npm - @openchambery/web - Versions diffs - 1.18.2-beta.3 → 1.18.2-beta.30 - Mend

@openchambery/web 1.18.2-beta.3 → 1.18.2-beta.30

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (148) hide show

package/dist/index.html CHANGED Viewed

@@ -546,13 +546,13 @@
         margin-top: 10px;
         min-height: 16px;
         text-align: center;
-        font-size: 12px;
-        line-height: 16px;
+        font-size: calc(12 * var(--dpt));
+        line-height: calc(16 * var(--dpt));
         color: var(--splash-stroke);
         opacity: 0.72;
       }
     </style>
-    <script type="module" crossorigin src="/assets/main-CLlU-0_3.js"></script>
+    <script type="module" crossorigin src="/assets/main-Byhyzh0I.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-C0FnF6B9.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-base-ui-CnHfUmDN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-zustand-B4dlGEM2.js">
@@ -560,15 +560,17 @@
     <link rel="modulepreload" crossorigin href="/assets/vendor-pathe-vBmvQE8f.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-DLPElpoQ.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-tanstack-query-core-BWz0ose6.js">
-    <link rel="modulepreload" crossorigin href="/assets/persistence-DPNMIbF5.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-CBoBpJ1Z.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-l2R9muux.js">
+    <link rel="modulepreload" crossorigin href="/assets/persistence-D1lIuyqO.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-ZK_vkdzL.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-CewM6-g5.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-opencode-sdk-C07HQypa.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-aparajita-capacitor-secure-storage-CjQdwfjS.js">
-    <link rel="modulepreload" crossorigin href="/assets/gitApiHttp-D8j1qRH4.js">
-    <link rel="modulepreload" crossorigin href="/assets/terminalApi-tB3qLcfa.js">
-    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-BtWi74Pm.js">
-    <link rel="stylesheet" crossorigin href="/assets/src-CQN5yJYP.css">
+    <link rel="modulepreload" crossorigin href="/assets/platform-G8Cxe5wN.js">
+    <link rel="modulepreload" crossorigin href="/assets/terminalApi-os4uWEou.js">
+    <link rel="modulepreload" crossorigin href="/assets/types-BuiqMmh_.js">
+    <link rel="modulepreload" crossorigin href="/assets/capgoAdapter-LvGrONDp.js">
+    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-w7pmXQY1.js">
+    <link rel="stylesheet" crossorigin href="/assets/src-De3WpqHP.css">
   </head>
   <body class="h-full bg-background text-foreground">
     <!-- Keep the startup layer outside #root. React replaces every child of

package/dist/mini-chat.html CHANGED Viewed

@@ -74,7 +74,7 @@
       }
     </style>
-    <script type="module" crossorigin src="/assets/miniChat-B4wfuAbi.js"></script>
+    <script type="module" crossorigin src="/assets/miniChat-Cw4DM3Kk.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-C0FnF6B9.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-base-ui-CnHfUmDN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-zustand-B4dlGEM2.js">
@@ -82,15 +82,17 @@
     <link rel="modulepreload" crossorigin href="/assets/vendor-pathe-vBmvQE8f.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-DLPElpoQ.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-tanstack-query-core-BWz0ose6.js">
-    <link rel="modulepreload" crossorigin href="/assets/persistence-DPNMIbF5.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-CBoBpJ1Z.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-l2R9muux.js">
+    <link rel="modulepreload" crossorigin href="/assets/persistence-D1lIuyqO.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-ZK_vkdzL.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-CewM6-g5.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-opencode-sdk-C07HQypa.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-aparajita-capacitor-secure-storage-CjQdwfjS.js">
-    <link rel="modulepreload" crossorigin href="/assets/gitApiHttp-D8j1qRH4.js">
-    <link rel="modulepreload" crossorigin href="/assets/terminalApi-tB3qLcfa.js">
-    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-BtWi74Pm.js">
-    <link rel="stylesheet" crossorigin href="/assets/src-CQN5yJYP.css">
+    <link rel="modulepreload" crossorigin href="/assets/platform-G8Cxe5wN.js">
+    <link rel="modulepreload" crossorigin href="/assets/terminalApi-os4uWEou.js">
+    <link rel="modulepreload" crossorigin href="/assets/types-BuiqMmh_.js">
+    <link rel="modulepreload" crossorigin href="/assets/capgoAdapter-LvGrONDp.js">
+    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-w7pmXQY1.js">
+    <link rel="stylesheet" crossorigin href="/assets/src-De3WpqHP.css">
   </head>
   <body class="h-full bg-background text-foreground">
     <div id="root" class="h-full">

package/dist/mobile.html CHANGED Viewed

@@ -63,7 +63,7 @@
       })();
     </script>
-    <script type="module" crossorigin src="/assets/mobile-C6CUAJNV.js"></script>
+    <script type="module" crossorigin src="/assets/mobile-BkWoFtBb.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-C0FnF6B9.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-base-ui-CnHfUmDN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-zustand-B4dlGEM2.js">
@@ -71,15 +71,17 @@
     <link rel="modulepreload" crossorigin href="/assets/vendor-pathe-vBmvQE8f.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-DLPElpoQ.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-tanstack-query-core-BWz0ose6.js">
-    <link rel="modulepreload" crossorigin href="/assets/persistence-DPNMIbF5.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-CBoBpJ1Z.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-l2R9muux.js">
+    <link rel="modulepreload" crossorigin href="/assets/persistence-D1lIuyqO.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-ZK_vkdzL.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-CewM6-g5.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-opencode-sdk-C07HQypa.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-aparajita-capacitor-secure-storage-CjQdwfjS.js">
-    <link rel="modulepreload" crossorigin href="/assets/gitApiHttp-D8j1qRH4.js">
-    <link rel="modulepreload" crossorigin href="/assets/terminalApi-tB3qLcfa.js">
-    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-BtWi74Pm.js">
-    <link rel="stylesheet" crossorigin href="/assets/src-CQN5yJYP.css">
+    <link rel="modulepreload" crossorigin href="/assets/platform-G8Cxe5wN.js">
+    <link rel="modulepreload" crossorigin href="/assets/terminalApi-os4uWEou.js">
+    <link rel="modulepreload" crossorigin href="/assets/types-BuiqMmh_.js">
+    <link rel="modulepreload" crossorigin href="/assets/capgoAdapter-LvGrONDp.js">
+    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-w7pmXQY1.js">
+    <link rel="stylesheet" crossorigin href="/assets/src-De3WpqHP.css">
   </head>
   <body class="h-full bg-background text-foreground">
     <div id="root" class="h-full"></div>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@openchambery/web",
-  "version": "1.18.2-beta.3",
+  "version": "1.18.2-beta.30",
   "private": false,
   "type": "module",
   "main": "./server/index.js",

