trantor 0.18.30 → 0.18.31

package/bin/cli.mjs

@@ -209,7 +209,7 @@ switch (cmd) {
   trantor gates       verification gates: "must verify before shipping" claims that survive handoffs — [--all] [--json]
   trantor backfill    card past GIT work onto the board (solo commits that were never carded) — [--since "14 days ago"] [--dry-run]
   trantor init-hooks  install a git post-commit hook so EVERY commit auto-cards on the board (reliable solo-work backstop) — [--uninstall]
-  trantor new         project genesis: new <name> [--from <git-url>] [--brief <file>] [--dir <path>] [--adopt] [--json] — makes the dir, git main, CLAUDE.md from the brief, hooks, hub brief + first card (never spawns a session)
+  trantor new         project genesis: new <name> [--from <git-url>] [--brief <file>] [--dir <parent>] [--adopt] [--json] — creates <parent>/<name>, git main, CLAUDE.md from the brief, hooks, hub brief + first card (never spawns a session)
   trantor balances    how much credit is left on each CONFIGURED provider (from your profile) — refill before you stall — [--json]
   trantor recost      recompute sub-agent notional cost from on-disk transcripts + reseed the board (repair after upgrade) — [--dry-run]
   trantor handoff     finish this session NOW: write a handoff, open a fresh session that takes over, and close this one (manual baton)

package/bin/crew-runner.mjs

@@ -19,6 +19,7 @@ import { ensureEnrolled } from "../lib/enroll.mjs";
 import { redactKeys } from "../lib/redact.mjs";
 import {
   AUTH_MARKER_RE, classifyFailure, looksLikeAuthDeath,
+  verdictFor,
   readPromptText, stripPromptEcho,
 } from "../lib/classify-failure.mjs";
 import { capWake, capBcast, pickLessons, composePrompt } from "./crew-payload.mjs";
@@ -461,6 +462,10 @@ async function runTurn(prompt, isFirst, trigger = "kickoff") {
   const pf = join(homedir(), ".agent-bus", `turn-${AGENT}-${PROJ}.txt`);
   appendFileSync(pf, "", { flag: "w" }); // truncate
   appendFileSync(pf, prompt);
+  // #5868: where HEAD stood when the turn began. A turn that moved it shipped real work, and an
+  // exit-0 turn with real output must never be re-labelled "auth" by the #5405 escalation — the
+  // qwen specimen committed aa3c340 while its captured stream still tripped the auth regex.
+  const headBefore = gitOut(["rev-parse", "HEAD"], TURN_DIR);
   let cmd = (isFirst || (cli.sid && !sid)) ? cli.first : cli.next;
   const mfrag = MODEL && cli.mflag ? `${cli.mflag}${MODEL}` : "";
   cmd = cmd.replaceAll("{M}", mfrag).replaceAll("{P}", pf).replaceAll("{SID}", sid);
@@ -543,10 +548,15 @@ async function runTurn(prompt, isFirst, trigger = "kickoff") {
   // fail the turn. Telemetry keeps the REAL exit; the returned code is the effective one every
   // call site branches on (kickoff, pulse, deliverWake).
   let effExit = realExit;
-  if (realExit === 0 && looksLikeAuthDeath(ownOut)) {
+  let authHit = "";
+  // #5868: a NEW commit since turn start is real work, and an exit-0 turn with real output is
+  // never re-labelled auth — the qwen specimen exited 0 with a shipped commit (aa3c340) while a
+  // short capture of echoed contract text tripped the regex.
+  const newCommit = !!headBefore && gitOut(["rev-parse", "HEAD"], TURN_DIR) !== headBefore;
+  if (realExit === 0 && looksLikeAuthDeath(ownOut, newCommit)) {
     effExit = 1;
-    const hit = AUTH_MARKER_RE.exec(ownOut)[0];
-    log(`\x1b[31mexit 0 but the turn output IS an auth failure — treating as FAILED (auth, "${hit}")\x1b[0m`);
+    authHit = AUTH_MARKER_RE.exec(ownOut)[0];
+    log(`\x1b[31mexit 0 but the turn output IS an auth failure — treating as FAILED (auth, "${authHit}")\x1b[0m`);
   }
   // #5481: the Inception/Mercury trap — exit 0 with a NULL completion. ERRF is the TOTAL output
   // capture, not just stderr: every seat's stdout is tee'd into it (`| tee -a ERRF` for the
@@ -562,7 +572,10 @@ async function runTurn(prompt, isFirst, trigger = "kickoff") {
     lastEmptyOutput = true;
     log("\x1b[31mexit 0 but the turn produced NO output — treating as FAILED (empty-output)\x1b[0m");
   }
-  telemetry({ ts: Date.now(), agent: AGENT, project: PROJ, turn: TURN, trigger, model: MODEL || "default", duration_ms: Date.now() - t0, exit: realExit, effExit, authFailed: effExit !== realExit, emptyOutput: lastEmptyOutput });
+  // #5868: the verdict rides the telemetry row so a classification survives the pane scrolling
+  // away — the same "classified X because Y" shape the runner logs, in the seat's jsonl forever.
+  const verdict = verdictFor(realExit, effExit, lastEmptyOutput, ownOut);
+  telemetry({ ts: Date.now(), agent: AGENT, project: PROJ, turn: TURN, trigger, model: MODEL || "cli-default", duration_ms: Date.now() - t0, exit: realExit, effExit, authFailed: effExit !== realExit, emptyOutput: lastEmptyOutput, verdict });
   log(`turn ended (exit ${realExit}${effExit !== realExit ? ` → effective ${effExit} (${lastEmptyOutput ? "empty-output" : "auth"})` : ""}, ${((Date.now() - t0) / 1000).toFixed(0)}s)`);
   if (realExit === 0 && effExit === 0) { cmuxStatus("idle", "#8a94a6", "robot"); herdrAgent("idle"); }   // finished this turn, waiting for the next
   // #5965 — TURN END. A clean exit means the seat is idle again; say so right away so the app stops

