@tokenfactory/acc-runner 0.27.0 → 0.27.1

package/dist/runtime/rework.js

@@ -0,0 +1,136 @@
+/**
+ * v0.51 T-51-1 (G2): rework task support — sentinel parsing + prompt.
+ *
+ * A `rework` task is created by acc.create_rework_task (migration 0172)
+ * when a reviewer rejects a PR with confidence < 0.9. Unlike
+ * conflict_resolution tasks (resolved via the GitHub API, no Claude),
+ * rework tasks run the normal Claude session — but against the PR's
+ * EXISTING head branch: task-runner.ts provisions the worktree from
+ * `origin/<branch>` instead of forking from the integration branch,
+ * pushes back to the same branch (same PR), and never opens a new PR.
+ *
+ * The task description carries the reviewer's verdict in a sentinel the
+ * server embeds (mirrors the acc-conflict sentinel from T-48-5):
+ *   <!-- acc-rework: {"pr_number":N,"repo":"o/r","branch":"...",
+ *        "origin_task_id":"T-...","verdict":"reject","confidence":0.72,
+ *        "comments":["..."],"cycle":1} -->
+ */
+import { execa } from "execa";
+import { buildEnv } from "../bin-resolve.js";
+/** Mirrors the bound enforced inside acc.create_rework_task. */
+export const MAX_REWORK_CYCLES = 3;
+// Lazy body match so reviewer comments containing "}" don't truncate the
+// JSON (the acc-conflict regex's [^}]* would). Comments never contain
+// "-->" — the RPC builds them from reviewer reasons.
+const REWORK_META_RE = /<!--\s*acc-rework:\s*(\{[\s\S]*?\})\s*-->/;
+function coerce(parsed) {
+    if (typeof parsed.pr_number !== "number" ||
+        typeof parsed.repo !== "string" ||
+        !parsed.repo.includes("/")) {
+        return null;
+    }
+    return {
+        pr_number: parsed.pr_number,
+        repo: parsed.repo,
+        branch: typeof parsed.branch === "string" ? parsed.branch : "",
+        origin_task_id: typeof parsed.origin_task_id === "string" ? parsed.origin_task_id : "",
+        verdict: typeof parsed.verdict === "string" ? parsed.verdict : "reject",
+        confidence: typeof parsed.confidence === "number" ? parsed.confidence : 0,
+        comments: Array.isArray(parsed.comments)
+            ? parsed.comments.filter((c) => typeof c === "string")
+            : [],
+        cycle: typeof parsed.cycle === "number" ? parsed.cycle : 1,
+    };
+}
+/**
+ * Extract rework metadata from the task description. Falls back to the
+ * task row's own pr_number/repo/branch when the sentinel is absent or
+ * malformed (same degradation path as parseConflictMeta).
+ */
+export function parseReworkMeta(description, fallback) {
+    if (description) {
+        const match = REWORK_META_RE.exec(description);
+        if (match) {
+            try {
+                const meta = coerce(JSON.parse(match[1]));
+                if (meta)
+                    return meta;
+            }
+            catch {
+                // fall through to task-row fallback
+            }
+        }
+    }
+    const prNumber = fallback?.pr_number;
+    const repo = fallback?.repo;
+    if (typeof prNumber === "number" && typeof repo === "string" && repo.includes("/")) {
+        return {
+            pr_number: prNumber,
+            repo,
+            branch: fallback?.branch ?? "",
+            origin_task_id: "",
+            verdict: "reject",
+            confidence: 0,
+            comments: [],
+            cycle: 1,
+        };
+    }
+    return null;
+}
+/**
+ * Resolve the PR's head branch via gh when the sentinel carried an empty
+ * branch (e.g. the origin task row had no branch back-written yet).
+ */
+export async function fetchPrHeadRef(repo, prNumber) {
+    const { stdout } = await execa("gh", ["pr", "view", String(prNumber), "-R", repo, "--json", "headRefName", "--jq", ".headRefName"], { env: buildEnv() });
+    return stdout.trim();
+}
+/**
+ * Rework prompt. Replaces renderTaskPrompt for rework tasks: the protocol
+ * header changes from "open a PR" to "update the existing PR's branch",
+ * and the reviewer's verdict + comments become the work spec. The runner
+ * pushes after Claude exits, so the session only needs to commit.
