@tokenfactory/acc-runner 0.44.8 → 0.44.10

package/dist/staging-migrations/profiles.js

@@ -0,0 +1,31 @@
+const PRODUCTION_REF = "ctknjrtevjrzwpuojghx";
+function projectRef(value) {
+    const url = new URL(value);
+    const match = `${url.hostname}${url.pathname}`.match(/\b([a-z0-9]{20})\b/);
+    if (!match)
+        throw new Error("credential_profile_project_ref_missing");
+    return match[1];
+}
+export function configuredStagingMigrationProfiles(env = process.env) {
+    const profiles = [];
+    for (const [name, value] of Object.entries(env)) {
+        const match = /^ACC_DB_PROFILE_([A-Z0-9_]+)_URL$/.exec(name);
+        if (!match || !value)
+            continue;
+        try {
+            if (projectRef(value) !== PRODUCTION_REF)
+                profiles.push(match[1].toLowerCase());
+        }
+        catch { /* malformed credentials are never advertised */ }
+    }
+    return profiles.sort();
+}
+export function stagingMigrationCaps(env = process.env) {
+    const profiles = configuredStagingMigrationProfiles(env);
+    return profiles.length === 0 ? {} : { staging_migrations: true, staging_migration_profiles: profiles };
+}
+/** Explicit opt-in: credentials alone never make a runner claim migrations. */
+export function stagingMigrationServiceEnabled(env = process.env) {
+    return env.ACC_STAGING_MIGRATION_SERVICE === "1" && configuredStagingMigrationProfiles(env).length > 0;
+}
+//# sourceMappingURL=profiles.js.map

package/dist/staging-migrations/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/staging-migrations/profiles.ts"],"names":[],"mappings":"AAAA,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAE9C,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK;YAAE,SAAS;QAC/B,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,cAAc;gBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC,CAAC,gDAAgD,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACvE,MAAM,QAAQ,GAAG,kCAAkC,CAAC,GAAG,CAAC,CAAC;IACzD,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,EAAE,CAAC;AACzG,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,8BAA8B,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjF,OAAO,GAAG,CAAC,6BAA6B,KAAK,GAAG,IAAI,kCAAkC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACzG,CAAC"}

package/dist/staging-migrations/service.d.ts

@@ -0,0 +1,40 @@
+import type { RunnerConfig } from "../config.js";
+import type { RunnerSupabaseClient } from "../supabase.js";
+import { type StagingTarget } from "./executor.js";
+export { configuredStagingMigrationProfiles, stagingMigrationCaps, stagingMigrationServiceEnabled, } from "./profiles.js";
+export interface MigrationServiceLogger {
+    info(message: string): void;
+    error(message: string): void;
+}
+export interface StagingMigrationServiceOptions {
+    pollMs?: number;
+    batchLimit?: number;
+    env?: NodeJS.ProcessEnv;
+    logger?: MigrationServiceLogger;
+    resolveRepo?: (repo: string) => string;
+    targetFactory?: (profile: string) => StagingTarget & {
+        connect(): Promise<void>;
+        close(): Promise<void>;
+    };
+    verifyCommit?: (root: string, sha: string) => Promise<void>;
+}
+export declare function verifyExactCheckout(root: string, expected: string): Promise<void>;
+export declare class StagingMigrationService {
+    private readonly sb;
+    private readonly cfg;
+    private readonly runnerId;
+    private readonly options;
+    private timer;
+    private active;
+    private stopping;
+    private readonly pollMs;
+    private readonly batchLimit;
+    private readonly logger;
+    private readonly env;
+    constructor(sb: RunnerSupabaseClient, cfg: RunnerConfig, runnerId: string, options?: StagingMigrationServiceOptions);
+    start(): void;
+    stop(): Promise<void>;
+    pollOnce(): Promise<void>;
+    private claimAndRun;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/staging-migrations/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/staging-migrations/service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,kCAAkC,EAClC,oBAAoB,EACpB,8BAA8B,GAC/B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,8BAA8B;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,aAAa,GAAG;QAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IAC1G,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAWD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIvF;AAED,qBAAa,uBAAuB;IAUhC,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAZ1B,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAoB;gBAGrB,EAAE,EAAE,oBAAoB,EACxB,GAAG,EAAE,YAAY,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,8BAAmC;IAQ/D,KAAK,IAAI,IAAI;IAQP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAarB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;YAkBjB,WAAW;CAgE1B"}

