`.
+- **`verify-time-range.mjs`** — used to be here, skipped by `run.mjs`, and is now in the default
+ run. It was skipped for one reason: the only session it could get was whatever a booted service
+ had, while its assertions want `stats.messages > 1000` and a local midnight with rows on both
+ sides of it. The committed fixture is sixty rows of one afternoon. Shipping it anyway would have
+ meant shipping a red suite; relaxing the numbers would have stopped exercising the timezone
+ arithmetic the file exists for; committing a multi-megabyte real transcript would have put a
+ session's contents in the package.
+
+ It now builds its own transcript — 400 turns across four generations of 100, spanning eight hours
+ across a local midnight — and hands the **last three generations** to the server's own
+ `buildTrajectoryPayload`, the same exported function `/api/trajectory` calls. **What is synthetic
+ is the conversation; the `stats` being compared is still computed by the code under test.** That is
+ what makes section 3 still a real comparison: it asks whether the page's re-derivation agrees with
+ the server's numbers, and both sides are the shipped implementations.
+
+ The view is deliberately **not** the whole conversation, and that is what makes one of its numbers
+ testable. `messagesAll` counts the lineage; `messages` counts what this view holds. Hand the server
+ everything and the two are the same number, the 「全程 N」 assertion becomes the page agreeing with
+ itself, and re-scoping that field onto the view changes nothing any assertion can see. The
+ generator therefore keeps a whole generation out of the payload, and asserts the two differ before
+ asserting anything about either.
+
+ The generator is written to make the comparison bite rather than merely pass. It is not enough
+ for the session to be large: the fields section 3 compares have to be **non-zero**, or `0 === 0`
+ is green and means nothing. So the mix is deliberate — prompt turns, continuations, unfinished
+ turns, a turn that asks the reader something, steers, failing tool calls, bare checkpoint turns,
+ and all five token counters. Every compared field is checked non-zero *by the guard*, driven off
+ the same list the comparisons are driven off, so a field added there arrives covered rather than
+ waiting to be discovered at zero.
+
+ Two shapes in it are not obvious and were both wrong on the first attempt:
+
+ - `closed` is **not** a stop reason. The server sets it from a record of kind `reply`, and that
+ kind is assigned from the literal string `stop`. A closing assistant row written as `'endTurn'`
+ projects as `narration`, and every turn in the session silently stays open — `openTurns` came
+ out at 275 of 275, which is the shape that made the comparison look fine while testing nothing.
+ - A turn only closes when a **second** assistant row follows its tool results. One assistant row
+ carrying both text and tool calls is not a reply.
+
+ **It has a mutation control now: `mutate-time-range.py`, 29 cases in three groups.** The first six
+ are the mutations that were previously checked by hand against a throwaway copy of the package
+ while this file sat outside the suite — that was a one-off result nothing re-ran, so a later edit
+ could pass everything else here while this file went unverified. Each must be caught **by name**,
+ via the `FAILED_NAMES` line the guard prints, because a mutation is not satisfied by the suite
+ going red. The second group is one dropped count per compared field: both sides of a comparison are
+ correct in a passing run, so a field nobody mutates is a field whose comparison could be satisfied
+ by a page that never counts it at all. The third group breaks the guard's own session instead of
+ the page's code — removing the checkpoint turns, and making the view the whole conversation again
+ — because otherwise the twenty non-zero assertions are a claim about a generator nobody has tried to
+ starve. A comment-only edit is required to leave every verdict unchanged, the other direction:
+ a guard that cannot pass is as broken as one that cannot fail.
### Two anchors that were wrong, and one mutation that could not be caught
diff --git a/plugins/avatasia/mmc-trajectory/tests/client-check.mjs b/plugins/avatasia/mmc-trajectory/tests/client-check.mjs
index 9939cb6..ec4c3cc 100644
--- a/plugins/avatasia/mmc-trajectory/tests/client-check.mjs
+++ b/plugins/avatasia/mmc-trajectory/tests/client-check.mjs
@@ -61,9 +61,6 @@ check('duration NaN', sandbox.formatDuration(NaN), '—');
check('int null', sandbox.formatInt(null), '—');
check('int group', sandbox.formatInt(1234567), '1,234,567');
check('int zero', sandbox.formatInt(0), '0');
-check('compact null', sandbox.formatCompact(null), '—');
-check('compact 12500', sandbox.formatCompact(12500), '12.5k');
-check('compact 2500000', sandbox.formatCompact(2500000), '2.5M');
check('offset null', sandbox.formatOffset(null), '—');
check('offset 887', sandbox.formatOffset(887), '+887 ms');
check('offset 12000', sandbox.formatOffset(12000), '+12 s');
@@ -102,11 +99,13 @@ check('kindLabel ignores title', sandbox.kindLabel({ kind: 'system', title: 'com
check('every kind has a label', sandbox.KIND_ORDER.every((k) => typeof sandbox.KIND_LABELS[k] === 'string' && sandbox.KIND_LABELS[k].length > 0), true);
check('every label has a kind', Object.keys(sandbox.KIND_LABELS).every((k) => sandbox.KIND_ORDER.indexOf(k) >= 0), true);
-/* generation selector — one generation is not a choice, and the newest comes first */
+/* generation selector — one generation is not a choice, and the newest comes first.
+ `logicalMessageCount` is how many logical messages that generation stores; the catalog's
+ `messageCount` counts stored rows, and a message the store wrote twice is one message. */
const gens = [
- { generation: 0, kind: 'snapshot', messageCount: 676, active: false },
- { generation: 1, kind: 'snapshot', messageCount: 548, active: false },
- { generation: 2, kind: 'active', messageCount: 186, active: true }
+ { generation: 0, kind: 'snapshot', messageCount: 676, logicalMessageCount: 610, active: false },
+ { generation: 1, kind: 'snapshot', messageCount: 548, logicalMessageCount: 494, active: false },
+ { generation: 2, kind: 'active', messageCount: 186, logicalMessageCount: 180, active: true }
];
check('generationOptions empty for one', sandbox.generationOptions([{ generation: 0 }], 0), []);
check('generationOptions empty for none', sandbox.generationOptions([], null), []);
@@ -119,7 +118,16 @@ check('generationOptions all is never marked active', opts[0].active, false);
check('generationOptions newest generation first', opts[1].generation, 2);
check('generationOptions active marked', opts[1].active, true);
check('generationOptions active label', opts[1].label, '第 2 代（当前）');
-check('generationOptions archived label carries count', opts[2].label, '第 1 代（548 条）');
+check('generationOptions archived label carries the stored count', opts[2].label, '第 1 代（494 条）');
+check('generationOptions exposes that count to the option', opts[2].messageCount, 494);
+check(
+ 'generationOptions prefers the stored count over the catalog row count',
+ sandbox.generationOptions([
+ { generation: 0, messageCount: 676, logicalMessageCount: 610 },
+ { generation: 1, messageCount: 548, logicalMessageCount: 494 }
+ ], 1)[2].label,
+ '第 0 代（610 条）'
+);
check('generationOptions last option', opts[3].generation, 0);
check(
'generationOptions drops entries without a generation',
@@ -129,7 +137,7 @@ check(
check('generationOptions falls back to the active flag', sandbox.generationOptions(gens, null)[1].active, true);
check(
'generationOptions missing count drops the suffix',
- sandbox.generationOptions([{ generation: 0, messageCount: null }, { generation: 1, messageCount: 5, active: true }], 1)[2].label,
+ sandbox.generationOptions([{ generation: 0, logicalMessageCount: null }, { generation: 1, messageCount: 5, logicalMessageCount: 5, active: true }], 1)[2].label,
'第 0 代'
);
@@ -151,23 +159,120 @@ assert('jsonColorize colors numbers', colored.includes('tok-num'));
check('jsonColorize undefined', sandbox.jsonColorize(undefined), '');
check('jsonColorize null', sandbox.jsonColorize(null), 'null');
-/* search: case-insensitive over summary + text + result + thinking, hostile content */
+/* search: the server says which records match, and the page asks a set */
const hostile = {
+ index: 41,
kind: 'reply',
summary: 'Ask about ',
text: 'Answering now',
result: null,
thinking: null
};
-check('match lowercase', sandbox.matchesQuery(hostile, 'script'), true);
-check('match uppercase', sandbox.matchesQuery(hostile, 'ALERT'), true);
-check('match miss', sandbox.matchesQuery(hostile, 'zzz'), false);
-check('match empty query', sandbox.matchesQuery(hostile, ''), true);
-check('match result field', sandbox.matchesQuery({ kind: 'toolResult', result: { code: 'ENOENT' } }, 'enoent'), true);
-check('match thinking object', sandbox.matchesQuery({ kind: 'thinking', thinking: { text: 'chain of thought' } }, 'thought'), true);
-check('match null thinking safe', sandbox.matchesQuery({ kind: 'thinking', thinking: null }, 'thought'), false);
+// The five fields are no longer scanned here — that is the whole point of the move — so what is
+// held is a set of record indexes and the record's own content is irrelevant to the decision.
+const hit41 = sandbox.searchHitSet([{ index: 41 }, { index: 7 }]);
+check('the hit set holds the server\'s indexes', Array.from(hit41).sort((a, b) => a - b), [7, 41]);
+check('a record the server named passes whatever the needle says', sandbox.matchesQuery(hostile, 'script', hit41), true);
+check('a record whose text contains the needle but which the server did not name fails',
+ sandbox.matchesQuery(hostile, 'script', sandbox.searchHitSet([{ index: 7 }])), false);
+check('an unmatched needle matches nothing', sandbox.matchesQuery(hostile, 'zzz', sandbox.searchHitSet([])), false);
+check('an empty query filters nothing', sandbox.matchesQuery(hostile, '', hit41), true);
+check('an unanswered needle filters nothing, and says so elsewhere', sandbox.matchesQuery(hostile, 'zzz', null), true);
+check('an unanswered needle is not an empty result', sandbox.searchHitSet(null), null);
+check('a real empty result is an empty set', sandbox.searchHitSet([]).size, 0);
+check('a hit without an index is dropped rather than becoming one', sandbox.searchHitSet([{ index: 'x' }, { index: 3 }]).size, 1);
+check('a null hit is dropped', sandbox.searchHitSet([null, { index: 3 }]).size, 1);
+check('a record with no index cannot be in the set',
+ sandbox.matchesQuery({ kind: 'user' }, 'x', sandbox.searchHitSet([{ index: 1 }])), false);
+check('a missing record does not throw',
+ sandbox.matchesQuery(null, 'x', sandbox.searchHitSet([{ index: 1 }])), false);
+
+/* search: the four states the count line has to tell apart */
+const status = (over) => sandbox.searchStatusLabel(Object.assign(
+ { query: 'abc', searchError: null, searchPending: false, searchHits: new Set([1]), searchTotal: 3, searchTruncated: false },
+ over,
+));
+check('no needle, no status', sandbox.searchStatusLabel({ query: '', searchTotal: 0 }), '');
+check('a needle answered with hits', status({}), '命中 3 条');
+check('a needle answered with nothing', status({ searchHits: new Set(), searchTotal: 0 }), '未找到');
+check('a needle still out', status({ searchPending: true }), '搜索中');
+check('a needle that failed says so rather than showing an empty table',
+ status({ searchError: 'search_failed' }), '搜索失败，以下为上次结果');
+check('a failure outranks 「searching」, because it is the truth about the request',
+ status({ searchPending: true, searchError: 'search_failed' }), '搜索失败，以下为上次结果');
+check('an unanswered needle is not 「未找到」',
+ status({ searchHits: null, searchTotal: 0, searchPending: false }), '命中 0 条');
+check('a truncated answer says so', status({ searchTruncated: true }), '命中 3 条（已截断）');
+check('a needle answered with nothing and truncated reads as not found',
+ status({ searchHits: new Set(), searchTotal: 0, searchTruncated: true }), '未找到');
+check('no state is not a crash', sandbox.searchStatusLabel(null), '');
check('no kinds match', sandbox.hasKind({ kind: 'system' }, ['user']), false);
+/* search: the TRANSITION, which the four states above cannot see.
+ *
+ * Every case in the block above hands `searchStatusLabel` a state object written out for that one
+ * case, and the `runSearch` checks further down read its source as text. Both are blind to the same
+ * thing: a state is a snapshot, so neither can see that a search which failed once and was then
+ * re-run and answered still said 「搜索失败，以下为上次结果」 — the label reads the error first, so
+ * the stale error outranked the fresh hit set it was describing. Only the two paths a READER
+ * triggers cleared the field: typing, and pressing clear. A poll that re-runs the current query
+ * after the transcript changed is not a reader, so nothing it did could clear it.
+ *
+ * This runs it instead of reading it. `runSearch` is not between PURE:START and PURE:END — it
+ * talks to the network — so it could not join the sandbox above; here the SHIPPED source of the
+ * functions it needs is sliced out by `fnSource` and evaluated. That is the page's own text rather
+ * than a copy of it: rename a function in index.html and this fails with "no such function" instead
+ * of quietly continuing to exercise the old shape. */
+{
+ const netCtx = { console, AbortController, setTimeout, clearTimeout, encodeURIComponent };
+ vm.createContext(netCtx);
+ const needed = ['function isCount(value)', 'function formatInt(value)', 'function searchHitSet(hits)',
+ 'function sessionParam()', 'function searchStatusLabel(searchState)', 'function runSearch(needle)'];
+ const sources = needed.map((sig) => fnSource(sig));
+ check('the shipped search functions are all still findable by signature',
+ needed.filter((sig, i) => !sources[i]), []);
+
+ vm.runInContext([
+ // The shape `runSearch` writes into. Every field it touches is here; nothing else about the
+ // page's state is, because nothing else about the page's state is what is under test.
+ 'var state = { query: "retry me", sessionId: null, hostSessionId: null, followLatest: true,',
+ ' generation: null, searchHits: null, searchTotal: 0, searchTruncated: false,',
+ ' searchPending: false, searchError: null };',
+ 'var searchSeq = 0;',
+ 'var searchController = null;',
+ // The two renderers paint the page; neither is what is being tested and neither has a DOM here.
+ 'function resetWindowMode() {}',
+ 'function renderLedger() {}',
+ // A signature that no longer resolves becomes a function that throws when reached, so the
+ // failure names the function rather than arriving as a syntax error nobody can read.
+ ...sources.map((src, i) => src || (needed[i] + ' { throw new Error(' + JSON.stringify(needed[i])
+ + ' is not in index.html any more); }')),
+ ].join('\n'), netCtx);
+
+ const settle = async () => {
+ // fetch -> response.json() -> then -> then -> then is all microtasks plus the json() promise.
+ // Three macrotask turns drain all of them, so the count does not have to be right.
+ for (let i = 0; i < 3; i += 1) await new Promise((done) => setImmediate(done));
+ };
+
+ netCtx.fetch = () => Promise.reject(Object.assign(new Error('api'), { code: 'search_failed' }));
+ netCtx.runSearch('retry me');
+ await settle();
+ const afterFailure = netCtx.searchStatusLabel(netCtx.state);
+
+ netCtx.fetch = () => Promise.resolve({ ok: true, status: 200,
+ json: () => Promise.resolve({ hits: [{ index: 7 }], total: 1, truncated: false }) });
+ netCtx.runSearch('retry me');
+ await settle();
+
+ check('a search that failed says so', afterFailure, '搜索失败，以下为上次结果');
+ check('and the retry that answers it clears the failure, not just the pending flag',
+ netCtx.state.searchError, null);
+ check('so the label reports the answer instead of the stale failure',
+ netCtx.searchStatusLabel(netCtx.state), '命中 1 条');
+ check('and the hit set it describes is the new one', [...netCtx.state.searchHits], [7]);
+}
+
/* flatten + signature */
check('flatten empty', sandbox.flattenTurns(undefined), []);
check('flatten junk', sandbox.flattenTurns([{ id: 'a' }, null, { id: 'b', records: [null, { id: 'r' }] }]).length, 1);
@@ -184,14 +289,18 @@ assert('signature changes with counts', sigA !== sandbox.signatureOf(payload));
/* handoff markdown */
const turn = { id: 't1', index: 3 };
+// No `error` field any more: it was the same string as `result`, set only when `isError` was already
+// true, and it no longer rides along on the row at all. The message comes from the record-detail
+// read and is passed in, so the fixture passes it in too.
const failing = {
kind: 'toolCall', index: 42, toolName: 'read', toolCallId: 'call_bb89',
timestamp: 1791603931971, relativeMs: 887, durationMs: null, isError: true,
- error: 'boom x', model: 'MiniMax-M3.1-Flash-Preview', provider: 'minimax',
+ model: 'MiniMax-M3.1-Flash-Preview', provider: 'minimax',
api: 'anthropic-messages', stopReason: 'toolUse', textTruncated: true,
tokens: { input: 10, output: 5, cacheRead: 0, cacheWrite: 0, totalTokens: 15 },
arguments: { path: 'a.txt' }
};
+const ERROR_TEXT = 'boom x';
const raw = sandbox.truncateJson({ blob: 'x'.repeat(20000) }, sandbox.HANDOFF_RAW_LIMIT);
check('truncateJson caps at 8000', raw.text.length, 8000);
check('truncateJson flags', raw.truncated, true);
@@ -201,13 +310,18 @@ check('truncateJson small', sandbox.truncateJson({ a: 1 }, 8000).truncated, fals
// tests/verify-raw-lazy.mjs).
// The markdown therefore takes the verdict as its own argument, and this asserts that a
// caller who passes it still gets the line — and that one who does not, gets silence.
-const md = sandbox.buildHandoffMarkdown({ id: 'mvs_1', label: '测试会话' }, turn, failing, raw.text, raw.truncated, true);
-const mdWithoutVerdict = sandbox.buildHandoffMarkdown({ id: 'mvs_1', label: '测试会话' }, turn, failing, raw.text, raw.truncated);
+const md = sandbox.buildHandoffMarkdown({ id: 'mvs_1', label: '测试会话' }, turn, failing, raw.text, raw.truncated, true, ERROR_TEXT);
+const mdWithoutVerdict = sandbox.buildHandoffMarkdown({ id: 'mvs_1', label: '测试会话' }, turn, failing, raw.text, raw.truncated, undefined, ERROR_TEXT);
assert('md omits the flag when no verdict was passed', !mdWithoutVerdict.includes('原文过大已被省略'));
assert('md locates turn', md.includes('第 3 轮'));
assert('md locates record', md.includes('#42'));
assert('md names kind', md.includes('工具调用'));
-assert('md marks failure', md.includes('状态：失败') && md.includes('boom x'));
+assert('md marks failure', md.includes('状态：失败') && md.includes(ERROR_TEXT));
+// The detail read is allowed to fail on its own so the report still goes out. Saying so beats a
+// line reading 「失败」 with nothing after it, which reads as "the tool said nothing".
+const mdWithoutError = sandbox.buildHandoffMarkdown({ id: 'mvs_1', label: '测试会话' }, turn, failing, raw.text, raw.truncated, true);
+assert('md still reports the failure when the error text did not arrive', mdWithoutError.includes('状态：失败'));
+assert('and says the text is missing rather than printing an empty value', mdWithoutError.includes('（错误信息未能读取）'));
assert('md renders null duration as dash', md.includes('耗时：—'));
assert('md notes truncation', md.includes('已截断到 8000 字符'));
assert('md notes flags', md.includes('原文过大已被省略') && md.includes('正文已被上游截断'));
@@ -284,20 +398,114 @@ for (const selector of ['.tbtn', '.tbtn-icon', '.overview-plot', '.ov-span', '.w
assert('css rule survives comment stripping: ' + selector, styleNoComments.includes(selector + ' {') || styleNoComments.includes(selector + ','));
}
-// turnContext builds its string from turnContextParts, and turnContextSuffix calls
-// turnContext, so a check that wants to RUN any of them has to lift all three, in dependency
-// order. Lifting by regex is acceptable here because these are leaf functions ending in a
-// single `}` at a fixed indent; the alternative — moving them into the PURE block — would put
-// UI string helpers in the unit-tested core for no unit test's benefit.
+// The generation banner describes a context the reader chose out of a lineage. Whether that
+// generation is still growing is the difference between a promise and a description, and the
+// picker can pin the LIVE one — so promising immutability for whichever generation was picked is
+// the wrong sentence half the time. The wording is only reachable through the DOM, so it is
+// checked here against the delivered file rather than through the sandbox.
+assert('the generation banner names both states, not just the sealed one',
+ html.includes('当时封存的快照') && html.includes('仍在随后续对话更新'));
+assert('...and reads which one applies from the active generation',
+ /var live = [^;]*session\.activeGeneration === shown;/.test(html));
+
+// 「全部上下文共 N 条」 is the comparison the reader is there for. Taking it from the generation
+// on screen leaves the sentence true and useless, so it has to read the session total — which is
+// the logical message count, not the rows the catalog counted per file.
+const statsAllBody = fnSource('function statsAll()') || '';
+assert('the whole-context count reads the session total', statsAllBody.includes('stats.messagesAll'));
+
+/* ---------- the row key, and the one place selection is per message ---------- */
+// One message can expand into several rows. Anything that has to name ONE row has to use the
+// row's own key; selection is the deliberate exception, and that exception is the feature.
+const keySrc = fnSource('function recordKey(record)') || '';
+assert('the row key prefers the row index over the message id',
+ /isCount\(record\.index\)\)\s*return String\(record\.index\)/.test(keySrc));
+const rowSrc = fnSource('function buildRow(entry, rail)') || '';
+assert('a ledger row is keyed by its own row, not by its message',
+ /setAttribute\('data-row-id', recordKey\(record\)\)/.test(rowSrc));
+assert('...while clicking a row still selects the message it belongs to',
+ /selectRecord\(record\.id\)/.test(rowSrc) && /aria-current/.test(rowSrc));
+assert('the scroll anchor reads that key back out of the DOM',
+ /querySelector\('\[data-row-id="'/.test(html));
+
+// The overview had one id doing two jobs. A hover needs the row's key to mark one span; a click
+// needs the message's id. Returning the key forced both onto one number.
+const spanSrc = fnSource('function overviewModel(entries)') || '';
+assert('an overview span is keyed by its row, not by its message', /id: recordKey\(record\)/.test(spanSrc));
+const selSrc = fnSource('function recordInSelection(record, selection, spansById)') || '';
+assert('the time brush looks a span up by the row key too',
+ /spansById\.get\(recordKey\(record\)\)/.test(selSrc));
+const spanAtSrc = fnSource('function spanAt(clientX, clientY)') || '';
+// The hit test has to hand back a SPAN. It used to read the record id off the DOM node under the
+// pointer, and that is what forced click and hover onto one number; it now resolves through the
+// model instead, which returns the span. Asserting the *shape* of the answer rather than the line
+// that produced it is what lets the resolution move without the requirement moving with it.
+//
+// This is NOT the whole property, and the two rejections below are not an exhaustive account of it.
+// They catch the two spellings that have actually shipped here — resolving through the DOM, and
+// returning `.record.id` directly — and a second acceptance review found a third that walks past
+// both: `recordKey(hit.record)` and `hit.id` both return a key, keep the model resolution, and read
+// clean. Enumerating return values as syntax does not terminate. `verify-overview.mjs` owns the
+// property itself: it runs `spanAt` and asks what came back, because every key-returning shape
+// answers a string and a span is not one.
+assert('the hit test returns the span, so click and hover stop sharing one number',
+ /nearestSpanAt\(/.test(spanAtSrc)
+ && !/getAttribute\('data-record-id'\)/.test(spanAtSrc)
+ && !/\.record\.(id|index)\b/.test(spanAtSrc));
+const nearestSrc = fnSource('function nearestSpanAt(time, lane)') || '';
+assert('...and so does the nearest-span lookup', /best = span;/.test(nearestSrc) && !/best = span\.id;/.test(nearestSrc));
+const pointerUp = fnSource('function onOverviewPointerUp(event)') || '';
+assert('clicking a span selects the message, not the row',
+ /selectRecord\(span\.record\.id\)/.test(pointerUp) && /selectRecord\(nearest\.record\.id\)/.test(pointerUp));
+assert('hovering a span marks only that span',
+ /var id = hovered \? hovered\.id : null;/.test(html));
+
+// turnSubNode is the one presenter of the line under 对话轮次. It used to have a dead
+// sibling: turnContextSuffix() built the same string, had no caller outside this file, and
+// these two checks ran against it. That was the wrong subject — a check that exercises a
+// presenter nothing renders passes while the rendered line is broken, which is the very defect
+// the checks exist to catch.
+//
+// So they run turnSubNode now, and really run it: `el` and `document.createTextNode` are
+// stubbed below and the rendered text is read back off the tree. Reading its source with a
+// regex is the pattern two checks further down, and it is weaker — the invariant is about the
+// characters the reader receives, not about a substring surviving an edit.
function fnSource(signature) {
const m = html.match(new RegExp(signature.replace(/[()]/g, '\\$&') + ' \\{[\\s\\S]*?\\n {6}\\}'));
return m ? m[0] : null;
}
+function stubNode(tag, text) {
+ return {
+ tag,
+ textContent: text === undefined || text === null ? '' : String(text),
+ className: '',
+ children: [],
+ setAttribute: () => {},
+ addEventListener: () => {},
+ appendChild(n) { this.children.push(n); return n; }
+ };
+}
+function textOf(node) {
+ return node.children.length ? node.children.map(textOf).join('') : node.textContent;
+}
function liftTurnFns() {
+ // The stubs go in before the lift: turnSubNode reads state and KIND_LABELS at render time
+ // and builds its tree through el() and document.createTextNode(), none of which the PURE
+ // sandbox has. Installing them after would leave the lift failing for a reason that has
+ // nothing to do with what is under test.
+ sandbox.el = (tag, className, text) => {
+ const n = stubNode(tag, text);
+ if (className) n.className = className;
+ return n;
+ };
+ sandbox.document = { createTextNode: (t) => stubNode('#text', t) };
+ sandbox.state = { kinds: ['steer', 'compaction'] };
+ sandbox.KIND_LABELS = { steer: '追加', compaction: '压缩' };
+ sandbox.onKindToggle = () => {};
for (const name of [
'function turnContextParts(stats)',
- 'function turnContext(stats)',
- 'function turnContextSuffix(stats)',
+ 'function turnBreakdown(stats)',
+ 'function turnSubNode(stats)'
]) {
const src = fnSource(name);
if (!src) return false;
@@ -319,6 +527,49 @@ const codeOnly = html
.replace(/\/\*[\s\S]*?\*\//g, '')
.replace(/^[ \t]*\/\/.*$/gm, '');
+/* ------------------------------------------------------------------ session picker: branch marker */
+// A session that the runtime spawned from another one used to be listed exactly like a top-level
+// conversation, because nothing in the list said otherwise: the parent column existed in the store
+// and was never read, and the one field that did reach the page (`sessionKind`) had no reader in
+// it at all. A reader comparing two entries could not tell a sub-agent run from a conversation.
+//
+// The marker is checked here by RUNNING it rather than by matching its text, because the failure
+// worth catching is not a typo in the string — it is the marker being applied to everything, or to
+// nothing, and both of those still contain the right characters. The decisive case is the third
+// one: two sessions identical except for `sessionParentId`, whose labels must differ by exactly
+// the marker and nothing else. A version that appended the marker unconditionally passes every
+// "does it contain 子会话" check and fails this one.
+const branchMarkSrc = /var BRANCH_MARK = '[^']*';/.exec(html);
+const branchLabelSrc = fnSource('function sessionOptionLabel(session, now)');
+if (!branchMarkSrc || !branchLabelSrc) {
+ failures.push('session picker: could not lift sessionOptionLabel / BRANCH_MARK');
+} else {
+ vm.runInContext(branchMarkSrc[0] + '\n' + branchLabelSrc, sandbox);
+ const NOW = 1_800_000_000_000;
+ const base = { label: '一个会话', lastActiveAt: NOW - 60_000, messageCount: 42 };
+ const plain = sandbox.sessionOptionLabel({ ...base }, NOW);
+ const branch = sandbox.sessionOptionLabel({ ...base, sessionParentId: 'mvs_parent' }, NOW);
+
+ assert('a top-level session is not marked as a branch',
+ plain.indexOf('子会话') < 0);
+ assert('a session the runtime spawned is marked as one',
+ branch.indexOf('子会话') >= 0);
+ // Identity, not shape: the only thing that differs between these two inputs is the field, so
+ // the only thing allowed to differ between the two labels is the marker.
+ assert('the marker is driven by the field, not by where the row sits in the list',
+ branch.replace(' · 子会话', '') === plain);
+ assert('and nothing else about the label changes with it',
+ branch.length === plain.length + ' · 子会话'.length);
+ // An empty parent string is "no parent", not "a parent named the empty string".
+ assert('an empty parent id is not a parent',
+ sandbox.sessionOptionLabel({ ...base, sessionParentId: '' }, NOW) === plain);
+ // The unnamed branch takes the marker too — otherwise the one case with no title to read is
+ // the one case a reader cannot place.
+ assert('an unnamed branch is still marked',
+ sandbox.sessionOptionLabel({ lastActiveAt: NOW - 60_000, messageCount: 42,
+ sessionParentId: 'mvs_parent' }, NOW).indexOf('子会话') >= 0);
+}
+
const checks = [
['no remote http(s) resource', !/<(script|link|img|iframe)[^>]+(src|href)=["']https?:/i.test(html)],
['no @import', !/@import/.test(html)],
@@ -333,7 +584,16 @@ const checks = [
['has --mcode-* tokens', (html.match(/--mcode-/g) || []).length > 40],
['no --dsw-* leakage', !/--dsw-/.test(html)],
['no remote font family names', !/JetBrains|Inter['"]?\s*,|@font-face/.test(html)],
- ['innerHTML only on pre via jsonColorize', (html.match(/\.innerHTML/g) || []).length === 2],
+ // This used to be `(html.match(/\.innerHTML/g) || []).length === 2` — a count wearing a
+ // property's name. It failed the moment a third legitimate `jsonColorize` call was added, and
+ // it would have passed just as happily if one of the two had been deleted and the other turned
+ // into an injection. The property is the rule: every one of them writes through jsonColorize,
+ // and only onto a .
