@tokenfactory/acc-runner 0.41.7 → 0.43.0

package/dist/program.js

@@ -0,0 +1,355 @@
+/**
+ * The ONE command tree, built for whichever binary name invoked it.
+ *
+ * The package ships two bins — `acc` (unified) and `acc-runner` (the original
+ * name, kept as a deprecated alias) — over this single tree. Almost every
+ * command is registered identically for both; the exception is `login` /
+ * `logout`, and the reason is compatibility rather than taste.
+ *
+ * WHY `login` IS NAME-DEPENDENT
+ * ----------------------------------------------------------------------------
+ * There are two lanes, and the published meaning of the old name is already
+ * spoken for:
+ *
+ *   * the MACHINE lane — enrol this host into the fleet, mint an ACC-signed JWT
+ *     that impersonates its owner, create a runner row. That is what
+ *     `acc-runner login` has always meant, and it is baked into docker
+ *     entrypoints, launchd plists and the enrollment guidance the UI prints.
+ *   * the PERSON lane — sign the human at the keyboard in as themselves, via the
+ *     generalized device flow, with no runner row. That is what a command called
+ *     `acc login` must mean; a unified CLI whose `login` enrolled a server would
+ *     be actively misleading.
+ *
+ * Silently redefining `acc-runner login` to the person lane would be a breaking
+ * change wearing an alias costume — every existing enrollment script would stop
+ * producing a runner and start producing a session. So the mapping is:
+ *
+ *   acc login            → person       acc runner login       → machine
+ *   acc-runner login     → machine      acc-runner auth login  → person
+ *
+ * Both spellings of each lane exist under both names, so nothing an operator or
+ * a script types today changes meaning, and `acc runner login` is the forward
+ * name for what the alias called `login`.
+ */
+import { realpathSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { Command } from "commander";
+import chalk from "chalk";
+import { loadConfig } from "./config.js";
+import { fetchPricing } from "./cost-pricing.js";
+import { loginCommand } from "./login.js";
+import { logoutCommand } from "./logout.js";
+import { watchCommand } from "./watch.js";
+import { companionCommand, companionInstallCommand, companionStatusCommand, companionUninstallCommand, } from "./companion-run.js";
+import { authLoginCommand, authLogoutCommand, authStatusCommand, } from "./user-auth/device-login.js";
+import { ensureUserSessionLive } from "./user-auth/liveness.js";
+import { chatCommand } from "./user-cli/chat.js";
+import { taskListCommand, taskShowCommand } from "./user-cli/tasks.js";
+import { doctorCommand } from "./doctor.js";
+import { serveScopeCommand } from "./serve-scope/command.js";
+import { clarifyCommand } from "./clarification.js";
+import { clearQuarantine, getQuarantine } from "./runtime/quarantine.js";
+import { clearChatCircuit, getChatCircuit } from "./runtime/chat-circuit-breaker.js";
+import { runCommitGuardHook } from "./commit-guard.js";
+import { PROTOCOL_VERSION } from "./types.js";
+import { PACKAGE_VERSION } from "./pkg-version.js";
+/** Every action shares this shape: report the message, set a failing exit code. */
+function guard(fn) {
+    return async () => {
+        try {
+            await fn();
+        }
+        catch (err) {
+            console.error(chalk.red(`✗ ${err.message}`));
+            process.exitCode = 1;
+        }
+    };
+}
+/**
+ * A person-lane command that ACTS on the operator's credential, rather than one
+ * that manages it. These check first that the credential still exists server-side,
+ * because a revoke on Settings → Sessions cannot reach into this machine's
+ * keychain: without the check, a revoked terminal keeps reading the board until
+ * its access token expires (see user-auth/liveness.ts). Login / logout / whoami
+ * are deliberately NOT wrapped — logging in has nothing to check yet, and logging
+ * out of a session that is already gone must still clear the keychain.
