linkshell-cli 0.5.26 → 0.5.28

package/dist/cli/src/commands/hook.d.ts

@@ -0,0 +1,6 @@
+export declare const HOOK_SOCKET_PATH: string;
+/** `linkshell hook` — invoked by Claude Code's PreToolUse / Notification hooks.
+ *  Reads the hook event JSON on stdin, relays it to the local bridge over a Unix
+ *  socket, and (for PreToolUse) prints the permission decision the user made
+ *  remotely. Fail-open everywhere. */
+export declare function runHook(event: string): Promise<void>;

package/dist/cli/src/commands/hook.js

@@ -0,0 +1,120 @@
+import { createConnection } from "node:net";
+import { homedir } from "node:os";
+import { join } from "node:path";
+// Path of the local Unix socket the running `linkshell` bridge listens on to
+// relay external-session permission requests to phone/web clients. Kept under
+// the same ~/.linkshell dir as the daemon pid/log files.
+export const HOOK_SOCKET_PATH = join(homedir(), ".linkshell", "hook.sock");
+// How long the hook waits for a remote decision before giving up. On timeout we
+// fail OPEN (emit no decision → Claude's normal permission flow takes over), so
+// an unattended phone never blocks a tool call forever.
+const DECISION_TIMEOUT_MS = 25_000;
+// Connecting to the socket must be near-instant; if the bridge isn't running
+// the socket file may exist stale, so cap the connect attempt tightly.
+const CONNECT_TIMEOUT_MS = 1_500;
+/** Emit "no decision" and exit 0. Claude Code treats an empty stdout on exit 0
+ *  as "the hook abstained", so the normal permission flow (terminal prompt /
+ *  configured mode) proceeds. This is the fail-open path taken on ANY error —
+ *  bridge not running, socket refused, timeout, malformed input — so installing
+ *  the hook can never break or block a session that LinkShell isn't watching. */
+function passThrough() {
+    process.exit(0);
+}
+function readStdin() {
+    return new Promise((resolve) => {
+        let data = "";
+        let done = false;
+        const finish = () => { if (!done) {
+            done = true;
+            resolve(data);
+        } };
+        process.stdin.setEncoding("utf8");
+        process.stdin.on("data", (chunk) => { data += chunk; });
+        process.stdin.on("end", finish);
+        process.stdin.on("error", finish);
+        // Hooks always get stdin, but never hang forever waiting for it.
+        setTimeout(finish, 1_000);
+    });
+}
+/** `linkshell hook` — invoked by Claude Code's PreToolUse / Notification hooks.
+ *  Reads the hook event JSON on stdin, relays it to the local bridge over a Unix
+ *  socket, and (for PreToolUse) prints the permission decision the user made
+ *  remotely. Fail-open everywhere. */
+export async function runHook(event) {
+    let payload = {};
+    try {
+        const raw = (await readStdin()).trim();
+        if (raw)
+            payload = JSON.parse(raw);
+    }
+    catch {
+        return passThrough(); // unparseable stdin — abstain
+    }
+    const decision = await requestDecision(event, payload);
+    // Notification events (and any non-decision) produce no stdout — they're
+    // fire-and-forget "session needs attention" signals, not gates.
+    if (event === "PreToolUse" && decision && (decision === "allow" || decision === "deny" || decision === "ask")) {
+        process.stdout.write(JSON.stringify({
+            hookSpecificOutput: {
+                hookEventName: "PreToolUse",
+                permissionDecision: decision,
+                permissionDecisionReason: "LinkShell remote decision",
+            },
+        }));
+    }
+    process.exit(0);
+}
+/** Connect to the bridge socket, send the event, wait for a decision line.
+ *  Resolves to "allow"|"deny"|"ask" on success, or undefined on any failure
+ *  (caller then abstains). Never throws. */
+function requestDecision(event, payload) {
+    return new Promise((resolve) => {
+        let settled = false;
+        const done = (v) => {
+            if (settled)
+                return;
+            settled = true;
+            try {
+                socket.destroy();
+            }
+            catch { /* ignore */ }
+            clearTimeout(connectTimer);
+            clearTimeout(decisionTimer);
+            resolve(v);
+        };
+        const socket = createConnection(HOOK_SOCKET_PATH);
+        let buffer = "";
+        const connectTimer = setTimeout(() => done(undefined), CONNECT_TIMEOUT_MS);
+        // For Notification we don't need a decision; a short window to deliver the
+        // message is enough. For PreToolUse we wait for the human.
+        const decisionTimer = setTimeout(() => done(undefined), event === "PreToolUse" ? DECISION_TIMEOUT_MS : 2_000);
+        socket.on("connect", () => {
+            clearTimeout(connectTimer);
+            try {
+                socket.write(JSON.stringify({ type: "hook", event, payload }) + "\n");
+            }
+            catch {
+                done(undefined);
+            }
+            // Notification: deliver and go; don't wait for a reply.
+            if (event !== "PreToolUse")
+                setTimeout(() => done(undefined), 300);
+        });
+        socket.on("data", (chunk) => {
+            buffer += chunk.toString("utf8");
+            const nl = buffer.indexOf("\n");
+            if (nl === -1)
+                return;
+            try {
+                const msg = JSON.parse(buffer.slice(0, nl));
+                done(typeof msg.decision === "string" ? msg.decision : undefined);
+            }
+            catch {
+                done(undefined);
+            }
+        });
+        socket.on("error", () => done(undefined));
+        socket.on("close", () => done(undefined));
+    });
+}
+//# sourceMappingURL=hook.js.map

