replicas-engine 0.1.231 → 0.1.233

package/dist/src/index.js

@@ -357,18 +357,18 @@ var GIT_PARTIAL_CLONE_FILTER = "blob:none";
 
 // ../shared/src/default-skills/replicas-agent/abilities/computer.ts
 var SECTION = `### Computer use (Linux desktop control)
-Drive the workspace's Linux desktop - open a browser, click, type, scroll, screenshot, record - and surface a live noVNC viewer to the user via the \`replicas computer\` CLI. Every Replicas workspace boots with Xvfb / openbox / x11vnc / noVNC pre-installed.
+Drive the workspace's Linux desktop - open a browser, click, type, scroll, screenshot, record - via the \`replicas computer\` CLI. Every Replicas workspace boots with Xvfb / openbox / x11vnc / noVNC pre-installed and the live noVNC viewer is automatically published as an authenticated preview, so a \`Desktop\` tab is always available in the dashboard. Use \`replicas computer info\` to get the viewer URL when you want to share it (e.g. point a user on Slack at the live stream).
 
 **Reference:** \`references/COMPUTER-USE.md\`
 
 Use this when:
 - A task requires interacting with a website, web app, or desktop application that has no usable API
-- You want the user to watch the agent work - \`replicas computer start\` exposes a \`Desktop\` tab in the dashboard
+- You want the user to watch the agent work - they can open the \`Desktop\` tab, or you can share the URL from \`replicas computer info\`
 - You're testing UI changes in a browser before reporting them as done
 - You want to record a screen capture of a task as proof to share back`;
 var REFERENCE = `# Computer use (Linux desktop control)
 
-Every Replicas workspace boots with a full Linux desktop stack - Xvfb (1920\xD71080), openbox, tint2, x11vnc, noVNC, ffmpeg, and Google Chrome. You drive it through the \`replicas computer\` CLI.
+Every Replicas workspace boots with a full Linux desktop stack - Xvfb (1920\xD71080), openbox, tint2, x11vnc, noVNC, ffmpeg, and Google Chrome. The engine also auto-registers the noVNC viewer (port 6080) as an authenticated preview at startup, so the dashboard \`Desktop\` tab is live the moment the workspace is up. You drive the desktop through the \`replicas computer\` CLI.
 
 Use this for anything the user can't reasonably do via an API - clicking around web apps, filling forms, testing UI changes, dragging files between desktop apps, recording a walkthrough.
 
@@ -376,7 +376,7 @@ Use this for anything the user can't reasonably do via an API - clicking around
 
 - **Prefer real APIs first.** If a task has a CLI or HTTP API (GitHub, Linear, Slack, Replicas itself), use that. Driving a UI is slower, flakier, and less auditable.
 - **Use it when there's no API**: testing a frontend you just changed, navigating a vendor portal, demonstrating a flow on video.
-- **Use it when the user wants to watch.** \`replicas computer start\` exposes a live \`Desktop\` tab in the dashboard - they can watch you work in real time.
+- **Use it when the user wants to watch.** The dashboard already shows a \`Desktop\` tab. If you're talking to the user somewhere else (e.g. Slack), call \`replicas computer info\` to get the viewer URL and paste it in.
 
 ## Never use raw \`xdotool\` / \`scrot\` / \`ffmpeg\` directly
 
@@ -395,10 +395,10 @@ scrot /tmp/state.png
 ## Quickstart
 
 \`\`\`bash
-# 1) Make the desktop visible to the user (creates an authenticated noVNC
-#    preview on port 6080, prints the viewer URL, adds a "Desktop" tab to the
-#    dashboard).
-replicas computer start
+# 1) (Optional) Get the live viewer URL so you can share it with the user.
+#    The desktop is already running and the preview is already registered -
+#    this just looks up the URL.
+replicas computer info
 
 # 2) Launch a browser on the workspace display.
 replicas computer launch chrome
@@ -419,20 +419,14 @@ replicas computer record start /tmp/demo.mp4 --fps 60
 # ... do stuff ...
 replicas computer record stop
 replicas media upload /tmp/demo.mp4
-
-# 6) Tear down the live preview when done (services keep running for next time).
-replicas computer stop
 \`\`\`
 
 ## Command reference
 
-### \`replicas computer start [--port N] [--display :N] [--size WxH]\`
-Ensures all desktop services are running and creates an authenticated noVNC preview. Prints the viewer URL (\`https://<port>-<hash>.tryreplicas.com/\`). The Replicas dashboard automatically shows a \`Desktop\` tab while this preview is live - point the user at it instead of pasting the URL.
-
-Idempotent - safe to call repeatedly. Use it as the first computer-use command in any session.
+### \`replicas computer info\`
+Prints the live noVNC viewer URL (\`https://6080-<hash>.tryreplicas.com/\`) for the workspace desktop. The engine auto-registers this authenticated preview on startup; \`info\` just looks it up. Use it when you want to share the live stream URL with the user out-of-band (e.g. in a Slack reply) - the dashboard \`Desktop\` tab already points at the same URL automatically.
 
