thinkpool-pair 0.7.364 → 0.7.366

package/scheduled-runs.mjs

@@ -1,268 +1 @@
-// Durable, bridge-local execution for the deliberately small unattended-run V1.
-// This module owns no credentials and never executes a provider itself: it admits a
-// pre-bound schedule, asks the database to fence one occurrence, then lets bridge.mjs
-// open an ordinary visible top-level terminal.
-
-import { randomUUID } from 'node:crypto'
-import { SPAWN, spawnDecision } from './cross-terminal.mjs'
-
-const RUN_KINDS = new Set(['once', 'daily', 'weekly'])
-const RUNTIMES = new Set(['claude', 'codex', 'hermes'])
-const OUTCOMES = new Set(['delivered', 'needs_decision', 'failed', 'canceled'])
-const REF_TYPES = new Set(['artifact', 'preview', 'commit', 'test', 'flow_task', 'control_item'])
-const SECRET = /(?:sk-[a-z0-9_-]{8,}|gsk_[a-z0-9_-]{8,}|AIza[a-z0-9_-]{8,}|gh[pousr]_[a-z0-9]{20,}|github_pat_[a-z0-9_]{20,}|xox[baprs]-[a-z0-9-]{10,}|AKIA[0-9A-Z]{16}|sbp_[a-z0-9]{20,}|eyJ[a-z0-9_-]{16,}\.[a-z0-9_-]{16,}\.[a-z0-9_-]{8,}|bearer\s+[a-z0-9._-]{8,}|(?:token|secret|api[_-]?key|authorization)\s*=)/i
-const HOST_PATH = /(?:^|\s)(?:~\/|\/Users\/|\/home\/|\/private\/|\/tmp\/|[A-Za-z]:\\|\.\.[\\/])/i
-const SAFE_ID = /^[A-Za-z0-9][A-Za-z0-9._:@-]{0,159}$/
-const OUTCOME_CODE = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,119}$/
-const formatterCache = new Map()
-
-// This is deliberately opt-in. A packaged bridge with schedules in its database
-// remains inert unless its owner explicitly enables unattended execution.
-export const scheduledRunsEnabled = (value = process.env.TP_SCHEDULED_RUNS_ENABLED) => value === '1'
-// Secret-free room projection. Clients need only the host owner's opt-in state,
-// never the scheduler's authentication, lease/fencing, or execution internals.
-export const scheduledRunsCapability = (value = process.env.TP_SCHEDULED_RUNS_ENABLED) => Object.freeze({
-  enabled: scheduledRunsEnabled(value),
-})
-
-const text = (value, max) => typeof value === 'string' && value.trim().length > 0 && value.length <= max && !SECRET.test(value) && !HOST_PATH.test(value)
-const date = (value) => value instanceof Date ? value : new Date(value)
-const validDate = (value) => !Number.isNaN(date(value).getTime())
-const timeParts = (zone, at) => {
-  let formatter = formatterCache.get(zone)
-  if (!formatter) {
-    formatter = new Intl.DateTimeFormat('en-CA', { timeZone: zone, weekday: 'short', hour: '2-digit', minute: '2-digit', hourCycle: 'h23' })
-    formatterCache.set(zone, formatter)
-  }
-  const parts = Object.fromEntries(formatter.formatToParts(at).filter((part) => part.type !== 'literal').map((part) => [part.type, part.value]))
-  return { weekday: ['Sun', 'Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat'].indexOf(parts.weekday), time: `${parts.hour}:${parts.minute}` }
-}
-
-export function scheduleValidationError (input = {}) {
-  if (!input || typeof input !== 'object' || !RUN_KINDS.has(input.kind)) return 'invalid_kind'
-  if (!text(input.title, 120) || !text(input.prompt, 12_000)) return 'unsafe_or_invalid_text'
-  if (!RUNTIMES.has(input.runtime)) return 'invalid_runtime'
-  if (input.provider != null && (!text(input.provider, 80) || !SAFE_ID.test(input.provider))) return 'invalid_provider'
-  if (input.model != null && (!text(input.model, 160) || !SAFE_ID.test(input.model))) return 'invalid_model'
-  if (!Number.isInteger(input.maxRuntimeMinutes) || input.maxRuntimeMinutes < 1 || input.maxRuntimeMinutes > 30) return 'invalid_max_runtime'
-  try { new Intl.DateTimeFormat('en', { timeZone: input.timezone }) } catch { return 'invalid_timezone' }
-  if (input.kind === 'once' && !validDate(input.at)) return 'invalid_once_time'
-  if (input.kind !== 'once' && !/^\d{2}:\d{2}$/.test(input.time) || input.kind !== 'once' && (Number(input.time.slice(0, 2)) > 23 || Number(input.time.slice(3)) > 59)) return 'invalid_local_time'
-  if (input.kind === 'weekly' && (!Number.isInteger(input.weekday) || input.weekday < 0 || input.weekday > 6)) return 'invalid_weekday'
-  return null
-}
-
-export function normalizeSchedule (input = {}, now = new Date()) {
-  const error = scheduleValidationError(input)
-  if (error) return Object.freeze({ ok: false, code: error })
-  const normalized = {
-    kind: input.kind, title: input.title.trim(), prompt: input.prompt.trim(), runtime: input.runtime,
-    provider: input.provider || null, model: input.model || null, timezone: input.timezone,
-    maxRuntimeMinutes: input.maxRuntimeMinutes, ...(input.kind === 'once' ? { at: date(input.at).toISOString() } : { time: input.time, ...(input.kind === 'weekly' ? { weekday: input.weekday } : {}) }),
-  }
-  const nextRunAt = nextScheduledAt(normalized, now)
-  if (!nextRunAt) return Object.freeze({ ok: false, code: 'schedule_exhausted' })
-  return Object.freeze({ ok: true, value: Object.freeze(normalized), nextRunAt: nextRunAt.toISOString() })
-}
-
-// Search minute boundaries in local calendar time. This is intentionally a small,
-// deterministic preset scheduler: nonexistent DST minutes are skipped, repeated minutes
-// choose the first future instant, and raw cron is not accepted anywhere.
-export function nextScheduledAt (schedule, after = new Date()) {
-  if (schedule?.kind === 'once') {
-    const once = date(schedule.at)
-    return validDate(once) && once.getTime() > date(after).getTime() ? once : null
-  }
-  const start = Math.floor(date(after).getTime() / 60_000) * 60_000 + 60_000
-  for (let ms = start, end = start + 400 * 86_400_000; ms < end; ms += 60_000) {
-    const local = timeParts(schedule.timezone, new Date(ms))
-    if (local.time === schedule.time && (schedule.kind === 'daily' || local.weekday === schedule.weekday)) return new Date(ms)
-  }
-  return null
-}
-
-export function classifyRunOutcome ({ result = null, evidenceRefs = [], pendingControls = [], runId = null, canceled = false } = {}) {
-  // A hard runtime ceiling is the terminal outcome even if the aborted runtime
-  // still has a pending permission or produced earlier evidence.
