@mmmbuto/nexuscrew 0.8.5 → 0.8.6

package/frontend/dist/assets/{index-U_e8auCM.css → index-kX5IUxt4.css}

@@ -1,4 +1,4 @@
-.nc-icon{display:block;flex:0 0 auto}.nc-sheet-overlay{position:fixed;top:0;right:0;bottom:0;left:0;z-index:50;background:#0000008c;display:flex;align-items:center;justify-content:center;padding:16px;box-sizing:border-box}.nc-sheet{width:100%;max-width:380px;background:#0e140e;color:#cfe;border:1px solid #243;border-radius:14px;padding:16px;display:flex;flex-direction:column;gap:12px;box-shadow:0 12px 40px #00000080}.nc-power-sheet{max-width:min(620px,calc(100vw - 32px));max-height:calc(100dvh - 32px);overflow-y:auto;box-sizing:border-box;min-width:0}.nc-sheet-head{display:flex;align-items:center;justify-content:space-between}.nc-sheet-head b{font-size:16px;color:#d8ffe8}.nc-sheet-state{font-size:12px;opacity:.6}.nc-sheet-label{font-size:12px;opacity:.7;text-transform:uppercase;letter-spacing:.5px}.nc-power-config{display:grid;grid-template-columns:auto minmax(0,1fr);gap:4px 10px;padding:10px;border:1px solid #243;border-radius:8px;background:#0a0e0a;min-width:0;overflow-wrap:anywhere}.nc-power-config span{opacity:.7}.nc-power-config small{grid-column:1 / -1;opacity:.65}.nc-check{display:flex;align-items:center;gap:8px;font-size:13px;cursor:pointer}.nc-check input{accent-color:#2e7d32}.nc-note{font-size:11px;color:#e0b020;opacity:.9}.nc-field{display:flex;flex-direction:column;gap:4px;font-size:12px;opacity:.8}.nc-field input,.nc-field select{padding:9px 10px;font:14px/1.2 inherit;background:#0a0e0a;color:#cfe;border:1px solid #243;border-radius:8px;width:100%;min-width:0;max-width:100%;box-sizing:border-box}.nc-field input:focus,.nc-field select:focus{outline:none;border-color:#2e7d32}.nc-err{color:#f88;font-size:12px}.nc-sheet-actions{display:flex;justify-content:flex-end;gap:8px;flex-wrap:wrap;min-width:0}.nc-btn{border:none;border-radius:8px;padding:8px 16px;font-size:13px;cursor:pointer}.nc-btn.ghost{background:none;border:1px solid #243;color:#9fd}.nc-btn.primary{background:#2e7d32;color:#fff}.nc-btn.primary:active{background:#255028}.nc-btn:disabled{opacity:.5;cursor:default}@media(max-width:600px){.nc-power-sheet{max-width:380px}}.nc-home{display:flex;flex-direction:column;gap:12px;padding:18px 14px 10px;color:#cfe;max-width:560px;margin:0 auto;min-height:100dvh;box-sizing:border-box}.nc-home-head{position:relative}.nc-wordmark{font-size:26px;font-weight:700;letter-spacing:.5px;color:#d8ffe8}.nc-cursor{display:inline-block;width:12px;height:22px;margin-left:6px;background:#0c6;vertical-align:-2px;animation:nc-blink 1.1s steps(1) infinite}@keyframes nc-blink{50%{opacity:0}}@media(prefers-reduced-motion:reduce){.nc-cursor{animation:none}}.nc-home-sub{margin-top:4px;font-size:13px;opacity:.65}.nc-head-actions{position:absolute;top:0;right:0;display:inline-flex;gap:6px}.nc-refresh{display:inline-flex;align-items:center;justify-content:center;background:none;border:1px solid #243;color:#9fd;border-radius:8px;min-width:40px;min-height:40px}.nc-filter{padding:10px 12px;font:16px/1.2 inherit;background:#0e140e;color:#cfe;border:1px solid #243;border-radius:8px}.nc-filter:focus{outline:none;border-color:#2e7d32}.nc-session-list{display:flex;flex-direction:column;gap:8px}.nc-session{display:flex;align-items:center;gap:12px;padding:12px 14px;border:1px solid #1c241c;background:#0e140e;color:#cfe;border-radius:10px;text-align:left;min-height:56px}.nc-session:active{background:#14200f;border-color:#2e7d32}.nc-session .dot{flex:0 0 auto;width:9px;height:9px;border-radius:50%;background:#355}.nc-session .dot.on{background:#0c6;box-shadow:0 0 6px #0c68}.nc-session-main{flex:1;min-width:0;display:flex;flex-direction:column;gap:2px}.nc-session-main b{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-size:14px}.nc-session-main small{opacity:.55;font-size:12px}.nc-badge{flex:0 0 auto;background:#2e7d32;color:#fff;border-radius:10px;padding:1px 8px;font-size:12px;line-height:18px}.nc-err{color:#f88;font-size:13px;padding:4px 2px}.nc-empty{opacity:.5;padding:18px 4px;font-size:13px}.nc-home-foot{margin-top:auto;padding-top:14px;display:flex;justify-content:space-between;gap:8px;font-size:11px;opacity:.4}.nc-group{display:flex;flex-direction:column;gap:8px}.nc-group-title{font-size:11px;opacity:.55;text-transform:uppercase;letter-spacing:.5px;padding:6px 2px 2px}.nc-mcard{display:flex;align-items:center;gap:12px;padding:12px 14px;border:1px solid #1c241c;background:#0e140e;color:#cfe;border-radius:12px;min-height:56px}.nc-mcard-main{flex:1 1 auto;min-width:0;display:flex;align-items:center;gap:12px;background:none;border:none;color:inherit;cursor:pointer;padding:0;text-align:left}.nc-mcard-text{flex:1;min-width:0;display:flex;flex-direction:column;gap:2px}.nc-mcard-text b{font-size:14px;color:#d8ffe8;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.nc-mcard-text small{font-size:12px;opacity:.6;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.dot.warn{background:#e0b020;box-shadow:0 0 6px #e0b02088}.nc-group-title.nc-node-title{display:flex;align-items:center;gap:6px}.nc-group-title.nc-node-title .dot{flex:0 0 auto;width:8px;height:8px;border-radius:50%;background:#355}.nc-group-title.nc-node-title .dot.on{background:#0c6;box-shadow:0 0 6px #0c68}.nc-mcard .dot{flex:0 0 auto;width:9px;height:9px;border-radius:50%;background:#355}.nc-mcard .dot.on{background:#0c6;box-shadow:0 0 6px #0c68}.nc-rel{flex:0 0 auto;font-size:11px;opacity:.45}.nc-power,.nc-menu{flex:0 0 auto;background:none;border:1px solid #243;color:#9fd;border-radius:8px;min-width:38px;min-height:38px;font-size:17px;cursor:pointer}.nc-power:active,.nc-menu:active{border-color:#2e7d32}.nc-fab{position:fixed;right:18px;bottom:18px;z-index:20;width:54px;height:54px;border-radius:50%;background:#2e7d32;color:#fff;border:none;font-size:28px;line-height:1;cursor:pointer;box-shadow:0 6px 18px #00000073}.nc-fab:active{background:#255028}.nc-lang{display:inline-flex;align-items:center;gap:2px}.nc-act{width:34px;height:34px;border-radius:50%;display:flex;align-items:center;justify-content:center;background:#ffffff0d;border:1px solid rgba(255,255,255,.22);color:#9aa89a;cursor:pointer;flex:0 0 auto;font-size:15px;line-height:1}.nc-act.power.on{color:#0c6;border-color:#00cc668c;background:#00cc661a}.nc-act.power.warn{color:#e8c547;border-color:#e8c5478c;background:#e8c5471a}.nc-act.pin.on{color:#e8c547;border-color:#e8c5478c;background:#e8c54714}.nc-mcard{gap:8px}/**
