acdev 1.0.1 → 1.0.3

package/public/index.html

@@ -73,10 +73,7 @@
         <div class="sidebar-divider"></div>
         <div class="model-block">
           <div class="model-label">Model</div>
-          <div class="model-toggle" id="model-toggle" role="group" aria-label="Claude model">
-            <button type="button" class="model-btn active" data-model="claude-sonnet-5">Sonnet 5</button>
-            <button type="button" class="model-btn" data-model="claude-opus-5">Opus 5</button>
-          </div>
+          <div class="model-current" id="model-current" title="Change in Settings → Configuration">—</div>
         </div>
         <div class="repo-meta">
           <div class="repo-name" id="repo-name">—</div>
@@ -304,87 +301,205 @@
         <!-- SETTINGS -->
         <section class="view hidden" id="view-settings" data-view-panel="settings">
           <div class="stack stack-lg max-w-settings">
-            <section>
-              <div class="section-label">Ticket source</div>
-              <p class="settings-lead">
-                Choose where tickets come from. Pull requests are always created on the local repo’s GitHub remote via <code>gh</code>.
-              </p>
-              <div class="card settings-card">
-                <div class="settings-field settings-field-full">
-                  <div class="field-label">Ticket source</div>
-                  <div class="source-toggle" id="settings-ticket-source" role="group" aria-label="Ticket source">
-                    <button type="button" class="source-btn active" data-source="github">GitHub Issues</button>
-                    <button type="button" class="source-btn" data-source="jira">Jira</button>
-                  </div>
-                  <p class="field-hint">Switch anytime — queued jobs keep their original source.</p>
-                </div>
+            <div
+              class="settings-tabs"
+              id="settings-tabs"
+              role="tablist"
+              aria-label="Settings sections"
+            >
+              <button
+                type="button"
+                class="settings-tab"
+                role="tab"
+                id="settings-tab-ticket"
+                data-settings-tab="ticket"
+                aria-controls="settings-panel-ticket"
+                aria-selected="true"
+              >Ticket source</button>
+              <button
+                type="button"
+                class="settings-tab"
+                role="tab"
+                id="settings-tab-auth"
+                data-settings-tab="auth"
+                aria-controls="settings-panel-auth"
+                aria-selected="false"
+                tabindex="-1"
+              >Authentication</button>
+              <button
+                type="button"
+                class="settings-tab"
+                role="tab"
+                id="settings-tab-rules"
+                data-settings-tab="rules"
+                aria-controls="settings-panel-rules"
+                aria-selected="false"
+                tabindex="-1"
+              >Rules</button>
+              <button
+                type="button"
+                class="settings-tab"
+                role="tab"
+                id="settings-tab-config"
+                data-settings-tab="config"
+                aria-controls="settings-panel-config"
+                aria-selected="false"
+                tabindex="-1"
+              >Configuration</button>
+            </div>
 
