agent-board-runner 0.1.14 → 0.1.16

package/dist/cli.js

@@ -2527,7 +2527,7 @@ async function ensureBranchWatchers(supabase, config) {
 // src/columnActions.ts
 import { exec } from "node:child_process";
 import { join as join12 } from "node:path";
-import { promisify as promisify4 } from "node:util";
+import { promisify as promisify5 } from "node:util";
 
 // src/orchestrator.ts
 import { randomUUID as randomUUID7 } from "node:crypto";
@@ -2733,10 +2733,177 @@ ${list}`;
 }
 
 // src/mcpContextNote.ts
-function buildInstructionsWithMcpContext(instructions, cardId, projectId) {
-  return `${instructions}
+function buildInstructionsWithMcpContext(instructions, cardId, projectId, approvedCommands) {
+  const base = `${instructions}
 
 Agent Board MCP: this card's id is \`${cardId}\` and its project id is \`${projectId}\` \u2014 pass these directly to board tools (\`update_card\`, \`create_card\`, \`add_card_comment\`, etc.), no lookup needed. If this task turns out too large for one session, use \`create_card\` to split it into subtask cards (chain them with \`prerequisiteCardId\` when one depends on another) instead of trying to fit everything here. If part of the delivery needs a human to do something you can't do yourself (rotate a secret, approve something in a third-party dashboard, delete a resource manually, etc.), register each step with \`add_manual_actions\` instead of just mentioning it in your final message \u2014 that's the only place humans will reliably see it. Before finishing, post a short summary of what you did as a comment on this card via \`add_card_comment\` so the project's humans have visibility without opening this terminal.`;
+  if (approvedCommands.length === 0) return base;
+  const names = approvedCommands.map((command2) => command2.description ? `${command2.name} (${command2.description})` : command2.name).join(", ");
+  return `${base}
+
+This project already has approved custom command templates you can invoke instead of running the equivalent shell command yourself or proposing a near-duplicate: ${names}. Call \`list_project_commands\` first to see each one's declared arguments, then \`run_project_command\` to invoke it.`;
+}
+
+// src/projectCommands.ts
+import { execFile as execFile4 } from "node:child_process";
+import { promisify as promisify4 } from "node:util";
+
+// src/runnerRpcServer.ts
+import { parse as parse3 } from "node:url";
+import { WebSocketServer as WebSocketServer2 } from "ws";
+var handlers = /* @__PURE__ */ new Map();
+function registerRunnerRpcHandler(method, handler) {
+  handlers.set(method, handler);
+}
+function isRpcRequestMessage(value) {
+  if (!value || typeof value !== "object") return false;
+  const candidate = value;
+  return candidate.type === "request" && typeof candidate.id === "string" && typeof candidate.method === "string";
+}
+async function handleRequest2(socket, message) {
+  const handler = handlers.get(message.method);
+  let response;
+  if (!handler) {
+    response = { type: "response", id: message.id, ok: false, error: `Unknown runner RPC method: ${message.method}` };
+  } else {
+    try {
+      const result = await handler(message.payload);
+      response = { type: "response", id: message.id, ok: true, result };
+    } catch (err) {
+      response = { type: "response", id: message.id, ok: false, error: err instanceof Error ? err.message : "Internal runner error." };
+    }
+  }
+  if (socket.readyState === socket.OPEN) socket.send(JSON.stringify(response));
+}
+function attachRunnerRpcServer() {
+  const wss = new WebSocketServer2({ noServer: true });
+  wss.on("connection", (socket, request) => {
+    const { query } = parse3(request.url ?? "", true);
+    const entry = authenticateAgent(query);
+    if (!entry) {
+      logger.runner.warn("RUNNER-RPC", "Runner RPC WS rejected: invalid or expired agent ticket.");
+      socket.close(4401, "Invalid or expired ticket");
+      return;
+    }
+    socket.on("message", (raw) => {
+      let parsed;
+      try {
+        parsed = JSON.parse(raw.toString());
+      } catch {
+        return;
+      }
+      if (!isRpcRequestMessage(parsed)) return;
+      void handleRequest2(socket, parsed);
+    });
+  });
+  logger.runner.info("RUNNER-RPC", "Runner RPC WebSocket handler attached.");
+  return wss;
+}
+
+// src/vaultSecrets.ts
+async function resolveProjectSecretsEnv(supabase, projectId, repoId) {
+  try {
+    const { data, error } = await supabase.rpc("resolve_project_secrets", { p_project_id: projectId, p_repo_id: repoId });
