@tokenfactory/acc-runner 0.2.0-internal

package/dist/git.js

@@ -0,0 +1,25 @@
+/**
+ * Thin git wrappers using execa. The CLI never edits the user's git
+ * config — it relies on whatever credentials they already have set up.
+ */
+import { execa } from "execa";
+async function run(repoPath, args) {
+    return execa("git", args, { cwd: repoPath, env: process.env });
+}
+export const git = {
+    async fetch(repoPath) {
+        await run(repoPath, ["fetch", "--prune", "--all"]);
+    },
+    async checkout(repoPath, branch) {
+        // First try `checkout -B`, which also creates the branch if missing.
+        await run(repoPath, ["checkout", "-B", branch]);
+    },
+    async push(repoPath, branch) {
+        await run(repoPath, ["push", "-u", "origin", branch]);
+    },
+    async isClean(repoPath) {
+        const { stdout } = await run(repoPath, ["status", "--porcelain"]);
+        return stdout.trim().length === 0;
+    },
+};
+//# sourceMappingURL=git.js.map

package/dist/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,KAAK,EAA0B,MAAM,OAAO,CAAC;AAUtD,KAAK,UAAU,GAAG,CAAC,QAAgB,EAAE,IAAc;IACjD,OAAO,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAc;IAC5B,KAAK,CAAC,KAAK,CAAC,QAAQ;QAClB,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM;QAC7B,qEAAqE;QACrE,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM;QACzB,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAQ;QACpB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;IACpC,CAAC;CACF,CAAC"}

package/dist/keychain.d.ts

@@ -0,0 +1,21 @@
+/**
+ * OS-keychain wrapper around `keytar`. The CLI never persists a JWT to
+ * disk in plaintext — keychain is the only writable surface.
+ *
+ * keytar is a native module; we lazy-import so commands that don't need
+ * credentials (`--version`, `--help`) still work on systems where the
+ * binding has not built (`linux` headless CI without libsecret, etc).
+ */
+import { type StoredSession } from "./types.js";
+type KeytarLike = {
+    setPassword(service: string, account: string, password: string): Promise<void>;
+    getPassword(service: string, account: string): Promise<string | null>;
+    deletePassword(service: string, account: string): Promise<boolean>;
+};
+export declare function saveSession(session: StoredSession): Promise<void>;
+export declare function loadSession(): Promise<StoredSession | null>;
+export declare function clearSession(): Promise<boolean>;
+/** Test-only seam used by the keychain test (overrides the lazy import). */
+export declare function __setKeytar(impl: KeytarLike | null): void;
+export {};
+//# sourceMappingURL=keychain.d.ts.map

package/dist/keychain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAIzE,KAAK,UAAU,GAAG;IAChB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACtE,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpE,CAAC;AAYF,wBAAsB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAGvE;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAUjE;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAGrD;AAED,4EAA4E;AAC5E,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,GAAG,IAAI,CAEzD"}

package/dist/keychain.js

@@ -0,0 +1,45 @@
+/**
+ * OS-keychain wrapper around `keytar`. The CLI never persists a JWT to
+ * disk in plaintext — keychain is the only writable surface.
+ *
+ * keytar is a native module; we lazy-import so commands that don't need
+ * credentials (`--version`, `--help`) still work on systems where the
+ * binding has not built (`linux` headless CI without libsecret, etc).
+ */
+import { RUNNER_KEYCHAIN_SERVICE } from "./types.js";
+const ACCOUNT = "default";
+let cached = null;
+async function getKeytar() {
+    if (cached)
+        return cached;
+    // Dynamic import keeps native-binding failures out of the cold path.
+    const mod = (await import("keytar"));
+    cached = (mod.default ?? mod);
+    return cached;
+}
+export async function saveSession(session) {
+    const k = await getKeytar();
+    await k.setPassword(RUNNER_KEYCHAIN_SERVICE, ACCOUNT, JSON.stringify(session));
+}
+export async function loadSession() {
+    const k = await getKeytar();
+    const raw = await k.getPassword(RUNNER_KEYCHAIN_SERVICE, ACCOUNT);
+    if (!raw)
+        return null;
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        // Corrupted entry — treat as "not logged in" rather than crashing.
+        return null;
+    }
+}
+export async function clearSession() {
+    const k = await getKeytar();
+    return k.deletePassword(RUNNER_KEYCHAIN_SERVICE, ACCOUNT);
+}
+/** Test-only seam used by the keychain test (overrides the lazy import). */
+export function __setKeytar(impl) {
+    cached = impl;
+}
+//# sourceMappingURL=keychain.js.map