package/server/index.js CHANGED Viewed

@@ -1714,6 +1714,13 @@ async function main(options = {}) {
       } catch {
         // best-effort shutdown of the dictation worker
       }
+      try {
+        if (smallModelServiceInstance?.stop) {
+          await smallModelServiceInstance.stop();
+        }
+      } catch {
+        // best-effort cleanup of the small-model temp OpenCode directory
+      }
       return gracefulShutdown({
         exitProcess: shutdownOptions.exitProcess ?? false,
         forceCloseConnections: shutdownOptions.forceCloseConnections === true,

package/server/lib/assistants/DOCUMENTATION.md CHANGED Viewed

@@ -2,7 +2,7 @@
 ## History coverage
-Snapshots expose the latest 50 `historySessionIDs` in chronological order and `historySessionCount` for the full count. The messages pagination endpoint owns complete history, including the current binding. A successful direct, shared, or queued OpenCode admission writes its user message and provisional parts to the Assistant SQLite mirror before the HTTP operation settles; this covered admission row survives binding replacement, restart, and an unavailable OpenCode history endpoint. Matching live parts replace provisional parts by message ID. Other event mirrors retain raw JSON as uncovered rows. Authoritative OpenCode backfill marks rows covered, reconciles authoritative parts, rejects entries whose embedded session ID belongs to another session, and removes uncovered event-only rows after the session reaches completion. Backfill persists the OpenCode `x-next-cursor` header verbatim and derives completion from its presence. A demand request commits up to three upstream pages and returns committed covered rows with a stable scan-boundary cursor when more work remains. Startup begins one non-blocking current-binding backfill page. Archived rows preserve their stored directory; a legacy null directory triggers an authoritative session lookup of `data.directory` and `data.project.worktree`, with containment validation before persistence. Unresolved legacy directories remain `null` in persisted and historical response data. Ordinary mirror upserts preserve covered rows and never blanket-invalidate a session; explicit authoritative upserts elevate coverage; session-wide `invalidateCoverage` preserves every already-covered user row, including admitted rows whose local marker was replaced by live OpenCode info, while resetting other coverage on archive/re-archive; message-scoped coverage invalidation runs only after structural part deletes that require re-backfill. Removing an assistant tombstones the row and deletes its session history, message/part mirrors, and backfill state in one transaction. Schema v11 adds the mirror coverage marker.
+Snapshots expose the latest 50 `historySessionIDs` in chronological order and `historySessionCount` for the full count. The messages pagination endpoint owns complete history, including the current binding. A successful direct, shared, or queued OpenCode admission writes its user message and provisional parts to the Assistant SQLite mirror before the HTTP operation settles; this covered admission row survives binding replacement, restart, and an unavailable OpenCode history endpoint. Matching live parts replace provisional parts by message ID. Other event mirrors retain raw JSON as uncovered (`covered=0`) provisional fallback rows: they remain visible in archived history until an explicit shrink signal. Authoritative OpenCode backfill upserts covered rows and reconciles authoritative parts, rejects entries whose embedded session ID belongs to another session, and never deletes provisional mirrors merely because a successful page omitted them. Pagination `complete` only records that the OpenCode cursor was exhausted; it does not authorize deleting uncovered event mirrors. The only shrink whitelist is explicit `message.removed`, an authoritative `session.messages` 404 (`session-missing`), or assistant deletion. Late archived `message.updated` / `message.part.updated` and session lifecycle events (`session.idle`, `session.error`, `session.status` busy/retry/idle) call `invalidateBackfill` to reopen that session's cursor/complete without clearing covered flags. `history-state.js` owns the pure backfill reducer (`invalidate` → preserve; `page` → complete iff next cursor empty, always preserve; `session-missing` → discard provisional). Backfill persists the OpenCode `x-next-cursor` header verbatim and derives completion from its presence. A demand request commits up to three upstream pages and returns committed archived mirror rows (covered and provisional) with a stable scan-boundary cursor when more work remains. Startup begins one non-blocking current-binding backfill page. Archived rows preserve their stored directory; a legacy null directory triggers an authoritative session lookup of `data.directory` and `data.project.worktree`, with containment validation before persistence. Unresolved legacy directories remain `null` in persisted and historical response data. Ordinary mirror upserts preserve covered rows and never blanket-invalidate a session; explicit authoritative upserts elevate coverage; session-wide `invalidateCoverage` preserves every already-covered user row, including admitted rows whose local marker was replaced by live OpenCode info, while resetting other coverage on archive/re-archive; message-scoped coverage invalidation runs only after structural part deletes that require re-backfill. Removing an assistant tombstones the row and deletes its session history, message/part mirrors, and backfill state in one transaction. Schema v11 adds the mirror coverage marker.
 `assistants` owns Assistant configuration, session bindings, and a durable assistant-owned OpenCode message/part mirror in `assistants.sqlite`. Routes register before the generic OpenCode proxy.
@@ -12,7 +12,7 @@ Snapshots expose the latest 50 `historySessionIDs` in chronological order and `h
 Composer messages carry the expected binding and client message ID. The service confirms the binding, sends through OpenCode `promptAsync`, persists the admitted user row in Assistant SQLite, and returns the binding, client message ID, and admission. OpenCode `204` is an admitted empty response. A 404 restores one generation-scoped binding before retrying. Ambiguous network errors preserve the client message ID without another send. Every committed Assistant revision publishes `openchamber:assistants-changed` only after its SQLite transaction completes; clients use the tip to reload the authoritative snapshot after worker-driven stateless binding changes. `POST /:id/session/abort` requires the same `{ sessionID, sessionGeneration }`, returns the binding and `aborted: true`, reports a changed binding as `revision_conflict`, and preserves upstream missing-session `not_found` semantics.
-`GET /api/openchamber/assistants/:assistantID/messages?before=&limit=` returns archived and current bindings as `{ entries: [{ sessionID, directory, info, parts }], nextCursor, complete }`. It reads assistant-owned mirror rows in chronological session and message order, pages toward older rows with an opaque stable cursor, and preserves the raw OpenCode `info` and `part` JSON. `directory` is the effective workspace for that source session and is nullable for legacy archived rows with an unknown workspace. `complete === (nextCursor === null)` marks arrival at the oldest available history. The service reads the latest persisted `limit + 1` rows first, then demand-backfills one page at a time from the newest incomplete archived session covered by the cursor; a request performs at most three upstream pages and reuses persisted pages without upstream access. Backfill page commits are independent. Each `session.messages` page attempt retries only transient 5xx/network-class SDK failures up to three times with short backoff; persistent failures still throw `upstream_error`. An authoritative OpenCode 404 for an archived or old binding marks that session's backfill complete, deletes only its uncovered event mirrors, preserves covered/admitted rows, and continues scanning other incomplete sessions so one deleted session cannot permanently block Assistant history. Concurrent ensure that replaces a missing current binding archives the old ID and creates a new one; 404 completion never deletes covered history under either identity. A required-page failure surfaces as an upstream error only when no covered SQLite row can satisfy the request; otherwise existing covered rows remain visible and the incomplete cursor stays retryable. Event mirrors remain partial until an explicit complete state or successful backfill establishes coverage. Current-session live sync overrides the matching SQLite message identity in the UI.
+`GET /api/openchamber/assistants/:assistantID/messages?before=&limit=` returns archived and current bindings as `{ entries: [{ sessionID, directory, info, parts }], nextCursor, complete }`. It reads assistant-owned mirror rows in chronological session and message order, pages toward older rows with an opaque stable cursor, and preserves the raw OpenCode `info` and `part` JSON. `directory` is the effective workspace for that source session and is nullable for legacy archived rows with an unknown workspace. `complete === (nextCursor === null)` marks arrival at the oldest available history. The service reads the latest persisted `limit + 1` rows first, then demand-backfills one page at a time from the newest incomplete archived session covered by the cursor; a request performs at most three upstream pages and reuses persisted pages without upstream access. Backfill page commits are independent. Each `session.messages` page attempt retries only transient 5xx/network-class SDK failures up to three times with short backoff; persistent failures still throw `upstream_error`. An authoritative OpenCode 404 for an archived or old binding marks that session's backfill complete via the `session-missing` reducer path, deletes only its uncovered event mirrors, preserves covered/admitted rows, and continues scanning other incomplete sessions so one deleted session cannot permanently block Assistant history. Successful backfill pages upsert authoritative rows without clearing provisional mirrors missing from that snapshot. Concurrent ensure that replaces a missing current binding archives the old ID and creates a new one; 404 completion never deletes covered history under either identity. A required-page failure surfaces as an upstream error only when the current request's `pageRows()` is empty; when the current range already has covered or provisional rows, the service returns that partial result and keeps the incomplete cursor retryable. Provisional event mirrors stay readable as `covered=0` fallbacks until a shrink-whitelist signal or a later authoritative upsert elevates them. Current-session live sync overrides the matching SQLite message identity in the UI.
 Queue admission accepts `{ kind: 'assistant', assistantID }`, captures a structured binding plus provider, model, agent, nullable variant, default prompt/system, compiled text parts, and durable attachment descriptors. Direct messages, shares, and queued Assistant deliveries accept up to 129 strict OpenCode text/file parts, including up to 64 file parts. Queue dispatch uses `sendWithCapturedConfig`, so queued work never reads mutable Assistant configuration. Continuous delivery retains binding fencing and a changed binding produces `stale_target`. Stateless delivery instead belongs to the stable `assistant:<assistantID>` queue lane: it ignores disposable binding replacement, serializes prompt admissions per Assistant, and creates a fresh execution Session for every row.

