@tokenfactory/acc-runner 0.27.0 → 0.27.1

package/dist/anthropic-auth.d.ts

@@ -0,0 +1,53 @@
+/**
+ * v0.74-B (T-1780800000740201): centralised resolution of how the spawned
+ * `claude` CLI authenticates with Anthropic.
+ *
+ * Claude Code authenticates *strictly* via the `ANTHROPIC_API_KEY`
+ * environment variable (or an apiKeyHelper) — it has no `--api-key` flag;
+ * passing one fails with `error: unknown option '--api-key'`. So "passing
+ * the API key to claude" means making sure the variable is present in the
+ * spawned subprocess's environment.
+ *
+ * When ANTHROPIC_API_KEY is set the CLI bills against the API account, which
+ * has no per-session usage cap. When it is absent the CLI falls back to the
+ * operator's interactive OAuth session, which is subject to the 429 session
+ * caps this change exists to avoid.
+ */
+export type AnthropicAuthMode = "api-key" | "interactive-session";
+/** Trimmed ANTHROPIC_API_KEY from `env`, or "" when unset/blank. */
+export declare function anthropicApiKey(env?: NodeJS.ProcessEnv): string;
+/**
+ * v0.76-A (GA-11): opt-in claude-config isolation. Even with ANTHROPIC_API_KEY
+ * set, the Claude CLI prefers a stored claude.ai OAuth login when one exists —
+ * the observed cause of 429 session caps on a key-configured runner. Pointing
+ * the spawned claude at an isolated CLAUDE_CONFIG_DIR (no stored login) leaves
+ * the env key as the only credential, forcing API-key auth. Opt-in via
+ * ACC_RUNNER_ISOLATE_CLAUDE_CONFIG because the behaviour needs live-runner
+ * validation before becoming default.
+ */
+export declare function claudeConfigIsolationEnabled(env?: NodeJS.ProcessEnv): boolean;
+/** Runner-owned claude config dir used when isolation is enabled. */
+export declare function isolatedClaudeConfigDir(env?: NodeJS.ProcessEnv): string;
+/**
+ * `"api-key"` when ANTHROPIC_API_KEY is set (non-blank), else
+ * `"interactive-session"`.
+ */
+export declare function resolveAuthMode(env?: NodeJS.ProcessEnv): AnthropicAuthMode;
+/**
+ * Returns `base` with ANTHROPIC_API_KEY explicitly forwarded (trimmed) when
+ * set, so every claude spawn site authenticates identically regardless of how
+ * `base` was assembled. A passthrough of `base` when the key is absent — the
+ * CLI then uses the operator's interactive OAuth session.
+ */
+export declare function withAnthropicAuth(base?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/** One-line, human-readable description of an auth mode for banners/checks. */
+export declare function describeAuthMode(mode: AnthropicAuthMode): string;
+/**
+ * v0.76-A (GA-11): precedence hint for the banner / doctor. Returns null when
+ * there's nothing to add (interactive-session mode is already self-explanatory
+ * via describeAuthMode). In api-key mode it tells the operator either that
+ * isolation is forcing the key, or — if not isolated — how to stop a claude.ai
+ * login from shadowing the key and causing 429s.
+ */
+export declare function authPrecedenceHint(env?: NodeJS.ProcessEnv): string | null;
+//# sourceMappingURL=anthropic-auth.d.ts.map

package/dist/anthropic-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic-auth.d.ts","sourceRoot":"","sources":["../src/anthropic-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,qBAAqB,CAAC;AAElE,oEAAoE;AACpE,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAE5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAGT;AAED,qEAAqE;AACrE,wBAAgB,uBAAuB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAGR;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,CAEvF;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAc1F;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAIhE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,IAAI,CASf"}

