mstro-app 0.5.1 → 0.5.5

package/dist/server/services/websocket/tab-event-buffer.d.ts

@@ -39,20 +39,57 @@ export interface BufferedEvent {
     data: unknown;
     /** `Date.now()` at record time. Used for age-based eviction. */
     timestamp: number;
+    /**
+     * Approximate serialized byte size of `data`. Computed once at record
+     * time so eviction can enforce a memory cap without re-stringifying on
+     * every check. Type and seq overhead is small; we only bill `data` here.
+     */
+    byteSize: number;
 }
 /**
  * Bounded replay log for a single tab.
  *
- * Size/age limits are parameterised for testability but defaulted to values
- * that comfortably cover real-world reconnect windows.
+ * Size/age/byte limits are parameterised for testability but defaulted to
+ * values that comfortably cover real-world reconnect windows for long-running
+ * coding-agent tasks (multi-tool, multi-minute).
+ *
+ * ## Replay-gap detection
+ *
+ * The buffer tracks `evictedThroughSeq` — the highest seq that has ever been
+ * evicted (0 if nothing has been evicted). A web client whose `lastSeenSeq`
+ * is below this value has missed events the buffer can no longer supply, and
+ * an incremental replay would produce a silent gap. Callers should consult
+ * `hasGapSince` before relying on `getSince` for incremental replay; on a
+ * gap they should fall back to a full snapshot path (e.g. `outputHistory`).
+ *
+ * ## Eviction is FIFO with three caps
+ *
+ * Events are evicted from the front when ANY of these limits is exceeded:
+ *  - count: `maxEvents` (default 10k)
+ *  - age:   `maxAgeMs` (default 60 min)
+ *  - bytes: `maxTotalBytes` (default 32 MB)
+ *
+ * The byte cap is the safety belt against pathological events (e.g. a 50 MB
+ * grep result streamed as one event). Without it, count- and age-based caps
+ * still allow a single tab to hoard arbitrary memory.
  */
 export declare class TabEventBuffer {
     private readonly maxEvents;
     private readonly maxAgeMs;
     private readonly now;
+    private readonly maxTotalBytes;
     private readonly events;
     private nextSeq;
-    constructor(maxEvents?: number, maxAgeMs?: number, now?: () => number);
+    /**
+     * Highest seq that has been evicted from the buffer. 0 means nothing has
+     * been evicted yet (buffer is operating within its window). Monotonically
+     * non-decreasing — eviction always happens from the front of the FIFO, in
+     * seq order, so the most recently evicted seq is always the highest.
+     */
+    private evictedThroughSeq;
+    /** Approximate sum of `byteSize` over still-resident events. */
+    private totalBytes;
+    constructor(maxEvents?: number, maxAgeMs?: number, now?: () => number, maxTotalBytes?: number);
     /**
      * Append an event and return its assigned sequence number.
      *
@@ -65,18 +102,51 @@ export declare class TabEventBuffer {
      * Return all still-buffered events with `seq > afterSeq`, in original
      * order. Returns an empty array if nothing newer is buffered (either the
      * web is caught up or the window has rolled past).
+     *
+     * NOTE: This does not detect or signal replay gaps. Pair with
+     * `hasGapSince(afterSeq)` to know whether a returned array is a complete
+     * incremental replay or a partial one (events between `afterSeq` and the
+     * oldest surviving seq have been evicted and are no longer available).
      */
     getSince(afterSeq: number): BufferedEvent[];
+    /**
+     * True when an incremental replay starting from `afterSeq` would silently
+     * skip events that the buffer has already evicted. Used by the replay
+     * orchestrator to decide whether to fall back to a full snapshot rather
+     * than emit a partial event stream the web can't reconstruct.
+     *
+     * `afterSeq < evictedThroughSeq` means the next event the caller expects
+     * (`afterSeq + 1`) is at or below the eviction frontier — that event has
+     * already been dropped from memory.
+     */
+    hasGapSince(afterSeq: number): boolean;
+    /**
+     * Highest seq that has been evicted from this buffer; 0 if nothing has been
+     * evicted yet. Exposed for telemetry and gap-recovery decisions.
+     */
+    getEvictedThroughSeq(): number;
     /** Current highest assigned seq (monotonic; not reset by eviction). */
     currentSeq(): number;
     /** Events currently held in memory. For tests. */
     size(): number;
+    /** Approximate bytes held by `data` payloads currently in memory. For tests/telemetry. */
+    byteSize(): number;
     /**
      * Drop events older than `maxAgeMs` from the front, then enforce
-     * `maxEvents` by trimming the front further if needed. Eviction keeps the
-     * newest events — they're the ones the web is most likely to still need.
+     * `maxEvents` and `maxTotalBytes` by trimming the front further if needed.
+     * Eviction keeps the newest events — they're the ones the web is most
+     * likely to still need.
+     *
+     * Each evicted seq advances `evictedThroughSeq` so callers can detect
+     * replay gaps. The FIFO ensures we always evict in seq order, so the last
+     * evicted seq is always the highest seen so far.
+     *
+     * The byte cap is enforced LAST so that count- and age-based eviction get
+     * a chance first; a chatty-but-small session evicts on age before it ever
+     * touches the byte cap, which keeps the usual case predictable.
      */
     private evict;
+    private popOldest;
 }
 /**
  * Registry of per-tab buffers. Kept as a thin collection so `HandlerContext`
@@ -96,8 +166,27 @@ export declare class TabEventBufferRegistry {
     /** Drop all bookkeeping. Used for tests; no production caller expected. */
     clear(): void;
 }
-/** 1000 events per tab covers typical reconnect windows comfortably. */
-export declare const DEFAULT_MAX_EVENTS = 1000;
-/** 15 minutes of history is more than enough for the longest plausible web reconnect. */
+/**
+ * 10,000 events per tab.
+ *
+ * Sized for long-running coding-agent tasks (multi-tool, multi-minute) plus
+ * laptop sleep/wake reconnect windows. Worst-case observed: a 14-minute
+ * session with ~120 tool calls produces ~1.5–3k tab-scoped events; 10× that
+ * gives headroom for parallel agents and chatty improvisation. Memory
+ * footprint at ~500B/event = ~5MB per tab; the local-only single-tenant
+ * deployment makes this a non-issue.
+ */
+export declare const DEFAULT_MAX_EVENTS = 10000;
+/**
+ * 60 minutes of history. Covers laptop sleep/wake, long meetings between
+ * sessions, and the largest plausible reconnect window that a tab might
+ * legitimately want to recover incrementally instead of starting fresh.
+ */
 export declare const DEFAULT_MAX_AGE_MS: number;
+/**
+ * 32 MB safety belt against pathological events (large grep results, full
+ * file reads streamed inline). Eviction by bytes guarantees a single tab
+ * can't hoard arbitrary memory regardless of count/age limits.
+ */
+export declare const DEFAULT_MAX_TOTAL_BYTES: number;
 //# sourceMappingURL=tab-event-buffer.d.ts.map

