golem-kit 0.2.2 → 0.2.3

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.2.3
+
+- A model pin follows its agent: change `chat.agent` (or `agents.builder`) and the conversation saved on the old agent is retired on the next start instead of resumed with the new agent's pin. It stays readable in `.golem/conversations.json`, marked, and the next message opens a fresh conversation on the configured agent.
+- `chat: { provider: 'tmux', sandbox: 'none' }` launches the chat agent on the builder's bypass profile, for boxes where the CLI's own sandbox cannot start.
+
 ## 0.2.2
 
 - An app pins the model its terminal agents run on: `chat: { provider: 'tmux', agent, model }` for normal-mode chat and `agents.builderModel` for the builder. The pin rides the launch args (`-m` for Codex, `--model` for Claude Code) and is replayed on resume.

package/docs/agents.md

@@ -31,6 +31,8 @@ export default {
 
 - `builder` is the default choice in build mode. A person's own pick in the browser still wins and is remembered.
 - `builderModel` pins the builder CLI's model, in that CLI's own spelling (`--model` for Claude Code, `-m` for Codex). A terminal chat pins its own the same way: `chat: { provider: 'tmux', agent: 'codex', model: 'gpt-6-luna' }`. Both survive a resume. Left out, each CLI picks its default.
+- Change `chat.agent` (or `agents.builder`) and the conversation saved on the old agent is retired on the next server start, so its pin never follows it: it stays readable in `.golem/conversations.json`, marked `retired`, and the next message opens a fresh conversation on the configured agent.
+- `chat.sandbox` picks the terminal chat's launch profile: `'read-only'` (the default) is the CLI's own read-only sandbox, `'none'` is the builder's bypass profile. Use `'none'` where the sandbox cannot start, e.g. codex's `bwrap: loopback: Failed RTM_NEWADDR: Operation not permitted` under `kernel.apparmor_restrict_unprivileged_userns=1`.
 - `ordinary` turns on the **Start a chat** button. Leave it out and there is no ordinary chat.
 - `ordinary.model` defaults to `claude-opus-5`.
 - `golem.config.ts` is bundled into the browser. Keep the API key in `.env.local` or the server environment, never in this file.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "golem-kit",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "Starter kit and local CLI for Golem applications.",
   "type": "module",
   "exports": {

package/src/config.ts

@@ -12,7 +12,14 @@ export type ModelConfig = { runtime: 'claude' | 'codex'; name?: string }
  * terminal agent in the `chat` window of the app's tmux session, briefed from `docs/chat.md`.
  * `roles` restricts chat to those account roles; absent, anyone signed in may chat.
  */
-export type ChatConfig = ({ provider: 'anthropic' } | { provider: 'tmux'; agent?: 'codex' | 'claude'; model?: string }) & { roles?: string[] }
+export type ChatConfig = ({ provider: 'anthropic' } | { provider: 'tmux'; agent?: 'codex' | 'claude'; model?: string; sandbox?: 'read-only' | 'none' }) & { roles?: string[] }
+/**
+ * The terminal chat's launch profile: the CLI's own read-only sandbox, or — where that sandbox cannot start
+ * (codex's bwrap under `kernel.apparmor_restrict_unprivileged_userns=1`) — the builder's bypass profile.
+ */
+export const chatPermissions = (chat: ChatConfig | undefined): 'bypass' | 'readonly' =>
+  chat?.provider === 'tmux' && chat.sandbox === 'none' ? 'bypass' : 'readonly'
+
 /** `brain: true` serves the app's `brain/` folder read-only and mounts the Brain reader beside the app. */
 
 /**
@@ -70,11 +77,12 @@ export async function loadAppConfig(root = process.cwd()): Promise<AppConfig> {
       config.agents = { ...config.agents, ordinary: ordinaryAgent({ backend: 'anthropic', ...rest }) }
       config.chat = { provider, ...chatRoles }
     } else if (provider === 'tmux') {
-      const { agent, model, ...unknown } = rest
+      const { agent, model, sandbox, ...unknown } = rest
       if (Object.keys(unknown).length) throw new Error(`golem.config.ts chat has unknown fields: ${Object.keys(unknown).join(', ')}`)
       if (agent !== undefined && agent !== 'codex' && agent !== 'claude') throw new Error("golem.config.ts chat.agent must be 'codex' or 'claude'")
       if (model !== undefined && (typeof model !== 'string' || !model)) throw new Error('golem.config.ts chat.model must be a nonempty string')
-      config.chat = { provider, ...(agent ? { agent } : {}), ...(model ? { model: model as string } : {}), ...chatRoles }
+      if (sandbox !== undefined && sandbox !== 'read-only' && sandbox !== 'none') throw new Error("golem.config.ts chat.sandbox must be 'read-only' or 'none'")
+      config.chat = { provider, ...(agent ? { agent } : {}), ...(model ? { model: model as string } : {}), ...(sandbox ? { sandbox: sandbox as 'read-only' | 'none' } : {}), ...chatRoles }
     } else throw new Error("golem.config.ts chat.provider must be 'anthropic' or 'tmux'")
   } else if (config.agents?.ordinary) config.chat = { provider: 'anthropic' }
   return config

