trantor 0.17.77 → 0.17.79

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.17.77",
+  "version": "0.17.79",
   "description": "Trantor — the hub-world for AI agent crews: live message bus, presence, project Kanban/flow board + crew orchestration for independent AI coding agents (Claude, Codex, Gemini, Kimi, DeepSeek)",
   "mcpServers": {
     "relay": {

package/README.md

@@ -51,7 +51,7 @@ heartbeats, inbox delivery, handoff/baton pass, sub-agent cards):
        "relay": {
          "command": "node",
          "args": ["<absolute-path-to-trantor>/mcp.mjs"],
-         "env": { "RELAY_URL": "http://127.0.0.1:4477", "RELAY_AGENT": "kimi-orch" },
+         "env": { "RELAY_AGENT": "kimi-orch" },
          "startupTimeoutMs": 15000,
          "toolTimeoutMs": 150000
        }
@@ -62,6 +62,13 @@ heartbeats, inbox delivery, handoff/baton pass, sub-agent cards):
 2. In the Kimi TUI: `/plugins install <absolute-path-to-trantor>` (or the GitHub URL), then
    `/reload`, then start a new session.
 
+Since 0.17.76 the Kimi hooks are a **dialect bridge**, not a fork: `kimi/bridge.mjs` runs the
+canonical hooks as children and translates Kimi's input/output conventions at the edges
+(SessionStart context is stashed and delivered on the first prompt). Kimi hooks therefore sign
+their hub calls, follow per-project hub pins, and inherit every future hook fix automatically.
+Do **not** set `RELAY_URL` in MCP configs — a hardcoded URL overrides the per-project pin and
+splits the project across hubs; the pin decides the hub.
+
 Notes: Kimi plugin installs are **snapshots** (`~/.kimi-code/plugins/managed/trantor/`) — after
 updating trantor, re-run `/plugins install` to refresh the skills/hooks. The MCP entry above always
 runs your live checkout, so the relay server itself never goes stale. Invoke the skills with
@@ -260,6 +267,25 @@ Every session registers automatically — **crew or not** — and a solo session
 shows up on the board as cards, so the dashboard reflects *all* the work on a project, not just
 crew runs.
 
+## The board keeps itself honest
+
+Cards carry their **story on the card**: every `note` lands in a permanent per-card log (last 40
+entries) that survives restarts, retention, and id remaps — the drawer shows it as the card's
+narrative, so clicking an old card tells you what actually happened, not a one-line status trail.
+The `todo` lane has a lifecycle: cards untouched for 14 days (`RELAY_TODO_STALE_MS`) move to
+STALE with an "aged out" note instead of rotting silently, and todo tiles wear an age badge from
+day 7. A commit closes the session's focus card and the two link both ways. `trantor doctor`
+cross-checks every hub you know about against the per-project pins and reports any **split-brain**
+(a project live on two hubs) with the exact fix — and `trantor adopt <project>` migrates a project
+between hubs in one verified step, telling stale sessions to restart.
+
+Crew output is gated mechanically, too: `bin/slop-gate.mjs` runs the vendored
+[anti-slop](https://github.com/dmmulroy/anti-slop) Oxlint rules over an agent's **changed files
+only** — unexplained type assertions, `unknown` laundering, runtime `typeof`, Reflect tricks and
+friends fail the card before it can reach done, while legacy debt burns down on its own card
+instead of blocking everyone. A surface that has paid its debt off stays paid: `desktop/src` is at
+zero and `npm test` now lints it in full (`node bin/slop-gate.mjs --surface desktop/src`).
+
 ## The brain — plan-aware economics
 
 Trantor's economics engine ([Scrooge](https://github.com/sashabogi/token-scrooge) — installed
@@ -326,8 +352,8 @@ rate, not work rate.
 | `relay_send(to, text)` / `relay_inbox` / `relay_wait(t)` | Live messaging: direct, read-new, long-poll wake |
 | `relay_peers` / `relay_status(text)` / `relay_whoami` | Presence: who's alive (honest, heartbeat-backed), doing what |
 | `relay_project_brief(text)` | The project's what/why on the dashboard |
-| `relay_task_add(title, …, difficulty, model, deps, project?)` | Cards with difficulty/model badges + DAG edges; `project` targets another board when you orchestrate from elsewhere |
-| `relay_task_move(id, status)` | `todo → doing → testing → done` (the gate), `failed`, `blocked` |
+| `relay_task_add(title, …, difficulty, model, deps, note?, project?)` | Cards with difficulty/model badges + DAG edges; `note` seeds the card's **permanent log**; `project` targets another board when you orchestrate from elsewhere |
+| `relay_task_move(id, status, note?)` | `todo → doing → testing → done` (the gate), `failed`, `blocked` — moves to testing/done should carry a `note`: what you did + the evidence, stored on the card forever |
 | `relay_board` | The project's full board, as text |
 | `relay_scrooge(prompt, task?, difficulty?)` | Fractal cheap-model delegation, with the ledger receipt |
 | `relay_lesson(text, scope?)` | Record a failure lesson — auto-injected into all future crews |
@@ -338,6 +364,7 @@ rate, not work rate.
 ```
 trantor setup | doctor | connect | profile | provider | models
         | up <agents…> | swap <old> <new> | down | ui | advise | hub | watch
+        | adopt <project> | reconcile | duty | orchestrate | patrol | app | backfill | init-hooks
 ```
 
