trantor 0.18.68 → 0.18.70

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.18.68",
+  "version": "0.18.70",
   "description": "Trantor — the hub-world for AI agent crews: live message bus, presence, project Kanban/flow board + crew orchestration for independent AI coding agents (Claude, Codex, Gemini, Kimi, DeepSeek)",
   "mcpServers": {
     "relay": {

package/bin/baton.mjs

@@ -3,12 +3,12 @@
 // a whole-session handoff (auto-summary + verbatim in-flight tail), opens a fresh self-announcing
 // session, and closes THIS window once it takes over. Run from inside the session you want to hand
 // off. (The richer MODEL-authored handoff is the /trantor:handoff skill.)
-import { readdirSync, statSync, fstatSync } from "node:fs";
+import { readdirSync, statSync } from "node:fs";
 import { join, basename, dirname } from "node:path";
 import { homedir } from "node:os";
 import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
-import { writeHandoff, spawnBaton, resolveHandoffSurface, armBaton, contextUsage, controllingTty, turnInFlight, armMaxMs, sessionProcessState } from "../hooks/lib/handoff.mjs";
+import { writeHandoff, spawnBaton, resolveHandoffSurface, armBaton, contextUsage, controllingTty, turnInFlight, armMaxMs, sessionProcessState, stdinCarriesMarkdown } from "../hooks/lib/handoff.mjs";
 
 // #6074: the skill path (write-handoff.mjs) and this CLI path must share ONE resolution of which
 // project this is and where the session lives. Both call resolveHandoffSurface; the name comes
@@ -22,18 +22,11 @@ const project = resolved.project;
 // cwd that cd'd somewhere else: a handoff record must carry the transcript it was written from.
 const sessionDir = resolved.projectDir;
 
-// Model-authored handoffs ride THIS binary too (`trantor handoff` — always the global install's
-// CURRENT code, never the plugin-cache copy a session booted with, the stale-0.18.20 bug). A piped
-// stdin (a heredoc, a cat, `<<HANDOFF`) means "here is the handoff markdown" — exactly the skill's
-// contract — so forward to write-handoff.mjs in the SAME package (same version, same resolution)
-// and exit with its status. --latest forwards too. A true pipe is a FIFO; a TTY and /dev/null are
-// character devices, so a plain `trantor handoff` typed at a prompt (or run by a hook with stdin
-// at /dev/null) keeps the auto-summary behavior. Detection must NOT be `!process.stdin.isTTY` —
-// that misreads /dev/null as a handoff and errors where auto-summary used to work.
-function stdinIsPipe() {
-  try { return fstatSync(0).isFIFO(); } catch { return false; }
-}
-if (stdinIsPipe() || process.argv.includes("--latest")) {
+// Model-authored handoffs ride THIS binary too — always the global install's CURRENT code, never
+// the plugin-cache copy a session booted with (the stale-0.18.20 bug). Markdown on stdin means
+// "here is the handoff", so forward to write-handoff.mjs in the SAME package; --latest forwards too.
+// What counts as markdown, and why /dev/null must not: stdinCarriesMarkdown in hooks/lib (#8459).
+if (stdinCarriesMarkdown() || process.argv.includes("--latest")) {
   const helper = join(dirname(fileURLToPath(import.meta.url)), "write-handoff.mjs");
   const child = spawn(process.execPath, [helper, ...process.argv.slice(2)], { stdio: ["inherit", "inherit", "inherit"] });
   child.on("exit", (c) => process.exit(c ?? 1));
@@ -64,12 +57,10 @@ function autoBaton() {
   // The transcript's filename IS the writing session's id — record it, or an orchestrator-thread
   // handoff carries no writer and the baton-hold + map-follow logic in sessionstart.mjs can't fire.
   const sessionId = transcript ? basename(transcript, ".jsonl") : "";
-  // #6528: WHO pulled the trigger. A TTY stdin means a human typed `trantor handoff` at a prompt;
-  // the app chain (lib.rs handoff_now) and hooks spawn this binary with piped stdio. The operator's
-  // own typed command keeps the storm-guard bypass (force:true — "manual = intentional"); every
-  // invoked path goes through the boundary gate and the hub's storm guard like any auto handoff.
-  // --reason rides through from the app (`--reason clicked|countdown|unattended`) so the RECORD
-  // finally names the real trigger instead of laundering every banner fire into "manual-cli".
+  // #6528: WHO pulled the trigger. A TTY stdin is a human typing it; the app chain (handoff_now)
+  // and hooks spawn this with piped stdio. Only the typed command keeps the storm-guard bypass
+  // (manual = intentional); every invoked path goes through the boundary gate like an auto handoff.
+  // --reason rides through from the app so the record names the real trigger, not "manual-cli".
   const reasonArg = (() => {
     const i = process.argv.indexOf("--reason");
     const v = i >= 0 ? String(process.argv[i + 1] || "").trim() : "";

