@tokenfactory/acc-runner 0.25.0 → 0.27.0

package/README.md

@@ -46,6 +46,12 @@ location, or declare capabilities.
 | `ACC_INTEGRATION_BRANCH`  | `acc/integration`                        | Base branch for new PRs. A task's `integration_branch` wins.          |
 | `ACC_RUNNER_CAPABILITIES` | _(unset)_                                | Comma-separated tags, e.g. `code,docs`. See "Capabilities" below.     |
 | `ACC_RUNNER_PROFILE`      | _(unset)_                                | Profile slug (`developer`, `designer`, `tester`, `manager`).          |
+| `ACC_RUNNER_TOKEN_MODE`   | `keychain`                               | `env` sources credentials from env vars instead of the OS keychain. See "Ephemeral runners" below. |
+| `ACC_RUNNER_ACCESS_TOKEN` | _(unset)_                                | Required when `ACC_RUNNER_TOKEN_MODE=env`. The Supabase JWT minted by the device-code exchange or autoscale provider. |
+| `ACC_RUNNER_REFRESH_TOKEN`| _(unset)_                                | Optional. Enables in-process token rotation in `env` mode; rotated successors stay in memory only. |
+| `ACC_RUNNER_ID`           | minted `acc-eph-<hex8>`                  | Optional pre-assigned runner id (`env` mode). The `acc-eph-` prefix marks the ephemeral fleet — don't reuse it for desktop runners. Also keys the singleton lock and (when no `ACC_RUNNER_CACHE_DIR`) namespaces the cache dir, so distinct ids coexist on one host. |
+| `ACC_RUNNER_CACHE_DIR`    | `~/.cache/acc-runner` (or `…/runners/<ACC_RUNNER_ID>`) | Cache root for locks, worktrees, quarantine, and the singleton lock. When unset and `ACC_RUNNER_ID` is set, defaults to a per-identity subdir. Set explicitly to override. |
+| `ACC_RUNNER_CONCURRENCY`  | `2`                                      | Max tasks this runner processes simultaneously. Parsed with `Number.parseInt`, clamped to `1..50`, falls back to `2` on non-numeric input. Each slot is a live Claude session **plus** a git worktree, so high values are only viable on **API-key** runners on high-resource hosts. On a **Claude subscription** they will `429`. The serial integration-merge queue still caps end-to-end throughput, so real-world gains plateau around **~2–2.5×** regardless of how high this is set. |
 
 ### `~/.config/acc-runner/config.json`
 
@@ -127,6 +133,71 @@ abort CLI startup with a clear error rather than failing at task
 pickup. Env vars and config.json `capabilities` still override the
 profile's defaults when both are set.
 
