Ship ShadowBroker v0.9.83 with live Infonet gate messaging and DM protocols.

Gate hashchain replication, Tor/SOCKS transport hardening, terminal session teardown, v0.9.83 UI/changelog, and release digest pins for seamless updater verification.

frontend/src/__tests__/desktop/updateRuntime.test.ts

@@ -9,12 +9,12 @@ import {
 } from '@/lib/updateRuntime';
 
 const RELEASE: GitHubLatestRelease = {
-  html_url: 'https://github.com/BigBodyCobain/Shadowbroker/releases/tag/v0.9.82',
+  html_url: 'https://github.com/BigBodyCobain/Shadowbroker/releases/tag/v0.9.83',
   assets: [
-    { name: 'ShadowBroker_0.9.82_x64_en-US.msi', browser_download_url: 'https://example.test/windows.msi' },
-    { name: 'ShadowBroker_0.9.82_x64-setup.exe', browser_download_url: 'https://example.test/windows-setup.exe' },
-    { name: 'ShadowBroker_0.9.82_aarch64.dmg', browser_download_url: 'https://example.test/macos.dmg' },
-    { name: 'ShadowBroker_0.9.82_amd64.AppImage', browser_download_url: 'https://example.test/linux.AppImage' },
+    { name: 'ShadowBroker_0.9.83_x64_en-US.msi', browser_download_url: 'https://example.test/windows.msi' },
+    { name: 'ShadowBroker_0.9.83_x64-setup.exe', browser_download_url: 'https://example.test/windows-setup.exe' },
+    { name: 'ShadowBroker_0.9.83_aarch64.dmg', browser_download_url: 'https://example.test/macos.dmg' },
+    { name: 'ShadowBroker_0.9.83_amd64.AppImage', browser_download_url: 'https://example.test/linux.AppImage' },
   ],
 };
 

frontend/src/__tests__/mesh/topRightControlsTerminalLauncher.test.tsx

@@ -51,6 +51,8 @@ const controlPlaneFetch = vi.fn();
 vi.mock('@/mesh/wormholeIdentityClient', () => ({
   fetchWormholeStatus,
   prepareWormholeInteractiveLane,
+  isWormholePrepAbortedError: (error: unknown) =>
+    error instanceof Error && error.message === 'wormhole_prep_aborted',
 }));
 
 vi.mock('@/mesh/wormholeClient', () => ({
@@ -76,6 +78,7 @@ vi.mock('@/mesh/controlPlaneStatusClient', () => ({
 vi.mock('@/lib/meshTerminalLauncher', () => ({
   requestMeshTerminalOpen,
   subscribeSecureMeshTerminalLauncherOpen,
+  subscribeInfonetSessionEnd: vi.fn(() => () => {}),
 }));
 
 vi.mock('@/lib/updateRuntime', () => ({

frontend/src/__tests__/page/pageBehavior.test.ts

@@ -1,9 +1,5 @@
 /**
  * Sprint 4D behavioral tests — page.tsx wormhole teardown and layer sync.
- *
- * These tests exercise actual runtime logic:
- *  1. teardownWormholeOnClose — calls leaveWormhole only when state is ready or running
- *  2. Layer sync first-mount suppression — initial sync does NOT dispatch LAYER_TOGGLE_EVENT
  */
 import { describe, expect, it, vi, beforeEach } from 'vitest';
 import fs from 'node:fs';
@@ -11,80 +7,29 @@ import path from 'node:path';
 import { teardownWormholeOnClose } from '@/lib/wormholeTeardown';
 import { LAYER_TOGGLE_EVENT } from '@/hooks/useDataPolling';
 
-// ─── teardownWormholeOnClose ──────────────────────────────────────────────
+const endInfonetTerminalSession = vi.fn(async () => {});
+
+vi.mock('@/lib/infonetTerminalSession', () => ({
+  endInfonetTerminalSession: (...args: unknown[]) => endInfonetTerminalSession(...args),
+}));
 
 describe('page.tsx behavior — teardownWormholeOnClose', () => {
-  let fetchState: ReturnType<typeof vi.fn>;
-  let leave: ReturnType<typeof vi.fn>;
-
   beforeEach(() => {
-    fetchState = vi.fn();
-    leave = vi.fn().mockResolvedValue({});
+    endInfonetTerminalSession.mockClear();
   });
 
