# Autonomous Task Board worker

The local worker polls Task Board, but only acquires cards explicitly moved to
`AGENT_READY`. The server control endpoint performs the lease operation in a
Firestore transaction. The worker fails closed when that endpoint or its token
is unavailable.

## Setup

1. Rotate any credentials previously shared in chat or logs.
2. Deploy the application with a new `TASK_BOARD_AGENT_SHARED_TOKEN` server
   secret. Use a different, restricted `TASK_BOARD_API_TOKEN` for record reads.
3. Configure the local variables documented in `.env.example`.
4. The default executor adapter invokes `codex exec` ephemerally with the
   `workspace-write` sandbox. `BACKLOG_AGENT_EXECUTOR_ARGS_JSON` is an argument
   array; the generated prompt file path is appended as the final argument.
5. Keep `BACKLOG_AGENT_ENABLE_RELEASE=0` until the release, smoke and rollback
   adapters have been reviewed. Commands are fixed operator configuration and
   are never generated by the model.

Run one polling cycle:

```bash
npm run agent:backlog:once
```

Run continuously at the configured interval (30 seconds by default):

```bash
npm run agent:backlog
```

Create `.data/backlog-agent/STOP` to pause acquisition without killing the
process. After three consecutive failures the circuit breaker pauses polling
for five minutes by default. Both thresholds are configurable.

## Release adapter contract

The release command must be idempotent for the pair
`FASTAPP_AGENT_TASK_ID`/`FASTAPP_AGENT_EXECUTION_ID`, publish through the
existing GitHub Release workflow, wait for its result and print a final JSON
line containing `commit_sha`, `release_url` and optionally `artifact_url`.
The smoke command must exit non-zero on an unhealthy production deployment.
The rollback command must restore the previous immutable image.

The worker never gives Task Board, Firebase, GitHub or VPS credentials to
OpenClaw. OpenClaw receives redacted task context and an MCP capability profile
restricted to `readonly` or `operator`.