@mmmbuto/nexuscrew 0.9.21 → 0.9.22

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 All notable changes to NexusCrew are tracked here.
 
+## 0.9.22 — 2026-09-11
+
+- **Fleet Ollama Cloud: `deepseek-v4.1-flash`** aggiunto ai modelli dell'engine
+  (contesto dichiarato 1M → 1048576; capacità text+image, reasoning; parallel
+  tool calls non dichiarato finché non misurato su device) e promosso a
+  **modello di default dei tre engine ollama-cloud** (`claude`, `codex-vl`,
+  `codex`), al posto di `glm-5.2` (che resta disponibile in lista).
+- Il tarball npm non include più gli screenshot di `docs/img/` (restano nel
+  repository GitHub, referenziati dal README): il pacchetto 0.9.21 li
+  spediva per errore mostrando nomi di ambiente interno.
+- **Fleet codex-vl app-server identity policy.** Managed `codex-vl.*` cells now
+  pass `CODEX_APP_SERVER_IDENTITY_REQUIRED=1` through the child environment so
+  the app-server daemon started by the TUI enforces the Fleet identity policy;
+  an explicit per-engine override remains authoritative.
+
 ## 0.9.21 — 2026-09-10
 
 - **Identity channel generation gate is fail-closed.** The per-cell supervisor

package/frontend/dist/version.json

@@ -1 +1 @@
-{"version":"0.9.21"}
+{"version":"0.9.22"}

package/lib/fleet/definitions.js

@@ -42,6 +42,7 @@ const MAX_TMUXSESSION_LEN = 64;
 const ENGINE_ID_RE = /^[a-z0-9._-]{1,32}$/;   // engine id: lowercase (design 4a/9f)
 const CELL_ID_RE = /^[A-Za-z0-9._-]{1,32}$/;   // cell id: ammette maiuscole (il punto e' un id umano valido)
 const ENV_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/; // identificatore env POSIX-like
+const CODEX_APP_SERVER_IDENTITY_REQUIRED = 'CODEX_APP_SERVER_IDENTITY_REQUIRED';
 const TMUX_NAME_RE = /^[\w.-]{1,64}$/;         // parsing: ammette il punto (legacy puntato da migrare)
 const TMUX_SAFE_NAME_RE = /^[\w-]{1,64}$/;     // scrittura: nomi tmux-safe (NO punto: tmux lo normalizza in '_')
 
@@ -334,9 +335,22 @@ function parseEngine(e, { extraModels = null, onIssue = null } = {}) {
   if (e.managed !== undefined) {
     const managed = normalizeManagedSpec(e.managed, { extraModels, engineId: e.id, onIssue });
     if (!managed) return null;
-    for (const key of ['command', 'args', 'env', 'promptMode', 'promptFlag', 'model']) {
+    for (const key of ['command', 'args', 'promptMode', 'promptFlag', 'model']) {
       if (e[key] !== undefined) return null;
     }
+    // Managed engines compose their environment from the profile. The sole
+    // user override permitted here is the daemon policy switch consumed by
+    // codex-vl app-server; arbitrary env values would bypass that boundary.
+    let managedEnv;
+    if (e.env !== undefined) {
+      if (managed.client !== 'codex-vl') return null;
+      if (!e.env || typeof e.env !== 'object' || Array.isArray(e.env)) return null;
+      const keys = Object.keys(e.env);
+      if (keys.length !== 1 || keys[0] !== CODEX_APP_SERVER_IDENTITY_REQUIRED) return null;
+      const value = e.env[CODEX_APP_SERVER_IDENTITY_REQUIRED];
+      if (typeof value !== 'string' || value.length > MAX_ENV_VAL_LEN) return null;
+      managedEnv = { [CODEX_APP_SERVER_IDENTITY_REQUIRED]: value };
+    }
     // panelUrl (opzionale): STESSO validatore e STESSA conservazione del ramo
     // custom, qui sotto. Un engine managed puo' legittimamente avere un
     // pannello, e il fallback engine->cella di cellStatus vale per entrambi.
@@ -349,6 +363,7 @@ function parseEngine(e, { extraModels = null, onIssue = null } = {}) {
       managedPanelUrl = e.panelUrl;
     }
     const managedOut = { id: e.id, label, rc, managed };
+    if (managedEnv) managedOut.env = managedEnv;
     if (managedPanelUrl !== undefined) managedOut.panelUrl = managedPanelUrl;
     return managedOut;
   }