-  it('calls leaveWormhole when state is ready', async () => {
-    fetchState.mockResolvedValue({ ready: true, running: false });
-    await teardownWormholeOnClose(fetchState, leave);
-    expect(fetchState).toHaveBeenCalledWith(false);
-    expect(leave).toHaveBeenCalledTimes(1);
-  });
-
-  it('calls leaveWormhole when state is running', async () => {
-    fetchState.mockResolvedValue({ ready: false, running: true });
-    await teardownWormholeOnClose(fetchState, leave);
-    expect(leave).toHaveBeenCalledTimes(1);
-  });
-
-  it('calls leaveWormhole when state is both ready and running', async () => {
-    fetchState.mockResolvedValue({ ready: true, running: true });
-    await teardownWormholeOnClose(fetchState, leave);
-    expect(leave).toHaveBeenCalledTimes(1);
-  });
-
-  it('does NOT call leaveWormhole when state is neither ready nor running', async () => {
-    fetchState.mockResolvedValue({ ready: false, running: false });
-    await teardownWormholeOnClose(fetchState, leave);
-    expect(fetchState).toHaveBeenCalledWith(false);
-    expect(leave).not.toHaveBeenCalled();
-  });
-
-  it('does NOT call leaveWormhole when state is null', async () => {
-    fetchState.mockResolvedValue(null);
-    await teardownWormholeOnClose(fetchState, leave);
-    expect(leave).not.toHaveBeenCalled();
-  });
-
-  it('swallows fetchState errors gracefully', async () => {
-    fetchState.mockRejectedValue(new Error('network down'));
-    await teardownWormholeOnClose(fetchState, leave);
-    expect(leave).not.toHaveBeenCalled();
-    // No error thrown — handler is best-effort
-  });
-
-  it('swallows leaveWormhole errors gracefully', async () => {
-    fetchState.mockResolvedValue({ ready: true });
-    leave.mockRejectedValue(new Error('leave failed'));
-    await teardownWormholeOnClose(fetchState, leave);
-    // No error thrown — handler is best-effort
-  });
-
-  it('always passes force=false to fetchState', async () => {
-    fetchState.mockResolvedValue({ ready: true });
-    await teardownWormholeOnClose(fetchState, leave);
-    expect(fetchState).toHaveBeenCalledWith(false);
-    expect(fetchState).not.toHaveBeenCalledWith(true);
+  it('ends the infonet terminal session on close', async () => {
+    await teardownWormholeOnClose();
+    expect(endInfonetTerminalSession).toHaveBeenCalledTimes(1);
   });
 });
 
-// ─── Layer sync first-mount suppression ───────────────────────────────────
-
 describe('page.tsx behavior — layer sync first-mount suppression', () => {
   it('LAYER_TOGGLE_EVENT is the expected string constant', () => {
     expect(LAYER_TOGGLE_EVENT).toBe('sb:layer-toggle');
   });
 
   it('first-mount ref pattern suppresses dispatch, subsequent calls dispatch', () => {
-    // Simulate the initialLayerSyncRef pattern from page.tsx
     const initialSyncDone = { current: false };
     const dispatched: boolean[] = [];
 
@@ -96,7 +41,6 @@ describe('page.tsx behavior — layer sync first-mount suppression', () => {
       }
     };
 
-    // First call (mount): should pass false → no dispatch
     if (!initialSyncDone.current) {
       initialSyncDone.current = true;
       syncLayers(false);
@@ -105,7 +49,6 @@ describe('page.tsx behavior — layer sync first-mount suppression', () => {
     }
     expect(dispatched).toEqual([false]);
 
-    // Second call (layer change): should pass true → dispatch
     if (!initialSyncDone.current) {
       initialSyncDone.current = true;
       syncLayers(false);
@@ -114,7 +57,6 @@ describe('page.tsx behavior — layer sync first-mount suppression', () => {
     }
     expect(dispatched).toEqual([false, true]);
 
-    // Third call (another layer change): should still dispatch
     if (!initialSyncDone.current) {
       initialSyncDone.current = true;
       syncLayers(false);

frontend/src/__tests__/page/pageDecomposition.test.ts

@@ -2,7 +2,7 @@
  * Sprint 4B regression tests — page.tsx decomposition boundary checks.
  *
  * These tests validate the frozen contract for page.tsx decomposition:
- *  1. InfonetTerminal onClose still calls leaveWormhole when wormhole is ready/running
+ *  1. InfonetTerminal onClose ends the terminal session (wormhole + node + tor)
  *  2. Initial /api/layers sync does NOT dispatch LAYER_TOGGLE_EVENT on first mount
  *  3. launchMeshChatTab preserves atomic leftOpen + leftMeshExpanded + meshChatLaunchRequest
  *  4. LocateBar extracted to page-local module
@@ -60,30 +60,19 @@ describe('page.tsx decomposition — extraction targets', () => {
 describe('page.tsx decomposition — InfonetTerminal onClose wormhole teardown', () => {
   const page = readAppFile('page.tsx');
 
-  it('InfonetTerminal onClose delegates to teardownWormholeOnClose', () => {
+  it('InfonetTerminal onClose ends the terminal session', () => {
     const infonetSection = page.slice(
       page.indexOf('<InfonetTerminal'),
       page.indexOf('</InfonetTerminal>') !== -1
         ? page.indexOf('</InfonetTerminal>')
         : page.indexOf('/>', page.indexOf('<InfonetTerminal')) + 2,
     );
-    expect(infonetSection).toContain('teardownWormholeOnClose');
-    expect(infonetSection).toContain('fetchWormholeState');
-    expect(infonetSection).toContain('leaveWormhole');
+    expect(infonetSection).toContain('endInfonetTerminalSession');
   });
 
-  it('page.tsx imports teardownWormholeOnClose from wormholeTeardown', () => {
+  it('page.tsx imports endInfonetTerminalSession from infonetTerminalSession', () => {
     expect(page).toMatch(
-      /import\s*\{[^}]*teardownWormholeOnClose[^}]*\}\s*from\s+['"]@\/lib\/wormholeTeardown['"]/,
-    );
-  });
-
-  it('page.tsx imports leaveWormhole and fetchWormholeState from wormholeClient', () => {
-    expect(page).toMatch(
-      /import\s*\{[^}]*leaveWormhole[^}]*\}\s*from\s+['"]@\/mesh\/wormholeClient['"]/,
-    );
-    expect(page).toMatch(
-      /import\s*\{[^}]*fetchWormholeState[^}]*\}\s*from\s+['"]@\/mesh\/wormholeClient['"]/,
+      /import\s*\{[^}]*endInfonetTerminalSession[^}]*\}\s*from\s+['"]@\/lib\/infonetTerminalSession['"]/,
     );
   });
 });

