thinkpool-pair 0.7.364 → 0.7.366

package/launcher.mjs

@@ -1,354 +1 @@
-/* launcher.mjs — the one-command interactive menu for `thinkpool-pair`.
-   Spec: docs/specs/2026-06-19-bridge-unified-launcher.md (Part 1).
-
-   ONE implementation, three callers, via dependency injection:
-     • bridge.mjs       → real `actions` (spawn a room bridge / installService / runLogin / …)
-     • setup-prototype  → dry-run `actions` (print the command instead of running it)
-     • test-launcher    → mock `actions` + scripted `io` (assert menu choice → action + args)
-
-   detectState() is real + read-only (auth.json / provider.json / PATH agents / service
-   artifact presence). runLauncher() renders the menu and calls actions.* — it NEVER runs
-   anything itself, so it is safe to unit-test and safe to dry-run. */
-
-import os from 'node:os'
-import fs from 'node:fs'
-import path from 'node:path'
-import { execSync } from 'node:child_process'
-import { detectProvider, fetchModels, ANTHROPIC_COMPATIBLE, gatewayHint } from './byok-detect.mjs'
-import { probeHermesRuntime } from './hermes-probe.mjs'
-import { darwinServiceRunning, serviceRuntimeVersion } from './service.mjs'
-import { loadKeepAwakePreference } from './keep-awake.mjs'
-
-const HOME = os.homedir()
-const CFG_DIR = path.join(HOME, '.thinkpool-pair')
-
-// Version of THIS running launcher (read from the package it shipped with). Shown in the
-// header so the running build is visible — and so a stale npx cache is obvious at a glance
-// (header says 0.7.75 while npm @latest is 0.7.78 → time to "Restart & update the bridge").
-const VERSION = (() => { try { return JSON.parse(fs.readFileSync(new URL('./package.json', import.meta.url), 'utf8')).version } catch { return null } })()
-
-export const KNOWN_AGENTS = [
-  { label: 'Claude Code', cmd: 'claude', resume: ['--continue'] },
-  { label: 'Codex',       cmd: 'codex' },
-  { label: 'Hermes',      cmd: 'thinkpool' },
-]
-
-function onPath(c) {
-  const exts = process.platform === 'win32' ? (process.env.PATHEXT || '.EXE;.CMD;.BAT;.COM').split(';') : ['']
-  for (const dir of (process.env.PATH || '').split(path.delimiter)) {
-    if (!dir) continue
-    for (const ext of exts) { try { if (fs.existsSync(path.join(dir, c + ext))) return true } catch { /* noop */ } }
-  }
-  return false
-}
-function readJson(p) { try { return JSON.parse(fs.readFileSync(p, 'utf8')) } catch { return null } }
-
-function serviceFile(room) {
-  const label = room ? `io.thinkpool.pair.${room.toLowerCase()}` : 'io.thinkpool.pair.account'
-  if (process.platform === 'darwin') return path.join(HOME, 'Library', 'LaunchAgents', `${label}.plist`)
-  if (process.platform === 'linux')  return path.join(HOME, '.config', 'systemd', 'user', `${label}.service`)
-  const startup = path.join(process.env.APPDATA || path.join(HOME, 'AppData', 'Roaming'), 'Microsoft', 'Windows', 'Start Menu', 'Programs', 'Startup')
-  return path.join(startup, `thinkpool-pair-${room || 'account'}.cmd`)
-}
-
-// Ground truth for the header: is the service actually RUNNING, not just registered?
-// `launchctl load` can silently no-op, leaving a plist that never loads — file-existence
-// would report "installed" while the bridge is off (the 2026-06-26 bug). A registered
-// job can also be inactive with no pid, so inspect launchd's live state, not print's exit.
-function serviceLoaded(room) {
-  const label = room ? `io.thinkpool.pair.${room.toLowerCase()}` : 'io.thinkpool.pair.account'
-  try {
-    if (process.platform === 'darwin') {
-      const out = execSync(`launchctl print gui/$(id -u)/${label}`, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] })
-      return darwinServiceRunning(out)
-    }
-    if (process.platform === 'linux')  { execSync(`systemctl --user is-active --quiet ${label}.service`); return true }
-    return fs.existsSync(serviceFile(room)) // Windows: no daemon, file presence is the only proxy
-  } catch { return false }
-}
-
-export function detectState() {
-  const auth = readJson(path.join(CFG_DIR, 'auth.json'))
-  const provider = readJson(path.join(CFG_DIR, 'provider.json'))
-  // provider.json is written with { provider, baseUrl, model } (see provider.mjs).
-  // Anything whose `provider` field is set and not "anthropic" is a custom endpoint.
-  const isCustom = !!provider?.provider && provider.provider !== 'anthropic'
-  const hermesInstalled = onPath('hermes')
-  const hermesReady = onPath('thinkpool') && probeHermesRuntime().available
-  const accountSvc = serviceLoaded(null)
-  const reconnectRequired = !!auth?.reconnect_required
-  return {
-    loggedIn: !!auth?.refresh_token && !reconnectRequired,
-    reconnectRequired,
-    email: auth?.email || auth?.user?.email || null,
-    provider: isCustom ? `Custom (${provider.baseUrl || 'endpoint'})` : 'Anthropic (default)',
-    providerModel: isCustom ? (provider.model || null) : null,
-    agents: KNOWN_AGENTS.filter(a => onPath(a.cmd) && (a.cmd !== 'thinkpool' || hermesReady)),
-    hermesInstalled,
-    hermesReady,
-    accountSvc,
-    keepAwake: loadKeepAwakePreference(),
-    serviceVersion: accountSvc ? serviceRuntimeVersion(null) : null,
-    platform: process.platform,
-    cwd: process.cwd(),
-    version: VERSION,
-  }
-}
-
-// ── colors ──
-const C = {
-  dim: (s) => `\x1b[2m${s}\x1b[0m`, bold: (s) => `\x1b[1m${s}\x1b[0m`,
-  cyan: (s) => `\x1b[36m${s}\x1b[0m`, green: (s) => `\x1b[32m${s}\x1b[0m`, yellow: (s) => `\x1b[33m${s}\x1b[0m`,
-}
-
-// io: { ask(prompt)->Promise<string>, print(s) }. actions: real | dry-run | mock.