package/bin/crew.sh

@@ -733,7 +733,8 @@ echo "[crew] hub for $PROJ: $HUB_URL (baked into every seat; CREW_HUB=<url> over
 SCROOGE="$BUS_DIR/engine/bin/scrooge"
 [ -f "$SCROOGE" ] || SCROOGE="$(command -v scrooge 2>/dev/null || echo scrooge)"
 
-# resolve_model <agent> <provider> <task> <diff> -> echoes a runner-ready model id, or empty (→ CLI default).
+# resolve_model <agent> <provider> <task> <diff> -> echoes a provider-qualified model id.
+# A provider seat must never fall through to opencode's unrelated global default.
 resolve_model() {
   local agent="$1" provider="$2" task="$3" diff="$4" cands="" out=""
   cands="$(opencode models "$provider" 2>/dev/null | tr '\n' ' ')"
@@ -742,10 +743,16 @@ resolve_model() {
   else
     out="$(python3 "$SCROOGE" route --provider "$provider" -t "$task" -d "$diff" --json 2>/dev/null)"
   fi
-  [ -n "$out" ] || { echo "[crew] live model selection failed for $agent:$provider — CLI default" >&2; return 0; }
-  printf '%s' "$out" | python3 -c 'import json,sys
+  [ -n "$out" ] || { echo "[crew] live model selection failed for $agent:$provider — refusing opencode global default" >&2; return 1; }
+  out="$(printf '%s' "$out" | python3 -c 'import json,sys
 try: print(json.load(sys.stdin).get("qualified") or "")
-except Exception: pass' 2>/dev/null
+except Exception: pass' 2>/dev/null)"
+  [ -n "$out" ] || { echo "[crew] router returned no model for $agent:$provider — refusing opencode global default" >&2; return 1; }
+  [ "${out%%/*}" = "$provider" ] || {
+    echo "[crew] router selected $out outside $provider — refusing cross-provider fallback" >&2
+    return 1
+  }
+  printf '%s' "$out"
 }
 