-                <div id="jira-connect-panel" class="jira-panel hidden">
-                  <div class="settings-grid">
-                    <div class="settings-field settings-field-full">
-                      <label class="field-label" for="settings-jira-base-url">Jira Cloud base URL</label>
-                      <input id="settings-jira-base-url" class="input" type="url" name="jiraBaseUrl" autocomplete="off" placeholder="https://your-domain.atlassian.net">
-                      <p class="field-hint">Your Atlassian Cloud site (Jira Server/Data Center is not supported).</p>
+            <form id="settings-form" class="stack stack-lg" novalidate>
+              <div
+                class="settings-panel"
+                role="tabpanel"
+                id="settings-panel-ticket"
+                data-settings-panel="ticket"
+                aria-labelledby="settings-tab-ticket"
+              >
+                <p class="settings-lead">
+                  Choose where tickets come from. Pull requests are always created on the local repo’s GitHub remote via <code>gh</code>.
+                </p>
+                <div class="card settings-card">
+                  <div class="settings-field settings-field-full">
+                    <div class="field-label">Ticket source</div>
+                    <div class="source-toggle" id="settings-ticket-source" role="group" aria-label="Ticket source">
+                      <button type="button" class="source-btn active" data-source="github">GitHub Issues</button>
+                      <button type="button" class="source-btn" data-source="jira">Jira</button>
                     </div>
-                    <div class="settings-field">
-                      <label class="field-label" for="settings-jira-email">Email</label>
-                      <input id="settings-jira-email" class="input" type="email" name="jiraEmail" autocomplete="username" placeholder="you@company.com">
+                    <p class="field-hint">Switch anytime — queued jobs keep their original source.</p>
+                  </div>
+
+                  <div id="jira-connect-panel" class="jira-panel hidden">
+                    <div class="settings-grid">
+                      <div class="settings-field settings-field-full">
+                        <label class="field-label" for="settings-jira-base-url">Jira Cloud base URL</label>
+                        <input id="settings-jira-base-url" class="input" type="url" name="jiraBaseUrl" autocomplete="off" placeholder="https://your-domain.atlassian.net">
+                        <p class="field-hint">Your Atlassian Cloud site (Jira Server/Data Center is not supported).</p>
+                      </div>
+                      <div class="settings-field">
+                        <label class="field-label" for="settings-jira-email">Email</label>
+                        <input id="settings-jira-email" class="input" type="email" name="jiraEmail" autocomplete="username" placeholder="you@company.com">
+                      </div>
+                      <div class="settings-field">
+                        <label class="field-label" for="settings-jira-token">API token</label>
+                        <input id="settings-jira-token" class="input" type="password" name="jiraApiToken" autocomplete="new-password" placeholder="Leave blank to keep existing">
+                        <p class="field-hint" id="settings-jira-token-hint">Create a token at id.atlassian.com → Security → API tokens. Stored in <code>.acdev/.env</code> (not committed).</p>
+                      </div>
+                      <div class="settings-field settings-field-full">
+                        <label class="field-label" for="settings-jira-pr-phrase">PR link phrase</label>
+                        <input id="settings-jira-pr-phrase" class="input" type="text" name="jiraPrLinkPhrase" autocomplete="off" placeholder="Relates to">
+                        <p class="field-hint">PR bodies use <code>{phrase} PROJ-123</code> instead of <code>Closes #N</code>.</p>
+                      </div>
                     </div>
-                    <div class="settings-field">
-                      <label class="field-label" for="settings-jira-token">API token</label>
-                      <input id="settings-jira-token" class="input" type="password" name="jiraApiToken" autocomplete="new-password" placeholder="Leave blank to keep existing">
-                      <p class="field-hint" id="settings-jira-token-hint">Create a token at id.atlassian.com → Security → API tokens. Stored in <code>.acdev/.env</code> (not committed).</p>
+                    <div class="jira-actions">
+                      <button id="jira-test-btn" type="button" class="btn btn-secondary">Test connection</button>
+                      <span id="jira-status" class="jira-status" role="status"></span>
                     </div>
-                    <div class="settings-field settings-field-full">
-                      <label class="field-label" for="settings-jira-pr-phrase">PR link phrase</label>
-                      <input id="settings-jira-pr-phrase" class="input" type="text" name="jiraPrLinkPhrase" autocomplete="off" placeholder="Relates to">
-                      <p class="field-hint">PR bodies use <code>{phrase} PROJ-123</code> instead of <code>Closes #N</code>.</p>
+                  </div>
+                </div>
+              </div>
+
+              <div
+                class="settings-panel hidden"
+                role="tabpanel"
+                id="settings-panel-auth"
+                data-settings-panel="auth"
+                aria-labelledby="settings-tab-auth"
+              >
+                <p class="settings-lead">
+                  Tokens save to <code>.acdev/.env</code> (not committed) when you click <strong>Save settings</strong>. Leave a field blank to keep the current secret.
+                </p>
+                <div class="stack">
+                  <div class="card settings-card">
+                    <div class="rules-heading">GitHub / PR auth</div>
+                    <p id="settings-gh-status" class="auth-status" role="status">Checking GitHub CLI…</p>
+                    <p id="settings-gh-origin" class="field-hint"></p>
+                    <div class="settings-grid">
+                      <div class="settings-field settings-field-full">
+                        <label class="field-label" for="settings-gh-token">Personal access token</label>
+                        <input id="settings-gh-token" class="input" type="password" name="ghToken" autocomplete="new-password" placeholder="Leave blank to keep existing">
+                        <button type="button" class="auth-clear hidden" id="settings-gh-token-clear">Clear saved token</button>
+                        <p class="field-hint" id="settings-gh-token-hint">
+                          If <code>gh auth login</code> already works on this machine, leave this blank. Otherwise paste a PAT (<code>repo</code> and pull-request scopes). Stored as <code>GH_TOKEN</code> so <code>gh</code> can auth without a browser. SSH remotes can push/fetch git but do <strong>not</strong> authenticate <code>gh</code> for issues or PRs.
+                        </p>
+                      </div>
                     </div>
                   </div>
-                  <div class="jira-actions">
-                    <button id="jira-test-btn" type="button" class="btn btn-secondary">Test connection</button>
-                    <span id="jira-status" class="jira-status" role="status"></span>
+
+                  <div class="card settings-card">
+                    <div class="rules-heading">Claude authentication</div>
+                    <p id="settings-claude-status" class="auth-status" role="status">Checking Claude auth…</p>
+                    <div class="settings-grid">
+                      <div class="settings-field settings-field-full">
+                        <label class="field-label" for="settings-anthropic-key">Anthropic API key</label>
+                        <input id="settings-anthropic-key" class="input" type="password" name="anthropicApiKey" autocomplete="new-password" placeholder="Leave blank to keep existing">
+                        <button type="button" class="auth-clear hidden" id="settings-anthropic-key-clear">Clear saved API key</button>
+                        <p class="field-hint" id="settings-anthropic-key-hint">
+                          Console / pay-as-you-go billing. Takes precedence over subscription login. Stored as <code>ANTHROPIC_API_KEY</code>. Clear or omit the key to use <code>claude auth login</code> instead.
+                        </p>
+                      </div>
+                      <div class="settings-field settings-field-full">
+                        <label class="field-label" for="settings-claude-oauth">Claude Code OAuth token (optional)</label>
+                        <input id="settings-claude-oauth" class="input" type="password" name="claudeOauthToken" autocomplete="new-password" placeholder="Leave blank to keep existing">
+                        <button type="button" class="auth-clear hidden" id="settings-claude-oauth-clear">Clear saved OAuth token</button>
+                        <p class="field-hint" id="settings-claude-oauth-hint">
+                          From <code>claude setup-token</code> for non-interactive subscription auth. Stored as <code>CLAUDE_CODE_OAUTH_TOKEN</code>. Settings cannot complete browser OAuth — that still needs <code>claude auth login</code> on this host.
+                        </p>
+                      </div>
+                    </div>
                   </div>
                 </div>
               </div>
-            </section>
 