-// refresh: optional () => state — re-read disk after a mutating action so the header
-// reflects the change (real bridge passes detectState; tests omit it to keep the
-// injected state stable).
-export async function runLauncher({ actions, io, state = detectState(), refresh = null }) {
-  const normalizeState = (next) => ({
-    ...next,
-    agents: Array.isArray(next?.agents) ? next.agents : [],
-    loggedIn: !!next?.loggedIn,
-    reconnectRequired: !!next?.reconnectRequired,
-    accountSvc: !!next?.accountSvc,
-    keepAwake: next?.keepAwake === true,
-    serviceVersion: typeof next?.serviceVersion === 'string' && next.serviceVersion ? next.serviceVersion : null,
-    platform: next?.platform || process.platform,
-    provider: next?.provider || 'Anthropic (default)',
-    cwd: next?.cwd || process.cwd(),
-    version: next?.version || VERSION,
-  })
-  state = normalizeState(state)
-  const resync = () => { if (refresh) state = normalizeState(refresh()) }
-  const askChoice = async (prompt, options, def = 1) => {
-    options.forEach((o, i) => io.print(`    ${C.cyan(String(i + 1))})  ${o.label}${o.hint ? '  ' + C.dim(o.hint) : ''}`))
-    const a = await io.ask(`\n  ${prompt} ${C.dim(`[${def}]`)} ${C.cyan('▸')} `)
-    const n = parseInt(a, 10)
-    return Number.isInteger(n) && n >= 1 && n <= options.length ? n - 1 : def - 1
-  }
-  const askYesNo = async (q, def = true) => {
-    const a = (await io.ask(`  ${q} ${C.dim(def ? '[Y/n]' : '[y/N]')} ${C.cyan('▸')} `)).toLowerCase()
-    return a ? a[0] === 'y' : def
-  }
-
-  const header = () => {
-    io.print('')
-    io.print('  ' + C.dim('┌ ') + C.bold('thinkpool-pair') + C.dim(' ' + '─'.repeat(40)))
-    io.print(`  ${C.dim('│ launcher ')} ${state.version ? `v${state.version}` : 'version unavailable'}`)
-    io.print(`  ${C.dim('│ account  ')} ${state.reconnectRequired ? C.yellow('reconnect required') : state.loggedIn ? C.green((state.email || 'linked') + ' ✓') : C.yellow('not linked')}`)
-    io.print(`  ${C.dim('│ agents   ')} ${state.agents.length ? state.agents.map(a => a.label).join(', ') : C.yellow('none ready: install Claude Code, Codex, or Hermes')}`)
-    io.print(`  ${C.dim('│ directory')} ${C.dim(state.cwd)}`)
-    const bridgeStatus = !state.accountSvc
-      ? 'not installed'
-      : state.platform === 'win32'
-        ? C.green('startup entry installed')
-        : C.green(`running${state.serviceVersion ? ` v${state.serviceVersion}` : ' (version unavailable)'}`)
-    io.print(`  ${C.dim('│ bridge   ')} ${bridgeStatus}`)
-    io.print(`  ${C.dim('│ keep awake')} ${state.keepAwake ? C.green('on') + C.dim(', display may still dim') : 'off'}`)
-    io.print('  ' + C.dim('└' + '─'.repeat(54)) + '\n')
-  }
-
-  // KEPT for the `npx thinkpool-pair <ROOM>` argv path (bridge.mjs) — no longer a main-menu
-  // item (single-session serve was retired), but the helper stays so nothing else breaks.
-  const pairRoom = async () => {
-    const room = (await io.ask(`\n  Room code ${C.dim('(from /code in the web app)')} ${C.cyan('▸')} `)).toUpperCase().trim()
-    if (!room) { io.print('  ' + C.yellow('no room — back to menu')); return }
-    if (!state.agents.length) { io.print('\n  ' + C.yellow('No supported agent runtime is ready (Claude Code, Codex, or Hermes).')); return }
-    let agent = state.agents[0]
-    if (state.agents.length > 1) { io.print('\n  Share which agent?'); agent = state.agents[await askChoice('agent', state.agents.map(a => ({ label: a.label })))] }
-    io.print('\n  Run mode?')
-    const headless = (await askChoice('mode', [
-      { label: 'Attached', hint: 'use it like your own terminal, mirrored to the web' },
-      { label: 'Headless', hint: 'pure relay, drive entirely from the web' },
-    ])) === 1
-    let cont = false
-    if (!headless && agent.resume) cont = await askYesNo(`\n  Continue your latest ${agent.label} session in this directory?`, true)
-    await actions.pairRoom({ room, agentCmd: agent.cmd, resumeArgs: cont ? agent.resume : [], headless })
-  }
-
-  // Login gate shared by both "serve" paths (foreground + install service). Both serve
-  // EVERY hosted session, so both require an account link first. Returns true only once
-  // logged in — offers to link on the spot, re-reads disk, and refuses to serve if still not.
-  const ensureLoggedIn = async () => {
-    if (state.loggedIn) return true
-    io.print('\n  ' + C.yellow(state.reconnectRequired
-      ? 'This bridge lost its Thinkpool account link.'
-      : 'You are not linked to a ThinkPool account yet.'))
-    if (await askYesNo('  Link this device now?', true)) { await actions.login(); resync() }
-    if (!state.loggedIn) { io.print('  ' + C.yellow('login needed to serve your sessions — back to menu')); return false }
-    return true
-  }
-
-  // A provider key is credentials, not an executable agent. Stop new installs
-  // before they create an apparently healthy but unusable background bridge.
