npm - @openchambery/web - Versions diffs - 1.18.4 → 1.18.6-beta.1 - Mend

@openchambery/web 1.18.4 → 1.18.6-beta.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (114) hide show

package/dist/index.html CHANGED Viewed

@@ -552,25 +552,25 @@
         opacity: 0.72;
       }
     </style>
-    <script type="module" crossorigin src="/assets/main-CTzdOaGn.js"></script>
+    <script type="module" crossorigin src="/assets/main-M0K2vB13.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-C0FnF6B9.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-base-ui-CnHfUmDN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-zustand-B4dlGEM2.js">
-    <link rel="modulepreload" crossorigin href="/assets/useUIStore-NfqK-HA7.js">
+    <link rel="modulepreload" crossorigin href="/assets/useUIStore-DzwCfRqr.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-pathe-vBmvQE8f.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-DLPElpoQ.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-tanstack-query-core-BWz0ose6.js">
-    <link rel="modulepreload" crossorigin href="/assets/persistence-vZ7H8WKh.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-Cr3LE55y.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-VfMK9fdk.js">
+    <link rel="modulepreload" crossorigin href="/assets/persistence-6sclr7B6.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-Txp4xOVQ.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-C_FSEHKM.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-opencode-sdk-C07HQypa.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-aparajita-capacitor-secure-storage-CjQdwfjS.js">
-    <link rel="modulepreload" crossorigin href="/assets/platform-CTaznShj.js">
-    <link rel="modulepreload" crossorigin href="/assets/terminalApi-KDUc5mh2.js">
+    <link rel="modulepreload" crossorigin href="/assets/platform-CbeLpKPk.js">
+    <link rel="modulepreload" crossorigin href="/assets/terminalApi-BpPeXWIu.js">
     <link rel="modulepreload" crossorigin href="/assets/types-BuiqMmh_.js">
     <link rel="modulepreload" crossorigin href="/assets/capgoAdapter-DCowZ2ab.js">
-    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-CCrS3B1v.js">
-    <link rel="stylesheet" crossorigin href="/assets/src-Dbdlm5x1.css">
+    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-D8mh3gFs.js">
+    <link rel="stylesheet" crossorigin href="/assets/src-BDOLh3pc.css">
   </head>
   <body class="h-full bg-background text-foreground">
     <!-- Keep the startup layer outside #root. React replaces every child of

package/dist/mini-chat.html CHANGED Viewed

@@ -74,25 +74,25 @@
       }
     </style>
-    <script type="module" crossorigin src="/assets/miniChat-CAbceO-F.js"></script>
+    <script type="module" crossorigin src="/assets/miniChat-B3KVwxjN.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-C0FnF6B9.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-base-ui-CnHfUmDN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-zustand-B4dlGEM2.js">
-    <link rel="modulepreload" crossorigin href="/assets/useUIStore-NfqK-HA7.js">
+    <link rel="modulepreload" crossorigin href="/assets/useUIStore-DzwCfRqr.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-pathe-vBmvQE8f.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-DLPElpoQ.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-tanstack-query-core-BWz0ose6.js">
-    <link rel="modulepreload" crossorigin href="/assets/persistence-vZ7H8WKh.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-Cr3LE55y.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-VfMK9fdk.js">
+    <link rel="modulepreload" crossorigin href="/assets/persistence-6sclr7B6.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-Txp4xOVQ.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-C_FSEHKM.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-opencode-sdk-C07HQypa.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-aparajita-capacitor-secure-storage-CjQdwfjS.js">
-    <link rel="modulepreload" crossorigin href="/assets/platform-CTaznShj.js">
-    <link rel="modulepreload" crossorigin href="/assets/terminalApi-KDUc5mh2.js">
+    <link rel="modulepreload" crossorigin href="/assets/platform-CbeLpKPk.js">
+    <link rel="modulepreload" crossorigin href="/assets/terminalApi-BpPeXWIu.js">
     <link rel="modulepreload" crossorigin href="/assets/types-BuiqMmh_.js">
     <link rel="modulepreload" crossorigin href="/assets/capgoAdapter-DCowZ2ab.js">
-    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-CCrS3B1v.js">
-    <link rel="stylesheet" crossorigin href="/assets/src-Dbdlm5x1.css">
+    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-D8mh3gFs.js">
+    <link rel="stylesheet" crossorigin href="/assets/src-BDOLh3pc.css">
   </head>
   <body class="h-full bg-background text-foreground">
     <div id="root" class="h-full">