-### \`replicas computer stop [--port N]\`
-Tears down the noVNC preview (the \`Desktop\` tab disappears). The underlying Xvfb / openbox / x11vnc / browser keep running so the next \`start\` is instant.
+If invoked very early in the workspace lifecycle, \`info\` will poll briefly while the engine finishes registering the preview, then error if it's still not available.
 
 ### \`replicas computer status\`
 Prints which desktop services are running and the active preview URL (if any). Useful for debugging when a tool call seems to be doing nothing.
@@ -505,12 +499,11 @@ replicas computer screenshot /tmp/loaded.png
 The display is 1920\xD71080. Screenshot pixels map 1:1 to click coordinates - if your Read tool shows a button at pixel (520, 700), click \`replicas computer click 520 700\`. **No translation needed.** Modern image-reading models often imagine the screenshot is at a different resolution; trust the \`xdpyinfo\` value (\`replicas computer status\` shows the real size).
 
 ### Letting the user watch
-Always start the desktop session with \`replicas computer start\` *before* doing anything visual, even if you don't need the URL yourself. The Desktop tab appears in their dashboard. They get to watch and intervene if needed.
+The Desktop tab is already live in the dashboard - the user can open it any time. If you're communicating with the user somewhere else (Slack, PR comment, etc.), grab the URL with \`replicas computer info\` and share it inline so they can watch you work.
 
 ### Recording a deliverable
 For tasks the user wants proof of:
 \`\`\`bash
-replicas computer start                                 # makes it visible live too
 replicas computer record start /tmp/walkthrough.mp4
 # ... your work ...
 replicas computer record stop
@@ -518,15 +511,13 @@ replicas media upload /tmp/walkthrough.mp4
 \`\`\`
 Then embed the printed \`![\u2026](\u2026)\` line in your chat reply. See \`MEDIA.md\`.
 
-### Cleaning up
-Call \`replicas computer stop\` when you're done with the visual demo so the live preview URL goes away. The services keep running so the next \`start\` is instant.
-
 ## Failure modes
 
 - **"Desktop services script missing"**: workspace image is older than this skill. Tell the user - nothing you can do from the CLI side.
 - **\`xdotool ... failed: Can't open display\`**: Xvfb didn't come up. \`replicas computer status\` will show which service is dead. Re-running any CLI command auto-attempts to start it.
 - **Browser doesn't appear after \`launch chrome\`**: give it 1-2s, then screenshot. Chrome cold-start on the virtual display takes ~500ms but bigger pages take longer.
 - **Live preview shows static / black screen**: the browser may have crashed. \`replicas computer status\` should show no Chrome process - re-launch.
+- **\`replicas computer info\` errors with "not registered"**: engine couldn't register the preview at startup (transient monolith error, or warming mode). Re-running the engine usually fixes it. Until it's registered, the Desktop tab will show a placeholder.
 
 ## What gets baked in vs. lazy
 
@@ -534,10 +525,10 @@ Call \`replicas computer stop\` when you're done with the visual demo so the liv
 |---|---|
 | \`xvfb\`, \`openbox\`, \`tint2\`, \`x11vnc\`, \`websockify\`, \`xdotool\`, \`scrot\`, \`ffmpeg\`, \`google-chrome\` | Baked into the workspace image |
 | Xvfb / openbox / tint2 / x11vnc / websockify processes | Started at workspace boot (\`replicas-start-desktop-services\`) |
-| noVNC preview URL (port 6080) | **Lazy** - created by \`replicas computer start\` |
-| Dashboard \`Desktop\` tab | Appears when the preview URL is live, disappears on \`stop\` |
+| noVNC preview URL (port 6080) | Registered by the engine on startup (authenticated) |
+| Dashboard \`Desktop\` tab | Always available once the engine has registered the preview |
 