-  const ensureAgentReady = async () => {
-    if (state.agents.length) return true
-    io.print('\n  ' + C.yellow('No coding agent is ready on this computer'))
-    io.print('  Thinkpool connects an agent already installed on this machine. It does not')
-    io.print('  include one. Install and configure at least one of:')
-    io.print(`\n    ${C.cyan('Claude Code')}   command: claude`)
-    io.print(`    ${C.cyan('Codex')}         command: codex`)
-    io.print(`    ${C.cyan('Hermes')}        command: hermes, then set up its Thinkpool profile here`)
-    io.print('\n  ' + C.bold('BYOK does not replace the agent. It only gives an installed agent'))
-    io.print('  credentials for a model provider.')
-    io.print('\n  Install one, then reopen this launcher.')
-    return false
-  }
-
-  const providerMenu = async () => {
-    const cur = state.provider + (state.providerModel ? `, model ${state.providerModel}` : '')
-    io.print('\n  ' + C.dim('Provider settings supply model credentials. Claude Code, Codex, or Hermes must still be installed locally.'))
-    const p = await askChoice('\n  provider', [
-      { label: 'Anthropic (default)', hint: 'regular Claude login' },
-      { label: 'Paste a key, pick a model', hint: 'auto-detects the provider · OpenRouter = any model' },
-      { label: 'Custom endpoint', hint: 'enter a base url + token by hand' },
-      { label: '← Back', hint: `current: ${cur}` },
-    ], 4)  // Enter = Back
-    if (p === 3) return
-    if (p === 0) { await actions.setProvider({ kind: 'anthropic' }); resync(); io.print('\n  ' + C.green('✓ back on regular Claude.')); return }
-
-    if (p === 1) {
-      // Paste a key → detect provider → auto base url → fetch model list → pick.
-      const key = (await io.ask(`\n  Paste your API key ${C.dim('(blank to cancel)')} ${C.cyan('▸')} `)).trim()
-      if (!key) { io.print('  ' + C.yellow('cancelled — provider unchanged')); return }
-      const det = detectProvider(key)
-      if (!det.compatible) { io.print('\n  ' + C.yellow(gatewayHint(det.name))); return }
-      const cfg = ANTHROPIC_COMPATIBLE[det.id]
-      io.print(`\n  ${C.green('✓ detected ' + cfg.name)} ${C.dim('— fetching models…')}`)
-      const models = await fetchModels({ modelsUrl: cfg.models, key, auth: cfg.auth })
-      let model
-      if (models.length === 0) {
-        model = (await io.ask(`  Couldn't list models. Model id ${C.dim('(blank = endpoint default)')} ${C.cyan('▸')} `)).trim() || undefined
-      } else if (models.length <= 40) {
-        const idx = await askChoice('\n  model', models.map((m) => ({ label: m })), 1)
-        model = models[idx]
-      } else {
-        io.print(`  ${C.dim(models.length + ' models available, e.g. ' + models.slice(0, 3).join(', ') + '…')}`)
-        for (;;) {
-          const q = (await io.ask(`  Type a model id or part of it ${C.dim('(blank to cancel)')} ${C.cyan('▸')} `)).trim()
-          if (!q) { io.print('  ' + C.yellow('cancelled — provider unchanged')); return }
-          const matches = models.filter((m) => m.toLowerCase().includes(q.toLowerCase()))
-          if (matches.length === 0) { io.print('  ' + C.yellow('no match — try again')); continue }
-          if (matches.length === 1) { model = matches[0]; break }
-          if (matches.length <= 40) { const i = await askChoice('\n  pick', matches.map((m) => ({ label: m })), 1); model = matches[i]; break }
-          io.print(`  ${C.yellow(matches.length + ' matches — narrow it down')}`)
-        }
-      }
-      await actions.setProvider({ kind: 'custom', base: cfg.base, token: key, model })
-      resync()
-      io.print(`\n  ${C.green('✓ provider set.')}\n    ${cfg.name}\n    model: ${model || '(endpoint default)'}`)
-      return
-    }
-
-    // p === 2 — manual custom endpoint (kept as a fallback; blank line aborts each step).
-    const base = (await io.ask(`\n  Base url ${C.dim('(blank to cancel · SDK appends /v1/messages)')} ${C.cyan('▸')} `)).trim()
-    if (!base) { io.print('  ' + C.yellow('cancelled — provider unchanged')); return }
-    const token = (await io.ask(`  API token ${C.dim('(blank to cancel)')} ${C.cyan('▸')} `)).trim()
-    if (!token) { io.print('  ' + C.yellow('cancelled — provider unchanged')); return }
-    const model = (await io.ask(`  Model ${C.dim('(blank = endpoint default · e.g. glm-4.6)')} ${C.cyan('▸')} `)).trim()
-    await actions.setProvider({ kind: 'custom', base, token, model: model || undefined })
-    resync()
-    io.print(`\n  ${C.green('✓ provider set to custom.')}\n    base url: ${state.provider}\n    model:    ${state.providerModel || '(endpoint default)'}`)
-  }
-
-  const settingsMenu = async () => {
-    for (;;) {
-      const options = [
-        { key: 'provider', label: 'Provider', hint: `current: ${state.provider}` },
-        { key: 'account', label: 'Account', hint: state.reconnectRequired ? 'reconnect required' : state.loggedIn ? `linked: ${state.email || 'yes'}` : 'not linked' },
-        { key: 'awake', label: 'Keep computer awake', hint: `${state.keepAwake ? 'ON' : 'off'} · the screen can still dim, lock, and turn off` },
-      ]
-      if (state.hermesInstalled) options.push({ key: 'hermes', label: state.hermesReady ? 'Hermes profile' : 'Set up Hermes', hint: state.hermesReady ? 'isolated profile ready' : 'set up isolated profile + delegation guard' })
-      options.push({ key: 'back', label: 'Back to main menu', hint: '' })
-      const picked = options[await askChoice('\n  change', options, options.length)]
-      if (picked.key === 'back') return
-      if (picked.key === 'provider') await providerMenu()
-      else if (picked.key === 'account') { await actions.login(); resync(); return }
-      else if (picked.key === 'awake') {
-        if (state.keepAwake) {
-          const changed = await actions.setKeepAwake({ enabled: false })
-          if (changed === false) continue
-          state = { ...state, keepAwake: false }
-          resync()
-          io.print('\n  ' + C.green('✓ keep-awake is off. The computer may sleep normally.'))