+### Ephemeral runners (env-token mode)
+
+Desktop runners read their session from the OS keychain (the default,
+`ACC_RUNNER_TOKEN_MODE=keychain`). Containerized / autoscaled runners have
+no keychain, so set `ACC_RUNNER_TOKEN_MODE=env` and source the session from
+environment variables instead:
+
+```sh
+export ACC_RUNNER_TOKEN_MODE=env
+export ACC_RUNNER_ACCESS_TOKEN=<jwt-from-device-code-exchange>
+export ACC_RUNNER_REFRESH_TOKEN=<refresh-token>   # optional; enables rotation
+export ACC_RUNNER_ID=acc-eph-1a2b3c4d              # optional; minted if unset
+acc-runner doctor    # validates the env-token config (see below)
+acc-runner watch
+```
+
+- `ACC_RUNNER_ACCESS_TOKEN` is required. `user_id` / `email` / expiry are
+  decoded from the JWT — no extra env needed. A missing or undecodable
+  token fails `doctor` and aborts `watch` at startup, not on the first RPC.
+- `ACC_RUNNER_REFRESH_TOKEN` is optional. With it, the runner rotates the
+  access token in process memory (never written to disk). Without it, the
+  runner simply exits when the access token expires — fine for an
+  idle-TTL-bounded ephemeral runner. Provision a **fresh** access/refresh
+  pair per container: replaying a previously-rotated refresh token trips
+  the server's reuse detection and revokes the chain.
+- `ACC_RUNNER_ID` lets the orchestrator pre-assign a stable id. When unset,
+  the runner mints one `acc-eph-<hex8>` per process; the `acc-eph-` prefix
+  is the autoscale sweep's ephemeral-fleet discriminator.
+
+`acc-runner doctor` adds an **env-token config** check in this mode: it
+confirms the access token is present and decodable, then reports the
+resolved runner id (and whether it came from `ACC_RUNNER_ID` or was
+minted), whether refresh is wired, and the access-token expiry. The check
+is a silent no-op for keychain runners.
+
+### Running multiple runners on one host
+
+Each runner keeps its locks, per-task worktrees, quarantine sentinel, and
+single-instance lock under a cache root that defaults to
+`~/.cache/acc-runner`. As of v1.02-A, giving each co-located runner a
+**distinct `ACC_RUNNER_ID`** is enough to run them concurrently on one host:
+
+```sh
+ACC_RUNNER_ID=acc-eph-aaaa0001 acc-runner watch &
+ACC_RUNNER_ID=acc-eph-bbbb0002 acc-runner watch &
+```
+
+The single-instance lock is keyed by **(repo path + runner id)**, so two
+distinct ids serving the same repo each acquire their own lock and coexist;
+only a true duplicate — same repo, *same* identity — is refused. With no
+explicit `ACC_RUNNER_CACHE_DIR`, each id also gets its own cache subdir
+(`~/.cache/acc-runner/runners/<id>`), so their locks, worktrees, and
+quarantine state never collide. You can still pin an explicit
+`ACC_RUNNER_CACHE_DIR` per runner if you want the cache somewhere specific:
+
+```sh
+ACC_RUNNER_ID=acc-eph-aaaa0001 ACC_RUNNER_CACHE_DIR=/var/run/acc/a acc-runner watch &
+ACC_RUNNER_ID=acc-eph-bbbb0002 ACC_RUNNER_CACHE_DIR=/var/run/acc/b acc-runner watch &
+```
+
+Two runners with the *same* identity (or both with no `ACC_RUNNER_ID`)
+serving the same repo are still caught by the singleton lock. `acc-runner
+doctor` prints the resolved token mode and cache dir in its **Runtime**
+block, and names the holding identity if a duplicate is detected.
+
 ### `PATH` under launchd
 
 `launchd` resets `PATH` to `/usr/bin:/bin:/usr/sbin:/sbin`, which omits
@@ -176,10 +247,12 @@ broadcasts (sends `SIGTERM` to the in-flight `claude` child).
 
 ### `acc-runner doctor`
 
-Runs every environment check (binaries, keychain access, Supabase
-reachability, repo path, orphan worktrees) and prints a green/red list.
-Exits 0 if all pass, 1 otherwise. Suitable for CI and for diagnosing a
-silent failure mode after install.
+Runs every environment check (binaries, keychain access, env-token config,
+Supabase reachability, repo path, orphan worktrees) and prints a green/red
+list, preceded by the resolved **Config** and **Runtime** (token mode +
+cache dir) blocks. Exits 0 if all pass, 1 otherwise. A single check that
+throws is reported as one `[FAIL]` row rather than crashing the run.
+Suitable for CI and for diagnosing a silent failure mode after install.
 
 ### `acc-runner version`
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenfactory/acc-runner",
-  "version": "0.25.0",
+  "version": "0.27.0",
   "description": "Agent Control Center local runner. Spawns Claude Code sessions assigned via ACC.",
   "license": "UNLICENSED",
   "private": false,

