@ours.network/fleet 0.10.0-nightly.2 → 0.10.0-nightly.3

package/README.md

@@ -75,7 +75,7 @@ The state dir contract:
 |---|---|---|
 | Node ≥ 20 | runs `ours-fleet` itself | nodejs.org, `apt`, or `brew` |
 | tmux | roles using `session: tmux` (the default) | `apt install tmux` / `brew install tmux` |
-| an ACP adapter | roles using `session: acp` | `codex-acp` or `claude-agent-acp` |
+| Node ≥ 22 | Claude roles using `session: acp` | required by the maintained Claude ACP adapter |
 | a harness CLI, logged in | the agent itself | e.g. Claude Code (`claude`) or Codex CLI (`codex`) |
 | `ours-mcp` daemon | identity + agent-to-agent messaging | `npm i -g @ours.network/mcp && ours-mcp start` |
 
@@ -91,6 +91,12 @@ ours-fleet init      # units/dirs/linger for this user
 ours-fleet doctor    # verifies everything above, with actionable messages
 ```
 
+The maintained Codex and Claude ACP adapters install as optional dependencies of
+`ours-fleet` and are resolved internally; users do not install adapter commands
+or add them to `PATH`. An explicit `session_options.acp.command` remains
+available for custom adapters. On Node 20–21, tmux and Codex ACP remain
+available, while maintained Claude ACP requires upgrading to Node 22.
+
 Each OS user manages their own fleet — to host roles under a sandboxed account,
 become that account and repeat.
 
@@ -123,21 +129,11 @@ ours-fleet spawn Coder --harness codex --model gpt-5.4 \
 Permanent spawns are written to `~/fleet.d/<Name>.yaml` — your hand-written
 `~/fleet.yaml` is **never** machine-edited. `ours-fleet rm <Name>` unspawns.
 
-From inside Claude Code: install the `ours-fleet` plugin (ships in this repo under
-`integrations/claude-code`) and say **"spawn ours agent …"** — the agent asks
-temp-vs-permanent, co-drafts the bio and persona with you, spawns, and arms
-oversight.
-
-From inside Codex, install the native fleet plugin:
-
-```sh
-npm i -g @ours.network/fleet-codex
-ours-fleet-codex-install
-```
-
-Start a new Codex session and say **"spawn an ours agent …"**. The bundled skill
-walks through lifetime, model, sandbox, approval policy, profile, launcher, and
-mail-monitor consent, then verifies the real tmux session and offers oversight.
+From inside Claude Code, Codex, or Hermes with the core `ours` plugin installed,
+say **"spawn an ours agent …"**. The core skill checks for `ours-fleet`, installs
+and initializes it when absent, then consults `ours-fleet docs` for the exact
+version-matched workflow. The older fleet-specific harness packages remain
+published for compatibility but are no longer required or installed by default.
 
 ## Oversight ("keep an eye")
 
@@ -165,6 +161,7 @@ roles:
 ## Command reference
 
 ```
+ours-fleet docs | man                 AI-friendly complete reference
 ours-fleet up|down|restart|force-restart [-c FILE] [Name...]
 ours-fleet config [-c FILE]         validate + print merged plan
 ours-fleet ls | attach | peek | logs [-f] | status <Name>
@@ -301,11 +298,11 @@ console later; no terminal UI is part of the monitor or session backend.
 
 ## Codex roles
 
-Install Codex, the native ours plugin, and the fleet skills once on the fleet host:
+Install Codex, the native ours plugin, and the fleet CLI once on the fleet host:
 
 ```sh
-npm i -g @ours.network/fleet-codex
-ours-fleet-codex-install
+npm i -g @ours.network/fleet
+ours-fleet init
 ours-fleet doctor --harness codex
 ```
 
@@ -407,7 +404,7 @@ cleanly as long as each role has its own `cwd` (the common case); two roles
 sharing an identical `cwd` could have their resumes cross — give them distinct
 working directories if that matters. MCP and monitor wiring is provided by
 [`@ours.network/codex`](https://github.com/adapt-toolkit/ours-mcp/tree/main/packages/codex);
-the native spawn/oversight skills are provided by `@ours.network/fleet-codex`.
+the core ours skill discovers fleet behavior through `ours-fleet docs`.
 `ours-fleet doctor --harness codex` verifies the CLI, ours plugin, and enhanced launcher/fallback.
 
