@geekbeer/minion 3.17.0 → 3.22.0

package/linux/bin/hq

@@ -10,10 +10,15 @@
 #   API_TOKEN - Minion API token for authentication
 #
 # Usage:
-#   hq fetch skill <name>            - Get skill details (content, description, files)
-#   hq fetch workflow <name>         - Get workflow details (pipeline, cron, etc.)
-#   hq fetch project <id>            - Get project info (name, description, role)
-#   hq fetch project-context <id>    - Get project context (shared Markdown document)
+#   hq fetch skill <name>                 - Get skill details (content, description, files)
+#   hq fetch workflow <name>              - Get workflow details (pipeline, cron, etc.)
+#   hq fetch project <id>                 - Get project info (name, description, role)
+#   hq fetch project-context <id>         - Get project context (shared Markdown document)
+#   hq fetch dag-workflow <id>            - Get DAG workflow details (graph, version)
+#   hq fetch dag-execution <id>           - Get DAG execution details (nodes, status)
+#   hq create dag-workflow <body.json>    - Create a DAG workflow (PM only). Body: {project_id, name, graph?, ...}
+#   hq put dag-workflow <id> <body.json>  - Update DAG workflow draft (PM only). Body: {graph?, content?, ...}
+#   hq publish dag-workflow <id>          - Publish the draft as a new version (PM only, validated)
 
 set -euo pipefail
 
@@ -39,12 +44,36 @@ format_json() {
   fi
 }
 
+# Validate that a file contains syntactically valid JSON. Exits with error on failure.
+validate_json_file() {
+  local file="$1"
+  if [ ! -f "$file" ]; then
+    echo "Error: file not found: $file" >&2
+    exit 1
+  fi
+  if command -v jq &>/dev/null; then
+    if ! jq empty "$file" 2>/dev/null; then
+      echo "Error: invalid JSON syntax in $file" >&2
+      jq empty "$file" || true
+      exit 1
+    fi
+  elif command -v python3 &>/dev/null; then
+    if ! python3 -c "import json,sys; json.load(open(sys.argv[1]))" "$file" 2>/dev/null; then
+      echo "Error: invalid JSON syntax in $file" >&2
+      python3 -c "import json,sys; json.load(open(sys.argv[1]))" "$file" || true
+      exit 1
+    fi
+  else
+    echo "Error: neither jq nor python3 is available to validate JSON" >&2
+    exit 1
+  fi
+}
+
 fetch_resource() {
   local url="$1"
   local response
   local http_code
 
-  # Fetch with HTTP status code
   response=$(curl -s -w "\n%{http_code}" -H "Authorization: Bearer $API_TOKEN" "$url")
   http_code=$(echo "$response" | tail -1)
   body=$(echo "$response" | sed '$d')
@@ -58,6 +87,68 @@ fetch_resource() {
   fi
 }
 
+# Send a JSON request body from a file. Method is POST or PUT.
+send_json_request() {
+  local method="$1"
+  local url="$2"
+  local file="$3"
+  local response
+  local http_code
+
+  response=$(curl -s -w "\n%{http_code}" -X "$method" \
+    -H "Authorization: Bearer $API_TOKEN" \
+    -H "Content-Type: application/json" \
+    --data-binary "@$file" \
+    "$url")
+  http_code=$(echo "$response" | tail -1)
+  body=$(echo "$response" | sed '$d')
+
+  if [ "$http_code" -ge 200 ] && [ "$http_code" -lt 300 ]; then
+    echo "$body" | format_json
+  else
+    echo "Error: HQ API returned HTTP $http_code" >&2
+    echo "$body" >&2
+    exit 1
+  fi
+}
+
+# Send a body-less POST (e.g., publish).
+send_empty_post() {
+  local url="$1"
+  local response
+  local http_code
+
+  response=$(curl -s -w "\n%{http_code}" -X POST \
+    -H "Authorization: Bearer $API_TOKEN" \
+    -H "Content-Length: 0" \
+    "$url")
+  http_code=$(echo "$response" | tail -1)
+  body=$(echo "$response" | sed '$d')
+
+  if [ "$http_code" -ge 200 ] && [ "$http_code" -lt 300 ]; then
+    echo "$body" | format_json
+  else
+    echo "Error: HQ API returned HTTP $http_code" >&2
+    echo "$body" >&2
+    exit 1
+  fi
+}
+
+print_usage() {
+  echo "HQ API helper for minion chat" >&2
+  echo "" >&2
+  echo "Usage:" >&2
+  echo "  hq fetch skill <name>                 - Get skill details" >&2
+  echo "  hq fetch workflow <name>              - Get workflow details" >&2
+  echo "  hq fetch project <id>                 - Get project info" >&2
+  echo "  hq fetch project-context <id>         - Get project context" >&2
+  echo "  hq fetch dag-workflow <id>            - Get DAG workflow details" >&2
+  echo "  hq fetch dag-execution <id>           - Get DAG execution details" >&2
+  echo "  hq create dag-workflow <body.json>    - Create a DAG workflow (PM only)" >&2
+  echo "  hq put dag-workflow <id> <body.json>  - Update DAG workflow draft (PM only)" >&2
+  echo "  hq publish dag-workflow <id>          - Publish the draft as a new version (PM only)" >&2
+}
+
 # Main command dispatch
 case "${1:-}" in
   fetch)
@@ -65,7 +156,7 @@ case "${1:-}" in
     identifier="${3:-}"
 