frontend/src/app/page.tsx

@@ -18,8 +18,7 @@ import ScaleBar from '@/components/ScaleBar';
 import MeshTerminal from '@/components/MeshTerminal';
 import MeshChat from '@/components/MeshChat';
 import InfonetTerminal from '@/components/InfonetTerminal';
-import { leaveWormhole, fetchWormholeState } from '@/mesh/wormholeClient';
-import { teardownWormholeOnClose } from '@/lib/wormholeTeardown';
+import { endInfonetTerminalSession } from '@/lib/infonetTerminalSession';
 import ShodanPanel from '@/components/ShodanPanel';
 import ReconPanel from '@/components/ReconPanel';
 import ScmPanel from '@/components/ScmPanel';
@@ -169,7 +168,13 @@ export default function Dashboard() {
   useEffect(() => subscribeMeshTerminalOpen(openInfonet), [openInfonet]);
 
   const toggleInfonet = useCallback(() => {
-    setInfonetOpen(prev => !prev);
+    setInfonetOpen((prev) => {
+      if (prev) {
+        void endInfonetTerminalSession();
+        return false;
+      }
+      return true;
+    });
   }, []);
 
   const [activeLayers, setActiveLayers] = useState<ActiveLayers>({
@@ -1024,8 +1029,7 @@ export default function Dashboard() {
           isOpen={infonetOpen}
           onClose={() => {
             setInfonetOpen(false);
-            // Shut down Wormhole when the terminal closes so it doesn't stay running
-            void teardownWormholeOnClose(fetchWormholeState, leaveWormhole);
+            void endInfonetTerminalSession();
           }}
           onOpenLiveGate={openLiveGateFromShell}
           onOpenDeadDrop={openDeadDropFromShell}

frontend/src/components/ChangelogModal.tsx

@@ -4,101 +4,92 @@ import React, { useState, useEffect } from 'react';
 import { motion, AnimatePresence } from 'framer-motion';
 import {
   X,
-  Bot,
   Network,
   KeyRound,
   Shield,
-  Plane,
   Bug,
   Heart,
   MessageSquare,
-  Radar,
-  Factory,
-  Anchor,
-  Search,
+  Lock,
+  Users,
+  Radio,
 } from 'lucide-react';
 
-const CURRENT_VERSION = '0.9.82';
+const CURRENT_VERSION = '0.9.83';
 const STORAGE_KEY = `shadowbroker_changelog_v${CURRENT_VERSION}`;
-const RELEASE_TITLE = 'Telegram OSINT + Osiris Intel Ports + OpenClaw Recon';
+const RELEASE_TITLE = 'Infonet Gate Messaging + DM Protocols Live';
 
