techunter 0.1.1 → 0.1.3

package/dist/index.js

@@ -21,9 +21,9 @@ __export(github_exports, {
   ensureLabels: () => ensureLabels,
   formatGuideAsMarkdown: () => formatGuideAsMarkdown,
   getAuthenticatedUser: () => getAuthenticatedUser,
-  getBaseBranch: () => getBaseBranch,
   getDefaultBranch: () => getDefaultBranch,
   getTask: () => getTask,
+  isCollaborator: () => isCollaborator,
   listComments: () => listComments,
   listMyTasks: () => listMyTasks,
   listTasks: () => listTasks,
@@ -50,6 +50,7 @@ function parseIssue(issue) {
     title: issue.title,
     body: issue.body ?? null,
     state: issue.state,
+    author: issue.user?.login ?? null,
     assignee: issue.assignee?.login ?? null,
     labels: (issue.labels ?? []).map(
       (l) => typeof l === "string" ? l : l.name ?? ""
@@ -226,6 +227,16 @@ async function getAuthenticatedUser(config) {
   const { data } = await octokit.users.getAuthenticated();
   return data.login;
 }
+async function isCollaborator(config, username) {
+  const octokit = createOctokit(config.githubToken);
+  const { owner, repo } = config.github;
+  try {
+    const { data } = await octokit.repos.getCollaboratorPermissionLevel({ owner, repo, username });
+    return data.permission === "admin" || data.permission === "write" || data.permission === "maintain";
+  } catch {
+    return false;
+  }
+}
 async function listMyTasks(config, username) {
   const octokit = createOctokit(config.githubToken);
   const { owner, repo } = config.github;
@@ -297,10 +308,6 @@ async function getDefaultBranch(config) {
   const { data } = await octokit.repos.get({ owner, repo });
   return data.default_branch;
 }
-function getBaseBranch(config) {
-  if (config.github.baseBranch) return Promise.resolve(config.github.baseBranch);
-  return getDefaultBranch(config);
-}
 async function acceptTask(config, issueNumber) {
   const octokit = createOctokit(config.githubToken);
   const { owner, repo } = config.github;
@@ -338,7 +345,6 @@ var init_github = __esm({
 import chalk14 from "chalk";
 import readline from "readline";
 import { createRequire } from "module";
-import { input as input3 } from "@inquirer/prompts";
 
 // src/commands/init.ts
 import { input, password, select } from "@inquirer/prompts";
@@ -358,9 +364,12 @@ var configSchema = z.object({
   githubClientId: z.string().optional(),
   github: z.object({
     owner: z.string().min(1),
-    repo: z.string().min(1),
-    baseBranch: z.string().optional()
-  })
+    repo: z.string().min(1)
+  }),
+  taskState: z.object({
+    activeIssueNumber: z.number().optional(),
+    baseCommit: z.string().optional()
+  }).optional()
 });
 var store = new Conf({
   projectName: "techunter",
@@ -397,6 +406,12 @@ function setConfig(partial) {
   if (partial.githubClientId !== void 0) {
     current["githubClientId"] = partial.githubClientId;
   }
+  if (partial.taskState !== void 0) {
+    current["taskState"] = {
+      ...current["taskState"] ?? {},
+      ...partial.taskState
+    };
+  }
   store.store = current;
 }
 function getConfigPath() {
@@ -414,9 +429,6 @@ async function getCurrentBranch() {
   const summary = await git.branch();
   return summary.current;
 }
-async function createAndSwitchBranch(name) {
-  await git.checkoutLocalBranch(name);
-}
 async function pushBranch(name) {
   await git.push("origin", name, ["--set-upstream"]);
 }
@@ -444,6 +456,61 @@ function makeBranchName(issueNumber, username) {
   const slug = username.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "") || "user";
   return `task-${issueNumber}-${slug}`;
 }
+function makeWorkerBranchName(username) {
+  const slug = username.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "") || "user";
+  return `worker-${slug}`;
+}
+async function getCurrentCommit() {
+  return (await git.revparse(["HEAD"])).trim();
+}
+async function switchToBranchOrCreate(name) {
+  try {
+    const branches = await git.branch(["-a"]);
