trantor 0.18.112 → 0.18.114

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.18.112",
+  "version": "0.18.114",
   "description": "Trantor — the hub-world for AI agent crews: live message bus, presence, project Kanban/flow board + crew orchestration for independent AI coding agents (Claude, Codex, Gemini, Kimi, DeepSeek)",
   "mcpServers": {
     "relay": {

package/bin/pair.mjs

@@ -9,10 +9,11 @@ import { spawnSync } from "node:child_process";
 
 const ROOT = dirname(dirname(fileURLToPath(import.meta.url)));
 const args = process.argv.slice(2);
-const USAGE = "usage: trantor pair [--role owner] [--sim] [--json]";
+const USAGE = "usage: trantor pair [--role owner] [--sim] [--tailnet] [--json]";
 if (args.includes("--help") || args.includes("-h")) { console.log(USAGE); process.exit(0); }
 const asJson = args.includes("--json");
 const openSim = args.includes("--sim");
+const forceTailnet = args.includes("--tailnet");
 const roleIdx = args.indexOf("--role");
 const role = roleIdx >= 0 ? (args[roleIdx + 1] || "") : "approver";
 if (!role || role.startsWith("--")) {
@@ -63,14 +64,30 @@ if (!r.ok) {
   process.exit(1);
 }
 
-const link = `trantor://enroll?hub=${encodeURIComponent(hub)}&token=${j.token}`;
+// v1.4: the link carries the hub's public address (Tailscale Funnel) so the phone pairs without
+// Tailscale. /invite itself always goes to the tailnet hub — owner routes never answer in public.
+// /health reports publicUrl; --tailnet forces the tailnet address. No publicUrl (or /health
+// unreachable — the invite already minted) falls back to the tailnet hub.
+const linkHub = (async () => {
+  if (forceTailnet) return { hub, public: false };
+  try {
+    const h = await fetch(`${hub}/health`).then((r) => r.json()).catch(() => ({}));
+    const pub = String(h.publicUrl || "").trim().replace(/\/+$/, "");
+    if (pub) return { hub: pub, public: true };
+  } catch {}
+  return { hub, public: false };
+})();
+
+const used = await linkHub;
+const link = `trantor://enroll?hub=${encodeURIComponent(used.hub)}&token=${j.token}`;
 const expiresAt = Number(j.expiresAt) || Date.now() + 600000;
 const mins = Math.max(0, Math.round((expiresAt - Date.now()) / 60000));
 
 if (asJson) {
-  console.log(JSON.stringify({ link, token: j.token, hub, expiresAt }));
+  console.log(JSON.stringify({ link, token: j.token, hub: used.hub, hubPublic: used.public, expiresAt }));
 } else {
-  console.log(`Pair link (single use):\n${link}\nExpires in ${mins} minute${mins === 1 ? "" : "s"}.`);
+  const where = used.public ? "public — the phone needs no Tailscale" : "tailnet — the phone needs Tailscale";
+  console.log(`Pair link (single use):\n${link}\nHub in the link: ${used.hub} (${where}).\nExpires in ${mins} minute${mins === 1 ? "" : "s"}.`);
 }
 
 if (openSim) {

package/bin/provider.mjs

@@ -46,18 +46,27 @@ function opencodeModelCount(providerOc) {
   catch { return 0; }
 }
 
-function listSeats() {
-  const world = loadWorld();
+export function crewSeats(world = loadWorld(), countModels = opencodeModelCount) {
   const { roster, agents, profile } = world;
+  return Object.entries(roster).map(([agent, seat]) => ({
+    agent,
+    spec: seat.launch,
+    tier: profile?.providers?.[seat.provider]?.tier || (seat.cli === "opencode" ? "—" : ""),
+    available: agents.includes(agent),
+    brought: !!seat.discovered,
+    models: seat.cli === "opencode" ? countModels(seat.providerOc) : null,
+  }));
+}
+
+function listSeats(opts) {
+  const rows = crewSeats();
+  if (opts.json) { console.log(JSON.stringify(rows, null, 2)); return; }
   console.log("CREW SEATS — built-in + brought (BYOM). ● = available now\n");
-  for (const [label, s] of Object.entries(roster)) {
-    const live = agents.includes(label);
-    const tier = profile?.providers?.[s.provider]?.tier || (s.cli === "opencode" ? "—" : "");
-    const kind = s.discovered ? "brought " : "built-in";
-    const models = s.cli === "opencode" ? opencodeModelCount(s.providerOc) : null;
+  for (const { agent, spec, tier, available, brought, models } of rows) {
+    const kind = brought ? "brought " : "built-in";
     const mtxt = models == null ? "" : `${models} models`;
-    const dot = live ? `${C.grn}●${C.off}` : `${C.dim}○${C.off}`;
-    console.log(`  ${dot} ${label.padEnd(14)} ${C.dim}${kind}${C.off}  launch: ${s.launch.padEnd(26)} ${tier ? `tier=${tier}` : ""} ${C.dim}${mtxt}${C.off}`);
+    const dot = available ? `${C.grn}●${C.off}` : `${C.dim}○${C.off}`;
+    console.log(`  ${dot} ${agent.padEnd(14)} ${C.dim}${kind}${C.off}  launch: ${spec.padEnd(26)} ${tier ? `tier=${tier}` : ""} ${C.dim}${mtxt}${C.off}`);
   }
   console.log(`\n${C.dim}add one:${C.off} trantor provider add <name> --key sk-… --plan api`);
   console.log(`${C.dim}browse models:${C.off} trantor models [<provider>]`);
@@ -279,7 +288,8 @@ if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href)
   // The default list leads with the seats roster and closes with the provider status board —
   // one command answers both "what can I launch" and "what is actually alive" (#6390).
   const defaultList = async () => {
-    listSeats();
+    listSeats(opts);
+    if (opts.json) return;
     console.log("");
     printStatusRows(await providerStatus());
   };