package/bin/write-handoff.mjs

@@ -2,23 +2,18 @@
 // Save a model-authored handoff (piped on stdin) for this project; the next session auto-loads it.
 // With --baton: ALSO open a fresh self-announcing session and close THIS window once it takes over
 // (the one-command manual baton behind /trantor:handoff). Without it: just write the file (legacy).
-import { writeFileSync, readFileSync, existsSync, mkdirSync, readdirSync } from "node:fs";
-import { join, basename } from "node:path";
-import { homedir, hostname } from "node:os";
-import { execSync } from "node:child_process";
-import { spawnBaton, handoffMode, resolveHandoffSurface, attachState, resolveSeat, resolveHandoffCard } from "../hooks/lib/handoff.mjs";
+import { readFileSync, existsSync, mkdirSync, readdirSync } from "node:fs";
+import { join } from "node:path";
+import { writeHandoff, spawnBaton, resolveHandoffSurface } from "../hooks/lib/handoff.mjs";
 import { handoffDir } from "../lib/project.mjs";
 
 const baton = process.argv.includes("--baton");
-// --latest: pass the baton on a handoff ALREADY on disk. Without it the only route was "compose a
-// fresh one on stdin", so a session that had just written a 5KB handoff had to write it again to
-// hand it over — 2m28s of regenerated prose on a live scribe session, 2026-08-24.
+// --latest: pass the baton on a handoff ALREADY on disk — composing it again cost 2m28s of
+// regenerated prose on a live scribe session (drill: test/handoff/test-baton-latest.mjs).
 const latest = process.argv.includes("--latest");
 // #6074: ONE resolver for which project this is and where the session lives — shared with
-// bin/baton.mjs (the `trantor handoff` CLI path) so the two cannot diverge. The name comes from
-// the session's registration (TRANTOR_ORCH / RELAY_PROJECT / orch-sessions.txt) before the cwd;
-// the witnessed crebral-scribe/ios handoff recorded project "ios" from a subfolder cwd and never
-// found its pane.
+// bin/baton.mjs so the two cannot diverge. The name comes from the registration
+// (TRANTOR_ORCH / RELAY_PROJECT / orch-sessions.txt) before the cwd; a subfolder cwd never renames the project.
 const resolved = resolveHandoffSurface({ sessionId: process.env.CLAUDE_SESSION_ID || "" });
 const project = resolved.projectDir;
 const name = resolved.project;
@@ -37,8 +32,6 @@ if (!latest) {
 // directly, so an AGENT_BUS_DIR install wrote where nothing would look.
 const dir = handoffDir();
 if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
-const stamp = (() => { try { return execSync("date +%s", { encoding: "utf8" }).trim(); } catch { return String(process.pid); } })();
-let git = ""; try { git = execSync("git -C " + JSON.stringify(project) + " status --short 2>/dev/null | head -30", { encoding: "utf8" }).trim(); } catch {}
 // --latest short-circuits everything below: find this project's newest UNCONSUMED handoff and hand
 // that over, untouched.
 if (latest) {
@@ -59,18 +52,19 @@ if (latest) {
   process.exit(0);
 }
 