package/dist/mobile.html CHANGED Viewed

@@ -63,25 +63,25 @@
       })();
     </script>
-    <script type="module" crossorigin src="/assets/mobile-BX6ehEeM.js"></script>
+    <script type="module" crossorigin src="/assets/mobile-rzYyWvdR.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-C0FnF6B9.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-base-ui-CnHfUmDN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-zustand-B4dlGEM2.js">
-    <link rel="modulepreload" crossorigin href="/assets/useUIStore-NfqK-HA7.js">
+    <link rel="modulepreload" crossorigin href="/assets/useUIStore-DzwCfRqr.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-pathe-vBmvQE8f.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-DLPElpoQ.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-tanstack-query-core-BWz0ose6.js">
-    <link rel="modulepreload" crossorigin href="/assets/persistence-vZ7H8WKh.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-Cr3LE55y.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-VfMK9fdk.js">
+    <link rel="modulepreload" crossorigin href="/assets/persistence-6sclr7B6.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-Txp4xOVQ.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-C_FSEHKM.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-opencode-sdk-C07HQypa.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-aparajita-capacitor-secure-storage-CjQdwfjS.js">
-    <link rel="modulepreload" crossorigin href="/assets/platform-CTaznShj.js">
-    <link rel="modulepreload" crossorigin href="/assets/terminalApi-KDUc5mh2.js">
+    <link rel="modulepreload" crossorigin href="/assets/platform-CbeLpKPk.js">
+    <link rel="modulepreload" crossorigin href="/assets/terminalApi-BpPeXWIu.js">
     <link rel="modulepreload" crossorigin href="/assets/types-BuiqMmh_.js">
     <link rel="modulepreload" crossorigin href="/assets/capgoAdapter-DCowZ2ab.js">
-    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-CCrS3B1v.js">
-    <link rel="stylesheet" crossorigin href="/assets/src-Dbdlm5x1.css">
+    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-D8mh3gFs.js">
+    <link rel="stylesheet" crossorigin href="/assets/src-BDOLh3pc.css">
   </head>
   <body class="h-full bg-background text-foreground">
     <div id="root" class="h-full"></div>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@openchambery/web",
-  "version": "1.18.4",
+  "version": "1.18.6-beta.1",
   "private": false,
   "type": "module",
   "main": "./server/index.js",

