@fitchmultz/pi-subagents 0.52.3 → 0.52.4

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## [Unreleased]
 
+## [0.52.4] - 2026-10-29
+
+### Fixed
+
+- Classify a certificate-selected bridge session deadline as `certificate_expired`, rather than idle-lease expiry, if the timer fires just before the wall-clock deadline. The timer rechecks without renewing the idle lease; depending on the connection-expiry race, a client can still see a connection reset.
+
 ## [0.52.3] - 2026-10-29
 
 ### Fixed

package/dist/build-info.js

@@ -1 +1 @@
-export const EXTENSION_BUILD = Object.freeze({"version":"0.52.3","sha256":"56e15afa9487e79b68bb9a924bf3cbb4a62a8492cf4fe882d0496263f87a1e33"});
+export const EXTENSION_BUILD = Object.freeze({"version":"0.52.4","sha256":"d8c708fa06701cc0d5f8770cc729ba6fa204bdc8f76c5f06f5aa9cc3e37b3cc9"});

package/dist/pi-intercom/bridge-session.js

@@ -63,9 +63,22 @@ export class Session {
     }
     touch() {
         clearTimeout(this.lease);
-        this.lease = setTimeout(() => this.close(this.expires <= Date.now()
-            ? new Fault(403, "certificate_expired", "Client certificate expired.")
-            : new Fault(410, "lease_expired", "Bridge session idle lease expired.")), Math.max(1, Math.min(IDLE_TIMEOUT, this.expires - Date.now())));
+        this.armLease(IDLE_TIMEOUT);
+    }
+    armLease(idle) {
+        const due = Math.max(1, Math.min(idle, this.expires - Date.now()));
+        this.lease = setTimeout(() => {
+            if (this.expires <= Date.now()) {
+                this.close(new Fault(403, "certificate_expired", "Client certificate expired."));
+            }
+            else if (due < idle) {
+                // Node can fire before Date.now() reaches the certificate deadline; keep the idle budget.
+                this.armLease(idle - due);
+            }
+            else {
+                this.close(new Fault(410, "lease_expired", "Bridge session idle lease expired."));
+            }
+        }, due);
     }
     begin() {
         this.guard();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fitchmultz/pi-subagents",
-  "version": "0.52.3",
+  "version": "0.52.4",
   "description": "Pi extension for subagent orchestration and local session coordination",
   "license": "MIT",
   "type": "module",

package/src/pi-intercom/bridge-session.ts

@@ -87,15 +87,20 @@ export class Session {
   }
   private touch(): void {
     clearTimeout(this.lease);
-    this.lease = setTimeout(
-      () =>
-        this.close(
-          this.expires <= Date.now()
-            ? new Fault(403, "certificate_expired", "Client certificate expired.")
-            : new Fault(410, "lease_expired", "Bridge session idle lease expired."),
-        ),
-      Math.max(1, Math.min(IDLE_TIMEOUT, this.expires - Date.now())),
-    );
+    this.armLease(IDLE_TIMEOUT);
+  }
+  private armLease(idle: number): void {
+    const due = Math.max(1, Math.min(idle, this.expires - Date.now()));
+    this.lease = setTimeout(() => {
+      if (this.expires <= Date.now()) {
+        this.close(new Fault(403, "certificate_expired", "Client certificate expired."));
+      } else if (due < idle) {
+        // Node can fire before Date.now() reaches the certificate deadline; keep the idle budget.
+        this.armLease(idle - due);
+      } else {
+        this.close(new Fault(410, "lease_expired", "Bridge session idle lease expired."));
+      }
+    }, due);
   }
   begin(): AbortController {
     this.guard();