package/dist/server/services/websocket/tab-event-buffer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tab-event-buffer.d.ts","sourceRoot":"","sources":["../../../../server/services/websocket/tab-event-buffer.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAA;IACX,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAA;IACZ,2CAA2C;IAC3C,IAAI,EAAE,OAAO,CAAA;IACb,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;GAKG;AACH,qBAAa,cAAc;IAKvB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,GAAG;IANtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,OAAO,CAAI;gBAGA,SAAS,GAAE,MAA2B,EACtC,QAAQ,GAAE,MAA2B,EACrC,GAAG,GAAE,MAAM,MAAiB;IAG/C;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM;IAO3C;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,EAAE;IAS3C,uEAAuE;IACvE,UAAU,IAAI,MAAM;IAIpB,kDAAkD;IAClD,IAAI,IAAI,MAAM;IAId;;;;OAIG;IACH,OAAO,CAAC,KAAK;CASd;AAED;;;;GAIG;AACH,qBAAa,sBAAsB;IAI/B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAHhC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;gBAGzC,aAAa,GAAE,MAAM,cAA2C;IAGnF,8DAA8D;IAC9D,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc;IAS1C,sDAAsD;IACtD,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI9C,wDAAwD;IACxD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI3B,2EAA2E;IAC3E,KAAK,IAAI,IAAI;CAGd;AAED,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,OAAO,CAAA;AACtC,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,QAAiB,CAAA"}
+{"version":3,"file":"tab-event-buffer.d.ts","sourceRoot":"","sources":["../../../../server/services/websocket/tab-event-buffer.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAA;IACX,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAA;IACZ,2CAA2C;IAC3C,IAAI,EAAE,OAAO,CAAA;IACb,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAA;IACjB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,cAAc;IAcvB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAhBhC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,OAAO,CAAI;IACnB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB,CAAI;IAC7B,gEAAgE;IAChE,OAAO,CAAC,UAAU,CAAI;gBAGH,SAAS,GAAE,MAA2B,EACtC,QAAQ,GAAE,MAA2B,EACrC,GAAG,GAAE,MAAM,MAAiB,EAC5B,aAAa,GAAE,MAAgC;IAGlE;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM;IAS3C;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,EAAE;IAS3C;;;;;;;;;OASG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAKtC;;;OAGG;IACH,oBAAoB,IAAI,MAAM;IAI9B,uEAAuE;IACvE,UAAU,IAAI,MAAM;IAIpB,kDAAkD;IAClD,IAAI,IAAI,MAAM;IAId,0FAA0F;IAC1F,QAAQ,IAAI,MAAM;IAIlB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,KAAK;IAab,OAAO,CAAC,SAAS;CAOlB;AAuBD;;;;GAIG;AACH,qBAAa,sBAAsB;IAI/B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAHhC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;gBAGzC,aAAa,GAAE,MAAM,cAA2C;IAGnF,8DAA8D;IAC9D,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc;IAS1C,sDAAsD;IACtD,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI9C,wDAAwD;IACxD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI3B,2EAA2E;IAC3E,KAAK,IAAI,IAAI;CAGd;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,QAAS,CAAA;AACxC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,QAAiB,CAAA;AAChD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,QAAmB,CAAA"}

