trantor 0.18.11 → 0.18.12

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.18.11",
+  "version": "0.18.12",
   "description": "Trantor \u2014 the hub-world for AI agent crews: live message bus, presence, project Kanban/flow board + crew orchestration for independent AI coding agents (Claude, Codex, Gemini, Kimi, DeepSeek)",
   "mcpServers": {
     "relay": {

package/bin/advise.mjs

@@ -90,14 +90,19 @@ export function loadWorld() {
 
 const tierOf = (profile, prov) => profile?.providers?.[prov]?.tier || "api";
 
+const FLASH_TIER = /(flash|turbo|lite|mini|highspeed|small)/i;
+
 // pick the cheapest Scrooge model that clears the difficulty floor for a task kind
 export function scroogeModelFor(registry, caps, kind = "code", difficulty = "easy") {
   const floor = { easy: 0, medium: 35, hard: 55 }[difficulty] ?? 0;
   const cands = Object.entries(registry.models || {})
     .filter(([, m]) => (m.good_for || []).includes(kind))
-    .filter(([id]) => (caps[id]?.coding ?? caps[id]?.intelligence ?? 40) >= floor)
-    .sort((a, b) => (a[1].cost_in + a[1].cost_out) - (b[1].cost_in + b[1].cost_out));
-  return cands[0] ? { model: cands[0][0], cost_in: cands[0][1].cost_in, cost_out: cands[0][1].cost_out } : null;
+    .filter(([id]) => (caps[id]?.coding ?? caps[id]?.intelligence ?? 40) >= floor);
+  const hard = difficulty === "hard";
+  const strong = hard ? cands.filter(([id]) => !FLASH_TIER.test(id)) : cands;
+  const pool = strong.length > 0 ? strong : cands;
+  pool.sort((a, b) => (a[1].cost_in + a[1].cost_out) - (b[1].cost_in + b[1].cost_out));
+  return pool[0] ? { model: pool[0][0], cost_in: pool[0][1].cost_in, cost_out: pool[0][1].cost_out } : null;
 }
 
 // crude per-package token forecast (input+output through the executor)

package/bin/baton.mjs

@@ -35,6 +35,13 @@ const transcript = findTranscript();
 const sessionId = transcript ? basename(transcript, ".jsonl") : "";
 const { file } = writeHandoff({ projectDir: cwd, sessionId, transcript, trigger: "manual-cli", force: true });   // manual = intentional, bypass the storm guard
 console.log(`📋 handoff saved for ${project}: ${file}`);
+// --write-only: the in-app flow (#5509). The app ends the pane's session itself and reopens it
+// through `trantor open`, which claims this handoff — a Terminal window here would be exactly the
+// wrong surface, so the flag writes, announces, and stops.
+if (process.argv.includes("--write-only")) {
+  console.log(`🔄 write-only: no window spawned — the pane takeover (trantor open) claims it next.`);
+  process.exit(0);
+}
 const { spawned, armed, windowId } = spawnBaton({ projectDir: cwd, handoffFile: file });
 console.log(spawned
   ? `🔄 baton: a fresh session is opening (it'll recap the handoff)${armed ? ` — this window (${windowId}) closes once it takes over` : " — couldn't detect this window; close it yourself once the new one is up"}`

package/bin/crew-runner.mjs

@@ -44,7 +44,22 @@ function ensureSeatWorktree(sourceDir) {
   const branch = `seat/${AGENT}`;
   if (existsSync(seatDir)) {
     const ok = gitOut(["-C", seatDir, "rev-parse", "--is-inside-work-tree"], seatDir) === "true";
-    if (ok) return seatDir;
+    if (ok) {
+      // #5403: a worktree created once builds against THAT day's main forever — every wave since
+      // has needed a hand fast-forward. Refresh only when it is CLEAN: a dirty tree is a seat's
+      // unintegrated work and a diverged branch is a decision, and refreshing must never eat
+      // either. Failure to refresh is loud but non-fatal: stale beats broken.
+      const dirty = gitOut(["-C", seatDir, "status", "--porcelain"], seatDir);
+      if (dirty === "") {
+        const head = gitOut(["-C", root, "rev-parse", "HEAD"], root);
+        const ff = head && spawnSync("git", ["-C", seatDir, "merge", "--ff-only", head], { stdio: "ignore", timeout: 15000 });
+        if (ff && ff.status === 0) console.log(`\x1b[2m[runner]\x1b[0m ${branch} worktree refreshed to ${head.slice(0, 7)}`);
+        else console.log(`\x1b[33m[runner]\x1b[0m ${branch} worktree diverged from main HEAD — left as-is (integrate or reset it)`);
+      } else {
+        console.log(`\x1b[33m[runner]\x1b[0m ${branch} worktree has uncommitted work — not refreshed`);
+      }
+      return seatDir;
+    }
     console.log(`\x1b[33m[runner]\x1b[0m worktree path exists but is not a git worktree: ${seatDir} — using ${sourceDir}`);
     return sourceDir;
   }

package/bin/models.mjs

@@ -25,9 +25,14 @@ const liveModels = (providerOc) => {
   catch { return []; }
 };
 
