flowviant 0.39.0 → 0.40.0

package/bin/lib/claude.mjs

@@ -594,7 +594,7 @@ function handleStreamLine(line, { cwd, emit, onActivity, appendText }) {
 // returned string for sentinel detection, and each activity is handed to
 // `onActivity` so the caller can forward progress. Build-agent turns leave it
 // off and keep the raw text passthrough + line sentinels.
-export function runTurn({ prompt, resume, system, cwd, mcpConfig, mcpArgs, mcpEnv, runtime = 'claude', label, onSpawn, streamJson, onActivity, wikiPerm, readOnly, model, effort }) {
+export function runTurn({ prompt, resume, system, cwd, mcpConfig, mcpArgs, mcpEnv, runtime = 'claude', label, onSpawn, streamJson, onActivity, wikiPerm, readOnly, vaultDir, resultSchemaArgs, model, effort }) {
   return new Promise((resolve) => {
     const rt = runtimeById(runtime);
     if (!rt.args) {
@@ -614,6 +614,17 @@ export function runTurn({ prompt, resume, system, cwd, mcpConfig, mcpArgs, mcpEn
     // all: unset means the CLI's own default, the honest resting state.
     //
     // readOnly wins over wikiPerm: a consult must never inherit write tools.
+    //
+    // TWO FORMS OF THE SAME DECISION, and the redundancy is deliberate rather
+    // than sloppy. `profile` is the NAME of the posture — a promise about what
+    // must be impossible during the turn — and every runtime expresses it in its
+    // own vocabulary: Claude as an `--allowedTools` verb list, Codex as a kernel
+    // sandbox mode plus feature toggles. `perm` is Claude's expression, still
+    // computed here only because those three arrays live in this file; it
+    // collapses into the registry the day every runtime expresses every profile.
+    // Both derive from the same branch, so they cannot disagree about which
+    // posture a turn is running under.
+    const profile = readOnly ? 'consult' : wikiPerm ? 'wiki' : 'build';
     const args = rt.args({
       prompt,
       system,
@@ -621,6 +632,16 @@ export function runTurn({ prompt, resume, system, cwd, mcpConfig, mcpArgs, mcpEn
       effort,
       resume,
       streamJson,
+      profile,
+      // Only the wiki profile uses it, but it is passed unconditionally: a
+      // runtime that can path-scope its writes needs to know WHERE the vault is,
+      // and Claude — which cannot — simply ignores it.
+      vaultDir,
+      // Structured-output flags for the MEDIATED path. Handed to the adapter
+      // rather than appended here for the same reason `mcp` is: Codex takes its
+      // prompt as a trailing positional, so a flag after it is in the wrong
+      // place.
+      resultSchemaArgs,
       perm: readOnly ? CONSULT_PERM : wikiPerm ? WIKI_PERM : PERM,
       // Handed to the adapter rather than appended here, because WHERE these go
       // is a property of the CLI: Codex reads its prompt as a trailing
@@ -692,8 +713,18 @@ export function runTurn({ prompt, resume, system, cwd, mcpConfig, mcpArgs, mcpEn
       });
       child.on('error', (e) => {
         if (e.code === 'ENOENT') {
+          // A MISSING CLI FAILS THE TURN, NOT THE DAEMON. This called
+          // process.exit(1), which was defensible while `claude` was the only
+          // runtime and preflight refused to start without it — the process
+          // could not reach here. Both halves of that are gone: preflight is now
+          // fatal only when NOTHING is drivable, so a Codex-only machine starts
+          // legitimately, and the wiki/plan-check/consult turns still ask for
+          // Claude by default. On such a machine the first wiki sweep would have
+          // killed the whole daemon, taking every in-flight build with it,
+          // because one background job could not find one binary.
           console.error(`\nerror: '${rt.bin}' CLI not found on PATH. Install ${rt.label} first: ${rt.install}`);
-          process.exit(1);
+          resolve('');
+          return;
         }
         console.error(e);
         resolve(out);

package/bin/lib/fleet.mjs

@@ -76,7 +76,7 @@ import {
 } from './env.mjs';
 import { processDeployJobs, reportDeployConfig } from './deploy.mjs';
 import { machineSnapshot } from './resources.mjs';
-import { detectRuntimes } from './runtimes.mjs';
+import { detectRuntimes, pickRuntimeFor, RUNTIMES } from './runtimes.mjs';
 
