thinkpool-pair 0.7.208 → 0.7.210

package/bridge.mjs

@@ -50,7 +50,7 @@ import { validateProviderSwitch, providerSwitchPlan, BUILTIN_PROVIDER } from './
 import { createSdkMcpServer, tool } from '@anthropic-ai/claude-agent-sdk'
 import { z } from 'zod'
 import { startClaudeSession } from './claude-session.mjs'
-import { startCodexSession, readCodexDefaultModel, readCodexModels, codexConfigForMode } from './codex-session.mjs'
+import { startCodexSession, readCodexDefaultModel, readCodexModels, codexConfigForMode, defaultModeForRuntime } from './codex-session.mjs'
 import { createManagedLaneWorktree, removeManagedLaneWorktree } from './lane-worktree.mjs'
 import { commandOnPath } from './agent-detect.mjs'
 
@@ -1544,7 +1544,13 @@ function worktreeSnapshot(cwd) {
 function openStructured({ id, runtime = 'claude', model, effort, resume, log, commands, mode, spawnedBy, rolePrompt, flowSessionId, flowTaskKey, cwd, managedWorktree, reviewSliceRoots, openedAt, defer, provider, carryRecap, lastUsage }) {
   if (sessions.has(id)) return
   runtime = runtime === 'codex' ? 'codex' : 'claude'
-  mode = STRUCTURED_MODES.has(mode) ? mode : 'default'
+  // No explicit mode → a sensible default per runtime (see defaultModeForRuntime):
+  // codex → bypassPermissions, so a freshly-opened codex terminal can fetch /
+  // advance / ship instead of hitting the no-network wall; claude → default.
+  // Only fires when no mode was passed — a person's pick, a resume (persisted
+  // entry.mode), a flow lane, and spawn_terminal (inherits the parent's mode +
+  // its own bypass-escalation gate) all pass an explicit mode and skip this.
+  mode = STRUCTURED_MODES.has(mode) ? mode : defaultModeForRuntime(runtime)
   // The lane's EFFECTIVE model — computed ONCE and used for BOTH the truthful display
   // label (entry.model) and the SDK's `model` option below. These used to be computed
   // separately: the label resolved the provider's configured model while the SDK got the

package/codex-session.mjs

@@ -44,6 +44,21 @@ export function codexConfigForMode(mode) {
   return CODEX_MODE_CONFIG[mode] || CODEX_MODE_CONFIG.default
 }
 
+/**
+ * The permission mode a FRESHLY-OPENED terminal gets when none was specified
+ * (the person clicked "+ New terminal" without picking a mode). Codex defaults
+ * to bypassPermissions: its workspace-write sandbox has NO network, so a
+ * default-mode codex lane can't fetch / advance git metadata / push / publish
+ * (the 2026-07-13 "sandbox won't let it advance Git metadata" wall) and is
+ * hobbled out-of-the-box. bypass gives a person-opened codex terminal parity
+ * with how Claude lanes run. Claude keeps 'default' — its permission modes don't
+ * gate network. Explicit modes (a person's pick, resume's persisted entry.mode,
+ * a flow lane, spawn_terminal's inherited mode) always override this.
+ */
+export function defaultModeForRuntime(runtime) {
+  return runtime === 'codex' ? 'bypassPermissions' : 'default'
+}
+
 export function readCodexDefaultModel({ home = process.env.CODEX_HOME || path.join(os.homedir(), '.codex'), fsImpl = fs } = {}) {
   try {
     const text = fsImpl.readFileSync(path.join(home, 'config.toml'), 'utf8')
@@ -164,10 +179,18 @@ export function buildCodexPrompt({ text, rolePrompt, roomContext }) {
 export function buildCodexExecArgs({ sessionId, model, effort, sandbox, approvalPolicy = 'untrusted', providerConfig, mcpUrl, writableDirs = [], prompt }) {
   const safeSandbox = normalizeCodexSandbox(sandbox)
   const args = sessionId
-    // `codex exec resume` deliberately has no --sandbox option. The resumed
-    // rollout retains the sandbox selected on its fresh first turn. Passing the
-    // fresh-only flag here makes current Codex exit 2 before doing any work.
-    ? ['exec', 'resume', '--json', '--skip-git-repo-check']
+    // `codex exec resume` has no --sandbox option and does NOT retain the fresh
+    // exec's sandbox: without an explicit override Codex falls back to its
+    // workspace profile (network=false). That silently removes the loopback
+    // ThinkPool MCP and blocks git metadata/network on turn two. Reassert the
+    // selected posture on every resume. Codex exposes a dedicated resume flag
+    // for full access; restricted modes ride the equivalent config override.
+    ? [
+        'exec', 'resume', '--json', '--skip-git-repo-check',
+        ...(safeSandbox === 'danger-full-access'
+          ? ['--dangerously-bypass-approvals-and-sandbox']
+          : ['-c', `sandbox_mode="${safeSandbox}"`]),
+      ]
     : ['exec', '--json', '--sandbox', safeSandbox, '--skip-git-repo-check']
   if (model) args.push('-m', model)
   args.push('-c', `approval_policy="${approvalPolicy}"`)
@@ -362,8 +385,8 @@ export function startCodexSession({ cwd, model, effort: initialEffort = 'high',
       activeMode = nextMode
       modeConfig = codexConfigForMode(activeMode)
       sandbox = modeConfig.sandbox
-      // Resume retains the original sandbox. Start a fresh native thread on the
-      // next turn so the selected mode is real, while ThinkPool keeps the lane log.
+      // A mode change deliberately starts a fresh native thread so no prior
+      // rollout can carry stale permission state; ThinkPool keeps the lane log.
       sessionId = null
       turnNo = 0
       latestUsageSnapshot = null

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkpool-pair",
-  "version": "0.7.208",
+  "version": "0.7.210",
   "description": "Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.",
   "type": "module",
   "bin": {