aegis-bridge 2.3.5 → 2.3.6

package/README.md

@@ -103,7 +103,7 @@ All endpoints under `/v1/`.
 | Method | Endpoint | Description |
 |--------|----------|-------------|
 | `GET` | `/v1/health` | Server health & uptime |
-| `POST` | `/v1/sessions` | Create a session |
+| `POST` | `/v1/sessions` | Create (or reuse) a session |
 | `GET` | `/v1/sessions` | List sessions |
 | `GET` | `/v1/sessions/:id` | Session details |
 | `GET` | `/v1/sessions/:id/read` | Parsed transcript |
@@ -144,9 +144,38 @@ All endpoints under `/v1/`.
 
 </details>
 
----
+<details>
+<summary>Session Reuse</summary>
+
+When you `POST /v1/sessions` (or `POST /sessions`) with a `workDir` that already has an **idle** session, Aegis reuses that session instead of creating a duplicate. The existing session's prompt is delivered and you get the same session object back.
+
+**Response differences:**
+
+| | New Session | Reused Session |
+|---|---|---|
+| Status | `201 Created` | `200 OK` |
+| `reused` | `false` | `true` |
+| `promptDelivery` | `{ delivered, attempts }` | `{ delivered, attempts }` |
+
+```bash
+# First call → creates session (201)
+curl -s -o /dev/null -w "%{http_code}" -X POST http://localhost:9100/v1/sessions \
+  -H "Content-Type: application/json" \
+  -d '{"workDir": "/home/user/project", "prompt": "Fix the tests"}'
+# → 201
 
-## Integrations
+# Same workDir while idle → reuses session (200)
+curl -s -o /dev/null -w "%{http_code}" -X POST http://localhost:9100/v1/sessions \
+  -H "Content-Type: application/json" \
+  -d '{"workDir": "/home/user/project", "prompt": "Now add error handling"}'
+# → 200, body includes "reused": true
+```
+
+Only **idle** sessions are reused. Working, stalled, or permission-prompt sessions are ignored — a new one is created.
+
+</details>
+
+---
 
 ### Telegram
 

package/dist/auth.js

@@ -155,8 +155,9 @@ export class AuthManager {
         const previous = this.sseMutex;
         this.sseMutex = lock;
         // #509: await + try/finally together so release() fires even if previous rejects
+        // #573: catch prior rejection so it doesn't propagate and block subsequent callers
         try {
-            await previous;
+            await previous.catch(() => { });
             // Cleanup expired tokens first
             this.cleanExpiredSSETokens();
             // Enforce per-key limit

package/dist/server.js

@@ -34,7 +34,7 @@ import { MetricsCollector } from './metrics.js';
 import { registerHookRoutes } from './hooks.js';
 import { registerWsTerminalRoute } from './ws-terminal.js';
 import { SwarmMonitor } from './swarm-monitor.js';
-import { execSync } from 'node:child_process';
+import { execFileSync } from 'node:child_process';
 import { authKeySchema, sendMessageSchema, commandSchema, bashSchema, screenshotSchema, permissionHookSchema, stopHookSchema, batchSessionSchema, pipelineSchema, parseIntSafe, isValidUUID, } from './validation.js';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
@@ -1344,7 +1344,7 @@ async function killStalePortHolder(port) {
     // Small random delay to reduce race window with systemd restarts
     await new Promise(resolve => setTimeout(resolve, 100 + Math.random() * 400));
     try {
-        const output = execSync(`lsof -ti tcp:${port}`, { encoding: 'utf-8', timeout: 5_000 }).trim();
+        const output = execFileSync('lsof', ['-ti', `tcp:${port}`], { encoding: 'utf-8', timeout: 5_000 }).trim();
         if (!output)
             return false;
         const pids = output.split('\n').map(s => parseInt(s.trim(), 10)).filter(n => !isNaN(n));

package/dist/session.js

@@ -489,12 +489,13 @@ export class SessionManager {
         await this.save();
         // Issue #353: Fetch CC process PID for swarm parent matching.
         // Fire-and-forget — PID is not needed synchronously.
+        // Issue #574: Add .catch() to prevent unhandled rejection if tmux fails mid-lookup.
         void this.tmux.listPanePid(windowId).then(pid => {
             if (pid !== null) {
                 session.ccPid = pid;
-                void this.save();
+                void this.save().catch(e => console.error(`Session: failed to save PID for ${id}:`, e));
             }
-        });
+        }).catch(e => console.error(`Session: failed to list pane PID for ${id}:`, e));
         // Start BOTH discovery methods in parallel:
         // 1. Hook-based: fast, relies on SessionStart hook writing session_map.json
         // 2. Filesystem-based: slower, scans for new .jsonl files — works when hooks fail

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aegis-bridge",
-  "version": "2.3.5",
+  "version": "2.3.6",
   "type": "module",
   "description": "Orchestrate Claude Code sessions via API. Create, brief, monitor, refine, ship.",
   "main": "dist/server.js",