package/server/lib/assistants/history-state.js ADDED Viewed

@@ -0,0 +1,23 @@
+/**
+ * Pure backfill pagination reducer for Assistant history mirrors.
+ * Disposition tells the service whether provisional (covered=0) rows may be dropped.
+ */
+export const reduceBackfillState = (state, event) => {
+  const type = typeof event === 'string' ? event : event?.type;
+  if (type === 'invalidate') {
+    return { cursor: null, complete: false, disposition: 'preserve' };
+  }
+  if (type === 'page') {
+    const raw = event?.nextCursor;
+    const nextCursor = typeof raw === 'string' && raw.length > 0 ? raw : null;
+    return { cursor: nextCursor, complete: nextCursor == null, disposition: 'preserve' };
+  }
+  if (type === 'session-missing') {
+    return { cursor: null, complete: true, disposition: 'discard-provisional' };
+  }
+  return {
+    cursor: state?.cursor ?? null,
+    complete: Boolean(state?.complete),
+    disposition: 'preserve',
+  };
+};

package/server/lib/assistants/history-state.test.js ADDED Viewed

@@ -0,0 +1,57 @@
+import { describe, expect, it } from 'vitest';
+import { reduceBackfillState } from './history-state.js';
+describe('reduceBackfillState', () => {
+  it.each([
+    {
+      name: 'invalidate resets cursor/complete and preserves provisionals',
+      state: { cursor: 'opaque-1', complete: true },
+      event: 'invalidate',
+      expected: { cursor: null, complete: false, disposition: 'preserve' },
+    },
+    {
+      name: 'invalidate from incomplete state',
+      state: { cursor: 'opaque-2', complete: false },
+      event: { type: 'invalidate' },
+      expected: { cursor: null, complete: false, disposition: 'preserve' },
+    },
+    {
+      name: 'page with next cursor stays incomplete and preserves',
+      state: { cursor: null, complete: false },
+      event: { type: 'page', nextCursor: 'opaque-3' },
+      expected: { cursor: 'opaque-3', complete: false, disposition: 'preserve' },
+    },
+    {
+      name: 'page with empty cursor completes and preserves',
+      state: { cursor: 'opaque-3', complete: false },
+      event: { type: 'page', nextCursor: null },
+      expected: { cursor: null, complete: true, disposition: 'preserve' },
+    },
+    {
+      name: 'page with empty string cursor completes and preserves',
+      state: { cursor: 'opaque-4', complete: false },
+      event: { type: 'page', nextCursor: '' },
+      expected: { cursor: null, complete: true, disposition: 'preserve' },
+    },
+    {
+      name: 'session-missing completes and discards provisionals',
+      state: { cursor: 'opaque-5', complete: false },
+      event: 'session-missing',
+      expected: { cursor: null, complete: true, disposition: 'discard-provisional' },
+    },
+    {
+      name: 'session-missing from complete state',
+      state: { cursor: null, complete: true },
+      event: { type: 'session-missing' },
+      expected: { cursor: null, complete: true, disposition: 'discard-provisional' },
+    },
+    {
+      name: 'unknown event preserves state',
+      state: { cursor: 'opaque-6', complete: true },
+      event: { type: 'unknown' },
+      expected: { cursor: 'opaque-6', complete: true, disposition: 'preserve' },
+    },
+  ])('$name', ({ state, event, expected }) => {
+    expect(reduceBackfillState(state, event)).toEqual(expected);
+  });
+});

