@aiwg/cli 2026.10.1 → 2026.10.3

package/dist/src/providers/capability-matrix.yaml

@@ -15,6 +15,22 @@ version: "1.0"
 providers:
   claude-code:
     display_name: Claude Code
+    aliases:
+      - claude
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: H
+      channel: "claude -p --output-format stream-json --verbose; terminal result extraction"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 30000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2900"
+        source_date: "2026-10-08"
+        live_qualified: false
+        sources:
+          - "host-help: claude 2.1.295 on titan (--version/--help only)"
+          - "tools/ralph-external/lib/claude-adapter.mjs"
     status: stable
     daemon_tier: unsupported
     daemon_pty_adapter: false
@@ -77,6 +93,20 @@ providers:
 
   codex:
     display_name: OpenAI Codex
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: H
+      channel: "codex debug models + exec --json -o F thread/turn/item/error event stream"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 50000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2897"
+        source_date: "2026-10-08"
+        live_qualified: false
+        sources:
+          - "host-help: codex-cli 0.161.0 on titan (--version/--help only); `codex mcp-server --help` still prints root help"
+          - "tools/ralph-external/lib/codex-adapter.mjs"
     aliases:
       - openai
     status: stable
@@ -146,6 +176,21 @@ providers:
 
   copilot:
     display_name: GitHub Copilot
+    aliases:
+      - github-copilot
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: D
+      channel: "copilot -p --output-format json; scoped --allow-tool permissions"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 30000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2901"
+        source_date: "2026-10-08"
+        live_qualified: false
+        sources:
+          - "https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-programmatic-reference"
     status: stable
     daemon_tier: unsupported
     daemon_pty_adapter: false
@@ -181,6 +226,21 @@ providers:
 
   factory:
     display_name: Factory AI
+    aliases:
+      - factory-ai
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: R
+      channel: "droid exec --output-format stream-json; terminal parser to qualify"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 30000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2902"
+        source_date: "2026-10-07"
+        live_qualified: false
+        sources:
+          - "tools/ralph-external/lib/factory-adapter.mjs"
     status: stable
     # droid CLI runs headless via `droid exec`; AIWG daemon provides persistence layer
     daemon_tier: unsupported
@@ -217,6 +277,20 @@ providers:
 
   cursor:
     display_name: Cursor IDE
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: D
+      channel: "agent -p --output-format json; sandbox/permission profile to qualify"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 30000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2903"
+        source_date: "2026-10-08"
+        live_qualified: false
+        sources:
+          - "https://cursor.com/docs/cli/overview"
+          - "https://cursor.com/docs/cli/reference/output-format"
     status: stable
     # Cursor requires a display server (VS Code extension host) — daemon not supported
     daemon_tier: unsupported
@@ -253,6 +327,20 @@ providers:
 
   opencode:
     display_name: OpenCode
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: R
+      channel: "opencode run --format json; JSONL framing to qualify"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 30000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2904"
+        source_date: "2026-10-07"
+        live_qualified: false
+        sources:
+          - "tools/ralph-external/lib/opencode-adapter.mjs"
+          - "https://opencode.ai/docs/cli/"
     status: stable
     daemon_tier: unsupported
     daemon_pty_adapter: false
@@ -288,6 +376,19 @@ providers:
 
   warp:
     display_name: Warp Terminal
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: D
+      channel: "oz agent run --prompt/--model/--cwd/--profile; stdout capture"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 30000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2905"
+        source_date: "2026-10-08"
+        live_qualified: false
+        sources:
+          - "https://docs.warp.dev/agents/cli/oz-cli/"
     status: stable
     daemon_tier: unsupported
     daemon_pty_adapter: false
@@ -324,6 +425,28 @@ providers:
 
   windsurf:
     display_name: Devin Desktop
+    aliases:
+      - devin
+      - devin-desktop
+      - devin-local
+      - cascade
+    route_feasibility:
+      scope: out
+      identity: unavailable
+      evidence: R
+      channel: "none - no verified headless Desktop worker command; recheck B-OG-47"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 1, tokens: 0, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: null
+        source_date: "2026-10-08"
+        live_qualified: false
+        sources:
+          - "src/providers/provider-definitions.ts#windsurf"
+          - "https://docs.devin.ai/cli/reference/commands.md"
+          - "https://docs.devin.ai/_llms/en/desktop.md"
+        exclusion_gap: "Devin Desktop documents no headless worker command and no worker-serving MCP tool; its MCP settings configure clients, IDE startup is not inference."
+        recheck: "Rechecked 2026-10-08: Desktop unchanged, still OUT. Devin CLI documents `devin -p/--print`, `--model`, `--prompt-file`, `--permission-mode` and `--sandbox` (no JSON output or effort flag found; `devin acp` is ACP, `devin mcp` manages client servers). Devin CLI stays a distinct future-provider surface, not a windsurf alias, until registry support exists."
     status: stable
     # Devin Desktop uses the Windsurf compatibility surface and requires a VS Code host — daemon not supported
     daemon_tier: unsupported
@@ -361,6 +484,25 @@ providers:
 