package/dist/anthropic-auth.d.ts

@@ -1,53 +0,0 @@
-/**
- * v0.74-B (T-1780800000740201): centralised resolution of how the spawned
- * `claude` CLI authenticates with Anthropic.
- *
- * Claude Code authenticates *strictly* via the `ANTHROPIC_API_KEY`
- * environment variable (or an apiKeyHelper) — it has no `--api-key` flag;
- * passing one fails with `error: unknown option '--api-key'`. So "passing
- * the API key to claude" means making sure the variable is present in the
- * spawned subprocess's environment.
- *
- * When ANTHROPIC_API_KEY is set the CLI bills against the API account, which
- * has no per-session usage cap. When it is absent the CLI falls back to the
- * operator's interactive OAuth session, which is subject to the 429 session
- * caps this change exists to avoid.
- */
-export type AnthropicAuthMode = "api-key" | "interactive-session";
-/** Trimmed ANTHROPIC_API_KEY from `env`, or "" when unset/blank. */
-export declare function anthropicApiKey(env?: NodeJS.ProcessEnv): string;
-/**
- * v0.76-A (GA-11): opt-in claude-config isolation. Even with ANTHROPIC_API_KEY
- * set, the Claude CLI prefers a stored claude.ai OAuth login when one exists —
- * the observed cause of 429 session caps on a key-configured runner. Pointing
- * the spawned claude at an isolated CLAUDE_CONFIG_DIR (no stored login) leaves
- * the env key as the only credential, forcing API-key auth. Opt-in via
- * ACC_RUNNER_ISOLATE_CLAUDE_CONFIG because the behaviour needs live-runner
- * validation before becoming default.
- */
-export declare function claudeConfigIsolationEnabled(env?: NodeJS.ProcessEnv): boolean;
-/** Runner-owned claude config dir used when isolation is enabled. */
-export declare function isolatedClaudeConfigDir(env?: NodeJS.ProcessEnv): string;
-/**
- * `"api-key"` when ANTHROPIC_API_KEY is set (non-blank), else
- * `"interactive-session"`.
- */
-export declare function resolveAuthMode(env?: NodeJS.ProcessEnv): AnthropicAuthMode;
-/**
- * Returns `base` with ANTHROPIC_API_KEY explicitly forwarded (trimmed) when
- * set, so every claude spawn site authenticates identically regardless of how
- * `base` was assembled. A passthrough of `base` when the key is absent — the
- * CLI then uses the operator's interactive OAuth session.
- */
-export declare function withAnthropicAuth(base?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
-/** One-line, human-readable description of an auth mode for banners/checks. */
-export declare function describeAuthMode(mode: AnthropicAuthMode): string;
-/**
- * v0.76-A (GA-11): precedence hint for the banner / doctor. Returns null when
- * there's nothing to add (interactive-session mode is already self-explanatory
- * via describeAuthMode). In api-key mode it tells the operator either that
- * isolation is forcing the key, or — if not isolated — how to stop a claude.ai
- * login from shadowing the key and causing 429s.
- */
-export declare function authPrecedenceHint(env?: NodeJS.ProcessEnv): string | null;
-//# sourceMappingURL=anthropic-auth.d.ts.map

package/dist/anthropic-auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"anthropic-auth.d.ts","sourceRoot":"","sources":["../src/anthropic-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,qBAAqB,CAAC;AAElE,oEAAoE;AACpE,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAE5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAGT;AAED,qEAAqE;AACrE,wBAAgB,uBAAuB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAGR;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,CAEvF;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAc1F;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAIhE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,IAAI,CASf"}