+ */
+function personGuard(fn) {
+    return guard(async () => {
+        await ensureUserSessionLive();
+        await fn();
+    });
+}
+export function buildProgram(options = {}) {
+    const invokedAs = options.invokedAs ?? "acc-runner";
+    const unified = invokedAs === "acc";
+    const program = new Command();
+    program
+        .name(invokedAs)
+        .description(unified
+        ? "Agent Control Center. Sign in, read the board, ask ACC, and run agents on this machine."
+        : "Agent Control Center local runner. Subscribes to ACC, spawns Claude Code on assignment, and opens a PR when done.")
+        .version(`${PACKAGE_VERSION} (protocol v${PROTOCOL_VERSION})`);
+    // ── The person lane ───────────────────────────────────────────────────────
+    // Registered under `auth <verb>` for BOTH names (so `acc-runner auth login`
+    // is untouched), and additionally promoted to the top level under `acc`,
+    // where `login` is free to mean what a person expects it to mean.
+    const registerPersonLane = (parent, verbs) => {
+        parent
+            .command("login")
+            .description("Sign in via device-code and store a user session in the OS keychain.")
+            .action(guard(() => authLoginCommand()));
+        parent
+            .command(verbs.status)
+            .description("Show who this terminal is signed in as.")
+            .action(guard(() => authStatusCommand()));
+        parent
+            .command("logout")
+            .description("Revoke this terminal's user session and clear the keychain entry.")
+            .action(guard(() => authLogoutCommand()));
+    };
+    const authCmd = program
+        .command("auth")
+        .description("Sign in to ACC as yourself (no runner registration).");
+    registerPersonLane(authCmd, { status: "status" });
+    // ── The machine lane ──────────────────────────────────────────────────────
+    const registerMachineLane = (parent) => {
+        parent
+            .command("login")
+            .description("Sign in via device-code OAuth and register this machine.")
+            .action(guard(() => loginCommand()));
+        parent
+            .command("logout")
+            .description("Clear the local session and mark this runner offline.")
+            .action(guard(() => logoutCommand()));
+    };
+    registerMachineLane(program
+        .command("runner")
+        .description("Enrol or retire THIS machine as a runner in the fleet."));
+    if (unified) {
+        registerPersonLane(program, { status: "whoami" });
+    }
+    else {
+        registerMachineLane(program);
+    }
+    // ── Reading the board ─────────────────────────────────────────────────────
+    const taskCmd = program
+        .command("task")
+        .description("Read the task board as yourself (read-only).");
+    taskCmd
+        .command("list")
+        .description("List tasks visible to you, newest first.")
+        .option("--status <status>", "Only tasks in this status (e.g. in_progress).")
+        .option("--repo <slug>", "Only tasks for this repo (owner/name).")
+        .option("--limit <n>", "How many rows (1-100, default 25).")
+        .option("--json", "Emit raw JSON instead of a table.")
+        .action((opts) => personGuard(() => taskListCommand(opts))());
+    taskCmd
+        .command("show")
+        .description("Show one task in full.")
+        .argument("<id>", "Task id, e.g. T-1234.")
+        .option("--json", "Emit raw JSON instead of fields.")
+        .action((id, opts) => personGuard(() => taskShowCommand(id, opts))());
+    program
+        .command("chat")
+        .description("Ask ACC. Pass a question, pipe one in, or run bare for a session.")
+        .argument("[message...]", "The question. Omit for an interactive session.")
+        .option("--conversation <id>", "Continue an existing conversation.")
+        .option("--json", "Emit the turn as JSON instead of streaming it.")
+        .action((words, opts) => personGuard(() => chatCommand(words ?? [], opts))());
+    // ── Running agents on this machine ────────────────────────────────────────
+    program
+        .command("watch")
+        .description("Long-running. Receive task assignments and execute them.")
+        .action(guard(async () => {
+        // Warm the cost-pricing cache before the realtime loop opens.
+        // fetchPricing handles its own logging; embedded fallback governs
+        // if the endpoint is unreachable.
