trantor 0.17.71 → 0.17.73

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.17.71",
+  "version": "0.17.73",
   "description": "Trantor — the hub-world for AI agent crews: live message bus, presence, project Kanban/flow board + crew orchestration for independent AI coding agents (Claude, Codex, Gemini, Kimi, DeepSeek)",
   "mcpServers": {
     "relay": {

package/bin/connect.mjs

@@ -87,8 +87,95 @@ if (has("opencode")) {
   }), p);
 }
 
+// ---- DeepSeek Harness (dsh) ----
+// dsh has no single MCP config file — composition is a PROFILE (~/.dsh/profiles/<name>): a package.json
+// naming the bundles it stacks and a cordis.patch.yml inserting plugin rows. We build a "trantor"
+// profile on the stock headless bundle and mount two rows:
+//   1. their Claude Code hooks bridge pointed at OUR hooks.json — presence, focus cards, heartbeats,
+//      file claims run inside dsh exactly as they do inside CC (verified live 2026-08-19);
+//   2. their MCP client spawning our relay server — relay_* tools with the seat identity forwarded
+//      from the ambient RELAY_* env (crew-runner sets those per seat).
+// The bridge's own protocol lib is declared as a dependency explicitly: the rc package forgets it
+// (ERR_MODULE_NOT_FOUND at boot without it — reported upstream).
+if (has("dsh")) {
+  const ROOT = dirname(MCP);
+  const prof = join(homedir(), ".dsh", "profiles", "trantor");
+  const pkgPath = join(prof, "package.json");
+  const patchPath = join(prof, "cordis.patch.yml");
+  const seatHooksPath = join(prof, "hooks.seat.json");
+  const pkg = {
+    name: "dsh-profile-trantor", private: true,
+    dependencies: {
+      "@deepseek-ai/dsh-hooks-claude-code": "*",
+      "@deepseek-ai/dsh-hook-protocol": "*",
+    },
+    dsh: { profile: { bundles: ["@deepseek-ai/dsh-base", "@deepseek-ai/dsh-headless"] } },
+  };
+  const patch = `# trantor — generated by \`trantor connect\` (edits survive: regenerate by deleting this file)
+- insert:
+    - id: trantor-cc-hooks
+      name: '@deepseek-ai/dsh-hooks-claude-code'
+      config:
+        configPath: ${seatHooksPath}
+        pluginRoot: ${ROOT}
+    - id: trantor-relay
+      name: '@deepseek-ai/dsh-mcp-client'
+      config:
+        serverName: relay
+        transport: stdio
+        command: node
+        args: ['${MCP}']
+        env:
+          RELAY_URL: !!js process.env.RELAY_URL ?? '${URL_}'
+          RELAY_AGENT: !!js process.env.RELAY_AGENT ?? 'dsh'
+          RELAY_PROJECT: !!js process.env.RELAY_PROJECT ?? ''
+          RELAY_SESSION: !!js process.env.RELAY_SESSION ?? ''
+`;
+  const fresh = !existsSync(patchPath);
+  if (!fresh) report("dsh", "already wired", prof);
+  else {
+    if (!DRY) {
+      mkdirSync(prof, { recursive: true });
+      // The seat runs the plugin's hooks MINUS SessionStart. Two reasons: the crew runner already
+      // owns registration/announcement, and dsh (rc.7/8) crashes at headless teardown when a slow
+      // detached SessionStart hook resolves late — its agent.inject() races disposal ("Cannot read
+      // properties of undefined (reading 'prepare')", exit code flips). Verified: with SessionStart
+      // present the crash reproduces; without it, 0 failures across repeated runs.
+      try {
+        const full = JSON.parse(readFileSync(join(ROOT, "hooks", "hooks.json"), "utf8"));
+        const subset = Object.fromEntries(Object.entries(full.hooks || {}).filter(([k]) => k !== "SessionStart"));
+        writeFileSync(seatHooksPath, JSON.stringify({
+          description: "trantor dsh SEAT hooks — the plugin hooks.json minus SessionStart (regenerated by trantor connect; see bin/connect.mjs for why)",
+          hooks: subset,
+        }, null, 2) + "\n");
+      } catch {}
+      writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
+      writeFileSync(patchPath, patch);
+      // the profile ROOT config. dsh self-heals a missing one, but the heal races the first boot
+      // (observed: "Cannot read properties of undefined (reading 'prepare')" on the very first
+      // seat turn, clean on every run after) — so write the complete profile up front.
+      const rootPath = join(prof, "cordis.yml");
+      if (!existsSync(rootPath)) writeFileSync(rootPath, "# dsh profile root — an empty entry list; the tree is composed from bundles + cordis.patch.yml.\n[]\n");
+      // pnpm settings mirroring dsh's own profile template. autoInstallPeers:false is LOAD-BEARING:
+      // an installer that pulls the bridge's peers drops a SECOND copy of dsh's core packages into
+      // the profile, the loader mounts services from both module instances, and the first tool call
+      // dies on ctx.tools[TOOL_RUNTIME_SCHEDULER] being undefined (observed: every turn that used
+      // any tool crashed "reading 'prepare'"; tool-free turns worked).
+      writeFileSync(join(prof, "pnpm-workspace.yaml"), "packages:\n  - .\n\nnodeLinker: hoisted\nautoInstallPeers: false\n");
+      // the two bridge packages must be importable from the profile's node_modules — via pnpm
+      // (peers OFF, hoisted) like dsh's own template; npm needs --legacy-peer-deps for the same
+      // no-duplicate-core guarantee.
+      try {
+        execSync(has("pnpm") ? "pnpm install --silent" : "npm install --legacy-peer-deps --no-fund --no-audit --loglevel=error",
+          { cwd: prof, stdio: "ignore", timeout: 180000 });
+      } catch { report("dsh", "profile written, but the install FAILED — run inside it: pnpm install (or npm install --legacy-peer-deps)"); }
+    }
+    if (!out.some(r => r.cli === "dsh")) report("dsh", "wired (profile created)", prof);
+  }
+}
+
 const found = out.length;
 console.log(`trantor connect${DRY ? " (dry run)" : ""} — hub: ${URL_}`);
 for (const r of out) console.log(`  ${r.cli.padEnd(9)} ${r.status}${r.detail ? `  (${r.detail})` : ""}`);
-if (!found) console.log("  no supported CLIs found on PATH (claude, codex, gemini, kimi, opencode)");
+if (!found) console.log("  no supported CLIs found on PATH (claude, codex, gemini, kimi, opencode, dsh)");
 console.log(DRY ? "\nRun without --dry-run to apply." : "\nDone. New sessions of each CLI auto-join the bus.");

