thinkpool-pair 0.7.197 → 0.7.198

package/account.mjs

@@ -39,25 +39,26 @@ function pidAlive(pid) {
   try { process.kill(pid, 0); return true } catch (e) { return e.code === 'EPERM' }
 }
 
-// Returns true if we now hold the lock, false if another LIVE supervisor holds it.
-// A stale lock (holder dead / garbage / ours) is taken over. fs errors fail-OPEN
-// (return true) — a lock we can't manage must never block the real bridge.
+// Returns true only if we demonstrably hold the lock. A stale lock (holder dead /
+// garbage / ours) is taken over. Filesystem errors fail CLOSED: serving without a
+// lock can start a second bridge, and duplicate bridges can race terminal reconcile
+// and delete room history. A temporarily unmanageable lock is safer than that.
 export function acquireSingleton(lockPath = LOCK) {
-  try { fs.mkdirSync(path.dirname(lockPath), { recursive: true }) } catch { /* noop */ }
+  try { fs.mkdirSync(path.dirname(lockPath), { recursive: true }) } catch { return false }
   for (let i = 0; i < 3; i++) {
     try {
       const fd = fs.openSync(lockPath, 'wx')        // atomic create-exclusive
       fs.writeSync(fd, String(process.pid)); fs.closeSync(fd)
       return true
     } catch (e) {
-      if (e.code !== 'EEXIST') return true           // can't create for another reason → fail open
+      if (e.code !== 'EEXIST') return false          // cannot prove ownership → refuse to serve
       let pid = 0
-      try { pid = parseInt(fs.readFileSync(lockPath, 'utf8').trim(), 10) || 0 } catch { /* unreadable */ }
+      try { pid = parseInt(fs.readFileSync(lockPath, 'utf8').trim(), 10) || 0 } catch { return false }
       if (pidAlive(pid)) return false                // a live supervisor owns it → refuse
-      try { fs.rmSync(lockPath, { force: true }) } catch { return true }   // stale → drop + retry
+      try { fs.rmSync(lockPath, { force: true }) } catch { return false }  // stale but unmanageable
     }
   }
-  return true
+  return false
 }
 
 // Release only if WE own it (don't unlink a lock another instance took over).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkpool-pair",
-  "version": "0.7.197",
+  "version": "0.7.198",
   "description": "Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.",
   "type": "module",
   "bin": {