package/dist/server/services/websocket/tab-event-buffer.js

@@ -2,19 +2,51 @@
 /**
  * Bounded replay log for a single tab.
  *
- * Size/age limits are parameterised for testability but defaulted to values
- * that comfortably cover real-world reconnect windows.
+ * Size/age/byte limits are parameterised for testability but defaulted to
+ * values that comfortably cover real-world reconnect windows for long-running
+ * coding-agent tasks (multi-tool, multi-minute).
+ *
+ * ## Replay-gap detection
+ *
+ * The buffer tracks `evictedThroughSeq` — the highest seq that has ever been
+ * evicted (0 if nothing has been evicted). A web client whose `lastSeenSeq`
+ * is below this value has missed events the buffer can no longer supply, and
+ * an incremental replay would produce a silent gap. Callers should consult
+ * `hasGapSince` before relying on `getSince` for incremental replay; on a
+ * gap they should fall back to a full snapshot path (e.g. `outputHistory`).
+ *
+ * ## Eviction is FIFO with three caps
+ *
+ * Events are evicted from the front when ANY of these limits is exceeded:
+ *  - count: `maxEvents` (default 10k)
+ *  - age:   `maxAgeMs` (default 60 min)
+ *  - bytes: `maxTotalBytes` (default 32 MB)
+ *
+ * The byte cap is the safety belt against pathological events (e.g. a 50 MB
+ * grep result streamed as one event). Without it, count- and age-based caps
+ * still allow a single tab to hoard arbitrary memory.
  */
 export class TabEventBuffer {
     maxEvents;
     maxAgeMs;
     now;
+    maxTotalBytes;
     events = [];
     nextSeq = 1;
-    constructor(maxEvents = DEFAULT_MAX_EVENTS, maxAgeMs = DEFAULT_MAX_AGE_MS, now = Date.now) {
+    /**
+     * Highest seq that has been evicted from the buffer. 0 means nothing has
+     * been evicted yet (buffer is operating within its window). Monotonically
+     * non-decreasing — eviction always happens from the front of the FIFO, in
+     * seq order, so the most recently evicted seq is always the highest.
+     */
+    evictedThroughSeq = 0;
+    /** Approximate sum of `byteSize` over still-resident events. */
+    totalBytes = 0;
+    constructor(maxEvents = DEFAULT_MAX_EVENTS, maxAgeMs = DEFAULT_MAX_AGE_MS, now = Date.now, maxTotalBytes = DEFAULT_MAX_TOTAL_BYTES) {
         this.maxEvents = maxEvents;
         this.maxAgeMs = maxAgeMs;
         this.now = now;
+        this.maxTotalBytes = maxTotalBytes;
     }
     /**
      * Append an event and return its assigned sequence number.
@@ -25,7 +57,9 @@ export class TabEventBuffer {
      */
     record(type, data) {
         const seq = this.nextSeq++;
-        this.events.push({ seq, type, data, timestamp: this.now() });
+        const byteSize = estimateByteSize(data);
+        this.events.push({ seq, type, data, timestamp: this.now(), byteSize });
+        this.totalBytes += byteSize;
         this.evict();
         return seq;
     }
@@ -33,6 +67,11 @@ export class TabEventBuffer {
      * Return all still-buffered events with `seq > afterSeq`, in original
      * order. Returns an empty array if nothing newer is buffered (either the
      * web is caught up or the window has rolled past).
+     *
+     * NOTE: This does not detect or signal replay gaps. Pair with
+     * `hasGapSince(afterSeq)` to know whether a returned array is a complete
+     * incremental replay or a partial one (events between `afterSeq` and the
+     * oldest surviving seq have been evicted and are no longer available).
      */
     getSince(afterSeq) {
         this.evict();
@@ -43,6 +82,27 @@ export class TabEventBuffer {
         }
         return out;
     }
+    /**
+     * True when an incremental replay starting from `afterSeq` would silently
+     * skip events that the buffer has already evicted. Used by the replay
+     * orchestrator to decide whether to fall back to a full snapshot rather
+     * than emit a partial event stream the web can't reconstruct.
+     *
+     * `afterSeq < evictedThroughSeq` means the next event the caller expects
+     * (`afterSeq + 1`) is at or below the eviction frontier — that event has
+     * already been dropped from memory.
+     */
+    hasGapSince(afterSeq) {
+        this.evict();
+        return afterSeq < this.evictedThroughSeq;
+    }
+    /**
+     * Highest seq that has been evicted from this buffer; 0 if nothing has been
+     * evicted yet. Exposed for telemetry and gap-recovery decisions.
+     */
+    getEvictedThroughSeq() {
+        return this.evictedThroughSeq;
