@tokenfactory/acc-runner 0.40.19 → 0.40.21

package/dist/watch-chat/grace-gated-transport.d.ts

@@ -0,0 +1,58 @@
+/**
+ * FLEET-SERVE: the grace-gated claim decorator.
+ *
+ * Wraps any `ChatLaneTransport` so its `claim` first PROBES the conversation and
+ * only delegates to the underlying claim when the companion-preference grace gate
+ * (grace-gate.ts) says a fleet runner may take the turn now. Everything else —
+ * markStreaming / stream / complete / requeue — passes straight through
+ * untouched, so a fleet runner drives a claimed turn through the EXACT same
+ * transport, driver (driveChatTurn), and per-turn delegation as a companion. That
+ * shared path is what makes delegation scoping + provenance (serving runner_id,
+ * engine_id, delegation_jti) IDENTICAL across the companion and fleet paths: the
+ * only difference the fleet introduces is WHEN it is allowed to claim, never HOW
+ * the turn is served.
+ *
+ * Reusing the decorator seam means the fleet lane is just a `ChatCompanion` (the
+ * shared claim/drive loop) fed a grace-gated transport — no forked drive logic.
+ */
+import type { ChatLaneTransport } from "../chat-lane.js";
+import { type ClaimableTurnProbe, type FleetClaimDecision } from "./grace-gate.js";
+export interface GraceGateOptions {
+    /** Probe a conversation for its oldest claimable turn's timing state. */
+    probe: (conversationId: string) => Promise<ClaimableTurnProbe>;
+    /** Companion-preference window (ms) a fresh queued turn must age past. */
+    graceMs: number;
+    /** Observability: every claim decision (claimed or skipped), for logs/tests. */
+    onDecision?: (info: {
+        conversationId: string;
+        decision: FleetClaimDecision;
+    }) => void;
+    /** Best-effort log sink. */
+    onLog?: (line: string) => void;
+}
+/**
+ * Decorate `inner` with the companion-preference grace gate on `claim`. On a
+ * probe FAILURE the decorator returns null (does NOT claim this pump): claiming
+ * blind would undercut companion preference, and the turn is never lost — the
+ * next pump re-probes and, worst case, the server lease-expiry reclaim (0273)
+ * still drains it. A `claim` the gate allows delegates verbatim, so the claimed
+ * turn's lease/runner assignment is exactly the companion's.
+ */
+export declare function graceGatedTransport(inner: ChatLaneTransport, opts: GraceGateOptions): ChatLaneTransport;
+/** In-flight statuses the fleet probe reads (queued + reclaimable in-flight). */
+export declare const FLEET_PROBE_STATUSES: readonly string[];
+/**
+ * Build a Supabase-backed probe: read the conversation's in-flight acc.chat_turns
+ * rows (queued/claimed/streaming) and reduce them to a `ClaimableTurnProbe`. The
+ * read is org-scoped by the chat_turns SELECT policy (0254); ownership is already
+ * guaranteed upstream because the fleet lane only ever probes conversations its
+ * owner-affinity source admitted (bound-user-owned). A query error is surfaced as
+ * a throw so the decorator's fail-safe (defer, don't claim) engages.
+ */
+export declare function supabaseFleetProbe(client: {
+    from: (table: string) => any;
+}, opts?: {
+    now?: () => number;
+    statuses?: readonly string[];
+}): (conversationId: string) => Promise<ClaimableTurnProbe>;
+//# sourceMappingURL=grace-gated-transport.d.ts.map

package/dist/watch-chat/grace-gated-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grace-gated-transport.d.ts","sourceRoot":"","sources":["../../src/watch-chat/grace-gated-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EAExB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,gBAAgB;IAC/B,yEAAyE;IACzE,KAAK,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/D,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,kBAAkB,CAAA;KAAE,KAAK,IAAI,CAAC;IACtF,4BAA4B;IAC5B,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,gBAAgB,GACrB,iBAAiB,CAuBnB;AAED,iFAAiF;AACjF,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAAuC,CAAC;AAE1F;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAEhC,MAAM,EAAE;IAAE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,GAAG,CAAA;CAAE,EACxC,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GAC9D,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAezD"}