package/hub/auth.mjs

@@ -5,7 +5,7 @@ import { timingSafeEqual, randomBytes } from "node:crypto";
 import { publicView } from "../lib/identity.mjs";
 import { IDENTITY_KINDS } from "../lib/store-contract.mjs";
 
-export function createAuthRuntime({ state, markDirty, AUTH_MODE, SUPERSEDE_GRACE_MS, LOOPBACK_BIND, ENROLL_MODE }) {
+export function createAuthRuntime({ state, markDirty, AUTH_MODE, SUPERSEDE_GRACE_MS, LOOPBACK_BIND, ENROLL_MODE, seenNonces = new Map() }) {
 const now = () => Date.now();
 function rawBody(req) {
   if (req._rawBody !== undefined) return Promise.resolve(req._rawBody);
@@ -55,7 +55,7 @@ const AUTH_HEADERS = ["x-trantor-pubkey", "x-trantor-sig", "x-trantor-ts", "x-tr
 const PUBLIC_ENDPOINTS = new Set(["/", "/ui", "/health", "/enroll"]);
 const OWNER_ENDPOINTS = new Set(["/project/delete", "/sweep", "/reconcile", "/invite", "/import", "/policy", "/session/prompts", "/session/prompt/claim", "/session/prompt/ack"]);
 const DEVICE_ENDPOINTS = new Set(["/device/register", "/device/unregister", "/devices"]);
-const READ_ENDPOINTS = new Set(["/peers", "/tasks", "/events", "/inbox", "/peer", "/card", "/stream", "/history", "/projects", "/catchup", "/phases", "/recent", "/handoffs", "/verify-gates", "/claims", "/proposals", "/grants", "/overseer/context", "/overseer/status", "/session/chat", "/session/prompt"]);
+const READ_ENDPOINTS = new Set(["/peers", "/tasks", "/events", "/inbox", "/peer", "/card", "/stream", "/history", "/projects", "/catchup", "/phases", "/recent", "/handoffs", "/verify-gates", "/claims", "/proposals", "/grants", "/overseer/context", "/overseer/status", "/session/chat", "/session/prompt", "/crew/roster"]);
 const roleRank = { read: 1, write: 2, approver: 3, owner: 4 };
 const hasAuthHeaders = (req) => AUTH_HEADERS.some(h => !!req.headers[h]);
 const authPath = (u) => `${u.pathname}${u.search || ""}`;
@@ -287,13 +287,13 @@ function inboxReadable(auth, msg, session) {
 function canUseInboxSession(auth, session) {
   return !auth?.identity || String(auth.identity.name || "") === String(session || "");
 }
-const seenNonces = new Map();
 