+        await fetchPricing(loadConfig().publicUrl);
+        await watchCommand();
+        // Keep the process alive — stop() runs in the SIGINT handler.
+        await new Promise(() => { });
+    }));
+    // COMPANION: companion mode — an owner-affinity chat runner. Serves ONLY the
+    // logged-in owner's interactive chat turns (no code tasks), mirrors the turn
+    // stream to the same-machine browser over a loopback socket, and on exit
+    // requeues in-flight turns so an Auto turn fails over to the fleet.
+    const companionCmd = program
+        .command("companion")
+        .description("Long-running. Serve the owner's interactive chat turns (companion mode).")
+        .action(guard(async () => {
+        const handle = await companionCommand();
+        const shutdown = () => {
+            void handle.stop().finally(() => process.exit(0));
+        };
+        process.on("SIGINT", shutdown);
+        process.on("SIGTERM", shutdown);
+        // Keep the process alive; the loop runs on timers until a signal.
+        await new Promise(() => { });
+    }));
+    companionCmd
+        .command("status")
+        .description("Print the one-line companion status (menu-bar friendly).")
+        .action(guard(() => companionStatusCommand()));
+    companionCmd
+        .command("install")
+        .description("Install the companion login agent (autostart at login).")
+        .action(guard(() => companionInstallCommand()));
+    companionCmd
+        .command("uninstall")
+        .description("Remove the companion login agent.")
+        .action(guard(() => companionUninstallCommand()));
+    // AX-H2 (SERVE-SCOPE-CONSENT): whose work this machine serves. Lives at the
+    // machine because the thing being consented to — this host's gh credential,
+    // git identity and Claude subscription — is in front of the person deciding,
+    // and because acc.set_runner_serve_scope will only accept the answer from the
+    // machine's bound owner anyway.
+    program
+        .command("serve-scope")
+        .description("Show or set whose work this machine serves (owner-only by default).")
+        .argument("[scope]", "\"owner\" (this machine's owner only) or \"org\" (the whole org).")
+        .option("--yes", "Consent to org-wide serving. Required — widening is never implied.")
+        .option("--reason <text>", "Recorded on the consent ledger row.")
+        .action((scope, opts) => guard(() => serveScopeCommand({ scope, yes: opts.yes, reason: opts.reason }))());
+    program
+        .command("doctor")
+        .description("Run environment checks. Exit 0 if all green, 1 otherwise.")
+        .option("--strict", "Treat advisory warnings (missing ANTHROPIC_API_KEY, version drift, etc.) as failures.")
+        .action(async (opts) => {
+        const code = await doctorCommand({ strict: opts.strict === true });
+        process.exitCode = code;
+    });
+    // NEEDS-INFO-HALT: a spawned agent that needs clarification / approval /
+    // missing information raises a needs_clarification halt for its task and hands
+    // the question off to JOJO, instead of guessing or dead-lettering. The operator
+    // answers by resolving the halt, which resumes the SAME task blocked -> queued.
+    program
+        .command("clarify")
+        .description("Raise a needs_clarification halt for a task and hand the question off to JOJO.")
+        .requiredOption("--task <id>", "Task id the agent is blocked on (e.g. T-1234).")
+        .requiredOption("--question <text>", "The question / missing info the operator must answer.")
+        .option("--context <json>", "Optional JSON object merged into the halt payload.")
+        .action((opts) => guard(() => clarifyCommand(opts))());
+    // Quarantine management. The runner enters quarantine automatically when the
+    // failure classifier detects a machine-level failure. An operator resolves the
+    // underlying issue then clears the quarantine to resume work.
+    const quarantineCmd = program
+        .command("quarantine")
+        .description("Inspect or clear the runner quarantine state.");
+    quarantineCmd
+        .command("status")
+        .description("Show quarantine state.")