 ## Learn more

package/dist/cli.js

@@ -14,6 +14,7 @@ import { up, down, restartRoles, rmRole } from './ops.js';
 import { runOnce, runTemp } from './runner.js';
 import { spawnPermanent, spawnTemp } from './spawn.js';
 import { doctor } from './doctor.js';
+import { AI_DOCS } from './docs.js';
 import { controlRequest, controlSocketPath, followControl, } from './session/control.js';
 import './harness/claude-code.js'; // registers the claude-code adapter
 import './harness/codex.js'; // registers the codex adapter
@@ -39,10 +40,14 @@ const passthrough = (cmd, args) => new Promise(resolve => {
 });
 const program = new Command()
     .name('ours-fleet')
-    .description('Fleet of persistent, identity-bound AI agents — harness-agnostic, tmux + systemd/launchd.')
+    .description('Fleet of persistent, identity-bound AI agents — selectable harness and tmux/ACP sessions.')
     .version(VERSION);
 const cOpt = (cmd) => cmd.option('-c, --configuration <file>', 'config file (default: ~/fleet.yaml + ~/fleet.d/)');
 const collect = (value, previous) => [...previous, value];
+program.command('docs')
+    .alias('man')
+    .description('print the complete AI-friendly command and configuration reference')
+    .action(() => { process.stdout.write(AI_DOCS); });
 function acpStateDir(name) {
     const permanent = agentDir(name);
     if (existsSync(controlSocketPath(permanent)))
@@ -306,7 +311,7 @@ cOpt(program.command('rm <name>').description('stop + delete state dir (+ its fl
     }
 });
 cOpt(program.command('spawn <name>').description('spawn a new agent (permanent by default)'))
-    .option('--temp', 'temporary: plain tmux, auto-cleaned, gone on reboot')
+    .option('--temp', 'temporary: detached supervisor, auto-cleaned, gone on reboot')
     .option('--harness <id>', 'harness adapter (default: defaults.harness)')
     .option('--session <backend>', 'session backend: tmux|acp (default: defaults.session or tmux)')
     .option('--mission <text>', 'one-line mission')