package/src/dev-server.ts

@@ -7,7 +7,7 @@ import { buildBrowser, rebuild } from './browser-build.ts';
 import { createAppBackend, type AppBackend } from './backend/http.ts';
 import { ordinaryChat, type OrdinaryChat } from './chat.ts';
 import { openBrain } from './brain.ts';
-import { serverUrl } from './config.ts';
+import { chatPermissions, serverUrl } from './config.ts';
 import { discoverAgents, runtimeState, type AgentName } from './runtime/discovery.ts';
 import { SessionManager, type Session, type SessionBackend, type SessionSnapshot } from './runtime/session.ts';
 import { TmuxBackend, chatInstructions, type HarnessRef } from './runtime/tmux.ts';
@@ -46,11 +46,13 @@ export async function startDevServer(
   createBackend ??= async (backend, ref, buildMode = true) => {
     if (!ref && !(await discoverAgents()).some((found) => found.agent === backend && found.runnable)) throw new Error(`${backend} is not runnable here`);
     const model = buildMode ? app.config.agents?.builderModel : app.config.chat?.provider === 'tmux' ? app.config.chat.model : undefined;
-    return new TmuxBackend(appRoot, backend, ref, { stateDir: join(stateDirectory, 'harness'), api: serverUrl(host, port), window: buildMode ? 'builder' : 'chat', ...(model ? { model } : {}), ...(buildMode ? {} : { instructions: chatInstructions(appRoot), permissions: 'readonly' }) });
+    return new TmuxBackend(appRoot, backend, ref, { stateDir: join(stateDirectory, 'harness'), api: serverUrl(host, port), window: buildMode ? 'builder' : 'chat', ...(model ? { model } : {}), ...(buildMode ? {} : { instructions: chatInstructions(appRoot), permissions: chatPermissions(app.config.chat) }) });
   };
   const builder = await builderFlag(stateDirectory);
   const state = new ConversationState(stateDirectory);
-  const sessions = new SessionManager((snapshots) => state.save(snapshots));
+  // Retired conversations are no longer live, but they stay in the file: `save` writes them back beside the rest.
+  let retired: SessionSnapshot[] = [];
+  const sessions = new SessionManager((snapshots) => state.save([...retired, ...snapshots]));
   const app = await createAppBackend(appRoot, join(stateDirectory, 'data'));
   const chat = ordinaryChat(app);
   const brain = app.config.brain ? openBrain(join(appRoot, 'brain')) : undefined;
@@ -60,7 +62,16 @@ export async function startDevServer(
     owns: (conversation, owner) => { const session = sessions.get(conversation); return session?.backend === 'anthropic' && session.owner === owner; },
   });
   // Restored conversations wait for their next message; nothing is re-run.
-  const restored = await state.load();
+  const saved = await state.load();
+  // A pin follows its agent: when the app changes `chat.agent` (or `agents.builder`), the conversation saved
+  // on the old agent is retired rather than resumed, so the new agent's model never reaches the old CLI. It
+  // stays readable in the file, marked; the browser finds no conversation and starts one on the new agent.
+  const agentOf = (buildMode: boolean) => buildMode ? app.config.agents?.builder : app.config.chat?.provider === 'tmux' ? app.config.chat.agent : undefined;
+  const stale = saved.filter((snapshot) => !snapshot.retired && snapshot.backend !== 'anthropic'
+    && agentOf(snapshot.buildMode) !== undefined && agentOf(snapshot.buildMode) !== snapshot.backend);
+  for (const snapshot of stale) console.log(`Retired the ${snapshot.buildMode ? 'builder' : 'chat'} conversation on ${snapshot.backend}: this app now runs ${agentOf(snapshot.buildMode)}.`);
+  retired = saved.filter((snapshot) => snapshot.retired || stale.includes(snapshot)).map((snapshot) => ({ ...snapshot, retired: true }));
+  const restored = saved.filter((snapshot) => !snapshot.retired && !stale.includes(snapshot));
   const workers = await Promise.all(restored.map((snapshot) => snapshot.backend === 'anthropic'
     ? chat.backend(snapshot.transcript)
     : createBackend(snapshot.backend, snapshot.harness as HarnessRef | undefined, snapshot.buildMode)));

package/src/runtime/session.ts

@@ -392,6 +392,8 @@ export type SessionSnapshot = {
   harness?: unknown
   transcript?: unknown
   updatedAt?: string
+  /** Set when the app's configured agent no longer matches `backend`: kept in the file, never restored. */
+  retired?: boolean
 }
 
 export class SessionManager {