trantor 0.18.4 → 0.18.6

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.18.4",
+  "version": "0.18.6",
   "description": "Trantor \u2014 the hub-world for AI agent crews: live message bus, presence, project Kanban/flow board + crew orchestration for independent AI coding agents (Claude, Codex, Gemini, Kimi, DeepSeek)",
   "mcpServers": {
     "relay": {

package/bin/cli.mjs

@@ -4,7 +4,7 @@
 import { spawn } from "node:child_process";
 import { join, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
-import { readFileSync } from "node:fs";
+import { readFileSync, existsSync } from "node:fs";
 
 const ROOT = dirname(dirname(fileURLToPath(import.meta.url)));
 const [, , cmd, ...args] = process.argv;
@@ -138,9 +138,37 @@ switch (cmd) {
     else console.error(`Enrollment failed: ${j.error || r.statusText}`);
     break;
   }
+  // A BROWSER CANNOT READ AN ENFORCE-MODE HUB. The page itself is served (200), but every data
+  // endpoint answers 401 to an unsigned request — /projects, /tasks, /peers — because a browser has
+  // no keypair and nothing in a webview can safely hold one. So the dashboard renders as an empty
+  // shell with no projects, which reads as "the hub is broken" when the hub is fine and refusing
+  // correctly. That is exactly what happened to a crew launch on 2026-08-26.
+  //
+  // The desktop app is the surface that works: it signs every request in Rust, which is also why
+  // the webview never touches a key. Prefer it, and when it is missing say plainly why the browser
+  // will look empty rather than opening one and letting the operator draw the wrong conclusion.
   case "ui": {
-    let url = "http://127.0.0.1:4477";
-    try { url = JSON.parse(readFileSync(join(process.env.HOME || "", ".agent-bus", "config.json"), "utf8")).url || url; } catch {}
+    const { resolveHubInfo } = await import(join(ROOT, "lib/project.mjs"));
+    const { resolveProject } = await import(join(ROOT, "lib/project.mjs"));
+    const url = resolveHubInfo(resolveProject(process.cwd())).url;
+
+    let authMode = "";
+    try {
+      const r = await fetch(`${url}/health`, { signal: AbortSignal.timeout(5000) });
+      authMode = String((await r.json()).authMode || "");
+    } catch { /* hub unreachable — fall through and let the browser show that */ }
+
+    const hasApp = process.platform === "darwin" && existsSync("/Applications/Trantor.app");
+    if (authMode === "enforce" && hasApp) {
+      spawn("open", ["-a", "Trantor"], { stdio: "ignore", detached: true }).unref();
+      console.log(`dashboard → Trantor.app (${url} is auth:enforce — a browser cannot sign, so it would show an empty board)`);
+      break;
+    }
+    if (authMode === "enforce") {
+      console.log(`⚠ ${url} is auth:enforce. A browser cannot sign its requests, so the board will be EMPTY —`);
+      console.log(`  every data endpoint returns 401. Install the desktop app instead: trantor app install`);
+      console.log(`  Opening it anyway so you can see for yourself…`);
+    }
     spawn(process.platform === "darwin" ? "open" : "xdg-open", [url], { stdio: "ignore", detached: true }).unref();
     console.log(`dashboard → ${url}`);
     break;

package/bin/doctor.mjs

@@ -152,7 +152,7 @@ if (!installed) warn("no crew CLIs found", "install at least one of: codex, gemi
 //   2. ~/.agent-bus/.env      — the CREW layer (seats: opencode/deepseek/openrouter/dsh)
 //   3. ~/.token-scrooge/.env  — the SCROOGE layer (cheap-model grunt routing)
 section("provider keys (who spends on what)");
-const KEY_VARS = ["DEEPSEEK_API_KEY", "OPENROUTER_API_KEY", "MOONSHOT_API_KEY", "ZAI_API_KEY", "OPENAI_API_KEY", "GEMINI_API_KEY", "XAI_API_KEY"];
+const KEY_VARS = ["DEEPSEEK_API_KEY", "OPENROUTER_API_KEY", "MOONSHOT_API_KEY", "ZAI_API_KEY", "OPENAI_API_KEY", "GEMINI_API_KEY", "XAI_API_KEY", "INCEPTION_API_KEY"];
 // Only some of these are a CREW credential. A seat that authenticates through its own config never
 // reads the env var at all, so a shared value there costs nothing and flagging it is noise:
 //   glm    → opencode.json provider["zai-coding-plan"].options.apiKey  (and a coding plan is flat
@@ -164,7 +164,15 @@ const KEY_VARS = ["DEEPSEEK_API_KEY", "OPENROUTER_API_KEY", "MOONSHOT_API_KEY",
 // which is how a doctor becomes something you skip.
 const OPENCODE_CFG = read(join(H, ".config", "opencode", "opencode.json")) || {};
 const SEAT_ENV_VARS = { DEEPSEEK_API_KEY: "deepseek", OPENROUTER_API_KEY: "openrouter" };
+const ENV_TEMPLATE = /\{env:([A-Z0-9_]+)\}/;
+// Every var any opencode provider resolves from the environment, read out of opencode's own config.
+const opencodeEnvVars = new Set();
+for (const cfg of Object.values(OPENCODE_CFG?.provider || {})) {
+  const m = ENV_TEMPLATE.exec(String(cfg?.options?.apiKey || ""));
+  if (m) opencodeEnvVars.add(m[1]);
+}
 const crewUsesVar = (v) => {
+  if (opencodeEnvVars.has(v)) return true;      // a seat resolves this var at run time — stated by the config itself
   const provider = SEAT_ENV_VARS[v];
   if (!provider) return false;
   const configured = OPENCODE_CFG?.provider?.[provider]?.options?.apiKey;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.18.4",
+  "version": "0.18.6",
   "type": "module",
   "bin": {
     "trantor": "bin/cli.mjs"

package/skills/crew/SKILL.md

@@ -36,7 +36,11 @@ explicit EVENT/INTERFACE CONTRACT — cross-agent bugs come from contract drift.
 2. One card per package: `relay_task_add(title, assignee, difficulty, model)` — set `model`
    to the advisor-routed model (or the CLI's default name); difficulty + model show as badges
    on the card. Assignees: `codex:<project>` etc. Keep one for yourself.
-3. Open the dashboard: `trantor ui` (or `open -na "Google Chrome" --args --new-window <hub-url>`)
+3. Open the dashboard: **`trantor ui`** — which opens the **desktop app**, not a browser.
+   Do NOT open the hub URL in a browser. A remote hub runs `auth:enforce`, and a browser cannot
+   sign its requests: the page loads but `/projects`, `/tasks` and `/peers` all return 401, so the
+   board renders EMPTY. That looks like a broken hub and is not one. The desktop app signs every
+   request natively, which is the whole reason it exists. If it is missing: `trantor app install`.
 
 ## Phase 2 — fire up the crew (with the Advisor's models)
 **Each crew card from `relay_advise` carries a `launch` spec — run it VERBATIM; never invent a