package/dist/anthropic-auth.js

@@ -1,89 +0,0 @@
-/**
- * v0.74-B (T-1780800000740201): centralised resolution of how the spawned
- * `claude` CLI authenticates with Anthropic.
- *
- * Claude Code authenticates *strictly* via the `ANTHROPIC_API_KEY`
- * environment variable (or an apiKeyHelper) — it has no `--api-key` flag;
- * passing one fails with `error: unknown option '--api-key'`. So "passing
- * the API key to claude" means making sure the variable is present in the
- * spawned subprocess's environment.
- *
- * When ANTHROPIC_API_KEY is set the CLI bills against the API account, which
- * has no per-session usage cap. When it is absent the CLI falls back to the
- * operator's interactive OAuth session, which is subject to the 429 session
- * caps this change exists to avoid.
- */
-import os from "node:os";
-import path from "node:path";
-/** Trimmed ANTHROPIC_API_KEY from `env`, or "" when unset/blank. */
-export function anthropicApiKey(env = process.env) {
-    return (env.ANTHROPIC_API_KEY ?? "").trim();
-}
-/**
- * v0.76-A (GA-11): opt-in claude-config isolation. Even with ANTHROPIC_API_KEY
- * set, the Claude CLI prefers a stored claude.ai OAuth login when one exists —
- * the observed cause of 429 session caps on a key-configured runner. Pointing
- * the spawned claude at an isolated CLAUDE_CONFIG_DIR (no stored login) leaves
- * the env key as the only credential, forcing API-key auth. Opt-in via
- * ACC_RUNNER_ISOLATE_CLAUDE_CONFIG because the behaviour needs live-runner
- * validation before becoming default.
- */
-export function claudeConfigIsolationEnabled(env = process.env) {
-    const v = (env.ACC_RUNNER_ISOLATE_CLAUDE_CONFIG ?? "").trim().toLowerCase();
-    return v === "1" || v === "true" || v === "yes" || v === "on";
-}
-/** Runner-owned claude config dir used when isolation is enabled. */
-export function isolatedClaudeConfigDir(env = process.env) {
-    const override = (env.ACC_RUNNER_CLAUDE_CONFIG_DIR ?? "").trim();
-    return override || path.join(os.homedir(), ".acc-runner", "claude-config");
-}
-/**
- * `"api-key"` when ANTHROPIC_API_KEY is set (non-blank), else
- * `"interactive-session"`.
- */
-export function resolveAuthMode(env = process.env) {
-    return anthropicApiKey(env) ? "api-key" : "interactive-session";
-}
-/**
- * Returns `base` with ANTHROPIC_API_KEY explicitly forwarded (trimmed) when
- * set, so every claude spawn site authenticates identically regardless of how
- * `base` was assembled. A passthrough of `base` when the key is absent — the
- * CLI then uses the operator's interactive OAuth session.
- */
-export function withAnthropicAuth(base = process.env) {
-    const key = anthropicApiKey(base);
-    if (!key)
-        return base;
-    const next = { ...base, ANTHROPIC_API_KEY: key };
-    // v0.76-A (GA-11): when isolation is opted in and the operator hasn't already
-    // pinned a config dir, point claude at a runner-owned dir so a stored
-    // claude.ai login can't shadow the API key. Never clobber an explicit value.
-    if (claudeConfigIsolationEnabled(base) &&
-        !(base.CLAUDE_CONFIG_DIR ?? "").trim()) {
-        next.CLAUDE_CONFIG_DIR = isolatedClaudeConfigDir(base);
-    }
-    return next;
-}
-/** One-line, human-readable description of an auth mode for banners/checks. */
-export function describeAuthMode(mode) {
-    return mode === "api-key"
-        ? "api-key (ANTHROPIC_API_KEY set — no session cap)"
-        : "interactive-session (no ANTHROPIC_API_KEY — subject to 429 session caps)";
-}
-/**
- * v0.76-A (GA-11): precedence hint for the banner / doctor. Returns null when
- * there's nothing to add (interactive-session mode is already self-explanatory
- * via describeAuthMode). In api-key mode it tells the operator either that
- * isolation is forcing the key, or — if not isolated — how to stop a claude.ai
- * login from shadowing the key and causing 429s.
- */
-export function authPrecedenceHint(env = process.env) {
-    if (resolveAuthMode(env) !== "api-key")
-        return null;
-    if (claudeConfigIsolationEnabled(env)) {
-        return `claude config isolated at ${isolatedClaudeConfigDir(env)} — API key forced`;
-    }
-    return ("if you still hit 429 session caps, a claude.ai login is shadowing the API key — " +
-        "run `claude /logout` or set ACC_RUNNER_ISOLATE_CLAUDE_CONFIG=1");
-}
-//# sourceMappingURL=anthropic-auth.js.map

package/dist/anthropic-auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"anthropic-auth.js","sourceRoot":"","sources":["../src/anthropic-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5E,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC;AAChE,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,uBAAuB,CACrC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjE,OAAO,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA0B,OAAO,CAAC,GAAG;IACrE,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAsB,EAAE,GAAG,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC;IACpE,8EAA8E;IAC9E,sEAAsE;IACtE,6EAA6E;IAC7E,IACE,4BAA4B,CAAC,IAAI,CAAC;QAClC,CAAC,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EACtC,CAAC;QACD,IAAI,CAAC,iBAAiB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,IAAuB;IACtD,OAAO,IAAI,KAAK,SAAS;QACvB,CAAC,CAAC,kDAAkD;QACpD,CAAC,CAAC,0EAA0E,CAAC;AACjF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,4BAA4B,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO,6BAA6B,uBAAuB,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACtF,CAAC;IACD,OAAO,CACL,kFAAkF;QAClF,gEAAgE,CACjE,CAAC;AACJ,CAAC"}

