thinkpool-pair 0.7.364 → 0.7.366

package/hermes-setup.mjs

@@ -1,167 +1 @@
-import fs from 'node:fs'
-import os from 'node:os'
-import path from 'node:path'
-import { execFileSync } from 'node:child_process'
-import YAML from 'yaml'
-import { probeHermesRuntime } from './hermes-probe.mjs'
-
-export const HERMES_PROFILE = 'thinkpool'
-export const HERMES_PROVIDER = 'nous'
-export const HERMES_DEFAULT_MODEL = 'openai/gpt-5.6-luna'
-export const HERMES_GUARD_FILENAME = 'hermes-delegation-guard.mjs'
-
-const clean = (value) => String(value || '').replace(/[\r\n]+/g, ' ').trim()
-const commandText = (guardPath) => `node ${JSON.stringify(guardPath)}`
-const isObject = (value) => value != null && typeof value === 'object' && !Array.isArray(value)
-const isThinkPoolGuard = (entry) => isObject(entry)
-  && entry.matcher === '^delegate_task$'
-  && new RegExp(`${HERMES_GUARD_FILENAME.replaceAll('.', '\\.')}$`).test(String(entry.command || '').replace(/["']/g, ''))
-
-export function hermesGuardPath({ homeDir = os.homedir(), env = process.env, platform = process.platform } = {}) {
-  const dataRoot = platform === 'win32'
-    ? (env.LOCALAPPDATA || path.join(homeDir, 'AppData', 'Local'))
-    : (env.XDG_DATA_HOME || path.join(homeDir, '.local', 'share'))
-  return path.join(dataRoot, 'thinkpool-pair', HERMES_GUARD_FILENAME)
-}
-
-function atomicWrite(filePath, content, { fsImpl = fs, mode = 0o600 } = {}) {
-  fsImpl.mkdirSync(path.dirname(filePath), { recursive: true })
-  const tempPath = `${filePath}.tmp-${process.pid}-${Date.now()}`
-  try {
-    fsImpl.writeFileSync(tempPath, content, { mode })
-    fsImpl.chmodSync?.(tempPath, mode)
-    fsImpl.renameSync(tempPath, filePath)
-  } finally {
-    try { fsImpl.rmSync(tempPath, { force: true }) } catch { /* already renamed */ }
-  }
-}
-
-function snapshotFile(filePath, fsImpl) {
-  if (!fsImpl.existsSync(filePath)) return null
-  return {
-    content: fsImpl.readFileSync(filePath),
-    mode: fsImpl.statSync(filePath).mode & 0o777,
-    atimeMs: fsImpl.statSync(filePath).atimeMs,
-    mtimeMs: fsImpl.statSync(filePath).mtimeMs,
-  }
-}
-
-function restoreFile(filePath, snapshot, fsImpl) {
-  if (snapshot) {
-    atomicWrite(filePath, snapshot.content, { fsImpl, mode: snapshot.mode })
-    fsImpl.utimesSync?.(filePath, snapshot.atimeMs / 1000, snapshot.mtimeMs / 1000)
-  }
-  else fsImpl.rmSync(filePath, { force: true })
-}
-
-function profileAliasReady(output, profile) {
-  const escaped = profile.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
-  return new RegExp(`Alias:\\s+${escaped}\\s+.*hermes\\s+-p\\s+${escaped}`, 'i').test(String(output || ''))
-}
-
-export function setupHermesRuntime({
-  mode,
-  profile = HERMES_PROFILE,
-  command = 'hermes',
-  env = process.env,
-  homeDir = os.homedir(),
-  platform = process.platform,
-  execFile = execFileSync,
-  fsImpl = fs,
-  guardSource = fs.readFileSync(new URL('./hermes-delegation-guard.mjs', import.meta.url), 'utf8'),
-} = {}) {
-  if (profile !== HERMES_PROFILE) throw new Error(`ThinkPool only manages the isolated Hermes profile ${HERMES_PROFILE}`)
-  if (mode != null && mode !== 'clone' && mode !== 'clean') throw new Error('Hermes setup mode must be clone or clean')
-
-  const run = (args, options = {}) => execFile(command, args, {
-    encoding: 'utf8', env: options.env || env, timeout: options.timeout || 20_000,
-    stdio: ['ignore', 'pipe', 'pipe'],
-  })
-  const profileArgs = ['-p', profile]
-  let show = ''
-  let created = false
-  try { show = run(['profile', 'show', profile]) } catch { /* absent */ }
-  if (!/Profile:\s*thinkpool/i.test(show)) {
-    if (!mode) throw new Error('No isolated Hermes thinkpool profile exists; choose --clone or --clean')
-    const createArgs = ['profile', 'create', profile, '--description', 'Isolated ThinkPool Code runtime.']
-    if (mode === 'clone') createArgs.push('--clone')
-    else createArgs.push('--no-skills')
-    run(createArgs, { timeout: 60_000 })
-    created = true
-    show = run(['profile', 'show', profile])
-  }
-
-  if (!profileAliasReady(show, profile)) {
-    run(['profile', 'alias', profile, '--name', profile])
-    show = run(['profile', 'show', profile])
-    if (!profileAliasReady(show, profile)) throw new Error('Hermes did not create the required thinkpool profile alias')
-  }
-
-  const rawConfigPath = clean(run([...profileArgs, 'config', 'path']))
-  if (!rawConfigPath) throw new Error('Hermes did not report the thinkpool profile config path')
-  const configPath = rawConfigPath.startsWith('~') ? path.join(homeDir, rawConfigPath.slice(1).replace(/^[/\\]/, '')) : path.resolve(rawConfigPath)
-  const profilePathMatch = String(show).match(/^Path:\s*(.+)$/mi)
-  if (!profilePathMatch) throw new Error('Hermes did not report the isolated thinkpool profile path')
-  const profilePath = profilePathMatch[1].trim().startsWith('~')
-    ? path.join(homeDir, profilePathMatch[1].trim().slice(1).replace(/^[/\\]/, ''))
-    : path.resolve(profilePathMatch[1].trim())
-  const relativeConfig = path.relative(profilePath, configPath)
-  if (relativeConfig.startsWith('..') || path.isAbsolute(relativeConfig)) throw new Error('Hermes reported a config path outside the isolated thinkpool profile')
-  let config = {}
-  if (fsImpl.existsSync(configPath)) {
-    const parsed = YAML.parse(fsImpl.readFileSync(configPath, 'utf8'))
-    if (parsed != null && !isObject(parsed)) throw new Error('Hermes thinkpool config is not a YAML mapping; refusing to overwrite it')
-    config = parsed || {}
-  }
-  if (config.hooks != null && !isObject(config.hooks)) throw new Error('Hermes thinkpool hooks config is not a mapping; refusing to overwrite it')
-  if (config.model != null && !isObject(config.model)) throw new Error('Hermes thinkpool model config is not a mapping; refusing to overwrite it')
-  const model = config.model ||= {}
-  model.provider = HERMES_PROVIDER
-  model.default = HERMES_DEFAULT_MODEL
-  // Provider-specific transport overrides from a cloned profile must never
-  // survive into ThinkPool's Nous-only runtime.