   grokbot:
     display_name: Grok Bot
+    route_feasibility:
+      scope: out
+      identity: unavailable
+      evidence: R
+      channel: "none - desktop CreateAgent is not a headless subprocess contract; recheck B-OG-47"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 1, tokens: 0, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: null
+        source_date: "2026-10-08"
+        live_qualified: false
+        sources:
+          - "src/providers/provider-definitions.ts#grokbot"
+          - "https://docs.x.ai/grok-bot/overview.md"
+          - "https://docs.x.ai/grok-bot/skills-routines-and-automations.md"
+          - "https://docs.x.ai/grok-bot/computer-and-apps.md"
+          - "https://docs.x.ai/grok-bot/faq.md"
+        exclusion_gap: "Grok Bot runs Bots on xAI-hosted computers driven from desktop/mobile chat, routines and connectors; no documented local CLI, headless subprocess or worker-serving MCP tool."
+        recheck: "Rechecked 2026-10-08 against the official Grok Bot docs: no change, still OUT. Third-party bridges are not official interfaces and were not evaluated; desktop CreateAgent names are never synthesized into a command."
     status: stable
     # Multi-agent desktop assistant runtime. Distinct from Cursor IDE and from
     # xAI Grok Build / API. Native skill root is operator-configured via
@@ -403,6 +545,19 @@ providers:
 
   grok-build:
     display_name: Grok Build
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: R
+      channel: "grok -p --output-format streaming-json; bounded parser + model/effort pinning"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 30000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2906"
+        source_date: "2026-10-07"
+        live_qualified: false
+        sources:
+          - "src/providers/grok-build-headless.ts"
     status: experimental
     # xAI Grok Build CLI/TUI. Distinct from Grok Bot (`grokbot`).
     # #2577: fixture-backed native subagents and background tasks; see
@@ -448,6 +603,20 @@ providers:
 
   hermes:
     display_name: Hermes
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: H
+      channel: "hermes -z plain final + --usage-file; session-filtered log binding"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 30000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2912"
+        source_date: "2026-10-07"
+        live_qualified: false
+        sources:
+          - "host-help: hermes 0.20.6 on titan (2026-10-07 observation; not rechecked in this pass)"
+          - "/usr/local/lib/hermes-agent/mcp_serve.py"
     status: stable
     daemon_tier: unsupported
     daemon_pty_adapter: false
@@ -488,6 +657,22 @@ providers:
 
   muse:
     display_name: Muse Code
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: H
+      channel: "model-catalog JSON + exec --json invocation-bound session logs"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 30000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2898"
+        source_date: "2026-10-08"
+        live_qualified: false
+        sources:
+          - "host-help: Muse Code 1.4.4 (1.4.4-R5419.1) on titan (--version/--help only)"
+          - "tools/ralph-external/lib/muse-adapter.mjs"
+          - "test/fixtures/providers/muse/direct-manifest.json (synthetic only; strict finals/live controls remain unqualified)"
+          - "docs/providers/muse-ralph-exec.md (manual smoke run and S1 blockers)"
     status: stable
     # Meta's terminal/CI coding agent (Muse Spark-powered). Explicitly not a
     # model-API surface: Glimmer/Image/Voice are out of scope.
@@ -534,6 +719,19 @@ providers:
 
   openclaw:
     display_name: OpenClaw
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: D
+      channel: "openclaw agent exec --json; workspace/settings mapping to qualify"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 30000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2907"
+        source_date: "2026-10-08"
+        live_qualified: false
+        sources:
+          - "https://docs.openclaw.ai/cli/agent"
     status: stable
     daemon_tier: unsupported
     daemon_pty_adapter: false
@@ -567,6 +765,25 @@ providers:
 