+.nc-icon{display:block;flex:0 0 auto}.nc-sheet-overlay{position:fixed;top:0;right:0;bottom:0;left:0;z-index:50;background:#0000008c;display:flex;align-items:center;justify-content:center;padding:16px;box-sizing:border-box}.nc-launch-overlay{z-index:70}.nc-sheet{width:100%;max-width:380px;background:#0e140e;color:#cfe;border:1px solid #243;border-radius:14px;padding:16px;display:flex;flex-direction:column;gap:12px;box-shadow:0 12px 40px #00000080}.nc-power-sheet{max-width:min(620px,calc(100vw - 32px));max-height:calc(100dvh - 32px);overflow-y:auto;box-sizing:border-box;min-width:0}.nc-launch-sheet{max-width:min(520px,calc(100vw - 32px));width:100%;min-width:0}.nc-launch-fields{display:flex;flex-direction:column;gap:10px;min-width:0}.nc-launch-fields .nc-field,.nc-launch-fields .nc-field input,.nc-launch-fields .nc-field select{width:100%;min-width:0;max-width:100%;box-sizing:border-box}.nc-sheet-head{display:flex;align-items:center;justify-content:space-between}.nc-sheet-head b{font-size:16px;color:#d8ffe8}.nc-sheet-state{font-size:12px;opacity:.6}.nc-sheet-label{font-size:12px;opacity:.7;text-transform:uppercase;letter-spacing:.5px}.nc-power-config{display:grid;grid-template-columns:auto minmax(0,1fr);gap:4px 10px;padding:10px;border:1px solid #243;border-radius:8px;background:#0a0e0a;min-width:0;overflow-wrap:anywhere}.nc-power-config span{opacity:.7}.nc-power-config small{grid-column:1 / -1;opacity:.65}.nc-check{display:flex;align-items:center;gap:8px;font-size:13px;cursor:pointer}.nc-check input{accent-color:#2e7d32}.nc-note{font-size:11px;color:#e0b020;opacity:.9}.nc-field{display:flex;flex-direction:column;gap:4px;font-size:12px;opacity:.8}.nc-field input,.nc-field select{padding:9px 10px;font:14px/1.2 inherit;background:#0a0e0a;color:#cfe;border:1px solid #243;border-radius:8px;width:100%;min-width:0;max-width:100%;box-sizing:border-box}.nc-field input:focus,.nc-field select:focus{outline:none;border-color:#2e7d32}.nc-err{color:#f88;font-size:12px}.nc-sheet-actions{display:flex;justify-content:flex-end;gap:8px;flex-wrap:wrap;min-width:0}.nc-btn{border:none;border-radius:8px;padding:8px 16px;font-size:13px;cursor:pointer}.nc-btn.ghost{background:none;border:1px solid #243;color:#9fd}.nc-btn.primary{background:#2e7d32;color:#fff}.nc-btn.primary:active{background:#255028}.nc-btn:disabled{opacity:.5;cursor:default}@media(max-width:600px){.nc-power-sheet{max-width:380px}}.nc-home{display:flex;flex-direction:column;gap:12px;padding:18px 14px 10px;color:#cfe;max-width:560px;margin:0 auto;min-height:100dvh;box-sizing:border-box}.nc-home-head{position:relative}.nc-wordmark{font-size:26px;font-weight:700;letter-spacing:.5px;color:#d8ffe8}.nc-cursor{display:inline-block;width:12px;height:22px;margin-left:6px;background:#0c6;vertical-align:-2px;animation:nc-blink 1.1s steps(1) infinite}@keyframes nc-blink{50%{opacity:0}}@media(prefers-reduced-motion:reduce){.nc-cursor{animation:none}}.nc-home-sub{margin-top:4px;font-size:13px;opacity:.65}.nc-head-actions{position:absolute;top:0;right:0;display:inline-flex;gap:6px}.nc-refresh{display:inline-flex;align-items:center;justify-content:center;background:none;border:1px solid #243;color:#9fd;border-radius:8px;min-width:40px;min-height:40px}.nc-filter{padding:10px 12px;font:16px/1.2 inherit;background:#0e140e;color:#cfe;border:1px solid #243;border-radius:8px}.nc-filter:focus{outline:none;border-color:#2e7d32}.nc-session-list{display:flex;flex-direction:column;gap:8px}.nc-session{display:flex;align-items:center;gap:12px;padding:12px 14px;border:1px solid #1c241c;background:#0e140e;color:#cfe;border-radius:10px;text-align:left;min-height:56px}.nc-session:active{background:#14200f;border-color:#2e7d32}.nc-session .dot{flex:0 0 auto;width:9px;height:9px;border-radius:50%;background:#355}.nc-session .dot.on{background:#0c6;box-shadow:0 0 6px #0c68}.nc-session-main{flex:1;min-width:0;display:flex;flex-direction:column;gap:2px}.nc-session-main b{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-size:14px}.nc-session-main small{opacity:.55;font-size:12px}.nc-badge{flex:0 0 auto;background:#2e7d32;color:#fff;border-radius:10px;padding:1px 8px;font-size:12px;line-height:18px}.nc-err{color:#f88;font-size:13px;padding:4px 2px}.nc-empty{opacity:.5;padding:18px 4px;font-size:13px}.nc-home-foot{margin-top:auto;padding-top:14px;display:flex;justify-content:space-between;gap:8px;font-size:11px;opacity:.4}.nc-group{display:flex;flex-direction:column;gap:8px}.nc-group-title{font-size:11px;opacity:.55;text-transform:uppercase;letter-spacing:.5px;padding:6px 2px 2px}.nc-mcard{display:flex;align-items:center;gap:12px;padding:12px 14px;border:1px solid #1c241c;background:#0e140e;color:#cfe;border-radius:12px;min-height:56px}.nc-mcard-main{flex:1 1 auto;min-width:0;display:flex;align-items:center;gap:12px;background:none;border:none;color:inherit;cursor:pointer;padding:0;text-align:left}.nc-mcard-text{flex:1;min-width:0;display:flex;flex-direction:column;gap:2px}.nc-mcard-text b{font-size:14px;color:#d8ffe8;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.nc-mcard-text small{font-size:12px;opacity:.6;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.dot.warn{background:#e0b020;box-shadow:0 0 6px #e0b02088}.nc-group-title.nc-node-title{display:flex;align-items:center;gap:6px}.nc-group-title.nc-node-title .dot{flex:0 0 auto;width:8px;height:8px;border-radius:50%;background:#355}.nc-group-title.nc-node-title .dot.on{background:#0c6;box-shadow:0 0 6px #0c68}.nc-mcard .dot{flex:0 0 auto;width:9px;height:9px;border-radius:50%;background:#355}.nc-mcard .dot.on{background:#0c6;box-shadow:0 0 6px #0c68}.nc-rel{flex:0 0 auto;font-size:11px;opacity:.45}.nc-power,.nc-menu{flex:0 0 auto;background:none;border:1px solid #243;color:#9fd;border-radius:8px;min-width:38px;min-height:38px;font-size:17px;cursor:pointer}.nc-power:active,.nc-menu:active{border-color:#2e7d32}.nc-fab{position:fixed;right:18px;bottom:18px;z-index:20;width:54px;height:54px;border-radius:50%;background:#2e7d32;color:#fff;border:none;font-size:28px;line-height:1;cursor:pointer;box-shadow:0 6px 18px #00000073}.nc-fab:active{background:#255028}.nc-lang{display:inline-flex;align-items:center;gap:2px}.nc-act{width:34px;height:34px;border-radius:50%;display:flex;align-items:center;justify-content:center;background:#ffffff0d;border:1px solid rgba(255,255,255,.22);color:#9aa89a;cursor:pointer;flex:0 0 auto;font-size:15px;line-height:1}.nc-act.power.on{color:#0c6;border-color:#00cc668c;background:#00cc661a}.nc-act.power.warn{color:#e8c547;border-color:#e8c5478c;background:#e8c5471a}.nc-act.pin.on{color:#e8c547;border-color:#e8c5478c;background:#e8c54714}.nc-mcard{gap:8px}/**
  * Copyright (c) 2014 The xterm.js authors. All rights reserved.
  * Copyright (c) 2012-2013, Christopher Jeffrey (MIT License)
  * https://github.com/chjj/term.js