+    if (error) throw error;
+    const rows = data ?? [];
+    const env = {};
+    for (const row of rows) env[row.name] = row.value;
+    if (rows.length > 0) {
+      logger.runner.info(
+        "VAULT",
+        `Resolved ${rows.length} secret(s) for project ${projectId}${repoId ? ` (repo ${repoId})` : ""}: ${rows.map((r) => r.name).join(", ")}.`
+      );
+    }
+    return env;
+  } catch (err) {
+    logger.runner.error("VAULT", `Failed to resolve secrets for project ${projectId}${repoId ? ` (repo ${repoId})` : ""}:`, err);
+    return {};
+  }
+}
+
+// src/projectCommands.ts
+function registerProjectCommandRpcHandler(supabase, config) {
+  registerRunnerRpcHandler("run_project_command", (payload) => runProjectCommand(supabase, config, payload));
+}
+async function listApprovedProjectCommands(supabase, projectId) {
+  try {
+    const { data, error } = await supabase.rpc("resolve_project_commands", { p_project_id: projectId, p_repo_id: null });
+    if (error) throw error;
+    return (data ?? []).map((row) => ({ name: row.name, description: row.description }));
+  } catch (err) {
+    logger.runner.warn("PROJECT_COMMAND", `Failed to resolve approved commands for project ${projectId}:`, err);
+    return [];
+  }
+}
+var execFileAsync4 = promisify4(execFile4);
+var OUTPUT_TAIL_CHARS = 2e4;
+var COMMAND_TIMEOUT_MS = 5 * 60 * 1e3;
+var MAX_BUFFER = 10 * 1024 * 1024;
+var SECRET_PLACEHOLDER_RE = /\{\{secret:([A-Z][A-Z0-9_]*)\}\}/g;
+var SECRET_ENV_PLACEHOLDER_RE = /^\{\{secret_env:([A-Z][A-Z0-9_]*)\}\}$/;
+function isRunProjectCommandPayload(value) {
+  if (!value || typeof value !== "object") return false;
+  const candidate = value;
+  return typeof candidate.projectId === "string" && Array.isArray(candidate.argv) && candidate.argv.length > 0 && candidate.argv.every((entry) => typeof entry === "string");
+}
+function tail(text) {
+  return text.length > OUTPUT_TAIL_CHARS ? text.slice(text.length - OUTPUT_TAIL_CHARS) : text;
+}
+async function runProjectCommand(supabase, config, payload) {
+  if (!isRunProjectCommandPayload(payload)) throw new Error("Malformed run_project_command payload.");
+  const { projectId, argv } = payload;
+  const registered = config.registeredProjects.find((project) => project.id === projectId);
+  if (!registered) throw new Error("This runner does not have that project registered.");
+  const secretsEnv = await resolveProjectSecretsEnv(supabase, projectId, null);
+  const referencedSecretNames = /* @__PURE__ */ new Set();
+  const resolvedArgv = [];
+  for (const part of argv) {
+    const envOnlyMatch = part.match(SECRET_ENV_PLACEHOLDER_RE);
+    if (envOnlyMatch) {
+      const name = envOnlyMatch[1];
+      if (secretsEnv[name] === void 0) throw new Error(`Secret "${name}" referenced by this command is no longer configured for this project.`);
+      referencedSecretNames.add(name);
+      continue;
+    }
+    resolvedArgv.push(
+      part.replace(SECRET_PLACEHOLDER_RE, (_match, name) => {
+        const value = secretsEnv[name];
+        if (value === void 0) throw new Error(`Secret "${name}" referenced by this command is no longer configured for this project.`);
+        referencedSecretNames.add(name);
+        return value;
+      })
+    );
+  }
+  const secretEnv = { ...process.env };
+  for (const name of referencedSecretNames) secretEnv[name] = secretsEnv[name];
+  function redact(text) {
+    let redacted = text;
+    for (const name of referencedSecretNames) {
+      const value = secretsEnv[name];
+      if (value) redacted = redacted.split(value).join("***");
+    }
+    return redacted;
+  }
+  try {
+    const { stdout, stderr } = await execFileAsync4(resolvedArgv[0], resolvedArgv.slice(1), {
+      cwd: registered.repoPath,
+      env: secretEnv,
+      timeout: COMMAND_TIMEOUT_MS,
+      maxBuffer: MAX_BUFFER
+    });
+    logger.runner.info("PROJECT_COMMAND", `Ran "${argv[0]}" for project ${projectId} (exit 0).`);
+    return { ok: true, exitCode: 0, stdout: tail(redact(stdout)), stderr: tail(redact(stderr)) };
+  } catch (err) {
+    const failure = err;
+    const exitCode = typeof failure.code === "number" ? failure.code : null;
+    logger.runner.warn("PROJECT_COMMAND", `"${argv[0]}" failed for project ${projectId} (exit ${exitCode ?? "?"}).`);
+    return {
+      ok: false,
+      exitCode,
+      stdout: tail(redact(failure.stdout ?? "")),
+      stderr: tail(redact(failure.stderr ?? failure.message))
+    };
+  }
 }
 