 epoch_ms() { python3 -c 'import time;print(int(time.time()*1000))'; }
@@ -760,13 +767,21 @@ resolve_spec() {
   # into the launcher string. AGENT is set above and DIR is fixed, so this is the earliest safe point.
   reap_seat
   FIELD=""; [ "$SPEC" != "$AGENT" ] && FIELD="${SPEC#*:}"
-  [ "$AGENT" = "openrouter" ] && [ -z "$FIELD" ] && FIELD="openrouter"
+  # Bare native seats use their own CLI defaults. Bare opencode-hosted seats MUST name their
+  # provider implicitly: glm is the one non-obvious alias; every discovered/BYOM seat's label is
+  # its provider id. Leaving FIELD empty is what handed qwen/glm to opencode's global DeepSeek.
+  if [ -z "$FIELD" ]; then
+    case "$AGENT" in
+      codex|kimi|claude|gemini|dsh|opencode) ;;
+      glm) FIELD="zai-coding-plan" ;;
+      *) FIELD="$AGENT" ;;
+    esac
+  fi
   if [ -n "$FIELD" ]; then
     case "$FIELD" in
       */*) MODEL="$FIELD" ;;
-      *)   MODEL="$(resolve_model "$AGENT" "$FIELD" "$TASK" "$DIFF")"
-           if [ -n "$MODEL" ]; then echo "  → $AGENT: live model $MODEL ($FIELD · $TASK/$DIFF)"
-           else echo "  → $AGENT: '$FIELD' live selection unavailable — CLI default"; fi ;;
+      *)   MODEL="$(resolve_model "$AGENT" "$FIELD" "$TASK" "$DIFF")" || exit 1
+           echo "  → $AGENT: live model $MODEL ($FIELD · $TASK/$DIFF)" ;;
     esac
   fi
 }

package/bin/new.mjs

@@ -1,10 +1,12 @@
 #!/usr/bin/env node
 // trantor new — project genesis, the CLI half (#5862). One command stands a project up:
 //
-//   trantor new <name> [--from <git-url>] [--brief <file>] [--dir <path>] [--adopt] [--json]
+//   trantor new <name> [--from <git-url>] [--brief <file>] [--dir <parent>] [--adopt] [--json]
 //
-// It makes the directory under the dev root (TRANTOR_DEV_ROOT or ~/development), starts git on
-// main (or clones --from, or adopts an existing folder with --adopt), seeds CLAUDE.md from the
+// It makes the project directory at <parent>/<name> — --dir names the PARENT, never the project
+// directory itself (default parent: TRANTOR_DEV_ROOT or ~/development). The name is always
+// appended under it, so `--dir P` with name N creates P/N. Starts git on main (or clones --from,
+// or adopts an existing folder with --adopt), seeds CLAUDE.md from the
 // brief (verbatim brief + the trantor conventions block), installs the same auto-card hook as
 // `trantor init-hooks`, posts the brief as the hub project brief (POST /project — the same call
 // relay_project_brief makes), and opens the first card "genesis: <name>" on the new board.
@@ -17,7 +19,8 @@ import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync, append
 import { homedir } from "node:os";
 import { dirname, isAbsolute, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { ensureEnrolled, loadIdentity, signedPost } from "../hooks/lib/api.mjs";
+import { ensureEnrolled as enrollTofu, loadIdentity, signedPost } from "../hooks/lib/api.mjs";
+import { ensureEnrolled as enrollViaOwnerInvite } from "../lib/enroll.mjs";
 import { setAutonomy } from "../lib/autonomy.mjs";
 import { resolveHub, setProjectHub } from "../lib/project.mjs";
 