package/frontend/dist/index.html

@@ -11,8 +11,8 @@
   <meta name="apple-mobile-web-app-title" content="NexusCrew" />
   <link rel="manifest" href="/manifest.json" />
   <title>NexusCrew</title>
-  <script type="module" crossorigin src="/assets/index-UAVxf6SE.js"></script>
-  <link rel="stylesheet" crossorigin href="/assets/index-U_e8auCM.css">
+  <script type="module" crossorigin src="/assets/index-CEFh0hI4.js"></script>
+  <link rel="stylesheet" crossorigin href="/assets/index-kX5IUxt4.css">
 </head>
 <body>
   <div id="root"></div>

package/frontend/dist/version.json

@@ -1 +1 @@
-{"version":"0.8.5"}
+{"version":"0.8.6"}

package/lib/cli/fleet-service.js

@@ -185,8 +185,13 @@ function selectProviderModeSync(cfg = {}) {
 
   // external: binario fidato (regular file, exec, non world-writable, no symlink).
   // lazy-require: niente costo/accoppiamento all'import del modulo (usato solo dal companion).
-  const { binTrusted } = require('../fleet/index.js'); // sync (audit F3)
-  const extTrusted = !!(cfg.fleetBin && binTrusted(cfg.fleetBin));
+  const { binTrusted, externalFleetCandidates } = require('../fleet/index.js'); // sync (audit F3)
+  // Deve usare lo stesso insieme di path del resolver runtime asincrono. In
+  // particolare Termux installa normalmente `fleet` in $PREFIX/bin: se init
+  // guardasse soltanto cfg.fleetBin potrebbe installare il companion builtin e
+  // il runtime scegliere poi l'external, creando due proprietari del boot.
+  const trustedExternal = externalFleetCandidates(cfg).find((candidate) => binTrusted(candidate)) || null;
+  const extTrusted = !!trustedExternal;
 
   // builtin: fleet.json valido (loadDefinitions e' sync; garbage -> null = fail-closed).
   const { loadDefinitions } = require('../fleet/definitions.js');
@@ -209,7 +214,7 @@ function selectProviderModeSync(cfg = {}) {
   if (forced) return { mode: 'disabled', reason: `fail-closed: provider forzato "${forced}" non riconosciuto` };
 
   // auto: external fidato vince (no-doppio-boot), poi builtin, poi disabled.
-  if (extTrusted) return { mode: 'external', reason: 'auto: external fidato configurato (skip companion)' };
+  if (extTrusted) return { mode: 'external', reason: `auto: external fidato configurato (${trustedExternal}; skip companion)` };
   if (builtinAvail) return { mode: 'builtin', reason: 'auto: builtin (fleet.json valido)' };
   return { mode: 'disabled', reason: 'auto: nessun provider disponibile (no external fidato, no fleet.json)' };
 }

package/lib/fleet/builtin.js

@@ -26,7 +26,7 @@ const path = require('node:path');
 const { execFile } = require('node:child_process');
 const {
   parseDefinitions, validateCommandTrust, resolveCwd,
-  loadDefinitions, atomicWrite, CAPS,
+  loadDefinitions, atomicWrite, CAPS, validTmuxName,
 } = require('./definitions.js');
 const {
   publicCatalog, describeManaged, resolveManagedEngine, discoverOllamaModels, discoverPiModels,
@@ -193,24 +193,36 @@ function draftFrom(defs) {
       ...(e.env ? { env: { ...e.env } } : {}),
       ...(e.model ? { model: { ...e.model } } : {}),
     })),
-    cells: defs.cells.map((c) => ({ ...c, ...(c.models ? { models: { ...c.models } } : {}) })),
+    cells: defs.cells.map((c) => ({
+      ...c,
+      ...(c.models ? { models: { ...c.models } } : {}),
+      ...(c.permissionPolicies ? { permissionPolicies: { ...c.permissionPolicies } } : {}),
+    })),
   };
 }
 