+    const exists = Object.keys(branches.branches).some(
+      (b) => b === name || b === `remotes/origin/${name}`
+    );
+    if (exists) {
+      await git.checkout(name);
+      return false;
+    }
+    await git.checkoutLocalBranch(name);
+    return true;
+  } catch {
+    await git.checkoutLocalBranch(name);
+    return true;
+  }
+}
+async function getDiffFromCommit(baseCommit) {
+  const status = await git.status();
+  const parts = [];
+  const fileLines = [
+    ...status.modified.map((f) => `  M  ${f}`),
+    ...status.created.map((f) => `  A  ${f}`),
+    ...status.deleted.map((f) => `  D  ${f}`),
+    ...status.renamed.map((f) => `  R  ${f.from} \u2192 ${f.to}`),
+    ...status.not_added.map((f) => `  ?  ${f}`)
+  ];
+  if (fileLines.length > 0) {
+    parts.push("## Uncommitted changes\n" + fileLines.join("\n"));
+    const uncommitted = await git.diff(["HEAD"]);
+    if (uncommitted) {
+      const capped = uncommitted.length > 8e3 ? uncommitted.slice(0, 8e3) + "\n... (truncated)" : uncommitted;
+      parts.push("## Uncommitted diff\n```diff\n" + capped + "\n```");
+    }
+  }
+  const log = await git.log({ from: baseCommit, to: "HEAD" });
+  if (log.total > 0) {
+    const logLines = log.all.map((c) => `  ${c.hash.slice(0, 7)}  ${c.message}`);
+    parts.push(`## Commits since task claimed (${log.total} total)
+` + logLines.join("\n"));
+    const branchDiff = await git.diff([baseCommit, "HEAD"]);
+    if (branchDiff) {
+      const capped = branchDiff.length > 12e3 ? branchDiff.slice(0, 12e3) + "\n... (truncated)" : branchDiff;
+      parts.push("## Full diff since task claimed\n```diff\n" + capped + "\n```");
+    }
+  }
+  return parts.length > 0 ? parts.join("\n\n") : "No changes since task was claimed.";
+}
 async function findMergeBase(configuredBase) {
   const candidates = configuredBase ? [`origin/${configuredBase}`, "origin/main", "origin/master"] : ["origin/main", "origin/master"];
   const unique = [...new Set(candidates)];
@@ -628,11 +695,6 @@ async function initCommand() {
       required: true
     });
   }
-  const detectedDefault = "main";
-  const baseBranch = await input({
-    message: "Main branch to merge PRs into:",
-    default: detectedDefault
-  });
   const config = {
     githubToken,
     githubClientId,
@@ -641,8 +703,7 @@ async function initCommand() {
     ...aiModel ? { aiModel } : {},
     github: {
       owner: owner.trim(),
-      repo: repo.trim(),
-      baseBranch: baseBranch.trim() || detectedDefault
+      repo: repo.trim()
     }
   };
   setConfig(config);
@@ -678,7 +739,6 @@ async function configCommand() {
   const field = await select2({
     message: "Which setting to change?",
     choices: [
-      { name: `Base branch          ${chalk3.dim(config.github.baseBranch ?? "(not set, uses repo default)")}`, value: "baseBranch" },
       { name: `GitHub repo          ${chalk3.dim(`${config.github.owner}/${config.github.repo}`)}`, value: "repo" },
       { name: `AI base URL          ${chalk3.dim(currentBaseUrl)}`, value: "aiBaseUrl" },
       { name: `AI model             ${chalk3.dim(currentModel)}`, value: "aiModel" },
@@ -688,16 +748,7 @@ async function configCommand() {
     ]
   });
   if (field === "cancel") return;
-  if (field === "baseBranch") {
-    const val = await input2({
-      message: "Main branch to merge PRs into:",
-      default: config.github.baseBranch ?? "main"
-    });
-    setConfig({ github: { ...config.github, baseBranch: val.trim() || "main" } });
-    console.log(chalk3.green(`
-Base branch set to: ${val.trim() || "main"}
-`));
-  } else if (field === "repo") {
+  if (field === "repo") {
     const owner = await input2({ message: "GitHub repo owner:", default: config.github.owner });
     const repo = await input2({ message: "GitHub repo name:", default: config.github.repo });
     setConfig({ github: { ...config.github, owner: owner.trim(), repo: repo.trim() } });