-  delete model.base_url
-  delete model.api_mode
-  const hooks = config.hooks ||= {}
-  if (hooks.pre_tool_call != null && !Array.isArray(hooks.pre_tool_call)) throw new Error('Hermes pre_tool_call hooks are not a list; refusing to overwrite them')
-  const prior = hooks.pre_tool_call || []
-  hooks.pre_tool_call = [
-    ...prior.filter((entry) => !isThinkPoolGuard(entry)),
-    { matcher: '^delegate_task$', command: commandText(hermesGuardPath({ homeDir, env, platform })), timeout: 5 },
-  ]
-
-  const guardPath = hermesGuardPath({ homeDir, env, platform })
-  const allowlistPath = path.join(profilePath, 'shell-hooks-allowlist.json')
-  const guardSnapshot = snapshotFile(guardPath, fsImpl)
-  const configSnapshot = snapshotFile(configPath, fsImpl)
-  const allowlistSnapshot = snapshotFile(allowlistPath, fsImpl)
-  try {
-    atomicWrite(guardPath, guardSource, { fsImpl, mode: 0o700 })
-    atomicWrite(configPath, YAML.stringify(config, { lineWidth: 0 }), { fsImpl, mode: 0o600 })
-
-    const consentEnv = { ...env, HERMES_ACCEPT_HOOKS: '1' }
-    // Hermes does not refresh an existing approval when the same command's
-    // script mtime changes. Revoke only ThinkPool's exact guard command, then
-    // let the synthetic test consent to that exact command again.
-    run([...profileArgs, 'hooks', 'revoke', commandText(guardPath)], { env: consentEnv })
-    const testOutput = run([...profileArgs, 'hooks', 'test', 'pre_tool_call', '--for-tool', 'delegate_task'], { env: consentEnv })
-    if (!/(?:action|decision)["']?\s*[:=]\s*["']block/i.test(testOutput)
-      || !/ThinkPool blocks hidden Hermes delegation/i.test(testOutput)) {
-      throw new Error('Hermes ran the ThinkPool delegation guard but did not report an explicit block')
-    }
-    run([...profileArgs, 'hooks', 'doctor'], { env: consentEnv })
-    run([...profileArgs, 'acp', '--check'], { env: consentEnv })
-    const probe = probeHermesRuntime({ command, prefixArgs: profileArgs, execFile, env: consentEnv })
-    if (!probe.available) throw new Error(`Hermes setup did not pass the final runtime probe: ${probe.reason || 'unavailable'}`)
-    return { ...probe, profile, created, mode: created ? mode : 'existing', guardPath, configPath }
-  } catch (error) {
-    try {
-      restoreFile(configPath, configSnapshot, fsImpl)
-      restoreFile(guardPath, guardSnapshot, fsImpl)
-      restoreFile(allowlistPath, allowlistSnapshot, fsImpl)
-    } catch (rollbackError) {
-      error.message = `${error.message}; rollback also failed: ${clean(rollbackError.message)}`
-    }
-    throw error
-  }
-}
+import e from"node:fs";import o from"node:os";import t from"node:path";import{execFileSync as r}from"node:child_process";import i from"yaml";import{probeHermesRuntime as n}from"./hermes-probe.mjs";export const HERMES_PROFILE="thinkpool";export const HERMES_PROVIDER="nous";export const HERMES_DEFAULT_MODEL="openai/gpt-5.6-luna";export const HERMES_GUARD_FILENAME="hermes-delegation-guard.mjs";const s=e=>String(e||"").replace(/[\r\n]+/g," ").trim(),l=e=>`node ${JSON.stringify(e)}`,a=e=>null!=e&&"object"==typeof e&&!Array.isArray(e);export function hermesGuardPath({homeDir:e=o.homedir(),env:r=process.env,platform:i=process.platform}={}){const n="win32"===i?r.LOCALAPPDATA||t.join(e,"AppData","Local"):r.XDG_DATA_HOME||t.join(e,".local","share");return t.join(n,"thinkpool-pair",HERMES_GUARD_FILENAME)}function m(o,r,{fsImpl:i=e,mode:n=384}={}){i.mkdirSync(t.dirname(o),{recursive:!0});const s=`${o}.tmp-${process.pid}-${Date.now()}`;try{i.writeFileSync(s,r,{mode:n}),i.chmodSync?.(s,n),i.renameSync(s,o)}finally{try{i.rmSync(s,{force:!0})}catch{}}}function c(e,o){return o.existsSync(e)?{content:o.readFileSync(e),mode:511&o.statSync(e).mode,atimeMs:o.statSync(e).atimeMs,mtimeMs:o.statSync(e).mtimeMs}:null}function p(e,o,t){o?(m(e,o.content,{fsImpl:t,mode:o.mode}),t.utimesSync?.(e,o.atimeMs/1e3,o.mtimeMs/1e3)):t.rmSync(e,{force:!0})}function h(e,o){const t=o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return new RegExp(`Alias:\\s+${t}\\s+.*hermes\\s+-p\\s+${t}`,"i").test(String(e||""))}export function setupHermesRuntime({mode:d,profile:f="thinkpool",command:u="hermes",env:g=process.env,homeDir:E=o.homedir(),platform:w=process.platform,execFile:k=r,fsImpl:_=e,guardSource:y=e.readFileSync(new URL("./hermes-delegation-guard.mjs",import.meta.url),"utf8")}={}){if("thinkpool"!==f)throw new Error("ThinkPool only manages the isolated Hermes profile thinkpool");if(null!=d&&"clone"!==d&&"clean"!==d)throw new Error("Hermes setup mode must be clone or clean");const S=(e,o={})=>k(u,e,{encoding:"utf8",env:o.env||g,timeout:o.timeout||2e4,stdio:["ignore","pipe","pipe"]}),v=["-p",f];let A="",H=!1;try{A=S(["profile","show",f])}catch{}if(!