package/bin/crew-runner.mjs

@@ -94,6 +94,7 @@ const inCmux = () => !!process.env.CMUX_SURFACE_ID;
 // actual LLM logo in the pill is not possible — brand COLOR + the agent's name in the label is the
 // closest cmux allows.
 const BRAND_HEX = { claude: "#D97757", codex: "#e8e8ee", openai: "#e8e8ee", deepseek: "#5786FE",
+  dsh: "#4D6BFE",
   kimi: "#8b8bf5", moonshot: "#8b8bf5", glm: "#5ea0f5", zai: "#5ea0f5", gemini: "#8E75B2", openrouter: "#94A3B8" };
 function cmuxStatus(value, color, icon = "robot", opts = {}) {
   if (!inCmux()) return;
@@ -141,12 +142,19 @@ const CLI = {
               next:  `opencode run -c{M} "$(cat {P})"`, mflag: " -m ", env: join(homedir(), ".token-scrooge", ".env") },
   claude:   { first: `claude{M} -p "$(cat {P})" --dangerously-skip-permissions`,
               next:  `claude -c{M} -p "$(cat {P})" --dangerously-skip-permissions`, mflag: " --model " },
+  // DeepSeek Harness. Every turn is a FRESH session — headless has no resume yet — so the seat
+  // relies on the wake prompt + the board (via the relay tools its profile mounts) rather than
+  // conversation memory. `trantor connect` builds the ~/.dsh/profiles/trantor composition: their
+  // CC-hooks bridge running OUR hooks + their MCP client running our relay server. No model flag:
+  // headless takes only the task; the model is profile config.
+  dsh:      { first: `dsh --profile trantor "$(cat {P})" < /dev/null`,
+              next:  `dsh --profile trantor "$(cat {P})" < /dev/null`, mflag: "", env: join(homedir(), ".token-scrooge", ".env") },
 };
 // BYOM: any agent label that isn't a known native CLI is treated as an opencode-driven provider
 // seat (opencode is the universal adapter). This is what lets a BROUGHT provider — `trantor up
 // <label>:<provider>` for any opencode vendor the user configured — run with no per-provider code
 // here; its model id arrives pre-qualified (`<provider>/<model>`) as CREW_MODEL.
-const NATIVE = new Set(["codex", "gemini", "kimi", "claude"]);
+const NATIVE = new Set(["codex", "gemini", "kimi", "claude", "dsh"]);
 const cli = CLI[AGENT] || (NATIVE.has(AGENT) ? null : CLI.opencode);
 if (!cli) { console.error(`unknown agent '${AGENT}' (native: ${[...NATIVE].join(", ")}; any other name = an opencode provider seat)`); process.exit(1); }
 if (!CLI[AGENT]) log(`'${AGENT}' is not a built-in seat — running it as an opencode provider (BYOM)`);
@@ -191,7 +199,12 @@ const PENDING_MAX = 50;
 // TRANTOR_RETRY_MS (comma-separated ms) shortens the ladder so the redelivery drill can exercise
 // a real backoff in seconds instead of waiting out the production one.
 const RETRY_MS = (() => {
-  const custom = String(process.env.TRANTOR_RETRY_MS || "").split(",").map(Number).filter(n => Number.isFinite(n) && n >= 0);
+  // Guard the UNSET case explicitly: "".split(",") is [""], Number("") is 0, and a >=0 filter
+  // accepted it — so every production runner got a ZERO backoff and a failing seat became a
+  // retry storm (observed live: 43 crashed turns in ~3 minutes on the first dsh seat). The
+  // hermetic drill never caught it because it always SET the override.
+  const raw = process.env.TRANTOR_RETRY_MS;
+  const custom = raw ? raw.split(",").map(Number).filter(n => Number.isFinite(n) && n > 0) : [];
   return custom.length ? custom : [30e3, 60e3, 120e3, 300e3, 900e3];
 })();
 function savePending(wake, bcast) {