-            <section>
-              <div class="section-label">Configuration</div>
-              <p class="settings-lead">
-                Changes save to <code>.acdev/config.json</code> and apply to the next job — no restart needed. Includes post-PR rules below.
-              </p>
-              <form id="settings-form" class="stack stack-lg" novalidate>
+              <div
+                class="settings-panel hidden"
+                role="tabpanel"
+                id="settings-panel-rules"
+                data-settings-panel="rules"
+                aria-labelledby="settings-tab-rules"
+              >
+                <p class="settings-lead">
+                  Optional automation after a PR is opened. Failures are logged as warnings and never undo a successful PR.
+                </p>
                 <div class="card settings-card">
-                  <div class="rules-heading">Rules</div>
-                  <p class="field-hint">
-                    Optional automation after a PR is opened. Failures are logged as warnings and never undo a successful PR.
-                  </p>
-
-                  <div id="jira-rules-panel" class="rules-block hidden">
+                  <div id="jira-rules-panel" class="rules-block">
                     <div class="field-label">Jira — after PR opened</div>
                     <p class="field-hint">
-                      Moves the ticket via a workflow transition whose target status name matches (case-insensitive), e.g. <code>In Review</code> or <code>Code Review</code>.
+                      Move status transitions to a workflow status whose name matches (case-insensitive). Add label uses the Jira labels API. Close transitions to a Done-category (or Done/Closed/Resolved-like) status.
                     </p>
                     <div class="settings-grid">
                       <div class="settings-field settings-field-full">
                         <label class="rule-toggle">
                           <input id="settings-jira-rule-enabled" type="checkbox" name="jiraRuleEnabled">
-                          <span>Enable status move</span>
+                          <span>Enable action</span>
                         </label>
                       </div>
-                      <div class="settings-field settings-field-full">
+                      <div class="settings-field">
+                        <label class="field-label" for="settings-jira-rule-action">Action</label>
+                        <select id="settings-jira-rule-action" class="input" name="jiraRuleAction">
+                          <option value="none">None</option>
+                          <option value="set_status">Move status</option>
+                          <option value="add_label">Add label</option>
+                          <option value="close_issue">Close issue</option>
+                        </select>
+                      </div>
+                      <div class="settings-field" id="settings-jira-rule-status-field">
                         <label class="field-label" for="settings-jira-rule-status">Target status name</label>
                         <input id="settings-jira-rule-status" class="input" type="text" name="jiraRuleTargetStatus" autocomplete="off" placeholder="In Review">
                         <p class="field-hint">Must match a status reachable from the issue’s current workflow (exact name, any casing).</p>
                       </div>
+                      <div class="settings-field" id="settings-jira-rule-label-field">
+                        <label class="field-label" for="settings-jira-rule-label">Label</label>
+                        <input id="settings-jira-rule-label" class="input" type="text" name="jiraRuleLabel" autocomplete="off" placeholder="in-review">
+                        <p class="field-hint">Used when action is Add label.</p>
+                      </div>
                     </div>
                   </div>
 