package/lib/fleet/managed.js

@@ -24,6 +24,11 @@ const OLLAMA_CLOUD_MODELS = Object.freeze([
   // dichiara Context 1M tokens, Input Text, Image e le badge vision/tools/thinking/cloud.
   // DICHIARATO 2026-09-06 https://ollama.com/library/kimi-k3
   'kimi-k3',
+  // deepseek-v4.1-flash: disponibile su ollama.com/library (2026-09-11). La
+  // scheda dichiara Context 1M tokens, Input Text, Image e le badge
+  // tools/thinking/vision/cloud; 552B MoE (8B attivi).
+  // DICHIARATO 2026-09-11 https://ollama.com/library/deepseek-v4.1-flash
+  'deepseek-v4.1-flash',
 ]);
 // Autorita' per OLLAMA_CONTEXT = IL CAMPO STRUTTURATO «Context» della scheda
 // canale (ollama.com/library, fetch 2026-08-27) — NON la descrizione, che
@@ -55,6 +60,9 @@ const OLLAMA_CONTEXT = Object.freeze({
   // kimi-k3: scheda «Context / 1M tokens», Input Text, Image (2026-09-06).
   // DICHIARATO 2026-09-06 https://ollama.com/library/kimi-k3
   'kimi-k3': 1000000,
+  // deepseek-v4.1-flash: scheda «Context / 1M tokens» (2026-09-11); come gli
+  // altri deepseek vale la convenzione binaria del repo (1M -> 1048576).
+  'deepseek-v4.1-flash': 1048576,
 });
 // Capacita' per modello OSSERVATE dalla scheda canale (ollama.com/library,
 // 2026-08-27). Assenza = default conservativo (comportamento odierno, nessuna
@@ -73,6 +81,10 @@ const OLLAMA_MODEL_CAPABILITIES = Object.freeze({
   // PARALLEL NON dichiarato: default conservativo false finche' non misurato su device.
   // DICHIARATO 2026-09-06 https://ollama.com/library/kimi-k3
   'kimi-k3': Object.freeze({ input: ['text', 'image'], reasoning: true, supportsParallelToolCalls: false }),
+  // deepseek-v4.1-flash: scheda tools/thinking/vision/cloud, Input Text, Image
+  // (2026-09-11). PARALLEL NON dichiarato: default conservativo false finche'
+  // non misurato su device.
+  'deepseek-v4.1-flash': Object.freeze({ input: ['text', 'image'], reasoning: true, supportsParallelToolCalls: false }),
 });
 // Descrittori dell'engine ollama-cloud per la generazione del catalogo client:
 // stessa forma dei descrittori custom/PI (id, label, contextWindow, input,
@@ -346,6 +358,8 @@ const MANAGED_KEYS = new Set(['client', 'provider', 'credentialProfile', 'model'
 // D3: massimo numero di nomi in `envPassthrough`. L'allowlist e' opt-in e per
 // nome, mai un passthrough in blocco: un tetto basso ferma una lista incontrollata.
 const MAX_ENV_PASSTHROUGH = 32;
+const CODEX_APP_SERVER_IDENTITY_REQUIRED = 'CODEX_APP_SERVER_IDENTITY_REQUIRED';
+const CODEX_APP_SERVER_IDENTITY_REQUIRED_DEFAULT = '1';
 // Explicit credential source policy. Default 'auto' preserves the legacy
 // resolution order (runtime -> store -> shell -> key files -> legacy) so a
 // pre-WP1 fleet.json migrates no-op: no existing cell changes resolution.
@@ -400,7 +414,7 @@ const CATALOG = Object.freeze([
   // launch valorizza ANTHROPIC_API_KEY, non ANTHROPIC_AUTH_TOKEN come Z.AI.
   { id: 'claude.opencode-go', client: 'claude', provider: 'opencode-go', label: 'OpenCode Go', auth: 'OPENCODE_API_KEY', endpoint: OPENCODE_GO_ANTHROPIC_ROOT, protocol: 'anthropic_messages', model: 'deepseek-v4-flash', models: OPENCODE_GO_MESSAGES_MODELS, strictModels: true, core: true },
   { id: 'claude.openrouter', client: 'claude', provider: 'openrouter', label: 'OpenRouter', auth: 'OPENROUTER_API_KEY', endpoint: 'https://openrouter.ai/api', protocol: 'anthropic_messages', requiresModel: true, core: true, notice: 'claude-openrouter' },
-  { id: 'claude.ollama-cloud', client: 'claude', provider: 'ollama-cloud', label: 'Ollama Cloud', auth: 'OLLAMA_API_KEY', endpoint: 'https://ollama.com', protocol: 'anthropic_messages', model: 'glm-5.2', models: OLLAMA_CLOUD_MODELS, legacySecrets: true, core: true },