-You can call any of the input tools (\`click\`, \`type\`, \`screenshot\`, etc.) without first calling \`start\` - they'll work since the daemons are running. \`start\` is only needed when you want the user to see the live stream.
+You can call any of the input tools (\`click\`, \`type\`, \`screenshot\`, etc.) immediately - the daemons are already running.
 `;
 var COMPUTER_ABILITY = {
   label: "Computer use",
@@ -1683,17 +1674,25 @@ function clampWarmHookTimeoutMs(timeoutMs) {
   }
   return Math.min(timeoutMs, MAX_WARM_HOOK_TIMEOUT_MS);
 }
-function buildHookOutputPreview(text, maxChars = DEFAULT_HOOK_OUTPUT_PREVIEW_CHARS) {
+function buildOutputPreview(text, {
+  maxChars = DEFAULT_HOOK_OUTPUT_PREVIEW_CHARS,
+  truncateFrom = "head",
+  marker = "\n...[truncated \u2014 download the full log to see the rest]"
+} = {}) {
   if (text.length <= maxChars) {
     return { output: text, outputTruncated: false, outputTotalChars: text.length };
   }
+  const previewChars = Math.max(0, maxChars - marker.length);
+  const output = previewChars === 0 ? marker.slice(0, maxChars) : truncateFrom === "tail" ? `${marker}${text.slice(-previewChars)}` : `${text.slice(0, previewChars)}${marker}`;
   return {
-    output: `${text.slice(0, maxChars)}
-...[truncated \u2014 download the full log to see the rest]`,
+    output,
     outputTruncated: true,
     outputTotalChars: text.length
   };
 }
+function buildHookOutputPreview(text, maxChars = DEFAULT_HOOK_OUTPUT_PREVIEW_CHARS) {
+  return buildOutputPreview(text, { maxChars });
+}
 function parseWarmHookConfig(value, filename = "replicas.json") {
   if (typeof value === "string") {
     return value;
@@ -1784,7 +1783,8 @@ function isClaudeAuthErrorText(text) {
 }
 
 // ../shared/src/engine/environment.ts
-var DAYTONA_SNAPSHOT_ID = "29-05-2026-royal-york-v2";
+var DAYTONA_SNAPSHOT_ID = "29-05-2026-royal-york-v4";
+var DESKTOP_NOVNC_PORT = 6080;
 
 // ../shared/src/engine/types.ts
 var DEFAULT_CHAT_TITLES = {
@@ -2146,21 +2146,48 @@ var BaseRefreshManager = class {
   }
 };
 
+// src/services/monolith-service.ts
+async function monolithRequest(path4, init = {}) {
+  if (!ENGINE_ENV.WORKSPACE_ID) {
+    throw new Error("WORKSPACE_ID is not set; cannot call monolith");
+  }
+  return fetch(`${ENGINE_ENV.MONOLITH_URL}${path4}`, {
+    method: init.method ?? "POST",
+    headers: {
+      Authorization: `Bearer ${ENGINE_ENV.REPLICAS_ENGINE_SECRET}`,
+      "X-Workspace-Id": ENGINE_ENV.WORKSPACE_ID,
+      "Content-Type": "application/json"
+    },
+    body: init.body === void 0 ? void 0 : JSON.stringify(init.body),
+    signal: init.signal
+  });
+}
+var MonolithService = class {
+  async sendEvent(event) {
+    if (!ENGINE_ENV.WORKSPACE_ID) {
+      return;
+    }
+    try {
+      const response = await monolithRequest("/v1/engine/webhook", { body: event });
+      if (!response.ok) {
+        const errorText = await response.text();
+        console.error(`[MonolithService] Failed to send event: ${response.status} ${errorText}`);
+      }
+    } catch (error) {
+      console.error("[MonolithService] Failed to send event:", error);
+    }
+  }
+};
+var monolithService = new MonolithService();
+
 // src/managers/github-token-manager.ts
 var GitHubTokenManager = class extends BaseRefreshManager {
   constructor() {
     super("GitHubTokenManager");
   }
-  async doRefresh(config) {
+  async doRefresh(_config) {
     console.log("[GitHubTokenManager] Refreshing GitHub token...");
-    const response = await fetch(`${config.monolithUrl}/v1/engine/github/refresh-token`, {
-      method: "POST",
-      headers: {
-        Authorization: `Bearer ${config.engineSecret}`,
-        "X-Workspace-Id": config.workspaceId,
-        "Content-Type": "application/json"
-      }
-    });
+    const response = await monolithRequest("/v1/engine/github/refresh-token");
     if (!response.ok) {
       const errorText = await response.text();
       throw new Error(`Token refresh failed: ${response.status} ${errorText}`);
@@ -2225,19 +2252,13 @@ var ClaudeTokenManager = class extends BaseRefreshManager {
     }
     return null;
   }
-  async doRefresh(config) {
-    await this.refreshWithRequest(config);
+  async doRefresh(_config) {
+    await this.refreshWithRequest();
   }
-  async refreshWithRequest(config, request) {
+  async refreshWithRequest(request) {
     console.log("[ClaudeTokenManager] Refreshing Claude credentials...");
-    const response = await fetch(`${config.monolithUrl}/v1/engine/claude/refresh-credentials`, {
-      method: "POST",
-      headers: {
-        Authorization: `Bearer ${config.engineSecret}`,
-        "X-Workspace-Id": config.workspaceId,
-        "Content-Type": "application/json"
-      },
-      ...request ? { body: JSON.stringify(request) } : {}
+    const response = await monolithRequest("/v1/engine/claude/refresh-credentials", {
+      body: request
     });
     if (!response.ok) {
       const errorText = await response.text();
@@ -2253,7 +2274,7 @@ var ClaudeTokenManager = class extends BaseRefreshManager {
     try {
       console.log("[ClaudeTokenManager] Fetching fresh credentials from monolith after auth failure...");
       const failedMethod = ENGINE_ENV.REPLICAS_CLAUDE_AUTH_METHOD;
-      await this.refreshWithRequest(config, failedMethod && failedMethod !== "none" ? {
+      await this.refreshWithRequest(failedMethod && failedMethod !== "none" ? {
         failedMethod,
         failureReason
       } : void 0);
@@ -2337,19 +2358,13 @@ var CodexTokenManager = class extends BaseRefreshManager {
     }
     return null;
   }
-  async doRefresh(config) {
-    await this.refreshWithRequest(config);
+  async doRefresh(_config) {
+    await this.refreshWithRequest();
   }
-  async refreshWithRequest(config, request) {
+  async refreshWithRequest(request) {
     console.log("[CodexTokenManager] Refreshing Codex credentials...");
-    const response = await fetch(`${config.monolithUrl}/v1/engine/codex/refresh-credentials`, {
-      method: "POST",
-      headers: {
-        Authorization: `Bearer ${config.engineSecret}`,
-        "X-Workspace-Id": config.workspaceId,
-        "Content-Type": "application/json"
-      },
-      ...request ? { body: JSON.stringify(request) } : {}
+    const response = await monolithRequest("/v1/engine/codex/refresh-credentials", {
+      body: request
     });
     if (!response.ok) {
       const errorText = await response.text();
@@ -2365,7 +2380,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     try {
       console.log("[CodexTokenManager] Fetching fresh credentials from monolith after auth failure...");
       const failedMethod = ENGINE_ENV.REPLICAS_CODEX_AUTH_METHOD;
-      await this.refreshWithRequest(config, failedMethod === "oauth" || failedMethod === "api_key" ? {
+      await this.refreshWithRequest(failedMethod === "oauth" || failedMethod === "api_key" ? {
         failedMethod,
         failureReason
       } : void 0);
@@ -2435,11 +2450,24 @@ import { execFileSync as execFileSync2, spawnSync } from "child_process";
 import { join as join5 } from "path";
 
