@arbiterforge/ca-pi 0.16.0 → 0.16.1

package/README.md

@@ -10,7 +10,7 @@ project context. You decide. codeArbiter enforces.
 <img alt="Claude Code plugin" src="https://img.shields.io/badge/Claude_Code-plugin-d97757">
 <img alt="Codex plugin" src="https://img.shields.io/badge/OpenAI_Codex-plugin-10a37f">
 <img alt="Pi Feature Forge preview" src="https://img.shields.io/badge/ca--pi-Feature_Forge_preview-d97757">
-<img alt="version 2.24.0" src="https://img.shields.io/badge/version-2.24.0-2b7489">
+<img alt="version 2.24.1" src="https://img.shields.io/badge/version-2.24.1-2b7489">
 <img alt="core lanes" src="https://img.shields.io/badge/core_lanes-18-555">
 <img alt="skills" src="https://img.shields.io/badge/skills-22-555">
 <img alt="agents" src="https://img.shields.io/badge/agents-20-555">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.16.0",
+  "version": "0.16.1",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/plugins/ca-pi/CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to `ca-pi` are documented in this file.
 
 ## [Unreleased]
 
+## [0.16.1] - 2026-10-04
+
+### Fixed
+
+- Carry the shared Claude review-join fix in the vendored authority library. Pi
+  behavior is unchanged.
+
 ## [0.16.0] - 2026-10-03
 