package/dist/keychain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,uBAAuB,EAAsB,MAAM,YAAY,CAAC;AAEzE,MAAM,OAAO,GAAG,SAAkB,CAAC;AAQnC,IAAI,MAAM,GAAsB,IAAI,CAAC;AAErC,KAAK,UAAU,SAAS;IACtB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,qEAAqE;IACrE,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAqD,CAAC;IACzF,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAe,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAsB;IACtD,MAAM,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC;IAC5B,MAAM,CAAC,CAAC,WAAW,CAAC,uBAAuB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC;IAC5B,OAAO,CAAC,CAAC,cAAc,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,WAAW,CAAC,IAAuB;IACjD,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC"}

package/dist/login.d.ts

@@ -0,0 +1,8 @@
+export interface LoginOptions {
+    /** Override the polling interval seconds (mostly for tests). */
+    intervalSeconds?: number;
+    /** Override the timeout (seconds) to abort polling. */
+    timeoutSeconds?: number;
+}
+export declare function loginCommand(options?: LoginOptions): Promise<void>;
+//# sourceMappingURL=login.d.ts.map

package/dist/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../src/login.ts"],"names":[],"mappings":"AAwEA,MAAM,WAAW,YAAY;IAC3B,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAsB,YAAY,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqE5E"}