-        } else {
-          io.print('\n  ' + C.yellow('Important: keep-awake changes this computer’s power behavior'))
-          io.print('  While the bridge runs, Thinkpool will prevent the computer itself from')
-          io.print('  automatically sleeping. This can use substantially more battery and may')
-          io.print('  also block suspend requests on some Linux systems.')
-          io.print('\n  ' + C.green('It does NOT keep the screen on. Display dimming, screen locking, and'))
-          io.print('  display sleep continue to work normally. Closing a laptop lid may still')
-          io.print('  sleep it, depending on the operating system and power settings.')
-          if (await askYesNo('\n  Enable keep-awake while the Thinkpool bridge runs?', false)) {
-            const changed = await actions.setKeepAwake({ enabled: true })
-            if (changed === false) continue
-            state = { ...state, keepAwake: true }
-            resync()
-            io.print('\n  ' + C.green('✓ keep-awake is on. Your screen is still free to dim and turn off.'))
-          } else io.print('\n  ' + C.yellow('unchanged: keep-awake remains off.'))
-        }
-      }
-      else if (picked.key === 'hermes') {
-        const setup = await askChoice('\n  Hermes profile', [
-          { label: 'Clone active profile', hint: 'copies provider/config explicitly; fresh ThinkPool session history' },
-          { label: 'Create clean profile', hint: 'no copied credentials or bundled skills; configure provider afterward' },
-          { label: 'Back', hint: '' },
-        ], 3)
-        if (setup !== 2) { await actions.setupHermes({ mode: setup === 0 ? 'clone' : 'clean' }); resync() }
-      }
-    }
-  }
-
-  // ── menu loop ──
-  // account-foreground runs forever, so that choice never returns here. Everything else
-  // (install / restart / uninstall / settings / provider) does its work, prints its notes,
-  // and RETURNS — so the loop always drops you back at the menu. The trailing "press Enter"
-  // lands on every returning path. Slots 1+2 are the ONLY two things this device does:
-  // before a service exists → the two ways to start serving all your sessions; once the
-  // service exists → maintain it (update/restart or remove). No single-room / per-room
-  // serve is offered anymore (that was `npx thinkpool-pair <ROOM>`, still on the argv path).
-  for (;;) {
-    header()
-    io.print('  ' + C.bold('What do you want to do?') + '\n')
-    // Slots 1+2 swap on whether the always-on service is already installed.
-    const items = state.accountSvc
-      ? [
-          state.platform === 'win32'
-            ? { key: 'restart', label: 'Update startup entry', hint: 'installs the latest version; relaunch the bridge window to apply' }
-            : { key: 'restart', label: 'Restart & update bridge', hint: 'install the latest published version; sessions resume' },
-          { key: 'uninstall', label: 'Remove background service', hint: 'stop serving your sessions on this device' },
-        ]
-      : [
-          { key: 'serve',   label: 'Serve all my sessions', hint: 'runs here, Ctrl-C stops it' },
-          { key: 'service', label: 'Always-on background service', hint: 'recommended — survives reboot, restarts on crash' },
-        ]
-    items.push({ key: 'settings', label: 'Settings', hint: `provider · account · keep-awake ${state.keepAwake ? 'ON' : 'off'}${state.hermesInstalled ? ' · Hermes profile' : ''}` })
-    items.push({ key: 'quit', label: 'Quit', hint: '' })
-    const pick = items[await askChoice('choose', items)]
-    if (pick.key === 'quit') return
-    if (pick.key === 'serve') { if (await ensureAgentReady() && await ensureLoggedIn()) await actions.serveAccountForeground() }
-    else if (pick.key === 'service') {
-      if (await ensureAgentReady() && await ensureLoggedIn()) {
-        const installed = await actions.installService({ room: null })
-        if (installed === true) {
-          if (!actions.relaunchLauncher || await actions.relaunchLauncher()) return
-        }
-        resync()
-      }
-    }
-    else if (pick.key === 'restart') {
-      const updated = await actions.restartUpdateService({ room: null })
-      // Keep the person inside the launcher. A confirmed service update may have
-      // installed a newer package than this process has in memory, so hand the same
-      // TTY to the exact verified runtime instead of dumping back to the shell.