     if [ -z "$resource" ] || [ -z "$identifier" ]; then
-      echo "Usage: hq fetch {skill|workflow|project|project-context} <identifier>" >&2
+      echo "Usage: hq fetch {skill|workflow|project|project-context|dag-workflow|dag-execution} <identifier>" >&2
       exit 1
     fi
 
@@ -77,7 +168,6 @@ case "${1:-}" in
         fetch_resource "$BASE_URL/workflows/$identifier"
         ;;
       project)
-        # Fetch all projects and filter by ID
         response=$(curl -s -H "Authorization: Bearer $API_TOKEN" "$BASE_URL/me/projects")
         if command -v jq &>/dev/null; then
           echo "$response" | jq --arg id "$identifier" '.projects[] | select(.id == $id)'
@@ -88,21 +178,84 @@ case "${1:-}" in
       project-context)
         fetch_resource "$BASE_URL/me/project/$identifier/context"
         ;;
+      dag-workflow)
+        fetch_resource "$BASE_URL/dag-workflows/$identifier"
+        ;;
+      dag-execution)
+        fetch_resource "$BASE_URL/dag-executions/$identifier"
+        ;;
       *)
         echo "Unknown resource: $resource" >&2
-        echo "Usage: hq fetch {skill|workflow|project|project-context} <identifier>" >&2
+        echo "Usage: hq fetch {skill|workflow|project|project-context|dag-workflow|dag-execution} <identifier>" >&2
+        exit 1
+        ;;
+    esac
+    ;;
+
+  create)
+    resource="${2:-}"
+    case "$resource" in
+      dag-workflow)
+        body_file="${3:-}"
+        if [ -z "$body_file" ]; then
+          echo "Usage: hq create dag-workflow <body.json>" >&2
+          echo "  body.json must contain at least { project_id, name } and optionally { graph, content, change_summary }" >&2
+          exit 1
+        fi
+        validate_json_file "$body_file"
+        send_json_request POST "$BASE_URL/dag-workflows" "$body_file"
+        ;;
+      *)
+        echo "Unknown create resource: $resource" >&2
+        echo "Usage: hq create dag-workflow <body.json>" >&2
         exit 1
         ;;
     esac
     ;;
+
+  put)
+    resource="${2:-}"
+    case "$resource" in
+      dag-workflow)
+        id="${3:-}"
+        body_file="${4:-}"
+        if [ -z "$id" ] || [ -z "$body_file" ]; then
+          echo "Usage: hq put dag-workflow <id> <body.json>" >&2
+          echo "  body.json may contain { graph, content, change_summary, name, is_active, maturity }" >&2
+          exit 1
+        fi
+        validate_json_file "$body_file"
+        send_json_request PUT "$BASE_URL/dag-workflows/$id" "$body_file"
+        ;;
+      *)
+        echo "Unknown put resource: $resource" >&2
+        echo "Usage: hq put dag-workflow <id> <body.json>" >&2
+        exit 1
+        ;;
+    esac
+    ;;
+
+  publish)
+    resource="${2:-}"
+    case "$resource" in
+      dag-workflow)
+        id="${3:-}"
+        if [ -z "$id" ]; then
+          echo "Usage: hq publish dag-workflow <id>" >&2
+          exit 1
+        fi
+        send_empty_post "$BASE_URL/dag-workflows/$id/publish"
+        ;;
+      *)
+        echo "Unknown publish resource: $resource" >&2
+        echo "Usage: hq publish dag-workflow <id>" >&2
+        exit 1
+        ;;
+    esac
+    ;;
+
   *)
-    echo "HQ API helper for minion chat" >&2
-    echo "" >&2
-    echo "Usage:" >&2
-    echo "  hq fetch skill <name>            - Get skill details" >&2
-    echo "  hq fetch workflow <name>          - Get workflow details" >&2
-    echo "  hq fetch project <id>             - Get project info" >&2
-    echo "  hq fetch project-context <id>     - Get project context" >&2
+    print_usage
     exit 1
     ;;
 esac