package/server/lib/config-sync/config-sync.test.js CHANGED Viewed

@@ -14,6 +14,7 @@ import {
   assertTargetCapability,
   buildDefaultSyncSelections,
   buildRemoteSyncFinalizeScript,
+  buildRemoteSyncInventoryScript,
   buildRemoteSyncPrepareScript,
   createSshSyncTarget,
   filterPlanBySelections,
@@ -195,3 +196,54 @@ describe('generational prepare backups', () => {
     })).toThrow();
   });
 });
+describe('remote inventory script', () => {
+  it('emits SYNC_INVENTORY as valid JSON with quoted path values (regression: bare quotes broke JSON.parse)', async () => {
+    const home = await makeTempDir();
+    const configDir = path.join(home, '.config', 'opencode');
+    await fsp.mkdir(path.join(configDir, 'agents'), { recursive: true });
+    await fsp.writeFile(path.join(configDir, 'opencode.jsonc'), '{"a":1}\n');
+    await fsp.writeFile(path.join(configDir, 'AGENTS.md'), '# agents\n');
+    await fsp.writeFile(path.join(configDir, 'agents', 'helper.md'), 'x'.repeat(7));
+    await fsp.mkdir(path.join(home, '.local', 'share', 'opencode'), { recursive: true });
+    await fsp.writeFile(path.join(home, '.local', 'share', 'opencode', 'auth.json'), '{}\n');
+    const stdout = execFileSync('sh', ['-c', buildRemoteSyncInventoryScript()], {
+      env: { ...process.env, HOME: home },
+    });
+    const line = stdout.toString().split(/\r?\n/).find((entry) => entry.startsWith('SYNC_INVENTORY='));
+    expect(line).toBeTruthy();
+    // This threw SyntaxError ("Unexpected token") before path values were
+    // escaped for the surrounding shell double-quoted string.
+    const inventory = JSON.parse(line.slice('SYNC_INVENTORY='.length));
+    const files = inventory.files.map((entry) => entry.path);
+    expect(files).toContain('opencode.jsonc');
+    expect(files).toContain('AGENTS.md');
+    const directories = inventory.directories.map((entry) => entry.path);
+    expect(directories).toContain('agents');
+    expect(inventory.authFile).toEqual({ bytes: 3 });
+    for (const entry of inventory.files) {
+      expect(typeof entry.path).toBe('string');
+      expect(typeof entry.bytes).toBe('number');
+    }
+    for (const entry of inventory.directories) {
+      expect(typeof entry.path).toBe('string');
+      expect(typeof entry.fileCount).toBe('number');
+      expect(typeof entry.bytes).toBe('number');
+    }
+  });
+  it('still parses when nothing exists on the remote', async () => {
+    const home = await makeTempDir();
+    const stdout = execFileSync('sh', ['-c', buildRemoteSyncInventoryScript()], {
+      env: { ...process.env, HOME: home },
+    });
+    const line = stdout.toString().split(/\r?\n/).find((entry) => entry.startsWith('SYNC_INVENTORY='));
+    const inventory = JSON.parse(line.slice('SYNC_INVENTORY='.length));
+    expect(inventory.files).toEqual([]);
+    expect(inventory.directories).toEqual([]);
+    expect(inventory.agentsRoot).toBeNull();
+    expect(inventory.authFile).toBeNull();
+  });
+});

package/server/lib/config-sync/scripts.js CHANGED Viewed

@@ -12,6 +12,14 @@ import {
 const shellQuote = (value) => `'${String(value).replace(/'/g, `'\\''`)}'`;
+/**
+ * JSON.stringify yields bare double quotes, which terminate the surrounding
+ * shell double-quoted string in inventory lines. Escape them so the assembled
+ * SYNC_INVENTORY payload stays valid JSON after sh evaluation.
+ * @param {string} value
+ */
+const jsonShellEscape = (value) => JSON.stringify(value).replace(/"/g, '\\"');
 /**
  * Sanitize syncRunId for use as a single path segment under backup roots.
  * @param {string} syncRunId
@@ -202,7 +210,7 @@ export const buildRemoteSyncInventoryScript = () => {
     const quoted = shellQuote(rel);
     lines.push(`if [ -f "$CFG"/${quoted} ]; then`);
     lines.push(`  BYTES="$(wc -c < "$CFG"/${quoted} | tr -d ' ')"`);
-    lines.push(`  FILES="$FILES{\\"path\\":${JSON.stringify(rel)},\\"bytes\\":$BYTES},"`);
+    lines.push(`  FILES="$FILES{\\"path\\":${jsonShellEscape(rel)},\\"bytes\\":$BYTES},"`);
     lines.push('fi');
   }
   for (const rel of dirPaths) {
@@ -210,7 +218,7 @@ export const buildRemoteSyncInventoryScript = () => {
     lines.push(`if [ -d "$CFG"/${quoted} ]; then`);
     lines.push(`  COUNT="$(find "$CFG"/${quoted} -type f ! -path '*/node_modules/*' ! -name '*.backup' 2>/dev/null | wc -l | tr -d ' ')"`);
     lines.push(`  BYTES="$(find "$CFG"/${quoted} -type f ! -path '*/node_modules/*' ! -name '*.backup' -exec wc -c {} + 2>/dev/null | awk 'END{print $1+0}')"`);
-    lines.push(`  DIRS="$DIRS{\\"path\\":${JSON.stringify(rel)},\\"fileCount\\":$COUNT,\\"bytes\\":$BYTES},"`);
+    lines.push(`  DIRS="$DIRS{\\"path\\":${jsonShellEscape(rel)},\\"fileCount\\":$COUNT,\\"bytes\\":$BYTES},"`);
     lines.push('fi');
   }
   lines.push('AGENTS="null"');