+    }
     /** Current highest assigned seq (monotonic; not reset by eviction). */
     currentSeq() {
         return this.nextSeq - 1;
@@ -51,20 +111,67 @@ export class TabEventBuffer {
     size() {
         return this.events.length;
     }
+    /** Approximate bytes held by `data` payloads currently in memory. For tests/telemetry. */
+    byteSize() {
+        return this.totalBytes;
+    }
     /**
      * Drop events older than `maxAgeMs` from the front, then enforce
-     * `maxEvents` by trimming the front further if needed. Eviction keeps the
-     * newest events — they're the ones the web is most likely to still need.
+     * `maxEvents` and `maxTotalBytes` by trimming the front further if needed.
+     * Eviction keeps the newest events — they're the ones the web is most
+     * likely to still need.
+     *
+     * Each evicted seq advances `evictedThroughSeq` so callers can detect
+     * replay gaps. The FIFO ensures we always evict in seq order, so the last
+     * evicted seq is always the highest seen so far.
+     *
+     * The byte cap is enforced LAST so that count- and age-based eviction get
+     * a chance first; a chatty-but-small session evicts on age before it ever
+     * touches the byte cap, which keeps the usual case predictable.
      */
     evict() {
         const cutoff = this.now() - this.maxAgeMs;
         while (this.events.length > 0 && this.events[0].timestamp < cutoff) {
-            this.events.shift();
+            this.popOldest();
         }
         while (this.events.length > this.maxEvents) {
-            this.events.shift();
+            this.popOldest();
+        }
+        while (this.events.length > 0 && this.totalBytes > this.maxTotalBytes) {
+            this.popOldest();
         }
     }
+    popOldest() {
+        const evicted = this.events.shift();
+        if (!evicted)
+            return;
+        this.evictedThroughSeq = evicted.seq;
+        this.totalBytes -= evicted.byteSize;
+        if (this.totalBytes < 0)
+            this.totalBytes = 0;
+    }
+}
+/**
+ * Estimate `data`'s serialized byte size for the eviction byte cap. Uses
+ * `JSON.stringify` because that's what hits the wire; falls back to a small
+ * default on circular structures so we don't crash the broadcast path.
+ *
+ * `Buffer.byteLength` would give us UTF-8 bytes vs UTF-16 code units, but on
+ * Node `JSON.stringify(...).length` is close enough (within a small constant
+ * factor for ASCII-heavy payloads) and avoids an extra allocation.
+ */
+function estimateByteSize(data) {
+    if (data === undefined || data === null)
+        return 0;
+    try {
+        return JSON.stringify(data).length;
+    }
+    catch {
+        // Circular reference, BigInt, etc. — bill a small fixed cost so the
+        // byte cap still has SOME signal. We won't be able to wire-serialize
+        // this either, but that's a separate problem.
+        return 256;
+    }
 }
 /**
  * Registry of per-tab buffers. Kept as a thin collection so `HandlerContext`
@@ -99,8 +206,27 @@ export class TabEventBufferRegistry {
         this.buffers.clear();
     }
 }
-/** 1000 events per tab covers typical reconnect windows comfortably. */
-export const DEFAULT_MAX_EVENTS = 1000;
-/** 15 minutes of history is more than enough for the longest plausible web reconnect. */
-export const DEFAULT_MAX_AGE_MS = 15 * 60 * 1000;
+/**
+ * 10,000 events per tab.
+ *
+ * Sized for long-running coding-agent tasks (multi-tool, multi-minute) plus
+ * laptop sleep/wake reconnect windows. Worst-case observed: a 14-minute
+ * session with ~120 tool calls produces ~1.5–3k tab-scoped events; 10× that
+ * gives headroom for parallel agents and chatty improvisation. Memory
+ * footprint at ~500B/event = ~5MB per tab; the local-only single-tenant
+ * deployment makes this a non-issue.
+ */
+export const DEFAULT_MAX_EVENTS = 10_000;
+/**
+ * 60 minutes of history. Covers laptop sleep/wake, long meetings between
+ * sessions, and the largest plausible reconnect window that a tab might
+ * legitimately want to recover incrementally instead of starting fresh.
+ */
+export const DEFAULT_MAX_AGE_MS = 60 * 60 * 1000;
+/**
+ * 32 MB safety belt against pathological events (large grep results, full
+ * file reads streamed inline). Eviction by bytes guarantees a single tab
+ * can't hoard arbitrary memory regardless of count/age limits.
+ */
+export const DEFAULT_MAX_TOTAL_BYTES = 32 * 1024 * 1024;
 //# sourceMappingURL=tab-event-buffer.js.map