+ */
+export function renderReworkPrompt(args) {
+    const { task, meta, branch } = args;
+    const lines = [];
+    lines.push(`**Branch:** ${branch} (EXISTING — already checked out; do NOT create a new branch)`);
+    lines.push(`**PR:** #${meta.pr_number} on ${meta.repo} (EXISTING — do NOT open a new PR)`);
+    lines.push("");
+    lines.push(`# Task ${task.id}: ${task.title}`);
+    lines.push("");
+    lines.push("A reviewer rejected this PR. You are on the PR's existing branch with " +
+        "its current contents. Address every reviewer comment below with " +
+        "minimal, focused changes, then COMMIT your work. The runner pushes " +
+        "the branch after you exit — do not push and do not open a PR.");
+    lines.push("");
+    lines.push(`## Reviewer verdict (rework cycle ${meta.cycle}/${MAX_REWORK_CYCLES})`);
+    lines.push(`${meta.verdict} (confidence ${meta.confidence})`);
+    lines.push("");
+    lines.push("## Reviewer comments");
+    lines.push(...(meta.comments.length
+        ? meta.comments.map((c) => `- ${c}`)
+        : ["- (none provided — re-read the task description and PR diff for context)"]));
+    lines.push("");
+    if (task.description) {
+        lines.push("## Task description");
+        lines.push(task.description);
+        lines.push("");
+    }
+    lines.push("## Forbidden files (DO NOT TOUCH)");
+    lines.push(...(task.forbidden.length ? task.forbidden.map((f) => `- ${f}`) : ["- (none)"]));
+    lines.push("");
+    lines.push("## Gates");
+    lines.push(`Run \`${task.typecheck_cmd?.trim() || "pnpm typecheck && pnpm lint && pnpm build"}\` ` +
+        "after your edits. All gates must pass before you commit. If a gate " +
+        "fails and you cannot fix it, say so explicitly in your final output " +
+        "and do not commit broken code.");
+    lines.push("");
+    lines.push("## Required output");
+    lines.push("- Summary of what you changed per reviewer comment");
+    lines.push("- Any comments you could NOT address, and why");
+    lines.push("- Gate results (typecheck/lint/build)");
+    lines.push("");
+    return lines.join("\n");
+}
+//# sourceMappingURL=rework.js.map

package/dist/runtime/rework.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rework.js","sourceRoot":"","sources":["../../src/runtime/rework.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAgB7C,gEAAgE;AAChE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAEnC,yEAAyE;AACzE,sEAAsE;AACtE,qDAAqD;AACrD,MAAM,cAAc,GAAG,2CAA2C,CAAC;AAEnE,SAAS,MAAM,CAAC,MAA2B;IACzC,IACE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QAC9D,cAAc,EACZ,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE;QACxE,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;QACvE,UAAU,EACR,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/D,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YACtC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YACnE,CAAC,CAAC,EAAE;QACN,KAAK,EAAE,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,WAAsC,EACtC,QAIC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAwB,CAAC,CAAC;gBACjE,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,oCAAoC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,EAAE,SAAS,CAAC;IACrC,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,CAAC;IAC5B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnF,OAAO;YACL,SAAS,EAAE,QAAQ;YACnB,IAAI;YACJ,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,EAAE;YAC9B,cAAc,EAAE,EAAE;YAClB,OAAO,EAAE,QAAQ;YACjB,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,CAAC;SACT,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,QAAgB;IAEhB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAC5B,IAAI,EACJ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,CAAC,EAC7F,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CACpB,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAUlC;IACC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,+DAA+D,CAAC,CAAC;IACjG,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,OAAO,IAAI,CAAC,IAAI,oCAAoC,CAAC,CAAC;IAC3F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,wEAAwE;QACxE,kEAAkE;QAClE,qEAAqE;QACrE,+DAA+D,CAChE,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,qCAAqC,IAAI,CAAC,KAAK,IAAI,iBAAiB,GAAG,CAAC,CAAC;IACpF,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,gBAAgB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;IAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;QACtB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC,0EAA0E,CAAC,CAAC,CAClF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,KAAK,CAAC,IAAI,CACR,SAAS,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,2CAA2C,KAAK;QACvF,qEAAqE;QACrE,sEAAsE;QACtE,gCAAgC,CACjC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACjE,KAAK,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/runtime/singleton.d.ts

@@ -0,0 +1,66 @@
+export interface SingletonLockInfo {
+    pid: number;
+    /** Canonical (realpath-resolved where possible) repo path this runner serves. */
+    repoPath: string;
+    /**
+     * v1.02-A: the runner identity (ACC_RUNNER_ID) this lock is keyed to, or
+     * "" for the legacy repo-path-only key. Recorded so doctor and the loud
+     * duplicate banner can name the holder's identity.