-  if (result?.subtype === 'runtime_limit') return Object.freeze({ outcome: 'failed', code: 'runtime_limit' })
-  if (canceled || ['aborted', 'canceled', 'cancelled', 'interrupted'].includes(result?.subtype)) return Object.freeze({ outcome: 'canceled', code: 'canceled' })
-  const evidence = (Array.isArray(evidenceRefs) ? evidenceRefs : []).filter((ref) => ref && REF_TYPES.has(ref.type) && typeof ref.id === 'string' && SAFE_ID.test(ref.id)).slice(0, 16)
-  if (evidence.length) return Object.freeze({ outcome: 'delivered', code: 'evidence_delivered', evidence })
-  const pending = (Array.isArray(pendingControls) ? pendingControls : []).find((item) =>
-    item?.status === 'pending' && item?.id && item?.request_context?.run_id &&
-    (!runId || item.request_context.run_id === runId) &&
-    Number.isSafeInteger(Number(item.source_event_from_seq)))
-  if (pending) return Object.freeze({ outcome: 'needs_decision', code: 'pending_pair_control', controlItemId: pending.id })
-  if (result?.subtype === 'success') return Object.freeze({ outcome: 'failed', code: 'missing_deliverable' })
-  return Object.freeze({ outcome: 'failed', code: result?.subtype || 'runtime_failed' })
-}
-
-const sanitizedEvidence = (refs) => (Array.isArray(refs) ? refs : [])
-  .filter((ref) => ref && REF_TYPES.has(ref.type) && typeof ref.id === 'string' && SAFE_ID.test(ref.id))
-  .slice(0, 16)
-  .map((ref) => Object.freeze({ type: ref.type, id: ref.id }))
-
-// The host outbox persists only the minimum replayable intent. Never persist
-// result text, permission input, prompts, credentials, endpoints, or host paths.
-export function sanitizeScheduledOutcomeIntent ({ runId, result = null, evidenceRefs = [], canceled = false } = {}) {
-  if (typeof runId !== 'string' || !SAFE_ID.test(runId)) return null
-  const subtype = typeof result?.subtype === 'string' && OUTCOME_CODE.test(result.subtype) ? result.subtype : 'runtime_failed'
-  return Object.freeze({
-    runId,
-    result: Object.freeze({ subtype }),
-    evidenceRefs: Object.freeze(sanitizedEvidence(evidenceRefs)),
-    canceled: canceled === true,
-  })
-}
-
-// A restored result/decision outbox owns the occurrence until its idempotent
-// database finish is acknowledged. An elapsed runtime deadline must not replace
-// that already-chosen outcome, and the scheduler must not expire occurrences
-// while any such durable intent is still awaiting reconciliation.
-export function scheduledRunDeadlineRequired ({ runId, deadlineAt, outcomeRecorded = false, outcomePending = null } = {}) {
-  return Boolean(runId && Number.isFinite(deadlineAt) && !outcomeRecorded && !outcomePending)
-}
-export function scheduledOutcomeReconciliationComplete (pendingOutcomes = []) {
-  return Array.isArray(pendingOutcomes) && pendingOutcomes.length === 0
-}
-
-// Scheduled runs share the ordinary spawn kill-switch, machine cap, and burst
-// window, but are not Ensemble dispatches and therefore never consume a plan
-// quota. The returned window is pruned and bounded; callers persist it only when
-// ok=true.
-export function scheduledRunSpawnAdmission ({ spawnTimes = [], now = Date.now(), totalLive = 0, disabled = false } = {}, limits = SPAWN) {
-  const o = { ...SPAWN, ...(limits || {}) }
-  const recent = (Array.isArray(spawnTimes) ? spawnTimes : [])
-    .filter((value) => Number.isFinite(value) && value > now - o.windowMs)
-    .slice(-(o.perWindowCap || 1))
-  const gate = spawnDecision({
-    hop: 0,
-    spawnTimes: recent,
-    now,
-    spawnedLive: 0,
-    totalLive,
-    plan: 'free',
-    disabled,
-  }, o)
-  return Object.freeze({
-    ...gate,
-    spawnTimes: Object.freeze(gate.ok ? [...recent, now].slice(-o.perWindowCap) : recent),
-  })
-}
-
-export function preflightScheduledRun ({ schedule, occurrence, ownerId, bridgeId, bridgeFencing, providerAvailable, capsOk = true, now = new Date() } = {}) {
-  if (!schedule?.enabled) return Object.freeze({ ok: false, code: 'schedule_disabled' })
-  if (!occurrence?.id || occurrence.schedule_revision !== schedule.revision) return Object.freeze({ ok: false, code: 'stale_schedule_revision' })
-  if (!ownerId || !bridgeId || !Number.isSafeInteger(bridgeFencing) || bridgeFencing < 1 || occurrence.owner_id !== ownerId || occurrence.bridge_id !== bridgeId || occurrence.bridge_fencing !== bridgeFencing) return Object.freeze({ ok: false, code: 'owner_bridge_mismatch' })
-  if (!capsOk) return Object.freeze({ ok: false, code: 'runtime_cap_exceeded' })
-  if (typeof providerAvailable !== 'function' || !providerAvailable(schedule)) return Object.freeze({ ok: false, code: 'provider_unavailable' })
-  if (!occurrence.lease_expires_at || date(occurrence.lease_expires_at).getTime() <= date(now).getTime()) return Object.freeze({ ok: false, code: 'lease_expired' })
-  return Object.freeze({ ok: true, code: 'admitted' })
-}
-
-const rpc = async ({ fetchImpl, supabaseUrl, headers, name, body }) => {
-  const response = await fetchImpl(`${String(supabaseUrl).replace(/\/$/, '')}/rest/v1/rpc/${name}`, { method: 'POST', headers, body: JSON.stringify(body) })
-  if (!response?.ok) throw new Error(`${name}_failed`)
-  return response.json()
-}
-
-export async function pollDueScheduledRuns ({ enabled = false, fetchImpl = globalThis.fetch, supabaseUrl, anonKey, token, roomCode, bridgeId, bridgeFencing, ownerId, providerAvailable, openTerminal, admitRun, releaseRun, makeTerminalId = randomUUID, capsOk = () => true, now = new Date() } = {}) {
-  if (!enabled) return Object.freeze({ ok: false, code: 'feature_disabled', runs: [] })
-  if (typeof fetchImpl !== 'function' || !supabaseUrl || !anonKey || !token || !roomCode || !bridgeId || !Number.isSafeInteger(bridgeFencing) || bridgeFencing < 1 || !ownerId || typeof openTerminal !== 'function' || typeof admitRun !== 'function' || typeof releaseRun !== 'function' || typeof makeTerminalId !== 'function') return Object.freeze({ ok: false, code: 'runner_unavailable', runs: [] })
-  const headers = { apikey: anonKey, Authorization: `Bearer ${token}`, 'Content-Type': 'application/json' }
-  const normalizedRoomCode = String(roomCode).trim().toUpperCase()
-  try {
-    // An opened row can outlive its local terminal if the room process dies in
-    // the durable-open/local-open gap. Once its lease (runtime ceiling + grace)
-    // expires, turn that ambiguity into one explicit failure instead of leaving
-    // the occurrence permanently "running".