package/dist/docs.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Stable, AI-friendly CLI and configuration reference.
+ *
+ * Keep this concise enough to place directly in an agent context. Unlike
+ * Commander's per-command help, this describes how the pieces compose.
+ */
+export declare const AI_DOCS = "# ours-fleet reference\n\nours-fleet runs persistent or temporary, identity-bound AI roles. A role selects\na harness independently from its session backend:\n\n- harness: `claude-code` or `codex`\n- session: `tmux` (default) or `acp`\n- lifetime: permanent (supervised, restartable) or `spawn --temp`\n\n## Discover and validate\n\n```sh\nours-fleet docs                         # this complete reference (`man` is an alias)\nours-fleet help <command>               # exact flags for one command\nours-fleet config [-c FILE]             # validate and print the merged plan; no changes\nours-fleet doctor [-c FILE] [--harness codex|claude-code]\n```\n\nDefault configuration is `~/fleet.yaml` plus sorted `~/fleet.d/*.yaml` role\ndrop-ins. An explicit `-c FILE` replaces `~/fleet.yaml`; fleet.d still adds\nroles. Validate with `config` and `doctor` before starting or restarting.\n\n## Lifecycle and console commands\n\n```sh\nours-fleet init\nours-fleet up|down [Name...]\nours-fleet restart [Name...]            # preserve/resume harness context\nours-fleet force-restart [Name...]      # fresh context; briefing is reloaded\nours-fleet ls\nours-fleet status|peek|attach|logs Name\nours-fleet logs -f Name\nours-fleet send Name \"prompt\"\nours-fleet send Name --key Enter        # tmux only\nours-fleet rm Name\n```\n\n`peek`, `attach`, and text `send` work with tmux and ACP. ACP attachment\nalso accepts `/permit <permission-id> <option-id>`, `/interrupt`, and\n`/detach`. Raw `--key` input is tmux-only.\n\n## Spawn\n\n```sh\nours-fleet spawn [--temp] Name \\\n  --harness codex|claude-code --session tmux|acp \\\n  --mission \"one line\" --cwd /absolute/path --identity Identity \\\n  --coordinator Coordinator --model MODEL \\\n  --approval ask|allow|deny \\\n  --filesystem read-only|workspace|unrestricted \\\n  --unattended deny|wait \\\n  --bio-file /path/bio.md --persona-file /path/persona.md\n```\n\nPermanent spawn writes `~/fleet.d/Name.yaml` and starts a supervised role.\n`--temp` writes ephemeral state, starts a detached supervisor, and removes the\nrole after exit/reboot. Both lifetimes support `--session acp`.\n\nCodex-specific spawn flags: `--sandbox`, `--permission-mode`, `--launcher`,\n`--profile`, `--search`, repeatable `--codex-config key=value`, repeatable\n`--add-dir`, and `--monitor`. Run `ours-fleet help spawn` for exact values.\n\n## fleet.yaml\n\n```yaml\nvars:\n  work_root: /home/me/work\nstart_stagger_ms: 0\ndefaults:\n  harness: codex\n  session: acp\n  model: gpt-model-id\n  permissions:\n    approval: ask\n    filesystem: workspace\n    unattended: deny\n  monitor:\n    enabled: true\nroles:\n  Coordinator:\n    harness: codex\n    session: acp\n    identity: Coordinator\n    cwd: ${work_root}/project\n    mission: Coordinate work and delegate implementation.\n    model: gpt-model-id\n    permissions:\n      approval: ask\n      filesystem: workspace\n      unattended: deny\n    session_options:                    # advanced overrides; normally omit\n      # acp:\n      #   command: [/custom/codex-acp, --flag]\n      tmux:\n        boot_grace_ms: 10000\n    monitor:\n      enabled: true\n      wake_sources: [message_received, file_received, local_contact_request, pending_message]\n      batch_ms: 2000\n      inject: notification\n      turn_fail_threshold: 3\n    harness_options:\n      launcher: auto\n      sandbox: workspace-write\n      approval: on-request\n      search: false\n      profile: fleet\n      add_dirs: [/data/shared]\n      config:\n        model_reasoning_effort: high\n    bio: Public role card and when peers should engage it.\n    persona: Local operating contract, boundaries, and escalation policy.\n    briefing_file: /absolute/custom-briefing.md\n    coordinator: AnotherCoordinator\n    env:\n      KEY: value\n    oversee:\n      - { role: Worker, interval: 5m }\n```\n\nRole values override defaults. `${name}` substitutes entries from `vars`.\nOther role fields include `max_tokens`, `autocompact_pct`, and `isolation`.\nUse README.md for the complete isolation policy and resource-cap schema.\n\n## Permissions\n\nPrefer the harness-neutral `permissions` block:\n\n- `approval: ask|allow|deny`: whether actions may request or receive approval\n- `filesystem: read-only|workspace|unrestricted`: filesystem intent\n- `unattended: deny|wait`: what ACP does when no console can answer a request\n\nThe backend translates this common intent. Harness-native settings in\n`harness_options` take precedence where supplied. Do not choose\n`allow`/`unrestricted`, Codex `never`/`danger-full-access`, or Claude\n`bypassPermissions` without explicit authorization.\n\nClaude `harness_options`: `permission_mode` (default, acceptEdits, plan,\ndontAsk, bypassPermissions), `plugins`, `mem_palace`, and\n`mem_palace_midsession_autosave`.\n\nCodex `harness_options`: `launcher` (auto, ours-codex, codex), `sandbox`\n(read-only, workspace-write, danger-full-access), `approval` or\n`permission_mode` (untrusted, on-request, never), `profile`, `search`,\n`config`, `add_dirs`, and `monitor`.\n\n## ACP adapters\n\nThe maintained `@agentclientprotocol/codex-acp` and\n`@agentclientprotocol/claude-agent-acp` runtimes are bundled automatically as\noptional ours-fleet dependencies. The supervisor resolves their executable\nentrypoints internally, so default ACP roles do not depend on global PATH.\nThe maintained Claude adapter requires Node 22; tmux and Codex ACP continue to\nwork on the ours-fleet core minimum of Node 20.\n\nOverride an adapter only when necessary with `session_options.acp.command`\n(string or argv list). If optional dependencies were deliberately omitted,\nours-fleet falls back to a compatible globally installed `codex-acp` or\n`claude-agent-acp`. `ours-fleet doctor -c FILE` verifies the resolved adapter.\n\n## Reliable mail wake\n\nThe supervisor monitor is enabled by default. It consumes body-free daemon\nevents and advances its durable cursor only after delivery is accepted. ACP uses\na structured `session/prompt`; tmux uses verified console injection. Message\nbodies are released only when the role calls the ours `get_messages` tool.\n\nSet `monitor.enabled: false` only to retain legacy in-session monitoring.\nInspect `ours-fleet status Name`, `peek Name`, role logs, and\n`~/.ours-fleet/agents/Name/.monitor-status` when diagnosing delivery.\n";

