@tokenfactory/acc-runner 0.40.12 → 0.40.14

package/dist/capacity/account-window.d.ts

@@ -0,0 +1,64 @@
+/**
+ * AS-3 (RESUME): runner-side per-account capacity WINDOW MEMORY.
+ *
+ * A durable, account-keyed memory of "is this login's subscription window
+ * capped, and until when?" keyed on the engine's `synthetic_account`. It is the
+ * piece that lets the resume policy RE-PAUSE a returning capped account FROM
+ * MEMORY without burning a request (operator scenario: swap back to a
+ * still-capped `ajay` → re-pause immediately rather than claim a task just to
+ * watch it 429 again).
+ *
+ * Two states only — `open | capped` — mirroring the server account-window fold
+ * (api/_lib/account-capacity/account-window.ts). The shape is DUPLICATED on
+ * purpose: the runner is a standalone published package and MUST NOT import from
+ * api/_lib (the cost-pricing.ts / capacity-plugin.ts precedent). Kept in sync by
+ * hand. // keep in sync
+ *
+ * The fold applies the CC-3A hysteresis rule verbatim: a capped window reopens
+ * ONLY on a tick whose clock has passed a KNOWN reset instant — never on a
+ * null-reset guess (an indefinite cap stays capped until a probe/account-change
+ * says otherwise), so a window can't flap open on a missing reset time.
+ */
+/** Whether an account's subscription window is serving or capped. */
+export type AccountWindowState = "open" | "capped";
+/** One account's remembered capacity window. */
+export interface AccountWindow {
+    state: AccountWindowState;
+    /**
+     * Absolute reset instant (epoch ms) for a capped window with a KNOWN reset;
+     * `null` means capped indefinitely (no parseable reset) — treated as the
+     * longest possible wait, so extend-only never shortens it and a tick never
+     * reopens it on a guess.
+     */
+    resetAtMs: number | null;
+    /** Epoch ms this window was last folded (audit / staleness). */
+    updatedAtMs: number;
+}
+/** An event folded into a window. */
+export type AccountWindowEvent = 
+/** The account hit a subscription/usage cap; `resetAtMs` is its stated reset (null = indefinite). */
+{
+    kind: "cap_hit";
+    resetAtMs: number | null;
+    atMs: number;
+}
+/** A clock tick — reopens a capped window iff its known reset has elapsed. */
+ | {
+    kind: "tick";
+    atMs: number;
+};
+/**
+ * Fold an event into a window. Pure. Returns a fresh window (never mutates).
+ *   - cap_hit: caps the window; extend-only on the reset instant.
+ *   - tick: reopens a capped window ONLY when a known reset has elapsed.
+ */
+export declare function foldAccountWindow(prev: AccountWindow | null, event: AccountWindowEvent): AccountWindow;
+/**
+ * True when a window is capped AND that cap has NOT yet elapsed — the condition
+ * for re-pausing a returning account from memory. An indefinite cap (null reset)
+ * is always still-capped; a finite cap is still-capped until `nowMs` reaches it.
+ * A missing window (never seen) is NOT still-capped (honest unknown → let the
+ * probe decide).
+ */
+export declare function isStillCapped(window: AccountWindow | null, nowMs: number): boolean;
+//# sourceMappingURL=account-window.d.ts.map

package/dist/capacity/account-window.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-window.d.ts","sourceRoot":"","sources":["../../src/capacity/account-window.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,qEAAqE;AACrE,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEnD,gDAAgD;AAChD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,kBAAkB,CAAC;IAC1B;;;;;OAKG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qCAAqC;AACrC,MAAM,MAAM,kBAAkB;AAC5B,qGAAqG;AACnG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC7D,8EAA8E;GAC5E;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAYnC;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,aAAa,GAAG,IAAI,EAC1B,KAAK,EAAE,kBAAkB,GACxB,aAAa,CAiBf;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAGlF"}

package/dist/capacity/account-window.js

@@ -0,0 +1,66 @@
+/**
+ * AS-3 (RESUME): runner-side per-account capacity WINDOW MEMORY.
+ *
+ * A durable, account-keyed memory of "is this login's subscription window
+ * capped, and until when?" keyed on the engine's `synthetic_account`. It is the
+ * piece that lets the resume policy RE-PAUSE a returning capped account FROM
+ * MEMORY without burning a request (operator scenario: swap back to a
+ * still-capped `ajay` → re-pause immediately rather than claim a task just to
+ * watch it 429 again).
+ *
+ * Two states only — `open | capped` — mirroring the server account-window fold
+ * (api/_lib/account-capacity/account-window.ts). The shape is DUPLICATED on
+ * purpose: the runner is a standalone published package and MUST NOT import from
+ * api/_lib (the cost-pricing.ts / capacity-plugin.ts precedent). Kept in sync by
+ * hand. // keep in sync
+ *
+ * The fold applies the CC-3A hysteresis rule verbatim: a capped window reopens
+ * ONLY on a tick whose clock has passed a KNOWN reset instant — never on a
+ * null-reset guess (an indefinite cap stays capped until a probe/account-change
+ * says otherwise), so a window can't flap open on a missing reset time.
+ */
+/**
+ * Extend-only reset merge: a straggler cap can only push a window's reset LATER,
+ * never earlier (mirrors watch.ts enterCapacityPause's extend-only rule). `null`
+ * (indefinite) is the longest wait, so it dominates any finite reset.
+ */
+function mergeResetLater(prev, next) {
+    if (prev === null || next === null)
+        return null;
+    return Math.max(prev, next);
+}
+/**
+ * Fold an event into a window. Pure. Returns a fresh window (never mutates).
+ *   - cap_hit: caps the window; extend-only on the reset instant.
+ *   - tick: reopens a capped window ONLY when a known reset has elapsed.
+ */
+export function foldAccountWindow(prev, event) {
+    if (event.kind === "cap_hit") {
+        const resetAtMs = prev && prev.state === "capped"
+            ? mergeResetLater(prev.resetAtMs, event.resetAtMs)
+            : event.resetAtMs;
+        return { state: "capped", resetAtMs, updatedAtMs: event.atMs };
+    }
+    // tick
+    if (!prev || prev.state !== "capped") {
+        return prev ?? { state: "open", resetAtMs: null, updatedAtMs: event.atMs };
+    }
+    // Reopen only on a KNOWN, elapsed reset — never on a null-reset guess.
+    if (prev.resetAtMs !== null && event.atMs >= prev.resetAtMs) {
+        return { state: "open", resetAtMs: null, updatedAtMs: event.atMs };
+    }
+    return { ...prev, updatedAtMs: event.atMs };
+}
+/**
+ * True when a window is capped AND that cap has NOT yet elapsed — the condition
+ * for re-pausing a returning account from memory. An indefinite cap (null reset)
+ * is always still-capped; a finite cap is still-capped until `nowMs` reaches it.
+ * A missing window (never seen) is NOT still-capped (honest unknown → let the
+ * probe decide).
+ */
+export function isStillCapped(window, nowMs) {
+    if (!window || window.state !== "capped")
+        return false;
+    return window.resetAtMs === null || nowMs < window.resetAtMs;
+}
+//# sourceMappingURL=account-window.js.map

package/dist/capacity/account-window.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-window.js","sourceRoot":"","sources":["../../src/capacity/account-window.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AA0BH;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAmB,EAAE,IAAmB;IAC/D,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAA0B,EAC1B,KAAyB;IAEzB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,SAAS,GACb,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAC7B,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC;YAClD,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACjE,CAAC;IACD,OAAO;IACP,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,IAAI,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7E,CAAC;IACD,uEAAuE;IACvE,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,MAA4B,EAAE,KAAa;IACvE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvD,OAAO,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC;AAC/D,CAAC"}

