@awak-app/simy-cli 0.7.17 → 0.7.18

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awak-app/simy-cli",
-  "version": "0.7.17",
+  "version": "0.7.18",
   "description": "Local SIMY executor for non-coding Local Tasks and Agentic Loop runs.",
   "type": "module",
   "bin": {

package/src/cli-contract.js

@@ -13,7 +13,7 @@ import {
 } from "./durable-local-task-steps-contract.js";
 import { buildExecutionCapabilityContract } from "./execution-capability-contract.js";
 
-export const CLI_VERSION = "0.7.17";
+export const CLI_VERSION = "0.7.18";
 export const CLI_API_CONTRACT_VERSION = 10;
 
 export function narrativeImageCapabilityMetadata() {

package/src/desktop-host.js

@@ -773,7 +773,7 @@ export async function startDesktopHost({ input = process.stdin, output = process
       for (const session of status.sessionSupervision.sessions) {
         const key = teamThreadKey(agent.getTeamThreadsScope?.() || {}, session);
         const own = status.teamThreads?.own.find(item => item.threadKey === key);
-        session.teamSharing = { enabled: own?.enabled === true, pendingStop: status.teamThreads?.pendingStops.includes(key) === true };
+        session.teamSharing = { threadKey: key, enabled: own?.enabled === true, pendingStop: status.teamThreads?.pendingStops.includes(key) === true, confirmationRequired: status.teamThreads?.confirmationRequired.includes(key) === true };
       }
       const latestAccess = await accessSnapshot();
       if (JSON.stringify(await readProviderLinks(root)) !== requestedLinks ||
@@ -1138,9 +1138,20 @@ export async function startDesktopHost({ input = process.stdin, output = process
           else if(action === 'team_thread_open') ok = await teamThreads.open({memberId:command.memberId,threadKey:command.threadKey});
           else {
             if (command.organizationId !== undefined && command.organizationId !== access.organizationId) throw new Error('Sharing organization changed. Confirm again.');
-            const selected = sessionStatus.sessions.find(item => item.provider === command.provider && item.session === command.session);
-            if(!selected) throw new Error('Refresh and select your conversation again.');
-            ok = await teamThreads.setSharing(selected,command.enabled);
+            // Publication reads this host's provider context. Never reinterpret
+            // a remote or ambiguous identity as a same-ID local conversation.
+            if ((command.hostId && command.hostId !== 'local') || (!command.hostId && remoteHosts?.hasSession(command.session))) {
+              throw new Error('Team sharing requires an explicitly selected local conversation.');
+            }
+            const selected = sessionStatus.sessions.find(item => (!item.hostId || item.hostId === 'local') && item.provider === command.provider && item.session === command.session);
+            if (command.enabled === false) {
+              // Revocation uses authenticated own rows, never provider context.
+              const key = command.threadKey ?? teamThreadKey(agent.getTeamThreadsScope(), { provider: command.provider, session: command.session });
+              ok = await teamThreads.stopSharing(key);
+            } else {
+              if(!selected || command.threadKey) throw new Error('Refresh and select your conversation again.');
+              ok = await teamThreads.setSharing(selected,command.enabled);
+            }
           }
           emit({type:'result',id:command.id,ok:ok===true}); void publish().catch(() => {}); return;
         }
@@ -1457,6 +1468,22 @@ export async function startDesktopHost({ input = process.stdin, output = process
           await authorizeWork(commandScope);
           const result = await deadlines.decide(context, { ...command, requestId: command.requestId || command.decisionId });
           if (result.status === 'conflict') throw Object.assign(new Error('Deadline changed; refresh before deciding.'), { code: 'conflict' });
+        } else if (action === "session_set_pinned") {
+          if (typeof command.enabled !== 'boolean') throw new Error('Choose whether to pin this conversation.');
+          const candidate = await selectedSession(command, { preferObserved: true });
+          await authorizeWork(commandScope);
+          const pinScope = command.pinScope ?? 'legacy';
+          if (typeof pinScope !== 'string' || !pinScope || pinScope.length > 512) throw new Error('Invalid pin scope.');
+          await updateRecord(deliveryRoot, command.provider, command.session, previous => {
+            const scopes = new Set(Array.isArray(previous?.listPinScopes) ? previous.listPinScopes : previous?.listPinned ? ['legacy'] : []);
+            if (command.enabled) scopes.add(pinScope); else scopes.delete(pinScope);
+            return {
+              ...(previous || { schemaVersion: 1, provider: command.provider, session: command.session, cwd: candidate.cwd, observedAt: Date.now() }),
+              listPinned: scopes.size > 0, listPinScopes: [...scopes],
+              ...(command.enabled ? { listMetadata: { title: candidate.title || '', createdAt: candidate.createdAt ?? null, lastActivityAt: candidate.lastActivityAt ?? null } } : {}),
+            };
+          });
+          refreshSessions(true);
         } else if (action === "session_archive" || action === "session_restore") {
           const candidate = await selectedSession(command, { preferObserved: true });
           await authorizeWork(commandScope);