package/dist/bin-resolve.d.ts

@@ -1,16 +0,0 @@
-/**
- * Binary path resolution for launchd-launched acc-runner processes.
- *
- * launchd strips the shell PATH to /usr/bin:/bin:/usr/sbin:/sbin, omitting
- * /opt/homebrew/bin and /usr/local/bin where Homebrew installs git and gh.
- * All execa("git"/"gh", ...) calls must use buildEnv() instead of bare
- * process.env so the binaries are resolvable under launchd supervision.
- */
-/**
- * Returns process.env with PATH augmented to include Homebrew bin dirs.
- * Memoized — safe to call on every execa invocation.
- *
- *   execa("git", args, { cwd, env: buildEnv() })
- */
-export declare function buildEnv(): NodeJS.ProcessEnv;
-//# sourceMappingURL=bin-resolve.d.ts.map

package/dist/bin-resolve.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bin-resolve.d.ts","sourceRoot":"","sources":["../src/bin-resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAqBH;;;;;GAKG;AACH,wBAAgB,QAAQ,IAAI,MAAM,CAAC,UAAU,CAE5C"}

package/dist/bin-resolve.js

@@ -1,35 +0,0 @@
-/**
- * Binary path resolution for launchd-launched acc-runner processes.
- *
- * launchd strips the shell PATH to /usr/bin:/bin:/usr/sbin:/sbin, omitting
- * /opt/homebrew/bin and /usr/local/bin where Homebrew installs git and gh.
- * All execa("git"/"gh", ...) calls must use buildEnv() instead of bare
- * process.env so the binaries are resolvable under launchd supervision.
- */
-/** Directories prepended when not already in PATH. */
-const EXTRA_PATHS = [
-    "/opt/homebrew/bin", // Apple Silicon Homebrew
-    "/opt/homebrew/sbin",
-    "/usr/local/bin", // Intel Homebrew / MacPorts
-    "/usr/local/sbin",
-];
-let _augmented = null;
-function augmentedPath() {
-    if (_augmented !== null)
-        return _augmented;
-    const existing = process.env.PATH ?? "/usr/bin:/bin:/usr/sbin:/sbin";
-    const parts = existing.split(":");
-    const extras = EXTRA_PATHS.filter((p) => !parts.includes(p));
-    _augmented = extras.length > 0 ? `${extras.join(":")}:${existing}` : existing;
-    return _augmented;
-}
-/**
- * Returns process.env with PATH augmented to include Homebrew bin dirs.
- * Memoized — safe to call on every execa invocation.
- *
- *   execa("git", args, { cwd, env: buildEnv() })
- */
-export function buildEnv() {
-    return { ...process.env, PATH: augmentedPath() };
-}
-//# sourceMappingURL=bin-resolve.js.map

package/dist/bin-resolve.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bin-resolve.js","sourceRoot":"","sources":["../src/bin-resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,sDAAsD;AACtD,MAAM,WAAW,GAAG;IAClB,mBAAmB,EAAI,yBAAyB;IAChD,oBAAoB;IACpB,gBAAgB,EAAO,4BAA4B;IACnD,iBAAiB;CAClB,CAAC;AAEF,IAAI,UAAU,GAAkB,IAAI,CAAC;AAErC,SAAS,aAAa;IACpB,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,+BAA+B,CAAC;IACrE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ;IACtB,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC;AACnD,CAAC"}