package/linux/minion-cli.sh

@@ -497,10 +497,20 @@ NVNCEOF
     supervisord)
       # Build environment line from .env values
       # Include HOME and DISPLAY since supervisord does not set them when switching user
+      #
+      # NOTE: Runtime-mutable keys (LLM_COMMAND, REFLECTION_TIME) are intentionally
+      # excluded. supervisord's environment= parser has known quirks with nested
+      # quotes (e.g. LLM_COMMAND="claude -p '{prompt}'" gets the trailing quote
+      # stripped), and values baked into the supervisord conf become stale whenever
+      # the config API updates .env at runtime. These keys are loaded exclusively
+      # by core/config.js loadEnvFile() from the .env file at process startup.
       local ENV_LINE="environment="
       local ENV_PAIRS=("HOME=\"${TARGET_HOME}\"" "DISPLAY=\":99\"")
       while IFS='=' read -r key value; do
         [[ -z "$key" || "$key" == \#* ]] && continue
+        case "$key" in
+          LLM_COMMAND|REFLECTION_TIME) continue ;;
+        esac
         ENV_PAIRS+=("${key}=\"${value}\"")
       done < /opt/minion-agent/.env
 
@@ -1028,8 +1038,12 @@ CFEOF
         SVC_HOME=$(getent passwd "$SVC_USER" | cut -d: -f6 || echo "$HOME")
       fi
       local ENV_PAIRS=("HOME=\"${SVC_HOME}\"" "DISPLAY=\":99\"")
+      # Exclude runtime-mutable keys from supervisord env (see setup path comment)
       while IFS='=' read -r key value; do
         [[ -z "$key" || "$key" == \#* ]] && continue
+        case "$key" in
+          LLM_COMMAND|REFLECTION_TIME) continue ;;
+        esac
         ENV_PAIRS+=("${key}=\"${value}\"")
       done < /opt/minion-agent/.env
       ENV_LINE+="$(IFS=,; echo "${ENV_PAIRS[*]}")"

package/linux/routes/chat.js

@@ -24,6 +24,7 @@ const { config } = require('../../core/config')
 const chatStore = require('../../core/stores/chat-store')
 const { runEndOfDay } = require('../../core/lib/end-of-day')
 const { DATA_DIR } = require('../../core/lib/platform')
+const { getActivePrimary } = require('../../core/llm-plugins/lib/active')
 