package/dist/capacity/fleet-pause-verbs.d.ts

@@ -0,0 +1,38 @@
+/**
+ * AS-3 (RESUME): the activity-event verbs that drive the server-side FLEET
+ * PAUSE picture.
+ *
+ * "fleet_pause" is NOT a table — the server DERIVES the live paused-fleet set
+ * from `activity_events` (api/_lib/fleet-pause.ts): a runner counts as paused
+ * while its LATEST capacity event is a `runner.capacity_paused` whose
+ * `resume_at` is absent or still future, and it CLEARS the moment a
+ * `runner.capacity_resume` lands. So the resume path "clears the server-side
+ * fleet_pause row" by emitting `runner.capacity_resume` for this runner.
+ *
+ * These strings are DUPLICATED from api/_lib/fleet-pause.ts on purpose (the
+ * runner is a standalone published package and must not import from api/_lib —
+ * the capacity-plugin.ts precedent). Kept in sync by hand. // keep in sync
+ *
+ * NOTE (drift the wiring must fix): watch.ts today emits `runner.paused_capacity`
+ * / `runner.resume_capacity`, which the loader does NOT read — so the current
+ * fixed-timer pause is invisible to fleet_pause. The AS-3 controller emits these
+ * canonical verbs through its `setServerPause` / `clearServerPause` seams so the
+ * server sees the pause AND its clear.
+ */
+/** Verb a runner emits when it enters a capacity pause. Payload: `{ runner_id, resume_at?: ISO|null, reason?: string }`. */
+export declare const RUNNER_CAPACITY_PAUSED_VERB = "runner.capacity_paused";
+/** Verb a runner emits to clear its server-side fleet pause. Payload: `{ runner_id }`. */
+export declare const RUNNER_CAPACITY_RESUME_VERB = "runner.capacity_resume";
+/** Shape of the `runner.capacity_paused` payload the wiring should emit. */
+export interface FleetPausePayload {
+    runner_id: string;
+    /** ISO reset instant, or null for an indefinite pause. */
+    resume_at: string | null;
+    /** Non-secret cause. */
+    reason?: string;
+}
+/** Shape of the `runner.capacity_resume` payload the wiring should emit. */
+export interface FleetResumePayload {
+    runner_id: string;
+}
+//# sourceMappingURL=fleet-pause-verbs.d.ts.map

package/dist/capacity/fleet-pause-verbs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-pause-verbs.d.ts","sourceRoot":"","sources":["../../src/capacity/fleet-pause-verbs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,4HAA4H;AAC5H,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAEpE,0FAA0F;AAC1F,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAEpE,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,wBAAwB;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/capacity/fleet-pause-verbs.js

@@ -0,0 +1,26 @@
+/**
+ * AS-3 (RESUME): the activity-event verbs that drive the server-side FLEET
+ * PAUSE picture.
+ *
+ * "fleet_pause" is NOT a table — the server DERIVES the live paused-fleet set
+ * from `activity_events` (api/_lib/fleet-pause.ts): a runner counts as paused
+ * while its LATEST capacity event is a `runner.capacity_paused` whose
+ * `resume_at` is absent or still future, and it CLEARS the moment a
+ * `runner.capacity_resume` lands. So the resume path "clears the server-side
+ * fleet_pause row" by emitting `runner.capacity_resume` for this runner.
+ *
+ * These strings are DUPLICATED from api/_lib/fleet-pause.ts on purpose (the
+ * runner is a standalone published package and must not import from api/_lib —
+ * the capacity-plugin.ts precedent). Kept in sync by hand. // keep in sync
+ *
+ * NOTE (drift the wiring must fix): watch.ts today emits `runner.paused_capacity`
+ * / `runner.resume_capacity`, which the loader does NOT read — so the current
+ * fixed-timer pause is invisible to fleet_pause. The AS-3 controller emits these
+ * canonical verbs through its `setServerPause` / `clearServerPause` seams so the
+ * server sees the pause AND its clear.
+ */
+/** Verb a runner emits when it enters a capacity pause. Payload: `{ runner_id, resume_at?: ISO|null, reason?: string }`. */
+export const RUNNER_CAPACITY_PAUSED_VERB = "runner.capacity_paused";
+/** Verb a runner emits to clear its server-side fleet pause. Payload: `{ runner_id }`. */
+export const RUNNER_CAPACITY_RESUME_VERB = "runner.capacity_resume";
+//# sourceMappingURL=fleet-pause-verbs.js.map

package/dist/capacity/fleet-pause-verbs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-pause-verbs.js","sourceRoot":"","sources":["../../src/capacity/fleet-pause-verbs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,4HAA4H;AAC5H,MAAM,CAAC,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AAEpE,0FAA0F;AAC1F,MAAM,CAAC,MAAM,2BAA2B,GAAG,wBAAwB,CAAC"}

package/dist/capacity/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * AS-3 (RESUME): the runner capacity RESUME surface.
+ *
+ * Public entry point for the pause-until-(reset OR account-change OR ping-ok)
+ * engine: the stateful `ResumeController`, the pure `evaluateResume` decision
+ * core, the per-account window memory, and the fleet-pause verbs the wiring
+ * emits to set/clear the server-side pause. Wiring these onto watch.ts's pause
+ * path and the companion turn loop is a follow-up (those files are outside this
+ * track's scope); this barrel is what that follow-up imports.
+ */
+export { ResumeController, type ResumeControllerDeps, type ResumeTransition, } from "./resume-controller.js";
+export { evaluateResume, type CapacityMode, type ResumeDecision, type ResumeEvalInput, type ResumeReason, } from "./resume-policy.js";
+export { foldAccountWindow, isStillCapped, type AccountWindow, type AccountWindowEvent, type AccountWindowState, } from "./account-window.js";
+export { RUNNER_CAPACITY_PAUSED_VERB, RUNNER_CAPACITY_RESUME_VERB, type FleetPausePayload, type FleetResumePayload, } from "./fleet-pause-verbs.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/capacity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/capacity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,cAAc,EACd,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,GACxB,MAAM,wBAAwB,CAAC"}

package/dist/capacity/index.js

@@ -0,0 +1,15 @@
+/**
+ * AS-3 (RESUME): the runner capacity RESUME surface.
+ *
+ * Public entry point for the pause-until-(reset OR account-change OR ping-ok)
+ * engine: the stateful `ResumeController`, the pure `evaluateResume` decision
+ * core, the per-account window memory, and the fleet-pause verbs the wiring
+ * emits to set/clear the server-side pause. Wiring these onto watch.ts's pause
+ * path and the companion turn loop is a follow-up (those files are outside this
+ * track's scope); this barrel is what that follow-up imports.
+ */
+export { ResumeController, } from "./resume-controller.js";
+export { evaluateResume, } from "./resume-policy.js";
+export { foldAccountWindow, isStillCapped, } from "./account-window.js";
+export { RUNNER_CAPACITY_PAUSED_VERB, RUNNER_CAPACITY_RESUME_VERB, } from "./fleet-pause-verbs.js";
+//# sourceMappingURL=index.js.map

package/dist/capacity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/capacity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,gBAAgB,GAGjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,cAAc,GAKf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,aAAa,GAId,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAG5B,MAAM,wBAAwB,CAAC"}