-  function handleEnrollment({ req, res, P, u, b0 }) {
+  function handleEnrollment({ req, res, P, u, b0, inviteOnly = false }) {
     if (req.method !== "POST" || P !== "/enroll") return false;
     const raw = req._rawBody || "";
     const verified = verifyRequest({ headers: req.headers, method: req.method, path: authPath(u), body: raw });
     if (!verified.ok) return json(res, 401, { error: verified.reason || "bad signature" });
+    if (inviteOnly && !b0?.token) return json(res, 403, { error: "invite token required" });
     const requestedKind = String(b0.kind || "agent").slice(0, 40);
     if (!IDENTITY_KINDS.includes(requestedKind)) {
       return json(res, 400, { error: `kind must be one of: ${IDENTITY_KINDS.join(", ")}`, allowedKinds: IDENTITY_KINDS });
@@ -305,9 +305,9 @@ const seenNonces = new Map();
     const token = String(b0.token || "");
     const bootstrap = String(process.env.RELAY_BOOTSTRAP_TOKEN || "");
     const noIdentitiesYet = Object.keys(state.identities || {}).length === 0;
-    const tokenMatchesBootstrap = !!bootstrap && !!token && token.length === bootstrap.length &&
+    const tokenMatchesBootstrap = !inviteOnly && !!bootstrap && !!token && token.length === bootstrap.length &&
       timingSafeEqual(Buffer.from(token), Buffer.from(bootstrap));
-    if (bootstrap && noIdentitiesYet && tokenMatchesBootstrap) {
+    if (!inviteOnly && bootstrap && noIdentitiesYet && tokenMatchesBootstrap) {
       scopes = [cleanScope({ project: "*", role: "owner" })].filter(Boolean);
       enrolledBy = "bootstrap";
     } else if (token) {

package/hub/public.mjs

@@ -0,0 +1,108 @@
+import { isIP } from "node:net";
+
+const ALLOWED = new Set([
+  ...["/health", "/projects", "/catchup", "/tasks", "/card", "/events", "/stream",
+    "/inbox", "/poll", "/recent", "/peers", "/holds", "/verify-gates", "/proposals",
+    "/balances", "/economics", "/session/chat", "/session/prompt", "/crew/roster", "/_op"]
+    .map(path => `GET ${path}`),
+  ...["/enroll", "/task/update", "/task/checklist-toggle", "/send", "/delivered",
+    "/verify-gate", "/hold/decide", "/proposal/decide", "/session/prompt", "/session/answer",
+    "/crew/command", "/device/register", "/device/unregister"].map(path => `POST ${path}`),
+]);
+const WINDOW_MS = 60000;
+const MAX_CLIENTS = 10000;
+
+function normalizedIP(address) {
+  if (!isIP(address) || address.includes("%")) return "";
+  if (isIP(address) === 4) return address;
+  const canonical = new URL(`http://[${address}]/`).hostname.slice(1, -1);
+  if (!canonical.startsWith("::ffff:")) return canonical;
+  const words = canonical.slice(7).split(":").map(word => parseInt(word, 16));
+  return [words[0] >> 8, words[0] & 255, words[1] >> 8, words[1] & 255].join(".");
+}
+
+export function publicClientIP(req) {
+  const socket = normalizedIP(req.socket.remoteAddress || "") || "unknown";
+  const loopback = socket === "::1" || socket.startsWith("127.");
+  if (!loopback) return socket;
+  // The proxy (tailscale serve/funnel) APPENDS the address it saw, so only the last entry is
+  // trustworthy; the first is whatever the caller sent and would let anyone dodge the limits.
+  const forwarded = String(req.headers["x-forwarded-for"] || "").split(",").pop().trim();
+  return normalizedIP(forwarded) || socket;
+}
+
+export function createPublicGate({ now = Date.now, log = line => process.stderr.write(`${line}\n`) } = {}) {
+  const clients = new Map();
+  const admissions = new WeakMap();
+  const refusals = new Map();
+  function count(kind) { refusals.set(kind, (refusals.get(kind) || 0) + 1); }
+  function prune() {
+    const cutoff = now() - WINDOW_MS;
+    for (const [ip, bucket] of clients) {
+      if (!bucket.streams && bucket.lastSeen <= cutoff) clients.delete(ip);
+    }
+  }
+  function report() {
+    prune();
+    for (const [kind, total] of refusals) log(`[trantor] public refusal ${kind}: count=${total}`);
+    refusals.clear();
+  }
+  const timer = setInterval(report, WINDOW_MS);
+  timer.unref();
+
+  function refuse(res, code, kind, retry = 0) {
+    count(kind);
+    const headers = { "content-type": "application/json" };
+    if (retry) headers["retry-after"] = String(retry);
+    res.writeHead(code, headers);
+    res.end(JSON.stringify({ error: code === 404 ? "not found" : "rate limit exceeded" }));
+    return false;
+  }
+
+  function admit(req, res, path) {
+    const ts = now();
+    const ip = publicClientIP(req);
+    let bucket = clients.get(ip);
+    if (!bucket) {
+      if (clients.size >= MAX_CLIENTS) prune();
+      // Fail closed at capacity; evicting a live bucket would reset its limit.
+      if (clients.size >= MAX_CLIENTS) return refuse(res, 429, "capacity", 60);
+      bucket = { start: ts, lastSeen: ts, requests: 0, enrolls: 0, streams: 0 };
+      clients.set(ip, bucket);
+    }
+    bucket.lastSeen = ts;
+    if (ts - bucket.start >= WINDOW_MS) {
+      bucket.start = ts;
+      bucket.requests = 0;
+      bucket.enrolls = 0;
+    }
+    const retry = Math.max(1, Math.ceil((bucket.start + WINDOW_MS - ts) / 1000));
+    if (bucket.requests >= 120) return refuse(res, 429, "general-limit", retry);
+    bucket.requests++;
+    if (!ALLOWED.has(`${req.method} ${path}`)) return refuse(res, 404, "route");
+    if (path === "/enroll") {
+      if (bucket.enrolls >= 10) return refuse(res, 429, "enroll-limit", retry);
+      bucket.enrolls++;
+    }
+    admissions.set(req, bucket);
+    res.once("finish", () => {
+      if (res.statusCode === 401) {
+        // The first unit was charged at admission; a failed signature costs one more.
+        if (bucket.start + WINDOW_MS > now()) bucket.requests++;
+        count("auth");
+      } else if (res.statusCode === 403) count(path === "/enroll" ? "enrollment" : "authorization");
+    });
+    return true;
+  }
+
+  function openStream(req, res) {
+    if (res.destroyed) return false;
+    const bucket = admissions.get(req);
+    if (bucket.streams >= 5) return refuse(res, 429, "stream-limit", 60);
+    bucket.streams++;
+    res.once("close", () => { bucket.streams--; bucket.lastSeen = now(); });
+    return true;
+  }
+
+  return { admit, openStream, close: () => clearInterval(timer) };
+}

