thinkpool-pair 0.7.364 → 0.7.366

package/flow-preview.mjs

@@ -1,148 +1 @@
-// Thinkpool Flow — per-lane preview runtime.
-//
-// Each Flow lane builds its slice in its own git worktree (flow-worktree.mjs).
-// The room UI iframes a LIVE preview of that slice, so the worktree dir needs to be
-// reachable over localhost. The MVP artifact is a self-contained index.html (no build
-// step), so a static file server is the universal case — Node http + fs + path, no deps
-// (this is published as the `thinkpool-pair` npm package; new deps are not on the table).
-//
-// Spec: docs/specs/2026-06-29-thinkpool-flow.md (Step 3).
-
-import http from 'node:http'
-import fs from 'node:fs'
-import fsp from 'node:fs/promises'
-import path from 'node:path'
-
-// Module-level registry of live previews so cleanup (flow cancel / shutdown) can sweep
-// every server without each caller tracking handles. id → { server, url, stop }.
-export const previews = new Map()
-
-// Minimal extension → MIME map. Covers the self-contained-app surface + common assets.
-// Unknown extensions fall back to application/octet-stream (the browser downloads it).
-const MIME = {
-  '.html': 'text/html; charset=utf-8',
-  '.htm': 'text/html; charset=utf-8',
-  '.js': 'text/javascript; charset=utf-8',
-  '.mjs': 'text/javascript; charset=utf-8',
-  '.css': 'text/css; charset=utf-8',
-  '.json': 'application/json; charset=utf-8',
-  '.png': 'image/png',
-  '.jpg': 'image/jpeg',
-  '.jpeg': 'image/jpeg',
-  '.svg': 'image/svg+xml',
-  '.wav': 'audio/wav',
-  '.mp3': 'audio/mpeg',
-  '.ico': 'image/x-icon'
-}
-
-function contentType (filePath) {
-  return MIME[path.extname(filePath).toLowerCase()] || 'application/octet-stream'
-}
-
-// Map a request URL path to a real file under `root`, or null if it would escape `root`
-// (path traversal). Decode + strip query/hash, normalize, then verify the resolved path
-// is still inside root — the relative path between them must not climb out with `..`.
-function resolveUnderRoot (root, urlPath) {
-  let pathname
-  try {
-    pathname = decodeURIComponent(new URL(urlPath, 'http://x').pathname)
-  } catch {
-    return null // malformed percent-encoding
-  }
-  const resolved = path.resolve(root, '.' + pathname) // leading '.' keeps it relative to root
-  const rel = path.relative(root, resolved)
-  if (rel.startsWith('..') || path.isAbsolute(rel)) return null
-  return resolved
-}
-
-// Is this path a regular file we can read? (false for dirs / missing / errors)
-async function isFile (p) {
-  try {
-    return (await fsp.stat(p)).isFile()
-  } catch {
-    return false
-  }
-}
-
-async function send (res, status, type, body) {
-  res.writeHead(status, {
-    'Content-Type': type,
-    'Access-Control-Allow-Origin': '*' // local preview only; deliberately NO COOP/COEP
-  })
-  res.end(body)
-}
-
-// Build the request handler bound to a worktree dir. Routing:
-//   - traversal outside dir       → 403
-//   - existing file               → that file
-//   - '/' or a directory          → index.html
-//   - unknown path                → index.html if present (SPA fallback), else 404
-function makeHandler (dir) {
-  const indexPath = path.join(dir, 'index.html')
-  return async (req, res) => {
-    const resolved = resolveUnderRoot(dir, req.url || '/')
-    if (resolved === null) return send(res, 403, 'text/plain; charset=utf-8', 'Forbidden')
-    const relative = path.relative(dir, resolved)
-    if (relative.split(path.sep)[0] === '.thinkpool-design') {
-      return send(res, 404, 'text/plain; charset=utf-8', 'Not found')
-    }
-
-    // A concrete file hit (and still a real file, not a dir) → serve it.
-    if (await isFile(resolved)) {
-      try {
-        return send(res, 200, contentType(resolved), await fsp.readFile(resolved))
-      } catch {
-        return send(res, 500, 'text/plain; charset=utf-8', 'Read error')
-      }
-    }
-
-    // Directory, root, or unknown path → fall back to index.html (SPA-friendly).