-    const expired = await rpc({ fetchImpl, supabaseUrl, headers, name: 'expire_code_scheduled_runs', body: {
-      p_room_code: normalizedRoomCode, p_bridge_id: bridgeId, p_bridge_fencing: bridgeFencing, p_limit: 24,
-    } })
-    if (!expired?.ok) throw new Error('expire_code_scheduled_runs_failed')
-    const due = await rpc({ fetchImpl, supabaseUrl, headers, name: 'list_due_code_schedules', body: {
-      p_room_code: normalizedRoomCode, p_limit: 12,
-    } })
-    const runs = []
-    for (const schedule of Array.isArray(due) ? due : []) {
-      if (String(schedule?.session_code || '').trim().toUpperCase() !== normalizedRoomCode) {
-        runs.push({ scheduleId: schedule?.id, code: 'room_scope_mismatch' })
-        continue
-      }
-      if (!capsOk(schedule)) { runs.push({ scheduleId: schedule.id, code: 'runtime_cap_exceeded' }); continue }
-      if (typeof providerAvailable !== 'function' || !providerAvailable(schedule)) { runs.push({ scheduleId: schedule.id, code: 'provider_unavailable' }); continue }
-      const terminalId = makeTerminalId()
-      if (typeof terminalId !== 'string' || !SAFE_ID.test(terminalId)) { runs.push({ scheduleId: schedule.id, code: 'terminal_id_unavailable' }); continue }
-      const definition = { ...(schedule.schedule_spec || {}), kind: schedule.schedule_kind || schedule.kind, timezone: schedule.timezone }
-      const next = definition.kind === 'once' ? new Date('9999-12-31T23:59:00.000Z') : nextScheduledAt(definition, new Date(schedule.next_run_at))
-      if (!next) { runs.push({ scheduleId: schedule.id, code: 'next_run_invalid' }); continue }
-      const occurrenceKey = `${schedule.id}:${schedule.next_run_at}`
-      const leaseSeconds = Math.min(1_860, Math.max(60, schedule.max_runtime_minutes * 60 + 60))
-      const deadlineAt = date(now).getTime() + leaseSeconds * 1000
-      let admission = null
-      try { admission = await admitRun({ schedule, runId: occurrenceKey, terminalId, deadlineAt }) } catch { admission = null }
-      if (!admission?.ok) { runs.push({ scheduleId: schedule.id, code: admission?.code || 'spawn_not_admitted' }); continue }
-      let leaseTransferred = false
-      try {
-        const claimed = await rpc({ fetchImpl, supabaseUrl, headers, name: 'claim_due_code_schedule', body: {
-          p_schedule_id: schedule.id, p_expected_revision: schedule.revision, p_bridge_id: bridgeId,
-          p_bridge_fencing: bridgeFencing, p_occurrence_key: occurrenceKey, p_lease_seconds: leaseSeconds,
-        } })
-        if (!claimed?.ok || !claimed?.run) { runs.push({ scheduleId: schedule.id, code: claimed?.code || 'claim_failed' }); continue }
-        const admitted = preflightScheduledRun({ schedule, occurrence: claimed.run, ownerId, bridgeId, bridgeFencing, providerAvailable, capsOk: true, now })
-        if (!admitted.ok) { runs.push({ scheduleId: schedule.id, runId: claimed.run.id, code: admitted.code }); continue }
-        const opened = await rpc({ fetchImpl, supabaseUrl, headers, name: 'open_code_scheduled_run', body: {
-          p_run_id: claimed.run.id, p_bridge_id: bridgeId, p_bridge_fencing: bridgeFencing, p_terminal_id: terminalId, p_next_run_at: next.toISOString(),
-        } })
-        if (!opened?.ok) { runs.push({ scheduleId: schedule.id, runId: claimed.run.id, code: opened?.code || 'open_not_persisted' }); continue }
-        const openedRun = opened.run || claimed.run
-        let started = null
-        try { started = await openTerminal({ schedule, run: openedRun, terminalId, admission: admission.lease }) }
-        catch { started = null }
-        if (started) {
-          leaseTransferred = true
-          runs.push({ scheduleId: schedule.id, runId: claimed.run.id, code: 'opened' })
-          continue
-        }
-        const failed = await rpc({ fetchImpl, supabaseUrl, headers, name: 'finish_code_scheduled_run', body: {
-          p_run_id: claimed.run.id, p_bridge_id: bridgeId, p_bridge_fencing: bridgeFencing,
-          p_outcome: 'failed', p_outcome_code: 'terminal_open_failed', p_evidence_refs: [], p_decision_item_id: null,
-        } })
-        runs.push({ scheduleId: schedule.id, runId: claimed.run.id, code: failed?.ok ? 'open_failed' : (failed?.code || 'open_failed_unrecorded') })
-      } finally {
-        if (!leaseTransferred) {
-          try { await releaseRun(admission.lease) } catch { /* expiry remains the fail-closed release */ }
-        }
-      }
-    }
-    return Object.freeze({ ok: true, code: 'polled', runs: Object.freeze(runs) })
-  } catch { return Object.freeze({ ok: false, code: 'runner_read_failed', runs: [] }) }
-}
-
-export async function finishScheduledRun ({ fetchImpl = globalThis.fetch, supabaseUrl, anonKey, token, roomCode, runId, bridgeId, bridgeFencing, result, evidenceRefs, canceled = false } = {}) {
-  if (!supabaseUrl || !anonKey || !token || !roomCode || !runId || !bridgeId || !Number.isSafeInteger(bridgeFencing) || bridgeFencing < 1) return Object.freeze({ ok: false, code: 'outcome_unavailable' })
-  const headers = { apikey: anonKey, Authorization: `Bearer ${token}`, 'Content-Type': 'application/json' }
-  try {
-    const pendingControls = await rpc({ fetchImpl, supabaseUrl, headers, name: 'list_code_pair_controls', body: { p_session_code: String(roomCode).toUpperCase(), p_status: 'pending', p_limit: 100 } })
-    const outcome = classifyRunOutcome({ result, evidenceRefs, pendingControls, runId, canceled })