                   <div id="github-rules-panel" class="rules-block">
                     <div class="field-label">GitHub Issues — after PR opened</div>
                     <p class="field-hint">
-                      GitHub issues don’t have Jira-like board statuses by default. Use a label (e.g. <code>in-review</code>) or close the issue. Projects board API is not supported in v1.
+                      GitHub issues don’t have Jira-like workflow statuses. Move status applies a label named after the target status (e.g. <code>In Review</code>). You can also add a different label or close the issue. Projects board status is not supported.
                     </p>
                     <div class="settings-grid">
                       <div class="settings-field settings-field-full">
@@ -397,10 +512,16 @@
                         <label class="field-label" for="settings-github-rule-action">Action</label>
                         <select id="settings-github-rule-action" class="input" name="githubRuleAction">
                           <option value="none">None</option>
+                          <option value="set_status">Move status</option>
                           <option value="add_label">Add label</option>
                           <option value="close_issue">Close issue</option>
                         </select>
                       </div>
+                      <div class="settings-field" id="settings-github-rule-status-field">
+                        <label class="field-label" for="settings-github-rule-status">Target status name</label>
+                        <input id="settings-github-rule-status" class="input" type="text" name="githubRuleTargetStatus" autocomplete="off" placeholder="In Review">
+                        <p class="field-hint">Applied as an issue label (exact name). Create the label in the repo first if it doesn’t exist.</p>
+                      </div>
                       <div class="settings-field" id="settings-github-rule-label-field">
                         <label class="field-label" for="settings-github-rule-label">Label</label>
                         <input id="settings-github-rule-label" class="input" type="text" name="githubRuleLabel" autocomplete="off" placeholder="in-review">
@@ -409,7 +530,18 @@
                     </div>
                   </div>
                 </div>
+              </div>
 