package/dist/staging-migrations/service.js

@@ -0,0 +1,157 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { resolveMachineRepoPath } from "../machine-console/index.js";
+import { executeApprovedStagingPlan, } from "./executor.js";
+import { PgStagingTarget } from "./pg-target.js";
+import { isCommitSha } from "../commit-sha.js";
+export { configuredStagingMigrationProfiles, stagingMigrationCaps, stagingMigrationServiceEnabled, } from "./profiles.js";
+const execFileAsync = promisify(execFile);
+function safeCode(error) {
+    const raw = error instanceof Error ? error.message : "unknown_error";
+    return raw.replace(/postgres(?:ql)?:\/\/[^\s]+/gi, "[REDACTED_DB_URL]")
+        .replace(/(password|token|secret)=?[^\s]*/gi, "$1=[REDACTED]")
+        .replace(/[^a-zA-Z0-9_.:[\] -]/g, "_").slice(0, 240);
+}
+export async function verifyExactCheckout(root, expected) {
+    if (!isCommitSha(expected))
+        throw new Error("migration_commit_invalid");
+    const { stdout } = await execFileAsync("git", ["rev-parse", "HEAD"], { cwd: root });
+    if (stdout.trim().toLowerCase() !== expected.toLowerCase())
+        throw new Error("migration_commit_mismatch");
+}
+export class StagingMigrationService {
+    sb;
+    cfg;
+    runnerId;
+    options;
+    timer = null;
+    active = false;
+    stopping = false;
+    pollMs;
+    batchLimit;
+    logger;
+    env;
+    constructor(sb, cfg, runnerId, options = {}) {
+        this.sb = sb;
+        this.cfg = cfg;
+        this.runnerId = runnerId;
+        this.options = options;
+        this.pollMs = Math.max(2_000, Math.min(options.pollMs ?? 15_000, 300_000));
+        this.batchLimit = Math.max(1, Math.min(options.batchLimit ?? 3, 10));
+        this.env = options.env ?? process.env;
+        this.logger = options.logger ?? console;
+    }
+    start() {
+        if (this.timer)
+            return;
+        this.stopping = false;
+        void this.pollOnce();
+        this.timer = setInterval(() => void this.pollOnce(), this.pollMs);
+        this.timer.unref?.();
+    }
+    async stop() {
+        this.stopping = true;
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+        const deadline = Date.now() + 30_000;
+        while (this.active && Date.now() < deadline) {
+            await new Promise((resolve) => setTimeout(resolve, 25));
+        }
+        if (this.active) {
+            this.logger.error("[acc-runner] staging migration shutdown_wait_exceeded; server recovery retains the claim");
+        }
+    }
+    async pollOnce() {
+        if (this.active || this.stopping)
+            return;
+        this.active = true;
+        try {
+            const query = await this.sb.from("staging_migration_plans").select("id")
+                .eq("status", "approved").order("created_at", { ascending: true }).limit(this.batchLimit);
+            if (query.error)
+                throw new Error(`migration_poll_failed:${query.error.message}`);
+            for (const row of (query.data ?? [])) {
+                if (this.stopping)
+                    break;
+                await this.claimAndRun(row.id);
+            }
+        }
+        catch (error) {
+            this.logger.error(`[acc-runner] staging migration service: ${safeCode(error)}`);
+        }
+        finally {
+            this.active = false;
+        }
+    }
+    async claimAndRun(planId) {
+        const claimed = await this.sb.rpc("claim_staging_migration_plan", { p_plan_id: planId });
+        if (claimed.error) {
+            // Another runner winning a claim is routine, not a service failure.
+            this.logger.info(`[acc-runner] staging migration claim skipped: ${safeCode(claimed.error)}`);
+            return;
+        }
+        const payload = claimed.data;
+        if (!payload.plan || !payload.credential_profile_ref || !Array.isArray(payload.items))
+            throw new Error("invalid_migration_claim_receipt");
+        const plan = { ...payload.plan, credential_profile_ref: payload.credential_profile_ref, items: payload.items };
+        const receipts = {
+            item: async (ordinal, status, errorCode) => {
+                const result = await this.sb.rpc("record_staging_migration_item", {
+                    p_plan_id: plan.id, p_ordinal: ordinal, p_status: status,
+                    p_error_code: errorCode ? safeCode(errorCode) : null,
+                });
+                if (result.error)
+                    throw new Error(`migration_item_receipt_failed:${result.error.message}`);
+            },
+            complete: async (succeeded, failureCode) => {
+                const result = await this.sb.rpc("complete_staging_migration_plan", {
+                    p_plan_id: plan.id, p_succeeded: succeeded,
+                    p_failure_code: failureCode ? safeCode(failureCode) : null,
+                });
+                if (result.error)
+                    throw new Error(`migration_completion_receipt_failed:${result.error.message}`);
+            },
+        };
+        const status = async () => {
+            const result = await this.sb.from("staging_migration_plans").select("status")
+                .eq("id", plan.id).eq("claimed_by_runner", this.runnerId).maybeSingle();
+            if (result.error)
+                throw new Error(`migration_status_failed:${result.error.message}`);
+            return result.data?.status ?? null;
+        };
+        let target = null;
+        let executorStarted = false;