/Profile:\s*thinkpool/i.test(A)){if(!d)throw new Error("No isolated Hermes thinkpool profile exists; choose --clone or --clean");const e=["profile","create",f,"--description","Isolated ThinkPool Code runtime."];"clone"===d?e.push("--clone"):e.push("--no-skills"),S(e,{timeout:6e4}),H=!0,A=S(["profile","show",f])}if(!h(A,f)&&(S(["profile","alias",f,"--name",f]),A=S(["profile","show",f]),!h(A,f)))throw new Error("Hermes did not create the required thinkpool profile alias");const M=s(S([...v,"config","path"]));if(!M)throw new Error("Hermes did not report the thinkpool profile config path");const R=M.startsWith("~")?t.join(E,M.slice(1).replace(/^[/\\]/,"")):t.resolve(M),D=String(A).match(/^Path:\s*(.+)$/im);if(!D)throw new Error("Hermes did not report the isolated thinkpool profile path");const x=D[1].trim().startsWith("~")?t.join(E,D[1].trim().slice(1).replace(/^[/\\]/,"")):t.resolve(D[1].trim()),P=t.relative(x,R);if(P.startsWith("..")||t.isAbsolute(P))throw new Error("Hermes reported a config path outside the isolated thinkpool profile");let $={};if(_.existsSync(R)){const e=i.parse(_.readFileSync(R,"utf8"));if(null!=e&&!a(e))throw new Error("Hermes thinkpool config is not a YAML mapping; refusing to overwrite it");$=e||{}}if(null!=$.hooks&&!a($.hooks))throw new Error("Hermes thinkpool hooks config is not a mapping; refusing to overwrite it");if(null!=$.model&&!a($.model))throw new Error("Hermes thinkpool model config is not a mapping; refusing to overwrite it");const b=$.model||={};b.provider="nous",b.default=HERMES_DEFAULT_MODEL,delete b.base_url,delete b.api_mode;const L=$.hooks||={};if(null!=L.pre_tool_call&&!Array.isArray(L.pre_tool_call))throw new Error("Hermes pre_tool_call hooks are not a list; refusing to overwrite them");const F=L.pre_tool_call||[];L.pre_tool_call=[...F.filter(e=>!(e=>a(e)&&"^delegate_task$"===e.matcher&&new RegExp(`${HERMES_GUARD_FILENAME.replaceAll(".","\\.")}$`).test(String(e.command||"").replace(/["']/g,"")))(e)),{matcher:"^delegate_task$",command:l(hermesGuardPath({homeDir:E,env:g,platform:w})),timeout:5}];const j=hermesGuardPath({homeDir:E,env:g,platform:w}),I=t.join(x,"shell-hooks-allowlist.json"),O=c(j,_),T=c(R,_),G=c(I,_);try{m(j,y,{fsImpl:_,mode:448}),m(R,i.stringify($,{lineWidth:0}),{fsImpl:_,mode:384});const e={...g,HERMES_ACCEPT_HOOKS:"1"};S([...v,"hooks","revoke",l(j)],{env:e});const o=S([...v,"hooks","test","pre_tool_call","--for-tool","delegate_task"],{env:e});if(!/(?:action|decision)["']?\s*[:=]\s*["']block/i.test(o)||!/ThinkPool blocks hidden Hermes delegation/i.test(o))throw new Error("Hermes ran the ThinkPool delegation guard but did not report an explicit block");S([...v,"hooks","doctor"],{env:e}),S([...v,"acp","--check"],{env:e});const t=n({command:u,prefixArgs:v,execFile:k,env:e});if(!t.available)throw new Error(`Hermes setup did not pass the final runtime probe: ${t.reason||"unavailable"}`);return{...t,profile:f,created:H,mode:H?d:"existing",guardPath:j,configPath:R}}catch(e){try{p(R,T,_),p(j,O,_),p(I,G,_)}catch(o){e.message=`${e.message}; rollback also failed: ${s(o.message)}`}throw e}}

package/host-memory.mjs

@@ -1,116 +1 @@
-import os from 'node:os'
-import fs from 'node:fs'
-import { execFileSync } from 'node:child_process'
-
-const MIB = 1024 * 1024
-const DEFAULT_BLOCK_PERCENT = 8
-const DEFAULT_RELEASE_PERCENT = 12
-const DEFAULT_BLOCK_BYTES = 512 * MIB
-const DEFAULT_RELEASE_BYTES = 1024 * MIB
-
-function finiteNumber(value, fallback) {
-  const n = Number(value)
-  return Number.isFinite(n) ? n : fallback
-}
-
-export function parseMacMemoryPressure(output) {
-  const match = String(output || '').match(/System-wide memory free percentage:\s*([0-9]+(?:\.[0-9]+)?)%/i)
-  return match ? Number(match[1]) : null
-}
-
-export function parseLinuxMemAvailable(output) {
-  const text = String(output || '')
-  const available = text.match(/^MemAvailable:\s*(\d+)\s*kB\s*$/mi)
-  const total = text.match(/^MemTotal:\s*(\d+)\s*kB\s*$/mi)
-  if (!available || !total) return null
-  return { availableBytes: Number(available[1]) * 1024, totalBytes: Number(total[1]) * 1024, source: 'proc-meminfo' }
-}
-
-export function memoryDecision(snapshot, { blocked = false, env = process.env } = {}) {
-  if (env.TP_MEMORY_GUARD_OFF === '1') return { ok: true, blocked: false, source: 'disabled' }
-  if (!snapshot) return { ok: true, blocked: false, source: 'unavailable' }
-
-  const blockPercent = Math.max(1, finiteNumber(env.TP_MEMORY_BLOCK_PERCENT, DEFAULT_BLOCK_PERCENT))
-  const releasePercent = Math.max(blockPercent + 1, finiteNumber(env.TP_MEMORY_RELEASE_PERCENT, DEFAULT_RELEASE_PERCENT))
-  const blockBytes = Math.max(64 * MIB, finiteNumber(env.TP_MEMORY_BLOCK_MIB, DEFAULT_BLOCK_BYTES / MIB) * MIB)
-  const releaseBytes = Math.max(blockBytes + MIB, finiteNumber(env.TP_MEMORY_RELEASE_MIB, DEFAULT_RELEASE_BYTES / MIB) * MIB)
-  const availableBytes = Number.isFinite(snapshot.availableBytes) ? snapshot.availableBytes : null
-  const totalBytes = Number.isFinite(snapshot.totalBytes) && snapshot.totalBytes > 0 ? snapshot.totalBytes : null
-  const availablePercent = Number.isFinite(snapshot.availablePercent)
-    ? snapshot.availablePercent
-    : (availableBytes != null && totalBytes ? (availableBytes / totalBytes) * 100 : null)
-
-  // macOS' memory_pressure percentage already accounts for reclaimable/compressed
-  // memory. Generic os.freemem() does not, so a healthy Mac can look ~97% full.
