feat(prx): run claude as a Lima daemon — take the claude binary off PATH

[bdelanghe]

Why

Recurring architectural theme: no raw tool on the host PATH — each capability is owned by an actor/daemon. Already landed or in flight:

• git → keeper / keeperd (design: pilot/executor commits should flow through keeper (actor-signed), not raw git #388, keeperd slice 4: in-VM signing key — gen in VM, register pubkey via gh (security review APPROVED, conditions a+b) #236, keeper signing path → production-ready: sequenced plan (provisioning, encryption, ephemerality, identity, rotation) #256)
• beads/dolt → beadsd, remove host bd/dolt (epic(prx): route all beads access (human + agents) through beadsd — remove the host bd/dolt install #296, feat(prx): beadsd — beads as a capability-isolated daemon (apply the keeperd pattern) #228)
• prx itself → installs directly via home-manager, not through ai-home (epic: decouple prx from the hardcoded ai-home deployment repo (standalone prx) #411)

claude is the remaining host-PATH dependency. prx shells out to it via BAKED_CLAUDE_CODE_PATH (a path to the host claude binary on PATH). Next step: move claude into a Lima daemon so the host no longer needs claude installed/on PATH — prx talks to the claude daemon over the Lima channel, the same substrate as the headless sessions.

What

• Run claude inside the Lima VM (the isolation substrate, feat(prx): own the isolation substrate as a provider-agnostic executor spec (Lima first) #211 / epic: session substrate — Lima-held headless sessions (replace the tmux holder) #242), exposed as a daemon prx invokes over the Lima channel (lima/channel.ts) instead of spawn(BAKED_CLAUDE_CODE_PATH).
• Retire BAKED_CLAUDE_CODE_PATH / programs.prx.claudePath once the daemon path is the default (mirrors epic: decouple prx from the hardcoded ai-home deployment repo (standalone prx) #411 dropping aiHomeRoot).
• Capability isolation: the claude daemon gets only the inputs/secrets it needs (apply the keeperd/beadsd pattern — feat(prx): beadsd — beads as a capability-isolated daemon (apply the keeperd pattern) #228).

Acceptance (sketch)

• prx invokes claude via the Lima daemon, not a host PATH binary.
• Host needs no claude on PATH for prx pilots/legs to run.
• claudePath / BAKED_CLAUDE_CODE_PATH deprecated → removed (lockstep with the home-manager module, like epic: decouple prx from the hardcoded ai-home deployment repo (standalone prx) #411 slice 5).
• Auth/secrets for claude scoped to the daemon (not ambient).

Related

Extends the session-substrate epic #242 and the executor spec #211; sibling of beadsd #228/#296 and keeperd #236/#256. Overlaps the durable claude RC host #207. Precedent for the deprecation+lockstep mechanics: #411.

Filed from a direction note ("moving Claude to lima as a daemon so claude isn't on PATH either"); not yet scheduled.

🤖 Generated with Claude Code