-    if (await isFile(indexPath)) {
-      try {
-        return send(res, 200, contentType(indexPath), await fsp.readFile(indexPath))
-      } catch {
-        return send(res, 500, 'text/plain; charset=utf-8', 'Read error')
-      }
-    }
-
-    return send(res, 404, 'text/plain; charset=utf-8', 'Not found')
-  }
-}
-
-// Start a static preview server rooted at `dir`. port 0 → OS assigns a free port; the
-// actual bound port is read back from server.address(). Resolves once listening.
-// Returns { url, port, stop } — stop() is idempotent and async-safe.
-export function startPreview ({ dir, port = 0, host = '127.0.0.1', id } = {}) {
-  if (!dir) throw new Error('startPreview: dir is required')
-
-  const server = http.createServer(makeHandler(dir))
-
-  // Idempotent stop: close once, no-op on subsequent calls; resolve when fully closed.
-  let stopped = false
-  const stop = () =>
-    new Promise((resolve) => {
-      if (id !== undefined) previews.delete(id)
-      if (stopped) return resolve()
-      stopped = true
-      server.close(() => resolve())
-    })
-
-  return new Promise((resolve, reject) => {
-    server.once('error', reject)
-    server.listen(port, host, () => {
-      server.removeListener('error', reject)
-      const bound = server.address().port
-      const url = `http://${host}:${bound}/`
-      const handle = { server, url, stop, dir }
-      if (id !== undefined) previews.set(id, handle)
-      resolve({ url, port: bound, stop })
-    })
-  })
-}
-
-// Stop + deregister every live preview. Best-effort; awaits all closes.
-export async function stopAllPreviews () {
-  const handles = [...previews.values()]
-  previews.clear()
-  await Promise.all(handles.map((h) => h.stop()))
-}
+import t from"node:http";import e from"node:fs";import r from"node:fs/promises";import n from"node:path";export const previews=new Map;const i={".html":"text/html; charset=utf-8",".htm":"text/html; charset=utf-8",".js":"text/javascript; charset=utf-8",".mjs":"text/javascript; charset=utf-8",".css":"text/css; charset=utf-8",".json":"application/json; charset=utf-8",".png":"image/png",".jpg":"image/jpeg",".jpeg":"image/jpeg",".svg":"image/svg+xml",".wav":"audio/wav",".mp3":"audio/mpeg",".ico":"image/x-icon"};function o(t){return i[n.extname(t).toLowerCase()]||"application/octet-stream"}async function s(t){try{return(await r.stat(t)).isFile()}catch{return!1}}async function a(t,e,r,n){t.writeHead(e,{"Content-Type":r,"Access-Control-Allow-Origin":"*"}),t.end(n)}export function startPreview({dir:e,port:i=0,host:c="127.0.0.1",id:p}={}){if(!e)throw new Error("startPreview: dir is required");const u=t.createServer(function(t){const e=n.join(t,"index.html");return async(i,c)=>{const p=function(t,e){let r;try{r=decodeURIComponent(new URL(e,"http://x").pathname)}catch{return null}const i=n.resolve(t,"."+r),o=n.relative(t,i);return o.startsWith("..")||n.isAbsolute(o)?null:i}(t,i.url||"/");if(null===p)return a(c,403,"text/plain; charset=utf-8","Forbidden");if(".thinkpool-design"===n.relative(t,p).split(n.sep)[0])return a(c,404,"text/plain; charset=utf-8","Not found");if(await s(p))try{return a(c,200,o(p),await r.readFile(p))}catch{return a(c,500,"text/plain; charset=utf-8","Read error")}if(await s(e))try{return a(c,200,o(e),await r.readFile(e))}catch{return a(c,500,"text/plain; charset=utf-8","Read error")}return a(c,404,"text/plain; charset=utf-8","Not found")}}(e));let l=!1;const f=()=>new Promise(t=>{if(void 0!==p&&previews.delete(p),l)return t();l=!0,u.close(()=>t())});return new Promise((t,r)=>{u.once("error",r),u.listen(i,c,()=>{u.removeListener("error",r);const n=u.address().port,i=`http://${c}:${n}/`,o={server:u,url:i,stop:f,dir:e};void 0!==p&&previews.set(p,o),t({url:i,port:n,stop:f})})})}export async function stopAllPreviews(){const t=[...previews.values()];previews.clear(),await Promise.all(t.map(t=>t.stop()))}

package/flow-receipt.mjs

@@ -1,122 +1 @@
-// Flow review receipts are deliberately smaller than a review verdict. They cross
-// from a private reviewer lane into a shared transcript, so this module only
-// admits the evidence a pair can act on. Prompts, environment, paths, logs, and
-// hidden reasoning never have a field in the public shape.