   openhuman:
     display_name: OpenHuman
+    aliases:
+      - tinyhumansai
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: D
+      channel: "openhuman-core --model M call --method openhuman.agent_chat --params-stdin; conductor-framed params JSON on stdin to EOF, final JSON stdout, no event stream"
+      fanout: unknown
+      probe_budget: { status: proposed, calls: 3, tokens: 30000 }
+      coverage:
+        profile_issue: "roctinam/aiwg#2911"
+        source_date: "2026-10-08"
+        live_qualified: false
+        sources:
+          - "https://github.com/tinyhumansai/openhuman/blob/216ea322a3c1269dada70751ac5c08eac7dc7596/crates/openhuman-core/src/core/cli.rs"
+          - "https://github.com/tinyhumansai/openhuman/blob/216ea322a3c1269dada70751ac5c08eac7dc7596/crates/openhuman-core/src/agent/schemas.rs"
+          - "https://github.com/tinyhumansai/openhuman/blob/216ea322a3c1269dada70751ac5c08eac7dc7596/crates/openhuman-core/src/mcp/server/tools/specs.rs"
+          - "https://github.com/tinyhumansai/openhuman/releases/tag/v0.64.14"
+        recheck: "Rechecked 2026-10-08 and promoted into S1 (doc/source-only, unqualified): `openhuman-core --model M call --method openhuman.agent_chat --params-stdin` reads the `message`, `model_override` and `cwd` params as JSON from stdin until EOF, runs one in-process agent turn and prints the JSON result on stdout; the conductor frames the params from the brief so prompt text never enters argv. Profile pinned to 0.64.14; live qualification is an open S1 blocker (not installed on an authorized host, budget proposed). Effort, step cap, approval/sandbox mapping and child fan-out are unknown. Native `openhuman-core mcp` `agent.run_subagent` takes only `agent_id`/`prompt` (no model, effort or workspace pin) and may nest subagents, so it is not a qualifying worker MCP tool."
     status: experimental
     # tinyhumansai/openhuman — OSS personal-AI runtime (Rust core + Tauri shell).
     # AIWG-convention-aware out of the box (.agents/, AGENTS.md, .claude/, .codex/).
@@ -605,6 +822,20 @@ providers:
 
   antigravity:
     display_name: Google Antigravity CLI
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: R
+      channel: "agy -p stream-json per provider-contract; fixture-qualified flags only"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 30000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2908"
+        source_date: "2026-10-07"
+        live_qualified: false
+        sources:
+          - "agentic/code/providers/antigravity/provider-contract.v1.json"
+          - "https://antigravity.google/docs/cli/headless/"
     aliases:
       - agy
     status: experimental
@@ -650,6 +881,19 @@ providers:
 
   deepseek-harness:
     display_name: DeepSeek Harness
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: R
+      channel: "dsh --profile headless + validated Cordis route patch; no guessed --model flag"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 30000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2909"
+        source_date: "2026-10-07"
+        live_qualified: false
+        sources:
+          - "tools/ralph-external/lib/deepseek-harness-adapter.mjs"
     aliases:
       - dsh
     status: experimental
@@ -692,6 +936,19 @@ providers:
 
   pi:
     display_name: Pi Coding Agent
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: R
+      channel: "pi --mode json --model/--thinking/--tools; closed stdin, no RPC abort"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 30000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2910"
+        source_date: "2026-10-07"
+        live_qualified: false
+        sources:
+          - "tools/ralph-external/lib/pi-adapter.mjs"
     aliases:
       - pi-coding-agent
     status: experimental
@@ -733,6 +990,19 @@ providers:
 
   omp:
     display_name: Oh My Pi
+    route_feasibility:
+      scope: in
+      identity: runtime-configured-only
+      evidence: R
+      channel: "omp --mode json --model/--thinking/--profile; --no-tools for text-only"
+      fanout: unknown
+      probe_budget: { status: authorized, calls: 3, tokens: 30000, authorized_by: operator, authorized_at: "2026-10-07", hosts: [titan, noodle] }
+      coverage:
+        profile_issue: "roctinam/aiwg#2910"
+        source_date: "2026-10-07"
+        live_qualified: false
+        sources:
+          - "tools/ralph-external/lib/omp-adapter.mjs"
     aliases:
       - oh-my-pi
     status: experimental

