Claude Code System Prompts

Usage: claude self-hosted-runner orchestrator [options]

Polls the spawn-hints queue (server returns immediately) and runs ${hooks-dir}/spawn-runner once per hint. The hook must submit work asynchronously (kubectl create job, EC2 RunInstances, ...) and exit within --hook-timeout. Exit-code contract (session spawns): 0 = success (no-op); 1 = retryable failure (backoff); >=2 = non-retryable (circuit-break); stderr tail is forwarded as the nack error. Standby (--min-idle) spawns: any non-zero exit is logged locally and re-requested after the lease.

Connection: --api-url <url> API base URL (default: ${DEFAULT_SELF_HOSTED_RUNNER_API_URL}) --environment-secret-file <path> Path to environment secret file (or set SELF_HOSTED_RUNNER_ENVIRONMENT_SECRET) (--pool-secret-file / SELF_HOSTED_RUNNER_POOL_SECRET are deprecated aliases.)

Hook: --hooks-dir <path> Directory containing the spawn-runner hook (REQUIRED). [env: SELF_HOSTED_RUNNER_HOOKS_DIR] --hook-concurrency <n> Max spawn-runner hooks running in parallel (default: ${DEFAULT_HOOK_CONCURRENCY}). Also caps how many hints are claimed per poll. --hook-timeout <sec> SIGTERM the hook after <sec> seconds (default: ${DEFAULT_HOOK_TIMEOUT_MS/1000}). --expected-spawn-seconds <n> p99 boot time for runners this orchestrator spawns (default: ${DEFAULT_EXPECTED_SPAWN_SECONDS}). Sent on every Poll as the server-side lease; if the runner doesn't register before then, the session is re-hinted with a fresh jti. HA replicas MUST use the same value. --min-idle <n> Keep at least <n> idle slots free (free capacity across runners, not runner count; default: 0, disabled). The server mints standby work_orders (no session binding) for the gap on every Poll.

SCM connector (optional — standing tunnel so Anthropic-hosted pre-session flows can reach a GHES host that is only routable from inside your network): --scm-connector-host <h[:p]> GHES hostname to forward to (port defaults to 443). Setting this enables the connector. --scm-connector-id <n> ghe_configurations.id for this org (REQUIRED with --scm-connector-host). --scm-connector-provider <s> Provider slug (default: ghe). --scm-connector-ca-file <path> Extra CA bundle (PEM) for TLS to the GHES host. --scm-connector-host-rewrite <from>=<to_host:to_port> e2e only — redirect the TCP connect while keeping Host/SNI as --scm-connector-host.

Runtime: --health-port <port> Port for /healthz HTTP listener (default: ${DEFAULT_HEALTH_PORT}). 0 disables. ALWAYS returns 200 (liveness). Body carries connected/last_*/queue_counts/warm_hints_dispatched for readiness/alerting. [env: SELF_HOSTED_RUNNER_HEALTH_PORT] --log-level <level> Log level: info or debug (default: info)

Debug: --debug-dir <path> DEV ONLY — writes each work-order JWT + decoded JSON + hook stderr to <dir>/<jti>.{jwt,json,stderr}. Auto-pruned after 5m. [env: SELF_HOSTED_RUNNER_DEBUG_DIR]

--help, -h Show this help message