@oh-my-pi/pi-utils 16.1.2 → 16.1.3

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## [Unreleased]
 
+## [16.1.3] - 2026-06-19
+
+### Changed
+
+- Expanded the `TempDir` Windows retry window from 4×10ms to 40×25ms (1s total) to accommodate SQLite WAL/SHM file handle release delays
+
+### Fixed
+
+- Made EPIPE rejections from IPC `send()` to worker subprocesses (`syscall: "send"`) non-fatal: the global `unhandledRejection` handler now logs and continues instead of terminating the session when an optional subsystem's pipe breaks. A broken optional subsystem (TTS/STT/tiny-title/MCP) can no longer crash the whole agent session mid-task. ([#2997](https://github.com/can1357/oh-my-pi/issues/2997))
+
 ## [16.1.2] - 2026-06-19
 
 ### Added

package/dist/types/postmortem.d.ts

@@ -8,6 +8,14 @@ export declare enum Reason {
     UNHANDLED_REJECTION = "unhandled_rejection",// Unhandled promise rejection
     MANUAL = "manual"
 }
+/**
+ * Detect an EPIPE rejection that originated from an IPC `send()` to a worker
+ * subprocess (`syscall: "send"`), as opposed to a stdin/stdout pipe write
+ * (`syscall: "write"`). Only the IPC-send path can break an optional worker
+ * subsystem without affecting the main process, so only this shape is safe to
+ * swallow at the global `unhandledRejection` level. See issue #2997.
+ */
+export declare function isIpcSendEpipe(err: Error): boolean;
 /**
  * Register a process cleanup callback, to be run on shutdown, signal, or fatal error.
  *

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-utils",
-	"version": "16.1.2",
+	"version": "16.1.3",
 	"description": "Shared utilities for pi packages",
 	"homepage": "https://omp.sh",
 	"author": "Can Boluk",
@@ -31,7 +31,7 @@
 		"fmt": "biome format --write ."
 	},
 	"dependencies": {
-		"@oh-my-pi/pi-natives": "16.1.2",
+		"@oh-my-pi/pi-natives": "16.1.3",
 		"handlebars": "^4.7.9",
 		"winston": "^3.19.0",
 		"winston-daily-rotate-file": "^5.0.0"

package/src/postmortem.ts

@@ -65,6 +65,19 @@ function runCleanup(reason: Reason): Promise<void> {
 // Worker thread: exit only (workers use self.addEventListener for exceptions)
 let inspectorOpened = false;
 
+/**
+ * Detect an EPIPE rejection that originated from an IPC `send()` to a worker
+ * subprocess (`syscall: "send"`), as opposed to a stdin/stdout pipe write
+ * (`syscall: "write"`). Only the IPC-send path can break an optional worker
+ * subsystem without affecting the main process, so only this shape is safe to
+ * swallow at the global `unhandledRejection` level. See issue #2997.
+ */
+export function isIpcSendEpipe(err: Error): boolean {
+	const code = (err as { code?: unknown }).code;
+	const syscall = (err as { syscall?: unknown }).syscall;
+	return code === "EPIPE" && syscall === "send";
+}
+
 function formatFatalError(label: string, err: Error): string {
 	const name = err.name || "Error";
 	const message = err.message || "(no message)";
@@ -95,6 +108,19 @@ if (isMainThread) {
 		})
 		.on("unhandledRejection", async reason => {
 			const err = reason instanceof Error ? reason : new Error(String(reason));
+			// EPIPE from an IPC `send()` (`syscall: "send"`) originates from a
+			// worker subprocess whose pipe broke between the exit being observed
+			// and the next `proc.send()` — a race window that Bun surfaces as an
+			// async rejection rather than the synchronous "cannot be used after
+			// the process has exited" guard. Every `send()` target is an optional
+			// worker subsystem (TTS, STT, tiny-title, MCP servers), so a broken
+			// send pipe must never take down the whole session. Log and continue
+			// instead of exiting; the owning client detects the dead worker via
+			// its own `onExit`/error path and respawns or disables it. See #2997.
+			if (isIpcSendEpipe(err)) {
+				logger.warn("Ignoring EPIPE from worker IPC send; optional subsystem will self-recover", { err });
+				return;
+			}
 			process.stderr.write(formatFatalError("Unhandled Rejection", err));
 			logger.error("Unhandled rejection", { err });
 			await runCleanup(Reason.UNHANDLED_REJECTION);

package/src/temp.ts

@@ -78,8 +78,8 @@ function normalizePrefix(prefix?: string): string {
 }
 
 const kRemoveOptions = { recursive: true, force: true } as const;
-const kRemoveRetries = 4;
-const kRemoveRetryDelayMs = 10;
+const kRemoveRetries = 40;
+const kRemoveRetryDelayMs = 25;
 const kRetryableRemoveErrorCodes = new Set(["EBUSY", "EPERM", "ENOTEMPTY"]);
 const kSleepBuffer = new Int32Array(new SharedArrayBuffer(4));