package/dist/server/services/websocket/tab-event-buffer.js.map

@@ -1 +1 @@
-{"version":3,"file":"tab-event-buffer.js","sourceRoot":"","sources":["../../../../server/services/websocket/tab-event-buffer.ts"],"names":[],"mappings":"AAAA,8DAA8D;AA8C9D;;;;;GAKG;AACH,MAAM,OAAO,cAAc;IAKN;IACA;IACA;IANF,MAAM,GAAoB,EAAE,CAAA;IACrC,OAAO,GAAG,CAAC,CAAA;IAEnB,YACmB,YAAoB,kBAAkB,EACtC,WAAmB,kBAAkB,EACrC,MAAoB,IAAI,CAAC,GAAG;QAF5B,cAAS,GAAT,SAAS,CAA6B;QACtC,aAAQ,GAAR,QAAQ,CAA6B;QACrC,QAAG,GAAH,GAAG,CAAyB;IAC5C,CAAC;IAEJ;;;;;;OAMG;IACH,MAAM,CAAC,IAAY,EAAE,IAAa;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAC5D,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,OAAO,GAAG,CAAA;IACZ,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,QAAgB;QACvB,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,GAAG,GAAoB,EAAE,CAAA;QAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,GAAG,GAAG,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3C,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,uEAAuE;IACvE,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,GAAG,CAAC,CAAA;IACzB,CAAC;IAED,kDAAkD;IAClD,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA;IAC3B,CAAC;IAED;;;;OAIG;IACK,KAAK;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAA;QACzC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QACrB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QACrB,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IAId;IAHF,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAA;IAE5D,YACmB,gBAAsC,GAAG,EAAE,CAAC,IAAI,cAAc,EAAE;QAAhE,kBAAa,GAAb,aAAa,CAAmD;IAChF,CAAC;IAEJ,8DAA8D;IAC9D,WAAW,CAAC,KAAa;QACvB,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAA;YAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACjC,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,sDAAsD;IACtD,GAAG,CAAC,KAAa;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;IAED,wDAAwD;IACxD,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IAED,2EAA2E;IAC3E,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAA;AACtC,yFAAyF;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA"}
+{"version":3,"file":"tab-event-buffer.js","sourceRoot":"","sources":["../../../../server/services/websocket/tab-event-buffer.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAoD9D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,OAAO,cAAc;IAcN;IACA;IACA;IACA;IAhBF,MAAM,GAAoB,EAAE,CAAA;IACrC,OAAO,GAAG,CAAC,CAAA;IACnB;;;;;OAKG;IACK,iBAAiB,GAAG,CAAC,CAAA;IAC7B,gEAAgE;IACxD,UAAU,GAAG,CAAC,CAAA;IAEtB,YACmB,YAAoB,kBAAkB,EACtC,WAAmB,kBAAkB,EACrC,MAAoB,IAAI,CAAC,GAAG,EAC5B,gBAAwB,uBAAuB;QAH/C,cAAS,GAAT,SAAS,CAA6B;QACtC,aAAQ,GAAR,QAAQ,CAA6B;QACrC,QAAG,GAAH,GAAG,CAAyB;QAC5B,kBAAa,GAAb,aAAa,CAAkC;IAC/D,CAAC;IAEJ;;;;;;OAMG;IACH,MAAM,CAAC,IAAY,EAAE,IAAa;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAC1B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;QACtE,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAA;QAC3B,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,OAAO,GAAG,CAAA;IACZ,CAAC;IAED;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAgB;QACvB,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,GAAG,GAAoB,EAAE,CAAA;QAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,GAAG,GAAG,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3C,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED;;;;;;;;;OASG;IACH,WAAW,CAAC,QAAgB;QAC1B,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,OAAO,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAA;IAC1C,CAAC;IAED;;;OAGG;IACH,oBAAoB;QAClB,OAAO,IAAI,CAAC,iBAAiB,CAAA;IAC/B,CAAC;IAED,uEAAuE;IACvE,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,GAAG,CAAC,CAAA;IACzB,CAAC;IAED,kDAAkD;IAClD,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA;IAC3B,CAAC;IAED,0FAA0F;IAC1F,QAAQ;QACN,OAAO,IAAI,CAAC,UAAU,CAAA;IACxB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,KAAK;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAA;QACzC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;YACnE,IAAI,CAAC,SAAS,EAAE,CAAA;QAClB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3C,IAAI,CAAC,SAAS,EAAE,CAAA;QAClB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACtE,IAAI,CAAC,SAAS,EAAE,CAAA;QAClB,CAAC;IACH,CAAC;IAEO,SAAS;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QACnC,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAA;QACpC,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAA;QACnC,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC;YAAE,IAAI,CAAC,UAAU,GAAG,CAAC,CAAA;IAC9C,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,IAAa;IACrC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,CAAA;IACjD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,qEAAqE;QACrE,8CAA8C;QAC9C,OAAO,GAAG,CAAA;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IAId;IAHF,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAA;IAE5D,YACmB,gBAAsC,GAAG,EAAE,CAAC,IAAI,cAAc,EAAE;QAAhE,kBAAa,GAAb,aAAa,CAAmD;IAChF,CAAC;IAEJ,8DAA8D;IAC9D,WAAW,CAAC,KAAa;QACvB,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAA;YAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACjC,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,sDAAsD;IACtD,GAAG,CAAC,KAAa;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;IAED,wDAAwD;IACxD,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IAED,2EAA2E;IAC3E,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAA;AACxC;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAChD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA"}

