thinkpool-pair 0.7.335 → 0.7.336

package/account.mjs

@@ -526,6 +526,11 @@ export async function runAccount(SUPABASE_URL, SUPABASE_ANON) {
   // never impersonate a completed restart.
   const BRIDGE_ID = randomUUID()
   let restarting = false   // set by the "restart" broadcast → stop() exits non-zero so a supervisor respawns us
+  // Account-control handlers are registered before the discovery loop is
+  // initialized. Route early requests through a harmless placeholder, then
+  // replace it once `tick` exists; this avoids a temporal-dead-zone crash during
+  // supervisor bootstrap while still letting a live web room request discovery.
+  let requestDiscoveryTick = () => {}
   // Web "attach this session" card → bind an unbound/new room to a local dir (and
   // optionally set it as the account default) so it serves WITHOUT a terminal command.
   // Rides the private, owner-gated control topic; the dir must exist on THIS machine.
@@ -538,7 +543,17 @@ export async function runAccount(SUPABASE_URL, SUPABASE_ANON) {
     bindDir(code, dir)
     if (payload?.setDefault) { saveDefaultDir(dir); process.stderr.write(`\n  ◆ default project dir set → ${dir}\n`) }
     process.stderr.write(`\n  ◆ ${code} bound → ${dir} (from the web). Serving…\n`)
-    try { tick() } catch { /* the periodic tick will serve it next cycle */ }
+    requestDiscoveryTick()
+  })
+  // A newly-created web room already knows its owner and has an authenticated,
+  // owner-private account-control channel. Nudge discovery immediately instead
+  // of waiting for the supervisor's 15-second reconciliation interval. `tick`
+  // still re-queries owner-owned active rooms, so the browser cannot make this
+  // host serve an arbitrary code.
+  acctControl.on('broadcast', { event: 'serve-room' }, ({ payload }) => {
+    const code = String(payload?.code || '').toUpperCase().trim()
+    if (!/^[A-Z0-9]{4,12}$/.test(code)) return
+    requestDiscoveryTick()
   })
   // Dashboard "Disconnect" → broadcast shutdown → clean exit (presence leaves, bar flips live).
   // If we're the auto-restarting background service (launchd KeepAlive / systemd
@@ -906,6 +921,7 @@ export async function runAccount(SUPABASE_URL, SUPABASE_ANON) {
     tickingSince = now
     try { await tickBody() } finally { if (tickingSince === now) tickingSince = 0 }
   }
+  requestDiscoveryTick = () => { void tick().catch(() => {}) }
   // Expose for the watchdog to force-unwedge the guard after a reconnect.
   const clearTickGuard = () => { tickingSince = 0 }
   const tickBody = async () => {

package/bridge.mjs

@@ -130,6 +130,7 @@ import { fetchPairControlDeliveryAuthority } from './pair-control-authority.mjs'
 import { SIDE_HANDOFF_PROMPT, SIDE_ROLE_PROMPT, appendSideContext, assistantTextSince, dispatchSideContexts, sideContextBlock, sideSnapshot } from './side-lane.mjs'
 import { planMeterLine } from './plan-meters.mjs'
 import { priceForModel } from './model-prices.mjs'
+import { loadHermesModelCache, saveHermesModelCache } from './hermes-model-cache.mjs'
 import { makeThrottledTrack, recoveryBackoffMs } from './presence.mjs'
 import { MockupDeliveryQueue, completeMockupManifest, isMockupDeliveryBoundary } from './mockup-delivery.mjs'
 import { resolveAnonKey, DEFAULT_SUPABASE_URL } from './supabase-key.mjs'
@@ -140,6 +141,10 @@ import { buildTerminalRolePrompt, HERMES_VISIBLE_WORKER_FALLBACK_RULE, THINKPOOL
 const SUPABASE_URL  = process.env.TP_SUPABASE_URL  || DEFAULT_SUPABASE_URL
 const WEB_BASE      = process.env.TP_WEB_BASE      || 'https://thinkpool.io'
 const IMAGE_QUEUE_CONFIG = imageQueueConfig()
+// Shared by every Hermes lane in this room child and persisted across room
+// children. Without this, each new room must boot ACP (up to 30s) merely to
+// discover the same public model list before its first real turn.
+let hostHermesModels = loadHermesModelCache()
 
