buzz/beehive/CLAUDE_SOURCE_6F8D.md

# Claude source contract and Codex gap

All source citations are at Buzz `051c3a270be9c73da9ab06700bcab7d5552fceaa`,
read with `git show` in `/Users/loganj/.buzz/REPOS/buzz-reference`.

- `desktop/src-tauri/src/managed_agents/discovery/catalog.rs:50–84`: Claude CLI
  `claude`, adapter `claude-agent-acp` (legacy `claude-code-acp` alias), install
  hints, provider locked, unstable model switching/native config disabled,
  `~/.claude/settings.json`, CLI auth/status guidance. Executable discovery alone
  is not authentication. This implementation requires the newer reported package
  identity instead of promising native-profile parity for legacy adapters.
- Same file `:85–119`: Codex CLI `codex`, adapter `codex-acp`, config
  `~/.codex/config.toml`, `codex login`/`codex login status`, no model/provider env
  mapping, no unstable switching/native config. These are distinct contracts.
- `crates/buzz-acp/src/config.rs:790–795`: Claude/Codex adapters have zero args,
  unlike Goose `acp`. `:825–865` describes Codex's adapter-specific CODEX_CONFIG
  network override, not a generic provider connection or model proof.
- `crates/buzz-acp/README.md:83–99`: Claude adapter installation and
  ANTHROPIC_API_KEY example. `:67–81`: Codex OPENAI_API_KEY/adapter fallback note;
  do not infer Claude login or Goose/Buzz OAuth-cache reuse from it.
- `desktop/src-tauri/src/managed_agents/claude_config/mod.rs:1–27`:
  ANTHROPIC_MODEL is the sole Claude startup authority; remove BUZZ_ACP_MODEL.
- `desktop/src-tauri/src/managed_agents/runtime.rs:384–390`: explicit
  CLAUDE_CODE_EXECUTABLE vendor executable selection (not arbitrary remote argv).
- `crates/buzz-acp/src/pool.rs:287–320`: exact new Claude package identity is a
  source-grounded native prompt capability gate; Claude uses meta append, Goose
  has its own extension, other agents need protocol >=2 for native field support.
- `crates/buzz-acp/src/acp.rs:636–668,2132–2144`: native Claude session/new
  `_meta.systemPrompt: {append: text}`. `:192–201,366–370`: Codex may return `{}`
  for unknown extensions; success probing must never manufacture capability.
- `desktop/src-tauri/src/managed_agents/readiness.rs:407–462`: vendor-specific
  auth probes differ from static prerequisites; no probe is performed here.

- `crates/buzz-acp/src/acp.rs:2178–2182,2207–2212,2825–2846`: optional
  session/new models.currentModelId/availableModels state and fresh-session
  authority. This is reported model state, not guaranteed by every adapter.

## Deliberate stricter scope

Approved model IDs are local policy, not authenticated discovery. Claude's actual
new-session models report supplies currentModelId/availableModels; the host accepts
only exact matching values, with no fabricated set_model ACK. Unknown reports fail
closed. This is adapter-reported session evidence, not provider attestation. Native
model/config switching is disabled per catalog; optional-config semantics of other
harnesses are untouched. API key files are a new Beehive local transport policy,
not a claimed upstream file format. It reads only explicitly provisioned paths with
service-owner and 0600-style permission checks; no existing owner caches are read.
Private inputs stay local, included in prepared-input authority hashing; vendor CLI
binary hash is also included. Existing trusted-operator spawn TOCTOU limitations
remain, not an OS sandbox or malicious-local-user defense.

## Actual acceptance and remaining work

`test/normal-conversation.test.ts` reuses the existing NORMAL_A661/RECOVERY_5360
actual wizard/service-subprocess/TUI journey for initial normal and selected-B normal
conversion. Claude fixture differs in argv, closed env, exact package initialize,
models.currentModelId report, meta profile transport, rejection of Goose/native
config/set_model, and failure modes. Common CLI tool/reply machinery is deliberately
shared, not reimplemented. Each installed journey requires four real signed Buzz CLI
replies (two channels, later turn and fresh Restart), same identity, native profile,
exact model, unchanged sibling/history/manifest, truthful preflight failures and Stop.
`test/claude.test.ts` exercises private-env/credential validation and actual owned
ACP prerequisite/drift/negative capability paths. Fresh fixture-only keys/loopback.

REAL: `/Applications/Buzz.app/Contents/MacOS/{buzz-acp,buzz}` (hashes in CHECKPOINT).
FIXTURE: TypeScript ACP adapter, Node vendor-CLI placeholder; no vendor login/status
is invoked. SOURCE-ONLY: real Claude API key/provider acceptance; subscription auth;
Codex integration, model/config/profile proof and installed wizard acceptance.

Codex still needs its own closed local auth/env/config contract, source-supported
model selection/reporting and profile-capability handling through these same owners,
then source-shaped ACP fixtures and actual normal wizard/installed conversations.
No source-backed universal model env or Goose-native methods should be invented.
Other providers, presets/custom, relay mesh, compute deployment, production admission,
current kind40002 and live service/user authentication remain explicitly unproved.