fix: persist a picked thinking effort up to the model's default effort

A concrete effort picked in the TUI or the VS Code webview is stored as
the global default only when it does not rank above the model's effective
default; a more expensive pick stays session-only.

Author: elkaix

.changeset/broadcast-user-prompts.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Fix messages sent from one web client not appearing on other clients connected to the same session.

.changeset/drop-allow-remote-terminals.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Remove the `--allow-remote-terminals` flag from `pythinker web`; PTY terminal routes now stay available on loopback binds only.

.changeset/effort-persist-default-ceiling.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Persist a picked thinking effort as the default only up to the model's own default effort; a more expensive pick stays session-only.

.changeset/infinite-retry-mode.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": minor
+---
+
+Add `PYTHINKER_CODE_INFINITE_RETRY=1` to retry every failed model request indefinitely with backoff instead of failing the turn, for long unattended runs.

.changeset/vscode-effort-persist-default-ceiling.md

@@ -0,0 +1,5 @@
+---
+"pythinker": patch
+---
+
+Persist a picked thinking effort as the default only up to the model's own default effort; a more expensive pick stays session-only.

apps/pythinker-code/src/cli/sub/web/run.ts

@@ -134,11 +134,6 @@ export function buildWebCommand(cmd: Command): Command {
       'On a non-loopback bind, keep POST /api/v1/shutdown enabled (default: route is disabled → 404).',
       false,
     )
-    .option(
-      '--allow-remote-terminals',
-      'On a non-loopback bind, keep the PTY /api/v1/terminals/* routes enabled (default: disabled → 404). Remote shell is high risk.',
-      false,
-    )
     .option(
       '--dangerous-bypass-auth',
       'Disable bearer-token auth on every REST and WebSocket route, and advertise it via /api/v1/meta so the web UI connects without a token. Only use on a trusted network or behind your own authenticating proxy.',
@@ -300,7 +295,6 @@ async function runServerInProcess(
     debugEndpoints: options.debugEndpoints,
     insecureNoTls: options.insecureNoTls,
     allowRemoteShutdown: options.allowRemoteShutdown,
-    allowRemoteTerminals: options.allowRemoteTerminals,
     allowedHosts: options.allowedHosts,
     disableAuth: options.dangerousBypassAuth,
     webTitle: options.webTitle,

apps/pythinker-code/src/cli/sub/web/shared.ts

@@ -40,8 +40,6 @@ export interface ParsedServerOptions {
   insecureNoTls: boolean;
   /** Allow `POST /api/v1/shutdown` on a non-loopback bind. */
   allowRemoteShutdown: boolean;
-  /** Allow PTY `/api/v1/terminals/*` routes on a non-loopback bind. */
-  allowRemoteTerminals: boolean;
   /** Disable bearer-token auth on every route (`--dangerous-bypass-auth`). */
   dangerousBypassAuth: boolean;
   /** Extra `Host` header values to allow through the DNS-rebinding check. */
@@ -59,8 +57,6 @@ export interface ServerCliOptions {
   insecureNoTls?: boolean;
   /** Allow remote shutdown on a non-loopback bind (`--allow-remote-shutdown`). */
   allowRemoteShutdown?: boolean;
-  /** Allow remote terminals on a non-loopback bind (`--allow-remote-terminals`). */
-  allowRemoteTerminals?: boolean;
   /** Disable bearer-token auth on every route (`--dangerous-bypass-auth`). */
   dangerousBypassAuth?: boolean;
   /** Extra `Host` header values to allow (`--allowed-host`). */
@@ -77,7 +73,6 @@ export function parseServerOptions(opts: ServerCliOptions): ParsedServerOptions
     debugEndpoints: opts.debugEndpoints === true,
     insecureNoTls: opts.insecureNoTls !== false,
     allowRemoteShutdown: opts.allowRemoteShutdown === true,
-    allowRemoteTerminals: opts.allowRemoteTerminals === true,
     dangerousBypassAuth: opts.dangerousBypassAuth === true,
     allowedHosts: parseAllowedHostArgs(opts.allowedHost),
     webTitle: opts.webTitle,

apps/pythinker-code/src/tui/commands/config.ts

@@ -597,7 +597,7 @@ async function persistModelSelection(
   const model = host.state.appState.availableModels[alias];
   const full = thinkingEffortToConfig(
     effort,
-    model === undefined ? undefined : effectiveModelForHost(host, model).supportEfforts,
+    model === undefined ? undefined : effectiveModelForHost(host, model),
   );
   // Re-confirming the effort shown when the picker opened is not an explicit
   // choice — persist the model but leave the stored effort preference alone.

apps/pythinker-code/src/tui/commands/provider.ts

@@ -295,24 +295,31 @@ async function handleCatalogProviderAdd(host: SlashCommandHost): Promise<void> {
   host.mountEditorReplacement(selector);
 }
 
-async function setDefaultModel(
+export async function setDefaultModel(
   host: SlashCommandHost,
   alias: string,
   effort: ThinkingEffort,
 ): Promise<void> {
   // Resolve efforts the same way the /model path does (effectiveModelForHost
   // applies overrides and the protocol-profile inference): catalog entries for
   // e.g. Anthropic models declare no support_efforts on the alias, and without
-  // the inference a top-tier pick would slip through as a persisted effort.
+  // the inference an above-default pick would slip through as a persisted effort.
   const model = host.state.appState.availableModels[alias];
+  const thinking = thinkingEffortToConfig(
+    effort,
+    model === undefined ? undefined : effectiveModelForHost(host, model),
+  );
   await host.harness.setConfig({
     defaultModel: alias,
-    thinking: thinkingEffortToConfig(
-      effort,
-      model === undefined ? undefined : effectiveModelForHost(host, model).supportEfforts,
-    ),
+    thinking,
   });
   await host.authFlow.refreshConfigAfterLogin();
+  // refreshConfigAfterLogin reactivates from the persisted config, so a pick
+  // the gate keeps session-only never reaches the runtime — apply it after
+  // the refresh, or the persisted value would clobber it.
+  if (thinking.effort === undefined && effort !== 'off' && effort !== 'on') {
+    await host.authFlow.activateModelAfterLogin(alias, effort);
+  }
   host.track('model_switch', { model: alias });
   host.showStatus(`Default model set to ${alias} with thinking ${effort}.`);
 }

apps/pythinker-code/src/tui/controllers/editor-keyboard.ts

@@ -595,7 +595,7 @@ export class EditorKeyboardController {
     const harness = this.host.harness;
     if (harness === undefined || alias !== this.host.state.appState.model) return;
     try {
-      await harness.setConfig({ thinking: thinkingEffortToConfig(effort, model.supportEfforts) });
+      await harness.setConfig({ thinking: thinkingEffortToConfig(effort, model) });
     } catch (error) {
       this.host.showError(
         `Thinking effort set to ${effort}, but failed to save default: ${formatErrorMessage(error)}`,