@@ -921,8 +972,8 @@ import { select as select3, input as promptInput } from "@inquirer/prompts";
 
 // src/lib/agent-ui.ts
 import chalk6 from "chalk";
-function formatInput(input4) {
-  return Object.entries(input4).map(([k, v]) => {
+function formatInput(input3) {
+  return Object.entries(input3).map(([k, v]) => {
     if (typeof v === "number") return `${k}=${v}`;
     if (typeof v === "string") {
       if (k === "body" || v.length > 50) return `${k}=[${v.length} chars]`;
@@ -935,8 +986,8 @@ function summarize(result) {
   const first = result.split("\n").find((l) => l.trim()) ?? result;
   return first.length > 100 ? first.slice(0, 97) + "..." : first;
 }
-function printToolCall(name, input4) {
-  const params = formatInput(input4);
+function printToolCall(name, input3) {
+  const params = formatInput(input3);
   console.log(`  ${chalk6.cyan("\u2192")} ${chalk6.bold(name)}${params ? "  " + chalk6.dim(params) : ""}`);
 }
 function printToolResult(result) {
@@ -972,15 +1023,15 @@ async function runSubAgentLoop(config, systemPrompt, userMessage, toolNames) {
     }
     if (choice.finish_reason === "tool_calls") {
       for (const tc of choice.message.tool_calls ?? []) {
-        let input4;
+        let input3;
         try {
-          input4 = JSON.parse(tc.function.arguments);
+          input3 = JSON.parse(tc.function.arguments);
         } catch {
-          input4 = {};
+          input3 = {};
         }
-        printToolCall(tc.function.name, input4);
+        printToolCall(tc.function.name, input3);
         const mod = selected.find((m) => m.definition.function.name === tc.function.name);
-        const result = mod ? await mod.execute(input4, config) : `Unknown tool: ${tc.function.name}`;
+        const result = mod ? await mod.execute(input3, config) : `Unknown tool: ${tc.function.name}`;
         printToolResult(result);
         messages.push({ role: "tool", tool_call_id: tc.id, content: result });
       }
@@ -989,7 +1040,7 @@ async function runSubAgentLoop(config, systemPrompt, userMessage, toolNames) {
 }
 
 // src/tools/submit/prompts.ts
-var REVIEWER_SYSTEM_PROMPT = "You are a concise code reviewer. Use run_command to run tests/lint if needed, and read_file to inspect specific files. Then output your review: for each acceptance criterion mark \u2705 met or \u274C not met with a one-line reason. End with an overall verdict line: Ready to submit / Not ready. Reply in the same language as the task.";
+var REVIEWER_SYSTEM_PROMPT = "You are a concise code reviewer. The diff provided shows all changes on this worker branch since the task was claimed. The branch is shared across tasks, so the diff may contain changes unrelated to this specific task \u2014 use the task title and acceptance criteria to identify which changes are relevant, and ignore the rest. Use run_command to run tests/lint if needed, and read_file to inspect specific files. Then output your review: for each acceptance criterion mark \u2705 met or \u274C not met with a one-line reason. End with an overall verdict line: Ready to submit / Not ready. Reply in the same language as the task.";
 
 // src/tools/submit/reviewer.ts
 async function reviewChanges(config, issueNumber, issue, diff) {
@@ -1023,32 +1074,41 @@ var definition = {
   }
 };
 async function run(_input, config) {
-  const branch = await getCurrentBranch();
-  const match = branch.match(/^task-(\d+)-/);
-  if (!match) {
-    return `Not on a task branch (current: ${branch}). Expected format: task-N-title.`;
+  const taskState = getConfig().taskState;
+  const issueNumber = taskState?.activeIssueNumber;
+  if (!issueNumber) {
+    return "No active task found. Claim a task first with /pick.";
   }
-  const issueNumber = parseInt(match[1], 10);
   let spinner = ora2("Loading task and diff\u2026").start();
-  const [issue, defaultBranch, diff] = await Promise.all([
+  const diffPromise = taskState?.baseCommit ? getDiffFromCommit(taskState.baseCommit) : getDiff();