-
-import { normalizeFlowScopeEvidence } from './flow-scope-evidence.mjs'
-
-export const FLOW_REVIEW_RECEIPT_KIND = 'flow-review-receipt'
-
-const MAX_TASK_KEY = 120
-const MAX_LINE = 180
-const MAX_LINES = 4
-const OUTCOMES = new Set(['pass', 'reject', 'held'])
-const DIGEST = /^[a-f0-9]{64}$/
-const SECRET_VALUE = /(?:sk[_-](?:proj[_-])?[a-z0-9_-]{8,}|gsk_[a-z0-9_-]{8,}|AIza[a-z0-9_-]{8,}|gh[pousr]_[a-z0-9_-]{8,}|github_pat_[a-z0-9_]{20,}|glpat-[a-z0-9_-]{8,}|x(?:ox[baprsce]|app)-[a-z0-9_-]{8,}|(?:AKIA|ASIA)[0-9A-Z]{16}|sbp_[a-z0-9_-]{20,}|sb_secret_[a-z0-9_-]{8,}|npm_[a-z0-9]{24,}|(?:sk|rk)_(?:live|test)_[a-z0-9]{8,}|whsec_[a-z0-9]{8,}|eyJ[a-z0-9_-]{8,}\.[a-z0-9_-]{8,}\.[a-z0-9_-]{8,}|bearer\s+[a-z0-9._-]{8,}|hooks\.slack\.com\/services\/[a-z0-9/_-]{8,})/i
-const SECRET_OR_PRIVATE = /(?:api[_ -]?key|access[_ -]?token|\btoken\s*[=:]|auth(?:orization)?|bearer\s+|secret|password|private[_ -]?key|system\s+prompt|raw\s+prompt|hidden\s+reasoning|chain[ -]of[ -]thought|\benv(?:ironment)?\b|\.env\b)/i
-const HOST_PATH = /(?:^~[\\/]|^\.?[\\/]|(?:^|\s)\/[\w.-]+|[A-Za-z]:\\|\\\\|(?:^|[\\/])(?:Users|home|var|tmp|private|workspace)(?:[\\/]|$)|\.thinkpool[\\/])/i
-const PATH_TRAVERSAL = /(?:^|[^a-z0-9.])\.\.(?:[\\/]|$)/i
-
-function cleanText(value, max) {
-  if (typeof value !== 'string' || value.length === 0 || value.length > max) return null
-  if (/\r|\n/.test(value) || SECRET_VALUE.test(value) || SECRET_OR_PRIVATE.test(value) || HOST_PATH.test(value) || PATH_TRAVERSAL.test(value)) return null
-  const text = value.replace(/\s+/g, ' ').trim()
-  return text && text.length <= max ? text : null
-}
-
-function cleanLines(value) {
-  if (!Array.isArray(value)) return []
-  const out = []
-  for (const line of value) {
-    const safe = cleanText(line, MAX_LINE)
-    if (safe && !out.includes(safe)) out.push(safe)
-    if (out.length === MAX_LINES) break
-  }
-  return out
-}
-
-function cleanTaskKey(value) {
-  const taskKey = cleanText(value, MAX_TASK_KEY)
-  if (!taskKey || !/^[A-Za-z0-9][A-Za-z0-9._:/-]*$/.test(taskKey) || taskKey.includes('..')) return null
-  return taskKey
-}
-
-function cleanSha(value) {
-  if (typeof value !== 'string') return null
-  const sha = value.trim().toLowerCase()
-  return /^[a-f0-9]{40}(?:[a-f0-9]{24})?$/.test(sha) ? sha : null
-}
-
-function cleanRounds(value) {
-  return Number.isInteger(value) && value >= 1 && value <= 99 ? value : null
-}
-
-function cleanDigest(value) {
-  if (typeof value !== 'string') return null
-  const digest = value.trim().toLowerCase()
-  return DIGEST.test(digest) ? digest : null
-}
-
-// Build the only wire shape the renderer accepts. Optional fields are omitted
-// rather than represented as null, making absence honest (notably deployment).