+        .action(guard(async () => {
+        const q = await getQuarantine();
+        if (!q) {
+            console.log("Runner is not quarantined.");
+            return;
+        }
+        console.log(chalk.red.bold(`QUARANTINED (${q.cause})`));
+        console.log(`  Detail:  ${q.detail}`);
+        console.log(`  Task:    ${q.taskId}`);
+        console.log(`  Since:   ${q.classifiedAt}`);
+        // Consecutive instant-empty count (1 = definitive, 2 = heuristic
+        // confirmed by retry). Omitted for states written before it existed.
+        if (q.consecutive !== undefined) {
+            console.log(`  Streak:  ${q.consecutive} consecutive instant-empty exit(s)`);
+        }
+        console.log(chalk.gray(`\nResolve the underlying ${q.cause} issue, then run \`${invokedAs} quarantine clear\`.`));
+        process.exitCode = 1;
+    }));
+    quarantineCmd
+        .command("clear")
+        .description("Clear quarantine and allow the runner to resume claiming tasks.")
+        .action(guard(async () => {
+        await clearQuarantine();
+        console.log(chalk.green("✓ Quarantine cleared. Runner will resume on next task assignment."));
+    }));
+    // TURN-LANE: chat-circuit management. The runner opens the chat circuit
+    // automatically when a `claude_exit_1`-class fault surfaces while serving a
+    // chat turn — benching ONLY the chat lane (code/review keep running). An
+    // operator resolves the credential/host issue then clears it to resume chat.
+    const chatCircuitCmd = program
+        .command("chat-circuit")
+        .description("Inspect or clear the chat-capability circuit breaker (chat lane only).");
+    chatCircuitCmd
+        .command("status")
+        .description("Show chat circuit state.")
+        .action(guard(async () => {
+        const c = await getChatCircuit();
+        if (!c) {
+            console.log("Chat circuit is closed (chat lane serving).");
+            return;
+        }
+        console.log(chalk.red.bold(`CHAT CIRCUIT OPEN (${c.cause})`));
+        console.log(`  Detail:        ${c.detail}`);
+        console.log(`  Turn:          ${c.turnId}`);
+        console.log(`  Conversation:  ${c.conversationId}`);
+        console.log(`  Since:         ${c.trippedAt}`);
+        console.log(chalk.gray(`\nResolve the underlying ${c.cause} issue, then run \`${invokedAs} chat-circuit clear\`. ` +
+            `Code/review lanes are unaffected.`));
+        process.exitCode = 1;
+    }));
+    chatCircuitCmd
+        .command("clear")
+        .description("Close the chat circuit and allow the runner to resume claiming chat turns.")
+        .action(guard(async () => {
+        await clearChatCircuit();
+        console.log(chalk.green("✓ Chat circuit closed. Runner will resume claiming chat turns."));
+    }));
+    // The git pre-commit hook the runner installs into a task worktree (see
+    // commit-guard.ts) re-invokes this hidden subcommand. It scans the STAGED text
+    // files and exits non-zero (with an actionable message on stderr) when a NUL
+    // byte / invalid UTF-8 / binary-blob-where-text is found, so git aborts the
+    // commit and the agent fixes it in-session. Hidden — it is a hook entry point,
+    // not an operator command.
+    program
+        .command("_precommit-guard", { hidden: true })
+        .description("Internal: commit-time mechanical guard (pre-commit hook entry).")
+        .action(async () => {
+        try {
+            const result = await runCommitGuardHook();
+            if (!result.ok) {
+                console.error(result.message);
+                process.exitCode = 1;
+            }
+        }
+        catch (err) {
+            // Fail OPEN on an internal error: a guard bug must never wedge the agent's
+            // ability to commit. The pre-PR gate (prepr-gate.ts) is the backstop.
+            console.error(chalk.yellow(`commit-guard skipped (internal error): ${err.message}`));
+        }
+    });
+    program
+        .command("version")
+        .description("Print CLI + protocol versions.")
