thinkpool-pair 0.7.208 → 0.7.209

package/bridge.mjs

@@ -50,7 +50,7 @@ import { validateProviderSwitch, providerSwitchPlan, BUILTIN_PROVIDER } from './
 import { createSdkMcpServer, tool } from '@anthropic-ai/claude-agent-sdk'
 import { z } from 'zod'
 import { startClaudeSession } from './claude-session.mjs'
-import { startCodexSession, readCodexDefaultModel, readCodexModels, codexConfigForMode } from './codex-session.mjs'
+import { startCodexSession, readCodexDefaultModel, readCodexModels, codexConfigForMode, defaultModeForRuntime } from './codex-session.mjs'
 import { createManagedLaneWorktree, removeManagedLaneWorktree } from './lane-worktree.mjs'
 import { commandOnPath } from './agent-detect.mjs'
 
@@ -1544,7 +1544,13 @@ function worktreeSnapshot(cwd) {
 function openStructured({ id, runtime = 'claude', model, effort, resume, log, commands, mode, spawnedBy, rolePrompt, flowSessionId, flowTaskKey, cwd, managedWorktree, reviewSliceRoots, openedAt, defer, provider, carryRecap, lastUsage }) {
   if (sessions.has(id)) return
   runtime = runtime === 'codex' ? 'codex' : 'claude'
-  mode = STRUCTURED_MODES.has(mode) ? mode : 'default'
+  // No explicit mode → a sensible default per runtime (see defaultModeForRuntime):
+  // codex → bypassPermissions, so a freshly-opened codex terminal can fetch /
+  // advance / ship instead of hitting the no-network wall; claude → default.
+  // Only fires when no mode was passed — a person's pick, a resume (persisted
+  // entry.mode), a flow lane, and spawn_terminal (inherits the parent's mode +
+  // its own bypass-escalation gate) all pass an explicit mode and skip this.
+  mode = STRUCTURED_MODES.has(mode) ? mode : defaultModeForRuntime(runtime)
   // The lane's EFFECTIVE model — computed ONCE and used for BOTH the truthful display
   // label (entry.model) and the SDK's `model` option below. These used to be computed
   // separately: the label resolved the provider's configured model while the SDK got the

package/codex-session.mjs

@@ -44,6 +44,21 @@ export function codexConfigForMode(mode) {
   return CODEX_MODE_CONFIG[mode] || CODEX_MODE_CONFIG.default
 }
 
+/**
+ * The permission mode a FRESHLY-OPENED terminal gets when none was specified
+ * (the person clicked "+ New terminal" without picking a mode). Codex defaults
+ * to bypassPermissions: its workspace-write sandbox has NO network, so a
+ * default-mode codex lane can't fetch / advance git metadata / push / publish
+ * (the 2026-07-13 "sandbox won't let it advance Git metadata" wall) and is
+ * hobbled out-of-the-box. bypass gives a person-opened codex terminal parity
+ * with how Claude lanes run. Claude keeps 'default' — its permission modes don't
+ * gate network. Explicit modes (a person's pick, resume's persisted entry.mode,
+ * a flow lane, spawn_terminal's inherited mode) always override this.
+ */
+export function defaultModeForRuntime(runtime) {
+  return runtime === 'codex' ? 'bypassPermissions' : 'default'
+}
+
 export function readCodexDefaultModel({ home = process.env.CODEX_HOME || path.join(os.homedir(), '.codex'), fsImpl = fs } = {}) {
   try {
     const text = fsImpl.readFileSync(path.join(home, 'config.toml'), 'utf8')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkpool-pair",
-  "version": "0.7.208",
+  "version": "0.7.209",
   "description": "Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.",
   "type": "module",
   "bin": {