-    const written = await rpc({ fetchImpl, supabaseUrl, headers, name: 'finish_code_scheduled_run', body: {
-      p_run_id: runId, p_outcome: outcome.outcome, p_outcome_code: outcome.code,
-      p_bridge_id: bridgeId, p_bridge_fencing: bridgeFencing,
-      p_evidence_refs: outcome.evidence || [], p_decision_item_id: outcome.controlItemId || null,
-    } })
-    return Object.freeze({ ok: Boolean(written?.ok), code: written?.code || 'outcome_write_failed', outcome })
-  } catch { return Object.freeze({ ok: false, code: 'outcome_write_failed' }) }
-}
-
-export async function finishScheduledRunWithRetry (args = {}, { attempts = 3, delays = [100, 400], sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms)) } = {}) {
-  const count = Math.max(1, Math.min(5, Number.isInteger(attempts) ? attempts : 3))
-  let last = Object.freeze({ ok: false, code: 'outcome_write_failed' })
-  for (let attempt = 0; attempt < count; attempt++) {
-    last = await finishScheduledRun(args)
-    if (last.ok) return last
-    if (attempt + 1 < count) await sleep(Math.max(0, Math.min(5000, Number(delays[attempt] ?? delays.at(-1) ?? 0) || 0)))
-  }
-  return last
-}
-
-export { OUTCOMES }
+import{randomUUID as e}from"node:crypto";import{SPAWN as t,spawnDecision as n}from"./cross-terminal.mjs";const i=new Set(["once","daily","weekly"]),r=new Set(["claude","codex","hermes"]),d=new Set(["delivered","needs_decision","failed","canceled"]),o=new Set(["artifact","preview","commit","test","flow_task","control_item"]),c=/(?:sk-[a-z0-9_-]{8,}|gsk_[a-z0-9_-]{8,}|AIza[a-z0-9_-]{8,}|gh[pousr]_[a-z0-9]{20,}|github_pat_[a-z0-9_]{20,}|xox[baprs]-[a-z0-9-]{10,}|AKIA[0-9A-Z]{16}|sbp_[a-z0-9]{20,}|eyJ[a-z0-9_-]{16,}\.[a-z0-9_-]{16,}\.[a-z0-9_-]{8,}|bearer\s+[a-z0-9._-]{8,}|(?:token|secret|api[_-]?key|authorization)\s*=)/i,a=/(?:^|\s)(?:~\/|\/Users\/|\/home\/|\/private\/|\/tmp\/|[A-Za-z]:\\|\.\.[\\/])/i,u=/^[A-Za-z0-9][A-Za-z0-9._:@-]{0,159}$/,s=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,119}$/,l=new Map;export const scheduledRunsEnabled=(e=process.env.TP_SCHEDULED_RUNS_ENABLED)=>"1"===e;export const scheduledRunsCapability=(e=process.env.TP_SCHEDULED_RUNS_ENABLED)=>Object.freeze({enabled:scheduledRunsEnabled(e)});const p=(e,t)=>"string"==typeof e&&e.trim().length>0&&e.length<=t&&!c.test(e)&&!a.test(e),_=e=>e instanceof Date?e:new Date(e),m=e=>!Number.isNaN(_(e).getTime()),f=(e,t)=>{let n=l.get(e);n||(n=new Intl.DateTimeFormat("en-CA",{timeZone:e,weekday:"short",hour:"2-digit",minute:"2-digit",hourCycle:"h23"}),l.set(e,n));const i=Object.fromEntries(n.formatToParts(t).filter(e=>"literal"!==e.type).map(e=>[e.type,e.value]));return{weekday:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"].indexOf(i.weekday),time:`${i.hour}:${i.minute}`}};export function scheduleValidationError(e={}){if(!e||"object"!=typeof e||!i.has(e.kind))return"invalid_kind";if(!p(e.title,120)||!p(e.prompt,12e3))return"unsafe_or_invalid_text";if(!r.has(e.runtime))return"invalid_runtime";if(!(null==e.provider||p(e.provider,80)&&u.test(e.provider)))return"invalid_provider";if(!(null==e.model||p(e.model,160)&&u.test(e.model)))return"invalid_model";if(!Number.isInteger(e.maxRuntimeMinutes)||e.maxRuntimeMinutes<1||e.maxRuntimeMinutes>30)return"invalid_max_runtime";try{new Intl.DateTimeFormat("en",{timeZone:e.timezone})}catch{return"invalid_timezone"}return"once"!==e.kind||m(e.at)?"once"!==e.kind&&!/^\d{2}:\d{2}$/.test(e.time)||"once"!==e.kind&&(Number(e.time.slice(0,2))>23||Number(e.time.slice(3))>59)?"invalid_local_time":"weekly"===e.kind&&(!Number.isInteger(e.weekday)||e.weekday<0||e.weekday>6)?"invalid_weekday":null:"invalid_once_time"}export function normalizeSchedule(e={},t=new Date){const n=scheduleValidationError(e);if(n)return Object.freeze({ok:!1,code:n});const i={kind:e.kind,title:e.title.trim(),prompt:e.prompt.trim(),runtime:e.runtime,provider:e.provider||null,model:e.model||null,timezone:e.timezone,maxRuntimeMinutes:e.maxRuntimeMinutes,..."once"===e.kind?{at:_(e.at).toISOString()}:{time:e.time,..."weekly"===e.kind?{weekday:e.weekday}:{}}},r=nextScheduledAt(i,t);return r?Object.freeze({ok:!0,value:Object.freeze(i),nextRunAt:r.toISOString()}):Object.freeze({ok:!1,code:"schedule_exhausted"})}export function nextScheduledAt(e,t=new Date){if("once"===e?.kind){const n=_(e.at);return m(n)&&n.getTime()>_(t).getTime()?n:null}const n=6e4*Math.floor(_(t).getTime()/6e4)+6e4;for(let t=n,i=n+3456e7;t<i;t+=6e4){const n=f(e.timezone,new Date(t));if(n.time===e.time&&("daily"===e.kind||n.weekday===e.weekday))return new Date(t)}return null}export function classifyRunOutcome({result:e=null,evidenceRefs:t=[],pendingControls:n=[],runId:i=null,canceled:r=!1}={}){if("runtime_limit"===e?.subtype)return Object.freeze({outcome:"failed",code:"runtime_limit"});if(r||["aborted","canceled","cancelled","interrupted"].includes(e?.subtype))return Object.freeze({outcome:"canceled",code:"canceled"});const d=(Array.isArray(t)?t:[]).filter(e=>e&&o.has(e.type)&&"string"==typeof e.id&&u.test(e.id)).slice(0,16);if(d.length)return Object.freeze({outcome:"delivered",code:"evidence_delivered",evidence:d});const c=(Array.isArray(n)?n:[]).find(e=>"pending"===e?.status&&e?.id&&e?.request_context?.run_id&&(!i||e.request_context.run_id===i)&&Number.isSafeInteger(Number(e.source_event_from_seq)));return c?Object.freeze({outcome:"needs_decision",code:"pending_pair_control",controlItemId:c.id}):"success"===e?.subtype?Object.freeze({outcome:"failed",code:"missing_deliverable"}):Object.freeze({outcome:"failed",code:e?.subtype||"runtime_failed"})}export function sanitizeScheduledOutcomeIntent({runId:e,result:t=null,evidenceRefs:n=[],canceled:i=!1}={}){if("string"!