+        try {
+            const repoRoot = this.options.resolveRepo?.(plan.repo) ?? resolveMachineRepoPath(this.cfg, plan.repo);
+            const verify = this.options.verifyCommit ?? verifyExactCheckout;
+            await verify(repoRoot, plan.commit_sha);
+            target = this.options.targetFactory?.(plan.credential_profile_ref) ?? new PgStagingTarget(plan.credential_profile_ref, this.env);
+            await target.connect();
+            executorStarted = true;
+            await executeApprovedStagingPlan(plan, repoRoot, target, receipts, {
+                cancelled: async () => this.stopping || (await status()) === "cancelled",
+                heartbeat: async (event) => {
+                    await this.sb.rpc("log_activity", {
+                        p_verb: "staging_migration.heartbeat", p_target_id: plan.id,
+                        p_target_type: "staging_migration_plan", p_payload: { event, runner_id: this.runnerId },
+                    });
+                },
+            });
+            this.logger.info(`[acc-runner] staging migration plan ${plan.id} succeeded`);
+        }
+        catch (error) {
+            // The executor owns all terminal receipts after it starts. Failures while
+            // resolving a checkout/profile or opening Postgres would otherwise leave
+            // a claimed plan stuck in running forever.
+            if (!executorStarted) {
+                await receipts.complete(false, safeCode(error)).catch(() => undefined);
+            }
+            this.logger.error(`[acc-runner] staging migration plan ${plan.id}: ${safeCode(error)}`);
+        }
+        finally {
+            await target?.close().catch(() => undefined);
+        }
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/staging-migrations/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/staging-migrations/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,OAAO,EACL,0BAA0B,GAI3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,kCAAkC,EAClC,oBAAoB,EACpB,8BAA8B,GAC/B,MAAM,eAAe,CAAC;AAEvB,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAmB1C,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IACrE,OAAO,GAAG,CAAC,OAAO,CAAC,8BAA8B,EAAE,mBAAmB,CAAC;SACpE,OAAO,CAAC,mCAAmC,EAAE,eAAe,CAAC;SAC7D,OAAO,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,QAAgB;IACtE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACxE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,OAAO,uBAAuB;IAUf;IACA;IACA;IACA;IAZX,KAAK,GAA0B,IAAI,CAAC;IACpC,MAAM,GAAG,KAAK,CAAC;IACf,QAAQ,GAAG,KAAK,CAAC;IACR,MAAM,CAAS;IACf,UAAU,CAAS;IACnB,MAAM,CAAyB;IAC/B,GAAG,CAAoB;IAExC,YACmB,EAAwB,EACxB,GAAiB,EACjB,QAAgB,EAChB,UAA0C,EAAE;QAH5C,OAAE,GAAF,EAAE,CAAsB;QACxB,QAAG,GAAH,GAAG,CAAc;QACjB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAAqC;QAE7D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC;IAC1C,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;QACrC,OAAO,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0FAA0F,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;iBACrE,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5F,IAAI,KAAK,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACjF,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAA0B,EAAE,CAAC;gBAC9D,IAAI,IAAI,CAAC,QAAQ;oBAAE,MAAM;gBACzB,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,MAAc;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACzF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,oEAAoE;YACpE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAoB,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;YACnF,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAsC,CAAC;QACnJ,MAAM,QAAQ,GAAyB;YACrC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;gBACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,+BAA+B,EAAE;oBAChE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM;oBACxD,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;iBACrD,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;gBACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,iCAAiC,EAAE;oBAClE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS;oBAC1C,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;iBAC3D,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnG,CAAC;SACF,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,IAA4B,EAAE;YAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;iBAC1E,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1E,IAAI,MAAM,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACrF,OAAQ,MAAM,CAAC,IAAmC,EAAE,MAAM,IAAI,IAAI,CAAC;QACrE,CAAC,CAAC;QACF,IAAI,MAAM,GAAkF,IAAI,CAAC;QACjG,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACtG,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,mBAAmB,CAAC;YAChE,MAAM,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YACjI,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,eAAe,GAAG,IAAI,CAAC;YACvB,MAAM,0BAA0B,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;gBACjE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,MAAM,EAAE,CAAC,KAAK,WAAW;gBACxE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;oBACzB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE;wBAChC,MAAM,EAAE,6BAA6B,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE;wBAC3D,aAAa,EAAE,wBAAwB,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE;qBACxF,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0EAA0E;YAC1E,yEAAyE;YACzE,2CAA2C;YAC3C,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;CACF"}