-  // Other platforms need BOTH a low ratio and a low absolute reserve to avoid
-  // rejecting large-memory hosts merely because their page cache is busy.
-  const pressureSignal = snapshot.source === 'macos-memory-pressure'
-  const shouldBlock = pressureSignal
-    ? availablePercent != null && availablePercent <= blockPercent
-    : availablePercent != null && availableBytes != null && availablePercent <= blockPercent && availableBytes <= blockBytes
-  const recovered = pressureSignal
-    ? availablePercent != null && availablePercent >= releasePercent
-    : availablePercent != null && availableBytes != null && (availablePercent >= releasePercent || availableBytes >= releaseBytes)
-  const nextBlocked = blocked ? !recovered : shouldBlock
-
-  return {
-    ok: !nextBlocked,
-    blocked: nextBlocked,
-    source: snapshot.source || 'unknown',
-    availablePercent,
-    availableBytes,
-    blockPercent,
-    releasePercent,
-  }
-}
-
-export function createHostMemoryGuard({
-  platform = process.platform,
-  env = process.env,
-  execFile = execFileSync,
-  readFile = fs.readFileSync,
-  freeMemory = os.freemem,
-  totalMemory = os.totalmem,
-  now = Date.now,
-  cacheMs = 5000,
-} = {}) {
-  let cached = null
-  let cachedAt = 0
-  let blocked = false
-
-  const sample = () => {
-    if (platform === 'darwin') {
-      try {
-        const output = execFile('/usr/bin/memory_pressure', ['-Q'], { encoding: 'utf8', timeout: 1500, stdio: ['ignore', 'pipe', 'ignore'] })
-        const availablePercent = parseMacMemoryPressure(output)
-        if (availablePercent != null) return { availablePercent, source: 'macos-memory-pressure' }
-      } catch { /* fall through to a portable snapshot */ }
-    } else if (platform === 'linux') {
-      try {
-        const parsed = parseLinuxMemAvailable(readFile('/proc/meminfo', 'utf8'))
-        if (parsed) return parsed
-      } catch { /* fall through to a portable snapshot */ }
-    }
-    try {
-      return { availableBytes: freeMemory(), totalBytes: totalMemory(), source: 'os-freemem' }
-    } catch { return null }
-  }
-
-  return function admitHostMemory(activity = 'start new work') {
-    const at = now()
-    if (!cached || at - cachedAt >= cacheMs) {
-      const decision = memoryDecision(sample(), { blocked, env })
-      blocked = decision.blocked
-      cached = decision
-      cachedAt = at
-    }
-    if (cached.ok) return cached
-    const pct = cached.availablePercent == null ? 'critically low' : `${Math.round(cached.availablePercent)}% available`
-    return {
-      ...cached,
-      reason: `Host memory is critically low (${pct}). ThinkPool did not ${activity}. Existing lanes stay connected; close a lane or free memory, then retry.`,
-    }
-  }
-}
-
-export const hostMemoryAdmission = createHostMemoryGuard()
+import e from"node:os";import r from"node:fs";import{execFileSync as t}from"node:child_process";const o=1048576;function n(e,r){const t=Number(e);return Number.isFinite(t)?t:r}export function parseMacMemoryPressure(e){const r=String(e||"").match(/System-wide memory free percentage:\s*([0-9]+(?:\.[0-9]+)?)%/i);return r?Number(r[1]):null}export function parseLinuxMemAvailable(e){const r=String(e||""),t=r.match(/^MemAvailable:\s*(\d+)\s*kB\s*$/im),o=r.match(/^MemTotal:\s*(\d+)\s*kB\s*$/im);return t&&o?{availableBytes:1024*Number(t[1]),totalBytes:1024*Number(o[1]),source:"proc-meminfo"}:null}export function memoryDecision(e,{blocked:r=!1,env:t=process.env}={}){if("1"===t.TP_MEMORY_GUARD_OFF)return{ok:!0,blocked:!1,source:"disabled"};if(!e)return{ok:!0,blocked:!1,source:"unavailable"};const l=Math.max(1,n(t.TP_MEMORY_BLOCK_PERCENT,8)),a=Math.max(l+1,n(t.TP_MEMORY_RELEASE_PERCENT,12)),s=Math.max(64*o,n(t.TP_MEMORY_BLOCK_MIB,512)*o),i=Math.max(s+o,n(t.TP_MEMORY_RELEASE_MIB,1024)*o),c=Number.isFinite(e.availableBytes)?e.availableBytes:null,u=Number.isFinite(e.totalBytes)&&e.totalBytes>0?e.totalBytes:null,m=Number.isFinite(e.availablePercent)?e.availablePercent:null!=c&&u?c/u*100:null,y="macos-memory-pressure"===e.source,b=r?!(y?null!=m&&m>=a:null!=m&&null!=c&&(m>=a||c>=i)):y?null!=m&&m<=l:null!=m&&null!=c&&m<=l&&c<=s;return{ok:!b,blocked:b,source:e.source||"unknown",availablePercent:m,availableBytes:c,blockPercent:l,releasePercent:a}}export function createHostMemoryGuard({platform:o=process.platform,env:n=process.env,execFile:l=t,readFile:a=r.readFileSync,freeMemory:s=e.freemem,totalMemory:i=e.totalmem,now:c=Date.now,cacheMs:u=5e3}={}){let m=null,y=0,b=!1;return function(e="start new work"){const r=c();if(!m||r-y>=u){const e=memoryDecision((()=>{if("darwin"===o)try{const e=parseMacMemoryPressure(l("/usr/bin/memory_pressure",["-Q"],{encoding:"utf8",timeout:1500,stdio:["ignore","pipe","ignore"]}));if(null!=e)return{availablePercent:e,source:"macos-memory-pressure"}}catch{}else if("linux"===o)try{const e=parseLinuxMemAvailable(a("/proc/meminfo","utf8"));if(e)return e}catch{}try{return{availableBytes:s(),totalBytes:i(),source:"os-freemem"}}catch{return null}})(),{blocked:b,env:n});b=e.blocked,m=e,y=r}if(m.ok)return m;const t=null==m.availablePercent?"critically low":`${Math.round(m.availablePercent)}% available`;return{...m,reason:`Host memory is critically low (${t}). ThinkPool did not ${e}. Existing lanes stay connected; close a lane or free memory, then retry.`}}}export const hostMemoryAdmission=createHostMemoryGuard();