package/dist/server/services/websocket/tab-event-replay.d.ts

@@ -1,20 +1,36 @@
-/**
- * Replay tab-scoped events missed during a transport gap.
- *
- * `session-initialization.ts` calls this right before sending `tabInitialized`
- * so the web sees any events with `seq > lastSeenSeq` in-order before the
- * usual initialization payload. Ordering matters: e.g. a `movementComplete`
- * before `outputHistory` would render duplicate content.
- *
- * Delivery is targeted (`ctx.send`) rather than broadcast because only the
- * rejoining web needs the replay; other connected webs already saw these
- * events live.
- */
 import type { HandlerContext } from './handler-context.js';
 import type { WSContext } from './types.js';
+/** Result of a replay attempt — used by callers (and tests) for telemetry. */
+export interface ReplayResult {
+    /** Number of events sent to the web during this replay. */
+    sentCount: number;
+    /**
+     * True when the buffer had already evicted events that fell between the
+     * web's `lastSeenSeq` and the oldest surviving seq. The replay is partial;
+     * the web's incremental state is now provably stale and the caller should
+     * fall back to a full snapshot path (e.g. `outputHistory`).
+     */
+    hadGap: boolean;
+    /**
+     * If `hadGap`, the highest seq that was evicted (so the gap range is
+     * `(lastSeenSeq + 1) .. evictedThroughSeq`). Undefined when no gap.
+     */
+    evictedThroughSeq?: number;
+    /**
+     * If `hadGap`, the seq the web requested replay from. Echoed into
+     * telemetry so log entries are self-contained.
+     */
+    lastSeenSeq?: number;
+}
 /**
  * Replay tab events with `seq > lastSeenSeq` to `ws`. Silently no-ops when
  * the buffer is empty or `lastSeenSeq` is unset (full init, not a resume).
+ *
+ * Returns a `ReplayResult` so the caller can detect a partial replay (the
+ * buffer evicted events the web is asking about) and decide whether to send
+ * a recovery snapshot. This is the load-bearing telemetry surface for the
+ * "long-running task output disappears mid-stream" failure mode — a `hadGap`
+ * here is the smoking gun.
  */
-export declare function replayTabEventsSince(ctx: HandlerContext, ws: WSContext, tabId: string, lastSeenSeq: number | undefined): void;
+export declare function replayTabEventsSince(ctx: HandlerContext, ws: WSContext, tabId: string, lastSeenSeq: number | undefined): ReplayResult;
 //# sourceMappingURL=tab-event-replay.d.ts.map