package/dist/supervisor.d.ts

@@ -0,0 +1,15 @@
+/** Unit basename for the unnamed instance. FROZEN — pre-existing installs use it. */
+export declare const SYSTEMD_UNIT_BASE: "acc-runner";
+/** Directory holding systemd --user units for the invoking operator. */
+export declare function systemdUserUnitDir(home: string): string;
+/**
+ * Unit name for an instance: `acc-runner.service` unnamed, else
+ * `acc-runner-<name>.service`. The name is already constrained to
+ * `[a-z0-9][a-z0-9-]{0,31}` by instance.ts, so it is safe in a unit name.
+ */
+export declare function systemdUnitName(instance: string | null): string;
+/** Absolute path of the unit file the installer writes. */
+export declare function systemdUnitPath(home: string, instance: string | null): string;
+/** Unit name for the instance THIS process resolves (`--instance` / env). */
+export declare function activeSystemdUnitName(env?: NodeJS.ProcessEnv): string;
+//# sourceMappingURL=supervisor.d.ts.map

package/dist/supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../src/supervisor.ts"],"names":[],"mappings":"AAgCA,qFAAqF;AACrF,eAAO,MAAM,iBAAiB,EAAG,YAAqB,CAAC;AAEvD,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAE/D;AAED,2DAA2D;AAC3D,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAE7E;AAED,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAElF"}

package/dist/supervisor.js

@@ -0,0 +1,54 @@
+/**
+ * RUNNER-LINUX-SUPERVISOR-1: where a Linux runner host's `watch` supervisor
+ * lives, and what its unit is called.
+ *
+ * macOS has had a supervised `watch` since v0.12 (install-launchd.sh + the
+ * `launchd agent loaded` doctor check). Linux had the installer
+ * (setup-dedicated-runner-linux.sh, a systemd --user unit with Restart=always)
+ * but NO doctor check — `acc-runner doctor` returned "skipped (non-darwin)" and
+ * stayed green on a host whose supervisor was never installed, never enabled,
+ * or silently dead. A release-critical named instance could be down with every
+ * check passing.
+ *
+ * Two things were missing and both are name-derived, so they live here:
+ *
+ *   - Named instances need their OWN unit. `--instance <name>` already forks
+ *     the keychain slot, cache root and server-side machine string
+ *     (instance.ts), but the installer only ever wrote one `acc-runner.service`
+ *     running a bare `watch`. Two named instances on one host collided on it.
+ *   - The doctor needs to resolve the SAME unit name the installer wrote, from
+ *     the same instance env, or it checks the wrong service.
+ *
+ * Pure and fs-free on purpose: the bash installer renders the unit, this module
+ * only names and locates it, so there is exactly one renderer and no template
+ * to drift. The unit CONTENT contract is pinned by
+ * tests/linux-supervisor.test.ts, which reads the installer's text.
+ *
+ * Unnamed hosts keep the historic `acc-runner.service` byte-for-byte — the
+ * upgrade is a no-op for every runner installed before this shipped.
+ */
+import path from "node:path";
+import { resolveInstance } from "./instance.js";
+/** Unit basename for the unnamed instance. FROZEN — pre-existing installs use it. */
+export const SYSTEMD_UNIT_BASE = "acc-runner";
+/** Directory holding systemd --user units for the invoking operator. */
+export function systemdUserUnitDir(home) {
+    return path.join(home, ".config", "systemd", "user");
+}
+/**
+ * Unit name for an instance: `acc-runner.service` unnamed, else
+ * `acc-runner-<name>.service`. The name is already constrained to
+ * `[a-z0-9][a-z0-9-]{0,31}` by instance.ts, so it is safe in a unit name.
+ */
+export function systemdUnitName(instance) {
+    return instance ? `${SYSTEMD_UNIT_BASE}-${instance}.service` : `${SYSTEMD_UNIT_BASE}.service`;
+}
+/** Absolute path of the unit file the installer writes. */
+export function systemdUnitPath(home, instance) {
+    return path.join(systemdUserUnitDir(home), systemdUnitName(instance));
+}
+/** Unit name for the instance THIS process resolves (`--instance` / env). */
+export function activeSystemdUnitName(env = process.env) {
+    return systemdUnitName(resolveInstance(env));
+}
+//# sourceMappingURL=supervisor.js.map