+     */
+    runnerId: string;
+    acquiredAt: string;
+    version: string;
+}
+/**
+ * v1.02-A: the runner identity that keys the singleton lock. ACC_RUNNER_ID
+ * when set, else "" (legacy repo-path-only key). Never the minted acc-eph id.
+ */
+export declare function singletonRunnerId(env?: NodeJS.ProcessEnv): string;
+export interface SingletonLock {
+    lockFile: string;
+    repoPath: string;
+    /** Remove the lock iff we still own it. Safe to call more than once. */
+    release(): Promise<void>;
+}
+export declare class SingletonLockHeldError extends Error {
+    readonly holder: SingletonLockInfo;
+    readonly lockFile: string;
+    constructor(holder: SingletonLockInfo, lockFile: string);
+}
+/**
+ * Resolve a repo path to a stable canonical form so two spellings of the
+ * same directory (trailing slash, symlink, `./`) map to one lock file.
+ * realpath fails if the path does not exist yet — fall back to resolve().
+ */
+export declare function canonicalRepoPath(repoPath: string): string;
+/**
+ * `<cache>/runner.<hash>.lock`. The hash is derived from the canonical repo
+ * path AND the runner identity (v1.02-A), so two distinct ACC_RUNNER_IDs on
+ * one repo get distinct lock files and coexist. An empty `runnerId` keeps the
+ * pre-v1.02 hash (repo path alone) so a runner without ACC_RUNNER_ID still
+ * detects a pre-upgrade holder for the same repo.
+ */
+export declare function singletonLockPath(repoPath: string, runnerId?: string): string;
+/**
+ * Acquire the single-instance lock for `repoPath` under `runnerId`. Throws
+ * SingletonLockHeldError when a *live* process already holds the lock for the
+ * same (canonical repo path, runner identity) pair. A stale lock (dead pid,
+ * our own pid, or a corrupt file) is reclaimed with a stderr breadcrumb and
+ * then re-acquired. A different `runnerId` keys a different lock file, so two
+ * distinct identities on one repo never contend (v1.02-A).
+ */
+export declare function acquireSingletonLock(repoPath: string, pid?: number, runnerId?: string): Promise<SingletonLock>;
+/**
+ * Inspect the lock file for `repoPath` and return its holder iff a *live*
+ * process other than `selfPid` owns it. Used by `acc-runner doctor` to
+ * report a duplicate runner without trying to acquire the lock.
+ */
+export declare function findLiveLockHolder(repoPath: string, selfPid?: number, runnerId?: string): Promise<SingletonLockInfo | null>;
+/**
+ * pgrep-style scan for other `acc-runner watch` processes. Best-effort and
+ * offline of the lock file — used by doctor to catch a runner that predates
+ * the singleton lock (no lock file) or one whose lock was hand-deleted.
+ * Returns foreign pids; never throws (returns [] on any failure).
