thincoder 0.12.24 → 0.12.26

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thincoder",
-  "version": "0.12.24",
+  "version": "0.12.26",
   "description": "Thin coding agent - zero dependencies, no build step, Node.js native. Sharp code, zero bloat.",
   "keywords": [
     "ai",

package/src/acp/session.mjs

@@ -12,9 +12,10 @@
  * - `run` is injectable for tests (defaults to the real runAgent).
  */
 import { runAgent } from "../agent.mjs"
+import { saveSession } from "../session.mjs"
 import { buildAcpCallbacks } from "./bridge.mjs"
 
-export function createAcpSession({ id, agent, notify, request = async () => { throw new Error("no request channel") }, log = () => {}, run = runAgent }) {
+export function createAcpSession({ id, agent, notify, request = async () => { throw new Error("no request channel") }, log = () => {}, run = runAgent, save = saveSession }) {
   let controller = new AbortController()
   const callbacks = buildAcpCallbacks({ sessionId: id, notify, request, log })
   let queue = Promise.resolve()
@@ -33,6 +34,11 @@ export function createAcpSession({ id, agent, notify, request = async () => { th
           busy = false
           // Fresh controller per turn: cancel() only affects the in-flight turn.
           controller = new AbortController()
+          // Persist the session archive at EVERY turn end (success/cancel/failure —
+          // finally semantics, desktop proposal ACP-SESSION-PERSISTENCE §2.1 US-E4):
+          // session/list / load / resume get a real data source; a save failure must
+          // never break the queue chain.
+          try { save(agent) } catch (e) { log(`[session] save failed: ${e?.message ?? e}`) }
         }
       })
       // Keep the chain alive even when a turn rejects (the next prompt still runs).

package/src/acp.mjs

@@ -13,13 +13,15 @@
  * `isConfigured` / `createSession` are injectable for tests.
  */
 import { readFileSync } from "node:fs"
-import { resolve } from "node:path"
-import { loadConfig } from "./config.mjs"
+import { resolve, join } from "node:path"
+import { loadConfig, configDir } from "./config.mjs"
 import { assembleAgent } from "./cli/make-agent.mjs"
 import { createAcpServer, ACP_ERRORS } from "./acp/transport.mjs"
 import { createAcpSession } from "./acp/session.mjs"
 import { replayHistory } from "./acp/bridge.mjs"
 import { listSlots, applySession, deleteSlot, sessionPath, normalizeCwd, isLegacyTransient } from "./session.mjs"
+import { createCheckpoint, listCheckpoints, rewind, isGitRepo } from "./git/checkpoint.mjs"
+import { createMemory, list as memList, remove as memRemove } from "./memory.mjs"
 
 const VERSION = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version
 
@@ -314,6 +316,56 @@ export function buildAcpHandlers({
         })
         return {}
       },
+
+      // ─── M5-pull-forward: checkpoints (desktop proposal ②) + memory (③) ───
+      // Checkpoints are cwd-scoped (same store the TUI git tool uses); non-git cwds
+      // now snapshot by full-directory copy instead of returning null.
+
+      "checkpoint/create": async () => {
+        if (!authenticated) return { error: ACP_ERRORS.AUTH_REQUIRED }
+        const cp = await createCheckpoint(getCwd())
+        if (!cp) return { error: { ...ACP_ERRORS.INTERNAL, message: "checkpoint creation failed" } }
+        return { checkpoint: { id: cp.id, time: cp.time, files: cp.files, git: isGitRepo(getCwd()) } }
+      },
+
+      "checkpoint/list": async () => {
+        if (!authenticated) return { error: ACP_ERRORS.AUTH_REQUIRED }
+        const cps = await listCheckpoints(getCwd())
+        return { checkpoints: cps.map((c) => ({ id: c.id, time: c.time, files: (c.tracked?.length ?? 0) + (c.untracked?.length ?? 0), trackedCount: c.tracked?.length ?? 0, untrackedCount: c.untracked?.length ?? 0 })) }
+      },
+
+      "checkpoint/restore": async (params) => {
+        if (!authenticated) return { error: ACP_ERRORS.AUTH_REQUIRED }
+        if (!params.checkpointId || !params.path) {
+          return { error: { ...ACP_ERRORS.INVALID_PARAMS, message: "checkpoint/restore requires checkpointId and path (single-file restore; full rewind is disabled)" } }
+        }
+        try {
+          await rewind(getCwd(), String(params.checkpointId), { path: String(params.path) })
+          return { restored: String(params.path) }
+        } catch (e) {
+          return { error: { ...ACP_ERRORS.INVALID_PARAMS, message: e?.message ?? String(e) } }
+        }
+      },
+
+      "memory/list": async (params) => {
+        if (!authenticated) return { error: ACP_ERRORS.AUTH_REQUIRED }
+        const mem = ensureAcpMemory()
+        if (!mem) return { error: { ...ACP_ERRORS.INTERNAL, message: "memory unavailable" } }
+        const entries = await memList(mem, { type: params.type })
+        return { entries: entries.map((e) => ({ id: e.id, type: e.type, title: e.title, tags: e.tags ?? "", updatedAt: e.updatedAt ?? null })) }
+      },
+
+      "memory/remove": async (params) => {
+        if (!authenticated) return { error: ACP_ERRORS.AUTH_REQUIRED }
+        const id = Number(params.id)
+        if (!Number.isInteger(id) || id < 1) {
+          return { error: { ...ACP_ERRORS.INVALID_PARAMS, message: `memory/remove requires a numeric id (got ${params.id})` } }
+        }
+        const mem = ensureAcpMemory()
+        if (!mem) return { error: { ...ACP_ERRORS.INTERNAL, message: "memory unavailable" } }
+        const ok = await memRemove(mem, id)
+        return ok ? { removed: id } : { error: { ...ACP_ERRORS.INVALID_PARAMS, message: `no memory entry #${id}` } }
+      },
     },
     sessions,
     notifyRef,
@@ -321,6 +373,19 @@ export function buildAcpHandlers({
   }
 }
 