package/server/lib/assistants/service.js CHANGED Viewed

@@ -4,6 +4,7 @@ import { createRequire } from 'node:module';
 import path from 'node:path';
 import { createOpencodeClient } from '@opencode-ai/sdk/v2';
 import { validAssistantDeliveryParts } from '../assistant-delivery-parts.js';
+import { reduceBackfillState } from './history-state.js';
 const require = createRequire(import.meta.url);
 const SCHEMA_VERSION = 11;
@@ -222,6 +223,12 @@ export const createAssistantsService = ({ dbPath, dataDir, buildOpenCodeUrl, get
     db.prepare('UPDATE assistant_message_mirror SET covered=0 WHERE assistant_id=? AND session_id=?').run(assistantID, sessionID);
     db.prepare('INSERT INTO assistant_message_backfill(assistant_id,session_id,cursor,complete,updated_at) VALUES (?,?,?,?,?) ON CONFLICT(assistant_id,session_id) DO UPDATE SET cursor=NULL,complete=0,updated_at=excluded.updated_at').run(assistantID, sessionID, null, 0, now());
   };
+  // Reopen demand backfill without clearing covered/provisional mirrors.
+  const invalidateBackfill = (assistantID, sessionID) => {
+    const current = db.prepare('SELECT cursor,complete FROM assistant_message_backfill WHERE assistant_id=? AND session_id=?').get(assistantID, sessionID);
+    const next = reduceBackfillState({ cursor: current?.cursor ?? null, complete: Boolean(current?.complete) }, 'invalidate');
+    db.prepare('INSERT INTO assistant_message_backfill(assistant_id,session_id,cursor,complete,updated_at) VALUES (?,?,?,?,?) ON CONFLICT(assistant_id,session_id) DO UPDATE SET cursor=excluded.cursor,complete=excluded.complete,updated_at=excluded.updated_at').run(assistantID, sessionID, next.cursor, next.complete ? 1 : 0, now());
+  };
   // Structural part deletes may leave a covered message incomplete; re-demand that session only.
   // Do not blanket-uncover on ordinary message/part upserts — that blanks served history until re-backfill.
   const invalidateMessageCoverage = (assistantID, sessionID, messageID) => {
@@ -235,12 +242,12 @@ export const createAssistantsService = ({ dbPath, dataDir, buildOpenCodeUrl, get
     if (payload.type === 'message.updated') {
       const info = properties.info; const sessionID = info?.sessionID;
       if (!nonEmptyString(sessionID) || !plainObject(info)) return false;
-      const assistants = mappedAssistants(sessionID); for (const assistantID of assistants) mirrorMessage(assistantID, sessionID, info, undefined, assistant(assistantID)?.current_session_id === sessionID); return assistants.length > 0;
+      const assistants = mappedAssistants(sessionID); for (const assistantID of assistants) { const current = assistant(assistantID)?.current_session_id === sessionID; mirrorMessage(assistantID, sessionID, info, undefined, current); if (!current) invalidateBackfill(assistantID, sessionID); } return assistants.length > 0;
     }
     if (payload.type === 'message.part.updated') {
       const part = properties.part; const sessionID = properties.sessionID ?? part?.sessionID;
       if (!nonEmptyString(sessionID) || !plainObject(part)) return false;
-      const assistants = mappedAssistants(sessionID); for (const assistantID of assistants) { db.prepare("DELETE FROM assistant_message_part_mirror WHERE assistant_id=? AND session_id=? AND message_id=? AND part_id GLOB 'oc_asst_admission:*'").run(assistantID, sessionID, part.messageID); mirrorPart(assistantID, sessionID, part); } return assistants.length > 0;
+      const assistants = mappedAssistants(sessionID); for (const assistantID of assistants) { db.prepare("DELETE FROM assistant_message_part_mirror WHERE assistant_id=? AND session_id=? AND message_id=? AND part_id GLOB 'oc_asst_admission:*'").run(assistantID, sessionID, part.messageID); mirrorPart(assistantID, sessionID, part); if (assistant(assistantID)?.current_session_id !== sessionID) invalidateBackfill(assistantID, sessionID); } return assistants.length > 0;
     }
     if (payload.type === 'message.removed') {
       const sessionID = properties.sessionID; const messageID = properties.messageID;
@@ -252,6 +259,18 @@ export const createAssistantsService = ({ dbPath, dataDir, buildOpenCodeUrl, get
       if (!nonEmptyString(sessionID) || !nonEmptyString(messageID) || !nonEmptyString(partID)) return false;
       const assistants = mappedAssistants(sessionID); for (const assistantID of assistants) { db.prepare('DELETE FROM assistant_message_part_mirror WHERE assistant_id=? AND session_id=? AND message_id=? AND part_id=?').run(assistantID, sessionID, messageID, partID); if (assistant(assistantID)?.current_session_id !== sessionID) invalidateMessageCoverage(assistantID, sessionID, messageID); } return assistants.length > 0;
     }
+    if (payload.type === 'session.idle' || payload.type === 'session.error') {
+      const sessionID = properties.sessionID;
+      if (!nonEmptyString(sessionID)) return false;
+      const assistants = mappedAssistants(sessionID); for (const assistantID of assistants) { if (assistant(assistantID)?.current_session_id !== sessionID) invalidateBackfill(assistantID, sessionID); } return assistants.some((assistantID) => assistant(assistantID)?.current_session_id !== sessionID);
+    }
+    if (payload.type === 'session.status') {
+      const sessionID = properties.sessionID;
+      const statusType = typeof properties.status?.type === 'string' ? properties.status.type : typeof properties.info?.type === 'string' ? properties.info.type : '';
+      if (!nonEmptyString(sessionID) || !nonEmptyString(statusType)) return false;
+      if (statusType !== 'busy' && statusType !== 'retry' && statusType !== 'idle') return false;
+      const assistants = mappedAssistants(sessionID); for (const assistantID of assistants) { if (assistant(assistantID)?.current_session_id !== sessionID) invalidateBackfill(assistantID, sessionID); } return assistants.some((assistantID) => assistant(assistantID)?.current_session_id !== sessionID);
+    }
     return false;
   };
   const resolveArchivedDirectory = (assistantID, ...candidates) => {
@@ -265,8 +284,8 @@ export const createAssistantsService = ({ dbPath, dataDir, buildOpenCodeUrl, get
     db.prepare('DELETE FROM assistant_message_part_mirror WHERE assistant_id=? AND session_id=? AND message_id IN (SELECT message_id FROM assistant_message_mirror WHERE assistant_id=? AND session_id=? AND covered=0)').run(assistantID, sessionID, assistantID, sessionID);
     db.prepare('DELETE FROM assistant_message_mirror WHERE assistant_id=? AND session_id=? AND covered=0').run(assistantID, sessionID);
   };
-  const markSessionBackfillComplete = (assistantID, sessionID) => {
-    db.prepare('INSERT INTO assistant_message_backfill(assistant_id,session_id,cursor,complete,updated_at) VALUES (?,?,?,?,?) ON CONFLICT(assistant_id,session_id) DO UPDATE SET cursor=excluded.cursor,complete=excluded.complete,updated_at=excluded.updated_at').run(assistantID, sessionID, null, 1, now());
+  const writeBackfillState = (assistantID, sessionID, next) => {
+    db.prepare('INSERT INTO assistant_message_backfill(assistant_id,session_id,cursor,complete,updated_at) VALUES (?,?,?,?,?) ON CONFLICT(assistant_id,session_id) DO UPDATE SET cursor=excluded.cursor,complete=excluded.complete,updated_at=excluded.updated_at').run(assistantID, sessionID, next.cursor, next.complete ? 1 : 0, now());
   };
   // Authoritative 404 means this session ID is gone from OpenCode. Converge its
   // backfill so one deleted archive cannot block demand scans of other sessions.
@@ -276,8 +295,10 @@ export const createAssistantsService = ({ dbPath, dataDir, buildOpenCodeUrl, get
   const completeMissingSessionBackfill = (assistantID, sessionID) => {
     db.exec('BEGIN IMMEDIATE');
     try {
-      clearUncoveredSessionMirror(assistantID, sessionID);