+ */
+export declare function listForeignRunnerPids(selfPid?: number): Promise<number[]>;
+//# sourceMappingURL=singleton.d.ts.map

package/dist/runtime/singleton.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"singleton.d.ts","sourceRoot":"","sources":["../../src/runtime/singleton.ts"],"names":[],"mappings":"AAsCA,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAE9E;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,qBAAa,sBAAuB,SAAQ,KAAK;aAE7B,MAAM,EAAE,iBAAiB;aACzB,QAAQ,EAAE,MAAM;gBADhB,MAAM,EAAE,iBAAiB,EACzB,QAAQ,EAAE,MAAM;CAQnC;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAO1D;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,MAA4B,GACrC,MAAM,CAKR;AA4CD;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,MAAoB,EACzB,QAAQ,GAAE,MAA4B,GACrC,OAAO,CAAC,aAAa,CAAC,CA+CxB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,MAAoB,EAC7B,QAAQ,GAAE,MAA4B,GACrC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAMnC;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,MAAoB,GAC5B,OAAO,CAAC,MAAM,EAAE,CAAC,CAqBnB"}

package/dist/runtime/singleton.js

@@ -0,0 +1,227 @@
+/**
+ * v0.14.0 (T-54-2, GA-3): single-instance runner lock.
+ *
+ * On 2026-06-05 two `acc-runner watch` processes came up on one machine
+ * sharing the same repo path. They collided on per-task worktree locks and
+ * raced git refs, double-failing an entire batch in under a second
+ * (CURRENT_CYCLE.md v0.53 incident (b)). No startup guard existed.
+ *
+ * This module gives any task-executing entrypoint (today: `watch`) an
+ * exclusive lock keyed by the *canonical repo path* it serves. Acquisition
+ * uses O_EXCL (`fs.openSync(file, "wx")`) so the create-or-fail is atomic;
+ * an existing lock whose pid is dead is reclaimed with a log line, while a
+ * live holder for the SAME repo path is rejected loudly.
+ *
+ * Different repo paths coexist (future multi-repo): the lock file name is
+ * derived from a hash of the canonical repo path, so one machine can run
+ * one runner per repo without contention. The conceptual name in the spec
+ * is `<cache>/runner.lock`; the per-repo hash suffix is what makes
+ * coexistence possible.
+ *
+ * v1.02-A — concurrent runners per host. The lock is now keyed by
+ * (canonical repo path + runner identity), not the repo path alone, so two
+ * DISTINCT ACC_RUNNER_IDs can serve the same repo on one machine at the same
+ * time (each gets its own cache dir via `cacheDir()`, so no worktree/ref
+ * race). A runner with NO ACC_RUNNER_ID keeps the legacy repo-path-only key
+ * — two un-identified runners on one repo still collide, which is the
+ * original duplicate-runner footgun the lock exists to catch. The identity
+ * deliberately reads ACC_RUNNER_ID directly (never the minted acc-eph id,
+ * which is random per process and would make the lock never collide).
+ */
+import fs from "node:fs";
+import fsp from "node:fs/promises";
+import path from "node:path";
+import crypto from "node:crypto";
+import { cacheDir } from "./cache-dir.js";
+import { isProcessAlive } from "./locks.js";
+import { PACKAGE_VERSION } from "../pkg-version.js";
+/**
+ * v1.02-A: the runner identity that keys the singleton lock. ACC_RUNNER_ID
+ * when set, else "" (legacy repo-path-only key). Never the minted acc-eph id.
+ */
+export function singletonRunnerId(env = process.env) {
+    return env.ACC_RUNNER_ID?.trim() || "";
+}
+export class SingletonLockHeldError extends Error {
+    holder;
+    lockFile;
+    constructor(holder, lockFile) {
+        super(`another acc-runner (pid ${holder.pid}) is already serving repo ${holder.repoPath}` +
+            (holder.runnerId ? ` as ${holder.runnerId}` : ""));
+        this.holder = holder;
+        this.lockFile = lockFile;
+        this.name = "SingletonLockHeldError";
+    }
+}
+/**
+ * Resolve a repo path to a stable canonical form so two spellings of the
+ * same directory (trailing slash, symlink, `./`) map to one lock file.
+ * realpath fails if the path does not exist yet — fall back to resolve().
+ */
+export function canonicalRepoPath(repoPath) {
+    const resolved = path.resolve(repoPath);
+    try {
+        return fs.realpathSync(resolved);
+    }
+    catch {
+        return resolved;
+    }
+}
+/**
+ * `<cache>/runner.<hash>.lock`. The hash is derived from the canonical repo
+ * path AND the runner identity (v1.02-A), so two distinct ACC_RUNNER_IDs on
+ * one repo get distinct lock files and coexist. An empty `runnerId` keeps the
+ * pre-v1.02 hash (repo path alone) so a runner without ACC_RUNNER_ID still
+ * detects a pre-upgrade holder for the same repo.