package/dist/capacity/resume-controller.d.ts

@@ -0,0 +1,150 @@
+/**
+ * AS-3 (RESUME): the capacity RESUME CONTROLLER.
+ *
+ * The stateful governor that replaces watch.ts's fixed pause-until-reset
+ * `setTimeout` with pause-until-(reset OR account-change OR ping-ok), and adds
+ * the symmetric re-pause-from-memory for a returning still-capped account.
+ * It owns the per-account window memory + the pure resume policy
+ * (resume-policy.ts) and drives them off:
+ *
+ *   - `reportCapacity()` — a task/review hit a subscription cap (watch.ts's
+ *     `enterCapacityPause` trigger). Folds a cap onto the account and, if it is
+ *     the current account, ENTERS the pause.
+ *   - `observeAccount()` — the account probe (AS-1 `AccountProbeScheduler` →
+ *     AS-2 broadcaster) saw the logged-in account. The fast path for a login
+ *     swap: fires an immediate re-evaluation so a swap converges within one
+ *     probe cycle rather than waiting on the stale account's reset.
+ *   - an internal POLL (armed only while paused, at `pollIntervalMs`) that
+ *     re-checks the reset instant + fires the cheap probe ping.
+ *
+ * On RESUME it does the three things the plan pins to the SAME TICK: clears the
+ * server-side fleet pause (`clearServerPause`), restarts task+review claim
+ * scans (`restartClaims`), and kicks the companion turn loop (`kickCompanion`)
+ * so queued chat turns drain — then leaves the pause. In-flight sessions are
+ * never touched: the controller only gates CLAIMING, it has no abort seam.
+ *
+ * FULLY injectable (clock / timer / probe / every side-effect seam) and every
+ * action is serialized onto one tail promise so overlapping triggers can't race
+ * — so the whole lifecycle is exercised with a fake clock, no wall-clock sleep,
+ * no real binary, no network.
+ */
+import type { ProbeTimer } from "../engines/account-probe.js";
+import { type AccountWindow } from "./account-window.js";
+import { type CapacityMode, type ResumeReason } from "./resume-policy.js";
+/** A pause/resume transition, handed to the audit sink. */
+export interface ResumeTransition {
+    from: CapacityMode;
+    to: CapacityMode;
+    /** Why the transition fired. */
+    reason: ResumeReason | "cap-hit" | "returning-capped-account";
+    /** The account the runner is anchored to after the transition. */
+    account: string | null;
+    /** Which driver produced it. */
+    trigger: "cap-report" | "observe-account" | "poll";
+    at: number;
+}
+export interface ResumeControllerDeps {
+    /** Clock (test seam). Default `Date.now`. */
+    now?: () => number;
+    /** Timer seam (test seam). Default `setTimeout`/`clearTimeout`. */
+    timer?: ProbeTimer;
+    /** While-paused re-check cadence (ms). Default 60s. */
+    pollIntervalMs?: number;
+    /** Min gap between account-change adoptions (flap protection). Default 60s. */
+    adoptionDebounceMs?: number;
+    /**
+     * Cheap serve-check for the observed account while paused:
+     *   true = can serve now, false = still capped, null = can't tell.
+     * Omit to disable ping-based resume (reset + account-change still apply).
+     */
+    probePing?: () => Promise<boolean | null>;
+    /** Clear the server-side fleet pause (emit `runner.capacity_resume`). */
+    clearServerPause: () => void | Promise<void>;
+    /** Set the server-side fleet pause (emit `runner.capacity_paused`). Optional. */
+    setServerPause?: (ctx: {
+        account: string;
+        resetAtMs: number | null;
+    }) => void | Promise<void>;
+    /** Restart task + review claim scans (watch.ts: pollOnce + pump + pumpReviews). */
+    restartClaims: () => void | Promise<void>;
+    /** Stop claiming tasks + reviews (watch.ts: pausedCapacity = true). Optional. */
+    stopClaims?: () => void | Promise<void>;
+    /** Kick the companion turn loop so queued chat turns drain. Optional. */
+    kickCompanion?: () => void | Promise<void>;
+    /** Freeze the companion turn loop on (re-)pause. Optional. */
+    freezeCompanion?: () => void | Promise<void>;
+    /** Best-effort audit/log sink. */
+    onLog?: (line: string) => void;
+    /** Transition audit hook. */
+    onTransition?: (t: ResumeTransition) => void;
+}
+/**
+ * Drives the pause-until-(reset OR account-change OR ping-ok) lifecycle. Start
+ * it once the runner knows its account (`start`), feed it cap reports and
+ * account observations, and it clears/sets the server pause and restarts claims
+ * through the injected seams at the right moment.
+ */
+export declare class ResumeController {
+    private readonly deps;
+    private readonly now;
+    private readonly timer;
+    private readonly pollIntervalMs;
+    private readonly adoptionDebounceMs;
+    private started;
+    private stopped;
+    private mode;
+    /** The account the current state is anchored to (capped account while paused). */
+    private anchorAccountKey;
+    /** The account the probe last observed. */
+    private observedAccountKey;
+    /** Per-account remembered capacity windows. */
+    private readonly windows;
+    /** Epoch ms of the last account-change adoption (null = none yet). */
+    private lastAdoptionAtMs;
+    private pollHandle;
+    /** Serial action chain so overlapping triggers never race. */
+    private tail;
+    constructor(deps: ResumeControllerDeps);
+    /** Current mode. */
+    currentMode(): CapacityMode;
+    /** The remembered window for an account (test/inspection seam). */
+    windowFor(accountKey: string): AccountWindow | null;
+    /** Note the runner's starting account. Idempotent. */
+    start(accountKey: string | null): void;
+    /**
+     * A task/review reported a subscription cap on `accountKey`. Folds the cap
+     * into that account's window and, when it is the current account and we are
+     * still claiming, enters the pause. Extend-only: a straggler cap on the
+     * already-paused account only pushes its reset later.
+     */
+    reportCapacity(input: {
+        accountKey: string;
+        resetAtMs: number | null;
+        detail?: string;
+    }): void;
+    /**
+     * The account probe observed the logged-in account. The fast path for a login
+     * swap — fires an immediate re-evaluation so a swap converges within one probe
+     * cycle. A same-account observation is a cheap no-op re-check.
+     */
+    observeAccount(accountKey: string | null): void;
+    /** Cancel the poll timer; in-flight actions still settle. */
+    stop(): void;
+    /** Resolve once every queued action has settled (test seam). */
+    settle(): Promise<void>;
+    private enqueue;
+    private armPoll;
+    private disarmPoll;
+    private onPollFire;
+    /** Evaluate the resume policy and act on it. */
+    private evaluate;
+    /** Enter (or re-enter) the capacity pause on `account`. */
+    private enterPause;
+    /**
+     * Leave the pause: clear the server fleet pause, restart claim scans, and kick
+     * the companion turn loop — all in this one tick (queued chat turns then drain
+     * on their own). In-flight sessions are never touched.
+     */
+    private doResume;
+}
+//# sourceMappingURL=resume-controller.d.ts.map

package/dist/capacity/resume-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-controller.d.ts","sourceRoot":"","sources":["../../src/capacity/resume-controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AAU5B,2DAA2D;AAC3D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,YAAY,CAAC;IACjB,gCAAgC;IAChC,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,0BAA0B,CAAC;IAC9D,kEAAkE;IAClE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,gCAAgC;IAChC,OAAO,EAAE,YAAY,GAAG,iBAAiB,GAAG,MAAM,CAAC;IACnD,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,oBAAoB;IACnC,6CAA6C;IAC7C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,mEAAmE;IACnE,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC1C,yEAAyE;IACzE,gBAAgB,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,iFAAiF;IACjF,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9F,mFAAmF;IACnF,aAAa,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,8DAA8D;IAC9D,eAAe,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,kCAAkC;IAClC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,6BAA6B;IAC7B,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,gBAAgB,KAAK,IAAI,CAAC;CAC9C;AAED;;;;;GAKG;AACH,qBAAa,gBAAgB;IAqBf,OAAO,CAAC,QAAQ,CAAC,IAAI;IApBjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAE5C,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,IAAI,CAA0B;IACtC,kFAAkF;IAClF,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,2CAA2C;IAC3C,OAAO,CAAC,kBAAkB,CAAuB;IACjD,+CAA+C;IAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,sEAAsE;IACtE,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,UAAU,CAAiB;IACnC,8DAA8D;IAC9D,OAAO,CAAC,IAAI,CAAoC;gBAEnB,IAAI,EAAE,oBAAoB;IAOvD,oBAAoB;IACpB,WAAW,IAAI,YAAY;IAI3B,mEAAmE;IACnE,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;IAInD,sDAAsD;IACtD,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAOtC;;;;;OAKG;IACH,cAAc,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAqB9F;;;;OAIG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAM/C,6DAA6D;IAC7D,IAAI,IAAI,IAAI;IAKZ,gEAAgE;IAC1D,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,UAAU;IAQlB,gDAAgD;YAClC,QAAQ;IAqDtB,2DAA2D;YAC7C,UAAU;IAsCxB;;;;OAIG;YACW,QAAQ;CAwBvB"}

