@mmmbuto/nexuscrew 0.8.44 → 0.8.46

package/CHANGELOG.md

@@ -4,6 +4,57 @@ All notable changes to NexusCrew are tracked here.
 
 ## Unreleased
 
+## 0.8.46 — 2026-07-31 — "Native Kimi"
+
+- The Fleet gains a native Kimi Code CLI engine (`kimi.native`) that launches
+  the official `@moonshot-ai/kimi-code` binary directly in the cell's working
+  directory. Authentication and providers stay with the CLI (device-code
+  login, `config.toml`); NexusCrew never reads, stores or injects Kimi
+  credentials, and existing installations receive the engine through an
+  idempotent, collision-safe backfill.
+- The engine defaults to interactive (standard) permissions. The unsafe
+  policy maps to `--yolo`, which auto-approves regular tool calls while the
+  agent may still ask questions; the fully autonomous `--auto` mode is
+  deliberately not exposed.
+- Because the CLI documents no interactive prompt flag (`kimi -p` is
+  non-interactive and skips the TUI), the cell prompt is never placed on the
+  command line: it is delivered with bracketed paste once the session is
+  ready, including on supervised restarts.
+- The Claude Code "Kimi Code" provider (`claude.kimi-code`) is unchanged and
+  remains the managed K3 path with the 1M-context profile. The PWA presents
+  the two paths under distinct names ("Kimi Code CLI" vs "Kimi Code") with an
+  explanatory notice, and login-delegated engines no longer show a misleading
+  credential KEY section.
+
+## 0.8.45 — 2026-07-30 — "Resilient Directory"
+
+- Fleet cell-directory reads no longer wait for external model catalog discovery.
+  A stalled optional engine binary therefore cannot make the MCP bridge present
+  a reachable local Fleet as unavailable.
+- External model discovery has a bounded five-second budget and caches failures
+  as well as successful results, preventing repeated hung subprocess calls.
+- The MCP cell directory now marks a local timeout explicitly, so a degraded
+  bridge can be distinguished from an unreachable remote node.
+- Share activation now performs an authenticated, non-scanning preflight on
+  the hub-assigned reverse port. A listener owned by the same verified peer is
+  accepted; an unverified occupied port returns an actionable conflict without
+  restarting or publishing the private tunnel.
+- Peer health reports a reverse listener that remains active while Share is
+  disabled, while `nexuscrew status` now states Share enabled or disabled for
+  inbound peers. These diagnostics never terminate a peer tunnel automatically.
+- Shared peers can use an operator-preauthorized three-port reverse pool. The
+  product never writes `authorized_keys`; legacy or incompletely granted peers
+  remain private/usable and are diagnosed as not rotatable instead of guessing
+  another SSH port.
+- A peer proposes a pool slot over its existing private channel and the hub
+  assigns a bounded lease and generation. Rotation runs only after all slots
+  have been independently verified, tries one candidate per ten-minute window,
+  and quarantines failures rather than killing unknown listeners.
+- Slot ownership now uses a per-slot HMAC proof with a fresh challenge. The
+  hub never sends a peer bearer credential to a listener it is investigating;
+  a relayed proof from a different slot is rejected. Retired pool bases are
+  never reused automatically, protecting against stale `permitlisten` grants.
+
 ## 0.8.44 — 2026-07-28 — "Deliberate Switch"
 
 - The mobile cell quick rail now separates selection from switching: choose a

package/README.md

@@ -66,7 +66,7 @@ install-script approval.
 | **Live terminals** | Attach to real tmux sessions through a real PTY, WebSocket and xterm.js. |
 | **Persistent workspaces** | Arrange sessions into decks with saved layouts, ordering, pins and per-cell drafts. |
 | **Multi-node Fleet** | See and control authorized cells across Linux, macOS and Android nodes. |
-| **AI-ready cells** | Launch Claude Code, Codex, Codex-VL, Pi, Agy or a trusted shell with explicit providers and policies. |
+| **AI-ready cells** | Launch Claude Code, Codex, Codex-VL, Pi, Agy, Kimi Code CLI or a trusted shell with explicit providers and policies. |
 | **Mobile-native control** | Scroll tmux history, use terminal keys, dictate prompts and move files from a phone. |
 | **Operator alerts** | Receive visual, push, browser speech and opt-in node-native Audio Share TTS. |
 
@@ -101,6 +101,12 @@ Remote access is intentionally carried through SSH or a VPN you control:
 ssh -L 41820:127.0.0.1:41820 user@your-host
 ```
 
+Shared mobile peers can use a small, pre-authorized reverse-port pool for
+recovery from a real reverse-forward collision. NexusCrew never edits SSH
+policy: the hub operator keeps `authorized_keys` authoritative, while the
+product verifies a configured pool before it can rotate within it. See
+[Connect nodes](docs/NODES.md#rotatable-reverse-port-pools).
+
 [Security model →](docs/SECURITY.md)
 
 ## Documentation