+ ['innerHTML only on pre via jsonColorize',
+ [...html.matchAll(/([A-Za-z_$][\w$]*)\.innerHTML\s*=\s*([^;\n]*)/g)]
+ .length > 0
+ && [...html.matchAll(/([A-Za-z_$][\w$]*)\.innerHTML\s*=\s*([^;\n]*)/g)]
+ .every((m) => m[1] === 'pre' && /jsonColorize\(/.test(m[2]))],
['lang zh-CN', //.test(html)],
['title 会话轨迹', /会话轨迹<\/title>/.test(html)],
['AbortController used', /new AbortController\(\)/.test(html)],
@@ -353,7 +613,12 @@ const checks = [
['role=status present', (html.match(/role="status"/g) || []).length >= 3],
['semantic header/main/section/footer/nav/form', ['<header', '<main', '<section', '<footer', '<nav', '<form'].every((tag) => html.includes(tag))],
['semantic table rendered (static or via createElement)', html.includes('<table') || html.includes("el('table'")],
- ['poll interval 2500ms', /POLL_INTERVAL = 2500/.test(html)],
+ ['session poll interval 2500ms, declared as the list\'s own cadence', /\bSESSION_POLL_INTERVAL = 2500\b/.test(html) && !/\bPOLL_INTERVAL = /.test(html)],
+ ['trajectory poll interval 8000ms, slower than the list\'s', /\bTRAJECTORY_POLL_INTERVAL = 8000\b/.test(html)],
+ // Two ticks, not one. The single `POLL_INTERVAL` this replaced cannot come back as a substring
+ // of either name — `SESSION_POLL_INTERVAL` contains `POLL_INTERVAL`, so an assertion written
+ // against the old bare name passes against either constant and means nothing.
+ ['no single shared poll interval is left behind', !/\bPOLL_INTERVAL\b/.test(html.replace(/SESSION_POLL_INTERVAL|TRAJECTORY_POLL_INTERVAL/g, ''))],
['handoff raw limit 8000', /HANDOFF_RAW_LIMIT = 8000/.test(html)],
['all 6 append error codes handled', ['user_cancelled', 'invalid_request', 'text_too_large', 'not_allowed', 'target_unavailable', 'result_unknown'].every((c) => html.includes(c))],
// The type chips are the one filter. A second row of layer buttons was removed because a
@@ -449,7 +714,7 @@ const checks = [
return sum === stats.turnsWithPrompt;
});
})()],
- // Scoped to the rendered label, not the whole file: the doc comment above turnContext
+ // Scoped to the rendered label, not the whole file: the doc comment above turnSubNode
// explains why 续作答答 was renamed and has to be able to say so.
['turn breakdown renders 提问轮, not 提问待答',
/'提问轮 ' \+ formatInt\(asked\)/.test(html) && !/'提问待答 ' \+ formatInt/.test(html) && !/'续作答答 ' \+ formatInt/.test(html)],
@@ -460,17 +725,17 @@ const checks = [
// the fix, so assert it is there rather than asserting the reader will notice.
['context group is marked as a separate population', (() => {
if (!liftTurnFns()) return false;
- const suffix = sandbox.turnContextSuffix({ steers: 15, compactionTurns: 10, continuationTurns: 5 });
+ const line = textOf(sandbox.turnSubNode({ steers: 15, compactions: 10, continuationTurns: 5 }));
// The boundary is the separator FOLLOWED by 另有. The leading `·` is what joins this group
// to the breakdown and must stay — an earlier version of this guard asserted it was absent,
// which was wrong: without it the two groups run together, which is the original defect.
- return /·\s*另有\s/.test(suffix);
+ return /·\s*另有\s/.test(line);
})()],
// And the whole rendered line, as the reader receives it, still partitions correctly once
// the context group is set aside: the numbers before 另有 sum to the headline.
['numbers before 另有 sum to the headline', (() => {
- const line = sandbox.turnBreakdown({ turnsWithPrompt: 63, qaTurns: 5, openTurns: 9 })
- + sandbox.turnContextSuffix({ steers: 15, compactionTurns: 10, continuationTurns: 5 });
+ const line = textOf(sandbox.turnSubNode({ turnsWithPrompt: 63, qaTurns: 5, openTurns: 9,
+ steers: 15, compactions: 10, continuationTurns: 5 }));
const before = line.split('另有')[0];
const nums = [...before.matchAll(/(\d[\d,]*)/g)].map((m) => Number(m[1].replace(/,/g, '')));
return nums.reduce((a, n) => a + n, 0) === 63;
@@ -521,6 +786,42 @@ const checks = [
&& parts[0].value === '12'
&& parts[0].kind === 'compaction';
})()],
+ // ---------------------------------------------------------------------------------
+ // Every field scopedStats WRITES has to be one it DECLARES.
+ //
+ // scopedStats re-scopes the server's stats to a time range, and it does that by writing its
+ // own literal rather than reading the server's. That literal is a second copy of a shape that
+ // lives in two processes, and a copy of a shape drifts silently: `steers` was declared on the
+ // server (server.mjs `steers: 0`) and not here, while the function still did
+ // `stats.steers += 1`. `undefined + 1` is NaN, NaN is sticky, and `isCount()` refuses a
+ // non-finite number — so both readers of that field quietly dropped the term, and 「追加 N」
+ // vanished from the card the moment a range went on. Nothing threw.
+ //
+ // It stayed invisible because the guard that compares scopedStats against the server numbers
+ // field by field carries a HARDCODED list, and `steers` was not in it. A hardcoded list can
+ // only catch the fields someone remembered to write down. This one cannot: it reads the two
+ // halves off the function itself, so a field that is written without being declared fails by
+ // name whatever it is called.
+ // ---------------------------------------------------------------------------------
+ ['every stats field scopedStats writes is one it declares', (() => {
+ const src = fnSource('function scopedStats()');
+ if (!src) return false;
+ const literal = src.slice(src.indexOf('var stats = {'), src.indexOf('};', src.indexOf('var stats = {')));
+ if (!literal) return false;
+ const declared = new Set();
+ // `field: 0,` and `field: { ... }` — the two shapes the literal actually uses.
+ for (const m of literal.matchAll(/^\s*([A-Za-z_$][\w$]*):/gm)) declared.add(m[1]);
+ const written = new Set();
+ // `stats.x += 1`, `stats.x = 0`, `stats.x++`, and the nested `stats.tokens.input += 1`:
+ // a nested write needs its PARENT declared, which is the root name this captures.
+ for (const m of src.matchAll(/\bstats\.([A-Za-z_$][\w$]*)\s*(?==[^=]|\+\+|--|\+=|-=|\*=|\/=|\.\w)/g)) {
+ written.add(m[1]);
+ }
+ // Reads are not writes: `stats.messagesAll` is read from `base` and `stats.tokens` is only
+ // ever read as a parent, so neither has to be a counter. What must hold is the other
+ // direction — nothing may be written that the literal does not declare.
+ return [...written].every((field) => declared.has(field));
+ })()],
// The explanation has to exist on the card, be reachable without a mouse, and be named by
// aria-describedby rather than only by a `title` (which is invisible to touch and to most
// assistive tech once the hover is gone).
@@ -642,16 +943,48 @@ const checks = [
// through the helper. The \b matters — resetWindowMode contains the substring setWindowMode,
// and without it every reset counts as a direct call and the guard can never pass.
//
- // The reset count is an inventory, not a rule: eight when every filter reset the window,
- // ten since the time range gained resets on both sides of its own lifecycle, eleven once
- // 异常 became a filter of its own and had to reset the window like the others do, and twelve
- // once 异常 grew a way back — 全部数据 — which is a filter change like any other and would
- // otherwise leave the reader on a stale window after leaving anomaly mode. It used to force
- // 「全部」 instead of resetting, which would have shown up here as a second direct call — and
- // measured, that cost a 414,000px document on a range covering the session.
+ // The window-reset inventory moved by one because the search answer now arrives from the server:
+ // the moment it does, the table holds a different set of records, and that is a filter change
+ // like any other. It used to be twelve because the page filtered its own records synchronously,
+ // so there was never a moment at which the answer changed.
const direct = (html.match(/\bsetWindowMode\((?!mode\)|DEFAULT_WINDOW_MODE)/g) || []).length;
- return direct === 1 && (html.match(/resetWindowMode\(\);/g) || []).length === 12;
+ return direct === 1 && (html.match(/resetWindowMode\(\);/g) || []).length === 13;
})()],
+ // The search half is asynchronous now, so the four rules below have no pure function to hang on
+ // and are read out of the source instead. Each of them is a way the page can render something
+ // plausible and wrong: a stale answer on screen, an answer that empties the table while it is
+ // still out, a filter left applied after the reader cleared it, and a slice search answered about
+ // the whole lineage.
+ ['the search request in flight is aborted when a newer one starts', (() => {
+ const src = fnSource('function runSearch(needle)');
+ if (!src) return false;
+ if (!/if \(searchController\) searchController\.abort\(\);/.test(src)) return false;
+ return /var controller = new AbortController\(\);/.test(src) && /signal: controller\.signal/.test(src);
+ })()],
+ ['only the newest search answer is allowed to write', (() => {
+ const src = fnSource('function runSearch(needle)');
+ if (!src) return false;
+ // One guard on the way in is not enough: the catch must be gated too, or a FAILED older
+ // request can put its error on top of a newer request's answer.
+ const gates = src.match(/if \(seq !== searchSeq\) return;/g) || [];
+ return gates.length === 2 && /var seq = \(searchSeq \+= 1\);/.test(src);
+ })()],
+ ['a payload that changed re-runs the search rather than filtering by the old answer', (() => {
+ const src = fnSource('function applyPayload(body, manual)');
+ if (!src) return false;
+ return /if \(changed && state\.query\) runSearch\(state\.query\);/.test(src);
+ })()],
+ ['clearing the filters drops the answer with them', (() => {
+ const src = fnSource('function resetBaseFilters()');
+ if (!src) return false;
+ return /state\.searchHits = null;/.test(src) && /state\.searchError = null;/.test(src);
+ })()],
+ ['a search is asked about the slice the reader is looking at', (() => {
+ const src = fnSource('function runSearch(needle)');
+ if (!src) return false;
+ return /'\/api\/trajectory\/search\?session='/.test(src)
+ && /&generation=' \+ encodeURIComponent\(String\(state\.generation\)\)/.test(src);
+ })()],
// Clicking the window button must not move the page. It scrolled to the document tail
// whenever it narrowed the window, on the theory that "back to the tail" should land on the
// newest record. The reader clicked a control they were already looking at, so the jump threw
@@ -717,11 +1050,13 @@ const checks = [
&& /item\.appendChild\(buildCompactionBand\(group\.entries\[j\]\)\)/.test(loop);
})()],
// The band is a real control: it carries the same data-row-id the inspector looks up, so
- // clicking it opens the checkpoint's details rather than doing nothing.
+ // clicking it opens the checkpoint's details rather than doing nothing. The two halves are
+ // deliberately different units — the DOM key has to name ONE row for the scroll anchor, and
+ // the selection stays on the message — so both are matched.
['the compaction band is selectable and states what it is', (() => {
const src = fnSource('function buildCompactionBand(entry)');
if (!src) return false;
- return /setAttribute\('data-row-id', record\.id \|\| String\(record\.index\)\)/.test(src)
+ return /setAttribute\('data-row-id', recordKey\(record\)\)/.test(src)
&& /selectRecord\(record\.id\)/.test(src)
// The point of the band is that it says what changed, so the generation and the moment both
// have to be in it. Neither is decoration. The condition is matched whole: a mutation that
diff --git a/plugins/avatasia/mmc-trajectory/tests/fixtures/trajectory.json b/plugins/avatasia/mmc-trajectory/tests/fixtures/trajectory.json
index bb73481..66d5034 100644
--- a/plugins/avatasia/mmc-trajectory/tests/fixtures/trajectory.json
+++ b/plugins/avatasia/mmc-trajectory/tests/fixtures/trajectory.json
@@ -1 +1 @@
-{"session":{"id":"mvs_00000000000000000000000000000001","label":"fixture text-000w placeholder","messageCount":60,"turnCount":23,"startedAt":1791603931910,"lastActiveAt":1750000480000,"sizeBytes":37267,"truncated":false,"maxMessageBytes":67108864,"generation":null,"generations":[],"orphans":[],"activeGeneration":null,"stitched":false,"binding":"fixture","leased":false},"stats":{"messages":60,"userMessages":2,"assistantMessages":32,"toolCalls":31,"toolResults":22,"thinkingBlocks":18,"injectedBlocks":3,"compactions":1,"turns":23,"turnsWithPrompt":2,"continuationTurns":1,"qaTurns":0,"openTurns":1,"steers":0,"compactionTurns":1,"turnsWithoutPrompt":19,"errors":3,"tokens":{"input":357272,"output":15279,"cacheRead":5571539,"cacheWrite":0,"totalTokens":5944090},"durationMs":23640047,"messagesAll":60},"turns":[{"id":"turn-001","index":1,"startedAt":1791603931910,"endedAt":1791605485479,"durationMs":1553569,"toolCalls":8,"errors":1,"tokens":{"input":53826,"output":2224,"cacheRead":1175168,"cacheWrite":0,"totalTokens":1231218},"turnClass":"prompt","askedReader":false,"closed":true,"records":[{"id":"msg-0000","turnId":"turn-001","role":"user","generation":null,"timestamp":1791603931910,"responseId":null,"relativeMs":0,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":null,"raw":{"role":"user","content":[{"type":"text","text":"<system-reminder>\nfixture injected-0001 block"}],"timestamp":1791603931910,"canonicalTextRange":{"startOffset":5109,"endOffset":5722}},"rawOmitted":false,"textTruncated":false,"index":1,"text":"<system-reminder>\nfixture injected-0001 block","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"system","title":"injected","summary":"<system-reminder> fixture injected-0001 block"},{"id":"msg-0002","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791603931971,"responseId":"fixture text-0009 placeholder","relativeMs":61,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-0008 placeholder","provider":"fixture text-0007 placeholder","api":"fixture text-0006 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-0003 placeholder","thinkingSignature":"fixture text-0004 placeholder"},{"type":"text","text":"fixture text-0005 placeholder"},{"type":"toolCall","id":"call_0000","name":"tool_00","arguments":{"name":"tool_01"}}],"api":"fixture text-0006 placeholder","provider":"fixture text-0007 placeholder","model":"fixture text-0008 placeholder","usage":{"input":44829,"output":432,"cacheRead":4224,"cacheWrite":0,"totalTokens":49485,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791603931971,"responseId":"fixture text-0009 placeholder"},"rawOmitted":false,"textTruncated":false,"index":2,"text":null,"thinking":"fixture text-0003 placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-0003 placeholder"},{"id":"msg-0002","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791603931971,"responseId":"fixture text-0009 placeholder","relativeMs":61,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":44829,"output":432,"cacheRead":4224,"cacheWrite":0,"totalTokens":49485},"model":"fixture text-0008 placeholder","provider":"fixture text-0007 placeholder","api":"fixture text-0006 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-0003 placeholder","thinkingSignature":"fixture text-0004 placeholder"},{"type":"text","text":"fixture text-0005 placeholder"},{"type":"toolCall","id":"call_0000","name":"tool_00","arguments":{"name":"tool_01"}}],"api":"fixture text-0006 placeholder","provider":"fixture text-0007 placeholder","model":"fixture text-0008 placeholder","usage":{"input":44829,"output":432,"cacheRead":4224,"cacheWrite":0,"totalTokens":49485,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791603931971,"responseId":"fixture text-0009 placeholder"},"rawOmitted":false,"textTruncated":false,"index":3,"text":"fixture text-0005 placeholder","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-0005 placeholder"},{"id":"msg-0002","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791603931971,"responseId":"fixture text-0009 placeholder","relativeMs":61,"durationMs":11257,"toolName":"tool_00","toolCallId":"call_0000","model":"fixture text-0008 placeholder","provider":"fixture text-0007 placeholder","api":"fixture text-0006 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-0003 placeholder","thinkingSignature":"fixture text-0004 placeholder"},{"type":"text","text":"fixture text-0005 placeholder"},{"type":"toolCall","id":"call_0000","name":"tool_00","arguments":{"name":"tool_01"}}],"api":"fixture text-0006 placeholder","provider":"fixture text-0007 placeholder","model":"fixture text-0008 placeholder","usage":{"input":44829,"output":432,"cacheRead":4224,"cacheWrite":0,"totalTokens":49485,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791603931971,"responseId":"fixture text-0009 placeholder"},"rawOmitted":false,"textTruncated":false,"index":4,"text":null,"thinking":null,"arguments":{"name":"tool_01"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_00","summary":"tool_00{name=\"tool_01\"} → fixture text-000b placeholder","argumentsOmitted":false},{"id":"msg-000a","turnId":"turn-001","role":"toolResult","generation":null,"timestamp":1791603943228,"responseId":null,"relativeMs":11318,"durationMs":11257,"toolName":"tool_00","toolCallId":"call_0000","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0000","toolName":"tool_00","content":[{"type":"text","text":"fixture text-000b placeholder"}],"details":{"kind":"skill","skill":"fixture text-000c placeholder","found":true,"readable":true,"owner":"fixture text-000d placeholder","source":"fixture text-000e placeholder","location":"fixture text-000f placeholder"},"isError":false,"timestamp":1791603943228},"rawOmitted":false,"textTruncated":false,"index":5,"text":null,"thinking":null,"arguments":null,"result":"fixture text-000b placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_00","summary":"fixture text-000b placeholder"},{"id":"msg-000g","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791604127714,"responseId":"fixture text-000o placeholder","relativeMs":195804,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-000n placeholder","provider":"fixture text-000m placeholder","api":"fixture text-000l placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-000h placeholder","thinkingSignature":"fixture text-000i placeholder"},{"type":"text","text":"fixture text-000j placeholder"},{"type":"toolCall","id":"call_0001","name":"tool_02","arguments":{"task_id":"fixture text-000k placeholder"}}],"api":"fixture text-000l placeholder","provider":"fixture text-000m placeholder","model":"fixture text-000n placeholder","usage":{"input":4210,"output":82,"cacheRead":76544,"cacheWrite":0,"totalTokens":80836,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791604127714,"responseId":"fixture text-000o placeholder"},"rawOmitted":false,"textTruncated":false,"index":6,"text":null,"thinking":"fixture text-000h placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-000h placeholder"},{"id":"msg-000g","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791604127714,"responseId":"fixture text-000o placeholder","relativeMs":195804,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":4210,"output":82,"cacheRead":76544,"cacheWrite":0,"totalTokens":80836},"model":"fixture text-000n placeholder","provider":"fixture text-000m placeholder","api":"fixture text-000l placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-000h placeholder","thinkingSignature":"fixture text-000i placeholder"},{"type":"text","text":"fixture text-000j placeholder"},{"type":"toolCall","id":"call_0001","name":"tool_02","arguments":{"task_id":"fixture text-000k placeholder"}}],"api":"fixture text-000l placeholder","provider":"fixture text-000m placeholder","model":"fixture text-000n placeholder","usage":{"input":4210,"output":82,"cacheRead":76544,"cacheWrite":0,"totalTokens":80836,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791604127714,"responseId":"fixture text-000o placeholder"},"rawOmitted":false,"textTruncated":false,"index":7,"text":"fixture text-000j placeholder","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-000j placeholder"},{"id":"msg-000g","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791604127714,"responseId":"fixture text-000o placeholder","relativeMs":195804,"durationMs":null,"toolName":"tool_02","toolCallId":"call_0001","model":"fixture text-000n placeholder","provider":"fixture text-000m placeholder","api":"fixture text-000l placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-000h placeholder","thinkingSignature":"fixture text-000i placeholder"},{"type":"text","text":"fixture text-000j placeholder"},{"type":"toolCall","id":"call_0001","name":"tool_02","arguments":{"task_id":"fixture text-000k placeholder"}}],"api":"fixture text-000l placeholder","provider":"fixture text-000m placeholder","model":"fixture text-000n placeholder","usage":{"input":4210,"output":82,"cacheRead":76544,"cacheWrite":0,"totalTokens":80836,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791604127714,"responseId":"fixture text-000o placeholder"},"rawOmitted":false,"textTruncated":false,"index":8,"text":null,"thinking":null,"arguments":{"task_id":"fixture text-000k placeholder"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_02","summary":"tool_02{task_id=\"fixture text-000k placeholder\"}","argumentsOmitted":false},{"id":"msg-000p","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791604504788,"responseId":"fixture text-000u placeholder","relativeMs":572878,"durationMs":null,"toolName":"tool_02","toolCallId":"call_0002","tokens":{"input":268,"output":62,"cacheRead":102144,"cacheWrite":0,"totalTokens":102474},"model":"fixture text-000t placeholder","provider":"fixture text-000s placeholder","api":"fixture text-000r placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"toolCall","id":"call_0002","name":"tool_02","arguments":{"task_id":"fixture text-000q placeholder","wait_ms":30000}}],"api":"fixture text-000r placeholder","provider":"fixture text-000s placeholder","model":"fixture text-000t placeholder","usage":{"input":268,"output":62,"cacheRead":102144,"cacheWrite":0,"totalTokens":102474,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791604504788,"responseId":"fixture text-000u placeholder"},"rawOmitted":false,"textTruncated":false,"index":9,"text":null,"thinking":null,"arguments":{"task_id":"fixture text-000q placeholder","wait_ms":30000},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_02","summary":"tool_02{task_id=\"fixture text-000q placeholder\", wait_ms=\"30000\"}","argumentsOmitted":false},{"id":"msg-000v","turnId":"turn-001","role":"user","generation":null,"timestamp":1791604626776,"responseId":null,"relativeMs":694866,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":null,"raw":{"role":"user","content":"fixture text-000w placeholder","timestamp":1791604626776},"rawOmitted":false,"textTruncated":false,"index":10,"text":"fixture text-000w placeholder","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"user","title":"user","summary":"fixture text-000w placeholder","steered":false},{"id":"msg-000x","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791604764455,"responseId":"fixture text-0013 placeholder","relativeMs":832545,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0003","tokens":{"input":2672,"output":61,"cacheRead":113536,"cacheWrite":0,"totalTokens":116269},"model":"fixture text-0012 placeholder","provider":"fixture text-0011 placeholder","api":"fixture text-0010 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"toolCall","id":"call_0003","name":"tool_03","arguments":{"command":"fixture text-000y placeholder","description":"fixture text-000z placeholder"}}],"api":"fixture text-0010 placeholder","provider":"fixture text-0011 placeholder","model":"fixture text-0012 placeholder","usage":{"input":2672,"output":61,"cacheRead":113536,"cacheWrite":0,"totalTokens":116269,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791604764455,"responseId":"fixture text-0013 placeholder"},"rawOmitted":false,"textTruncated":false,"index":11,"text":null,"thinking":null,"arguments":{"command":"fixture text-000y placeholder","description":"fixture text-000z placeholder"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-000y placeholder\", description=\"fixture text-000z placeholder\"}","argumentsOmitted":false},{"id":"msg-0014","turnId":"turn-001","role":"toolResult","generation":null,"timestamp":1791604879414,"responseId":null,"relativeMs":947504,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0004","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":true,"raw":{"role":"toolResult","toolCallId":"call_0004","toolName":"tool_03","content":[{"type":"text","text":"fixture text-0015 placeholder"}],"details":{"execution":{"status":"fixture text-0016 placeholder","reason":"fixture text-0017 placeholder","exitCode":1,"message":"fixture text-0018 placeholder"},"timing":{"commandTimeoutSeconds":3600,"commandTimerStartedAt":1791604878663,"commandDeadlineAt":1791608478663},"output":{"rawBytes":644,"persistence":"fixture text-0019 placeholder","omittedBytes":0},"processOutput":{"stdout":"fixture text-001a placeholder","stderr":"fixture text-001b placeholder","exitCode":1,"interrupted":false,"stdoutTruncated":false,"stderrTruncated":false,"rawOutputPath":"fixture text-001c placeholder"},"description":"fixture text-001d placeholder","fullOutputPath":"fixture text-001e placeholder","status":"fixture text-001f placeholder","task_id":"fixture text-001g placeholder","is_error":true},"isError":true,"timestamp":1791604879414},"rawOmitted":false,"textTruncated":false,"index":12,"text":null,"thinking":null,"arguments":null,"result":"fixture text-0015 placeholder","error":"fixture text-0015 placeholder","tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-0015 placeholder"},{"id":"msg-001h","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791604894030,"responseId":"fixture text-001n placeholder","relativeMs":962120,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0005","tokens":{"input":142,"output":107,"cacheRead":135424,"cacheWrite":0,"totalTokens":135673},"model":"fixture text-001m placeholder","provider":"fixture text-001l placeholder","api":"fixture text-001k placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"toolCall","id":"call_0005","name":"tool_03","arguments":{"command":"fixture text-001i placeholder","description":"fixture text-001j placeholder"}}],"api":"fixture text-001k placeholder","provider":"fixture text-001l placeholder","model":"fixture text-001m placeholder","usage":{"input":142,"output":107,"cacheRead":135424,"cacheWrite":0,"totalTokens":135673,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791604894030,"responseId":"fixture text-001n placeholder"},"rawOmitted":false,"textTruncated":false,"index":13,"text":null,"thinking":null,"arguments":{"command":"fixture text-001i placeholder","description":"fixture text-001j placeholder"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-001i placeholder\", description=\"fixture text-001j placeholder\"}","argumentsOmitted":false},{"id":"msg-001o","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791605044287,"responseId":"fixture text-001u placeholder","relativeMs":1112377,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0006","tokens":{"input":714,"output":176,"cacheRead":167040,"cacheWrite":0,"totalTokens":167930},"model":"fixture text-001t placeholder","provider":"fixture text-001s placeholder","api":"fixture text-001r placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"toolCall","id":"call_0006","name":"tool_03","arguments":{"command":"fixture text-001p placeholder","description":"fixture text-001q placeholder"}}],"api":"fixture text-001r placeholder","provider":"fixture text-001s placeholder","model":"fixture text-001t placeholder","usage":{"input":714,"output":176,"cacheRead":167040,"cacheWrite":0,"totalTokens":167930,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791605044287,"responseId":"fixture text-001u placeholder"},"rawOmitted":false,"textTruncated":false,"index":14,"text":null,"thinking":null,"arguments":{"command":"fixture text-001p placeholder","description":"fixture text-001q placeholder"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-001p placeholder\", description=\"fixture text-001q placeholder\"}","argumentsOmitted":false},{"id":"msg-001v","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791605219170,"responseId":"fixture text-0023 placeholder","relativeMs":1287260,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":832,"output":316,"cacheRead":178688,"cacheWrite":0,"totalTokens":179836},"model":"fixture text-0022 placeholder","provider":"fixture text-0021 placeholder","api":"fixture text-0020 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-001w placeholder","thinkingSignature":"fixture text-001x placeholder"},{"type":"toolCall","id":"call_0007","name":"tool_04","arguments":{"action":"fixture text-001y placeholder","input":{"kind":"text","maxChars":600,"selector":"fixture text-001z placeholder"}}}],"api":"fixture text-0020 placeholder","provider":"fixture text-0021 placeholder","model":"fixture text-0022 placeholder","usage":{"input":832,"output":316,"cacheRead":178688,"cacheWrite":0,"totalTokens":179836,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791605219170,"responseId":"fixture text-0023 placeholder"},"rawOmitted":false,"textTruncated":false,"index":15,"text":null,"thinking":"fixture text-001w placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-001w placeholder"},{"id":"msg-001v","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791605219170,"responseId":"fixture text-0023 placeholder","relativeMs":1287260,"durationMs":null,"toolName":"tool_04","toolCallId":"call_0007","model":"fixture text-0022 placeholder","provider":"fixture text-0021 placeholder","api":"fixture text-0020 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-001w placeholder","thinkingSignature":"fixture text-001x placeholder"},{"type":"toolCall","id":"call_0007","name":"tool_04","arguments":{"action":"fixture text-001y placeholder","input":{"kind":"text","maxChars":600,"selector":"fixture text-001z placeholder"}}}],"api":"fixture text-0020 placeholder","provider":"fixture text-0021 placeholder","model":"fixture text-0022 placeholder","usage":{"input":832,"output":316,"cacheRead":178688,"cacheWrite":0,"totalTokens":179836,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791605219170,"responseId":"fixture text-0023 placeholder"},"rawOmitted":false,"textTruncated":false,"index":16,"text":null,"thinking":null,"arguments":{"action":"fixture text-001y placeholder","input":{"kind":"text","maxChars":600,"selector":"fixture text-001z placeholder"}},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_04","summary":"tool_04{action=\"fixture text-001y placeholder\", input=\"{…}\"}","argumentsOmitted":false},{"id":"msg-0024","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791605423541,"responseId":"fixture text-002c placeholder","relativeMs":1491631,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":100,"output":91,"cacheRead":194176,"cacheWrite":0,"totalTokens":194367},"model":"fixture text-002b placeholder","provider":"fixture text-002a placeholder","api":"fixture text-0029 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-0025 placeholder","thinkingSignature":"fixture text-0026 placeholder"},{"type":"toolCall","id":"call_0008","name":"tool_04","arguments":{"action":"fixture text-0027 placeholder","input":{"selector":"fixture text-0028 placeholder"}}}],"api":"fixture text-0029 placeholder","provider":"fixture text-002a placeholder","model":"fixture text-002b placeholder","usage":{"input":100,"output":91,"cacheRead":194176,"cacheWrite":0,"totalTokens":194367,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791605423541,"responseId":"fixture text-002c placeholder"},"rawOmitted":false,"textTruncated":false,"index":17,"text":null,"thinking":"fixture text-0025 placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-0025 placeholder"},{"id":"msg-0024","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791605423541,"responseId":"fixture text-002c placeholder","relativeMs":1491631,"durationMs":null,"toolName":"tool_04","toolCallId":"call_0008","model":"fixture text-002b placeholder","provider":"fixture text-002a placeholder","api":"fixture text-0029 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-0025 placeholder","thinkingSignature":"fixture text-0026 placeholder"},{"type":"toolCall","id":"call_0008","name":"tool_04","arguments":{"action":"fixture text-0027 placeholder","input":{"selector":"fixture text-0028 placeholder"}}}],"api":"fixture text-0029 placeholder","provider":"fixture text-002a placeholder","model":"fixture text-002b placeholder","usage":{"input":100,"output":91,"cacheRead":194176,"cacheWrite":0,"totalTokens":194367,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791605423541,"responseId":"fixture text-002c placeholder"},"rawOmitted":false,"textTruncated":false,"index":18,"text":null,"thinking":null,"arguments":{"action":"fixture text-0027 placeholder","input":{"selector":"fixture text-0028 placeholder"}},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_04","summary":"tool_04{action=\"fixture text-0027 placeholder\", input=\"{…}\"}","argumentsOmitted":false},{"id":"msg-002d","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791605485479,"responseId":"fixture text-002i placeholder","relativeMs":1553569,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":59,"output":897,"cacheRead":203392,"cacheWrite":0,"totalTokens":204348},"model":"fixture