package/dist/cli.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -1,128 +0,0 @@
-#!/usr/bin/env node
-/**
- * acc-runner — CLI entry point. commander wires subcommands into named
- * functions in their own files; this module is intentionally thin.
- */
-import { Command } from "commander";
-import chalk from "chalk";
-import { loadConfig } from "./config.js";
-import { fetchPricing } from "./cost-pricing.js";
-import { loginCommand } from "./login.js";
-import { logoutCommand } from "./logout.js";
-import { watchCommand } from "./watch.js";
-import { doctorCommand } from "./doctor.js";
-import { clearQuarantine, getQuarantine } from "./runtime/quarantine.js";
-import { PROTOCOL_VERSION } from "./types.js";
-import { PACKAGE_VERSION } from "./pkg-version.js";
-const program = new Command();
-program
-    .name("acc-runner")
-    .description("Agent Control Center local runner. Subscribes to ACC, spawns Claude Code on assignment, and opens a PR when done.")
-    .version(`${PACKAGE_VERSION} (protocol v${PROTOCOL_VERSION})`);
-program
-    .command("login")
-    .description("Sign in via device-code OAuth and register this machine.")
-    .action(async () => {
-    try {
-        await loginCommand();
-    }
-    catch (err) {
-        console.error(chalk.red(`✗ ${err.message}`));
-        process.exitCode = 1;
-    }
-});
-program
-    .command("logout")
-    .description("Clear the local session and mark this runner offline.")
-    .action(async () => {
-    try {
-        await logoutCommand();
-    }
-    catch (err) {
-        console.error(chalk.red(`✗ ${err.message}`));
-        process.exitCode = 1;
-    }
-});
-program
-    .command("watch")
-    .description("Long-running. Receive task assignments and execute them.")
-    .action(async () => {
-    try {
-        // Warm the cost-pricing cache before the realtime loop opens.
-        // fetchPricing handles its own logging; embedded fallback governs
-        // if the endpoint is unreachable.
-        await fetchPricing(loadConfig().publicUrl);
-        await watchCommand();
-        // Keep the process alive — stop() runs in the SIGINT handler.
-        await new Promise(() => { });
-    }
-    catch (err) {
-        console.error(chalk.red(`✗ ${err.message}`));
-        process.exitCode = 1;
-    }
-});
-program
-    .command("doctor")
-    .description("Run environment checks. Exit 0 if all green, 1 otherwise.")
-    .action(async () => {
-    const code = await doctorCommand();
-    process.exitCode = code;
-});
-// v0.48: quarantine management. The runner enters quarantine automatically
-// when the failure classifier detects a machine-level failure. An operator
-// resolves the underlying issue then clears the quarantine to resume work.
-const quarantineCmd = program
-    .command("quarantine")
-    .description("Inspect or clear the runner quarantine state.");
-quarantineCmd
-    .command("status")
-    .description("Show quarantine state.")
-    .action(async () => {
-    try {
-        const q = await getQuarantine();
-        if (!q) {
-            console.log("Runner is not quarantined.");
-            return;
-        }
-        console.log(chalk.red.bold(`QUARANTINED (${q.cause})`));
-        console.log(`  Detail:  ${q.detail}`);
-        console.log(`  Task:    ${q.taskId}`);
-        console.log(`  Since:   ${q.classifiedAt}`);
-        // v0.53 T-53-4: consecutive instant-empty count (1 = definitive,
-        // 2 = heuristic confirmed by retry). Omitted for pre-0.53 states.
-        if (q.consecutive !== undefined) {
-            console.log(`  Streak:  ${q.consecutive} consecutive instant-empty exit(s)`);
-        }
-        console.log(chalk.gray(`\nResolve the underlying ${q.cause} issue, then run \`acc-runner quarantine clear\`.`));
-        process.exitCode = 1;
-    }
-    catch (err) {
-        console.error(chalk.red(`✗ ${err.message}`));
-        process.exitCode = 1;
-    }
-});
-quarantineCmd
-    .command("clear")
-    .description("Clear quarantine and allow the runner to resume claiming tasks.")
-    .action(async () => {
-    try {
-        await clearQuarantine();
-        console.log(chalk.green("✓ Quarantine cleared. Runner will resume on next task assignment."));
-    }
-    catch (err) {
-        console.error(chalk.red(`✗ ${err.message}`));
-        process.exitCode = 1;
-    }
-});
-program
-    .command("version")
-    .description("Print CLI + protocol versions.")
-    .action(() => {
-    console.log(`acc-runner ${PACKAGE_VERSION}`);