 // src/prototypeGateNote.ts
@@ -3037,6 +3204,7 @@ async function spawnSessionPty(supabase, config, entry) {
       });
     } else {
       const attachmentPaths = await downloadCardAttachments(supabase, cardId);
+      const approvedCommands = await listApprovedProjectCommands(supabase, card.project_id);
       const instructions = buildInstructionsWithMcpContext(
         buildInstructionsWithPrototypeGate(
           buildInstructionsWithFileReferences(
@@ -3046,7 +3214,8 @@ async function spawnSessionPty(supabase, config, entry) {
           card.prototype_first
         ),
         cardId,
-        card.project_id
+        card.project_id,
+        approvedCommands
       );
       const spawned = spawnAgentPty(registered.repoPath, cardId, card.title, instructions, sessionId, ticket, card.plan_first);
       pty = spawned.pty;
@@ -3245,32 +3414,11 @@ async function restartCardSession(supabase, config, card) {
   await enqueueCard(supabase, config, card);
 }
 
-// src/vaultSecrets.ts
-async function resolveProjectSecretsEnv(supabase, projectId, repoId) {
-  try {
-    const { data, error } = await supabase.rpc("resolve_project_secrets", { p_project_id: projectId, p_repo_id: repoId });
-    if (error) throw error;
-    const rows = data ?? [];
-    const env = {};
-    for (const row of rows) env[row.name] = row.value;
-    if (rows.length > 0) {
-      logger.runner.info(
-        "VAULT",
-        `Resolved ${rows.length} secret(s) for project ${projectId}${repoId ? ` (repo ${repoId})` : ""}: ${rows.map((r) => r.name).join(", ")}.`
-      );
-    }
-    return env;
-  } catch (err) {
-    logger.runner.error("VAULT", `Failed to resolve secrets for project ${projectId}${repoId ? ` (repo ${repoId})` : ""}:`, err);
-    return {};
-  }
-}
-
 // src/columnActions.ts
-var execAsync = promisify4(exec);
-var OUTPUT_TAIL_CHARS = 4e3;
-function tail(text) {
-  return text.length > OUTPUT_TAIL_CHARS ? text.slice(text.length - OUTPUT_TAIL_CHARS) : text;
+var execAsync = promisify5(exec);
+var OUTPUT_TAIL_CHARS2 = 4e3;
+function tail2(text) {
+  return text.length > OUTPUT_TAIL_CHARS2 ? text.slice(text.length - OUTPUT_TAIL_CHARS2) : text;
 }
 function resolveTargets(project, children, repoRoot, column, timing) {
   if (children.length > 0) {
@@ -3284,11 +3432,11 @@ var EXEC_OPTIONS = { maxBuffer: 10 * 1024 * 1024 };
 async function runCommand(target, extraEnv) {
   try {
     const { stdout, stderr } = await execAsync(target.command, { ...EXEC_OPTIONS, cwd: target.cwd, env: { ...process.env, ...extraEnv } });
-    return { ok: true, output: tail(`${stdout}${stderr}`) };
+    return { ok: true, output: tail2(`${stdout}${stderr}`) };
   } catch (err) {
     const { stdout, stderr } = err;
     const message = err instanceof Error ? err.message : String(err);
-    return { ok: false, output: tail(`${stdout ?? ""}${stderr ?? ""}` || message) };
+    return { ok: false, output: tail2(`${stdout ?? ""}${stderr ?? ""}` || message) };
   }
 }
 var inFlightColumns = /* @__PURE__ */ new Set();
@@ -3619,12 +3767,12 @@ function stopAll() {
 }
 
