feat: drain ACP queued nudges in reconciler tick

.dockerignore

@@ -1,5 +1,10 @@
 .git
-.github
+.github/*
+!.github/scripts/
+!.github/scripts/install-claude-native.sh
+!.github/scripts/install-dolt-archive.sh
+!.github/requirements/
+!.github/requirements/mcp-agent-mail.txt
 .claude
 docs
 test

.githooks/pre-commit

@@ -54,6 +54,7 @@ if command -v npm >/dev/null 2>&1; then
     # Vite preview so a bundle that builds but won't serve is caught
     # before CI.
     make dashboard-check dashboard-smoke
+    git add -f cmd/gc/dashboard/web/src/generated
     git add cmd/gc/dashboard/web/dist
   fi
 else

.github/actionlint.yaml

@@ -0,0 +1,9 @@
+self-hosted-runner:
+  labels:
+    - blacksmith-2vcpu-ubuntu-2404
+    - blacksmith-4vcpu-ubuntu-2404
+    - blacksmith-8vcpu-ubuntu-2404
+    - blacksmith-16vcpu-ubuntu-2404
+    - blacksmith-32vcpu-ubuntu-2404
+    - blacksmith-6vcpu-macos-15
+    - blacksmith-12vcpu-macos-15

.github/actions/setup-gascity-macos/action.yml

@@ -1,11 +1,11 @@
 name: Setup Gas City macOS CI
-description: Install the shared macOS dependencies for Gas City CI jobs on the self-hosted ARM64 runner
+description: Install the shared macOS dependencies for Gas City CI jobs on ARM64 macOS runners
 
 inputs:
   go-version:
     description: Go version to install. Default matches setup-gascity-ubuntu; bump both together.
     required: false
-    default: "1.25.8"
+    default: "1.25.9"
   node-version:
     description: Node.js version to install
     required: false
@@ -20,8 +20,12 @@ inputs:
     description: Whether to install the Claude CLI
     required: false
     default: "true"
+  claude-version:
+    description: Claude Code version to install with the native binary installer
+    required: false
+    default: "2.1.123"
   install-system-deps:
-    description: Whether to run brew to install tmux, jq, and flock (set to false when the self-hosted runner already has them)
+    description: Whether to run brew to install tmux, jq, and flock
     required: false
     default: "true"
 
@@ -41,15 +45,14 @@ runs:
           exit 1
         fi
 
-    - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
+    - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
       with:
         # Keep this default in lock-step with setup-gascity-ubuntu —
         # a split between Mac and Linux toolchains would surface as
         # false "Mac-only" regressions. Track the same pin both
         # actions use today; bump them together.
         go-version: ${{ inputs.go-version }}
-        # self-hosted macstadium runners reuse the same GOPATH across jobs;
-        # actions/setup-go's cache layer is flaky on reused runners, so skip it.
+        # Keep macOS parity deterministic across hosted and reused runners.
         cache: false
 
     - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
@@ -108,97 +111,23 @@ runs:
 
     - name: Install dolt v${{ inputs.dolt-version }}
       shell: bash
-      run: |
-        set -euo pipefail
-        version="${{ inputs.dolt-version }}"
-        arch="$(uname -m)"
-        case "$arch" in
-          arm64) platform_tuple=darwin-arm64 ;;
-          x86_64) platform_tuple=darwin-amd64 ;;
-          *)
-            echo "Unsupported macOS arch: $arch" >&2
-            exit 1
-            ;;
-        esac
-        # Pin an install prefix we can write without sudo on a self-hosted
-        # runner. Prefer $RUNNER_TOOL_CACHE when present (persistent across
-        # GitHub Actions jobs) and fall back to $HOME/.local.
-        cache_root="${RUNNER_TOOL_CACHE:-$HOME/.local}"
-        install_root="$cache_root/gascity-dolt/$version/$platform_tuple"
-        bin_dir="$install_root/bin"
-        if [[ ! -x "$bin_dir/dolt" ]]; then
-          echo "Installing dolt $version for $platform_tuple into $install_root"
-          mkdir -p "$install_root"
-          archive="dolt-${platform_tuple}.tar.gz"
-          tmp="$RUNNER_TEMP/dolt-${version}-${platform_tuple}"
-          rm -rf "$tmp"
-          mkdir -p "$tmp"
-          curl -fsSL -o "$tmp/$archive" \
-            "https://github.com/dolthub/dolt/releases/download/v${version}/${archive}"
-          tar -xzf "$tmp/$archive" -C "$tmp"
-          # The tarball root is "dolt-${platform_tuple}" with a bin/ subdir.
-          cp -R "$tmp/dolt-${platform_tuple}/." "$install_root/"
-          rm -rf "$tmp"
-        else
-          echo "Reusing cached dolt $version at $install_root"
-        fi
-        echo "$bin_dir" >> "$GITHUB_PATH"
-        "$bin_dir/dolt" version
+      run: ${{ github.action_path }}/../../scripts/install-dolt-archive.sh "${{ inputs.dolt-version }}" --cache
 