@@ -52,7 +55,7 @@ const flag = (n) => { const i = args.indexOf("--" + n); return i >= 0 ? args[i +
 const has = (n) => args.includes("--" + n);
 const json = has("json");
 const name = args.find(a => !a.startsWith("--"));
-if (!name) die("usage: trantor new <name> [--from <git-url>] [--brief <file>] [--dir <path>] [--adopt] [--json]");
+if (!name) die("usage: trantor new <name> [--from <git-url>] [--brief <file>] [--dir <parent>] [--adopt] [--json] — project lands at <parent>/<name>");
 if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(name)) die(`invalid project name "${name}" — letters, digits, dot, dash, underscore`);
 const from = flag("from");
 const briefFile = flag("brief");
@@ -120,10 +123,17 @@ const identity = loadIdentity(session);
 let card = null;
 let hubError = null;
 try {
-  await ensureEnrolled(session, identity, name);
+  // The genesis identity is BRAND NEW — it cannot write to a project on an enforce hub until the
+  // hub knows it. TOFU /enroll only works on a local loopback hub; a remote enforce hub refuses it
+  // (403 "tofu enrollment refused") and the genesis silently records nothing (#6049). So enroll the
+  // way crew seats do: the operator's owner key mints a project-scoped write invite and the genesis
+  // identity spends it. Only when NO owner key is configured (a loopback hub with no owner identity)
+  // do we fall back to the plain TOFU enroll.
+  const viaOwner = await enrollViaOwnerInvite(hub, identity, name, { timeoutMs: 8000 });
+  if (!viaOwner.ok && viaOwner.reason === "no-owner-key") await enrollTofu(session, identity, name);
   const briefForHub = (brief || `Genesis of ${name} — created by trantor new.`).slice(0, 600);
   const r1 = await signedPost("/project", { project: name, brief: briefForHub, by: session }, { session, project: name, timeoutMs: 8000 });
-  if (!r1.ok) throw new Error(`hub ${r1.status} on /project`);
+  if (!r1.ok) throw new Error(`hub ${r1.status} on /project${r1.json?.error ? `: ${r1.json.error}` : ""}`);
   const r2 = await signedPost("/task", {
     project: name,
     title: `genesis: ${name}`,
@@ -131,7 +141,7 @@ try {
     by: session,
     note: "project genesis — created by trantor new",
   }, { session, project: name, timeoutMs: 8000 });
-  if (!r2.ok) throw new Error(`hub ${r2.status} on /task`);
+  if (!r2.ok) throw new Error(`hub ${r2.status} on /task${r2.json?.error ? `: ${r2.json.error}` : ""}`);
   card = r2.json?.task?.id ?? null;
 } catch (e) {
   hubError = e instanceof Error ? e.message : String(e);
@@ -139,8 +149,10 @@ try {
 }
 
 // ── report ──────────────────────────────────────────────────────────────────────────────────────
+// dir is the created project directory <parent>/<name>; parent is the --dir (or default) root the
+// name was appended under — the two together state the parent contract explicitly.
 if (json) {
-  console.log(JSON.stringify({ name, dir, branch, hub, card }));
+  console.log(JSON.stringify({ name, parent: devRoot, dir, branch, hub, card }));
 } else {
   console.log(`✓ ${dir} (${branch}${from ? ", cloned" : adopt ? ", adopted" : ""})`);
   console.log(`✓ CLAUDE.md seeded${brief ? " from the brief" : " (no brief — add the project's what/why/goal)"}`);

package/bin/patrol.mjs

@@ -43,6 +43,11 @@ function rowMatchesRunner(row, runner) {
   return !rp || rp === runnerProject(runner);
 }
 
+function seatProvider(agent) {
+  if (["codex", "kimi", "claude", "gemini", "dsh", "opencode"].includes(agent)) return null;
+  return agent === "glm" ? "zai-coding-plan" : agent;
+}
+
 function sortedProjects(projects) {
   return [...projects].sort((a, b) => displayProject(a).localeCompare(displayProject(b)));
 }
@@ -76,6 +81,7 @@ export function buildPatrolReport(rawInventory = {}, reaped = [], { bus = busDir
   const workspaceIds = new Set(workspaces.map(w => String(w?.id || "")).filter(Boolean));
   const orphans = [];
   const ambiguous = [];
+  const warnings = [];
 