 // src/git.ts
-import { execFile as execFile4 } from "node:child_process";
-import { promisify as promisify5 } from "node:util";
-var execFileAsync4 = promisify5(execFile4);
+import { execFile as execFile5 } from "node:child_process";
+import { promisify as promisify6 } from "node:util";
+var execFileAsync5 = promisify6(execFile5);
 async function pushBranchToMain(repoPath) {
   try {
-    await execFileAsync4("git", ["push", "origin", "HEAD:main"], { cwd: repoPath });
+    await execFileAsync5("git", ["push", "origin", "HEAD:main"], { cwd: repoPath });
     return { ok: true };
   } catch (err) {
     const stderr = err.stderr;
@@ -3884,14 +4032,14 @@ async function checkPendingDevServerRestarts(supabase, config) {
 }
 
 // src/terminalServer.ts
-import { parse as parse3 } from "node:url";
-import { WebSocketServer as WebSocketServer2 } from "ws";
+import { parse as parse4 } from "node:url";
+import { WebSocketServer as WebSocketServer3 } from "ws";
 var FRAME_TYPE_RESIZE = 0;
 var FRAME_TYPE_IMAGE = 1;
 function attachTerminalServer() {
-  const wss = new WebSocketServer2({ noServer: true });
+  const wss = new WebSocketServer3({ noServer: true });
   wss.on("connection", (socket, request) => {
-    const { query } = parse3(request.url ?? "", true);
+    const { query } = parse4(request.url ?? "", true);
     const sessionId = typeof query.sessionId === "string" ? query.sessionId : null;
     const ticket = typeof query.ticket === "string" ? query.ticket : null;
     if (!sessionId || !ticket) {
@@ -4072,6 +4220,8 @@ async function startRunner() {
   const httpServer = createServer2();
   const terminalWss = attachTerminalServer();
   const agentEventsWss = attachAgentEventsServer();
+  const runnerRpcWss = attachRunnerRpcServer();
+  registerProjectCommandRpcHandler(supabase, config);
   attachFilesServer(httpServer, supabase, config);
   httpServer.on("upgrade", (request, socket, head) => {
     const pathname = (request.url ?? "").split("?")[0];
@@ -4079,6 +4229,8 @@ async function startRunner() {
       terminalWss.handleUpgrade(request, socket, head, (ws) => terminalWss.emit("connection", ws, request));
     } else if (pathname === "/agent-events") {
       agentEventsWss.handleUpgrade(request, socket, head, (ws) => agentEventsWss.emit("connection", ws, request));
+    } else if (pathname === "/runner-rpc") {
+      runnerRpcWss.handleUpgrade(request, socket, head, (ws) => runnerRpcWss.emit("connection", ws, request));
     } else {
       socket.destroy();
     }

package/dist/index.js

@@ -2415,7 +2415,7 @@ async function ensureBranchWatchers(supabase, config) {
 // src/columnActions.ts
 import { exec } from "node:child_process";
 import { join as join12 } from "node:path";
-import { promisify as promisify4 } from "node:util";
+import { promisify as promisify5 } from "node:util";
 