package/dist/docs.js

@@ -0,0 +1,177 @@
+/**
+ * Stable, AI-friendly CLI and configuration reference.
+ *
+ * Keep this concise enough to place directly in an agent context. Unlike
+ * Commander's per-command help, this describes how the pieces compose.
+ */
+export const AI_DOCS = `# ours-fleet reference
+
+ours-fleet runs persistent or temporary, identity-bound AI roles. A role selects
+a harness independently from its session backend:
+
+- harness: \`claude-code\` or \`codex\`
+- session: \`tmux\` (default) or \`acp\`
+- lifetime: permanent (supervised, restartable) or \`spawn --temp\`
+
+## Discover and validate
+
+\`\`\`sh
+ours-fleet docs                         # this complete reference (\`man\` is an alias)
+ours-fleet help <command>               # exact flags for one command
+ours-fleet config [-c FILE]             # validate and print the merged plan; no changes
+ours-fleet doctor [-c FILE] [--harness codex|claude-code]
+\`\`\`
+
+Default configuration is \`~/fleet.yaml\` plus sorted \`~/fleet.d/*.yaml\` role
+drop-ins. An explicit \`-c FILE\` replaces \`~/fleet.yaml\`; fleet.d still adds
+roles. Validate with \`config\` and \`doctor\` before starting or restarting.
+
+## Lifecycle and console commands
+
+\`\`\`sh
+ours-fleet init
+ours-fleet up|down [Name...]
+ours-fleet restart [Name...]            # preserve/resume harness context
+ours-fleet force-restart [Name...]      # fresh context; briefing is reloaded
+ours-fleet ls
+ours-fleet status|peek|attach|logs Name
+ours-fleet logs -f Name
+ours-fleet send Name "prompt"
+ours-fleet send Name --key Enter        # tmux only
+ours-fleet rm Name
+\`\`\`
+
+\`peek\`, \`attach\`, and text \`send\` work with tmux and ACP. ACP attachment
+also accepts \`/permit <permission-id> <option-id>\`, \`/interrupt\`, and
+\`/detach\`. Raw \`--key\` input is tmux-only.
+
+## Spawn
+
+\`\`\`sh
+ours-fleet spawn [--temp] Name \\
+  --harness codex|claude-code --session tmux|acp \\
+  --mission "one line" --cwd /absolute/path --identity Identity \\
+  --coordinator Coordinator --model MODEL \\
+  --approval ask|allow|deny \\
+  --filesystem read-only|workspace|unrestricted \\
+  --unattended deny|wait \\
+  --bio-file /path/bio.md --persona-file /path/persona.md
+\`\`\`
+
+Permanent spawn writes \`~/fleet.d/Name.yaml\` and starts a supervised role.
+\`--temp\` writes ephemeral state, starts a detached supervisor, and removes the
+role after exit/reboot. Both lifetimes support \`--session acp\`.
+
+Codex-specific spawn flags: \`--sandbox\`, \`--permission-mode\`, \`--launcher\`,
+\`--profile\`, \`--search\`, repeatable \`--codex-config key=value\`, repeatable
+\`--add-dir\`, and \`--monitor\`. Run \`ours-fleet help spawn\` for exact values.
+
+## fleet.yaml
+
+\`\`\`yaml
+vars:
+  work_root: /home/me/work
+start_stagger_ms: 0
+defaults:
+  harness: codex
+  session: acp
+  model: gpt-model-id
+  permissions:
+    approval: ask
+    filesystem: workspace
+    unattended: deny
+  monitor:
+    enabled: true
+roles:
+  Coordinator:
+    harness: codex
+    session: acp
+    identity: Coordinator
+    cwd: \${work_root}/project
+    mission: Coordinate work and delegate implementation.
+    model: gpt-model-id
+    permissions:
+      approval: ask
+      filesystem: workspace
+      unattended: deny
+    session_options:                    # advanced overrides; normally omit
+      # acp:
+      #   command: [/custom/codex-acp, --flag]
+      tmux:
+        boot_grace_ms: 10000
+    monitor:
+      enabled: true
+      wake_sources: [message_received, file_received, local_contact_request, pending_message]
+      batch_ms: 2000
+      inject: notification
+      turn_fail_threshold: 3
+    harness_options:
+      launcher: auto
+      sandbox: workspace-write
+      approval: on-request
+      search: false
+      profile: fleet
+      add_dirs: [/data/shared]
+      config:
+        model_reasoning_effort: high
+    bio: Public role card and when peers should engage it.
+    persona: Local operating contract, boundaries, and escalation policy.
+    briefing_file: /absolute/custom-briefing.md
+    coordinator: AnotherCoordinator
+    env:
+      KEY: value
+    oversee:
+      - { role: Worker, interval: 5m }
+\`\`\`
+
+Role values override defaults. \`\${name}\` substitutes entries from \`vars\`.
+Other role fields include \`max_tokens\`, \`autocompact_pct\`, and \`isolation\`.
+Use README.md for the complete isolation policy and resource-cap schema.
+
+## Permissions
+
+Prefer the harness-neutral \`permissions\` block:
+
+- \`approval: ask|allow|deny\`: whether actions may request or receive approval
+- \`filesystem: read-only|workspace|unrestricted\`: filesystem intent
+- \`unattended: deny|wait\`: what ACP does when no console can answer a request
+
+The backend translates this common intent. Harness-native settings in
+\`harness_options\` take precedence where supplied. Do not choose
+\`allow\`/\`unrestricted\`, Codex \`never\`/\`danger-full-access\`, or Claude
+\`bypassPermissions\` without explicit authorization.
+
+Claude \`harness_options\`: \`permission_mode\` (default, acceptEdits, plan,
+dontAsk, bypassPermissions), \`plugins\`, \`mem_palace\`, and
+\`mem_palace_midsession_autosave\`.
+
+Codex \`harness_options\`: \`launcher\` (auto, ours-codex, codex), \`sandbox\`
+(read-only, workspace-write, danger-full-access), \`approval\` or
+\`permission_mode\` (untrusted, on-request, never), \`profile\`, \`search\`,
+\`config\`, \`add_dirs\`, and \`monitor\`.
+
+## ACP adapters
+
+The maintained \`@agentclientprotocol/codex-acp\` and
+\`@agentclientprotocol/claude-agent-acp\` runtimes are bundled automatically as
+optional ours-fleet dependencies. The supervisor resolves their executable
+entrypoints internally, so default ACP roles do not depend on global PATH.
+The maintained Claude adapter requires Node 22; tmux and Codex ACP continue to
+work on the ours-fleet core minimum of Node 20.
+
+Override an adapter only when necessary with \`session_options.acp.command\`
+(string or argv list). If optional dependencies were deliberately omitted,
+ours-fleet falls back to a compatible globally installed \`codex-acp\` or
+\`claude-agent-acp\`. \`ours-fleet doctor -c FILE\` verifies the resolved adapter.
+
+## Reliable mail wake
+
+The supervisor monitor is enabled by default. It consumes body-free daemon
+events and advances its durable cursor only after delivery is accepted. ACP uses
+a structured \`session/prompt\`; tmux uses verified console injection. Message
+bodies are released only when the role calls the ours \`get_messages\` tool.
+
+Set \`monitor.enabled: false\` only to retain legacy in-session monitoring.
+Inspect \`ours-fleet status Name\`, \`peek Name\`, role logs, and
+\`~/.ours-fleet/agents/Name/.monitor-status\` when diagnosing delivery.
+`;