+const FLASH_TIER = /(flash|turbo|lite|mini|highspeed|small)/i;
+
 function routePick(candList, diff) {
   try {
-    const out = execSync(`python3 ${SCROOGE} route --candidates ${JSON.stringify(candList.join(" "))} -t code -d ${diff} --json 2>/dev/null`, { encoding: "utf8" });
+    const hard = diff === "hard";
+    const strong = hard ? candList.filter(id => !FLASH_TIER.test(id)) : candList;
+    const pool = strong.length > 0 ? strong : candList;
+    const out = execSync(`python3 ${SCROOGE} route --candidates ${JSON.stringify(pool.join(" "))} -t code -d ${diff} --json 2>/dev/null`, { encoding: "utf8" });
     return JSON.parse(out).qualified || "?";
   } catch { return "?"; }
 }

package/hooks/lib/handoff.mjs

@@ -423,6 +423,10 @@ export function maybeSpawn(projectDir, conf = readConfig()) {
     if (process.platform !== "darwin") return false;
     if (process.env.TRANTOR_NO_HANDOFF_SPAWN === "1") return false;
     if (conf.autoHandoffPrompt === false) return false;
+    if (hasOrchPane(basename(projectDir))) {
+      process.stderr.write(`[trantor] orch pane hosts ${basename(projectDir)} — no Terminal window; the pane claims the handoff on its next open\n`);
+      return false;
+    }
     const script = join(HERE, "..", "..", "bin", "handoff-prompt.sh");
     if (!existsSync(script)) { process.stderr.write(`[trantor] handoff-prompt.sh missing\n`); return false; }
     const timeout = String(conf.handoffPromptTimeout || 25);
@@ -446,9 +450,26 @@ export function spawnSuppressed() {
   return process.env.TRANTOR_NO_HANDOFF_SPAWN === "1" || process.env.TRANTOR_NO_BATON_SPAWN === "1";
 }
 
+// Does this project have a hosted orchestrator pane? When it does, the PANE is the successor
+// surface: `trantor open` claims the handoff there, and spawning a Terminal window would put the
+// fresh session on exactly the surface the operator is trying to leave (#5509 W1). The tracked
+// row is the signal — rows are recorded by open and dropped by teardown/prune, and a stale row
+// costs only a skipped window, never a lost handoff (the handoff waits, held for the pane).
+export function hasOrchPane(projectName) {
+  try {
+    const state = join(process.env.AGENT_BUS_DIR || process.env.RELAY_DATA_DIR || join(homedir(), ".agent-bus"), "crew-windows.txt");
+    if (!existsSync(state)) return false;
+    return readFileSync(state, "utf8").split("\n").some(l => {
+      const f = l.split("\t");
+      return f[0] === projectName && f[1] === "orch";
+    });
+  } catch { return false; }
+}
+
 export function spawnFresh(projectDir) {
   try {
     if (process.platform !== "darwin" || spawnSuppressed()) return false;
+    if (hasOrchPane(basename(projectDir))) return false;   // the pane is the successor surface (#5509)
     const script = join(HERE, "..", "..", "bin", "open-session.sh");
     if (!existsSync(script)) return false;
     const child = spawn("/bin/bash", [script, projectDir, RECAP_CMD], { detached: true, stdio: "ignore" });

package/hub.mjs

@@ -752,6 +752,31 @@ function contractsFor(session, { project = "", windowMs = CONTRACT_WINDOW_MS, ov
     if (c.ageMs < CONTRACT_ABANDON_MS) continue;
     if (c.ts < (newestAnswered.get(c.to) || 0)) c.disposition = "superseded";
   }
+  // ---- superseded by a later DIRECT reply: the morning case (#11047/#11048) --------------------
+  // A row can be unanswerable by a seat that is perfectly healthy: its later replies all carry `re`
+  // for NEWER contracts (a re-dispatch, or an "ack by reference" threaded to the newer id), so
+  // neither byRe nor the loose fallback ever claims the old row — the two matchers above only ever
+  // see replies aimed at the NEWER work. The row then sits WAITING forever: it can never be
+  // answered, it can never be abandoned (the seat is alive), and the newestAnswered rule above
+  // misses it whenever the newer work was dispatched under a peer identity the old row never shares.
+  //
+  // The signal both matchers ignored is the DIRECT reply itself: if the assignee has sent this
+  // session ANY message after the row was dispatched, the assignee is alive, reachable, and has
+  // demonstrably moved on to later work — an older row that has then sat unanswered past the
+  // abandon window is dead weight, not in flight. Age still gates it, so honest out-of-order
+  // completion (a seat that answered a newer job while still working an older one) is never
+  // punished — the older row stays open until the window that any genuine in-flight job would have
+  // reported within has passed.
+  const latestDirectReply = new Map();
+  for (const r of replies) {
+    if (r.ts > (latestDirectReply.get(r.from) || 0)) latestDirectReply.set(r.from, r.ts);
+  }
+  for (const c of out) {
+    if (c.answered || c.disposition === "abandoned") continue;
+    if (c.ageMs < CONTRACT_ABANDON_MS) continue;
+    const latest = latestDirectReply.get(c.to);
+    if (latest != null && c.ts < latest) c.disposition = "superseded";
+  }
   return out;
 }
 
@@ -1821,6 +1846,13 @@ const server = http.createServer(async (req, res) => {
         (t.history ||= []).push({ from: t.status, to: b.status, by: b.by || "", ts: now() });
         if (t.history.length > 40) t.history.splice(0, 10);
         t.status = b.status;
+        // WHO is actually working this card — the SIGNED mover, not the assignee. A card filed by
+        // the orchestrator and built by a seat wore the orchestrator's face on every board
+        // (2026-08-28, operator caught it: "they all say claude"). The assignee stays intent;
+        // workedBy is evidence, stamped only on real work moves and never from a self-asserted by.
+        if (["doing","testing","done"].includes(b.status) && auth?.identity?.name) {
+          t.workedBy = String(auth.identity.name).slice(0, 120);
+        }
       }
       if (b.difficulty && ["easy","medium","hard"].includes(b.difficulty)) t.difficulty = b.difficulty;
       if (b.model !== undefined) t.model = String(b.model).slice(0, 60);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.18.11",
+  "version": "0.18.12",
   "type": "module",
   "bin": {
     "trantor": "bin/cli.mjs"