text-002h placeholder","provider":"fixture text-002g placeholder","api":"fixture text-002f placeholder","stopReason":"stop","isError":null,"raw":{"role":"assistant","content":[{"type":"text","text":"fixture text-002e placeholder"}],"api":"fixture text-002f placeholder","provider":"fixture text-002g placeholder","model":"fixture text-002h placeholder","usage":{"input":59,"output":897,"cacheRead":203392,"cacheWrite":0,"totalTokens":204348,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"stop","timestamp":1791605485479,"responseId":"fixture text-002i placeholder"},"rawOmitted":false,"textTruncated":false,"index":19,"text":"fixture text-002e placeholder","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"reply","title":"assistant","summary":"fixture text-002e placeholder"}]},{"id":"turn-002","index":2,"startedAt":1791605691616,"endedAt":1791605691616,"durationMs":0,"toolCalls":1,"errors":0,"tokens":{"input":1658,"output":69,"cacheRead":210432,"cacheWrite":0,"totalTokens":212159},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-002j","turnId":"turn-002","role":"assistant","generation":null,"timestamp":1791605691616,"responseId":"fixture text-002o placeholder","relativeMs":1759706,"durationMs":null,"toolName":"tool_05","toolCallId":"call_0009","tokens":{"input":1658,"output":69,"cacheRead":210432,"cacheWrite":0,"totalTokens":212159},"model":"fixture text-002n placeholder","provider":"fixture text-002m placeholder","api":"fixture text-002l placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"toolCall","id":"call_0009","name":"tool_05","arguments":{"limit":30,"offset":1618,"path":"fixture text-002k placeholder"}}],"api":"fixture text-002l placeholder","provider":"fixture text-002m placeholder","model":"fixture text-002n placeholder","usage":{"input":1658,"output":69,"cacheRead":210432,"cacheWrite":0,"totalTokens":212159,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791605691616,"responseId":"fixture text-002o placeholder"},"rawOmitted":false,"textTruncated":false,"index":20,"text":null,"thinking":null,"arguments":{"limit":30,"offset":1618,"path":"fixture text-002k placeholder"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_05","summary":"tool_05{limit=\"30\", offset=\"1618\", path=\"fixture text-002k placeholder\"}","argumentsOmitted":false}]},{"id":"turn-003","index":3,"startedAt":1791606195742,"endedAt":1791606432109,"durationMs":236367,"toolCalls":1,"errors":0,"tokens":{"input":2260,"output":2251,"cacheRead":220800,"cacheWrite":0,"totalTokens":225311},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-002p","turnId":"turn-003","role":"assistant","generation":null,"timestamp":1791606195742,"responseId":"fixture text-003b placeholder","relativeMs":2263832,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-003a placeholder","provider":"fixture text-0039 placeholder","api":"fixture text-0038 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-002q placeholder","thinkingSignature":"fixture text-002r placeholder"},{"type":"text","text":"fixture text-002s placeholder"},{"type":"toolCall","id":"call_0010","name":"tool_06","arguments":{"todos":[{"content":"fixture text-002t placeholder","priority":"fixture text-002u placeholder","status":"fixture text-002v placeholder"},{"content":"fixture text-002w placeholder","priority":"fixture text-002x placeholder","status":"fixture text-002y placeholder"},{"content":"fixture text-002z placeholder","priority":"fixture text-0030 placeholder","status":"fixture text-0031 placeholder"},{"content":"fixture text-0032 placeholder","priority":"fixture text-0033 placeholder","status":"fixture text-0034 placeholder"},{"content":"fixture text-0035 placeholder","priority":"fixture text-0036 placeholder","status":"fixture text-0037 placeholder"}]}}],"api":"fixture text-0038 placeholder","provider":"fixture text-0039 placeholder","model":"fixture text-003a placeholder","usage":{"input":2260,"output":2251,"cacheRead":220800,"cacheWrite":0,"totalTokens":225311,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791606195742,"responseId":"fixture text-003b placeholder"},"rawOmitted":false,"textTruncated":false,"index":21,"text":null,"thinking":"fixture text-002q placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-002q placeholder"},{"id":"msg-002p","turnId":"turn-003","role":"assistant","generation":null,"timestamp":1791606195742,"responseId":"fixture text-003b placeholder","relativeMs":2263832,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":2260,"output":2251,"cacheRead":220800,"cacheWrite":0,"totalTokens":225311},"model":"fixture text-003a placeholder","provider":"fixture text-0039 placeholder","api":"fixture text-0038 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-002q placeholder","thinkingSignature":"fixture text-002r placeholder"},{"type":"text","text":"fixture text-002s placeholder"},{"type":"toolCall","id":"call_0010","name":"tool_06","arguments":{"todos":[{"content":"fixture text-002t placeholder","priority":"fixture text-002u placeholder","status":"fixture text-002v placeholder"},{"content":"fixture text-002w placeholder","priority":"fixture text-002x placeholder","status":"fixture text-002y placeholder"},{"content":"fixture text-002z placeholder","priority":"fixture text-0030 placeholder","status":"fixture text-0031 placeholder"},{"content":"fixture text-0032 placeholder","priority":"fixture text-0033 placeholder","status":"fixture text-0034 placeholder"},{"content":"fixture text-0035 placeholder","priority":"fixture text-0036 placeholder","status":"fixture text-0037 placeholder"}]}}],"api":"fixture text-0038 placeholder","provider":"fixture text-0039 placeholder","model":"fixture text-003a placeholder","usage":{"input":2260,"output":2251,"cacheRead":220800,"cacheWrite":0,"totalTokens":225311,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791606195742,"responseId":"fixture text-003b placeholder"},"rawOmitted":false,"textTruncated":false,"index":22,"text":"fixture text-002s placeholder","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-002s placeholder"},{"id":"msg-002p","turnId":"turn-003","role":"assistant","generation":null,"timestamp":1791606195742,"responseId":"fixture text-003b placeholder","relativeMs":2263832,"durationMs":null,"toolName":"tool_06","toolCallId":"call_0010","model":"fixture text-003a placeholder","provider":"fixture text-0039 placeholder","api":"fixture text-0038 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-002q placeholder","thinkingSignature":"fixture text-002r placeholder"},{"type":"text","text":"fixture text-002s placeholder"},{"type":"toolCall","id":"call_0010","name":"tool_06","arguments":{"todos":[{"content":"fixture text-002t placeholder","priority":"fixture text-002u placeholder","status":"fixture text-002v placeholder"},{"content":"fixture text-002w placeholder","priority":"fixture text-002x placeholder","status":"fixture text-002y placeholder"},{"content":"fixture text-002z placeholder","priority":"fixture text-0030 placeholder","status":"fixture text-0031 placeholder"},{"content":"fixture text-0032 placeholder","priority":"fixture text-0033 placeholder","status":"fixture text-0034 placeholder"},{"content":"fixture text-0035 placeholder","priority":"fixture text-0036 placeholder","status":"fixture text-0037 placeholder"}]}}],"api":"fixture text-0038 placeholder","provider":"fixture text-0039 placeholder","model":"fixture text-003a placeholder","usage":{"input":2260,"output":2251,"cacheRead":220800,"cacheWrite":0,"totalTokens":225311,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791606195742,"responseId":"fixture text-003b placeholder"},"rawOmitted":false,"textTruncated":false,"index":23,"text":null,"thinking":null,"arguments":{"todos":[{"content":"fixture text-002t placeholder","priority":"fixture text-002u placeholder","status":"fixture text-002v placeholder"},{"content":"fixture text-002w placeholder","priority":"fixture text-002x placeholder","status":"fixture text-002y placeholder"},{"content":"fixture text-002z placeholder","priority":"fixture text-0030 placeholder","status":"fixture text-0031 placeholder"},{"content":"fixture text-0032 placeholder","priority":"fixture text-0033 placeholder","status":"fixture text-0034 placeholder"},{"content":"fixture text-0035 placeholder","priority":"fixture text-0036 placeholder","status":"fixture text-0037 placeholder"}]},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_06","summary":"tool_06{todos=\"[{…}, {…}, {…}, …]\"}","argumentsOmitted":false},{"id":"msg-003c","turnId":"turn-003","role":"toolResult","generation":null,"timestamp":1791606432109,"responseId":null,"relativeMs":2500199,"durationMs":null,"toolName":"tool_07","toolCallId":"call_0011","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0011","toolName":"tool_07","content":[{"type":"text","text":"fixture text-003d placeholder"}],"details":{"created":true,"bytes_written":1777,"encoding":"fixture text-003e placeholder","bom":false},"isError":false,"timestamp":1791606432109},"rawOmitted":false,"textTruncated":false,"index":24,"text":null,"thinking":null,"arguments":null,"result":"fixture text-003d placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_07","summary":"fixture text-003d placeholder"}]},{"id":"turn-004","index":4,"startedAt":1791610762301,"endedAt":1791611180154,"durationMs":417853,"toolCalls":2,"errors":0,"tokens":{"input":258453,"output":1164,"cacheRead":277120,"cacheWrite":0,"totalTokens":536737},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-003f","turnId":"turn-004","role":"assistant","generation":null,"timestamp":1791610762301,"responseId":"fixture text-003l placeholder","relativeMs":6830391,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0012","tokens":{"input":254227,"output":405,"cacheRead":4224,"cacheWrite":0,"totalTokens":258856},"model":"fixture text-003k placeholder","provider":"fixture text-003j placeholder","api":"fixture text-003i placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"toolCall","id":"call_0012","name":"tool_03","arguments":{"command":"fixture text-003g placeholder","description":"fixture text-003h placeholder"}}],"api":"fixture text-003i placeholder","provider":"fixture text-003j placeholder","model":"fixture text-003k placeholder","usage":{"input":254227,"output":405,"cacheRead":4224,"cacheWrite":0,"totalTokens":258856,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791610762301,"responseId":"fixture text-003l placeholder"},"rawOmitted":false,"textTruncated":false,"index":25,"text":null,"thinking":null,"arguments":{"command":"fixture text-003g placeholder","description":"fixture text-003h placeholder"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-003g placeholder\", description=\"fixture text-003h placeholder\"}","argumentsOmitted":false},{"id":"msg-003m","turnId":"turn-004","role":"toolResult","generation":null,"timestamp":1791610983663,"responseId":null,"relativeMs":7051753,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0013","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0013","toolName":"tool_03","content":[{"type":"text","text":"fixture text-003n placeholder"}],"details":{"execution":{"status":"fixture text-003o placeholder","reason":"fixture text-003p placeholder","exitCode":0},"timing":{"commandTimeoutSeconds":3600,"commandTimerStartedAt":1791610981057,"commandDeadlineAt":1791614581057},"output":{"rawBytes":218,"persistence":"fixture text-003q placeholder","omittedBytes":0},"processOutput":{"stdout":"fixture text-003r placeholder","stderr":"fixture text-003s placeholder","exitCode":0,"interrupted":false,"stdoutTruncated":false,"stderrTruncated":false,"rawOutputPath":"fixture text-003t placeholder"},"description":"fixture text-003u placeholder","fullOutputPath":"fixture text-003v placeholder","status":"fixture text-003w placeholder","task_id":"fixture text-003x placeholder"},"isError":false,"timestamp":1791610983663},"rawOmitted":false,"textTruncated":false,"index":26,"text":null,"thinking":null,"arguments":null,"result":"fixture text-003n placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-003n placeholder"},{"id":"msg-003y","turnId":"turn-004","role":"assistant","generation":null,"timestamp":1791611180154,"responseId":"fixture text-0048 placeholder","relativeMs":7248244,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-0047 placeholder","provider":"fixture text-0046 placeholder","api":"fixture text-0045 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-003z placeholder","thinkingSignature":"fixture text-0040 placeholder"},{"type":"text","text":"fixture text-0041 placeholder"},{"type":"toolCall","id":"call_0014","name":"tool_08","arguments":{"file_path":"fixture text-0042 placeholder","new_string":"fixture text-0043 placeholder","old_string":"fixture text-0044 placeholder"}}],"api":"fixture text-0045 placeholder","provider":"fixture text-0046 placeholder","model":"fixture text-0047 placeholder","usage":{"input":4226,"output":759,"cacheRead":272896,"cacheWrite":0,"totalTokens":277881,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791611180154,"responseId":"fixture text-0048 placeholder"},"rawOmitted":false,"textTruncated":false,"index":27,"text":null,"thinking":"fixture text-003z placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-003z placeholder"},{"id":"msg-003y","turnId":"turn-004","role":"assistant","generation":null,"timestamp":1791611180154,"responseId":"fixture text-0048 placeholder","relativeMs":7248244,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":4226,"output":759,"cacheRead":272896,"cacheWrite":0,"totalTokens":277881},"model":"fixture text-0047 placeholder","provider":"fixture text-0046 placeholder","api":"fixture text-0045 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-003z placeholder","thinkingSignature":"fixture text-0040 placeholder"},{"type":"text","text":"fixture text-0041 placeholder"},{"type":"toolCall","id":"call_0014","name":"tool_08","arguments":{"file_path":"fixture text-0042 placeholder","new_string":"fixture text-0043 placeholder","old_string":"fixture text-0044 placeholder"}}],"api":"fixture text-0045 placeholder","provider":"fixture text-0046 placeholder","model":"fixture text-0047 placeholder","usage":{"input":4226,"output":759,"cacheRead":272896,"cacheWrite":0,"totalTokens":277881,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791611180154,"responseId":"fixture text-0048 placeholder"},"rawOmitted":false,"textTruncated":false,"index":28,"text":"fixture text-0041 placeholder","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-0041 placeholder"},{"id":"msg-003y","turnId":"turn-004","role":"assistant","generation":null,"timestamp":1791611180154,"responseId":"fixture text-0048 placeholder","relativeMs":7248244,"durationMs":null,"toolName":"tool_08","toolCallId":"call_0014","model":"fixture text-0047 placeholder","provider":"fixture text-0046 placeholder","api":"fixture text-0045 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-003z placeholder","thinkingSignature":"fixture text-0040 placeholder"},{"type":"text","text":"fixture text-0041 placeholder"},{"type":"toolCall","id":"call_0014","name":"tool_08","arguments":{"file_path":"fixture text-0042 placeholder","new_string":"fixture text-0043 placeholder","old_string":"fixture text-0044 placeholder"}}],"api":"fixture text-0045 placeholder","provider":"fixture text-0046 placeholder","model":"fixture text-0047 placeholder","usage":{"input":4226,"output":759,"cacheRead":272896,"cacheWrite":0,"totalTokens":277881,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791611180154,"responseId":"fixture text-0048 placeholder"},"rawOmitted":false,"textTruncated":false,"index":29,"text":null,"thinking":null,"arguments":{"file_path":"fixture text-0042 placeholder","new_string":"fixture text-0043 placeholder","old_string":"fixture text-0044 placeholder"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_08","summary":"tool_08{file_path=\"fixture text-0042 placeholder\", new_string=\"fixture text-0043 placeholder\", old_string=\"fixture text-0044 placeholder\"}","argumentsOmitted":false}]},{"id":"turn-005","index":5,"startedAt":1791611784883,"endedAt":1791611784883,"durationMs":0,"toolCalls":0,"errors":0,"tokens":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"totalTokens":0},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-0049","turnId":"turn-005","role":"toolResult","generation":null,"timestamp":1791611784883,"responseId":null,"relativeMs":7852973,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0015","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0015","toolName":"tool_03","content":[{"type":"text","text":"fixture text-004a placeholder"}],"details":{"execution":{"status":"fixture text-004b placeholder","reason":"fixture text-004c placeholder","exitCode":0},"timing":{"commandTimeoutSeconds":3600,"commandTimerStartedAt":1791611784292,"commandDeadlineAt":1791615384292},"output":{"rawBytes":1402,"persistence":"fixture text-004d placeholder","omittedBytes":0},"processOutput":{"stdout":"fixture text-004e placeholder","stderr":"fixture text-004f placeholder","exitCode":0,"interrupted":false,"stdoutTruncated":false,"stderrTruncated":false,"rawOutputPath":"fixture text-004g placeholder"},"description":"fixture text-004h placeholder","fullOutputPath":"fixture text-004i placeholder","envSanitized":["fixture text-004j placeholder","fixture text-004k placeholder","fixture text-004l placeholder","fixture text-004m placeholder","fixture text-004n placeholder"],"status":"fixture text-004o placeholder","task_id":"fixture text-004p placeholder"},"isError":false,"timestamp":1791611784883},"rawOmitted":false,"textTruncated":false,"index":30,"text":null,"thinking":null,"arguments":null,"result":"fixture text-004a placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-004a placeholder"}]},{"id":"turn-006","index":6,"startedAt":1791612294290,"endedAt":1791612294290,"durationMs":0,"toolCalls":0,"errors":0,"tokens":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"totalTokens":0},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-004q","turnId":"turn-006","role":"toolResult","generation":null,"timestamp":1791612294290,"responseId":null,"relativeMs":8362380,"durationMs":null,"toolName":"tool_07","toolCallId":"call_0016","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0016","toolName":"tool_07","content":[{"type":"text","text":"fixture text-004r placeholder"}],"details":{"created":true,"bytes_written":384,"encoding":"fixture text-004s placeholder","bom":false},"isError":false,"timestamp":1791612294290},"rawOmitted":false,"textTruncated":false,"index":31,"text":null,"thinking":null,"arguments":null,"result":"fixture text-004r placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_07","summary":"fixture text-004r placeholder"}]},{"id":"turn-007","index":7,"startedAt":1791613412089,"endedAt":1791613412089,"durationMs":0,"toolCalls":0,"errors":0,"tokens":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"totalTokens":0},"turnClass":"compaction","askedReader":false,"closed":false,"records":[{"id":"msg-004t","turnId":"turn-007","role":"compactionSummary","generation":null,"timestamp":1791613412089,"responseId":null,"relativeMs":9480179,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":null,"raw":{"role":"compactionSummary","summary":"fixture text-004u placeholder","tokensBefore":365642,"timestamp":1791613412089},"rawOmitted":false,"textTruncated":false,"index":32,"text":"fixture text-004u placeholder","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":365642,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"compaction","title":"compaction","summary":"fixture text-004u placeholder"}]},{"id":"turn-008","index":8,"startedAt":1791613490565,"endedAt":1791613490565,"durationMs":0,"toolCalls":2,"errors":0,"tokens":{"input":2171,"output":429,"cacheRead":54272,"cacheWrite":0,"totalTokens":56872},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-004v","turnId":"turn-008","role":"assistant","generation":null,"timestamp":1791613490565,"responseId":"fixture text-0058 placeholder","relativeMs":9558655,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-0057 placeholder","provider":"fixture text-0056 placeholder","api":"fixture text-0055 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-004w placeholder","thinkingSignature":"fixture text-004x placeholder"},{"type":"text","text":"fixture text-004y placeholder"},{"type":"toolCall","id":"call_0017","name":"tool_09","arguments":{"pattern":"fixture text-004z placeholder","path":"fixture text-0050 placeholder","output_mode":"fixture text-0051 placeholder"}},{"type":"toolCall","id":"call_0018","name":"tool_09","arguments":{"pattern":"fixture text-0052 placeholder","path":"fixture text-0053 placeholder","output_mode":"fixture text-0054 placeholder","limit":30}}],"api":"fixture text-0055 placeholder","provider":"fixture text-0056 placeholder","model":"fixture text-0057 placeholder","usage":{"input":2171,"output":429,"cacheRead":54272,"cacheWrite":0,"totalTokens":56872,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791613490565,"responseId":"fixture text-0058 placeholder"},"rawOmitted":false,"textTruncated":false,"index":33,"text":null,"thinking":"fixture text-004w placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-004w placeholder"},{"id":"msg-004v","turnId":"turn-008","role":"assistant","generation":null,"timestamp":1791613490565,"responseId":"fixture text-0058 placeholder","relativeMs":9558655,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":2171,"output":429,"cacheRead":54272,"cacheWrite":0,"totalTokens":56872},"model":"fixture text-0057 placeholder","provider":"fixture text-0056 placeholder","api":"fixture text-0055 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-004w placeholder","thinkingSignature":"fixture text-004x placeholder"},{"type":"text","text":"fixture text-004y placeholder"},{"type":"toolCall","id":"call_0017","name":"tool_09","arguments":{"pattern":"fixture text-004z placeholder","path":"fixture text-0050 placeholder","output_mode":"fixture text-0051 placeholder"}},{"type":"toolCall","id":"call_0018","name":"tool_09","arguments":{"pattern":"fixture text-0052 placeholder","path":"fixture text-0053 placeholder","output_mode":"fixture text-0054 placeholder","limit":30}}],"api":"fixture text-0055 placeholder","provider":"fixture text-0056 placeholder","model":"fixture text-0057 placeholder","usage":{"input":2171,"output":429,"cacheRead":54272,"cacheWrite":0,"totalTokens":56872,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791613490565,"responseId":"fixture text-0058 placeholder"},"rawOmitted":false,"textTruncated":false,"index":34,"text":"fixture text-004y placeholder","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-004y placeholder"},{"id":"msg-004v","turnId":"turn-008","role":"assistant","generation":null,"timestamp":1791613490565,"responseId":"fixture text-0058 placeholder","relativeMs":9558655,"durationMs":null,"toolName":"tool_09","toolCallId":"call_0017","model":"fixture text-0057 placeholder","provider":"fixture text-0056 placeholder","api":"fixture text-0055 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-004w placeholder","thinkingSignature":"fixture text-004x placeholder"},{"type":"text","text":"fixture text-004y placeholder"},{"type":"toolCall","id":"call_0017","name":"tool_09","arguments":{"pattern":"fixture text-004z placeholder","path":"fixture text-0050 placeholder","output_mode":"fixture text-0051 placeholder"}},{"type":"toolCall","id":"call_0018","name":"tool_09","arguments":{"pattern":"fixture text-0052 placeholder","path":"fixture text-0053 placeholder","output_mode":"fixture text-0054 placeholder","limit":30}}],"api":"fixture text-0055 placeholder","provider":"fixture text-0056 placeholder","model":"fixture text-0057 placeholder","usage":{"input":2171,"output":429,"cacheRead":54272,"cacheWrite":0,"totalTokens":56872,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791613490565,"responseId":"fixture text-0058 placeholder"},"rawOmitted":false,"textTruncated":false,"index":35,"text":null,"thinking":null,"arguments":{"pattern":"fixture text-004z placeholder","path":"fixture text-0050 placeholder","output_mode":"fixture text-0051 placeholder"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_09","summary":"tool_09{pattern=\"fixture text-004z placeholder\", path=\"fixture text-0050 placeholder\", output_mode=\"fixture text-0051 placeholder\"}","argumentsOmitted":false},{"id":"msg-004v","turnId":"turn-008","role":"assistant","generation":null,"timestamp":1791613490565,"responseId":"fixture text-0058 placeholder","relativeMs":9558655,"durationMs":null,"toolName":"tool_09","toolCallId":"call_0018","model":"fixture text-0057 placeholder","provider":"fixture text-0056 placeholder","api":"fixture text-0055 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-004w placeholder","thinkingSignature":"fixture text-004x placeholder"},{"type":"text","text":"fixture text-004y placeholder"},{"type":"toolCall","id":"call_0017","name":"tool_09","arguments":{"pattern":"fixture text-004z placeholder","path":"fixture text-0050 placeholder","output_mode":"fixture text-0051 placeholder"}},{"type":"toolCall","id":"call_0018","name":"tool_09","arguments":{"pattern":"fixture text-0052 placeholder","path":"fixture text-0053 placeholder","output_mode":"fixture text-0054 placeholder","limit":30}}],"api":"fixture text-0055 placeholder","provider":"fixture text-0056 placeholder","model":"fixture text-0057 placeholder","usage":{"input":2171,"output":429,"cacheRead":54272,"cacheWrite":0,"totalTokens":56872,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791613490565,"responseId":"fixture text-0058 placeholder"},"rawOmitted":false,"textTruncated":false,"index":36,"text":null,"thinking":null,"arguments":{"pattern":"fixture text-0052 placeholder","path":"fixture text-0053 placeholder","output_mode":"fixture text-0054 placeholder","limit":30},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_09","summary":"tool_09{pattern=\"fixture text-0052 placeholder\", path=\"fixture text-0053 placeholder\", output_mode=\"fixture text-0054 placeholder\", limit=\"30\"}","argumentsOmitted":false}]},{"id":"turn-009","index":9,"startedAt":1791614563489,"endedAt":1791614731831,"durationMs":168342,"toolCalls":1,"errors":0,"tokens":{"input":634,"output":1426,"cacheRead":120019,"cacheWrite":0,"totalTokens":122079},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-0059","turnId":"turn-009","role":"toolResult","generation":null,"timestamp":1791614563489,"responseId":null,"relativeMs":10631579,"durationMs":null,"toolName":"tool_09","toolCallId":"call_0019","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0019","toolName":"tool_09","content":[{"type":"text","text":"fixture text-005a placeholder"}],"details":{},"isError":false,"timestamp":1791614563489},"rawOmitted":false,"textTruncated":false,"index":37,"text":null,"thinking":null,"arguments":null,"result":"fixture text-005a placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_09","summary":"fixture text-005a placeholder"},{"id":"msg-005b","turnId":"turn-009","role":"assistant","generation":null,"timestamp":1791614731831,"responseId":"fixture text-005j placeholder","relativeMs":10799921,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-005i placeholder","provider":"fixture text-005h placeholder","api":"fixture text-005g placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-005c placeholder","thinkingSignature":"fixture text-005d placeholder"},{"type":"text","text":"fixture text-005e placeholder"},{"type":"toolCall","id":"call_0020","name":"tool_05","arguments":{"path":"fixture text-005f placeholder","limit":14}}],"api":"fixture text-005g placeholder","provider":"fixture text-005h placeholder","model":"fixture text-005i placeholder","usage":{"input":634,"output":1426,"cacheRead":120019,"cacheWrite":0,"totalTokens":122079,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791614731831,"responseId":"fixture text-005j placeholder"},"rawOmitted":false,"textTruncated":false,"index":38,"text":null,"thinking":"fixture text-005c placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-005c placeholder"},{"id":"msg-005b","turnId":"turn-009","role":"assistant","generation":null,"timestamp":1791614731831,"responseId":"fixture text-005j placeholder","relativeMs":10799921,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":634,"output":1426,"cacheRead":120019,"cacheWrite":0,"totalTokens":122079},"model":"fixture text-005i placeholder","provider":"fixture text-005h placeholder","api":"fixture text-005g placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-005c placeholder","thinkingSignature":"fixture text-005d placeholder"},{"type":"text","text":"fixture text-005e placeholder"},{"type":"toolCall","id":"call_0020","name":"tool_05","arguments":{"path":"fixture text-005f placeholder","limit":14}}],"api":"fixture text-005g placeholder","provider":"fixture text-005h placeholder","model":"fixture text-005i placeholder","usage":{"input":634,"output":1426,"cacheRead":120019,"cacheWrite":0,"totalTokens":122079,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791614731831,"responseId":"fixture text-005j placeholder"},"rawOmitted":false,"textTruncated":false,"index":39,"text":"fixture text-005e placeholder","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-005e placeholder"},{"id":"msg-005b","turnId":"turn-009","role":"assistant","generation":null,"timestamp":1791614731831,"responseId":"fixture text-005j placeholder","relativeMs":10799921,"durationMs":null,"toolName":"tool_05","toolCallId":"call_0020","model":"fixture text-005i placeholder","provider":"fixture text-005h placeholder","api":"fixture text-005g placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-005c placeholder","thinkingSignature":"fixture text-005d placeholder"},{"type":"text","text":"fixture text-005e placeholder"},{"type":"toolCall","id":"call_0020","name":"tool_05","arguments":{"path":"fixture text-005f placeholder","limit":14}}],"api":"fixture text-005g placeholder","provider":"fixture text-005h placeholder","model":"fixture text-005i placeholder","usage":{"input":634,"output":1426,"cacheRead":120019,"cacheWrite":0,"totalTokens":122079,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791614731831,"responseId":"fixture text-005j placeholder"},"rawOmitted":false,"textTruncated":false,"index":40,"text":null,"thinking":null,"arguments":{"path":"fixture text-005f placeholder","limit":14},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_05","summary":"tool_05{path=\"fixture text-005f placeholder\", limit=\"14\"}","argumentsOmitted":false}]},{"id":"turn-010","index":10,"startedAt":1791615045716,"endedAt":1791615045716,"durationMs":0,"toolCalls":0,"errors":0,"tokens":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"totalTokens":0},"turnClass":"prompt","askedReader":false,"closed":false,"records":[{"id":"msg-005k","turnId":"turn-010","role":"user","generation":null,"timestamp":1791615045716,"responseId":null,"relativeMs":11113806,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":null,"raw":{"role":"user","content":[{"type":"text","text":"fixture text-005l placeholder"}],"timestamp":1791615045716,"canonicalTextRange":{"startOffset":0,"endOffset":10},"hostMetadata":{"immediateSendBatchId":"fixture text-005m placeholder"}},"rawOmitted":false,"textTruncated":false,"index":41,"text":"fixture te","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"user","title":"user","summary":"fixture te","steered":false}]},{"id":"turn-011","index":11,"startedAt":1791615477302,"endedAt":1791615904587,"durationMs":427285,"toolCalls":0,"errors":0,"tokens":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"totalTokens":0},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-005n","turnId":"turn-011","role":"toolResult","generation":null,"timestamp":1791615477302,"responseId":null,"relativeMs":11545392,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0021","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0021","toolName":"tool_03","content":[{"type":"text","text":"fixture text-005o placeholder"}],"details":{"execution":{"status":"fixture text-005p placeholder","reason":"fixture text-005q placeholder","exitCode":0},"timing":{"commandTimeoutSeconds":3600,"commandTimerStartedAt":1791615476257,"commandDeadlineAt":1791619076257},"output":{"rawBytes":557,"persistence":"fixture text-005r placeholder","omittedBytes":0},"processOutput":{"stdout":"fixture text-005s placeholder","stderr":"fixture text-005t placeholder","exitCode":0,"interrupted":false,"stdoutTruncated":false,"stderrTruncated":false,"rawOutputPath":"fixture text-005u placeholder"},"description":"fixture text-005v placeholder","fullOutputPath":"fixture text-005w placeholder","status":"fixture text-005x placeholder","task_id":"fixture text-005y placeholder"},"isError":false,"timestamp":1791615477302},"rawOmitted":false,"textTruncated":false,"index":42,"text":null,"thinking":null,"arguments":null,"result":"fixture text-005o placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-005o placeholder"},{"id":"msg-005z","turnId":"turn-011","role":"toolResult","generation":null,"timestamp":1791615904587,"responseId":null,"relativeMs":11972677,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0022","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0022","toolName":"tool_03","content":[{"type":"text","text":"fixture