+  { id: 'claude.ollama-cloud', client: 'claude', provider: 'ollama-cloud', label: 'Ollama Cloud', auth: 'OLLAMA_API_KEY', endpoint: 'https://ollama.com', protocol: 'anthropic_messages', model: 'deepseek-v4.1-flash', models: OLLAMA_CLOUD_MODELS, legacySecrets: true, core: true },
   { id: 'claude.bedrock', client: 'claude', provider: 'bedrock', label: 'Amazon Bedrock', auth: 'login', endpoint: 'AWS Bedrock', protocol: 'anthropic_messages', core: true, providerEnv: { CLAUDE_CODE_USE_BEDROCK: '1' } },
   { id: 'claude.vertex', client: 'claude', provider: 'vertex', label: 'Google Vertex AI', auth: 'login', endpoint: 'Google Vertex AI', protocol: 'anthropic_messages', core: true, providerEnv: { CLAUDE_CODE_USE_VERTEX: '1' } },
   { id: 'claude.foundry', client: 'claude', provider: 'foundry', label: 'Microsoft Foundry', auth: 'login', endpoint: 'Microsoft Foundry', protocol: 'anthropic_messages', core: true, providerEnv: { CLAUDE_CODE_USE_FOUNDRY: '1' } },
@@ -414,7 +428,7 @@ const CATALOG = Object.freeze([
   { id: 'codex-vl.alibaba-token-plan', client: 'codex-vl', provider: 'alibaba-token-plan', label: 'Alibaba Token Plan Personal', auth: 'ALIBABA_CODE_API_KEY', endpoint: 'https://token-plan.ap-southeast-1.maas.aliyuncs.com/compatible-mode/v1', protocol: 'openai_responses', model: 'qwen3.8-max', models: ALIBABA_CODEX_MODELS, strictModels: true, core: true, notice: 'alibaba-token-plan' },
   { id: 'codex-vl.opencode-go', client: 'codex-vl', provider: 'opencode-go', label: 'OpenCode Go', auth: 'OPENCODE_API_KEY', endpoint: OPENCODE_GO_API_BASE, protocol: 'openai_responses', model: 'deepseek-v4-flash', models: OPENCODE_GO_RESPONSES_MODELS, strictModels: true, core: true },
   { id: 'codex-vl.openrouter', client: 'codex-vl', provider: 'openrouter', label: 'OpenRouter', auth: 'OPENROUTER_API_KEY', endpoint: 'https://openrouter.ai/api/v1', protocol: 'openai_responses', requiresModel: true, core: true, notice: 'codex-openrouter' },
-  { id: 'codex-vl.ollama-cloud', client: 'codex-vl', provider: 'ollama-cloud', label: 'Ollama Cloud', auth: 'OLLAMA_API_KEY', endpoint: 'https://ollama.com/v1', protocol: 'openai_responses', model: 'glm-5.2', models: OLLAMA_CLOUD_MODELS, legacySecrets: true, core: true },
+  { id: 'codex-vl.ollama-cloud', client: 'codex-vl', provider: 'ollama-cloud', label: 'Ollama Cloud', auth: 'OLLAMA_API_KEY', endpoint: 'https://ollama.com/v1', protocol: 'openai_responses', model: 'deepseek-v4.1-flash', models: OLLAMA_CLOUD_MODELS, legacySecrets: true, core: true },
   { id: 'codex-vl.zai-a', client: 'codex-vl', provider: 'zai-a', label: 'Z.AI A (Responses nativo)', auth: 'ZAI_API_KEY_A', endpoint: 'https://api.z.ai/api/v1', protocol: 'openai_responses', model: 'glm-5.3', models: ZAI_RESPONSES_MODELS, strictModels: true, core: true },
   { id: 'codex-vl.zai-p', client: 'codex-vl', provider: 'zai-p', label: 'Z.AI P (Responses nativo)', auth: 'ZAI_API_KEY_P', endpoint: 'https://api.z.ai/api/v1', protocol: 'openai_responses', model: 'glm-5.3', models: ZAI_RESPONSES_MODELS, strictModels: true, core: true },
   { id: 'codex-vl.openai-api', client: 'codex-vl', provider: 'openai-api', label: 'OpenAI API', auth: 'OPENAI_API_KEY', endpoint: 'https://api.openai.com/v1', protocol: 'openai_responses', core: true },
@@ -425,7 +439,7 @@ const CATALOG = Object.freeze([
   // Codex (upstream OpenAI, Responses).
   { id: 'codex.native', client: 'codex', provider: 'native', label: 'OpenAI / ChatGPT account', auth: 'login', endpoint: 'OpenAI account', protocol: 'openai_responses', default: true, core: true },