package/dist/watch-chat/grace-gated-transport.js

@@ -0,0 +1,62 @@
+import { decideFleetClaim, reduceClaimableProbe, } from "./grace-gate.js";
+/**
+ * Decorate `inner` with the companion-preference grace gate on `claim`. On a
+ * probe FAILURE the decorator returns null (does NOT claim this pump): claiming
+ * blind would undercut companion preference, and the turn is never lost — the
+ * next pump re-probes and, worst case, the server lease-expiry reclaim (0273)
+ * still drains it. A `claim` the gate allows delegates verbatim, so the claimed
+ * turn's lease/runner assignment is exactly the companion's.
+ */
+export function graceGatedTransport(inner, opts) {
+    return {
+        async claim(args) {
+            let probe;
+            try {
+                probe = await opts.probe(args.conversationId);
+            }
+            catch (err) {
+                opts.onLog?.(`[acc-runner] fleet chat grace-probe(${args.conversationId}) failed: ` +
+                    `${err.message}; deferring claim`);
+                return null;
+            }
+            const decision = decideFleetClaim(probe, { graceMs: opts.graceMs });
+            opts.onDecision?.({ conversationId: args.conversationId, decision });
+            if (!decision.claim)
+                return null;
+            return inner.claim(args);
+        },
+        ...(inner.markStreaming ? { markStreaming: (turn) => inner.markStreaming(turn) } : {}),
+        stream: (turn, payload) => inner.stream(turn, payload),
+        complete: (turn, payload) => inner.complete(turn, payload),
+        requeue: (turn, payload) => inner.requeue(turn, payload),
+    };
+}
+/** In-flight statuses the fleet probe reads (queued + reclaimable in-flight). */
+export const FLEET_PROBE_STATUSES = ["queued", "claimed", "streaming"];
+/**
+ * Build a Supabase-backed probe: read the conversation's in-flight acc.chat_turns
+ * rows (queued/claimed/streaming) and reduce them to a `ClaimableTurnProbe`. The
+ * read is org-scoped by the chat_turns SELECT policy (0254); ownership is already
+ * guaranteed upstream because the fleet lane only ever probes conversations its
+ * owner-affinity source admitted (bound-user-owned). A query error is surfaced as
+ * a throw so the decorator's fail-safe (defer, don't claim) engages.
+ */
+export function supabaseFleetProbe(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+client, opts = {}) {
+    const now = opts.now ?? Date.now;
+    const statuses = opts.statuses ?? FLEET_PROBE_STATUSES;
+    return async (conversationId) => {
+        const res = await client
+            .from("chat_turns")
+            .select("status, created_at, lease_expires_at")
+            .eq("conversation_id", conversationId)
+            .in("status", statuses);
+        if (res?.error) {
+            throw new Error(res.error.message ?? "chat_turns probe failed");
+        }
+        const rows = (Array.isArray(res?.data) ? res.data : []);
+        return reduceClaimableProbe(rows, now());
+    };
+}
+//# sourceMappingURL=grace-gated-transport.js.map

package/dist/watch-chat/grace-gated-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grace-gated-transport.js","sourceRoot":"","sources":["../../src/watch-chat/grace-gated-transport.ts"],"names":[],"mappings":"AAkBA,OAAO,EACL,gBAAgB,EAChB,oBAAoB,GAIrB,MAAM,iBAAiB,CAAC;AAazB;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAwB,EACxB,IAAsB;IAEtB,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,IAAI;YACd,IAAI,KAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,KAAK,EAAE,CACV,uCAAuC,IAAI,CAAC,cAAc,YAAY;oBACpE,GAAI,GAAa,CAAC,OAAO,mBAAmB,CAC/C,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,QAAQ,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACjC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,aAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;QACtD,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;QAC1D,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAsB,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAE1F;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB;AAChC,8DAA8D;AAC9D,MAAwC,EACxC,OAA6D,EAAE;IAE/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,oBAAoB,CAAC;IACvD,OAAO,KAAK,EAAE,cAAsB,EAAE,EAAE;QACtC,MAAM,GAAG,GAAG,MAAM,MAAM;aACrB,IAAI,CAAC,YAAY,CAAC;aAClB,MAAM,CAAC,sCAAsC,CAAC;aAC9C,EAAE,CAAC,iBAAiB,EAAE,cAAc,CAAC;aACrC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC1B,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,yBAAyB,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAwB,CAAC;QAC/E,OAAO,oBAAoB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;AACJ,CAAC"}

