thinkpool-pair 0.7.9 → 0.7.11

package/bridge.mjs

@@ -357,6 +357,59 @@ const flushAll = () => {
 }
 const flushTimer = setInterval(flushAll, 35)
 
+// ── mockup hand-off ────────────────────────────────────────────────────
+// render.sh (mockup-iterate) drops a manifest JSON into TP_MOCKUP_OUTBOX after
+// a dual-viewport render; we watch that dir, upload the PNG pair + source HTML
+// via /api/code-mockup, and push a `mockup` code-event so both people see a
+// card in the room (inline + gallery) that opens the live sandboxed HTML.
+// Deterministic file contract — no PTY/log scraping. The env var is exported
+// into every agent child (PTY: env: process.env; structured: in-process Bash
+// inherits it). Spec: docs/specs/2026-06-17-code-mockups.md
+const MOCKUP_OUTBOX = path.join(os.tmpdir(), 'thinkpool-mockups', room)
+try {
+  fs.mkdirSync(MOCKUP_OUTBOX, { recursive: true })
+  process.env.TP_MOCKUP_OUTBOX = MOCKUP_OUTBOX
+} catch { /* mockups stay local if the outbox can't be made */ }
+
+const mockupSeen = new Map()   // slug → mtimeMs of the last manifest we processed
+const handleManifest = async (file) => {
+  if (!file || !file.endsWith('.json')) return
+  const full = path.join(MOCKUP_OUTBOX, file)
+  let stat
+  try { stat = fs.statSync(full) } catch { return }            // tmp/removed mid-write
+  const slug = file.replace(/\.json$/, '')
+  if (mockupSeen.get(slug) === stat.mtimeMs) return            // already handled
+  mockupSeen.set(slug, stat.mtimeMs)
+  // A structured Claude session is the natural home; fall back to any terminal.
+  const term = [...sessions.keys()][0] || attachedId || [...terms.keys()][0]
+  if (!term) return                                            // nothing to attach the card to yet
+  let m
+  try { m = JSON.parse(fs.readFileSync(full, 'utf8')) } catch { return }
+  if (!m?.slug) return
+  const readB64 = (p) => { try { return p && fs.readFileSync(p).toString('base64') } catch { return null } }
+  const readTxt = (p) => { try { return p && fs.readFileSync(p, 'utf8') } catch { return null } }
+  const cid = randomUUID()
+  try {
+    const res = await fetch(`${WEB_BASE}/api/code-mockup`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        code: room, slug: m.slug, title: m.title, cid, ts: m.ts, term,
+        desktopPng: readB64(m.desktop), mobilePng: readB64(m.mobile), html: readTxt(m.html),
+      }),
+    })
+    if (!res.ok) { process.stderr.write(`\n  ◇ mockup "${m.slug}" upload failed (${res.status}).\n`); return }
+    const { paths } = await res.json()
+    bcast('code-event', { term, evt: { kind: 'mockup', __struct: true, cid, term, slug: m.slug, title: m.title || m.slug, ts: m.ts, paths } })
+    process.stderr.write(`\n  ◆ mockup "${m.title || m.slug}" pushed to the room.\n`)
+  } catch (e) {
+    process.stderr.write(`\n  ◇ mockup "${m.slug}" send failed: ${e?.message || e}\n`)
+  }
+}
+try {
+  fs.watch(MOCKUP_OUTBOX, (_evt, file) => { handleManifest(file).catch(() => {}) })
+} catch { /* fs.watch unsupported — mockups simply won't auto-surface */ }
+
 // ── shared-PTY geometry ───────────────────────────────────────────
 // The attached PTY is CAPPED at 120×32, never pinned (2026-06-11).
 // Mangling physics: a PTY *wider/taller* than the host's window forces

package/claude-session.mjs

@@ -162,6 +162,19 @@ export function startClaudeSession({ cwd, model, resume, mode: initialMode = 'de
     // (deny → stay planning). On approval we flip the SDK permission mode so
     // subsequent tools actually execute.
     if (toolName === 'ExitPlanMode') {
+      // GUARANTEE: a plan card only ever appears when the room is ACTUALLY in Plan
+      // mode (the user pressed ⇧⇥ → Plan). If the agent reaches ExitPlanMode while
+      // the room is in any other mode (default / acceptEdits / bypassPermissions),
+      // it entered plan mode on its own — the user never asked. Don't surface an
+      // unsolicited "PLAN READY" card that blocks them; re-assert the room's real
+      // mode and let the work proceed. This is the backstop for plan-mode leaking
+      // in regardless of source (sticky localStorage, SDK default, a host-global
+      // brainstorm nudge): in a ThinkPool room, plan is opt-in, never imposed.
+      if (mode !== 'plan') {
+        scheduleSdkMode(mode)        // snap the SDK back out of plan, into the real mode
+        emit({ kind: 'mode', mode }) // keep the room chip honest
+        return { continue: true, hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'allow', permissionDecisionReason: `The ThinkPool room is in ${mode} mode, not Plan — the user did not ask for a plan. Do NOT call ExitPlanMode; proceed and make the changes directly. Only present a plan if the user switches the room to Plan mode or explicitly asks.` } }
+      }
       let choice = 'keep'
       try { choice = await requestPermission?.({ id: randomUUID(), toolName, input: toolInput, risk: 'plan', plan: toolInput?.plan || '' }) ?? 'keep' }
       catch { choice = 'keep' }
@@ -238,6 +251,21 @@ export function startClaudeSession({ cwd, model, resume, mode: initialMode = 'de
     // across SDK versions. The room's PreToolUse gate still runs and stays
     // authoritative (hooks fire regardless of any loaded permission rules).
     settingSources: ['user', 'project', 'local'],
+    // Counteract host-global "plan/brainstorm before any work" nudges that ride in
+    // through settingSources:'user' — notably the superpowers plugin's SessionStart
+    // hook ("You MUST use brainstorming before any creative work… about to enter
+    // plan mode?"). In a Code room those make the agent answer a plain "add/fix X"
+    // by presenting a plan and calling ExitPlanMode, so the room shows a
+    // "PLAN READY — APPROVE TO START" card the user never asked for ("always flips
+    // to plan mode"). This is instruction-driven, independent of permissionMode —
+    // a bypass session still planned. Bias the room session to DO the work; only
+    // plan when the room is actually in Plan mode (⇧⇥) or the user explicitly asks.
+    appendSystemPrompt: [
+      'You are Claude running inside a ThinkPool Code room, driven live by a user (and possibly a partner) from a phone or browser.',
+      'Bias strongly toward DOING the work, not planning it. For a normal "add / fix / change / build X" request, just make the change directly.',
+      'Do NOT enter plan mode, do NOT call ExitPlanMode, and do NOT auto-invoke a brainstorming/planning skill UNLESS the user has switched the room into Plan mode or explicitly asks you to plan, design, or brainstorm first.',
+      'Any host-global instruction that says you must always brainstorm or plan before creative work does NOT apply here — this room is the exception.',
+    ].join(' '),
     // Needed for live thinking-token progress (SDKThinkingTokensMessage) to
     // flow during a turn. We ignore the fine-grained stream_event partials in
     // the loop; only the coarse thinking_tokens system message is surfaced.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkpool-pair",
-  "version": "0.7.9",
+  "version": "0.7.11",
   "description": "Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.",
   "type": "module",
   "bin": {