=typeof e||!u.test(e))return null;const r="string"==typeof t?.subtype&&s.test(t.subtype)?t.subtype:"runtime_failed";return Object.freeze({runId:e,result:Object.freeze({subtype:r}),evidenceRefs:Object.freeze((d=n,(Array.isArray(d)?d:[]).filter(e=>e&&o.has(e.type)&&"string"==typeof e.id&&u.test(e.id)).slice(0,16).map(e=>Object.freeze({type:e.type,id:e.id})))),canceled:!0===i});var d}export function scheduledRunDeadlineRequired({runId:e,deadlineAt:t,outcomeRecorded:n=!1,outcomePending:i=null}={}){return Boolean(e&&Number.isFinite(t)&&!n&&!i)}export function scheduledOutcomeReconciliationComplete(e=[]){return Array.isArray(e)&&0===e.length}export function scheduledRunSpawnAdmission({spawnTimes:e=[],now:i=Date.now(),totalLive:r=0,disabled:d=!1}={},o=t){const c={...t,...o||{}},a=(Array.isArray(e)?e:[]).filter(e=>Number.isFinite(e)&&e>i-c.windowMs).slice(-(c.perWindowCap||1)),u=n({hop:0,spawnTimes:a,now:i,spawnedLive:0,totalLive:r,plan:"free",disabled:d},c);return Object.freeze({...u,spawnTimes:Object.freeze(u.ok?[...a,i].slice(-c.perWindowCap):a)})}export function preflightScheduledRun({schedule:e,occurrence:t,ownerId:n,bridgeId:i,bridgeFencing:r,providerAvailable:d,capsOk:o=!0,now:c=new Date}={}){return e?.enabled?t?.id&&t.schedule_revision===e.revision?!n||!i||!Number.isSafeInteger(r)||r<1||t.owner_id!==n||t.bridge_id!==i||t.bridge_fencing!==r?Object.freeze({ok:!1,code:"owner_bridge_mismatch"}):o?"function"==typeof d&&d(e)?!t.lease_expires_at||_(t.lease_expires_at).getTime()<=_(c).getTime()?Object.freeze({ok:!1,code:"lease_expired"}):Object.freeze({ok:!0,code:"admitted"}):Object.freeze({ok:!1,code:"provider_unavailable"}):Object.freeze({ok:!1,code:"runtime_cap_exceeded"}):Object.freeze({ok:!1,code:"stale_schedule_revision"}):Object.freeze({ok:!1,code:"schedule_disabled"})}const h=async({fetchImpl:e,supabaseUrl:t,headers:n,name:i,body:r})=>{const d=await e(`${String(t).replace(/\/$/,"")}/rest/v1/rpc/${i}`,{method:"POST",headers:n,body:JSON.stringify(r)});if(!d?.ok)throw new Error(`${i}_failed`);return d.json()};export async function pollDueScheduledRuns({enabled:t=!1,fetchImpl:n=globalThis.fetch,supabaseUrl:i,anonKey:r,token:d,roomCode:o,bridgeId:c,bridgeFencing:a,ownerId:s,providerAvailable:l,openTerminal:p,admitRun:m,releaseRun:f,makeTerminalId:b=e,capsOk:y=()=>!0,now:g=new Date}={}){if(!t)return Object.freeze({ok:!1,code:"feature_disabled",runs:[]});if(!("function"==typeof n&&i&&r&&d&&o&&c&&Number.isSafeInteger(a))||a<1||!s||"function"!=typeof p||"function"!=typeof m||"function"!=typeof f||"function"!=typeof b)return Object.freeze({ok:!1,code:"runner_unavailable",runs:[]});const w={apikey:r,Authorization:`Bearer ${d}`,"Content-Type":"application/json"},k=String(o).trim().toUpperCase();try{const e=await h({fetchImpl:n,supabaseUrl:i,headers:w,name:"expire_code_scheduled_runs",body:{p_room_code:k,p_bridge_id:c,p_bridge_fencing:a,p_limit:24}});if(!e?.ok)throw new Error("expire_code_scheduled_runs_failed");const t=await h({fetchImpl:n,supabaseUrl:i,headers:w,name:"list_due_code_schedules",body:{p_room_code:k,p_limit:12}}),r=[];for(const e of Array.isArray(t)?t:[]){if(String(e?.session_code||"").trim().toUpperCase()!==k){r.push({scheduleId:e?.id,code:"room_scope_mismatch"});continue}if(!y(e)){r.push({scheduleId:e.id,code:"runtime_cap_exceeded"});continue}if("function"!=typeof l||!l(e)){r.push({scheduleId:e.id,code:"provider_unavailable"});continue}const t=b();if("string"!=typeof t||!u.test(t)){r.push({scheduleId:e.id,code:"terminal_id_unavailable"});continue}const d={...e.schedule_spec||{},kind:e.schedule_kind||e.kind,timezone:e.timezone},o="once"===d.kind?new Date("9999-12-31T23:59:00.000Z"):nextScheduledAt(d,new Date(e.next_run_at));if(!o){r.push({scheduleId:e.id,code:"next_run_invalid"});continue}const z=`${e.id}:${e.next_run_at}`,v=Math.min(1860,Math.max(60,60*e.max_runtime_minutes+60)),I=_(g).getTime()+1e3*v;let x=null;try{x=await m({schedule:e,runId:z,terminalId:t,deadlineAt:I})}catch{x=null}if(!x?.ok){r.push({scheduleId:e.id,code:x?.code||"spawn_not_admitted"});continue}let O=!1;try{const d=await h({fetchImpl:n,supabaseUrl:i,headers:w,name:"claim_due_code_schedule",body:{p_schedule_id:e.id,p_expected_revision:e.revision,p_bridge_id:c,p_bridge_fencing:a,p_occurrence_key:z,p_lease_seconds:v}});if(!d?.ok||!d?.run){r.push({scheduleId:e.id,code:d?.code||"claim_failed"});continue}const u=preflightScheduledRun({schedule:e,occurrence:d.run,ownerId:s,bridgeId:c,bridgeFencing:a,providerAvailable:l,capsOk:!0,now:g});if(!u.ok){r.push({scheduleId:e.id,runId:d.run.id,code:u.code});continue}const _=await h({fetchImpl:n,supabaseUrl:i,headers:w,name:"open_code_scheduled_run",body:{p_run_id:d.run.id,p_bridge_id:c,p_bridge_fencing:a,p_terminal_id:t,p_next_run_at:o.toISOString()}});if(!