 const HEADLINE_FEATURES = [
+  {
+    icon: <Lock size={20} className="text-purple-400" />,
+    accent: 'purple' as const,
+    title: 'Gate Messaging — End-to-End on the Hashchain',
+    subtitle:
+      'Encrypted MLS gate rooms now carry live chat over your private Infonet hashchain. Messages replicate across participant nodes via swarm push/pull — only gate members can decrypt.',
+    details: [
+      'Gate messages append as signed `gate_message` events on each participant\'s private chain; peers sync ciphertext through the mesh without exposing room keys to outsiders.',
+      'Swarm replication keeps late joiners and offline nodes convergent — pull missing blocks, push new envelopes to known gate peers.',
+      'MLS group crypto (privacy-core) handles forward secrecy and membership changes; the UI surfaces delivery, key rotation, and compat approval when room epochs advance.',
+    ],
+    callToAction: 'MESH CHAT → GATES → CREATE OR JOIN A ROOM',
+  },
   {
     icon: <MessageSquare size={20} className="text-cyan-400" />,
     accent: 'cyan' as const,
-    title: 'Telegram OSINT Map Layer',
+    title: 'Direct Messages — Short Address, Request, Encrypt',
     subtitle:
-      'Public war/conflict Telegram channels scraped hourly, risk-scored, geoparsed to metro anchors, and plotted as clickable map pins with inline photo/video.',
+      'DMs are fully operational over the wormhole/Tor lane: share your short wormhole address out-of-band, accept a contact request, then exchange ratchet-encrypted messages.',
     details: [
-      'Incremental merge — only new posts are fetched; known links stop the parser early so channels are not re-scraped redundantly.',
-      'Metro-anchor geocoding (Tel Aviv, Kyiv, NYC, Beijing, etc.) keeps Telegram pins off news/threat-alert centroids so pins stay clickable above the threat intercept overlays.',
-      'Threat-intercept styled popups with inline media via `/api/telegram/media` proxy. Configure channels via `TELEGRAM_OSINT_CHANNELS` (see `.env.example`).',
+      'Contact flow: outbound request → peer approve/deny → mutual DM session with double-ratchet bundles and mailbox claim keys.',
+      'No public phonebook — addresses are intentionally short and meant to be exchanged like a phone number or email, not discovered from a directory.',
+      'Fleet-tested across multiple onion participants: request, accept, decrypt, and reply paths verified on live Tor hidden services.',
     ],
-    callToAction: 'TOGGLE TELEGRAM OSINT IN DATA LAYERS',
+    callToAction: 'MESH CHAT → DIRECT → SHARE SHORT ADDRESS',
   },
   {
-    icon: <Radar size={20} className="text-purple-400" />,
-    accent: 'purple' as const,
-    title: 'Osiris-Derived Intel Ports (Recon, SCM, Entity Graph)',
-    subtitle:
-      'Server-side recon toolkit, supply-chain risk overlay, entity relationship graphs, malware/C2 hotspots, CISA KEV cyber feed, sanctions index, and submarine cable routes — all SSRF-guarded and local-operator proxied.',
-    details: [
-      'Recon Toolkit panel: IP geolocation, DNS, WHOIS, certs, BGP/ASN, OFAC sanctions, CVE, MAC vendor, GitHub profile, breach checks, and InternetDB subnet sweeps.',
-      'SCM panel cross-references Tier 1/2 fabs (TSMC, Samsung, CATL, etc.) against earthquakes, wildfires, and GDELT conflict proximity.',
-      'Entity Graph expands aircraft, vessels, companies, persons, IPs, and countries via Wikidata + OFAC + live telemetry store. Attribution: `backend/third_party/osiris/NOTICE.md`.',
-      'Malware C2 (abuse.ch Feodo + URLhaus) and Cyber Threats (CISA KEV) layers opt-in on the slow tier. Submarine cables overlay from static TeleGeography-derived GeoJSON.',
-    ],
-    callToAction: 'OPEN RECON • SCM • ENTITY GRAPH IN LEFT SIDEBAR',
-  },
-  {
-    icon: <Bot size={20} className="text-amber-400" />,
+    icon: <Network size={20} className="text-amber-400" />,
     accent: 'cyan' as const,
-    title: 'OpenClaw Agent — Full Telemetry + Recon Parity',
+    title: 'Infonet Transport Hardening',
     subtitle:
-      'AI agents on the HMAC command channel now search, slice, and investigate the same data the operator sees — including Telegram, malware, cyber, SCM, and the full recon toolkit.',
+      'Tor/Arti warmup, SOCKS readiness, and terminal session lifecycle fixes so sovereign nodes actually join the mesh instead of sitting on NODE ARTI WARMING.',
     details: [
-      '`search_telemetry` and `search_news` index Telegram OSINT posts alongside news, GDELT, and CrowdThreat. `get_slow_telemetry` and `get_layer_slice` include `telegram_osint`, `malware_threats`, `cyber_threats`, and `scm_suppliers`.',
-      'New commands: `osint_lookup` (IP/DNS/WHOIS/sanctions/CVE/etc.), `entity_expand` (relationship graph), `osint_tools` (discovery), and `osint_sweep` (subnet scan — full access tier).',
-      'Layer aliases: `telegram`, `malware`/`botnet`, `cyber`/`cisa`/`kev`, `scm`/`suppliers`, `gfw`/`fishing`. Skill package: `openclaw-skills/shadowbroker/SKILL.md`.',
+      'Tor hidden service config always exposes SOCKS; readiness probes cache and recover wedged transports instead of blocking wormhole sync indefinitely.',
+      'Leaving the Infonet terminal now tears down wormhole prep, leaves the session, and stops Tor when the UI enabled it — no ghost connections after close.',
+      'Network stats distinguish real transport warmup from stale sync backoff so operators see actionable status instead of a permanent warming spinner.',
     ],
-    callToAction: 'AI INTEL PANEL → CONNECT AGENT → COPY HMAC SECRET',
+    callToAction: 'TOP RIGHT → ENTER INFONET → CHECK NODE STATUS',
   },
 ];
 
 const NEW_FEATURES = [
   {
-    icon: <Anchor size={18} className="text-cyan-400" />,
-    title: 'Global Fishing Watch in Settings',
-    desc: 'GFW API token exposed in onboarding and Settings → Maritime. Fishing activity layer backed by GFW when `GFW_API_TOKEN` is configured.',
+    icon: <Users size={18} className="text-purple-400" />,
+    title: 'Gate Swarm Replication',
+    desc: 'Participant nodes push and pull gate hashchain segments so encrypted room history converges across the fleet without a central relay.',
   },
   {
-    icon: <Factory size={18} className="text-orange-400" />,
-    title: 'Supply-Chain Risk Map Layer',
-    desc: 'SCM suppliers render as map markers with seismic, wildfire, and conflict proximity scoring. Panel alerts for CRITICAL/HIGH fabs.',
+    icon: <KeyRound size={18} className="text-cyan-400" />,
+    title: 'DM Contact Requests',
+    desc: 'Pending inbound/outbound access requests with approve, deny, and scoped per-node DM state — no cross-identity leakage in local storage.',
   },
   {
-    icon: <Shield size={18} className="text-red-400" />,
-    title: 'Malware C2 + CISA KEV Overlays',
-    desc: 'abuse.ch botnet C2 and URLhaus distribution URLs geolocated by country; CISA Known Exploited Vulnerabilities surfaced in cyber threats feed and slow-tier payload.',
+    icon: <Radio size={18} className="text-green-400" />,
+    title: 'Wormhole Session Teardown',
+    desc: 'Closing the Infonet terminal aborts in-flight wormhole prep, leaves the lane, and resets launcher busy state for clean re-entry.',
   },
   {
-    icon: <Search size={18} className="text-green-400" />,
-    title: 'OpenClaw Compact Search Path',
-    desc: 'Agents prefer `get_summary` → SSE `layer_changed` → `get_layer_slice` with per-layer versions. `brief_area`, `correlate_entity`, and `entities_near` include Telegram and malware context.',
-  },
-  {
-    icon: <Network size={18} className="text-purple-400" />,
-    title: 'Submarine Cable Overlay',
-    desc: 'Opt-in undersea cable routes from static TeleGeography-derived GeoJSON for infrastructure context on the map.',
+    icon: <Shield size={18} className="text-amber-400" />,
+    title: 'Fail-Closed Tor Proof',
+    desc: 'Onion sync waits for a working SOCKS handshake before declaring transport ready — prevents silent half-open mesh joins.',
   },
 ];
 