package/hub/routes/messages.mjs

@@ -9,7 +9,7 @@ export async function routeMessages({ req, res, q, P, auth, ctx }) {
     appendEvent, appendCardEvent, appendTaskLog, markDelivered, contractsFor, canUseInboxSession, inboxWindow,
     deliverable, inboxReadable, inboxResponse, filterReadable, canRead, streams, UI,
     AUTH_MODE, persistHealth, duty, now, markDirty, assertNoSecrets, PEER_TTL_MS,
-    CONTRACT_WINDOW_MS,
+    CONTRACT_WINDOW_MS, PUBLIC_URL,
   } = ctx;
     if (req.method === "POST" && P === "/send") {
       const b = await body(req);
@@ -168,6 +168,8 @@ export async function routeMessages({ req, res, q, P, auth, ctx }) {
     // #8723: the count is a listing in aggregate — memory rows (past PEER_TTL_MS) never count.
     if (P === "/health") return json(res, 200, { ok: true, authMode: AUTH_MODE, peers: Object.values(state.peers).filter(v => (v.lastSeen || 0) >= now() - PEER_TTL_MS).length, messages: state.messages.length, streams: streams.length,
       persist: persistHealth.view(),
+      // v1.4: the public front door, empty when RELAY_PUBLIC_URL is unset — pairing hands it out.
+      publicUrl: PUBLIC_URL,
       // #5686: duty liveness rides /health so the app's Home strip and doctor read one truth.
       duty: { ...duty.dutyLiveness(), darkSinceMs: duty.darkSince ? now() - duty.darkSince : 0, queuedEscalations: duty.dutyQueuedEscalations() } });
     return false;

package/hub/routes/session.mjs

@@ -15,6 +15,14 @@ const EXPIRED_REASON = "No Mac is relaying this project. Is the Trantor app open
 const ACK_OUTCOMES = new Set(["delivered", "blocked", "not_ready", "stalled", "no_agent", "stale"]);
 const ANSWER_PICKS_MAX = 10;
 const ANSWER_OTHER_MAX = 2000;
+// #12140: crew commands from the phone. The hub validates and queues; the desktop relay runs the
+// trantor CLI and acks done|failed with the output tail. A seat spec is "agent[:project]".
+const CREW_SPEC = /^[a-z][a-z0-9-]{0,30}(:[A-Za-z0-9._/-]{1,80})?$/;
+const CREW_SEATS_MAX = 6;
+const CREW_OUTPUT_MAX = 2000;   // the CLI's LAST 2000 chars, ANSI stripped
+const CREW_CLAUDE_REFUSAL = "The claude seat draws your own Claude quota; start it on the Mac.";
+// oxlint-disable-next-line no-control-regex -- stripping ANSI escape sequences IS matching control characters
+const stripAnsi = (s) => String(s).replace(/\x1B(?:[@-Z\\-_]|\[[0-?]*[ -/]*[@-~])/g, "");
 
 export function createSessionRuntime({ state, markDirty, appendEvent, pushEventToStreams, notifier }) {
   const now = () => Date.now();
@@ -123,13 +131,20 @@ export function createSessionRuntime({ state, markDirty, appendEvent, pushEventT
     }
   }
 