package/interrupted-resume.mjs

@@ -1,95 +1 @@
-// Runtime-specific bridge-restart recovery.
-//
-// Claude owns a long-lived input stream: its continue must wait for the init system
-// event proving that stream is consumed. Codex is one process per turn and has no idle
-// init event: sending the prompt IS what launches the resumed process.
-
-export function sendInterruptedContinue(entry) {
-  if (!entry) return false
-  entry.pendingAutoResume = false
-  try { return entry.session?.sendTurn?.('continue') !== false }
-  catch { return false }
-}
-
-// A text recap is the fallback when the native thread cannot be resumed. Claude
-// already has a live init event to trigger this; Codex does not -- sending the
-// recap is what starts its fresh exec process. Consume atomically, but restore it
-// if delivery was refused so the next human turn can still prepend the context.
-export function dispatchPendingRecap(entry) {
-  const recap = typeof entry?.pendingRecap === 'string' ? entry.pendingRecap : ''
-  if (!recap.trim()) return false
-  entry.pendingRecap = null
-  try { entry.flush?.() } catch { /* best effort */ }
-  try {
-    if (entry.session?.sendTurn?.(recap) === false) {
-      entry.pendingRecap = recap
-      return false
-    }
-    return true
-  } catch {
-    entry.pendingRecap = recap
-    return false
-  }
-}
-
-export function armInterruptedResume(entry) {
-  if (!entry?.session) return 'unavailable'
-  if (entry.runtime === 'codex') return sendInterruptedContinue(entry) ? 'sent' : 'unavailable'
-  entry.pendingAutoResume = true
-  return 'armed'
-}
-
-export function recoverInterruptedTurn(entry, { resumable = false, recap = '' } = {}) {
-  if (!entry?.session) return 'unavailable'
-  if (resumable) return armInterruptedResume(entry)
-  if (!String(recap || '').trim()) return 'unavailable'
-  entry.pendingRecap = String(recap)
-  if (entry.runtime === 'codex') return dispatchPendingRecap(entry) ? 'recap-sent' : 'unavailable'
-  return 'recap-armed'
-}
-
-export function isMissingResumeError(message) {
-  return /No conversation found|no rollout found for thread id|thread\/resume[^\n]*failed[^\n]*no rollout/i.test(String(message || ''))
-}
-
-export function shouldAttemptNativeResume(record, { canResume = () => false, codexThreadCanResume = () => true } = {}) {
-  if (!record?.sessionId) return false
-  // Hermes has an explicit, non-replaying ACP resume request that fails loudly
-  // when identity is gone. Always ask the runtime instead of silently aging the
-  // identity out under Claude's historical local freshness heuristic.
-  if (record.runtime === 'hermes') return true
-  return canResume(record) && (record.runtime !== 'codex' || codexThreadCanResume(record.sessionId))
-}
-
-// Bound the stale-native-thread self-heal at the ownership seam. The old entry is
-// marked before teardown/reopen so duplicate error delivery can never fork another
-// process. `reopen` returns the new structured entry; Codex consumes the recap
-// immediately because a fresh exec has no idle init event.
-export function recoverMissingResumeOnce(entry, { message, recap = '', reopen } = {}) {
-  // Hermes ACP session identity is part of the lane contract. If native resume
-  // fails, surfacing that failure is safer than silently replacing the session
-  // with a recap-backed fresh identity.
-  if (!entry || entry.runtime === 'hermes' || entry.recovered || !isMissingResumeError(message)) return { recovered: false, delivery: 'ignored' }
-  entry.recovered = true
-  try { entry.session?.end?.() } catch { /* already dead */ }
-  let recovered = null
-  try { recovered = reopen?.(String(recap || '')) || null } catch { /* caller surfaces reopen failure */ }
-  if (!recovered) return { recovered: true, delivery: 'unavailable', entry: null }
-  return {
-    recovered: true,
-    delivery: recoverInterruptedTurn(recovered, { resumable: false, recap }),
-    entry: recovered,
-  }
-}
-
-// A real person speaking always wins the race. Otherwise a human turn that starts a
-// cold Claude/Codex runtime can trigger its init event and enqueue a stale second
-// `continue` behind the person's actual request.