-      if (updated === true) {
-        if (!actions.relaunchLauncher || await actions.relaunchLauncher()) return
-      }
-      resync()
-    }
-    else if (pick.key === 'uninstall') { await actions.uninstallService({ room: null }); resync() }
-    else if (pick.key === 'settings') await settingsMenu()
-    await io.ask('\n  ' + C.dim('press Enter to return to the menu…'))
-  }
-}
+import e from"node:os";import n from"node:fs";import t from"node:path";import{execSync as r}from"node:child_process";import{detectProvider as i,fetchModels as o,ANTHROPIC_COMPATIBLE as a,gatewayHint as s}from"./byok-detect.mjs";import{probeHermesRuntime as l}from"./hermes-probe.mjs";import{darwinServiceRunning as c,serviceRuntimeVersion as d}from"./service.mjs";import{loadKeepAwakePreference as p}from"./keep-awake.mjs";const u=e.homedir(),m=t.join(u,".thinkpool-pair"),h=(()=>{try{return JSON.parse(n.readFileSync(new URL("./package.json",import.meta.url),"utf8")).version}catch{return null}})();export const KNOWN_AGENTS=[{label:"Claude Code",cmd:"claude",resume:["--continue"]},{label:"Codex",cmd:"codex"},{label:"Hermes",cmd:"thinkpool"}];function k(e){const r="win32"===process.platform?(process.env.PATHEXT||".EXE;.CMD;.BAT;.COM").split(";"):[""];for(const i of(process.env.PATH||"").split(t.delimiter))if(i)for(const o of r)try{if(n.existsSync(t.join(i,e+o)))return!0}catch{}return!1}function f(e){try{return JSON.parse(n.readFileSync(e,"utf8"))}catch{return null}}export function detectState(){const e=f(t.join(m,"auth.json")),i=f(t.join(m,"provider.json")),o=!!i?.provider&&"anthropic"!==i.provider,a=k("hermes"),s=k("thinkpool")&&l().available,v=function(e){const i=e?`io.thinkpool.pair.${e.toLowerCase()}`:"io.thinkpool.pair.account";try{if("darwin"===process.platform){const e=r(`launchctl print gui/$(id -u)/${i}`,{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return c(e)}return"linux"===process.platform?(r(`systemctl --user is-active --quiet ${i}.service`),!0):n.existsSync(function(e){const n=e?`io.thinkpool.pair.${e.toLowerCase()}`:"io.thinkpool.pair.account";if("darwin"===process.platform)return t.join(u,"Library","LaunchAgents",`${n}.plist`);if("linux"===process.platform)return t.join(u,".config","systemd","user",`${n}.service`);const r=t.join(process.env.APPDATA||t.join(u,"AppData","Roaming"),"Microsoft","Windows","Start Menu","Programs","Startup");return t.join(r,`thinkpool-pair-${e||"account"}.cmd`)}(e))}catch{return!1}}(null),g=!!e?.reconnect_required;return{loggedIn:!!e?.refresh_token&&!g,reconnectRequired:g,email:e?.email||e?.user?.email||null,provider:o?`Custom (${i.baseUrl||"endpoint"})`:"Anthropic (default)",providerModel:o&&i.model||null,agents:KNOWN_AGENTS.filter(e=>k(e.cmd)&&("thinkpool"!==e.cmd||s)),hermesInstalled:a,hermesReady:s,accountSvc:v,keepAwake:p(),serviceVersion:v?d(null):null,platform:process.platform,cwd:process.cwd(),version:h}}const v=e=>`${e}`,g=e=>`${e}`,y=e=>`${e}`,w=e=>`${e}`,b=e=>`${e}`;export async function runLauncher({actions:e,io:n,state:t=detectState(),refresh:r=null}){const l=e=>({...e,agents:Array.isArray(e?.agents)?e.agents:[],loggedIn:!!e?.loggedIn,reconnectRequired:!!e?.reconnectRequired,accountSvc:!!e?.accountSvc,keepAwake:!0===e?.keepAwake,serviceVersion:"string"==typeof e?.serviceVersion&&e.serviceVersion?e.serviceVersion:null,platform:e?.platform||process.platform,provider:e?.provider||"Anthropic (default)",cwd:e?.cwd||process.cwd(),version:e?.version||h});t=l(t);const c=()=>{r&&(t=l(r()))},d=async(e,t,r=1)=>{t.forEach((e,t)=>n.print(`    ${y(String(t+1))})  ${e.label}${e.hint?"  "+v(e.hint):""}`));const i=await n.ask(`\n  ${e} ${v(`[${r}]`)} ${y("▸")} `),o=parseInt(i,10);return Number.isInteger(o)&&o>=1&&o<=t.length?o-1:r-1},p=async(e,t=!0)=>{const r=(await n.ask(`  ${e} ${v(t?"[Y/n]":"[y/N]")} ${y("▸")} `)).toLowerCase();return r?"y"===r[0]:t},u=()=>{n.print(""),n.print("  "+v("┌ ")+g("thinkpool-pair")+v(" "+"─".repeat(40))),n.print(`  ${v("│ launcher ")} ${t.version?`v${t.version}`:"version unavailable"}`),n.print(`  ${v("│ account  ")} ${t.reconnectRequired?b("reconnect required"):t.loggedIn?w((t.email||"linked")+" ✓"):b("not linked")}`),n.print(`  ${v("│ agents   ")} ${t.agents.length?t.agents.map(e=>e.label).join(", "):b("none ready: install Claude Code, Codex, or Hermes")}`),n.print(`  ${v("│ directory")} ${v(t.cwd)}`);const e=t.accountSvc?"win32"===t.platform?w("startup entry installed"):w("running"+(t.serviceVersion?` v${t.serviceVersion}`:" (version unavailable)")):"not installed";n.print(`  ${v("│ bridge   ")} ${e}`),n.print(`  ${v("│ keep awake")} ${t.keepAwake?w("on")+v(", display may still dim"):"off"}`),n.print("  "+v("└"+"─".repeat(54))+"\n")},m=async()=>!!t.loggedIn||(n.print("\n  "+b(t.reconnectRequired?"This bridge lost its Thinkpool account link.":"You are not linked to a ThinkPool account yet.")),await p("  Link this device now?",!0)&&(await e.login(),c()),!!t.loggedIn||(n.print("  "+b("login needed to serve your sessions — back to menu")),!1)),k=async()=>!!t.agents.length||(n.print("\n  "+b("No coding agent is ready on this computer")),n.print("  Thinkpool connects an agent already installed on this machine. It does not"),n.print("  include one. Install and configure at least one of:"),n.print(`\n    ${y("Claude Code")}   command: claude`),n.print(`    ${y("Codex")}         command: codex`),n.print(`    ${y("Hermes")}        command: hermes, then set up its Thinkpool profile here`),n.print("\n  "+g("BYOK does not replace the agent. It only gives an installed agent")),n.print("  credentials for a model provider."),n.print("\n  Install one, then reopen this launcher."),!1),f=async()=>{const r=t.provider+(t.providerModel?