package/dist/login.js

@@ -0,0 +1,124 @@
+/**
+ * `acc-runner login` — device-code OAuth flow.
+ *
+ * 1. Ask the server for a (device_code, user_code) pair.
+ * 2. Print the verification URL + user_code.
+ * 3. Poll the exchange endpoint until the user signs in via the browser.
+ * 4. Store the resulting JWT in the OS keychain.
+ * 5. Register a runner row in acc.runners via the existing register_runner
+ *    RPC so the user sees this machine in the Runners page.
+ */
+import os from "node:os";
+import { setTimeout as sleep } from "node:timers/promises";
+import chalk from "chalk";
+import { execa } from "execa";
+import { loadConfig } from "./config.js";
+import { saveSession } from "./keychain.js";
+import { createRunnerClient } from "./supabase.js";
+import { PROTOCOL_VERSION } from "./types.js";
+const RUNNER_CAPS = {
+    branch: true,
+    push: true,
+    pr: true,
+    typecheck: true,
+    readFiles: true,
+    executeQueue: true,
+};
+function randomSuffix(n = 4) {
+    const alphabet = "abcdefghijklmnopqrstuvwxyz0123456789";
+    let out = "";
+    for (let i = 0; i < n; i++)
+        out += alphabet[Math.floor(Math.random() * alphabet.length)];
+    return out;
+}
+async function detectInstalledModels() {
+    const out = [];
+    for (const bin of ["claude", "codex"]) {
+        try {
+            await execa(bin, ["--version"], { env: process.env });
+            if (bin === "claude") {
+                out.push("claude-sonnet-4", "claude-code");
+            }
+            else {
+                out.push("codex");
+            }
+        }
+        catch {
+            // not installed
+        }
+    }
+    return out;
+}
+async function postJson(url, body) {
+    const res = await fetch(url, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            "User-Agent": `acc-runner/${PROTOCOL_VERSION}`,
+        },
+        body: JSON.stringify(body ?? {}),
+    });
+    if (!res.ok) {
+        throw new Error(`POST ${url} failed: ${res.status} ${await res.text()}`);
+    }
+    return (await res.json());
+}
+export async function loginCommand(options = {}) {
+    const cfg = loadConfig();
+    // 1. Request a device code.
+    const start = await postJson(`${cfg.publicUrl.replace(/\/+$/, "")}/api/runner/device-code`, {});
+    console.log("");
+    console.log(chalk.bold("To continue, sign in with your ACC account:"));
+    console.log("");
+    console.log(`  ${chalk.cyan("1.")} Visit  ${chalk.underline(start.verification_url)}`);
+    console.log(`  ${chalk.cyan("2.")} Enter code:  ${chalk.bold.green(start.user_code)}`);
+    console.log("");
+    console.log(chalk.gray("Waiting for confirmation…"));
+    // 2. Poll the exchange endpoint.
+    const interval = (options.intervalSeconds ?? start.interval) * 1000;
+    const deadline = Date.now() + (options.timeoutSeconds ?? start.expires_in) * 1000;
+    let exchanged = null;
+    while (Date.now() < deadline) {
+        await sleep(interval);
+        const exchange = await postJson(`${cfg.publicUrl.replace(/\/+$/, "")}/api/runner/device-code/exchange`, { device_code: start.device_code });
+        if (exchange.status === "expired") {
+            throw new Error("Device code expired before sign-in completed. Run `acc-runner login` again.");
+        }
+        if (exchange.status === "ok") {
+            exchanged = exchange;
+            break;
+        }
+    }
+    if (!exchanged || exchanged.status !== "ok") {
+        throw new Error("Device code timed out before sign-in completed.");
+    }
+    console.log(chalk.green(`✓ Logged in as ${exchanged.email ?? exchanged.user_id}`));
+    // 3. Build runner identity and save the session.
+    const hostname = os.hostname().replace(/[^a-z0-9-]+/gi, "-").toLowerCase().slice(0, 32);
+    const runnerId = `local-${hostname}-${randomSuffix(4)}`;
+    await saveSession({
+        jwt: exchanged.jwt,
+        email: exchanged.email,
+        user_id: exchanged.user_id,
+        runner_id: runnerId,
+    });
+    console.log(chalk.green(`✓ Stored token in OS keychain (acc-runner)`));
+    // 4. Register the runner row. RPC is provided by migration 0019.
+    const supabase = createRunnerClient(cfg, exchanged.jwt);
+    const models = await detectInstalledModels();
+    const { error } = await supabase.rpc("register_runner", {
+        p_id: runnerId,
+        p_name: `${exchanged.email ?? exchanged.user_id}'s ${os.hostname()}`,
+        p_owner: exchanged.email ?? exchanged.user_id,
+        p_machine: `${process.platform}-${process.arch}`,
+        p_models: models,
+        p_caps: RUNNER_CAPS,
+    });
+    if (error) {
+        throw new Error(`register_runner failed: ${error.message}`);
+    }
+    console.log(chalk.green(`✓ Registered runner: ${runnerId}`));
+    console.log("");
+    console.log(`Run ${chalk.bold("acc-runner watch")} to start receiving tasks.`);
+}
+//# sourceMappingURL=login.js.map

package/dist/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../src/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAMnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,WAAW,GAAe;IAC9B,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,IAAI;IACV,EAAE,EAAE,IAAI;IACR,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,IAAI;IACf,YAAY,EAAE,IAAI;CACnB,CAAC;AAEF,SAAS,YAAY,CAAC,CAAC,GAAG,CAAC;IACzB,MAAM,QAAQ,GAAG,sCAAsC,CAAC;IACxD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACzF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,qBAAqB;IAClC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAU,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YACtD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB;QAClB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,QAAQ,CAAI,GAAW,EAAE,IAAa;IACnD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,cAAc,gBAAgB,EAAE;SAC/C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,YAAY,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;AACjC,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,UAAwB,EAAE;IAC3D,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IAEzB,4BAA4B;IAC5B,MAAM,KAAK,GAAG,MAAM,QAAQ,CAC1B,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,yBAAyB,EAC7D,EAAE,CACH,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC;IAErD,iCAAiC;IACjC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IAClF,IAAI,SAAS,GAAsC,IAAI,CAAC;IACxD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,kCAAkC,EACtE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CACnC,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC7B,SAAS,GAAG,QAAQ,CAAC;YACrB,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAEnF,iDAAiD;IACjD,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,SAAS,QAAQ,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,MAAM,WAAW,CAAC;QAChB,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC;IAEvE,iEAAiE;IACjE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAC7C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,iBAAiB,EAAE;QACtD,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,OAAO,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QACpE,OAAO,EAAE,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,OAAO;QAC7C,SAAS,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;QAChD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,WAAW;KACpB,CAAC,CAAC;IACH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,CAAC;AACjF,CAAC"}