+              <div
+                class="settings-panel hidden"
+                role="tabpanel"
+                id="settings-panel-config"
+                data-settings-panel="config"
+                aria-labelledby="settings-tab-config"
+              >
+                <p class="settings-lead">
+                  Changes save to <code>.acdev/config.json</code> and apply to the next job — no restart needed.
+                </p>
                 <div class="card settings-card">
                   <div class="settings-grid">
                     <div class="settings-field">
@@ -421,7 +553,7 @@
                     <div class="settings-field">
                       <label class="field-label" for="settings-model">Model</label>
                       <select id="settings-model" class="input" name="model"></select>
-                      <p class="field-hint">Synced with the sidebar model toggle.</p>
+                      <p class="field-hint" id="settings-model-hint">Claude model for agent runs.</p>
                     </div>
 
                     <div class="settings-field">
@@ -448,14 +580,14 @@
                       <p class="field-hint">Tools the agent may use. Defaults: Read, Glob, Grep, Edit, Write, Bash.</p>
                     </div>
                   </div>
-
-                  <div class="settings-footer">
-                    <p id="settings-feedback" class="feedback hidden" role="status"></p>
-                    <button id="settings-save-btn" type="submit" class="btn btn-primary">Save settings</button>
-                  </div>
                 </div>
-              </form>
-            </section>
+              </div>
+
+              <div class="settings-footer">
+                <p id="settings-feedback" class="feedback hidden" role="status"></p>
+                <button id="settings-save-btn" type="submit" class="btn btn-primary">Save settings</button>
+              </div>
+            </form>
           </div>
         </section>
       </div>

package/public/styles.css

@@ -237,30 +237,16 @@ a { color: var(--primary); text-underline-offset: 3px; }
   letter-spacing: 0.08em;
   text-transform: uppercase;
   color: var(--text-muted);
-  margin-bottom: 8px;
-}
-
-.model-toggle {
-  display: flex;
-  gap: 6px;
+  margin-bottom: 6px;
 }
 
-.model-btn {
-  flex: 1;
-  padding: 8px 0;
-  font-size: 12px;
-  font-weight: 600;
-  border: none;
-  border-radius: 8px;
-  font-family: inherit;
-  background: var(--surface-2);
+.model-current {
+  font-family: 'JetBrains Mono', ui-monospace, monospace;
+  font-size: 11px;
+  font-weight: 500;
   color: var(--text);
-  cursor: pointer;
-}
-
-.model-btn.active {
-  background: var(--primary);
-  color: var(--btn-on-primary);
+  line-height: 1.35;
+  word-break: break-all;
 }
 
 .repo-meta {
@@ -1722,6 +1708,42 @@ body.diff-fs-open {
 }
 
 /* —— Settings —— */
+.settings-tabs {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 6px;
+}
+
+.settings-tab {
+  border: 1px solid var(--border);
+  background: var(--surface);
+  color: var(--text-muted);
+  font-family: inherit;
+  font-size: 12px;
+  font-weight: 600;
+  padding: 7px 12px;
+  border-radius: 8px;
+  cursor: pointer;
+  transition: background 0.12s ease, border-color 0.12s ease, color 0.12s ease;
+}
+
+.settings-tab:hover {
+  background: var(--surface-2);
+  color: var(--text);
+}
+
+.settings-tab[aria-selected="true"] {
+  background: var(--primary-100);
+  border-color: transparent;
+  color: var(--primary);
+}
+
+.settings-panel {
+  display: flex;
+  flex-direction: column;
+  gap: 0;
+}
+
 .settings-lead {
   margin: 0 0 14px;
   font-size: 13px;
@@ -1871,6 +1893,38 @@ body.diff-fs-open {
   color: var(--danger, #b42318);
 }
 