package/dist/src/providers/grok-build-headless.js

@@ -20,10 +20,12 @@ function scrubEvent(event, env) {
     return JSON.parse(redactGrokOutput(JSON.stringify(event), env));
 }
 function isTerminal(event) {
-    return ['result', 'error', 'complete', 'completed'].includes(String(event.type ?? event.event ?? ''));
+    return event.type === 'end' || event.type === 'error';
 }
 function isError(event) {
-    return event.is_error === true || event.error !== undefined || ['error', 'failed'].includes(String(event.type ?? event.event ?? ''));
+    return event.type === 'error' || event.is_error === true || event.error != null
+        || (event.type === 'end' && event.stopReason !== 'end_turn')
+        || (['tool_call', 'tool_call_update'].includes(String(event.type)) && event.status === 'failed');
 }
 function stopProcess(child) {
     if (child.pid && process.platform !== 'win32') {
@@ -44,7 +46,7 @@ export async function runGrokHeadless(options) {
     const timeoutMs = Math.min(Math.max(options.timeoutMs ?? DEFAULT_TIMEOUT_MS, 1), MAX_TIMEOUT_MS);
     const maxBytes = Math.min(Math.max(options.maxOutputBytes ?? DEFAULT_MAX_OUTPUT, 1024), DEFAULT_MAX_OUTPUT);
     const env = options.env ?? process.env;
-    const args = [...(options.prefixArgs ?? []), '--no-auto-update', ...(options.disableSubagents ? ['--no-subagents'] : []), '-p', options.prompt, '--output-format', format];
+    const args = [...(options.prefixArgs ?? []), ...(options.disableSubagents ? ['--no-subagents'] : []), '-p', options.prompt, '--output-format', format];
     return new Promise((resolve, reject) => {
         const child = spawn(options.command ?? 'grok', args, {
             cwd: options.cwd,
@@ -88,7 +90,7 @@ export async function runGrokHeadless(options) {
             if (format === 'json') {
                 try {
                     const parsed = JSON.parse(cleanStdout);
-                    if (isError(parsed))
+                    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed) || isError(parsed) || parsed.stopReason !== 'end_turn')
                         throw new Error('Grok Build returned a JSON error result');
                     events.push(parsed);
                 }
@@ -105,7 +107,40 @@ export async function runGrokHeadless(options) {
         if (options.signal?.aborted)
             abort();
         child.on('error', error => finish(new Error(`Grok Build headless launch failed: ${error.message}`)));
+        const acceptEvent = (event) => {
+            if (settled)
+                return;
+            if (!event || typeof event !== 'object' || Array.isArray(event)) {
+                finish(new Error('Invalid Grok Build streaming-json event'));
+                return;
+            }
+            // ACP end is always last. Failure is latched across the whole stream.
+            if (terminalSeen) {
+                finish(new Error('Grok Build event after terminal event'));
+                return;
+            }
+            const safe = scrubEvent(event, env);
+            events.push(safe);
+            options.onEvent?.(safe);
+            if (isError(safe))
+                terminalError = true;
+            if (isTerminal(safe)) {
+                terminalSeen = true;
+                // Some builds leave background work attached after end. Allow a
+                // short drain, then terminate the process group.
+                drainTimer ??= setTimeout(() => {
+                    if (pending.trim()) {
+                        finish(new Error('Invalid trailing Grok Build streaming-json event'));
+                        return;
+                    }
+                    stopProcess(child);
+                    finish(undefined, terminalError ? 1 : 0);
+                }, 300);
+            }
+        };
         child.stdout.on('data', (chunk) => {
+            if (settled)
+                return;
             bytes += chunk.length;
             if (bytes > maxBytes) {
                 finish(new Error(`Grok Build headless output exceeded ${maxBytes} bytes`));
@@ -130,17 +165,9 @@ export async function runGrokHeadless(options) {
                     finish(new Error('Invalid Grok Build streaming-json event'));
                     return;
                 }
-                const safe = scrubEvent(event, env);
-                events.push(safe);
-                options.onEvent?.(safe);
-                if (isError(safe))
-                    terminalError = true;
-                if (isTerminal(safe)) {
-                    terminalSeen = true;
-                    // Some provider builds leave background work attached after the
-                    // result. Allow a short drain, then terminate the process group.
-                    drainTimer ??= setTimeout(() => { stopProcess(child); finish(undefined, terminalError ? 1 : 0); }, 300);
-                }
+                acceptEvent(event);
+                if (settled)
+                    return;
             }
         });
         child.stderr.on('data', (chunk) => {
@@ -151,12 +178,7 @@ export async function runGrokHeadless(options) {
         child.on('close', code => {
             if (format === 'streaming-json' && pending.trim()) {
                 try {
-                    const event = scrubEvent(JSON.parse(pending), env);
-                    events.push(event);
-                    if (isError(event))
-                        terminalError = true;
-                    if (isTerminal(event))
-                        terminalSeen = true;
+                    acceptEvent(JSON.parse(pending));
                 }
                 catch {
                     finish(new Error('Invalid trailing Grok Build streaming-json event'));