     - name: Install released bd v${{ inputs.bd-version }}
       shell: bash
-      run: |
-        set -euo pipefail
-        version="${{ inputs.bd-version }}"
-        arch="$(uname -m)"
-        case "$arch" in
-          arm64) bd_arch=arm64 ;;
-          x86_64) bd_arch=amd64 ;;
-          *)
-            echo "Unsupported runner architecture: $arch" >&2
-            exit 1
-            ;;
-        esac
-        cache_root="${RUNNER_TOOL_CACHE:-$HOME/.local}"
-        install_root="$cache_root/gascity-bd/${version}/darwin_${bd_arch}"
-        bin_dir="$install_root/bin"
-        if [[ ! -x "$bin_dir/bd" ]]; then
-          echo "Installing bd $version for darwin_${bd_arch} into $install_root"
-          mkdir -p "$bin_dir"
-          archive="beads_${version#v}_darwin_${bd_arch}.tar.gz"
-          tmp="$RUNNER_TEMP/bd-${version}-darwin_${bd_arch}"
-          rm -rf "$tmp"
-          mkdir -p "$tmp"
-          curl -fsSL -o "$tmp/$archive" \
-            "https://github.com/gastownhall/beads/releases/download/${version}/${archive}"
-          # Strip the top-level directory (beads_<version>_darwin_<arch>/)
-          # so `bd` lands directly in $tmp.
-          tar -xzf "$tmp/$archive" -C "$tmp" --strip-components=1
-          install -m 0755 "$tmp/bd" "$bin_dir/bd"
-          rm -rf "$tmp"
-        else
-          echo "Reusing cached bd $version at $install_root"
-        fi
-        echo "$bin_dir" >> "$GITHUB_PATH"
-        "$bin_dir/bd" version
+      run: ${{ github.action_path }}/../../scripts/install-bd-archive.sh "${{ inputs.bd-version }}" --cache
 
     - name: Install Claude CLI
       if: ${{ inputs.install-claude-cli == 'true' }}
       shell: bash
-      run: |
-        set -euo pipefail
-        # setup-node configures an npm prefix that's writable without sudo,
-        # so a plain `npm install -g` works on the self-hosted runner.
-        npm install -g @anthropic-ai/claude-code
+      run: ${{ github.action_path }}/../../scripts/install-claude-native.sh "${{ inputs.claude-version }}" --cache
 
     - name: Pin CI git identity
       shell: bash
       run: |
         set -euo pipefail
         # Dolt inherits its commit identity from the user's global git config
-        # (see cmd/gc/gc-beads-bd ensure_dolt_identity). The ubuntu-latest
-        # hosted runner ships with user.name/user.email baked in; the
-        # self-hosted macstadium runner does not.
+        # (see cmd/gc/gc-beads-bd ensure_dolt_identity).
         #
         # Force-set a deterministic CI identity unconditionally. Don't log
         # the resolved value — on a reused runner any preexisting identity

.github/actions/setup-gascity-ubuntu/action.yml

@@ -5,7 +5,7 @@ inputs:
   go-version:
     description: Go version to install
     required: false
-    default: "1.25.8"
+    default: "1.25.9"
   node-version:
     description: Node.js version to install
     required: false
@@ -20,11 +20,15 @@ inputs:
     description: Whether to install the Claude CLI
     required: false
     default: "true"
+  claude-version:
+    description: Claude Code version to install with the native binary installer
+    required: false
+    default: "2.1.123"
 
 runs:
   using: composite
   steps:
-    - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
+    - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
       with:
         go-version: ${{ inputs.go-version }}
 
@@ -38,31 +42,13 @@ runs:
 
     - name: Install dolt v${{ inputs.dolt-version }}
       shell: bash
-      run: |
-        curl -fsSL "https://github.com/dolthub/dolt/releases/download/v${{ inputs.dolt-version }}/install.sh" | sudo bash
-        dolt version
+      run: ${{ github.action_path }}/../../scripts/install-dolt-archive.sh "${{ inputs.dolt-version }}"
 
     - name: Install released bd v${{ inputs.bd-version }}
       shell: bash
-      run: |
-        version="${{ inputs.bd-version }}"
-        case "$(uname -m)" in
-          x86_64|amd64) bd_arch=amd64 ;;
-          aarch64|arm64) bd_arch=arm64 ;;
-          *)
-            echo "Unsupported runner architecture: $(uname -m)" >&2
-            exit 1
-            ;;
-        esac
-        archive="beads_${version#v}_linux_${bd_arch}.tar.gz"
-        mkdir -p "$RUNNER_TEMP/beads"
-        curl -fsSL -o "$RUNNER_TEMP/$archive" \
-          "https://github.com/gastownhall/beads/releases/download/${version}/${archive}"
-        tar -xzf "$RUNNER_TEMP/$archive" -C "$RUNNER_TEMP/beads" bd
-        sudo install -m 0755 "$RUNNER_TEMP/beads/bd" /usr/local/bin/bd
-        bd version
+      run: ${{ github.action_path }}/../../scripts/install-bd-archive.sh "${{ inputs.bd-version }}"
 
     - name: Install Claude CLI
       if: ${{ inputs.install-claude-cli == 'true' }}
       shell: bash
-      run: npm install -g @anthropic-ai/claude-code
+      run: ${{ github.action_path }}/../../scripts/install-claude-native.sh "${{ inputs.claude-version }}"

.github/blacksmith-allowlist.txt

@@ -0,0 +1,9 @@
+# GitHub logins allowed to run sponsored Blacksmith CI automatically.
+# One login per line. Blank lines and # comments are ignored.
+#
+# Blacksmith is limited to pull requests from these users. Pushes,
+# schedules, manual runs, and other contributors use GitHub-hosted runners.
+julianknutsen
+csells
+sjarmak
+quad341

.github/requirements/mcp-agent-mail.in

@@ -0,0 +1,3 @@
+# PyPI is still at 0.1.0; pin the v0.3.2 release commit until upstream
+# publishes current wheel/sdist assets.
+mcp-agent-mail @ https://github.com/Dicklesworthstone/mcp_agent_mail/archive/32783f6848bd63c425c4b5004cee3350016635fb.tar.gz