[pedropombeiro]

Problem

Two curl permission requests arrived in quick succession, but only one notification was delivered. The one that arrived was approved correctly.

Not a delivery fault this time — the tracker never announced the second request.

Root cause

wait() suppressed onWaiting whenever the session was already waiting:

const wasWaiting = states.get(sessionID) === 'waiting';
states.set(sessionID, 'waiting');
if (!wasWaiting) await options.onWaiting?.(sessionID, detail);

So with per_A and per_B in flight, per_B got a tracked wait but no onWaiting — no webhook, no notification, no poll. Reproduced:

onBusy | onWaiting per_A | replied per_A
onWaiting events: [ "onWaiting per_A" ]

Worse than reported: per_B was never announced even after per_A was approved, since nothing re-announces pending waits. It stayed unanswerable until it timed out or was answered in the TUI.

The guard came from #44 to stop terminal plugins re-firing. Both current consumers are already idempotent, so it is not needed: tmux-indicator returns early when active, and terminal-progress writes an unchanged OSC sequence.

Fix

Fire onWaiting for each distinct wait. Dedupe by request ID (waits.has(id)) still applies.

Verification

Two distinct permissions now both notify:

onBusy | onWaiting per_A | onWaiting per_B | onBusy

Preserved invariants:

• duplicate permission.asked for the same ID → 1 onWaiting
• replying to per_A only → session stays waiting (per_B still pending)
• replying to both → resumes exactly once

Real plugin, both permissions dispatched concurrently — no starvation despite onWaiting blocking for the poll duration:

HOOK +0.0s waiting id=per_A
HOOK +0.0s waiting id=per_B
REPLY +2.0s -> per_A {"response":"once"}

Both webhooks fire immediately and both polls run concurrently.

Regression suites all pass: the five tracker scenarios (including the single-webhook guarantee for tool questions), receiver, negative-path, webhook-failure, entity-read and config harnesses. terminal-progress emits the correct OSC sequence and tmux-indicator still sets/clears its flag exactly once. mise run typecheck, lint, build pass.

Note

Independent of the 0.7.5 webhook-delivery work. This one explains a missing notification when the webhook itself succeeded.