package/dist/src/providers/provider-definitions.js

@@ -362,7 +362,15 @@ const BUILT_IN_SEEDS = [
         builtIn: true,
         surfaces: { primary: 'claude-code', compatibility: ['claude'], precedence: ['.claude/', 'CLAUDE.md'], related: [] },
         detection: {
-            env: ['CLAUDE_CODE_VERSION', 'ANTHROPIC_API_KEY'],
+            // CLAUDECODE / CLAUDE_CODE_ENTRYPOINT / CLAUDE_CODE_DESKTOP_APP_VERSION
+            // are the markers current Claude Code (CLI and Desktop Code tab)
+            // actually sets; confirmed empirically in both a CLI session and a
+            // Desktop Code-tab session (docs/planning/claude-desktop-provider/
+            // assessment-and-issue-plan.md §2.1). `CLAUDE_CODE_VERSION` is not set
+            // by current Claude Code, and `ANTHROPIC_API_KEY` is a false-positive
+            // signal — any non-Claude session with that key set would otherwise
+            // identify as `claude` (#2627).
+            env: ['CLAUDECODE', 'CLAUDE_CODE_ENTRYPOINT', 'CLAUDE_CODE_DESKTOP_APP_VERSION'],
             process: ['claude-code', 'claude'],
             capabilityId: 'claude-code',
             runtimeEnvPriority: 100,

package/dist/src/providers/provider-definitions.mjs

@@ -26,9 +26,9 @@ const MCP_INJECTION_DEFINITIONS = [
       providerId: 'claude-code',
       includeInSupportedProviders: true,
       configFormat: 'json',
-      serverConfigFormat: 'standard',
+      serverConfigFormat: 'claude-code',
       serversKey: 'mcpServers',
-      configPath: { scope: 'project', path: '.claude/settings.local.json' },
+      configPath: { scope: 'project', path: '.mcp.json' },
       supportsEphemeral: true,
     },
   },
@@ -178,10 +178,17 @@ export function listMcpInjectProviderIds() {
 }
 
 export function resolveMcpConfigPath(provider, projectDir = '.', options = {}) {
+  if (normalizeRuntimeProviderId(provider) === 'codex' && process.env.CODEX_HOME) {
+    return resolve(process.env.CODEX_HOME, 'config.toml');
+  }
   if (normalizeRuntimeProviderId(provider) === 'antigravity' && options.scope === 'user') {
     const home = process.env.HOME || process.env.USERPROFILE || homedir();
     return resolve(home, '.gemini/config/mcp_config.json');
   }
+  if (normalizeRuntimeProviderId(provider) === 'claude-code' && options.scope === 'user') {
+    const home = process.env.HOME || process.env.USERPROFILE || homedir();
+    return resolve(home, '.claude.json');
+  }
   if (normalizeRuntimeProviderId(provider) === 'omp' && options.scope === 'user') {
     return resolve(resolveOmpPaths(options).agentDir, 'mcp.json');
   }

