fix(agents-server): close the same wake-registration gap at cron & webhook-source sites

upsertCronSchedule and upsertWebhookSourceSubscription used the same
unregister-then-register sequence that dropped wakes on parallel sub-agent
spawn: the manifest-anchored wake registration is briefly absent from the
in-memory cache across the register()'s DB round-trip, so a cron tick or webhook
event arriving in that window would be missed. These are single API calls rather
than concurrent bursts, so the race is far narrower than the spawn path, but the
gap is the same class of bug — and both also race against the manifest-sync
reconcile triggered by their own writeManifestEntry.

Route both through WakeRegistry.reconcileManifestRegistration, which registers
the desired reg first (never leaving the cache empty) and then prunes only stale
rows for the manifest key. Delete-only sites (deleteSchedule,
deleteWebhookSourceSubscription, deletePgSyncObservation, upsertFutureSendSchedule)
have no re-register and so no gap; left as-is. Cron/webhook/manifest suites pass
(30/30).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: andresberrios

packages/agents-server/src/entity-manager.ts

@@ -2977,23 +2977,26 @@ export class EntityManager {
     const spec = resolveCronScheduleSpec(req.expression, req.timezone)
 
     const manifestKey = `schedule:${req.id}`
-    await this.wakeRegistry.unregisterByManifestKey(
+    // Gap-free reconcile (register-first, then prune stale). The old
+    // unregister-then-register briefly left this manifest key's wake absent from
+    // the cache; a cron tick landing in that window would be missed. See
+    // WakeRegistry.reconcileManifestRegistration.
+    await this.wakeRegistry.reconcileManifestRegistration(
       entityUrl,
       manifestKey,
+      {
+        subscriberUrl: entityUrl,
+        sourceUrl: getCronStreamPath(spec.expression, spec.timezone),
+        condition: {
+          on: `change`,
+        },
+        debounceMs: req.debounceMs,
+        timeoutMs: req.timeoutMs,
+        oneShot: false,
+        manifestKey,
+      },
       this.tenantId
     )
-    await this.wakeRegistry.register({
-      tenantId: this.tenantId,
-      subscriberUrl: entityUrl,
-      sourceUrl: getCronStreamPath(spec.expression, spec.timezone),
-      condition: {
-        on: `change`,
-      },
-      debounceMs: req.debounceMs,
-      timeoutMs: req.timeoutMs,
-      oneShot: false,
-      manifestKey,
-    })
     await this.getOrCreateCronStream(spec.expression, spec.timezone)
 
     const txid = randomUUID()
@@ -3162,24 +3165,26 @@ export class EntityManager {
     )
 
     // The manifest is the durable source of truth. Register side effects after
-    // it is appended so failures can be repaired by manifest replay.
-    await this.wakeRegistry.unregisterByManifestKey(
+    // it is appended so failures can be repaired by manifest replay. Gap-free
+    // reconcile (register-first, then prune stale) so a webhook event landing
+    // during a re-subscribe isn't missed — see
+    // WakeRegistry.reconcileManifestRegistration.
+    await this.wakeRegistry.reconcileManifestRegistration(
       entityUrl,
       manifestKey,
+      {
+        subscriberUrl: entityUrl,
+        sourceUrl: req.subscription.sourceUrl,
+        condition: {
+          on: `change`,
+          collections: [`webhook_event`],
+          ops: [`insert`],
+        },
+        oneShot: false,
+        manifestKey,
+      },
       this.tenantId
     )
-    await this.wakeRegistry.register({
-      tenantId: this.tenantId,
-      subscriberUrl: entityUrl,
-      sourceUrl: req.subscription.sourceUrl,
-      condition: {
-        on: `change`,
-        collections: [`webhook_event`],
-        ops: [`insert`],
-      },
-      oneShot: false,
-      manifestKey,
-    })
 
     return { txid, subscription: req.subscription }
   }