@pouchy_ai/companion-sdk 0.29.0 → 0.29.1

package/CHANGELOG.md

@@ -12,6 +12,37 @@ a protocol bump is always called out explicitly here.
 
 ## [Unreleased]
 
+## [0.29.1] - 2026-07-12
+
+### Fixed
+
+- **`CompanionError.retryAfter` no longer reports a spurious `0`.** A missing
+  `Retry-After` header was parsed as `Number(null) === 0`, so EVERY error
+  thrown from a POST without the header (a `400 invalid_request`, a
+  `404 session_not_found`, …) carried `retryAfter: 0` — telling backoff code
+  "retry immediately" on non-retryable errors. It is now `undefined` unless
+  the body's `retryAfterSec` or a real header names a value, as documented.
+- **`sendText({ awaitReply: true, stream: false })` now cancels its POST.**
+  The buffered leg never passed the operation's `AbortSignal` to the network
+  call, so the promise rejected on abort/deadline but the billed turn kept
+  running server-side. It now aborts with the same linked controller the
+  streaming leg uses.
+- **Abort-listener leak on a reused `AbortSignal` in `awaitReply`.** The
+  deadline's reject listener was never removed, so a host reusing one
+  long-lived signal across many `sendText({ awaitReply, signal })` calls
+  accumulated one orphan listener per call (memory growth + Node's
+  MaxListenersExceeded warning). Removed in the same `finally` as the rest.
+
+### Added
+
+- **`signal` on `sendToolResult` and `startCall`** — the two request-performing
+  methods 0.29.0's "AbortSignal on every network method" pass missed
+  (backwards-compatible addition, per this package's patch policy).
+- **`require()` of the package now works on Node ≥ 20.17** (require-ESM): the
+  `exports` map gained a `default` condition — previously `require()` failed
+  with `ERR_PACKAGE_PATH_NOT_EXPORTED` before the feature could apply, despite
+  the README documenting it.
+
 ## [0.29.0] - 2026-07-12
 
 ### Added
@@ -616,7 +647,8 @@ self-hosted/CDN build; this entry captures the surface that ships publicly.
 - **Versioned wire protocol.** `PROTOCOL_VERSION = 1`, kept in lockstep with the
   server by `protocol.drift.test.ts` (fails CI on divergence).
 
-[Unreleased]: https://github.com/oviswang/Pouchy/compare/companion-sdk-v0.29.0...HEAD
+[Unreleased]: https://github.com/oviswang/Pouchy/compare/companion-sdk-v0.29.1...HEAD
+[0.29.1]: https://github.com/oviswang/Pouchy/compare/companion-sdk-v0.29.0...companion-sdk-v0.29.1
 [0.29.0]: https://github.com/oviswang/Pouchy/compare/companion-sdk-v0.28.1...companion-sdk-v0.29.0
 [0.28.1]: https://github.com/oviswang/Pouchy/compare/companion-sdk-v0.28.0...companion-sdk-v0.28.1
 [0.28.0]: https://github.com/oviswang/Pouchy/compare/companion-sdk-v0.27.0...companion-sdk-v0.28.0

package/README.md

@@ -122,12 +122,14 @@ are offered automatically once you declare `tools`/`handles`, and
 embeds receive expression cues — declare them or they no-op silently. Full
 contract: `docs/companion-host-control.md`.
 
