thinkpool-pair 0.7.116 → 0.7.117

package/bridge.mjs

@@ -2409,7 +2409,19 @@ flowChannel
     cleanupFlowLanes(payload.flowId, 600)
     process.stderr.write(`\n  ${A.yel}◆ flow cancelled — closing its lanes (${String(payload.flowId).replace(/-/g, '').slice(0, 8)}).${A.rst}\n`)
   })
-  .subscribe()
+  .subscribe(status => {
+    // BRG-2 (audit 2026-07-02): tpflow had a bare subscribe with no status handler, so a
+    // channel-specific CHANNEL_ERROR (socket still healthy → the main tpcode watchdog
+    // never trips) dropped flow dispatch/plan/done silently until the next bridge
+    // restart. Surface it. supabase-js auto-rejoins every channel on a socket reconnect,
+    // so a transient drop self-heals; an active per-channel re-subscribe is deliberately
+    // NOT added here — re-subscribing a live supabase channel is a known lifecycle
+    // footgun (the 2026-06-30 channel-collision family) and can't be two-device verified
+    // from a single host.
+    if (status === 'CHANNEL_ERROR' || status === 'TIMED_OUT' || status === 'CLOSED') {
+      process.stderr.write(`\n  ⚠ flow realtime ${status} (tpflow:${room}).\n`)
+    }
+  })
 
 // Watchdog — if the realtime channel is stuck (never connected, or dropped and
 // not recovered) for >60s, exit non-zero so a supervisor/launchd restarts a
@@ -2565,6 +2577,10 @@ async function shutdown(code = 0, farewell = true) {
   // socket is alive; on a wedge it won't flush and the hard backstop above wins).
   try { await channel.untrack() } catch { /* noop */ }
   try { await supabase.removeChannel(channel) } catch { /* noop */ }
+  // BRG-2 (audit 2026-07-02): shutdown removed only the room channel, leaking the flow
+  // topic (no presence to untrack, but the subscription + socket join outlived the
+  // process teardown). Close it too so shutdown is symmetric.
+  try { await supabase.removeChannel(flowChannel) } catch { /* noop */ }
   setTimeout(() => process.exit(code), 250)   // grace for the leave/close frames to flush
 }
 process.on('SIGINT', () => shutdown(0))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkpool-pair",
-  "version": "0.7.116",
+  "version": "0.7.117",
   "description": "Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.",
   "type": "module",
   "bin": {