package/dist/capacity/resume-controller.js

@@ -0,0 +1,229 @@
+import { foldAccountWindow } from "./account-window.js";
+import { evaluateResume, } from "./resume-policy.js";
+const DEFAULT_POLL_INTERVAL_MS = 60_000; // one probe cycle
+const DEFAULT_ADOPTION_DEBOUNCE_MS = 60_000; // CC-3A cooldownMinDwellMs
+const DEFAULT_TIMER = {
+    setTimer: (fn, ms) => setTimeout(fn, ms),
+    clearTimer: (h) => clearTimeout(h),
+};
+/**
+ * Drives the pause-until-(reset OR account-change OR ping-ok) lifecycle. Start
+ * it once the runner knows its account (`start`), feed it cap reports and
+ * account observations, and it clears/sets the server pause and restarts claims
+ * through the injected seams at the right moment.
+ */
+export class ResumeController {
+    deps;
+    now;
+    timer;
+    pollIntervalMs;
+    adoptionDebounceMs;
+    started = false;
+    stopped = false;
+    mode = "active";
+    /** The account the current state is anchored to (capped account while paused). */
+    anchorAccountKey = null;
+    /** The account the probe last observed. */
+    observedAccountKey = null;
+    /** Per-account remembered capacity windows. */
+    windows = new Map();
+    /** Epoch ms of the last account-change adoption (null = none yet). */
+    lastAdoptionAtMs = null;
+    pollHandle = null;
+    /** Serial action chain so overlapping triggers never race. */
+    tail = Promise.resolve();
+    constructor(deps) {
+        this.deps = deps;
+        this.now = deps.now ?? Date.now;
+        this.timer = deps.timer ?? DEFAULT_TIMER;
+        this.pollIntervalMs = Math.max(1, deps.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS);
+        this.adoptionDebounceMs = Math.max(0, deps.adoptionDebounceMs ?? DEFAULT_ADOPTION_DEBOUNCE_MS);
+    }
+    /** Current mode. */
+    currentMode() {
+        return this.mode;
+    }
+    /** The remembered window for an account (test/inspection seam). */
+    windowFor(accountKey) {
+        return this.windows.get(accountKey) ?? null;
+    }
+    /** Note the runner's starting account. Idempotent. */
+    start(accountKey) {
+        if (this.started || this.stopped)
+            return;
+        this.started = true;
+        this.anchorAccountKey = accountKey;
+        this.observedAccountKey = accountKey;
+    }
+    /**
+     * A task/review reported a subscription cap on `accountKey`. Folds the cap
+     * into that account's window and, when it is the current account and we are
+     * still claiming, enters the pause. Extend-only: a straggler cap on the
+     * already-paused account only pushes its reset later.
+     */
+    reportCapacity(input) {
+        if (this.stopped)
+            return;
+        if (!this.started)
+            this.start(input.accountKey);
+        const at = this.now();
+        this.windows.set(input.accountKey, foldAccountWindow(this.windows.get(input.accountKey) ?? null, {
+            kind: "cap_hit",
+            resetAtMs: input.resetAtMs,
+            atMs: at,
+        }));
+        // Only the CURRENT account's cap pauses the runner.
+        if (input.accountKey !== (this.observedAccountKey ?? this.anchorAccountKey))
+            return;
+        if (this.mode === "paused") {
+            // Already paused: the window was extended above; nothing else to do.
+            return;
+        }
+        this.enqueue(() => this.enterPause(input.accountKey, input.resetAtMs, "cap-hit", "cap-report"));
+    }
+    /**
+     * The account probe observed the logged-in account. The fast path for a login
+     * swap — fires an immediate re-evaluation so a swap converges within one probe
+     * cycle. A same-account observation is a cheap no-op re-check.
+     */
+    observeAccount(accountKey) {
+        if (this.stopped || !this.started)
+            return;
+        this.observedAccountKey = accountKey;
+        this.enqueue(() => this.evaluate("observe-account"));
+    }
+    /** Cancel the poll timer; in-flight actions still settle. */
+    stop() {
+        this.stopped = true;
+        this.disarmPoll();
+    }
+    /** Resolve once every queued action has settled (test seam). */
+    async settle() {
+        await this.tail;
+    }
+    enqueue(fn) {
+        this.tail = this.tail.then(fn).catch((err) => {
+            this.deps.onLog?.(`[acc-runner] resume-controller action failed: ${err?.message ?? String(err)}`);
+        });
+    }
+    armPoll() {
+        this.disarmPoll();
+        if (this.stopped)
+            return;
+        this.pollHandle = this.timer.setTimer(() => this.onPollFire(), this.pollIntervalMs);
+    }
+    disarmPoll() {
+        if (this.pollHandle !== null) {
+            this.timer.clearTimer(this.pollHandle);
+            this.pollHandle = null;
+        }
+    }
+    onPollFire() {
+        if (this.stopped || this.mode !== "paused")
+            return;
+        // Re-arm BEFORE the async evaluation so the cadence is decoupled from probe
+        // latency and stays deterministic under a fake clock.
+        this.armPoll();
+        this.enqueue(() => this.evaluate("poll"));
+    }
+    /** Evaluate the resume policy and act on it. */
+    async evaluate(trigger) {
+        if (this.stopped)
+            return;
+        let pingOk = null;
+        if (this.mode === "paused" && this.deps.probePing) {
+            // Only ping when the same account is still observed — a swap resolves via
+            // the account-change branch and needs no request.
+            const swapped = this.observedAccountKey !== null && this.observedAccountKey !== this.anchorAccountKey;
+            if (!swapped) {
+                try {
+                    pingOk = await this.deps.probePing();
+                }
+                catch (err) {
+                    this.deps.onLog?.(`[acc-runner] resume probe ping failed: ${err?.message ?? String(err)}`);
+                }
+            }
+            if (this.stopped)
+                return;
+        }
+        const decision = evaluateResume({
+            mode: this.mode,
+            nowMs: this.now(),
+            observedAccountKey: this.observedAccountKey,
+            anchorAccountKey: this.anchorAccountKey,
+            windows: this.windows,
+            pingOk,
+            lastAdoptionAtMs: this.lastAdoptionAtMs,
+            adoptionDebounceMs: this.adoptionDebounceMs,
+        });
+        switch (decision.action) {
+            case "stay":
+                return;
+            case "defer":
+                this.deps.onLog?.(`[acc-runner] account change to ${decision.account} deferred (adoption debounce)`);
+                return;
+            case "resume":
+                await this.doResume(decision.reason, decision.account, trigger);
+                return;
+            case "pause":
+                await this.enterPause(decision.account, decision.resetAtMs, "returning-capped-account", trigger);
+                return;
+        }
+    }
+    /** Enter (or re-enter) the capacity pause on `account`. */
+    async enterPause(account, resetAtMs, reason, trigger) {
+        if (this.stopped)
+            return;
+        const from = this.mode;
+        const at = this.now();
+        // Ensure the account's window reflects this cap.
+        this.windows.set(account, foldAccountWindow(this.windows.get(account) ?? null, {
+            kind: "cap_hit",
+            resetAtMs,
+            atMs: at,
+        }));
+        this.mode = "paused";
+        this.anchorAccountKey = account;
+        // An account-change re-pause counts as an adoption (flap protection); a
+        // plain cap-hit does not, so the first swap after it is never debounced.
+        if (reason === "returning-capped-account")
+            this.lastAdoptionAtMs = at;
+        this.armPoll();
+        if (this.deps.setServerPause) {
+            await this.deps.setServerPause({ account, resetAtMs });
+        }
+        if (this.deps.stopClaims)
+            await this.deps.stopClaims();
+        if (this.deps.freezeCompanion)
+            await this.deps.freezeCompanion();
+        this.deps.onTransition?.({ from, to: "paused", reason, account, trigger, at });
+        this.deps.onLog?.(`[acc-runner] capacity PAUSE (${reason}) on ${account}` +
+            (resetAtMs !== null ? ` until ${new Date(resetAtMs).toISOString()}` : " (indefinite)"));
+    }
+    /**
+     * Leave the pause: clear the server fleet pause, restart claim scans, and kick
+     * the companion turn loop — all in this one tick (queued chat turns then drain
+     * on their own). In-flight sessions are never touched.
+     */
+    async doResume(reason, account, trigger) {
+        if (this.stopped)
+            return;
+        const from = this.mode;
+        const at = this.now();
+        this.mode = "active";
+        this.anchorAccountKey = account;
+        this.lastAdoptionAtMs = at;
+        // We are now serving on this account, so its window is open in memory — a
+        // later swap back to it resumes (not re-pauses) until it caps again.
+        this.windows.set(account, { state: "open", resetAtMs: null, updatedAtMs: at });
+        this.disarmPoll();
+        // Same tick: clear server pause → restart task+review claims → drain companion.
+        await this.deps.clearServerPause();
+        await this.deps.restartClaims();
+        if (this.deps.kickCompanion)
+            await this.deps.kickCompanion();
+        this.deps.onTransition?.({ from, to: "active", reason, account, trigger, at });
+        this.deps.onLog?.(`[acc-runner] capacity RESUME (${reason}) on ${account}`);
+    }
+}
+//# sourceMappingURL=resume-controller.js.map