`, model ${t.providerModel}`:"");n.print("\n  "+v("Provider settings supply model credentials. Claude Code, Codex, or Hermes must still be installed locally."));const l=await d("\n  provider",[{label:"Anthropic (default)",hint:"regular Claude login"},{label:"Paste a key, pick a model",hint:"auto-detects the provider · OpenRouter = any model"},{label:"Custom endpoint",hint:"enter a base url + token by hand"},{label:"← Back",hint:`current: ${r}`}],4);if(3===l)return;if(0===l)return await e.setProvider({kind:"anthropic"}),c(),void n.print("\n  "+w("✓ back on regular Claude."));if(1===l){const t=(await n.ask(`\n  Paste your API key ${v("(blank to cancel)")} ${y("▸")} `)).trim();if(!t)return void n.print("  "+b("cancelled — provider unchanged"));const r=i(t);if(!r.compatible)return void n.print("\n  "+b(s(r.name)));const l=a[r.id];n.print(`\n  ${w("✓ detected "+l.name)} ${v("— fetching models…")}`);const p=await o({modelsUrl:l.models,key:t,auth:l.auth});let u;if(0===p.length)u=(await n.ask(`  Couldn't list models. Model id ${v("(blank = endpoint default)")} ${y("▸")} `)).trim()||void 0;else if(p.length<=40){const e=await d("\n  model",p.map(e=>({label:e})),1);u=p[e]}else for(n.print(`  ${v(p.length+" models available, e.g. "+p.slice(0,3).join(", ")+"…")}`);;){const e=(await n.ask(`  Type a model id or part of it ${v("(blank to cancel)")} ${y("▸")} `)).trim();if(!e)return void n.print("  "+b("cancelled — provider unchanged"));const t=p.filter(n=>n.toLowerCase().includes(e.toLowerCase()));if(0!==t.length){if(1===t.length){u=t[0];break}if(t.length<=40){const e=await d("\n  pick",t.map(e=>({label:e})),1);u=t[e];break}n.print(`  ${b(t.length+" matches — narrow it down")}`)}else n.print("  "+b("no match — try again"))}return await e.setProvider({kind:"custom",base:l.base,token:t,model:u}),c(),void n.print(`\n  ${w("✓ provider set.")}\n    ${l.name}\n    model: ${u||"(endpoint default)"}`)}const p=(await n.ask(`\n  Base url ${v("(blank to cancel · SDK appends /v1/messages)")} ${y("▸")} `)).trim();if(!p)return void n.print("  "+b("cancelled — provider unchanged"));const u=(await n.ask(`  API token ${v("(blank to cancel)")} ${y("▸")} `)).trim();if(!u)return void n.print("  "+b("cancelled — provider unchanged"));const m=(await n.ask(`  Model ${v("(blank = endpoint default · e.g. glm-4.6)")} ${y("▸")} `)).trim();await e.setProvider({kind:"custom",base:p,token:u,model:m||void 0}),c(),n.print(`\n  ${w("✓ provider set to custom.")}\n    base url: ${t.provider}\n    model:    ${t.providerModel||"(endpoint default)"}`)},$=async()=>{for(;;){const r=[{key:"provider",label:"Provider",hint:`current: ${t.provider}`},{key:"account",label:"Account",hint:t.reconnectRequired?"reconnect required":t.loggedIn?`linked: ${t.email||"yes"}`:"not linked"},{key:"awake",label:"Keep computer awake",hint:(t.keepAwake?"ON":"off")+" · the screen can still dim, lock, and turn off"}];t.hermesInstalled&&r.push({key:"hermes",label:t.hermesReady?"Hermes profile":"Set up Hermes",hint:t.hermesReady?"isolated profile ready":"set up isolated profile + delegation guard"}),r.push({key:"back",label:"Back to main menu",hint:""});const i=r[await d("\n  change",r,r.length)];if("back"===i.key)return;if("provider"===i.key)await f();else{if("account"===i.key)return await e.login(),void c();if("awake"===i.key)if(t.keepAwake){if(!1===await e.setKeepAwake({enabled:!1}))continue;t={...t,keepAwake:!1},c(),n.print("\n  "+w("✓ keep-awake is off. The computer may sleep normally."))}else if(n.print("\n  "+b("Important: keep-awake changes this computer’s power behavior")),n.print("  While the bridge runs, Thinkpool will prevent the computer itself from"),n.print("  automatically sleeping. This can use substantially more battery and may"),n.print("  also block suspend requests on some Linux systems."),n.print("\n  "+w("It does NOT keep the screen on. Display dimming, screen locking, and")),n.print("  display sleep continue to work normally. Closing a laptop lid may still"),n.print("  sleep it, depending on the operating system and power settings."),await p("\n  Enable keep-awake while the Thinkpool bridge runs?",!1)){if(!1===await e.setKeepAwake({enabled:!0}))continue;t={...t,keepAwake:!0},c(),n.print("\n  "+w("✓ keep-awake is on. Your screen is still free to dim and turn off."))}else n.print("\n  "+b("unchanged: keep-awake remains off."));else if("hermes"===i.key){const n=await d("\n  Hermes profile",[{label:"Clone active profile",hint:"copies provider/config explicitly; fresh ThinkPool session history"},{label:"Create clean profile",hint:"no copied credentials or bundled skills; configure provider afterward"},{label:"Back",hint:""}],3);2!==n&&(await e.setupHermes({mode:0===n?"clone":"clean"}),c())}}}};for(;;){u(),n.print("  "+g("What do you want to do?")+"\n");const r=t.accountSvc?["win32"===t.platform?{key:"restart",label:"Update startup entry",hint:"installs the latest version; relaunch the bridge window to apply"}:{key:"restart",label:"Restart & update bridge",hint:"install the latest published version; sessions resume"},{key:"uninstall",label:"Remove background service",hint:"stop serving your sessions on this device"}]:[{key:"serve",label:"Serve all my sessions",hint:"runs here, Ctrl-C stops it"},{key:"service",label:"Always-on background service",hint:"recommended — survives reboot, restarts on crash"}];r.push({key:"settings",label:"Settings",hint:`provider · account · keep-awake ${t.keepAwake?"ON":"off"}${t.hermesInstalled?" · Hermes profile":""}`}),r.push({key:"quit",label:"Quit",hint:""});const i=r[await d("choose",r)];if("quit"===i.key)return;if("serve"===i.key)await k()&&await m()&&await e.serveAccountForeground();else if("service"===i.key){if(await k()&&await m()){if(!0===await e.installService({room:null})&&(!e.relaunchLauncher||await e.relaunchLauncher()))return;c()}}else if("restart"===i.key){if(!0===await e.restartUpdateService({room:null})&&(!e.relaunchLauncher||await e.relaunchLauncher()))return;c()}else"uninstall"===i.key?(await e.uninstallService({room:null}),c()):"settings"===i.key&&await $();await n.ask("\n  "+v("press Enter to return to the menu…"))}}

package/mcp-flight-recorder.mjs

@@ -1,79 +1 @@
-// Privacy-first MCP flight recorder. It retains enough operational evidence to
-// diagnose a tool path (tool identity, lifecycle, timing, and outcome), but it
-// intentionally never retains arguments, result bodies, prompts, or host paths.