   for (const runner of runners) {
     if (isBusInternalRunner(runner, bus)) continue;
@@ -85,6 +91,18 @@ export function buildPatrolReport(rawInventory = {}, reaped = [], { bus = busDir
     } else if (!rows.some(row => rowMatchesRunner(row, runner))) {
       orphans.push({ type: "live-runner-without-row", project: p, agent: runner.agent, pid: runner.pid, dir: runner.dir });
     }
+    const expectedProvider = seatProvider(String(runner?.agent || ""));
+    const actualProvider = String(runner?.model || "").split("/")[0];
+    if (expectedProvider && actualProvider && actualProvider !== expectedProvider) {
+      warnings.push({
+        type: "seat-model-provider-mismatch",
+        project: p,
+        agent: runner.agent,
+        model: runner.model,
+        expectedProvider,
+        pid: runner.pid,
+      });
+    }
   }
 
   for (const ws of workspaces) {
@@ -124,7 +142,7 @@ export function buildPatrolReport(rawInventory = {}, reaped = [], { bus = busDir
     };
   }
 
-  return { projects: out, orphans, ambiguous, reaped };
+  return { projects: out, orphans, ambiguous, warnings, reaped };
 }
 
 function oldEnough(path, now, maxAgeMs) {
@@ -196,6 +214,10 @@ export function formatHuman(report) {
   for (const item of report.orphans) lines.push(`  - ${item.type}: ${displayProject(item.project)} ${item.agent || item.title || item.handle || item.id || ""}`.trimEnd());
   lines.push(`ambiguous: ${report.ambiguous.length}`);
   for (const item of report.ambiguous) lines.push(`  - ${item.type}: ${item.agent || item.title || item.dir || item.id || ""}`.trimEnd());
+  lines.push(`warnings: ${report.warnings?.length || 0}`);
+  for (const item of report.warnings || []) {
+    lines.push(`  - ${item.type}: ${displayProject(item.project)} ${item.agent} runs ${item.model}; expected ${item.expectedProvider}/*`);
+  }
   lines.push(`reaped: ${report.reaped.length}`);
   for (const item of report.reaped) lines.push(`  - ${item.type}: ${item.path || item.output || ""}`.trimEnd());
   return `${lines.join("\n")}\n`;

package/hooks/lib/resources.mjs

@@ -22,6 +22,16 @@ const TIMEOUT = 2000;                                            // contract: ev
 
 const busDir = () => process.env.RELAY_DATA_DIR || join(homedir(), ".agent-bus");
 
+function opencodeDefaultModel() {
+  try {
+    const home = process.env.HOME || homedir();
+    const configDir = process.env.XDG_CONFIG_HOME || join(home, ".config");
+    const config = JSON.parse(readFileSync(join(configDir, "opencode", "opencode.json"), "utf8"));
+    const model = config?.model;
+    return /^[^\s/]+\/[^\s/]+$/.test(model) ? String(model) : "";
+  } catch { return ""; }
+}
+
 // Run a subprocess, return stdout; "" on ANY failure (missing binary, nonzero exit, timeout).
 function run(cmd, args, env = {}) {
   try {
@@ -75,7 +85,7 @@ function psTable() {
   return rows;
 }
 
-// Live crew-runner processes → [{pid,agent,dir}]. Runner argv (crew.sh RUN_CMD) is
+// Live crew-runner processes → [{pid,agent,dir,model}]. Runner argv (crew.sh RUN_CMD) is
 // `node …/crew-runner.mjs <agent> <dir>` — dir is the LAST argument, so the regex is anchored
 // on end-of-string. project=null → all runners; project given → only runners whose dir resolves
 // to that project. Resolution is the lib/project.mjs walk (git-root basename, else dir basename)
@@ -84,6 +94,7 @@ function psTable() {
 export function liveRunners(project = null) {
   try {
     const out = [];
+    const globalModel = opencodeDefaultModel();
     for (const { pid, cmd } of psTable()) {
       const m = cmd.match(/crew-runner\.mjs\s+(\S+)\s+(\S+)\s*$/);
       if (!m) continue;
@@ -92,7 +103,13 @@ export function liveRunners(project = null) {
         const name = basename(gitRoot(dir) || dir);
         if (name !== project) continue;
       }
-      out.push({ pid, agent, dir });
+      // CREW_MODEL is fixed for the runner lifetime. Read only that named environment field —
+      // never return the rest of `ps eww`, which can contain provider credentials.
+      const envLine = run("ps", ["eww", "-p", String(pid), "-o", "command="]);
+      const pinnedModel = (envLine.match(/(?:^|\s)CREW_MODEL=([^\s]*)/) || [])[1] || "";
+      const model = pinnedModel || globalModel;
+      const modelSource = pinnedModel ? "crew" : (globalModel ? "opencode-global" : "");
+      out.push({ pid, agent, dir, model, modelSource });
     }
     return out;
   } catch { return []; }