package/bin/doctor.mjs

@@ -116,6 +116,13 @@ const CLIS = [
   { name: "kimi",   bin: "kimi",     wired: () => !!read(join(H, ".kimi", "mcp.json"))?.mcpServers?.relay, auth: () => existsSync(join(H, ".kimi", "credentials")), login: "kimi → /login   (Kimi account or Moonshot API key)" },
   { name: "deepseek (via opencode)", bin: "opencode", wired: () => !!read(join(H, ".config", "opencode", "opencode.json"))?.mcp?.relay, auth: () => !!process.env.DEEPSEEK_API_KEY || (existsSync(join(H, ".agent-bus", ".env")) && readFileSync(join(H, ".agent-bus", ".env"), "utf8").includes("DEEPSEEK_API_KEY")) || !!read(join(H, ".local", "share", "opencode", "auth.json")), login: `get a key at platform.deepseek.com, then: echo 'DEEPSEEK_API_KEY=sk-…' >> ~/.agent-bus/.env` },
   { name: "glm (via opencode · coding plan)", bin: "opencode", wired: () => !!read(join(H, ".config", "opencode", "opencode.json"))?.mcp?.relay, auth: () => !!read(join(H, ".config", "opencode", "opencode.json"))?.provider?.["zai-coding-plan"]?.options?.apiKey, login: `put your Z.ai coding-plan key at ~/.config/opencode/opencode.json → provider["zai-coding-plan"].options.apiKey, then seat: trantor up glm:zai-coding-plan/glm-5.1` },
+  // DeepSeek Harness — the open-source harness (everything-is-a-plugin). Wired = the trantor
+  // profile exists (built by `trantor connect`: their CC-hooks bridge running OUR hooks + their MCP
+  // client running our relay). API-billed via DEEPSEEK_API_KEY, same key the opencode deepseek seat uses.
+  { name: "dsh (DeepSeek Harness)", bin: "dsh",
+    wired: () => existsSync(join(H, ".dsh", "profiles", "trantor", "cordis.patch.yml")),
+    auth: () => !!process.env.DEEPSEEK_API_KEY || [join(H, ".token-scrooge", ".env"), join(H, ".agent-bus", ".env")].some(f => { try { return readFileSync(f, "utf8").includes("DEEPSEEK_API_KEY"); } catch { return false; } }),
+    login: "npm i -g @deepseek-ai/dsh && trantor connect   (uses DEEPSEEK_API_KEY). Seat: trantor up dsh" },
   // OpenRouter — the BYOM on-ramp: ONE key fronts hundreds of models. Rides opencode; the same
   // OPENROUTER_API_KEY Scrooge already uses authenticates the crew seat (the runner sources the
   // .env files). Available the moment the key exists in env/opencode + declared `openrouter=api`.