+  const [issue, diff, me] = await Promise.all([
     getTask(config, issueNumber),
-    getBaseBranch(config),
-    getDiff(config.github.baseBranch)
+    diffPromise,
+    getAuthenticatedUser(config)
   ]);
   spinner.stop();
-  const reviewSpinner = ora2("Reviewing changes\u2026").start();
+  const workerBranch = makeWorkerBranchName(issue.author ?? me);
+  const branch = await getCurrentBranch();
+  const isSelfSubmit = issue.author !== null && issue.author === me;
   let review = "";
-  try {
-    review = await reviewChanges(config, issueNumber, issue, diff);
-  } catch (err) {
-    review = `(Review failed: ${err.message})`;
+  if (!isSelfSubmit) {
+    const reviewSpinner = ora2("Reviewing changes\u2026").start();
+    try {
+      review = await reviewChanges(config, issueNumber, issue, diff);
+    } catch (err) {
+      review = `(Review failed: ${err.message})`;
+    }
+    reviewSpinner.stop();
   }
-  reviewSpinner.stop();
   const divider = chalk7.dim("\u2500".repeat(70));
   console.log("\n" + divider);
-  console.log(chalk7.bold(`  Review \u2014 task #${issueNumber} "${issue.title}"`));
-  console.log(divider);
-  console.log(renderMarkdown(review));
+  if (isSelfSubmit) {
+    console.log(chalk7.yellow(`  Self-submit detected \u2014 AI review skipped.`));
+  } else {
+    console.log(chalk7.bold(`  Review \u2014 task #${issueNumber} "${issue.title}"`));
+    console.log(divider);
+    console.log(renderMarkdown(review));
+  }
   console.log(divider + "\n");
   let shouldProceed;
   try {
@@ -1084,15 +1144,15 @@ async function run(_input, config) {
   spinner = ora2("Creating pull request\u2026").start();
   let prUrl;
   try {
-    prUrl = await createPR(
-      config,
-      issue.title,
-      `Closes #${issueNumber}
-
-${issue.body ?? ""}`.trim(),
-      branch,
-      defaultBranch
-    );
+    const prBody = [
+      `Closes #${issueNumber}`,
+      issue.body ? `
+${issue.body}` : "",
+      review ? `
+## AI Review
+${review}` : ""
+    ].join("\n").trim();
+    prUrl = await createPR(config, issue.title, prBody, branch, workerBranch);
     spinner.stop();
   } catch (err) {
     spinner.stop();
@@ -1106,27 +1166,33 @@ ${issue.body ?? ""}`.trim(),
     spinner.stop();
     return `PR created (${prUrl}) but failed to update label: ${err.message}`;
   }
+  setConfig({ taskState: { activeIssueNumber: void 0, baseCommit: void 0 } });
   return `Task #${issueNumber} submitted.
 Commit: "${commitMessage.trim()}"
 PR: ${prUrl}`;
 }
-async function execute(input4, config) {
-  const branch = await getCurrentBranch();
-  const match = branch.match(/^task-(\d+)-/);
-  if (!match) return `Not on a task branch (current: ${branch}). Expected format: task-N-title.`;
-  const issueNumber = parseInt(match[1], 10);
-  const [issue, defaultBranch, diff] = await Promise.all([
+async function execute(input3, config) {
+  const taskState = getConfig().taskState;
+  const issueNumber = taskState?.activeIssueNumber;
+  if (!issueNumber) return "No active task found. Claim a task first.";
+  const diffPromise = taskState?.baseCommit ? getDiffFromCommit(taskState.baseCommit) : getDiff();
+  const [issue, diff, branch, me] = await Promise.all([
     getTask(config, issueNumber),
-    getBaseBranch(config),
-    getDiff(config.github.baseBranch)
+    diffPromise,
+    getCurrentBranch(),
+    getAuthenticatedUser(config)
   ]);
+  const workerBranch = makeWorkerBranchName(issue.author ?? me);
+  const isSelfSubmit = issue.author !== null && issue.author === me;
   let review = "";
-  try {
-    review = await reviewChanges(config, issueNumber, issue, diff);
-  } catch (err) {
-    review = `(Review failed: ${err.message})`;
+  if (!isSelfSubmit) {
+    try {
+      review = await reviewChanges(config, issueNumber, issue, diff);
+    } catch (err) {
+      review = `(Review failed: ${err.message})`;
+    }
   }