-// The manual skill path opens the §5 ledger with WRITTEN like every other writer (#5642), and
-// carries the same interface the hooks-side records have: transcript_path ("" — the summary IS
-// the model's own words), mode (attended|unattended, #5648).
-const rec = { id: `${name}-${stamp}`, project, projectName: name, machine: hostname(), trigger: baton ? "manual-baton" : "manual-skill", stamp: Number(stamp) || 0, summary: summary.trim() || "(empty)", transcript_path: "", mode: handoffMode(name), gitStatus: git, consumed: false, states: [{ state: "written", ts: Number(stamp) || 0, by: baton ? "manual-baton" : "manual-skill" }] };
-// The structured working state rides beside the prose (TDD §4.5), dark behind
-// TRANTOR_STATE_HANDOFF. The manual path gets it for the same reason the hook path does: this
-// record is what the successor loads, and `summary` here IS the model's own handoff — the richest
-// STATE block there is.
-const seat = resolveSeat(name);
-attachState(rec, { project: name, seat, card: resolveHandoffCard({ projectName: name, seat }), worktree: project });
-const file = join(dir, `${rec.id}.json`);
-writeFileSync(file, JSON.stringify(rec, null, 2));
+// ONE WRITER (#8263): every guarantee CONTRACT-hooks states for "a handoff record" — the read-first
+// floor, verifyGates, the sub-agent manifest, supersedeOlderHandoffs, uncapped persistence — lives
+// in writeHandoff; the literal record assembled here reached none of them. Only trigger,
+// transcript_path "" and force (the command IS the intent) differ.
+const { file } = writeHandoff({
+  projectDir: project,
+  projectName: name,
+  sessionId: "",
+  transcript: "",
+  trigger: baton ? "manual-baton" : "manual-skill",
+  summary: summary.trim(),
+  force: true,
+});
 console.log(`handoff saved: ${file}`);
 
 if (baton) {

package/hooks/lib/handoff.mjs

@@ -649,11 +649,12 @@ export function writeHandoff({ projectDir, sessionId, transcript, trigger, summa
     else if (r.json && r.json.allow === false) return { skipped: true, reason: r.json.reason || "storm-guard", sinceSec: r.json.sinceSec };
   }
   if (!existsSync(HANDOFF_DIR)) mkdirSync(HANDOFF_DIR, { recursive: true });
-  // #5648: an automatic digest must never recompose+supersede a FRESH model-authored handoff.
-  // If one exists (<15min, unconsumed), point the baton at THAT and write nothing — the caller's
-  // spawn path proceeds on the authored handoff exactly as if it had just written it.
+  // #5648: an automatic digest must never recompose+supersede a FRESH model-authored handoff —
+  // if one exists (<15min, unconsumed), point the baton at THAT and write nothing, so the caller's
+  // spawn path proceeds on the authored handoff exactly as if it had just written it. #8263: the
+  // defer keys on the TRIGGER — manual-skill/manual-baton IS the model's newer words and must land.
   const fresh = freshAuthoredHandoff(projectName);
-  if (fresh) return { deferred: true, file: join(HANDOFF_DIR, `${fresh.id}.json`), record: fresh };
+  if (fresh && !MANUAL_TRIGGERS.includes(trigger)) return { deferred: true, file: join(HANDOFF_DIR, `${fresh.id}.json`), record: fresh };
   const stamp = nowSec() || Date.now();
   let gitStatus = "";
   try { gitStatus = execSync("git -C " + JSON.stringify(projectDir) + " status --short 2>/dev/null | head -30", { encoding: "utf8" }).trim(); } catch {}
@@ -887,6 +888,14 @@ export function pathsReadIn(transcriptPath, paths) {
   return { read, missed: want.filter(p => !read.includes(p)) };
 }
 