-      markSessionBackfillComplete(assistantID, sessionID);
+      const current = db.prepare('SELECT cursor,complete FROM assistant_message_backfill WHERE assistant_id=? AND session_id=?').get(assistantID, sessionID);
+      const next = reduceBackfillState({ cursor: current?.cursor ?? null, complete: Boolean(current?.complete) }, 'session-missing');
+      if (next.disposition === 'discard-provisional') clearUncoveredSessionMirror(assistantID, sessionID);
+      writeBackfillState(assistantID, sessionID, next);
       db.exec('COMMIT');
       return true;
     } catch (error) { db.exec('ROLLBACK'); throw error; }
@@ -318,11 +339,13 @@ export const createAssistantsService = ({ dbPath, dataDir, buildOpenCodeUrl, get
     try {
       entries.forEach((entry) => { const info = entry?.info ?? entry; if (nonEmptyString(info?.sessionID) && info.sessionID !== history.session_id) return; const parts = Array.isArray(entry?.parts) ? entry.parts : []; const messageOrdinal = Number.isSafeInteger(info?.time?.created) ? info.time.created : undefined; mirrorMessage(history.assistant_id, history.session_id, info, messageOrdinal, true); const partIDs = parts.filter((part) => nonEmptyString(part?.id)).map((part) => part.id); if (partIDs.length) db.prepare(`DELETE FROM assistant_message_part_mirror WHERE assistant_id=? AND session_id=? AND message_id=? AND part_id NOT IN (${partIDs.map(() => '?').join(',')})`).run(history.assistant_id, history.session_id, info?.id, ...partIDs); else db.prepare('DELETE FROM assistant_message_part_mirror WHERE assistant_id=? AND session_id=? AND message_id=?').run(history.assistant_id, history.session_id, info?.id); parts.forEach((part, partIndex) => mirrorPart(history.assistant_id, history.session_id, part, partIndex + 1)); });
       const nextCursor = result?.response?.headers?.get('x-next-cursor') ?? null;
-      const complete = !nextCursor;
-      if (complete) clearUncoveredSessionMirror(history.assistant_id, history.session_id);
-      db.prepare('INSERT INTO assistant_message_backfill(assistant_id,session_id,cursor,complete,updated_at) VALUES (?,?,?,?,?) ON CONFLICT(assistant_id,session_id) DO UPDATE SET cursor=excluded.cursor,complete=excluded.complete,updated_at=excluded.updated_at').run(history.assistant_id, history.session_id, nextCursor, complete ? 1 : 0, now());
+      const next = reduceBackfillState({ cursor, complete: false }, { type: 'page', nextCursor });
+      // Successful pages only upsert authoritative rows; never delete provisional
+      // event mirrors that the snapshot omitted — only 404 / message.removed /
+      // assistant deletion may shrink the message set.
+      writeBackfillState(history.assistant_id, history.session_id, next);
       db.exec('COMMIT');
-      return complete;
+      return next.complete;
     } catch (error) { db.exec('ROLLBACK'); throw error; }
   };
   const decodeCursor = (value) => { if (value == null || value === '') return null; try { const parsed = parse(Buffer.from(String(value), 'base64url').toString('utf8')); return Number.isSafeInteger(parsed?.sessionOrdinal) && Number.isSafeInteger(parsed?.messageOrdinal) && nonEmptyString(parsed?.messageID) && (parsed.scanSessionOrdinal == null || Number.isSafeInteger(parsed.scanSessionOrdinal)) ? parsed : fail('validation_error'); } catch (error) { if (error instanceof AssistantError) throw error; fail('validation_error'); } };
@@ -333,7 +356,10 @@ export const createAssistantsService = ({ dbPath, dataDir, buildOpenCodeUrl, get
     const currentIsArchived = row.current_session_id != null && Boolean(db.prepare('SELECT 1 FROM assistant_session_history WHERE assistant_id=? AND session_id=?').get(row.assistant_id, row.current_session_id));
     const beforeIncludes = (sessionOrdinal, messageOrdinal, messageID) => before == null || sessionOrdinal < before.sessionOrdinal || (sessionOrdinal === before.sessionOrdinal && (messageOrdinal < before.messageOrdinal || (messageOrdinal === before.messageOrdinal && messageID < before.messageID)));
     const pageRows = () => {
-      const historical = db.prepare(`SELECT h.ordinal AS session_ordinal,h.directory,m.ordinal AS message_ordinal,m.message_id,m.info_json,m.session_id FROM assistant_session_history h JOIN assistant_message_mirror m ON m.assistant_id=h.assistant_id AND m.session_id=h.session_id WHERE h.assistant_id=? AND m.covered=1 AND (? IS NULL OR h.ordinal<? OR (h.ordinal=? AND (m.ordinal<? OR (m.ordinal=? AND m.message_id<?)))) ORDER BY h.ordinal DESC,m.ordinal DESC,m.message_id DESC LIMIT ?`).all(row.assistant_id, before?.sessionOrdinal ?? null, before?.sessionOrdinal ?? 0, before?.sessionOrdinal ?? 0, before?.messageOrdinal ?? 0, before?.messageOrdinal ?? 0, before?.messageID ?? '', limit + 1);
+      // Archived mirrors include covered=1 authoritative rows and covered=0
+      // provisional event mirrors so a partial REST snapshot cannot hide a reply
+      // already observed on the live channel.
+      const historical = db.prepare(`SELECT h.ordinal AS session_ordinal,h.directory,m.ordinal AS message_ordinal,m.message_id,m.info_json,m.session_id FROM assistant_session_history h JOIN assistant_message_mirror m ON m.assistant_id=h.assistant_id AND m.session_id=h.session_id WHERE h.assistant_id=? AND (? IS NULL OR h.ordinal<? OR (h.ordinal=? AND (m.ordinal<? OR (m.ordinal=? AND m.message_id<?)))) ORDER BY h.ordinal DESC,m.ordinal DESC,m.message_id DESC LIMIT ?`).all(row.assistant_id, before?.sessionOrdinal ?? null, before?.sessionOrdinal ?? 0, before?.sessionOrdinal ?? 0, before?.messageOrdinal ?? 0, before?.messageOrdinal ?? 0, before?.messageID ?? '', limit + 1);
       const current = row.current_session_id && !currentIsArchived
         ? db.prepare('SELECT ? AS session_ordinal,? AS directory,ordinal AS message_ordinal,message_id,info_json,session_id FROM assistant_message_mirror WHERE assistant_id=? AND session_id=? AND covered=1 ORDER BY ordinal DESC,message_id DESC LIMIT ?').all(currentSessionOrdinal, effectiveWorkspace(row), row.assistant_id, row.current_session_id, limit + 1).filter((message) => beforeIncludes(message.session_ordinal, message.message_ordinal, message.message_id))
         : [];
@@ -341,15 +367,18 @@ export const createAssistantsService = ({ dbPath, dataDir, buildOpenCodeUrl, get
     };
     const nextIncomplete = (boundary = before?.scanSessionOrdinal ?? before?.sessionOrdinal ?? null) => db.prepare(`SELECT h.* FROM assistant_session_history h LEFT JOIN assistant_message_backfill b ON b.assistant_id=h.assistant_id AND b.session_id=h.session_id WHERE h.assistant_id=? AND (b.complete IS NULL OR b.complete=0) AND (? IS NULL OR h.ordinal<=?) ORDER BY h.ordinal DESC LIMIT 1`).get(row.assistant_id, boundary, boundary ?? 0);
     let rows = pageRows();
-    for (let page = 0; rows.length < limit + 1 && page < BACKFILL_MAX_PAGES; page++) {
+    // Demand-backfill incomplete archived sessions even when provisional
+    // mirrors already fill the page, so authoritative upserts can elevate
+    // covered=0 fallbacks. Cap remains BACKFILL_MAX_PAGES per request.
+    for (let page = 0; page < BACKFILL_MAX_PAGES; page++) {
       const target = nextIncomplete();
       if (!target) break;
       try {
         await backfillSession(target);
       } catch (error) {
-        // A persisted admitted row is already useful authoritative Assistant
-        // history. Preserve and serve it while leaving the incomplete cursor
-        // retryable instead of turning an OpenCode outage into an empty wall.
+        // Partial-result scope is this request's pageRows() only: any already
+        // visible covered or provisional row keeps the page usable and the
+        // incomplete cursor retryable. An empty current page still throws.
         if (rows.length === 0) throw error;
         break;
       }