-// Applica engine + modello come un'unica transizione. Ogni engine ricorda il
-// proprio ultimo modello; passando a un altro engine il modello vecchio non
-// attraversa mai il confine.
-function applyCellEngineModel(target, engineId, model, hasModel) {
-  const remembered = { ...(target.models || {}) };
+// Applica engine + modello + policy come un'unica transizione. Ogni engine ricorda
+// il proprio ultimo modello E l'ultima policy; passando a un altro engine né
+// l'uno né l'altra attraversano il confine. La policy e' PER-CELL PER-ENGINE:
+// mai si tocca engine.managed.permissionPolicy (globale su tutte le celle che
+// usano quell'engine). Valori ammessi solo 'standard' | 'unsafe'.
+function applyCellTransition(target, engineId, { model, hasModel, policy, hasPolicy } = {}) {
+  const rememberedModels = { ...(target.models || {}) };
+  const rememberedPolicies = { ...(target.permissionPolicies || {}) };
   target.engine = engineId;
   if (hasModel) {
-    if (typeof model === 'string' && model) remembered[engineId] = model;
-    else delete remembered[engineId];
+    if (typeof model === 'string' && model) rememberedModels[engineId] = model;
+    else delete rememberedModels[engineId];
+  }
+  if (hasPolicy) {
+    if (policy === 'standard' || policy === 'unsafe') rememberedPolicies[engineId] = policy;
+    else delete rememberedPolicies[engineId];
   }
+  if (Object.keys(rememberedModels).length) target.models = rememberedModels; else delete target.models;
+  if (Object.keys(rememberedPolicies).length) target.permissionPolicies = rememberedPolicies; else delete target.permissionPolicies;
   const selected = hasModel
     ? (typeof model === 'string' ? model : '')
-    : (remembered[engineId] || '');
-  if (Object.keys(remembered).length) target.models = remembered; else delete target.models;
+    : (rememberedModels[engineId] || '');
   if (selected) target.model = selected; else delete target.model;
 }
 
@@ -264,9 +276,21 @@ async function createBuiltinFleet(cfg = {}) {
     const sessions = cache.sessions;
     const cells = cache.defs.cells.map((c) => {
       const alive = sessions.has(c.tmuxSession);
+      // Effective policy per cella: override remembered per-engine, altrimenti il
+      // default dell'engine gestito. Esposta SOLO come policy effettiva (mai segreti).
+      const engineDef = findEngine(cache.defs, c.engine);
+      const engineDefault = engineDef && engineDef.managed ? engineDef.managed.permissionPolicy : '';
+      const remembered = c.permissionPolicies
+        && (c.permissionPolicies[c.engine] === 'standard' || c.permissionPolicies[c.engine] === 'unsafe')
+        ? c.permissionPolicies[c.engine] : null;
+      const effectivePolicy = engineDef?.managed?.client === 'pi'
+        ? 'standard'
+        : (remembered || engineDefault || '');
       return {
         cell: c.id, tmuxSession: c.tmuxSession, engine: c.engine,
         model: c.model || '', models: { ...(c.models || {}) },
+        permissionPolicy: effectivePolicy,
+        permissionPolicies: { ...(c.permissionPolicies || {}) },
         active: alive, boot: c.boot, tmux: alive,
         rc: '', key: '', degraded: false, // builtin: cella "up" <=> sessione tmux viva
       };
@@ -391,8 +415,20 @@ async function createBuiltinFleet(cfg = {}) {
     if (readonly()) throw httpError(403, 'READONLY: engine bloccato');
     const defs = reloadDefs();
     if (!findCell(defs, cellId)) throw httpError(400, `cella sconosciuta: ${cellId}`);
-    if (!findEngine(defs, engId)) throw httpError(400, `engine non valido: ${engId}`);
-    await mutate(defs, (d) => applyCellEngineModel(findCell(d, cellId), engId, opts.model, typeof opts.model === 'string' && opts.model !== ''));
+    const selectedEngine = findEngine(defs, engId);
+    if (!selectedEngine) throw httpError(400, `engine non valido: ${engId}`);
+    const hasModel = typeof opts.model === 'string';
+    const hasPolicy = Object.prototype.hasOwnProperty.call(opts, 'permissionPolicy') && typeof opts.permissionPolicy === 'string';
+    if (hasPolicy && opts.permissionPolicy !== 'standard' && opts.permissionPolicy !== 'unsafe') {
+      throw httpError(400, 'permissionPolicy non valida (standard|unsafe)');
+    }
+    if (hasPolicy && selectedEngine.managed?.client === 'pi' && opts.permissionPolicy !== 'standard') {
+      throw httpError(400, 'Pi supporta solo permissionPolicy standard');
+    }
+    await mutate(defs, (d) => applyCellTransition(findCell(d, cellId), engId, {
+      model: opts.model, hasModel,
+      policy: hasPolicy ? opts.permissionPolicy : null, hasPolicy,
+    }));
     const saved = reloadDefs(); const target = findCell(saved, cellId);
     return { ok: true, engine: engId, model: target.model || '' };
   }
@@ -450,9 +486,14 @@ async function createBuiltinFleet(cfg = {}) {
     await mutate(defs, (d) => {
       d.engines = d.engines.filter((e) => e.id !== id);
       for (const cell of d.cells) {
-        if (!cell.models || !Object.prototype.hasOwnProperty.call(cell.models, id)) continue;
-        delete cell.models[id];
-        if (!Object.keys(cell.models).length) delete cell.models;
+        if (cell.models && Object.prototype.hasOwnProperty.call(cell.models, id)) {
+          delete cell.models[id];
+          if (!Object.keys(cell.models).length) delete cell.models;
+        }
+        if (cell.permissionPolicies && Object.prototype.hasOwnProperty.call(cell.permissionPolicies, id)) {
+          delete cell.permissionPolicies[id];
+          if (!Object.keys(cell.permissionPolicies).length) delete cell.permissionPolicies;
+        }
       }
     });
     return { ok: true };
@@ -469,19 +510,33 @@ async function createBuiltinFleet(cfg = {}) {
     if (readonly()) throw httpError(403, 'READONLY: edit-cell bloccato');
     if (!id) throw httpError(400, 'id cell mancante');
     const defs = reloadDefs();
-    if (!findCell(defs, id)) throw httpError(400, `cell inesistente: ${id}`);
+    const current = findCell(defs, id);
+    if (!current) throw httpError(400, `cell inesistente: ${id}`);
     if (patch && (Object.prototype.hasOwnProperty.call(patch, 'id') || Object.prototype.hasOwnProperty.call(patch, 'tmuxSession'))) {
       throw httpError(400, 'id e tmuxSession sono immutabili');
     }
+    const nextEngine = findEngine(defs, typeof patch?.engine === 'string' ? patch.engine : current.engine);
+    if (Object.prototype.hasOwnProperty.call(patch || {}, 'permissionPolicy')
+      && patch.permissionPolicy === 'unsafe' && nextEngine?.managed?.client === 'pi') {
+      throw httpError(400, 'Pi supporta solo permissionPolicy standard');
+    }
     await mutate(defs, (d) => {
       const target = findCell(d, id);
       const hasEngine = typeof patch?.engine === 'string';
       const hasModel = Object.prototype.hasOwnProperty.call(patch || {}, 'model');
+      const hasPolicy = Object.prototype.hasOwnProperty.call(patch || {}, 'permissionPolicy');
+      if (hasPolicy && patch.permissionPolicy !== 'standard' && patch.permissionPolicy !== 'unsafe' && patch.permissionPolicy !== null) {
+        throw httpError(400, 'permissionPolicy non valida (standard|unsafe)');
+      }
       for (const [key, value] of Object.entries(patch || {})) {
-        if (key === 'engine' || key === 'model') continue;
+        if (key === 'engine' || key === 'model' || key === 'permissionPolicy') continue;
         if (value === null) delete target[key]; else target[key] = value;
       }
-      if (hasEngine || hasModel) applyCellEngineModel(target, hasEngine ? patch.engine : target.engine, patch?.model, hasModel);
+      if (hasEngine || hasModel || hasPolicy) applyCellTransition(target, hasEngine ? patch.engine : target.engine, {
+        model: patch?.model, hasModel,
+        policy: hasPolicy ? patch.permissionPolicy : null,
+        hasPolicy,
+      });
     });
     const sessions = await refreshSessions();
     return { ok: true, active: sessions.has(findCell(defs, id).tmuxSession) };
@@ -501,6 +556,63 @@ async function createBuiltinFleet(cfg = {}) {
     return { ok: true };
   }
 