-    console.log(`protocol     ${PROTOCOL_VERSION}`);
-});
-program.parseAsync(process.argv).catch((err) => {
-    console.error(chalk.red(`✗ ${err.message}`));
-    process.exit(1);
-});
-//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;GAGG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,YAAY,CAAC;KAClB,WAAW,CACV,mHAAmH,CACpH;KACA,OAAO,CAAC,GAAG,eAAe,eAAe,gBAAgB,GAAG,CAAC,CAAC;AAEjE,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,0DAA0D,CAAC;KACvE,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,uDAAuD,CAAC;KACpE,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,0DAA0D,CAAC;KACvE,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,8DAA8D;QAC9D,kEAAkE;QAClE,kCAAkC;QAClC,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,YAAY,EAAE,CAAC;QACrB,8DAA8D;QAC9D,MAAM,IAAI,OAAO,CAAO,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,2DAA2D,CAAC;KACxE,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;IACnC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,MAAM,aAAa,GAAG,OAAO;KAC1B,OAAO,CAAC,YAAY,CAAC;KACrB,WAAW,CAAC,+CAA+C,CAAC,CAAC;AAEhE,aAAa;KACV,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,wBAAwB,CAAC;KACrC,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5C,iEAAiE;QACjE,kEAAkE;QAClE,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,WAAW,oCAAoC,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CACR,4BAA4B,CAAC,CAAC,KAAK,mDAAmD,CACvF,CACF,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,aAAa;KACV,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,iEAAiE,CAAC;KAC9E,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,eAAe,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC,CAAC;IAChG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,gCAAgC,CAAC;KAC7C,MAAM,CAAC,GAAG,EAAE;IACX,OAAO,CAAC,GAAG,CAAC,cAAc,eAAe,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,gBAAgB,gBAAgB,EAAE,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAC7C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -1,121 +0,0 @@
-export interface RunnerConfig {
-    publicUrl: string;
-    supabaseUrl: string;
-    supabaseAnonKey: string;
-    repoPath: string;
-    targetRepo: string;
-    integrationBranch: string;
-    /**
-     * v0.6.4+: capability tags this runner declares to the task-router.
-     * Resolution order: ACC_RUNNER_CAPABILITIES env (comma-separated)
-     * > ~/.config/acc-runner/config.json `capabilities` field > [].
-     * Empty array matches any task with empty required_capabilities,
-     * preserving backward compatibility with 0.6.3 runners. Optional
-     * on the interface so existing test fixtures that construct a
-     * RunnerConfig literal don't have to add the new field — call
-     * sites coalesce to [] via the loader.
-     */
-    capabilities?: string[];
-    /**
-     * v0.41-B: optional path to a mirror clone used exclusively for
-     * git worktree operations. When set, worktree add/remove/prune run
-     * against this path instead of repoPath, eliminating virtiofs lock
-     * conflicts on machines where repoPath is mounted by another process.
-     * Operator initialises once via: git clone --mirror <remote> <path>
-     * Resolution: ACC_WORKTREE_REPO_PATH env > config.json
-     * "worktree-repo-path" field > undefined (falls back to repoPath).
-     */
-    worktreeRepoPath?: string;
-}
-export type ConfigSource = "env" | "file" | "default";
-/**
- * Canonical capability vocabulary, mirrored from
- * `api/_lib/capabilities.ts` and the CHECK constraint enforced by
- * migration 0115 (v0.14-CAPABILITY-VOCAB). Duplicated here because the
- * runner package's tsconfig pins rootDir to `./src/`, so reaching into
- * `api/_lib/` is out of bounds for a published artifact. The
- * integration test `tests/integration/v0.14-DEVELOPER-AGENT.test.ts`
- * asserts this list and the api/_lib version stay in lockstep; the
- * "adding a new capability" recipe in
- * docs/acc/CAPABILITY_VOCABULARY.md covers all three sites (SQL, api/,
- * runner/).
- */
-export declare const RUNNER_CAPABILITY_VOCABULARY: readonly ["code", "design", "test", "docs", "migration", "review", "orchestration"];
-export type RunnerCapability = (typeof RUNNER_CAPABILITY_VOCABULARY)[number];
-/**
- * Throws if any element of `arr` is outside the canonical vocabulary.
- * Mirrors `assertCapabilityArray` from api/_lib/capabilities.ts. The
- * runner uses this on profile load — misspellings ("desgn") fail at
- * CLI startup, not after a task assignment fires.
- */
