thinkpool-pair 0.7.63 → 0.7.65

package/account.mjs

@@ -210,19 +210,15 @@ export async function runAccount(SUPABASE_URL, SUPABASE_ANON) {
   // (code-mockup, whip L16). Refreshed below; pushed to live children on rotation.
   let currentAccessToken = session.access_token || null
 
-  // Owner-gate (Contract C-CODE-2): hosting a code session — spawning the agent and
-  // burning compute on this machine — requires Pro or Enterprise. This is the layer
-  // with teeth on cost; the start_code_session RPC gates the web create flow, this
-  // stops a crafted-row bypass from ever serving. Invited partners don't run a bridge.
-  let plan = 'free'
-  try {
-    const { data } = await sb.from('profiles').select('plan').eq('id', session.user.id).single()
-    plan = data?.plan || 'free'
-  } catch { /* transient read — fall through to the gate, fail closed */ }
-  if (plan !== 'pro' && plan !== 'enterprise') {
-    process.stderr.write(`\n  ◇ ThinkPool Code requires a Pro or Enterprise plan to host a session.\n    Your account (${email}) is on the ${plan} plan.\n    Upgrade:  https://thinkpool.io/pro\n\n    (Anyone you invite can still join and steer a Pro host's session for free.)\n`)
-    process.exit(1)
-  }
+  // No plan-refusal here (Contract C-CODE-2′, spec 2026-06-25-code-free-launch).
+  // /code is now a metered free tier, not Pro-only: a free account can legitimately
+  // own sessions (within its monthly quota, or during the launch window). The cost
+  // brake moved to session CREATION — start_code_session enforces the quota/window
+  // server-side, so a row exists iff the owner was entitled to create it. The bridge
+  // therefore serves whatever sessions the account legitimately owns (owner-only
+  // discovery below, line ~349, still bounds it to the account's OWN rooms). Inference
+  // runs on this machine's own Claude login regardless of plan, so hosting costs
+  // ThinkPool nothing; there's no cost reason to refuse a free host.
 
   const DEFAULT_DIR = process.cwd()   // unbound sessions auto-serve here; `bind` overrides per session
   const svcHint = process.env.THINKPOOL_PAIR_AUTOUPDATE === '1'

package/bridge.mjs

@@ -708,6 +708,15 @@ function printLocal(evt) {
 // first). EVERY event that joins entry.log must go through here so the client's
 // "drop ≤ seqHi" cursor stays correct (a logged event with no seq would break it).
 function pushLog(entry, evt) {
+  // Single stamp point: guarantee ts+cid on EVERY logged event. echoYou() and the
+  // /model,/clear control lines called pushLog WITHOUT a prior stampEvent, so
+  // `you`/`control` were logged with a seq but NO ts. On a long session the
+  // client's capEvents evicts the agent turns below an old `you` line, leaving it
+  // with no lower-seq checkpoint → orderEvents pins the ts-less line to ts 0 and
+  // every old user message stacks at the TOP of the timeline (room XE3IQ, 2026-06-25).
+  // A real ts makes ordering wall-clock — immune to eviction AND /clear seq resets.
+  // stampEvent is idempotent, so the callers that already stamp are unaffected.
+  stampEvent(evt)
   // Only TRANSCRIPT events consume a seq (seqable) — replay-chrome kinds the web
   // filters out (system/thinking_tokens/effort) ride the log seq-less so they don't
   // hole the client's applied sequence. See event-id.mjs NO_SEQ_KINDS.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkpool-pair",
-  "version": "0.7.63",
+  "version": "0.7.65",
   "description": "Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.",
   "type": "module",
   "bin": {