thinkpool-pair 0.7.209 → 0.7.210

package/codex-session.mjs

@@ -179,10 +179,18 @@ export function buildCodexPrompt({ text, rolePrompt, roomContext }) {
 export function buildCodexExecArgs({ sessionId, model, effort, sandbox, approvalPolicy = 'untrusted', providerConfig, mcpUrl, writableDirs = [], prompt }) {
   const safeSandbox = normalizeCodexSandbox(sandbox)
   const args = sessionId
-    // `codex exec resume` deliberately has no --sandbox option. The resumed
-    // rollout retains the sandbox selected on its fresh first turn. Passing the
-    // fresh-only flag here makes current Codex exit 2 before doing any work.
-    ? ['exec', 'resume', '--json', '--skip-git-repo-check']
+    // `codex exec resume` has no --sandbox option and does NOT retain the fresh
+    // exec's sandbox: without an explicit override Codex falls back to its
+    // workspace profile (network=false). That silently removes the loopback
+    // ThinkPool MCP and blocks git metadata/network on turn two. Reassert the
+    // selected posture on every resume. Codex exposes a dedicated resume flag
+    // for full access; restricted modes ride the equivalent config override.
+    ? [
+        'exec', 'resume', '--json', '--skip-git-repo-check',
+        ...(safeSandbox === 'danger-full-access'
+          ? ['--dangerously-bypass-approvals-and-sandbox']
+          : ['-c', `sandbox_mode="${safeSandbox}"`]),
+      ]
     : ['exec', '--json', '--sandbox', safeSandbox, '--skip-git-repo-check']
   if (model) args.push('-m', model)
   args.push('-c', `approval_policy="${approvalPolicy}"`)
@@ -377,8 +385,8 @@ export function startCodexSession({ cwd, model, effort: initialEffort = 'high',
       activeMode = nextMode
       modeConfig = codexConfigForMode(activeMode)
       sandbox = modeConfig.sandbox
-      // Resume retains the original sandbox. Start a fresh native thread on the
-      // next turn so the selected mode is real, while ThinkPool keeps the lane log.
+      // A mode change deliberately starts a fresh native thread so no prior
+      // rollout can carry stale permission state; ThinkPool keeps the lane log.
       sessionId = null
       turnNo = 0
       latestUsageSnapshot = null

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkpool-pair",
-  "version": "0.7.209",
+  "version": "0.7.210",
   "description": "Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.",
   "type": "module",
   "bin": {