 // The anon key is RESOLVED, not baked. It used to be a string literal here, and
 // that literal now sits in 224 published tarballs on 224 users' laptops: disable
@@ -2139,7 +2144,7 @@ function openStructured({ id, runtime = 'claude', model, models, effort, resume,
     ? spawnDepth
     : (sideParent || (spawnedBy && !String(spawnedBy).startsWith('flow:')) ? 1 : 0)
   const initialHop = Number.isInteger(hop) && hop >= 0 ? hop : structuralDepth
-  const entry = { cmd: runtime, runtime, kind: 'structured', log: Array.isArray(log) ? log.slice(-STRUCTURED_LOG_MAX) : [], pending: new Map(), session: null, recovered: false, commands: commandCatalogForRuntime(runtime, commands), mode, effort, models: runtime === 'codex' ? codexModels : runtime === 'hermes' && Array.isArray(models) ? models : undefined,
+  const entry = { cmd: runtime, runtime, kind: 'structured', log: Array.isArray(log) ? log.slice(-STRUCTURED_LOG_MAX) : [], pending: new Map(), session: null, recovered: false, commands: commandCatalogForRuntime(runtime, commands), mode, effort, models: runtime === 'codex' ? codexModels : runtime === 'hermes' ? (Array.isArray(models) && models.length ? models : hostHermesModels) : undefined,
     // model: truthful active-model label — now the SAME `laneModel` the SDK is given, so the
     // chip cannot disagree with the wire. When this lane runs on a custom (non-anthropic)
     // registered provider the SDK id is impersonated (see the onEvent guard below), so
@@ -3311,7 +3316,7 @@ function openStructured({ id, runtime = 'claude', model, models, effort, resume,
         // A custom Anthropic-compatible endpoint may expose its own catalog through the
         // same SDK method. Never publish that as the ROOM's Claude catalog: its models
         // already render in the provider group and otherwise leak under ANTHROPIC.
-        if (entry.runtime === 'hermes' && evt.kind === 'models' && Array.isArray(evt.models) && evt.models.length) { entry.models = evt.models; announce() }
+        if (entry.runtime === 'hermes' && evt.kind === 'models' && Array.isArray(evt.models) && evt.models.length) { entry.models = saveHermesModelCache(evt.models); hostHermesModels = entry.models; announce() }
         else if (onBuiltin && evt.kind === 'models' && Array.isArray(evt.models) && evt.models.length) { roomModels = evt.models; announce() } }
       // Hermes model changes are asynchronous ACP requests. Keep the previous model
       // authoritative until Hermes acknowledges session/set_model; then settle the

package/hermes-model-cache.mjs

@@ -0,0 +1,54 @@
+// Hermes exposes its model catalog only after `session/new`, which may take up
+// to 30 seconds while the ACP process boots. The catalog is public metadata and
+// identical for every room served by this Hermes profile, so keep the last
+// validated copy at the host level. A live Hermes session always replaces it.
+
+import fs from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+
+const MAX_MODELS = 1000
+const MAX_BYTES = 512 * 1024
+const MAX_FIELD = 512
+
+const cachePath = () => process.env.TP_HERMES_MODEL_CACHE
+  || path.join(process.env.TP_PAIR_ROOT || path.join(os.homedir(), '.thinkpool-pair'), 'hermes-models.json')
+
+export function normalizeHermesModelCache(models) {
+  if (!Array.isArray(models)) return []
+  const seen = new Set()
+  const normalized = []
+  for (const raw of models.slice(0, MAX_MODELS)) {
+    const value = String(raw?.value || '').trim().slice(0, MAX_FIELD)
+    if (!value || seen.has(value)) continue
+    seen.add(value)
+    normalized.push({
+      value,
+      displayName: String(raw?.displayName || value).trim().slice(0, MAX_FIELD) || value,
+      description: String(raw?.description || '').trim().slice(0, MAX_FIELD),
+    })
+  }
+  return normalized
+}
+
+export function loadHermesModelCache() {
+  try {
+    const file = cachePath()
+    if ((Number(fs.statSync(file).size) || 0) > MAX_BYTES) return []
+    const parsed = JSON.parse(fs.readFileSync(file, 'utf8'))
+    return normalizeHermesModelCache(parsed?.models)
+  } catch { return [] }
+}
+
+export function saveHermesModelCache(models) {
+  const normalized = normalizeHermesModelCache(models)
+  if (!normalized.length) return []
+  try {
+    const file = cachePath()
+    fs.mkdirSync(path.dirname(file), { recursive: true })
+    const temp = `${file}.${process.pid}.${Date.now()}.tmp`
+    fs.writeFileSync(temp, JSON.stringify({ savedAt: Date.now(), models: normalized }), { mode: 0o600 })
+    fs.renameSync(temp, file)
+  } catch { /* cache is opportunistic; live discovery remains the fallback */ }
+  return normalized
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkpool-pair",
-  "version": "0.7.335",
+  "version": "0.7.336",
   "description": "Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.",
   "type": "module",
   "bin": {
@@ -36,6 +36,7 @@
     "codex-commands.mjs",
     "acp-client.mjs",
     "hermes-session.mjs",
+    "hermes-model-cache.mjs",
     "hermes-policy.mjs",
     "hermes-acp-bootstrap.py",
     "hermes-event-mapper.mjs",