@mmmbuto/nexuscrew 0.8.24 → 0.8.26

package/README.md

@@ -140,10 +140,10 @@ The provider catalog is scoped to the selected CLI rather than to a machine-spec
 
 | CLI | Built-in provider choices |
 |---|---|
-| Claude Code | Anthropic, OpenRouter, Kimi Code, Amazon Bedrock, Google Vertex AI, Microsoft Foundry, Ollama Cloud, local Ollama, Z.AI, custom Anthropic-compatible endpoint |
+| Claude Code | Anthropic, Alibaba Token Plan Personal, OpenRouter, Kimi Code, Amazon Bedrock, Google Vertex AI, Microsoft Foundry, Ollama Cloud, local Ollama, Z.AI, custom Anthropic-compatible endpoint |
 | Codex | OpenAI or ChatGPT login, OpenAI API, Ollama Cloud, local Ollama, LM Studio, custom OpenAI Responses endpoint |
-| Codex-VL | OpenAI or ChatGPT login, OpenAI API, OpenRouter, Ollama Cloud, local Ollama, LM Studio, custom OpenAI Responses endpoint |
-| Pi | Native default, Anthropic, OpenAI API, Codex OAuth, Gemini, GitHub Copilot, OpenRouter, Ollama, DeepSeek, Z.AI, custom provider |
+| Codex-VL | OpenAI or ChatGPT login, OpenAI API, Alibaba Token Plan Personal, OpenRouter, Ollama Cloud, local Ollama, LM Studio, custom OpenAI Responses endpoint |
+| Pi | Native default, Anthropic, OpenAI API, Alibaba Token Plan Personal, Codex OAuth, Gemini, GitHub Copilot, OpenRouter, Ollama, DeepSeek, Z.AI, custom provider |
 
 Custom Codex-compatible endpoints use the real Responses wire API; NexusCrew does not silently
 fall back to Chat Completions. Custom argv-based engines are also supported and are launched
@@ -160,6 +160,14 @@ uses `https://api.kimi.com/coding/`, and runs with an isolated Claude configurat
 Anthropic account remains untouched. A Kimi Code membership key is not interchangeable with a
 Moonshot pay-as-you-go API key.
 
+Alibaba Token Plan Personal is a separate managed profile for Claude Code, Codex-VL and Pi. It
+uses only `ALIBABA_CODE_API_KEY`, defaults to `qwen3.8-max-preview`, and has no OpenAI or
+pay-as-you-go fallback. The npm package also includes the portable `alibaba-token-media` skill
+for dry-run-first Wan image/edit and HappyHorse video workflows. Claude Code, Codex, Codex-VL
+and Pi can invoke its dependency-free Python CLI directly; Pi is not assumed to support MCP
+natively. The media skill requires Python 3. Media generation always requires explicit Credit
+consent and never runs during installation, tests, or startup.
+
 Permission handling is explicit per cell and engine:
 
 - Claude engines can use standard permissions or `--dangerously-skip-permissions`.
@@ -323,11 +331,18 @@ It is intended for AI sessions running inside managed tmux cells.
 | `nc_deck` | Discover owner-qualified decks containing the calling tmux session |
 | `nc_cells` | List authorized active and inactive Fleet cells across visible nodes |
 | `nc_send_cell` | Submit bounded text to one exact active cell returned by `nc_cells` |
+| `nc_identity` | Read-only identity diagnostics; callable with no session and no token |
 
 Cell delivery uses bracketed paste followed by a separate Enter. A `submitted` receipt confirms
 delivery to the target TUI, not acceptance or completion by its model. There is no silent
 offline queue.
 
+`nc_identity` returns only non-sensitive data: the `source` the caller was resolved from
+(`tmux`, `NEXUSCREW_MCP_SESSION`, or `missing`), boolean presence of the identity env vars,
+a stable `code` (`OK`, `NEXUSCREW_MCP_IDENTITY_MISSING`, `NEXUSCREW_MCP_IDENTITY_INVALID`) and
+a remediation hint. It never calls an HTTP API or reads the token, so it works even when the
+identity is missing — use it to diagnose why the identity-gated tools fail closed.
+
 Register the bridge in Claude Code:
 
 ```json
@@ -341,16 +356,32 @@ Register the bridge in Claude Code:
 }
 ```
 
-Or in Codex / Codex-VL:
+Or in Codex / Codex-VL (`env_vars` allowlists variable **names** only — no values are copied
+into the CLI or config file):
 
 ```toml
 [mcp_servers.nexuscrew]
 command = "nexuscrew"
 args = ["mcp"]
+env_vars = ["NEXUSCREW_MCP_SESSION", "TMUX", "TMUX_PANE"]
+```
+
+The equivalent CLI form on a Codex-VL build that supports `--env-var` (allowlist by name, repeated):
+
+```text
+codex-vl mcp add nexuscrew \
+  --env-var NEXUSCREW_MCP_SESSION \
+  --env-var TMUX \
+  --env-var TMUX_PANE \
+  -- nexuscrew mcp
 ```
 
-The caller is resolved from its tmux session. `NEXUSCREW_MCP_SESSION` is available only as an
-explicit fallback for non-tmux contexts.
+The caller is resolved, in order, from its tmux session (`tmux display-message -p '#S'`),
+then from the `NEXUSCREW_MCP_SESSION` fallback, then not at all. Codex/Codex-VL launch MCP stdio
+processes with a cleared environment, so those clients must explicitly allowlist the identity
+env vars for the server to observe them; otherwise the identity-gated tools (`nc_ask`, `nc_send_file`,
+`nc_deck`, `nc_send_cell`, `nc_inbox`) stay fail-closed with a stable
+`NEXUSCREW_MCP_IDENTITY_*` code, while `nc_notify` degrades to an unknown sender.
 
 ## Configuration
 
@@ -403,7 +434,7 @@ See [CHANGELOG.md](CHANGELOG.md) for released changes.
 
 ## Status
 
-The current stable release is **v0.8.24** on npm and GitHub.
+The current stable release is **v0.8.26** on npm and GitHub.
 
 ## License