+ */
+export function singletonLockPath(repoPath, runnerId = singletonRunnerId()) {
+    const canonical = canonicalRepoPath(repoPath);
+    const key = runnerId ? `${canonical}\0${runnerId}` : canonical;
+    const hash = crypto.createHash("sha1").update(key).digest("hex").slice(0, 12);
+    return path.join(cacheDir(), `runner.${hash}.lock`);
+}
+async function readLockInfo(file) {
+    let raw;
+    try {
+        raw = await fsp.readFile(file, "utf8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return null;
+        throw err;
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (typeof parsed.pid !== "number" || !Number.isFinite(parsed.pid))
+            return null;
+        return {
+            pid: parsed.pid,
+            repoPath: typeof parsed.repoPath === "string" ? parsed.repoPath : "<unknown>",
+            // Absent in pre-v1.02 lock files → "" (legacy repo-path-only key).
+            runnerId: typeof parsed.runnerId === "string" ? parsed.runnerId : "",
+            acquiredAt: typeof parsed.acquiredAt === "string" ? parsed.acquiredAt : "<unknown>",
+            version: typeof parsed.version === "string" ? parsed.version : "<unknown>",
+        };
+    }
+    catch {
+        // Corrupt/partial lock file — treat as reclaimable rather than fatal.
+        return null;
+    }
+}
+function makeLock(file, repoPath, pid) {
+    return {
+        lockFile: file,
+        repoPath,
+        async release() {
+            try {
+                const holder = await readLockInfo(file);
+                // Only unlink if we still own it — never stomp a lock another
+                // process reclaimed after we exited uncleanly.
+                if (holder && holder.pid === pid)
+                    await fsp.unlink(file);
+            }
+            catch (err) {
+                if (err.code !== "ENOENT")
+                    throw err;
+            }
+        },
+    };
+}
+/**
+ * Acquire the single-instance lock for `repoPath` under `runnerId`. Throws
+ * SingletonLockHeldError when a *live* process already holds the lock for the
+ * same (canonical repo path, runner identity) pair. A stale lock (dead pid,
+ * our own pid, or a corrupt file) is reclaimed with a stderr breadcrumb and
+ * then re-acquired. A different `runnerId` keys a different lock file, so two
+ * distinct identities on one repo never contend (v1.02-A).
+ */
+export async function acquireSingletonLock(repoPath, pid = process.pid, runnerId = singletonRunnerId()) {
+    const canonical = canonicalRepoPath(repoPath);
+    const file = singletonLockPath(repoPath, runnerId);
+    await fsp.mkdir(path.dirname(file), { recursive: true });
+    const payload = `${JSON.stringify({
+        pid,
+        repoPath: canonical,
+        runnerId,
+        acquiredAt: new Date().toISOString(),
+        version: PACKAGE_VERSION,
+    }, null, 2)}\n`;
+    // Two attempts: the second only runs after we reclaim a stale lock, which
+    // closes the (tiny) window between the failed create and the unlink.
+    for (let attempt = 0; attempt < 2; attempt++) {
+        try {
+            // "wx" === O_CREAT | O_EXCL | O_WRONLY: atomic create-or-fail.
+            const fd = fs.openSync(file, "wx");
+            try {
+                fs.writeSync(fd, payload);
+            }
+            finally {
+                fs.closeSync(fd);
+            }
+            return makeLock(file, canonical, pid);
+        }
+        catch (err) {
+            if (err.code !== "EEXIST")
+                throw err;
+            const holder = await readLockInfo(file);
+            if (holder && holder.pid !== pid && isProcessAlive(holder.pid)) {
+                throw new SingletonLockHeldError(holder, file);
+            }
+            // Stale: dead holder, our own leftover pid, or unparseable. Reclaim.