package/dist/capacity/resume-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-controller.js","sourceRoot":"","sources":["../../src/capacity/resume-controller.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,iBAAiB,EAAsB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EACL,cAAc,GAGf,MAAM,oBAAoB,CAAC;AAE5B,MAAM,wBAAwB,GAAG,MAAM,CAAC,CAAC,kBAAkB;AAC3D,MAAM,4BAA4B,GAAG,MAAM,CAAC,CAAC,2BAA2B;AAExE,MAAM,aAAa,GAAe;IAChC,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC;IACxC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAkC,CAAC;CACpE,CAAC;AAgDF;;;;;GAKG;AACH,MAAM,OAAO,gBAAgB;IAqBE;IApBZ,GAAG,CAAe;IAClB,KAAK,CAAa;IAClB,cAAc,CAAS;IACvB,kBAAkB,CAAS;IAEpC,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,KAAK,CAAC;IAChB,IAAI,GAAiB,QAAQ,CAAC;IACtC,kFAAkF;IAC1E,gBAAgB,GAAkB,IAAI,CAAC;IAC/C,2CAA2C;IACnC,kBAAkB,GAAkB,IAAI,CAAC;IACjD,+CAA+C;IAC9B,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC5D,sEAAsE;IAC9D,gBAAgB,GAAkB,IAAI,CAAC;IACvC,UAAU,GAAY,IAAI,CAAC;IACnC,8DAA8D;IACtD,IAAI,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEhD,YAA6B,IAA0B;QAA1B,SAAI,GAAJ,IAAI,CAAsB;QACrD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,aAAa,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC,CAAC;QACnF,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,kBAAkB,IAAI,4BAA4B,CAAC,CAAC;IACjG,CAAC;IAED,oBAAoB;IACpB,WAAW;QACT,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,mEAAmE;IACnE,SAAS,CAAC,UAAkB;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,UAAyB;QAC7B,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC;QACnC,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,KAAwE;QACrF,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,GAAG,CACd,KAAK,CAAC,UAAU,EAChB,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE;YAC5D,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,EAAE;SACT,CAAC,CACH,CAAC;QACF,oDAAoD;QACpD,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,gBAAgB,CAAC;YAAE,OAAO;QACpF,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,qEAAqE;YACrE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;IAClG,CAAC;IAED;;;;OAIG;IACH,cAAc,CAAC,UAAyB;QACtC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,6DAA6D;IAC7D,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,CAAC,IAAI,CAAC;IAClB,CAAC;IAEO,OAAO,CAAC,EAAuB;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CACf,iDAAkD,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAC1F,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACtF,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QACnD,4EAA4E;QAC5E,sDAAsD;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,gDAAgD;IACxC,KAAK,CAAC,QAAQ,CAAC,OAAoC;QACzD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAEzB,IAAI,MAAM,GAAmB,IAAI,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClD,0EAA0E;YAC1E,kDAAkD;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,KAAK,IAAI,IAAI,IAAI,CAAC,kBAAkB,KAAK,IAAI,CAAC,gBAAgB,CAAC;YACtG,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACvC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CACf,0CAA2C,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CACnF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC;YAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;YACjB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM;YACN,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CAAC,CAAC;QAEH,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YACxB,KAAK,MAAM;gBACT,OAAO;YACT,KAAK,OAAO;gBACV,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CACf,kCAAkC,QAAQ,CAAC,OAAO,+BAA+B,CAClF,CAAC;gBACF,OAAO;YACT,KAAK,QAAQ;gBACX,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChE,OAAO;YACT,KAAK,OAAO;gBACV,MAAM,IAAI,CAAC,UAAU,CACnB,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,SAAS,EAClB,0BAA0B,EAC1B,OAAO,CACR,CAAC;gBACF,OAAO;QACX,CAAC;IACH,CAAC;IAED,2DAA2D;IACnD,KAAK,CAAC,UAAU,CACtB,OAAe,EACf,SAAwB,EACxB,MAAkC,EAClC,OAAoC;QAEpC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,iDAAiD;QACjD,IAAI,CAAC,OAAO,CAAC,GAAG,CACd,OAAO,EACP,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE;YACnD,IAAI,EAAE,SAAS;YACf,SAAS;YACT,IAAI,EAAE,EAAE;SACT,CAAC,CACH,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;QACrB,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;QAChC,wEAAwE;QACxE,yEAAyE;QACzE,IAAI,MAAM,KAAK,0BAA0B;YAAE,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC;QACtE,IAAI,CAAC,OAAO,EAAE,CAAC;QAEf,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACvD,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAEjE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CACf,gCAAgC,MAAM,QAAQ,OAAO,EAAE;YACrD,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CACzF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,QAAQ,CACpB,MAAoB,EACpB,OAAe,EACf,OAAoC;QAEpC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;QACrB,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;QAChC,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC;QAC3B,0EAA0E;QAC1E,qEAAqE;QACrE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,UAAU,EAAE,CAAC;QAElB,gFAAgF;QAChF,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACnC,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAE7D,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,iCAAiC,MAAM,QAAQ,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;CACF"}

package/dist/capacity/resume-policy.d.ts

@@ -0,0 +1,101 @@
+/**
+ * AS-3 (RESUME): the PURE pause-until decision core.
+ *
+ * Replaces the fixed pause-until-reset timer (watch.ts's single `setTimeout`
+ * keyed to the capped account's stated reset) with
+ *
+ *     pause-until ( current account's reset elapsed
+ *                   OR the logged-in account CHANGED
+ *                   OR a cheap probe ping says we can serve )
+ *
+ * plus the operator's symmetric requirement: swapping to a DIFFERENT account
+ * that is itself still-capped in memory RE-PAUSES from memory (no request
+ * burned) rather than resuming into an account that will just 429 again.
+ *
+ * Flap protection (reuse of the CC-3A pattern — api/_lib/capacity/
+ * identity-capacity.ts `cooldownMinDwellMs: 60_000`): an account-change
+ * adoption (resume or re-pause) is DEBOUNCED — a second account-change within
+ * `adoptionDebounceMs` of the last adoption is DEFERRED, so a keychain that
+ * flaps A→B→A→B faster than the debounce collapses to a single adoption instead
+ * of thrashing resume/pause. The capacity-window hysteresis (never reopen a
+ * capped window on a null-reset guess) lives in the fold (account-window.ts).
+ *
+ * PURE by construction: no clock, no timer, no I/O — every input is passed in,
+ * so the whole decision surface is exercised with a fake clock in unit tests.
+ */
+import { type AccountWindow } from "./account-window.js";
+/** Whether the runner is currently claiming (`active`) or capacity-paused (`paused`). */
+export type CapacityMode = "active" | "paused";
+/** Inputs for one resume/re-pause decision. */
+export interface ResumeEvalInput {
+    /** Current runner mode. */
+    mode: CapacityMode;
+    /** Wall-clock now (epoch ms) from the injected clock. */
+    nowMs: number;
+    /**
+     * The account the probe currently observes (its `synthetic_account`), or
+     * `null` when the probe cannot introspect one this tick.
+     */
+    observedAccountKey: string | null;
+    /**
+     * The account the current state is anchored to: the capped account while
+     * paused, or the last-known serving account while active. `null` before the
+     * first observation.
+     */
+    anchorAccountKey: string | null;
+    /** Per-account remembered capacity windows (keyed on `synthetic_account`). */
+    windows: ReadonlyMap<string, AccountWindow>;
+    /**
+     * Result of a cheap probe ping for the observed account THIS tick:
+     *   true  = the account can serve now (resume),
+     *   false = still capped,
+     *   null  = not probed / can't tell.
+     * Only consulted while paused on the same account.
+     */
+    pingOk: boolean | null;
+    /**
+     * Epoch ms of the last account-change adoption (resume or re-pause), or
+     * `null` if none yet — the initial cap-pause is NOT an adoption, so the first
+     * swap after a pause is never debounced.
+     */
+    lastAdoptionAtMs: number | null;
+    /** Minimum gap between account-change adoptions (flap protection). */
+    adoptionDebounceMs: number;
+}
+/** Why a resume fired. */
+export type ResumeReason = "reset" | "account-change" | "ping-ok";
+/** The decision the controller acts on. */
+export type ResumeDecision = 
+/** Stay in the current mode. */
+{
+    action: "stay";
+}
+/** Leave the pause and resume claiming, on `account`. */
+ | {
+    action: "resume";
+    reason: ResumeReason;
+    account: string;
+}
+/** Re-pause: the observed account is a KNOWN still-capped account (from memory). */
+ | {
+    action: "pause";
+    reason: "returning-capped-account";
+    account: string;
+    resetAtMs: number | null;
+}
+/** An account change is held back by the adoption debounce; retry after the hold. */
+ | {
+    action: "defer";
+    reason: "adoption-debounce";
+    account: string;
+};
+/**
+ * Decide the next action. Pure — the controller supplies every input and
+ * executes the returned action (arming timers, calling seams). Ordering:
+ *   1. account swap (highest signal) — debounced, then resume-or-re-pause by
+ *      the new account's remembered window;
+ *   2. same account while paused — reset elapsed, else a positive ping;
+ *   3. otherwise stay.
+ */
+export declare function evaluateResume(input: ResumeEvalInput): ResumeDecision;
+//# sourceMappingURL=resume-policy.d.ts.map