package/dist/anthropic-auth.js

@@ -0,0 +1,89 @@
+/**
+ * v0.74-B (T-1780800000740201): centralised resolution of how the spawned
+ * `claude` CLI authenticates with Anthropic.
+ *
+ * Claude Code authenticates *strictly* via the `ANTHROPIC_API_KEY`
+ * environment variable (or an apiKeyHelper) — it has no `--api-key` flag;
+ * passing one fails with `error: unknown option '--api-key'`. So "passing
+ * the API key to claude" means making sure the variable is present in the
+ * spawned subprocess's environment.
+ *
+ * When ANTHROPIC_API_KEY is set the CLI bills against the API account, which
+ * has no per-session usage cap. When it is absent the CLI falls back to the
+ * operator's interactive OAuth session, which is subject to the 429 session
+ * caps this change exists to avoid.
+ */
+import os from "node:os";
+import path from "node:path";
+/** Trimmed ANTHROPIC_API_KEY from `env`, or "" when unset/blank. */
+export function anthropicApiKey(env = process.env) {
+    return (env.ANTHROPIC_API_KEY ?? "").trim();
+}
+/**
+ * v0.76-A (GA-11): opt-in claude-config isolation. Even with ANTHROPIC_API_KEY
+ * set, the Claude CLI prefers a stored claude.ai OAuth login when one exists —
+ * the observed cause of 429 session caps on a key-configured runner. Pointing
+ * the spawned claude at an isolated CLAUDE_CONFIG_DIR (no stored login) leaves
+ * the env key as the only credential, forcing API-key auth. Opt-in via
+ * ACC_RUNNER_ISOLATE_CLAUDE_CONFIG because the behaviour needs live-runner
+ * validation before becoming default.
+ */
+export function claudeConfigIsolationEnabled(env = process.env) {
+    const v = (env.ACC_RUNNER_ISOLATE_CLAUDE_CONFIG ?? "").trim().toLowerCase();
+    return v === "1" || v === "true" || v === "yes" || v === "on";
+}
+/** Runner-owned claude config dir used when isolation is enabled. */
+export function isolatedClaudeConfigDir(env = process.env) {
+    const override = (env.ACC_RUNNER_CLAUDE_CONFIG_DIR ?? "").trim();
+    return override || path.join(os.homedir(), ".acc-runner", "claude-config");
+}
+/**
+ * `"api-key"` when ANTHROPIC_API_KEY is set (non-blank), else
+ * `"interactive-session"`.
+ */
+export function resolveAuthMode(env = process.env) {
+    return anthropicApiKey(env) ? "api-key" : "interactive-session";
+}
+/**
+ * Returns `base` with ANTHROPIC_API_KEY explicitly forwarded (trimmed) when
+ * set, so every claude spawn site authenticates identically regardless of how
+ * `base` was assembled. A passthrough of `base` when the key is absent — the
+ * CLI then uses the operator's interactive OAuth session.
+ */
+export function withAnthropicAuth(base = process.env) {
+    const key = anthropicApiKey(base);
+    if (!key)
+        return base;
+    const next = { ...base, ANTHROPIC_API_KEY: key };
+    // v0.76-A (GA-11): when isolation is opted in and the operator hasn't already
+    // pinned a config dir, point claude at a runner-owned dir so a stored
+    // claude.ai login can't shadow the API key. Never clobber an explicit value.
+    if (claudeConfigIsolationEnabled(base) &&
+        !(base.CLAUDE_CONFIG_DIR ?? "").trim()) {
+        next.CLAUDE_CONFIG_DIR = isolatedClaudeConfigDir(base);
+    }
+    return next;
+}
+/** One-line, human-readable description of an auth mode for banners/checks. */
+export function describeAuthMode(mode) {
+    return mode === "api-key"
+        ? "api-key (ANTHROPIC_API_KEY set — no session cap)"
+        : "interactive-session (no ANTHROPIC_API_KEY — subject to 429 session caps)";
+}
+/**
+ * v0.76-A (GA-11): precedence hint for the banner / doctor. Returns null when
+ * there's nothing to add (interactive-session mode is already self-explanatory
+ * via describeAuthMode). In api-key mode it tells the operator either that
+ * isolation is forcing the key, or — if not isolated — how to stop a claude.ai
+ * login from shadowing the key and causing 429s.
+ */
+export function authPrecedenceHint(env = process.env) {
+    if (resolveAuthMode(env) !== "api-key")
+        return null;
+    if (claudeConfigIsolationEnabled(env)) {
+        return `claude config isolated at ${isolatedClaudeConfigDir(env)} — API key forced`;
+    }
+    return ("if you still hit 429 session caps, a claude.ai login is shadowing the API key — " +
+        "run `claude /logout` or set ACC_RUNNER_ISOLATE_CLAUDE_CONFIG=1");
+}
+//# sourceMappingURL=anthropic-auth.js.map

