@mmmbuto/nexuscrew 0.8.23 → 0.8.25

package/lib/settings/public-peering-routes.js

@@ -75,11 +75,20 @@ function publicPeeringRoutes(deps = {}) {
       if (st.nodeId === b.instanceId || st.nodes.some((n) => n.nodeId === b.instanceId)
         || pending.some((row) => row.instanceId === b.instanceId)) return res.status(409).json({ error: 'peer duplicato' });
       const reservedNames = new Set(pending.map((row) => row.name).filter(validPeerName));
-      if (nodesStore.getNode(st, b.name) || reservedNames.has(b.name)) {
+      // `localhost` e' sintatticamente uno slug valido, ma su Termux non e'
+      // un handle di route: piu device espongono lo stesso hostname. Trattalo
+      // come conflitto risolvibile anche quando e' il primo, senza consumare
+      // l'invite; il client puo' riprovare col suffisso stabile proposto.
+      if (b.name === 'localhost' || nodesStore.getNode(st, b.name) || reservedNames.has(b.name)) {
+        const usedNames = [...st.nodes.map((node) => node.name), ...reservedNames];
+        const suggestedName = nodesStore.deriveNodeHandle(
+          b.label || b.name, b.name, b.instanceId, usedNames,
+        );
         return res.status(409).json({
           error: `nome peer gia' in uso: ${b.name}`,
           code: 'peer-name-conflict',
-          hint: 'rimuovi il record stale oppure scegli un nome univoco e riprova con lo stesso invito',
+          suggestedName,
+          hint: `usa l'handle proposto "${suggestedName}" e riprova con lo stesso invito`,
         });
       }
       const name = b.name;

package/lib/settings/routes.js

@@ -71,8 +71,8 @@ const EDIT_KEYS = new Set(['label', 'ssh', 'sshPort', 'autostart', 'visibility',
 // NON usa ciecamente hostname: se l'hostname e' vuoto o 'localhost' (tipico di
 // chiavi di test / host dietro tunnel) propone un fallback neutro. L'utente puo'
 // sempre sovrascriverlo: questo e' solo il valore iniziale del campo.
-function defaultDeviceName() {
-  const h = String(os.hostname() || '').trim();
+function defaultDeviceName(hostname = os.hostname()) {
+  const h = String(hostname || '').trim();
   if (!h || /^localhost$/i.test(h)) return 'NexusCrew';
   return h.slice(0, nodesStore.LABEL_MAX);
 }
@@ -143,6 +143,7 @@ function readConfigFile(p) {
 function settingsRoutes(deps = {}) {
   const cfg = deps.cfg || {};
   const seams = cfg.settingsSeams || {};
+  const localHostname = typeof seams.hostname === 'function' ? seams.hostname : os.hostname;
   // tokenStore/closeSessions iniettati da server.js per la semantica di invalidazione
   // live (audit F7 / §4b(3)). Assenti nei test unitari puri su routes -> la rotazione
   // scrive solo il file (come prima), senza reload in-memory.
@@ -217,6 +218,10 @@ function settingsRoutes(deps = {}) {
         boot: bootState({ platform, execImpl: seams.execImpl, uid: seams.uid, home }).enabled,
       };
       const updateStatus = updater && typeof updater.status === 'function' ? updater.status() : null;
+      const localStore = nodesStore.loadStore(nodesPath);
+      const localNodeId = localStore && nodesStore.NODE_ID_RE.test(localStore.nodeId)
+        ? localStore.nodeId : null;
+      const deviceName = defaultDeviceName(localHostname());
       const out = {
         roles: readRoles(configPath),
         firstRun,
@@ -227,7 +232,11 @@ function settingsRoutes(deps = {}) {
         autoUpdate: updateStatus ? updateStatus.enabled : fileCfg.autoUpdate !== false,
         // Nome dispositivo proposto per i form di pairing (etichetta umana, non
         // lo slug). La UI lo precompila e lascia editing libero.
-        deviceName: defaultDeviceName(),
+        deviceName,
+        nodeId: localNodeId,
+        localName: localNodeId
+          ? nodesStore.deriveNodeHandle(deviceName, localHostname(), localNodeId)
+          : null,
       };
       if (updateStatus) out.update = updateStatus;
       send(res, 200, out);
@@ -385,8 +394,8 @@ function settingsRoutes(deps = {}) {
   // prima di paired:true. Qui resta solo la registrazione dietro mutGate;
   // token/credenziali MAI nel payload (redazione nel handler estratto).
   r.post('/nodes/pair', mutGate, createPairHandler({
-    send, validName, defaultDeviceName,
-    nodesPath, configPath, home, seams, runtimePort,
+    send, validName, defaultDeviceName: () => defaultDeviceName(localHostname()),
+    localHostname, nodesPath, configPath, home, seams, runtimePort,
   }));
 
