golem-kit 0.2.1 → 0.2.3

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.2.3
+
+- A model pin follows its agent: change `chat.agent` (or `agents.builder`) and the conversation saved on the old agent is retired on the next start instead of resumed with the new agent's pin. It stays readable in `.golem/conversations.json`, marked, and the next message opens a fresh conversation on the configured agent.
+- `chat: { provider: 'tmux', sandbox: 'none' }` launches the chat agent on the builder's bypass profile, for boxes where the CLI's own sandbox cannot start.
+
+## 0.2.2
+
+- An app pins the model its terminal agents run on: `chat: { provider: 'tmux', agent, model }` for normal-mode chat and `agents.builderModel` for the builder. The pin rides the launch args (`-m` for Codex, `--model` for Claude Code) and is replayed on resume.
+
 ## 0.2.1
 
 - `./golem` runs on a fresh `pnpm install`: the installed entry resolves `tsx` from golem-kit's own tree instead of the app's `node_modules/.bin`.

package/docs/agents.md

@@ -18,6 +18,7 @@ export default {
   title: 'Field Notes',
   agents: {
     builder: 'claude', // or 'codex': the agent build mode starts with
+    builderModel: 'claude-opus-5-5', // pins that CLI's model
     ordinary: {
       backend: 'anthropic',
       operations: ['records.list', 'records.get', 'records.update', 'notes.archive'],
@@ -29,6 +30,9 @@ export default {
 ```
 
 - `builder` is the default choice in build mode. A person's own pick in the browser still wins and is remembered.
+- `builderModel` pins the builder CLI's model, in that CLI's own spelling (`--model` for Claude Code, `-m` for Codex). A terminal chat pins its own the same way: `chat: { provider: 'tmux', agent: 'codex', model: 'gpt-6-luna' }`. Both survive a resume. Left out, each CLI picks its default.
+- Change `chat.agent` (or `agents.builder`) and the conversation saved on the old agent is retired on the next server start, so its pin never follows it: it stays readable in `.golem/conversations.json`, marked `retired`, and the next message opens a fresh conversation on the configured agent.
+- `chat.sandbox` picks the terminal chat's launch profile: `'read-only'` (the default) is the CLI's own read-only sandbox, `'none'` is the builder's bypass profile. Use `'none'` where the sandbox cannot start, e.g. codex's `bwrap: loopback: Failed RTM_NEWADDR: Operation not permitted` under `kernel.apparmor_restrict_unprivileged_userns=1`.
 - `ordinary` turns on the **Start a chat** button. Leave it out and there is no ordinary chat.
 - `ordinary.model` defaults to `claude-opus-5`.
 - `golem.config.ts` is bundled into the browser. Keep the API key in `.env.local` or the server environment, never in this file.

package/docs/app-backend.md

@@ -94,7 +94,9 @@ type Model = { extract<S extends z.ZodType>(request: { schema: S; text: string;
 const meeting = await model.extract({ schema: z.object({ date: z.string(), attendees: z.array(z.string()) }), text, instructions: 'Leave a field empty rather than guessing.' })
 ```
 
-The app names the shape it wants and never which model answered. Today that is the local Claude
+The app names the shape it wants and never which model answered. Which runtime does is the app's
+`model: { runtime, name }` — `{ runtime: 'codex', name: 'gpt-6-luna' }` is the cheap everyday pick
+for extraction and scheduled jobs. Absent, it is the local Claude
 Code CLI — the runtime build mode already depends on, and the one that asks for no API key; the prompt
 goes in on stdin and the call runs in a temporary directory, so neither `ps` nor the app's folder
 is part of it. When no model can answer — the runtime is missing, times out, or gives nothing the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "golem-kit",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Starter kit and local CLI for Golem applications.",
   "type": "module",
   "exports": {