package/dist/capacity/resume-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-policy.d.ts","sourceRoot":"","sources":["../../src/capacity/resume-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAExE,yFAAyF;AACzF,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE/C,+CAA+C;AAC/C,MAAM,WAAW,eAAe;IAC9B,2BAA2B;IAC3B,IAAI,EAAE,YAAY,CAAC;IACnB,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,8EAA8E;IAC9E,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC5C;;;;;;OAMG;IACH,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IACvB;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,sEAAsE;IACtE,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,0BAA0B;AAC1B,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAElE,2CAA2C;AAC3C,MAAM,MAAM,cAAc;AACxB,gCAAgC;AAC9B;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE;AACpB,yDAAyD;GACvD;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC7D,oFAAoF;GAClF;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,0BAA0B,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AACpG,qFAAqF;GACnF;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAOtE;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,GAAG,cAAc,CA4CrE"}

package/dist/capacity/resume-policy.js

@@ -0,0 +1,80 @@
+/**
+ * AS-3 (RESUME): the PURE pause-until decision core.
+ *
+ * Replaces the fixed pause-until-reset timer (watch.ts's single `setTimeout`
+ * keyed to the capped account's stated reset) with
+ *
+ *     pause-until ( current account's reset elapsed
+ *                   OR the logged-in account CHANGED
+ *                   OR a cheap probe ping says we can serve )
+ *
+ * plus the operator's symmetric requirement: swapping to a DIFFERENT account
+ * that is itself still-capped in memory RE-PAUSES from memory (no request
+ * burned) rather than resuming into an account that will just 429 again.
+ *
+ * Flap protection (reuse of the CC-3A pattern — api/_lib/capacity/
+ * identity-capacity.ts `cooldownMinDwellMs: 60_000`): an account-change
+ * adoption (resume or re-pause) is DEBOUNCED — a second account-change within
+ * `adoptionDebounceMs` of the last adoption is DEFERRED, so a keychain that
+ * flaps A→B→A→B faster than the debounce collapses to a single adoption instead
+ * of thrashing resume/pause. The capacity-window hysteresis (never reopen a
+ * capped window on a null-reset guess) lives in the fold (account-window.ts).
+ *
+ * PURE by construction: no clock, no timer, no I/O — every input is passed in,
+ * so the whole decision surface is exercised with a fake clock in unit tests.
+ */
+import { isStillCapped } from "./account-window.js";
+/** True when the observed account differs from the anchor (a login swap). */
+function accountSwapped(input) {
+    return input.observedAccountKey !== null && input.observedAccountKey !== input.anchorAccountKey;
+}
+/**
+ * Decide the next action. Pure — the controller supplies every input and
+ * executes the returned action (arming timers, calling seams). Ordering:
+ *   1. account swap (highest signal) — debounced, then resume-or-re-pause by
+ *      the new account's remembered window;
+ *   2. same account while paused — reset elapsed, else a positive ping;
+ *   3. otherwise stay.
+ */
+export function evaluateResume(input) {
+    if (accountSwapped(input)) {
+        const account = input.observedAccountKey;
+        // Flap protection: coalesce rapid account-change adoptions.
+        if (input.lastAdoptionAtMs !== null &&
+            input.nowMs - input.lastAdoptionAtMs < input.adoptionDebounceMs) {
+            return { action: "defer", reason: "adoption-debounce", account };
+        }
+        const window = input.windows.get(account) ?? null;
+        if (isStillCapped(window, input.nowMs)) {
+            // Swapped to a known still-capped account → re-pause from memory.
+            if (input.mode === "paused" && input.anchorAccountKey === account) {
+                return { action: "stay" };
+            }
+            return {
+                action: "pause",
+                reason: "returning-capped-account",
+                account,
+                resetAtMs: window ? window.resetAtMs : null,
+            };
+        }
+        // Fresh / unknown account → its quota is available; resume when paused.
+        if (input.mode === "paused") {
+            return { action: "resume", reason: "account-change", account };
+        }
+        return { action: "stay" };
+    }
+    if (input.mode === "paused") {
+        const key = input.observedAccountKey ?? input.anchorAccountKey;
+        const window = key ? input.windows.get(key) ?? null : null;
+        // Reset elapsed on the capped account's known window.
+        if (window && window.state === "capped" && window.resetAtMs !== null && input.nowMs >= window.resetAtMs) {
+            return { action: "resume", reason: "reset", account: key };
+        }
+        // Cheap probe ping says the window reopened early.
+        if (input.pingOk === true && key !== null) {
+            return { action: "resume", reason: "ping-ok", account: key };
+        }
+    }
+    return { action: "stay" };
+}
+//# sourceMappingURL=resume-policy.js.map

package/dist/capacity/resume-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-policy.js","sourceRoot":"","sources":["../../src/capacity/resume-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,aAAa,EAAsB,MAAM,qBAAqB,CAAC;AAwDxE,6EAA6E;AAC7E,SAAS,cAAc,CAAC,KAAsB;IAC5C,OAAO,KAAK,CAAC,kBAAkB,KAAK,IAAI,IAAI,KAAK,CAAC,kBAAkB,KAAK,KAAK,CAAC,gBAAgB,CAAC;AAClG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,KAAsB;IACnD,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,kBAA4B,CAAC;QACnD,4DAA4D;QAC5D,IACE,KAAK,CAAC,gBAAgB,KAAK,IAAI;YAC/B,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,kBAAkB,EAC/D,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC;QACnE,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;QAClD,IAAI,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,kEAAkE;YAClE,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,gBAAgB,KAAK,OAAO,EAAE,CAAC;gBAClE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC5B,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,0BAA0B;gBAClC,OAAO;gBACP,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;aAC5C,CAAC;QACJ,CAAC;QACD,wEAAwE;QACxE,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,gBAAgB,CAAC;QAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3D,sDAAsD;QACtD,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACxG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAG,GAAc,EAAE,CAAC;QACzE,CAAC;QACD,mDAAmD;QACnD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC"}

package/dist/companion-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"companion-run.d.ts","sourceRoot":"","sources":["../src/companion-run.ts"],"names":[],"mappings":"AA6CA,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,oFAAoF;AACpF,eAAO,MAAM,2BAA2B,uCAAuC,CAAC;AAChF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,kCAAkC,CAAC;AAEtE;;;;GAIG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,eAAe,CAAC,CAgMjE;AAED,+DAA+D;AAC/D,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAmB5D;AAED,8DAA8D;AAC9D,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAK7D;AAED,wCAAwC;AACxC,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAK/D"}
+{"version":3,"file":"companion-run.d.ts","sourceRoot":"","sources":["../src/companion-run.ts"],"names":[],"mappings":"AA8CA,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,oFAAoF;AACpF,eAAO,MAAM,2BAA2B,uCAAuC,CAAC;AAChF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,kCAAkC,CAAC;AAEtE;;;;GAIG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,eAAe,CAAC,CA0OjE;AAED,+DAA+D;AAC/D,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAmB5D;AAED,8DAA8D;AAC9D,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAK7D;AAED,wCAAwC;AACxC,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAK/D"}