package/dist/logout.d.ts

@@ -0,0 +1,2 @@
+export declare function logoutCommand(): Promise<void>;
+//# sourceMappingURL=logout.d.ts.map

package/dist/logout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../src/logout.ts"],"names":[],"mappings":"AAQA,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CA2BnD"}

package/dist/logout.js

@@ -0,0 +1,31 @@
+/**
+ * `acc-runner logout` — clear keychain entry, mark runner offline.
+ */
+import chalk from "chalk";
+import { loadConfig } from "./config.js";
+import { clearSession, loadSession } from "./keychain.js";
+import { createRunnerClient } from "./supabase.js";
+export async function logoutCommand() {
+    const session = await loadSession();
+    if (!session) {
+        console.log(chalk.gray("Already signed out."));
+        return;
+    }
+    // Best-effort: mark the runner offline. Don't block the logout if the
+    // server is unreachable.
+    try {
+        const cfg = loadConfig();
+        const supabase = createRunnerClient(cfg, session.jwt);
+        await supabase.rpc("set_runner_status", {
+            p_id: session.runner_id,
+            p_status: "offline",
+        });
+    }
+    catch (err) {
+        console.log(chalk.yellow(`! Could not mark runner offline (${err.message}). Clearing local session anyway.`));
+    }
+    await clearSession();
+    console.log(chalk.green("✓ Cleared keychain entry."));
+    console.log(chalk.green(`✓ Runner ${session.runner_id} marked offline.`));
+}
+//# sourceMappingURL=logout.js.map

package/dist/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../src/logout.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,sEAAsE;IACtE,yBAAyB;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,QAAQ,CAAC,GAAG,CAAC,mBAAmB,EAAE;YACtC,IAAI,EAAE,OAAO,CAAC,SAAS;YACvB,QAAQ,EAAE,SAAS;SACpB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,oCAAqC,GAAa,CAAC,OAAO,mCAAmC,CAC9F,CACF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,EAAE,CAAC;IACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,SAAS,kBAAkB,CAAC,CAAC,CAAC;AAC5E,CAAC"}

package/dist/prompt.d.ts

@@ -0,0 +1,38 @@
+/**
+ * renderTaskPrompt — duplicated slim copy of src/lib/promptTemplate.ts.
+ *
+ * Adds the two RUNNER_PROTOCOL §3.2 mandatory header lines (Branch + PR
+ * title + base branch) so the agent emits a PR ACC can match by webhook.
+ *
+ * v0.3 dedupes via a shared workspace package; for now we keep the small
+ * function here so the CLI stays a single-package install.
+ */
+export interface RenderTaskInput {
+    task: {
+        id: string;
+        title: string;
+        description?: string | null;
+        branch?: string | null;
+        typecheck_cmd?: string | null;
+        acceptance: string[];
+        allowed: string[];
+        forbidden: string[];
+    };
+    agent: {
+        name?: string;
+    } | null;
+    model: {
+        name?: string;
+    } | null;
+    contracts?: Array<{
+        name: string;
+        version?: string;
+        status?: string;
+    }>;
+    integrationBranch?: string;
+    targetRepo?: string;
+}
+export declare function branchForTask(taskId: string, title: string, branch: string | null | undefined): string;
+export declare function prTitleForTask(taskId: string, title: string): string;
+export declare function renderTaskPrompt(input: RenderTaskInput): string;
+//# sourceMappingURL=prompt.d.ts.map

package/dist/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,SAAS,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IACF,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChC,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChC,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAUD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAGtG;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAsE/D"}