package/dist/supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../src/supervisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,qFAAqF;AACrF,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAqB,CAAC;AAEvD,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAuB;IACrD,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,iBAAiB,IAAI,QAAQ,UAAU,CAAC,CAAC,CAAC,GAAG,iBAAiB,UAAU,CAAC;AAChG,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,QAAuB;IACnE,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,OAAO,eAAe,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/terminal/http-carrier.d.ts

@@ -0,0 +1,17 @@
+import type { TerminalEphemeralCarrier, TerminalRunnerMessage } from "./transport-contract.js";
+export interface TerminalHttpCarrierOptions {
+    baseUrl: string;
+    accessToken: () => string | Promise<string>;
+    leaseId: string;
+    fetchImpl?: typeof fetch;
+}
+/** One-shot private upload carrier. It retains no frame or credential. */
+export declare class TerminalHttpCarrier implements TerminalEphemeralCarrier {
+    private readonly endpoint;
+    private readonly token;
+    private readonly leaseId;
+    private readonly fetchImpl;
+    constructor(options: TerminalHttpCarrierOptions);
+    publish(message: TerminalRunnerMessage): Promise<void>;
+}
+//# sourceMappingURL=http-carrier.d.ts.map

package/dist/terminal/http-carrier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-carrier.d.ts","sourceRoot":"","sources":["../../src/terminal/http-carrier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAE/F,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,0EAA0E;AAC1E,qBAAa,mBAAoB,YAAW,wBAAwB;IAClE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4C;IAClE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,OAAO,EAAE,0BAA0B;IAYzC,OAAO,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;CAkB7D"}

package/dist/terminal/http-carrier.js

@@ -0,0 +1,39 @@
+/** One-shot private upload carrier. It retains no frame or credential. */
+export class TerminalHttpCarrier {
+    endpoint;
+    token;
+    leaseId;
+    fetchImpl;
+    constructor(options) {
+        const baseUrl = options.baseUrl.trim().replace(/\/+$/, "");
+        if (!baseUrl.startsWith("https://") && !baseUrl.startsWith("http://localhost")) {
+            throw new Error("terminal carrier requires HTTPS");
+        }
+        if (!options.leaseId.trim())
+            throw new Error("terminal carrier requires a lease");
+        this.endpoint = `${baseUrl}/api/terminal/runner-ingest`;
+        this.token = options.accessToken;
+        this.leaseId = options.leaseId;
+        this.fetchImpl = options.fetchImpl ?? fetch;
+    }
+    async publish(message) {
+        const accessToken = (await this.token()).trim();
+        if (!accessToken)
+            throw new Error("terminal carrier requires runner authentication");
+        const response = await this.fetchImpl(this.endpoint, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+                "Content-Type": "application/json",
+                "x-acc-terminal-lease": this.leaseId,
+            },
+            body: JSON.stringify(message),
+            signal: AbortSignal.timeout(15_000),
+        });
+        if (!response.ok) {
+            const body = await response.json().catch(() => ({}));
+            throw new Error(body.error ?? `terminal carrier rejected the frame (${response.status})`);
+        }
+    }
+}
+//# sourceMappingURL=http-carrier.js.map

package/dist/terminal/http-carrier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-carrier.js","sourceRoot":"","sources":["../../src/terminal/http-carrier.ts"],"names":[],"mappings":"AASA,0EAA0E;AAC1E,MAAM,OAAO,mBAAmB;IACb,QAAQ,CAAS;IACjB,KAAK,CAA4C;IACjD,OAAO,CAAS;IAChB,SAAS,CAAe;IAEzC,YAAY,OAAmC;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAClF,IAAI,CAAC,QAAQ,GAAG,GAAG,OAAO,6BAA6B,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA8B;QAC1C,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;gBACtC,cAAc,EAAE,kBAAkB;gBAClC,sBAAsB,EAAE,IAAI,CAAC,OAAO;aACrC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAuB,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,wCAAwC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;CACF"}