package/dist/server/services/websocket/tab-event-replay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tab-event-replay.d.ts","sourceRoot":"","sources":["../../../../server/services/websocket/tab-event-replay.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAqB,SAAS,EAAE,MAAM,YAAY,CAAA;AAE9D;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,SAAS,EACb,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,IAAI,CAaN"}
+{"version":3,"file":"tab-event-replay.d.ts","sourceRoot":"","sources":["../../../../server/services/websocket/tab-event-replay.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAqB,SAAS,EAAE,MAAM,YAAY,CAAA;AAE9D,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;OAKG;IACH,MAAM,EAAE,OAAO,CAAA;IACf;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,SAAS,EACb,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,YAAY,CAkDd"}

package/dist/server/services/websocket/tab-event-replay.js

@@ -1,14 +1,66 @@
 // Copyright (c) 2025-present Mstro, Inc. All rights reserved.
+/**
+ * Replay tab-scoped events missed during a transport gap.
+ *
+ * `session-initialization.ts` calls this right before sending `tabInitialized`
+ * so the web sees any events with `seq > lastSeenSeq` in-order before the
+ * usual initialization payload. Ordering matters: e.g. a `movementComplete`
+ * before `outputHistory` would render duplicate content.
+ *
+ * Delivery is targeted (`ctx.send`) rather than broadcast because only the
+ * rejoining web needs the replay; other connected webs already saw these
+ * events live.
+ */
+import { captureException } from '../sentry.js';
 /**
  * Replay tab events with `seq > lastSeenSeq` to `ws`. Silently no-ops when
  * the buffer is empty or `lastSeenSeq` is unset (full init, not a resume).
+ *
+ * Returns a `ReplayResult` so the caller can detect a partial replay (the
+ * buffer evicted events the web is asking about) and decide whether to send
+ * a recovery snapshot. This is the load-bearing telemetry surface for the
+ * "long-running task output disappears mid-stream" failure mode — a `hadGap`
+ * here is the smoking gun.
  */
 export function replayTabEventsSince(ctx, ws, tabId, lastSeenSeq) {
     if (lastSeenSeq === undefined)
-        return;
+        return { sentCount: 0, hadGap: false };
     const buffer = ctx.tabEventBuffers.get(tabId);
     if (!buffer)
-        return;
+        return { sentCount: 0, hadGap: false };
+    const hadGap = buffer.hasGapSince(lastSeenSeq);
+    const evictedThroughSeq = hadGap ? buffer.getEvictedThroughSeq() : undefined;
+    if (hadGap) {
+        // Replay is structurally incomplete. Surface a single, structured warning
+        // so we can grep/Sentry-search for the failure mode without spamming logs
+        // on every event.
+        const message = `[tab-replay] gap detected for tab=${tabId}: web requested replay from seq=${lastSeenSeq}, ` +
+            `but buffer has evicted through seq=${evictedThroughSeq}. ` +
+            `Events (${lastSeenSeq + 1}..${evictedThroughSeq}) are unavailable; the web's ` +
+            `incremental state is stale and a full snapshot will be sent instead.`;
+        console.warn(message);
+        try {
+            captureException(new Error('TabEventBuffer replay gap'), {
+                context: 'tab-event-replay',
+                tabId,
+                lastSeenSeq,
+                evictedThroughSeq,
+                bufferCurrentSeq: buffer.currentSeq(),
+                gapSize: (evictedThroughSeq ?? 0) - lastSeenSeq,
+            });
+        }
+        catch {
+            // Sentry transport errors must not break the replay path.
+        }
+        // CRITICAL: do NOT emit partial events. If we did, the web would advance
+        // its `tabSeqs` past the (lastSeenSeq+1 .. evictedThroughSeq) range and
+        // the subsequent snapshot would land in a tab that thinks it's caught up
+        // — silently rendering only the post-gap tail. Returning early without
+        // events forces the caller (`session-initialization.ts`) into the
+        // snapshot-fallback branch, which sends a fresh `outputHistory` payload
+        // with `replayGap: true` so the web can replace its tab state cleanly.
+        return { sentCount: 0, hadGap: true, evictedThroughSeq, lastSeenSeq };
+    }
     const events = buffer.getSince(lastSeenSeq);
     for (const event of events) {
         // Types are checked at record time via `broadcastTabEvent`; the buffer
@@ -16,5 +68,6 @@ export function replayTabEventsSince(ctx, ws, tabId, lastSeenSeq) {
         // `WebSocketResponse['type']`. Narrow here without an extra runtime check.
         ctx.send(ws, { type: event.type, tabId, data: event.data, seq: event.seq });
     }
+    return { sentCount: events.length, hadGap: false, lastSeenSeq };
 }
 //# sourceMappingURL=tab-event-replay.js.map

