flowviant 0.125.0 → 0.125.1

package/bin/lib/runTurn.mjs

@@ -84,7 +84,7 @@ function runPlainTurn(opts) {
    * Both answers stay pending instead, as `process.exit` left them.
    */
   if (workLanesStopped()) return never();
-  return new Promise((resolveTurn) => {
+  return new Promise((resolveTurn, rejectTurn) => {
     const resolve = (v) => {
       if (!workLanesStopped()) resolveTurn(v);
     };
@@ -167,8 +167,9 @@ function runPlainTurn(opts) {
     // up by the SAME name (`claudePermFor`), so the two cannot disagree about
     // which posture a turn is running under. There is no precedence chain left
     // to get wrong: the caller named one profile (turnProfile.mjs).
+    const stdinText = rt.stdin?.({ prompt, system, profile: turnProfile.adapterProfile }) ?? null;
     const args = rt.args({
-      streamInput: rt.id === 'claude' && Boolean(opts.liveMessages),
+      streamInput: stdinText !== null || (rt.id === 'claude' && Boolean(opts.liveMessages)),
       writableDirs: opts.writableDirs,
       personal,
       researchIsolation: opts.researchIsolation,
@@ -277,10 +278,11 @@ function runPlainTurn(opts) {
         browserHome: browser?.dir,
       });
       finishDiagnostics = startTurnDiagnostics({ runtime, bin: rt.bin, env: childEnv,
-        cwd, args, profile: turnProfile.name, planId: opts.diagnosticPlanId });
+        cwd, args, stdinBytes: stdinText === null ? 0 : Buffer.byteLength(stdinText),
+        profile: turnProfile.name, planId: opts.diagnosticPlanId });
       child = spawn(rt.bin, args, {
         cwd,
-        stdio: [rt.id === 'claude' && opts.liveMessages ? 'pipe' : 'ignore', 'pipe', 'pipe'],
+        stdio: [stdinText !== null || (rt.id === 'claude' && opts.liveMessages) ? 'pipe' : 'ignore', 'pipe', 'pipe'],
         /**
          * ITS OWN PROCESS GROUP, so what the agent starts stays attributable.
          *
@@ -327,6 +329,7 @@ function runPlainTurn(opts) {
     // than this is a previous turn's (turnModel.mjs).
     const spawnedAt = Date.now();
     let out = '';
+    let stdinError = null;
     const input = rt.id === 'claude' && opts.liveMessages ? createClaudeInput(child, { onTaken: opts.liveMessages.onTaken }) : null;
     const pfx = label ? `${label} ` : '';
     /**
@@ -497,9 +500,13 @@ function runPlainTurn(opts) {
       releaseArgs();
       opts.onExit?.(code, signal);
       if (buf.trim()) onLine(buf);
-      finishDiagnostics({ code, signal, pid: child.pid, output: out, cliFailed });
+      finishDiagnostics({ code, signal, pid: child.pid, output: out, cliFailed, inputError: stdinError?.code });
       const handBack = async () => {
         if (opts.liveMessages) await opts.liveMessages.stop();
+        if (stdinError) {
+          if (!workLanesStopped()) rejectTurn(stdinError);
+          return;
+        }
         resolve(out);
         // After the answer is handed back, never before it: see `onRate`.
         if (codexThread) {
@@ -530,6 +537,17 @@ function runPlainTurn(opts) {
       }
       handBack();
     });
+    if (stdinText !== null) {
+      // end() buffers with backpressure and closes at EOF; Codex reads the
+      // entire prompt before starting. An early close must not accept output
+      // from a turn whose complete authorized input never reached the CLI.
+      child.stdin.on('error', (error) => {
+        stdinError = Object.assign(new Error(`${rt.label} could not receive the complete turn input (${error.code || 'PIPE_ERROR'}).`), { code: error.code || 'PIPE_ERROR' });
+        opts.onCliFailure?.();
+        child.kill('SIGTERM');
+      });
+      child.stdin.end(stdinText, 'utf8');
+    }
     if (input) {
       const initial = opts.liveMessages.initialPrompt(prompt, resumeThreadId, resume, opts.liveContinuation === true);
       input.send(opts.liveMessages.initialId || opts.liveMessages.turnId, initial);

package/bin/lib/runtimeCodex.mjs

@@ -158,6 +158,13 @@ const codexWikiFence = (vaultDir) => [
   ...fencedTail(),
 ];
 