+  // importCell: riconcilia una sessione tmux esistente (es. cella Fleet legacy
+  // rimasta orfana su installazione pulita, tipo "jarvis") in una cella GESTITA
+  // di fleet.json. Design §reconciliation:
+  //  - idempotente: se una cella gestita possiede gia' questa tmuxSession -> no-op.
+  //  - NESSUNA invenzione di engine/provider/model: l'engine DEV'essere gia'
+  //    dichiarato in fleet.json (l'operatore lo sceglie). model/policy restano i
+  //    default dell'engine scelto (modificabili dopo dal pannello di lancio).
+  //  - tmuxSession non canonica (es. "jarvis") è ammessa e round-trip; una
+  //    sessione legacy canonica cloud-X viene adottata come cella X.
+  //  - cwd obbligatoria (default = home); la validazione strict (parseCell, sotto
+  //    home, no cloud-* alias incoerenti) avviene in atomicWrite -> errore chiaro.
+  // Dopo l'import la sessione sparisce da "unmanaged" e compare una sola volta in
+  // Fleet con gear+power. Elimina/terminate resta solo nelle Impostazioni.
+  const CELL_ID_RE = /^[A-Za-z0-9._-]{1,32}$/;
+  function deriveCellId(session, cells) {
+    const raw = String(session || '');
+    // Una sessione legacy canonica cloud-X si adotta come cella X. Usare
+    // direttamente cloud-X come id produrrebbe cloud-cloud-X e fallirebbe la
+    // validazione; un id esplicito diverso continua invece a essere rifiutato.
+    const canonicalSuffix = raw.startsWith('cloud-') ? raw.slice('cloud-'.length) : '';
+    let base = (canonicalSuffix && CELL_ID_RE.test(canonicalSuffix) ? canonicalSuffix : raw)
+      .replace(/[^A-Za-z0-9._-]+/g, '-').replace(/^-+|-+$/g, '').slice(0, 32) || 'cell';
+    const used = new Set(cells.map((c) => c.id));
+    if (!used.has(base)) return base;
+    if (canonicalSuffix) return base; // il caller produrrà un 409 esplicito
+    for (let i = 2; i < 100; i += 1) {
+      const candidate = `${base.slice(0, Math.max(1, 32 - String(i).length - 1))}-${i}`;
+      if (!used.has(candidate)) return candidate;
+    }
+    return base;
+  }
+  async function importCell(b = {}) {
+    if (readonly()) throw httpError(403, 'READONLY: import bloccato');
+    const tmuxSession = typeof b.tmuxSession === 'string' ? b.tmuxSession.trim() : '';
+    if (!tmuxSession || !validTmuxName(tmuxSession)) throw httpError(400, 'tmuxSession non valida');
+    const defs = reloadDefs();
+    const existing = defs.cells.find((c) => c.tmuxSession === tmuxSession);
+    if (existing) return { ok: true, id: existing.id, tmuxSession, idempotent: true };
+    const sessions = await refreshSessions();
+    if (!sessions.has(tmuxSession)) {
+      throw httpError(404, `sessione tmux non trovata: ${tmuxSession}`);
+    }
+    const engineId = typeof b.engine === 'string' ? b.engine.trim() : '';
+    if (!engineId || !findEngine(defs, engineId)) {
+      throw httpError(400, `engine non dichiarato: "${engineId || '(manca)'}" — crea prima l'engine in Impostazioni`);
+    }
+    let id = typeof b.id === 'string' && b.id.trim() ? b.id.trim() : deriveCellId(tmuxSession, defs.cells);
+    if (!CELL_ID_RE.test(id)) throw httpError(400, 'id non valido (A-Za-z0-9._- max 32)');
+    if (defs.cells.some((c) => c.id === id)) throw httpError(409, `id cella già usato: ${id}`);
+    const cwd = typeof b.cwd === 'string' && b.cwd.trim() ? b.cwd.trim() : home;
+    const cellDef = { id, cwd, engine: engineId, boot: b.boot === true, tmuxSession };
+    try {
+      await mutate(defs, (d) => { d.cells.push(cellDef); });
+    } catch (e) { throw httpError(400, `import non valido: ${e.message}`); }
+    return { ok: true, id, tmuxSession, imported: true };
+  }
+
   // Vista editabile ma secret-safe: gli env values restano write-only.
   function definitions() {
     const defs = reloadDefs();
@@ -512,7 +624,11 @@ async function createBuiltinFleet(cfg = {}) {
         if (e.managed) out.managedInfo = describeManaged(e.managed, { ...cfg, home });
         return out;
       }),
-      cells: defs.cells.map((c) => ({ ...c, ...(c.models ? { models: { ...c.models } } : {}) })),
+      cells: defs.cells.map((c) => ({
+        ...c,
+        ...(c.models ? { models: { ...c.models } } : {}),
+        ...(c.permissionPolicies ? { permissionPolicies: { ...c.permissionPolicies } } : {}),
+      })),
       managedCatalog: publicCatalog(),
       managedConfig: { providerSecretsPath: cfg.providerSecretsPath || path.join(home, '.nexuscrew', 'providers.env') },
     };
@@ -581,13 +697,14 @@ async function createBuiltinFleet(cfg = {}) {
         boot: { type: 'boolean', required: false, default: false },
         model: { type: 'string', required: false, max: CAPS.MAX_MODEL_VAL_LEN },
         models: { type: 'object', required: false, keyRef: 'engine.id', valueMax: CAPS.MAX_MODEL_VAL_LEN },
+        permissionPolicies: { type: 'object', required: false, keyRef: 'engine.id', valueEnum: ['standard', 'unsafe'] },
         prompt: { type: 'string', required: false, max: CAPS.MAX_PROMPT_LEN },
       },
     };
   }
 
