trantor 0.18.88 → 0.18.90

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.18.88",
+  "version": "0.18.90",
   "description": "Trantor — the hub-world for AI agent crews: live message bus, presence, project Kanban/flow board + crew orchestration for independent AI coding agents (Claude, Codex, Gemini, Kimi, DeepSeek)",
   "mcpServers": {
     "relay": {

package/bin/drill-report.mjs

@@ -60,6 +60,7 @@ export class DrillReport {
 
   exitCode() {
     // Manual recipes stay visible as SKIP; only missing/failed proof or a refused close is red.
+    // "gone" is neither: the seam proved, the card just isn't on the board anymore (#11498).
     return Object.values(this.results()).some(result => result.status === "fail" || result.closure.startsWith("failed:")) ? 1 : 0;
   }
 
@@ -70,11 +71,18 @@ export class DrillReport {
         id: Number(id), project: this.project, by: this.session, status: "done",
         note: `Drill: trantor drill PASS\n${result.evidence.join("\n")}`.slice(0, 2000),   // "Drill:" prefix: the hub's done gate (#6452) reads it as the drill line
       }, { project: this.project, session: this.session, timeoutMs: 15000 });
+      // A 404 on /task/update is the hub saying the card isn't on the board — the fleet cap deletes
+      // old cards (#11142), so a green drill can hold a stale map. That is not a failed seam: record
+      // it as gone and stay green. Any other refusal (403 cross-project, 409 done-gate, 500) is a
+      // real hub "no" and stays red (#11498). Never renumber the map to chase new card ids.
       this.closures[id] = response.ok && response.json?.task?.status === "done"
         && response.json.task.id === Number(id) && response.json.task.project === this.project
-        ? "done" : `failed: hub ${response.status} ${response.json?.error || "did not confirm done"}`;
+        ? "done"
+        : response.status === 404 && response.json?.error === "no such task" ? "gone: card no longer on the board"
+        : `failed: hub ${response.status} ${response.json?.error || "did not confirm done"}`;
       this.write();
     }
-    return Object.values(this.closures).every(value => value === "done");
+    // "gone" closures are not failures — the verdict must not red on a stale map.
+    return Object.values(this.closures).every(value => !value.startsWith("failed:"));
   }
 }

package/bin/drill-report.test.mjs

@@ -3,6 +3,7 @@ import assert from "node:assert/strict";
 import { mkdtempSync, mkdirSync, readFileSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { createServer, createConnection } from "node:net";
+import { createServer as createHttpServer } from "node:http";
 import { DrillReport } from "./drill-report.mjs";
 import { CARD_STEPS, findHandoff } from "./drill-surface.mjs";
 import { appVerdict, startDrillHub, stopChild, checkSocketHome } from "./drill-seams.mjs";
@@ -72,12 +73,14 @@ test("signed closer on an enforce hub: complete evidence closes, partial/failure
       assert.equal(blocked.results()[blockedId].status, status);
       assert.equal((await signedGet("/tasks?project=trantor")).json.tasks.find(row => row.id === blockedId).status, "testing");
     }
+    // #11498: a green seam mapped to a card the board no longer has (the fleet cap deletes old
+    // cards, #11142) — the hub's 404 "no such task" is a stale map, recorded as gone, never red.
     const missing = new DrillReport({ 999999: { steps: ["step"], autoClose: true } }, path, { project, session });
     missing.record("step", "pass", "proof");
     missing.complete("step");
-    assert.equal(await missing.closePassed(), false);
-    assert.match(missing.results()[999999].closure, /failed: hub 404/);
-    assert.equal(missing.exitCode(), 1);
+    assert.equal(await missing.closePassed(), true);
+    assert.equal(missing.results()[999999].closure, "gone: card no longer on the board");
+    assert.equal(missing.exitCode(), 0);
     const fresh = new DrillReport({ [id]: { steps: ["one"], autoClose: true } }, path, { project, session });
     assert.equal(fresh.results()[id].status, "fail", "a rerun cannot inherit old PASS evidence");
   } finally {
@@ -88,6 +91,61 @@ test("signed closer on an enforce hub: complete evidence closes, partial/failure
   }
 });
 