+function codexPrompt({ system, prompt, profile = 'build' }) {
+  const readers = profile === 'consult' || profile === 'plan'
+    ? '\nUse exec_command with shell="/bin/bash" and login=false for project discovery. Project files, local Git history and the project knowledge directory are readable; host files are outside this turn’s read boundary.'
+    : '';
+  return `${system}${readers}\n\n---\n\n${prompt}`;
+}
+
 export const CODEX_RUNTIME = {
   id: 'codex',
   label: 'Codex',
@@ -227,13 +234,12 @@ export const CODEX_RUNTIME = {
    * can diff. A write-up reads a COPY with no `.git` and never resumes
    * (codexResearch.mjs), so its fence passes it.
    *
-   * THE PROMPT IS LAST, and that is load-bearing rather than tidy. Codex takes
-   * it as a trailing POSITIONAL, so every flag — including the two `-c` MCP
-   * overrides, which the caller hands in rather than appending — has to be
-   * placed before it. Appending them after the positional is the kind of argv
-   * that parses today and stops parsing on some future clap upgrade.
+   * The prompt positional stays last; runTurn uses `-` and sends the complete
+   * framed text through stdin. A whole batch can exceed Linux's single-argument
+   * limit even when its argv plus environment is far below ARG_MAX. Both exec
+   * and exec resume support `-` (verified on Codex 0.160.0, 2026-10-16).
    */
-  args({ writableDirs = [], prompt, system, model, effort, resume, resumeThreadId, profile = 'build', vaultDir, cwd, mcp = [], resultSchemaArgs = [], adoptResumeId, agentTools, personal = null, researchIsolation, knowledgeDir, projectReads }) {
+  args({ streamInput = false, writableDirs = [], prompt, system, model, effort, resume, resumeThreadId, profile = 'build', vaultDir, cwd, mcp = [], resultSchemaArgs = [], adoptResumeId, agentTools, personal = null, researchIsolation, knowledgeDir, projectReads }) {
     // Adoption resumes a conversation in ITS OWN CLI's store (claude forks,
     // agy moves) — codex has no adoptable store wired yet. Reaching here
     // with an adopt id is a wiring mistake upstream, and it fails loudly on
@@ -294,12 +300,11 @@ export const CODEX_RUNTIME = {
     if (a.includes('--ignore-user-config')) a.push(...(personal?.args ?? []));
 
     a.push(...mcp, ...resultSchemaArgs);
-    const readers = profile === 'consult' || profile === 'plan'
-      ? '\nUse exec_command with shell="/bin/bash" and login=false for project discovery. Project files, local Git history and the project knowledge directory are readable; host files are outside this turn’s read boundary.'
-      : '';
-    a.push(`${system}${readers}\n\n---\n\n${prompt}`);
+    a.push(streamInput ? '-' : codexPrompt({ system, prompt, profile }));
     return a;
   },
+  /** One-shot UTF-8 input, closed at EOF; distinct from Claude's live JSONL. */
+  stdin: codexPrompt,
   /**
    * THE PERSON'S LOGIN FOR A FENCED TURN, read once per spawn by runTurn from
    * the turn's own environment (its CODEX_HOME — an agent's own home when the

package/bin/lib/turnDiagnostics.mjs

@@ -10,6 +10,7 @@ import { AUTH_ENV_VARS, claudeAuthContext, claudeCredentialPath } from './claude
 import { scrub } from './uplinkScrub.mjs';
 import { printableText } from './printable.mjs';
 import { measuredRuntimeVersion } from './runtimeDetection.mjs';
+import { VERSION } from './config.mjs';
 
 let active = 0;
 const authNames = (env) => AUTH_ENV_VARS.filter((name) =>
@@ -40,7 +41,7 @@ export function startTurnDiagnostics(options) {
 }
 