package/server/lib/notifications/DOCUMENTATION.md CHANGED Viewed

@@ -77,9 +77,10 @@ This module provides notification message preparation utilities for the web serv
 ### Emitter runtime API (emitter-runtime.js)
 - `createNotificationEmitterRuntime(dependencies)`: creates runtime for unified notification emission channels.
 - Returned API:
-  - `writeSseEvent(res, payload)`
+  - `writeSseEvent(res, payload)` — best-effort SSE write with backpressure: when `res.write` returns `false`, the client is marked paused and further writes are skipped until `drain`; buffered bytes above `SSE_CLIENT_MAX_BUFFERED_BYTES` (2 MiB, aligned with relay-server) destroy the response. Authoritative data remains HTTP pull.
   - `emitDesktopNotification(payload)`
   - `broadcastUiNotification(payload)`
+- Exported constant: `SSE_CLIENT_MAX_BUFFERED_BYTES`
 ### Template runtime API (template-runtime.js)
 - `createNotificationTemplateRuntime(dependencies)`: creates shared notification/template runtime. Model-backed summarization was retired after the Zen provider became unavailable.

package/server/lib/notifications/emitter-runtime.js CHANGED Viewed

@@ -1,3 +1,41 @@
+// Align with relay-server per-connection queue cap (2 MiB).
+export const SSE_CLIENT_MAX_BUFFERED_BYTES = 2 * 1024 * 1024;
+const isSseResponseClosed = (res) => Boolean(res?.writableEnded || res?.destroyed);
+const getSseBufferedBytes = (res) => {
+  if (typeof res?.writableLength === 'number' && Number.isFinite(res.writableLength)) {
+    return res.writableLength;
+  }
+  const tracked = res?.__sseBufferedBytes;
+  return typeof tracked === 'number' && Number.isFinite(tracked) ? tracked : 0;
+};
+const attachSseDrainListener = (res) => {
+  if (res.__sseDrainAttached) {
+    return;
+  }
+  res.__sseDrainAttached = true;
+  res.once('drain', () => {
+    res.__ssePaused = false;
+    res.__sseBufferedBytes = 0;
+    res.__sseDrainAttached = false;
+    res.__ssePausedHeartbeatCycles = 0;
+  });
+};
+// Intentional resource protection for slow/zombie SSE clients.
+// SSE is best-effort; authoritative data is fetched over HTTP.
+const destroySseClientForBackpressure = (res) => {
+  try {
+    if (!res.destroyed) {
+      res.destroy();
+    }
+  } catch {
+    // ignore — cleanup must stay idempotent
+  }
+};
 export const createNotificationEmitterRuntime = (dependencies) => {
   const {
     process,
@@ -23,7 +61,46 @@ export const createNotificationEmitterRuntime = (dependencies) => {
   };
   const writeSseEvent = (res, payload) => {
-    res.write(`data: ${JSON.stringify(payload)}\n\n`);
+    if (!res || isSseResponseClosed(res)) {
+      throw new Error('SSE response closed');
+    }
+    // Drop while backpressured — SSE is best-effort; authoritative data is HTTP pull.
+    if (res.__ssePaused) {
+      return false;
+    }
+    const data = `data: ${JSON.stringify(payload)}\n\n`;
+    const byteLength = Buffer.byteLength(data);
+    let ok;
+    try {
+      ok = res.write(data);
+    } catch (error) {
+      destroySseClientForBackpressure(res);
+      throw error;
+    }
+    const bufferedBytes = ok === false
+      ? Math.max(getSseBufferedBytes(res), (res.__sseBufferedBytes || 0) + byteLength)
+      : getSseBufferedBytes(res);
+    res.__sseBufferedBytes = bufferedBytes;
+    if (bufferedBytes > SSE_CLIENT_MAX_BUFFERED_BYTES) {
+      // Intentional resource protection: a slow client must not unbounded-buffer
+      // response body in host memory. SSE is best-effort; authoritative data is
+      // fetched over HTTP.
+      destroySseClientForBackpressure(res);
+      throw new Error('SSE client buffer exceeded');
+    }
+    if (ok === false) {
+      res.__ssePaused = true;
+      attachSseDrainListener(res);
+      return false;
+    }
+    return true;
   };
   const emitDesktopNotification = (payload) => {