-  const commitMessage = input4["commit_message"]?.trim() || `complete: ${issue.title}`;
+  const commitMessage = input3["commit_message"]?.trim() || `complete: ${issue.title}`;
   try {
     await stageAllAndCommit(commitMessage);
   } catch (err) {
@@ -1134,15 +1200,15 @@ async function execute(input4, config) {
   }
   let prUrl;
   try {
-    prUrl = await createPR(
-      config,
-      issue.title,
-      `Closes #${issueNumber}
-
-${issue.body ?? ""}`.trim(),
-      branch,
-      defaultBranch
-    );
+    const prBody = [
+      `Closes #${issueNumber}`,
+      issue.body ? `
+${issue.body}` : "",
+      review ? `
+## AI Review
+${review}` : ""
+    ].join("\n").trim();
+    prUrl = await createPR(config, issue.title, prBody, branch, workerBranch);
   } catch (err) {
     return `Committed but PR creation failed: ${err.message}`;
   }
@@ -1183,8 +1249,8 @@ var definition2 = {
     }
   }
 };
-async function run2(input4, config) {
-  let issueNumber = input4["issue_number"];
+async function run2(input3, config) {
+  let issueNumber = input3["issue_number"];
   if (!issueNumber) {
     let tasks;
     try {
@@ -1225,8 +1291,8 @@ async function run2(input4, config) {
     return `Error: ${err.message}`;
   }
 }
-async function execute2(input4, config) {
-  const issueNumber = input4["issue_number"];
+async function execute2(input3, config) {
+  const issueNumber = input3["issue_number"];
   const spinner = ora3(`Closing #${issueNumber}\u2026`).start();
   try {
     await closeTask(config, issueNumber);
@@ -1259,8 +1325,8 @@ var definition3 = {
     }
   }
 };
-async function run3(input4, config) {
-  const preselected = input4["issue_number"];
+async function run3(input3, config) {
+  const preselected = input3["issue_number"];
   let chosenNumber;
   if (preselected !== void 0) {
     chosenNumber = preselected;
@@ -1336,23 +1402,42 @@ Finish or submit it before claiming a new one.`;
       let spinner = ora4(`Claiming #${issue.number}\u2026`).start();
       await claimTask(config, issue.number, me);
       spinner.stop();
-      const branch = makeBranchName(issue.number, me);
-      spinner = ora4(`Creating branch ${branch}\u2026`).start();
+      const workerBranch = makeWorkerBranchName(me);
+      spinner = ora4(`Switching to ${workerBranch}\u2026`).start();
       try {
-        await createAndSwitchBranch(branch);
+        const isNewWorker = await switchToBranchOrCreate(workerBranch);
         spinner.stop();
+        if (isNewWorker) {
+          spinner = ora4("Pushing worker branch\u2026").start();
+          try {
+            await pushBranch(workerBranch);
+            spinner.stop();
+          } catch {
+            spinner.warn("Could not push worker branch");
+          }
+        }
       } catch {
-        spinner.warn(`Could not create branch ${branch}`);
+        spinner.warn(`Could not switch to ${workerBranch}`);
       }
-      spinner = ora4("Pushing branch\u2026").start();
+      const branch = makeBranchName(issue.number, me);
+      spinner = ora4(`Creating task branch ${branch}\u2026`).start();
       try {
-        await pushBranch(branch);
+        await switchToBranchOrCreate(branch);
         spinner.stop();
+        spinner = ora4("Pushing task branch\u2026").start();
+        try {
+          await pushBranch(branch);
+          spinner.stop();
+        } catch {
+          spinner.warn("Could not push task branch");
+        }
       } catch {
-        spinner.warn("Could not push branch");
+        spinner.warn(`Could not create branch ${branch}`);
       }
+      const baseCommit = await getCurrentCommit();
+      setConfig({ taskState: { activeIssueNumber: issue.number, baseCommit } });
       console.log(chalk8.green(`
-  Claimed! Branch: ${branch}
+  Claimed! Branch: ${branch}  (base: ${baseCommit.slice(0, 7)})
 `));
       let openClaude;
       try {
@@ -1376,9 +1461,9 @@ Finish or submit it before claiming a new one.`;