 /** @type {import('child_process').ChildProcess | null} */
 let activeChatChild = null
@@ -336,6 +337,45 @@ async function buildContextPrefix(message, context, sessionId) {
           )
         }
         break
+      case 'dag-workflow':
+        if (context.projectId && context.dagWorkflowId) {
+          parts.push(
+            `ユーザーはHQダッシュボードで DAG ワークフロー (ID: ${context.dagWorkflowId}) のエディタ/詳細を閲覧しています。`,
+            `DAG ワークフローはノード/エッジ形式でスキル間の依存関係を表現し、fan-out / join / conditional / transform / review をサポートします。`,
+            `DAG ワークフロー情報を取得するには以下を実行してください:`,
+            `  hq fetch dag-workflow ${context.dagWorkflowId}`,
+            `プロジェクトコンテキスト:`,
+            `  hq fetch project-context ${context.projectId}`,
+            `PMロールの場合、graph JSON を直接編集できます:`,
+            `  hq put dag-workflow ${context.dagWorkflowId} <body.json>   # ドラフト更新 (構造チェックのみ)`,
+            `  hq publish dag-workflow ${context.dagWorkflowId}           # ドラフトを新バージョンとして公開 (フル検証)`,
+            `新規作成は: hq create dag-workflow <body.json>`,
+            `DAG の構造（nodes/edges/node types/scope_path 等）や実行フローの詳細は ~/.minion/docs/api-reference.md の「DAG Workflows」セクション、および ~/.minion/docs/task-guides.md の「DAG ワークフロー」セクションを参照してください。`,
+            `取得した内容をもとに回答してください。`
+          )
+        }
+        break
+      case 'dag-execution':
+        if (context.projectId && context.dagExecutionId) {
+          parts.push(
+            `ユーザーはHQダッシュボードで DAG 実行 (ID: ${context.dagExecutionId}) の詳細を閲覧しています。`,
+            `DAG 実行の詳細（graph_snapshot + 各 node_executions の状態）を取得するには以下を実行してください:`,
+            `  hq fetch dag-execution ${context.dagExecutionId}`
+          )
+          if (context.dagWorkflowId) {
+            parts.push(
+              `対応するDAGワークフロー定義:`,
+              `  hq fetch dag-workflow ${context.dagWorkflowId}`
+            )
+          }
+          parts.push(
+            `プロジェクトコンテキスト:`,
+            `  hq fetch project-context ${context.projectId}`,
+            `ノード状態の意味（pending/waiting/running/completed/failed/skipped, review_status, scope_path 等）は ~/.minion/docs/api-reference.md の「DAG Workflows」セクションを参照してください。`,
+            `取得した内容をもとに回答してください。`
+          )
+        }
+        break
     }
   }
 
@@ -362,7 +402,76 @@ function getLlmBinary() {
  * Tracks block types to correctly forward tool_use vs text events
  * and counts turns for session management.
  */
-function streamLlmResponse(res, prompt, sessionId, workspaceId, originalMessage) {
+async function streamLlmResponse(res, prompt, sessionId, workspaceId, originalMessage) {
+  // Plugin system path: Primary is set → delegate to plugin
+  const primary = getActivePrimary()
+  if (primary) {
+    return streamViaPlugin(primary, res, prompt, sessionId, workspaceId, originalMessage)
+  }
+  return streamViaLegacyLlmCommand(res, prompt, sessionId, workspaceId, originalMessage)
+}
+
+async function streamViaPlugin(plugin, res, prompt, sessionId, workspaceId, originalMessage) {
+  const input = { prompt }
+  const activeRef = { current: null }
+  activeChatChild = { kill: () => activeRef.current?.kill?.('SIGTERM') }
+
+  let fullResponse = ''
+  let resolvedSessionId = sessionId || null
+  let turnCount = 0
+
+  const emit = event => {
+    if (event.type === 'session') {
+      resolvedSessionId = event.sessionId
+    } else if (event.type === 'delta') {
+      fullResponse += event.content
+      res.write(`data: ${JSON.stringify({ type: 'delta', content: event.content })}\n\n`)
+    } else if (event.type === 'text') {
+      fullResponse += event.content
+      res.write(`data: ${JSON.stringify({ type: 'text', content: event.content })}\n\n`)
+      turnCount++
+    } else {
+      res.write(`data: ${JSON.stringify(event)}\n\n`)
+    }
+  }
+
+  res.on('close', () => { activeRef.current?.kill?.('SIGTERM') })
+
+  try {
+    let output
+    if (plugin.capabilities.streaming && typeof plugin.stream === 'function') {
+      output = await plugin.stream(input, emit, { resumeSessionId: sessionId, activeChildRef: activeRef })
+    } else {
+      output = await plugin.invoke(input)
+      if (output.text) {
+        fullResponse = output.text
+        res.write(`data: ${JSON.stringify({ type: 'text', content: output.text })}\n\n`)
+        turnCount = 1
+      }
+      if (output.error) {
+        res.write(`data: ${JSON.stringify({ type: 'error', error: output.error.message })}\n\n`)
+      }
+    }
+    resolvedSessionId = output?.metadata?.sessionId || resolvedSessionId
+  } finally {
+    activeChatChild = null
+  }
+
+  if (resolvedSessionId) {
+    if (!sessionId) {
+      await chatStore.addMessage(resolvedSessionId, { role: 'user', content: originalMessage || prompt }, undefined, workspaceId)
+    }
+    if (fullResponse) {
+      await chatStore.addMessage(resolvedSessionId, { role: 'assistant', content: fullResponse }, turnCount, workspaceId)
+    }
+  }
+
+  const session = await chatStore.load(workspaceId)
+  const totalTurnCount = session?.turn_count || turnCount
+  res.write(`data: ${JSON.stringify({ type: 'done', session_id: resolvedSessionId, turn_count: totalTurnCount })}\n\n`)
+}
+
+function streamViaLegacyLlmCommand(res, prompt, sessionId, workspaceId, originalMessage) {
   return new Promise((resolve, reject) => {
     const binaryName = getLlmBinary()
     if (!binaryName) {
@@ -587,7 +696,17 @@ function streamLlmResponse(res, prompt, sessionId, workspaceId, originalMessage)
  * @param {string} prompt
  * @returns {Promise<string>} The result text
  */
-function runQuickLlmCall(prompt) {
+async function runQuickLlmCall(prompt) {
+  const primary = getActivePrimary()
+  if (primary) {
+    const output = await primary.invoke({ prompt, model: primary.name === 'claude' ? 'haiku' : undefined, timeoutMs: 30000 })
+    if (output.error) throw new Error(output.error.message)
+    return output.text || ''
+  }
+  return runQuickLlmCallLegacy(prompt)
+}
+
+function runQuickLlmCallLegacy(prompt) {
   return new Promise((resolve, reject) => {
     const binaryName = getLlmBinary()
     if (!binaryName) {