 ### Added

package/plugins/ca-pi/helpers/artifacts/release.json

@@ -37,11 +37,11 @@
   },
   "context_qualification": {
     "darwin/amd64": {
-      "source_commit": "4a578c5a31f768d4e8437adba31e876687c6fe4e",
+      "source_commit": "fa94c56afa59aaa3e429bf15613989bd444090f6",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37242446770",
+      "run_id": "37253197914",
       "binary_sha256": "27fc51465a79c1525b1300b347cee4d09afde3c7b0d845414659302f5bbca2f7",
-      "observation_sha256": "a95ce59522b1f4c1552a906f8d50989ca021f6b3017aadead4ca6f337a1cbc0c",
+      "observation_sha256": "f6a8c71afa0e06521de263ae49934ce33f4272ed40d0fec6d9a17f7a68357c87",
       "module_sha256": "d5cccd13647e2c3a2a752b94b34dec4d4fc6aec5ced8fb0abce6ec9346ba1a7e",
       "native_cases": [
         "TestContextBoundedRender",
@@ -53,11 +53,11 @@
       ]
     },
     "darwin/arm64": {
-      "source_commit": "4a578c5a31f768d4e8437adba31e876687c6fe4e",
+      "source_commit": "fa94c56afa59aaa3e429bf15613989bd444090f6",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37242446770",
+      "run_id": "37253197914",
       "binary_sha256": "3a3d61be18eba426db4f260b9cbae0d3d3c89f47efe184395d7f011cc3b4f59a",
-      "observation_sha256": "165d4cc2688867896d88ce0973b4fd0155e4214658a0af14024f8cd011868d15",
+      "observation_sha256": "2ca37cd149e0efdf73929f0398334089cd3bbb1bba03c61407a485eb8edaecad",
       "module_sha256": "d5cccd13647e2c3a2a752b94b34dec4d4fc6aec5ced8fb0abce6ec9346ba1a7e",
       "native_cases": [
         "TestContextBoundedRender",
@@ -69,11 +69,11 @@
       ]
     },
     "linux/amd64": {
-      "source_commit": "4a578c5a31f768d4e8437adba31e876687c6fe4e",
+      "source_commit": "fa94c56afa59aaa3e429bf15613989bd444090f6",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37242446770",
+      "run_id": "37253197914",
       "binary_sha256": "3b6178bb54d6a19fc56d99f8fced862ae151605a0373297a69e130d3857a8406",
-      "observation_sha256": "c561f67be64e618d90b42365c83daebc563e185bc428ce483c8199bde1dee6e1",
+      "observation_sha256": "85f789dc87517f96042a8e88da689100bcd561ddda863e0986ace221f18dbbab",
       "module_sha256": "d5cccd13647e2c3a2a752b94b34dec4d4fc6aec5ced8fb0abce6ec9346ba1a7e",
       "native_cases": [
         "TestContextBoundedRender",
@@ -85,11 +85,11 @@
       ]
     },
     "linux/arm64": {
-      "source_commit": "4a578c5a31f768d4e8437adba31e876687c6fe4e",
+      "source_commit": "fa94c56afa59aaa3e429bf15613989bd444090f6",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37242446770",
+      "run_id": "37253197914",
       "binary_sha256": "a5259074098932f815f33d3e1dea98e6d9a04277d1ada958469905da67d29437",
-      "observation_sha256": "79cae85b4701dd7cf924c71e6fac603bf3a7f8422674cee2adf206629321a1cf",
+      "observation_sha256": "50afdbe9ce2e9893cc3557fc230010baf5c093da6f0839f17ed15a3c45c69905",
       "module_sha256": "d5cccd13647e2c3a2a752b94b34dec4d4fc6aec5ced8fb0abce6ec9346ba1a7e",
       "native_cases": [
         "TestContextBoundedRender",
@@ -101,11 +101,11 @@
       ]
     },
     "windows/amd64": {
-      "source_commit": "4a578c5a31f768d4e8437adba31e876687c6fe4e",
+      "source_commit": "fa94c56afa59aaa3e429bf15613989bd444090f6",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37242446770",
+      "run_id": "37253197914",
       "binary_sha256": "8339c077262f861631631de49bca7cdafec5e0730b9e3676fd2db36f3c119036",
-      "observation_sha256": "83937f62110387bb614e0a0b4ad21d84179ffdad24b3de6b78cec21d80d65721",
+      "observation_sha256": "56e2f848ba306bbf4acbb2febdfd298e08988761a53b87d9dded7bbf23c9a0ea",
       "module_sha256": "d5cccd13647e2c3a2a752b94b34dec4d4fc6aec5ced8fb0abce6ec9346ba1a7e",
       "native_cases": [
         "TestContextBoundedRender",
@@ -117,11 +117,11 @@
       ]
     },
     "windows/arm64": {
-      "source_commit": "4a578c5a31f768d4e8437adba31e876687c6fe4e",
+      "source_commit": "fa94c56afa59aaa3e429bf15613989bd444090f6",
       "workflow": ".github/workflows/ci.yml",
-      "run_id": "37242446770",
+      "run_id": "37253197914",
       "binary_sha256": "f7b193cf0d1eb9ecd233bf1588f6290c2fb8bc41ad327918a740beb2099f719c",
-      "observation_sha256": "7d46e9b33eb4ddd2062b6c1405d5d2679b5be796596e4f3883c530df084cb085",
+      "observation_sha256": "5db05023f4fe8441c0e2f664fc0704f42967285a54566f801f9e37f9ad4819a5",
       "module_sha256": "d5cccd13647e2c3a2a752b94b34dec4d4fc6aec5ced8fb0abce6ec9346ba1a7e",
       "native_cases": [
         "TestContextBoundedRender",

package/plugins/ca-pi/hooks/_artifactauthoritylib.py

@@ -29,7 +29,7 @@ than one SubagentStop; only the first is a review result.
 
 from __future__ import annotations
 
-from contextlib import contextmanager
+from contextlib import ExitStack, contextmanager
 import base64
 import errno
 import hashlib
@@ -77,6 +77,9 @@ MAX_STATE = 1 << 20
 # Only terminal abandonment can read a legacy inline-context review this large.
 MAX_RECOVERY_STATE = 2 << 20
 REQUEST_LOCK_WAIT_SECONDS = 5.0
+# The Claude join lock is per user, not per request: every SubagentStart waits
+# on it while any review is LAUNCHING, and the holder scans the registry.
+CLAUDE_JOIN_LOCK_WAIT_SECONDS = 30.0
 MAX_OUTPUT = 8 << 20
 MAX_DECISION = 65536
 MAX_COMPLETION_FILES = 16
@@ -325,7 +328,7 @@ def _spool_root(root: Path) -> Path:
 