 - **`trantor provider`** — `list` every crew seat (built-in + brought) with availability + tier ·
@@ -355,9 +382,12 @@ trantor setup | doctor | connect | profile | provider | models
 
 ## Works with any MCP agent
 
-Claude Code, Codex CLI, Kimi Code CLI, and **OpenCode** (the universal adapter — DeepSeek, GLM,
-OpenRouter, and any provider you bring) are wired by `trantor connect` automatically (idempotent,
-backed-up, never overwrites your customizations). Anything else that speaks MCP: point it at
+Claude Code, Codex CLI, Kimi Code CLI, **DeepSeek Harness (`dsh`)**, and **OpenCode** (the
+universal adapter — DeepSeek, GLM, OpenRouter, and any provider you bring) are wired by
+`trantor connect` automatically (idempotent, backed-up, never overwrites your customizations).
+For `dsh`, connect builds a full profile (`~/.dsh/profiles/trantor`): DeepSeek's own Claude Code
+hooks bridge running the trantor hooks, plus their MCP client running the relay server — then
+`trantor up dsh` runs it as a crew seat (fresh session per turn; uses `DEEPSEEK_API_KEY`). Anything else that speaks MCP: point it at
 `mcp.mjs` with `RELAY_AGENT=<brand>` — loading the server auto-registers the session, so presence
 works before the model says a word.
 

package/bin/models.mjs

@@ -7,7 +7,7 @@
 import { execSync } from "node:child_process";
 import { dirname, join } from "node:path";
 import { homedir } from "node:os";
-import { existsSync } from "node:fs";
+import { existsSync, statSync } from "node:fs";
 import { pathToFileURL, fileURLToPath } from "node:url";
 import { buildRoster, loadWorld } from "./advise.mjs";
 
@@ -57,7 +57,10 @@ function detail(name) {
   if (existsSync(SCROOGE) || has("scrooge")) {
     console.log(`\n${C.gold}router picks (code task):${C.off}`);
     for (const d of ["easy", "medium", "hard"]) console.log(`  ${d.padEnd(7)} → ${routePick(models, d)}`);
-    console.log(`${C.dim}(run scrooge-capabilities to (re)score the catalog for accurate difficulty routing)${C.off}`);
+    const caps = join(H, ".token-scrooge", "capabilities.json");
+    // only nag when the scores are missing or older than the weekly refresh allows for
+    const ageDays = existsSync(caps) ? (Date.now() - statSync(caps).mtimeMs) / 86400e3 : Infinity;
+    if (ageDays > 9) console.log(`${C.dim}(scores ${ageDays === Infinity ? "missing" : `${Math.floor(ageDays)}d old`} — run scrooge-capabilities to (re)score the catalog for accurate difficulty routing)${C.off}`);
   }
 }
 

package/bin/slop-gate.mjs

@@ -3,6 +3,7 @@
 //
 //   node bin/slop-gate.mjs           # lint changed + untracked lintable files (the crew gate)
 //   node bin/slop-gate.mjs --all     # lint the whole configured surface (advisory audit)
+//   node bin/slop-gate.mjs --surface desktop/src   # lint ONE paid-off surface in full (hard gate in npm test)
 //
 // The rules are the vendored dmmulroy/anti-slop set (tools/oxlint/anti-slop — ours to tune):
 // they mechanically reject low-evidence AI patterns — unexplained type assertions, unknown
@@ -13,6 +14,10 @@
 import { execSync, spawnSync } from "node:child_process";
 
 const ALL = process.argv.includes("--all");
+// A surface that has burned its debt down to zero (desktop/src, #4798) is gated in FULL, not by
+// diff: the whole point of paying it off is that it stays paid. npm test runs this.
+const SURFACE_AT = process.argv.indexOf("--surface");
+const SURFACE = SURFACE_AT > -1 ? process.argv[SURFACE_AT + 1] : null;
 const LINTABLE = /\.(ts|tsx|mts|cts|js|jsx|mjs|cjs)$/;
 