package/lib/classify-failure.mjs

@@ -8,10 +8,18 @@
 // matched AUTH_MARKER_RE's bare "forbidden", and the codex lesson "retries burn quota" matched
 // the exhausted rule. Three fixes, one per failure mode:
 //   · stripPromptEcho — a prompt line reappearing in the err stream is the CLI REPLAYING what it
-//     was told, not the CLI speaking; classification sees only the CLI's own output.
+//     was told, not the CLI speaking; classification sees only the CLI's own output. The exact-
+//     match version (9b28036) caught nothing in the wild: the qwen specimen (turn 9, 2026-09-02,
+//     card #5868) echoed its CONTRACT — the #6049 wake text is ABOUT a hub 401, dense with "401",
+//     "unknown identity", "credentials" — wrapped in CLI framing no prompt line equals verbatim.
+//     The strip now normalizes (ANSI off, whitespace collapsed) and drops a line that CONTAINS a
+//     prompt line or is a wrapped FRAGMENT of one, so replay is caught however the CLI frames it.
 //   · looksLikeAuthDeath — the #5405 exit-0 escalation fires only on a SHORT error-only output
 //     (the opencode "401 Unauthorized" specimen is a couple of lines); a long output is a real
-//     answer, and a warning inside it must not fail the turn.
+//     answer, and a warning inside it must not fail the turn. AND never when the turn produced
+//     REAL WORK (a new commit): the qwen specimen exited 0, committed aa3c340, and its captured
+//     stream still held under 400 bytes of contract echo carrying "401" — a short capture is not
+//     proof of a dead turn, but a shipped commit is proof of a live one.
 //   · classifyFailure — "exhausted" demands an explicit quota/rate-limit message; the broad bare
 //     words ("credit", "balance", bare "insufficient") labelled ordinary prose on a dead turn and
 //     sent the operator to wait out a window that did not exist.
@@ -19,25 +27,58 @@ import { readFileSync } from "node:fs";
 
 export const AUTH_MARKER_RE = /unauthor|401|403|forbidden|invalid[ _-]?api[ _-]?key|authentication? failed|token expired/i;
 
-/** Prompt lines (≥40 chars — a short line carries no signature) echoed back verbatim by the CLI
- *  are replay, not speech. Returns the err stream with those lines removed. */
+/** Prompt lines (≥40 chars — a short line carries no signature) echoed back by the CLI are
+ *  replay, not speech. Echoes are rarely byte-identical (CLI framing, terminal wrapping, ANSI
+ *  colors — the exact-match strip caught nothing in the qwen #6049 specimen), so both sides are
+ *  normalized (ANSI stripped, whitespace collapsed) and a long line is dropped when it CONTAINS
+ *  a prompt line, IS a fragment of one, or contains a ≥40-char RUN of one — terminal wrapping
+ *  breaks the line but preserves long runs inside each wrapped piece. */
+const ECHO_RUN = 40;
 export function stripPromptEcho(errText, promptText) {
   const text = String(errText || "");
   if (!promptText) return text;
-  const echo = new Set(String(promptText).split("\n").filter(l => l.length >= 40));
-  return text.split("\n").filter(l => !(l.length >= 40 && echo.has(l))).join("\n");
+  const norm = (l) => String(l).replace(/\x1b\[[0-9;]*[A-Za-z]/g, "").replace(/\s+/g, " ").trim();
+  const prompts = String(promptText).split("\n").map(norm).filter(l => l.length >= 40);
+  if (!prompts.length) return text;
+  const hasRun = (p, n) => {
+    for (let i = 0; i + ECHO_RUN <= p.length; i++) if (n.includes(p.slice(i, i + ECHO_RUN))) return true;
+    return false;
+  };
+  return text.split("\n").filter(line => {
+    const n = norm(line);
+    // Short lines survive — no signature, nothing to match against.
+    if (n.length < 40) return true;
+    return !prompts.some(p => n.includes(p) || p.includes(n) || hasRun(p, n));
+  }).join("\n");
 }
 
