thinkpool-pair 0.6.13 → 0.6.15

package/bridge.mjs

@@ -217,6 +217,9 @@ const name = process.env.TP_NAME || os.userInfo().username || 'host'
 // Cheap reads, no subprocess: directory name + .git/HEAD.
 const cwd = process.cwd()
 const repoLabel = path.basename(cwd)
+// thinkpool-pair's own version — surfaced in the room's welcome banner.
+let VERSION = null
+try { VERSION = JSON.parse(fs.readFileSync(new URL('./package.json', import.meta.url), 'utf8')).version } catch { /* unknown — banner omits it */ }
 let branch = null
 try {
   const head = fs.readFileSync(path.join(cwd, '.git', 'HEAD'), 'utf8').trim()
@@ -270,6 +273,9 @@ const bcast = (event, payload) => {
 const announce = () =>
   bcast('bridge', {
     v: 2, name, repo: repoLabel, branch,
+    // cwd + version: the host's working dir + thinkpool-pair version, shown in
+    // the room's welcome banner. Re-sent per announce so late joiners get them.
+    cwd, version: VERSION,
     // updir: where room file-drops land (forward-slash normalised — the web
     // client string-joins host paths onto it; Node accepts `/` on Windows).
     updir: UPDIR.split(path.sep).join('/'),

package/claude-session.mjs

@@ -39,6 +39,36 @@ export function classifyRisk(toolName, input) {
   return 'medium'
 }
 
+// ── safe-doc writes — auto-allow regardless of permission mode ──
+// The repo MANDATES end-of-session writes (devlogs under .claude/SESSIONS/, and
+// CLAUDE.md updates). They're append-only documentation with no runtime blast
+// radius. Carding them in `default` mode dead-ended a phone-driven paired session
+// (2026-06-15 SESSIONS-gate: every write threw a room card, deny-default + the
+// "do not retry" deny-reason made Claude abandon the write and re-explain). These
+// paths skip the card always; Bash/network/destructive/other writes are unchanged.
+// Spec: docs/specs/2026-06-15-paired-permission-safe-doc-writes.md.
+const SAFE_DOC_RE = /(^|\/)\.claude\/SESSIONS\/|(^|\/)CLAUDE\.md$/
+export function isSafeDocWrite(toolName, input) {
+  if (!WRITE_TOOLS.has(toolName)) return false
+  const p = (input && (input.file_path || input.notebook_path)) || ''
+  return SAFE_DOC_RE.test(p)
+}
+
+// The full auto-allow decision (exported for the contract test, so the policy
+// can't drift away from docs/specs/2026-06-15-paired-permission-safe-doc-writes.md).
+// Mirrors the PreToolUse policy: reads always; bypass mode always; acceptEdits for
+// non-high writes; mandated safe-doc writes always; per tool:risk "always allow".
+export function autoAllow({ toolName, input, mode = 'default', alwaysAllow = new Set() }) {
+  const risk = classifyRisk(toolName, input)
+  return (
+    risk === 'low' ||
+    mode === 'bypassPermissions' ||
+    (mode === 'acceptEdits' && WRITE_TOOLS.has(toolName) && risk !== 'high') ||
+    isSafeDocWrite(toolName, input) ||
+    alwaysAllow.has(`${toolName}:${risk}`)
+  )
+}
+
 // ── input stream — a generator we keep open and feed turns into ──
 function makeInputStream() {
   const queue = []
@@ -146,11 +176,8 @@ export function startClaudeSession({ cwd, model, resume, onEvent, requestPermiss
     // "Don't ask again" is keyed by tool + risk tier, so allowing medium Bash
     // never silently allows a future destructive one (high always re-asks).
     const sig = `${toolName}:${risk}`
-    const auto =
-      risk === 'low' ||
-      mode === 'bypassPermissions' ||
-      (mode === 'acceptEdits' && WRITE_TOOLS.has(toolName) && risk !== 'high') ||
-      alwaysAllow.has(sig)
+    const safeDoc = isSafeDocWrite(toolName, toolInput)
+    const auto = autoAllow({ toolName, input: toolInput, mode, alwaysAllow })
     let decision = 'allow'
     if (!auto) {
       try {
@@ -169,7 +196,9 @@ export function startClaudeSession({ cwd, model, resume, onEvent, requestPermiss
         permissionDecision: denied ? 'deny' : 'allow',
         permissionDecisionReason: denied
           ? 'Denied by the user in the ThinkPool room. Do not retry this tool — ask what to do instead.'
-          : auto ? `Auto-approved (${mode}).` : 'Approved in the ThinkPool room.',
+          : auto
+            ? (safeDoc ? 'Auto-approved (mandated doc write — .claude/SESSIONS/ or CLAUDE.md).' : `Auto-approved (${mode}).`)
+            : 'Approved in the ThinkPool room.',
       },
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkpool-pair",
-  "version": "0.6.13",
+  "version": "0.6.15",
   "description": "Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.",
   "type": "module",
   "bin": {