   if (action === "close") return run2({ issue_number: issue.number }, config);
   return "Cancelled.";
 }
-async function execute3(input4, config) {
-  const issueNumber = input4["issue_number"];
-  const action = input4["action"];
+async function execute3(input3, config) {
+  const issueNumber = input3["issue_number"];
+  const action = input3["action"];
   let issue;
   try {
     issue = await getTask(config, issueNumber);
@@ -1405,16 +1490,29 @@ async function execute3(input4, config) {
     } catch (err) {
       return `Error claiming task: ${err.message}`;
     }
+    const workerBranch = makeWorkerBranchName(me);
+    try {
+      const isNewWorker = await switchToBranchOrCreate(workerBranch);
+      if (isNewWorker) {
+        try {
+          await pushBranch(workerBranch);
+        } catch {
+        }
+      }
+    } catch {
+    }
     const branch = makeBranchName(issueNumber, me);
     try {
-      await createAndSwitchBranch(branch);
+      await switchToBranchOrCreate(branch);
     } catch {
     }
     try {
       await pushBranch(branch);
     } catch {
     }
-    return `Task #${issueNumber} claimed. Branch: ${branch}`;
+    const baseCommit = await getCurrentCommit();
+    setConfig({ taskState: { activeIssueNumber: issueNumber, baseCommit } });
+    return `Task #${issueNumber} claimed. Branch: ${branch} (base commit: ${baseCommit.slice(0, 7)})`;
   }
   return `Unknown action: ${action}`;
 }
@@ -1504,8 +1602,22 @@ var definition4 = {
     }
   }
 };
-async function run4(input4, config) {
-  let title = input4["title"]?.trim();
+async function run4(input3, config) {
+  const authSpinner = ora5("Checking permissions\u2026").start();
+  let me;
+  let allowed;
+  try {
+    me = await getAuthenticatedUser(config);
+    allowed = await isCollaborator(config, me);
+    authSpinner.stop();
+  } catch (err) {
+    authSpinner.stop();
+    return `Error checking permissions: ${err.message}`;
+  }
+  if (!allowed) {
+    return `Permission denied: only repository collaborators can create tasks.`;
+  }
+  let title = input3["title"]?.trim();
   if (!title) {
     try {
       title = (await promptInput2({ message: "Task title:" })).trim();
@@ -1601,9 +1713,13 @@ async function run4(input4, config) {
   }
   return `Created #${issueNumber} "${issueTitle}" \u2014 ${htmlUrl}`;
 }
-async function execute4(input4, config) {
-  const title = input4["title"].trim();
-  const feedback = input4["feedback"];
+async function execute4(input3, config) {
+  const me = await getAuthenticatedUser(config);
+  if (!await isCollaborator(config, me)) {
+    return `Permission denied: only repository collaborators can create tasks.`;
+  }
+  const title = input3["title"].trim();
+  const feedback = input3["feedback"];
   let guide = await generateGuide(config, title);
   if (feedback) {
     guide = await generateGuide(config, title, { feedback, previousGuide: guide });
@@ -1818,8 +1934,15 @@ var definition9 = {
     }
   }
 };
-async function run9(input4, config) {
-  const issueNumber = input4["issue_number"];
+async function run9(input3, config) {
+  const issueNumber = input3["issue_number"];
+  const [me, issue] = await Promise.all([
+    getAuthenticatedUser(config),
+    getTask(config, issueNumber)
+  ]);
+  if (issue.author && issue.author !== me) {
+    return `Permission denied: only the task author (@${issue.author}) can reject task #${issueNumber}.`;
+  }
   let feedback;
   try {
     feedback = await promptInput3({
@@ -1886,9 +2009,16 @@ async function run9(input4, config) {
     return `Task #${issueNumber} rejected. Label changed to changes-needed.`;
   }
 }
-async function execute9(input4, config) {
-  const issueNumber = input4["issue_number"];
-  const feedback = input4["feedback"];
+async function execute9(input3, config) {
+  const issueNumber = input3["issue_number"];
+  const feedback = input3["feedback"];
+  const [me, issue] = await Promise.all([