 /** A real answer is long; an auth death is a couple of lines. The opencode specimen (#5405)
  *  printed its whole failure in under a hundred characters and produced nothing else. */
 export const OWN_OUTPUT_ANSWER_MIN = 400;
 
-/** The #5405 rule, refined by #5868: exit 0 + an auth-shaped marker means FAILED only when the
- *  CLI's own output is short enough to be JUST the error. */
-export function looksLikeAuthDeath(ownText) {
+/** The #5405 rule, refined twice by #5868: exit 0 + an auth-shaped marker means FAILED only when
+ *  the CLI's own output is short enough to be JUST the error — and NEVER when the turn did real
+ *  work (newCommit, checked by the runner via git): a shipped commit is a live turn, whatever the
+ *  captured stream happens to hold. */
+export function looksLikeAuthDeath(ownText, realWork = false) {
+  if (realWork) return false;
   return String(ownText || "").length < OWN_OUTPUT_ANSWER_MIN && AUTH_MARKER_RE.test(ownText);
 }
 
+/** The one-line verdict the seat's jsonl carries (#5868): why the runner judged the turn the way
+ *  it did, phrased exactly like the runner's own "classified X because Y" log — so a pane that
+ *  scrolls away loses nothing that the telemetry row needs to say. */
+export function verdictFor(realExit, effExit, emptyOutput, ownText) {
+  if (realExit === 0 && effExit === 0) return "classified success because exit 0 with CLI output";
+  if (realExit === 0 && effExit === 1) {
+    if (emptyOutput) return "classified empty-output because exit 0 with no output on either stream";
+    const m = AUTH_MARKER_RE.exec(String(ownText || ""));
+    return `classified auth because ${m ? m[0] : "auth marker"} in the CLI's own short output`;
+  }
+  const { reason, matched } = classifyFailure(realExit, String(ownText || ""), emptyOutput);
+  return `classified ${reason} because ${matched}`;
+}
+
 /** Classify one failed turn. Returns { reason, matched } — matched is the evidence excerpt the
  *  runner logs, so the next misclassification is diagnosable from the seat log alone. */
 export function classifyFailure(exit, errText, emptyOutput = false) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.18.30",
+  "version": "0.18.31",
   "type": "module",
   "bin": {
     "trantor": "bin/cli.mjs"
@@ -11,7 +11,7 @@
     "zod": "^4.4.3"
   },
   "scripts": {
-    "test": "node bin/slop-gate.mjs --surface desktop/src && node test.mjs && node test-scenarios.mjs && node test-failure.mjs && node test-redelivery.mjs && node test-crew-completion.mjs && node test-contracts.mjs && node test-autonomy.mjs && node test-integrate.mjs && node test-handoff.mjs && node test-handoff-summarizer.mjs && node test-baton-turn-boundary.mjs && node test-agents.mjs && node test-update.mjs && node test-handoff-guard.mjs && node test-baton-latest.mjs && node test-balances.mjs && node test-usage-live.mjs && node test-subagent-cost.mjs && node test-inbox.mjs && node test-inflight.mjs && node test-notify.mjs && node test-focus.mjs && node test-cardlog.mjs && node test-checklist.mjs && node test-relay-note.mjs && node test-reaper.mjs && node test-events.mjs && node test-proposals.mjs && node test-scrub.mjs && node test-store-delta.mjs && node test-message-re.mjs && node test-claims.mjs && node test-adopt.mjs && node test-summarize.mjs && node test-identity-core.mjs && node test-identity.mjs && node test-identity-instances.mjs && node