package/dist/prompt.js

@@ -0,0 +1,78 @@
+/**
+ * renderTaskPrompt — duplicated slim copy of src/lib/promptTemplate.ts.
+ *
+ * Adds the two RUNNER_PROTOCOL §3.2 mandatory header lines (Branch + PR
+ * title + base branch) so the agent emits a PR ACC can match by webhook.
+ *
+ * v0.3 dedupes via a shared workspace package; for now we keep the small
+ * function here so the CLI stays a single-package install.
+ */
+function slug(title) {
+    return title
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "")
+        .slice(0, 40) || "task";
+}
+export function branchForTask(taskId, title, branch) {
+    if (branch && branch.trim())
+        return branch.trim();
+    return `acc/${taskId}-${slug(title)}`;
+}
+export function prTitleForTask(taskId, title) {
+    return `[${taskId}] ${title}`;
+}
+export function renderTaskPrompt(input) {
+    const { task, agent, model } = input;
+    const integrationBranch = input.integrationBranch ?? "acc/integration";
+    const targetRepo = input.targetRepo ?? "tokenfactory-pvt-ltd/TechArch";
+    const branch = branchForTask(task.id, task.title, task.branch);
+    const prTitle = prTitleForTask(task.id, task.title);
+    const lines = [];
+    // Mandatory protocol header — RUNNER_PROTOCOL §3.2.
+    lines.push(`**Branch:** ${branch}`);
+    lines.push(`**PR title:** ${prTitle}`);
+    lines.push(`**Open the PR against:** ${integrationBranch} on ${targetRepo}.`);
+    lines.push("");
+    lines.push(`# Task ${task.id}: ${task.title}`);
+    lines.push("");
+    if (agent?.name || model?.name) {
+        lines.push(`You are ${agent?.name ?? "an AI agent"}. You will be running this task on ${model?.name ?? "a model"}.`);
+        lines.push("");
+    }
+    if (task.description) {
+        lines.push("## Description");
+        lines.push(task.description);
+        lines.push("");
+    }
+    lines.push("## Allowed file scope");
+    lines.push(...(task.allowed.length ? task.allowed.map((f) => `- ${f}`) : ["- (no scope restrictions)"]));
+    lines.push("");
+    lines.push("## Forbidden files (DO NOT TOUCH)");
+    lines.push(...(task.forbidden.length ? task.forbidden.map((f) => `- ${f}`) : ["- (none)"]));
+    lines.push("");
+    if (input.contracts?.length) {
+        lines.push("## Contracts in force");
+        lines.push(...input.contracts.map((c) => `- ${c.name}${c.version ? ` ${c.version}` : ""}${c.status ? ` (${c.status})` : ""}`));
+        lines.push("");
+    }
+    lines.push("## Acceptance criteria");
+    lines.push(...(task.acceptance.length ? task.acceptance.map((a) => `- ${a}`) : ["- (none)"]));
+    lines.push("");
+    lines.push("## Required report format (PR body)");
+    lines.push("- Summary (3 sentences)");
+    lines.push("- Files changed (path, +added/-removed)");
+    lines.push("- Implemented");
+    lines.push("- Not implemented");
+    lines.push("- Risks");
+    lines.push("- Follow-ups");
+    lines.push("- Verification (typecheck/lint/build/test/manual)");
+    lines.push("");
+    if (task.typecheck_cmd) {
+        lines.push("## Typecheck");
+        lines.push(`Run \`${task.typecheck_cmd}\` after edits and include the result in the report.`);
+        lines.push("");
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=prompt.js.map

package/dist/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAoBH,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,KAAa,EAAE,MAAiC;IAC5F,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IAClD,OAAO,OAAO,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,KAAa;IAC1D,OAAO,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAsB;IACrD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACrC,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,IAAI,iBAAiB,CAAC;IACvE,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,+BAA+B,CAAC;IACvE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAEpD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,oDAAoD;IACpD,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,4BAA4B,iBAAiB,OAAO,UAAU,GAAG,CAAC,CAAC;IAC9E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CACR,WAAW,KAAK,EAAE,IAAI,IAAI,aAAa,sCACrC,KAAK,EAAE,IAAI,IAAI,SACjB,GAAG,CACJ,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;IACzG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CACR,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CACpB,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3F,CACF,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACtD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,sDAAsD,CAAC,CAAC;QAC9F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/supabase.d.ts

@@ -0,0 +1,4 @@
+import type { RunnerConfig } from "./config.js";
+export declare function createRunnerClient(cfg: RunnerConfig, jwt: string): import("@supabase/supabase-js").SupabaseClient<any, "public", "acc", any, any>;
+export type RunnerSupabaseClient = ReturnType<typeof createRunnerClient>;
+//# sourceMappingURL=supabase.d.ts.map

package/dist/supabase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase.d.ts","sourceRoot":"","sources":["../src/supabase.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,kFAchE;AAED,MAAM,MAAM,oBAAoB,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/supabase.js