package/src/session-supervision/claude-sessions.js

@@ -25,7 +25,7 @@ function rememberMetadata(path, value) {
 function candidateMetadata(id, metadata, lastActivityAt, observedAt) {
   return {
     provider: 'claude', session: id, ...(metadata.parentSessionId ? { parentSession: { provider: 'claude', session: metadata.parentSessionId } } : {}), cwd: metadata.cwd, title: metadata.title,
-    source: 'claude_cli', lastActivityAt,
+    source: 'claude_cli', lastActivityAt, createdAt: metadata.createdAt ?? null,
     observation: { source: 'claude_local_index', observedAt },
     availability: 'unsupported', model: null,
     capabilities: { canMonitor: true, canEnroll: false, canAutoContinue: false },
@@ -62,7 +62,7 @@ function metadataFromPrefix(bytes, id) {
   const text = bytes.toString('utf8');
   const complete = text.slice(0, text.lastIndexOf('\n') + 1);
   if (!complete) return null;
-  let cwd = '', title = '', customTitle = '', parentSessionId = null, found = false;
+  let cwd = '', title = '', customTitle = '', parentSessionId = null, found = false, createdAt = null;
   for (const line of complete.split('\n').slice(0, MAX_LINES)) {
     if (!line) continue;
     let item;
@@ -73,6 +73,8 @@ function metadataFromPrefix(bytes, id) {
     if (item.type === 'custom-title' && item.isSidechain !== true) { customTitle = sessionTitle(item.customTitle); continue; }
     if (item.type !== 'user' && item.type !== 'assistant') continue;
     if (item.isSidechain === true) return null;
+    const timestamp = typeof item.timestamp === 'string' ? Date.parse(item.timestamp) : item.timestamp;
+    if (Number.isFinite(timestamp) && timestamp > 0) createdAt = createdAt === null ? timestamp : Math.min(createdAt, timestamp);
     if (typeof item.cwd !== 'string' || !isAbsolute(item.cwd)) continue;
     if (!cwd) cwd = resolve(item.cwd);
     // A conversation can cd into a child directory without changing identity.
@@ -80,7 +82,7 @@ function metadataFromPrefix(bytes, id) {
     if (!title) title = sessionTitle(item.slug);
     found = true;
   }
-  return found ? { cwd, title: customTitle || title, parentSessionId } : null;
+  return found ? { cwd, title: customTitle || title, parentSessionId, createdAt } : null;
 }
 
 // /rename appends a custom-title envelope, often beyond the bounded prefix.

package/src/session-supervision/codex-app-server.js

@@ -222,6 +222,7 @@ export function codexThreadMetadata(thread) {
     title: typeof thread.name === 'string' && thread.name.trim() ? thread.name.slice(0, 200) : '',
     source: typeof thread.source === 'string' ? thread.source : thread.source?.type || 'unknown',
     lastActivityAt: Number.isFinite(thread.updatedAt) ? thread.updatedAt * 1000 : null,
+    createdAt: Number.isFinite(thread.createdAt) && thread.createdAt > 0 ? thread.createdAt * 1000 : null,
     model: typeof thread.model === 'string' ? thread.model : null,
     // Preserve native wait flags for presentation without changing isRunning,
     // which also protects the provider writer lock. Unknown flags fail closed.

package/src/session-supervision/discovery-window.js

@@ -4,7 +4,7 @@ export const RECENT_SESSION_LIMIT = 200;
 