 // src/utils/state.ts
-import { readFile, writeFile, mkdir, rename, unlink } from "fs/promises";
+import { readFile, mkdir } from "fs/promises";
 import { existsSync } from "fs";
 import { join as join3 } from "path";
 import { homedir as homedir3 } from "os";
 
+// src/utils/file.ts
+import { rename, unlink, writeFile } from "fs/promises";
+async function atomicWriteFile(path4, data) {
+  const tmpFile = `${path4}.${process.pid}.${Date.now()}.tmp`;
+  try {
+    await writeFile(tmpFile, data, "utf-8");
+    await rename(tmpFile, path4);
+  } catch (error) {
+    await unlink(tmpFile).catch(() => void 0);
+    throw error;
+  }
+}
+
 // src/utils/type-guards.ts
 function isRecord4(value) {
   return typeof value === "object" && value !== null;
@@ -2462,14 +2490,7 @@ async function updateEngineState(updater) {
     await mkdir(STATE_DIR, { recursive: true });
     const currentState = await loadEngineState();
     const nextState = updater(currentState);
-    const tmpFile = `${STATE_FILE}.${process.pid}.tmp`;
-    try {
-      await writeFile(tmpFile, JSON.stringify(nextState, null, 2), "utf-8");
-      await rename(tmpFile, STATE_FILE);
-    } catch (err) {
-      await unlink(tmpFile).catch(() => void 0);
-      throw err;
-    }
+    await atomicWriteFile(STATE_FILE, JSON.stringify(nextState, null, 2));
   });
 }
 function isEngineRepoDiff(value) {
@@ -3059,14 +3080,14 @@ var EngineLogger = class {
 var engineLogger = new EngineLogger();
 
 // src/services/replicas-config-service.ts
-import { readFile as readFile4, appendFile as appendFile2, writeFile as writeFile5, mkdir as mkdir5 } from "fs/promises";
+import { readFile as readFile4, appendFile as appendFile2, writeFile as writeFile4, mkdir as mkdir5 } from "fs/promises";
 import { existsSync as existsSync4 } from "fs";
 import { join as join9 } from "path";
 import { homedir as homedir7 } from "os";
 import { spawn } from "child_process";
 
 // src/services/environment-details-service.ts
-import { mkdir as mkdir3, readFile as readFile2, writeFile as writeFile3 } from "fs/promises";
+import { mkdir as mkdir3, readFile as readFile2 } from "fs/promises";
 import { existsSync as existsSync3 } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join7 } from "path";
@@ -3154,8 +3175,8 @@ async function readDetails() {
 }
 async function writeDetails(details) {
   await mkdir3(REPLICAS_DIR, { recursive: true });
-  await writeFile3(DETAILS_FILE, `${JSON.stringify(details, null, 2)}
-`, "utf-8");
+  await atomicWriteFile(DETAILS_FILE, `${JSON.stringify(details, null, 2)}
+`);
 }
 var EnvironmentDetailsService = class {
   async getDetails() {
@@ -3240,7 +3261,7 @@ var environmentDetailsService = new EnvironmentDetailsService();
 