-export function supersedeInterruptedResume(entry) {
-  if (!entry) return false
-  const queued = !!entry.pendingInterruptedRecovery
-  entry.pendingInterruptedRecovery = null
-  if (!entry.pendingAutoResume) return queued
-  entry.pendingAutoResume = false
-  return true
-}
+export function sendInterruptedContinue(e){if(!e)return!1;e.pendingAutoResume=!1;try{return!1!==e.session?.sendTurn?.("continue")}catch{return!1}}export function dispatchPendingRecap(e){const n="string"==typeof e?.pendingRecap?e.pendingRecap:"";if(!n.trim())return!1;e.pendingRecap=null;try{e.flush?.()}catch{}try{return!1!==e.session?.sendTurn?.(n)||(e.pendingRecap=n,!1)}catch{return e.pendingRecap=n,!1}}export function armInterruptedResume(e){return e?.session?"codex"===e.runtime?sendInterruptedContinue(e)?"sent":"unavailable":(e.pendingAutoResume=!0,"armed"):"unavailable"}export function recoverInterruptedTurn(e,{resumable:n=!1,recap:r=""}={}){return e?.session?n?armInterruptedResume(e):String(r||"").trim()?(e.pendingRecap=String(r),"codex"===e.runtime?dispatchPendingRecap(e)?"recap-sent":"unavailable":"recap-armed"):"unavailable":"unavailable"}export function isMissingResumeError(e){return/No conversation found|no rollout found for thread id|thread\/resume[^\n]*failed[^\n]*no rollout/i.test(String(e||""))}export function shouldAttemptNativeResume(e,{canResume:n=()=>!1,codexThreadCanResume:r=()=>!0}={}){return!!e?.sessionId&&("hermes"===e.runtime||n(e)&&("codex"!==e.runtime||r(e.sessionId)))}export function recoverMissingResumeOnce(e,{message:n,recap:r="",reopen:t}={}){if(!e||"hermes"===e.runtime||e.recovered||!isMissingResumeError(n))return{recovered:!1,delivery:"ignored"};e.recovered=!0;try{e.session?.end?.()}catch{}let u=null;try{u=t?.(String(r||""))||null}catch{}return u?{recovered:!0,delivery:recoverInterruptedTurn(u,{resumable:!1,recap:r}),entry:u}:{recovered:!0,delivery:"unavailable",entry:null}}export function supersedeInterruptedResume(e){if(!e)return!1;const n=!!e.pendingInterruptedRecovery;return e.pendingInterruptedRecovery=null,e.pendingAutoResume?(e.pendingAutoResume=!1,!0):n}

package/keep-awake.mjs

@@ -1,148 +1 @@
-/* keep-awake.mjs — one explicit, machine-wide bridge preference with a
-   platform-native implementation. The assertion is SYSTEM-only: it never asks
-   any platform to keep the display lit, so normal dimming, display sleep, and
-   screen locking remain available.
-
-   The helper is deliberately tied to the bridge PID. A crash, Ctrl-C, update,
-   or service-manager replacement therefore releases the assertion without a
-   sticky machine-level power-policy change. */
-
-import os from 'node:os'
-import fs from 'node:fs'
-import path from 'node:path'
-import { spawn } from 'node:child_process'
-import { fileURLToPath } from 'node:url'
-
-const SETTINGS_FILE = 'settings.json'
-
-function settingsPath(home = os.homedir()) {
-  return path.join(home, '.thinkpool-pair', SETTINGS_FILE)
-}
-
-export function loadKeepAwakePreference({ home = os.homedir(), fsImpl = fs } = {}) {
-  try { return JSON.parse(fsImpl.readFileSync(settingsPath(home), 'utf8')).keepAwake === true }
-  catch { return false }
-}
-
-export function saveKeepAwakePreference(enabled, { home = os.homedir(), fsImpl = fs } = {}) {
-  const file = settingsPath(home)
-  const dir = path.dirname(file)
-  let current = {}
-  try { current = JSON.parse(fsImpl.readFileSync(file, 'utf8')) || {} } catch { /* first setting */ }
-  const next = { ...current, keepAwake: enabled === true }
-  const tmp = `${file}.tmp.${process.pid}.${Date.now()}`
-  try {
-    fsImpl.mkdirSync(dir, { recursive: true })
-    fsImpl.writeFileSync(tmp, JSON.stringify(next, null, 2) + '\n', { mode: 0o600 })
-    fsImpl.renameSync(tmp, file)
-    return true
-  } catch {
-    try { fsImpl.rmSync(tmp, { force: true }) } catch { /* noop */ }
-    return false
-  }
-}
-
-export function explicitKeepAwakeChoice(argv = []) {
-  const dash = argv.indexOf('--')
-  const own = dash >= 0 ? argv.slice(0, dash) : argv
-  if (own.includes('--no-keep-awake')) return false
-  if (own.includes('--keep-awake')) return true
-  return null
-}
-
-export function keepAwakeEnabled(argv = [], { env = process.env, loadPreference = loadKeepAwakePreference } = {}) {
-  const explicit = explicitKeepAwakeChoice(argv)
-  if (explicit !== null) return explicit
-  if (env.THINKPOOL_PAIR_KEEP_AWAKE === '1') return true
-  if (env.THINKPOOL_PAIR_KEEP_AWAKE === '0') return false
-  return loadPreference() === true
-}
-
-const WINDOWS_HELPER = (parentPid) => [
-  '$ErrorActionPreference = "Stop"',
-  'Add-Type -TypeDefinition \'using System; using System.Runtime.InteropServices; public static class ThinkpoolPower { [DllImport("kernel32.dll")] public static extern uint SetThreadExecutionState(uint flags); }\'',
-  // ES_CONTINUOUS | ES_SYSTEM_REQUIRED. ES_DISPLAY_REQUIRED (0x2) is intentionally absent.