   // --- POST /nodes — nodes add (riusa nodesCmds.nodesAdd) --------------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmmbuto/nexuscrew",
-  "version": "0.8.23",
+  "version": "0.8.25",
   "description": "Faithful browser tmux client — attach to live sessions over a real PTY, localhost-only, mobile-easy",
   "main": "lib/server.js",
   "bin": {
@@ -12,6 +12,7 @@
     "skills/",
     "frontend/dist/",
     "frontend/index.html",
+    "CHANGELOG.md",
     "LICENSE",
     "README.md",
     "NOTICE"
@@ -19,7 +20,7 @@
   "scripts": {
     "start": "node bin/nexuscrew.js serve",
     "dev": "node bin/nexuscrew.js serve",
-    "build": "cd frontend && npm install && npm run build && cd ..",
+    "build": "npm --prefix frontend ci && npm --prefix frontend run build",
     "test": "node tests/run-isolated.js && npm --prefix frontend test"
   },
   "dependencies": {

package/skills/alibaba-token-media/SKILL.md

@@ -0,0 +1,133 @@
+---
+name: alibaba-token-media
+description: "Generate or edit images with Wan 2.7 and create videos with HappyHorse through an Alibaba Qwen Cloud Token Plan Personal subscription. Use when the user asks Claude Code, Codex, Codex-VL, or Pi to draw, generate, or edit an image with wan2.7-image or wan2.7-image-pro; create text-to-video or image-to-video media with happyhorse-1.1-t2v or happyhorse-1.1-i2v; inspect a submitted HappyHorse task; or validate the Token Plan media setup. Do not use this skill for chat, visual understanding, batch automation, backend services, or pay-as-you-go DashScope APIs."
+---
+
+# Alibaba Token Media
+
+Use the bundled, dependency-free CLI to access only the media models included
+with the Lite guardrails of Alibaba Token Plan Personal. The same skill and Python script work
+with Claude Code, Codex, Codex-VL, and Pi. Invoke the script directly from Pi;
+do not assume that Pi provides a native MCP client.
+
+Keep this workflow interactive. Every generation consumes plan Credits, and
+the plan is not for unattended batch or backend workloads.
+
+## Safety contract
+
+- Read the credential only from `ALIBABA_CODE_API_KEY`. Never request it in
+  chat, pass it on the command line, print it, persist it, or send it through
+  an agent bus.
+- Use only the fixed Token Plan host and exact model allowlist implemented by
+  the script. Never fall back to DashScope pay-as-you-go endpoints.
+- Run `status` and then a `--dry-run` before the first real request in a
+  session. Dry runs never require or reveal the key.
+- Show the user the normalized model, operation, size or duration, resolution,
+  and confirmation flags before spending Credits. A real image request needs
+  `--confirm-credit-use`; a real video request additionally needs
+  `--confirm-expensive`.
+- Require `--confirm-high-cost` for Wan Pro, 2K or 4K images, 1080P video, or
+  video longer than five seconds. Keep Lite defaults at one 1K base image or
+  one 720P three-second video.
+- Never batch, enable sequential image sets, retry a generation POST
+  automatically, or run more than one generation submit concurrently. A task
+  status GET may be retried, but never with a tight polling loop.
+- Accept local input only as a regular, non-symlink JPEG, PNG, BMP, or WEBP
+  file below 20 MiB and under the current user's home. Image-to-video accepts
+  JPEG, PNG, or WEBP first frames, not BMP. Accept remote input only
+  over public HTTPS; reject localhost, private IP literals, credentials, and