 // src/services/start-hook-logs-service.ts
 import { createHash } from "crypto";
-import { mkdir as mkdir4, readFile as readFile3, writeFile as writeFile4, readdir as readdir2 } from "fs/promises";
+import { mkdir as mkdir4, readFile as readFile3, writeFile as writeFile3, readdir as readdir2 } from "fs/promises";
 import { homedir as homedir6 } from "os";
 import { join as join8 } from "path";
 var LOGS_DIR = join8(homedir6(), ".replicas", "start-hook-logs");
@@ -3263,7 +3284,7 @@ var StartHookLogsService = class {
   async saveRepoLog(repoName, entry) {
     await this.ensureDir();
     const log = { repoName, ...entry };
-    await writeFile4(join8(LOGS_DIR, repoFilename(repoName)), `${JSON.stringify(log, null, 2)}
+    await writeFile3(join8(LOGS_DIR, repoFilename(repoName)), `${JSON.stringify(log, null, 2)}
 `, "utf-8");
   }
   async getAllLogs() {
@@ -3527,7 +3548,7 @@ var ReplicasConfigService = class {
     this.hooksFailed = false;
     try {
       await mkdir5(join9(homedir7(), ".replicas"), { recursive: true });
-      await writeFile5(
+      await writeFile4(
         START_HOOKS_LOG,
         `=== Start Hooks Execution Log ===
 Started: ${(/* @__PURE__ */ new Date()).toISOString()}
@@ -3753,7 +3774,7 @@ var EventService = class {
 var eventService = new EventService();
 
 // src/services/preview-service.ts
-import { mkdir as mkdir7, readFile as readFile5, writeFile as writeFile6 } from "fs/promises";
+import { mkdir as mkdir7, readFile as readFile5 } from "fs/promises";
 import { existsSync as existsSync5 } from "fs";
 import { randomUUID as randomUUID2 } from "crypto";
 import { homedir as homedir9 } from "os";
@@ -3773,8 +3794,8 @@ async function readPreviewsFile() {
 async function writePreviewsFile(data) {
   const dir = dirname(PREVIEW_PORTS_FILE);
   await mkdir7(dir, { recursive: true });
-  await writeFile6(PREVIEW_PORTS_FILE, `${JSON.stringify(data, null, 2)}
-`, "utf-8");
+  await atomicWriteFile(PREVIEW_PORTS_FILE, `${JSON.stringify(data, null, 2)}
+`);
 }
 var PreviewService = class {
   async initialize() {
@@ -3824,9 +3845,52 @@ var PreviewService = class {
 };
 var previewService = new PreviewService();
 
+// src/services/desktop-preview-service.ts
+var REGISTRATION_TIMEOUT_MS = 3e4;
+var RETRY_DELAY_MS = 2e3;
+var ATTEMPT_TIMEOUT_MS = 8e3;
+async function attemptRegistration() {
+  try {
+    const response = await monolithRequest("/v1/previews", {
+      body: { port: DESKTOP_NOVNC_PORT, authenticated: true },
+      signal: AbortSignal.timeout(ATTEMPT_TIMEOUT_MS)
+    });
+    if (response.ok || response.status === 409) {
+      console.log(
+        `[DesktopPreview] Registered port ${DESKTOP_NOVNC_PORT} (status ${response.status}).`
+      );
+      return true;
+    }
+    const errorText = await response.text().catch(() => "");
+    console.error(
+      `[DesktopPreview] Registration failed: ${response.status} ${errorText}`
+    );
+    return false;
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    console.error(`[DesktopPreview] Registration error: ${message}`);
+    return false;
+  }
+}
+async function registerDesktopPreview() {
+  if (IS_WARMING_MODE || !ENGINE_ENV.WORKSPACE_ID) {
+    return;
+  }
+  const deadline = Date.now() + REGISTRATION_TIMEOUT_MS;
+  while (Date.now() < deadline) {
+    if (await attemptRegistration()) {
+      return;
+    }
+    await new Promise((resolve3) => setTimeout(resolve3, RETRY_DELAY_MS));
+  }
+  console.error(
+    `[DesktopPreview] Gave up registering port ${DESKTOP_NOVNC_PORT} after ${REGISTRATION_TIMEOUT_MS}ms`
+  );
+}
+
 // src/services/chat/chat-service.ts
 import { existsSync as existsSync7 } from "fs";
-import { appendFile as appendFile5, mkdir as mkdir11, readFile as readFile8, rm, writeFile as writeFile9 } from "fs/promises";
+import { appendFile as appendFile5, copyFile, mkdir as mkdir11, readFile as readFile8, rename as rename2, rm } from "fs/promises";
 import { homedir as homedir13 } from "os";
 import { join as join15 } from "path";
 import { randomUUID as randomUUID5 } from "crypto";
@@ -4379,7 +4443,7 @@ function extractPlanFromCodexAspNotification(notification) {
 