package/dist/anthropic-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic-auth.js","sourceRoot":"","sources":["../src/anthropic-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5E,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC;AAChE,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,uBAAuB,CACrC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjE,OAAO,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA0B,OAAO,CAAC,GAAG;IACrE,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAsB,EAAE,GAAG,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC;IACpE,8EAA8E;IAC9E,sEAAsE;IACtE,6EAA6E;IAC7E,IACE,4BAA4B,CAAC,IAAI,CAAC;QAClC,CAAC,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EACtC,CAAC;QACD,IAAI,CAAC,iBAAiB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,IAAuB;IACtD,OAAO,IAAI,KAAK,SAAS;QACvB,CAAC,CAAC,kDAAkD;QACpD,CAAC,CAAC,0EAA0E,CAAC;AACjF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,4BAA4B,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO,6BAA6B,uBAAuB,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACtF,CAAC;IACD,OAAO,CACL,kFAAkF;QAClF,gEAAgE,CACjE,CAAC;AACJ,CAAC"}

package/dist/bin-resolve.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Binary path resolution for launchd-launched acc-runner processes.
+ *
+ * launchd strips the shell PATH to /usr/bin:/bin:/usr/sbin:/sbin, omitting
+ * /opt/homebrew/bin and /usr/local/bin where Homebrew installs git and gh.
+ * All execa("git"/"gh", ...) calls must use buildEnv() instead of bare
+ * process.env so the binaries are resolvable under launchd supervision.
+ */
+/**
+ * Returns process.env with PATH augmented to include Homebrew bin dirs.
+ * Memoized — safe to call on every execa invocation.
+ *
+ *   execa("git", args, { cwd, env: buildEnv() })
+ */
+export declare function buildEnv(): NodeJS.ProcessEnv;
+//# sourceMappingURL=bin-resolve.d.ts.map

package/dist/bin-resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin-resolve.d.ts","sourceRoot":"","sources":["../src/bin-resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAqBH;;;;;GAKG;AACH,wBAAgB,QAAQ,IAAI,MAAM,CAAC,UAAU,CAE5C"}

package/dist/bin-resolve.js

@@ -0,0 +1,35 @@
+/**
+ * Binary path resolution for launchd-launched acc-runner processes.
+ *
+ * launchd strips the shell PATH to /usr/bin:/bin:/usr/sbin:/sbin, omitting
+ * /opt/homebrew/bin and /usr/local/bin where Homebrew installs git and gh.
+ * All execa("git"/"gh", ...) calls must use buildEnv() instead of bare
+ * process.env so the binaries are resolvable under launchd supervision.
+ */
+/** Directories prepended when not already in PATH. */
+const EXTRA_PATHS = [
+    "/opt/homebrew/bin", // Apple Silicon Homebrew
+    "/opt/homebrew/sbin",
+    "/usr/local/bin", // Intel Homebrew / MacPorts
+    "/usr/local/sbin",
+];
+let _augmented = null;
+function augmentedPath() {
+    if (_augmented !== null)
+        return _augmented;
+    const existing = process.env.PATH ?? "/usr/bin:/bin:/usr/sbin:/sbin";
+    const parts = existing.split(":");
+    const extras = EXTRA_PATHS.filter((p) => !parts.includes(p));
+    _augmented = extras.length > 0 ? `${extras.join(":")}:${existing}` : existing;
+    return _augmented;
+}
+/**
+ * Returns process.env with PATH augmented to include Homebrew bin dirs.
+ * Memoized — safe to call on every execa invocation.
+ *
+ *   execa("git", args, { cwd, env: buildEnv() })
+ */
+export function buildEnv() {
+    return { ...process.env, PATH: augmentedPath() };
+}
+//# sourceMappingURL=bin-resolve.js.map

