thinkpool-pair 0.6.12 → 0.6.14

package/bridge.mjs

@@ -217,6 +217,9 @@ const name = process.env.TP_NAME || os.userInfo().username || 'host'
 // Cheap reads, no subprocess: directory name + .git/HEAD.
 const cwd = process.cwd()
 const repoLabel = path.basename(cwd)
+// thinkpool-pair's own version — surfaced in the room's welcome banner.
+let VERSION = null
+try { VERSION = JSON.parse(fs.readFileSync(new URL('./package.json', import.meta.url), 'utf8')).version } catch { /* unknown — banner omits it */ }
 let branch = null
 try {
   const head = fs.readFileSync(path.join(cwd, '.git', 'HEAD'), 'utf8').trim()
@@ -270,6 +273,9 @@ const bcast = (event, payload) => {
 const announce = () =>
   bcast('bridge', {
     v: 2, name, repo: repoLabel, branch,
+    // cwd + version: the host's working dir + thinkpool-pair version, shown in
+    // the room's welcome banner. Re-sent per announce so late joiners get them.
+    cwd, version: VERSION,
     // updir: where room file-drops land (forward-slash normalised — the web
     // client string-joins host paths onto it; Node accepts `/` on Windows).
     updir: UPDIR.split(path.sep).join('/'),

package/claude-session.mjs

@@ -39,6 +39,21 @@ export function classifyRisk(toolName, input) {
   return 'medium'
 }
 
+// ── safe-doc writes — auto-allow regardless of permission mode ──
+// The repo MANDATES end-of-session writes (devlogs under .claude/SESSIONS/, and
+// CLAUDE.md updates). They're append-only documentation with no runtime blast
+// radius. Carding them in `default` mode dead-ended a phone-driven paired session
+// (2026-06-15 SESSIONS-gate: every write threw a room card, deny-default + the
+// "do not retry" deny-reason made Claude abandon the write and re-explain). These
+// paths skip the card always; Bash/network/destructive/other writes are unchanged.
+// Spec: docs/specs/2026-06-15-paired-permission-safe-doc-writes.md.
+const SAFE_DOC_RE = /(^|\/)\.claude\/SESSIONS\/|(^|\/)CLAUDE\.md$/
+export function isSafeDocWrite(toolName, input) {
+  if (!WRITE_TOOLS.has(toolName)) return false
+  const p = (input && (input.file_path || input.notebook_path)) || ''
+  return SAFE_DOC_RE.test(p)
+}
+
 // ── input stream — a generator we keep open and feed turns into ──
 function makeInputStream() {
   const queue = []
@@ -92,6 +107,7 @@ export function startClaudeSession({ cwd, model, resume, onEvent, requestPermiss
                           // setPermissionMode) route through it once streaming.
   let mode = 'default'    // mirrors Claude Code's ⇧⇥ cycle
   const alwaysAllow = new Set()  // tool:risk signatures the user chose "don't ask again" for
+  const toolStart = new Map()     // tool_use id → start time, for the duration badge
 
   const emit = (evt) => { try { onEvent?.(evt) } catch { /* never let a consumer throw into the loop */ } }
 
@@ -145,10 +161,12 @@ export function startClaudeSession({ cwd, model, resume, onEvent, requestPermiss
     // "Don't ask again" is keyed by tool + risk tier, so allowing medium Bash
     // never silently allows a future destructive one (high always re-asks).
     const sig = `${toolName}:${risk}`
+    const safeDoc = isSafeDocWrite(toolName, toolInput)
     const auto =
       risk === 'low' ||
       mode === 'bypassPermissions' ||
       (mode === 'acceptEdits' && WRITE_TOOLS.has(toolName) && risk !== 'high') ||
+      safeDoc ||
       alwaysAllow.has(sig)
     let decision = 'allow'
     if (!auto) {
@@ -193,13 +211,19 @@ export function startClaudeSession({ cwd, model, resume, onEvent, requestPermiss
             emit({ kind: 'system', sessionId, model: m.model || model || null })
             break
           case 'assistant':
+            // Stamp tool-call start times so tool_result can report a duration.
+            for (const b of (m.message?.content || [])) {
+              if (b?.type === 'tool_use' && b.id) toolStart.set(b.id, Date.now())
+            }
             emit({ kind: 'assistant', blocks: simplifyBlocks(m.message?.content) })
             break
           case 'user':
             // tool_result blocks arrive on the user-role echo
             for (const b of (m.message?.content || [])) {
               if (b?.type === 'tool_result') {
-                emit({ kind: 'tool_result', toolUseId: b.tool_use_id, content: b.content, isError: !!b.is_error })
+                const start = toolStart.get(b.tool_use_id)
+                if (start != null) toolStart.delete(b.tool_use_id)
+                emit({ kind: 'tool_result', toolUseId: b.tool_use_id, content: b.content, isError: !!b.is_error, durationMs: start != null ? Date.now() - start : undefined })
               }
             }
             break

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkpool-pair",
-  "version": "0.6.12",
+  "version": "0.6.14",
   "description": "Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.",
   "type": "module",
   "bin": {