-**Cancellation (0.29.0):** every request-performing method accepts an optional
-`AbortSignal`. Methods with an options object take a `signal?` field
-(`sendText(text, { signal })`, `recall({ signal })`, …); the rest take a
-trailing `opts` (`getAvatar({ signal })`, `ping({ signal })`, …). Aborting
-rejects with `CompanionError` `code: 'aborted'`, and for `sendText({ awaitReply })`
-it also tears down the in-flight event stream.
+**Cancellation (0.29.0, completed in 0.29.1):** every request-performing method
+accepts an optional `AbortSignal` — including `sendToolResult(callId, result,
+{ signal })` and `startCall({ signal })` since 0.29.1. Methods with an options
+object take a `signal?` field (`sendText(text, { signal })`,
+`recall({ signal })`, …); the rest take a trailing `opts`
+(`getAvatar({ signal })`, `ping({ signal })`, …). Aborting rejects with
+`CompanionError` `code: 'aborted'`, and for `sendText({ awaitReply })` it also
+tears down the in-flight event stream.
 
 ```ts
 const ac = new AbortController();

package/dist/client.d.ts

@@ -346,6 +346,7 @@ export declare class CompanionClient {
     startCall(opts?: {
         voice?: string;
         locale?: string;
+        signal?: AbortSignal;
     }): Promise<CallCredentials>;
     /** Open a live voice call end-to-end: mints credentials (startCall) and opens a
      *  WebRTC session directly to the provider — no first-party app code needed.
@@ -388,6 +389,8 @@ export declare class CompanionClient {
     sendToolResult(callId: string, result: {
         ok?: boolean;
         result?: unknown;
+    }, opts?: {
+        signal?: AbortSignal;
     }): Promise<{
         allDone: boolean;
     }>;

package/dist/client.js

@@ -191,7 +191,13 @@ export class CompanionClient {
         const fromBody = json?.retryAfterSec;
         if (typeof fromBody === 'number' && Number.isFinite(fromBody) && fromBody >= 0)
             return fromBody;
-        const header = Number(res.headers.get('Retry-After'));
+        // Missing/blank header must stay undefined — Number(null) is 0, which
+        // used to stamp retryAfter: 0 on EVERY error without the header (a 400,
+        // a 404 …), telling backoff code "retry immediately".
+        const raw = res.headers.get('Retry-After');
+        if (raw === null || raw.trim() === '')
+            return undefined;
+        const header = Number(raw);
         return Number.isFinite(header) && header >= 0 ? header : undefined;
     }
     async postJson(path, body, signal) {
@@ -305,6 +311,9 @@ export class CompanionClient {
             opts.signal.addEventListener('abort', onCallerAbort, { once: true });
         }
         let timer;
+        // Held so the finally can REMOVE it — a host reusing one long-lived signal
+        // across many awaitReply calls accumulated one orphan listener per call.
+        let onCallerAbortReject;
         const deadline = new Promise((_, reject) => {
             timer = setTimeout(() => {
                 ac.abort();
@@ -313,7 +322,8 @@ export class CompanionClient {
             // The caller's signal also rejects the operation (the stream teardown
             // alone would otherwise leave the fallback wait hanging to the timer).
             if (opts?.signal) {
-                opts.signal.addEventListener('abort', () => reject(new CompanionError('request aborted', 0, 'aborted')), { once: true });
+                onCallerAbortReject = () => reject(new CompanionError('request aborted', 0, 'aborted'));
+                opts.signal.addEventListener('abort', onCallerAbortReject, { once: true });
             }
         });
         try {
@@ -322,7 +332,10 @@ export class CompanionClient {
             let pausedOnTools = false;
             if (opts?.stream === false) {
                 const json = await Promise.race([
-                    this.postJson(`/api/companion/session/${sessionId}/input`, body),
+                    // ac.signal, like the streaming leg: the deadline and the caller's
+                    // signal both abort it — without this the promise rejected but the
+                    // billed POST kept running beyond cancellation.
+                    this.postJson(`/api/companion/session/${sessionId}/input`, body, ac.signal),
                     deadline
                 ]);
                 seq = json.seq ?? null;
@@ -354,6 +367,8 @@ export class CompanionClient {
                 clearTimeout(timer);
             if (onCallerAbort)
                 opts?.signal?.removeEventListener('abort', onCallerAbort);
+            if (onCallerAbortReject)
+                opts?.signal?.removeEventListener('abort', onCallerAbortReject);
         }
     }
     /** The streaming leg of sendText: parse the POST response's SSE frames —
@@ -512,10 +527,7 @@ export class CompanionClient {
      */
     async startCall(opts) {
         const id = this.requireSession();
-        return this.postJson(`/api/companion/session/${id}/call`, {
-            voice: opts?.voice,
-            locale: opts?.locale
-        });
+        return this.postJson(`/api/companion/session/${id}/call`, { voice: opts?.voice, locale: opts?.locale }, opts?.signal);
     }
     /** Open a live voice call end-to-end: mints credentials (startCall) and opens a
      *  WebRTC session directly to the provider — no first-party app code needed.
@@ -651,7 +663,7 @@ export class CompanionClient {
     /** Report the result of a companion.tool_call this surface performed. When all
      *  of the turn's calls are reported, the companion resumes and the continuation
      *  (a companion.message or more tool calls) arrives on the event stream. */
-    async sendToolResult(callId, result) {
+    async sendToolResult(callId, result, opts) {
         // Voice tool-call: resolve it locally so the result flows back to the voice
         // provider, not to a server text turn. (Same call shape as the text path.)
         const pending = this.pendingVoiceTools.get(callId);
@@ -660,7 +672,7 @@ export class CompanionClient {
             return { allDone: true };
         }
         const id = this.requireSession();
-        const json = await this.postJson(`/api/companion/session/${id}/tool-result`, { callId, ok: result.ok !== false, result: result.result });
+        const json = await this.postJson(`/api/companion/session/${id}/tool-result`, { callId, ok: result.ok !== false, result: result.result }, opts?.signal);
         return { allDone: json.allDone ?? false };
     }
     /** A tool the live voice call asked the app to run. Fires the SAME

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pouchy_ai/companion-sdk",
-  "version": "0.29.0",
-  "description": "Embed the Pouchy companion \u2014 chat, voice, tools, memory, live world-state, instant UI, and agent-to-agent messaging \u2014 in any app, game, or site.",
+  "version": "0.29.1",
+  "description": "Embed the Pouchy companion — chat, voice, tools, memory, live world-state, instant UI, and agent-to-agent messaging — in any app, game, or site.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://pouchy.ai",
@@ -16,7 +16,8 @@
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
     }
   },
   "main": "./dist/index.js",