thinkpool-pair 0.7.106 → 0.7.107

package/account.mjs

@@ -605,11 +605,19 @@ export async function runAccount(SUPABASE_URL, SUPABASE_ANON) {
           try { w.reply(m) } catch { /* reply path gone */ }
         }
       })
-      child.on('exit', () => {
+      const dropRoom = () => {
         children.delete(room); childIdle.delete(room); childBetween.delete(room); childPeer.delete(room); roomNames.delete(room); roomPartner.delete(room)   // re-served on the next tick
         // Fail any in-flight cross-room peeks/posts this dead room had ASKED (bus-origin
         // entries have askerRoom null and just time out on their own).
         for (const [reqId, w] of pairPending) { if (w?.askerRoom === room) pairPending.delete(reqId) }
+      }
+      child.on('exit', dropRoom)
+      // A spawn that never starts (execPath/cwd vanished between the existsSync check and
+      // spawn) emits 'error', NOT 'exit'. Without this handler the stale children-map entry
+      // would block re-serving forever AND an unhandled 'error' would crash the supervisor.
+      child.on('error', (e) => {
+        dropRoom()
+        try { process.stderr.write(`\n  ◇ ${room}: failed to launch its bridge (${e?.message || e}) — retrying next tick.\n`) } catch { /* noop */ }
       })
       // If an update is already pending, tell the freshly-served child immediately so
       // its room shows the "update ready" chip without waiting for the next poll.
@@ -634,6 +642,7 @@ export async function runAccount(SUPABASE_URL, SUPABASE_ANON) {
 
   await tick()
   const iv = setInterval(tick, 15000)
+  const updateTimers = []   // auto-update poll/apply timers — cleared in stop() so none fire post-exit
   let stopping = false
   // restart-vs-stop is the ONLY difference in exit code: a web "restart" sets this so
   // we exit non-zero (every supervisor respawns); a normal stop/shutdown exits 0.
@@ -641,6 +650,7 @@ export async function runAccount(SUPABASE_URL, SUPABASE_ANON) {
     if (stopping) return; stopping = true
     const code = restarting ? 1 : 0
     clearInterval(iv)
+    for (const t of updateTimers) { try { clearInterval(t) } catch { /* noop */ } }   // clearInterval clears Timeouts too
     keepFresh.cancel()
     releaseSingleton()
     for (const c of children.values()) { try { c.kill(sig || 'SIGTERM') } catch { /* noop */ } }
@@ -703,9 +713,9 @@ export async function runAccount(SUPABASE_URL, SUPABASE_ANON) {
         applyIfIdle()   // unattended fallback fires here when no room has a web peer
       }
     }
-    setInterval(check, POLL_MS).unref()
-    setInterval(applyIfIdle, 15000).unref()
-    setTimeout(check, 60000).unref()
+    updateTimers.push(setInterval(check, POLL_MS).unref())
+    updateTimers.push(setInterval(applyIfIdle, 15000).unref())
+    updateTimers.push(setTimeout(check, 60000).unref())
   }
 
   await new Promise(() => {})

package/claude-session.mjs

@@ -248,14 +248,18 @@ export function startClaudeSession({ cwd, model, resume, env, mode: initialMode
     // Surface it to the room when it changes; absent on models without effort.
     const lvl = hookInput.effort?.level
     if (lvl && lvl !== effort) { effort = lvl; emit({ kind: 'effort', level: effort }) }
-    // Flow CONDUCTOR hard-stop: a conductor must DECOMPOSE, never fan out Task/Explore
-    // subagents. The prompt asks it not to, but the model's parallelize instinct wins and
-    // it spawns Explore agents anyway — which (in plan mode) raise permission cards on the
-    // now-hidden conductor terminal and hang the whole flow. Deny the Task tool outright and
-    // tell it to read with Read/Grep/Glob + ExitPlanMode. (blockSubagents is set only for
-    // the conductor session — lanes are governed by their own one-hop prompt rule.)
-    if (blockSubagents && (toolName === 'Task' || toolName === 'Agent')) {
-      return { continue: true, hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'deny', permissionDecisionReason: 'Flow conductors do NOT spawn subagents — it stalls the flow on a permission card. If you must inspect the codebase, read it yourself with Read/Grep/Glob (allowed here, no prompt). Then DECOMPOSE and call ExitPlanMode once. Do not call Task/Agent again.' } }
+    // Flow CONDUCTOR hard-stop: a conductor must DECOMPOSE using ONLY Read/Grep/Glob (which
+    // are auto-allowed, no card) then ExitPlanMode. Two things otherwise stall it on a
+    // permission card on the now-hidden conductor terminal: (1) Task/Agent subagents — the
+    // model's parallelize instinct fans out Explore agents despite the prompt; (2) Bash —
+    // the model reaches for `find`/`grep`/`wc`, and Bash is medium-risk → a card in plan
+    // mode. Deny BOTH and tell it to use Grep/Glob/Read instead. (blockSubagents is set only
+    // for the conductor session — lanes build under their own bypass/one-hop rules.)
+    if (blockSubagents && (toolName === 'Task' || toolName === 'Agent' || toolName === 'Bash')) {
+      const reason = (toolName === 'Bash')
+        ? 'Flow conductors do NOT run Bash — it pops a permission card and stalls the flow. Use the Grep tool (not `grep`/`rg`), the Glob tool (not `find`/`ls`), and Read (not `cat`/`head`) — those run with no prompt. Then DECOMPOSE and call ExitPlanMode once.'
+        : 'Flow conductors do NOT spawn subagents — it stalls the flow on a permission card. Inspect the codebase yourself with Read/Grep/Glob (no prompt). Then DECOMPOSE and call ExitPlanMode once. Do not call Task/Agent again.'
+      return { continue: true, hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'deny', permissionDecisionReason: reason } }
     }
     // ThinkPool cross-terminal READ (B2) is read-only + within-room — never
     // prompt, in any mode. It still surfaces as a tool card so the room sees the peek.
@@ -388,7 +392,7 @@ export function startClaudeSession({ cwd, model, resume, env, mode: initialMode
     let decision = 'allow'
     if (!auto) {
       try {
-        decision = await requestPermission?.({ id: randomUUID(), toolName, input: toolInput, risk }) ?? 'allow'
+        decision = await requestPermission?.({ id: randomUUID(), toolName, input: toolInput, risk }) ?? 'deny'
       } catch { decision = 'deny' } // a broken permission path must fail safe (deny)
       // "Allow & don't ask again" — remember the signature, then allow.
       if (decision === 'always') { alwaysAllow.add(sig); decision = 'allow' }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkpool-pair",
-  "version": "0.7.106",
+  "version": "0.7.107",
   "description": "Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.",
   "type": "module",
   "bin": {