flowviant 0.125.27 → 0.125.28

package/bin/lib/wikiRunner.mjs

@@ -30,6 +30,7 @@ import { sawSentinel } from './claude.mjs';
 import { runTurn as defaultRunTurn } from './runTurn.mjs';
 import { SYSTEM_WIKI, WIKI_KICKOFF, SYSTEM_REGROUND, REGROUND_KICKOFF } from './prompts.mjs';
 import { ensureVault, syncVault } from './vault.mjs';
+import { beginWikiDraft } from './wikiDraft.mjs';
 import { scrub as envScrub } from './uplinkScrub.mjs';
 import { runtimeLabel } from './runtimes.mjs';
 import { pickRuntimeFor as defaultPickRuntimeFor } from './runtimeDetection.mjs';
@@ -238,7 +239,8 @@ export function createWikiRunner({
       // always taken (audit 2026-10-10, F749).
       if (!SHA1_ABBREV_RE.test(String(sha).toLowerCase())) continue;
       try {
-        const out = gitRaw(['show', '--name-only', '--pretty=format:', String(sha)], repoRoot);
+        // Report both sides of a rename so old files: citations are affected.
+        const out = gitRaw(['show', '--no-renames', '--name-only', '--pretty=format:', String(sha)], repoRoot);
         for (const line of out.split('\n')) {
           const f = line.trim();
           if (f) files.add(f);
@@ -374,6 +376,7 @@ export function createWikiRunner({
          * readout. Null (and absent from the frame) when no CLI ran.
          */
         let usage = null;
+        let draft = null;
         const onUsage = (rt) => (u) => {
           usage = addUsage(usage, { ...u, runtime: rt });
         };
@@ -394,20 +397,23 @@ export function createWikiRunner({
           resetWorktree(wikiWt, getBaseRef());
           // No HEAD → '' — still writes the map, just ungrounded.
           const sha = gitOrNull(['rev-parse', 'HEAD'], wikiWt) ?? '';
-          // Sync the vault after the turn regardless of the sentinel: a died
-          // sweep's partial pages still persist (merge, no prune) — only a
-          // COMPLETED sweep finalizes, so an interrupted one can't erase pages.
+          const repoFullName = originSlug(repoRoot) || undefined;
+          const persistentVaultDir = vaultDir;
+          draft = beginWikiDraft(persistentVaultDir);
+          vaultDir = draft.dir;
+          // Only a complete draft can replace last-good pages or prune them.
+          // The CLI's write fence names the draft, never Knowledge or sources.
           const runSync = async (finalize) => {
             try {
               const r = await syncVault({
-                dir: vaultDir,
+                dir: persistentVaultDir,
                 url: WIKI_VAULT_URL,
                 token: FLEET_TOKEN,
                 userAgent: USER_AGENT,
                 finalize,
                 groundedAtSha: sha || undefined,
                 // Powers the GitHub blob links behind every cited file path.
-                repoFullName: originSlug(repoRoot) || undefined,
+                repoFullName,
                 warn,
                 // Redact synced secrets a page may have quoted from the repo.
                 scrub: envScrub,
@@ -435,7 +441,7 @@ export function createWikiRunner({
             sweepAttempts++;
             note(`${c.cyan('wiki')} ${c.dim(`— regenerating: your ${wikiLabel} is reading the repo…`)}`);
             const out = await runTurn({
-              prompt: WIKI_KICKOFF(sha, vaultDir),
+              prompt: WIKI_KICKOFF(sha, vaultDir, repoFullName),
               resume: false,
               system: SYSTEM_WIKI(vaultDir),
               cwd: wikiWt,
@@ -454,12 +460,13 @@ export function createWikiRunner({
             });
             const complete = sawSentinel(out, 'WIKI_DONE');
             if (complete) {
+              draft.publish({ sha, repoFullName });
               sweepCompleted = true;
               ok(`${c.cyan('wiki')} ${c.dim('— vault regenerated from your code.')}`);
             } else {
-              warn('wiki sweep ended without WIKI_DONE — partial pages synced');
+              warn('wiki sweep ended without WIKI_DONE — last good pages retained');
             }
-            await runSync(complete);
+            if (complete) await runSync(true);
           } else {
             const files = changedFilesForShas(task.shas);
             if (files === null) {
@@ -484,6 +491,7 @@ export function createWikiRunner({
                   title: task.title,
                   files,
                   vaultDir,
+                  repoFullName,
                   predictedPages: task.dirtiesPages ?? [],
                 }),
                 resume: false,
@@ -499,10 +507,11 @@ export function createWikiRunner({
                   wikiChild = ch;
                 },
               });
-              if (sawSentinel(out, 'REGROUND_DONE'))
+              if (sawSentinel(out, 'REGROUND_DONE')) {
+                draft.publish({ sha, repoFullName });
                 ok(`${c.cyan('wiki')} ${c.dim(`— vault updated for "${task.title}".`)}`);
-              else warn(`wiki re-ground for "${task.title}" ended without REGROUND_DONE.`);
-              await runSync(false);
+                await runSync(false);
+              } else warn(`wiki re-ground for "${task.title}" ended without REGROUND_DONE — last good pages retained.`);
             }
             // Consume the durable job: attempted = done (success or not — the
             // sync is idempotent and a failed turn heals on the next full
@@ -521,6 +530,7 @@ export function createWikiRunner({
         } catch (e) {
           warn(`wiki ${task.type} failed: ${e.message}`);
         } finally {
+          draft?.discard();
           wikiChild = null;
           if (heartbeat) clearInterval(heartbeat);
           /**