 // src/orchestrator.ts
 import { randomUUID as randomUUID7 } from "node:crypto";
@@ -2621,10 +2621,177 @@ ${list}`;
 }
 
 // src/mcpContextNote.ts
-function buildInstructionsWithMcpContext(instructions, cardId, projectId) {
-  return `${instructions}
+function buildInstructionsWithMcpContext(instructions, cardId, projectId, approvedCommands) {
+  const base = `${instructions}
 
 Agent Board MCP: this card's id is \`${cardId}\` and its project id is \`${projectId}\` \u2014 pass these directly to board tools (\`update_card\`, \`create_card\`, \`add_card_comment\`, etc.), no lookup needed. If this task turns out too large for one session, use \`create_card\` to split it into subtask cards (chain them with \`prerequisiteCardId\` when one depends on another) instead of trying to fit everything here. If part of the delivery needs a human to do something you can't do yourself (rotate a secret, approve something in a third-party dashboard, delete a resource manually, etc.), register each step with \`add_manual_actions\` instead of just mentioning it in your final message \u2014 that's the only place humans will reliably see it. Before finishing, post a short summary of what you did as a comment on this card via \`add_card_comment\` so the project's humans have visibility without opening this terminal.`;
+  if (approvedCommands.length === 0) return base;
+  const names = approvedCommands.map((command) => command.description ? `${command.name} (${command.description})` : command.name).join(", ");
+  return `${base}
+
+This project already has approved custom command templates you can invoke instead of running the equivalent shell command yourself or proposing a near-duplicate: ${names}. Call \`list_project_commands\` first to see each one's declared arguments, then \`run_project_command\` to invoke it.`;
+}
+
+// src/projectCommands.ts
+import { execFile as execFile4 } from "node:child_process";
+import { promisify as promisify4 } from "node:util";
+
+// src/runnerRpcServer.ts
+import { parse as parse3 } from "node:url";
+import { WebSocketServer as WebSocketServer2 } from "ws";
+var handlers = /* @__PURE__ */ new Map();
+function registerRunnerRpcHandler(method, handler) {
+  handlers.set(method, handler);
+}
+function isRpcRequestMessage(value) {
+  if (!value || typeof value !== "object") return false;
+  const candidate = value;
+  return candidate.type === "request" && typeof candidate.id === "string" && typeof candidate.method === "string";
+}
+async function handleRequest2(socket, message) {
+  const handler = handlers.get(message.method);
+  let response;
+  if (!handler) {
+    response = { type: "response", id: message.id, ok: false, error: `Unknown runner RPC method: ${message.method}` };
+  } else {
+    try {
+      const result = await handler(message.payload);
+      response = { type: "response", id: message.id, ok: true, result };
+    } catch (err) {
+      response = { type: "response", id: message.id, ok: false, error: err instanceof Error ? err.message : "Internal runner error." };
+    }
+  }
+  if (socket.readyState === socket.OPEN) socket.send(JSON.stringify(response));
+}
+function attachRunnerRpcServer() {
+  const wss = new WebSocketServer2({ noServer: true });
+  wss.on("connection", (socket, request) => {
+    const { query } = parse3(request.url ?? "", true);
+    const entry = authenticateAgent(query);
+    if (!entry) {
+      logger.runner.warn("RUNNER-RPC", "Runner RPC WS rejected: invalid or expired agent ticket.");
+      socket.close(4401, "Invalid or expired ticket");
+      return;
+    }
+    socket.on("message", (raw) => {
+      let parsed;
+      try {
+        parsed = JSON.parse(raw.toString());
+      } catch {
+        return;
+      }
+      if (!isRpcRequestMessage(parsed)) return;
+      void handleRequest2(socket, parsed);
+    });
+  });
+  logger.runner.info("RUNNER-RPC", "Runner RPC WebSocket handler attached.");
+  return wss;
+}
+
+// src/vaultSecrets.ts
+async function resolveProjectSecretsEnv(supabase, projectId, repoId) {
+  try {
+    const { data, error } = await supabase.rpc("resolve_project_secrets", { p_project_id: projectId, p_repo_id: repoId });
+    if (error) throw error;
+    const rows = data ?? [];
+    const env = {};
+    for (const row of rows) env[row.name] = row.value;