+  // #12140: the desktop publishes the seats its Mac can spawn (from `trantor provider status
+  // --json`) at boot and every 10 minutes. Memory-only like the chat mirror — a restarted hub
+  // has no roster until the desktop republishes.
+  const roster = new Map();     // machine -> { machine, updatedAt, seats }
+
   async function route({ req, res, q, P, auth, ctx }) {
     const isChat = P === "/session/chat";
     const isPrompts = P === "/session/prompts";
     const isPrompt = P === "/session/prompt" || P === "/session/prompt/claim" || P === "/session/prompt/ack";
     const isAnswer = P === "/session/answer";
-    if (!isChat && !isPrompts && !isPrompt && !isAnswer) return false;
-    const { body, json, canon } = ctx;
+    const isCrewCommand = P === "/crew/command";
+    const isCrewRoster = P === "/crew/roster";
+    if (!isChat && !isPrompts && !isPrompt && !isAnswer && !isCrewCommand && !isCrewRoster) return false;
+    const { body, json, canon, scopeAllows } = ctx;
 
     // #12137: the phone's answer to an AskUserQuestion joins the SAME queue as a plain prompt,
     // as kind "answer" — same claim, ack, expiry and audit trail; the desktop relay maps the
@@ -161,6 +176,74 @@ export function createSessionRuntime({ state, markDirty, appendEvent, pushEventT
       return json(res, 200, { id: p.id, status: "queued" });
     }
 
+    // #12140: the phone drives crew lifecycle through the SAME prompt queue as chat prompts and
+    // answers, as kind "crew" — same claim, ack, TTL expiry and audit trail. The hub validates the
+    // specs and refuses the dangerous shapes; the desktop relay re-validates and runs the CLI.
+    if (req.method === "POST" && isCrewCommand) {
+      const b = await body(req);
+      const project = canon(String(b.project || "").slice(0, 80));
+      if (!project) return json(res, 400, { error: "project required" });
+      // Approver or owner on the project — authorize() only proves write for an unknown POST path.
+      if (!scopeAllows(auth?.identity, project, "approver")) return json(res, 403, { error: "approver role required" });
+      const action = String(b.action || "");
+      if (!["up", "down", "swap"].includes(action)) return json(res, 400, { error: "action must be up, down or swap" });
+      const seats = (Array.isArray(b.seats) ? b.seats : []).map(s => String(s ?? "").slice(0, 120));
+      if (seats.length > CREW_SEATS_MAX) return json(res, 400, { error: `at most ${CREW_SEATS_MAX} seats per command` });
+      const from = String(b.from || "").slice(0, 120);
+      const to = String(b.to || "").slice(0, 120);
+      const specs = [...seats, from, to].filter(Boolean);
+      const flagged = specs.find(v => v.startsWith("-"));
+      if (flagged) return json(res, 400, { error: `flag-like value refused: ${flagged}` });
+      const invalid = specs.find(v => !CREW_SPEC.test(v));
+      if (invalid) return json(res, 400, { error: `invalid seat spec: ${invalid}` });
+      // numbered claude seats (claude-2) draw the same quota as claude
+      if (specs.some(v => /^claude(-\d+)?$/.test(v.split(":")[0]))) return json(res, 400, { error: CREW_CLAUDE_REFUSAL });
+      if (action === "up" && !seats.length) return json(res, 400, { error: "up needs at least one seat" });
+      if (action === "swap" && (!from || !to)) return json(res, 400, { error: "swap needs from and to" });
+      expireQueued();
+      state.sessionPromptSeq += 1;
+      // down with an empty seat list means the whole project.
+      const text = action === "swap" ? `swap ${from} ${to}` : seats.length ? `${action} ${seats.join(" ")}` : `${action} ${project}`;
+      const p = { id: state.sessionPromptSeq, project, kind: "crew", action, seats, text,
+        by: String(auth?.identity?.name || "").slice(0, 120), ts: now(), status: "queued" };
+      if (from) p.from = from;
+      if (to) p.to = to;
+      state.sessionPrompts.push(p);
+      while (state.sessionPrompts.length > PROMPT_CAP) {
+        const ti = state.sessionPrompts.findIndex(x => x.status !== "queued" && x.status !== "claimed");
+        state.sessionPrompts.splice(ti >= 0 ? ti : 0, 1);
+      }
+      markDirty();
+      appendEvent("chat.prompt.queued", project, p.by, { promptId: p.id, kind: "crew", action, text: text.slice(0, EVENT_TEXT_MAX) });
+      pushEventToStreams({ ts: p.ts, type: "chat.prompt", id: p.id, project });
+      return json(res, 200, { id: p.id, status: "queued" });
+    }
+
+    // The roster row is keyed on the SIGNER's identity name (any body machine is
+    // ignored) so it matches the chat mirror's host.
+    if (req.method === "POST" && isCrewRoster) {
+      const b = await body(req);
+      if (!scopeAllows(auth?.identity, "", "owner")) return json(res, 403, { error: "owner role required" });
+      const machine = String(auth?.identity?.name || b.machine || "").slice(0, 120);
+      if (!machine) return json(res, 400, { error: "machine required" });
+      const seats = (Array.isArray(b.seats) ? b.seats : []).slice(0, 50).map(s => ({
+        agent: String(s?.agent || "").slice(0, 40),
+        // what `trantor up` takes for this seat (glm:zai-coding-plan); only a valid spec is kept
+        spec: CREW_SPEC.test(String(s?.spec || "")) ? String(s.spec) : "",
+        label: String(s?.label || "").slice(0, 120),
+        plan: String(s?.plan || "").slice(0, 40),
+        metered: !!s?.metered,
+        available: !!s?.available,
+        reason: String(s?.reason || "").slice(0, 200),
+      })).filter(s => s.agent);
+      roster.set(machine, { machine, updatedAt: now(), seats });
+      return json(res, 200, { ok: true, machine, seats: seats.length });
+    }
+
+    if (req.method === "GET" && isCrewRoster) {
+      return json(res, 200, { machines: [...roster.values()] });
+    }
+
     if (req.method === "POST" && isChat) {
       const b = await body(req);
       // the same canon the GET reads with, or a publish and a read could name two mirrors
@@ -201,13 +284,19 @@ export function createSessionRuntime({ state, markDirty, appendEvent, pushEventT
     }
 