-export function createFlowReviewReceipt(input = {}) {
-  const taskKey = cleanTaskKey(input.taskKey)
-  const outcome = typeof input.outcome === 'string' ? input.outcome.toLowerCase() : ''
-  const rounds = cleanRounds(input.rounds)
-  if (!taskKey || !OUTCOMES.has(outcome) || rounds == null) {
-    throw new TypeError('Invalid flow review receipt identity')
-  }
-
-  const receipt = {
-    kind: FLOW_REVIEW_RECEIPT_KIND,
-    taskKey,
-    outcome,
-    rounds,
-    checks: cleanLines(input.checks),
-    reasons: cleanLines(input.reasons),
-  }
-  const candidateSha = cleanSha(input.candidateSha)
-  const acceptanceDigest = cleanDigest(input.acceptanceDigest)
-  const scope = normalizeFlowScopeEvidence(input.scope)
-  // Presence, not truthiness, is intentional: deployments are never inferred
-  // from a pass/reject outcome or from a candidate SHA.
-  const deployment = Object.hasOwn(input, 'deployment') ? cleanText(input.deployment, MAX_LINE) : null
-  if (candidateSha) receipt.candidateSha = candidateSha
-  if (acceptanceDigest) receipt.acceptanceDigest = acceptanceDigest
-  receipt.verified = Boolean(candidateSha && acceptanceDigest)
-  if (outcome === 'pass' && !receipt.verified) {
-    throw new TypeError('Passing flow review receipt requires an exact candidate and acceptance digest')
-  }
-  if (scope) receipt.scope = scope
-  if (outcome === 'pass' && !scope?.held) {
-    throw new TypeError('Passing flow review receipt requires a held scope footprint')
-  }
-  if (deployment) receipt.deployment = deployment
-  return receipt
-}
-
-export function isFlowReviewReceipt(value) {
-  try {
-    const receipt = createFlowReviewReceipt(value)
-    return receipt.kind === value?.kind
-  } catch {
-    return false
-  }
-}
-
-// A review lane may receive the same terminal submission twice (tool retry,
-// double click, or concurrent provider delivery). Serialize the whole verdict
-// transaction—not just receipt emission—so an awaited revert cannot run twice.
-export function createFlowReviewSingleFlight() {
-  let pending = null
-  return async function runFlowReviewVerdict(operation) {
-    if (pending) return pending
-    const current = (async () => operation())()
-    pending = current
-    try {
-      return await current
-    } finally {
-      if (pending === current) pending = null
-    }
-  }
-}
+import{normalizeFlowScopeEvidence as e}from"./flow-scope-evidence.mjs";export const FLOW_REVIEW_RECEIPT_KIND="flow-review-receipt";const t=new Set(["pass","reject","held"]),r=/^[a-f0-9]{64}$/,n=/(?:sk[_-](?:proj[_-])?[a-z0-9_-]{8,}|gsk_[a-z0-9_-]{8,}|AIza[a-z0-9_-]{8,}|gh[pousr]_[a-z0-9_-]{8,}|github_pat_[a-z0-9_]{20,}|glpat-[a-z0-9_-]{8,}|x(?:ox[baprsce]|app)-[a-z0-9_-]{8,}|(?:AKIA|ASIA)[0-9A-Z]{16}|sbp_[a-z0-9_-]{20,}|sb_secret_[a-z0-9_-]{8,}|npm_[a-z0-9]{24,}|(?:sk|rk)_(?:live|test)_[a-z0-9]{8,}|whsec_[a-z0-9]{8,}|eyJ[a-z0-9_-]{8,}\.[a-z0-9_-]{8,}\.[a-z0-9_-]{8,}|bearer\s+[a-z0-9._-]{8,}|hooks\.slack\.com\/services\/[a-z0-9/_-]{8,})/i,s=/(?:api[_ -]?key|access[_ -]?token|\btoken\s*[=:]|auth(?:orization)?