+  non-standard ports.
+- Download signed result URLs immediately. Never paste signed URLs into chat,
+  logs, source files, or an agent bus; they expire after 24 hours.
+
+## Locate the CLI
+
+Resolve `scripts/alibaba_token_media.py` relative to this `SKILL.md`, then run
+it with Python 3:
+
+```bash
+python3 <skill-dir>/scripts/alibaba_token_media.py status
+```
+
+Keep this packaged skill as the source of truth; do not copy the script into a
+project before using it.
+
+## Generate or edit an image
+
+Start with a sanitized preview:
+
+```bash
+python3 <skill-dir>/scripts/alibaba_token_media.py image \
+  --prompt "A quiet alpine lake at sunrise" \
+  --dry-run
+```
+
+After explicit approval, repeat without `--dry-run` and add
+`--confirm-credit-use`. For an edit, add one to nine `--image` values. Each
+value may be a permitted local image under the current user's home or a public
+HTTPS URL:
+
+```bash
+python3 <skill-dir>/scripts/alibaba_token_media.py image \
+  --prompt "Preserve the subject; replace the background with a night city" \
+  --image /absolute/path/input.png \
+  --confirm-credit-use
+```
+
+Use `--model wan2.7-image-pro --size 2K --confirm-high-cost` only after the
+user selects that higher-cost variant. `4K` is allowed only for Pro
+text-to-image with no input images. The script fixes `n=1` and disables image
+sets. Image watermarking is off by default and enabled only with `--watermark`.
+
+## Submit a video
+
+Text-to-video Lite preview:
+
+```bash
+python3 <skill-dir>/scripts/alibaba_token_media.py video-submit \
+  --prompt "A paper model city slowly lights up at dusk" \
+  --dry-run
+```
+
+For a real request, add both `--confirm-credit-use` and
+`--confirm-expensive`. For image-to-video, select `happyhorse-1.1-i2v` and
+supply exactly one first-frame image with `--image`. Do not supply `--ratio`
+for image-to-video; its aspect ratio follows the input. Video watermarking is
+on by default and can be disabled explicitly with `--no-watermark`.
+
+```bash
+python3 <skill-dir>/scripts/alibaba_token_media.py video-submit \
+  --model happyhorse-1.1-i2v \
+  --image /absolute/path/first-frame.png \
+  --prompt "The camera slowly moves forward" \
+  --confirm-credit-use --confirm-expensive
+```
+
+Return the task ID after a real submit. Do not hide submission success behind
+polling.
+
+## Check and download a video
+
+Query a task once:
+
+```bash
+python3 <skill-dir>/scripts/alibaba_token_media.py video-status <task-id>
+```
+
+When it is `SUCCEEDED`, repeat with `--download`. If recurring monitoring is
+requested and the client exposes a loop facility, use an interval of at least
+five minutes. Do not implement a private tight polling loop.
+
+```bash
+python3 <skill-dir>/scripts/alibaba_token_media.py video-status <task-id> \
+  --download
+```
+
+Default downloads go to
+`~/Downloads/alibaba-token-plan/YYYY-MM-DD/` with unique names and no
+overwrite. An explicit `--output` must remain under the current user's home.
+
+## Reference
+
+Read [references/api-contract.md](references/api-contract.md) before changing
+payloads, limits, endpoints, or model handling.

package/skills/alibaba-token-media/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Alibaba Token Media"
+  short_description: "Generate Wan images and HappyHorse videos"
+  default_prompt: "Use $alibaba-token-media to generate or edit media safely with my Alibaba Token Plan."