 function sh(cmd) {
@@ -21,7 +26,9 @@ function sh(cmd) {
 }
 
 let args;
-if (ALL) {
+if (SURFACE) {
+  args = [SURFACE];
+} else if (ALL) {
   args = ["."];
 } else {
   const changed = sh("git diff --name-only HEAD");
@@ -40,9 +47,10 @@ const hits = out.split("\n").filter(l => /error\s+anti-slop\(/.test(l));
 
 if (hits.length) {
   console.log(hits.join("\n"));
-  console.log(`\nslop-gate: ${hits.length} anti-slop error(s) in your changes — fix them (or state the SAFETY invariant) before moving the card to testing.`);
+  const where = SURFACE ? `in ${SURFACE} (a zero-debt surface — keep it at zero)` : "in your changes";
+  console.log(`\nslop-gate: ${hits.length} anti-slop error(s) ${where} — fix them (or state the SAFETY invariant) before moving the card to testing.`);
   process.exit(1);
 }
 const warnings = out.split("\n").filter(l => /\bwarning\b/.test(l)).length;
-console.log(`slop-gate: clean${warnings ? ` (${warnings} advisory warning(s) — not gating)` : ""}.`);
+console.log(`slop-gate${SURFACE ? ` (${SURFACE})` : ""}: clean${warnings ? ` (${warnings} advisory warning(s) — not gating)` : ""}.`);
 process.exit(0);

package/engine/bin/scrooge-capabilities

@@ -22,7 +22,7 @@ Usage:  scrooge-capabilities            # refresh from AA (+OpenRouter), show a
         scrooge-capabilities --dry-run  # fetch + match, print, but don't write
 Exit: 0 updated · 1 nothing fetched (no key / network) · 2 error.
 """
-import sys, os, json, argparse, math, urllib.request, urllib.error
+import sys, os, json, argparse, math, time, urllib.request, urllib.error
 
 HOME = os.path.expanduser("~")
 SCROOGE_DIR = os.environ.get("SCROOGE_HOME", os.path.join(HOME, ".token-scrooge"))
@@ -56,10 +56,21 @@ def load_env_file(path):
     except Exception:
         pass
 
-def http_get_json(url, headers, timeout=30):
+def http_get_json(url, headers, timeout=30, retries=(5, 20, 60)):
+    # the weekly launchd run can land while the Mac has no network yet (2026-08-17: DNS error,
+    # scores went a week stale) -- back off and retry on connection failures, not on HTTP errors
     req = urllib.request.Request(url, headers=headers, method="GET")
-    with urllib.request.urlopen(req, timeout=timeout) as r:
-        return json.loads(r.read().decode())
+    for i, wait in enumerate(list(retries) + [None]):
+        try:
+            with urllib.request.urlopen(req, timeout=timeout) as r:
+                return json.loads(r.read().decode())
+        except urllib.error.HTTPError:
+            raise
+        except (urllib.error.URLError, OSError) as e:
+            if wait is None:
+                raise
+            sys.stderr.write(WARN("  network: %s -- retry %d in %ds\n" % (str(e)[:60], i + 1, wait)))
+            time.sleep(wait)
 