test-duty.mjs && node test-duty-dark.mjs && node test-duty-seat.mjs && node test-discovery.mjs && node test-doctor.mjs && node test-crew-env.mjs && node test-desktop-transport.mjs && node test-crew-worktree.mjs && node test-crew-redact.mjs && node test-crew-classify.mjs && bash test-crew-herdr.sh && npm --prefix desktop run test --silent && node test-splitbrain.mjs && node test-overseer.mjs && node test-overseer-lib.mjs && node test-overseer-warn.mjs && node test-provider-keys.mjs && node test-provider-cli.mjs && node test-inbox-delivery.mjs && node test-identity-drift.mjs && node test-inbox-staleness.mjs && node test-seats.mjs && node test-seat-identity.mjs && node test-hub-routing.mjs && node test-hook-routing.mjs && node test-relay-wait.mjs && node test-dsh-seat.mjs && node test-kimi-bridge.mjs && node test-kimi-events.mjs && python3 engine/test-routing.py && node test-new.mjs && node test-reconcile.mjs && node test-resources.mjs && node test-patrol.mjs && node test-bridge.mjs && bash test-crew.sh"
+    "test": "node bin/slop-gate.mjs --surface desktop/src && node test.mjs && node test-scenarios.mjs && node test-failure.mjs && node test-redelivery.mjs && node test-crew-completion.mjs && node test-contracts.mjs && node test-autonomy.mjs && node test-integrate.mjs && node test-handoff.mjs && node test-handoff-summarizer.mjs && node test-baton-turn-boundary.mjs && node test-agents.mjs && node test-update.mjs && node test-handoff-guard.mjs && node test-baton-latest.mjs && node test-balances.mjs && node test-usage-live.mjs && node test-subagent-cost.mjs && node test-inbox.mjs && node test-inflight.mjs && node test-notify.mjs && node test-focus.mjs && node test-cardlog.mjs && node test-checklist.mjs && node test-relay-note.mjs && node test-reaper.mjs && node test-events.mjs && node test-proposals.mjs && node test-scrub.mjs && node test-store-delta.mjs && node test-message-re.mjs && node test-claims.mjs && node test-adopt.mjs && node test-summarize.mjs && node test-identity-core.mjs && node test-identity.mjs && node test-identity-instances.mjs && node test-duty.mjs && node test-duty-dark.mjs && node test-duty-seat.mjs && node test-discovery.mjs && node test-doctor.mjs && node test-crew-env.mjs && node test-desktop-transport.mjs && node test-crew-worktree.mjs && node test-crew-redact.mjs && node test-crew-classify.mjs && bash test-crew-herdr.sh && npm --prefix desktop run test --silent && node test-splitbrain.mjs && node test-overseer.mjs && node test-overseer-lib.mjs && node test-overseer-warn.mjs && node test-provider-keys.mjs && node test-provider-cli.mjs && node test-crew-model-defaults.mjs && node test-inbox-delivery.mjs && node test-identity-drift.mjs && node test-inbox-staleness.mjs && node test-seats.mjs && node test-seat-identity.mjs && node test-hub-routing.mjs && node test-hook-routing.mjs && node test-relay-wait.mjs && node test-dsh-seat.mjs && node test-kimi-bridge.mjs && node test-kimi-events.mjs && python3 engine/test-routing.py && node test-new.mjs && node test-reconcile.mjs && node test-resources.mjs && node test-patrol.mjs && node test-bridge.mjs && bash test-crew.sh"
   },
   "description": "The hub-world for AI agent crews — orchestrate Claude Code, Codex, GLM, Kimi, DeepSeek & any OpenRouter model as live crews with a plan-aware Advisor, a Kanban/flow command center, a testing gate, and an economics brain (Scrooge).",
   "files": [