+    if (rows.length > 0) {
+      logger.runner.info(
+        "VAULT",
+        `Resolved ${rows.length} secret(s) for project ${projectId}${repoId ? ` (repo ${repoId})` : ""}: ${rows.map((r) => r.name).join(", ")}.`
+      );
+    }
+    return env;
+  } catch (err) {
+    logger.runner.error("VAULT", `Failed to resolve secrets for project ${projectId}${repoId ? ` (repo ${repoId})` : ""}:`, err);
+    return {};
+  }
+}
+
+// src/projectCommands.ts
+function registerProjectCommandRpcHandler(supabase, config) {
+  registerRunnerRpcHandler("run_project_command", (payload) => runProjectCommand(supabase, config, payload));
+}
+async function listApprovedProjectCommands(supabase, projectId) {
+  try {
+    const { data, error } = await supabase.rpc("resolve_project_commands", { p_project_id: projectId, p_repo_id: null });
+    if (error) throw error;
+    return (data ?? []).map((row) => ({ name: row.name, description: row.description }));
+  } catch (err) {
+    logger.runner.warn("PROJECT_COMMAND", `Failed to resolve approved commands for project ${projectId}:`, err);
+    return [];
+  }
+}
+var execFileAsync4 = promisify4(execFile4);
+var OUTPUT_TAIL_CHARS = 2e4;
+var COMMAND_TIMEOUT_MS = 5 * 60 * 1e3;
+var MAX_BUFFER = 10 * 1024 * 1024;
+var SECRET_PLACEHOLDER_RE = /\{\{secret:([A-Z][A-Z0-9_]*)\}\}/g;
+var SECRET_ENV_PLACEHOLDER_RE = /^\{\{secret_env:([A-Z][A-Z0-9_]*)\}\}$/;
+function isRunProjectCommandPayload(value) {
+  if (!value || typeof value !== "object") return false;
+  const candidate = value;
+  return typeof candidate.projectId === "string" && Array.isArray(candidate.argv) && candidate.argv.length > 0 && candidate.argv.every((entry) => typeof entry === "string");
+}
+function tail(text) {
+  return text.length > OUTPUT_TAIL_CHARS ? text.slice(text.length - OUTPUT_TAIL_CHARS) : text;
+}
+async function runProjectCommand(supabase, config, payload) {
+  if (!isRunProjectCommandPayload(payload)) throw new Error("Malformed run_project_command payload.");
+  const { projectId, argv } = payload;
+  const registered = config.registeredProjects.find((project) => project.id === projectId);
+  if (!registered) throw new Error("This runner does not have that project registered.");
+  const secretsEnv = await resolveProjectSecretsEnv(supabase, projectId, null);
+  const referencedSecretNames = /* @__PURE__ */ new Set();
+  const resolvedArgv = [];
+  for (const part of argv) {
+    const envOnlyMatch = part.match(SECRET_ENV_PLACEHOLDER_RE);
+    if (envOnlyMatch) {
+      const name = envOnlyMatch[1];
+      if (secretsEnv[name] === void 0) throw new Error(`Secret "${name}" referenced by this command is no longer configured for this project.`);
+      referencedSecretNames.add(name);
+      continue;
+    }
+    resolvedArgv.push(
+      part.replace(SECRET_PLACEHOLDER_RE, (_match, name) => {
+        const value = secretsEnv[name];
+        if (value === void 0) throw new Error(`Secret "${name}" referenced by this command is no longer configured for this project.`);
+        referencedSecretNames.add(name);
+        return value;
+      })
+    );
+  }
+  const secretEnv = { ...process.env };
+  for (const name of referencedSecretNames) secretEnv[name] = secretsEnv[name];
+  function redact(text) {
+    let redacted = text;
+    for (const name of referencedSecretNames) {
+      const value = secretsEnv[name];
+      if (value) redacted = redacted.split(value).join("***");
+    }
+    return redacted;
+  }
+  try {
+    const { stdout, stderr } = await execFileAsync4(resolvedArgv[0], resolvedArgv.slice(1), {
+      cwd: registered.repoPath,
+      env: secretEnv,
+      timeout: COMMAND_TIMEOUT_MS,
+      maxBuffer: MAX_BUFFER
+    });
+    logger.runner.info("PROJECT_COMMAND", `Ran "${argv[0]}" for project ${projectId} (exit 0).`);
+    return { ok: true, exitCode: 0, stdout: tail(redact(stdout)), stderr: tail(redact(stderr)) };
+  } catch (err) {
+    const failure = err;
+    const exitCode = typeof failure.code === "number" ? failure.code : null;
+    logger.runner.warn("PROJECT_COMMAND", `"${argv[0]}" failed for project ${projectId} (exit ${exitCode ?? "?"}).`);
+    return {
+      ok: false,
+      exitCode,
+      stdout: tail(redact(failure.stdout ?? "")),
+      stderr: tail(redact(failure.stderr ?? failure.message))
+    };
+  }
 }
 