 async function fetchRoster(haveIds) {
   const url = new URL(FLEET_URL);
@@ -699,6 +699,14 @@ export async function runFleetDaemon() {
       checkingPlans.add(job.id);
       (async () => {
         try {
+          // WHICH CLI answers a turn nobody @mentioned. Resolved per job rather
+          // than once at startup: a CLI can be installed while the daemon runs.
+          const planRt = pickRuntimeFor('consult');
+          if (!planRt) {
+            warn(`plan check for "${job.title}" skipped — no installed CLI can run a read-only turn`);
+            checkingPlans.delete(job.id);
+            return;
+          }
           note(`${c.cyan('plan')} ${c.dim(`— checking "${job.title}" against your code…`)}`);
           const out = await withWikiLock(async () => {
             ensureWikiWorktree();
@@ -709,6 +717,7 @@ export async function runFleetDaemon() {
               cwd: wikiWt,
               // Reads the repo and reports JSON — it authors nothing either.
               readOnly: true,
+              runtime: planRt,
               label: c.cyan('[plan]'),
             });
           });
@@ -804,6 +813,8 @@ export async function runFleetDaemon() {
           // Compare-and-set BEFORE spending a Claude turn: two lanes can wake on
           // the same push, and running one instruction twice into one worktree
           // is exactly the double-edit this is meant to avoid.
+          const quickRt = pickRuntimeFor('build');
+          if (!quickRt) return; // nothing here can edit code; leave the join unclaimed
           const claim = await postForData(JOIN_TAKE_URL, { joinId: job.id });
           if (!claim?.taken) return;
           note(
@@ -821,6 +832,7 @@ export async function runFleetDaemon() {
             resume: false,
             system: SYSTEM_QUICK_EDIT,
             cwd: target.wt,
+            runtime: quickRt,
             // No MCP: a join records no run, claims nothing, completes nothing.
             // Its only report is the one this daemon posts below.
             label: c.cyan('[quick]'),
@@ -864,6 +876,15 @@ export async function runFleetDaemon() {
           // Serialised against the wiki queue as well: that queue hard-resets
           // this worktree mid-turn, which would pull the files out from under a
           // consult that is reading them.
+          // A consult's prompt is steered by a question ANY project editor can
+          // type, so the profile is the enforcement and a runtime that cannot
+          // express it does not get the job. Today that means Claude; see the
+          // `profiles` notes in runtimes.mjs for exactly what Codex is missing.
+          const consultRt = pickRuntimeFor('consult');
+          if (!consultRt) {
+            warn('a consult is waiting, but no installed CLI can run a read-only turn');
+            return;
+          }
           await withWikiLock(async () => {
             ensureWikiWorktree();
             const out = await runTurn({
@@ -879,6 +900,7 @@ export async function runFleetDaemon() {
               // not to change anything, but the prompt is what an injected
               // question competes with; the toolset is what it cannot.
               readOnly: true,
+              runtime: consultRt,
               label: c.cyan('[ask]'),
             });
             const answer = (out || '').trim();
@@ -1296,14 +1318,24 @@ export async function runFleetDaemon() {
               warn(`wiki vault sync failed: ${e.message} — pages stay local; next turn retries`);
             }
           };
+          // The cartographer needs to read the repo and write ONLY the vault —
+          // a narrower promise than "build", so it is its own profile.
+          const wikiRt = pickRuntimeFor('wiki');
+          if (!wikiRt) {
+            warn('wiki generation skipped — no installed CLI can run a vault-scoped turn');
+            return;
+          }
+          const wikiLabel = RUNTIMES[wikiRt].label;
           if (task.type === 'sweep') {
-            note(`${c.cyan('wiki')} ${c.dim('— regenerating: your Claude is reading the repo…')}`);
+            note(`${c.cyan('wiki')} ${c.dim(`— regenerating: your ${wikiLabel} is reading the repo…`)}`);
             const out = await runTurn({
               prompt: WIKI_KICKOFF(sha, vaultDir),
               resume: false,
               system: SYSTEM_WIKI(vaultDir),
               cwd: wikiWt,
               wikiPerm: true,
+              vaultDir,
+              runtime: wikiRt,
               label: c.cyan('[wiki]'),
               streamJson: true,
               onActivity,
@@ -1346,6 +1378,8 @@ export async function runFleetDaemon() {
                 system: SYSTEM_REGROUND(vaultDir),
                 cwd: wikiWt,
                 wikiPerm: true,
+                vaultDir,
+                runtime: wikiRt,
                 label: c.cyan('[wiki]'),
                 streamJson: true,
                 onActivity,