 
 @contextmanager
-def _request_lock(spool: Path, relative: Path):
+def _request_lock(spool: Path, relative: Path, wait: float | None = None):
     """Keep one OS-owned lock inode for all writers of this request."""
     path = spool / f"{relative.name}.lock"
     fd = None
@@ -355,7 +358,7 @@ def _request_lock(spool: Path, relative: Path):
     locked = False
     try:
         check_path()
-        deadline = time.monotonic() + REQUEST_LOCK_WAIT_SECONDS
+        deadline = time.monotonic() + (REQUEST_LOCK_WAIT_SECONDS if wait is None else wait)
         if os.name == "nt":
             import msvcrt
         else:
@@ -3216,6 +3219,91 @@ def _claude_bind_child(root: Path, request: dict[str, Any]) -> dict[str, Any]:
     return {"request_id": request["request_id"], "state": "RUNNING"}
 
 
+@contextmanager
+def _claude_join_lock():
+    """Serialize the Claude launch/child join across hook processes.
+
+    SubagentStart and an async Agent launch result fire back to back as
+    separate hook processes. Each reads the request and then writes its half
+    of the join; unserialized, either can read before the other writes and
+    both miss, leaving the review LAUNCHING with no start marker."""
+    with ExitStack() as stack:
+        try:
+            stack.enter_context(
+                _request_lock(_registry_root(), Path("claude-join"), wait=CLAUDE_JOIN_LOCK_WAIT_SECONDS)
+            )
+        except OSError as exc:
+            # Only acquisition maps here; the joined body reports its own errors.
+            raise AuthorityError("AUTHORITY_BUSY", "Claude review join is unavailable") from exc
+        yield
+
+
+def _claude_launch_result(event: dict[str, Any]) -> dict[str, Any] | None:
+    session_id = event.get("session_id")
+    tool_use_id = event.get("tool_use_id")
+    matches = [
+        (candidate_root, candidate)
+        for candidate_root, candidate in _claude_requests({"LAUNCHING"})
+        if (candidate.get("launch") or {}).get("tool_use_id") == tool_use_id
+        and candidate["launch"].get("parent_session_id") == session_id
+    ]
+    if not matches:
+        return None
+    if len(matches) != 1:
+        raise AuthorityError("UNSUPPORTED_HOST_SEAM", "review launch correlation is ambiguous")
+    root, request = matches[0]
+    response = event.get("tool_response")
+    try:
+        prompt_id = _host_id(event.get("prompt_id"), "prompt_id")
+        if request["launch"].get("parent_prompt_id") != prompt_id or request["launch"]["post_confirmed"]:
+            raise AuthorityError("UNSUPPORTED_HOST_SEAM", "review launch result is out of order")
+        if not isinstance(response, dict):
+            raise AuthorityError("UNSUPPORTED_HOST_SEAM", "agent result is malformed")
+        agent_id = _host_id(response.get("agentId"), "agentId")
+        resolved = _model_id(response.get("resolvedModel"), "resolvedModel")
+    except AuthorityError:
+        _reject(root, request, "uncorrelated-launch-result")
+        raise
+    request["launch"].update(post_confirmed=True, agent_id=agent_id, resolved_model=resolved)
+    return _claude_bind_child(root, request)
+
+
+def _claude_subagent_start(event: dict[str, Any]) -> dict[str, Any] | None:
+    agent_id = _host_id(event.get("agent_id"), "agent_id")
+    agent_type = _host_id(event.get("agent_type"), "agent_type")
+    pending = _claude_requests({"LAUNCHING"})
+    for candidate_root, candidate in pending:
+        launch = candidate.get("launch") or {}
+        if launch.get("agent_id") == agent_id:
+            if agent_type != CLAUDE_REVIEWER:
+                _reject(candidate_root, candidate, "unpinned-reviewer-agent")
+                raise AuthorityError("UNSUPPORTED_HOST_SEAM", "subagent is not the pinned reviewer")
+            launch["agent_type"] = agent_type
+            candidate["state"] = "RUNNING"
+            _save(candidate_root, candidate)
+            return {"request_id": candidate["request_id"], "state": "RUNNING"}
+    if any((candidate.get("launch") or {}).get("post_confirmed") is False for _root, candidate in pending):
+        # The launch result may not have arrived yet; remember this start.
+        marker = _claude_start_marker(agent_id)
+        data = _canonical({"agent_id": agent_id, "agent_type": agent_type})
+        # Written aside and linked into place: a reader must never see an
+        # empty or partial marker.
+        temporary = marker.with_name(f".{marker.name}.{secrets.token_hex(8)}.tmp")
+        fd = os.open(temporary, os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
+        try:
+            os.write(fd, data)
+            os.fsync(fd)
+        finally:
+            os.close(fd)
+        try:
+            os.link(temporary, marker)
+        except FileExistsError:
+            return None
+        finally:
+            temporary.unlink(missing_ok=True)
+    return None
+
+
 def observe_claude_hook(root: str | Path, event: dict[str, Any]) -> dict[str, Any] | None:
     """Correlate a Claude Code reviewer launch, child lifecycle, and first result.
 