 // src/utils/image-utils.ts
 import { randomUUID as randomUUID3 } from "crypto";
-import { mkdir as mkdir8, unlink as unlink2, writeFile as writeFile7 } from "fs/promises";
+import { mkdir as mkdir8, unlink as unlink2, writeFile as writeFile5 } from "fs/promises";
 import { homedir as homedir10 } from "os";
 import { join as join12 } from "path";
 function isImageMediaType(value) {
@@ -4467,7 +4531,7 @@ async function saveNormalizedImagesToTempFiles(images, tempImageDir = join12(hom
       const ext = image.source.media_type.split("/")[1] || "png";
       const filename = `img_${randomUUID3()}.${ext}`;
       const filepath = join12(tempImageDir, filename);
-      await writeFile7(filepath, Buffer.from(image.source.data, "base64"));
+      await writeFile5(filepath, Buffer.from(image.source.data, "base64"));
       tempPaths.push(filepath);
     }
   } catch (error) {
@@ -4617,33 +4681,6 @@ var MessageQueueService = class {
   }
 };
 
-// src/services/monolith-service.ts
-var MonolithService = class {
-  async sendEvent(event) {
-    if (!ENGINE_ENV.WORKSPACE_ID) {
-      return;
-    }
-    try {
-      const response = await fetch(`${ENGINE_ENV.MONOLITH_URL}/v1/engine/webhook`, {
-        method: "POST",
-        headers: {
-          Authorization: `Bearer ${ENGINE_ENV.REPLICAS_ENGINE_SECRET}`,
-          "X-Workspace-Id": ENGINE_ENV.WORKSPACE_ID,
-          "Content-Type": "application/json"
-        },
-        body: JSON.stringify(event)
-      });
-      if (!response.ok) {
-        const errorText = await response.text();
-        console.error(`[MonolithService] Failed to send event: ${response.status} ${errorText}`);
-      }
-    } catch (error) {
-      console.error("[MonolithService] Failed to send event:", error);
-    }
-  }
-};
-var monolithService = new MonolithService();
-
 // src/managers/coding-agent-manager.ts
 var MAX_INTERRUPT_QUEUE_ITEMS = 1e3;
 var MAX_INTERRUPT_QUEUE_CHARS = 2e5;
@@ -5965,6 +6002,7 @@ var THREAD_GOAL_CLEAR_METHOD = "thread/goal/clear";
 var TURN_START_METHOD = "turn/start";
 var TURN_INTERRUPT_METHOD = "turn/interrupt";
 var ACCOUNT_RATE_LIMITS_READ_METHOD = "account/rateLimits/read";
+var MAX_CODEX_ASP_TRANSCRIPT_OUTPUT_CHARS = DEFAULT_HOOK_OUTPUT_PREVIEW_CHARS;
 function toReasoningEffort(thinkingLevel) {
   return codexReasoningEffortForThinkingLevel(thinkingLevel);
 }
@@ -5986,7 +6024,7 @@ function timestampFromMilliseconds(value) {
 }
 function stringifyToolOutput(value) {
   if (value === null || value === void 0) return void 0;
-  if (typeof value === "string") return value;
+  if (typeof value === "string") return truncateCodexAspTranscriptOutput(value);
   if (typeof value === "object" && "content" in value && Array.isArray(value.content)) {
     const text = value.content.map((item) => {
       if (typeof item === "string") return item;
@@ -5995,14 +6033,24 @@ function stringifyToolOutput(value) {
       }
       return "";
     }).filter(Boolean).join("\n");
-    if (text) return text;
+    if (text) return truncateCodexAspTranscriptOutput(text);
   }
   try {
-    return JSON.stringify(value);
+    return truncateCodexAspTranscriptOutput(JSON.stringify(value));
   } catch {
-    return String(value);
+    return truncateCodexAspTranscriptOutput(String(value));
   }
 }
+function truncateCodexAspTranscriptOutput(output, maxChars = MAX_CODEX_ASP_TRANSCRIPT_OUTPUT_CHARS) {
+  return buildOutputPreview(output, {
+    maxChars,
+    truncateFrom: "tail",
+    marker: "\n[output truncated: showing tail of output]\n"
+  }).output;
+}
+function appendCodexAspTranscriptOutput(current, delta, maxChars = MAX_CODEX_ASP_TRANSCRIPT_OUTPUT_CHARS) {
+  return truncateCodexAspTranscriptOutput(`${current ?? ""}${delta}`, maxChars);
+}
 function transcriptPatchOperation(change) {
   return {
     action: change.kind.type,
@@ -6049,7 +6097,7 @@ function itemToTranscriptItem(item, timestamp, status) {
       type: "commandExecution",
       id: item.id,
       command: item.command,
-      ...item.aggregatedOutput ? { output: item.aggregatedOutput } : {},
+      ...item.aggregatedOutput ? { output: truncateCodexAspTranscriptOutput(item.aggregatedOutput) } : {},
       exitCode,
       timestamp,
       status: normalizeCodexAspTranscriptStatus(item.status, typeof exitCode === "number" && exitCode !== 0)
@@ -6073,7 +6121,7 @@ function itemToTranscriptItem(item, timestamp, status) {
       server: item.server,
       tool: item.tool,
       input: item.arguments,
-      output: item.error?.message ?? stringifyToolOutput(item.result),
+      output: item.error?.message ? truncateCodexAspTranscriptOutput(item.error.message) : stringifyToolOutput(item.result),
       timestamp,
       status: normalizeCodexAspTranscriptStatus(item.status, item.status === "failed")
     };
@@ -7087,7 +7135,7 @@ var CodexAspManager = class extends CodingAgentManager {
     if (item.type !== "commandExecution" && item.type !== "fileChange") return;
     turn.items[itemIndex] = {
       ...item,
-      output: `${item.output ?? ""}${delta}`,
+      output: appendCodexAspTranscriptOutput(item.output, delta),
       status: "in_progress"
     };
     this.codexAspTranscript.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -7189,7 +7237,7 @@ var CodexAspManager = class extends CodingAgentManager {
 