package/server/lib/assistants/service.test.js CHANGED Viewed

@@ -363,8 +363,15 @@ describe('assistants service', () => {
     service.processEvent({ type: 'message.updated', properties: { info: { id: 'msg_saved', sessionID: first.sessionID, role: 'assistant', time: { created: 1 } } } }); service.close();
     const Database = require('better-sqlite3'); const db = new Database(path.join(directory, 'assistants.sqlite')); db.prepare('DELETE FROM assistant_message_backfill').run(); db.prepare('INSERT INTO assistant_message_backfill(assistant_id,session_id,cursor,complete,updated_at) VALUES (?,?,?,?,?)').run(assistant.id, first.sessionID, null, 0, 1); db.close();
     const restarted = setup(directory, { messages: async () => ({ error: { status: 503 } }) });
-    await expect(restarted.historicalMessages(assistant.id, { limit: 10 })).rejects.toMatchObject({ code: 'upstream_error' }); restarted.close();
-    const persisted = new Database(path.join(directory, 'assistants.sqlite')); expect(persisted.prepare('SELECT message_id FROM assistant_message_mirror').all()).toEqual([{ message_id: 'msg_saved' }]); persisted.close();
+    const page = await restarted.historicalMessages(assistant.id, { limit: 10 });
+    expect(page.entries.map((entry) => entry.info.id)).toEqual(['msg_saved']);
+    expect(page.complete).toBe(false);
+    expect(page.nextCursor).toEqual(expect.any(String));
+    restarted.close();
+    const persisted = new Database(path.join(directory, 'assistants.sqlite'));
+    expect(persisted.prepare('SELECT message_id,covered FROM assistant_message_mirror').all()).toEqual([{ message_id: 'msg_saved', covered: 0 }]);
+    expect(persisted.prepare('SELECT complete FROM assistant_message_backfill WHERE session_id=?').get(first.sessionID)).toEqual({ complete: 0 });
+    persisted.close();
   });
   it('retries a transient session.messages failure once then succeeds', async () => {
@@ -501,14 +508,14 @@ describe('assistants service', () => {
     expect((await restarted.historicalMessages(assistant.id)).entries[0]).toMatchObject({ sessionID: first.sessionID, directory: null }); const historicalRequest = messages.find((input) => input.sessionID === first.sessionID); expect(historicalRequest).toMatchObject({ sessionID: first.sessionID }); expect(historicalRequest.directory).toBeUndefined(); const persisted = new Database(path.join(directory, 'assistants.sqlite')); expect(persisted.prepare('SELECT directory FROM assistant_session_history WHERE assistant_id=? AND session_id=?').get(assistant.id, first.sessionID).directory).toBeNull(); persisted.close(); restarted.close();
   });
-  it('keeps covered history visible across ordinary message events without re-backfill', async () => {
+  it('keeps covered history visible across ordinary message events without clearing coverage', async () => {
     const directory = root(); let creates = 0; let calls = 0;
     const service = setup(directory, {
       create: async () => ({ data: { id: `ses_${++creates}` } }),
       messages: async ({ sessionID }) => {
         calls += 1;
         return {
-          data: [{ info: { id: 'msg_1', sessionID, role: 'assistant', time: { created: 1 } }, parts: [{ id: 'part_1', sessionID, messageID: 'msg_1', type: 'text', text: 'hello' }] }],
+          data: [{ info: { id: 'msg_1', sessionID, role: 'assistant', time: { created: 1 }, status: 'completed' }, parts: [{ id: 'part_1', sessionID, messageID: 'msg_1', type: 'text', text: 'hello updated' }] }],
           response: { headers: { get: () => null } },
         };
       },
@@ -520,13 +527,121 @@ describe('assistants service', () => {
     expect(calls).toBe(1);
     service.processEvent({ type: 'message.updated', properties: { info: { id: 'msg_1', sessionID: first.sessionID, role: 'assistant', time: { created: 1 }, status: 'completed' } } });
     service.processEvent({ type: 'message.part.updated', properties: { sessionID: first.sessionID, part: { id: 'part_1', sessionID: first.sessionID, messageID: 'msg_1', type: 'text', text: 'hello updated' } } });
+    const Database = require('better-sqlite3');
+    const db = new Database(path.join(directory, 'assistants.sqlite'));
+    expect(db.prepare('SELECT covered FROM assistant_message_mirror WHERE session_id=? AND message_id=?').get(first.sessionID, 'msg_1')).toEqual({ covered: 1 });
+    expect(db.prepare('SELECT cursor,complete FROM assistant_message_backfill WHERE session_id=?').get(first.sessionID)).toEqual({ cursor: null, complete: 0 });
+    db.close();
     expect((await service.historicalMessages(assistant.id)).entries).toEqual([{
       sessionID: first.sessionID,
       directory: expect.any(String),
       info: { id: 'msg_1', sessionID: first.sessionID, role: 'assistant', time: { created: 1 }, status: 'completed' },
       parts: [{ id: 'part_1', sessionID: first.sessionID, messageID: 'msg_1', type: 'text', text: 'hello updated' }],
     }]);
-    expect(calls).toBe(1);
+    expect(calls).toBe(2);
+    const after = new Database(path.join(directory, 'assistants.sqlite'));
+    expect(after.prepare('SELECT covered FROM assistant_message_mirror WHERE session_id=? AND message_id=?').get(first.sessionID, 'msg_1')).toEqual({ covered: 1 });
+    after.close();
+    service.close();
+  });
+  it('keeps a provisional archived assistant reply when the first backfill page only returns the user row', async () => {
+    const directory = root();
+    let creates = 0;
+    let archivedPages = 0;
+    let allowFullArchive = false;
+    const service = setup(directory, {
+      create: async () => ({ data: { id: `ses_${++creates}` } }),
+      promptAsync: async () => ({ response: { status: 204 } }),
+      messages: async ({ sessionID }) => {
+        if (sessionID !== 'ses_2') return { data: [], response: { headers: { get: () => null } } };
+        archivedPages += 1;
+        if (!allowFullArchive) {
+          return {
+            data: [{ info: { id: 'msg_user_1', sessionID, role: 'user', time: { created: 10 } }, parts: [{ id: 'part_user_1', sessionID, messageID: 'msg_user_1', type: 'text', text: 'one' }] }],
+            response: { headers: { get: () => null } },
+          };
+        }
+        return {
+          data: [