@@ -3275,77 +3363,14 @@ def observe_claude_hook(root: str | Path, event: dict[str, Any]) -> dict[str, An
         return {"request_id": request["request_id"], "state": "LAUNCHING"}
 
     if name == "PostToolUse" and tool == "Agent":
-        session_id = event.get("session_id")
-        tool_use_id = event.get("tool_use_id")
-        matches = [
-            (candidate_root, candidate)
-            for candidate_root, candidate in _claude_requests({"LAUNCHING"})
-            if (candidate.get("launch") or {}).get("tool_use_id") == tool_use_id
-            and candidate["launch"].get("parent_session_id") == session_id
-        ]
-        if not matches:
-            return None
-        if len(matches) != 1:
-            raise AuthorityError("UNSUPPORTED_HOST_SEAM", "review launch correlation is ambiguous")
-        root, request = matches[0]
-        response = event.get("tool_response")
-        try:
-            prompt_id = _host_id(event.get("prompt_id"), "prompt_id")
-            if request["launch"].get("parent_prompt_id") != prompt_id or request["launch"]["post_confirmed"]:
-                raise AuthorityError("UNSUPPORTED_HOST_SEAM", "review launch result is out of order")
-            if not isinstance(response, dict):
-                raise AuthorityError("UNSUPPORTED_HOST_SEAM", "agent result is malformed")
-            agent_id = _host_id(response.get("agentId"), "agentId")
-            resolved = _model_id(response.get("resolvedModel"), "resolvedModel")
-        except AuthorityError:
-            _reject(root, request, "uncorrelated-launch-result")
-            raise
-        request["launch"].update(post_confirmed=True, agent_id=agent_id, resolved_model=resolved)
-        return _claude_bind_child(root, request)
+        with _claude_join_lock():
+            return _claude_launch_result(event)
 