 // Explicit tracking and unsettled work remain visible outside recent history.
 // Completed, untracked records are history, not an unlimited extra catalog.
-export const retainedSession = record => Boolean(record?.autoContinue || record?.monitor || record?.tracked ||
+export const retainedSession = record => Boolean(record?.listPinned || record?.autoContinue || record?.monitor || record?.tracked ||
   record?.run && !TERMINAL.has(record.run.state));
 
 export function recentSessionWindow(items, { limit = RECENT_SESSION_LIMIT, priority = () => false } = {}) {

package/src/session-supervision/index.js

@@ -231,8 +231,8 @@ export async function discoverSessions({ root, openClient = openCodexAppServer,
     // A hook observation can belong to an AI-created worker. Only explicit
     // supervision may restore a conversation absent from provider discovery.
     if (!byKey.has(key) && (retainedSession(record) || includeArchived && record.listHidden === true || requiredAncestors.has(key) && (record.observedAt || record.admission?.validatedAt))) byKey.set(key, {
-      provider: record.provider, session: record.session, cwd: record.cwd, title: '', archived, source: record.admission?.source || 'hook',
-      lastActivityAt: record.observedAt || record.admission?.validatedAt || record.run?.updatedAt || null,
+      provider: record.provider, session: record.session, cwd: record.cwd, title: record.listMetadata?.title || '', createdAt: record.listMetadata?.createdAt ?? null, archived, source: record.admission?.source || 'hook',
+      lastActivityAt: record.listMetadata?.lastActivityAt ?? record.observedAt ?? record.admission?.validatedAt ?? record.run?.updatedAt ?? null,
       observation: { source: record.admission?.source || `${record.provider}_hook`, observedAt: record.observedAt || record.admission?.validatedAt || null },
       availability: 'unknown', model: record.admission?.model || null,
     });
@@ -327,7 +327,7 @@ export async function discoverSessions({ root, openClient = openCodexAppServer,
       autoContinueEpoch: record?.autoContinue === true ? record.autoContinueEpoch : null,
       autoContinueAvailability: availability,
       ...autoContinueState(record, isRunning, availability),
-      lastActivityAt: item.lastActivityAt, observation, availability: item.availability,
+      lastActivityAt: item.lastActivityAt, createdAt: item.createdAt ?? null, observation, availability: item.availability,
       taskId: run?.managed?.taskId || record?.associationTaskId || null,
       binding: { mode, taskId: run?.managed?.taskId || record?.associationTaskId || null },
       originalSessionTarget: originalSessionTarget(item.provider, item.session),

package/src/session-supervision/remote-hosts.js

@@ -13,7 +13,7 @@ export const remoteHostId = alias => `remote-ssh-discovered:${alias}`;
 const shellQuote = value => "'" + value.replaceAll("'", "'\\''") + "'";
 const bootstrap = 'import { realpathSync } from "node:fs"; import { dirname, join } from "node:path"; import { pathToFileURL } from "node:url"; const entry = join(dirname(realpathSync(process.argv[1])), "session-supervision", "remote-entry.js"); await import(pathToFileURL(entry).href);';
 export const REMOTE_HOST_COMMAND = `exec sh -lc ${shellQuote(`exec env SIMY_REMOTE_CHILD=1 SIMY_AUTO_UPDATE=0 node --input-type=module -e ${shellQuote(bootstrap)} "$(command -v simy)"`)}`;
-const allowedActions = new Set(['refresh', 'session_statistics', 'session_archive', 'session_restore', 'session_track', 'session_untrack',
+const allowedActions = new Set(['refresh', 'session_set_pinned', 'session_statistics', 'session_archive', 'session_restore', 'session_track', 'session_untrack',
   'session_monitor', 'session_unmonitor', 'session_enroll', 'session_set_auto_continue', 'session_analyze', 'session_continue', 'session_answer',
   'session_deadline_decide', 'session_action_refresh', 'session_action_select', 'session_action_unlink',
   'delivery_pause', 'delivery_stop', 'delivery_reject', 'delivery_resume', 'delivery_replan', 'delivery_approve',