     // The public view of a queue row: plain prompts are kind "prompt"; answers carry their
-    // session, toolId, picks and other so the claiming desktop has everything it needs.
+    // session, toolId, picks and other; crew commands carry action, seats, from and to —
+    // so the claiming desktop has everything it needs.
     const promptView = (p) => {
       const view = { id: p.id, project: p.project, text: p.text, by: p.by, ts: p.ts, status: p.status, kind: p.kind || "prompt" };
       if (p.kind === "answer") {
         view.session = p.session; view.toolId = p.toolId; view.picks = p.picks;
         if (p.other && p.other.trim()) view.other = p.other;   // absent, never "", when nothing was typed
       }
+      if (p.kind === "crew") {
+        view.action = p.action; view.seats = p.seats;
+        if (p.from) view.from = p.from;
+        if (p.to) view.to = p.to;
+      }
       return view;
     };
 
@@ -239,17 +328,28 @@ export function createSessionRuntime({ state, markDirty, appendEvent, pushEventT
       const p = findPrompt(b.id);
       if (!p) return json(res, 404, { error: "prompt not found" });
       const outcome = String(b.outcome || "");
-      if (!ACK_OUTCOMES.has(outcome)) return json(res, 400, { error: `outcome must be one of: ${[...ACK_OUTCOMES].join(", ")}` });
-      if (p.status === "delivered" || p.status === "failed" || p.status === "expired") {
+      // #12140: a crew command acks done|failed with the CLI output tail, and the status IS the
+      // outcome — never "delivered". Other kinds keep the delivered/blocked/… vocabulary.
+      if (p.kind === "crew") {
+        if (outcome !== "done" && outcome !== "failed") return json(res, 400, { error: "crew outcome must be done or failed" });
+      } else if (!ACK_OUTCOMES.has(outcome)) {
+        return json(res, 400, { error: `outcome must be one of: ${[...ACK_OUTCOMES].join(", ")}` });
+      }
+      if (p.status === "delivered" || p.status === "done" || p.status === "failed" || p.status === "expired") {
         return json(res, 409, { error: `prompt already ${p.status}`, status: p.status });
       }
       const error = String(b.error || "").slice(0, EVENT_TEXT_MAX);
       p.outcome = outcome; p.error = error; p.ackedAt = now();
-      p.status = outcome === "delivered" ? "delivered" : "failed";
+      if (p.kind === "crew") {
+        p.output = stripAnsi(String(b.output || "")).slice(-CREW_OUTPUT_MAX);
+        p.status = outcome;   // "done" or "failed"
+      } else {
+        p.status = outcome === "delivered" ? "delivered" : "failed";
+      }
       markDirty();
       const extra = { promptId: p.id, outcome };
       if (error) extra.error = error;
-      appendEvent(outcome === "delivered" ? "chat.prompt.delivered" : "chat.prompt.failed", p.project,
+      appendEvent(p.status === "failed" ? "chat.prompt.failed" : "chat.prompt.delivered", p.project,
         String(auth?.identity?.name || ""), extra);
       return json(res, 200, { ok: true, status: p.status });
     }
@@ -258,7 +358,7 @@ export function createSessionRuntime({ state, markDirty, appendEvent, pushEventT
       expireQueued();
       const p = findPrompt(q.id);
       if (!p) return json(res, 404, { error: "prompt not found" });
-      return json(res, 200, { id: p.id, status: p.status, outcome: p.outcome || "", error: p.error || "" });
+      return json(res, 200, { id: p.id, status: p.status, outcome: p.outcome || "", output: p.output || "", error: p.error || "" });
     }
 