package/server/lib/notifications/emitter-runtime.test.js CHANGED Viewed

@@ -1,6 +1,9 @@
 import { describe, expect, it, vi } from 'vitest';
-import { createNotificationEmitterRuntime } from './emitter-runtime.js';
+import {
+  createNotificationEmitterRuntime,
+  SSE_CLIENT_MAX_BUFFERED_BYTES,
+} from './emitter-runtime.js';
 const createRuntime = (overrides = {}) => createNotificationEmitterRuntime({
   process: { stdout: { write: vi.fn() } },
@@ -11,6 +14,59 @@ const createRuntime = (overrides = {}) => createNotificationEmitterRuntime({
   ...overrides,
 });
+const createMockSseResponse = ({ writeImpl } = {}) => {
+  const listeners = new Map();
+  let destroyed = false;
+  let writableEnded = false;
+  let bufferedBytes = 0;
+  const res = {
+    get destroyed() {
+      return destroyed;
+    },
+    get writableEnded() {
+      return writableEnded;
+    },
+    get writableLength() {
+      return bufferedBytes;
+    },
+    on(event, handler) {
+      listeners.set(event, handler);
+      return this;
+    },
+    once(event, handler) {
+      listeners.set(event, handler);
+      return this;
+    },
+    emit(event) {
+      const handler = listeners.get(event);
+      listeners.delete(event);
+      if (typeof handler === 'function') {
+        handler();
+      }
+    },
+    write(chunk) {
+      if (typeof writeImpl === 'function') {
+        return writeImpl(chunk, {
+          addBuffered(bytes) {
+            bufferedBytes += bytes;
+          },
+          getBuffered() {
+            return bufferedBytes;
+          },
+        });
+      }
+      return true;
+    },
+    destroy() {
+      destroyed = true;
+      this.emit('error');
+    },
+  };
+  return res;
+};
 describe('notification emitter runtime', () => {
   it('reports desktop delivery through the injected native callback', () => {
     const onDesktopNotification = vi.fn();
@@ -44,4 +100,41 @@ describe('notification emitter runtime', () => {
       },
     });
   });
+  it('pauses slow SSE clients when write returns false and skips further buffering until drain', () => {
+    const runtime = createRuntime();
+    let writeCount = 0;
+    const res = createMockSseResponse({
+      writeImpl(chunk, { addBuffered }) {
+        writeCount += 1;
+        addBuffered(Buffer.byteLength(String(chunk)));
+        return false;
+      },
+    });
+    expect(runtime.writeSseEvent(res, { type: 'a' })).toBe(false);
+    expect(res.__ssePaused).toBe(true);
+    expect(writeCount).toBe(1);
+    expect(runtime.writeSseEvent(res, { type: 'b' })).toBe(false);
+    expect(writeCount).toBe(1);
+    res.emit('drain');
+    expect(res.__ssePaused).toBe(false);
+    expect(runtime.writeSseEvent(res, { type: 'c' })).toBe(false);
+    expect(writeCount).toBe(2);
+  });
+  it('destroys an SSE client whose buffered bytes exceed the per-client cap', () => {
+    const runtime = createRuntime();
+    const res = createMockSseResponse({
+      writeImpl(chunk, { addBuffered }) {
+        addBuffered(SSE_CLIENT_MAX_BUFFERED_BYTES + Buffer.byteLength(String(chunk)));
+        return false;
+      },
+    });
+    expect(() => runtime.writeSseEvent(res, { type: 'overflow' })).toThrow(/buffer exceeded/);
+    expect(res.destroyed).toBe(true);
+  });
 });

package/server/lib/scheduled-tasks/DOCUMENTATION.md CHANGED Viewed

@@ -31,7 +31,10 @@ Server-owned scheduled task runtime and routes for OpenChamber-only automation.
   - Global run history list endpoint
   - Project scheduled task CRUD endpoints
   - Manual run endpoint
-  - OpenChamber events SSE stream endpoint
+  - OpenChamber events SSE stream endpoint (`GET /api/openchamber/events`): 25s
+    heartbeat interval unchanged; half-open clients that stay paused across two
+    consecutive heartbeat cycles are destroyed and removed from the client set
+    (idempotent cleanup). SSE is best-effort; authoritative data is HTTP pull.
   - Returns persisted mutation results with `schedulerSynced`; a failed scheduler
     sync schedules one bounded retry while preserving the committed response