package/bin/lib/workAgentTools.mjs

@@ -27,13 +27,15 @@ import { postureToolsNote } from './postureTools.mjs';
 import { machineMcpServers } from './claudeMachineMcp.mjs';
 import { ORCHESTRATOR_SERVER } from './orchestratorProtocol.mjs';
 import { VIDEO_SERVER } from './videoRender.mjs';
+import { BROWSER_SERVER } from './managedBrowser.mjs';
 
 /** The servers the daemon itself mounts on a card turn, by the names the
  *  agent calls them: a multi-repository card's add_repository, an
  *  orchestrated card's routing, a build's UI review and a video card's
- *  render_video (2026-10-26). Never a project server's, whatever the base
+ *  render_video (2026-10-26), and a code turn's managed browser (2026-10-30).
+ *  Never a project server's, whatever the base
  *  `.mcp.json` names. */
-export const CARD_TURN_SERVERS = Object.freeze({ repositories: 'card_repositories', orchestrator: ORCHESTRATOR_SERVER, uiReview: 'card_ui_review', video: VIDEO_SERVER });
+export const CARD_TURN_SERVERS = Object.freeze({ repositories: 'card_repositories', orchestrator: ORCHESTRATOR_SERVER, uiReview: 'card_ui_review', video: VIDEO_SERVER, browser: BROWSER_SERVER });
 
 /**
  * The card turn's tools, prepared, and what it is told of them.
@@ -46,7 +48,7 @@ export const CARD_TURN_SERVERS = Object.freeze({ repositories: 'card_repositorie
  * from here), the note, the mount's part of the CLI's `mcpEnv` and whether it
  * needs one, and the keys the runner takes the mount as.
  */
-export function prepareCardTools({ rt, posture, wt, repoRoot, baseRef, sources = [], repositoryTool = null, orchestratorConfig = null, uiReviewConfig = null, videoConfig = null, orchestrated = false, codexHome = null, env = process.env, machineServers = machineMcpServers }) {
+export function prepareCardTools({ rt, posture, wt, repoRoot, baseRef, sources = [], repositoryTool = null, orchestratorConfig = null, uiReviewConfig = null, videoConfig = null, browserConfig = null, orchestrated = false, codexHome = null, env = process.env, machineServers = machineMcpServers }) {
   // A turn reads the base ref afresh. Changes the agent has made to its
   // own worktree cannot silently change the next turn's tools.
   const source = sources.find((r) => r.wt === wt);
@@ -59,6 +61,7 @@ export function prepareCardTools({ rt, posture, wt, repoRoot, baseRef, sources =
     ...(repositoryTool ? { [CARD_TURN_SERVERS.repositories]: repositoryTool.config } : {}),
     ...(orchestratorConfig ? { [CARD_TURN_SERVERS.orchestrator]: orchestratorConfig } : {}),
     ...(posture === 'build' && uiReviewConfig ? { [CARD_TURN_SERVERS.uiReview]: uiReviewConfig } : {}),
+    ...(posture === 'build' && browserConfig ? { [CARD_TURN_SERVERS.browser]: browserConfig } : {}),
     // A video card's render tool rides its fenced posture (videoRender.mjs).
     ...(videoConfig ? { [CARD_TURN_SERVERS.video]: videoConfig } : {}),
   } });