+            { info: { id: 'msg_reply_1', sessionID, role: 'assistant', time: { created: 20 } }, parts: [{ id: 'part_reply_1', sessionID, messageID: 'msg_reply_1', type: 'text', text: 'reply-one' }] },
+            { info: { id: 'msg_user_1', sessionID, role: 'user', time: { created: 10 } }, parts: [{ id: 'part_user_1', sessionID, messageID: 'msg_user_1', type: 'text', text: 'one' }] },
+          ],
+          response: { headers: { get: () => null } },
+        };
+      },
+    });
+    const assistant = service.createAssistant({ ...assistantInput, mode: 'stateless' });
+    const initial = await service.ensure(assistant.id);
+    expect(initial.sessionID).toBe('ses_1');
+    // Stateless send replaces the binding: execution lives on a fresh session.
+    const first = await service.send(assistant.id, { ...initial, messageID: 'msg_user_1', parts: [{ type: 'text', text: 'one' }] });
+    expect(first.binding.sessionID).toBe('ses_2');
+    service.processEvent({ type: 'message.updated', properties: { info: { id: 'msg_user_1', sessionID: first.binding.sessionID, role: 'user', time: { created: 10 } } } });
+    service.processEvent({ type: 'message.updated', properties: { info: { id: 'msg_reply_1', sessionID: first.binding.sessionID, role: 'assistant', time: { created: 20 } } } });
+    service.processEvent({ type: 'message.part.updated', properties: { sessionID: first.binding.sessionID, part: { id: 'part_reply_1', sessionID: first.binding.sessionID, messageID: 'msg_reply_1', type: 'text', text: 'reply-one' } } });
+    await service.send(assistant.id, { ...first.binding, messageID: 'msg_user_2', parts: [{ type: 'text', text: 'two' }] });
+    const page = await service.historicalMessages(assistant.id, { limit: 10 });
+    expect(page.entries.map((entry) => [entry.sessionID, entry.info.id, entry.info.role])).toEqual(expect.arrayContaining([
+      [first.binding.sessionID, 'msg_user_1', 'user'],
+      [first.binding.sessionID, 'msg_reply_1', 'assistant'],
+    ]));
+    expect(page.complete).toBe(true);
+    expect(archivedPages).toBe(1);
+    const Database = require('better-sqlite3');
+    const persisted = new Database(path.join(directory, 'assistants.sqlite'));
+    expect(persisted.prepare('SELECT message_id,covered FROM assistant_message_mirror WHERE session_id=? ORDER BY message_id').all(first.binding.sessionID)).toEqual(expect.arrayContaining([
+      { message_id: 'msg_reply_1', covered: 0 },
+      { message_id: 'msg_user_1', covered: 1 },
+    ]));
+    expect(persisted.prepare('SELECT message_id FROM assistant_message_mirror WHERE session_id=? AND message_id=?').get(first.binding.sessionID, 'msg_reply_1')).toEqual({ message_id: 'msg_reply_1' });
+    persisted.close();
+    allowFullArchive = true;
+    service.processEvent({ type: 'session.idle', properties: { sessionID: first.binding.sessionID } });
+    const upgraded = await service.historicalMessages(assistant.id, { limit: 10 });
+    expect(upgraded.entries.map((entry) => [entry.sessionID, entry.info.id, entry.info.role])).toEqual(expect.arrayContaining([
+      [first.binding.sessionID, 'msg_user_1', 'user'],
+      [first.binding.sessionID, 'msg_reply_1', 'assistant'],
+    ]));
+    expect(archivedPages).toBe(2);
+    const after = new Database(path.join(directory, 'assistants.sqlite'));
+    expect(after.prepare('SELECT covered FROM assistant_message_mirror WHERE session_id=? AND message_id=?').get(first.binding.sessionID, 'msg_reply_1')).toEqual({ covered: 1 });
+    after.close();
+    service.close();
+  });
+  it.each([
+    ['message.updated', (sessionID) => ({ type: 'message.updated', properties: { info: { id: 'msg_late', sessionID, role: 'assistant', time: { created: 99 } } } })],
+    ['message.part.updated', (sessionID) => ({ type: 'message.part.updated', properties: { sessionID, part: { id: 'part_late', sessionID, messageID: 'msg_1', type: 'text', text: 'late' } } })],
+    ['session.idle', (sessionID) => ({ type: 'session.idle', properties: { sessionID } })],
+    ['session.error', (sessionID) => ({ type: 'session.error', properties: { sessionID } })],
+    ['session.status busy', (sessionID) => ({ type: 'session.status', properties: { sessionID, status: { type: 'busy' } } })],
+    ['session.status retry via info', (sessionID) => ({ type: 'session.status', properties: { sessionID, info: { type: 'retry' } } })],
+    ['session.status idle', (sessionID) => ({ type: 'session.status', properties: { sessionID, status: { type: 'idle' } } })],
+  ])('reopens archived backfill on %s while preserving covered rows', async (_label, buildEvent) => {
+    const directory = root();
+    let creates = 0;
+    const service = setup(directory, {
+      create: async () => ({ data: { id: `ses_${++creates}` } }),
+      messages: async ({ sessionID }) => ({
+        data: [{ info: { id: 'msg_1', sessionID, role: 'assistant', time: { created: 1 } }, parts: [{ id: 'part_1', sessionID, messageID: 'msg_1', type: 'text', text: 'hello' }] }],
+        response: { headers: { get: () => null } },
+      }),
+    });
+    const assistant = service.createAssistant({ ...assistantInput, mode: 'stateless' });
+    const first = await service.ensure(assistant.id);
+    await service.createNew(assistant.id);
+    await service.historicalMessages(assistant.id, { limit: 10 });
+    const Database = require('better-sqlite3');
+    const before = new Database(path.join(directory, 'assistants.sqlite'));
+    expect(before.prepare('SELECT covered FROM assistant_message_mirror WHERE session_id=? AND message_id=?').get(first.sessionID, 'msg_1')).toEqual({ covered: 1 });
+    expect(before.prepare('SELECT cursor,complete FROM assistant_message_backfill WHERE session_id=?').get(first.sessionID)).toEqual({ cursor: null, complete: 1 });
+    before.close();
+    expect(service.processEvent(buildEvent(first.sessionID))).toBe(true);
+    const after = new Database(path.join(directory, 'assistants.sqlite'));
+    expect(after.prepare('SELECT covered FROM assistant_message_mirror WHERE session_id=? AND message_id=?').get(first.sessionID, 'msg_1')).toEqual({ covered: 1 });
+    expect(after.prepare('SELECT cursor,complete FROM assistant_message_backfill WHERE session_id=?').get(first.sessionID)).toEqual({ cursor: null, complete: 0 });
+    after.close();
     service.close();
   });