-  '[ThinkpoolPower]::SetThreadExecutionState([uint32]0x80000001) | Out-Null',
-  `try { while (Get-Process -Id ${parentPid} -ErrorAction SilentlyContinue) { Start-Sleep -Seconds 5 } }`,
-  'finally { [ThinkpoolPower]::SetThreadExecutionState([uint32]0x80000000) | Out-Null }',
-].join('; ')
-
-// Pure command construction keeps the display-sleep contract testable on any host.
-export function keepAwakeCommand(platform, parentPid, { node = process.execPath, modulePath = fileURLToPath(import.meta.url) } = {}) {
-  if (!Number.isInteger(parentPid) || parentPid <= 0) throw new Error('keep-awake requires a live bridge pid')
-  if (platform === 'darwin') {
-    // -i is the idle SYSTEM-sleep assertion. Do not add -d (display).
-    // -w makes caffeinate release automatically when the bridge PID exits.
-    return { command: '/usr/bin/caffeinate', args: ['-i', '-w', String(parentPid)], adapter: 'caffeinate' }
-  }
-  if (platform === 'linux') {
-    // Inhibit the sleep operation, not desktop "idle" handling: an idle inhibitor
-    // can also suppress screen blanking in some desktop environments. The tiny Node
-    // waiter exits with the parent, releasing systemd-logind's inhibitor lock.
-    return {
-      command: 'systemd-inhibit',
-      args: ['--what=sleep', '--mode=block', '--who=Thinkpool', '--why=Keep the Thinkpool bridge reachable', '--', node, modulePath, '--wait-for', String(parentPid)],
-      adapter: 'systemd-inhibit',
-    }
-  }
-  if (platform === 'win32') {
-    return {
-      command: 'powershell.exe',
-      args: ['-NoLogo', '-NoProfile', '-NonInteractive', '-WindowStyle', 'Hidden', '-Command', WINDOWS_HELPER(parentPid)],
-      adapter: 'Windows power request',
-    }
-  }
-  return null
-}
-
-export function startKeepAwake({
-  enabled,
-  platform = process.platform,
-  parentPid = process.pid,
-  spawnImpl = spawn,
-  stderr = process.stderr,
-  accountChild = process.env.THINKPOOL_PAIR_ACCOUNT_CHILD === '1',
-} = {}) {
-  if (!enabled || accountChild) return null
-  let spec
-  try { spec = keepAwakeCommand(platform, parentPid) }
-  catch (error) { stderr.write(`  ⚠ keep-awake unavailable: ${error?.message || error}\n`); return null }
-  if (!spec) {
-    stderr.write(`  ⚠ keep-awake is not supported on ${platform}; bridge startup will continue normally.\n`)
-    return null
-  }
-
-  let child
-  const startedAt = Date.now()
-  try {
-    child = spawnImpl(spec.command, spec.args, { stdio: 'ignore', windowsHide: true })
-    child.once?.('spawn', () => {
-      stderr.write(`  ◆ keep-awake ON via ${spec.adapter}: system sleep is inhibited while this bridge runs.\n    Your screen can still dim, lock, and turn off normally.\n`)
-    })
-    child.once?.('error', (error) => {
-      stderr.write(`  ⚠ keep-awake could not start (${spec.adapter}: ${error?.message || error}); bridge startup will continue normally.\n`)
-    })
-    child.once?.('exit', (code) => {
-      if (code && Date.now() - startedAt < 30_000) stderr.write(`  ⚠ keep-awake helper exited early (${spec.adapter}, code ${code}); the computer may sleep normally.\n`)
-    })
-    child.unref?.()
-    return child
-  } catch (error) {
-    stderr.write(`  ⚠ keep-awake could not start (${spec.adapter}: ${error?.message || error}); bridge startup will continue normally.\n`)
-    return null
-  }
-}
-
-async function waitForProcess(pid) {
-  for (;;) {
-    try { process.kill(pid, 0) } catch { return }
-    await new Promise((resolve) => setTimeout(resolve, 5_000))
-  }
-}
-
-// Linux systemd-inhibit owns this helper as its COMMAND. It holds no power
-// assertion itself; its lifetime simply matches the bridge process.
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url) && process.argv[2] === '--wait-for') {
-  const pid = Number(process.argv[3])
-  if (Number.isInteger(pid) && pid > 0) await waitForProcess(pid)
-}
+import e from"node:os";import r from"node:fs";import t from"node:path";import{spawn as n}from"node:child_process";import{fileURLToPath as o}from"node:url";function i(r=e.homedir()){return t.join(r,".thinkpool-pair","settings.json")}export function loadKeepAwakePreference({home:t=e.homedir(),fsImpl:n=r}={}){try{return!0===JSON.parse(n.readFileSync(i(t),"utf8")).keepAwake}catch{return!1}}export function saveKeepAwakePreference(n,{home:o=e.homedir(),fsImpl:a=r}={}){const s=i(o),l=t.dirname(s);let c={};try{c=JSON.parse(a.readFileSync(s,"utf8"))||{}}catch{}const p={...c,keepAwake:!0===n},u=`${s}.tmp.${process.pid}.${Date.now()}`;try{return a.mkdirSync(l,{recursive:!0}),a.writeFileSync(u,JSON.stringify(p,null,2)+"\n",{mode:384}),a.renameSync(u,s),!0}catch{try{a.rmSync(u,{force:!0})}catch{}return!1}}export function explicitKeepAwakeChoice(e=[]){const r=e.indexOf("--"),t=r>=0?e.slice(0,r):e;return!t.includes("--no-keep-awake")&&(!!t.includes("--keep-awake")||null)}export function keepAwakeEnabled(e=[],{env:r=process.env,loadPreference:t=loadKeepAwakePreference}={}){const n=explicitKeepAwakeChoice(e);return null!==n?n:"1"===r.THINKPOOL_PAIR_KEEP_AWAKE||"0"!