text-0060 placeholder"}],"details":{"execution":{"status":"fixture text-0061 placeholder","reason":"fixture text-0062 placeholder","exitCode":0},"timing":{"commandTimeoutSeconds":3600,"commandTimerStartedAt":1791615900851,"commandDeadlineAt":1791619500851},"output":{"rawBytes":634,"persistence":"fixture text-0063 placeholder","omittedBytes":0},"processOutput":{"stdout":"fixture text-0064 placeholder","stderr":"fixture text-0065 placeholder","exitCode":0,"interrupted":false,"stdoutTruncated":false,"stderrTruncated":false,"rawOutputPath":"fixture text-0066 placeholder"},"description":"fixture text-0067 placeholder","fullOutputPath":"fixture text-0068 placeholder","status":"fixture text-0069 placeholder","task_id":"fixture text-006a placeholder"},"isError":false,"timestamp":1791615904587},"rawOmitted":false,"textTruncated":false,"index":43,"text":null,"thinking":null,"arguments":null,"result":"fixture text-0060 placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-0060 placeholder"}]},{"id":"turn-012","index":12,"startedAt":1791616197977,"endedAt":1791616341161,"durationMs":143184,"toolCalls":1,"errors":0,"tokens":{"input":806,"output":332,"cacheRead":215296,"cacheWrite":0,"totalTokens":216434},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-006b","turnId":"turn-012","role":"assistant","generation":null,"timestamp":1791616197977,"responseId":"fixture text-006i placeholder","relativeMs":12266067,"durationMs":null,"toolName":"tool_08","toolCallId":"call_0023","tokens":{"input":806,"output":332,"cacheRead":215296,"cacheWrite":0,"totalTokens":216434},"model":"fixture text-006h placeholder","provider":"fixture text-006g placeholder","api":"fixture text-006f placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"toolCall","id":"call_0023","name":"tool_08","arguments":{"file_path":"fixture text-006c placeholder","new_string":"fixture text-006d placeholder","old_string":"fixture text-006e placeholder"}}],"api":"fixture text-006f placeholder","provider":"fixture text-006g placeholder","model":"fixture text-006h placeholder","usage":{"input":806,"output":332,"cacheRead":215296,"cacheWrite":0,"totalTokens":216434,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791616197977,"responseId":"fixture text-006i placeholder"},"rawOmitted":false,"textTruncated":false,"index":44,"text":null,"thinking":null,"arguments":{"file_path":"fixture text-006c placeholder","new_string":"fixture text-006d placeholder","old_string":"fixture text-006e placeholder"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_08","summary":"tool_08{file_path=\"fixture text-006c placeholder\", new_string=\"fixture text-006d placeholder\", old_string=\"fixture text-006e placeholder\"}","argumentsOmitted":false},{"id":"msg-006j","turnId":"turn-012","role":"toolResult","generation":null,"timestamp":1791616341161,"responseId":null,"relativeMs":12409251,"durationMs":null,"toolName":"tool_08","toolCallId":"call_0024","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0024","toolName":"tool_08","content":[{"type":"text","text":"fixture text-006k placeholder"}],"details":{"diff":"fixture text-006l placeholder","patch":"fixture text-006m placeholder","firstChangedLine":19},"isError":false,"timestamp":1791616341161},"rawOmitted":false,"textTruncated":false,"index":45,"text":null,"thinking":null,"arguments":null,"result":"fixture text-006k placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_08","summary":"fixture text-006k placeholder"}]},{"id":"turn-013","index":13,"startedAt":1791616657094,"endedAt":1791616657094,"durationMs":0,"toolCalls":1,"errors":0,"tokens":{"input":2780,"output":1648,"cacheRead":257536,"cacheWrite":0,"totalTokens":261964},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-006n","turnId":"turn-013","role":"assistant","generation":null,"timestamp":1791616657094,"responseId":"fixture text-006w placeholder","relativeMs":12725184,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-006v placeholder","provider":"fixture text-006u placeholder","api":"fixture text-006t placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-006o placeholder","thinkingSignature":"fixture text-006p placeholder"},{"type":"text","text":"fixture text-006q placeholder"},{"type":"toolCall","id":"call_0025","name":"tool_03","arguments":{"command":"fixture text-006r placeholder","description":"fixture text-006s placeholder","timeout":120}}],"api":"fixture text-006t placeholder","provider":"fixture text-006u placeholder","model":"fixture text-006v placeholder","usage":{"input":2780,"output":1648,"cacheRead":257536,"cacheWrite":0,"totalTokens":261964,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791616657094,"responseId":"fixture text-006w placeholder"},"rawOmitted":false,"textTruncated":false,"index":46,"text":null,"thinking":"fixture text-006o placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-006o placeholder"},{"id":"msg-006n","turnId":"turn-013","role":"assistant","generation":null,"timestamp":1791616657094,"responseId":"fixture text-006w placeholder","relativeMs":12725184,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":2780,"output":1648,"cacheRead":257536,"cacheWrite":0,"totalTokens":261964},"model":"fixture text-006v placeholder","provider":"fixture text-006u placeholder","api":"fixture text-006t placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-006o placeholder","thinkingSignature":"fixture text-006p placeholder"},{"type":"text","text":"fixture text-006q placeholder"},{"type":"toolCall","id":"call_0025","name":"tool_03","arguments":{"command":"fixture text-006r placeholder","description":"fixture text-006s placeholder","timeout":120}}],"api":"fixture text-006t placeholder","provider":"fixture text-006u placeholder","model":"fixture text-006v placeholder","usage":{"input":2780,"output":1648,"cacheRead":257536,"cacheWrite":0,"totalTokens":261964,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791616657094,"responseId":"fixture text-006w placeholder"},"rawOmitted":false,"textTruncated":false,"index":47,"text":"fixture text-006q placeholder","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-006q placeholder"},{"id":"msg-006n","turnId":"turn-013","role":"assistant","generation":null,"timestamp":1791616657094,"responseId":"fixture text-006w placeholder","relativeMs":12725184,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0025","model":"fixture text-006v placeholder","provider":"fixture text-006u placeholder","api":"fixture text-006t placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-006o placeholder","thinkingSignature":"fixture text-006p placeholder"},{"type":"text","text":"fixture text-006q placeholder"},{"type":"toolCall","id":"call_0025","name":"tool_03","arguments":{"command":"fixture text-006r placeholder","description":"fixture text-006s placeholder","timeout":120}}],"api":"fixture text-006t placeholder","provider":"fixture text-006u placeholder","model":"fixture text-006v placeholder","usage":{"input":2780,"output":1648,"cacheRead":257536,"cacheWrite":0,"totalTokens":261964,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791616657094,"responseId":"fixture text-006w placeholder"},"rawOmitted":false,"textTruncated":false,"index":48,"text":null,"thinking":null,"arguments":{"command":"fixture text-006r placeholder","description":"fixture text-006s placeholder","timeout":120},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-006r placeholder\", description=\"fixture text-006s placeholder\", timeout=\"120\"}","argumentsOmitted":false}]},{"id":"turn-014","index":14,"startedAt":1791617021128,"endedAt":1791617021128,"durationMs":0,"toolCalls":0,"errors":0,"tokens":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"totalTokens":0},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-006x","turnId":"turn-014","role":"toolResult","generation":null,"timestamp":1791617021128,"responseId":null,"relativeMs":13089218,"durationMs":null,"toolName":"tool_07","toolCallId":"call_0026","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0026","toolName":"tool_07","content":[{"type":"text","text":"fixture text-006y placeholder"}],"details":{"created":true,"bytes_written":4484,"encoding":"fixture text-006z placeholder","bom":false},"isError":false,"timestamp":1791617021128},"rawOmitted":false,"textTruncated":false,"index":49,"text":null,"thinking":null,"arguments":null,"result":"fixture text-006y placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_07","summary":"fixture text-006y placeholder"}]},{"id":"turn-015","index":15,"startedAt":1791617468106,"endedAt":1791617468106,"durationMs":0,"toolCalls":1,"errors":0,"tokens":{"input":1087,"output":70,"cacheRead":312832,"cacheWrite":0,"totalTokens":313989},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-0070","turnId":"turn-015","role":"assistant","generation":null,"timestamp":1791617468106,"responseId":"fixture text-0075 placeholder","relativeMs":13536196,"durationMs":null,"toolName":"tool_05","toolCallId":"call_0027","tokens":{"input":1087,"output":70,"cacheRead":312832,"cacheWrite":0,"totalTokens":313989},"model":"fixture text-0074 placeholder","provider":"fixture text-0073 placeholder","api":"fixture text-0072 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"toolCall","id":"call_0027","name":"tool_05","arguments":{"limit":40,"offset":2108,"path":"fixture text-0071 placeholder"}}],"api":"fixture text-0072 placeholder","provider":"fixture text-0073 placeholder","model":"fixture text-0074 placeholder","usage":{"input":1087,"output":70,"cacheRead":312832,"cacheWrite":0,"totalTokens":313989,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791617468106,"responseId":"fixture text-0075 placeholder"},"rawOmitted":false,"textTruncated":false,"index":50,"text":null,"thinking":null,"arguments":{"limit":40,"offset":2108,"path":"fixture text-0071 placeholder"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_05","summary":"tool_05{limit=\"40\", offset=\"2108\", path=\"fixture text-0071 placeholder\"}","argumentsOmitted":false}]},{"id":"turn-016","index":16,"startedAt":1791617651220,"endedAt":1791618644926,"durationMs":993706,"toolCalls":3,"errors":0,"tokens":{"input":2763,"output":1128,"cacheRead":508160,"cacheWrite":0,"totalTokens":512051},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-0076","turnId":"turn-016","role":"user","generation":null,"timestamp":1791617651220,"responseId":null,"relativeMs":13719310,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":null,"raw":{"role":"user","content":[{"type":"text","text":"<system-reminder>\nfixture injected-0077 block"}],"timestamp":1791617651220,"canonicalTextRange":{"startOffset":3003,"endOffset":3066}},"rawOmitted":false,"textTruncated":false,"index":51,"text":"<system-reminder>\nfixture injected-0077 block","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"system","title":"injected","summary":"<system-reminder> fixture injected-0077 block"},{"id":"msg-0078","turnId":"turn-016","role":"assistant","generation":null,"timestamp":1791617812028,"responseId":"fixture text-007e placeholder","relativeMs":13880118,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0028","tokens":{"input":859,"output":309,"cacheRead":349952,"cacheWrite":0,"totalTokens":351120},"model":"fixture text-007d placeholder","provider":"fixture text-007c placeholder","api":"fixture text-007b placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"toolCall","id":"call_0028","name":"tool_03","arguments":{"command":"fixture text-0079 placeholder","description":"fixture text-007a placeholder","timeout":240}}],"api":"fixture text-007b placeholder","provider":"fixture text-007c placeholder","model":"fixture text-007d placeholder","usage":{"input":859,"output":309,"cacheRead":349952,"cacheWrite":0,"totalTokens":351120,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791617812028,"responseId":"fixture text-007e placeholder"},"rawOmitted":false,"textTruncated":false,"index":52,"text":null,"thinking":null,"arguments":{"command":"fixture text-0079 placeholder","description":"fixture text-007a placeholder","timeout":240},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-0079 placeholder\", description=\"fixture text-007a placeholder\", timeout=\"240\"}","argumentsOmitted":false},{"id":"msg-007f","turnId":"turn-016","role":"assistant","generation":null,"timestamp":1791618043996,"responseId":"fixture text-007o placeholder","relativeMs":14112086,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":1825,"output":630,"cacheRead":68352,"cacheWrite":0,"totalTokens":70807},"model":"fixture text-007n placeholder","provider":"fixture text-007m placeholder","api":"fixture text-007l placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-007g placeholder","thinkingSignature":"fixture text-007h placeholder"},{"type":"toolCall","id":"call_0029","name":"tool_09","arguments":{"context":2,"limit":8,"output_mode":"fixture text-007i placeholder","path":"fixture text-007j placeholder","pattern":"fixture text-007k placeholder"}}],"api":"fixture text-007l placeholder","provider":"fixture text-007m placeholder","model":"fixture text-007n placeholder","usage":{"input":1825,"output":630,"cacheRead":68352,"cacheWrite":0,"totalTokens":70807,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791618043996,"responseId":"fixture text-007o placeholder"},"rawOmitted":false,"textTruncated":false,"index":53,"text":null,"thinking":"fixture text-007g placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-007g placeholder"},{"id":"msg-007f","turnId":"turn-016","role":"assistant","generation":null,"timestamp":1791618043996,"responseId":"fixture text-007o placeholder","relativeMs":14112086,"durationMs":null,"toolName":"tool_09","toolCallId":"call_0029","model":"fixture text-007n placeholder","provider":"fixture text-007m placeholder","api":"fixture text-007l placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-007g placeholder","thinkingSignature":"fixture text-007h placeholder"},{"type":"toolCall","id":"call_0029","name":"tool_09","arguments":{"context":2,"limit":8,"output_mode":"fixture text-007i placeholder","path":"fixture text-007j placeholder","pattern":"fixture text-007k placeholder"}}],"api":"fixture text-007l placeholder","provider":"fixture text-007m placeholder","model":"fixture text-007n placeholder","usage":{"input":1825,"output":630,"cacheRead":68352,"cacheWrite":0,"totalTokens":70807,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791618043996,"responseId":"fixture text-007o placeholder"},"rawOmitted":false,"textTruncated":false,"index":54,"text":null,"thinking":null,"arguments":{"context":2,"limit":8,"output_mode":"fixture text-007i placeholder","path":"fixture text-007j placeholder","pattern":"fixture text-007k placeholder"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_09","summary":"tool_09{context=\"2\", limit=\"8\", output_mode=\"fixture text-007i placeholder\", path=\"fixture text-007j placeholder\"}","argumentsOmitted":false},{"id":"msg-007p","turnId":"turn-016","role":"toolResult","generation":null,"timestamp":1791618210903,"responseId":null,"relativeMs":14278993,"durationMs":null,"toolName":"tool_05","toolCallId":"call_0030","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0030","toolName":"tool_05","content":[{"type":"text","text":"fixture text-007q placeholder"}],"details":{"textFile":{"path":"fixture text-007r placeholder","content":"fixture text-007s placeholder","numLines":14,"startLine":1231,"totalLines":2912,"truncatedByOutputLimit":false,"wholeFileAutoTruncated":false}},"isError":false,"timestamp":1791618210903},"rawOmitted":false,"textTruncated":false,"index":55,"text":null,"thinking":null,"arguments":null,"result":"fixture text-007q placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_05","summary":"fixture text-007q placeholder"},{"id":"msg-007t","turnId":"turn-016","role":"assistant","generation":null,"timestamp":1791618408954,"responseId":"fixture text-0081 placeholder","relativeMs":14477044,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":79,"output":189,"cacheRead":89856,"cacheWrite":0,"totalTokens":90124},"model":"fixture text-0080 placeholder","provider":"fixture text-007z placeholder","api":"fixture text-007y placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-007u placeholder","thinkingSignature":"fixture text-007v placeholder"},{"type":"toolCall","id":"call_0031","name":"tool_03","arguments":{"command":"fixture text-007w placeholder","description":"fixture text-007x placeholder","timeout":420}}],"api":"fixture text-007y placeholder","provider":"fixture text-007z placeholder","model":"fixture text-0080 placeholder","usage":{"input":79,"output":189,"cacheRead":89856,"cacheWrite":0,"totalTokens":90124,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791618408954,"responseId":"fixture text-0081 placeholder"},"rawOmitted":false,"textTruncated":false,"index":56,"text":null,"thinking":"fixture text-007u placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-007u placeholder"},{"id":"msg-007t","turnId":"turn-016","role":"assistant","generation":null,"timestamp":1791618408954,"responseId":"fixture text-0081 placeholder","relativeMs":14477044,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0031","model":"fixture text-0080 placeholder","provider":"fixture text-007z placeholder","api":"fixture text-007y placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-007u placeholder","thinkingSignature":"fixture text-007v placeholder"},{"type":"toolCall","id":"call_0031","name":"tool_03","arguments":{"command":"fixture text-007w placeholder","description":"fixture text-007x placeholder","timeout":420}}],"api":"fixture text-007y placeholder","provider":"fixture text-007z placeholder","model":"fixture text-0080 placeholder","usage":{"input":79,"output":189,"cacheRead":89856,"cacheWrite":0,"totalTokens":90124,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791618408954,"responseId":"fixture text-0081 placeholder"},"rawOmitted":false,"textTruncated":false,"index":57,"text":null,"thinking":null,"arguments":{"command":"fixture text-007w placeholder","description":"fixture text-007x placeholder","timeout":420},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-007w placeholder\", description=\"fixture text-007x placeholder\", timeout=\"420\"}","argumentsOmitted":false},{"id":"msg-0082","turnId":"turn-016","role":"toolResult","generation":null,"timestamp":1791618644926,"responseId":null,"relativeMs":14713016,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0032","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0032","toolName":"tool_03","content":[{"type":"text","text":"fixture text-0083 placeholder"}],"details":{"execution":{"status":"fixture text-0084 placeholder","reason":"fixture text-0085 placeholder","exitCode":0},"timing":{"commandTimeoutSeconds":300,"commandTimerStartedAt":1791618643593,"commandDeadlineAt":1791618943593},"output":{"rawBytes":174,"persistence":"fixture text-0086 placeholder","omittedBytes":0},"processOutput":{"stdout":"fixture text-0087 placeholder","stderr":"fixture text-0088 placeholder","exitCode":0,"interrupted":false,"stdoutTruncated":false,"stderrTruncated":false,"rawOutputPath":"fixture text-0089 placeholder"},"description":"fixture text-008a placeholder","fullOutputPath":"fixture text-008b placeholder","status":"fixture text-008c placeholder","task_id":"fixture text-008d placeholder"},"isError":false,"timestamp":1791618644926},"rawOmitted":false,"textTruncated":false,"index":58,"text":null,"thinking":null,"arguments":null,"result":"fixture text-0083 placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-0083 placeholder"}]},{"id":"turn-017","index":17,"startedAt":1791619060246,"endedAt":1791620468950,"durationMs":1408704,"toolCalls":3,"errors":2,"tokens":{"input":5055,"output":1798,"cacheRead":466304,"cacheWrite":0,"totalTokens":473157},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-008e","turnId":"turn-017","role":"assistant","generation":null,"timestamp":1791619060246,"responseId":"fixture text-008m placeholder","relativeMs":15128336,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":452,"output":939,"cacheRead":118656,"cacheWrite":0,"totalTokens":120047},"model":"fixture text-008l placeholder","provider":"fixture text-008k placeholder","api":"fixture text-008j placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-008f placeholder","thinkingSignature":"fixture text-008g placeholder"},{"type":"toolCall","id":"call_0033","name":"tool_03","arguments":{"command":"fixture text-008h placeholder","description":"fixture text-008i placeholder","timeout":120}}],"api":"fixture text-008j placeholder","provider":"fixture text-008k placeholder","model":"fixture text-008l placeholder","usage":{"input":452,"output":939,"cacheRead":118656,"cacheWrite":0,"totalTokens":120047,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791619060246,"responseId":"fixture text-008m placeholder"},"rawOmitted":false,"textTruncated":false,"index":59,"text":null,"thinking":"fixture text-008f placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-008f placeholder"},{"id":"msg-008e","turnId":"turn-017","role":"assistant","generation":null,"timestamp":1791619060246,"responseId":"fixture text-008m placeholder","relativeMs":15128336,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0033","model":"fixture text-008l placeholder","provider":"fixture text-008k placeholder","api":"fixture text-008j placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-008f placeholder","thinkingSignature":"fixture text-008g placeholder"},{"type":"toolCall","id":"call_0033","name":"tool_03","arguments":{"command":"fixture text-008h placeholder","description":"fixture text-008i placeholder","timeout":120}}],"api":"fixture text-008j placeholder","provider":"fixture text-008k placeholder","model":"fixture text-008l placeholder","usage":{"input":452,"output":939,"cacheRead":118656,"cacheWrite":0,"totalTokens":120047,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791619060246,"responseId":"fixture text-008m placeholder"},"rawOmitted":false,"textTruncated":false,"index":60,"text":null,"thinking":null,"arguments":{"command":"fixture text-008h placeholder","description":"fixture text-008i placeholder","timeout":120},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-008h placeholder\", description=\"fixture text-008i placeholder\", timeout=\"120\"}","argumentsOmitted":false},{"id":"msg-008n","turnId":"turn-017","role":"toolResult","generation":null,"timestamp":1791619266573,"responseId":null,"relativeMs":15334663,"durationMs":null,"toolName":"tool_08","toolCallId":"call_0034","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0034","toolName":"tool_08","content":[{"type":"text","text":"fixture text-008o placeholder"}],"details":{"diff":"fixture text-008p placeholder","patch":"fixture text-008q placeholder","firstChangedLine":1127},"isError":false,"timestamp":1791619266573},"rawOmitted":false,"textTruncated":false,"index":61,"text":null,"thinking":null,"arguments":null,"result":"fixture text-008o placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_08","summary":"fixture text-008o placeholder"},{"id":"msg-008r","turnId":"turn-017","role":"toolResult","generation":null,"timestamp":1791619441758,"responseId":null,"relativeMs":15509848,"durationMs":null,"toolName":"tool_08","toolCallId":"call_0035","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0035","toolName":"tool_08","content":[{"type":"text","text":"fixture text-008s placeholder"}],"details":{"diff":"fixture text-008t placeholder","patch":"fixture text-008u placeholder","firstChangedLine":1185},"isError":false,"timestamp":1791619441758},"rawOmitted":false,"textTruncated":false,"index":62,"text":null,"thinking":null,"arguments":null,"result":"fixture text-008s placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_08","summary":"fixture text-008s placeholder"},{"id":"msg-008v","turnId":"turn-017","role":"toolResult","generation":null,"timestamp":1791619595453,"responseId":null,"relativeMs":15663543,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0036","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":true,"raw":{"role":"toolResult","toolCallId":"call_0036","toolName":"tool_03","content":[{"type":"text","text":"fixture text-008w placeholder"}],"details":{"execution":{"status":"fixture text-008x placeholder","reason":"fixture text-008y placeholder","exitCode":1,"message":"fixture text-008z placeholder"},"timing":{"commandTimeoutSeconds":180,"commandTimerStartedAt":1791619594718,"commandDeadlineAt":1791619774718},"output":{"rawBytes":929,"persistence":"fixture text-0090 placeholder","omittedBytes":0},"processOutput":{"stdout":"fixture text-0091 placeholder","stderr":"fixture text-0092 placeholder","exitCode":1,"interrupted":false,"stdoutTruncated":false,"stderrTruncated":false,"rawOutputPath":"fixture text-0093 placeholder"},"description":"fixture text-0094 placeholder","fullOutputPath":"fixture text-0095 placeholder","status":"fixture text-0096 placeholder","task_id":"fixture text-0097 placeholder","is_error":true},"isError":true,"timestamp":1791619595453},"rawOmitted":false,"textTruncated":false,"index":63,"text":null,"thinking":null,"arguments":null,"result":"fixture text-008w placeholder","error":"fixture text-008w placeholder","tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-008w placeholder"},{"id":"msg-0098","turnId":"turn-017","role":"assistant","generation":null,"timestamp":1791619777303,"responseId":"fixture text-009d placeholder","relativeMs":15845393,"durationMs":null,"toolName":"tool_04","toolCallId":"call_0037","tokens":{"input":3978,"output":36,"cacheRead":162816,"cacheWrite":0,"totalTokens":166830},"model":"fixture text-009c placeholder","provider":"fixture text-009b placeholder","api":"fixture text-009a placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"toolCall","id":"call_0037","name":"tool_04","arguments":{"action":"fixture text-0099 placeholder","input":{}}}],"api":"fixture text-009a placeholder","provider":"fixture text-009b placeholder","model":"fixture text-009c placeholder","usage":{"input":3978,"output":36,"cacheRead":162816,"cacheWrite":0,"totalTokens":166830,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791619777303,"responseId":"fixture text-009d placeholder"},"rawOmitted":false,"textTruncated":false,"index":64,"text":null,"thinking":null,"arguments":{"action":"fixture text-0099 placeholder","input":{}},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_04","summary":"tool_04{action=\"fixture text-0099 placeholder\", input=\"{…}\"}","argumentsOmitted":false},{"id":"msg-009e","turnId":"turn-017","role":"assistant","generation":null,"timestamp":1791620008455,"responseId":"fixture text-009m placeholder","relativeMs":16076545,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":625,"output":823,"cacheRead":184832,"cacheWrite":0,"totalTokens":186280},"model":"fixture text-009l placeholder","provider":"fixture text-009k placeholder","api":"fixture text-009j placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-009f placeholder","thinkingSignature":"fixture text-009g placeholder"},{"type":"toolCall","id":"call_0038","name":"tool_03","arguments":{"command":"fixture text-009h placeholder","description":"fixture text-009i placeholder","timeout":180}}],"api":"fixture text-009j placeholder","provider":"fixture text-009k placeholder","model":"fixture text-009l placeholder","usage":{"input":625,"output":823,"cacheRead":184832,"cacheWrite":0,"totalTokens":186280,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791620008455,"responseId":"fixture text-009m placeholder"},"rawOmitted":false,"textTruncated":false,"index":65,"text":null,"thinking":"fixture text-009f placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-009f placeholder"},{"id":"msg-009e","turnId":"turn-017","role":"assistant","generation":null,"timestamp":1791620008455,"responseId":"fixture text-009m placeholder","relativeMs":16076545,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0038","model":"fixture text-009l placeholder","provider":"fixture text-009k placeholder","api":"fixture text-009j placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-009f placeholder","thinkingSignature":"fixture text-009g placeholder"},{"type":"toolCall","id":"call_0038","name":"tool_03","arguments":{"command":"fixture text-009h placeholder","description":"fixture text-009i placeholder","timeout":180}}],"api":"fixture text-009j placeholder","provider":"fixture text-009k placeholder","model":"fixture text-009l placeholder","usage":{"input":625,"output":823,"cacheRead":184832,"cacheWrite":0,"totalTokens":186280,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791620008455,"responseId":"fixture text-009m placeholder"},"rawOmitted":false,"textTruncated":false,"index":66,"text":null,"thinking":null,"arguments":{"command":"fixture text-009h placeholder","description":"fixture text-009i placeholder","timeout":180},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-009h placeholder\", description=\"fixture text-009i placeholder\", timeout=\"180\"}","argumentsOmitted":false},{"id":"msg-009n","turnId":"turn-017","role":"toolResult","generation":null,"timestamp":1791620261774,"responseId":null,"relativeMs":16329864,"durationMs":null,"toolName":"tool_04","toolCallId":"call_0039","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":true,"raw":{"role":"toolResult","toolCallId":"call_0039","toolName":"tool_04","content":[{"type":"text","text":"fixture text-009o placeholder"}],"details":{},"isError":true,"timestamp":1791620261774},"rawOmitted":false,"textTruncated":false,"index":67,"text":null,"thinking":null,"arguments":null,"result":"fixture text-009o placeholder","error":"fixture text-009o placeholder","tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_04","summary":"fixture text-009o placeholder"},{"id":"msg-009p","turnId":"turn-017","role":"toolResult","generation":null,"timestamp":1791620468950,"responseId":null,"relativeMs":16537040,"durationMs":null,"toolName":"tool_10","toolCallId":"call_0040","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0040","toolName":"tool_10","content":[{"type":"text","text":"fixture text-009q placeholder"}],"details":{"kind":"memory","ok":true,"target":"fixture text-009r placeholder"},"isError":false,"timestamp":1791620468950},"rawOmitted":false,"textTruncated":false,"index":68,"text":null,"thinking":null,"arguments":null,"result":"fixture text-009q placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_10","summary":"fixture text-009q placeholder"}]},{"id":"turn-018","index":18,"startedAt":1791620759811,"endedAt":1791621281924,"durationMs":522113,"toolCalls":1,"errors":0,"tokens":{"input":1473,"output":346,"cacheRead":255104,"cacheWrite":0,"totalTokens":256923},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-009s","turnId":"turn-018","role":"toolResult","generation":null,"timestamp":1791620759811,"responseId":null,"relativeMs":16827901,"durationMs":null,"toolName":"tool_08","toolCallId":"call_0041","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0041","toolName":"tool_08","content":[{"type":"text","text":"fixture text-009t placeholder"}],"details":{"diff":"fixture text-009u placeholder","patch":"fixture text-009v placeholder","firstChangedLine":1545},"isError":false,"timestamp":1791620759811},"rawOmitted":false,"textTruncated":false,"index":69,"text":null,"thinking":null,"arguments":null,"result":"fixture text-009t placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_08","summary":"fixture text-009t placeholder"},{"id":"msg-009w","turnId":"turn-018","role":"assistant","generation":null,"timestamp":1791621014224,"responseId":"fixture text-00a2 placeholder","relativeMs":17082314,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0042","tokens":{"input":1473,"output":346,"cacheRead":255104,"cacheWrite":0,"totalTokens":256923},"model":"fixture text-00a1 placeholder","provider":"fixture text-00a0 placeholder","api":"fixture text-009z placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"toolCall","id":"call_0042","name":"tool_03","arguments":{"command":"fixture text-009x placeholder","description":"fixture text-009y placeholder","timeout":120}}],"api":"fixture text-009z placeholder","provider":"fixture text-00a0 placeholder","model":"fixture text-00a1 placeholder","usage":{"input":1473,"output":346,"cacheRead":255104,"cacheWrite":0,"totalTokens":256923,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791621014224,"responseId":"fixture text-00a2 placeholder"},"rawOmitted":false,"textTruncated":false,"index":70,"text":null,"thinking":null,"arguments":{"command":"fixture text-009x placeholder","description":"fixture text-009y placeholder","timeout":120},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-009x placeholder\", description=\"fixture text-009y placeholder\", timeout=\"120\"}","argumentsOmitted":false},{"id":"msg-00a3","turnId":"turn-018","role":"toolResult","generation":null,"timestamp":1791621281924,"responseId":null,"relativeMs":17350014,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0043","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0043","toolName":"tool_03","content":[{"type":"text","text":"fixture text-00a4 placeholder"}],"details":{"execution":{"status":"fixture text-00a5 placeholder","reason":"fixture text-00a6 placeholder","exitCode":0},"timing":{"commandTimeoutSeconds":180,"commandTimerStartedAt":1791621281302,"commandDeadlineAt":1791621461302},"output":{"rawBytes":29,"persistence":"fixture