 // src/prototypeGateNote.ts
@@ -2925,6 +3092,7 @@ async function spawnSessionPty(supabase, config, entry) {
       });
     } else {
       const attachmentPaths = await downloadCardAttachments(supabase, cardId);
+      const approvedCommands = await listApprovedProjectCommands(supabase, card.project_id);
       const instructions = buildInstructionsWithMcpContext(
         buildInstructionsWithPrototypeGate(
           buildInstructionsWithFileReferences(
@@ -2934,7 +3102,8 @@ async function spawnSessionPty(supabase, config, entry) {
           card.prototype_first
         ),
         cardId,
-        card.project_id
+        card.project_id,
+        approvedCommands
       );
       const spawned = spawnAgentPty(registered.repoPath, cardId, card.title, instructions, sessionId, ticket, card.plan_first);
       pty = spawned.pty;
@@ -3133,32 +3302,11 @@ async function restartCardSession(supabase, config, card) {
   await enqueueCard(supabase, config, card);
 }
 
-// src/vaultSecrets.ts
-async function resolveProjectSecretsEnv(supabase, projectId, repoId) {
-  try {
-    const { data, error } = await supabase.rpc("resolve_project_secrets", { p_project_id: projectId, p_repo_id: repoId });
-    if (error) throw error;
-    const rows = data ?? [];
-    const env = {};
-    for (const row of rows) env[row.name] = row.value;
-    if (rows.length > 0) {
-      logger.runner.info(
-        "VAULT",
-        `Resolved ${rows.length} secret(s) for project ${projectId}${repoId ? ` (repo ${repoId})` : ""}: ${rows.map((r) => r.name).join(", ")}.`
-      );
-    }
-    return env;
-  } catch (err) {
-    logger.runner.error("VAULT", `Failed to resolve secrets for project ${projectId}${repoId ? ` (repo ${repoId})` : ""}:`, err);
-    return {};
-  }
-}
-
 // src/columnActions.ts
-var execAsync = promisify4(exec);
-var OUTPUT_TAIL_CHARS = 4e3;
-function tail(text) {
-  return text.length > OUTPUT_TAIL_CHARS ? text.slice(text.length - OUTPUT_TAIL_CHARS) : text;
+var execAsync = promisify5(exec);
+var OUTPUT_TAIL_CHARS2 = 4e3;
+function tail2(text) {
+  return text.length > OUTPUT_TAIL_CHARS2 ? text.slice(text.length - OUTPUT_TAIL_CHARS2) : text;
 }
 function resolveTargets(project, children, repoRoot, column, timing) {
   if (children.length > 0) {
@@ -3172,11 +3320,11 @@ var EXEC_OPTIONS = { maxBuffer: 10 * 1024 * 1024 };
 async function runCommand(target, extraEnv) {
   try {
     const { stdout, stderr } = await execAsync(target.command, { ...EXEC_OPTIONS, cwd: target.cwd, env: { ...process.env, ...extraEnv } });
-    return { ok: true, output: tail(`${stdout}${stderr}`) };
+    return { ok: true, output: tail2(`${stdout}${stderr}`) };
   } catch (err) {
     const { stdout, stderr } = err;
     const message = err instanceof Error ? err.message : String(err);
-    return { ok: false, output: tail(`${stdout ?? ""}${stderr ?? ""}` || message) };
+    return { ok: false, output: tail2(`${stdout ?? ""}${stderr ?? ""}` || message) };
   }
 }
 var inFlightColumns = /* @__PURE__ */ new Set();
@@ -3507,12 +3655,12 @@ function stopAll() {
 }
 
