@fitchmultz/pi-subagents 0.52.21 → 0.52.22

package/CHANGELOG.md

@@ -2,6 +2,22 @@
 
 ## [Unreleased]
 
+## 0.52.22 - 2026-11-07
+
+<!-- npm-release:unreleased:start -->
+
+- Bind each durable wake reservation to one POST and its required settlement, preserving retryable settlement failures and crash uncertainty.
+
+<!-- npm-release:unreleased:end -->
+
+- refactor: bind wake reservations to one settled attempt (#366) ([9bd60f9](https://github.com/fitchmultz/pi-subagents/commit/9bd60f92a4630ca9300ed9c4c06bc48758077a40))
+
+### What's Changed
+
+- refactor: bind wake reservations to one settled attempt by @fitchmultz in https://github.com/fitchmultz/pi-subagents/pull/366
+
+**Full Changelog**: https://github.com/fitchmultz/pi-subagents/compare/v0.52.21...v0.52.22
+
 ## 0.52.21 - 2026-11-07
 
 <!-- npm-release:unreleased:start -->

package/dist/build-info.js

@@ -1 +1 @@
-export const EXTENSION_BUILD = Object.freeze({"version":"0.52.21","sha256":"d0c9a96a0eca06a58dc73d77b64300d7e41a9eb5c75b1deee8751ae3af4b87ce"});
+export const EXTENSION_BUILD = Object.freeze({"version":"0.52.22","sha256":"fc7e48d1fb96f143f56be9757d30a98bb138b94edd1f5388438ddeb3eed54638"});

package/dist/pi-intercom/bridge-wake-state.js

@@ -28,7 +28,7 @@ export class WakeState {
     inode;
     device;
     owner;
-    finishing = false;
+    phase = { kind: "idle" };
     constructor(stateDir) {
         this.stateDir = stateDir;
         this.path = join(stateDir, FILE);
@@ -194,13 +194,37 @@ export class WakeState {
         this.validate();
         this.db.prepare("DELETE FROM wake_batches WHERE bucket=?").run(bucket);
     }
-    /** Persist quota and uncertainty BEFORE dispatch. Returning a deadline means no attempt admitted. */
+    /** Persist quota and uncertainty before exposing a single-use POST reservation. */
     reserve(bucket) {
         this.retrySettlement();
-        return this.transaction(() => this.reservation(bucket));
+        if (this.phase.kind !== "idle") {
+            throw new Error("A wake reservation is already active or its owner is closed.");
+        }
+        const until = this.transaction(() => this.reservation(bucket));
+        if (until !== undefined) {
+            return { kind: "deferred", until };
+        }
+        const reservation = {
+            kind: "reserved",
+            post: async (action) => {
+                if (this.phase !== reservation) {
+                    throw new Error("This wake reservation is no longer available.");
+                }
+                this.phase = { kind: "posting" };
+                try {
+                    await action();
+                }
+                finally {
+                    // Completion, rejection and abort all start the durable expiry window here.
+                    this.settle();
+                }
+            },
+        };
+        this.phase = reservation;
+        return reservation;
     }
     retrySettlement() {
-        if (this.finishing) {
+        if (this.phase.kind === "settlementPending") {
             this.settle();
         }
     }
@@ -219,9 +243,9 @@ export class WakeState {
     }
     /** A failed settlement stays open and must be retried before this owner can dispatch again. */
     settle() {
-        this.finishing = true;
+        this.phase = { kind: "settlementPending" };
         this.transaction(() => this.finishOwner(this.owner.name));
-        this.finishing = false;
+        this.phase = { kind: "idle" };
     }
     finishOwner(owner) {
         const now = Math.max(Date.now(), integer(this.db.prepare("SELECT clock FROM wake_meta").get()?.clock));
@@ -286,6 +310,7 @@ export class WakeState {
             this.settle();
         }
         finally {
+            this.phase = { kind: "closed" };
             this.db.close();
             this.owner.close();
         }

package/dist/pi-intercom/bridge-wake.js

@@ -171,20 +171,14 @@ export class WakeDeliveries {
                 next = Math.min(next, due);
                 continue;
             }
-            const deferred = state.reserve(key);
-            if (deferred !== undefined) {
-                next = Math.min(next, deferred);
+            const reservation = state.reserve(key);
+            if (reservation.kind === "deferred") {
+                next = Math.min(next, reservation.until);
                 continue;
             }
             // ponytail: two cold Macs can each admit one wake. Literal cross-Mac single admission
             // requires a neutral quota authority governing every writer, not a URL hash or HTTP 2xx.
-            try {
-                await this.post(candidate);
-            }
-            finally {
-                // Expiry starts after response/error/abort, never before COMMIT or connect/TLS.
-                state.settle();
-            }
+            await reservation.post(() => this.post(candidate));
             // Re-read ACKs and all groups after transport I/O; a snapshot must not wake already consumed mail.
             return Date.now();
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fitchmultz/pi-subagents",
-  "version": "0.52.21",
+  "version": "0.52.22",
   "description": "Pi extension for subagent orchestration and local session coordination",
   "license": "MIT",
   "type": "module",

package/src/pi-intercom/bridge-wake-state.ts

@@ -24,6 +24,13 @@ function integer(value: unknown): number {
   return value;
 }
 
