>",
+            version: typeof parsed.version === "string" ? parsed.version : "<unknown>",
+        };
+    }
+    catch {
+        // Corrupt/partial lock file — treat as reclaimable rather than fatal.
+        return null;
+    }
+}
+function makeLock(file, repoPath, pid) {
+    return {
+        lockFile: file,
+        repoPath,
+        async release() {
+            try {
+                const holder = await readLockInfo(file);
+                // Only unlink if we still own it — never stomp a lock another
+                // process reclaimed after we exited uncleanly.
+                if (holder && holder.pid === pid)
+                    await fsp.unlink(file);
+            }
+            catch (err) {
+                if (err.code !== "ENOENT")
+                    throw err;
+            }
+        },
+    };
+}
+/**
+ * Acquire the single-instance lock for `repoPath`. Throws
+ * SingletonLockHeldError when a *live* process already holds the lock for
+ * the same canonical repo path. A stale lock (dead pid, our own pid, or a
+ * corrupt file) is reclaimed with a stderr breadcrumb and then re-acquired.
+ */
+export async function acquireSingletonLock(repoPath, pid = process.pid) {
+    const canonical = canonicalRepoPath(repoPath);
+    const file = singletonLockPath(repoPath);
+    await fsp.mkdir(path.dirname(file), { recursive: true });
+    const payload = `${JSON.stringify({
+        pid,
+        repoPath: canonical,
+        acquiredAt: new Date().toISOString(),
+        version: PACKAGE_VERSION,
+    }, null, 2)}\n`;
+    // Two attempts: the second only runs after we reclaim a stale lock, which
+    // closes the (tiny) window between the failed create and the unlink.
+    for (let attempt = 0; attempt < 2; attempt++) {
+        try {
+            // "wx" === O_CREAT | O_EXCL | O_WRONLY: atomic create-or-fail.
+            const fd = fs.openSync(file, "wx");
+            try {
+                fs.writeSync(fd, payload);
+            }
+            finally {
+                fs.closeSync(fd);
+            }
+            return makeLock(file, canonical, pid);
+        }
+        catch (err) {
+            if (err.code !== "EEXIST")
+                throw err;
+            const holder = await readLockInfo(file);
+            if (holder && holder.pid !== pid && isProcessAlive(holder.pid)) {
+                throw new SingletonLockHeldError(holder, file);
+            }
+            // Stale: dead holder, our own leftover pid, or unparseable. Reclaim.
+            process.stderr.write(`[acc-runner] reclaiming stale runner lock ${file} ` +
+                `(held by pid ${holder?.pid ?? "?"}, not alive)\n`);
+            try {
+                fs.unlinkSync(file);
+            }
+            catch (unlinkErr) {
+                if (unlinkErr.code !== "ENOENT")
+                    throw unlinkErr;
+            }
+        }
+    }
+    throw new Error(`could not acquire singleton lock at ${file}`);
+}
+/**
+ * Inspect the lock file for `repoPath` and return its holder iff a *live*
+ * process other than `selfPid` owns it. Used by `acc-runner doctor` to
+ * report a duplicate runner without trying to acquire the lock.
+ */
+export async function findLiveLockHolder(repoPath, selfPid = process.pid) {
+    const holder = await readLockInfo(singletonLockPath(repoPath));
+    if (holder && holder.pid !== selfPid && isProcessAlive(holder.pid)) {
+        return holder;
+    }
+    return null;
+}
+/**
+ * pgrep-style scan for other `acc-runner watch` processes. Best-effort and
+ * offline of the lock file — used by doctor to catch a runner that predates
+ * the singleton lock (no lock file) or one whose lock was hand-deleted.
+ * Returns foreign pids; never throws (returns [] on any failure).
+ */
+export async function listForeignRunnerPids(selfPid = process.pid) {
+    try {
+        const { execa } = await import("execa");
+        const { stdout } = await execa("ps", ["-axo", "pid=,args="]);
+        const pids = [];
+        for (const line of stdout.split(/\r?\n/)) {
+            const m = line.trim().match(/^(\d+)\s+(.*)$/);
+            if (!m)
+                continue;
+            const pid = Number.parseInt(m[1], 10);
+            const args = m[2];
+            if (pid === selfPid)
+                continue;
+            // Match the runner's watch command without matching this doctor run
+            // (which is `acc-runner doctor`) or a grep of the word.
+            if (/acc-runner\b.*\bwatch\b/.test(args) || /\bacc-runner-watch\b/.test(args)) {
+                pids.push(pid);
+            }
+        }
+        return pids;
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=singleton.js.map