text-00a7 placeholder","omittedBytes":0},"processOutput":{"stdout":"fixture text-00a8 placeholder","stderr":"fixture text-00a9 placeholder","exitCode":0,"interrupted":false,"stdoutTruncated":false,"stderrTruncated":false,"rawOutputPath":"fixture text-00aa placeholder"},"description":"fixture text-00ab placeholder","fullOutputPath":"fixture text-00ac placeholder","status":"fixture text-00ad placeholder","task_id":"fixture text-00ae placeholder"},"isError":false,"timestamp":1791621281924},"rawOmitted":false,"textTruncated":false,"index":71,"text":null,"thinking":null,"arguments":null,"result":"fixture text-00a4 placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-00a4 placeholder"}]},{"id":"turn-019","index":19,"startedAt":1791621759959,"endedAt":1791622044235,"durationMs":284276,"toolCalls":1,"errors":0,"tokens":{"input":2297,"output":1329,"cacheRead":277632,"cacheWrite":0,"totalTokens":281258},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-00af","turnId":"turn-019","role":"assistant","generation":null,"timestamp":1791621759959,"responseId":"fixture text-00an placeholder","relativeMs":17828049,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":2297,"output":1329,"cacheRead":277632,"cacheWrite":0,"totalTokens":281258},"model":"fixture text-00am placeholder","provider":"fixture text-00al placeholder","api":"fixture text-00ak placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-00ag placeholder","thinkingSignature":"fixture text-00ah placeholder"},{"type":"toolCall","id":"call_0044","name":"tool_03","arguments":{"command":"fixture text-00ai placeholder","description":"fixture text-00aj placeholder","timeout":180}}],"api":"fixture text-00ak placeholder","provider":"fixture text-00al placeholder","model":"fixture text-00am placeholder","usage":{"input":2297,"output":1329,"cacheRead":277632,"cacheWrite":0,"totalTokens":281258,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791621759959,"responseId":"fixture text-00an placeholder"},"rawOmitted":false,"textTruncated":false,"index":72,"text":null,"thinking":"fixture text-00ag placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-00ag placeholder"},{"id":"msg-00af","turnId":"turn-019","role":"assistant","generation":null,"timestamp":1791621759959,"responseId":"fixture text-00an placeholder","relativeMs":17828049,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0044","model":"fixture text-00am placeholder","provider":"fixture text-00al placeholder","api":"fixture text-00ak placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-00ag placeholder","thinkingSignature":"fixture text-00ah placeholder"},{"type":"toolCall","id":"call_0044","name":"tool_03","arguments":{"command":"fixture text-00ai placeholder","description":"fixture text-00aj placeholder","timeout":180}}],"api":"fixture text-00ak placeholder","provider":"fixture text-00al placeholder","model":"fixture text-00am placeholder","usage":{"input":2297,"output":1329,"cacheRead":277632,"cacheWrite":0,"totalTokens":281258,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791621759959,"responseId":"fixture text-00an placeholder"},"rawOmitted":false,"textTruncated":false,"index":73,"text":null,"thinking":null,"arguments":{"command":"fixture text-00ai placeholder","description":"fixture text-00aj placeholder","timeout":180},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-00ai placeholder\", description=\"fixture text-00aj placeholder\", timeout=\"180\"}","argumentsOmitted":false},{"id":"msg-00ao","turnId":"turn-019","role":"toolResult","generation":null,"timestamp":1791622044235,"responseId":null,"relativeMs":18112325,"durationMs":null,"toolName":"tool_04","toolCallId":"call_0045","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0045","toolName":"tool_04","content":[{"type":"text","text":"fixture text-00ap placeholder"}],"details":{"action":"fixture text-00aq placeholder","result":{"success":true,"duration":5000}},"isError":false,"timestamp":1791622044235},"rawOmitted":false,"textTruncated":false,"index":74,"text":null,"thinking":null,"arguments":null,"result":"fixture text-00ap placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_04","summary":"fixture text-00ap placeholder"}]},{"id":"turn-020","index":20,"startedAt":1791622638009,"endedAt":1791622638009,"durationMs":0,"toolCalls":1,"errors":0,"tokens":{"input":11033,"output":69,"cacheRead":299264,"cacheWrite":0,"totalTokens":310366},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-00ar","turnId":"turn-020","role":"assistant","generation":null,"timestamp":1791622638009,"responseId":"fixture text-00ay placeholder","relativeMs":18706099,"durationMs":null,"toolName":"tool_11","toolCallId":"call_0046","tokens":{"input":11033,"output":69,"cacheRead":299264,"cacheWrite":0,"totalTokens":310366},"model":"fixture text-00ax placeholder","provider":"fixture text-00aw placeholder","api":"fixture text-00av placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"toolCall","id":"call_0046","name":"tool_11","arguments":{"action":"fixture text-00as placeholder","pluginId":"fixture text-00at placeholder","sourcePath":"fixture text-00au placeholder"}}],"api":"fixture text-00av placeholder","provider":"fixture text-00aw placeholder","model":"fixture text-00ax placeholder","usage":{"input":11033,"output":69,"cacheRead":299264,"cacheWrite":0,"totalTokens":310366,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791622638009,"responseId":"fixture text-00ay placeholder"},"rawOmitted":false,"textTruncated":false,"index":75,"text":null,"thinking":null,"arguments":{"action":"fixture text-00as placeholder","pluginId":"fixture text-00at placeholder","sourcePath":"fixture text-00au placeholder"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_11","summary":"tool_11{action=\"fixture text-00as placeholder\", pluginId=\"fixture text-00at placeholder\", sourcePath=\"fixture text-00au placeholder\"}","argumentsOmitted":false}]},{"id":"turn-021","index":21,"startedAt":1791623384388,"endedAt":1791623384388,"durationMs":0,"toolCalls":1,"errors":0,"tokens":{"input":175,"output":244,"cacheRead":319744,"cacheWrite":0,"totalTokens":320163},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-00az","turnId":"turn-021","role":"assistant","generation":null,"timestamp":1791623384388,"responseId":"fixture text-00b8 placeholder","relativeMs":19452478,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-00b7 placeholder","provider":"fixture text-00b6 placeholder","api":"fixture text-00b5 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-00b0 placeholder","thinkingSignature":"fixture text-00b1 placeholder"},{"type":"text","text":"fixture text-00b2 placeholder"},{"type":"toolCall","id":"call_0047","name":"tool_03","arguments":{"command":"fixture text-00b3 placeholder","description":"fixture text-00b4 placeholder","timeout":300}}],"api":"fixture text-00b5 placeholder","provider":"fixture text-00b6 placeholder","model":"fixture text-00b7 placeholder","usage":{"input":175,"output":244,"cacheRead":319744,"cacheWrite":0,"totalTokens":320163,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791623384388,"responseId":"fixture text-00b8 placeholder"},"rawOmitted":false,"textTruncated":false,"index":76,"text":null,"thinking":"fixture text-00b0 placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-00b0 placeholder"},{"id":"msg-00az","turnId":"turn-021","role":"assistant","generation":null,"timestamp":1791623384388,"responseId":"fixture text-00b8 placeholder","relativeMs":19452478,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":175,"output":244,"cacheRead":319744,"cacheWrite":0,"totalTokens":320163},"model":"fixture text-00b7 placeholder","provider":"fixture text-00b6 placeholder","api":"fixture text-00b5 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-00b0 placeholder","thinkingSignature":"fixture text-00b1 placeholder"},{"type":"text","text":"fixture text-00b2 placeholder"},{"type":"toolCall","id":"call_0047","name":"tool_03","arguments":{"command":"fixture text-00b3 placeholder","description":"fixture text-00b4 placeholder","timeout":300}}],"api":"fixture text-00b5 placeholder","provider":"fixture text-00b6 placeholder","model":"fixture text-00b7 placeholder","usage":{"input":175,"output":244,"cacheRead":319744,"cacheWrite":0,"totalTokens":320163,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791623384388,"responseId":"fixture text-00b8 placeholder"},"rawOmitted":false,"textTruncated":false,"index":77,"text":"fixture text-00b2 placeholder","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-00b2 placeholder"},{"id":"msg-00az","turnId":"turn-021","role":"assistant","generation":null,"timestamp":1791623384388,"responseId":"fixture text-00b8 placeholder","relativeMs":19452478,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0047","model":"fixture text-00b7 placeholder","provider":"fixture text-00b6 placeholder","api":"fixture text-00b5 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-00b0 placeholder","thinkingSignature":"fixture text-00b1 placeholder"},{"type":"text","text":"fixture text-00b2 placeholder"},{"type":"toolCall","id":"call_0047","name":"tool_03","arguments":{"command":"fixture text-00b3 placeholder","description":"fixture text-00b4 placeholder","timeout":300}}],"api":"fixture text-00b5 placeholder","provider":"fixture text-00b6 placeholder","model":"fixture text-00b7 placeholder","usage":{"input":175,"output":244,"cacheRead":319744,"cacheWrite":0,"totalTokens":320163,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791623384388,"responseId":"fixture text-00b8 placeholder"},"rawOmitted":false,"textTruncated":false,"index":78,"text":null,"thinking":null,"arguments":{"command":"fixture text-00b3 placeholder","description":"fixture text-00b4 placeholder","timeout":300},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-00b3 placeholder\", description=\"fixture text-00b4 placeholder\", timeout=\"300\"}","argumentsOmitted":false}]},{"id":"turn-022","index":22,"startedAt":1791624351892,"endedAt":1791625062330,"durationMs":710438,"toolCalls":3,"errors":0,"tokens":{"input":9613,"output":670,"cacheRead":334848,"cacheWrite":0,"totalTokens":345131},"turnClass":"none","askedReader":false,"closed":false,"records":[{"id":"msg-00b9","turnId":"turn-022","role":"assistant","generation":null,"timestamp":1791624351892,"responseId":"fixture text-00bi placeholder","relativeMs":20419982,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-00bh placeholder","provider":"fixture text-00bg placeholder","api":"fixture text-00bf placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-00ba placeholder","thinkingSignature":"fixture text-00bb placeholder"},{"type":"text","text":"fixture text-00bc placeholder"},{"type":"toolCall","id":"call_0048","name":"tool_12","arguments":{"task_id":"fixture text-00bd placeholder","reason":"fixture text-00be placeholder"}}],"api":"fixture text-00bf placeholder","provider":"fixture text-00bg placeholder","model":"fixture text-00bh placeholder","usage":{"input":4906,"output":149,"cacheRead":56576,"cacheWrite":0,"totalTokens":61631,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791624351892,"responseId":"fixture text-00bi placeholder"},"rawOmitted":false,"textTruncated":false,"index":79,"text":null,"thinking":"fixture text-00ba placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-00ba placeholder"},{"id":"msg-00b9","turnId":"turn-022","role":"assistant","generation":null,"timestamp":1791624351892,"responseId":"fixture text-00bi placeholder","relativeMs":20419982,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":4906,"output":149,"cacheRead":56576,"cacheWrite":0,"totalTokens":61631},"model":"fixture text-00bh placeholder","provider":"fixture text-00bg placeholder","api":"fixture text-00bf placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-00ba placeholder","thinkingSignature":"fixture text-00bb placeholder"},{"type":"text","text":"fixture text-00bc placeholder"},{"type":"toolCall","id":"call_0048","name":"tool_12","arguments":{"task_id":"fixture text-00bd placeholder","reason":"fixture text-00be placeholder"}}],"api":"fixture text-00bf placeholder","provider":"fixture text-00bg placeholder","model":"fixture text-00bh placeholder","usage":{"input":4906,"output":149,"cacheRead":56576,"cacheWrite":0,"totalTokens":61631,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791624351892,"responseId":"fixture text-00bi placeholder"},"rawOmitted":false,"textTruncated":false,"index":80,"text":"fixture text-00bc placeholder","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-00bc placeholder"},{"id":"msg-00b9","turnId":"turn-022","role":"assistant","generation":null,"timestamp":1791624351892,"responseId":"fixture text-00bi placeholder","relativeMs":20419982,"durationMs":null,"toolName":"tool_12","toolCallId":"call_0048","model":"fixture text-00bh placeholder","provider":"fixture text-00bg placeholder","api":"fixture text-00bf placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-00ba placeholder","thinkingSignature":"fixture text-00bb placeholder"},{"type":"text","text":"fixture text-00bc placeholder"},{"type":"toolCall","id":"call_0048","name":"tool_12","arguments":{"task_id":"fixture text-00bd placeholder","reason":"fixture text-00be placeholder"}}],"api":"fixture text-00bf placeholder","provider":"fixture text-00bg placeholder","model":"fixture text-00bh placeholder","usage":{"input":4906,"output":149,"cacheRead":56576,"cacheWrite":0,"totalTokens":61631,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791624351892,"responseId":"fixture text-00bi placeholder"},"rawOmitted":false,"textTruncated":false,"index":81,"text":null,"thinking":null,"arguments":{"task_id":"fixture text-00bd placeholder","reason":"fixture text-00be placeholder"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_12","summary":"tool_12{task_id=\"fixture text-00bd placeholder\", reason=\"fixture text-00be placeholder\"}","argumentsOmitted":false},{"id":"msg-00bj","turnId":"turn-022","role":"assistant","generation":null,"timestamp":1791624527065,"responseId":"fixture text-00bq placeholder","relativeMs":20595155,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":4023,"output":283,"cacheRead":98560,"cacheWrite":0,"totalTokens":102866},"model":"fixture text-00bp placeholder","provider":"fixture text-00bo placeholder","api":"fixture text-00bn placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-00bk placeholder","thinkingSignature":"fixture text-00bl placeholder"},{"type":"toolCall","id":"call_0049","name":"tool_02","arguments":{"task_id":"fixture text-00bm placeholder","wait_ms":30000}}],"api":"fixture text-00bn placeholder","provider":"fixture text-00bo placeholder","model":"fixture text-00bp placeholder","usage":{"input":4023,"output":283,"cacheRead":98560,"cacheWrite":0,"totalTokens":102866,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791624527065,"responseId":"fixture text-00bq placeholder"},"rawOmitted":false,"textTruncated":false,"index":82,"text":null,"thinking":"fixture text-00bk placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-00bk placeholder"},{"id":"msg-00bj","turnId":"turn-022","role":"assistant","generation":null,"timestamp":1791624527065,"responseId":"fixture text-00bq placeholder","relativeMs":20595155,"durationMs":null,"toolName":"tool_02","toolCallId":"call_0049","model":"fixture text-00bp placeholder","provider":"fixture text-00bo placeholder","api":"fixture text-00bn placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-00bk placeholder","thinkingSignature":"fixture text-00bl placeholder"},{"type":"toolCall","id":"call_0049","name":"tool_02","arguments":{"task_id":"fixture text-00bm placeholder","wait_ms":30000}}],"api":"fixture text-00bn placeholder","provider":"fixture text-00bo placeholder","model":"fixture text-00bp placeholder","usage":{"input":4023,"output":283,"cacheRead":98560,"cacheWrite":0,"totalTokens":102866,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791624527065,"responseId":"fixture text-00bq placeholder"},"rawOmitted":false,"textTruncated":false,"index":83,"text":null,"thinking":null,"arguments":{"task_id":"fixture text-00bm placeholder","wait_ms":30000},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_02","summary":"tool_02{task_id=\"fixture text-00bm placeholder\", wait_ms=\"30000\"}","argumentsOmitted":false},{"id":"msg-00br","turnId":"turn-022","role":"user","generation":null,"timestamp":1791624769221,"responseId":null,"relativeMs":20837311,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":null,"raw":{"role":"user","content":[{"type":"text","text":"<background-task-finished>\nfixture injected-00bs block"}],"timestamp":1791624769221,"canonicalTextRange":{"startOffset":496,"endOffset":496},"hostMetadata":{"backgroundTaskOrigin":{"kind":"background-task-terminal","taskIds":["fixture text-00bt placeholder"],"observedTerminalCount":330}}},"rawOmitted":false,"textTruncated":false,"index":84,"text":"<background-task-finished>\nfixture injected-00bs block","thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"system","title":"injected","summary":"<background-task-finished> fixture injected-00bs block"},{"id":"msg-00bu","turnId":"turn-022","role":"toolResult","generation":null,"timestamp":1791624899122,"responseId":null,"relativeMs":20967212,"durationMs":null,"toolName":"tool_08","toolCallId":"call_0050","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"raw":{"role":"toolResult","toolCallId":"call_0050","toolName":"tool_08","content":[{"type":"text","text":"fixture text-00bv placeholder"}],"details":{"diff":"fixture text-00bw placeholder","patch":"fixture text-00bx placeholder","firstChangedLine":1987},"isError":false,"timestamp":1791624899122},"rawOmitted":false,"textTruncated":false,"index":85,"text":null,"thinking":null,"arguments":null,"result":"fixture text-00bv placeholder","error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_08","summary":"fixture text-00bv placeholder"},{"id":"msg-00by","turnId":"turn-022","role":"assistant","generation":null,"timestamp":1791625062330,"responseId":"fixture text-00c6 placeholder","relativeMs":21130420,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":684,"output":238,"cacheRead":179712,"cacheWrite":0,"totalTokens":180634},"model":"fixture text-00c5 placeholder","provider":"fixture text-00c4 placeholder","api":"fixture text-00c3 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-00bz placeholder","thinkingSignature":"fixture text-00c0 placeholder"},{"type":"toolCall","id":"call_0051","name":"tool_03","arguments":{"command":"fixture text-00c1 placeholder","description":"fixture text-00c2 placeholder"}}],"api":"fixture text-00c3 placeholder","provider":"fixture text-00c4 placeholder","model":"fixture text-00c5 placeholder","usage":{"input":684,"output":238,"cacheRead":179712,"cacheWrite":0,"totalTokens":180634,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791625062330,"responseId":"fixture text-00c6 placeholder"},"rawOmitted":false,"textTruncated":false,"index":86,"text":null,"thinking":"fixture text-00bz placeholder","arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-00bz placeholder"},{"id":"msg-00by","turnId":"turn-022","role":"assistant","generation":null,"timestamp":1791625062330,"responseId":"fixture text-00c6 placeholder","relativeMs":21130420,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0051","model":"fixture text-00c5 placeholder","provider":"fixture text-00c4 placeholder","api":"fixture text-00c3 placeholder","stopReason":"toolUse","isError":null,"raw":{"role":"assistant","content":[{"type":"thinking","thinking":"fixture text-00bz placeholder","thinkingSignature":"fixture text-00c0 placeholder"},{"type":"toolCall","id":"call_0051","name":"tool_03","arguments":{"command":"fixture text-00c1 placeholder","description":"fixture text-00c2 placeholder"}}],"api":"fixture text-00c3 placeholder","provider":"fixture text-00c4 placeholder","model":"fixture text-00c5 placeholder","usage":{"input":684,"output":238,"cacheRead":179712,"cacheWrite":0,"totalTokens":180634,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"toolUse","timestamp":1791625062330,"responseId":"fixture text-00c6 placeholder"},"rawOmitted":false,"textTruncated":false,"index":87,"text":null,"thinking":null,"arguments":{"command":"fixture text-00c1 placeholder","description":"fixture text-00c2 placeholder"},"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-00c1 placeholder\", description=\"fixture text-00c2 placeholder\"}","argumentsOmitted":false}]},{"id":"turn-023","index":23,"startedAt":1791627571957,"endedAt":1791627571957,"durationMs":0,"toolCalls":0,"errors":0,"tokens":{"input":1188,"output":82,"cacheRead":267008,"cacheWrite":0,"totalTokens":268278},"turnClass":"continuation","askedReader":false,"closed":true,"records":[{"id":"msg-00c7","turnId":"turn-023","role":"assistant","generation":null,"timestamp":1791627571957,"responseId":"fixture text-00cb placeholder","relativeMs":23640047,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":1188,"output":82,"cacheRead":267008,"cacheWrite":0,"totalTokens":268278},"model":"fixture text-00ca placeholder","provider":"fixture text-00c9 placeholder","api":"fixture text-00c8 placeholder","stopReason":"stop","isError":null,"raw":{"role":"assistant","content":[],"api":"fixture text-00c8 placeholder","provider":"fixture text-00c9 placeholder","model":"fixture text-00ca placeholder","usage":{"input":1188,"output":82,"cacheRead":267008,"cacheWrite":0,"totalTokens":268278,"cost":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"total":0}},"stopReason":"stop","timestamp":1791627571957,"responseId":"fixture text-00cb placeholder"},"rawOmitted":false,"textTruncated":false,"index":88,"text":null,"thinking":null,"arguments":null,"result":null,"error":null,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"reply","title":"assistant","summary":""}]}]}
\ No newline at end of file
+{"session":{"id":"mvs_00000000000000000000000000000001","label":"fixture text-000w placeholder","messageCount":60,"turnCount":23,"startedAt":1791603931910,"lastActiveAt":1750000480000,"sizeBytes":37267,"truncated":false,"maxMessageBytes":67108864,"generation":null,"generations":[],"orphans":[],"activeGeneration":null,"stitched":false,"binding":"fixture","leased":false},"stats":{"messages":60,"userMessages":2,"assistantMessages":32,"toolCalls":31,"toolResults":22,"thinkingBlocks":18,"injectedBlocks":3,"compactions":1,"turns":23,"turnsWithPrompt":2,"continuationTurns":1,"qaTurns":0,"openTurns":1,"steers":0,"compactionTurns":1,"turnsWithoutPrompt":19,"errors":3,"tokens":{"input":357272,"output":15279,"cacheRead":5571539,"cacheWrite":0,"totalTokens":5944090},"durationMs":23640047,"messagesAll":60,"messageRowsAll":60},"turns":[{"id":"turn-001","index":1,"startedAt":1791603931910,"endedAt":1791605485479,"durationMs":1553569,"toolCalls":8,"errors":1,"tokens":{"input":53826,"output":2224,"cacheRead":1175168,"cacheWrite":0,"totalTokens":1231218},"turnClass":"prompt","askedReader":false,"closed":true,"openerInView":true,"openerOutOfView":false,"records":[{"id":"msg-0000","turnId":"turn-001","role":"user","generation":null,"timestamp":1791603931910,"responseId":null,"relativeMs":0,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":null,"internalOnly":false,"rawRow":0,"textTruncated":false,"index":1,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"system","title":"injected","summary":"<system-reminder> fixture injected-0001 block","text":"<system-reminder>\nfixture injected-0001 block"},{"id":"msg-0002","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791603931971,"responseId":"fixture text-0009 placeholder","relativeMs":61,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-0008 placeholder","provider":"fixture text-0007 placeholder","api":"fixture text-0006 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":1,"textTruncated":false,"index":2,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-0003 placeholder","thinking":"fixture text-0003 placeholder"},{"id":"msg-0002","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791603931971,"responseId":"fixture text-0009 placeholder","relativeMs":61,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":44829,"output":432,"cacheRead":4224,"cacheWrite":0,"totalTokens":49485},"model":"fixture text-0008 placeholder","provider":"fixture text-0007 placeholder","api":"fixture text-0006 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":1,"textTruncated":false,"index":3,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-0005 placeholder","text":"fixture text-0005 placeholder"},{"id":"msg-0002","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791603931971,"responseId":"fixture text-0009 placeholder","relativeMs":61,"durationMs":11257,"toolName":"tool_00","toolCallId":"call_0000","model":"fixture text-0008 placeholder","provider":"fixture text-0007 placeholder","api":"fixture text-0006 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":1,"textTruncated":false,"index":4,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":2,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_00","summary":"tool_00{name=\"tool_01\"} → fixture text-000b placeholder","arguments":{"name":"tool_01"},"argumentsOmitted":false},{"id":"msg-000a","turnId":"turn-001","role":"toolResult","generation":null,"timestamp":1791603943228,"responseId":null,"relativeMs":11318,"durationMs":11257,"toolName":"tool_00","toolCallId":"call_0000","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":2,"textTruncated":false,"index":5,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_00","summary":"fixture text-000b placeholder","result":"fixture text-000b placeholder"},{"id":"msg-000g","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791604127714,"responseId":"fixture text-000o placeholder","relativeMs":195804,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-000n placeholder","provider":"fixture text-000m placeholder","api":"fixture text-000l placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":3,"textTruncated":false,"index":6,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-000h placeholder","thinking":"fixture text-000h placeholder"},{"id":"msg-000g","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791604127714,"responseId":"fixture text-000o placeholder","relativeMs":195804,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":4210,"output":82,"cacheRead":76544,"cacheWrite":0,"totalTokens":80836},"model":"fixture text-000n placeholder","provider":"fixture text-000m placeholder","api":"fixture text-000l placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":3,"textTruncated":false,"index":7,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-000j placeholder","text":"fixture text-000j placeholder"},{"id":"msg-000g","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791604127714,"responseId":"fixture text-000o placeholder","relativeMs":195804,"durationMs":null,"toolName":"tool_02","toolCallId":"call_0001","model":"fixture text-000n placeholder","provider":"fixture text-000m placeholder","api":"fixture text-000l placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":3,"textTruncated":false,"index":8,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":2,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_02","summary":"tool_02{task_id=\"fixture text-000k placeholder\"}","arguments":{"task_id":"fixture text-000k placeholder"},"argumentsOmitted":false},{"id":"msg-000p","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791604504788,"responseId":"fixture text-000u placeholder","relativeMs":572878,"durationMs":null,"toolName":"tool_02","toolCallId":"call_0002","tokens":{"input":268,"output":62,"cacheRead":102144,"cacheWrite":0,"totalTokens":102474},"model":"fixture text-000t placeholder","provider":"fixture text-000s placeholder","api":"fixture text-000r placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":4,"textTruncated":false,"index":9,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_02","summary":"tool_02{task_id=\"fixture text-000q placeholder\", wait_ms=\"30000\"}","arguments":{"task_id":"fixture text-000q placeholder","wait_ms":30000},"argumentsOmitted":false},{"id":"msg-000v","turnId":"turn-001","role":"user","generation":null,"timestamp":1791604626776,"responseId":null,"relativeMs":694866,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":null,"internalOnly":false,"rawRow":5,"textTruncated":false,"index":10,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"user","title":"user","summary":"fixture text-000w placeholder","text":"fixture text-000w placeholder","steered":false},{"id":"msg-000x","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791604764455,"responseId":"fixture text-0013 placeholder","relativeMs":832545,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0003","tokens":{"input":2672,"output":61,"cacheRead":113536,"cacheWrite":0,"totalTokens":116269},"model":"fixture text-0012 placeholder","provider":"fixture text-0011 placeholder","api":"fixture text-0010 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":6,"textTruncated":false,"index":11,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-000y placeholder\", description=\"fixture text-000z placeholder\"}","arguments":{"command":"fixture text-000y placeholder","description":"fixture text-000z placeholder"},"argumentsOmitted":false},{"id":"msg-0014","turnId":"turn-001","role":"toolResult","generation":null,"timestamp":1791604879414,"responseId":null,"relativeMs":947504,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0004","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":true,"internalOnly":false,"rawRow":7,"textTruncated":false,"index":12,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-0015 placeholder","result":"fixture text-0015 placeholder"},{"id":"msg-001h","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791604894030,"responseId":"fixture text-001n placeholder","relativeMs":962120,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0005","tokens":{"input":142,"output":107,"cacheRead":135424,"cacheWrite":0,"totalTokens":135673},"model":"fixture text-001m placeholder","provider":"fixture text-001l placeholder","api":"fixture text-001k placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":8,"textTruncated":false,"index":13,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-001i placeholder\", description=\"fixture text-001j placeholder\"}","arguments":{"command":"fixture text-001i placeholder","description":"fixture text-001j placeholder"},"argumentsOmitted":false},{"id":"msg-001o","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791605044287,"responseId":"fixture text-001u placeholder","relativeMs":1112377,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0006","tokens":{"input":714,"output":176,"cacheRead":167040,"cacheWrite":0,"totalTokens":167930},"model":"fixture text-001t placeholder","provider":"fixture text-001s placeholder","api":"fixture text-001r placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":9,"textTruncated":false,"index":14,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-001p placeholder\", description=\"fixture text-001q placeholder\"}","arguments":{"command":"fixture text-001p placeholder","description":"fixture text-001q placeholder"},"argumentsOmitted":false},{"id":"msg-001v","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791605219170,"responseId":"fixture text-0023 placeholder","relativeMs":1287260,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":832,"output":316,"cacheRead":178688,"cacheWrite":0,"totalTokens":179836},"model":"fixture text-0022 placeholder","provider":"fixture text-0021 placeholder","api":"fixture text-0020 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":10,"textTruncated":false,"index":15,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-001w placeholder","thinking":"fixture text-001w placeholder"},{"id":"msg-001v","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791605219170,"responseId":"fixture text-0023 placeholder","relativeMs":1287260,"durationMs":null,"toolName":"tool_04","toolCallId":"call_0007","model":"fixture text-0022 placeholder","provider":"fixture text-0021 placeholder","api":"fixture text-0020 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":10,"textTruncated":false,"index":16,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_04","summary":"tool_04{action=\"fixture text-001y placeholder\", input=\"{…}\"}","arguments":{"action":"fixture text-001y placeholder","input":{"kind":"text","maxChars":600,"selector":"fixture text-001z placeholder"}},"argumentsOmitted":false},{"id":"msg-0024","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791605423541,"responseId":"fixture text-002c placeholder","relativeMs":1491631,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":100,"output":91,"cacheRead":194176,"cacheWrite":0,"totalTokens":194367},"model":"fixture text-002b placeholder","provider":"fixture text-002a placeholder","api":"fixture text-0029 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":11,"textTruncated":false,"index":17,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-0025 placeholder","thinking":"fixture text-0025 placeholder"},{"id":"msg-0024","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791605423541,"responseId":"fixture text-002c placeholder","relativeMs":1491631,"durationMs":null,"toolName":"tool_04","toolCallId":"call_0008","model":"fixture