-// The recorder is runtime-agnostic because every structured runtime normalizes
-// MCP activity into the common assistant/tool_result event contract.
-
-export const MCP_FLIGHT_MAX = 200
-
-const mcpToolUse = (event) => (Array.isArray(event?.blocks) ? event.blocks : [])
-  .filter((block) => block?.type === 'tool_use' && typeof block?.name === 'string' && block.name.startsWith('mcp__'))
-
-const safeToolName = (name) => String(name || '')
-  .replace(/[^a-zA-Z0-9_-]/g, '_')
-  .slice(0, 160)
-
-const safeId = (id) => typeof id === 'string' || typeof id === 'number'
-  ? String(id).slice(0, 200)
-  : null
-
-export function normalizeMcpFlight (value, { max = MCP_FLIGHT_MAX } = {}) {
-  const cap = Math.max(1, Math.min(MCP_FLIGHT_MAX, Number(max) || MCP_FLIGHT_MAX))
-  if (!Array.isArray(value)) return []
-  return value.slice(-cap).flatMap((item) => {
-    if (!item || typeof item !== 'object') return []
-    const toolUseId = safeId(item.toolUseId)
-    const tool = safeToolName(item.tool)
-    const startedAt = Number(item.startedAt)
-    if (!toolUseId || !tool || !Number.isFinite(startedAt)) return []
-    return [{
-      toolUseId,
-      tool,
-      startedAt,
-      finishedAt: Number.isFinite(Number(item.finishedAt)) ? Number(item.finishedAt) : null,
-      durationMs: Number.isFinite(Number(item.durationMs)) ? Math.max(0, Number(item.durationMs)) : null,
-      outcome: item.outcome === 'error' ? 'error' : item.outcome === 'ok' ? 'ok' : 'pending',
-      // Deliberately a count only. Never persist or return argument names/values:
-      // even a key can reveal a secret type or private filesystem layout.
-      argumentCount: Math.max(0, Math.min(1000, Number(item.argumentCount) || 0)),
-    }]
-  })
-}
-
-const argumentCount = (input) => input && typeof input === 'object' && !Array.isArray(input)
-  ? Object.keys(input).length
-  : input == null ? 0 : 1
-
-/** Record an already-normalized room event, returning a bounded safe trace. */
-export function recordMcpFlightEvent (flight, event, { now = Date.now(), max = MCP_FLIGHT_MAX } = {}) {
-  const next = normalizeMcpFlight(flight, { max })
-  for (const block of mcpToolUse(event)) {
-    const toolUseId = safeId(block.id)
-    const tool = safeToolName(block.name)
-    if (!toolUseId || !tool) continue
-    next.push({ toolUseId, tool, startedAt: now, finishedAt: null, durationMs: null, outcome: 'pending', argumentCount: argumentCount(block.input) })
-  }
-  if (event?.kind === 'tool_result') {
-    const toolUseId = safeId(event.toolUseId)
-    const item = toolUseId ? [...next].reverse().find((entry) => entry.toolUseId === toolUseId && entry.outcome === 'pending') : null
-    if (item) {
-      item.finishedAt = now
-      item.durationMs = Number.isFinite(Number(event.durationMs)) ? Math.max(0, Number(event.durationMs)) : Math.max(0, now - item.startedAt)
-      item.outcome = event.isError ? 'error' : 'ok'
-    }
-  }
-  return normalizeMcpFlight(next, { max })
-}
-
-export function formatMcpFlight (flight, { limit = 40 } = {}) {
-  const safe = normalizeMcpFlight(flight)
-  const boundedLimit = Math.max(1, Math.min(100, Number(limit) || 40))
-  const rows = safe.slice(-boundedLimit)
-  if (!rows.length) return 'MCP flight recorder: no MCP tool calls recorded in this terminal yet. It records tool name, timing, and outcome only; arguments and results are never retained.'