package/linux/routine-runner.js

@@ -23,6 +23,9 @@ const routineStore = require('../core/stores/routine-store')
 const logManager = require('../core/lib/log-manager')
 const runningTasks = require('../core/lib/running-tasks')
 const { expandSkillTemplates, restoreSkillTemplates } = require('../core/lib/template-expander')
+const { getActivePrimary } = require('../core/llm-plugins/lib/active')
+const os = require('os')
+const path = require('path')
 
 // Active cron jobs keyed by routine ID
 const activeJobs = new Map()
@@ -64,14 +67,19 @@ async function executeRoutineSession(routine, executionId, skillNames) {
   const sessionName = generateSessionName(routine.id, executionId)
 
   // Build prompt: run each skill in sequence, then execution-report
-  const skillCommands = skillNames.map(name => `/${name}`).join(', then ')
+  const primary = getActivePrimary()
+  const formatSkill = primary && typeof primary.formatSkillInvocation === 'function'
+    ? primary.formatSkillInvocation.bind(primary)
+    : (name) => `/${name}`
+  const skillCommands = skillNames.map(name => formatSkill(name)).join(', then ')
 
   // Inject routine context as prompt prefix (mirrors workflow-runner's role injection pattern)
   const contextPrefix = routine.context
     ? `## Context\n\n${routine.context}\n\n---\n\n`
     : ''
 
-  const prompt = `${contextPrefix}Run the following skills in order: ${skillCommands}. After completing all skills, run /execution-report to report the results.`
+  const reportSkill = formatSkill('execution-report')
+  const prompt = `${contextPrefix}Run the following skills in order: ${skillCommands}. After completing all skills, run ${reportSkill} to report the results.`
 
   // Exit code file to capture CLI result
   const exitCodeFile = `/tmp/tmux-exit-${sessionName}`
@@ -106,12 +114,19 @@ async function executeRoutineSession(routine, executionId, skillNames) {
     // Remove old exit code file
     await execAsync(`rm -f "${exitCodeFile}"`)
 