==r.THINKPOOL_PAIR_KEEP_AWAKE&&!0===t()}const a=e=>['$ErrorActionPreference = "Stop"',"Add-Type -TypeDefinition 'using System; using System.Runtime.InteropServices; public static class ThinkpoolPower { [DllImport(\"kernel32.dll\")] public static extern uint SetThreadExecutionState(uint flags); }'","[ThinkpoolPower]::SetThreadExecutionState([uint32]0x80000001) | Out-Null",`try { while (Get-Process -Id ${e} -ErrorAction SilentlyContinue) { Start-Sleep -Seconds 5 } }`,"finally { [ThinkpoolPower]::SetThreadExecutionState([uint32]0x80000000) | Out-Null }"].join("; ");export function keepAwakeCommand(e,r,{node:t=process.execPath,modulePath:n=o(import.meta.url)}={}){if(!Number.isInteger(r)||r<=0)throw new Error("keep-awake requires a live bridge pid");return"darwin"===e?{command:"/usr/bin/caffeinate",args:["-i","-w",String(r)],adapter:"caffeinate"}:"linux"===e?{command:"systemd-inhibit",args:["--what=sleep","--mode=block","--who=Thinkpool","--why=Keep the Thinkpool bridge reachable","--",t,n,"--wait-for",String(r)],adapter:"systemd-inhibit"}:"win32"===e?{command:"powershell.exe",args:["-NoLogo","-NoProfile","-NonInteractive","-WindowStyle","Hidden","-Command",a(r)],adapter:"Windows power request"}:null}export function startKeepAwake({enabled:e,platform:r=process.platform,parentPid:t=process.pid,spawnImpl:o=n,stderr:i=process.stderr,accountChild:a="1"===process.env.THINKPOOL_PAIR_ACCOUNT_CHILD}={}){if(!e||a)return null;let s,l;try{s=keepAwakeCommand(r,t)}catch(e){return i.write(`  ⚠ keep-awake unavailable: ${e?.message||e}\n`),null}if(!s)return i.write(`  ⚠ keep-awake is not supported on ${r}; bridge startup will continue normally.\n`),null;const c=Date.now();try{return l=o(s.command,s.args,{stdio:"ignore",windowsHide:!0}),l.once?.("spawn",()=>{i.write(`  ◆ keep-awake ON via ${s.adapter}: system sleep is inhibited while this bridge runs.\n    Your screen can still dim, lock, and turn off normally.\n`)}),l.once?.("error",e=>{i.write(`  ⚠ keep-awake could not start (${s.adapter}: ${e?.message||e}); bridge startup will continue normally.\n`)}),l.once?.("exit",e=>{e&&Date.now()-c<3e4&&i.write(`  ⚠ keep-awake helper exited early (${s.adapter}, code ${e}); the computer may sleep normally.\n`)}),l.unref?.(),l}catch(e){return i.write(`  ⚠ keep-awake could not start (${s.adapter}: ${e?.message||e}); bridge startup will continue normally.\n`),null}}if(process.argv[1]&&t.resolve(process.argv[1])===o(import.meta.url)&&"--wait-for"===process.argv[2]){const s=Number(process.argv[3]);Number.isInteger(s)&&s>0&&await async function(e){for(;;){try{process.kill(e,0)}catch{return}await new Promise(e=>setTimeout(e,5e3))}}(s)}

package/key-shape.mjs

@@ -1,49 +1 @@
-/* key-shape.mjs — classify a Supabase API key by its SHAPE, and decide whether
-   it is safe to hand to a client.
-
-   Deliberately dependency-free (not even node: builtins beyond Buffer) so it can
-   be imported from BOTH sides of the tarball boundary: the published
-   `thinkpool-pair` bridge and the Vercel serverless function api/config.js.
-
-   Supabase runs two key generations side by side (see
-   docs/specs/2026-07-10-supabase-key-migration.md §1a):
-
-     legacy   a JWT — `eyJ…` — whose `role` payload claim is `anon` or `service_role`
-     new      an opaque string — `sb_publishable_…` or `sb_secret_…`
-
-   Exactly two of those four are client-safe. The other two bypass RLS. Nothing
-   here VERIFIES a signature — that is Supabase's job, over the network, and we
-   have no key material to verify with (§4: nothing in this repo verifies a JWT).
-   We are reading a shape to answer one question: "could this possibly be a
-   secret?" A false "yes" costs a fallback. A false "no" costs the database. */
-
-/** @returns {'publishable'|'secret'|'anon-jwt'|'service-jwt'|'invalid'} */
-export function classifyKey(key) {
-  if (typeof key !== 'string') return 'invalid'
-  const k = key.trim()
-  if (!k) return 'invalid'
-
-  // New-generation keys are self-describing. Check `secret` first: a prefix
-  // test that fails open is exactly the bug this module exists to prevent.
-  if (k.startsWith('sb_secret_')) return 'secret'
-  if (k.startsWith('sb_publishable_')) return 'publishable'
-
-  // Legacy keys are unsigned-to-us JWTs; the role lives in the payload.
-  if (k.startsWith('eyJ')) {
-    const parts = k.split('.')
-    if (parts.length !== 3) return 'invalid'
-    try {
-      const payload = JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf8'))
-      if (payload.role === 'anon') return 'anon-jwt'
-      if (payload.role === 'service_role') return 'service-jwt'
-      return 'invalid' // an unknown role is not a role we will trust
-    } catch { return 'invalid' }
-  }
-  return 'invalid'
-}
-
-/** Only a publishable key or a legacy anon JWT may ever reach a client. */
-export function isClientSafeKey(key) {
-  const c = classifyKey(key)
-  return c === 'publishable' || c === 'anon-jwt'
-}
+export function classifyKey(t){if("string"!=typeof t)return"invalid";const r=t.trim();if(!r)return"invalid";if(r.startsWith("sb_secret_"))return"secret";if(r.startsWith("sb_publishable_"))return"publishable";if(r.startsWith("eyJ")){const t=r.split(".");if(3!==t.length)return"invalid";try{const r=JSON.parse(Buffer.from(t[1],"base64url").toString("utf8"));return"anon"===r.role?"anon-jwt":"service_role"===r.role?"service-jwt":"invalid"}catch{return"invalid"}}return"invalid"}export function isClientSafeKey(t){const r=classifyKey(t);return"publishable"===r||"anon-jwt"===r}