 const BUG_FIXES = [
-  'Telegram map pins are now HTML markers above threat-alert overlays — pins are clickable even when sharing a city grid with news intercept boxes.',
-  'Telegram geocoding uses metro anchors (not national centroids) and a small NE offset only when news alerts share the same city cell — pins stay on land.',
-  'Hourly Telegram scheduler with incremental post merge — no redundant full-channel re-scrape every cycle.',
-  'OpenClaw `get_slow_telemetry` previously omitted telegram_osint, malware_threats, cyber_threats, and scm_suppliers — now included in slow-tier and universal search.',
-  'OpenClaw agents can invoke the Recon panel backends via `osint_lookup` without raw `/api/osint/*` HTTP calls or local-operator browser auth.',
+  'Arti/Tor transport no longer omits SocksPort when MESH_ARTI_ENABLED — SOCKS probes succeed and wormhole sync can start.',
+  'Concurrent Arti readiness checks no longer wedge Tor under load; single-flight probes with auto-recycle when SOCKS stalls.',
+  'Infonet terminal exit no longer leaves background wormhole prep or terminalLaunchBusy stuck after close.',
+  'Stale onion sync backoff clears when transport recovers so NODE ARTI WARMING does not persist after Tor is healthy.',
+  'DM decrypt timeouts on multi-participant fleets addressed via improved peer push timing and mailbox claim sequencing.',
 ];
 
 type ChangelogContributor = {
@@ -109,8 +100,8 @@ type ChangelogContributor = {
 
 const CONTRIBUTORS: ChangelogContributor[] = [
   {
-    name: 'OSIRIS (simplifaisoul/osiris)',
-    desc: 'MIT-licensed recon stack — adapted for ShadowBroker proxy model (see backend/third_party/osiris/NOTICE.md)',
+    name: 'privacy-core (MLS)',
+    desc: 'Rust MLS gate crypto — WASM/FFI path for browser and Tauri sovereign shells',
   },
 ];
 
@@ -228,41 +219,18 @@ const ChangelogModal = React.memo(function ChangelogModal({ onClose }: Changelog
               );
             })}
 
-            {/* Auto-update note for v0.9.81+ installs */}
+            {/* Auto-update note for v0.9.82+ installs */}
             <div className="border border-green-500/30 bg-green-950/15 p-3 flex items-start gap-3">
               <KeyRound size={18} className="text-green-400 mt-0.5 flex-shrink-0" />
               <div className="space-y-1">
                 <div className="text-xs font-mono text-green-300 font-bold tracking-wide uppercase">
-                  One-click update from v0.9.81
+                  One-click update from v0.9.82
                 </div>
                 <div className="text-xs font-mono text-green-200/80 leading-relaxed">
-                  If you installed v0.9.81, the in-app Update button verifies this release via the
-                  signed Tauri updater (`latest.json` + minisign). Desktop installs on v0.9.81 or
-                  later should auto-apply v0.9.82 without a manual MSI hop.
-                </div>
-              </div>
-            </div>
-
-            {/* Required-config callout: OpenSky API */}
-            <div className="border border-amber-500/40 bg-amber-950/20 p-3 flex items-start gap-3">
-              <Plane size={18} className="text-amber-400 mt-0.5 flex-shrink-0" />
-              <div className="space-y-1">
-                <div className="text-xs font-mono text-amber-300 font-bold tracking-wide uppercase">
-                  Required: OpenSky API credentials for airplane telemetry
-                </div>
-                <div className="text-xs font-mono text-amber-200/80 leading-relaxed">
-                  Set <span className="text-amber-100 font-bold">OPENSKY_CLIENT_ID</span> and{' '}
-                  <span className="text-amber-100 font-bold">OPENSKY_CLIENT_SECRET</span> in your{' '}
-                  <span className="text-amber-100 font-bold">.env</span>. Free registration:{' '}
-                  <a
-                    href="https://opensky-network.org/index.php?option=com_users&view=registration"
-                    target="_blank"
-                    rel="noopener noreferrer"
-                    className="text-amber-100 font-bold underline underline-offset-2 hover:text-amber-50"
-                  >
-                    opensky-network.org/register
-                  </a>
-                  .
+                  If you installed v0.9.82, the in-app Update button verifies this release via the
+                  signed Tauri updater (`latest.json` + minisign). Desktop installs on v0.9.82 or
+                  later should auto-apply v0.9.83 without a manual MSI hop once the release is
+                  published.
                 </div>
               </div>
             </div>

frontend/src/components/InfonetTerminal/NetworkStats.tsx

@@ -14,13 +14,26 @@ interface Stats {
   nodeEnabled: boolean;
   syncOutcome: string;
   syncError: string;
+  artiReady: boolean | null;
 }
 
 const EMPTY: Stats = {
   meshtastic: 0, aprs: 0, ledgerNodes: 0, infonetEvents: 0,
   syncPeers: 0, seedPeers: 0, nodeEnabled: false, syncOutcome: 'offline', syncError: '',
+  artiReady: null,
 };
 
+function isArtiTransportBlocked(syncError: string, artiReady: boolean | null): boolean {
+  if (artiReady === true) return false;
+  if (artiReady === false) return true;
+  const lower = syncError.toLowerCase();
+  return (
+    lower.includes('ready arti transport')
+    || lower.includes('require arti to be enabled')
+    || lower.includes('onion peer requests require a ready arti')
+  );
+}
+
 export default function NetworkStats() {
   const [stats, setStats] = useState<Stats>(EMPTY);
 