package/bin/lib/workAgentTurnExecution.mjs

@@ -70,6 +70,7 @@ import { measuredRuntimeVersion } from './runtimeDetection.mjs';
 import { createIntermediateArtifacts, IntermediateArtifactCapacityError } from './intermediateArtifacts.mjs';
 import { createUiReview } from './uiReview.mjs';
 import { createVideoRender } from './videoRender.mjs';
+import { createManagedBrowser } from './managedBrowser.mjs';
 import { withUiReview, appendUiReviewEvidence } from './uiReviewTurn.mjs';
 
 export function createAgentTurnExecution({
@@ -102,6 +103,7 @@ export function createAgentTurnExecution({
   exportModel,
   makeUiReview = createUiReview,
   makeVideoRender = createVideoRender,
+  makeManagedBrowser = createManagedBrowser,
 }) {
   const reportDelivery = createDeliveryReporter();
   /** How long the final flush may hold the settle. Bounded because the settle
@@ -410,6 +412,8 @@ export function createAgentTurnExecution({
     /** The CLI, unless a person already asked to stop this turn (Interrupt
      *  now): then nothing starts — no fresh retry, no continuation. */
     let uiReview = null;
+    let managedBrowser = null;
+    let browserNote = '';
     let uiReviewNote = '';
     let uiReviewEvidence = '';
     // A video card's render tool (videoRender.mjs), and the words a turn
@@ -424,6 +428,8 @@ export function createAgentTurnExecution({
       args.verifiedWorktree = true;
       args = withUiReview(args, uiReviewNote, uiReview?.env);
       args = withUiReview(args, videoNote);
+      args = withUiReview(args, browserNote, managedBrowser?.env);
+      args.managedBrowser = Boolean(managedBrowser);
       return runTurnImpl(args);
     };
     /**
@@ -473,6 +479,15 @@ export function createAgentTurnExecution({
     let orchestrator = null;
     let intermediateDelivery = null;
     try {
+      if (posture === 'build' && job.kind !== 'merge_resolve' && ['claude', 'codex'].includes(rt)) {
+        try {
+          managedBrowser = await makeManagedBrowser({ wt, turnId, signal: setupController.signal, onChild: ch => {
+            workChildren.set(ch, agentId); groupKillChildren?.add(ch);
+            return () => { workChildren.delete(ch); groupKillChildren?.delete(ch); };
+          } });
+          browserNote = managedBrowser.instructions;
+        } catch (error) { browserNote = `The managed browser could not start: ${envScrub(error.message)}. Report interactive browser checks unavailable.`; }
+      }
       if (posture === 'build' && job.kind !== 'merge_resolve') {
         try {
           uiReview = await makeUiReview({ wt, signal: setupController.signal, onChild: ch => {
@@ -499,7 +514,7 @@ export function createAgentTurnExecution({
           notify: message => liveInput ? run.live?.inject(message) === true : false,
           taken: id => run.live?.onTaken(id) });
       }
-      const tools = prepareCardTools({ rt, posture, wt, repoRoot, baseRef, sources: repositoryRun?.sources ?? [], repositoryTool: repositoryRun?.tool ?? null, orchestratorConfig: orchestrator?.config ?? null, uiReviewConfig: uiReview?.config, videoConfig: videoRender?.config ?? null, orchestrated: Boolean(orchestrator), codexHome: agentResume.codexHome });
+      const tools = prepareCardTools({ rt, posture, wt, repoRoot, baseRef, sources: repositoryRun?.sources ?? [], repositoryTool: repositoryRun?.tool ?? null, orchestratorConfig: orchestrator?.config ?? null, uiReviewConfig: uiReview?.config, videoConfig: videoRender?.config ?? null, browserConfig: managedBrowser?.config, orchestrated: Boolean(orchestrator), codexHome: agentResume.codexHome });
       projectTools = tools.projectTools;
       localCleanup?.begin(turnId);
       const { toolsNote } = tools;
@@ -759,6 +774,7 @@ export function createAgentTurnExecution({
       // owned by its review tool, then bind evidence to the final source
       // before the existing artifact upload and delivery settlement.
       try { await videoRender?.close(); } catch { /* a closed listener */ }
+      try { await managedBrowser?.close(); } catch { /* turn teardown continues */ }
       try { await uiReview?.close(); }
       finally {
         try { uiReviewEvidence = uiReview?.finalize() ?? uiReviewEvidence; }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "flowviant",
-  "version": "0.125.27",
+  "version": "0.125.28",
   "description": "Run your own coding CLIs as build agents for Flowviant \u2014 Claude Code, Codex or Antigravity, on your own credentials. Holds your sessions, keeps a worktree per tab, and ships branches on your word.",
   "type": "module",
   "bin": {