package/skills/alibaba-token-media/references/api-contract.md

@@ -0,0 +1,97 @@
+# Alibaba Token Plan media API contract
+
+Verified against the official Qwen Cloud documentation on 2026-07-19.
+
+## Fixed subscription surface
+
+- Host: `https://token-plan.ap-southeast-1.maas.aliyuncs.com`
+- Credential environment variable: `ALIBABA_CODE_API_KEY`
+- Authorization: `Bearer <token>`
+- Supported invocation surfaces: Claude Code, Codex, Codex-VL, and Pi through
+  the packaged skill and CLI. Pi is not assumed to support MCP natively.
+- Token Plan Personal Lite guardrails: interactive use only, one submit at a
+  time, no batch generation, and no automatic retry of a generation POST.
+- Never substitute the DashScope pay-as-you-go host.
+
+The Token Plan documentation says coding tools cannot configure media models
+as chat models. They must use a skill, command, agent, or equivalent extension.
+The Personal plan is intended for interactive programming and agent-tool
+work, not unattended scripts, backend services, or batch processing.
+
+## Wan 2.7 image generation and editing
+
+Synchronous endpoint:
+
+`POST /api/v1/services/aigc/multimodal-generation/generation`
+
+Allowed plan models:
+
+- `wan2.7-image`
+- `wan2.7-image-pro`
+
+Request shape:
+
+```json
+{
+  "model": "wan2.7-image",
+  "input": {
+    "messages": [{
+      "role": "user",
+      "content": [{"text": "prompt"}, {"image": "data-or-https-url"}]
+    }]
+  },
+  "parameters": {
+    "n": 1,
+    "size": "1K",
+    "enable_sequential": false,
+    "watermark": false,
+    "thinking_mode": true
+  }
+}
+```
+
+The content array requires exactly one text object and accepts zero to nine
+image objects. Prompt maximum is 5,000 characters. Inputs may be JPEG, PNG,
+BMP, or WEBP and are limited to 20 MiB each. `wan2.7-image` supports 1K and 2K;
+Pro also supports 4K for text-to-image only. The output image URL is under
+`output.choices[*].message.content[*].image` and expires after 24 hours.
+
+## HappyHorse video generation
+
+Submit endpoint:
+
+`POST /api/v1/services/aigc/video-generation/video-synthesis`
+
+Required submission header: `X-DashScope-Async: enable`.
+
+Allowed plan models:
+
+- `happyhorse-1.1-t2v`
+- `happyhorse-1.1-i2v`
+
+Text-to-video input contains `prompt`; parameters contain `resolution`,
+`ratio`, and `duration`. Image-to-video input additionally contains exactly one
+`media` item with `type: first_frame` and an HTTPS or Base64 image in `url`;
+its parameters omit `ratio` because output follows the first frame. The CLI
+enables video watermarking by default; image watermarking is disabled by
+default. Image-to-video first frames accept JPEG, PNG, or WEBP, not BMP.
+
+Duration is an integer from 3 through 15 seconds. Resolution is 720P or 1080P.
+Text-to-video ratios are 16:9, 9:16, 1:1, 4:3, 3:4, 4:5, 5:4, 9:21, or 21:9.
+The response task ID is `output.task_id`.
+
+Status endpoint:
+
+`GET /api/v1/tasks/{task_id}`
+
+Terminal states are `SUCCEEDED`, `FAILED`, `CANCELED`, and `UNKNOWN`. On
+success, `output.video_url` is an H.264 MP4 signed URL valid for 24 hours.
+
+## Official sources
+
+- https://docs.qwencloud.com/token-plan/best-practices/integrate-multimodal-gen
+- https://docs.qwencloud.com/token-plan/personal/token-plan-personal-overview
+- https://docs.qwencloud.com/api-reference/image-generation/wan27-image-gen-edit/synchronous
+- https://docs.qwencloud.com/api-reference/video-generation/happyhorse-text-to-video/create-task
+- https://docs.qwencloud.com/api-reference/video-generation/happyhorse-image-to-video/create-task
+- https://docs.qwencloud.com/api-reference/video-generation/happyhorse-text-to-video/query-result