package/dist/server/services/websocket/tab-event-replay.js.map

@@ -1 +1 @@
-{"version":3,"file":"tab-event-replay.js","sourceRoot":"","sources":["../../../../server/services/websocket/tab-event-replay.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAkB9D;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAmB,EACnB,EAAa,EACb,KAAa,EACb,WAA+B;IAE/B,IAAI,WAAW,KAAK,SAAS;QAAE,OAAM;IAErC,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAM;IAEnB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,uEAAuE;QACvE,4DAA4D;QAC5D,2EAA2E;QAC3E,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAiC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;IAC1G,CAAC;AACH,CAAC"}
+{"version":3,"file":"tab-event-replay.js","sourceRoot":"","sources":["../../../../server/services/websocket/tab-event-replay.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAE9D;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AA2B/C;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAmB,EACnB,EAAa,EACb,KAAa,EACb,WAA+B;IAE/B,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAErE,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAEnD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAA;IAC9C,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAE5E,IAAI,MAAM,EAAE,CAAC;QACX,0EAA0E;QAC1E,0EAA0E;QAC1E,kBAAkB;QAClB,MAAM,OAAO,GACX,qCAAqC,KAAK,mCAAmC,WAAW,IAAI;YAC5F,sCAAsC,iBAAiB,IAAI;YAC3D,WAAW,WAAW,GAAG,CAAC,KAAK,iBAAiB,+BAA+B;YAC/E,sEAAsE,CAAA;QACxE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrB,IAAI,CAAC;YACH,gBAAgB,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,EAAE;gBACvD,OAAO,EAAE,kBAAkB;gBAC3B,KAAK;gBACL,WAAW;gBACX,iBAAiB;gBACjB,gBAAgB,EAAE,MAAM,CAAC,UAAU,EAAE;gBACrC,OAAO,EAAE,CAAC,iBAAiB,IAAI,CAAC,CAAC,GAAG,WAAW;aAChD,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,uEAAuE;QACvE,kEAAkE;QAClE,wEAAwE;QACxE,uEAAuE;QACvE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAA;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,uEAAuE;QACvE,4DAA4D;QAC5D,2EAA2E;QAC3E,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAiC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;IAC1G,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAA;AACjE,CAAC"}

package/dist/server/services/websocket/tab-handlers.d.ts

@@ -1,9 +1,17 @@
 import type { HandlerContext } from './handler-context.js';
-import type { WebSocketMessage, WSContext } from './types.js';
+import { type WebSocketMessage, type WSContext } from './types.js';
 export declare function handleGetActiveTabs(ctx: HandlerContext, ws: WSContext, workingDir: string): void;
 export declare function handleSyncTabMeta(ctx: HandlerContext, _ws: WSContext, msg: WebSocketMessage, tabId: string, workingDir: string): void;
 export declare function handleRemoveTab(ctx: HandlerContext, _ws: WSContext, tabId: string, workingDir: string): void;
 export declare function handleMarkTabViewed(ctx: HandlerContext, _ws: WSContext, tabId: string, workingDir: string): void;
+/**
+ * Persist a per-tab engine override. `msg.data.override` is either a full
+ * `{ engine, model, effortLevel }` payload or `null` to clear the override.
+ * Persisted via the session registry so the override survives WebSocket
+ * disconnects — the core guarantee of IS-019. Broadcasts the change to all
+ * connected clients so multi-device sessions stay in sync.
+ */
+export declare function handleSetTabEngine(ctx: HandlerContext, _ws: WSContext, msg: WebSocketMessage, tabId: string, workingDir: string): void;
 export declare function handleCreateTab(ctx: HandlerContext, ws: WSContext, workingDir: string, tabName?: string, optimisticTabId?: string): Promise<void>;
 export declare function handleReorderTabs(ctx: HandlerContext, _ws: WSContext, workingDir: string, tabOrder?: string[]): void;
 //# sourceMappingURL=tab-handlers.d.ts.map

package/dist/server/services/websocket/tab-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tab-handlers.d.ts","sourceRoot":"","sources":["../../../../server/services/websocket/tab-handlers.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAuC9D,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAqBhG;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CASrI;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAY5G;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAQhH;AAED,wBAAsB,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiDvJ;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAcpH"}
+{"version":3,"file":"tab-handlers.d.ts","sourceRoot":"","sources":["../../../../server/services/websocket/tab-handlers.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D,OAAO,EAAoC,KAAK,gBAAgB,EAAE,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AA2CrG,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAqBhG;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CASrI;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAY5G;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAQhH;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CA0BtI;AAED,wBAAsB,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAyDvJ;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAcpH"}