   function capabilities() {
-    return ['status', 'up', 'down', 'restart', 'engine', 'boot', 'define', 'edit', 'remove', 'schema', 'definitions'];
+    return ['status', 'up', 'down', 'restart', 'engine', 'boot', 'define', 'edit', 'remove', 'import', 'schema', 'definitions'];
   }
 
   return {
@@ -595,7 +712,7 @@ async function createBuiltinFleet(cfg = {}) {
     provider: 'builtin',
     status, up, down, restart, engine: setEngine, boot: setBoot, isCellSession,
     defineEngine, editEngine, removeEngine,
-    defineCell, editCell, removeCell,
+    defineCell, editCell, removeCell, importCell,
     schema, definitions, capabilities,
   };
 }

package/lib/fleet/definitions.js

@@ -254,6 +254,24 @@ function parseCell(c, engineIds) {
     }
   }
 
+  // permissionPolicies: scelta PER-CELL PER-ENGINE (override del default engine).
+  // Stesso confine di `models`: ricorda l'ultima policy usata con ogni engine, così
+  // tornando a un provider si ritrova la scelta precedente senza trascinarla altrove
+  // e SENZA toccare engine.managed.permissionPolicy (globale: cambierebbe ogni cella
+  // che usa quell'engine). Valori ammessi solo 'standard' | 'unsafe'.
+  let permissionPolicies;
+  if (c.permissionPolicies !== undefined) {
+    if (!c.permissionPolicies || typeof c.permissionPolicies !== 'object' || Array.isArray(c.permissionPolicies)) return null;
+    const entries = Object.entries(c.permissionPolicies);
+    if (entries.length > MAX_ENGINES) return null;
+    permissionPolicies = {};
+    for (const [engineId, value] of entries) {
+      if (!engineIds.has(engineId)) return null;
+      if (value !== 'standard' && value !== 'unsafe') return null;
+      permissionPolicies[engineId] = value;
+    }
+  }
+
   // prompt (opzionale, cap)
   let prompt;
   if (c.prompt !== undefined) {
@@ -280,6 +298,7 @@ function parseCell(c, engineIds) {
   const out = { id: c.id, cwd: c.cwd, engine: c.engine, boot, tmuxSession };
   if (model !== undefined) out.model = model;
   if (Object.keys(models).length) out.models = models;
+  if (permissionPolicies) out.permissionPolicies = permissionPolicies;
   if (prompt !== undefined) out.prompt = prompt;
   return out;
 }
@@ -403,6 +422,7 @@ module.exports = {
   resolveCwd,
   loadDefinitions,
   atomicWrite,
+  validTmuxName,
   CAPS,
   // Costanti esposte anche piatte (comode per la UI/schema e i test)
   SCHEMA_VERSION, MAX_ENGINES, MAX_CELLS, MAX_ARGS, MAX_ARG_LEN,

package/lib/fleet/index.js

@@ -1,5 +1,7 @@
 'use strict';
 const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
 const { createFleetExec } = require('./exec.js');
 
 const STATUS_TTL_MS = 2000;
@@ -135,4 +137,43 @@ async function createFleet(cfg = {}) {
   };
 }
 
-module.exports = { createFleet, parseStatus, binTrusted };
+// Discovery del binario fleet legacy cross-platform. In precedenza si cercava
+// solo cfg.fleetBin (~/.local/bin/fleet di default); su Termux un fleet può stare
+// in $PREFIX/bin/fleet. Ordine candidati: (1) cfg.fleetBin (config/env esplicita),
+// (2) $PREFIX/bin/fleet (Termux), (3) ~/.local/bin/fleet (default storico).
+// Dedup + skip vuoti. La validità (regular/trusted + status --json schema valido)
+// la verifica il chiamante (resolveExternalFleet) via binTrusted + createFleet.
+function fleetCandidates(cfg = {}) {
+  const home = cfg.home || os.homedir();
+  const envPrefix = (cfg.env && cfg.env.PREFIX) || process.env.PREFIX;
+  const out = [];
+  const push = (p) => { if (typeof p === 'string' && p && !out.includes(p)) out.push(p); };
+  push(cfg.fleetBin);
+  if (envPrefix) push(path.join(envPrefix, 'bin', 'fleet'));
+  push(path.join(home, '.local', 'bin', 'fleet'));
+  return out;
+}
+
+// In auto mode i fallback cross-platform sono intenzionali. In forced external,
+// invece, un fleetBin fornito è un pin: se non è valido si fallisce chiuso e non
+// si cambia eseguibile alle spalle dell'operatore.
+function externalFleetCandidates(cfg = {}) {
+  const forced = (cfg.fleetProvider || process.env.NEXUSCREW_FLEET_PROVIDER || '').toLowerCase();
+  if (forced === 'external' && typeof cfg.fleetBin === 'string' && cfg.fleetBin) return [cfg.fleetBin];
+  return fleetCandidates(cfg);
+}
+
+// Prova i candidati in ordine e ritorna il primo external FIDATO (binTrusted) E
+// rispondente al contratto (createFleet -> available, che fa status --json e
+// valida lo schema ai-fleet). Null se nessuno valido. Così un external reale
+// resta external (non cade sul builtin e non doppia il boot).
+async function resolveExternalFleet(cfg = {}) {
+  for (const bin of externalFleetCandidates(cfg)) {
+    if (!binTrusted(bin)) continue;
+    const f = await createFleet({ ...cfg, fleetBin: bin });
+    if (f.available) return { fleet: f, bin, reason: `fidato + risponde al contratto (${bin})` };
+  }
+  return null;
+}
+
+module.exports = { createFleet, parseStatus, binTrusted, fleetCandidates, externalFleetCandidates, resolveExternalFleet };