package/mcp.mjs

@@ -99,12 +99,12 @@ async function seedCursor() {
 // mints a random id at boot — its lifetime ≈ the session's. The endorsed subkey it keys signs all
 // traffic; the durable identity keeps enrollment and attribution.
 const INSTANCE_ID = `mcp-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
-async function api(method, path, payload) {
+async function api(method, path, payload, { timeoutMs } = {}) {
   // PROJECT explicitly, never the client's cwd fallback: this server's project is fixed at boot,
   // and letting the hub be re-derived per call is how a session ends up writing to two hubs.
   const r = method.toUpperCase() === "GET"
-    ? await signedGet(path, { session: SESSION, instance: INSTANCE_ID, project: PROJECT })
-    : await signedPost(path, payload, { session: SESSION, instance: INSTANCE_ID, project: PROJECT });
+    ? await signedGet(path, { session: SESSION, instance: INSTANCE_ID, project: PROJECT, timeoutMs })
+    : await signedPost(path, payload, { session: SESSION, instance: INSTANCE_ID, project: PROJECT, timeoutMs });
   if (!r.ok) throw new Error(`hub ${r.status} on ${path}`);
   return r.json;
 }
@@ -312,7 +312,11 @@ server.tool("relay_wait", "Block up to `timeout` seconds waiting for the next me
     // resolves inline on every current client instead of being shipped to the background.
     const w = Math.min(timeout ?? 25, 110);
     await seedCursor();
-    const { messages, cursor: c } = await api("GET", `/poll?session=${encodeURIComponent(SESSION)}&since=${cursor}&wait=${w}`);
+    // The client-side deadline must OUTLIVE the hub's hold. Since reads moved onto the shared
+    // signed client, this call inherited its 1.5s default — so every long-poll that had no message
+    // already waiting was aborted at 1.5s and surfaced as "hub 0 on /poll". Parking was dead: the
+    // tool erred on every quiet wait and only ever "worked" when a message beat the abort.
+    const { messages, cursor: c } = await api("GET", `/poll?session=${encodeURIComponent(SESSION)}&since=${cursor}&wait=${w}`, undefined, { timeoutMs: (w + 15) * 1000 });
     cursor = c;
     return { content: [{ type: "text", text: messages.length ? messages.map(fmt).join("\n") : "(timed out, no message)" }] };
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.17.71",
+  "version": "0.17.73",
   "type": "module",
   "bin": {
     "trantor": "bin/cli.mjs"
@@ -11,7 +11,7 @@
     "pg": "^8.22.0"
   },
   "scripts": {
-    "test": "node test.mjs && node test-scenarios.mjs && node test-failure.mjs && node test-redelivery.mjs && node test-handoff.mjs && node test-agents.mjs && node test-update.mjs && node test-handoff-guard.mjs && node test-balances.mjs && node test-subagent-cost.mjs && node test-inbox.mjs && node test-inflight.mjs && node test-notify.mjs && node test-focus.mjs && node test-reaper.mjs && node test-events.mjs && node test-proposals.mjs && node test-scrub.mjs && node test-store-delta.mjs && node test-claims.mjs && node test-adopt.mjs && node test-summarize.mjs && node test-identity-core.mjs && node test-identity.mjs && node test-identity-instances.mjs && node test-duty.mjs && node test-discovery.mjs && node test-doctor.mjs && node test-splitbrain.mjs && node test-overseer.mjs && node test-overseer-lib.mjs && node test-overseer-warn.mjs && node test-provider-keys.mjs && node test-inbox-delivery.mjs && node test-hub-routing.mjs && node test-hook-routing.mjs && python3 engine/test-routing.py && node test-reconcile.mjs && node test-resources.mjs && node test-patrol.mjs && node test-bridge.mjs && bash test-crew.sh"
+    "test": "node test.mjs && node test-scenarios.mjs && node test-failure.mjs && node test-redelivery.mjs && node test-handoff.mjs && node test-agents.mjs && node test-update.mjs && node test-handoff-guard.mjs && node test-balances.mjs && node test-subagent-cost.mjs && node test-inbox.mjs && node test-inflight.mjs && node test-notify.mjs && node test-focus.mjs && node test-reaper.mjs && node test-events.mjs && node test-proposals.mjs && node test-scrub.mjs && node test-store-delta.mjs && node test-claims.mjs && node test-adopt.mjs && node test-summarize.mjs && node test-identity-core.mjs && node test-identity.mjs && node test-identity-instances.mjs && node test-duty.mjs && node test-discovery.mjs && node test-doctor.mjs && node test-splitbrain.mjs && node test-overseer.mjs && node test-overseer-lib.mjs && node test-overseer-warn.mjs && node test-provider-keys.mjs && node test-inbox-delivery.mjs && node test-hub-routing.mjs && node test-hook-routing.mjs && node test-relay-wait.mjs && node test-dsh-seat.mjs && python3 engine/test-routing.py && node test-reconcile.mjs && node test-resources.mjs && node test-patrol.mjs && node test-bridge.mjs && bash test-crew.sh"
   },
   "description": "The hub-world for AI agent crews \u2014 orchestrate Claude Code, Codex, GLM, Kimi, DeepSeek & any OpenRouter model as live crews with a plan-aware Advisor, a Kanban/flow command center, a testing gate, and an economics brain (Scrooge).",
   "files": [