@@ -28,10 +41,11 @@ export default function NetworkStats() {
     let alive = true;
     const poll = async () => {
       try {
-        const [meshRes, channelsRes, infonet] = await Promise.all([
+        const [meshRes, channelsRes, infonet, wormholeRes] = await Promise.all([
           fetch(`${API_BASE}/api/mesh/status`).then(r => r.ok ? r.json() : null).catch(() => null),
           fetch(`${API_BASE}/api/mesh/channels`).then(r => r.ok ? r.json() : null).catch(() => null),
           fetchInfonetNodeStatusSnapshot(true).catch(() => null),
+          fetch(`${API_BASE}/api/wormhole/status`).then(r => r.ok ? r.json() : null).catch(() => null),
         ]);
         if (!alive) return;
         const authorNodes = Number(infonet?.author_nodes ?? infonet?.known_nodes ?? 0);
@@ -43,6 +57,7 @@ export default function NetworkStats() {
           ?? 0,
         );
         const syncOutcome = String(infonet?.sync_runtime?.last_outcome || 'offline').toLowerCase();
+        const artiReady = typeof wormholeRes?.arti_ready === 'boolean' ? wormholeRes.arti_ready : null;
         setStats({
           meshtastic: Number(channelsRes?.total_live || channelsRes?.total_nodes || meshRes?.signal_counts?.meshtastic || 0),
           aprs: Number(meshRes?.signal_counts?.aprs || 0),
@@ -53,6 +68,7 @@ export default function NetworkStats() {
           nodeEnabled: Boolean(infonet?.node_enabled),
           syncOutcome,
           syncError: String(infonet?.sync_runtime?.last_error || '').trim(),
+          artiReady,
         });
       } catch { /* ignore */ }
     };
@@ -61,8 +77,7 @@ export default function NetworkStats() {
     return () => { alive = false; clearInterval(interval); };
   }, []);
 
-  const syncErrorLower = stats.syncError.toLowerCase();
-  const artiBlocked = syncErrorLower.includes('arti') || syncErrorLower.includes('onion');
+  const artiBlocked = isArtiTransportBlocked(stats.syncError, stats.artiReady);
   const nodeColor = stats.syncOutcome === 'ok' || stats.syncOutcome === 'solo' ? 'text-green-400'
     : stats.syncOutcome === 'running' ? 'text-amber-400'
     : stats.nodeEnabled ? 'text-amber-400' : 'text-gray-600';

frontend/src/components/InfonetTerminal/index.tsx

@@ -3,9 +3,7 @@
 import React, { useEffect } from 'react';
 import { AnimatePresence, motion } from 'framer-motion';
 import { X } from 'lucide-react';
-import {
-  ensureInfonetParticipantNodeReady,
-} from '@/mesh/controlPlaneStatusClient';
+import { beginInfonetTerminalSession } from '@/lib/infonetTerminalSession';
 import InfonetShell from './InfonetShell';
 
 interface InfonetTerminalProps {
@@ -38,7 +36,7 @@ export default function InfonetTerminal({
     const connectParticipantNode = async () => {
       try {
         if (cancelled) return;
-        await ensureInfonetParticipantNodeReady();
+        await beginInfonetTerminalSession();
       } catch {
         // Remote/shared viewers may not have local-operator rights. Leave manual controls intact.
       }

frontend/src/components/MeshChat/InfonetTerminalPanel.tsx

@@ -2,7 +2,7 @@
 
 import React, { useCallback, useEffect, useRef, useState } from 'react';
 import { Shield } from 'lucide-react';
-import { ensureInfonetParticipantNodeReady } from '@/mesh/controlPlaneStatusClient';
+import { beginInfonetTerminalSession } from '@/lib/infonetTerminalSession';
 import InfonetShell from '@/components/InfonetTerminal/InfonetShell';
 
 type Props = {
@@ -98,7 +98,7 @@ export default function InfonetTerminalPanel({
     const connectParticipantNode = async () => {
       try {
         if (cancelled) return;
-        await ensureInfonetParticipantNodeReady();
+        await beginInfonetTerminalSession();
       } catch {
         // Remote viewers may not have local-operator rights.
       }

frontend/src/components/MeshChat/index.tsx

@@ -11,8 +11,7 @@ import {
   SHELL_FLYOUT_WIDTH,
   type MeshChatFlyoutRect,
 } from './meshChatFlyout';
-import { fetchWormholeState, leaveWormhole } from '@/mesh/wormholeClient';
-import { teardownWormholeOnClose } from '@/lib/wormholeTeardown';
+import { endInfonetTerminalSession } from '@/lib/infonetTerminalSession';
 import { motion, AnimatePresence } from 'framer-motion';
 import {
   Antenna,
@@ -439,7 +438,7 @@ const MeshChat = React.memo(function MeshChat(props: MeshChatProps) {
   }, []);
 
   const handleInfonetTeardown = useCallback(() => {
-    void teardownWormholeOnClose(fetchWormholeState, leaveWormhole);
+    void endInfonetTerminalSession();
   }, []);
 
   const panelFlyout =

frontend/src/components/StartupWarmupModal.tsx

@@ -4,7 +4,7 @@ import React, { useEffect, useState } from 'react';
 import { motion, AnimatePresence } from 'framer-motion';
 import { Database, Clock, X } from 'lucide-react';
 