package/dist/doctor.js

@@ -3,6 +3,7 @@ import { readFileSync } from 'node:fs';
 import { realExec } from './exec.js';
 import { loadConfig } from './config.js';
 import { getAdapter } from './harness/registry.js';
+import { resolveBundledAcpAgent } from './harness/acp-agent.js';
 import { agentDir, home, deriveXdgRuntimeDir } from './paths.js';
 import { resolveIsolation } from './isolation/policy.js';
 import { makeBubblewrapBackend } from './isolation/bubblewrap.js';
@@ -173,6 +174,13 @@ export async function doctor(opts = {}, exec = realExec, platform = process.plat
     }
     for (const role of roles.filter(role => role.session === 'acp')) {
         const configured = role.session_options?.acp?.command;
+        const bundled = configured == null
+            ? role.harness === 'codex'
+                ? resolveBundledAcpAgent('@agentclientprotocol/codex-acp', 'codex-acp', 'codex-acp')
+                : role.harness === 'claude-code'
+                    ? resolveBundledAcpAgent('@agentclientprotocol/claude-agent-acp', 'claude-agent-acp', 'claude-agent-acp')
+                    : undefined
+            : undefined;
         const command = Array.isArray(configured)
             ? configured[0]
             : typeof configured === 'string'
@@ -189,6 +197,13 @@ export async function doctor(opts = {}, exec = realExec, platform = process.plat
             });
             continue;
         }
+        if (bundled?.bundled) {
+            checks.push({
+                name: `acp: ${role.name}`, ok: true,
+                detail: `${command} bundled with ours-fleet`,
+            });
+            continue;
+        }
         const result = await exec('sh', ['-c', 'command -v "$1" >/dev/null 2>&1', 'sh', command]);
         checks.push({
             name: `acp: ${role.name}`,