+/** Shared memory handle for ACP handlers (same ~/.thincoder store the TUI uses).
+ *  dbPath mirrors the TUI default (see cli/make-agent.mjs). */
+let _acpMemory = null
+function ensureAcpMemory() {
+  if (_acpMemory) return _acpMemory
+  try {
+    _acpMemory = createMemory({ dbPath: join(configDir, "memory.db") })
+    return _acpMemory
+  } catch {
+    return null // memory subsystem unavailable — handlers report it
+  }
+}
+
 /** `thincoder acp` — start the server and block until the client closes the pipe. */
 export async function runAcpServer() {
   const log = (...a) => process.stderr.write(a.join(" ") + "\n")

package/src/advisor.mjs

@@ -92,6 +92,12 @@ try { ADVISOR_DESIGN = readFileSync(join(__dirname, "prompts", "advisor-design.m
  * @param {string} [reviewType] — "design" for design review, undefined/"code" for code review
  * @returns {string} the system prompt
  */
+/** Append local time so the reviewer knows "now" (same grounding as the agent loop). */
+function withTime(prompt) {
+  const timeZone = Intl.DateTimeFormat().resolvedOptions().timeZone || "local"
+  return prompt + `\n\nCurrent time: ${new Date().toLocaleString("sv-SE")} (${timeZone}).`
+}
+
 export function buildAdvisorSystemPrompt(agent, prior, reviewType) {
   // Round decision is DETERMINISTIC (decision 2026-08-08): _advisorRound > 0
   // with a stored review output means convergence (round 2+); 0 means round 1.
@@ -215,7 +221,7 @@ export function prepareAdvisorMessages(agent, reviewType, designToken = null, do
   // after a failed design review). Fresh session.
   if (reviewType === "design" && (agent._advisorRound || 0) === 0) {
     return [
-      { role: "system", content: buildAdvisorSystemPrompt(agent, prior, reviewType) },
+      { role: "system", content: withTime(buildAdvisorSystemPrompt(agent, prior, reviewType)) },
       { role: "user", content: escapeLiteralEscapes(buildAdvisorUserMessage(agent, prior, reviewType, designToken, documents, paths)) },
     ]
   }
@@ -243,7 +249,7 @@ export function prepareAdvisorMessages(agent, reviewType, designToken = null, do
     // Mutations exist → KEEP the round (cap keeps advancing through retries).
     const user = buildAdvisorUserMessage(agent, prior, reviewType, designToken, documents, paths)
     return [
-      { role: "system", content: buildAdvisorSystemPrompt(agent, prior, reviewType) },
+      { role: "system", content: withTime(buildAdvisorSystemPrompt(agent, prior, reviewType)) },
       {
         role: "user",
         // NOTE (2026-08-06): the leading prefix is a PLAIN "System reminder:",
@@ -271,7 +277,7 @@ export function prepareAdvisorMessages(agent, reviewType, designToken = null, do
   // review surface.
   const scopeFiles = resolveScopeFiles(agent, paths)
   return [
-    { role: "system", content: buildAdvisorSystemPrompt(agent, prior, reviewType) },
+    { role: "system", content: withTime(buildAdvisorSystemPrompt(agent, prior, reviewType)) },
     { role: "user", content: escapeLiteralEscapes(buildAdvisorFollowUp(agent, prior, scopeFiles)) },
   ]
 }

package/src/agent/setup.mjs

@@ -221,6 +221,15 @@ export async function prepareRun(agent, input, callbacks, {
       ? `${base}\n\n${mainOverlay}`
       : base
 
