thinkpool-pair 0.7.41 → 0.7.42

package/bridge.mjs

@@ -451,7 +451,7 @@ const flushAll = () => {
     bcast('pty-out', { term: id, b64 })
   }
 }
-const flushTimer = setInterval(flushAll, 35)
+const flushTimer = setInterval(flushAll, 35); flushTimer.unref?.()  // don't keep the event loop alive past shutdown
 
 // ── mockup hand-off ────────────────────────────────────────────────────
 // render.sh (mockup-iterate) drops a manifest JSON into TP_MOCKUP_OUTBOX after
@@ -548,6 +548,11 @@ const attachedDims = () => ({
 
 function openTerm({ id, cmd, args = [], attached = false, cols, rows }) {
   if (terms.has(id)) return
+  if (terms.size >= 8) {   // cap live PTYs (matches session-store KEEP=8) — no unbounded host leak
+    process.stderr.write(`\n  ⚠ can't open "${cmd}" — terminal cap (8) reached; close one first.\n`)
+    bcast('term-exit', { id })
+    return
+  }
   if (!pty) {   // raw-PTY path needs node-pty; structured Claude never lands here
     process.stderr.write(`\n  ⚠ can't open "${cmd}" — node-pty isn't built (PTY mode disabled).\n`)
     bcast('term-exit', { id })
@@ -782,7 +787,7 @@ if (attachedCmd && process.stdin.isTTY) process.stdin.setRawMode(true)
 process.stdin.resume()
 process.stdin.on('data', d => {
   const t = attachedId && terms.get(attachedId)
-  if (t) t.term.write(d.toString('utf8'))
+  if (t) { try { t.term.write(d.toString('utf8')) } catch { /* term just exited */ } }
   else if (d.includes(3)) shutdown()   // Ctrl-C once detached/headless
 })
 // attached terminal follows the host's TTY size — but never below the
@@ -805,7 +810,7 @@ channel
     if (!payload?.data) return
     markActivity()
     const t = terms.get(payload.term) || (payload.term == null && attachedId ? terms.get(attachedId) : null)
-    if (t) t.term.write(payload.data)
+    if (t) { try { t.term.write(payload.data) } catch { /* term just exited */ } }
   })
   .on('broadcast', { event: 'resize' }, ({ payload }) => {
     // headless terms are web-sized (last writer wins); the attached term is

package/claude-session.mjs

@@ -84,8 +84,10 @@ function makeInputStream() {
   return {
     stream: gen(),
     push(content) {
+      if (ended) return false      // session ended — caller (sendTurn) can surface this
       queue.push({ type: 'user', message: { role: 'user', content } })
       if (wake) { wake(); wake = null }
+      return true
     },
     end() { ended = true; if (wake) { wake(); wake = null } },
   }
@@ -120,7 +122,7 @@ const MODES = new Set(['default', 'acceptEdits', 'plan', 'bypassPermissions'])
 
 export function startClaudeSession({ cwd, model, resume, env, mode: initialMode = 'default', onEvent, requestPermission }) {
   const ac = new AbortController()
-  const input = makeInputStream()
+  let input = makeInputStream()   // `let`: auto-restart swaps in a fresh stream
   let sessionId = resume || null
   let closed = false
   let q = null            // the live Query — control requests (interrupt /
@@ -150,12 +152,39 @@ export function startClaudeSession({ cwd, model, resume, env, mode: initialMode
   let turnActive = false          // true between a sent turn and its `result`
   let lastEvtTs = Date.now()      // wall-clock of the most recent emitted event
   let stalledSent = false         // one `stalled` per stall, not a storm
+  // Auto-restart (item 1) — a transient upstream stream drop (e.g. Anthropic
+  // "Connection closed mid-response") used to leave the session half-dead:
+  // query loop gone, turnActive stuck, later sendTurns pushed into a dead
+  // stream (silent freeze). The loop now self-heals: a recoverable throw
+  // re-runs query() with resume, bounded by RESTART_MAX consecutive attempts
+  // (reset to 0 on every successful `result`). Exhaustion/non-recoverable →
+  // closed, so sendTurn stops silently queuing.
+  const RESTART_MAX = 3
+  const RECOVERABLE = /connection closed|connection reset|econnreset|etimedout|socket hang up|fetch failed|network error|socket destroyed/i
+  let restartCount = 0
+  // Force-stop a true wedge (item 3): no result, no error, just silence past
+  // FORCE_STOP_MS. Clears turnActive so between-turns updates unblock, and
+  // surfaces a recoverable error. The wedged loop is left in place (a hung
+  // native call can't be safely restarted mid-flight); if it later throws,
+  // the catch self-heals.
+  const FORCE_STOP_MS = Math.max(STALL_MS * 3, parseInt(process.env.TP_FORCE_STOP_MS, 10) || 300000)
+  let forceStopped = false
 