package/server/lib/config-sync/DOCUMENTATION.md CHANGED Viewed

@@ -15,7 +15,7 @@ Own the direction-agnostic OpenCode config sync contract: allowlist planning on
 | `selections.js` | Default/normalize/filter whitelist selections |
 | `scripts.js` | Probe / inventory / generational prepare / finalize / remote tar scripts |
 | `local-backup.js` | Local (pull destination) generational backup + tar extract |
-| `tar.js` | `collectLocalTarBuffer` (buffered today; streaming reserved by putTar payload type) |
+| `tar.js` | `collectLocalTarBuffer` (buffered) |
 | `engine.js` | `applyConfigSyncPlan` orchestration for **push** (prepare → putTar* → finalize) |
 | `credential-auth.js` | Credential grant enforcement helpers |
 | `target-id.js` | `ssh:<instanceId>` namespace helper |
@@ -24,7 +24,7 @@ Own the direction-agnostic OpenCode config sync contract: allowlist planning on
 - **SyncTarget**: `{ id, kind, capabilities: { posixShell, tarExtract, authFileWrite } }`
 - **TargetExecutor**: `{ probe(plan), prepare(plan, { syncRunId }), putTar({ kind, payload }), finalize(plan, { syncRunId }) }`
-  - `payload`: `Buffer | Uint8Array | AsyncIterable<Uint8Array> | Readable` — SSH currently buffers; relay may stream later.
+  - `payload`: `Buffer | Uint8Array` — all executors currently buffer; reintroduce streaming only when a transport needs it.
 - **Plan** (source-computed): `{ direction: 'push' | 'pull', syncRunId?, sourceTargetId?, targetId?, files, directories, agentsRoot, authFile, deletes, totalBytes, selections? }`
 - **Selections**: `{ fileGroups: boolean[], singleFiles: boolean[], directories: boolean[], agentsRoot: boolean, authFile: boolean }`
   - Preview and apply must share one selections snapshot so the confirmed scope cannot drift.