 // src/managers/codex-manager.ts
 import { Codex } from "@openai/codex-sdk";
-import { readdir as readdir3, stat as stat2, writeFile as writeFile8, mkdir as mkdir10, readFile as readFile7 } from "fs/promises";
+import { readdir as readdir3, stat as stat2, writeFile as writeFile6, mkdir as mkdir10, readFile as readFile7 } from "fs/promises";
 import { existsSync as existsSync6 } from "fs";
 import { join as join14 } from "path";
 import { homedir as homedir12 } from "os";
@@ -7293,7 +7341,7 @@ var CodexManager = class extends CodingAgentManager {
         delete config.developer_instructions;
       }
       const tomlContent = stringifyToml(config);
-      await writeFile8(CODEX_CONFIG_PATH, tomlContent, "utf-8");
+      await writeFile6(CODEX_CONFIG_PATH, tomlContent, "utf-8");
       console.log("[CodexManager] Updated config.toml with developer_instructions");
     } catch (error) {
       console.error("[CodexManager] Failed to update config.toml:", error);
@@ -8152,15 +8200,7 @@ var KeepAliveService = class _KeepAliveService {
       return;
     }
     try {
-      const response = await fetch(`${ENGINE_ENV.MONOLITH_URL}/v1/engine/keep-alive`, {
-        method: "POST",
-        headers: {
-          Authorization: `Bearer ${ENGINE_ENV.REPLICAS_ENGINE_SECRET}`,
-          "X-Workspace-Id": ENGINE_ENV.WORKSPACE_ID,
-          "Content-Type": "application/json"
-        },
-        body: JSON.stringify({})
-      });
+      const response = await monolithRequest("/v1/engine/keep-alive", { body: {} });
       if (!response.ok) {
         console.warn(`[KeepAlive] Ping returned ${response.status}`);
       }
@@ -8204,6 +8244,7 @@ var CLAUDE_HISTORY_DIR = join15(ENGINE_DIR2, "claude-histories");
 var RELAY_HISTORY_DIR = join15(ENGINE_DIR2, "relay-histories");
 var CHAT_SENDERS_DIR = join15(ENGINE_DIR2, "chat-senders");
 var CODEX_AUTH_PATH2 = join15(homedir13(), ".codex", "auth.json");
+var CHATS_BACKUP_FILE = `${CHATS_FILE}.bak`;
 function isChatMessageSender(value) {
   if (!isRecord4(value)) return false;
   return typeof value.senderUserId === "string" && typeof value.senderEmail === "string" && typeof value.recordedAt === "string";
@@ -8258,6 +8299,16 @@ function normalizePersistedChat(chat) {
     ...chat.provider === "codex" ? { codexBackend: codexBackendForChat(chat) } : {}
   };
 }
+function parsePersistedChatsContent(content) {
+  const parsed = JSON.parse(content);
+  if (!Array.isArray(parsed)) {
+    return [];
+  }
+  return parsed.filter((entry) => isPersistedChat(entry)).map((entry) => normalizePersistedChat(entry));
+}
+function corruptChatsFilePath() {
+  return `${CHATS_FILE}.corrupt-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}`;
+}
 function createUserMessageEvent(message, messageId) {
   return {
     timestamp: (/* @__PURE__ */ new Date()).toISOString(),
@@ -8749,23 +8800,44 @@ var ChatService = class {
   async loadChats() {
     try {
       const content = await readFile8(CHATS_FILE, "utf-8");
-      const parsed = JSON.parse(content);
-      if (!Array.isArray(parsed)) {
-        return [];
-      }
-      return parsed.filter((entry) => isPersistedChat(entry)).map((entry) => normalizePersistedChat(entry));
+      return parsePersistedChatsContent(content);
     } catch (error) {
       if (error && typeof error === "object" && "code" in error && error.code === "ENOENT") {
         return [];
       }
-      throw error;
+      const quarantinePath = corruptChatsFilePath();
+      console.error(`[ChatService] Failed to load ${CHATS_FILE}; quarantining and trying backup:`, error);
+      try {
+        await rename2(CHATS_FILE, quarantinePath);
+        console.error(`[ChatService] Quarantined corrupt chats file at ${quarantinePath}`);
+      } catch (renameError) {
+        console.error("[ChatService] Failed to quarantine corrupt chats file:", renameError);
+      }
+      try {
+        const backupContent = await readFile8(CHATS_BACKUP_FILE, "utf-8");
+        return parsePersistedChatsContent(backupContent);
+      } catch (backupError) {
+        if (backupError && typeof backupError === "object" && "code" in backupError && backupError.code === "ENOENT") {
+          return [];
+        }
+        console.error(`[ChatService] Failed to load backup ${CHATS_BACKUP_FILE}; starting with defaults:`, backupError);
+        return [];
+      }
     }
   }
   async persistAllChats() {
     this.writeChain = this.writeChain.catch(() => {
     }).then(async () => {
       const payload = Array.from(this.chats.values()).map((chat) => chat.persisted);
-      await writeFile9(CHATS_FILE, JSON.stringify(payload, null, 2), "utf-8");
+      try {
+        await copyFile(CHATS_FILE, CHATS_BACKUP_FILE);
+      } catch (error) {
+        if (!(error && typeof error === "object" && "code" in error && error.code === "ENOENT")) {
+          console.error("[ChatService] Failed to update chats backup:", error);
+        }
+      }
+      await atomicWriteFile(CHATS_FILE, `${JSON.stringify(payload, null, 2)}
+`);
     });
     await this.writeChain;
   }
@@ -9152,7 +9224,7 @@ import { join as join19 } from "path";
 