package/src/config.ts

@@ -12,14 +12,21 @@ export type ModelConfig = { runtime: 'claude' | 'codex'; name?: string }
  * terminal agent in the `chat` window of the app's tmux session, briefed from `docs/chat.md`.
  * `roles` restricts chat to those account roles; absent, anyone signed in may chat.
  */
-export type ChatConfig = ({ provider: 'anthropic' } | { provider: 'tmux'; agent?: 'codex' | 'claude' }) & { roles?: string[] }
+export type ChatConfig = ({ provider: 'anthropic' } | { provider: 'tmux'; agent?: 'codex' | 'claude'; model?: string; sandbox?: 'read-only' | 'none' }) & { roles?: string[] }
+/**
+ * The terminal chat's launch profile: the CLI's own read-only sandbox, or — where that sandbox cannot start
+ * (codex's bwrap under `kernel.apparmor_restrict_unprivileged_userns=1`) — the builder's bypass profile.
+ */
+export const chatPermissions = (chat: ChatConfig | undefined): 'bypass' | 'readonly' =>
+  chat?.provider === 'tmux' && chat.sandbox === 'none' ? 'bypass' : 'readonly'
+
 /** `brain: true` serves the app's `brain/` folder read-only and mounts the Brain reader beside the app. */
 
 /**
  * `builder` is the agent build mode starts with. `ordinary` turns on everyday chat: an API agent
  * whose only tools are the listed app operations, run as the person chatting.
  */
-export type AgentsConfig = { builder?: 'codex' | 'claude'; ordinary?: OrdinaryAgentConfig }
+export type AgentsConfig = { builder?: 'codex' | 'claude'; builderModel?: string; ordinary?: OrdinaryAgentConfig }
 export type OrdinaryAgentConfig = { backend: 'anthropic'; model: string; operations: string[]; collections?: string[]; roots?: string[]; instructions?: string }
 
 /** golem-ui's Auth role shape: `manages` roles run accounts and may build; `builder` may build. */
@@ -70,10 +77,12 @@ export async function loadAppConfig(root = process.cwd()): Promise<AppConfig> {
       config.agents = { ...config.agents, ordinary: ordinaryAgent({ backend: 'anthropic', ...rest }) }
       config.chat = { provider, ...chatRoles }
     } else if (provider === 'tmux') {
-      const { agent, ...unknown } = rest
+      const { agent, model, sandbox, ...unknown } = rest
       if (Object.keys(unknown).length) throw new Error(`golem.config.ts chat has unknown fields: ${Object.keys(unknown).join(', ')}`)
       if (agent !== undefined && agent !== 'codex' && agent !== 'claude') throw new Error("golem.config.ts chat.agent must be 'codex' or 'claude'")
-      config.chat = { provider, ...(agent ? { agent } : {}), ...chatRoles }
+      if (model !== undefined && (typeof model !== 'string' || !model)) throw new Error('golem.config.ts chat.model must be a nonempty string')
+      if (sandbox !== undefined && sandbox !== 'read-only' && sandbox !== 'none') throw new Error("golem.config.ts chat.sandbox must be 'read-only' or 'none'")
+      config.chat = { provider, ...(agent ? { agent } : {}), ...(model ? { model: model as string } : {}), ...(sandbox ? { sandbox: sandbox as 'read-only' | 'none' } : {}), ...chatRoles }
     } else throw new Error("golem.config.ts chat.provider must be 'anthropic' or 'tmux'")
   } else if (config.agents?.ordinary) config.chat = { provider: 'anthropic' }
   return config
@@ -117,10 +126,11 @@ function chatRolesOf(value: unknown, accounts: AccountsConfig | undefined): stri
 