-  const lines = rows.map((row) => {
-    const elapsed = row.durationMs == null ? 'running' : `${row.durationMs}ms`
-    return `${new Date(row.startedAt).toISOString()}  ${row.outcome.toUpperCase().padEnd(7)}  ${row.tool}  ${elapsed}  args omitted (${row.argumentCount})`
-  })
-  return `MCP flight recorder — ${rows.length}/${safe.length} recent call${safe.length === 1 ? '' : 's'}\n` +
-    'Privacy: arguments, result bodies, prompts, secrets, and host paths are never recorded.\n\n' + lines.join('\n')
-}
+export const MCP_FLIGHT_MAX=200;const t=t=>String(t||"").replace(/[^a-zA-Z0-9_-]/g,"_").slice(0,160),e=t=>"string"==typeof t||"number"==typeof t?String(t).slice(0,200):null;export function normalizeMcpFlight(r,{max:n=200}={}){const o=Math.max(1,Math.min(200,Number(n)||200));return Array.isArray(r)?r.slice(-o).flatMap(r=>{if(!r||"object"!=typeof r)return[];const n=e(r.toolUseId),o=t(r.tool),i=Number(r.startedAt);return n&&o&&Number.isFinite(i)?[{toolUseId:n,tool:o,startedAt:i,finishedAt:Number.isFinite(Number(r.finishedAt))?Number(r.finishedAt):null,durationMs:Number.isFinite(Number(r.durationMs))?Math.max(0,Number(r.durationMs)):null,outcome:"error"===r.outcome?"error":"ok"===r.outcome?"ok":"pending",argumentCount:Math.max(0,Math.min(1e3,Number(r.argumentCount)||0))}]:[]}):[]}const r=t=>t&&"object"==typeof t&&!Array.isArray(t)?Object.keys(t).length:null==t?0:1;export function recordMcpFlightEvent(n,o,{now:i=Date.now(),max:s=200}={}){const a=normalizeMcpFlight(n,{max:s});for(const n of(t=>(Array.isArray(t?.blocks)?t.blocks:[]).filter(t=>"tool_use"===t?.type&&"string"==typeof t?.name&&t.name.startsWith("mcp__")))(o)){const o=e(n.id),s=t(n.name);o&&s&&a.push({toolUseId:o,tool:s,startedAt:i,finishedAt:null,durationMs:null,outcome:"pending",argumentCount:r(n.input)})}if("tool_result"===o?.kind){const t=e(o.toolUseId),r=t?[...a].reverse().find(e=>e.toolUseId===t&&"pending"===e.outcome):null;r&&(r.finishedAt=i,r.durationMs=Number.isFinite(Number(o.durationMs))?Math.max(0,Number(o.durationMs)):Math.max(0,i-r.startedAt),r.outcome=o.isError?"error":"ok")}return normalizeMcpFlight(a,{max:s})}export function formatMcpFlight(t,{limit:e=40}={}){const r=normalizeMcpFlight(t),n=Math.max(1,Math.min(100,Number(e)||40)),o=r.slice(-n);if(!o.length)return"MCP flight recorder: no MCP tool calls recorded in this terminal yet. It records tool name, timing, and outcome only; arguments and results are never retained.";const i=o.map(t=>{const e=null==t.durationMs?"running":`${t.durationMs}ms`;return`${new Date(t.startedAt).toISOString()}  ${t.outcome.toUpperCase().padEnd(7)}  ${t.tool}  ${e}  args omitted (${t.argumentCount})`});return`MCP flight recorder — ${o.length}/${r.length} recent call${1===r.length?"":"s"}\nPrivacy: arguments, result bodies, prompts, secrets, and host paths are never recorded.\n\n`+i.join("\n")}

package/mockup-delivery.mjs

@@ -1,57 +1 @@
-// Turn-scoped delivery boundary for room mockups.
-//
-// A render can finish several tool calls before the agent's final answer. Sending
-// its card immediately makes the answer land below it, forcing a phone user to
-// scroll back up. Keep active-turn artifacts private until the transcript's real
-// terminal boundary has been emitted, then deliver them in render order.
-export function completeMockupManifest(manifest, { isReadyFile } = {}) {
-  if (typeof isReadyFile !== 'function') throw new TypeError('completeMockupManifest requires isReadyFile')
-  if (manifest?.sourceKind === 'preview' && (manifest.deliveryIntent !== 'card' || manifest.readinessValidated !== true)) return false
-  const files = [manifest?.desktop, manifest?.mobile, manifest?.snapshot || manifest?.source || manifest?.html]
-  return files.every((file) => !!file && isReadyFile(file))
-}
-
-export function isMockupDeliveryBoundary(event, { turnActive = false } = {}) {
-  if (!event || event.continuesQueued) return false
-  if (event.kind === 'result') return true
-  return event.kind === 'error' && !turnActive
-}
-
-export class MockupDeliveryQueue {
-  constructor({ deliver } = {}) {
-    if (typeof deliver !== 'function') throw new TypeError('MockupDeliveryQueue requires deliver')
-    this.deliver = deliver
-    this.pending = new Map()
-  }
-
-  enqueue(owner, item, { active = false, key = null } = {}) {
-    if (!owner || !active) return { queued: false, delivery: Promise.resolve().then(() => this.deliver(item)) }
-    const queue = this.pending.get(owner) || []
-    const existing = key == null ? -1 : queue.findIndex((entry) => entry.key === key)
-    if (existing >= 0) {
-      queue[existing] = { item, key }
-      this.pending.set(owner, queue)
-      return { queued: true, replaced: true, delivery: null }
-    }
-    queue.push({ item, key })
-    this.pending.set(owner, queue)
-    return { queued: true, replaced: false, delivery: null }
-  }
-
-  count(owner) {
-    return (this.pending.get(owner) || []).length
-  }
-
-  async flush(owner) {
-    const queue = this.pending.get(owner) || []
-    this.pending.delete(owner)
-    for (const entry of queue) await this.deliver(entry.item)
-    return queue.length
-  }
-
-  clear(owner) {
-    const count = this.count(owner)
-    this.pending.delete(owner)
-    return count
-  }
-}
+export function completeMockupManifest(e,{isReadyFile:t}={}){if("function"!=typeof t)throw new TypeError("completeMockupManifest requires isReadyFile");return("preview"!==e?.sourceKind||"card"===e.deliveryIntent&&!0===e.readinessValidated)&&[e?.desktop,e?.mobile,e?.snapshot||e?.source||e?.html].every(e=>!!e&&t(e))}export function isMockupDeliveryBoundary(e,{turnActive:t=!1}={}){return!(!e||e.continuesQueued||"result"!==e.kind&&("error"!==e.kind||t))}export class MockupDeliveryQueue{constructor({deliver:e}={}){if("function"!=typeof e)throw new TypeError("MockupDeliveryQueue requires deliver");this.deliver=e,this.pending=new Map}enqueue(e,t,{active:n=!1,key:i=null}={}){if(!e||!n)return{queued:!1,delivery:Promise.resolve().then(()=>this.deliver(t))};const r=this.pending.get(e)||[],u=null==i?-1:r.findIndex(e=>e.key===i);return u>=0?(r[u]={item:t,key:i},this.pending.set(e,r),{queued:!0,replaced:!0,delivery:null}):(r.push({item:t,key:i}),this.pending.set(e,r),{queued:!0,replaced:!1,delivery:null})}count(e){return(this.pending.get(e)||[]).length}async flush(e){const t=this.pending.get(e)||[];this.pending.delete(e);for(const e of t)await this.deliver(e.item);return t.length}clear(e){const t=this.count(e);return this.pending.delete(e),t}}