+        .action(() => {
+        const label = Math.max(invokedAs.length, "protocol".length);
+        console.log(`${invokedAs.padEnd(label)} ${PACKAGE_VERSION}`);
+        console.log(`${"protocol".padEnd(label)} ${PROTOCOL_VERSION}`);
+    });
+    return program;
+}
+/**
+ * True when `moduleUrl` is the process entry point — NOT when it is imported by
+ * a test. realpath resolves the npm bin symlink to the built file so the compare
+ * holds for a globally-installed CLI.
+ */
+export function isMainModule(moduleUrl) {
+    const entry = process.argv[1];
+    if (!entry)
+        return false;
+    try {
+        return realpathSync(entry) === realpathSync(fileURLToPath(moduleUrl));
+    }
+    catch {
+        return false;
+    }
+}
+/** Parse argv and turn a thrown error into a red line + exit 1. */
+export function runProgram(program) {
+    program.parseAsync(process.argv).catch((err) => {
+        console.error(chalk.red(`✗ ${err.message}`));
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=program.js.map

package/dist/program.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"program.js","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAoB,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAwB,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGnD,mFAAmF;AACnF,SAAS,KAAK,CAAC,EAA0B;IACvC,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAC,EAA0B;IAC7C,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;QACtB,MAAM,qBAAqB,EAAE,CAAC;QAC9B,MAAM,EAAE,EAAE,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAOD,MAAM,UAAU,YAAY,CAAC,UAA+B,EAAE;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC;IACpD,MAAM,OAAO,GAAG,SAAS,KAAK,KAAK,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,SAAS,CAAC;SACf,WAAW,CACV,OAAO;QACL,CAAC,CAAC,yFAAyF;QAC3F,CAAC,CAAC,mHAAmH,CACxH;SACA,OAAO,CAAC,GAAG,eAAe,eAAe,gBAAgB,GAAG,CAAC,CAAC;IAEjE,6EAA6E;IAC7E,4EAA4E;IAC5E,yEAAyE;IACzE,kEAAkE;IAClE,MAAM,kBAAkB,GAAG,CAAC,MAAe,EAAE,KAAyB,EAAE,EAAE;QACxE,MAAM;aACH,OAAO,CAAC,OAAO,CAAC;aAChB,WAAW,CAAC,sEAAsE,CAAC;aACnF,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC3C,MAAM;aACH,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;aACrB,WAAW,CAAC,yCAAyC,CAAC;aACtD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM;aACH,OAAO,CAAC,QAAQ,CAAC;aACjB,WAAW,CAAC,mEAAmE,CAAC;aAChF,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,sDAAsD,CAAC,CAAC;IACvE,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAElD,6EAA6E;IAC7E,MAAM,mBAAmB,GAAG,CAAC,MAAe,EAAE,EAAE;QAC9C,MAAM;aACH,OAAO,CAAC,OAAO,CAAC;aAChB,WAAW,CAAC,0DAA0D,CAAC;aACvE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM;aACH,OAAO,CAAC,QAAQ,CAAC;aACjB,WAAW,CAAC,uDAAuD,CAAC;aACpE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,mBAAmB,CACjB,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,wDAAwD,CAAC,CACzE,CAAC;IAEF,IAAI,OAAO,EAAE,CAAC;QACZ,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,6EAA6E;IAC7E,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,8CAA8C,CAAC,CAAC;IAE/D,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,0CAA0C,CAAC;SACvD,MAAM,CAAC,mBAAmB,EAAE,+CAA+C,CAAC;SAC5E,MAAM,CAAC,eAAe,EAAE,wCAAwC,CAAC;SACjE,MAAM,CAAC,aAAa,EAAE,oCAAoC,CAAC;SAC3D,MAAM,CAAC,QAAQ,EAAE,mCAAmC,CAAC;SACrD,MAAM,CAAC,CAAC,IAAqB,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IAEjF,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,wBAAwB,CAAC;SACrC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,QAAQ,EAAE,kCAAkC,CAAC;SACpD,MAAM,CAAC,CAAC,EAAU,EAAE,IAAwB,EAAE,EAAE,CAC/C,WAAW,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,EAAE,CAC/C,CAAC;IAEJ,