-    // Build the command to run in tmux
-    if (!config.LLM_COMMAND) {
-      throw new Error('LLM_COMMAND is not configured. Set LLM_COMMAND in minion.env (e.g., LLM_COMMAND="claude -p \'{prompt}\'")')
+    // Build the LLM invocation (prefer plugin system, fall back to LLM_COMMAND).
+    let llmCommand
+    const primary = getActivePrimary()
+    if (primary && typeof primary.buildShellInvocation === 'function') {
+      const promptFile = path.join(os.tmpdir(), `minion-routine-prompt-${sessionName}.txt`)
+      await fs.writeFile(promptFile, prompt, 'utf-8')
+      llmCommand = primary.buildShellInvocation({ promptFile })
+    } else if (config.LLM_COMMAND) {
+      const escapedPrompt = prompt.replace(/'/g, "'\\''")
+      llmCommand = config.LLM_COMMAND.replace(/\{prompt\}/g, escapedPrompt)
+    } else {
+      throw new Error('No LLM configured. Set a Primary plugin via /api/llm/config or LLM_COMMAND in minion.env')
     }
-    const escapedPrompt = prompt.replace(/'/g, "'\\''")
-    const llmCommand = config.LLM_COMMAND.replace(/\{prompt\}/g, escapedPrompt)
 
     // Create tmux session with the LLM command.
     // PATH, HOME, DISPLAY, and minion secrets are already set in

package/linux/server.js

@@ -80,6 +80,7 @@ const { threadRoutes } = require('../core/routes/threads')
 const { todoRoutes } = require('../core/routes/todos')
 const { emailRoutes } = require('../core/routes/emails')
 const { daemonRoutes } = require('../core/routes/daemons')
+const { llmRoutes } = require('../core/routes/llm')
 
 // Linux-specific routes
 const { commandRoutes, getProcessManager, getAllowedCommands } = require('./routes/commands')
@@ -290,6 +291,7 @@ async function registerAllRoutes(app) {
   await app.register(todoRoutes)
   await app.register(emailRoutes)
   await app.register(daemonRoutes, { heartbeatStatus: () => ({ running: !!heartbeatTimer, last_beat_at: lastBeatAt }) })
+  await app.register(llmRoutes)
 
   // Linux-specific routes
   await app.register(commandRoutes)

package/linux/workflow-runner.js

@@ -22,6 +22,9 @@ const workflowStore = require('../core/stores/workflow-store')
 const logManager = require('../core/lib/log-manager')
 const runningTasks = require('../core/lib/running-tasks')
 const { expandSkillTemplates, restoreSkillTemplates } = require('../core/lib/template-expander')
+const { getActivePrimary } = require('../core/llm-plugins/lib/active')
+const os = require('os')
+const path = require('path')
 
 // Active cron jobs keyed by workflow ID
 const activeJobs = new Map()
@@ -61,12 +64,17 @@ async function executeWorkflowSession(workflow, executionId, skillNames, options
   const homeDir = config.HOME_DIR
   const sessionName = generateSessionName(workflow.id, executionId)
 
-  // Build prompt: run each skill in sequence
-  const skillCommands = skillNames.map(name => `/${name}`).join(', then ')
+  // Build prompt: run each skill in sequence.
+  // Use the Primary plugin's invocation syntax (Claude/Codex use /skill, Gemini uses natural language).
+  const primary = getActivePrimary()
+  const formatSkill = primary && typeof primary.formatSkillInvocation === 'function'
+    ? primary.formatSkillInvocation.bind(primary)
+    : (name) => `/${name}`
+  const skillCommands = skillNames.map(name => formatSkill(name)).join(', then ')
 
   // Inject role context if provided (e.g. "pm" or "engineer")
   const rolePrefix = options.role
-    ? `You are acting as the "${options.role}" role in this session. Read ~/.minion/roles/${options.role}.md for your role guidelines before proceeding.\n\n`
+    ? `You are acting as the ${options.role} role in this session. Read ~/.minion/roles/${options.role}.md for your role guidelines before proceeding.\n\n`
     : ''
 
   // Inject revision feedback if this is a re-execution after reviewer requested changes
@@ -110,12 +118,22 @@ async function executeWorkflowSession(workflow, executionId, skillNames, options
     // Remove old exit code file
     await execAsync(`rm -f "${exitCodeFile}"`)
 