_?.ok){r.push({scheduleId:e.id,runId:d.run.id,code:_?.code||"open_not_persisted"});continue}const m=_.run||d.run;let f=null;try{f=await p({schedule:e,run:m,terminalId:t,admission:x.lease})}catch{f=null}if(f){O=!0,r.push({scheduleId:e.id,runId:d.run.id,code:"opened"});continue}const b=await h({fetchImpl:n,supabaseUrl:i,headers:w,name:"finish_code_scheduled_run",body:{p_run_id:d.run.id,p_bridge_id:c,p_bridge_fencing:a,p_outcome:"failed",p_outcome_code:"terminal_open_failed",p_evidence_refs:[],p_decision_item_id:null}});r.push({scheduleId:e.id,runId:d.run.id,code:b?.ok?"open_failed":b?.code||"open_failed_unrecorded"})}finally{if(!O)try{await f(x.lease)}catch{}}}return Object.freeze({ok:!0,code:"polled",runs:Object.freeze(r)})}catch{return Object.freeze({ok:!1,code:"runner_read_failed",runs:[]})}}export async function finishScheduledRun({fetchImpl:e=globalThis.fetch,supabaseUrl:t,anonKey:n,token:i,roomCode:r,runId:d,bridgeId:o,bridgeFencing:c,result:a,evidenceRefs:u,canceled:s=!1}={}){if(!(t&&n&&i&&r&&d&&o&&Number.isSafeInteger(c))||c<1)return Object.freeze({ok:!1,code:"outcome_unavailable"});const l={apikey:n,Authorization:`Bearer ${i}`,"Content-Type":"application/json"};try{const n=classifyRunOutcome({result:a,evidenceRefs:u,pendingControls:await h({fetchImpl:e,supabaseUrl:t,headers:l,name:"list_code_pair_controls",body:{p_session_code:String(r).toUpperCase(),p_status:"pending",p_limit:100}}),runId:d,canceled:s}),i=await h({fetchImpl:e,supabaseUrl:t,headers:l,name:"finish_code_scheduled_run",body:{p_run_id:d,p_outcome:n.outcome,p_outcome_code:n.code,p_bridge_id:o,p_bridge_fencing:c,p_evidence_refs:n.evidence||[],p_decision_item_id:n.controlItemId||null}});return Object.freeze({ok:Boolean(i?.ok),code:i?.code||"outcome_write_failed",outcome:n})}catch{return Object.freeze({ok:!1,code:"outcome_write_failed"})}}export async function finishScheduledRunWithRetry(e={},{attempts:t=3,delays:n=[100,400],sleep:i=e=>new Promise(t=>setTimeout(t,e))}={}){const r=Math.max(1,Math.min(5,Number.isInteger(t)?t:3));let d=Object.freeze({ok:!1,code:"outcome_write_failed"});for(let t=0;t<r;t++){if(d=await finishScheduledRun(e),d.ok)return d;t+1<r&&await i(Math.max(0,Math.min(5e3,Number(n[t]??n.at(-1)??0)||0)))}return d}export{d as OUTCOMES};

package/sdk-admission.mjs

@@ -1,9 +1 @@
-// SDK checks protect agent-serving room processes only. Account/service commands
-// remain available so an operator can inspect or repair a bad SDK installation.
-export function requiresSdkAdmission(argv) {
-  return Boolean(argv?.[0]) && argv[0] !== 'verify-sdk'
-}
-
-export function sdkSmokePassed(output) {
-  return /^SMOKE:PASS:[^:\n]+(?:\n|$)/.test(String(output || ''))
-}
+export function requiresSdkAdmission(e){return Boolean(e?.[0])&&"verify-sdk"!==e[0]}export function sdkSmokePassed(e){return/^SMOKE:PASS:[^:\n]+(?:\n|$)/.test(String(e||""))}

package/sdk-smoke.mjs

@@ -1,61 +1 @@
-// sdk-smoke.mjs — agent-SDK compatibility smoke test.
-//
-// The bridge tracks @anthropic-ai/claude-agent-sdk on a caret (^0.3.x), so a
-// restart can auto-pull a NEW SDK. Our own history (feedback_bridge_sdk_pin_no_bundle)
-// is that the SDK's interrupt/turn API has broken between 0.3.x minors. This verifies
-// the API SURFACE the bridge depends on — BEFORE the bridge commits to serving with a
-// freshly-pulled SDK — so a bad one is caught + surfaced instead of silently breaking
-// every turn.
-//
-// Deliberately CHEAP + OFFLINE: no Claude key, no network, no token spend. It only
-// checks that the SDK imports, query() constructs, and the control methods the bridge
-// calls (interrupt / setModel / setPermissionMode / supportedModels) exist as
-// functions. It does NOT run a real turn (that would cost tokens + need auth). A
-// surface break — a removed/renamed method — is the failure mode this guards; a subtle
-// behavioural break still needs a live turn (out of scope for a boot gate).
-//
-// Runs as a SHORT-LIVED SUBPROCESS with a hard timeout, so a hung SDK import/construct
-// = FAIL, never a hung bridge. One line to stdout: `SMOKE:PASS:<version>` /
-// `SMOKE:FAIL:<version>:<reason>`. Exit 0 = pass, 1 = incompatible, 2 = timeout.
-
-import { createRequire } from 'node:module'
-import { readFileSync } from 'node:fs'
-import { dirname, join } from 'node:path'
-
-const HARD_TIMEOUT_MS = Math.max(4000, parseInt(process.env.TP_SDK_SMOKE_TIMEOUT, 10) || 12000)
-const guard = setTimeout(() => { emit('FAIL', ver(), 'timeout importing/constructing the SDK'); process.exit(2) }, HARD_TIMEOUT_MS)
-
-function emit(status, version, reason) {
-  try { process.stdout.write(`SMOKE:${status}:${version || 'unknown'}${reason ? ':' + reason : ''}\n`) } catch { /* noop */ }
-}
-// Resolve the SDK's real version from wherever node just resolved the package (the
-// caret pick), by walking up from its entry to the package.json with the right name.
-function ver() {
-  try {
-    const require = createRequire(import.meta.url)
-    let d = dirname(require.resolve('@anthropic-ai/claude-agent-sdk'))
-    for (let i = 0; i < 8; i++) {
-      try { const p = JSON.parse(readFileSync(join(d, 'package.json'), 'utf8')); if (p.name === '@anthropic-ai/claude-agent-sdk') return p.version } catch { /* keep walking */ }
-      const up = dirname(d); if (up === d) break; d = up
-    }
-  } catch { /* unresolved */ }
-  return 'unknown'
-}
-
-const version = ver()
-try {
-  const sdk = await import('@anthropic-ai/claude-agent-sdk')
-  if (typeof sdk.query !== 'function') { emit('FAIL', version, 'query is not a function'); clearTimeout(guard); process.exit(1) }
-  // eslint-disable-next-line require-yield -- deliberately empty: an async generator that ends immediately (the SDK's "no input" stream), never yields.