package/src/team-threads.js

@@ -113,6 +113,7 @@ export function createTeamThreads({
     selected = null,
     memberFilter = null,
     pending = new Map(),
+    publicationGrants = new Map(),
     storageFailed = false,
     lastAllowed = false;
   function scope() {
@@ -122,11 +123,12 @@ export function createTeamThreads({
       generation++;
       const sameIdentity = scopeKey === current.key;
       scopeKey = current.key;
-      const own = sameIdentity ? value.own : [];
+      const own = sameIdentity && current.authenticated ? value.own : [];
       value = { ...empty(), own };
       selected = null;
       memberFilter = null;
       if (!sameIdentity) pending = new Map();
+      publicationGrants.clear();
       lastPoll = -Infinity;
     }
     lastAllowed = current.allowed;
@@ -135,7 +137,7 @@ export function createTeamThreads({
   }
   const snapshot = () => {
     scope();
-    return structuredClone({ ...value, pendingStops: [...pending.keys()] });
+    return structuredClone({ ...value, pendingStops: [...pending.keys()], confirmationRequired: value.own.filter(row => row.enabled && publicationGrants.get(row.threadKey) !== row.version).map(row => row.threadKey) });
   };
   const fenceKey = (current, key) => digest(`${current.fenceKey}:${key}`);
   async function run(fn, allowOff = false) {
@@ -272,6 +274,11 @@ export function createTeamThreads({
       incomplete: result.incomplete,
     };
   }
+  function sourceObservedAt(candidate) {
+    const observed = candidate.observation?.observedAt;
+    if (!Number.isFinite(observed) || observed <= 0 || observed > now()) invalid();
+    return new Date(observed).toISOString();
+  }
   async function payload(candidate, signal) {
     const result = await readContext(candidate, { signal });
     if (!Array.isArray(result?.messages) || !result.messages.length) invalid();
@@ -295,7 +302,7 @@ export function createTeamThreads({
         240,
       ),
       state: running ? "running" : "unknown",
-      observedAt: new Date(now()).toISOString(),
+      observedAt: sourceObservedAt(candidate),
       messages,
       truncated: result.truncated === true,
       incomplete: result.incomplete === true,
@@ -322,13 +329,18 @@ export function createTeamThreads({
         const fence = await fenceStore.read(fenceKey(current, item.threadKey));
         if (!valid()) return;
         if (fence) {
-          pending.set(item.threadKey, fence.expectedVersion);
-          await stop(send, current, item.threadKey, fence.expectedVersion);
+          // A lost OFF response (or intervening version) must reconcile against
+          // authenticated current state, rather than retry a stale CAS forever.
+          pending.set(item.threadKey, item.version);
+          if (item.enabled) await stop(send, current, item.threadKey, item.version);
+          else await clearStop(current, item.threadKey);
         }
       }
       if (publish && !storageFailed)
         for (const item of [...value.own]) {
-          if (!item.enabled || pending.has(item.threadKey)) continue;
+          // Server consent alone cannot re-arm publication after a process restart:
+          // an OFF may have failed both durable storage and the network.
+          if (!item.enabled || pending.has(item.threadKey) || publicationGrants.get(item.threadKey) !== item.version) continue;
           const candidate = candidates.find(
             (c) => teamThreadKey(current, c) === item.threadKey,
           );
@@ -384,9 +396,23 @@ export function createTeamThreads({
         if (valid()) onChange();
       });
     },
-    async setSharing(candidate, enabled) {
+    async stopSharing(threadKey) {
+      scope();
+      if (!keyPattern.test(threadKey) || !value.own.some(row => row.threadKey === threadKey)) return false;
+      return setSharing(null, false, threadKey);
+    },
+    setSharing,
+    close() {
+      closed = true;
+      controller?.abort();
+      generation++;
+      publicationGrants.clear();
+      value = empty();
+    },
+  };
+  async function setSharing(candidate, enabled, existingKey) {
       const current = scope(),
-        key = teamThreadKey(current, candidate),
+        key = existingKey ?? teamThreadKey(current, candidate),
         item = value.own.find((row) => row.threadKey === key),
         version = item?.version ?? 0;
       if (
@@ -408,6 +434,7 @@ export function createTeamThreads({
         storageFailed = false;
       }
       if (!enabled) {
+        publicationGrants.delete(key);
         pending.set(key, version);
         controller?.abort();
         generation++;
@@ -442,16 +469,10 @@ export function createTeamThreads({
             receipt.version !== version + 1
           )
             invalid();
+          if (valid() && !pending.has(key)) publicationGrants.set(key, receipt.version);
         }
         if (current.allowed) await context(send);
         if (valid()) onChange();
       }, !enabled);
-    },
-    close() {
-      closed = true;
-      controller?.abort();
-      generation++;
-      value = empty();
-    },
-  };
+  }
 }