package/dist/cli/src/commands/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../../../src/commands/hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,6EAA6E;AAC7E,8EAA8E;AAC9E,yDAAyD;AACzD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;AAE3E,gFAAgF;AAChF,gFAAgF;AAChF,wDAAwD;AACxD,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,6EAA6E;AAC7E,uEAAuE;AACvE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC;;;;iFAIiF;AACjF,SAAS,WAAW;IAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAClC,iEAAiE;QACjE,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;sCAGsC;AACtC,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAa;IACzC,IAAI,OAAO,GAA4B,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,GAAG;YAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,EAAE,CAAC,CAAC,8BAA8B;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvD,yEAAyE;IACzE,gEAAgE;IAChE,IAAI,KAAK,KAAK,YAAY,IAAI,QAAQ,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC;QAC9G,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,kBAAkB,EAAE;gBAClB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,QAAQ;gBAC5B,wBAAwB,EAAE,2BAA2B;aACtD;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;4CAE4C;AAC5C,SAAS,eAAe,CAAC,KAAa,EAAE,OAAgC;IACtE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,CAAqB,EAAE,EAAE;YACrC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAChD,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QAClD,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC3E,2EAA2E;QAC3E,2DAA2D;QAC3D,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAE9G,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACxE,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,SAAS,CAAC,CAAC;YAClB,CAAC;YACD,wDAAwD;YACxD,IAAI,KAAK,KAAK,YAAY;gBAAE,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAAE,OAAO;YACtB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAA0B,CAAC;gBACrE,IAAI,CAAC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACpE,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,SAAS,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/src/runtime/acp/agent-workspace.js