     if name == "SubagentStart":
         if not _claude_requests({"LAUNCHING"}):
             return None
-        agent_id = _host_id(event.get("agent_id"), "agent_id")
-        agent_type = _host_id(event.get("agent_type"), "agent_type")
-        for candidate_root, candidate in _claude_requests({"LAUNCHING"}):
-            launch = candidate.get("launch") or {}
-            if launch.get("agent_id") == agent_id:
-                if agent_type != CLAUDE_REVIEWER:
-                    _reject(candidate_root, candidate, "unpinned-reviewer-agent")
-                    raise AuthorityError("UNSUPPORTED_HOST_SEAM", "subagent is not the pinned reviewer")
-                launch["agent_type"] = agent_type
-                candidate["state"] = "RUNNING"
-                _save(candidate_root, candidate)
-                return {"request_id": candidate["request_id"], "state": "RUNNING"}
-        if any(
-            (candidate.get("launch") or {}).get("post_confirmed") is False
-            for _root, candidate in _claude_requests({"LAUNCHING"})
-        ):
-            # The launch result may not have arrived yet; remember this start.
-            marker = _claude_start_marker(agent_id)
-            data = _canonical({"agent_id": agent_id, "agent_type": agent_type})
-            # Written aside and linked into place: a concurrent launch result
-            # joining this agent must never read an empty or partial marker.
-            temporary = marker.with_name(f".{marker.name}.{secrets.token_hex(8)}.tmp")
-            fd = os.open(temporary, os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
-            try:
-                os.write(fd, data)
-                os.fsync(fd)
-            finally:
-                os.close(fd)
-            try:
-                os.link(temporary, marker)
-            except FileExistsError:
-                return None
-            finally:
-                temporary.unlink(missing_ok=True)
-            # The launch result may have bound this agent while the marker was
-            # being written; finish the join now rather than strand it.
-            for candidate_root, candidate in _claude_requests({"LAUNCHING"}):
-                if (candidate.get("launch") or {}).get("agent_id") == agent_id:
-                    return _claude_bind_child(candidate_root, candidate)
-        return None
+        with _claude_join_lock():
+            return _claude_subagent_start(event)
 
     if name == "PostToolUse" and tool == CLAUDE_HANDBACK_TOOL:
         # Every child's handback lands here; only the bound reviewer's counts.
@@ -3376,8 +3401,12 @@ def observe_claude_hook(root: str | Path, event: dict[str, Any]) -> dict[str, An
             _reject(root, request, "repeated-handback")
             raise AuthorityError("UNSUPPORTED_HOST_SEAM", "reviewer reported more than once")
         if request["state"] == "LAUNCHING" and request["launch"].get("post_confirmed") is True:
-            # A start marker written late in the launch/start race.
-            _claude_bind_child(root, request)
+            # Defensive: the join lock leaves no late-marker race in this
+            # adapter, but bind any marker still waiting under the same lock.
+            with _claude_join_lock():
+                current = _load(root, request["request_id"])
+                if current["state"] == "LAUNCHING":
+                    _claude_bind_child(root, current)
             request = _load(root, request["request_id"])
         candidate = {**request, "handback": record}
         if (
@@ -3414,8 +3443,12 @@ def observe_claude_hook(root: str | Path, event: dict[str, Any]) -> dict[str, An
         root, request = matches[0]
         launch = request["launch"]
         if request["state"] == "LAUNCHING" and launch.get("post_confirmed") is True:
-            # A start marker written late in the launch/start race.
-            _claude_bind_child(root, request)
+            # Defensive: the join lock leaves no late-marker race in this
+            # adapter, but bind any marker still waiting under the same lock.
+            with _claude_join_lock():
+                current = _load(root, request["request_id"])
+                if current["state"] == "LAUNCHING":
+                    _claude_bind_child(root, current)
             request = _load(root, request["request_id"])
             launch = request["launch"]
         try:

package/plugins/ca-pi/hooks/_host.py

@@ -11,7 +11,7 @@ import hostapi  # noqa: E402
 class PiHost(hostapi.Host):
     name = "pi"
     adapter_name = "@arbiterforge/ca-pi"
-    adapter_version = "0.16.0"
+    adapter_version = "0.16.1"
     update_target = "ca-pi"
     update_tag_prefix = "ca-pi-v"
     update_command = "pi update npm:@arbiterforge/ca-pi"

package/plugins/ca-pi/hooks/hostapi.py

@@ -313,7 +313,7 @@ class Host:
 
     name = "claude"
     adapter_name = "ca"
-    adapter_version = "2.24.0"
+    adapter_version = "2.24.1"
 
     # Update-notifier descriptor. Each independently versioned host overrides
     # these three values in its per-plugin _host.py. Keeping the target,

package/plugins/ca-pi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterforge/ca-pi",
-  "version": "0.16.0",
+  "version": "0.16.1",
   "private": true,
   "license": "AGPL-3.0-only",
   "type": "module",