 function agents(value: unknown): AgentsConfig {
   if (!value || typeof value !== 'object' || Array.isArray(value)) throw new Error('golem.config.ts agents must be an object')
-  const { builder, ordinary, ...unknown } = value as Record<string, unknown>
+  const { builder, builderModel, ordinary, ...unknown } = value as Record<string, unknown>
   if (Object.keys(unknown).length) throw new Error(`golem.config.ts agents has unknown fields: ${Object.keys(unknown).join(', ')}`)
   if (builder !== undefined && builder !== 'codex' && builder !== 'claude') throw new Error("golem.config.ts agents.builder must be 'codex' or 'claude'")
-  return { ...(builder ? { builder } : {}), ...(ordinary === undefined ? {} : { ordinary: ordinaryAgent(ordinary) }) }
+  if (builderModel !== undefined && (typeof builderModel !== 'string' || !builderModel)) throw new Error('golem.config.ts agents.builderModel must be a nonempty string')
+  return { ...(builder ? { builder } : {}), ...(builderModel ? { builderModel: builderModel as string } : {}), ...(ordinary === undefined ? {} : { ordinary: ordinaryAgent(ordinary) }) }
 }
 
 // Operations whose input or output is raw bytes, which a chat tool cannot carry.

package/src/dev-server.ts

@@ -7,7 +7,7 @@ import { buildBrowser, rebuild } from './browser-build.ts';
 import { createAppBackend, type AppBackend } from './backend/http.ts';
 import { ordinaryChat, type OrdinaryChat } from './chat.ts';
 import { openBrain } from './brain.ts';
-import { serverUrl } from './config.ts';
+import { chatPermissions, serverUrl } from './config.ts';
 import { discoverAgents, runtimeState, type AgentName } from './runtime/discovery.ts';
 import { SessionManager, type Session, type SessionBackend, type SessionSnapshot } from './runtime/session.ts';
 import { TmuxBackend, chatInstructions, type HarnessRef } from './runtime/tmux.ts';
@@ -45,11 +45,14 @@ export async function startDevServer(
   // A new session needs a runnable CLI; a restored one keeps its ref and resumes on its next message.
   createBackend ??= async (backend, ref, buildMode = true) => {
     if (!ref && !(await discoverAgents()).some((found) => found.agent === backend && found.runnable)) throw new Error(`${backend} is not runnable here`);
-    return new TmuxBackend(appRoot, backend, ref, { stateDir: join(stateDirectory, 'harness'), api: serverUrl(host, port), window: buildMode ? 'builder' : 'chat', ...(buildMode ? {} : { instructions: chatInstructions(appRoot), permissions: 'readonly' }) });
+    const model = buildMode ? app.config.agents?.builderModel : app.config.chat?.provider === 'tmux' ? app.config.chat.model : undefined;
+    return new TmuxBackend(appRoot, backend, ref, { stateDir: join(stateDirectory, 'harness'), api: serverUrl(host, port), window: buildMode ? 'builder' : 'chat', ...(model ? { model } : {}), ...(buildMode ? {} : { instructions: chatInstructions(appRoot), permissions: chatPermissions(app.config.chat) }) });
   };
   const builder = await builderFlag(stateDirectory);
   const state = new ConversationState(stateDirectory);
-  const sessions = new SessionManager((snapshots) => state.save(snapshots));
+  // Retired conversations are no longer live, but they stay in the file: `save` writes them back beside the rest.
+  let retired: SessionSnapshot[] = [];
+  const sessions = new SessionManager((snapshots) => state.save([...retired, ...snapshots]));
   const app = await createAppBackend(appRoot, join(stateDirectory, 'data'));
   const chat = ordinaryChat(app);
   const brain = app.config.brain ? openBrain(join(appRoot, 'brain')) : undefined;
@@ -59,7 +62,16 @@ export async function startDevServer(
     owns: (conversation, owner) => { const session = sessions.get(conversation); return session?.backend === 'anthropic' && session.owner === owner; },
   });
   // Restored conversations wait for their next message; nothing is re-run.
-  const restored = await state.load();
+  const saved = await state.load();
+  // A pin follows its agent: when the app changes `chat.agent` (or `agents.builder`), the conversation saved
+  // on the old agent is retired rather than resumed, so the new agent's model never reaches the old CLI. It
+  // stays readable in the file, marked; the browser finds no conversation and starts one on the new agent.
+  const agentOf = (buildMode: boolean) => buildMode ? app.config.agents?.builder : app.config.chat?.provider === 'tmux' ? app.config.chat.agent : undefined;
+  const stale = saved.filter((snapshot) => !snapshot.retired && snapshot.backend !== 'anthropic'
+    && agentOf(snapshot.buildMode) !== undefined && agentOf(snapshot.buildMode) !== snapshot.backend);
+  for (const snapshot of stale) console.log(`Retired the ${snapshot.buildMode ? 'builder' : 'chat'} conversation on ${snapshot.backend}: this app now runs ${agentOf(snapshot.buildMode)}.`);
+  retired = saved.filter((snapshot) => snapshot.retired || stale.includes(snapshot)).map((snapshot) => ({ ...snapshot, retired: true }));
+  const restored = saved.filter((snapshot) => !snapshot.retired && !stale.includes(snapshot));
   const workers = await Promise.all(restored.map((snapshot) => snapshot.backend === 'anthropic'
     ? chat.backend(snapshot.transcript)
     : createBackend(snapshot.backend, snapshot.harness as HarnessRef | undefined, snapshot.buildMode)));