+    getAuthenticatedUser(config),
+    getTask(config, issueNumber)
+  ]);
+  if (issue.author && issue.author !== me) {
+    return `Permission denied: only the task author (@${issue.author}) can reject task #${issueNumber}.`;
+  }
   let comment;
   try {
     comment = await generateRejectionComment(config, issueNumber, feedback);
@@ -1928,7 +2058,7 @@ var definition10 = {
   type: "function",
   function: {
     name: "accept",
-    description: "Accept an in-review task: merges the PR into the configured base branch and closes the issue.",
+    description: "Accept an in-review task: merges the PR into your worker branch and closes the issue.",
     parameters: {
       type: "object",
       properties: {
@@ -1938,18 +2068,18 @@ var definition10 = {
     }
   }
 };
-async function run10(input4, config) {
-  let issueNumber = input4["issue_number"];
+async function run10(input3, config) {
+  let issueNumber = input3["issue_number"];
   if (!issueNumber) {
-    const spinner2 = ora9("Loading tasks for review\u2026").start();
+    const spinner3 = ora9("Loading tasks for review\u2026").start();
     let tasks;
     let me;
     try {
       me = await getAuthenticatedUser(config);
       tasks = await listTasksForReview(config, me);
-      spinner2.stop();
+      spinner3.stop();
     } catch (err) {
-      spinner2.stop();
+      spinner3.stop();
       return `Error: ${err.message}`;
     }
     if (tasks.length === 0) return "No tasks pending review.";
@@ -1965,11 +2095,27 @@ async function run10(input4, config) {
       return "Cancelled.";
     }
   }
-  const baseBranch = config.github.baseBranch ?? "main";
+  const spinner2 = ora9("Verifying permissions\u2026").start();
+  let me2;
+  let issue;
+  try {
+    [me2, issue] = await Promise.all([
+      getAuthenticatedUser(config),
+      getTask(config, issueNumber)
+    ]);
+    spinner2.stop();
+  } catch (err) {
+    spinner2.stop();
+    return `Error: ${err.message}`;
+  }
+  if (issue.author && issue.author !== me2) {
+    return `Permission denied: only the task author (@${issue.author}) can accept task #${issueNumber}.`;
+  }
+  const targetBranch = makeWorkerBranchName(me2);
   let confirmed;
   try {
     confirmed = await select8({
-      message: `Merge PR for #${issueNumber} into ${chalk11.cyan(baseBranch)} and close issue?`,
+      message: `Merge PR for #${issueNumber} into ${chalk11.cyan(targetBranch)} and close issue?`,
       choices: [
         { name: "Yes, accept", value: true },
         { name: "Cancel", value: false }
@@ -1982,24 +2128,31 @@ async function run10(input4, config) {
   const spinner = ora9(`Merging PR for #${issueNumber}\u2026`).start();
   try {
     const result = await acceptTask(config, issueNumber);
-    spinner.succeed(`PR #${result.prNumber} merged into ${baseBranch}`);
+    spinner.succeed(`PR #${result.prNumber} merged into ${targetBranch}`);
     return `Task #${issueNumber} accepted.
-PR #${result.prNumber} merged \u2192 ${baseBranch}
+PR #${result.prNumber} merged \u2192 ${targetBranch}
 Issue closed.`;
   } catch (err) {
     spinner.fail("Failed");
     return `Error: ${err.message}`;
   }
 }
-async function execute10(input4, config) {
-  const issueNumber = input4["issue_number"];
+async function execute10(input3, config) {
+  const issueNumber = input3["issue_number"];
+  const [me, issue] = await Promise.all([
+    getAuthenticatedUser(config),
+    getTask(config, issueNumber)
+  ]);
+  if (issue.author && issue.author !== me) {
+    return `Permission denied: only the task author (@${issue.author}) can accept task #${issueNumber}.`;
+  }
+  const targetBranch = makeWorkerBranchName(me);
   const spinner = ora9(`Merging PR for #${issueNumber}\u2026`).start();
   try {
     const result = await acceptTask(config, issueNumber);
     spinner.stop();
-    const baseBranch = config.github.baseBranch ?? "main";
     return `Task #${issueNumber} accepted.
