thinkpool-pair 0.6.13 → 0.6.14

package/bridge.mjs

@@ -217,6 +217,9 @@ const name = process.env.TP_NAME || os.userInfo().username || 'host'
 // Cheap reads, no subprocess: directory name + .git/HEAD.
 const cwd = process.cwd()
 const repoLabel = path.basename(cwd)
+// thinkpool-pair's own version — surfaced in the room's welcome banner.
+let VERSION = null
+try { VERSION = JSON.parse(fs.readFileSync(new URL('./package.json', import.meta.url), 'utf8')).version } catch { /* unknown — banner omits it */ }
 let branch = null
 try {
   const head = fs.readFileSync(path.join(cwd, '.git', 'HEAD'), 'utf8').trim()
@@ -270,6 +273,9 @@ const bcast = (event, payload) => {
 const announce = () =>
   bcast('bridge', {
     v: 2, name, repo: repoLabel, branch,
+    // cwd + version: the host's working dir + thinkpool-pair version, shown in
+    // the room's welcome banner. Re-sent per announce so late joiners get them.
+    cwd, version: VERSION,
     // updir: where room file-drops land (forward-slash normalised — the web
     // client string-joins host paths onto it; Node accepts `/` on Windows).
     updir: UPDIR.split(path.sep).join('/'),

package/claude-session.mjs

@@ -39,6 +39,21 @@ export function classifyRisk(toolName, input) {
   return 'medium'
 }
 
+// ── safe-doc writes — auto-allow regardless of permission mode ──
+// The repo MANDATES end-of-session writes (devlogs under .claude/SESSIONS/, and
+// CLAUDE.md updates). They're append-only documentation with no runtime blast
+// radius. Carding them in `default` mode dead-ended a phone-driven paired session
+// (2026-06-15 SESSIONS-gate: every write threw a room card, deny-default + the
+// "do not retry" deny-reason made Claude abandon the write and re-explain). These
+// paths skip the card always; Bash/network/destructive/other writes are unchanged.
+// Spec: docs/specs/2026-06-15-paired-permission-safe-doc-writes.md.
+const SAFE_DOC_RE = /(^|\/)\.claude\/SESSIONS\/|(^|\/)CLAUDE\.md$/
+export function isSafeDocWrite(toolName, input) {
+  if (!WRITE_TOOLS.has(toolName)) return false
+  const p = (input && (input.file_path || input.notebook_path)) || ''
+  return SAFE_DOC_RE.test(p)
+}
+
 // ── input stream — a generator we keep open and feed turns into ──
 function makeInputStream() {
   const queue = []
@@ -146,10 +161,12 @@ export function startClaudeSession({ cwd, model, resume, onEvent, requestPermiss
     // "Don't ask again" is keyed by tool + risk tier, so allowing medium Bash
     // never silently allows a future destructive one (high always re-asks).
     const sig = `${toolName}:${risk}`
+    const safeDoc = isSafeDocWrite(toolName, toolInput)
     const auto =
       risk === 'low' ||
       mode === 'bypassPermissions' ||
       (mode === 'acceptEdits' && WRITE_TOOLS.has(toolName) && risk !== 'high') ||
+      safeDoc ||
       alwaysAllow.has(sig)
     let decision = 'allow'
     if (!auto) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkpool-pair",
-  "version": "0.6.13",
+  "version": "0.6.14",
   "description": "Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.",
   "type": "module",
   "bin": {