package/dist/src/serve/executor-registry.js

@@ -646,37 +646,29 @@ export class ExecutorRegistry extends EventEmitter {
     pickByFilter(filter, longRunning = false) {
         const candidates = [...this.executors.values()].filter((e) => e.connected);
         const rejected = [];
-        // If executor_id is pinned, target it directly
+        // A pin selects an identity; it cannot waive the same controls used by automatic routing.
+        const rejection = (executor) => {
+            if (longRunning && !executor.capabilities.includes('resumable')) {
+                return 'long_running requires resumable capability';
+            }
+            const missing = (filter.capabilities ?? []).filter(capability => !executor.capabilities.includes(capability));
+            if (missing.length > 0)
+                return `missing capabilities: ${missing.join(', ')}`;
+            return undefined;
+        };
         if (filter.executor_id) {
             const pinned = this.executors.get(filter.executor_id);
-            if (!pinned) {
-                return null;
-            }
-            if (!pinned.connected) {
-                return null;
-            }
-            if (longRunning && !pinned.capabilities.includes('resumable')) {
+            if (!pinned?.connected || rejection(pinned))
                 return null;
-            }
             return { executor: pinned, reason: 'pinned by executor_id', rejected: [] };
         }
-        // Filter by required capabilities
         const filtered = [];
         for (const executor of candidates) {
-            // Long-running requires resumable
-            if (longRunning && !executor.capabilities.includes('resumable')) {
-                rejected.push({ executorId: executor.executorId, reason: 'long_running requires resumable capability' });
-                continue;
-            }
-            // All requested capabilities must be present
-            if (filter.capabilities && filter.capabilities.length > 0) {
-                const missing = filter.capabilities.filter((c) => !executor.capabilities.includes(c));
-                if (missing.length > 0) {
-                    rejected.push({ executorId: executor.executorId, reason: `missing capabilities: ${missing.join(', ')}` });
-                    continue;
-                }
-            }
-            filtered.push(executor);
+            const reason = rejection(executor);
+            if (reason)
+                rejected.push({ executorId: executor.executorId, reason });
+            else
+                filtered.push(executor);
         }
         if (filtered.length === 0)
             return null;

package/dist/src/serve/fleet-mission-conductor.js

@@ -10,6 +10,7 @@
  */
 import { routeMission } from './agent-router.js';
 import { StackAdapterRegistry } from './stack-adapters.js';
+import { assertMissionWorkerHandoff } from '../mission-protocol/codecs.js';
 const terminalFailures = new Set(['failed', 'cancelled', 'timed-out']);
 const reviewStates = new Set(['unknown', 'operator-review-required']);
 function lifecycleSatisfied(kind, state, health) {
@@ -114,6 +115,14 @@ export class FleetMissionConductor {
         this.ledgerStore = options.ledgerStore;
     }
     async conduct(plan, pool, resumeFrom) {
+        assertMissionWorkerHandoff(plan, 'fleet-conductor');
+        for (const cycle of plan.cycles)
+            assertMissionWorkerHandoff(cycle, 'fleet-conductor');
+        if (resumeFrom) {
+            assertMissionWorkerHandoff(resumeFrom, 'fleet-conductor');
+            for (const cycle of resumeFrom.cycles)
+                assertMissionWorkerHandoff(cycle, 'fleet-conductor');
+        }
         const priorById = new Map((resumeFrom?.cycles ?? []).map((cycle) => [cycle.cycleId, cycle]));
         const ledger = {
             missionId: plan.missionId,

package/dist/src/serve/mission-conductor.js

@@ -24,6 +24,7 @@
  */
 import { routeMission } from './agent-router.js';
 import { StackAdapterRegistry } from './stack-adapters.js';
+import { assertMissionWorkerHandoff } from '../mission-protocol/codecs.js';
 const defaultRunWorker = () => ({ output: undefined, cost: 0 });
 const defaultScore = (r) => (r.output ? r.output.length : 0);
 /**
@@ -46,6 +47,14 @@ export class MissionConductor {
      * crash-resilient resume path; their prior results are carried forward.
      */
     async conduct(plan, pool, resumeFrom) {
+        assertMissionWorkerHandoff(plan, 'mission-conductor');
+        for (const cycle of plan.cycles)
+            assertMissionWorkerHandoff(cycle, 'mission-conductor');
+        if (resumeFrom) {
+            assertMissionWorkerHandoff(resumeFrom, 'mission-conductor');
+            for (const cycle of resumeFrom.cycles)
+                assertMissionWorkerHandoff(cycle, 'mission-conductor');
+        }
         if (plan.cycles.some((cycle) => cycle.graph) && !plan.graph) {
             throw new Error('Graph-projected worker cycles require MissionPlan.graph identity.');
         }

package/dist/src/serve/shared-host-scheduler.js

@@ -10,6 +10,7 @@
  */
 import { closeSync, existsSync, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
 import { dirname } from 'node:path';
+import { assertMissionWorkerHandoff } from '../mission-protocol/codecs.js';
 export class InMemoryAdmissionStore {
     snapshot = { revision: 0, records: {} };
     transact(mutate) {
@@ -88,6 +89,7 @@ export class SharedHostScheduler {
         }
     }
     submit(request) {
+        assertMissionWorkerHandoff(request, 'managed-admission');
         this.validateRequest(request);
         return this.store.transact(snapshot => {
             const existing = snapshot.records[request.requestId];