package/lib/fleet/managed.js

@@ -333,7 +333,18 @@ function resolveManagedEngine(engine, cell, cfg = {}) {
   const profile = profileFor(spec.client, spec.provider, spec.credentialProfile || '');
   const cred = credential(profile, spec, cfg, home);
   const env = {}; const args = []; const model = cell?.model || spec.model;
-  if (spec.permissionPolicy === 'unsafe') {
+  // Effective permission policy: override PER-CELL PER-ENGINE (remembered) vince sul
+  // default dell'engine. Mai si mutationa engine.managed.permissionPolicy (globale).
+  // Pi resta sempre 'standard' (lo spec normalized rifiuta gia' unsafe per pi).
+  const engineId = engine && typeof engine.id === 'string' ? engine.id : '';
+  const override = cell && cell.permissionPolicies && Object.prototype.hasOwnProperty.call(cell.permissionPolicies, engineId)
+    ? cell.permissionPolicies[engineId] : null;
+  let effectivePolicy = (override === 'standard' || override === 'unsafe') ? override : spec.permissionPolicy;
+  // Pi resta sempre 'standard': normalizeManagedSpec rifiuta gia' unsafe nello spec
+  // dell'engine, ma l'override PER-CELL bypasserebbe quel check -> clamp esplicito.
+  if (spec.client === 'pi') effectivePolicy = 'standard';
+  info.permissionPolicy = effectivePolicy;
+  if (effectivePolicy === 'unsafe') {
     if (spec.client === 'claude') args.push('--dangerously-skip-permissions');
     if (spec.client === 'codex' || spec.client === 'codex-vl') args.push('--dangerously-bypass-approvals-and-sandbox');
   }
@@ -345,12 +356,14 @@ function resolveManagedEngine(engine, cell, cfg = {}) {
     } else {
       const endpoint = spec.baseUrl || profile.endpoint;
       const token = profile.auth === 'none' ? 'ollama' : cred.value;
+      const contextWindow = OLLAMA_CONTEXT[model] || (spec.provider === 'zai' ? 1000000 : 200000);
       Object.assign(env, {
         ANTHROPIC_BASE_URL: endpoint, ANTHROPIC_AUTH_TOKEN: token, ANTHROPIC_API_KEY: '',
         ANTHROPIC_MODEL: model, ANTHROPIC_DEFAULT_OPUS_MODEL: model,
         ANTHROPIC_DEFAULT_SONNET_MODEL: model, ANTHROPIC_DEFAULT_HAIKU_MODEL: model,
         CLAUDE_CODE_SUBAGENT_MODEL: model, API_TIMEOUT_MS: '3000000',
-        CLAUDE_CODE_AUTO_COMPACT_WINDOW: String(OLLAMA_CONTEXT[model] || (spec.provider === 'zai' ? 1000000 : 200000)),
+        CLAUDE_CODE_MAX_CONTEXT_TOKENS: String(contextWindow),
+        CLAUDE_CODE_AUTO_COMPACT_WINDOW: String(contextWindow),
       });
     }
     if (model) args.push('--model', model);

package/lib/fleet/provider.js

@@ -14,7 +14,7 @@
 // Il drift a runtime NON si risolve qui: e' una scelta one-shot. Se l'external
 // diventa invalido DOPO lo startup, lo status risultante sara' degraded/unavailable
 // (mai fall-through silenzioso al built-in) — gestito dal layer di status.
-const { createFleet, binTrusted } = require('./index.js');
+const { binTrusted, externalFleetCandidates, resolveExternalFleet } = require('./index.js');
 const { createBuiltinFleet } = require('./builtin.js');
 
 const DISABLED_FLEET = Object.freeze({
@@ -37,19 +37,20 @@ async function selectProvider(cfg = {}) {
 
   const forced = (cfg.fleetProvider || process.env.NEXUSCREW_FLEET_PROVIDER || '').toLowerCase() || null;
 
-  // External: fidato (regular file, exec, no symlink, no world-writable) E contratto ok.
+  // External: scopre il binario fleet legacy cross-platform (cfg.fleetBin,
+  // $PREFIX/bin/fleet su Termux, ~/.local/bin/fleet) e accetta il primo fidato
+  // (binTrusted) che risponde al contratto (status --json con schema valido).
   let extFleet = null;
   let extReason = null;
-  if (cfg.fleetBin) {
-    if (binTrusted(cfg.fleetBin)) {
-      const f = await createFleet(cfg);          // fa status --json al boot
-      if (f.available) { extFleet = f; extReason = 'fidato + risponde al contratto'; }
-      else extReason = 'binario fidato ma non risponde al contratto (status invalido)';
-    } else {
-      extReason = 'binario non fidato (symlink/world-writable/non exec)';
-    }
+  const resolvedExternal = await resolveExternalFleet(cfg);
+  if (resolvedExternal) {
+    extFleet = resolvedExternal.fleet;
+    extReason = resolvedExternal.reason;
   } else {
-    extReason = 'nessun fleetBin esterno configurato';
+    // Diagnosi: perché nessun candidato external è valido (fidato + contratto).
+    const cands = externalFleetCandidates(cfg);
+    if (!cands.length) extReason = 'nessun fleetBin esterno configurato';
+    else extReason = `nessun candidato external valido: ${cands.map((b) => (binTrusted(b) ? `${b} (non risponde al contratto)` : `${b} (non fidato)`)).join('; ')}`;
   }
 
   // Builtin: abilitato + fleet.json valido.

package/lib/fleet/routes.js

@@ -78,7 +78,9 @@ function fleetRoutes(fleetP, cfg = {}) {
   r.post('/up', guard(async (f, b) => {
     const cell = String(b.cell || '');
     if (b.engine && capList(f).includes('edit')) {
-      await f.engine(cell, String(b.engine), { model: typeof b.model === 'string' ? b.model : '' });
+      const opts = { model: typeof b.model === 'string' ? b.model : '' };
+      if (typeof b.permissionPolicy === 'string') opts.permissionPolicy = b.permissionPolicy;
+      await f.engine(cell, String(b.engine), opts);
     }
     if (Object.prototype.hasOwnProperty.call(b, 'boot') && capList(f).includes('edit') && capList(f).includes('boot')) {
       await f.boot(cell, b.boot === true);
@@ -91,7 +93,11 @@ function fleetRoutes(fleetP, cfg = {}) {
     return f.down(cell, { boot: !!b.boot });
   }, { mutate: true }));
   r.post('/restart', guard((f, b) => { requireCap(f, 'restart'); return f.restart(String(b.cell || '')); }, { mutate: true }));
-  r.post('/engine', guard((f, b) => f.engine(String(b.cell || ''), String(b.engine || ''), { model: typeof b.model === 'string' ? b.model : '' }), { mutate: true }));
+  r.post('/engine', guard((f, b) => {
+    const opts = { model: typeof b.model === 'string' ? b.model : '' };
+    if (typeof b.permissionPolicy === 'string') opts.permissionPolicy = b.permissionPolicy;
+    return f.engine(String(b.cell || ''), String(b.engine || ''), opts);
+  }, { mutate: true }));
   r.post('/boot', guard((f, b) => f.boot(String(b.cell || ''), b.enabled === true), { mutate: true }));
 