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,mEAAmE,CAAC;SAChF,QAAQ,CAAC,cAAc,EAAE,gDAAgD,CAAC;SAC1E,MAAM,CAAC,qBAAqB,EAAE,oCAAoC,CAAC;SACnE,MAAM,CAAC,QAAQ,EAAE,gDAAgD,CAAC;SAClE,MAAM,CAAC,CAAC,KAAe,EAAE,IAAiB,EAAE,EAAE,CAC7C,WAAW,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,EAAE,CACpD,CAAC;IAEJ,6EAA6E;IAC7E,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,0DAA0D,CAAC;SACvE,MAAM,CACL,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,8DAA8D;QAC9D,kEAAkE;QAClE,kCAAkC;QAClC,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,YAAY,EAAE,CAAC;QACrB,8DAA8D;QAC9D,MAAM,IAAI,OAAO,CAAO,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CACH,CAAC;IAEJ,6EAA6E;IAC7E,6EAA6E;IAC7E,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,YAAY,GAAG,OAAO;SACzB,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,0EAA0E,CAAC;SACvF,MAAM,CACL,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChC,kEAAkE;QAClE,MAAM,IAAI,OAAO,CAAO,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CACH,CAAC;IAEJ,YAAY;SACT,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,0DAA0D,CAAC;SACvE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC;IAEjD,YAAY;SACT,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,yDAAyD,CAAC;SACtE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;IAElD,YAAY;SACT,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,mCAAmC,CAAC;SAChD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC;IAEpD,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,gCAAgC;IAChC,OAAO;SACJ,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,qEAAqE,CAAC;SAClF,QAAQ,CAAC,SAAS,EAAE,mEAAmE,CAAC;SACxF,MAAM,CAAC,OAAO,EAAE,oEAAoE,CAAC;SACrF,MAAM,CAAC,iBAAiB,EAAE,qCAAqC,CAAC;SAChE,MAAM,CAAC,CAAC,KAAyB,EAAE,IAAwC,EAAE,EAAE,CAC9E,KAAK,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAChF,CAAC;IAEJ,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,2DAA2D,CAAC;SACxE,MAAM,CACL,UAAU,EACV,uFAAuF,CACxF;SACA,MAAM,CAAC,KAAK,EAAE,IAA0B,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEL,yEAAyE;IACzE,+EAA+E;IAC/E,gFAAgF;IAChF,gFAAgF;IAChF,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CACV,gFAAgF,CACjF;SACA,cAAc,CAAC,aAAa,EAAE,gDAAgD,CAAC;SAC/E,cAAc,CAAC,mBAAmB,EAAE,uDAAuD,CAAC;SAC5F,MAAM,CAAC,kBAAkB,EAAE,oDAAoD,CAAC;SAChF,MAAM,CAAC,CAAC,IAA4D,EAAE,EAAE,CACvE,KAAK,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CACpC,CAAC;IAEJ,6EAA6E;IAC7E,+EAA+E;IAC/E,8DAA8D;IAC9D,MAAM,aAAa,GAAG,OAAO;SAC1B,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,+CAA+C,CAAC,CAAC;IAEhE,aAAa;SACV,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,wBAAwB,CAAC;SACrC,MAAM,CACL,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,CAAC,GAAG,MAAM,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5C,iEAAiE;QACjE,qEAAqE;QACrE,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,WAAW,oCAAoC,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CACR,4BAA4B,CAAC,CAAC,KAAK,sBAAsB,SAAS,sBAAsB,CACzF,CACF,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CACH,CAAC;IAEJ,aAAa;SACV,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,iEAAiE,CAAC;SAC9E,MAAM,CACL,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,eAAe,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CAAC,mEAAmE,CAAC,CACjF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEJ,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,MAAM,cAAc,GAAG,OAAO;SAC3B,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,wEAAwE,CAAC,CAAC;IAEzF,cAAc;SACX,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,0BAA0B,CAAC;SACvC,MAAM,CACL,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,CAAC,GAAG,MAAM,cAAc,