@galda/cli 0.10.16 → 0.10.19

package/bin/manager-for-ai.mjs

@@ -11,6 +11,7 @@ import { existsSync } from 'node:fs';
 import { join, resolve, dirname } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { createServer } from 'node:net';
+import { isCommandOnPath, resolveConnectedAgents } from '../engine/lib.mjs';
 
 const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
 const say = (m) => console.log(`[galda] ${m}`);
@@ -36,21 +37,26 @@ async function pickPort(start) {
 const WIN = process.platform === 'win32';
 const probe = (cmd, args) => spawnSync(cmd, args, { encoding: 'utf8', shell: WIN });
 
-// 1) claude CLI (the engine — required)
+// 1) Worker agent CLIs. Galda drives whichever you have — Claude Code OR Codex;
+// at least one is required. Claude Code is safe to run for detection (notarized),
+// so we probe it for a version string. Codex is detected by a PATH lookup ONLY —
+// never executed — because running the codex binary can trip macOS XProtect (a
+// false positive that looks like Galda shipped malware). Galda never installs or
+// downloads either; it only offers what's already on the machine.
 const claude = probe('claude', ['--version']);
-if (claude.error || claude.status !== 0) {
-  say('ERROR: the `claude` CLI was not found.');
-  say('Galda runs on your Claude Code subscription (no extra API cost).');
-  say('Install it first: https://claude.com/claude-code — then log in with `claude`.');
+const hasClaude = !claude.error && claude.status === 0;
+const hasCodex = isCommandOnPath('codex', { pathEnv: process.env.PATH || '', sep: WIN ? ';' : ':', pathExt: WIN ? (process.env.PATHEXT || '') : '' });
+if (!hasClaude && !hasCodex) {
+  say('ERROR: no agent CLI found — Galda needs Claude Code or Codex on this machine.');
+  say('Install Claude Code (https://claude.com/claude-code — runs on your subscription, no extra API cost)');
+  say('or Codex, then run `npx @galda/cli` again.');
   process.exit(1);
 }
-say(`claude CLI: ${claude.stdout.trim()}`);
-
-// 1b) codex CLI (optional alternate worker). Informational only — so Codex users
-// see it's detected and supported, not just Claude Code. Galda can run workers on
-// either; you pick per task (Claude Code / Codex) in the board's composer.
-const codex = probe('codex', ['--version']);
-if (!codex.error && codex.status === 0) say(`codex CLI: ${codex.stdout.trim()} (Codex)`);
+if (hasClaude) say(`claude CLI: ${claude.stdout.trim()}`);
+if (hasCodex) say('codex CLI: detected (Codex)');
+// Hand the detected set to the server so the board only offers installed agents.
+const availableAgents = resolveConnectedAgents({ claude: hasClaude, codex: hasCodex });
+process.env.MANAGER_AVAILABLE_AGENTS = availableAgents.join(',');
 
 // 2) Chrome (for verification proof) — recommended; warn if missing
 const chromeCandidates = [