instar 1.3.162 → 1.3.164

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAqSH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAqwDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAgwPtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAsSH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAqwDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAkwPtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -15,6 +15,7 @@ import { fileURLToPath } from 'node:url';
 import pc from 'picocolors';
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 import { loadConfig, ensureStateDir, detectTmuxPath } from '../core/Config.js';
+import { isNonFatalUncaught } from '../core/uncaughtExceptionPolicy.js';
 import { SessionManager } from '../core/SessionManager.js';
 import { StateManager } from '../core/StateManager.js';
 import { StuckInputSentinel } from '../core/StuckInputSentinel.js';
@@ -8778,6 +8779,14 @@ export async function startServer(options) {
                             const r = ownReg.cas({ type: 'place', machineId }, { sessionKey: sk, sender: meshSelfId, nonce: `${meshSelfId}:c:${++routerNonce}` });
                             return { ok: r.ok, epoch: ownReg.read(sk)?.ownershipEpoch ?? 0 };
                         },
+                        // bug #11: confirm the remote owner (placing → active) after the spawn is
+                        // dispatched. The router holds the authoritative ownReg (single-router
+                        // topology); the FSM permits a claim whose machineId equals the placed
+                        // owner, so the router confirms on the target's behalf. Without this the
+                        // record stays 'placing' and every later message for the session queues.
+                        confirmClaim: (sk, machineId) => {
+                            ownReg.cas({ type: 'claim', machineId }, { sessionKey: sk, sender: meshSelfId, nonce: `${meshSelfId}:cl:${++routerNonce}` });
+                        },
                         deliverMessage: async (target, env) => {
                             const url = peerUrl(target);
                             if (!url)
@@ -9357,17 +9366,11 @@ export async function startServer(options) {
         // the "mutex lock failed" error on next start. This doesn't prevent the crash,
         // but ensures the next boot is clean.
         process.on('uncaughtException', (err) => {
-            // Non-fatal HTTP errors — log and continue, don't crash the server.
-            // "Cannot set headers" is a double-response race condition (common during
-            // tunnel reconnect storms). The affected request is already handled; the
-            // server can keep serving new requests.
-            const nonFatalPatterns = [
-                'Cannot set headers after they are sent',
-                'write after end',
-                'ERR_HTTP_HEADERS_SENT',
-                'ERR_STREAM_WRITE_AFTER_END',
-            ];
-            if (nonFatalPatterns.some(p => err.message?.includes(p))) {
+            // Isolated, recoverable uncaught exceptions — log and continue, don't
+            // crash the server (which would close its databases + drop in-flight
+            // work). See isNonFatalUncaught for the allowlist + rationale (HTTP
+            // double-response races, Slack Socket Mode reconnect races).
+            if (isNonFatalUncaught(err)) {
                 console.warn(`[WARN] Non-fatal uncaught exception (suppressed): ${err.message}`);
                 return; // Don't crash — the server is fine
             }