 // src/git.ts
-import { execFile as execFile4 } from "node:child_process";
-import { promisify as promisify5 } from "node:util";
-var execFileAsync4 = promisify5(execFile4);
+import { execFile as execFile5 } from "node:child_process";
+import { promisify as promisify6 } from "node:util";
+var execFileAsync5 = promisify6(execFile5);
 async function pushBranchToMain(repoPath) {
   try {
-    await execFileAsync4("git", ["push", "origin", "HEAD:main"], { cwd: repoPath });
+    await execFileAsync5("git", ["push", "origin", "HEAD:main"], { cwd: repoPath });
     return { ok: true };
   } catch (err) {
     const stderr = err.stderr;
@@ -3772,14 +3920,14 @@ async function checkPendingDevServerRestarts(supabase, config) {
 }
 
 // src/terminalServer.ts
-import { parse as parse3 } from "node:url";
-import { WebSocketServer as WebSocketServer2 } from "ws";
+import { parse as parse4 } from "node:url";
+import { WebSocketServer as WebSocketServer3 } from "ws";
 var FRAME_TYPE_RESIZE = 0;
 var FRAME_TYPE_IMAGE = 1;
 function attachTerminalServer() {
-  const wss = new WebSocketServer2({ noServer: true });
+  const wss = new WebSocketServer3({ noServer: true });
   wss.on("connection", (socket, request) => {
-    const { query } = parse3(request.url ?? "", true);
+    const { query } = parse4(request.url ?? "", true);
     const sessionId = typeof query.sessionId === "string" ? query.sessionId : null;
     const ticket = typeof query.ticket === "string" ? query.ticket : null;
     if (!sessionId || !ticket) {
@@ -3960,6 +4108,8 @@ async function startRunner() {
   const httpServer = createServer();
   const terminalWss = attachTerminalServer();
   const agentEventsWss = attachAgentEventsServer();
+  const runnerRpcWss = attachRunnerRpcServer();
+  registerProjectCommandRpcHandler(supabase, config);
   attachFilesServer(httpServer, supabase, config);
   httpServer.on("upgrade", (request, socket, head) => {
     const pathname = (request.url ?? "").split("?")[0];
@@ -3967,6 +4117,8 @@ async function startRunner() {
       terminalWss.handleUpgrade(request, socket, head, (ws) => terminalWss.emit("connection", ws, request));
     } else if (pathname === "/agent-events") {
       agentEventsWss.handleUpgrade(request, socket, head, (ws) => agentEventsWss.emit("connection", ws, request));
+    } else if (pathname === "/runner-rpc") {
+      runnerRpcWss.handleUpgrade(request, socket, head, (ws) => runnerRpcWss.emit("connection", ws, request));
     } else {
       socket.destroy();
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-board-runner",
-  "version": "0.1.14",
+  "version": "0.1.16",
   "description": "Local runner for Agent Board — signs in with your own Supabase account (no shared secrets) and drives Claude Code against repos under your local repos root.",
   "type": "module",
   "bin": {