package/dist/runtime/singleton.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"singleton.js","sourceRoot":"","sources":["../../src/runtime/singleton.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,GAAG,MAAM,kBAAkB,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAiBpD,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAE7B;IACA;IAFlB,YACkB,MAAyB,EACzB,QAAgB;QAEhC,KAAK,CACH,2BAA2B,MAAM,CAAC,GAAG,6BAA6B,MAAM,CAAC,QAAQ,EAAE,CACpF,CAAC;QALc,WAAM,GAAN,MAAM,CAAmB;QACzB,aAAQ,GAAR,QAAQ,CAAQ;QAKhC,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,IAAI,GAAG,MAAM;SAChB,UAAU,CAAC,MAAM,CAAC;SAClB,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;SACnC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,UAAU,IAAI,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA+B,CAAC;QAC7D,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW;YAC7E,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;YACnF,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;SAC3E,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,QAAgB,EAAE,GAAW;IAC3D,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,QAAQ;QACR,KAAK,CAAC,OAAO;YACX,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;gBACxC,8DAA8D;gBAC9D,+CAA+C;gBAC/C,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG;oBAAE,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC;YAClE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAgB,EAChB,MAAc,OAAO,CAAC,GAAG;IAEzB,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAC/B;QACE,GAAG;QACH,QAAQ,EAAE,SAAS;QACnB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,OAAO,EAAE,eAAe;KACG,EAC7B,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;IAEN,0EAA0E;IAC1E,qEAAqE;IACrE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,+DAA+D;YAC/D,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC5B,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACnB,CAAC;YACD,OAAO,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAChE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjD,CAAC;YACD,qEAAqE;YACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6CAA6C,IAAI,GAAG;gBAClD,gBAAgB,MAAM,EAAE,GAAG,IAAI,GAAG,gBAAgB,CACrD,CAAC;YACF,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,IAAK,SAAmC,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,SAAS,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,UAAkB,OAAO,CAAC,GAAG;IAE7B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/D,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAkB,OAAO,CAAC,GAAG;IAE7B,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClB,IAAI,GAAG,KAAK,OAAO;gBAAE,SAAS;YAC9B,oEAAoE;YACpE,wDAAwD;YACxD,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/runtime/version-drift.d.ts

@@ -0,0 +1,31 @@
+export declare const NPM_PACKAGE = "@tokenfactory/acc-runner";
+export interface TaskEnvRecord {
+    /** `claude --version` first line at the last successful task, or null. */
+    claudeVersion: string | null;
+    recordedAt: string;
+}
+export declare function taskEnvFile(): string;
+export interface NpmLatestDeps {
+    /** Fetch the latest published version string, or null on failure. */
+    fetchLatest?: () => Promise<string | null>;
+    /** Now, ms since epoch — injectable for cache-freshness tests. */
+    now?: number;
+}
+/**
+ * Latest published version, via a cached registry lookup. Returns the
+ * cached value while it is fresh; refetches once it goes stale. On a
+ * network failure with no usable cache, returns null so the caller skips
+ * the drift check silently (offline-safe).
+ */
+export declare function npmLatestVersion(deps?: NpmLatestDeps): Promise<string | null>;
+/**
+ * First line of `claude --version`, or null when the binary is missing or
+ * errors. Shared by the watch success-recorder and doctor's drift check so
+ * both compare the exact same string.
+ */
+export declare function getClaudeVersion(): Promise<string | null>;
+/** Persist the claude CLI version seen at a successful task. Best-effort. */
+export declare function recordTaskClaudeVersion(claudeVersion: string | null): Promise<void>;
+/** Read the last recorded task-env, or null when no task has succeeded yet. */
+export declare function readTaskEnv(): Promise<TaskEnvRecord | null>;
+//# sourceMappingURL=version-drift.d.ts.map

package/dist/runtime/version-drift.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-drift.d.ts","sourceRoot":"","sources":["../../src/runtime/version-drift.ts"],"names":[],"mappings":"AAwBA,eAAO,MAAM,WAAW,6BAA6B,CAAC;AAQtD,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAgBD,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3C,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAiBD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,aAAkB,GACvB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuBxB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAO/D;AAED,6EAA6E;AAC7E,wBAAsB,uBAAuB,CAC3C,aAAa,EAAE,MAAM,GAAG,IAAI,GAC3B,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,+EAA+E;AAC/E,wBAAsB,WAAW,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAEjE"}