   const emit = (evt) => { lastEvtTs = Date.now(); if (evt && evt.kind !== 'stalled') stalledSent = false; try { onEvent?.(evt) } catch { /* never let a consumer throw into the loop */ } }
   const stallTimer = setInterval(() => {
-    if (turnActive && !stalledSent && Date.now() - lastEvtTs > STALL_MS) {
+    if (!turnActive) return
+    const quiet = Date.now() - lastEvtTs
+    if (quiet > FORCE_STOP_MS && !forceStopped) {
+      // True wedge — no result, no error, just silence. Unblocks between-turns
+      // updates + surfaces a recoverable error. The wedged loop is left alone.
+      forceStopped = true
+      turnActive = false
+      emit({ kind: 'error', message: `agent went silent for ${Math.round(quiet / 1000)}s — force-stopped the turn; send again to resume`, recoverable: true })
+      return
+    }
+    if (!stalledSent && quiet > STALL_MS) {
       stalledSent = true
-      emit({ kind: 'stalled', sinceMs: Date.now() - lastEvtTs })
+      emit({ kind: 'stalled', sinceMs: quiet })
     }
   }, 5000)
   stallTimer.unref?.()
@@ -317,9 +346,9 @@ export function startClaudeSession({ cwd, model, resume, env, mode: initialMode
     if (healed.blocks) process.stderr.write(`\n  ◆ healed ${healed.blocks} cross-provider tool block(s) in the transcript before resume.\n`)
   }
 
-  ;(async () => {
+  const runQuery = async () => {
     try {
-      q = query({ prompt: input.stream, options: opts })
+      q = query({ prompt: input.stream, options: { ...opts, ...(sessionId ? { resume: sessionId } : {}) } })
       for await (const m of q) {
         if (closed) break
         switch (m.type) {
@@ -388,6 +417,8 @@ export function startClaudeSession({ cwd, model, resume, env, mode: initialMode
             if (m.session_id) sessionId = m.session_id
             turnBaseOut = 0; curMsgOut = 0   // reset the live token count for the next turn
             turnActive = false               // turn settled → stall watchdog stands down
+            restartCount = 0                 // a successful turn refills the auto-restart budget
+            forceStopped = false
             emit({ kind: 'result', subtype: m.subtype, sessionId, costUsd: m.total_cost_usd, usage: m.usage, numTurns: m.num_turns, durationMs: m.duration_ms ?? null, denials: Array.isArray(m.permission_denials) ? m.permission_denials.length : 0 })
             // Surface a usage/context meter (chrome, not a transcript line). The
             // context window % comes from the control request; cost is cumulative.
@@ -406,9 +437,29 @@ export function startClaudeSession({ cwd, model, resume, env, mode: initialMode
         }
       }
     } catch (e) {
-      if (!closed) emit({ kind: 'error', message: e?.message || String(e) })
+      if (closed) return
+      const msg = e?.message || String(e)
+      emit({ kind: 'error', message: msg })
+      // Auto-restart a transient upstream stream drop: re-run query() with
+      // resume so the conversation continues. Bounded by RESTART_MAX (reset on
+      // each successful result) so a persistent outage can't loop forever; a
+      // fresh input stream is needed because the throw killed the old iterator.
+      if (RECOVERABLE.test(msg) && restartCount < RESTART_MAX) {
+        restartCount++
+        turnActive = false
+        emit({ kind: 'note', text: `connection dropped — reconnecting (${restartCount}/${RESTART_MAX})` })
+        input = makeInputStream()
+        setTimeout(runQuery, Math.min(1000 * restartCount, 4000))   // 1s, 2s, 4s backoff
+        return
+      }
+      // Non-recoverable, or budget exhausted: mark done so sendTurn stops
+      // silently queuing into a dead stream. The bridge's onEvent self-heal
+      // still fires for "No conversation found" (it reopens fresh).
+      closed = true
+      turnActive = false
     }
-  })()
+  }
+  runQuery()
 
   return {
     sendTurn(text) { if (!closed) { turnActive = true; lastEvtTs = Date.now(); stalledSent = false; input.push(String(text)) } },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkpool-pair",
-  "version": "0.7.41",
+  "version": "0.7.42",
   "description": "Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.",
   "type": "module",
   "bin": {