-const CURRENT_VERSION = '0.9.82';
+const CURRENT_VERSION = '0.9.83';
 const STORAGE_KEY = `shadowbroker_startup_warmup_notice_v${CURRENT_VERSION}`;
 
 interface StartupWarmupModalProps {

frontend/src/components/TopRightControls.tsx

@@ -30,6 +30,7 @@ import {
 import {
   requestMeshTerminalOpen,
   subscribeSecureMeshTerminalLauncherOpen,
+  subscribeInfonetSessionEnd,
 } from '@/lib/meshTerminalLauncher';
 import { purgeBrowserContactGraph, purgeBrowserSigningMaterial, setSecureModeCached, getNodeIdentity, generateNodeKeys } from '@/mesh/meshIdentity';
 import { purgeBrowserDmState } from '@/mesh/meshDmWorkerClient';
@@ -42,6 +43,7 @@ import {
 import {
   fetchWormholeStatus,
   prepareWormholeInteractiveLane,
+  isWormholePrepAbortedError,
 } from '@/mesh/wormholeIdentityClient';
 import { fetchWormholeSettings } from '@/mesh/wormholeClient';
 import packageJson from '../../package.json';
@@ -172,8 +174,15 @@ export default function TopRightControls({
     });
   }, [openTerminalLauncher]);
 
+  useEffect(() => {
+    return subscribeInfonetSessionEnd(() => {
+      setTerminalLaunchBusy(false);
+      setTerminalLaunchError('');
+    });
+  }, []);
+
   const closeTerminalLauncher = () => {
-    if (terminalLaunchBusy) return;
+    setTerminalLaunchBusy(false);
     setTerminalLauncherOpen(false);
     setTerminalLaunchError('');
   };
@@ -215,6 +224,9 @@ export default function TopRightControls({
         console.info('[top-right] Wormhole terminal launch ready', identityNodeId);
       }
     } catch (error) {
+      if (isWormholePrepAbortedError(error)) {
+        return;
+      }
       const message =
         typeof error === 'object' && error !== null && 'message' in error
           ? String((error as { message?: string }).message || '')

frontend/src/lib/infonetTerminalSession.ts

@@ -0,0 +1,81 @@
+/**
+ * Infonet terminal session lifecycle.
+ * Wormhole, Tor, and participant-node sync should only run while the terminal is open.
+ */
+import {
+  fetchNodeSettingsSnapshot,
+  setInfonetNodeEnabled,
+  startTorHiddenService,
+  stopTorHiddenService,
+  joinInfonetSwarm,
+  fetchInfonetNodeStatusSnapshot,
+} from '@/mesh/controlPlaneStatusClient';
+import { generateNodeKeys, getNodeIdentity, setSecureModeCached } from '@/mesh/meshIdentity';
+import { fetchWormholeSettings, leaveWormhole, fetchWormholeState } from '@/mesh/wormholeClient';
+import {
+  abortWormholeInteractivePrep,
+  isWormholePrepAbortedError,
+} from '@/mesh/wormholeIdentityClient';
+import { notifyInfonetSessionEnd } from '@/lib/meshTerminalLauncher';
+
+let nodeWasEnabledBeforeSession = false;
+let sessionEndInFlight: Promise<void> | null = null;
+
+export async function beginInfonetTerminalSession(): Promise<void> {
+  try {
+    const before = await fetchNodeSettingsSnapshot().catch(() => null);
+    nodeWasEnabledBeforeSession = Boolean(before?.enabled);
+    if (!getNodeIdentity()) {
+      await generateNodeKeys().catch(() => null);
+    }
+    await startTorHiddenService().catch(() => null);
+    if (!nodeWasEnabledBeforeSession) {
+      await setInfonetNodeEnabled(true);
+    }
+    await joinInfonetSwarm().catch(() => null);
+    await fetchInfonetNodeStatusSnapshot(true).catch(() => null);
+  } catch {
+    // Remote viewers may not have local-operator rights.
+  }
+}
+
+export async function endInfonetTerminalSession(): Promise<void> {
+  if (sessionEndInFlight) {
+    return sessionEndInFlight;
+  }
+  sessionEndInFlight = (async () => {
+    abortWormholeInteractivePrep();
+    try {
+      const [settings, state] = await Promise.all([
+        fetchWormholeSettings(false).catch(() => null),
+        fetchWormholeState(false).catch(() => null),
+      ]);
+      const wormholeActive = Boolean(
+        settings?.enabled
+        || state?.configured
+        || state?.running
+        || state?.ready,
+      );
+      if (wormholeActive) {
+        await leaveWormhole().catch(() => null);
+      }
+      if (!nodeWasEnabledBeforeSession) {
+        await setInfonetNodeEnabled(false).catch(() => null);
+      }
+      await stopTorHiddenService().catch(() => null);
+      setSecureModeCached(false);
+      nodeWasEnabledBeforeSession = false;
+    } catch {
+      /* best-effort teardown */
+    } finally {
+      notifyInfonetSessionEnd();
+    }
+  })();
+  try {
+    await sessionEndInFlight;
+  } finally {
+    sessionEndInFlight = null;
+  }
+}
+
+export { isWormholePrepAbortedError };

frontend/src/lib/meshTerminalLauncher.ts

@@ -1,5 +1,6 @@
 const MESH_TERMINAL_OPEN_EVENT = 'oracle:open-mesh-terminal';
 const SECURE_MESH_TERMINAL_LAUNCHER_EVENT = 'oracle:open-secure-mesh-terminal-launcher';
+const INFONET_SESSION_END_EVENT = 'oracle:infonet-session-end';
 