+type WakeReservation =
+  | { readonly kind: "deferred"; readonly until: number }
+  | { readonly kind: "reserved"; readonly post: (action: () => Promise<void>) => Promise<void> };
+type AttemptPhase =
+  | { readonly kind: "idle" | "posting" | "settlementPending" | "closed" }
+  | Extract<WakeReservation, { readonly kind: "reserved" }>;
+
 /** One helper ledger, independent of identity, certificate, URL and credential rotation. */
 export class WakeState {
   private readonly db: DatabaseSync;
@@ -32,7 +39,7 @@ export class WakeState {
   private readonly inode: number;
   private readonly device: number;
   private readonly owner: WakeOwner;
-  private finishing = false;
+  private phase: AttemptPhase = { kind: "idle" };
 
   constructor(stateDir: string) {
     this.stateDir = stateDir;
@@ -212,14 +219,37 @@ export class WakeState {
     this.db.prepare("DELETE FROM wake_batches WHERE bucket=?").run(bucket);
   }
 
-  /** Persist quota and uncertainty BEFORE dispatch. Returning a deadline means no attempt admitted. */
-  reserve(bucket: string): number | undefined {
+  /** Persist quota and uncertainty before exposing a single-use POST reservation. */
+  reserve(bucket: string): WakeReservation {
     this.retrySettlement();
-    return this.transaction(() => this.reservation(bucket));
+    if (this.phase.kind !== "idle") {
+      throw new Error("A wake reservation is already active or its owner is closed.");
+    }
+    const until = this.transaction(() => this.reservation(bucket));
+    if (until !== undefined) {
+      return { kind: "deferred", until };
+    }
+    const reservation: Extract<WakeReservation, { readonly kind: "reserved" }> = {
+      kind: "reserved",
+      post: async (action) => {
+        if (this.phase !== reservation) {
+          throw new Error("This wake reservation is no longer available.");
+        }
+        this.phase = { kind: "posting" };
+        try {
+          await action();
+        } finally {
+          // Completion, rejection and abort all start the durable expiry window here.
+          this.settle();
+        }
+      },
+    };
+    this.phase = reservation;
+    return reservation;
   }
 
   retrySettlement(): void {
-    if (this.finishing) {
+    if (this.phase.kind === "settlementPending") {
       this.settle();
     }
   }
@@ -238,10 +268,10 @@ export class WakeState {
   }
 
   /** A failed settlement stays open and must be retried before this owner can dispatch again. */
-  settle(): void {
-    this.finishing = true;
+  private settle(): void {
+    this.phase = { kind: "settlementPending" };
     this.transaction(() => this.finishOwner(this.owner.name));
-    this.finishing = false;
+    this.phase = { kind: "idle" };
   }
 
   private finishOwner(owner: string): void {
@@ -314,6 +344,7 @@ export class WakeState {
     try {
       this.settle();
     } finally {
+      this.phase = { kind: "closed" };
       this.db.close();
       this.owner.close();
     }

package/src/pi-intercom/bridge-wake.ts

@@ -211,19 +211,14 @@ export class WakeDeliveries {
         next = Math.min(next, due);
         continue;
       }
-      const deferred = state.reserve(key);
-      if (deferred !== undefined) {
-        next = Math.min(next, deferred);
+      const reservation = state.reserve(key);
+      if (reservation.kind === "deferred") {
+        next = Math.min(next, reservation.until);
         continue;
       }
       // ponytail: two cold Macs can each admit one wake. Literal cross-Mac single admission
       // requires a neutral quota authority governing every writer, not a URL hash or HTTP 2xx.
-      try {
-        await this.post(candidate);
-      } finally {
-        // Expiry starts after response/error/abort, never before COMMIT or connect/TLS.
-        state.settle();
-      }
+      await reservation.post(() => this.post(candidate));
       // Re-read ACKs and all groups after transport I/O; a snapshot must not wake already consumed mail.
       return Date.now();
     }