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CACR,4BAA4B,CAAC,CAAC,KAAK,sBAAsB,SAAS,yBAAyB;YACzF,mCAAmC,CACtC,CACF,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CACH,CAAC;IAEJ,cAAc;SACX,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,4EAA4E,CAAC;SACzF,MAAM,CACL,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,gBAAgB,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAC9E,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEJ,wEAAwE;IACxE,+EAA+E;IAC/E,6EAA6E;IAC7E,4EAA4E;IAC5E,+EAA+E;IAC/E,2BAA2B;IAC3B,OAAO;SACJ,OAAO,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SAC7C,WAAW,CAAC,iEAAiE,CAAC;SAC9E,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2EAA2E;YAC3E,sEAAsE;YACtE,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,MAAM,CAAC,0CAA2C,GAAa,CAAC,OAAO,EAAE,CAAC,CACjF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,gCAAgC,CAAC;SAC7C,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,gBAAgB,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEL,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,UAAU,CAAC,OAAgB;IACzC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/review-chunking.d.ts

@@ -0,0 +1,101 @@
+/**
+ * REVIEWER-DIFF-CAP — make a large PR REVIEWABLE instead of unreviewable.
+ *
+ * MEASURED FAULT (PR #1815, 140,456 chars / 13 files against a 60,000-char cap):
+ * the runner-local reviewer truncated the diff, then spent three review cycles
+ * turning that truncation into code verdicts —
+ *   1. an advisory hold (infra),
+ *   2. a reject citing files "not present in the reviewable diff",
+ *   3. a reject stating "more than half the PR is not visible and cannot be
+ *      verified".
+ * Zero defects were ever demonstrated, the PR deadlocked mergeable, and the
+ * rework loop it triggered could never succeed — reworking code does not shrink
+ * a diff. A reviewer must never convert its own tooling limitation into a code
+ * verdict.
+ *
+ * This module is the pure half of the fix. It provides:
+ *
+ *  1. `planReviewChunks` — split an over-cap diff into whole-file chunks that
+ *     each fit under the cap, so EVERY file is actually read by some pass. The
+ *     split is BYTE-EXACT: `chunks.map(c => c.text).join("") === diff`, which is
+ *     what makes "nothing was withheld" a provable property rather than a claim.
+ *  2. The ABSENCE-CLAIM guard — patterns + partitioner that recognise a reason
+ *     asserting content is missing/invisible/unverifiable. The runner had no such
+ *     guard (the server path has had one since the #1665/#1679/#1690 wave); that
+ *     absence is why #1815's two rejects stood.
+ *
+ * The absence-claim half is a MIRROR of `api/_lib/reviewer/absence-claims.ts` —
+ * the runner is a standalone published package and cannot import from `api/_lib`.
+ * // keep in sync with api/_lib/reviewer/absence-claims.ts
+ *
+ * PURE. No I/O, no clock, no client. The wiring lives in `reviewer.ts`.
+ */
+/** One reviewable slice of an over-cap diff. `text` is a verbatim byte range. */
+export interface ReviewChunk {
+    /** 1-based position in the chunk sequence. */
+    index: number;
+    /** Total chunks in the sequence (same value on every chunk). */
+    total: number;
+    /** File paths whose content this chunk carries (whole or partial). */
+    paths: string[];
+    /** The verbatim diff bytes this chunk carries. */
+    text: string;
+    /**
+     * True when this chunk carries only PART of a single file that exceeded the
+     * per-chunk cap on its own. The remaining parts ride the adjacent chunks, so
+     * the file is still fully covered ACROSS the sequence — never withheld.