package/dist/companion-run.js

@@ -14,6 +14,7 @@ import { createRunnerClient } from "./supabase.js";
 import { RefreshReuseDetectedError, expiresSoon, refreshAccessToken, } from "./runtime/auth-lifecycle.js";
 import { createSupabaseChatTransport } from "./chat-transport.js";
 import { getChatEngine } from "./engines/registry.js";
+import { writeMcpConfig } from "./mcp-spawn.js";
 import { ChatCircuitBreaker, getChatCircuit } from "./runtime/chat-circuit-breaker.js";
 import { CompanionMirrorSocket } from "./companion-mirror-socket.js";
 import { CompanionRunner, OwnerConversationSource, createIdentityBroadcaster, deriveMirrorToken, resolveCompanionConfig, } from "./companion.js";
@@ -123,6 +124,34 @@ export async function companionCommand() {
         // is reflected if the registration is retried on the fresh JWT.
         reportIdentityProbe({ publicUrl: cfg.publicUrl, accessToken: session.access_token }, payload)
         : undefined;
+    // CHAT-MCP-PROVISION: the chat engine spawns claude with
+    // `--strict-mcp-config --mcp-config <repoPath>/.mcp.json` and disables every
+    // native tool (acc-mcp is the only tool bus). Without that file claude
+    // hard-errors ("MCP config file not found") and the turn streams NO text — the
+    // operator sees an empty reply. The task lane provisions it via writeMcpConfig;
+    // the chat lane must too. One config covers the whole companion session (cwd is
+    // the stable repoPath); acc-mcp-server authorizes via the runner access token
+    // (task-id is optional for the chat lane). Re-provisioned on every token
+    // refresh so the baked JWT never goes stale. Reads session/cfg at CALL time.
+    let mcpCleanup = null;
+    const provisionChatMcp = async () => {
+        try {
+            mcpCleanup = await writeMcpConfig({
+                cwd: cfg.repoPath,
+                taskId: "", // no task in the chat lane — acc-mcp-server treats it as null
+                runnerId: session.runner_id,
+                accessToken: session.access_token,
+                publicUrl: cfg.publicUrl,
+                supabaseUrl: cfg.supabaseUrl,
+                supabaseAnonKey: cfg.supabaseAnonKey,
+            });
+        }
+        catch (err) {
+            // Non-fatal: a turn will still error visibly rather than the companion
+            // failing to come online. Surfaced so `doctor` / logs show the cause.
+            console.log(chalk.yellow(`[acc-runner] chat acc-mcp provisioning failed: ${err.message}`));
+        }
+    };
     // AUTH-REFRESH: rotate the ACC session in place. Called proactively (token
     // near expiry) and reactively (ONE per auth-failure streak) by CompanionRunner.
     // Rebuilds the Supabase client so the next heartbeat bears the fresh JWT, and
@@ -153,6 +182,9 @@ export async function companionCommand() {
         await transport.refreshClient(supabase, session.access_token).catch(() => {
             /* channel teardown is best-effort; the next frame re-subscribes */
         });
+        // Re-bake the fresh JWT into .mcp.json so the acc-mcp bus keeps authorizing
+        // across the rotation (the old token would 401 the tool calls otherwise).
+        await provisionChatMcp();
         return true;
     };
     const runner = new CompanionRunner({
@@ -188,6 +220,8 @@ export async function companionCommand() {
         cwd: cfg.repoPath,
         onLog: (line) => console.log(chalk.gray(line)),
     });
+    // Provision the acc-mcp tool bus before any turn can be claimed/driven.
+    await provisionChatMcp();
     await runner.start();
     // HONESTY: the banner states the bound identity (green) or "UNBOUND — not
     // serving provider status" (yellow) with the reason + how to fix. `tone==="ok"`
@@ -202,6 +236,10 @@ export async function companionCommand() {
         async stop() {
             await runner.stop();
             await broadcaster.close();
+            // Remove our JWT-bearing .mcp.json (or restore the operator's original).
+            await mcpCleanup?.restore().catch(() => {
+                /* best-effort; never block shutdown on config cleanup */
+            });
         },
     };
 }