-  async function* noInput() { return }   // ends immediately — never blocks the construct
-  const q = sdk.query({ prompt: noInput(), options: { permissionMode: 'default' } })
-  const need = ['interrupt', 'setModel', 'setPermissionMode', 'supportedModels']
-  const missing = need.filter((m) => typeof q?.[m] !== 'function')
-  try { q?.interrupt?.() } catch { /* don't leave it running */ }
-  if (missing.length) { emit('FAIL', version, `missing methods: ${missing.join('/')}`); clearTimeout(guard); process.exit(1) }
-  emit('PASS', version)
-  clearTimeout(guard); process.exit(0)
-} catch (e) {
-  emit('FAIL', version, `import/construct threw: ${(e?.message || e).toString().slice(0, 120)}`)
-  clearTimeout(guard); process.exit(1)
-}
+import{createRequire as t}from"node:module";import{readFileSync as e}from"node:fs";import{dirname as o,join as n}from"node:path";const r=Math.max(4e3,parseInt(process.env.TP_SDK_SMOKE_TIMEOUT,10)||12e3),i=setTimeout(()=>{s("FAIL",c(),"timeout importing/constructing the SDK"),process.exit(2)},r);function s(t,e,o){try{process.stdout.write(`SMOKE:${t}:${e||"unknown"}${o?":"+o:""}\n`)}catch{}}function c(){try{const r=t(import.meta.url);let i=o(r.resolve("@anthropic-ai/claude-agent-sdk"));for(let t=0;t<8;t++){try{const t=JSON.parse(e(n(i,"package.json"),"utf8"));if("@anthropic-ai/claude-agent-sdk"===t.name)return t.version}catch{}const t=o(i);if(t===i)break;i=t}}catch{}return"unknown"}const a=c();try{const u=await import("@anthropic-ai/claude-agent-sdk");async function*p(){}"function"!=typeof u.query&&(s("FAIL",a,"query is not a function"),clearTimeout(i),process.exit(1));const m=u.query({prompt:p(),options:{permissionMode:"default"}}),d=["interrupt","setModel","setPermissionMode","supportedModels"].filter(t=>"function"!=typeof m?.[t]);try{m?.interrupt?.()}catch{}d.length&&(s("FAIL",a,`missing methods: ${d.join("/")}`),clearTimeout(i),process.exit(1)),s("PASS",a),clearTimeout(i),process.exit(0)}catch(f){s("FAIL",a,`import/construct threw: ${(f?.message||f).toString().slice(0,120)}`),clearTimeout(i),process.exit(1)}

package/serve-consent.mjs

@@ -1,118 +1 @@
-// Room-serve owner consent — decision core (pure) + row fetch.
-//
-// Spec: docs/specs/2026-07-06-remove-cross-person-serve.md (Contract C-CODE-3, evolved).
-// A room is served by its OWNER's bridge ONLY. No cross-person serving, no grantee
-// path (removed 2026-07-06 — the cross-person grant was a recipe for the wrong-session
-// fuckery). The owner's own bridge on a second machine is handled by the per-account
-// claim_bridge, not here. Pairing stays read-only (peer peek across the pair).
-//
-// This module holds ONLY pure, order-independent decisions (unit-tested in
-// bridge/test-serve-consent.mjs) plus a single network helper. The wiring — where the
-// gate runs — lives in bridge.mjs. Keeping the logic pure is the
-// feedback_code_seed_order_independent discipline: no decision depends on live
-// channel/session state, so every branch is testable off-wire.
-//
-// LIMITATION (documented): enforcement is in-bridge. A bridge OLDER than this version
-// may still honor a grant — there is no server-side wire-level lock. The set_serve_grant
-// RPC + serve_grant_uid column were dropped server-side in the same 2026-07-06 migration,
-// so even an old bridge can no longer READ a grant (the column is gone) and will refuse
-// as a non-owner. That closes the bypass.
-
-import { pairCli } from './command-guidance.mjs'
-
-// serveDecision — may THIS bridge serve THIS room?
-//   ownerId : code_sessions.owner_id (uuid | null)
-//   myUid    : this bridge's authed user id (uuid | null)   — null when the bridge is anon
-// Returns { serve, reason }:
-//   reason 'owner'       — myUid owns the room (the only serve path)
-//   reason 'no-identity' — bridge has no authed uid → refuse (no anon serve path)
-//   reason 'not-owner'   — authed, but not the owner → refuse
-//   reason 'unknown-room'— no owner_id resolved (row missing / RLS-hidden) → refuse
-export function serveDecision ({ ownerId, myUid }) {
-  if (!myUid) return { serve: false, reason: 'no-identity' }
-  if (!ownerId) return { serve: false, reason: 'unknown-room' }
-  if (myUid === ownerId) return { serve: true, reason: 'owner' }
-  return { serve: false, reason: 'not-owner' }
-}
-
-// supervisorServes — the account supervisor's per-row discovery decision: may this
-// login auto-serve THIS discovered room? True iff the login OWNS the room. This is the
-// defense-in-depth per-row check behind the supervisor's owner-only `.eq(owner_id, me)`
-// query — a broad RLS row (owned OR merely participant) must still resolve to OWNED
-// before a child is spawned. Contract C-CODE-2 (owner-only).
-export function supervisorServes ({ ownerId, myUid, closedAt = null }) {
-  if (!myUid) return false
-  return ownerId === myUid && !closedAt
-}
-
-// supervisorRoomsToStop — reconcile the long-lived child map after a SUCCESSFUL
-// discovery read. Closing, deleting, or transferring a room removes it from the
-// active-owned result set; any existing child for that room must be retired even
-// when the best-effort `session-deleted` realtime broadcast was missed.
-//
-// This stays pure so a transient discovery failure can be handled by the caller:
-// account.mjs invokes it only after Supabase returned without an error. On a failed
-// fetch the existing children stay alive and the next tick retries.
-export function supervisorRoomsToStop ({ rooms, childRooms, myUid }) {
-  const activeOwned = new Set((rooms || [])
-    .filter((room) => supervisorServes({
-      ownerId: room?.owner_id,
-      myUid,
-      closedAt: room?.closed_at,
-    }))
-    .map((room) => room.code)
-    .filter(Boolean))
-  return [...(childRooms || [])].filter((code) => !activeOwned.has(code))
-}
-
-// fetchServeRow — read the room's owner with whatever identity the bridge holds
-// (authed token → RLS returns the row if the user is a member; anon → empty). THROWS on
-// a non-OK response or a transport error. The thrown error carries `.authHard` so the
-// caller can tell the two apart (Contract C-CODE-3 invariant 2, hardened 2026-07-05):
-//   - 401/403 (authHard === true) → auth is DEFINITIVELY bad (dead/expired token). The
-//     caller REFUSES: a stale access token must never fail OPEN into serving, or the gate
-//     is bypassed in the common case (stored tokens expire ~1h). The caller refreshes the
-//     token BEFORE the gate, so a 401 here means the refresh also failed → genuinely unauthed.
-//   - 5xx / genuine fetch() reject (authHard === false) → availability failure. The caller
-//     fails OPEN (never strand a user on a flaky network / a Supabase blip).