+            process.stderr.write(`[acc-runner] reclaiming stale runner lock ${file} ` +
+                `(held by pid ${holder?.pid ?? "?"}, not alive)\n`);
+            try {
+                fs.unlinkSync(file);
+            }
+            catch (unlinkErr) {
+                if (unlinkErr.code !== "ENOENT")
+                    throw unlinkErr;
+            }
+        }
+    }
+    throw new Error(`could not acquire singleton lock at ${file}`);
+}
+/**
+ * Inspect the lock file for `repoPath` and return its holder iff a *live*
+ * process other than `selfPid` owns it. Used by `acc-runner doctor` to
+ * report a duplicate runner without trying to acquire the lock.
+ */
+export async function findLiveLockHolder(repoPath, selfPid = process.pid, runnerId = singletonRunnerId()) {
+    const holder = await readLockInfo(singletonLockPath(repoPath, runnerId));
+    if (holder && holder.pid !== selfPid && isProcessAlive(holder.pid)) {
+        return holder;
+    }
+    return null;
+}
+/**
+ * pgrep-style scan for other `acc-runner watch` processes. Best-effort and
+ * offline of the lock file — used by doctor to catch a runner that predates
+ * the singleton lock (no lock file) or one whose lock was hand-deleted.
+ * Returns foreign pids; never throws (returns [] on any failure).
+ */
+export async function listForeignRunnerPids(selfPid = process.pid) {
+    try {
+        const { execa } = await import("execa");
+        const { stdout } = await execa("ps", ["-axo", "pid=,args="]);
+        const pids = [];
+        for (const line of stdout.split(/\r?\n/)) {
+            const m = line.trim().match(/^(\d+)\s+(.*)$/);
+            if (!m)
+                continue;
+            const pid = Number.parseInt(m[1], 10);
+            const args = m[2];
+            if (pid === selfPid)
+                continue;
+            // Match the runner's watch command without matching this doctor run
+            // (which is `acc-runner doctor`) or a grep of the word.
+            if (/acc-runner\b.*\bwatch\b/.test(args) || /\bacc-runner-watch\b/.test(args)) {
+                pids.push(pid);
+            }
+        }
+        return pids;
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=singleton.js.map

package/dist/runtime/singleton.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"singleton.js","sourceRoot":"","sources":["../../src/runtime/singleton.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,GAAG,MAAM,kBAAkB,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAgBpD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,OAAO,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AASD,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAE7B;IACA;IAFlB,YACkB,MAAyB,EACzB,QAAgB;QAEhC,KAAK,CACH,2BAA2B,MAAM,CAAC,GAAG,6BAA6B,MAAM,CAAC,QAAQ,EAAE;YACjF,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpD,CAAC;QANc,WAAM,GAAN,MAAM,CAAmB;QACzB,aAAQ,GAAR,QAAQ,CAAQ;QAMhC,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,WAAmB,iBAAiB,EAAE;IAEtC,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,UAAU,IAAI,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA+B,CAAC;QAC7D,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW;YAC7E,mEAAmE;YACnE,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YACpE,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;YACnF,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;SAC3E,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,QAAgB,EAAE,GAAW;IAC3D,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,QAAQ;QACR,KAAK,CAAC,OAAO;YACX,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;gBACxC,8DAA8D;gBAC9D,+CAA+C;gBAC/C,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG;oBAAE,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC;YAClE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAgB,EAChB,MAAc,OAAO,CAAC,GAAG,EACzB,WAAmB,iBAAiB,EAAE;IAEtC,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAC/B;QACE,GAAG;QACH,QAAQ,EAAE,SAAS;QACnB,QAAQ;QACR,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,OAAO,EAAE,eAAe;KACG,EAC7B,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;IAEN,0EAA0E;IAC1E,qEAAqE;IACrE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,+DAA+D;YAC/D,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC5B,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACnB,CAAC;YACD,OAAO,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAChE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjD,CAAC;YACD,qEAAqE;YACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6CAA6C,IAAI,GAAG;gBAClD,gBAAgB,MAAM,EAAE,GAAG,IAAI,GAAG,gBAAgB,CACrD,CAAC;YACF,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,IAAK,SAAmC,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,SAAS,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,UAAkB,OAAO,CAAC,GAAG,EAC7B,WAAmB,iBAAiB,EAAE;IAEtC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzE,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAkB,OAAO,CAAC,GAAG;IAE7B,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClB,IAAI,GAAG,KAAK,OAAO;gBAAE,SAAS;YAC9B,oEAAoE;YACpE,wDAAwD;YACxD,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/runtime/version-drift.d.ts

@@ -0,0 +1,31 @@
+export declare const NPM_PACKAGE = "@tokenfactory/acc-runner";
+export interface TaskEnvRecord {
+    /** `claude --version` first line at the last successful task, or null. */
+    claudeVersion: string | null;
+    recordedAt: string;
+}
+export declare function taskEnvFile(): string;
+export interface NpmLatestDeps {
+    /** Fetch the latest published version string, or null on failure. */
+    fetchLatest?: () => Promise<string | null>;
+    /** Now, ms since epoch — injectable for cache-freshness tests. */
+    now?: number;
+}
+/**
+ * Latest published version, via a cached registry lookup. Returns the
+ * cached value while it is fresh; refetches once it goes stale. On a
+ * network failure with no usable cache, returns null so the caller skips
+ * the drift check silently (offline-safe).