     return false;

package/hub.mjs

@@ -7,6 +7,7 @@ import { assertNoSecrets } from "./lib/scrub.mjs";
 import { DEFAULT_ORG } from "./lib/store-contract.mjs";
 import { createStoreRuntime } from "./hub/store.mjs";
 import { createAuthRuntime } from "./hub/auth.mjs";
+import { createPublicGate } from "./hub/public.mjs";
 import { createEventRuntime } from "./hub/events.mjs";
 import { createReaper } from "./hub/reaper.mjs";
 import { createDuty } from "./hub/duty.mjs";
@@ -31,6 +32,9 @@ const PG_URL = process.env.RELAY_DATABASE_URL || process.env.POSTGRES_URL ||
 const STORE_KIND = RAW_STORE_KIND || (PG_URL ? "pg" : "json");
 const ORG_ID = process.env.RELAY_ORG_ID || DEFAULT_ORG;
 const AUTH_MODE = ["off", "warn", "enforce"].includes(process.env.RELAY_AUTH) ? process.env.RELAY_AUTH : "enforce";
+// The public front door (Tailscale Funnel, v1.4) — /health reports it so clients learn the
+// address the phone can reach without Tailscale. Empty when the hub has none.
+const PUBLIC_URL = String(process.env.RELAY_PUBLIC_URL || "").trim().replace(/\/+$/, "");
 const ENROLL_MODE = process.env.RELAY_ENROLL || "tofu";
 const ONLINE_MS = Number(process.env.RELAY_ONLINE_MS || 5 * 60 * 1000);
 const PEER_TTL_DEFAULT_MS = 21600000;
@@ -62,9 +66,10 @@ if (!LOOPBACK_BIND && AUTH_MODE !== "enforce") {
 }
 
 const store = await createStoreRuntime({ STORE_KIND, PG_URL, ORG_ID, DATA });
+const seenNonces = new Map();
 const authRuntime = createAuthRuntime({
   state: store.state, markDirty: store.markDirty, AUTH_MODE, SUPERSEDE_GRACE_MS,
-  LOOPBACK_BIND, ENROLL_MODE,
+  LOOPBACK_BIND, ENROLL_MODE, seenNonces,
 });
 const notifier = createNotifier({ state: store.state, markDirty: store.markDirty, canRead: authRuntime.canRead });
 const events = createEventRuntime({ state: store.state, markDirty: store.markDirty, AUTH_MODE, ONLINE_MS, canon: authRuntime.canon, notifier });
@@ -124,7 +129,7 @@ try { UI = readFileSync(new URL("./ui.html", import.meta.url), "utf8"); } catch
 const context = {
   ...store, ...authRuntime, ...events, ...reaper, duty, overseer, derivePhases,
   hubSend: duty.hubSend, assertNoSecrets, UI, AUTH_MODE, ONLINE_MS, PEER_TTL_MS,
-  REAP_GRACE_MS, CONTRACT_WINDOW_MS,
+  REAP_GRACE_MS, CONTRACT_WINDOW_MS, PUBLIC_URL,
 };
 const sessionChat = createSessionRuntime({
   state: store.state, markDirty: store.markDirty,
@@ -132,33 +137,50 @@ const sessionChat = createSessionRuntime({
 });
 const routes = [routeDevices, routeAdmin, routeCards, routeInsights, routeMessages, sessionChat.route];
 