text-002b placeholder","provider":"fixture text-002a placeholder","api":"fixture text-0029 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":11,"textTruncated":false,"index":18,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_04","summary":"tool_04{action=\"fixture text-0027 placeholder\", input=\"{…}\"}","arguments":{"action":"fixture text-0027 placeholder","input":{"selector":"fixture text-0028 placeholder"}},"argumentsOmitted":false},{"id":"msg-002d","turnId":"turn-001","role":"assistant","generation":null,"timestamp":1791605485479,"responseId":"fixture text-002i placeholder","relativeMs":1553569,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":59,"output":897,"cacheRead":203392,"cacheWrite":0,"totalTokens":204348},"model":"fixture text-002h placeholder","provider":"fixture text-002g placeholder","api":"fixture text-002f placeholder","stopReason":"stop","isError":null,"internalOnly":false,"rawRow":12,"textTruncated":false,"index":19,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"reply","title":"assistant","summary":"fixture text-002e placeholder","text":"fixture text-002e placeholder"}]},{"id":"turn-002","index":2,"startedAt":1791605691616,"endedAt":1791605691616,"durationMs":0,"toolCalls":1,"errors":0,"tokens":{"input":1658,"output":69,"cacheRead":210432,"cacheWrite":0,"totalTokens":212159},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-002j","turnId":"turn-002","role":"assistant","generation":null,"timestamp":1791605691616,"responseId":"fixture text-002o placeholder","relativeMs":1759706,"durationMs":null,"toolName":"tool_05","toolCallId":"call_0009","tokens":{"input":1658,"output":69,"cacheRead":210432,"cacheWrite":0,"totalTokens":212159},"model":"fixture text-002n placeholder","provider":"fixture text-002m placeholder","api":"fixture text-002l placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":13,"textTruncated":false,"index":20,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_05","summary":"tool_05{limit=\"30\", offset=\"1618\", path=\"fixture text-002k placeholder\"}","arguments":{"limit":30,"offset":1618,"path":"fixture text-002k placeholder"},"argumentsOmitted":false}]},{"id":"turn-003","index":3,"startedAt":1791606195742,"endedAt":1791606432109,"durationMs":236367,"toolCalls":1,"errors":0,"tokens":{"input":2260,"output":2251,"cacheRead":220800,"cacheWrite":0,"totalTokens":225311},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-002p","turnId":"turn-003","role":"assistant","generation":null,"timestamp":1791606195742,"responseId":"fixture text-003b placeholder","relativeMs":2263832,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-003a placeholder","provider":"fixture text-0039 placeholder","api":"fixture text-0038 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":14,"textTruncated":false,"index":21,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-002q placeholder","thinking":"fixture text-002q placeholder"},{"id":"msg-002p","turnId":"turn-003","role":"assistant","generation":null,"timestamp":1791606195742,"responseId":"fixture text-003b placeholder","relativeMs":2263832,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":2260,"output":2251,"cacheRead":220800,"cacheWrite":0,"totalTokens":225311},"model":"fixture text-003a placeholder","provider":"fixture text-0039 placeholder","api":"fixture text-0038 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":14,"textTruncated":false,"index":22,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-002s placeholder","text":"fixture text-002s placeholder"},{"id":"msg-002p","turnId":"turn-003","role":"assistant","generation":null,"timestamp":1791606195742,"responseId":"fixture text-003b placeholder","relativeMs":2263832,"durationMs":null,"toolName":"tool_06","toolCallId":"call_0010","model":"fixture text-003a placeholder","provider":"fixture text-0039 placeholder","api":"fixture text-0038 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":14,"textTruncated":false,"index":23,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":2,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_06","summary":"tool_06{todos=\"[{…}, {…}, {…}, …]\"}","arguments":{"todos":[{"content":"fixture text-002t placeholder","priority":"fixture text-002u placeholder","status":"fixture text-002v placeholder"},{"content":"fixture text-002w placeholder","priority":"fixture text-002x placeholder","status":"fixture text-002y placeholder"},{"content":"fixture text-002z placeholder","priority":"fixture text-0030 placeholder","status":"fixture text-0031 placeholder"},{"content":"fixture text-0032 placeholder","priority":"fixture text-0033 placeholder","status":"fixture text-0034 placeholder"},{"content":"fixture text-0035 placeholder","priority":"fixture text-0036 placeholder","status":"fixture text-0037 placeholder"}]},"argumentsOmitted":false},{"id":"msg-003c","turnId":"turn-003","role":"toolResult","generation":null,"timestamp":1791606432109,"responseId":null,"relativeMs":2500199,"durationMs":null,"toolName":"tool_07","toolCallId":"call_0011","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":15,"textTruncated":false,"index":24,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_07","summary":"fixture text-003d placeholder","result":"fixture text-003d placeholder"}]},{"id":"turn-004","index":4,"startedAt":1791610762301,"endedAt":1791611180154,"durationMs":417853,"toolCalls":2,"errors":0,"tokens":{"input":258453,"output":1164,"cacheRead":277120,"cacheWrite":0,"totalTokens":536737},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-003f","turnId":"turn-004","role":"assistant","generation":null,"timestamp":1791610762301,"responseId":"fixture text-003l placeholder","relativeMs":6830391,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0012","tokens":{"input":254227,"output":405,"cacheRead":4224,"cacheWrite":0,"totalTokens":258856},"model":"fixture text-003k placeholder","provider":"fixture text-003j placeholder","api":"fixture text-003i placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":16,"textTruncated":false,"index":25,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-003g placeholder\", description=\"fixture text-003h placeholder\"}","arguments":{"command":"fixture text-003g placeholder","description":"fixture text-003h placeholder"},"argumentsOmitted":false},{"id":"msg-003m","turnId":"turn-004","role":"toolResult","generation":null,"timestamp":1791610983663,"responseId":null,"relativeMs":7051753,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0013","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":17,"textTruncated":false,"index":26,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-003n placeholder","result":"fixture text-003n placeholder"},{"id":"msg-003y","turnId":"turn-004","role":"assistant","generation":null,"timestamp":1791611180154,"responseId":"fixture text-0048 placeholder","relativeMs":7248244,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-0047 placeholder","provider":"fixture text-0046 placeholder","api":"fixture text-0045 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":18,"textTruncated":false,"index":27,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-003z placeholder","thinking":"fixture text-003z placeholder"},{"id":"msg-003y","turnId":"turn-004","role":"assistant","generation":null,"timestamp":1791611180154,"responseId":"fixture text-0048 placeholder","relativeMs":7248244,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":4226,"output":759,"cacheRead":272896,"cacheWrite":0,"totalTokens":277881},"model":"fixture text-0047 placeholder","provider":"fixture text-0046 placeholder","api":"fixture text-0045 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":18,"textTruncated":false,"index":28,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-0041 placeholder","text":"fixture text-0041 placeholder"},{"id":"msg-003y","turnId":"turn-004","role":"assistant","generation":null,"timestamp":1791611180154,"responseId":"fixture text-0048 placeholder","relativeMs":7248244,"durationMs":null,"toolName":"tool_08","toolCallId":"call_0014","model":"fixture text-0047 placeholder","provider":"fixture text-0046 placeholder","api":"fixture text-0045 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":18,"textTruncated":false,"index":29,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":2,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_08","summary":"tool_08{file_path=\"fixture text-0042 placeholder\", new_string=\"fixture text-0043 placeholder\", old_string=\"fixture text-0044 placeholder\"}","arguments":{"file_path":"fixture text-0042 placeholder","new_string":"fixture text-0043 placeholder","old_string":"fixture text-0044 placeholder"},"argumentsOmitted":false}]},{"id":"turn-005","index":5,"startedAt":1791611784883,"endedAt":1791611784883,"durationMs":0,"toolCalls":0,"errors":0,"tokens":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"totalTokens":0},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-0049","turnId":"turn-005","role":"toolResult","generation":null,"timestamp":1791611784883,"responseId":null,"relativeMs":7852973,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0015","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":19,"textTruncated":false,"index":30,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-004a placeholder","result":"fixture text-004a placeholder"}]},{"id":"turn-006","index":6,"startedAt":1791612294290,"endedAt":1791612294290,"durationMs":0,"toolCalls":0,"errors":0,"tokens":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"totalTokens":0},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-004q","turnId":"turn-006","role":"toolResult","generation":null,"timestamp":1791612294290,"responseId":null,"relativeMs":8362380,"durationMs":null,"toolName":"tool_07","toolCallId":"call_0016","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":20,"textTruncated":false,"index":31,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_07","summary":"fixture text-004r placeholder","result":"fixture text-004r placeholder"}]},{"id":"turn-007","index":7,"startedAt":1791613412089,"endedAt":1791613412089,"durationMs":0,"toolCalls":0,"errors":0,"tokens":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"totalTokens":0},"turnClass":"compaction","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-004t","turnId":"turn-007","role":"compactionSummary","generation":null,"timestamp":1791613412089,"responseId":null,"relativeMs":9480179,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":null,"internalOnly":false,"rawRow":21,"textTruncated":false,"index":32,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":365642,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"compaction","title":"compaction","summary":"fixture text-004u placeholder","text":"fixture text-004u placeholder"}]},{"id":"turn-008","index":8,"startedAt":1791613490565,"endedAt":1791613490565,"durationMs":0,"toolCalls":2,"errors":0,"tokens":{"input":2171,"output":429,"cacheRead":54272,"cacheWrite":0,"totalTokens":56872},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-004v","turnId":"turn-008","role":"assistant","generation":null,"timestamp":1791613490565,"responseId":"fixture text-0058 placeholder","relativeMs":9558655,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-0057 placeholder","provider":"fixture text-0056 placeholder","api":"fixture text-0055 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":22,"textTruncated":false,"index":33,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-004w placeholder","thinking":"fixture text-004w placeholder"},{"id":"msg-004v","turnId":"turn-008","role":"assistant","generation":null,"timestamp":1791613490565,"responseId":"fixture text-0058 placeholder","relativeMs":9558655,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":2171,"output":429,"cacheRead":54272,"cacheWrite":0,"totalTokens":56872},"model":"fixture text-0057 placeholder","provider":"fixture text-0056 placeholder","api":"fixture text-0055 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":22,"textTruncated":false,"index":34,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-004y placeholder","text":"fixture text-004y placeholder"},{"id":"msg-004v","turnId":"turn-008","role":"assistant","generation":null,"timestamp":1791613490565,"responseId":"fixture text-0058 placeholder","relativeMs":9558655,"durationMs":null,"toolName":"tool_09","toolCallId":"call_0017","model":"fixture text-0057 placeholder","provider":"fixture text-0056 placeholder","api":"fixture text-0055 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":22,"textTruncated":false,"index":35,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":2,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_09","summary":"tool_09{pattern=\"fixture text-004z placeholder\", path=\"fixture text-0050 placeholder\", output_mode=\"fixture text-0051 placeholder\"}","arguments":{"pattern":"fixture text-004z placeholder","path":"fixture text-0050 placeholder","output_mode":"fixture text-0051 placeholder"},"argumentsOmitted":false},{"id":"msg-004v","turnId":"turn-008","role":"assistant","generation":null,"timestamp":1791613490565,"responseId":"fixture text-0058 placeholder","relativeMs":9558655,"durationMs":null,"toolName":"tool_09","toolCallId":"call_0018","model":"fixture text-0057 placeholder","provider":"fixture text-0056 placeholder","api":"fixture text-0055 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":22,"textTruncated":false,"index":36,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":3,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_09","summary":"tool_09{pattern=\"fixture text-0052 placeholder\", path=\"fixture text-0053 placeholder\", output_mode=\"fixture text-0054 placeholder\", limit=\"30\"}","arguments":{"pattern":"fixture text-0052 placeholder","path":"fixture text-0053 placeholder","output_mode":"fixture text-0054 placeholder","limit":30},"argumentsOmitted":false}]},{"id":"turn-009","index":9,"startedAt":1791614563489,"endedAt":1791614731831,"durationMs":168342,"toolCalls":1,"errors":0,"tokens":{"input":634,"output":1426,"cacheRead":120019,"cacheWrite":0,"totalTokens":122079},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-0059","turnId":"turn-009","role":"toolResult","generation":null,"timestamp":1791614563489,"responseId":null,"relativeMs":10631579,"durationMs":null,"toolName":"tool_09","toolCallId":"call_0019","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":23,"textTruncated":false,"index":37,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_09","summary":"fixture text-005a placeholder","result":"fixture text-005a placeholder"},{"id":"msg-005b","turnId":"turn-009","role":"assistant","generation":null,"timestamp":1791614731831,"responseId":"fixture text-005j placeholder","relativeMs":10799921,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-005i placeholder","provider":"fixture text-005h placeholder","api":"fixture text-005g placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":24,"textTruncated":false,"index":38,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-005c placeholder","thinking":"fixture text-005c placeholder"},{"id":"msg-005b","turnId":"turn-009","role":"assistant","generation":null,"timestamp":1791614731831,"responseId":"fixture text-005j placeholder","relativeMs":10799921,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":634,"output":1426,"cacheRead":120019,"cacheWrite":0,"totalTokens":122079},"model":"fixture text-005i placeholder","provider":"fixture text-005h placeholder","api":"fixture text-005g placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":24,"textTruncated":false,"index":39,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-005e placeholder","text":"fixture text-005e placeholder"},{"id":"msg-005b","turnId":"turn-009","role":"assistant","generation":null,"timestamp":1791614731831,"responseId":"fixture text-005j placeholder","relativeMs":10799921,"durationMs":null,"toolName":"tool_05","toolCallId":"call_0020","model":"fixture text-005i placeholder","provider":"fixture text-005h placeholder","api":"fixture text-005g placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":24,"textTruncated":false,"index":40,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":2,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_05","summary":"tool_05{path=\"fixture text-005f placeholder\", limit=\"14\"}","arguments":{"path":"fixture text-005f placeholder","limit":14},"argumentsOmitted":false}]},{"id":"turn-010","index":10,"startedAt":1791615045716,"endedAt":1791615045716,"durationMs":0,"toolCalls":0,"errors":0,"tokens":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"totalTokens":0},"turnClass":"prompt","askedReader":false,"closed":false,"openerInView":true,"openerOutOfView":false,"records":[{"id":"msg-005k","turnId":"turn-010","role":"user","generation":null,"timestamp":1791615045716,"responseId":null,"relativeMs":11113806,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":null,"internalOnly":false,"rawRow":25,"textTruncated":false,"index":41,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"user","title":"user","summary":"fixture te","text":"fixture te","steered":false}]},{"id":"turn-011","index":11,"startedAt":1791615477302,"endedAt":1791615904587,"durationMs":427285,"toolCalls":0,"errors":0,"tokens":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"totalTokens":0},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-005n","turnId":"turn-011","role":"toolResult","generation":null,"timestamp":1791615477302,"responseId":null,"relativeMs":11545392,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0021","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":26,"textTruncated":false,"index":42,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-005o placeholder","result":"fixture text-005o placeholder"},{"id":"msg-005z","turnId":"turn-011","role":"toolResult","generation":null,"timestamp":1791615904587,"responseId":null,"relativeMs":11972677,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0022","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":27,"textTruncated":false,"index":43,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-0060 placeholder","result":"fixture text-0060 placeholder"}]},{"id":"turn-012","index":12,"startedAt":1791616197977,"endedAt":1791616341161,"durationMs":143184,"toolCalls":1,"errors":0,"tokens":{"input":806,"output":332,"cacheRead":215296,"cacheWrite":0,"totalTokens":216434},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-006b","turnId":"turn-012","role":"assistant","generation":null,"timestamp":1791616197977,"responseId":"fixture text-006i placeholder","relativeMs":12266067,"durationMs":null,"toolName":"tool_08","toolCallId":"call_0023","tokens":{"input":806,"output":332,"cacheRead":215296,"cacheWrite":0,"totalTokens":216434},"model":"fixture text-006h placeholder","provider":"fixture text-006g placeholder","api":"fixture text-006f placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":28,"textTruncated":false,"index":44,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_08","summary":"tool_08{file_path=\"fixture text-006c placeholder\", new_string=\"fixture text-006d placeholder\", old_string=\"fixture text-006e placeholder\"}","arguments":{"file_path":"fixture text-006c placeholder","new_string":"fixture text-006d placeholder","old_string":"fixture text-006e placeholder"},"argumentsOmitted":false},{"id":"msg-006j","turnId":"turn-012","role":"toolResult","generation":null,"timestamp":1791616341161,"responseId":null,"relativeMs":12409251,"durationMs":null,"toolName":"tool_08","toolCallId":"call_0024","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":29,"textTruncated":false,"index":45,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_08","summary":"fixture text-006k placeholder","result":"fixture text-006k placeholder"}]},{"id":"turn-013","index":13,"startedAt":1791616657094,"endedAt":1791616657094,"durationMs":0,"toolCalls":1,"errors":0,"tokens":{"input":2780,"output":1648,"cacheRead":257536,"cacheWrite":0,"totalTokens":261964},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-006n","turnId":"turn-013","role":"assistant","generation":null,"timestamp":1791616657094,"responseId":"fixture text-006w placeholder","relativeMs":12725184,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-006v placeholder","provider":"fixture text-006u placeholder","api":"fixture text-006t placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":30,"textTruncated":false,"index":46,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-006o placeholder","thinking":"fixture text-006o placeholder"},{"id":"msg-006n","turnId":"turn-013","role":"assistant","generation":null,"timestamp":1791616657094,"responseId":"fixture text-006w placeholder","relativeMs":12725184,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":2780,"output":1648,"cacheRead":257536,"cacheWrite":0,"totalTokens":261964},"model":"fixture text-006v placeholder","provider":"fixture text-006u placeholder","api":"fixture text-006t placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":30,"textTruncated":false,"index":47,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-006q placeholder","text":"fixture text-006q placeholder"},{"id":"msg-006n","turnId":"turn-013","role":"assistant","generation":null,"timestamp":1791616657094,"responseId":"fixture text-006w placeholder","relativeMs":12725184,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0025","model":"fixture text-006v placeholder","provider":"fixture text-006u placeholder","api":"fixture text-006t placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":30,"textTruncated":false,"index":48,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":2,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-006r placeholder\", description=\"fixture text-006s placeholder\", timeout=\"120\"}","arguments":{"command":"fixture text-006r placeholder","description":"fixture text-006s placeholder","timeout":120},"argumentsOmitted":false}]},{"id":"turn-014","index":14,"startedAt":1791617021128,"endedAt":1791617021128,"durationMs":0,"toolCalls":0,"errors":0,"tokens":{"input":0,"output":0,"cacheRead":0,"cacheWrite":0,"totalTokens":0},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-006x","turnId":"turn-014","role":"toolResult","generation":null,"timestamp":1791617021128,"responseId":null,"relativeMs":13089218,"durationMs":null,"toolName":"tool_07","toolCallId":"call_0026","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":31,"textTruncated":false,"index":49,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_07","summary":"fixture text-006y placeholder","result":"fixture text-006y placeholder"}]},{"id":"turn-015","index":15,"startedAt":1791617468106,"endedAt":1791617468106,"durationMs":0,"toolCalls":1,"errors":0,"tokens":{"input":1087,"output":70,"cacheRead":312832,"cacheWrite":0,"totalTokens":313989},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-0070","turnId":"turn-015","role":"assistant","generation":null,"timestamp":1791617468106,"responseId":"fixture text-0075 placeholder","relativeMs":13536196,"durationMs":null,"toolName":"tool_05","toolCallId":"call_0027","tokens":{"input":1087,"output":70,"cacheRead":312832,"cacheWrite":0,"totalTokens":313989},"model":"fixture text-0074 placeholder","provider":"fixture text-0073 placeholder","api":"fixture text-0072 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":32,"textTruncated":false,"index":50,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_05","summary":"tool_05{limit=\"40\", offset=\"2108\", path=\"fixture text-0071 placeholder\"}","arguments":{"limit":40,"offset":2108,"path":"fixture text-0071 placeholder"},"argumentsOmitted":false}]},{"id":"turn-016","index":16,"startedAt":1791617651220,"endedAt":1791618644926,"durationMs":993706,"toolCalls":3,"errors":0,"tokens":{"input":2763,"output":1128,"cacheRead":508160,"cacheWrite":0,"totalTokens":512051},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-0076","turnId":"turn-016","role":"user","generation":null,"timestamp":1791617651220,"responseId":null,"relativeMs":13719310,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":null,"internalOnly":false,"rawRow":33,"textTruncated":false,"index":51,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"system","title":"injected","summary":"<system-reminder> fixture injected-0077 block","text":"<system-reminder>\nfixture injected-0077 block"},{"id":"msg-0078","turnId":"turn-016","role":"assistant","generation":null,"timestamp":1791617812028,"responseId":"fixture text-007e placeholder","relativeMs":13880118,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0028","tokens":{"input":859,"output":309,"cacheRead":349952,"cacheWrite":0,"totalTokens":351120},"model":"fixture text-007d placeholder","provider":"fixture text-007c placeholder","api":"fixture text-007b placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":34,"textTruncated":false,"index":52,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-0079 placeholder\", description=\"fixture text-007a placeholder\", timeout=\"240\"}","arguments":{"command":"fixture text-0079 placeholder","description":"fixture text-007a placeholder","timeout":240},"argumentsOmitted":false},{"id":"msg-007f","turnId":"turn-016","role":"assistant","generation":null,"timestamp":1791618043996,"responseId":"fixture text-007o placeholder","relativeMs":14112086,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":1825,"output":630,"cacheRead":68352,"cacheWrite":0,"totalTokens":70807},"model":"fixture text-007n placeholder","provider":"fixture text-007m placeholder","api":"fixture text-007l placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":35,"textTruncated":false,"index":53,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-007g placeholder","thinking":"fixture text-007g placeholder"},{"id":"msg-007f","turnId":"turn-016","role":"assistant","generation":null,"timestamp":1791618043996,"responseId":"fixture text-007o placeholder","relativeMs":14112086,"durationMs":null,"toolName":"tool_09","toolCallId":"call_0029","model":"fixture text-007n placeholder","provider":"fixture text-007m placeholder","api":"fixture text-007l placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":35,"textTruncated":false,"index":54,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_09","summary":"tool_09{context=\"2\", limit=\"8\", output_mode=\"fixture text-007i placeholder\", path=\"fixture text-007j placeholder\"}","arguments":{"context":2,"limit":8,"output_mode":"fixture text-007i placeholder","path":"fixture text-007j placeholder","pattern":"fixture text-007k placeholder"},"argumentsOmitted":false},{"id":"msg-007p","turnId":"turn-016","role":"toolResult","generation":null,"timestamp":1791618210903,"responseId":null,"relativeMs":14278993,"durationMs":null,"toolName":"tool_05","toolCallId":"call_0030","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":36,"textTruncated":false,"index":55,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_05","summary":"fixture text-007q placeholder","result":"fixture text-007q placeholder"},{"id":"msg-007t","turnId":"turn-016","role":"assistant","generation":null,"timestamp":1791618408954,"responseId":"fixture text-0081 placeholder","relativeMs":14477044,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":79,"output":189,"cacheRead":89856,"cacheWrite":0,"totalTokens":90124},"model":"fixture text-0080 placeholder","provider":"fixture text-007z placeholder","api":"fixture text-007y placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":37,"textTruncated":false,"index":56,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-007u placeholder","thinking":"fixture text-007u placeholder"},{"id":"msg-007t","turnId":"turn-016","role":"assistant","generation":null,"timestamp":1791618408954,"responseId":"fixture text-0081 placeholder","relativeMs":14477044,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0031","model":"fixture text-0080 placeholder","provider":"fixture text-007z placeholder","api":"fixture text-007y placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":37,"textTruncated":false,"index":57,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-007w placeholder\", description=\"fixture text-007x placeholder\", timeout=\"420\"}","arguments":{"command":"fixture text-007w placeholder","description":"fixture text-007x placeholder","timeout":420},"argumentsOmitted":false},{"id":"msg-0082","turnId":"turn-016","role":"toolResult","generation":null,"timestamp":1791618644926,"responseId":null,"relativeMs":14713016,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0032","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":38,"textTruncated":false,"index":58,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-0083 placeholder","result":"fixture text-0083 placeholder"}]},{"id":"turn-017","index":17,"startedAt":1791619060246,"endedAt":1791620468950,"durationMs":1408704,"toolCalls":3,"errors":2,"tokens":{"input":5055,"output":1798,"cacheRead":466304,"cacheWrite":0,"totalTokens":473157},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-008e","turnId":"turn-017","role":"assistant","generation":null,"timestamp":1791619060246,"responseId":"fixture text-008m placeholder","relativeMs":15128336,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":452,"output":939,"cacheRead":118656,"cacheWrite":0,"totalTokens":120047},"model":"fixture text-008l placeholder","provider":"fixture text-008k placeholder","api":"fixture text-008j placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":39,"textTruncated":false,"index":59,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-008f placeholder","thinking":"fixture text-008f placeholder"},{"id":"msg-008e","turnId":"turn-017","role":"assistant","generation":null,"timestamp":1791619060246,"responseId":"fixture text-008m placeholder","relativeMs":15128336,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0033","model":"fixture text-008l placeholder","provider":"fixture text-008k placeholder","api":"fixture text-008j placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":39,"textTruncated":false,"index":60,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-008h placeholder\", description=\"fixture text-008i placeholder\", timeout=\"120\"}","arguments":{"command":"fixture text-008h placeholder","description":"fixture text-008i placeholder","timeout":120},"argumentsOmitted":false},{"id":"msg-008n","turnId":"turn-017","role":"toolResult","generation":null,"timestamp":1791619266573,"responseId":null,"relativeMs":15334663,"durationMs":null,"toolName":"tool_08","toolCallId":"call_0034","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":40,"textTruncated":false,"index":61,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_08","summary":"fixture text-008o placeholder","result":"fixture text-008o placeholder"},{"id":"msg-008r","turnId":"turn-017","role":"toolResult","generation":null,"timestamp":1791619441758,"responseId":null,"relativeMs":15509848,"durationMs":null,"toolName":"tool_08","toolCallId":"call_0035","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":41,"textTruncated":false,"index":62,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_08","summary":"fixture text-008s placeholder","result":"fixture text-008s placeholder"},{"id":"msg-008v","turnId":"turn-017","role":"toolResult","generation":null,"timestamp":1791619595453,"responseId":null,"relativeMs":15663543,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0036","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":true,"internalOnly":false,"rawRow":42,"textTruncated":false,"index":63,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-008w placeholder","result":"fixture text-008w placeholder"},{"id":"msg-0098","turnId":"turn-017","role":"assistant","generation":null,"timestamp":1791619777303,"responseId":"fixture text-009d placeholder","relativeMs":15845393,"durationMs":null,"toolName":"tool_04","toolCallId":"call_0037","tokens":{"input":3978,"output":36,"cacheRead":162816,"cacheWrite":0,"totalTokens":166830},"model":"fixture text-009c placeholder","provider":"fixture text-009b placeholder","api":"fixture text-009a placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":43,"textTruncated":false,"index":64,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_04","summary":"tool_04{action=\"fixture text-0099 placeholder\", input=\"{…}\"}","arguments":{"action":"fixture text-0099 placeholder","input":{}},"argumentsOmitted":false},{"id":"msg-009e","turnId":"turn-017","role":"assistant","generation":null,"timestamp":1791620008455,"responseId":"fixture text-009m placeholder","relativeMs":16076545,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":625,"output":823,"cacheRead":184832,"cacheWrite":0,"totalTokens":186280},"model":"fixture text-009l placeholder","provider":"fixture text-009k placeholder","api":"fixture text-009j placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":44,"textTruncated":false,"index":65,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-009f placeholder","thinking":"fixture text-009f placeholder"},{"id":"msg-009e","turnId":"turn-017","role":"assistant","generation":null,"timestamp":1791620008455,"responseId":"fixture text-009m placeholder","relativeMs":16076545,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0038","model":"fixture text-009l placeholder","provider":"fixture text-009k placeholder","api":"fixture