   { id: 'codex.openai-api', client: 'codex', provider: 'openai-api', label: 'OpenAI API', auth: 'OPENAI_API_KEY', endpoint: 'https://api.openai.com/v1', protocol: 'openai_responses', core: true },
-  { id: 'codex.ollama-cloud', client: 'codex', provider: 'ollama-cloud', label: 'Ollama Cloud', auth: 'OLLAMA_API_KEY', endpoint: 'https://ollama.com/v1', protocol: 'openai_responses', model: 'glm-5.2', models: OLLAMA_CLOUD_MODELS, legacySecrets: true, core: true },
+  { id: 'codex.ollama-cloud', client: 'codex', provider: 'ollama-cloud', label: 'Ollama Cloud', auth: 'OLLAMA_API_KEY', endpoint: 'https://ollama.com/v1', protocol: 'openai_responses', model: 'deepseek-v4.1-flash', models: OLLAMA_CLOUD_MODELS, legacySecrets: true, core: true },
   { id: 'codex.ollama', client: 'codex', provider: 'ollama', label: 'Ollama local', auth: 'none', endpoint: 'local provider', protocol: 'openai_responses', localProvider: 'ollama', core: true },
   { id: 'codex.lmstudio', client: 'codex', provider: 'lmstudio', label: 'LM Studio', auth: 'none', endpoint: 'local provider', protocol: 'openai_responses', localProvider: 'lmstudio', core: true },
   { id: 'codex.custom', client: 'codex', provider: 'custom', label: 'Custom Responses endpoint', auth: 'dynamic', protocol: 'openai_responses', protocols: ['openai_responses'], custom: true, core: true },
@@ -2024,6 +2038,28 @@ function resolveManagedEngine(engine, cell, cfg = {}) {
     // TUI interattivo nella cwd della cella.
     if (model) args.push('--model', model);
   }
+  // The codex-vl TUI starts the app-server daemon itself, so this
+  // launcher-owned switch must be in the child environment (not argv). A
+  // definition-level value is an explicit user override; cfg.env is retained
+  // as the runtime compatibility override for callers that do not carry a
+  // parsed engine definition. Other managed clients never receive this key.
+  if (spec.client === 'codex-vl') {
+    const definitionEnv = engine && engine.env;
+    const runtimeEnv = cfg && cfg.env;
+    const hasDefinitionOverride = definitionEnv && Object.prototype.hasOwnProperty.call(
+      definitionEnv, CODEX_APP_SERVER_IDENTITY_REQUIRED,
+    );
+    const hasRuntimeOverride = runtimeEnv && Object.prototype.hasOwnProperty.call(
+      runtimeEnv, CODEX_APP_SERVER_IDENTITY_REQUIRED,
+    );
+    if (hasDefinitionOverride && typeof definitionEnv[CODEX_APP_SERVER_IDENTITY_REQUIRED] === 'string') {
+      env[CODEX_APP_SERVER_IDENTITY_REQUIRED] = definitionEnv[CODEX_APP_SERVER_IDENTITY_REQUIRED];
+    } else if (hasRuntimeOverride && typeof runtimeEnv[CODEX_APP_SERVER_IDENTITY_REQUIRED] === 'string') {
+      env[CODEX_APP_SERVER_IDENTITY_REQUIRED] = runtimeEnv[CODEX_APP_SERVER_IDENTITY_REQUIRED];
+    } else {
+      env[CODEX_APP_SERVER_IDENTITY_REQUIRED] = CODEX_APP_SERVER_IDENTITY_REQUIRED_DEFAULT;
+    }
+  }
   // Prompt su argv (0.8.47): SOLO i client che non hanno un percorso classified
   // delivery. kimi.native e claude.kimi-code usano promptMode 'send-keys' con
   // deliverBootstrapPrompt (readiness classificata + at-most-once): il prompt

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmmbuto/nexuscrew",
-  "version": "0.9.21",
+  "version": "0.9.22",
   "description": "Faithful browser tmux client — attach to live sessions over a real PTY, localhost-only, mobile-easy",
   "main": "lib/server.js",
   "bin": {
@@ -22,8 +22,6 @@
     "docs/live-prompt-templates/LIVE_PROMPT.en.md",
     "docs/live-prompt-templates/LIVE_PROMPT.es.md",
     "docs/live-prompt-templates/LIVE_PROMPT.it.md",
-    "docs/img/fleet-deck-desktop.png",
-    "docs/img/session-mobile.png",
     "docs/MCP.md",
     "docs/NODES.md",
     "docs/NOTIFICATIONS.md",