package/dist/terminal/pty-adapter.d.ts

@@ -0,0 +1,88 @@
+import type { RunnerConfig } from "../config.js";
+export declare const TERMINAL_RUNNER_ENABLED_ENV = "ACC_RUNNER_INTERACTIVE_TERMINAL";
+export declare const TERMINAL_REDACTION_POLICY_VERSION = "machine-redaction.v1";
+export declare const MAX_TERMINAL_INPUT_BYTES: number;
+export declare const MAX_TERMINAL_OUTPUT_BYTES: number;
+export interface TerminalPtyExit {
+    exitCode: number;
+    signal?: number;
+}
+export interface TerminalPtyProcess {
+    readonly pid: number;
+    onData(listener: (data: string) => void): {
+        dispose(): void;
+    };
+    onExit(listener: (event: TerminalPtyExit) => void): {
+        dispose(): void;
+    };
+    write(data: string): void;
+    resize(cols: number, rows: number): void;
+    kill(signal?: string): void;
+}
+export interface TerminalPtyFactory {
+    spawn(file: string, args: readonly string[], options: {
+        name: string;
+        cwd: string;
+        env: Record<string, string>;
+        cols: number;
+        rows: number;
+    }): TerminalPtyProcess;
+}
+export interface OpenTerminalPtyRequest {
+    terminalSessionId: string;
+    repo: string;
+    cols: number;
+    rows: number;
+}
+export interface TerminalOutputFrame {
+    terminalSessionId: string;
+    outputSeq: number;
+    stream: "stdout";
+    encoding: "base64";
+    data: string;
+    byteLength: number;
+    redactionPolicyVersion: typeof TERMINAL_REDACTION_POLICY_VERSION;
+    redactionApplied: true;
+}
+export interface TerminalInputReceipt {
+    inputId: string;
+    inputSeq: number;
+    runnerReceiptId: string;
+    inputAckCursor: number;
+    status: "accepted";
+}
+export interface TerminalExitOutcome {
+    terminalSessionId: string;
+    exitCode: number;
+    signal?: number;
+    reason: "completed" | "user_terminated" | "failed";
+    finalOutputSeq: number;
+}
+export interface TerminalRunnerSession {
+    readonly terminalSessionId: string;
+    readonly pid: number;
+    readonly closed: Promise<TerminalExitOutcome>;
+    writeInput(inputId: string, inputSeq: number, data: string): TerminalInputReceipt;
+    resize(resizeSeq: number, cols: number, rows: number): boolean;
+    terminate(): Promise<TerminalExitOutcome>;
+}
+export interface OpenTerminalPtyDeps {
+    cfg: RunnerConfig;
+    request: OpenTerminalPtyRequest;
+    onOutput: (frame: TerminalOutputFrame) => void | Promise<void>;
+    factory?: TerminalPtyFactory;
+    env?: NodeJS.ProcessEnv;
+    terminateGraceMs?: number;
+}
+export declare class TerminalRunnerError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export declare function terminalRunnerEnabled(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Allocate one dark, runner-local PTY. This adapter has no polling, RPC, socket,
+ * browser, or product-surface wiring; the explicit environment kill switch must
+ * be on and a future authenticated gateway must supply every call.
+ */
+export declare function openTerminalPty(deps: OpenTerminalPtyDeps): Promise<TerminalRunnerSession>;
+//# sourceMappingURL=pty-adapter.d.ts.map

package/dist/terminal/pty-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pty-adapter.d.ts","sourceRoot":"","sources":["../../src/terminal/pty-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAOjD,eAAO,MAAM,2BAA2B,oCAAoC,CAAC;AAC7E,eAAO,MAAM,iCAAiC,yBAAyB,CAAC;AACxE,eAAO,MAAM,wBAAwB,QAAY,CAAC;AAClD,eAAO,MAAM,yBAAyB,QAAY,CAAC;AAInD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG;QAAE,OAAO,IAAI,IAAI,CAAA;KAAE,CAAC;IAC9D,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,GAAG;QAAE,OAAO,IAAI,IAAI,CAAA;KAAE,CAAC;IACxE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CACH,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,GACA,kBAAkB,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,QAAQ,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB,EAAE,OAAO,iCAAiC,CAAC;IACjE,gBAAgB,EAAE,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,GAAG,iBAAiB,GAAG,QAAQ,CAAC;IACnD,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAAC;IAClF,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/D,SAAS,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,YAAY,CAAC;IAClB,OAAO,EAAE,sBAAsB,CAAC;IAChC,QAAQ,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAInD;AAED,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEnF;AA8ED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA2J/F"}