text-009j placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":44,"textTruncated":false,"index":66,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-009h placeholder\", description=\"fixture text-009i placeholder\", timeout=\"180\"}","arguments":{"command":"fixture text-009h placeholder","description":"fixture text-009i placeholder","timeout":180},"argumentsOmitted":false},{"id":"msg-009n","turnId":"turn-017","role":"toolResult","generation":null,"timestamp":1791620261774,"responseId":null,"relativeMs":16329864,"durationMs":null,"toolName":"tool_04","toolCallId":"call_0039","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":true,"internalOnly":false,"rawRow":45,"textTruncated":false,"index":67,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_04","summary":"fixture text-009o placeholder","result":"fixture text-009o placeholder"},{"id":"msg-009p","turnId":"turn-017","role":"toolResult","generation":null,"timestamp":1791620468950,"responseId":null,"relativeMs":16537040,"durationMs":null,"toolName":"tool_10","toolCallId":"call_0040","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":46,"textTruncated":false,"index":68,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_10","summary":"fixture text-009q placeholder","result":"fixture text-009q placeholder"}]},{"id":"turn-018","index":18,"startedAt":1791620759811,"endedAt":1791621281924,"durationMs":522113,"toolCalls":1,"errors":0,"tokens":{"input":1473,"output":346,"cacheRead":255104,"cacheWrite":0,"totalTokens":256923},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-009s","turnId":"turn-018","role":"toolResult","generation":null,"timestamp":1791620759811,"responseId":null,"relativeMs":16827901,"durationMs":null,"toolName":"tool_08","toolCallId":"call_0041","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":47,"textTruncated":false,"index":69,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_08","summary":"fixture text-009t placeholder","result":"fixture text-009t placeholder"},{"id":"msg-009w","turnId":"turn-018","role":"assistant","generation":null,"timestamp":1791621014224,"responseId":"fixture text-00a2 placeholder","relativeMs":17082314,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0042","tokens":{"input":1473,"output":346,"cacheRead":255104,"cacheWrite":0,"totalTokens":256923},"model":"fixture text-00a1 placeholder","provider":"fixture text-00a0 placeholder","api":"fixture text-009z placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":48,"textTruncated":false,"index":70,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-009x placeholder\", description=\"fixture text-009y placeholder\", timeout=\"120\"}","arguments":{"command":"fixture text-009x placeholder","description":"fixture text-009y placeholder","timeout":120},"argumentsOmitted":false},{"id":"msg-00a3","turnId":"turn-018","role":"toolResult","generation":null,"timestamp":1791621281924,"responseId":null,"relativeMs":17350014,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0043","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":49,"textTruncated":false,"index":71,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_03","summary":"fixture text-00a4 placeholder","result":"fixture text-00a4 placeholder"}]},{"id":"turn-019","index":19,"startedAt":1791621759959,"endedAt":1791622044235,"durationMs":284276,"toolCalls":1,"errors":0,"tokens":{"input":2297,"output":1329,"cacheRead":277632,"cacheWrite":0,"totalTokens":281258},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-00af","turnId":"turn-019","role":"assistant","generation":null,"timestamp":1791621759959,"responseId":"fixture text-00an placeholder","relativeMs":17828049,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":2297,"output":1329,"cacheRead":277632,"cacheWrite":0,"totalTokens":281258},"model":"fixture text-00am placeholder","provider":"fixture text-00al placeholder","api":"fixture text-00ak placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":50,"textTruncated":false,"index":72,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-00ag placeholder","thinking":"fixture text-00ag placeholder"},{"id":"msg-00af","turnId":"turn-019","role":"assistant","generation":null,"timestamp":1791621759959,"responseId":"fixture text-00an placeholder","relativeMs":17828049,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0044","model":"fixture text-00am placeholder","provider":"fixture text-00al placeholder","api":"fixture text-00ak placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":50,"textTruncated":false,"index":73,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-00ai placeholder\", description=\"fixture text-00aj placeholder\", timeout=\"180\"}","arguments":{"command":"fixture text-00ai placeholder","description":"fixture text-00aj placeholder","timeout":180},"argumentsOmitted":false},{"id":"msg-00ao","turnId":"turn-019","role":"toolResult","generation":null,"timestamp":1791622044235,"responseId":null,"relativeMs":18112325,"durationMs":null,"toolName":"tool_04","toolCallId":"call_0045","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":51,"textTruncated":false,"index":74,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_04","summary":"fixture text-00ap placeholder","result":"fixture text-00ap placeholder"}]},{"id":"turn-020","index":20,"startedAt":1791622638009,"endedAt":1791622638009,"durationMs":0,"toolCalls":1,"errors":0,"tokens":{"input":11033,"output":69,"cacheRead":299264,"cacheWrite":0,"totalTokens":310366},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-00ar","turnId":"turn-020","role":"assistant","generation":null,"timestamp":1791622638009,"responseId":"fixture text-00ay placeholder","relativeMs":18706099,"durationMs":null,"toolName":"tool_11","toolCallId":"call_0046","tokens":{"input":11033,"output":69,"cacheRead":299264,"cacheWrite":0,"totalTokens":310366},"model":"fixture text-00ax placeholder","provider":"fixture text-00aw placeholder","api":"fixture text-00av placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":52,"textTruncated":false,"index":75,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_11","summary":"tool_11{action=\"fixture text-00as placeholder\", pluginId=\"fixture text-00at placeholder\", sourcePath=\"fixture text-00au placeholder\"}","arguments":{"action":"fixture text-00as placeholder","pluginId":"fixture text-00at placeholder","sourcePath":"fixture text-00au placeholder"},"argumentsOmitted":false}]},{"id":"turn-021","index":21,"startedAt":1791623384388,"endedAt":1791623384388,"durationMs":0,"toolCalls":1,"errors":0,"tokens":{"input":175,"output":244,"cacheRead":319744,"cacheWrite":0,"totalTokens":320163},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-00az","turnId":"turn-021","role":"assistant","generation":null,"timestamp":1791623384388,"responseId":"fixture text-00b8 placeholder","relativeMs":19452478,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-00b7 placeholder","provider":"fixture text-00b6 placeholder","api":"fixture text-00b5 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":53,"textTruncated":false,"index":76,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-00b0 placeholder","thinking":"fixture text-00b0 placeholder"},{"id":"msg-00az","turnId":"turn-021","role":"assistant","generation":null,"timestamp":1791623384388,"responseId":"fixture text-00b8 placeholder","relativeMs":19452478,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":175,"output":244,"cacheRead":319744,"cacheWrite":0,"totalTokens":320163},"model":"fixture text-00b7 placeholder","provider":"fixture text-00b6 placeholder","api":"fixture text-00b5 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":53,"textTruncated":false,"index":77,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-00b2 placeholder","text":"fixture text-00b2 placeholder"},{"id":"msg-00az","turnId":"turn-021","role":"assistant","generation":null,"timestamp":1791623384388,"responseId":"fixture text-00b8 placeholder","relativeMs":19452478,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0047","model":"fixture text-00b7 placeholder","provider":"fixture text-00b6 placeholder","api":"fixture text-00b5 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":53,"textTruncated":false,"index":78,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":2,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-00b3 placeholder\", description=\"fixture text-00b4 placeholder\", timeout=\"300\"}","arguments":{"command":"fixture text-00b3 placeholder","description":"fixture text-00b4 placeholder","timeout":300},"argumentsOmitted":false}]},{"id":"turn-022","index":22,"startedAt":1791624351892,"endedAt":1791625062330,"durationMs":710438,"toolCalls":3,"errors":0,"tokens":{"input":9613,"output":670,"cacheRead":334848,"cacheWrite":0,"totalTokens":345131},"turnClass":"none","askedReader":false,"closed":false,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-00b9","turnId":"turn-022","role":"assistant","generation":null,"timestamp":1791624351892,"responseId":"fixture text-00bi placeholder","relativeMs":20419982,"durationMs":null,"toolName":null,"toolCallId":null,"model":"fixture text-00bh placeholder","provider":"fixture text-00bg placeholder","api":"fixture text-00bf placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":54,"textTruncated":false,"index":79,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-00ba placeholder","thinking":"fixture text-00ba placeholder"},{"id":"msg-00b9","turnId":"turn-022","role":"assistant","generation":null,"timestamp":1791624351892,"responseId":"fixture text-00bi placeholder","relativeMs":20419982,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":4906,"output":149,"cacheRead":56576,"cacheWrite":0,"totalTokens":61631},"model":"fixture text-00bh placeholder","provider":"fixture text-00bg placeholder","api":"fixture text-00bf placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":54,"textTruncated":false,"index":80,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"narration","title":"assistant","summary":"fixture text-00bc placeholder","text":"fixture text-00bc placeholder"},{"id":"msg-00b9","turnId":"turn-022","role":"assistant","generation":null,"timestamp":1791624351892,"responseId":"fixture text-00bi placeholder","relativeMs":20419982,"durationMs":null,"toolName":"tool_12","toolCallId":"call_0048","model":"fixture text-00bh placeholder","provider":"fixture text-00bg placeholder","api":"fixture text-00bf placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":54,"textTruncated":false,"index":81,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":2,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_12","summary":"tool_12{task_id=\"fixture text-00bd placeholder\", reason=\"fixture text-00be placeholder\"}","arguments":{"task_id":"fixture text-00bd placeholder","reason":"fixture text-00be placeholder"},"argumentsOmitted":false},{"id":"msg-00bj","turnId":"turn-022","role":"assistant","generation":null,"timestamp":1791624527065,"responseId":"fixture text-00bq placeholder","relativeMs":20595155,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":4023,"output":283,"cacheRead":98560,"cacheWrite":0,"totalTokens":102866},"model":"fixture text-00bp placeholder","provider":"fixture text-00bo placeholder","api":"fixture text-00bn placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":55,"textTruncated":false,"index":82,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-00bk placeholder","thinking":"fixture text-00bk placeholder"},{"id":"msg-00bj","turnId":"turn-022","role":"assistant","generation":null,"timestamp":1791624527065,"responseId":"fixture text-00bq placeholder","relativeMs":20595155,"durationMs":null,"toolName":"tool_02","toolCallId":"call_0049","model":"fixture text-00bp placeholder","provider":"fixture text-00bo placeholder","api":"fixture text-00bn placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":55,"textTruncated":false,"index":83,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_02","summary":"tool_02{task_id=\"fixture text-00bm placeholder\", wait_ms=\"30000\"}","arguments":{"task_id":"fixture text-00bm placeholder","wait_ms":30000},"argumentsOmitted":false},{"id":"msg-00br","turnId":"turn-022","role":"user","generation":null,"timestamp":1791624769221,"responseId":null,"relativeMs":20837311,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":null,"internalOnly":false,"rawRow":56,"textTruncated":false,"index":84,"hasText":true,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"system","title":"injected","summary":"<background-task-finished> fixture injected-00bs block","text":"<background-task-finished>\nfixture injected-00bs block"},{"id":"msg-00bu","turnId":"turn-022","role":"toolResult","generation":null,"timestamp":1791624899122,"responseId":null,"relativeMs":20967212,"durationMs":null,"toolName":"tool_08","toolCallId":"call_0050","tokens":null,"model":null,"provider":null,"api":null,"stopReason":null,"isError":false,"internalOnly":false,"rawRow":57,"textTruncated":false,"index":85,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":true,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolResult","title":"tool_08","summary":"fixture text-00bv placeholder","result":"fixture text-00bv placeholder"},{"id":"msg-00by","turnId":"turn-022","role":"assistant","generation":null,"timestamp":1791625062330,"responseId":"fixture text-00c6 placeholder","relativeMs":21130420,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":684,"output":238,"cacheRead":179712,"cacheWrite":0,"totalTokens":180634},"model":"fixture text-00c5 placeholder","provider":"fixture text-00c4 placeholder","api":"fixture text-00c3 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":58,"textTruncated":false,"index":86,"hasText":false,"hasThinking":true,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"thinking","title":"thinking","summary":"fixture text-00bz placeholder","thinking":"fixture text-00bz placeholder"},{"id":"msg-00by","turnId":"turn-022","role":"assistant","generation":null,"timestamp":1791625062330,"responseId":"fixture text-00c6 placeholder","relativeMs":21130420,"durationMs":null,"toolName":"tool_03","toolCallId":"call_0051","model":"fixture text-00c5 placeholder","provider":"fixture text-00c4 placeholder","api":"fixture text-00c3 placeholder","stopReason":"toolUse","isError":null,"internalOnly":false,"rawRow":58,"textTruncated":false,"index":87,"hasText":false,"hasThinking":false,"hasArguments":true,"hasResult":false,"rowPos":1,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"toolCall","title":"tool_03","summary":"tool_03{command=\"fixture text-00c1 placeholder\", description=\"fixture text-00c2 placeholder\"}","arguments":{"command":"fixture text-00c1 placeholder","description":"fixture text-00c2 placeholder"},"argumentsOmitted":false}]},{"id":"turn-023","index":23,"startedAt":1791627571957,"endedAt":1791627571957,"durationMs":0,"toolCalls":0,"errors":0,"tokens":{"input":1188,"output":82,"cacheRead":267008,"cacheWrite":0,"totalTokens":268278},"turnClass":"continuation","askedReader":false,"closed":true,"openerInView":false,"openerOutOfView":false,"records":[{"id":"msg-00c7","turnId":"turn-023","role":"assistant","generation":null,"timestamp":1791627571957,"responseId":"fixture text-00cb placeholder","relativeMs":23640047,"durationMs":null,"toolName":null,"toolCallId":null,"tokens":{"input":1188,"output":82,"cacheRead":267008,"cacheWrite":0,"totalTokens":268278},"model":"fixture text-00ca placeholder","provider":"fixture text-00c9 placeholder","api":"fixture text-00c8 placeholder","stopReason":"stop","isError":null,"internalOnly":false,"rawRow":59,"textTruncated":false,"index":88,"hasText":false,"hasThinking":false,"hasArguments":false,"hasResult":false,"rowPos":0,"tokensBefore":null,"producedBy":null,"parentGeneration":null,"parentCompactionId":null,"parentRevision":null,"kind":"reply","title":"assistant","summary":"assistant","text":null}]}]}
\ No newline at end of file
diff --git a/plugins/avatasia/mmc-trajectory/tests/make-payload.mjs b/plugins/avatasia/mmc-trajectory/tests/make-payload.mjs
index 6774d1a..09ea049 100644
--- a/plugins/avatasia/mmc-trajectory/tests/make-payload.mjs
+++ b/plugins/avatasia/mmc-trajectory/tests/make-payload.mjs
@@ -28,21 +28,58 @@ if (!entries.length) {
process.exit(2);
}
-// `?session=latest` resolves to the most recently touched store, which is how collectSessionEntries
-// already orders them.
-const entry = entries[0];
-const identity = await readSessionIdentity(entry.dir);
-const head = await readHead(join(entry.dir, 'messages.jsonl'), entry.sizeBytes);
-const parsed = parseMessagesJsonl(head.text);
+/**
+ * Which session the fixture is recorded from.
+ *
+ * It used to be `entries[0]` — the most recently touched one. That is not a rule, it is a
+ * timestamp, and it changed the answer without anyone deciding it should: re-recording the fixture
+ * on a machine whose store had been touched since silently replaced 23 turns and 88 records with
+ * 1 turn and 103, taking with it every guard value that was calibrated on the old one. The
+ * committed fixture was still passing its guards afterwards, which is exactly why nothing caught
+ * it — a guard that reads a stale fixture is testing a payload the server cannot produce.
+ *
+ * So: the session with the most turns, ties broken by name. Deterministic, and stated.
+ *
+ * @param {Array<any>} candidates
+ * @param {(entry: any) => Promise<{ turns: any[] }>} project
+ */
+async function pickEntry(candidates, project) {
+ let best = null;
+ let bestTurns = -1;
+ for (const candidate of candidates) {
+ let payload;
+ try { payload = await project(candidate); } catch { continue; }
+ const turns = Array.isArray(payload.turns) ? payload.turns.length : 0;
+ if (turns > bestTurns || (turns === bestTurns && best !== null && String(candidate.dir) < String(best.dir))) {
+ best = candidate;
+ bestTurns = turns;
+ }
+ }
+ return best;
+}
+
+const readOne = async (entry) => {
+ // The entry carries no id — `readSessionIdentity` is where one comes from, and a payload whose
+ // `session.id` is undefined would quietly make every session-keyed guard assert nothing.
+ const identity = await readSessionIdentity(entry.dir);
+ const head = await readHead(join(entry.dir, 'messages.jsonl'), entry.sizeBytes);
+ const parsed = parseMessagesJsonl(head.text);
+ const redact = createRedactor([location.sessionsRoot, location.root]);
+ return { head, parsed, payload: buildTrajectoryPayload({
+ session: { id: identity.id, createdAtMs: entry.lastActiveAt },
+ rows: parsed.rows, sizeBytes: head.size, truncated: head.read < head.size, redact,
+ }) };
+};
+
+const entry = USE_REAL ? entries[0] : await pickEntry(entries, readOne);
+if (!entry) {
+ console.error('no fixture session could be projected');
+ process.exit(2);
+}
+const built = await readOne(entry);
+const { head, parsed, payload } = built;
const redact = createRedactor([location.sessionsRoot, location.root]);
-const payload = buildTrajectoryPayload({
- session: { id: identity.id, createdAtMs: entry.lastActiveAt },
- rows: parsed.rows,
- sizeBytes: head.size,
- truncated: head.read < head.size,
- redact,
-});
// the fields the route sets after building; kept in step with server.mjs:1935-1952
payload.session.lastActiveAt = entry.lastActiveAt;
payload.session.activeGeneration = null;
@@ -70,7 +107,7 @@ console.log(`kinds : ${[...new Set(flat.map((r) => r.kind))].sort().join(',
console.log(`anomalies : toolError=${flat.filter((r) => r.isError === true).length}`
+ ` compaction=${flat.filter((r) => r.kind === 'compaction').length}`
+ ` openTurns=${payload.turns.filter((t) => t.closed === false).length}`
- + ` silentReplies=${flat.filter((r) => r.kind === 'reply' && !r.text).length}`);
+ + ` silentReplies=${flat.filter((r) => r.kind === 'reply' && r.hasText === false).length}`);
console.log(`size : ${(text.length / 1024).toFixed(0)} KB -> ${OUT}`);
if (process.argv.includes('--check')) {
@@ -84,5 +121,31 @@ if (!process.argv.includes('--record')) {
console.log('\n(dry run -- pass --record to write)');
process.exit(0);
}
+
+/**
+ * What the guards read this file for. `--record` refuses without all of it.
+ *
+ * `make-fixtures.mjs` gates the session store the same way. This one had no gate at all, and the
+ * store is synthetic but the choice of session was not: recording from a session without an empty
+ * reply silently deletes the only fixture the 空答复 rule is tested on, and every guard reading it
+ * afterwards asserts against a shape that is not there.
+ *
+ * `silent` is counted off `hasText`, not off `text`: the flag is what the page decides with now,
+ * and a coverage count read off a field the payload no longer carries would read zero for a
+ * fixture that is perfectly good.
+ */
+const coverage = {
+ turns: payload.turns.length,
+ toolError: flat.filter((r) => r.isError === true).length,
+ compaction: flat.filter((r) => r.kind === 'compaction').length,
+ openTurns: payload.turns.filter((t) => t.closed === false).length,
+ silent: flat.filter((r) => r.kind === 'reply' && r.hasText === false).length,
+};
+const missing = Object.entries(coverage).filter(([, n]) => n < 1).map(([name]) => name);
+if (missing.length) {
+ console.error(`refusing to record: the fixture would have no ${missing.join(', ')}`);
+ console.error('the guards that read this file assert on those, and would go quietly vacuous');
+ process.exit(1);
+}
writeFileSync(OUT, text, 'utf8');
console.log('\nwritten');
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-anomaly.py b/plugins/avatasia/mmc-trajectory/tests/mutate-anomaly.py
index dac933b..c90fcc8 100644
--- a/plugins/avatasia/mmc-trajectory/tests/mutate-anomaly.py
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-anomaly.py
@@ -70,8 +70,8 @@
# case honest: if passesBaseFilter stopped applying the query, the list would stop being
# filtered at all and the exclusivity check above it would pass for the wrong reason.
("the base filter stops applying the query",
- "but with no rule ticked the search is still a filter for the list",
- " if (state.query && !matchesQuery(record, state.query)) return false;",
+ "and once the server has answered, the search narrows the list",
+ " if (state.query && !matchesQuery(record, state.query, state.searchHits)) return false;",
" if (false && state.query) return false;"),
# Dropping the range from passesBaseFilter is deliberately NOT here: that guard lives in
# verify-time-range.mjs, and a case listed against a probe that does not own it would be
@@ -183,7 +183,7 @@
# Anchored with the signature above it: `if (state.anomaly.rules.length > 0)` appears twice
# — once in recordVisible(), once in applyFilterScope() — and the two mean nothing alike.
("the mode is read backwards, so the search stops filtering at all",
- "but with no rule ticked the search is still a filter for the list",
+ "and once the server has answered, the search narrows the list",
" function recordVisible(record, turn, selection) {\n if (state.anomaly.rules.length > 0) {",
" function recordVisible(record, turn, selection) {\n if (state.anomaly.rules.length >= 0) {"),
("the two axes stacked instead of alternated",
@@ -229,9 +229,10 @@
"ticking a rule puts every type back",
" if (next.length > 0) resetBaseFilters();",
" if (next.length > 0 && false) resetBaseFilters();"),
- ("the reset forgets the search box", "and drops the search",
- " state.query = '';\n dropOverviewSelection();",
- " dropOverviewSelection();"),
+ ("the reset forgets the search box",
+ "and it drops the search answer with the needle, not just the needle",
+ " state.query = '';\n state.searchHits = null;",
+ " state.query = '';"),
# Distinct from the one above, and it was missing until a cross-check read the names rather
# than the diffs: that mutation deletes `state.query`, not `dom.searchInput.value`. The box
# is cleared by its own line, and with `dom.searchInput` nulled in the sandbox that line had
@@ -366,33 +367,42 @@
# --- 空答复: a reply the runtime finished and then delivered nothing into.
# Every other rule tests a field that was there. This one tests an absence, so most of the
# ways to get it wrong are over-matching rather than under-matching.
+ #
+ # The absence it tests is `hasText === false` and not `isNil(record.text)` any more: the body
+ # does not travel with the row, so the rule reads the server's verdict on it. The shape of the
+ # trap is unchanged — a strict `=== false` is what keeps a record from an older payload, which
+ # has neither flag nor body, from being called an anomaly.
("an empty answer rule that ignores the body", "a reply that said something is not",
- " return !!record && record.kind === 'reply' && isNil(record.text);",
+ " return !!record && record.kind === 'reply' && record.hasText === false;",
" return !!record && record.kind === 'reply';"),
("the no-body test inverted, so every spoken reply becomes an anomaly",
"a reply with no body is an empty answer",
- " return !!record && record.kind === 'reply' && isNil(record.text);",
- " return !!record && record.kind === 'reply' && !isNil(record.text);"),
+ " return !!record && record.kind === 'reply' && record.hasText === false;",
+ " return !!record && record.kind === 'reply' && record.hasText === true;"),
+ # The expected name is the checkpoint assertion, not "a normal row is not an anomaly". A row
+ # with a body cannot fire this rule whichever way the KIND test is written, so that assertion
+ # has nothing to say about an inversion here; the record that does is a non-reply WITHOUT a
+ # body, and the fixture that owns "a non-reply is not an empty answer" is the checkpoint one.
("the kind test inverted, so every non-reply is an empty answer",
- "a normal row is not an anomaly",
- " return !!record && record.kind === 'reply' && isNil(record.text);",
- " return !!record && record.kind !== 'reply' && isNil(record.text);"),
+ "a checkpoint is not also an empty answer",
+ " return !!record && record.kind === 'reply' && record.hasText === false;",
+ " return !!record && record.kind !== 'reply' && record.hasText === false;"),
# Dropping the body and reading truncation instead hits the plain no-body case first, on a
# record that carries no truncation flag at all. That assertion is the one that owns it.
("no-body judged by truncation instead of by absence", "a reply with no body is an empty answer",
- " return !!record && record.kind === 'reply' && isNil(record.text);",
+ " return !!record && record.kind === 'reply' && record.hasText === false;",
" return !!record && record.kind === 'reply' && record.textTruncated === false;"),
("a checkpoint counted twice, once as a checkpoint and once as an empty answer",
"a checkpoint is not also an empty answer",
- " return !!record && record.kind === 'reply' && isNil(record.text);",
- " return !!record && isNil(record.text);"),
+ " return !!record && record.kind === 'reply' && record.hasText === false;",
+ " return !!record && record.hasText === false;"),
("the empty-answer rule never fires", "empty answer count matches the payload",
- " return !!record && record.kind === 'reply' && isNil(record.text);",
+ " return !!record && record.kind === 'reply' && record.hasText === false;",
" return false;"),
# --- and the row, because a filter that shows these without marking them shows nothing
("the empty-answer marker removed from the row", "an empty reply is marked on its row",
- " var silent = record.kind === 'reply' && isNil(record.text);",
+ " var silent = record.kind === 'reply' && record.hasText === false;",
" var silent = false;"),
("the row's marker branch dropped, leaving the duration cell instead",
"and it reuses the duration cell instead of adding a column",
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-count-roles.py b/plugins/avatasia/mmc-trajectory/tests/mutate-count-roles.py
new file mode 100644
index 0000000..33766a4
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-count-roles.py
@@ -0,0 +1,186 @@
+"""Break countRolesInPrefix's allocation-free rewrite in the shipped source and require
+verify-count-roles.mjs to report each way it comes back by name.
+
+The rewrite replaced five `matchAll` passes over the session list's prefix — a match object per
+hit, thousands of them per session per rebuild — with four `test`-driven scans that read each value
+out of the text by position. That trade is only worth making if the function still returns the same
+eight counters, because the list sends them to the reader. So every mutation below is either the
+counting drifting from what it was, or the allocation coming back.
+
+The `lastIndex` resets are the ones worth reading twice. These are module-level `/g` regexes driven
+with `test`, which mutates `lastIndex` — and the loops `break` out when a value has no closing
+quote, which is the normal case for a truncated prefix and which leaves the cursor mid-string. A
+scan that runs to exhaustion resets itself on the way out; a broken one does not. Drop one reset and
+the *next* call counts from wherever the last one stopped, on the same shared regex, with no error.
+
+Anchors are multi-line and server.mjs is LF, so they are written with bare \\n and the file is read
+and written with newline='' — matching on normalised text while preserving the file's own endings.
+No anchor may contain a line ending of its own: one did, and it stopped resolving the moment the
+.gitattributes pinning LF landed.
+"""
+import io
+import os
+import subprocess
+import sys
+
+HERE = os.path.dirname(os.path.abspath(__file__))
+PLUGIN = os.path.dirname(HERE)
+SERVER = os.path.join(PLUGIN, "miniapp", "node", "server.mjs")
+PROBE = os.path.join(HERE, "verify-count-roles.mjs")
+
+MUTATIONS = [
+ # ---- the resets on shared module state ----
+ #
+ # Each of these leaves a scan's lastIndex pointing into the middle of the previous call's
+ # string whenever that call hit a truncated value. The guard catches all three with one named
+ # assertion, because the case that fails is the same one each time: a complete scan after a
+ # truncated one.
+
+ ("the role scan stops resetting its cursor",
+ [(" ROLE_SCAN.lastIndex = 0;\n", "")],
+ "ROLE_SCAN is reset before it is scanned"),
+
+ ("the turn scan stops resetting its cursor",
+ [(" TURN_SCAN.lastIndex = 0;\n", "")],
+ "TURN_SCAN is reset before it is scanned"),
+
+ ("the block scan stops resetting its cursor",
+ [(" BLOCK_SCAN.lastIndex = 0;\n", "")],
+ "BLOCK_SCAN is reset before it is scanned"),
+
+ # ---- the value is matched exactly, not by prefix ----
+ #
+ # `user2` and `users` are not `user`. The capturing version could not get this wrong because
+ # its alternation closed the value; a position-based comparison that only checks `startsWith`
+ # can, and then reports messages the session does not have.
+
+ ("a value is matched by prefix rather than exactly",
+ [(" const valueIs = (start, literal) => text.startsWith(literal, start)\n"
+ " && start + literal.length === valueEnd;",
+ " const valueIs = (start, literal) => text.startsWith(literal, start);")],
+ "roles outside the four are not counted"),
+
+ # ---- a role outside the four is not a role the list counts ----
+ #
+ # The capturing version's alternation was the filter. Removing the `custom` branch and letting
+ # anything left over fall into the else counts `system`, `tool` and every future value as
+ # system messages — the else that used to mean exactly one thing.
+
+ ("a role outside the four falls into the system count",
+ [(" else if (valueIs(start, 'custom')) counts.systemMessages += 1;",
+ " else counts.systemMessages += 1;")],
+ "roles outside the four are not counted"),
+
+ # ---- a truncated value is not a value ----
+ #
+ # The prefix is a prefix: the last line is routinely cut mid-field. Slicing to the end of the
+ # string instead of to the closing quote invents a turn id out of whatever follows.
+
+ ("a truncated turn id is counted as if it closed",
+ [(" const end = text.indexOf('\"', start);\n"
+ " if (end < 0) break;\n"
+ " turnIds.add(text.slice(start, end));",
+ " turnIds.add(text.slice(start));")],
+ "truncated inside a turn id"),
+
+ # ---- turns are counted distinctly ----
+ #
+ # The same turn id is on every row of that turn, so a prefix with 40 rows and 4 turns reports
+ # 4. Counting rows instead reports 40, and the list prints it.
+
+ ("turns are counted per row rather than per distinct id",
+ [(" const turnIds = new Set();", " let turnIds = 0;"),
+ (" turnIds.add(text.slice(start, end));", " turnIds += 1;"),
+ (" counts.turns = turnIds.size;", " counts.turns = turnIds;")],
+ "duplicate turn ids count once"),
+
+ # ---- the key needs its colon ----
+ #
+ # `{"note":"message_id"}` has the word but not the field, and the capturing pattern required
+ # the colon so it counted nothing. The obvious "even cheaper" rewrite is `indexOf` on the bare
+ # word, which counts every mention of it anywhere in the file.
+
+ ("message_id is counted by the bare word rather than as a key",
+ [(" MESSAGE_ID_SCAN.lastIndex = 0;\n while (MESSAGE_ID_SCAN.test(text)) counts.messages += 1;",
+ " let at = text.indexOf('\"message_id\"');\n"
+ " while (at >= 0) { counts.messages += 1; at = text.indexOf('\"message_id\"', at + 12); }")],
+ "message_id as a value without a colon"),
+
+ # ---- and the allocation the rewrite was for ----
+ #
+ # Back to one capturing pass. Correct, and the original: a match object per hit, which on a
+ # 64 KB prefix is a few thousand per session per rebuild.