package/dist/bin-resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin-resolve.js","sourceRoot":"","sources":["../src/bin-resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,sDAAsD;AACtD,MAAM,WAAW,GAAG;IAClB,mBAAmB,EAAI,yBAAyB;IAChD,oBAAoB;IACpB,gBAAgB,EAAO,4BAA4B;IACnD,iBAAiB;CAClB,CAAC;AAEF,IAAI,UAAU,GAAkB,IAAI,CAAC;AAErC,SAAS,aAAa;IACpB,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,+BAA+B,CAAC;IACrE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ;IACtB,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC;AACnD,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,128 @@
+#!/usr/bin/env node
+/**
+ * acc-runner — CLI entry point. commander wires subcommands into named
+ * functions in their own files; this module is intentionally thin.
+ */
+import { Command } from "commander";
+import chalk from "chalk";
+import { loadConfig } from "./config.js";
+import { fetchPricing } from "./cost-pricing.js";
+import { loginCommand } from "./login.js";
+import { logoutCommand } from "./logout.js";
+import { watchCommand } from "./watch.js";
+import { doctorCommand } from "./doctor.js";
+import { clearQuarantine, getQuarantine } from "./runtime/quarantine.js";
+import { PROTOCOL_VERSION } from "./types.js";
+import { PACKAGE_VERSION } from "./pkg-version.js";
+const program = new Command();
+program
+    .name("acc-runner")
+    .description("Agent Control Center local runner. Subscribes to ACC, spawns Claude Code on assignment, and opens a PR when done.")
+    .version(`${PACKAGE_VERSION} (protocol v${PROTOCOL_VERSION})`);
+program
+    .command("login")
+    .description("Sign in via device-code OAuth and register this machine.")
+    .action(async () => {
+    try {
+        await loginCommand();
+    }
+    catch (err) {
+        console.error(chalk.red(`✗ ${err.message}`));
+        process.exitCode = 1;
+    }
+});
+program
+    .command("logout")
+    .description("Clear the local session and mark this runner offline.")
+    .action(async () => {
+    try {
+        await logoutCommand();
+    }
+    catch (err) {
+        console.error(chalk.red(`✗ ${err.message}`));
+        process.exitCode = 1;
+    }
+});
+program
+    .command("watch")
+    .description("Long-running. Receive task assignments and execute them.")
+    .action(async () => {
+    try {
+        // Warm the cost-pricing cache before the realtime loop opens.
+        // fetchPricing handles its own logging; embedded fallback governs
+        // if the endpoint is unreachable.
+        await fetchPricing(loadConfig().publicUrl);
+        await watchCommand();
+        // Keep the process alive — stop() runs in the SIGINT handler.
+        await new Promise(() => { });
+    }
+    catch (err) {
+        console.error(chalk.red(`✗ ${err.message}`));
+        process.exitCode = 1;
+    }
+});
+program
+    .command("doctor")
+    .description("Run environment checks. Exit 0 if all green, 1 otherwise.")
+    .action(async () => {
+    const code = await doctorCommand();
+    process.exitCode = code;
+});
+// v0.48: quarantine management. The runner enters quarantine automatically
+// when the failure classifier detects a machine-level failure. An operator
+// resolves the underlying issue then clears the quarantine to resume work.
+const quarantineCmd = program
+    .command("quarantine")
+    .description("Inspect or clear the runner quarantine state.");
+quarantineCmd
+    .command("status")
+    .description("Show quarantine state.")
+    .action(async () => {
+    try {
+        const q = await getQuarantine();
+        if (!q) {
+            console.log("Runner is not quarantined.");
+            return;
+        }
+        console.log(chalk.red.bold(`QUARANTINED (${q.cause})`));
+        console.log(`  Detail:  ${q.detail}`);
+        console.log(`  Task:    ${q.taskId}`);
+        console.log(`  Since:   ${q.classifiedAt}`);
+        // v0.53 T-53-4: consecutive instant-empty count (1 = definitive,
+        // 2 = heuristic confirmed by retry). Omitted for pre-0.53 states.
+        if (q.consecutive !== undefined) {
+            console.log(`  Streak:  ${q.consecutive} consecutive instant-empty exit(s)`);
+        }
+        console.log(chalk.gray(`\nResolve the underlying ${q.cause} issue, then run \`acc-runner quarantine clear\`.`));
+        process.exitCode = 1;
+    }
+    catch (err) {
+        console.error(chalk.red(`✗ ${err.message}`));
+        process.exitCode = 1;
+    }
+});
+quarantineCmd
+    .command("clear")
+    .description("Clear quarantine and allow the runner to resume claiming tasks.")
+    .action(async () => {
+    try {
+        await clearQuarantine();