+test("gone vs refused (#11498): a 404 no-such-task close is green, any other refusal stays red", async () => {
+  const out = join(import.meta.dirname, "..", ".agent-bus-out");
+  mkdirSync(out, { recursive: true });
+  const world = mkdtempSync(join(out, "refusal-test-"));
+  const bus = join(world, "bus");
+  mkdirSync(bus, { recursive: true });
+  // A stub hub that refuses per card id: 777 is gone (404 no-such-task, the fleet cap's answer,
+  // #11142), 4242 is a cross-project refusal, 5150 a server error — the closes a drill must keep red.
+  const answers = { 777: [404, "no such task"], 4242: [403, "cross-project writes are refused"], 5150: [500, "hub exploded"] };
+  const stub = createHttpServer((req, res) => {
+    let body = "";
+    req.on("data", d => { body += d; });
+    req.on("end", () => {
+      let id = null; try { id = JSON.parse(body).id; } catch {}
+      const [code, error] = answers[id] || [404, "no such task"];
+      res.writeHead(code, { "content-type": "application/json" });
+      res.end(JSON.stringify({ error }));
+    });
+  });
+  await new Promise(resolve => stub.listen(0, "127.0.0.1", resolve));
+  const saved = { ...process.env };
+  Object.assign(process.env, { RELAY_URL: `http://127.0.0.1:${stub.address().port}`, AGENT_BUS_DIR: bus, RELAY_SESSION: "drill:trantor", RELAY_PROJECT: "trantor" });
+  const ctx = { project: "trantor", session: "drill:trantor" };
+  try {
+    const report = (id) => {
+      const r = new DrillReport({ [id]: { steps: ["step"], autoClose: true } }, join(world, `result-${id}.json`), ctx);
+      r.record("step", "pass", "proof", "real evidence");
+      r.complete("step");
+      return r;
+    };
+    const gone = report(777);
+    assert.equal(await gone.closePassed(), true, "404 no-such-task is a stale map, not a failed seam");
+    assert.equal(gone.results()[777].closure, "gone: card no longer on the board");
+    assert.equal(gone.exitCode(), 0);
+
+    // gone + refused together: one real hub refusal among gones still reds the drill
+    const mixed = new DrillReport({ 777: { steps: ["step"], autoClose: true }, 4242: { steps: ["step"], autoClose: true } }, join(world, "result-mixed.json"), ctx);
+    for (const id of [777, 4242]) { mixed.record("step", "pass", "proof", "real evidence"); mixed.complete("step"); }
+    assert.equal(await mixed.closePassed(), false);
+    assert.equal(mixed.results()[777].closure, "gone: card no longer on the board");
+    assert.match(mixed.results()[4242].closure, /^failed: hub 403/);
+    assert.equal(mixed.exitCode(), 1);
+
+    const dead = report(5150);
+    assert.equal(await dead.closePassed(), false, "a server error is a real refusal");
+    assert.match(dead.results()[5150].closure, /^failed: hub 500/);
+    assert.equal(dead.exitCode(), 1);
+  } finally {
+    for (const key of Object.keys(process.env)) if (!(key in saved)) delete process.env[key];
+    Object.assign(process.env, saved);
+    stub.close();
+    rmSync(world, { recursive: true, force: true });
+  }
+});
+
 test("app proof requires every leg and rejects skipped key targets", () => {
   assert.deepEqual(CARD_STEPS[6317].steps, ["S6-key-post", "S6-key-throw"]);
   assert.equal(appVerdict("ask", "ask-drill PASS:"), false);

package/bin/keys.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 // trantor keys — identity private keys in the macOS Keychain instead of plaintext files (#11370).
-//   status [--json] · migrate [--dry-run] [--json] · prune [--apply] [--idle-days N]
+//   status [--json] · migrate [name...] [--include-tests] [--dry-run] [--json] · prune [--apply] [--idle-days N]
 // migrate copies each file-held key into the Keychain (service trantor-identity), proves a
 // signature round-trip, and only then rewrites the file as a pubkey-only stub. Keys are never printed.
 import { readFileSync } from "node:fs";
@@ -15,7 +15,7 @@ const verb = args[0] || "status";
 const JSON_MODE = args.includes("--json");
 const C = { dim: "\x1b[2m", grn: "\x1b[32m", yel: "\x1b[33m", red: "\x1b[31m", off: "\x1b[0m" };
 const usage = () => {
-  console.error("usage: trantor keys status [--json] | migrate [--dry-run] [--json] | prune [--apply] [--idle-days N] [--json]");
+  console.error("usage: trantor keys status [--json] | migrate [name...] [--include-tests] [--dry-run] [--json] | prune [--apply] [--idle-days N] [--json]");
   process.exit(1);
 };
 const tilde = (p) => String(p).replace(process.env.HOME || "", "~");
@@ -37,14 +37,22 @@ function status() {
 
 function migrate() {
   const dryRun = args.includes("--dry-run");
-  const r = migrateKeysToKeychain({ dryRun });
-  if (JSON_MODE) { console.log(JSON.stringify(r, null, 2)); return; }
-  if (!r.usable) {
+  const flags = new Set(["--dry-run", "--json", "--include-tests"]);
+  const names = [];
+  for (const arg of args.slice(1)) {
+    if (flags.has(arg)) continue;
+    if (arg.startsWith("--")) throw new Error(`unknown migrate option: ${arg}`);
+    names.push(arg);
+  }
+  const r = migrateKeysToKeychain({ dryRun, names, includeTests: args.includes("--include-tests") });
+  if (JSON_MODE) { console.log(JSON.stringify(r, null, 2)); if (r.failed.length) process.exitCode = 1; return; }
+  if (!r.usable && !dryRun) {
     console.log("no Keychain on this platform (or TRANTOR_NO_KEYCHAIN=1) — identity keys stay in files; nothing to do");
     return;
   }
   const did = dryRun ? "would move" : "moved";
   console.log(`${dryRun ? `${C.dim}dry run${C.off} · ` : ""}keychain service: ${r.service}`);
+  console.log(`skipped ${r.skippedTests} test identities (use --include-tests to include them)`);
   for (const n of r.moved) console.log(`  ${C.grn}✓${C.off} ${did} ${n}${dryRun ? "" : " (file is now a pubkey-only stub)"}`);
   for (const n of r.already) console.log(`  ${C.dim}already in the keychain: ${n}${C.off}`);
   for (const f of r.failed) console.log(`  ${C.red}✗${C.off} ${f.name}: ${f.reason} — the file was left untouched`);