-export declare function assertRunnerCapabilityArray(arr: readonly string[], context: string): asserts arr is RunnerCapability[];
-/**
- * v0.8.2: Scan a list of absolute candidate paths and return the first
- * that exists on disk. Returns null when none exist so loadConfig() can
- * fall through to the ~/work/TechArch last-resort default.
- *
- * Used when neither ACC_REPO_PATH nor config.json supply a path so a
- * freshly-installed runner finds the repo automatically when the operator
- * cloned it to ~/code/ instead of ~/work/. Candidates are checked in
- * order; the first hit wins.
- */
-export declare function detectRepoPath(candidates: string[]): string | null;
-/**
- * Read ~/.config/acc-runner/config.json (or $XDG_CONFIG_HOME/acc-runner/
- * config.json) and pull out the capabilities field. Missing file or
- * malformed JSON returns []. This is best-effort, never throws: a
- * runner that can't read its config file should still register with
- * the default-empty capabilities rather than crash at startup.
- */
-export declare function loadCapabilitiesFromConfigFile(): string[];
-/**
- * v0.14-DEVELOPER-AGENT — shape of a runner-profile JSON. One file per
- * profile under `packages/acc-runner/runner-profiles/<name>.json`. The
- * developer profile is the v0.13 baseline (capabilities = ["code",
- * "migration"], no prompt prelude beyond what renderTaskPrompt already
- * emits). Designer/Tester/Manager add their own JSONs in subsequent
- * tracks.
- */
-export interface RunnerProfile {
-    /** Profile slug; must match the JSON's filename (without extension). */
-    name: string;
-    /** Capability tags this profile declares. Validated against the
-     *  canonical vocabulary at load time — a typo here aborts CLI
-     *  startup with a clear error. */
-    capabilities: RunnerCapability[];
-    /** Optional hints for which Claude model the profile prefers. The
-     *  v0.14 runtime still picks `task.model_id` first; these are
-     *  reserved for the cost-aware router (v0.14-COST-AWARE-ROUTING) and
-     *  future profile-aware spawn paths. */
-    modelDefaults?: {
-        primary?: string;
-        fallback?: string;
-    };
-    /** Path (relative to the runner package root) to a module whose
-     *  default export is a string prepended to the rendered task prompt
-     *  when this profile is active. The developer profile points at an
-     *  empty-string module so byte-identical behavior holds. Wire-up of
-     *  the prelude in task-runner.ts lands in v0.14-DESIGNER-AGENT
-     *  (Tier 2); v0.14-DEVELOPER-AGENT only establishes the contract. */
-    promptPrelude?: string;
-}
-/**
- * Load the active runner profile, if any. Returns null when no profile
- * is selected (the v0.13 path). Throws on malformed / unknown profile
- * names so the operator sees the misconfiguration at CLI startup
- * rather than at task-pickup time.
- */
-export declare function loadProfile(): RunnerProfile | null;
-export declare function loadConfig(): RunnerConfig;
-/**
- * Source of each resolved config value. Used by `doctor` to annotate
- * the resolved config with "(env)" / "(default)" labels.
- */
-export declare function configSources(): Record<keyof RunnerConfig, ConfigSource>;
-/**
- * Kept for callers that still treat config-load failure as recoverable.
- * With defaults in place loadConfig() does not throw, so this returns
- * a populated RunnerConfig in normal use.
- */
-export declare function loadConfigOrNull(): RunnerConfig | null;
-//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAgEA,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAMtD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,4BAA4B,qFAQ/B,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAM7E;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,SAAS,MAAM,EAAE,EACtB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,GAAG,IAAI,gBAAgB,EAAE,CAQnC;AAsED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CASlE;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,IAAI,MAAM,EAAE,CAOzD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb;;sCAEkC;IAClC,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC;;;4CAGwC;IACxC,aAAa,CAAC,EAAE;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF;;;;;yEAKqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AA+ED;;;;;GAKG;AACH,wBAAgB,WAAW,IAAI,aAAa,GAAG,IAAI,CAkBlD;AA6BD,wBAAgB,UAAU,IAAI,YAAY,CA4CzC;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAAC,MAAM,YAAY,EAAE,YAAY,CAAC,CAuBxE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,GAAG,IAAI,CAMtD"}