@@ -1215,6 +1215,98 @@ function runningCodexSessionIds(nowMs) {
     walk(root);
     return running;
 }
+/** Read a Codex session's last-known settings (reasoning effort, plan mode,
+ *  permission/sandbox) from its on-disk rollout, so opening a session LinkShell
+ *  never drove shows the config it actually ran with. Codex records the live
+ *  turn config in `turn_context` records; the last one is the current config.
+ *  Matched by the filename session id (cheap — no per-file reads to locate it),
+ *  newest first. Only called on open (one file), never per-list. */
+function codexSessionConfig(sessionId) {
+    const root = join(homedir(), ".codex", "sessions");
+    if (!existsSync(root))
+        return {};
+    const ID_RE = /^rollout-\d{4}-\d{2}-\d{2}T\d{2}-\d{2}-\d{2}-(.+)\.jsonl$/;
+    const matches = [];
+    const walk = (dir) => {
+        let entries;
+        try {
+            entries = readdirSync(dir);
+        }
+        catch {
+            return;
+        }
+        for (const name of entries) {
+            const path = join(dir, name);
+            let stat;
+            try {
+                stat = statSync(path);
+            }
+            catch {
+                continue;
+            }
+            if (stat.isDirectory()) {
+                walk(path);
+                continue;
+            }
+            const match = ID_RE.exec(name);
+            if (match && match[1] === sessionId)
+                matches.push({ path, mt: stat.mtimeMs });
+        }
+    };
+    walk(root);
+    if (matches.length === 0)
+        return {};
+    matches.sort((a, b) => b.mt - a.mt);
+    const newest = matches[0];
+    if (!newest)
+        return {};
+    let lastTurnContext;
+    try {
+        const text = readFileSync(newest.path, "utf8");
+        for (const line of text.split(/\r?\n/)) {
+            if (!line.trim())
+                continue;
+            let record;
+            try {
+                record = asRecord(JSON.parse(line));
+            }
+            catch {
+                continue;
+            }
+            if (record?.type === "turn_context") {
+                lastTurnContext = asRecord(record.payload) ?? record;
+            }
+        }
+    }
+    catch {
+        return {};
+    }
+    if (!lastTurnContext)
+        return {};
+    const cfg = {};
+    const collab = asRecord(lastTurnContext.collaboration_mode);
+    const effort = firstString(asRecord(collab?.settings), ["reasoning_effort"]);
+    if (effort)
+        cfg.reasoningEffort = effort;
+    const mode = firstString(collab, ["mode"]);
+    if (mode === "plan")
+        cfg.collaborationMode = "plan";
+    else if (mode)
+        cfg.collaborationMode = "default";
+    // Map Codex's sandbox policy (kebab-case, e.g. "danger-full-access") to ours.
+    const sandbox = firstString(asRecord(lastTurnContext.sandbox_policy), ["type"]);
+    if (sandbox) {
+        const norm = sandbox.replace(/-/g, "").toLowerCase();
+        cfg.permissionMode = norm.includes("readonly")
+            ? "read_only"
+            : norm.includes("workspace")
+                ? "workspace_write"
+                : norm.includes("danger") || norm.includes("full")
+                    ? "full_access"
+                    : undefined;
+    }
+    return cfg;
+}
 function parseRemoteSessions(value) {
     const raw = asRecord(value);
     const sessionsValue = Array.isArray(value) ? value :
@@ -2087,6 +2179,36 @@ export class AgentWorkspaceProxy {
         const model = firstString(thread, ["model", "modelId", "currentModel"]);
         if (model && !conversation.model)
             conversation.model = model;
+        // Fill the control settings (reasoning effort / permission / plan mode) from
+        // the on-disk transcript when we don't already have them, so opening a
+        // session LinkShell never drove shows what it actually ran with instead of
+        // the UI's first-option default. Existing (LinkShell-set) values win — this
+        // only backfills. One file read, on open only; never per-list.
+        if (conversation.reasoningEffort === undefined &&
+            conversation.permissionMode === undefined &&
+            conversation.collaborationMode === undefined) {
+            try {
+                let cfg = {};
+                if (conversation.provider === "codex") {
+                    cfg = codexSessionConfig(conversation.agentSessionId);
+                }
+                else {
+                    const readConfig = client.readSessionConfig;
+                    if (typeof readConfig === "function") {
+                        cfg = (asRecord(await readConfig.call(client, { sessionId: conversation.agentSessionId })) ?? {});
+                    }
+                }
+                if (cfg.reasoningEffort && !conversation.reasoningEffort)
+                    conversation.reasoningEffort = cfg.reasoningEffort;
+                if (cfg.permissionMode && !conversation.permissionMode)
+                    conversation.permissionMode = cfg.permissionMode;
+                if (cfg.collaborationMode && !conversation.collaborationMode)
+                    conversation.collaborationMode = cfg.collaborationMode;
+            }
+            catch {
+                // Best-effort — a missing/unreadable transcript just leaves the pills at 默认.
+            }
+        }
         // Seed a scroll-back cursor for Claude, which hydrates via readSession (full
         // transcript) yet pages via listTurns. The timeline only keeps the last
         // MAX_TIMELINE_ITEMS, so anything older is dropped here but reachable via