package/server/lib/scheduled-tasks/routes.js CHANGED Viewed

@@ -321,6 +321,33 @@ export const registerScheduledTaskRoutes = (app, dependencies) => {
     const clients = getOpenChamberEventClients();
     clients.add(res);
+    let closed = false;
+    let heartbeatTimer = null;
+    // Half-open / stalled-drain eviction: destroy after this many consecutive
+    // heartbeat cycles while the socket remains paused (no drain). Interval
+    // itself is unchanged — only failure cleanup was added.
+    // SSE is best-effort; authoritative data is fetched over HTTP.
+    const maxPausedHeartbeatCycles = 2;
+    const cleanup = () => {
+      if (closed) {
+        return;
+      }
+      closed = true;
+      if (heartbeatTimer) {
+        clearInterval(heartbeatTimer);
+        heartbeatTimer = null;
+      }
+      clients.delete(res);
+      try {
+        if (!res.destroyed && !res.writableEnded) {
+          res.destroy();
+        }
+      } catch {
+        // ignore — destroy + delete must stay idempotent
+      }
+    };
     try {
       writeSseEvent(res, {
         type: 'openchamber:event-stream-ready',
@@ -329,25 +356,41 @@ export const registerScheduledTaskRoutes = (app, dependencies) => {
         },
       });
     } catch {
+      cleanup();
+      return;
     }
-    const heartbeat = setInterval(() => {
+    heartbeatTimer = setInterval(() => {
+      if (closed || res.writableEnded || res.destroyed) {
+        cleanup();
+        return;
+      }
       try {
-        writeSseEvent(res, {
+        const ok = writeSseEvent(res, {
           type: 'openchamber:heartbeat',
           properties: {
             timestamp: Date.now(),
           },
         });
+        if (ok === false || res.__ssePaused) {
+          const cycles = (res.__ssePausedHeartbeatCycles || 0) + 1;
+          res.__ssePausedHeartbeatCycles = cycles;
+          if (cycles >= maxPausedHeartbeatCycles) {
+            // Intentional half-open cleanup: TCP may still look open while the
+            // relay tunnel is dead and drain never fires. SSE is best-effort;
+            // authoritative data is fetched over HTTP.
+            cleanup();
+          }
+          return;
+        }
+        res.__ssePausedHeartbeatCycles = 0;
       } catch {
-        clearInterval(heartbeat);
-        clients.delete(res);
+        cleanup();
       }
     }, 25_000);
-    req.on('close', () => {
-      clearInterval(heartbeat);
-      clients.delete(res);
-    });
+    req.on('close', cleanup);
+    res.on('error', cleanup);
   });
 };

package/server/lib/session-index/DOCUMENTATION.md CHANGED Viewed

@@ -20,13 +20,19 @@ the index excludes them from every snapshot and clears prior summaries when a
   `metadata.openchamber.smallModel.purpose`. Title prefixes are human labels and
   never participate in this filter. Metadata is the ownership/isolation signal;
 `time.archived` is archive state; `time.pinned` is OpenChamber-owned pin state
-(persisted as `pinned_at`, rescued across directory rebuilds, never overwritten
-by live OpenCode upserts); titles are for recognition. The index does
+overlaid from the independent `session_pin` table (also mirrored onto in-window
+`session_summary.pinned_at` for older readers). Pins are not subject to the
+newest-20 summary bound: evicting or rebuilding a directory keeps pin
+membership, and `setPinned` can target a session that is not currently in the
+index. Archive or `remove` still clears the pin. Live OpenCode upserts never
+overwrite pin membership. Titles are for recognition. The index does
 not cache system sessions, so cold-start and live upserts stay aligned with
 ordinary sidebar lists.
 Pin and unpin use `POST` / `DELETE`
-`/api/openchamber/session-index/session/:id/pin`, update `pinned_at`, then
+`/api/openchamber/session-index/session/:id/pin`, write `session_pin`, then
 `publishChange()` so revision tips broadcast `openchamber:session-index-changed`.
+Snapshots include `pinnedSessionIds` plus `time.pinned` on any matching
+summary row.
 The server-side global OpenCode event subscriber writes session summary events
 directly into this index. User `message.updated` events and `session.idle`