+/** Markdown on stdin, or a bare `trantor handoff`? A heredoc is a TEMP FILE, not a FIFO, and an
+ *  isFIFO()-only check discarded the model's handoff while printing "handoff armed" (#8459).
+ *  Character devices stay out: that is the TTY and the /dev/null a hook runs with.
+ */
+export function stdinCarriesMarkdown(fd = 0) {
+  try { const st = fstatSync(fd); return st.isFIFO() || st.isFile(); } catch { return false; }
+}
+
 // The self-announcing fresh session command (single-quoted so it survives osascript→shell un-escaped).
 // Brevity is the point, but #8162 found it had become permission not to READ: the summary is injected
 // at SessionStart, so a 3-sentence recap is producible without opening a file. The order is now

package/hooks/pricing.mjs

@@ -1,23 +1,31 @@
 // trantor — Anthropic API pricing, the single source of truth for the NOTIONAL dollar cost of a
 // Claude Code sub-agent's token usage (it's "notional" because on a Pro/Max plan those tokens are
 // plan-covered, not billed — we still want the number). $/MTok. Re-confirm before trusting old reports.
-export const PRICING_AS_OF = "2026-06";
+export const PRICING_AS_OF = "2026-09";
 
 // in/out = input/output; cw5m/cw1h = cache-WRITE at the 5-minute / 1-hour TTL; cr = cache-READ.
 // (cache write 5m = 1.25× input, 1h = 2× input, read = 0.1× input — encoded directly here.)
 export const ANTHROPIC_PRICING = {
-  opus:        { in: 5,  out: 25, cw5m: 6.25,  cw1h: 10, cr: 0.5 },
-  sonnet:      { in: 3,  out: 15, cw5m: 3.75,  cw1h: 6,  cr: 0.3 },
+  opus:        { in: 5,  out: 25, cw5m: 6.25,  cw1h: 10, cr: 0.5 },   // Opus 5 / 4.8 / 4.7 / 4.6
+  "opus-5-5":  { in: 4,  out: 20, cw5m: 5,     cw1h: 8,  cr: 0.2 },   // cheaper than Opus 5, and its cache read is 0.05× input, not 0.1×
+  sonnet:      { in: 2,  out: 10, cw5m: 2.5,   cw1h: 4,  cr: 0.2 },   // Sonnet 5
+  "sonnet-4":  { in: 3,  out: 15, cw5m: 3.75,  cw1h: 6,  cr: 0.3 },   // Sonnet 4 / 4.5 / 4.6
   haiku:       { in: 1,  out: 5,  cw5m: 1.25,  cw1h: 2,  cr: 0.1 },
-  "opus-4-1":  { in: 15, out: 75, cw5m: 18.75, cw1h: 30, cr: 1.5 }, // legacy numbering — far pricier
+  fable:       { in: 10, out: 50, cw5m: 12.5,  cw1h: 20, cr: 0.25 },  // Fable 5 / 5.1, cache read 0.025× input
+  "opus-4-1":  { in: 15, out: 75, cw5m: 18.75, cw1h: 30, cr: 1.5 },   // legacy numbering — far pricier
 };
 
 // Map a transcript model id ("claude-opus-4-8", "claude-sonnet-4-6", …) to a price tier, or null.
+// MOST SPECIFIC FIRST: a generic includes("opus") priced the default Opus 5.5 off the Opus 5 tier (#8443).
+// An unrecognised version stays null — costUsd:null has a reporting path, a wrong dollar figure does not.
 export function tierFor(model) {
   const m = String(model || "").toLowerCase();
   if (/opus-4-1\b|opus-4\.1/.test(m)) return "opus-4-1";
-  if (m.includes("opus")) return "opus";
-  if (m.includes("sonnet")) return "sonnet";
+  if (/opus-5-5\b|opus-5\.5/.test(m)) return "opus-5-5";
+  if (/opus-(5|4-8|4-7|4-6|4-5)\b/.test(m)) return "opus";
+  if (/sonnet-4(-[0-9]+)?\b/.test(m)) return "sonnet-4";
+  if (/sonnet-5\b/.test(m)) return "sonnet";
+  if (m.includes("fable") || m.includes("mythos")) return "fable";
   if (m.includes("haiku")) return "haiku";
   return null; // unknown → caller emits costUsd:null + a costNote rather than guessing
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.18.68",
+  "version": "0.18.70",
   "type": "module",
   "bin": {
     "trantor": "bin/cli.mjs"