+.auth-status {
+  margin: 0;
+  font-size: 13px;
+  color: var(--text-muted);
+}
+
+.auth-status.ok {
+  color: var(--success, #1a7f4b);
+}
+
+.auth-status.err {
+  color: var(--danger, #b42318);
+}
+
+.auth-clear {
+  display: inline-block;
+  margin-top: 6px;
+  padding: 0;
+  border: 0;
+  background: none;
+  font: inherit;
+  font-size: 12px;
+  color: var(--text-muted);
+  cursor: pointer;
+  text-decoration: underline;
+  text-underline-offset: 2px;
+}
+
+.auth-clear:hover {
+  color: var(--text);
+}
+
 .rules-heading {
   font-size: 12px;
   font-weight: 700;
@@ -1886,6 +1940,12 @@ body.diff-fs-open {
   padding-top: 4px;
 }
 
+.rules-block + .rules-block {
+  margin-top: 16px;
+  padding-top: 16px;
+  border-top: 1px solid var(--border);
+}
+
 .rule-toggle {
   display: inline-flex;
   align-items: center;

package/src/afterPrRules.js

@@ -1,11 +1,16 @@
 /**
- * Best-effort post-PR ticket rules (Jira transition / GitHub label or close).
+ * Best-effort post-PR ticket rules (Jira / GitHub: move status, add label, or close).
  * Failures must never undo a successful PR open.
  */
 
 import { normalizeGithubRules, normalizeJiraRules } from './config.js';
 import { addIssueLabel, closeIssue } from './github.js';
-import { resolveJiraCredentials, transitionJiraIssue } from './jira.js';
+import {
+  addJiraIssueLabel,
+  closeJiraIssue,
+  resolveJiraCredentials,
+  transitionJiraIssue,
+} from './jira.js';
 
 /**
  * @param {{
@@ -21,6 +26,8 @@ import { resolveJiraCredentials, transitionJiraIssue } from './jira.js';
  *   appendLog: (job: object, type: string, payload: string) => object,
  *   deps?: {
  *     transitionJiraIssue?: typeof transitionJiraIssue,
+ *     addJiraIssueLabel?: typeof addJiraIssueLabel,
+ *     closeJiraIssue?: typeof closeJiraIssue,
  *     addIssueLabel?: typeof addIssueLabel,
  *     closeIssue?: typeof closeIssue,
  *     resolveJiraCredentials?: typeof resolveJiraCredentials,
@@ -36,6 +43,8 @@ export async function applyAfterPrOpenedRules({
   deps = {},
 }) {
   const doTransition = deps.transitionJiraIssue || transitionJiraIssue;
+  const doAddJiraLabel = deps.addJiraIssueLabel || addJiraIssueLabel;
+  const doCloseJira = deps.closeJiraIssue || closeJiraIssue;
   const doAddLabel = deps.addIssueLabel || addIssueLabel;
   const doClose = deps.closeIssue || closeIssue;
   const doResolveCreds = deps.resolveJiraCredentials || resolveJiraCredentials;
@@ -46,7 +55,7 @@ export async function applyAfterPrOpenedRules({
     if (source === 'jira') {
       const rules = normalizeJiraRules(config.jiraRules);
       const rule = rules.afterPrOpened;
-      if (!rule.enabled) {
+      if (!rule.enabled || rule.action === 'none') {
         return { applied: false };
       }
       if (!job.jiraKey) {
@@ -58,16 +67,47 @@ export async function applyAfterPrOpenedRules({
 
       const creds = doResolveCreds({ configBaseUrl: config.jiraBaseUrl });
       if ('error' in creds) {
-        const msg = `Post-PR Jira transition failed: ${creds.error}`;
+        const msg = `Post-PR Jira rule failed: ${creds.error}`;
         console.warn(`[acdev] ${msg}`);
         appendLog(job, 'warn', msg);
         return { applied: false, message: msg };
       }
 