 function createTurnDiagnostics({ runtime, bin, env, cwd = process.cwd(), profile,
-  planId = null, args = [], version, write = (row) => console.info(`[cli-turn] ${JSON.stringify(row)}`) }) {
+  planId = null, args = [], stdinBytes = 0, version, write = (row) => console.info(`[cli-turn] ${JSON.stringify(row)}`) }) {
   const startedAt = Date.now();
   const turnId = randomUUID();
   const executable = executableFor(bin, env, cwd);
@@ -58,7 +59,14 @@ function createTurnDiagnostics({ runtime, bin, env, cwd = process.cwd(), profile
       } catch { /* CLI settings unavailable */ }
     }
   }
-  const base = { turnId, runtime, profile, planId, cwd, daemonPid: process.pid,
+  // Only byte counts, including each terminating NUL. No values or hashes.
+  const argSizes = [bin, ...args].map(value => Buffer.byteLength(value) + 1);
+  const envSizes = Object.entries(env).filter(([, value]) => value !== undefined)
+    .map(([key, value]) => Buffer.byteLength(`${key}=${value}`) + 1);
+  const sum = values => values.reduce((a, b) => a + b, 0);
+  const launch = { argvBytes: sum(argSizes), maxArgBytes: Math.max(0, ...argSizes),
+    envBytes: sum(envSizes), maxEnvEntryBytes: Math.max(0, ...envSizes), stdinBytes };
+  const base = { turnId, runtime, profile, planId, cwd, daemonPid: process.pid, daemonVersion: VERSION, launch,
     uid: process.getuid?.() ?? null, platform: process.platform,
     nodeVersion: process.version, executable, version: version ?? null,
     runtimeMeasurement: measuredRuntimeVersion(runtime) };
@@ -79,15 +87,15 @@ function createTurnDiagnostics({ runtime, bin, env, cwd = process.cwd(), profile
   active++;
   emit({ ...base, phase: 'start', at: new Date(startedAt).toISOString(), activeTurns: active, auth: auth() });
   let finished = false;
-  return ({ code = null, signal = null, pid = null, output = '', spawnError = null, cliFailed = false } = {}) => {
+  return ({ code = null, signal = null, pid = null, output = '', spawnError = null, inputError = null, cliFailed = false } = {}) => {
     if (finished) return;
     finished = true;
     active--;
     const failed = cliFailed || (code !== null && code !== 0);
     emit({ ...base, phase: 'end', at: new Date().toISOString(), durationMs: Date.now() - startedAt,
-      pid, code, signal, spawnError, activeTurns: active, auth: auth(),
+      pid, code, signal, spawnError, inputError, activeTurns: active, auth: auth(),
       failureKind: failed && /OAuth session expired and could not be refreshed/i.test(output)
         ? 'oauth_refresh' : failed && /Failed to authenticate/i.test(output) ? 'authentication'
-          : spawnError ? 'spawn' : code !== null && code !== 0 ? 'cli_exit' : null });
+          : spawnError ? 'spawn' : inputError ? 'input' : code !== null && code !== 0 ? 'cli_exit' : null });
   };
 }

package/bin/lib/work.mjs

@@ -54,7 +54,8 @@
  *   turnLock.mjs           tab pid locks; workLiveMessages.mjs — live input; workDelivery.mjs — queue
  *   (and, split earlier: workDiffs, workPreviews, workPullRequests, workShip,
  *   workAgentPlans, workAgentCheck, workAgentPrecheck, workAgentReview,
- *   workAgentTurns, workAgentRecovery, workAgentMerges, workProcesses; and out of workAgentTurns,
+ *   workAgentTurns, workAgentRecovery, workAgentMerges, workMergeBatch,
+ *   workProcesses; and out of workAgentTurns,
  *   SOLID F036: workAgentTurnReports, workAgentTurnExecution, workAgentTurnBegun,
  *   workAgentTurnOutcome; repositoryPlaces + agentRepositories: multi-repo places; the live brief: workAgentBrief, workAgentBriefRunner)
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "flowviant",
-  "version": "0.125.0",
+  "version": "0.125.1",
   "description": "Run your own coding CLIs as build agents for Flowviant — Claude Code, Codex or Antigravity, on your own credentials. Holds your sessions, keeps a worktree per tab, and ships branches on your word.",
   "type": "module",
   "bin": {