+        console.log(chalk.green("✓ Quarantine cleared. Runner will resume on next task assignment."));
+    }
+    catch (err) {
+        console.error(chalk.red(`✗ ${err.message}`));
+        process.exitCode = 1;
+    }
+});
+program
+    .command("version")
+    .description("Print CLI + protocol versions.")
+    .action(() => {
+    console.log(`acc-runner ${PACKAGE_VERSION}`);
+    console.log(`protocol     ${PROTOCOL_VERSION}`);
+});
+program.parseAsync(process.argv).catch((err) => {
+    console.error(chalk.red(`✗ ${err.message}`));
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;GAGG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,YAAY,CAAC;KAClB,WAAW,CACV,mHAAmH,CACpH;KACA,OAAO,CAAC,GAAG,eAAe,eAAe,gBAAgB,GAAG,CAAC,CAAC;AAEjE,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,0DAA0D,CAAC;KACvE,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,uDAAuD,CAAC;KACpE,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,0DAA0D,CAAC;KACvE,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,8DAA8D;QAC9D,kEAAkE;QAClE,kCAAkC;QAClC,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,YAAY,EAAE,CAAC;QACrB,8DAA8D;QAC9D,MAAM,IAAI,OAAO,CAAO,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,2DAA2D,CAAC;KACxE,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;IACnC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,MAAM,aAAa,GAAG,OAAO;KAC1B,OAAO,CAAC,YAAY,CAAC;KACrB,WAAW,CAAC,+CAA+C,CAAC,CAAC;AAEhE,aAAa;KACV,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,wBAAwB,CAAC;KACrC,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5C,iEAAiE;QACjE,kEAAkE;QAClE,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,WAAW,oCAAoC,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CACR,4BAA4B,CAAC,CAAC,KAAK,mDAAmD,CACvF,CACF,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,aAAa;KACV,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,iEAAiE,CAAC;KAC9E,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,eAAe,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC,CAAC;IAChG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,gCAAgC,CAAC;KAC7C,MAAM,CAAC,GAAG,EAAE;IACX,OAAO,CAAC,GAAG,CAAC,cAAc,eAAe,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,gBAAgB,gBAAgB,EAAE,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAC7C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,121 @@
+export interface RunnerConfig {
+    publicUrl: string;
+    supabaseUrl: string;
+    supabaseAnonKey: string;
+    repoPath: string;
+    targetRepo: string;
+    integrationBranch: string;
+    /**
+     * v0.6.4+: capability tags this runner declares to the task-router.
+     * Resolution order: ACC_RUNNER_CAPABILITIES env (comma-separated)
+     * > ~/.config/acc-runner/config.json `capabilities` field > [].
+     * Empty array matches any task with empty required_capabilities,
+     * preserving backward compatibility with 0.6.3 runners. Optional
+     * on the interface so existing test fixtures that construct a
+     * RunnerConfig literal don't have to add the new field — call
+     * sites coalesce to [] via the loader.
+     */
+    capabilities?: string[];
+    /**
+     * v0.41-B: optional path to a mirror clone used exclusively for
+     * git worktree operations. When set, worktree add/remove/prune run
+     * against this path instead of repoPath, eliminating virtiofs lock
+     * conflicts on machines where repoPath is mounted by another process.
+     * Operator initialises once via: git clone --mirror <remote> <path>
+     * Resolution: ACC_WORKTREE_REPO_PATH env > config.json
+     * "worktree-repo-path" field > undefined (falls back to repoPath).
+     */
+    worktreeRepoPath?: string;
+}
+export type ConfigSource = "env" | "file" | "default";
+/**
+ * Canonical capability vocabulary, mirrored from
+ * `api/_lib/capabilities.ts` and the CHECK constraint enforced by
+ * migration 0115 (v0.14-CAPABILITY-VOCAB). Duplicated here because the
+ * runner package's tsconfig pins rootDir to `./src/`, so reaching into
+ * `api/_lib/` is out of bounds for a published artifact. The
+ * integration test `tests/integration/v0.14-DEVELOPER-AGENT.test.ts`
+ * asserts this list and the api/_lib version stay in lockstep; the
+ * "adding a new capability" recipe in
+ * docs/acc/CAPABILITY_VOCABULARY.md covers all three sites (SQL, api/,
+ * runner/).
+ */
+export declare const RUNNER_CAPABILITY_VOCABULARY: readonly ["code", "design", "test", "docs", "migration", "review", "orchestration"];
+export type RunnerCapability = (typeof RUNNER_CAPABILITY_VOCABULARY)[number];
+/**
+ * Throws if any element of `arr` is outside the canonical vocabulary.
+ * Mirrors `assertCapabilityArray` from api/_lib/capabilities.ts. The