-      const result = await doTransition(job.jiraKey, rule.targetStatus, creds);
-      const msg = `Moved Jira ${result.key} to "${result.statusName}" after PR opened`;
-      appendLog(job, 'info', msg);
-      return { applied: true, message: msg };
+      if (rule.action === 'set_status') {
+        const status = String(rule.targetStatus || '').trim();
+        if (!status) {
+          const msg = 'Post-PR Jira rule skipped: set_status requires a targetStatus name';
+          console.warn(`[acdev] ${msg}`);
+          appendLog(job, 'warn', msg);
+          return { applied: false, message: msg };
+        }
+        const result = await doTransition(job.jiraKey, status, creds);
+        const msg = `Moved Jira ${result.key} to "${result.statusName}" after PR opened`;
+        appendLog(job, 'info', msg);
+        return { applied: true, message: msg };
+      }
+
+      if (rule.action === 'add_label') {
+        if (!rule.label) {
+          const msg = 'Post-PR Jira rule skipped: add_label requires a label name';
+          console.warn(`[acdev] ${msg}`);
+          appendLog(job, 'warn', msg);
+          return { applied: false, message: msg };
+        }
+        const result = await doAddJiraLabel(job.jiraKey, rule.label, creds);
+        const msg = `Added label "${result.label}" to Jira ${result.key} after PR opened`;
+        appendLog(job, 'info', msg);
+        return { applied: true, message: msg };
+      }
+
+      if (rule.action === 'close_issue') {
+        const result = await doCloseJira(job.jiraKey, creds);
+        const msg = `Closed Jira ${result.key} (status "${result.statusName}") after PR opened`;
+        appendLog(job, 'info', msg);
+        return { applied: true, message: msg };
+      }
+
+      return { applied: false };
     }
 
     const rules = normalizeGithubRules(config.githubRules);
@@ -85,6 +125,21 @@ export async function applyAfterPrOpenedRules({
 
     const cwd = job.worktreePath || repoRoot;
 
+    if (rule.action === 'set_status') {
+      const status = String(rule.targetStatus || '').trim();
+      if (!status) {
+        const msg = 'Post-PR GitHub rule skipped: set_status requires a targetStatus name';
+        console.warn(`[acdev] ${msg}`);
+        appendLog(job, 'warn', msg);
+        return { applied: false, message: msg };
+      }
+      // GitHub issues have no workflow statuses; model status as an issue label.
+      await doAddLabel(job.issueNumber, status, cwd);
+      const msg = `Moved GitHub issue #${job.issueNumber} status to "${status}" (label) after PR opened`;
+      appendLog(job, 'info', msg);
+      return { applied: true, message: msg };
+    }
+
     if (rule.action === 'add_label') {
       if (!rule.label) {
         const msg = 'Post-PR GitHub rule skipped: add_label requires a label name';

package/src/claude-auth.js

@@ -79,3 +79,33 @@ export function checkClaudeAuth() {
 
   return { ok: false, reason: 'claude-not-authenticated' };
 }
+
+/**
+ * Method string for Settings / API — never a secret.
+ * @param {ClaudeAuthResult} result
+ * @returns {ClaudeAuthMethod | 'missing'}
+ */
+export function publicClaudeAuthMethod(result) {
+  return result.ok ? result.method : 'missing';
+}
+
+/**
+ * Human-readable startup error for a failed {@link checkClaudeAuth}.
+ * @param {ClaudeAuthResult} [_result]
+ */
+export function formatClaudeAuthError(_result) {
+  return [
+    '✖ No Anthropic / Claude Code authentication found.',
+    '',
+    'Authenticate with one of:',
+    '  1. Claude Pro/Max subscription (browser): install Claude Code, then run',
+    '     `claude auth login`. Settings cannot complete browser OAuth — that still',
+    '     needs the CLI on this machine.',
+    '  2. Subscription token: `claude setup-token`, then set CLAUDE_CODE_OAUTH_TOKEN',
+    '     in Settings → Claude authentication or `.acdev/.env`',
+    '  3. Anthropic API key (API billing): set ANTHROPIC_API_KEY in Settings or `.acdev/.env`',
+    '',
+    'API keys take precedence over subscription login. For UI-only testing without',
+    'auth: pass `--stub-agent`.',
+  ].join('\n');
+}