package/npm-shrinkwrap.json

@@ -1,69 +0,0 @@
-{
-  "name": "flowviant",
-  "version": "0.125.27",
-  "lockfileVersion": 3,
-  "requires": true,
-  "packages": {
-    "": {
-      "name": "flowviant",
-      "version": "0.125.27",
-      "license": "MIT",
-      "dependencies": {
-        "libsodium-wrappers-sumo": "^0.8.4",
-        "ws": "^8.18.0"
-      },
-      "bin": {
-        "flowviant": "bin/cli.mjs"
-      },
-      "devDependencies": {
-        "three": "0.180.0"
-      },
-      "engines": {
-        "node": ">=20"
-      }
-    },
-    "node_modules/libsodium-sumo": {
-      "version": "0.8.4",
-      "resolved": "https://registry.npmjs.org/libsodium-sumo/-/libsodium-sumo-0.8.4.tgz",
-      "integrity": "sha512-TMtHShQfVVsaxDygyapvUC3o7YsPgXa/hRWeIgzyFz6w5k/1hirGptCxp1U7XwW3rCskaTTYKgV10v86UiGgNw==",
-      "license": "ISC"
-    },
-    "node_modules/libsodium-wrappers-sumo": {
-      "version": "0.8.4",
-      "resolved": "https://registry.npmjs.org/libsodium-wrappers-sumo/-/libsodium-wrappers-sumo-0.8.4.tgz",
-      "integrity": "sha512-ql7hcgulKZ3ekfa2DGAogcCKsWU0diA/0nArz1CFzh93WQdb46/Kj18ka/Hifq6uA3Ush34Pc6vU/6HXeRwUkg==",
-      "license": "ISC",
-      "dependencies": {
-        "libsodium-sumo": "^0.8.0"
-      }
-    },
-    "node_modules/three": {
-      "version": "0.180.0",
-      "resolved": "https://registry.npmjs.org/three/-/three-0.180.0.tgz",
-      "integrity": "sha512-o+qycAMZrh+TsE01GqWUxUIKR1AL0S8pq7zDkYOQw8GqfX8b8VoCKYUoHbhiX5j+7hr8XsuHDVU6+gkQJQKg9w==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/ws": {
-      "version": "8.21.1",
-      "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.1.tgz",
-      "integrity": "sha512-+0NTnW77fFN/DjQi6k/Sq/Yvk4Sgajw7urW8V+asjXnRgDs9gyGkdb7EzgfhA4goXsRIZKE28fzIXBHEzhuiWw==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=10.0.0"
-      },
-      "peerDependencies": {
-        "bufferutil": "^4.0.1",
-        "utf-8-validate": ">=5.0.2"
-      },
-      "peerDependenciesMeta": {
-        "bufferutil": {
-          "optional": true
-        },
-        "utf-8-validate": {
-          "optional": true
-        }
-      }
-    }
-  }
-}