 export function requestMeshTerminalOpen(source = 'ui'): void {
   if (typeof window === 'undefined') return;
@@ -38,3 +39,22 @@ export function subscribeSecureMeshTerminalLauncherOpen(handler: () => void): ()
   window.addEventListener(SECURE_MESH_TERMINAL_LAUNCHER_EVENT, listener);
   return () => window.removeEventListener(SECURE_MESH_TERMINAL_LAUNCHER_EVENT, listener);
 }
+
+export function notifyInfonetSessionEnd(): void {
+  if (typeof window === 'undefined') return;
+  window.dispatchEvent(
+    new CustomEvent(INFONET_SESSION_END_EVENT, {
+      detail: { at: Date.now() },
+    }),
+  );
+}
+
+export function subscribeInfonetSessionEnd(handler: () => void): () => void {
+  if (typeof window === 'undefined') {
+    return () => {};
+  }
+
+  const listener = () => handler();
+  window.addEventListener(INFONET_SESSION_END_EVENT, listener);
+  return () => window.removeEventListener(INFONET_SESSION_END_EVENT, listener);
+}

frontend/src/lib/wormholeTeardown.ts

@@ -1,17 +1,12 @@
 /**
  * Wormhole teardown logic extracted from InfonetTerminal close handler.
- * Shuts down Wormhole when the terminal closes so it doesn't stay running.
+ * Delegates to the terminal session lifecycle so background prep is aborted too.
  */
+import { endInfonetTerminalSession } from '@/lib/infonetTerminalSession';
+
 export async function teardownWormholeOnClose(
-  fetchState: (force: boolean) => Promise<{ ready?: boolean; running?: boolean } | null>,
-  leave: () => Promise<unknown>,
+  _fetchState?: (force: boolean) => Promise<{ ready?: boolean; running?: boolean } | null>,
+  _leave?: () => Promise<unknown>,
 ): Promise<void> {
-  try {
-    const s = await fetchState(false);
-    if (s?.ready || s?.running) {
-      await leave();
-    }
-  } catch {
-    /* ignore — best-effort teardown */
-  }
+  await endInfonetTerminalSession();
 }

frontend/src/mesh/controlPlaneStatusClient.ts

@@ -249,6 +249,13 @@ export async function startTorHiddenService(): Promise<TorHiddenServiceSnapshot>
   });
 }
 
+export async function stopTorHiddenService(): Promise<TorHiddenServiceSnapshot> {
+  return controlPlaneJson<TorHiddenServiceSnapshot>('/api/settings/tor/stop', {
+    method: 'POST',
+    requireAdminSession: false,
+  });
+}
+
 export interface InfonetSwarmJoinSnapshot {
   ok?: boolean;
   detail?: string;

frontend/src/mesh/wormholeIdentityClient.ts

@@ -51,6 +51,30 @@ const WORMHOLE_TRANSPORT_TIER_ORDER: Record<string, number> = {
   private_strong: 3,
 };
 const wormholeInteractivePrepInflight = new Map<string, Promise<PreparedWormholeInteractiveLane>>();
+let wormholePrepGeneration = 0;
+
+export class WormholePrepAbortedError extends Error {
+  constructor() {
+    super('wormhole_prep_aborted');
+    this.name = 'WormholePrepAbortedError';
+  }
+}
+
+export function isWormholePrepAbortedError(error: unknown): boolean {
+  return error instanceof WormholePrepAbortedError
+    || (error instanceof Error && error.message === 'wormhole_prep_aborted');
+}
+
+export function abortWormholeInteractivePrep(): void {
+  wormholePrepGeneration += 1;
+  wormholeInteractivePrepInflight.clear();
+}
+
+function assertWormholePrepActive(generation: number): void {
+  if (generation !== wormholePrepGeneration) {
+    throw new WormholePrepAbortedError();
+  }
+}
 
 export interface WormholeIdentity {
   bootstrapped: boolean;
@@ -875,13 +899,16 @@ export async function prepareWormholeInteractiveLane(
     return existingInflight;
   }
   const prepTask = (async (): Promise<PreparedWormholeInteractiveLane> => {
+    const generation = wormholePrepGeneration;
     const timeoutMs = Math.max(
       GATE_LIFECYCLE_PREP_POLL_MS,
       Number(options.timeoutMs || GATE_LIFECYCLE_PREP_TIMEOUT_MS),
     );
+    assertWormholePrepActive(generation);
     let runtime = await fetchWormholeState(true).catch(() => null);
     let settings = await fetchWormholeSettings(true).catch(() => null);
     if (!runtime?.ready) {
+      assertWormholePrepActive(generation);
       if (settings?.enabled || runtime?.configured) {
         runtime = await connectWormhole({ requireAdminSession: false }).catch((error) => {
           throw new Error(
@@ -908,9 +935,11 @@ export async function prepareWormholeInteractiveLane(
       Date.now() < deadline &&
       (!runtime?.ready || !wormholeTransportTierSatisfied(transportTierFromRuntime(runtime), minimumTransportTier))
     ) {
+      assertWormholePrepActive(generation);
       await sleep(GATE_LIFECYCLE_PREP_POLL_MS);
       runtime = await fetchWormholeState(true).catch(() => null);
     }
+    assertWormholePrepActive(generation);
     const resolvedTransportTier = transportTierFromRuntime(runtime);
     if (!runtime?.ready || !wormholeTransportTierSatisfied(resolvedTransportTier, minimumTransportTier)) {
       throw new Error('Wormhole is still warming up in the background.');