 // src/services/warm-hook-logs-service.ts
 import { createHash as createHash2 } from "crypto";
-import { mkdir as mkdir12, readFile as readFile11, writeFile as writeFile10, readdir as readdir5, appendFile as appendFile6, unlink as unlink3 } from "fs/promises";
+import { mkdir as mkdir12, readFile as readFile11, writeFile as writeFile7, readdir as readdir5, appendFile as appendFile6, unlink as unlink3 } from "fs/promises";
 import { homedir as homedir15 } from "os";
 import { join as join18 } from "path";
 var LOGS_DIR2 = join18(homedir15(), ".replicas", "warm-hook-logs");
@@ -9186,7 +9258,7 @@ var WarmHookLogsService = class {
       hookName: "organization",
       ...entry
     };
-    await writeFile10(join18(LOGS_DIR2, globalFilename()), `${JSON.stringify(log, null, 2)}
+    await writeFile7(join18(LOGS_DIR2, globalFilename()), `${JSON.stringify(log, null, 2)}
 `, "utf-8");
   }
   async saveEnvironmentHookLog(entry) {
@@ -9196,7 +9268,7 @@ var WarmHookLogsService = class {
       hookName: "environment",
       ...entry
     };
-    await writeFile10(join18(LOGS_DIR2, environmentFilename()), `${JSON.stringify(log, null, 2)}
+    await writeFile7(join18(LOGS_DIR2, environmentFilename()), `${JSON.stringify(log, null, 2)}
 `, "utf-8");
   }
   async saveRepoHookLog(repoName, entry) {
@@ -9206,7 +9278,7 @@ var WarmHookLogsService = class {
       hookName: repoName,
       ...entry
     };
-    await writeFile10(join18(LOGS_DIR2, repoFilename2(repoName)), `${JSON.stringify(log, null, 2)}
+    await writeFile7(join18(LOGS_DIR2, repoFilename2(repoName)), `${JSON.stringify(log, null, 2)}
 `, "utf-8");
   }
   async getAllLogs() {
@@ -10453,6 +10525,7 @@ serve(
     await chatService.initialize();
     await previewService.initialize();
     engineReady = true;
+    void registerDesktopPreview();
     if (!IS_WARMING_MODE) {
       await githubTokenManager.start();
       await claudeTokenManager.start();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.231",
+  "version": "0.1.233",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",