 def norm(s):
     return s.lower().replace(".", "-").replace("_", "-")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.17.77",
+  "version": "0.17.79",
   "type": "module",
   "bin": {
     "trantor": "bin/cli.mjs"
@@ -11,7 +11,7 @@
     "zod": "^4.4.3"
   },
   "scripts": {
-    "test": "node test.mjs && node test-scenarios.mjs && node test-failure.mjs && node test-redelivery.mjs && node test-handoff.mjs && node test-agents.mjs && node test-update.mjs && node test-handoff-guard.mjs && node test-balances.mjs && node test-subagent-cost.mjs && node test-inbox.mjs && node test-inflight.mjs && node test-notify.mjs && node test-focus.mjs && node test-cardlog.mjs && node test-relay-note.mjs && node test-reaper.mjs && node test-events.mjs && node test-proposals.mjs && node test-scrub.mjs && node test-store-delta.mjs && node test-claims.mjs && node test-adopt.mjs && node test-summarize.mjs && node test-identity-core.mjs && node test-identity.mjs && node test-identity-instances.mjs && node test-duty.mjs && node test-discovery.mjs && node test-doctor.mjs && node test-splitbrain.mjs && node test-overseer.mjs && node test-overseer-lib.mjs && node test-overseer-warn.mjs && node test-provider-keys.mjs && node test-inbox-delivery.mjs && node test-hub-routing.mjs && node test-hook-routing.mjs && node test-relay-wait.mjs && node test-dsh-seat.mjs && node test-kimi-bridge.mjs && node test-kimi-events.mjs && python3 engine/test-routing.py && node test-reconcile.mjs && node test-resources.mjs && node test-patrol.mjs && node test-bridge.mjs && bash test-crew.sh"
+    "test": "node bin/slop-gate.mjs --surface desktop/src && node test.mjs && node test-scenarios.mjs && node test-failure.mjs && node test-redelivery.mjs && node test-handoff.mjs && node test-agents.mjs && node test-update.mjs && node test-handoff-guard.mjs && node test-balances.mjs && node test-subagent-cost.mjs && node test-inbox.mjs && node test-inflight.mjs && node test-notify.mjs && node test-focus.mjs && node test-cardlog.mjs && node test-relay-note.mjs && node test-reaper.mjs && node test-events.mjs && node test-proposals.mjs && node test-scrub.mjs && node test-store-delta.mjs && node test-claims.mjs && node test-adopt.mjs && node test-summarize.mjs && node test-identity-core.mjs && node test-identity.mjs && node test-identity-instances.mjs && node test-duty.mjs && node test-discovery.mjs && node test-doctor.mjs && node test-splitbrain.mjs && node test-overseer.mjs && node test-overseer-lib.mjs && node test-overseer-warn.mjs && node test-provider-keys.mjs && node test-inbox-delivery.mjs && node test-hub-routing.mjs && node test-hook-routing.mjs && node test-relay-wait.mjs && node test-dsh-seat.mjs && node test-kimi-bridge.mjs && node test-kimi-events.mjs && python3 engine/test-routing.py && node test-reconcile.mjs && node test-resources.mjs && node test-patrol.mjs && node test-bridge.mjs && bash test-crew.sh"
   },
   "description": "The hub-world for AI agent crews \u2014 orchestrate Claude Code, Codex, GLM, Kimi, DeepSeek & any OpenRouter model as live crews with a plan-aware Advisor, a Kanban/flow command center, a testing gate, and an economics brain (Scrooge).",
   "files": [

package/skills/crew/SKILL.md

@@ -51,6 +51,7 @@ EXACT launch spec per provider (do not improvise these):
 | DeepSeek | `deepseek:deepseek` | runs via opencode; `deepseek` alone = CLI default |
 | **GLM (Z.ai)** | **`glm:zai-coding-plan`** | **runs via opencode, NOT a bare `glm`/`zai` terminal command.** `glm:zai-coding-plan/glm-5.2` pins a model; `glm:zai-coding-plan` live-selects. (Legacy `opencode:zai-coding-plan` still works.) |
 | **OpenRouter (BYOM)** | **`openrouter`** | **the bring-your-own-model on-ramp — one key fronts hundreds of vendors (incl. ones with no CLI).** Bare `openrouter` live-selects the best OpenRouter model for the difficulty; pin one with `openrouter:openrouter/<vendor>/<model>`. Its own bus identity `openrouter:<project>` (never collides with the GLM `opencode` seat). |
+| **DeepSeek Harness** | **`dsh`** | DeepSeek's own open-source harness as a seat (API-billed via `DEEPSEEK_API_KEY`). `trantor connect` builds its profile (their CC-hooks bridge running trantor's hooks + their MCP client running the relay). **Fresh session per turn — no resume** — so the seat relies on the wake prompt + the board, not conversation memory; give it self-contained contracts. |
 
 `agent:provider` live-selects the best model now; `agent:provider/model` pins one. Example:
 `trantor up codex kimi deepseek:deepseek glm:zai-coding-plan --task code --difficulty hard`.
@@ -97,8 +98,12 @@ Loop until the board is done — you are a foreman, not a mailbox:
    they auto-inject into every future crew's prompts.
 
 ## Phase 5 — verification gate + integration
-Card flow is `todo → doing → testing → done`; `testing` runs the project's tests/typecheck;
-`done` only green; `failed` (+ bus report) pulses red on the board until you bounce it.
+Card flow is `todo → doing → testing → done`; `testing` runs the seat's OWN test file (never the
+full suite from a seat — suites spawn hubs on fixed ports and collide across seats; the
+orchestrator runs the full suite at integration) plus `node bin/slop-gate.mjs` where the repo has
+one (the anti-slop lint over the seat's changed files — a card must not reach done failing it);
+`done` only green, and moves to testing/done carry a `note` with the evidence — the note is the
+card's permanent story; `failed` (+ bus report) pulses red on the board until you bounce it.
 Enforce the gate — bounce anything that skipped it (bounces are visible: "↩ bounced" on the
 card, history in its tooltip). When all report done: integrate, fix contract mismatches
 YOURSELF, move your card through testing → done, broadcast "🚀 <thing> is live", and when the