package/lib/identity.mjs

@@ -5,6 +5,7 @@ import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync, chmodSy
 import { spawnSync } from "node:child_process";
 import { join } from "node:path";
 import { homedir } from "node:os";
+import { isTestIdentity } from "./test-identity-names.mjs";
 import { asFunction, asString } from "./decode.mjs";
 
 export const SCHEME = "trantor-v1";
@@ -227,9 +228,11 @@ function writeKeyStub(f, id) {
 // Copy each file-held private key into the Keychain, prove the stored copy SIGNS (a round-trip
 // against the file's pubkey), and only then rewrite the file as a pubkey-only stub. A key that
 // fails to store or to verify keeps its file untouched.
-export function migrateKeysToKeychain({ dryRun = false } = {}) {
-  const result = { service: IDENTITY_SERVICE, usable: keychainUsable(), moved: [], already: [], failed: [], dryRun };
-  if (!result.usable) return result;
+export function migrateKeysToKeychain({ dryRun = false, names = [], includeTests = false } = {}) {
+  const result = { service: IDENTITY_SERVICE, usable: keychainUsable(), moved: [], already: [], failed: [], skippedTests: 0, dryRun };
+  if (!result.usable && !dryRun) return result;
+  const requested = new Set(names);
+  const found = new Set();
   for (const fileBase of listKeyNames()) {
     let id = null;
     try { id = JSON.parse(readFileSync(keyPath(fileBase), "utf8")); } catch {}
@@ -238,6 +241,12 @@ export function migrateKeysToKeychain({ dryRun = false } = {}) {
     // raw name, so storing under "name_proj" while hooks look for "name:proj" would orphan
     // every migrated key on its first read.
     const name = id?.name ?? fileBase;
+    if (requested.size && !requested.has(name)) continue;
+    found.add(name);
+    if (!requested.size && !includeTests && isTestIdentity(name)) {
+      result.skippedTests++;
+      continue;
+    }
     if (!id?.pubkey) { result.failed.push({ name, reason: "unreadable key file" }); continue; }
     if (!id.privkey) { result.already.push(name); continue; }
     if (dryRun) { result.moved.push(name); continue; }
@@ -255,6 +264,9 @@ export function migrateKeysToKeychain({ dryRun = false } = {}) {
       result.failed.push({ name, reason: String(e?.message || e) });
     }
   }
+  for (const name of requested) {
+    if (!found.has(name)) result.failed.push({ name, reason: "identity not found" });
+  }
   return result;
 }
 

package/lib/key-prune.mjs

@@ -1,9 +1,8 @@
 import { lstatSync, readFileSync, unlinkSync } from "node:fs";
 import { keyPath, listKeyNames } from "./identity.mjs";
 
-// Exact fixture families with numeric run IDs; a generic test/demo substring is not enough.
-const TEST_NAME = /^(?:[A-Za-z0-9.-]+[_:])?(?:relay-selftest|hoff-selftest|consumedby|tt-h5|pctest|trantor-handoff|trantor-supersede|trantor-defer|cap-e2e|injcap|manual-skill)-\d+(?:[_:.-][\w:.-]+)?$/;
-export const isTestIdentity = name => TEST_NAME.test(name);
+import { isTestIdentity } from "./test-identity-names.mjs";
+export { isTestIdentity } from "./test-identity-names.mjs";
 
 export function pruneTestKeys({ snapshots, idleDays = 7, apply = false, now = Date.now() }) {
   if (!Number.isFinite(idleDays) || idleDays <= 0) throw new Error("--idle-days must be a positive number");

package/lib/test-identity-names.mjs

@@ -0,0 +1,4 @@
+// Exact fixture families with numeric run IDs; a generic test/demo substring is not enough.
+// Bare defer/supersede PID names come from test/handoff/test-handoff.mjs (#11501).
+const TEST_NAME = /^(?:[A-Za-z0-9.-]+[_:])?(?:(?:defer|supersede)-\d+|(?:relay-selftest|hoff-selftest|consumedby|tt-h5|pctest|trantor-handoff|trantor-supersede|trantor-defer|cap-e2e|injcap|manual-skill)-\d+(?:[_:.-][\w:.-]+)?)$/;
+export const isTestIdentity = name => TEST_NAME.test(name);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.18.88",
+  "version": "0.18.90",
   "type": "module",
   "bin": {
     "trantor": "bin/cli.mjs"