package/dist/companion-run.js.map

@@ -1 +1 @@
-{"version":3,"file":"companion-run.js","sourceRoot":"","sources":["../src/companion-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,yBAAyB,EACzB,WAAW,EACX,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EACf,2BAA2B,EAC3B,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,GACf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAOnD,oFAAoF;AACpF,MAAM,CAAC,MAAM,2BAA2B,GAAG,oCAAoC,CAAC;AAChF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,+BAA+B,CAAC;AAEtE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,GAAG,GAAG,UAAU,EAAE,CAAC;IACvB,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,GAAkB,MAAM,CAAC;IACpC,GAAG,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAEzC,+EAA+E;IAC/E,8EAA8E;IAC9E,oEAAoE;IACpE,IAAI,aAAa,CAAC,UAAU,EAAE,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;gBAC7C,MAAM,GAAG,CAAC,CAAC,2DAA2D;YACxE,CAAC;YACD,uEAAuE;YACvE,yEAAyE;YACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,kDAAmD,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACzC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,0EAA0E;IAC1E,+EAA+E;IAC/E,+EAA+E;IAC/E,qDAAqD;IACrD,MAAM,SAAS,GAAG,2BAA2B,CAAC,QAAQ,EAAE;QACtD,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE;KAC5D,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,sBAAsB,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,wBAAwB,EAAE,CAAC;IAExC,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa;QACvC,CAAC,CAAC,IAAI,qBAAqB,CAAC;YACxB,aAAa,EAAE,YAAY,CAAC,WAAW,IAAI,iBAAiB,CAAC,OAAO,CAAC;YACrE,IAAI,EAAE,YAAY,CAAC,UAAU;YAC7B,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC/C,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IAET,6EAA6E;IAC7E,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,EAAE,CAAC;SAC7D,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,aAAa,GAAG,IAAI,uBAAuB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE5E,MAAM,WAAW,GAAG,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE;QACvE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KAC/C,CAAC,CAAC;IAEH,+EAA+E;IAC/E,8EAA8E;IAC9E,4EAA4E;IAC5E,6EAA6E;IAC7E,wEAAwE;IACxE,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IACjF,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC;QAClD,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,WAAW,EAAE,OAAO,CAAC,YAAY;QACjC,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;KACvC,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6EAA6E;YAC3E,yEAAyE;YACzE,2BAA2B,CAC9B,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7E,gFAAgF;IAChF,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,kBAAkB,GAAG,UAAU;QACnC,CAAC,CAAC,CAAC,OAKA,EAAE,EAAE;QACH,2EAA2E;QAC3E,gEAAgE;QAChE,mBAAmB,CACjB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,EAC/D,OAAO,CACR;QACL,CAAC,CAAC,SAAS,CAAC;IAEd,2EAA2E;IAC3E,gFAAgF;IAChF,8EAA8E;IAC9E,yEAAyE;IACzE,iFAAiF;IACjF,MAAM,WAAW,GAAG,KAAK,IAAsB,EAAE;QAC/C,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;gBAC7C,uEAAuE;gBACvE,yEAAyE;gBACzE,mDAAmD;gBACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACrE,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,GAAG,CAAC,CAAC,4EAA4E;QACzF,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3C,6CAA6C;QAC/C,CAAC,CAAC,CAAC;QACH,QAAQ,GAAG,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QAClF,MAAM,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACvE,mEAAmE;QACrE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,QAAQ,EAAE,OAAO,CAAC,SAAS;QAC3B,WAAW,EAAE,OAAO,CAAC,OAAO;QAC5B,MAAM;QACN,SAAS;QACT,OAAO;QACP,aAAa;QACb,gBAAgB,EAAE,IAAI,CAAC,WAAW;QAClC,wEAAwE;QACxE,kDAAkD;QAClD,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,MAAM;QACf,MAAM;QACN,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QAClE,SAAS,EAAE,KAAK,IAAI,EAAE;YACpB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE;gBACvD,IAAI,EAAE,OAAO,CAAC,SAAS;gBACvB,SAAS,EAAE,eAAe;aAC3B,CAAC,CAAC;YACH,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,8EAA8E;QAC9E,4EAA4E;QAC5E,uDAAuD;QACvD,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE;YAC5B,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE;YAChF,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,EAAE,GAAG,CAAC,QAAQ;QACjB,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KAC/C,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAErB,0EAA0E;IAC1E,gFAAgF;IAChF,uEAAuE;IACvE,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CACR,aAAa,aAAa,CAAC,IAAI,EAAE,kBAAkB;QACjD,CAAC,MAAM,CAAC,CAAC,CAAC,yBAAyB,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAC5E,CACF,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,sBAAsB,EAAE,CAAC;IACrC,6EAA6E;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,mCAAmC;IACnC,OAAO,CAAC,GAAG,CACT,mBAAmB,CAAC;QAClB,MAAM,EAAE,OAAO,KAAK,IAAI;QACxB,UAAU,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;QAClC,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,OAAO,KAAK,IAAI;QAC7B,MAAM,EAAE,GAAG,CAAC,aAAa;KAC1B,CAAC,CACH,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,wCAAwC;AACxC,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACpC,CAAC"}
+{"version":3,"file":"companion-run.js","sourceRoot":"","sources":["../src/companion-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,yBAAyB,EACzB,WAAW,EACX,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAyB,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EACf,2BAA2B,EAC3B,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,GACf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAOnD,oFAAoF;AACpF,MAAM,CAAC,MAAM,2BAA2B,GAAG,oCAAoC,CAAC;AAChF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,+BAA+B,CAAC;AAEtE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,GAAG,GAAG,UAAU,EAAE,CAAC;IACvB,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,GAAkB,MAAM,CAAC;IACpC,GAAG,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAEzC,+EAA+E;IAC/E,8EAA8E;IAC9E,oEAAoE;IACpE,IAAI,aAAa,CAAC,UAAU,EAAE,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;gBAC7C,MAAM,GAAG,CAAC,CAAC,2DAA2D;YACxE,CAAC;YACD,uEAAuE;YACvE,yEAAyE;YACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,kDAAmD,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACzC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,0EAA0E;IAC1E,+EAA+E;IAC/E,+EAA+E;IAC/E,qDAAqD;IACrD,MAAM,SAAS,GAAG,2BAA2B,CAAC,QAAQ,EAAE;QACtD,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE;KAC5D,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,sBAAsB,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,wBAAwB,EAAE,CAAC;IAExC,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa;QACvC,CAAC,CAAC,IAAI,qBAAqB,CAAC;YACxB,aAAa,EAAE,YAAY,CAAC,WAAW,IAAI,iBAAiB,CAAC,OAAO,CAAC;YACrE,IAAI,EAAE,YAAY,CAAC,UAAU;YAC7B,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC/C,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IAET,6EAA6E;IAC7E,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,EAAE,CAAC;SAC7D,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,aAAa,GAAG,IAAI,uBAAuB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE5E,MAAM,WAAW,GAAG,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE;QACvE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KAC/C,CAAC,CAAC;IAEH,+EAA+E;IAC/E,8EAA8E;IAC9E,4EAA4E;IAC5E,6EAA6E;IAC7E,wEAAwE;IACxE,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IACjF,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC;QAClD,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,WAAW,EAAE,OAAO,CAAC,YAAY;QACjC,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;KACvC,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6EAA6E;YAC3E,yEAAyE;YACzE,2BAA2B,CAC9B,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7E,gFAAgF;IAChF,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,kBAAkB,GAAG,UAAU;QACnC,CAAC,CAAC,CAAC,OAKA,EAAE,EAAE;QACH,2EAA2E;QAC3E,gEAAgE;QAChE,mBAAmB,CACjB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,EAC/D,OAAO,CACR;QACL,CAAC,CAAC,SAAS,CAAC;IAEd,yDAAyD;IACzD,6EAA6E;IAC7E,uEAAuE;IACvE,+EAA+E;IAC/E,gFAAgF;IAChF,gFAAgF;IAChF,8EAA8E;IAC9E,yEAAyE;IACzE,6EAA6E;IAC7E,IAAI,UAAU,GAA4B,IAAI,CAAC;IAC/C,MAAM,gBAAgB,GAAG,KAAK,IAAmB,EAAE;QACjD,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,cAAc,CAAC;gBAChC,GAAG,EAAE,GAAG,CAAC,QAAQ;gBACjB,MAAM,EAAE,EAAE,EAAE,8DAA8D;gBAC1E,QAAQ,EAAE,OAAO,CAAC,SAAS;gBAC3B,WAAW,EAAE,OAAO,CAAC,YAAY;gBACjC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,eAAe,EAAE,GAAG,CAAC,eAAe;aACrC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,sEAAsE;YACtE,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,kDAAmD,GAAa,CAAC,OAAO,EAAE,CAC3E,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,2EAA2E;IAC3E,gFAAgF;IAChF,8EAA8E;IAC9E,yEAAyE;IACzE,iFAAiF;IACjF,MAAM,WAAW,GAAG,KAAK,IAAsB,EAAE;QAC/C,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;gBAC7C,uEAAuE;gBACvE,yEAAyE;gBACzE,mDAAmD;gBACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACrE,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,GAAG,CAAC,CAAC,4EAA4E;QACzF,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3C,6CAA6C;QAC/C,CAAC,CAAC,CAAC;QACH,QAAQ,GAAG,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QAClF,MAAM,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACvE,mEAAmE;QACrE,CAAC,CAAC,CAAC;QACH,4EAA4E;QAC5E,0EAA0E;QAC1E,MAAM,gBAAgB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,QAAQ,EAAE,OAAO,CAAC,SAAS;QAC3B,WAAW,EAAE,OAAO,CAAC,OAAO;QAC5B,MAAM;QACN,SAAS;QACT,OAAO;QACP,aAAa;QACb,gBAAgB,EAAE,IAAI,CAAC,WAAW;QAClC,wEAAwE;QACxE,kDAAkD;QAClD,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,MAAM;QACf,MAAM;QACN,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QAClE,SAAS,EAAE,KAAK,IAAI,EAAE;YACpB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE;gBACvD,IAAI,EAAE,OAAO,CAAC,SAAS;gBACvB,SAAS,EAAE,eAAe;aAC3B,CAAC,CAAC;YACH,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,8EAA8E;QAC9E,4EAA4E;QAC5E,uDAAuD;QACvD,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE;YAC5B,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE;YAChF,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,EAAE,GAAG,CAAC,QAAQ;QACjB,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KAC/C,CAAC,CAAC;IAEH,wEAAwE;IACxE,MAAM,gBAAgB,EAAE,CAAC;IAEzB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAErB,0EAA0E;IAC1E,gFAAgF;IAChF,uEAAuE;IACvE,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CACR,aAAa,aAAa,CAAC,IAAI,EAAE,kBAAkB;QACjD,CAAC,MAAM,CAAC,CAAC,CAAC,yBAAyB,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAC5E,CACF,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;YAC1B,yEAAyE;YACzE,MAAM,UAAU,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;gBACrC,yDAAyD;YAC3D,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,sBAAsB,EAAE,CAAC;IACrC,6EAA6E;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,mCAAmC;IACnC,OAAO,CAAC,GAAG,CACT,mBAAmB,CAAC;QAClB,MAAM,EAAE,OAAO,KAAK,IAAI;QACxB,UAAU,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;QAClC,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,OAAO,KAAK,IAAI;QAC7B,MAAM,EAAE,GAAG,CAAC,aAAa;KAC1B,CAAC,CACH,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,wCAAwC;AACxC,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACpC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenfactory/acc-runner",
-  "version": "0.40.12",
+  "version": "0.40.14",
   "description": "Agent Control Center local runner. Spawns Claude Code sessions assigned via ACC.",
   "license": "UNLICENSED",
   "private": false,