-// A clean HTTP response that simply yields no row is NOT a throw — it returns
-// { ownerId: null } and the caller refuses (unknown room).
-export async function fetchServeRow ({ supabaseUrl, anonKey, token, room }) {
-  const headers = { apikey: anonKey }
-  if (token) headers.Authorization = `Bearer ${token}`
-  const r = await fetch(
-    `${supabaseUrl}/rest/v1/code_sessions?select=owner_id,name&code=eq.${encodeURIComponent(room)}`,
-    { headers },
-  )
-  if (!r.ok) {
-    const err = new Error(`code_sessions fetch ${r.status}`)
-    err.status = r.status
-    err.authHard = r.status === 401 || r.status === 403
-    throw err
-  }
-  const rows = await r.json()
-  const row = Array.isArray(rows) ? rows[0] : null
-  return {
-    ownerId: row?.owner_id ?? null,
-    name: row?.name ?? null,
-  }
-}
-
-// gateFailAction — pure classifier for a THROWN fetchServeRow error at the boot gate.
-// 'refuse'    — auth is definitively bad (401/403 after a token refresh); do NOT fail open.
-// 'fail-open' — an availability error (5xx, offline, transport reject); serve rather than
-//               strand a user on a flaky fetch. This is the ONLY fail-open path.
-export function gateFailAction (err) {
-  return err?.authHard ? 'refuse' : 'fail-open'
-}
-
-// refusalMessage — the human-facing stderr line when a bridge refuses to serve.
-export function refusalMessage ({ room, name, reason }) {
-  const label = name ? `"${name}"` : '(unnamed)'
-  if (reason === 'no-identity') {
-    return `\n  ◇ Refusing to serve room ${room} — this bridge is not signed in.\n` +
-      `    A room is served only by its owner's bridge. Sign in first:  ${pairCli('login')}\n`
-  }
-  return `\n  ◇ Refusing to serve room ${room} ${label} — it is owned by another person; only their bridge serves it.\n` +
-    `    Pairing gives you a read-only view across the pair, not hosting rights. There is no override.\n`
-}
+import{pairCli as e}from"./command-guidance.mjs";export function serveDecision({ownerId:e,myUid:o}){return o?e?o===e?{serve:!0,reason:"owner"}:{serve:!1,reason:"not-owner"}:{serve:!1,reason:"unknown-room"}:{serve:!1,reason:"no-identity"}}export function supervisorServes({ownerId:e,myUid:o,closedAt:n=null}){return!!o&&e===o&&!n}export function supervisorRoomsToStop({rooms:e,childRooms:o,myUid:n}){const r=new Set((e||[]).filter(e=>supervisorServes({ownerId:e?.owner_id,myUid:n,closedAt:e?.closed_at})).map(e=>e.code).filter(Boolean));return[...o||[]].filter(e=>!r.has(e))}export async function fetchServeRow({supabaseUrl:e,anonKey:o,token:n,room:r}){const s={apikey:o};n&&(s.Authorization=`Bearer ${n}`);const t=await fetch(`${e}/rest/v1/code_sessions?select=owner_id,name&code=eq.${encodeURIComponent(r)}`,{headers:s});if(!t.ok){const e=new Error(`code_sessions fetch ${t.status}`);throw e.status=t.status,e.authHard=401===t.status||403===t.status,e}const i=await t.json(),a=Array.isArray(i)?i[0]:null;return{ownerId:a?.owner_id??null,name:a?.name??null}}export function gateFailAction(e){return e?.authHard?"refuse":"fail-open"}export function refusalMessage({room:o,name:n,reason:r}){const s=n?`"${n}"`:"(unnamed)";return"no-identity"===r?`\n  ◇ Refusing to serve room ${o} — this bridge is not signed in.\n    A room is served only by its owner's bridge. Sign in first:  ${e("login")}\n`:`\n  ◇ Refusing to serve room ${o} ${s} — it is owned by another person; only their bridge serves it.\n    Pairing gives you a read-only view across the pair, not hosting rights. There is no override.\n`}

package/serve-dir.mjs

@@ -1,40 +1 @@
-/* serve-dir.mjs — decide which working directory the account supervisor serves a
-   room from, and REFUSE the home-directory trap.
-
-   Why this exists (FVIHV1DE, 2026-06-30): the supervisor auto-serves an unbound room
-   from its own launch dir (DEFAULT_DIR = process.cwd()). When the supervisor is
-   relaunched from $HOME instead of the repo, every unbound room is served from $HOME.
-   That silently breaks two things:
-     1. The agent's cwd becomes ~, so the Claude SDK (which keys a session's transcript
-        by project directory) can't find the session that was created under the real
-        repo → resume fails → the agent is BLIND to its own history (the UI still replays
-        the persisted ThinkPool log, so "I see the chat but the agent can't").
-     2. The room's repo label is basename(cwd) = your home folder name ("max"/"conrad")
-        instead of "thinkpool" / a branch.
-   Loud refusal beats silent context corruption. Precedence:
-     explicit bind  >  last-served memory  >  the supervisor's launch dir
-   and an UNBOUND, never-served room is refused when the launch dir IS $HOME.
-   Pure (no fs/process) so it unit-tests without spawning bridges. */
-import path from 'node:path'
-
-const samePath = (a, b) => {
-  try { return !!a && !!b && path.resolve(a) === path.resolve(b) } catch { return false }
-}
-
-// Returns { dir, refuse, reason, fromDefault }.
-//  - dir:        the directory to serve from (even when refusing, for the message)
-//  - refuse:     true → do NOT serve; warn the user to bind instead
-//  - reason:     'home' | 'none' when refusing
-//  - fromDefault:true → resolved to the supervisor's launch dir with no bind/memory
-//                (the caller should remember it after a successful serve, so a later
-//                 relaunch-from-home resumes the room from this same repo)
-export function resolveServeDir({ bound, remembered, defaultDir, home } = {}) {
-  const pick = bound || remembered || defaultDir || null
-  if (!pick) return { dir: null, refuse: true, reason: 'none' }
-  // Only the AUTO path (no explicit bind, no remembered dir) is guarded — if a person
-  // deliberately bound a room to their home dir, that's their call, honour it.
-  if (!bound && !remembered && samePath(pick, home)) {
-    return { dir: pick, refuse: true, reason: 'home' }
-  }
-  return { dir: pick, refuse: false, fromDefault: !bound && !remembered }
-}
+import e from"node:path";export function resolveServeDir({bound:r,remembered:o,defaultDir:n,home:t}={}){const u=r||o||n||null;return u?r||o||!((r,o)=>{try{return!!r&&!!o&&e.resolve(r)===e.resolve(o)}catch{return!1}})(u,t)?{dir:u,refuse:!1,fromDefault:!r&&!o}:{dir:u,refuse:!0,reason:"home"}:{dir:null,refuse:!0,reason:"none"}}