+ */
+export declare function npmLatestVersion(deps?: NpmLatestDeps): Promise<string | null>;
+/**
+ * First line of `claude --version`, or null when the binary is missing or
+ * errors. Shared by the watch success-recorder and doctor's drift check so
+ * both compare the exact same string.
+ */
+export declare function getClaudeVersion(): Promise<string | null>;
+/** Persist the claude CLI version seen at a successful task. Best-effort. */
+export declare function recordTaskClaudeVersion(claudeVersion: string | null): Promise<void>;
+/** Read the last recorded task-env, or null when no task has succeeded yet. */
+export declare function readTaskEnv(): Promise<TaskEnvRecord | null>;
+//# sourceMappingURL=version-drift.d.ts.map

package/dist/runtime/version-drift.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-drift.d.ts","sourceRoot":"","sources":["../../src/runtime/version-drift.ts"],"names":[],"mappings":"AAwBA,eAAO,MAAM,WAAW,6BAA6B,CAAC;AAQtD,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAgBD,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3C,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAiBD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,aAAkB,GACvB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuBxB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAO/D;AAED,6EAA6E;AAC7E,wBAAsB,uBAAuB,CAC3C,aAAa,EAAE,MAAM,GAAG,IAAI,GAC3B,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,+EAA+E;AAC/E,wBAAsB,WAAW,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAEjE"}

package/dist/runtime/version-drift.js

@@ -0,0 +1,114 @@
+/**
+ * v0.14.0 (T-54-2, GA-6 runner-side): version-drift detection inputs.
+ *
+ * Two silent drifts double-failed the v0.53 batch's blast radius: this
+ * machine ran acc-runner 0.11.0 while 0.12.0 was on npm, and the claude
+ * CLI auto-updated mid-cycle without anyone noticing. `acc-runner doctor`
+ * now surfaces both as WARNs. This module owns the two data sources:
+ *
+ *   1. npmLatestVersion() — one *cached* registry lookup (default 6h TTL),
+ *      offline-safe (returns null on any network failure so doctor skips
+ *      the check silently rather than failing).
+ *   2. recordTaskClaudeVersion() / readTaskEnv() — the claude CLI version
+ *      observed at the last successful task, persisted in the cache so
+ *      doctor can flag "claude changed under you since the last green run".
+ *
+ * Both use additive cache files under the runner cache dir — no existing
+ * cache schema is touched.
+ */
+import fs from "node:fs/promises";
+import path from "node:path";
+import { execa } from "execa";
+import { buildEnv } from "../bin-resolve.js";
+import { cacheDir } from "./cache-dir.js";
+export const NPM_PACKAGE = "@tokenfactory/acc-runner";
+const REGISTRY_TTL_MS = 6 * 60 * 60 * 1000; // 6h — "one cached lookup", not per-run.