package/src/runtime/session.ts

@@ -392,6 +392,8 @@ export type SessionSnapshot = {
   harness?: unknown
   transcript?: unknown
   updatedAt?: string
+  /** Set when the app's configured agent no longer matches `backend`: kept in the file, never restored. */
+  retired?: boolean
 }
 
 export class SessionManager {

package/src/runtime/tmux.ts

@@ -53,9 +53,10 @@ export const brainInstructions = 'This app has a brain: `brain/` is an Open Know
 /**
  * `window` names this agent's window in the app's session (`builder`, `chat`); `instructions` its launch prompt;
  * `permissions` its launch profile: `bypass` (default) may do anything, `readonly` can read the app and run
- * `./golem say`, nothing else, and refuses rather than prompts.
+ * `./golem say`, nothing else, and refuses rather than prompts. `model` pins the agent's model, in that
+ * CLI's own spelling (`gpt-6-luna` for codex, `claude-opus-5-5` for claude).
  */
-export type TmuxOptions = { harness?: Harness; stateDir?: string; api?: string; window?: string; instructions?: string; permissions?: 'bypass' | 'readonly' }
+export type TmuxOptions = { harness?: Harness; stateDir?: string; api?: string; window?: string; instructions?: string; permissions?: 'bypass' | 'readonly'; model?: string }
 
 /** The one tmux session of an app's build mode: `tmux attach -t golem-<app dir>` is always the place to look. */
 export const tmuxSessionName = (cwd: string): string => `golem-${basename(cwd).replace(/[^A-Za-z0-9_-]/g, '-')}`
@@ -96,7 +97,10 @@ export class TmuxBackend implements SessionBackend {
       // codex 0.155: the update prompt at launch would take the typed brief as its answer, the
       // paste-burst fold swallows the first Enter of a long line, and the rate-limit "keep current
       // model" nudge after the first turn eats the first message. All off; replayed on resume.
-      extraArgs: this.agent === 'codex' ? ['-c', 'check_for_update_on_startup=false', '-c', 'disable_paste_burst=true', '-c', 'notice.hide_rate_limit_model_nudge=true'] : [],
+      extraArgs: [
+        ...(this.agent === 'codex' ? ['-c', 'check_for_update_on_startup=false', '-c', 'disable_paste_burst=true', '-c', 'notice.hide_rate_limit_model_nudge=true'] : []),
+        ...(this.opts.model ? [this.agent === 'codex' ? '-m' : '--model', this.opts.model] : []),
+      ],
     }
     try {
       // A ref saved under an older naming (`golem-<uuid>`) comes back in the app's fixed session: only