@valescoagency/runway 0.2.0 → 0.4.0

package/prompts/implement.md

@@ -6,6 +6,8 @@ You are an autonomous coding agent working on a single Linear issue.
 
 {{ISSUE_DESCRIPTION}}
 
+{{PREVIOUS_ITERATIONS}}
+
 # Repository context
 
 You are operating inside a clean checkout of the target repository on a
@@ -29,9 +31,51 @@ fresh branch named `agent/{{ISSUE_IDENTIFIER}}`. Branch off `main`.
 - If the issue is ambiguous and you can't make a reasonable judgment
   call, stop and explain what's missing in your final message — runway
   will route to a human.
-- Never modify `.github/workflows/**`, `.env*`, `*.pem`, `*.key`,
-  `pnpm-lock.yaml` (unless the task is a dep bump), or `.sandcastle/**`.
+{{POLICY_FORBIDDEN_BULLET}}
 
 # Stop conditions
 
 When all five "done" criteria pass, stop. Don't keep polishing.
+
+# Termination contract — REQUIRED
+
+End **every** response with exactly one of these markers, on its own
+line, as the **last non-empty line** of your message. Nothing after it.
+
+- `IMPL: DONE` — all five "done" criteria are met. The reviewer pass
+  will run next; no further iterations are needed.
+- `IMPL: BLOCKED — <one-line reason>` — you cannot proceed without
+  human input (issue is ambiguous, requires a decision outside the
+  agent's purview, conflicts with a working-style constraint, hits a
+  permission wall, etc.). Runway will route the issue to a human with
+  your reason attached and will not run the reviewer pass.
+- `IMPL: CONTINUE` — you made progress but the work isn't done yet.
+  Runway will run another iteration so you can pick up where you left
+  off.
+
+Examples:
+
+```
+…all tests pass, typecheck clean, lint clean. Commit pushed.
+
+IMPL: DONE
+```
+
+```
+…the issue's acceptance criteria require modifying
+`.github/workflows/release.yml`, which the working-style policy
+forbids. Cannot proceed.
+
+IMPL: BLOCKED — issue requires CI workflow changes that working-style policy forbids
+```
+
+```
+…added the migration and the RLS policy. Tests for the policy
+helper still need to be written next iteration.
+
+IMPL: CONTINUE
+```
+
+The marker is parsed mechanically by runway. A missing or malformed
+marker is treated as `CONTINUE` for back-compat, but **always** emit
+one explicitly — silent completions waste budget on re-exploration.

package/templates/.env.schema.target-repo

@@ -18,13 +18,20 @@
 # `op://<account>/<vault>/<item>/<field>`. For API_CREDENTIAL items
 # (the natural category for API keys), the field is `credential`.
 #
+# Note on Claude Code auth: ANTHROPIC_API_KEY is a pay-per-token API
+# key (sk-ant-api03-…). CLAUDE_CODE_OAUTH_TOKEN is a Pro/Max
+# subscription token from `claude setup-token` (sk-ant-oat01-…). They
+# are NOT interchangeable. Runway init writes whichever the user
+# selected with --auth-mode; see runway's README "Claude Code auth"
+# section for details.
+#
 # To add another secret, copy one of the two live entries below. Do
 # NOT leave a commented-out example block here: varlock parses any
 # `# @decorator` line as a real decorator, and a decorator with no
 # attached config line fails validation ("detached comment block").
 
 # @sensitive @required
-ANTHROPIC_API_KEY=exec('op read "op://{{OP_VAULT}}/{{ANTHROPIC_ITEM}}/credential"')
+{{ANTHROPIC_ENV_VAR}}=exec('op read "op://{{OP_VAULT}}/{{ANTHROPIC_ITEM}}/credential"')
 
 # @sensitive @required
 GH_TOKEN=exec('op read "op://{{OP_VAULT}}/{{GH_TOKEN_ITEM}}/credential"')

package/templates/Dockerfile.claude-code.base

@@ -39,6 +39,30 @@ RUN if ! getent group $AGENT_GID >/dev/null; then \
       groupmod -g $AGENT_GID node; \
     fi \
  && usermod -u $AGENT_UID -g $AGENT_GID -d /home/agent -m -l agent node
+
+# VA-351: bake the container env up front so agents don't manually
+# work around host-path leaks, missing pnpm, or unset HOME on every
+# iteration. Without these, every agent run repeats the same
+# corepack/TURBO_CACHE_DIR/HOME setup commands — see VA-312's run log
+# for the receipts.
+ENV HOME=/home/agent
+ENV XDG_CACHE_HOME=/home/agent/.cache
+ENV TURBO_CACHE_DIR=/tmp/turbo-cache
+ENV npm_config_cache=/home/agent/.cache/npm
+
+# Pre-create cache dirs with agent ownership so the first pnpm/turbo
+# run doesn't have to chown them. Both are inside paths the agent owns
+# anyway; this just makes them exist.
+RUN mkdir -p /home/agent/.cache /home/agent/.cache/npm /tmp/turbo-cache \
+ && chown -R $AGENT_UID:$AGENT_GID /home/agent/.cache /tmp/turbo-cache
+
+# Bake pnpm via corepack at build time so `pnpm` is on PATH inside the
+# container before any agent command runs. Pin a default; target repos
+# can override at runtime via `packageManager` in package.json +
+# `corepack use`.
+RUN corepack enable \
+ && corepack prepare pnpm@10.0.0 --activate
+
 USER ${AGENT_UID}:${AGENT_GID}
 
 # Install Claude Code CLI