@mmmbuto/nexuscrew 0.8.5 → 0.8.6

package/README.md

@@ -16,7 +16,7 @@ panes, windows. tmux does the work; the browser is just a faithful client.
 
 ---
 
-## What it is (v0.8.5 "Clean Fleet")
+## What it is (v0.8.6 "Connected Fleet")
 
 - Runs a small server on the host where your tmux sessions live.
 - Each attach spawns a real PTY running `tmux attach` and bridges its bytes over a WebSocket
@@ -34,8 +34,11 @@ panes, windows. tmux does the work; the browser is just a faithful client.
 - **Settings and wizard**: manage roles, nodes, token rotation, and service regeneration
   from the UI; a skippable first-run wizard guides initial setup.
 - **Cell lifecycle from the UI**: the primary `+` creates a managed Fleet cell at Local or
-  any reachable node. Cards expose direct power and settings controls; deletion lives in
-  Settings → Fleet. Unmanaged tmux sessions remain attachable and can be terminated there.
+  any reachable node. Power opens one shared launch sheet where engine, model, permission
+  policy and boot can be reviewed before every start; deletion lives in Settings → Fleet.
+- **Legacy session adoption**: Settings → Fleet lists managed and unmanaged tmux sessions on
+  every route. A live unmanaged session can be explicitly imported as a managed cell without
+  inventing its engine, provider or model.
 - **Rich cards**: last activity, current command, a sanitized one-line preview per session.
 - **Fleet control**: a built-in schema-driven fleet manager handles cells, engines, model
   selection, and boot persistence; an existing external `fleet` CLI can take ownership through
@@ -67,9 +70,10 @@ over a real PTY. On the right, a `codex-vl` session running inside the browser c
 
 A clean install includes the built-in, schema-driven fleet manager. Its safe defaults contain
 four CLI adapters — **Claude Code**, **Codex**, **Codex-VL**, and **Pi** — and no cells,
-prompts, API keys, or machine-specific paths. Engine, provider, credential-variable name,
-model and permission policy are configured only in Settings → Fleet; the power sheet only
-starts or stops the already configured cell and controls boot persistence.
+prompts, API keys, or machine-specific paths. Provider, credential-variable name and reusable
+engine definitions live in Settings → Fleet. When a cell is off, its shared launch sheet lets
+you choose the engine, model, permission policy and boot state before starting it; the last
+model and permission choice is remembered separately for each cell and engine.
 
 The concise provider catalog is scoped per CLI:
 
@@ -86,11 +90,13 @@ remain launch-compatible for existing fleets but are not provider choices for ne
 Model discovery is used where the CLI/provider documents it, with a manual model field as the
 portable fallback.
 
-Managed engines expose a permission selector. New Claude engines (native, Z.AI, Ollama, or
-custom) default to **Bypass permissions** and launch with
-`--dangerously-skip-permissions`; choose **Standard permissions** to disable it. New Codex and
-Codex-VL engines default to Standard and offer an explicit opt-in for
-`--dangerously-bypass-approvals-and-sandbox`. Pi keeps its native permission behavior.
+Managed engines expose a permission selector both in their definition and in the cell launch
+sheet. New Claude engines (native, Z.AI, Ollama, or custom) default to **Bypass permissions**
+and launch with `--dangerously-skip-permissions`; choose **Standard permissions** to disable
+it. New Codex and Codex-VL engines default to Standard and offer an explicit opt-in for
+`--dangerously-bypass-approvals-and-sandbox`. Pi is always launched with its native Standard
+permission behavior. Claude-compatible managed models also receive matching context and
+auto-compaction window variables, including one-million-token profiles where declared.
 
 Custom argv-based engines remain supported. Their command, environment, cwd, and prompt are
 validated against a strict trust boundary and launched without a shell.
@@ -116,7 +122,11 @@ the NexusCrew power control starts or stops the cell without changing that confi
 and accepts `up <Cell> [--engine E] [--boot]`, `down <Cell> [--boot]`, `engine <Cell> <E>`,
 `boot|noboot <Cell>`. The binary is trust-checked (regular file, not a symlink, not
 world-writable) and the schema is validated strictly — anything else and the feature stays
-off. Set `NEXUSCREW_FLEET=0` to disable it entirely.
+off. Automatic discovery checks the configured path, Termux's `$PREFIX/bin/fleet`, then
+`~/.local/bin/fleet`; startup-service ownership uses the same resolver so built-in and external
+boot managers cannot both take ownership. An explicitly pinned external binary fails closed
+instead of silently switching to another executable. Set `NEXUSCREW_FLEET=0` to disable Fleet
+entirely.
 
 ## Requirements
 
@@ -148,9 +158,16 @@ token travels in the URL **fragment** (`#token=…`), so it never reaches the se
 ## Federated Hydra nodes (configured from the PWA)
 
 Every installation is always the local node and can join other NexusCrew nodes. Open
-**Settings → Nodes**, create a ten-minute pairing link/QR on one device, then paste or scan it
-on the other together with an OpenSSH Host alias. That single pairing creates a reciprocal,
-loopback-only link and both sides exchange a redacted topology automatically.
+**Settings → Nodes** and create a ten-minute pairing link/QR. The creator supplies the
+OpenSSH target or Host alias through which that installation is reachable; the v2 link carries
+that routing information, its display label, route slug and optional SSH port. Paste or scan the
+single link on the other device, review the pre-filled fields, then choose **Test and connect**.
+Older v1 links remain accepted and simply require the missing routing fields to be entered.
+
+The link never contains an SSH key, identity file, API key or PWA token. Its only credential is
+the random, one-time pairing invite; SSH routing fields are non-secret configuration. A
+successful pairing creates a reciprocal loopback-only link and both sides exchange a redacted
+topology automatically.
 
 NexusCrew does not create SSH keys or edit `authorized_keys`. OpenSSH remains authoritative for
 identity files, agents, host keys, ports, ProxyJump and forwarding policy. NexusCrew uses
@@ -306,7 +323,7 @@ node bin/nexuscrew.js serve
 
 ## Status
 
-The current stable release is **v0.8.5**, published on npm under the **`latest`** dist-tag.
+The current stable release is **v0.8.6**, published on npm under the **`latest`** dist-tag.
 
 ## License