+ * runner uses this on profile load — misspellings ("desgn") fail at
+ * CLI startup, not after a task assignment fires.
+ */
+export declare function assertRunnerCapabilityArray(arr: readonly string[], context: string): asserts arr is RunnerCapability[];
+/**
+ * v0.8.2: Scan a list of absolute candidate paths and return the first
+ * that exists on disk. Returns null when none exist so loadConfig() can
+ * fall through to the ~/work/TechArch last-resort default.
+ *
+ * Used when neither ACC_REPO_PATH nor config.json supply a path so a
+ * freshly-installed runner finds the repo automatically when the operator
+ * cloned it to ~/code/ instead of ~/work/. Candidates are checked in
+ * order; the first hit wins.
+ */
+export declare function detectRepoPath(candidates: string[]): string | null;
+/**
+ * Read ~/.config/acc-runner/config.json (or $XDG_CONFIG_HOME/acc-runner/
+ * config.json) and pull out the capabilities field. Missing file or
+ * malformed JSON returns []. This is best-effort, never throws: a
+ * runner that can't read its config file should still register with
+ * the default-empty capabilities rather than crash at startup.
+ */
+export declare function loadCapabilitiesFromConfigFile(): string[];
+/**
+ * v0.14-DEVELOPER-AGENT — shape of a runner-profile JSON. One file per
+ * profile under `packages/acc-runner/runner-profiles/<name>.json`. The
+ * developer profile is the v0.13 baseline (capabilities = ["code",
+ * "migration"], no prompt prelude beyond what renderTaskPrompt already
+ * emits). Designer/Tester/Manager add their own JSONs in subsequent
+ * tracks.
+ */
+export interface RunnerProfile {
+    /** Profile slug; must match the JSON's filename (without extension). */
+    name: string;
+    /** Capability tags this profile declares. Validated against the
+     *  canonical vocabulary at load time — a typo here aborts CLI
+     *  startup with a clear error. */
+    capabilities: RunnerCapability[];
+    /** Optional hints for which Claude model the profile prefers. The
+     *  v0.14 runtime still picks `task.model_id` first; these are
+     *  reserved for the cost-aware router (v0.14-COST-AWARE-ROUTING) and
+     *  future profile-aware spawn paths. */
+    modelDefaults?: {
+        primary?: string;
+        fallback?: string;
+    };
+    /** Path (relative to the runner package root) to a module whose
+     *  default export is a string prepended to the rendered task prompt
+     *  when this profile is active. The developer profile points at an
+     *  empty-string module so byte-identical behavior holds. Wire-up of
+     *  the prelude in task-runner.ts lands in v0.14-DESIGNER-AGENT
+     *  (Tier 2); v0.14-DEVELOPER-AGENT only establishes the contract. */
+    promptPrelude?: string;
+}
+/**
+ * Load the active runner profile, if any. Returns null when no profile
+ * is selected (the v0.13 path). Throws on malformed / unknown profile
+ * names so the operator sees the misconfiguration at CLI startup
+ * rather than at task-pickup time.
+ */
+export declare function loadProfile(): RunnerProfile | null;
+export declare function loadConfig(): RunnerConfig;
+/**
+ * Source of each resolved config value. Used by `doctor` to annotate
+ * the resolved config with "(env)" / "(default)" labels.
+ */
+export declare function configSources(): Record<keyof RunnerConfig, ConfigSource>;
+/**
+ * Kept for callers that still treat config-load failure as recoverable.
+ * With defaults in place loadConfig() does not throw, so this returns
+ * a populated RunnerConfig in normal use.
+ */
+export declare function loadConfigOrNull(): RunnerConfig | null;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAgEA,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAMtD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,4BAA4B,qFAQ/B,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAM7E;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,SAAS,MAAM,EAAE,EACtB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,GAAG,IAAI,gBAAgB,EAAE,CAQnC;AAsED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CASlE;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,IAAI,MAAM,EAAE,CAOzD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb;;sCAEkC;IAClC,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC;;;4CAGwC;IACxC,aAAa,CAAC,EAAE;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF;;;;;yEAKqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AA+ED;;;;;GAKG;AACH,wBAAgB,WAAW,IAAI,aAAa,GAAG,IAAI,CAkBlD;AA6BD,wBAAgB,UAAU,IAAI,YAAY,CA4CzC;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAAC,MAAM,YAAY,EAAE,YAAY,CAAC,CAuBxE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,GAAG,IAAI,CAMtD"}