|bearer\s+|secret|password|private[_ -]?key|system\s+prompt|raw\s+prompt|hidden\s+reasoning|chain[ -]of[ -]thought|\benv(?:ironment)?\b|\.env\b)/i,o=/(?:^~[\\/]|^\.?[\\/]|(?:^|\s)\/[\w.-]+|[A-Za-z]:\\|\\\\|(?:^|[\\/])(?:Users|home|var|tmp|private|workspace)(?:[\\/]|$)|\.thinkpool[\\/])/i,a=/(?:^|[^a-z0-9.])\.\.(?:[\\/]|$)/i;function i(e,t){if("string"!=typeof e||0===e.length||e.length>t)return null;if(/\r|\n/.test(e)||n.test(e)||s.test(e)||o.test(e)||a.test(e))return null;const r=e.replace(/\s+/g," ").trim();return r&&r.length<=t?r:null}function c(e){if(!Array.isArray(e))return[];const t=[];for(const r of e){const e=i(r,180);if(e&&!t.includes(e)&&t.push(e),4===t.length)break}return t}export function createFlowReviewReceipt(n={}){const s=function(e){const t=i(e,120);return t&&/^[A-Za-z0-9][A-Za-z0-9._:/-]*$/.test(t)&&!t.includes("..")?t:null}(n.taskKey),o="string"==typeof n.outcome?n.outcome.toLowerCase():"",a=(l=n.rounds,Number.isInteger(l)&&l>=1&&l<=99?l:null);var l;if(!s||!t.has(o)||null==a)throw new TypeError("Invalid flow review receipt identity");const p={kind:"flow-review-receipt",taskKey:s,outcome:o,rounds:a,checks:c(n.checks),reasons:c(n.reasons)},u=function(e){if("string"!=typeof e)return null;const t=e.trim().toLowerCase();return/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/.test(t)?t:null}(n.candidateSha),f=function(e){if("string"!=typeof e)return null;const t=e.trim().toLowerCase();return r.test(t)?t:null}(n.acceptanceDigest),w=e(n.scope),_=Object.hasOwn(n,"deployment")?i(n.deployment,180):null;if(u&&(p.candidateSha=u),f&&(p.acceptanceDigest=f),p.verified=Boolean(u&&f),"pass"===o&&!p.verified)throw new TypeError("Passing flow review receipt requires an exact candidate and acceptance digest");if(w&&(p.scope=w),"pass"===o&&!w?.held)throw new TypeError("Passing flow review receipt requires a held scope footprint");return _&&(p.deployment=_),p}export function isFlowReviewReceipt(e){try{return createFlowReviewReceipt(e).kind===e?.kind}catch{return!1}}export function createFlowReviewSingleFlight(){let e=null;return async function(t){if(e)return e;const r=(async()=>t())();e=r;try{return await r}finally{e===r&&(e=null)}}}

package/flow-redispatch.mjs

@@ -1,72 +1 @@
-// Thinkpool Flow — S4 clean lane kill + re-dispatch (slice 2, flow-redispatch-clean).
-//
-// When a lane is force-killed mid-tool-call (budget kill-switch, review reject, restart)
-// and re-dispatched, three things must hold before the new lane replays the old work:
-//
-//   (a) HEALED TRANSCRIPT — a lane killed mid-tool-call leaves an assistant message with a
-//       tool_use block that has NO matching tool_result. On the next SDK replay Anthropic
-//       400s ("tool_use ids were found without tool_result blocks"). sanitizeSession's
-//       Heal 3 (bridge/transcript-sanitize.mjs — DONE, do not rewrite) injects a synthetic
-//       tool_result placeholder. We CONSUME it here: run it on the dying lane's transcript
-//       so a resume is clean. Idempotent — a clean transcript is a no-op.