package/dist/harness/acp-agent.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Resolve an ACP agent shipped as an ours-fleet dependency. Running the JS
+ * entrypoint through this process's Node avoids depending on npm exposing a
+ * transitive dependency's bin on the user's global PATH.
+ */
+export interface AcpAgentResolution {
+    argv: string[];
+    bundled: boolean;
+}
+export declare function resolveBundledAcpAgent(packageName: string, binName: string, fallbackCommand: string): AcpAgentResolution;
+export declare function bundledAcpAgent(packageName: string, binName: string, fallbackCommand: string): string[];

package/dist/harness/acp-agent.js

@@ -0,0 +1,27 @@
+import { createRequire } from 'node:module';
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+const require = createRequire(import.meta.url);
+export function resolveBundledAcpAgent(packageName, binName, fallbackCommand) {
+    try {
+        const manifestPath = require.resolve(`${packageName}/package.json`);
+        const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'));
+        const relative = typeof manifest.bin === 'string'
+            ? manifest.bin
+            : manifest.bin?.[binName];
+        if (!relative)
+            return { argv: [fallbackCommand], bundled: false };
+        const entrypoint = resolve(dirname(manifestPath), relative);
+        if (!existsSync(entrypoint))
+            return { argv: [fallbackCommand], bundled: false };
+        return { argv: [process.execPath, entrypoint], bundled: true };
+    }
+    catch {
+        // Supports development installs that intentionally omit optional
+        // dependencies and existing hosts with a globally installed adapter.
+        return { argv: [fallbackCommand], bundled: false };
+    }
+}
+export function bundledAcpAgent(packageName, binName, fallbackCommand) {
+    return resolveBundledAcpAgent(packageName, binName, fallbackCommand).argv;
+}

package/dist/harness/claude-code.js

@@ -3,6 +3,7 @@ import { join } from 'node:path';
 import { home } from '../paths.js';
 import { realExec } from '../exec.js';
 import { registerAdapter } from './registry.js';
+import { bundledAcpAgent } from './acp-agent.js';
 const OPTION_KEYS = ['plugins', 'mem_palace', 'mem_palace_midsession_autosave', 'permission_mode'];
 /** Claude Code's accepted --permission-mode values. */
 const PERMISSION_MODES = ['default', 'acceptEdits', 'plan', 'dontAsk', 'bypassPermissions'];
@@ -119,7 +120,7 @@ export function makeClaudeCodeAdapter(exec = realExec) {
                 ? [...configured]
                 : typeof configured === 'string'
                     ? ['sh', '-c', configured]
-                    : ['claude-agent-acp'];
+                    : bundledAcpAgent('@agentclientprotocol/claude-agent-acp', 'claude-agent-acp', 'claude-agent-acp');
             return { argv, env: prep.env };
         },
         translatePermissions(permissions) {

package/dist/harness/codex.js

@@ -2,6 +2,7 @@ import { join } from 'node:path';
 import { agentDir } from '../paths.js';
 import { realExec } from '../exec.js';
 import { registerAdapter } from './registry.js';
+import { bundledAcpAgent } from './acp-agent.js';
 const OPTION_KEYS = [
     'launcher', 'sandbox', 'approval', 'permission_mode', 'search', 'profile', 'config', 'add_dirs',
     'monitor',
@@ -193,7 +194,7 @@ export function makeCodexAdapter(exec = realExec) {
                 ? [...configured]
                 : typeof configured === 'string'
                     ? ['sh', '-c', configured]
-                    : ['codex-acp'];
+                    : bundledAcpAgent('@agentclientprotocol/codex-acp', 'codex-acp', 'codex-acp');
             return { argv, env: prep.env };
         },
         translatePermissions(permissions) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "0.10.0-nightly.2",
+  "version": "0.10.0-nightly.3",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, tmux or ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",
@@ -30,6 +30,10 @@
     "commander": "^12.1.0",
     "yaml": "^2.5.0"
   },
+  "optionalDependencies": {
+    "@agentclientprotocol/claude-agent-acp": "^0.63.0",
+    "@agentclientprotocol/codex-acp": "^1.1.7"
+  },
   "devDependencies": {
     "@types/node": "^20.14.0",
     "typescript": "^5.5.0",