-const server = http.createServer(async (req, res) => {
-  const u = new URL(req.url, "http://x");
-  const q = Object.fromEntries(u.searchParams);
-  const P = u.pathname;
-  try {
-    const b0 = req.method === "POST" ? await authRuntime.body(req) : {};
-    if (authRuntime.handleEnrollment({ req, res, P, u, b0 })) return;
-    const auth = authRuntime.PUBLIC_ENDPOINTS.has(P)
-      ? { ok: true, mode: AUTH_MODE, trusted: false }
-      : await authRuntime.authenticate(req, authRuntime.authPath(u));
-    if (authRuntime.handleInvite({ req, res, P, auth, b0 })) return;
-    if (!auth.ok) return authRuntime.json(res, auth.code || 401, { error: auth.error || "unauthorized" });
-    const authorization = authRuntime.authorize(auth, req.method, P, authRuntime.projectFromRequest(P, q, b0));
-    if (!authorization.ok) return authRuntime.json(res, authorization.code || 403, { error: authorization.error || "forbidden" });
-    if (req.method === "GET" && P === "/_op") {
-      const o = opOutcomes.get(String(q.id || "").slice(0, 80));
-      return authRuntime.json(res, 200, o ? { status: o.status, code: o.code, body: o.body } : { status: "unknown" });
-    }
-    const op = req.method === "POST" ? opIdOf(b0) : null;
-    const seen = op ? opOutcomes.get(op) : null;
-    if (seen) return authRuntime.json(res, seen.code, seen.body);
-    if (op) recordOpOutcome(res, op);
-    for (const route of routes) if (await route({ req, res, q, P, auth, ctx: context })) return;
-    authRuntime.json(res, 404, { error: "not found" });
-  } catch (error) {
-    authRuntime.json(res, 500, { error: String(error?.message || error) });
-  }
+const publicAuth = createAuthRuntime({
+  state: store.state, markDirty: store.markDirty, AUTH_MODE: "enforce", SUPERSEDE_GRACE_MS,
+  LOOPBACK_BIND: true, ENROLL_MODE: "invite", seenNonces,
 });
+const publicContext = { ...context, ...publicAuth, AUTH_MODE: "enforce" };
 
+function requestHandler(runtime, ctx, gate = null) {
+  return async (req, res) => {
+    try {
+      const u = new URL(req.url, "http://x");
+      const q = Object.fromEntries(u.searchParams);
+      const P = u.pathname;
+      if (gate && !gate.admit(req, res, P)) return;
+      const b0 = req.method === "POST" ? await runtime.body(req) : {};
+      if (runtime.handleEnrollment({ req, res, P, u, b0, inviteOnly: !!gate })) return;
+      const auth = runtime.PUBLIC_ENDPOINTS.has(P)
+        ? { ok: true, mode: ctx.AUTH_MODE, trusted: false }
+        : await runtime.authenticate(req, runtime.authPath(u));
+      if (runtime.handleInvite({ req, res, P, auth, b0 })) return;
+      if (!auth.ok) return runtime.json(res, auth.code || 401, { error: auth.error || "unauthorized" });
+      const authorization = runtime.authorize(auth, req.method, P, runtime.projectFromRequest(P, q, b0));
+      if (!authorization.ok) return runtime.json(res, authorization.code || 403, { error: authorization.error || "forbidden" });
+      if (gate && P === "/stream" && !gate.openStream(req, res)) return;
+      if (req.method === "GET" && P === "/_op") {
+        const o = opOutcomes.get(String(q.id || "").slice(0, 80));
+        return runtime.json(res, 200, o ? { status: o.status, code: o.code, body: o.body } : { status: "unknown" });
+      }
+      const op = req.method === "POST" ? opIdOf(b0) : null;
+      const seen = op ? opOutcomes.get(op) : null;
+      if (seen) return runtime.json(res, seen.code, seen.body);
+      if (op) recordOpOutcome(res, op);
+      for (const route of routes) if (await route({ req, res, q, P, auth, ctx })) return;
+      runtime.json(res, 404, { error: "not found" });
+    } catch (error) {
+      runtime.json(res, 500, { error: String(error?.message || error) });
+    }
+  };
+}
+
+const server = http.createServer(requestHandler(authRuntime, context));
 server.listen(PORT, HOST, () => console.error(`[trantor] hub on http://${HOST}:${PORT} (auth: ${AUTH_MODE}; data: ${DATA})`));
+
+if (process.env.RELAY_PUBLIC_PORT) {
+  const publicPort = Number(process.env.RELAY_PUBLIC_PORT);
+  const publicServer = http.createServer(requestHandler(publicAuth, publicContext, createPublicGate()));
+  publicServer.listen(publicPort, "127.0.0.1", () => console.error(`[trantor] public hub on http://127.0.0.1:${publicServer.address().port} (auth: enforce)`));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.18.112",
+  "version": "0.18.114",
   "type": "module",
   "bin": {
     "trantor": "bin/cli.mjs"