-//
-//   (d) REVERT TARGET PRESERVED — revertLane deletes the lane's branch (`git branch -D`), which
-//       destroys the commit the killed lane made. The revert target (commit_sha, recorded
-//       room-side on flow_tasks) must survive the re-dispatch so a later reviewer still knows
-//       what to roll back to. We carry it in the pending-redispatch record.
-//
-// H41 (realtime collision) — NOT this module's concern, by construction. A re-dispatched lane
-// opens NO realtime channel of its own: the bridge opens exactly two channels ONCE at startup
-// (`tpcode:<room>` presence + `tpflow:<room>` presence-free broadcast), and a re-dispatched
-// lane reuses the existing room-wide `tpflow:<room>` broadcast. With no per-lane subscribe there
-// is no second .subscribe() to race a presence callback (feedback_no_duplicate_realtime_channel,
-// Flow #134/#136), so no duplicate-subscribe collision is possible. Earlier drafts computed a
-// per-lane `flowRedispatchTopic` — it was dead (never read by any subscribe) and was removed so
-// a future reader doesn't mistake it for live realtime coverage.
-//
-// DBOS-idempotent: re-running prepareRedispatch on an already-clean lane heals nothing and
-// re-dispatch of a lane with no pending record resumes nothing — both are no-ops.
-//
-// Pure over an injected `sanitize` so it's unit-testable without touching a real transcript.
-// Spec: docs/specs/2026-06-30-flow-build-s4-clean-redispatch.md.
-
-/**
- * Prepare a killed lane for clean re-dispatch. Heals its transcript (so a resume can't 400 on
- * a dangling tool_use) and returns everything the re-dispatch needs to resume cleanly.
- *
- * @param {object}   o
- * @param {object}   o.lane      the killed lane's session entry (needs cwd, session.sessionId, commitSha/flowReviewTarget)
- * @param {function} o.sanitize  (cwd, sessionId) => { blocks } — inject sanitizeSession here (the Heal-3 consumer)
- * @returns {{ resumeSessionId: string|null, revertTarget: string|null, healed: number, cwd: string|null }}
- */
-export function prepareRedispatch ({ lane, sanitize }) {
-  const cwd = lane?.cwd || null
-  const resumeSessionId = lane?.session?.sessionId || lane?.sessionId || null
-  // Revert target survives the branch deletion: prefer an explicitly recorded commit, else
-  // any commitSha the lane carried. null when the lane never committed (nothing to preserve).
-  const revertTarget = lane?.revertTarget ?? lane?.commitSha ?? null
-
-  let healed = 0
-  // Heal ONLY when there's a transcript to heal (a resumable session). No sessionId → the lane
-  // never got a live SDK session, so there is nothing to replay and nothing to heal (no-op).
-  if (resumeSessionId && typeof sanitize === 'function') {
-    try {
-      const r = sanitize(cwd, resumeSessionId)
-      healed = (r && typeof r.blocks === 'number') ? r.blocks : 0
-    } catch {
-      healed = 0 // a sanitize failure must never block re-dispatch — worst case, resume as before
-    }
-  }
-
-  return { resumeSessionId, revertTarget, healed, cwd }
-}
-
-/**
- * A pending-redispatch registry. When flow-revert kills a lane, it records the prepared
- * re-dispatch (keyed by flowId+taskKey) so the next flow-dispatch wave resumes the healed
- * session on a clean topic with the revert target intact. Idempotent: re-dispatching a task
- * with no pending record (a first, never-killed dispatch) resolves to a fresh lane (no resume).
- */
-export function redispatchKey (flowId, taskKey) {
-  return `${flowId}::${taskKey}`
-}
+export function prepareRedispatch({lane:e,sanitize:t}){const n=e?.cwd||null,s=e?.session?.sessionId||e?.sessionId||null,r=e?.revertTarget??e?.commitSha??null;let o=0;if(s&&"function"==typeof t)try{const e=t(n,s);o=e&&"number"==typeof e.blocks?e.blocks:0}catch{o=0}return{resumeSessionId:s,revertTarget:r,healed:o,cwd:n}}export function redispatchKey(e,t){return`${e}::${t}`}