@jameslovespancakes/pi-plus 1.0.7 → 1.0.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jameslovespancakes/pi-plus",
-  "version": "1.0.7",
+  "version": "1.0.9",
   "type": "module",
   "description": "Consolidated pi extensions: Claude subscription accounts and quota HUD, benchmark-driven model catalog and billing policy, live agent board, and capacity-gated remote test workers.",
   "license": "MIT",

package/src/core/anthropic/quota.ts

@@ -163,7 +163,17 @@ export function applyQuotaHeaders(
   const account = storage?.accounts.find((a) => a.id === accountId);
   if (!account) return false;
 
-  saveAccount({ ...account, quota: { ...fresh, scoped: account.quota?.scoped } });
+  // Headers arrive on every response, but utilisation moves in whole percent
+  // steps over windows of hours. Rewriting two credential files per request to
+  // store an unchanged number is pure write amplification, and on Windows each
+  // rewrite is another chance for the rename to collide with a file lock.
+  const previous = account.quota;
+  const unchanged =
+    previous?.five_hour?.usedPercent === fresh.five_hour?.usedPercent
+    && previous?.seven_day?.usedPercent === fresh.seven_day?.usedPercent;
+  if (unchanged) return false;
+
+  saveAccount({ ...account, quota: { ...fresh, scoped: previous?.scoped } });
   return true;
 }
 

package/src/core/anthropic/store.ts

@@ -1,4 +1,4 @@
-import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 
@@ -93,14 +93,45 @@ function readJson<T>(path: string): T | undefined {
   }
 }
 
-/** Temp-file + rename, so a crash cannot leave a half-written credential file. */
+/**
+ * Temp-file + rename, so a crash cannot leave a half-written credential file.
+ *
+ * The rename is retried because on Windows it fails with EPERM whenever the
+ * destination is momentarily held open by someone else: a virus scanner
+ * examining the file we just wrote, the search indexer, or another pi session
+ * reading it. The temp name carries the pid so concurrent writers never share
+ * a temp file, but they can still collide on the destination.
+ *
+ * Retries are brief and synchronous. Losing a quota update is harmless, so a
+ * final failure removes the temp file and gives up rather than throwing into
+ * a live request.
+ */
 function writeJson(path: string, value: unknown): void {
   mkdirSync(dirname(path), { recursive: true });
   const temp = `${path}.${process.pid}.tmp`;
   writeFileSync(temp, JSON.stringify(value, undefined, 2), { encoding: "utf8", mode: 0o600 });
-  renameSync(temp, path);
+
+  const TRANSIENT = new Set(["EPERM", "EACCES", "EBUSY", "ENOTEMPTY"]);
+  for (let attempt = 0; ; attempt++) {
+    try {
+      renameSync(temp, path);
+      return;
+    } catch (error: any) {
+      if (attempt >= 5 || !TRANSIENT.has(error?.code)) {
+        try { rmSync(temp, { force: true }); } catch { /* best effort */ }
+        if (attempt >= 5) return; // transient and unresolved: drop this write
+        throw error;
+      }
+      // 1, 2, 4, 8, 16ms. Long enough for a scanner to release the handle,
+      // short enough not to stall the request that triggered it.
+      Atomics.wait(SPIN, 0, 0, 2 ** attempt);
+    }
+  }
 }
 
+/** Backing store for the synchronous sleep above. */
+const SPIN = new Int32Array(new SharedArrayBuffer(4));
+
 const pick = <T extends object>(source: any, keys: readonly string[]): T =>
   Object.fromEntries(keys.filter((k) => source?.[k] !== undefined).map((k) => [k, source[k]])) as T;
 

package/src/domains/subscriptions/provider.ts

@@ -73,9 +73,16 @@ export function routeAccessToken(primary: string, modelId?: string, _sessionId?:
     return primary;
   }
 
-  lastSelected = { id: picked.candidate.id, at: Date.now() };
+  const now = Date.now();
+  lastSelected = { id: picked.candidate.id, at: now };
   if (picked.candidate.account) {
-    saveAccount({ ...picked.candidate.account, lastUsed: Date.now() });
+    // `lastUsed` only orders the footer's account list, so second-level
+    // precision buys nothing. Persisting it on every request rewrote two
+    // credential files per call; once a minute is indistinguishable in the UI.
+    const previous = picked.candidate.account.lastUsed ?? 0;
+    if (now - previous > 60_000) {
+      saveAccount({ ...picked.candidate.account, lastUsed: now });
+    }
   }
   return picked.candidate.access ?? primary;
 }