package/dist/watch-chat/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * FLEET-SERVE: the fleet-fallback chat-lane barrel.
+ *
+ * A fleet `watch` runner may serve its bound user's chat turns as the fallback
+ * behind their companion. The pieces:
+ *   - grace-gate.ts            — companion-preference timing decision (pure).
+ *   - grace-gated-transport.ts — the claim decorator + Supabase probe builder.
+ *   - fleet-chat-lane.ts       — the owner-scoped, grace-gated ChatCompanion.
+ *
+ * Machine-ownership isolation (bound-user turns only) is enforced by the
+ * owner-affinity source (runner-side) + the acc.claim_chat_turn owner gate
+ * (DB-side); this module never widens who may serve, only WHEN the fleet claims.
+ */
+export { DEFAULT_FLEET_CHAT_GRACE_MS, FLEET_CHAT_GRACE_MS_ENV, MIN_FLEET_CHAT_GRACE_MS, MAX_FLEET_CHAT_GRACE_MS, resolveFleetChatGraceMs, reduceClaimableProbe, decideFleetClaim, type ClaimableTurnProbe, type FleetTurnProbeRow, type FleetClaimReason, type FleetClaimDecision, } from "./grace-gate.js";
+export { graceGatedTransport, supabaseFleetProbe, FLEET_PROBE_STATUSES, type GraceGateOptions, } from "./grace-gated-transport.js";
+export { FleetChatLane, type FleetChatLaneDeps } from "./fleet-chat-lane.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/watch-chat/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/watch-chat/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,KAAK,gBAAgB,GACtB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,aAAa,EAAE,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/watch-chat/index.js

@@ -0,0 +1,17 @@
+/**
+ * FLEET-SERVE: the fleet-fallback chat-lane barrel.
+ *
+ * A fleet `watch` runner may serve its bound user's chat turns as the fallback
+ * behind their companion. The pieces:
+ *   - grace-gate.ts            — companion-preference timing decision (pure).
+ *   - grace-gated-transport.ts — the claim decorator + Supabase probe builder.
+ *   - fleet-chat-lane.ts       — the owner-scoped, grace-gated ChatCompanion.
+ *
+ * Machine-ownership isolation (bound-user turns only) is enforced by the
+ * owner-affinity source (runner-side) + the acc.claim_chat_turn owner gate
+ * (DB-side); this module never widens who may serve, only WHEN the fleet claims.
+ */
+export { DEFAULT_FLEET_CHAT_GRACE_MS, FLEET_CHAT_GRACE_MS_ENV, MIN_FLEET_CHAT_GRACE_MS, MAX_FLEET_CHAT_GRACE_MS, resolveFleetChatGraceMs, reduceClaimableProbe, decideFleetClaim, } from "./grace-gate.js";
+export { graceGatedTransport, supabaseFleetProbe, FLEET_PROBE_STATUSES, } from "./grace-gated-transport.js";
+export { FleetChatLane } from "./fleet-chat-lane.js";
+//# sourceMappingURL=index.js.map

package/dist/watch-chat/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/watch-chat/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,EACpB,gBAAgB,GAKjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,GAErB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,aAAa,EAA0B,MAAM,sBAAsB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenfactory/acc-runner",
-  "version": "0.40.19",
+  "version": "0.40.21",
   "description": "Agent Control Center local runner. Spawns Claude Code sessions assigned via ACC.",
   "license": "UNLICENSED",
   "private": false,