+     */
+    partial: boolean;
+}
+/**
+ * Hard ceiling on chunk count. A diff needing more passes than this is not a
+ * review problem the runner can solve by spending more subscription budget — it
+ * is reported as an INFRA outcome by the caller (never a reject), so the
+ * escalation path owns it. 8 chunks × 60,000 chars ≈ 480 KB of diff.
+ */
+export declare const MAX_REVIEW_CHUNKS = 8;
+/**
+ * Split `diff` into chunks that each fit within `maxChars`, cutting at whole-file
+ * boundaries wherever possible.
+ *
+ * INVARIANTS (all asserted by the wave's tests):
+ *  - byte-exact: `chunks.map(c => c.text).join("") === diff`;
+ *  - every chunk's `text.length <= maxChars` (except the degenerate `maxChars <= 0`);
+ *  - a diff at or under the cap yields exactly ONE chunk holding the whole diff,
+ *    so the caller's single-pass path stays byte-identical to before.
+ *
+ * A file larger than `maxChars` on its own is sliced into contiguous parts rather
+ * than dropped — a partly-shown file across two passes still gets fully read,
+ * which a truncating cap never achieved.
+ */
+export declare function planReviewChunks(diff: string, maxChars: number): ReviewChunk[];
+export declare const ABSENCE_CLAIM_PATTERNS: RegExp[];
+/**
+ * True when one reviewer reason asserts that content is ABSENT from — or
+ * unverifiable within — what the reviewer was shown, rather than describing a
+ * defect in what it read. Only meaningful when coverage was incomplete; callers
+ * MUST gate on that before acting on it.
+ */
+export declare function isAbsenceClaimReason(reason: string | null | undefined): boolean;
+/** Sub-marker identifying this class inside the escalation headline. */
+export declare const TRUNCATED_ABSENCE_MARKER = "truncated-diff absence claim";
+/**
+ * Headline stamped on a verdict the absence guard escalates. Opens with RR-3's
+ * `reviewer tooling failure:` marker so every existing consumer
+ * (`isToolingFailureReviewerOutcome`, the budget exemption in
+ * `countReviewerErrors`, the neutral `acc/review` publish) routes it as INFRA.
+ *
+ * Phrased to match none of the patterns above (asserted by the wave's test), so
+ * a re-scan of a stored row can never re-classify our own headline as a claim.
+ */
+export declare const REVIEWER_ABSENCE_ESCALATION_REASON: string;
+/** Prefix marking a discarded claim in the audit trail (never re-emitted as a finding). */
+export declare const DISCARDED_CLAIM_PREFIX = "discarded (unsound \u2014 a read-coverage claim, not a defect): ";
+/** True when a completed review row is an absence-guard escalation. */
+export declare function isAbsenceEscalatedOutcome(decision: string | null | undefined, reasons: string[] | null | undefined): boolean;
+/** Split a reason list into the substantive findings and the absence claims. */
+export declare function partitionAbsenceClaims(reasons: string[] | null | undefined): {
+    substantive: string[];
+    absence: string[];
+};
+//# sourceMappingURL=review-chunking.d.ts.map

package/dist/runtime/review-chunking.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-chunking.d.ts","sourceRoot":"","sources":["../../src/runtime/review-chunking.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,IAAI,CAAC;AAEnC;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,WAAW,EAAE,CAoDf;AAiBD,eAAO,MAAM,sBAAsB,EAAE,MAAM,EAS1C,CAAC;AAgBF;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAK/E;AAED,wEAAwE;AACxE,eAAO,MAAM,wBAAwB,iCAAiC,CAAC;AAEvE;;;;;;;;GAQG;AACH,eAAO,MAAM,kCAAkC,QAM4B,CAAC;AAE5E,2FAA2F;AAC3F,eAAO,MAAM,sBAAsB,qEAAgE,CAAC;AAEpG,uEAAuE;AACvE,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACnC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GACnC,OAAO,CAKT;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAAG;IAC5E,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAQA"}