   // --- Estensione B4.2: schema + define/edit/remove (engine e cell) ---
@@ -104,6 +110,9 @@ function fleetRoutes(fleetP, cfg = {}) {
   r.post('/define-cell', guard((f, b) => { requireCap(f, 'define'); return f.defineCell(b.def); }, { mutate: true }));
   r.post('/edit-cell', guard((f, b) => { requireCap(f, 'edit'); return f.editCell(b.id, b.patch); }, { mutate: true }));
   r.post('/remove-cell', guard((f, b) => { requireCap(f, 'remove'); return f.removeCell(b.id, { stop: b.stop === true }); }, { mutate: true }));
+  // Riconciliazione sessione tmux esistente (cella Fleet legacy orfana) in cella
+  // gestita fleet.json. Capability 'define' (solo builtin): external legacy -> 501.
+  r.post('/import-cell', guard(async (f, b) => { requireCap(f, 'import'); return f.importCell(b || {}); }, { mutate: true }));
 
   return r;
 }

package/lib/nodes/peering.js

@@ -40,13 +40,44 @@ function encodePairing(data) {
   return Buffer.from(JSON.stringify(data)).toString('base64url');
 }
 
+// Allowlist rigorosa per versione (caps). v1: solo {v,instanceId,port,label,invite}.
+// v2 aggiunge name (slug suggerito), ssh (target/alias), sshPort?: routing non
+// segreto. NESSUN campo segreto è ammesso oltre l'invite one-time: niente
+// identityFile, chiave privata, API key, bearer UI. Unknown field -> null.
+const PAIRING_V1_KEYS = new Set(['v', 'instanceId', 'port', 'label', 'invite']);
+const PAIRING_V2_KEYS = new Set(['v', 'instanceId', 'port', 'label', 'invite', 'name', 'ssh', 'sshPort']);
+
 function decodePairing(value) {
+  let x;
   try {
-    const x = JSON.parse(Buffer.from(String(value || ''), 'base64url').toString('utf8'));
-    if (!x || x.v !== 1 || !store.NODE_ID_RE.test(x.instanceId) || !store.isPort(x.port)
-      || !store.validToken(x.invite) || typeof x.label !== 'string') return null;
-    return x;
+    x = JSON.parse(Buffer.from(String(value || ''), 'base64url').toString('utf8'));
   } catch (_) { return null; }
+  if (!x || typeof x !== 'object' || Array.isArray(x)) return null;
+  const allowed = x.v === 1 ? PAIRING_V1_KEYS : x.v === 2 ? PAIRING_V2_KEYS : null;
+  if (!allowed) return null;
+  for (const k of Object.keys(x)) if (!allowed.has(k)) return null; // strict: unknown -> null
+  // core obbligatorio (entrambe le versioni)
+  if (!store.NODE_ID_RE.test(x.instanceId) || !store.isPort(x.port)
+    || !store.validToken(x.invite) || typeof x.label !== 'string') return null;
+  const out = { v: x.v, instanceId: x.instanceId, port: x.port, label: x.label, invite: x.invite };
+  if (x.v === 2) {
+    if (x.name !== undefined) {
+      if (typeof x.name !== 'string' || !store.NODE_NAME_RE.test(x.name)) return null;
+      out.name = x.name;
+    }
+    if (x.ssh !== undefined) {
+      // target/alias SSH (user@host o Host alias); MAI secret. parseSshTarget
+      // rifiuta whitespace/control/leading '-' (argv-safe, non diventa flag ssh).
+      const ssh = typeof x.ssh === 'string' ? store.parseSshTarget(x.ssh) : null;
+      if (!ssh) return null;
+      out.ssh = ssh.value;
+    }
+    if (x.sshPort !== undefined) {
+      if (!store.isPort(x.sshPort)) return null;
+      out.sshPort = x.sshPort;
+    }
+  }
+  return out;
 }
 
 function parsePairingUrl(value) {
@@ -57,14 +88,35 @@ function parsePairingUrl(value) {
   } catch (_) { return null; }
 }
 
-function createInvite({ invitesPath, instanceId, port, label = 'NexusCrew', now = Date.now(), randomBytes = crypto.randomBytes }) {
+function createInvite({
+  invitesPath, instanceId, port, label = 'NexusCrew', now = Date.now(), randomBytes = crypto.randomBytes,
+  ssh, sshPort, name,
+} = {}) {
   const invite = randomBytes(32).toString('base64url');
   const expiresAt = now + INVITE_TTL_MS;
   const rows = readInvites(invitesPath, now);
   rows.push({ hash: crypto.createHash('sha256').update(invite).digest('hex'), expiresAt, usedAt: null });
   writeInvites(invitesPath, rows.slice(-32));
-  const pair = encodePairing({ v: 1, instanceId, port, label: String(label).slice(0, 64), invite });
-  return { pairingUrl: `http://127.0.0.1:${port}/#pair=${pair}`, expiresAt };
+  const payload = { v: 1, instanceId, port, label: String(label).slice(0, 64), invite };
+  // v2: include Host/alias SSH + slug quando forniti (routing non segreto). Così
+  // il ricevente incolla/scansiona UN solo link e ha tutto per precompilare il
+  // form. Senza ssh/name resta v1 (backward-compat con link 0.8.x esistenti).
+  const sshVal = typeof ssh === 'string' && ssh.trim() ? store.parseSshTarget(ssh.trim()) : null;
+  const requestedName = typeof name === 'string' && name.trim() && store.NODE_NAME_RE.test(name.trim())
+    ? name.trim()
+    : '';
+  // Un link con routing SSH deve sempre portare anche lo slug. Se il chiamante
+  // non lo specifica, lo ricaviamo dalla label del dispositivo: il ricevente non
+  // deve compilare altri campi per arrivare a "testa e collega".
+  const linkName = requestedName || (sshVal ? store.toSlug(payload.label) : '');
+  if (sshVal || linkName) {
+    payload.v = 2;
+    if (linkName) payload.name = linkName;
+    if (sshVal) payload.ssh = sshVal.value;
+    if (sshVal && store.isPort(sshPort)) payload.sshPort = sshPort;
+  }
+  const pair = encodePairing(payload);
+  return { pairingUrl: `http://127.0.0.1:${port}/#pair=${pair}`, expiresAt, version: payload.v };
 }
 
 function consumeInvite({ invitesPath, invite, now = Date.now() }) {