+  // Local time + timezone on every agent (main, subagent, consult) — without it "today"/
+  // "just now"/"recent" in user messages and search freshness are ungrounded.
+  // MINUTE precision, deliberately: system prompts must stay byte-identical across runs
+  // within the same minute or provider prefix caches (DeepSeek cache_hit) never hit.
+  const timeZone = Intl.DateTimeFormat().resolvedOptions().timeZone || "local"
+  const now = new Date()
+  const mins = String(now.getMinutes()).padStart(2, "0")
+  systemPrompt += `\n\nCurrent time: ${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}-${String(now.getDate()).padStart(2, "0")} ${String(now.getHours()).padStart(2, "0")}:${mins} (${timeZone}).`
+
   const projectRules = await loadProjectInstructions(agent.cwd)
   if (projectRules) {
     systemPrompt += `\n\nProject instructions (follow these as project conventions):\n<untrusted_project_instructions>\n${escapeXml(projectRules)}\n</untrusted_project_instructions>`

package/src/config.mjs

@@ -198,6 +198,20 @@ export function normalizeProxy(proxy) {
  * THINCODER_ACTIVE_MODEL overrides the active model (wins over THINCODER_MODEL — see loadConfig)
  * Provider-specific key fallbacks (when providers[] lacks a key): DEEPSEEK_API_KEY / OPENAI_API_KEY
  */
+/** Keep only { header: "string value" } pairs from a provider's headers field — anything
+ *  else (null, arrays, nested objects) is dropped so it can never reach a fetch call.
+ *  Authorization is built-in and cannot be overridden from headers (core.mjs spreads first). */
+function sanitizeProviderHeaders(p) {
+  if (p.headers == null || typeof p.headers !== "object" || Array.isArray(p.headers)) { delete p.headers; return p }
+  const clean = {}
+  for (const [k, v] of Object.entries(p.headers)) {
+    if (typeof v === "string" && k.toLowerCase() !== "authorization") clean[k] = v
+  }
+  if (Object.keys(clean).length > 0) p.headers = clean
+  else delete p.headers
+  return p
+}
+
 export function loadConfig() {
   let config = {}
   if (existsSync(configPath)) {
@@ -211,7 +225,9 @@ export function loadConfig() {
   const merged = {
     ...DEFAULTS,
     ...config,
-    providers: Array.isArray(config.providers) && config.providers.length ? config.providers.map((p) => ({ ...p })) : DEFAULTS.providers.map((p) => ({ ...p })),
+    providers: Array.isArray(config.providers) && config.providers.length
+      ? config.providers.map((p) => sanitizeProviderHeaders({ ...p }))
+      : DEFAULTS.providers.map((p) => ({ ...p })),
     activeProvider: config.activeProvider ?? DEFAULTS.activeProvider,
     agent: { ...DEFAULTS.agent, ...config.agent },
     memory: { ...DEFAULTS.memory, ...config.memory },