-    // Build the command to run in tmux
-    if (!config.LLM_COMMAND) {
-      throw new Error('LLM_COMMAND is not configured. Set LLM_COMMAND in minion.env (e.g., LLM_COMMAND="claude -p \'{prompt}\'")')
+    // Build the LLM invocation. Prefer the plugin system; fall back to LLM_COMMAND.
+    let llmCommand
+    const primary = getActivePrimary()
+    if (primary && typeof primary.buildShellInvocation === 'function') {
+      // Write prompt to a temp file and have the plugin build `<bin> ... < file`.
+      // This bypasses shell quoting entirely (root cause of the historical
+      // LLM_COMMAND quote-corruption class of bugs).
+      const promptFile = path.join(os.tmpdir(), `minion-workflow-prompt-${sessionName}.txt`)
+      await fs.writeFile(promptFile, prompt, 'utf-8')
+      llmCommand = primary.buildShellInvocation({ promptFile })
+    } else if (config.LLM_COMMAND) {
+      const escapedPrompt = prompt.replace(/'/g, "'\\''")
+      llmCommand = config.LLM_COMMAND.replace(/\{prompt\}/g, escapedPrompt)
+    } else {
+      throw new Error('No LLM configured. Set a Primary plugin via /api/llm/config or LLM_COMMAND in minion.env')
     }
-    const escapedPrompt = prompt.replace(/'/g, "'\\''")
-    const llmCommand = config.LLM_COMMAND.replace(/\{prompt\}/g, escapedPrompt)
 
     // Create tmux session with the LLM command.
     // PATH, HOME, DISPLAY, and minion secrets are already set in

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geekbeer/minion",
-  "version": "3.17.0",
+  "version": "3.22.0",
   "description": "AI Agent runtime for Minion - manages status and skill deployment on VPS",
   "main": "linux/server.js",
   "bin": {

package/rules/core.md

@@ -14,18 +14,22 @@ You are an AI agent running on a Minion VPS, managed by @geekbeer/minion.
 ```
 Project (組織・課金単位)
 ├── Context (markdown, PMが更新)
-├── Members (minion + role: pm | engineer)
-└── Workflows (スキルのパイプライン + オプションcronスケジュール)
-    ├── Versions (pipeline の不変スナップショット)
-    └── Executions (実行履歴, ステップごとの進捗)
+├── Members (minion + role: pm | engineer | accountant)
+├── Workflows (スキルの線形パイプライン + オプションcronスケジュール)
+│   ├── Versions (pipeline の不変スナップショット)
+│   └── Executions (実行履歴, ステップごとの進捗)
+└── DAG Workflows (ノード/エッジ形式のワークフロー, beta)
+    ├── Versions (graph の不変スナップショット)
+    └── Executions (node_executions の集合, scope-aware)
 
 Minion
 └── Routines (ミニオンローカルの定期タスク, cron付き)
 ```
 
-- **Workflow**: プロジェクトスコープ。バージョン管理されたスキルパイプライン。
+- **Workflow**: プロジェクトスコープ。線形パイプライン形式のバージョン管理ワークフロー。ミニオンAPIで push/fetch 可能。
+- **DAG Workflow**: プロジェクトスコープ。ノード/エッジで依存関係を表現する新方式。fan-out / join / conditional / transform / review をサポート。作成・編集はHQダッシュボードのみ、ミニオンは `dag-step-poller` で自動実行。詳細は `~/.minion/docs/api-reference.md` の「DAG Workflows」と `~/.minion/docs/task-guides.md` の「DAG ワークフロー」を参照。
 - **Routine**: ミニオンスコープ。ミニオンローカルの定期タスク。
-- ミニオンは複数プロジェクトに `pm` または `engineer` として参加できる。
+- ミニオンは複数プロジェクトに `pm`、`engineer`、`accountant` として参加できる。
 
 ## Email
 
@@ -153,7 +157,9 @@ Note: Codex CLI の `.codex/` ディレクトリはLLMからの直接編集が
 
 `$HQ_URL/api/minion/*` — 認証: `Authorization: Bearer $API_TOKEN`
 
-主なカテゴリ: Projects, Context, Workflows, Skills, Executions, Routines, Reports
+主なカテゴリ: Projects, Context, Workflows, DAG Workflows, Skills, Executions, Routines, Reports
+
+DAG ワークフローのランタイム API は `$HQ_URL/api/dag/minion/*`（pending-nodes / claim-node / node-complete）。`dag-step-poller` デーモンが自動でポーリングするため、通常ミニオンのAI側から直接叩くことは無い。
 
 ## Environment Variables