-PR #${result.prNumber} merged \u2192 ${baseBranch}
+PR #${result.prNumber} merged \u2192 ${targetBranch}
 Issue closed.`;
   } catch (err) {
     spinner.stop();
@@ -2035,8 +2188,8 @@ var definition11 = {
     }
   }
 };
-async function run11(input4, config) {
-  let issueNumber = input4["issue_number"];
+async function run11(input3, config) {
+  let issueNumber = input3["issue_number"];
   if (!issueNumber) {
     let tasks;
     try {
@@ -2087,10 +2240,10 @@ async function run11(input4, config) {
     return `Error: ${err.message}`;
   }
 }
-async function execute11(input4, config) {
-  const issueNumber = input4["issue_number"];
-  const title = input4["title"];
-  const body = input4["body"];
+async function execute11(input3, config) {
+  const issueNumber = input3["issue_number"];
+  const title = input3["title"];
+  const body = input3["body"];
   const spinner = ora10(`Updating #${issueNumber}\u2026`).start();
   try {
     await editTask(config, issueNumber, title, body);
@@ -2153,8 +2306,8 @@ var definition13 = {
     }
   }
 };
-async function execute13(input4, config) {
-  const issue = await getTask(config, input4["issue_number"]);
+async function execute13(input3, config) {
+  const issue = await getTask(config, input3["issue_number"]);
   const status = issue.labels.find((l) => l.startsWith("techunter:"))?.replace("techunter:", "") ?? "unknown";
   const assignee = issue.assignee ? `@${issue.assignee}` : "\u2014";
   const lines = [
@@ -2190,9 +2343,9 @@ var definition14 = {
     }
   }
 };
-async function execute14(input4, config) {
-  const issueNumber = input4["issue_number"];
-  const limit = input4["limit"] ?? 5;
+async function execute14(input3, config) {
+  const issueNumber = input3["issue_number"];
+  const limit = input3["limit"] ?? 5;
   const spinner = ora11(`Loading comments for #${issueNumber}...`).start();
   try {
     const comments = await listComments(config, issueNumber, limit);
@@ -2227,7 +2380,7 @@ var definition15 = {
 async function execute15(_input, _config) {
   const spinner = ora12("Reading git diff...").start();
   try {
-    const diff = await getDiff(_config.github.baseBranch);
+    const diff = await getDiff();
     spinner.stop();
     return diff;
   } catch (err) {
@@ -2260,8 +2413,8 @@ var definition16 = {
     }
   }
 };
-async function execute16(input4, _config) {
-  const command = input4["command"];
+async function execute16(input3, _config) {
+  const command = input3["command"];
   const cwd = process.cwd();
   const spinner = ora13(`$ ${command}`).start();
   try {
@@ -2453,8 +2606,8 @@ var definition17 = {
     }
   }
 };
-async function execute17(input4, _config) {
-  const focus = input4["focus"] ?? "";
+async function execute17(input3, _config) {
+  const focus = input3["focus"] ?? "";
   const spinner = ora14("Scanning project...").start();
   try {
     const cwd = process.cwd();
@@ -2503,8 +2656,8 @@ var definition18 = {
     }
   }
 };
-async function execute18(input4, _config) {
-  const filePath = input4["path"];
+async function execute18(input3, _config) {
+  const filePath = input3["path"];
   try {
     const fullPath = path3.join(process.cwd(), filePath);
     const content = await readFile3(fullPath, "utf-8");
@@ -2541,9 +2694,9 @@ var definition19 = {
     }
   }
 };
-async function execute19(input4, _config) {
-  const question = input4["question"];
-  const options = input4["options"];
+async function execute19(input3, _config) {
+  const question = input3["question"];
+  const options = input3["options"];
   const OTHER = "__other__";
   console.log("");
   console.log(chalk12.dim("  \u250C\u2500 Agent question " + "\u2500".repeat(51)));
@@ -2596,12 +2749,12 @@ var toolModules = [
 
 // src/lib/agent.ts
 var tools = toolModules.map((m) => m.definition);
-async function executeTool(name, input4, config) {
+async function executeTool(name, input3, config) {
   const mod = toolModules.find((m) => m.definition.function.name === name);
   if (!mod) return `Unknown tool: ${name}`;
   try {
     const fn = mod.run ?? mod.execute;
-    return await fn(input4, config);
+    return await fn(input3, config);
   } catch (err) {
     return `Error: ${err.message}`;
   }
@@ -2805,13 +2958,9 @@ async function initNewRepo(config, owner, repo) {
   console.log("");
   console.log(chalk14.bold.cyan(`  New repo detected: ${owner}/${repo}`));
   console.log(chalk14.dim("  Setting up Techunter for this repository...\n"));
-  const baseBranch = await input3({
-    message: "Main branch to merge PRs into:",
-    default: "main"
-  });
   const newConfig = {
     ...config,
-    github: { owner, repo, baseBranch: baseBranch.trim() || "main" }
+    github: { owner, repo }
   };
   setConfig({ github: newConfig.github });
   const ora16 = (await import("ora")).default;