package/src/git/checkpoint.mjs

@@ -88,8 +88,53 @@ async function copyInto(dir, rel, src, skipped) {
  * Per-file metadata ({ size, sha } per copied file) is stored in meta.json — this powers
  * listFileVersions (per-file history across snapshots) without rescanning copies.
  */
+/** Full-directory snapshot for NON-git cwds (desktop proposal ②: createCheckpoint used to
+ *  return null here, silently disabling checkpoints for non-git projects). Every file is
+ *  copied under files/ (v2 layout, same rewind code path); meta carries nongit:true so
+ *  rewind knows to skip git plumbing. Respects .gitignore-like skips via SKIP set only. */
+async function createNonGitCheckpoint(cwd) {
+  const id = Date.now().toString(36) + "-" + Math.random().toString(36).slice(2, 6)
+  const dir = join(checkpointRoot(cwd), id)
+  await mkdir(join(dir, "files"), { recursive: true })
+  await mkdir(join(dir, "untracked"), { recursive: true })
+
+  const skipped = []
+  const fileMeta = {}
+  const all = await collectFiles(cwd)
+  for (const rel of all) {
+    const m = await copyInto(join(dir, "files"), rel, join(cwd, rel), skipped)
+    if (m) fileMeta[rel] = m
+  }
+  await writeFile(join(dir, "patch.diff"), "", "utf8") // no patch in nongit mode (layout compat)
+  await writeFile(join(dir, "meta.json"), JSON.stringify({
+    version: META_VERSION, id, time: Date.now(), nongit: true,
+    untracked: [], tracked: all, trackedAll: all, skipped, head: "", fileMeta, untrackedMeta: {},
+  }, null, 2), "utf8")
+  await pruneCheckpoints(cwd)
+  return { id, time: Date.now(), files: all.length, tracked: all, untracked: [], skipped }
+}
+
+/** Walk a non-git cwd collecting every file (relative paths), skipping heavy/irrelevant dirs. */
+async function collectFiles(cwd) {
+  const SKIP = new Set(["node_modules", ".git", "dist", "build", ".turbo", "coverage", ".next", "target", "__pycache__", ".venv"])
+  const out = []
+  async function walk(rel) {
+    const abs = rel ? join(cwd, rel) : cwd
+    let entries
+    try { entries = await readdir(abs, { withFileTypes: true }) } catch { return }
+    for (const e of entries) {
+      if (e.name.startsWith(".thincoder")) continue
+      const child = rel ? `${rel}/${e.name}` : e.name
+      if (e.isDirectory()) { if (!SKIP.has(e.name)) await walk(child) }
+      else out.push(child)
+    }
+  }
+  await walk("")
+  return out
+}
+
 export async function createCheckpoint(cwd) {
-  if (!isGitRepo(cwd)) return null
+  if (!isGitRepo(cwd)) return createNonGitCheckpoint(cwd)
 
   // Random suffix: prevents id collisions for two snapshots in the same millisecond (sorting stays ordered by timestamp prefix)
   const id = Date.now().toString(36) + "-" + Math.random().toString(36).slice(2, 6)

package/src/provider/core.mjs

@@ -267,7 +267,7 @@ export function normalizeToolPairing(messages) {
 /** List available model IDs from the provider's /models endpoint */
 export async function listModels(provider, { signal } = {}) {
   const response = await fetch(`${provider.baseURL}/models`, {
-    headers: { Authorization: `Bearer ${provider.apiKey}` },
+    headers: { ...(provider.headers ?? {}), Authorization: `Bearer ${provider.apiKey}` },
     signal,
   })
   if (!response.ok) {
@@ -294,6 +294,7 @@ async function requestWithRetry(provider, body, signal, onWait) {
       const opts = {
         method: "POST",
         headers: {
+          ...(provider.headers ?? {}), // custom per-provider headers (desktop proposal ④: X-Device-Id etc.)
           "Content-Type": "application/json",
           Authorization: `Bearer ${provider.apiKey}`,
         },

package/src/tools/bash.md

@@ -28,7 +28,7 @@ Notes:
 - The environment sets GIT_PAGER=cat, PAGER=cat, EDITOR=true, TERM=dumb — but still always use non-interactive flags
 - Output is capped at ~200K chars; if you need more, redirect to a file and read it. Truncated output ends with a `[... truncated: N chars omitted]` marker — the missing tail may contain errors.
 - Check `[stderr]` for error messages, warnings, and diagnostic output — it is separated from `[stdout]` so you can quickly identify problems.
-- On Windows, use Unix shell syntax inside bash commands (Git Bash): forward slashes, `/dev/null` not `NUL`
+- On Windows the shell is **cmd.exe** (NOT Git Bash, NOT PowerShell): `&&`/`||` chaining works, use cmd built-ins (`del`, `dir`, `type`, `findstr`, `tasklist`) and `/dev/null`→`NUL`, `2>/dev/null`→`>nul 2>&1`. Bash-isms (`rm -rf`, `cp -r`, `head`, `$(...)`) FAIL. For complex logic prefer `node -e` over shell gymnastics.
 - Never use bash to read, copy, or transmit secret files (.env, keys, tokens)
 - Do NOT run destructive commands (rm -rf, force-push, drop table) without explicit user confirmation
 - After commands that change files (git checkout, npm install, etc.), repo_outline and code_search may be stale — re-run them to get current results.