@@ -0,0 +1,22 @@
+/**
+ * Supabase client factory for the CLI. Authenticates with the user's
+ * stored JWT (loaded from keychain) so RLS / acc.is_member() resolve
+ * correctly on every RPC.
+ */
+import { createClient } from "@supabase/supabase-js";
+export function createRunnerClient(cfg, jwt) {
+    return createClient(cfg.supabaseUrl, cfg.supabaseAnonKey, {
+        db: { schema: "acc" },
+        auth: {
+            persistSession: false,
+            autoRefreshToken: false,
+            detectSessionInUrl: false,
+        },
+        global: {
+            headers: {
+                Authorization: `Bearer ${jwt}`,
+            },
+        },
+    });
+}
+//# sourceMappingURL=supabase.js.map

package/dist/supabase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase.js","sourceRoot":"","sources":["../src/supabase.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGrD,MAAM,UAAU,kBAAkB,CAAC,GAAiB,EAAE,GAAW;IAC/D,OAAO,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,eAAe,EAAE;QACxD,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QACrB,IAAI,EAAE;YACJ,cAAc,EAAE,KAAK;YACrB,gBAAgB,EAAE,KAAK;YACvB,kBAAkB,EAAE,KAAK;SAC1B;QACD,MAAM,EAAE;YACN,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,GAAG,EAAE;aAC/B;SACF;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/task-runner.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Task execution path. Called by watch.ts when a task_assigned broadcast
+ * lands on the runner channel.
+ *
+ * 1. Transition task → running (RPC).
+ * 2. fetch_task_for_runner to get the task + adjacent agent/model/runner.
+ * 3. Render the prompt, ensure repo is fresh, branch is checked out.
+ * 4. Spawn `claude --print` with the prompt on stdin; pipe stdout/stderr
+ *    to acc.append_task_event so the History tab updates live.
+ * 5. On success, push the branch and open a PR via `gh`.
+ * 6. On failure, transition → failed and emit an error task_event.
+ *
+ * Cancellation: watch.ts holds a reference to the running child via the
+ * returned controller and SIGTERMs it on task_cancelled.
+ */
+import { type ExecaChildProcess } from "execa";
+import type { RunnerConfig } from "./config.js";
+import { type GitRunner } from "./git.js";
+import { type GhRunner } from "./gh.js";
+import type { RunnerSupabaseClient } from "./supabase.js";
+export interface RunTaskDeps {
+    supabase: RunnerSupabaseClient;
+    cfg: RunnerConfig;
+    git?: GitRunner;
+    gh?: GhRunner;
+    /** Override for tests — defaults to execa('claude', ['--print']). */
+    spawnClaude?: (cwd: string) => ExecaChildProcess;
+}
+export interface RunTaskController {
+    taskId: string;
+    promise: Promise<RunTaskOutcome>;
+    cancel(): void;
+}
+export interface RunTaskOutcome {
+    taskId: string;
+    status: "ok" | "failed" | "cancelled";
+    prUrl?: string;
+    exitCode?: number | null;
+    error?: string;
+}
+/**
+ * Pull the structured report block from claude's stdout. Falls back to
+ * the entire stdout (capped) if no `## Summary` heading is present —
+ * that way the PR body still tells the reviewer what happened.
+ */
+export declare function extractReportFromOutput(stdout: string): string;
+export declare function runTask(taskId: string, deps: RunTaskDeps): RunTaskController;
+//# sourceMappingURL=task-runner.d.ts.map

package/dist/task-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-runner.d.ts","sourceRoot":"","sources":["../src/task-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAS,KAAK,iBAAiB,EAAE,MAAM,OAAO,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAqB,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AAC7D,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,SAAS,CAAC;AAMzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAG1D,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,GAAG,EAAE,YAAY,CAAC;IAClB,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd,qEAAqE;IACrE,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,iBAAiB,CAAC;CAClD;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACjC,MAAM,IAAI,IAAI,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,IAAI,GAAG,QAAQ,GAAG,WAAW,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAwDD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAQ9D;AAED,wBAAgB,OAAO,CACrB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,GAChB,iBAAiB,CAwJnB"}