🤖 fix: replace_count double-replacement, devtools.jsonl rotation, tool_env SSH unset

.mux/tool_env

@@ -5,6 +5,11 @@
 # Keep PATH resolution and step logging deterministic across tool calls.
 # This mirrors the proven workflow the team liked in coder-k8s.
 
+# Leaked SSH vars make Debian's /etc/bash.bashrc SSH heuristic source itself in
+# non-interactive make recipe shells, where its unguarded $PS1 fails under
+# `.SHELLFLAGS -eu` and breaks make targets.
+unset SSH_CLIENT SSH_CONNECTION SSH2_CLIENT
+
 mux_use_nix_devshell_path() {
 	local flake_root=""
 

src/browser/features/RightSidebar/DevToolsTab/useDevToolsSubscription.ts

@@ -68,6 +68,18 @@ export function useDevToolsSubscription(workspaceId: string) {
           case "step-updated":
             setStepsByRun((previousStepsByRun) => upsertStep(previousStepsByRun, event.step));
             break;
+          case "runs-evicted": {
+            const evictedRunIds = new Set(event.runIds);
+            setRuns((previousRuns) => previousRuns.filter((run) => !evictedRunIds.has(run.id)));
+            setStepsByRun((previousStepsByRun) => {
+              const nextStepsByRun = new Map(previousStepsByRun);
+              for (const runId of evictedRunIds) {
+                nextStepsByRun.delete(runId);
+              }
+              return nextStepsByRun;
+            });
+            break;
+          }
           case "cleared":
             setRuns([]);
             setStepsByRun(new Map());

src/common/orpc/schemas/api.ts

@@ -2481,6 +2481,10 @@ const DevToolsEventSchema = z.discriminatedUnion("type", [
     type: z.literal("step-updated"),
     step: DevToolsStepSchema,
   }),
+  z.object({
+    type: z.literal("runs-evicted"),
+    runIds: z.array(z.string()),
+  }),
   z.object({
     type: z.literal("cleared"),
   }),

src/common/types/devtools.ts

@@ -98,10 +98,19 @@ export type DevToolsEvent =
   | { type: "run-updated"; run: DevToolsRunSummary }
   | { type: "step-created"; step: DevToolsStep }
   | { type: "step-updated"; step: DevToolsStep }
+  | { type: "runs-evicted"; runIds: string[] }
   | { type: "cleared" };
 
-/** One line in devtools.jsonl — append-only log format. */
+/**
+ * One line in devtools.jsonl — append-only log format. The meta entries pair
+ * a rotated snapshot with the live log written after it: loading skips a live
+ * log whose generation predates the snapshot's, so a crash between the
+ * snapshot rename and the live-log rewrite cannot resurrect evicted runs.
+ */
 export type DevToolsLogEntry =
   | { type: "run"; run: DevToolsRun }
   | { type: "step"; step: DevToolsStep }
-  | { type: "step-update"; stepId: string; update: Partial<DevToolsStep> };
+  | { type: "step-update"; stepId: string; update: Partial<DevToolsStep> }
+  | { type: "snapshot-meta"; generation: number }
+  | { type: "log-meta"; generation: number }
+  | { type: "log-retire"; generation: number };

src/constants/devtools.ts

@@ -0,0 +1,4 @@
+// Live workspaces can accumulate API debug logs indefinitely.
+export const DEVTOOLS_LOG_MAX_BYTES = 50 * 1024 * 1024;
+
+export const DEVTOOLS_LOG_ROTATED_SUFFIX = ".1";