@team-agent/installer 0.5.54 → 0.5.55

package/Cargo.lock

@@ -575,7 +575,7 @@ dependencies = [
 
 [[package]]
 name = "team-agent"
-version = "0.5.54"
+version = "0.5.55"
 dependencies = [
  "anyhow",
  "chrono",

package/Cargo.toml

@@ -9,7 +9,7 @@ members = ["crates/team-agent", "crates/win-conpty-phase0", "crates/conpty-trans
 
 [workspace.package]
 edition = "2021"
-version = "0.5.54"
+version = "0.5.55"
 license = "AGPL-3.0"
 rust-version = "1.95"
 

package/crates/team-agent/src/messaging/tests/runtime.rs

@@ -3208,6 +3208,72 @@ fn gate054_rebind_replay_requeues_failed_leader_message_on_attach() {
     );
 }
 
+#[test]
+fn claim_requeues_pending_acceptance_for_leader_only() {
+    let ws = tmp_ws("claim-pending-acceptance");
+    let store = store_for(&ws);
+    let log = EventLog::new(&ws);
+    let team_id = "mailbox-team";
+    let leader_message = store
+        .create_message(
+            None,
+            "worker",
+            "leader",
+            "leader canary",
+            None,
+            false,
+            Some(team_id),
+        )
+        .unwrap();
+    let worker_message = store
+        .create_message(
+            None,
+            "worker",
+            "worker-b",
+            "worker canary",
+            None,
+            false,
+            Some(team_id),
+        )
+        .unwrap();
+    let conn = crate::db::schema::open_db(store.db_path()).unwrap();
+    for message_id in [&leader_message, &worker_message] {
+        conn.execute(
+            "update messages set status = 'submitted_pending_acceptance' where message_id = ?1",
+            [message_id],
+        )
+        .unwrap();
+    }
+
+    let team = TeamKey::new(team_id);
+    let pane = PaneId::new("%leader");
+    requeue_after_claim_leader(&ws, &store, &log, &team, &pane, None).unwrap();
+
+    let row = |message_id: &str| {
+        conn.query_row(
+            "select status, delivered_at, error from messages where message_id = ?1",
+            [message_id],
+            |row| {
+                Ok((
+                    row.get::<_, String>(0)?,
+                    row.get::<_, Option<String>>(1)?,
+                    row.get::<_, Option<String>>(2)?,
+                ))
+            },
+        )
+        .unwrap()
+    };
+    assert_eq!(row(&leader_message), ("accepted".to_string(), None, None));
+    assert_eq!(
+        row(&worker_message),
+        (
+            "submitted_pending_acceptance".to_string(),
+            None,
+            None
+        )
+    );
+}
+
 #[test]
 fn gate054_status_surfaces_pending_leader_notifications() {
     // Round-2: user-facing visibility — status must show the blocked leader

package/crates/team-agent/src/messaging/watchers.rs

@@ -470,12 +470,13 @@ pub fn requeue_after_claim_leader(
 /// 0.5.5 gate054 round-2: attach-leader (and claim-leader) requeue for leader messages
 /// that were refused with `rebind_required` while no leader pane was attached.
 ///
-/// #231 C-5 semantics: same row, same message_id — flip `status` back from
-/// `failed`/`leader_not_attached` to `accepted` so `deliver_pending_messages`
-/// replays it through the SAME pipeline. The `leader_notification_log` PK is
-/// already there (primitive wrote it before the unbound check), so this replay
-/// cannot create a duplicate notification — exactly-once across rebind, no new
-/// send/notify rows and no second replay mechanism.
+/// #231 C-5 semantics: same row, same message_id — flip an eligible status back
+/// to `accepted` so `deliver_pending_messages` replays it through the SAME
+/// pipeline. The `leader_notification_log` PK prevents a second notification
+/// row for watcher-backed messages. A `submitted_pending_acceptance` row has
+/// already crossed the transport boundary, so its recovery is intentionally
+/// at-least-once: the stable message id/receipt token is preserved, but a replay
+/// can repeat the physical submit if a same-pane claim races the receipt window.
 pub(crate) fn requeue_blocked_leader_messages(
     conn: &rusqlite::Connection,
     event_log: &EventLog,
@@ -489,7 +490,10 @@ pub(crate) fn requeue_blocked_leader_messages(
     // `deliver_pending_messages` picks them up as `accepted` and injects
     // exactly once. status `queued_until_leader_attach` is deliberately NOT
     // in the `claim_for_delivery` eligible set (see message_store.rs) so it
-    // could not have churned while the leader was unattached.
+    // could not have churned while the leader was unattached. In contrast,
+    // `submitted_pending_acceptance` is an explicit at-least-once recovery arm:
+    // claim convergence favors an eventual receipt over preserving an
+    // unobservable in-flight submit.
     let requeued = conn.execute(
         "update messages
          set status = 'accepted',
@@ -500,6 +504,7 @@ pub(crate) fn requeue_blocked_leader_messages(
            and (
              (status = 'failed' and error = 'leader_not_attached')
              or status = 'queued_until_leader_attach'
+             or status = 'submitted_pending_acceptance'
            )",
         params![owner_team_id.as_str(), chrono::Utc::now().to_rfc3339()],
     )?;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@team-agent/installer",
-  "version": "0.5.54",
+  "version": "0.5.55",
   "description": "npx installer for Team Agent",
   "keywords": [
     "codex",
@@ -20,9 +20,9 @@
     "team-agent-installer": "npm/install.mjs"
   },
   "optionalDependencies": {
-    "@team-agent/cli-darwin-arm64": "0.5.54",
-    "@team-agent/cli-darwin-x64": "0.5.54",
-    "@team-agent/cli-linux-x64": "0.5.54"
+    "@team-agent/cli-darwin-arm64": "0.5.55",
+    "@team-agent/cli-darwin-x64": "0.5.55",
+    "@team-agent/cli-linux-x64": "0.5.55"
   },
   "scripts": {
     "postinstall": "node npm/bincheck.mjs",