+function registryCacheFile() {
+    return path.join(cacheDir(), "npm-latest.json");
+}
+export function taskEnvFile() {
+    return path.join(cacheDir(), "last-task-env.json");
+}
+async function readJson(file) {
+    try {
+        return JSON.parse(await fs.readFile(file, "utf8"));
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return null;
+        return null; // corrupt cache is non-fatal — treat as a miss
+    }
+}
+async function writeJson(file, value) {
+    await fs.mkdir(path.dirname(file), { recursive: true });
+    await fs.writeFile(file, `${JSON.stringify(value, null, 2)}\n`, "utf8");
+}
+/** Default network fetch of the registry "latest" dist-tag. */
+async function fetchLatestFromRegistry() {
+    try {
+        const res = await fetch(`https://registry.npmjs.org/${NPM_PACKAGE}/latest`, { headers: { Accept: "application/json" } });
+        if (!res.ok)
+            return null;
+        const body = (await res.json());
+        return typeof body.version === "string" ? body.version : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Latest published version, via a cached registry lookup. Returns the
+ * cached value while it is fresh; refetches once it goes stale. On a
+ * network failure with no usable cache, returns null so the caller skips
+ * the drift check silently (offline-safe).
+ */
+export async function npmLatestVersion(deps = {}) {
+    const now = deps.now ?? Date.now();
+    const fetchLatest = deps.fetchLatest ?? fetchLatestFromRegistry;
+    const file = registryCacheFile();
+    const cached = await readJson(file);
+    if (cached?.latest) {
+        const age = now - Date.parse(cached.checkedAt);
+        if (Number.isFinite(age) && age >= 0 && age < REGISTRY_TTL_MS) {
+            return cached.latest;
+        }
+    }
+    const latest = await fetchLatest();
+    if (!latest) {
+        // Offline / registry down: fall back to a stale cache if we have one.
+        return cached?.latest ?? null;
+    }
+    await writeJson(file, {
+        latest,
+        checkedAt: new Date(now).toISOString(),
+    }).catch(() => {
+        /* cache write is best-effort */
+    });
+    return latest;
+}
+/**
+ * First line of `claude --version`, or null when the binary is missing or
+ * errors. Shared by the watch success-recorder and doctor's drift check so
+ * both compare the exact same string.
+ */
+export async function getClaudeVersion() {
+    try {
+        const { stdout } = await execa("claude", ["--version"], { env: buildEnv() });
+        return stdout.split(/\r?\n/)[0]?.trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Persist the claude CLI version seen at a successful task. Best-effort. */
+export async function recordTaskClaudeVersion(claudeVersion) {
+    await writeJson(taskEnvFile(), {
+        claudeVersion,
+        recordedAt: new Date().toISOString(),
+    });
+}
+/** Read the last recorded task-env, or null when no task has succeeded yet. */
+export async function readTaskEnv() {
+    return readJson(taskEnvFile());
+}
+//# sourceMappingURL=version-drift.js.map

package/dist/runtime/version-drift.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-drift.js","sourceRoot":"","sources":["../../src/runtime/version-drift.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,WAAW,GAAG,0BAA0B,CAAC;AACtD,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,yCAAyC;AAarF,SAAS,iBAAiB;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,oBAAoB,CAAC,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,QAAQ,CAAI,IAAY;IACrC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,OAAO,IAAI,CAAC,CAAC,+CAA+C;IAC9D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,KAAc;IACnD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC1E,CAAC;AASD,+DAA+D;AAC/D,KAAK,UAAU,uBAAuB;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,8BAA8B,WAAW,SAAS,EAClD,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAC5C,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;QACzD,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAsB,EAAE;IAExB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,uBAAuB,CAAC;IAChE,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACnD,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,eAAe,EAAE,CAAC;YAC9D,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,sEAAsE;QACtE,OAAO,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC;IAChC,CAAC;IACD,MAAM,SAAS,CAAC,IAAI,EAAE;QACpB,MAAM;QACN,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;KACf,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACpC,gCAAgC;IAClC,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,aAA4B;IAE5B,MAAM,SAAS,CAAC,WAAW,EAAE,EAAE;QAC7B,aAAa;QACb,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACb,CAAC,CAAC;AAC7B,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,OAAO,QAAQ,CAAgB,WAAW,EAAE,CAAC,CAAC;AAChD,CAAC"}