+
+ ("one scan goes back to a capturing pass",
+ [(" MESSAGE_ID_SCAN.lastIndex = 0;\n while (MESSAGE_ID_SCAN.test(text)) counts.messages += 1;",
+ " for (const match of text.matchAll(/\"message_id\"\\s*:/g)) counts.messages += 1;")],
+ "the counting loops do not build a match object per hit"),
+
+ # Half of that rewrite: still allocation-free, but only counting three of the four fields.
+ ("a whole scan is dropped",
+ [(" BLOCK_SCAN.lastIndex = 0;\n"
+ " while (BLOCK_SCAN.test(text)) {\n"
+ " const start = BLOCK_SCAN.lastIndex;\n"
+ " valueEnd = text.indexOf('\"', start);\n"
+ " if (valueEnd < 0) break;\n"
+ " if (valueIs(start, 'toolCall')) counts.toolCalls += 1;\n"
+ " else if (valueIs(start, 'thinking')) counts.thinkingBlocks += 1;\n"
+ " }\n",
+ "")],
+ "the counting loops share one pass over the prefix rather than five"),
+]
+
+ORIGINAL = io.open(SERVER, encoding="utf-8", newline="").read()
+
+
+def run():
+ proc = subprocess.run(["node", PROBE], cwd=HERE,
+ capture_output=True, text=True, encoding="utf-8", errors="replace")
+ return proc.returncode, proc.stdout + proc.stderr
+
+
+ok = True
+code, baseline = run()
+base_ok = code == 0 and "0 failed" in baseline
+print(("ok " if base_ok else "FAIL ") + "baseline green")
+ok = ok and base_ok
+
+caught = []
+for entry in MUTATIONS:
+ title, edits, expect = entry
+ for old, new in edits:
+ hits = ORIGINAL.count(old)
+ if hits != 1:
+ raise SystemExit("FAIL anchor for %r matched %d times" % (title, hits))
+ if old == new:
+ raise SystemExit("FAIL empty mutation for %r: the anchor equals its replacement" % title)
+ try:
+ mutated = ORIGINAL
+ for old, new in edits:
+ mutated = mutated.replace(old, new, 1)
+ if mutated == ORIGINAL:
+ raise SystemExit("FAIL mutation for %r changed nothing" % title)
+ io.open(SERVER, "w", encoding="utf-8", newline="").write(mutated)
+ during_code, during = run()
+ named = expect in during
+ red = during_code != 0
+ # A guard that crashes is not a guard that caught anything: the rule has to be reported by
+ # name, or the mutation only proved that the file no longer parses.
+ print(("ok " if (named and red) else "FAIL ") + "guard catches: " + title)
+ if not named:
+ print(" no assertion reported %r" % expect)
+ for line in during.splitlines()[-4:]:
+ print(" " + line.strip())
+ elif not red:
+ print(" the rule was reported but the guard still exited 0")
+ caught.append(named and red)
+ finally:
+ io.open(SERVER, "w", encoding="utf-8", newline="").write(ORIGINAL)
+
+restored = io.open(SERVER, encoding="utf-8", newline="").read() == ORIGINAL
+after_code, after = run()
+after_ok = after_code == 0 and "0 failed" in after
+print(("ok " if restored else "FAIL ") + "server.mjs restored byte for byte")
+print(("ok " if after_ok else "FAIL ") + "green again after restore")
+
+sys.exit(0 if (ok and all(caught) and restored and after_ok) else 1)
\ No newline at end of file
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-css.py b/plugins/avatasia/mmc-trajectory/tests/mutate-css.py
new file mode 100644
index 0000000..f1b02ed
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-css.py
@@ -0,0 +1,157 @@
+"""Mutation control for the stylesheet's dead-declaration guard.
+
+`verify-css.mjs` states two properties: every class selector has a consumer outside `<style>`,
+and every custom property is read. This control breaks each of them in the direction that
+actually happens, because the two directions are different bugs with different fixes:
+
+ - **A rule added for something nobody built.** The rule and the markup arrive in different
+ edits — the markup gets reverted, or the rule was speculative — and the rule stays. This is
+ what the sweep that produced the eleven dead classes was cleaning up.
+
+ - **A consumer removed and the rule left behind.** A feature is deleted; nobody greps the
+ stylesheet, because a stylesheet is not where you go looking for what a feature used. This
+ is the direction that makes dead CSS accumulate, and it is the one a guard written only as
+ "no unknown rules exist" would not catch.
+
+ - **A variable declared and never read.** Deleting `.btn-primary` orphaned
+ `--mcode-primary-action-bg` and `--mcode-primary-action-text` in three theme blocks during
+ this very cleanup. A class sweep cannot see that; it is the other half of the same property.
+
+Each mutation must be caught *by name*. A probe that dies on an exception names nothing, and a
+control that reports that as "caught" is reporting a crash as if it were evidence.
+"""
+import subprocess
+import sys
+from pathlib import Path
+
+HERE = Path(__file__).resolve().parent
+ROOT = HERE.parent
+CLIENT = ROOT / "miniapp" / "client" / "index.html"
+PROBE = HERE / "verify-css.mjs"
+
+# The dead rule is inserted before this one rather than appended at the end of the block, so a
+# mutation that accidentally lands outside <style> fails the guard for the right reason.
+KPI_ANCHOR = " .kpi-section {"
+
+# The whole turn header's meta line: markup and styling both go, leaving the rule behind.
+TURN_META_CONSUMER = "var meta = el('span', 'turn-meta');"
+
+LIGHT_THEME_TAIL = " --mcode-danger: #f73646;"
+
+MUTATIONS = [
+ (
+ "a class rule is added for markup that was never built",
+ KPI_ANCHOR,
+ """ .btn-secondary-legacy {
+ background: transparent;
+ border-color: transparent;
+ }
+
+ .kpi-section {""",
+ ),
+ (
+ "the turn header loses its meta line and the rule stays behind",
+ TURN_META_CONSUMER,
+ "var meta = el('span');",
+ ),
+ (
+ "a custom property is declared in a theme block and never read",
+ LIGHT_THEME_TAIL,
+ """ --mcode-danger: #f73646;
+ --mcode-never-read: #123456;""",
+ ),
+]
+
+
+def read_exact(path):
+ """Normalise to LF for matching, and report the file's own newline so it can be put back."""
+ data = path.read_bytes()
+ text = data.decode("utf-8").replace("\r\n", "\n")
+ return text, ("\r\n" if b"\r\n" in data else "\n")
+
+
+def write_exact(path, text, newline):
+ if newline == "\r\n":
+ text = text.replace("\n", "\r\n")
+ path.write_bytes(text.encode("utf-8"))
+
+
+def run_probe():
+ proc = subprocess.run(
+ ["node", str(PROBE)],
+ cwd=str(ROOT),
+ capture_output=True,
+ text=True,
+ encoding="utf-8",
+ errors="replace",
+ )
+ return proc.returncode, (proc.stdout or "") + (proc.stderr or "")
+
+
+def named_failure(output):
+ """The first rule the probe named, or None when it failed without naming one."""
+ return next(
+ (line.strip()[len("FAIL"):].strip() for line in output.splitlines()
+ if line.strip().startswith("FAIL")),
+ None,
+ )
+
+
+def main():
+ code, output = run_probe()
+ if code != 0:
+ print("baseline probe does not pass; fix that first")
+ print(output)
+ return 1
+ print("baseline clean")
+
+ original = CLIENT.read_bytes()
+ missed = []
+ unnamed = []
+ for label, old, new in MUTATIONS:
+ text, newline = read_exact(CLIENT)
+ if old not in text:
+ print(f"SKIP {label}: anchor not found")
+ missed.append(label)
+ continue
+ if text.count(old) != 1:
+ print(f"SKIP {label}: anchor is not unique ({text.count(old)} matches)")
+ missed.append(label)
+ continue
+ if old == new:
+ print(f"SKIP {label}: the mutation changes nothing")
+ missed.append(label)
+ continue
+ write_exact(CLIENT, text.replace(old, new, 1), newline)
+ try:
+ code, output = run_probe()
+ finally:
+ CLIENT.write_bytes(original)
+ if code == 0:
+ print(f"MISSED {label}: the probe still passed")
+ missed.append(label)
+ continue
+ name = named_failure(output)
+ if name is None:
+ print(f"UNNAMED {label}: the probe failed without naming a rule")
+ unnamed.append(label)
+ else:
+ print(f"caught {label}\n -> {name}")
+
+ if CLIENT.read_bytes() != original:
+ print(f"NOT RESTORED {CLIENT}")
+ return 1
+ print("file restored byte-for-byte")
+
+ if missed or unnamed:
+ if missed:
+ print(f"\n{len(missed)} mutation(s) got through")
+ if unnamed:
+ print(f"{len(unnamed)} mutation(s) failed without naming a rule")
+ return 1
+ print(f"\nall {len(MUTATIONS)} mutations caught, each by name")
+ return 0
+
+
+if __name__ == "__main__":
+ sys.exit(main())
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-dead-code.py b/plugins/avatasia/mmc-trajectory/tests/mutate-dead-code.py
new file mode 100644
index 0000000..1173dcd
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-dead-code.py
@@ -0,0 +1,155 @@
+"""Mutation control for the client's dead-function guard.
+
+`verify-dead-code.mjs` states one property: every top-level function the inline script declares
+is referenced somewhere else in that script. This control breaks it in the three ways it
+actually breaks, because they are three different mistakes:
+
+ - **A helper is added for a feature that was not built yet.** The rule and the call arrive in
+ different edits; the rule lands first and the call never does. This is the common one and
+ the one this rule exists for.
+
+ - **A caller is deleted and the helper is left behind.** A branch is removed, a feature is
+ retired, and nobody greps for what it used to call. `turnContextSuffix` is what this looks
+ like in this file's own history.
+
+ - **The reader is only a comment.** A name mentioned in prose looks like a reference to a
+ scanner that has not stripped comments — which is how `is-reading-down` read as a live CSS
+ consumer, and the reason comments are stripped before anything is counted. The mutation
+ keeps the call in a comment and removes the real one, so a guard that counted comments
+ would call it dead for the wrong reason and a guard that ignored the rule entirely would
+ call it alive.
+
+Each must be caught *by name*. A probe that dies on an exception names nothing, and a control
+that reports that as caught is reporting a crash as if it were evidence.
+"""
+import subprocess
+import sys
+from pathlib import Path
+
+HERE = Path(__file__).resolve().parent
+ROOT = HERE.parent
+CLIENT = ROOT / "miniapp" / "client" / "index.html"
+PROBE = HERE / "verify-dead-code.mjs"
+
+# A function with exactly one reader, so deleting the reader really does orphan it. Chosen by
+# measurement, not by eye: 116 top-level functions here have a single reference, and picking
+# one with two would make the mutation pass for the wrong reason — the helper would still have
+# a caller and the guard would be right to call it alive.
+AXIS_ICON_CALLER = " axis.appendChild(axisIcon());"
+AXIS_ICON_CALLEE = " function axisIcon() {"
+
+MUTATIONS = [
+ (
+ "a helper is added for a feature that was not built yet",
+ AXIS_ICON_CALLEE,
+ """ function summarizeGenerationSpread(generations) {
+ return generations.length;
+ }
+
+ function axisIcon() {""",
+ ),
+ (
+ "a caller is deleted and the helper is left behind",
+ AXIS_ICON_CALLER,
+ " axis.appendChild(document.createTextNode(''));",
+ ),
+ (
+ "the only reference to a function is left in a comment",
+ AXIS_ICON_CALLER,
+ " // was: axis.appendChild(axisIcon())\n axis.appendChild(document.createTextNode(''));",
+ ),
+]
+
+
+def read_exact(path):
+ """Normalise to LF for matching, and report the file's own newline so it can be put back."""
+ data = path.read_bytes()
+ text = data.decode("utf-8").replace("\r\n", "\n")
+ return text, ("\r\n" if b"\r\n" in data else "\n")
+
+
+def write_exact(path, text, newline):
+ if newline == "\r\n":
+ text = text.replace("\n", "\r\n")
+ path.write_bytes(text.encode("utf-8"))
+
+
+def run_probe():
+ proc = subprocess.run(
+ ["node", str(PROBE)],
+ cwd=str(ROOT),
+ capture_output=True,
+ text=True,
+ encoding="utf-8",
+ errors="replace",
+ )
+ return proc.returncode, (proc.stdout or "") + (proc.stderr or "")
+
+
+def named_failure(output):
+ """The first rule the probe named, or None when it failed without naming one."""
+ return next(
+ (line.strip()[len("FAIL"):].strip() for line in output.splitlines()
+ if line.strip().startswith("FAIL")),
+ None,
+ )
+
+
+def main():
+ code, output = run_probe()
+ if code != 0:
+ print("baseline probe does not pass; fix that first")
+ print(output)
+ return 1
+ print("baseline clean")
+
+ original = CLIENT.read_bytes()
+ missed = []
+ unnamed = []
+ for label, old, new in MUTATIONS:
+ text, newline = read_exact(CLIENT)
+ if old not in text:
+ print(f"SKIP {label}: anchor not found")
+ missed.append(label)
+ continue
+ if text.count(old) != 1:
+ print(f"SKIP {label}: anchor is not unique ({text.count(old)} matches)")
+ missed.append(label)
+ continue
+ if old == new:
+ print(f"SKIP {label}: the mutation changes nothing")
+ missed.append(label)
+ continue
+ write_exact(CLIENT, text.replace(old, new, 1), newline)
+ try:
+ code, output = run_probe()
+ finally:
+ CLIENT.write_bytes(original)
+ if code == 0:
+ print(f"MISSED {label}: the probe still passed")
+ missed.append(label)
+ continue
+ name = named_failure(output)
+ if name is None:
+ print(f"UNNAMED {label}: the probe failed without naming a rule")
+ unnamed.append(label)
+ else:
+ print(f"caught {label}\n -> {name}")
+
+ if CLIENT.read_bytes() != original:
+ print(f"NOT RESTORED {CLIENT}")
+ return 1
+ print("file restored byte-for-byte")
+
+ if missed or unnamed:
+ if missed:
+ print(f"\n{len(missed)} mutation(s) got through")
+ if unnamed:
+ print(f"{len(unnamed)} mutation(s) failed without naming a rule")
+ return 1
+ print(f"\nall {len(MUTATIONS)} mutations caught, each by name")
+ return 0
+
+
+if __name__ == "__main__":
+ sys.exit(main())
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-file-index-rows.py b/plugins/avatasia/mmc-trajectory/tests/mutate-file-index-rows.py
new file mode 100644
index 0000000..e8714df
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-file-index-rows.py
@@ -0,0 +1,169 @@
+"""Mutation control for the file-index projection.
+
+`verify-file-index-rows.mjs` states one property per case, and each mutation here breaks exactly one
+of them in the shipped module. The cases that are easy to get wrong are all about **file 0**:
+
+ - A record whose line was never located is repaired to the first source file. Nothing else about
+ the answer changes — the record is still there, still searchable — so this is invisible until
+ someone answers from a different generation's message. `buildSegment` cannot catch it: it
+ faithfully carries whatever `fileIdx` it is handed, so every segment assertion stays green.
+ - The same repair reached by the other route: the locator names a file that is not in the table
+ (a source that moved) and gets filed under the first entry instead.
+ - Two generations that hold a file of the same name are matched by basename rather than by full
+ path, which files one generation's records under the other.
+
+The fourth runs the other way. The projection used to copy the locator's byte range onto the row, and
+that pair of fields rode along on every segment line for nothing — read back by no code in the
+shipped search path, 4.36% of a real segment surface. This mutation puts them back, which is the
+shape of mistake that retirement is supposed to prevent: a guard that only checks the fields it
+expects will not notice a field that came back.
+
+Its twin lives in `mutate-search-segments.py`, because the same two fields can come back at the
+other end — written by `buildSegment` instead of by this projection — and a control that only owns
+one of the two doors can be walked around through the other.
+
+Each mutation must be caught *by name*. A probe that dies on an exception names nothing, and a
+control that reports that as caught is reporting a crash as if it were evidence.
+"""
+import subprocess
+import sys
+from pathlib import Path
+
+HERE = Path(__file__).resolve().parent
+ROOT = HERE.parent
+MODULE = ROOT / "miniapp" / "node" / "search-segments.mjs"
+PROBE = HERE / "verify-file-index-rows.mjs"
+
+ROW = "{ fileIdx: pathToFileIdx.get(locator.filePath) ?? -1 }"
+ROW_UNLOCATED = "? { fileIdx: -1 }\n : " + ROW + ");"
+
+UNLOCATED_REPAIRED = "? { fileIdx: 0 }\n : " + ROW + ");"
+BYTES_BACK = ("? { fileIdx: -1, byteStart: -1, byteEnd: -1 }\n : "
+ "{ fileIdx: pathToFileIdx.get(locator.filePath) ?? -1, "
+ "byteStart: locator.start, byteEnd: locator.end });")
+
+MOVED_REPAIRED = "{ fileIdx: pathToFileIdx.get(locator.filePath) ?? 0 }"
+
+FULL_PATH = """ if (typeof file.filePath === 'string' && !pathToFileIdx.has(file.filePath)) {
+ pathToFileIdx.set(file.filePath, i);
+ }"""
+BASENAME = """ if (typeof file.fileName === 'string' && !pathToFileIdx.has(file.fileName)) {
+ pathToFileIdx.set(file.fileName, i);
+ }"""
+
+MUTATIONS = [
+ (
+ "a record with no locator is repaired to the first file instead of -1",
+ ROW_UNLOCATED,
+ UNLOCATED_REPAIRED,
+ ),
+ (
+ "a locator whose file moved is filed under the first file instead of -1",
+ ROW,
+ MOVED_REPAIRED,
+ ),
+ (
+ "two generations holding the same file name are matched by basename",
+ FULL_PATH,
+ BASENAME,
+ ),
+ (
+ "the byte range is copied onto the row again, so it rides along on every segment",
+ ROW_UNLOCATED,
+ BYTES_BACK,
+ ),
+]
+
+
+def read_exact(path):
+ """Normalise to LF for matching, and report the file's own newline so it can be put back."""
+ data = path.read_bytes()
+ text = data.decode("utf-8").replace("\r\n", "\n")
+ return text, ("\r\n" if b"\r\n" in data else "\n")
+
+
+def write_exact(path, text, newline):
+ if newline == "\r\n":
+ text = text.replace("\n", "\r\n")
+ path.write_bytes(text.encode("utf-8"))
+
+
+def run_probe():
+ proc = subprocess.run(
+ ["node", str(PROBE)],
+ cwd=str(ROOT),
+ capture_output=True,
+ text=True,
+ encoding="utf-8",
+ errors="replace",
+ )
+ return proc.returncode, (proc.stdout or "") + (proc.stderr or "")
+
+
+def named_failure(output):
+ """The first rule the probe named, or None when it failed without naming one."""
+ return next(
+ (line.strip()[len("FAIL"):].strip() for line in output.splitlines()
+ if line.strip().startswith("FAIL")),
+ None,
+ )
+
+
+def main():
+ code, output = run_probe()
+ if code != 0:
+ print("baseline probe does not pass; fix that first")
+ print(output)
+ return 1
+ print("baseline clean")
+
+ original = MODULE.read_bytes()
+ missed = []
+ unnamed = []
+ for label, old, new in MUTATIONS:
+ text, newline = read_exact(MODULE)
+ if old not in text:
+ print(f"SKIP {label}: anchor not found")
+ missed.append(label)
+ continue
+ if text.count(old) != 1:
+ print(f"SKIP {label}: anchor is not unique ({text.count(old)} matches)")
+ missed.append(label)
+ continue
+ if old == new:
+ print(f"SKIP {label}: the mutation changes nothing")
+ missed.append(label)
+ continue
+ write_exact(MODULE, text.replace(old, new, 1), newline)
+ try:
+ code, output = run_probe()
+ finally:
+ MODULE.write_bytes(original)
+ if code == 0:
+ print(f"MISSED {label}: the probe still passed")
+ missed.append(label)
+ continue
+ name = named_failure(output)
+ if name is None:
+ print(f"UNNAMED {label}: the probe failed without naming a rule")
+ unnamed.append(label)
+ else:
+ print(f"caught {label}\n -> {name.splitlines()[0]}")
+
+ if MODULE.read_bytes() != original:
+ print(f"NOT RESTORED {MODULE}")
+ return 1
+ print("file restored byte-for-byte")
+
+ if missed or unnamed:
+ if missed:
+ print(f"\n{len(missed)} mutation(s) got through")
+ if unnamed:
+ print(f"{len(unnamed)} mutation(s) failed without naming a rule")
+ return 1
+ print(f"\nall {len(MUTATIONS)} mutations caught, each by name")
+ return 0
+
+
+if __name__ == "__main__":
+ sys.exit(main())
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-freshness.py b/plugins/avatasia/mmc-trajectory/tests/mutate-freshness.py
new file mode 100644
index 0000000..666f4d1
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-freshness.py
@@ -0,0 +1,166 @@
+"""Mutation control for verify-freshness.mjs.
+
+Each mutation reintroduces exactly one bug the probe is supposed to catch, BY NAME. The first one
+is the defect as it shipped: a 304 was treated as "nothing happened", so on a quiet session — where
+every poll revalidates into a 304 — the warning outlived the fault that raised it while claiming it
+was still retrying.
+
+The last case is the other direction: an edit that only ADDS A COMMENT must leave the probe green.
+A guard that cannot pass is as broken as one that cannot fail, and that is the only way to prove
+this probe is reading behaviour rather than prose.
+"""
+import subprocess
+import sys
+from pathlib import Path
+
+HERE = Path(__file__).resolve().parent
+ROOT = HERE.parent
+HTML = ROOT / "miniapp" / "client" / "index.html"
+PROBE = HERE / "verify-freshness.mjs"
+
+MUTATIONS = [
+ # ---- the one that shipped ----------------------------------------------------------
+ (
+ "a 304 is taken as nothing having happened, so the warning outlives the fault",
+ " var cleared = noteFresh('trajectory', true, '');\n if (state.loading) {",
+ " var cleared = false;\n if (state.loading) {",
+ ),
+ (
+ # The other half of the same layer: the list failure used to be written to a flag that
+ # nothing read, so a failed session list was invisible to the reader.
+ "a failed session list is recorded and never shown",
+ " noteFresh('sessions', false, freshnessReason(error));\n renderBars();",
+ " renderBars();",
+ ),
+ # ---- the count ------------------------------------------------------------------------
+ (
+ "recovering does not reset the count, so a past outage is remembered forever",
+ " if (ok) {\n slot.streak = 0;\n slot.reason = '';",
+ " if (ok) {\n slot.reason = '';",
+ ),
+ # ---- which kind of failure -------------------------------------------------------------
+ (
+ "a dropped connection is reported as a bad answer, which sends the reader the wrong way",
+ " if (error && typeof error.status === 'number') return 'bad_response';\n return 'offline';",
+ " return 'bad_response';",
+ ),
+ # ---- the cost of the fix ---------------------------------------------------------------
+ (
+ "every 304 re-renders, trading a stuck warning for a ledger rebuilt every 8 seconds",
+ " if (cleared) render();",
+ " render();",
+ ),
+]
+
+
+def read_exact(path):
+ """Normalise to LF for matching, and report the file's own newline so it can be put back."""
+ data = path.read_bytes()
+ text = data.decode("utf-8").replace("\r\n", "\n")
+ return text, ("\r\n" if b"\r\n" in data else "\n")
+
+
+def write_exact(path, text, newline):
+ if newline == "\r\n":
+ text = text.replace("\n", "\r\n")
+ path.write_bytes(text.encode("utf-8"))
+
+
+def run_probe():
+ proc = subprocess.run(
+ ["node", str(PROBE)],
+ cwd=str(ROOT),
+ capture_output=True,
+ text=True,
+ encoding="utf-8",
+ errors="replace",
+ )
+ return proc.returncode, (proc.stdout or "") + (proc.stderr or "")
+
+
+def main():
+ code, output = run_probe()
+ if code != 0:
+ print("baseline probe does not pass; fix that first")
+ print(output)
+ return 1
+ print("baseline clean")
+
+ original = HTML.read_bytes()
+ missed = []
+ unnamed = []
+ for label, old, new in MUTATIONS:
+ text, newline = read_exact(HTML)
+ if old not in text:
+ print(f"SKIP {label}: anchor not found")
+ missed.append(label)
+ continue
+ if old == new:
+ print(f"SKIP {label}: the mutation changes nothing")
+ missed.append(label)
+ continue
+ write_exact(HTML, text.replace(old, new, 1), newline)
+ try:
+ code, output = run_probe()
+ finally:
+ HTML.write_bytes(original)
+ if code == 0:
+ print(f"MISSED {label}: the probe still passed")
+ missed.append(label)
+ continue
+ first = next((line.strip() for line in output.splitlines() if line.strip().startswith("- ")), None)
+ if first is None:
+ print(f"UNNAMED {label}: the probe failed without naming a rule")
+ unnamed.append(label)
+ else:
+ print(f"caught {label}\n -> {first}")
+
+ # ---- the other direction ---------------------------------------------------------------
+ # A note in this file must not change a single verdict. If adding prose can turn the probe
+ # red, the probe is reading the prose. The marker is chosen to be absent from the probe, so
+ # that "it was already there" cannot be mistaken for "it made no difference".
+ text, newline = read_exact(HTML)
+ anchor = " function renderBars() {"
+ note = "/* note-only-edit-marker */"
+ # Bytes, not text: `Path.write_text` translates "\n" to "\r\n" on write, so restoring the
+ # probe through it rewrote all 273 lines and the file came back CRLF. The shipped-file half of
+ # this control already reads bytes for exactly this reason; the probe half has to as well.
+ probe_bytes = PROBE.read_bytes()
+ probe_text = probe_bytes.decode("utf-8")
+ if anchor not in text or note in probe_text:
+ print("SKIP comment-only edit: precondition not met")
+ missed.append("comment-only edit")
+ else:
+ PROBE.write_bytes(
+ probe_text.replace(anchor, " " + note + "\n" + anchor, 1).encode("utf-8")
+ )
+ try:
+ code, output = run_probe()
+ finally:
+ PROBE.write_bytes(probe_bytes)
+ if PROBE.read_bytes() != probe_bytes:
+ print("NOT RESTORED %s" % PROBE)
+ return 1
+ if code != 0:
+ print(f"MISSED comment-only edit: adding a note turned the probe red\n{output}")
+ missed.append("comment-only edit")
+ else:
+ print("caught a comment-only note leaves every verdict unchanged")
+
+ if HTML.read_bytes() != original:
+ print(f"NOT RESTORED {HTML}")
+ return 1
+ print("file restored byte-for-byte")
+
+ if missed or unnamed:
+ if missed:
+ print(f"\n{len(missed)} mutation(s) got through")
+ if unnamed:
+ print(f"{len(unnamed)} mutation(s) failed without naming a rule")
+ return 1
+ print(f"\nall {len(MUTATIONS)} mutations caught, each by name")
+ return 0
+
+
+if __name__ == "__main__":
+ sys.exit(main())
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-generation-counts.py b/plugins/avatasia/mmc-trajectory/tests/mutate-generation-counts.py
new file mode 100644
index 0000000..18343f5
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-generation-counts.py
@@ -0,0 +1,155 @@
+"""Mutation control for what the page says about a CONTEXT GENERATION, and for the two places a
+row has to be named rather than its message.
+
+Three numbers and one sentence, all of which the server hands over and the page renders:
+
+ 1. The picker's per-generation count. It used to be the catalog's `messageCount` — how many
+ rows that file holds — which counts one message twice when the store recorded it twice and
+ says nothing about how many messages the conversation has. It is now `logicalMessageCount`:
+ how many logical messages THAT generation stores.
+ 2. The count beside the pinned generation. It is `stats.messagesAll`, the whole conversation,
+ and it is deliberately not re-scoped to the generation on screen.
+ 3. The banner sentence. Promising a sealed snapshot "will not change with later turns" is true
+ for a sealed generation and false for the live one, which the picker can also pin.
+
+Plus the record key. `record.id` is the MESSAGE's id and one message expands into several rows —
+a thought, a sentence and six tool calls share it. Anything that has to name ONE row (the scroll
+anchor, the overview span, the time brush) has to use `record.index` instead; selection is the
+deliberate exception, and two mutations below pin that from both sides.
+
+Anchors are multi-line and index.html is LF, so they are written with bare \\n and the file is
+read and written with newline='' — matching on normalised text while preserving the file's own
+endings.
+"""
+import io
+import os
+import subprocess
+import sys
+
+HERE = os.path.dirname(os.path.abspath(__file__))
+ROOT = os.path.dirname(HERE)
+CLIENT = os.path.join(ROOT, "miniapp", "client", "index.html")
+PROBE = os.path.join(HERE, "client-check.mjs")
+
+PICKER_COUNT = " var stored = isCount(entry.logicalMessageCount) ? entry.logicalMessageCount : null;"
+PICKER_LABEL = " else if (isCount(stored)) label += '（' + formatInt(stored) + ' 条）';"
+WHOLE_COUNT = " return stats && isCount(stats.messagesAll) ? stats.messagesAll : 0;"
+LIVE_TEST = " var live = !session || !isCount(session.activeGeneration) || session.activeGeneration === shown;"
+
+# The row key. `record.id` is the MESSAGE's id and one message expands into several rows, so
+# anything that has to name one row has to use `record.index`. Selection is the deliberate
+# exception — the last two mutations below are the guard saying so from both sides.
+ROW_KEY = " if (record && isCount(record.index)) return String(record.index);"
+SPAN_KEY = " id: recordKey(record),"
+BRUSH_LOOKUP = " var span = spansById.get(recordKey(record));"
+HIT_TEST = " return nearestSpanAt(overviewTimeAt(overviewFractionAt(clientX)), lane);"
+CLICK_SELECT = " selectRecord(span.record.id);"
+
+MUTATIONS = [
+ # The row key falls back to the message id again. This is the scroll anchor defect: the key
+ # is read back with querySelector, which returns the first match, so a reader whose topmost
+ # row was the seventh of eight comes back at the first.
+ ("the row key falls back to the message id",
+ ROW_KEY,
+ " if (record) return String(record.id);",
+ "the row key prefers the row index over the message id"),
+ ("the ledger row is keyed by its message again",
+ " row.setAttribute('data-row-id', recordKey(record));",
+ " row.setAttribute('data-row-id', record.id || String(record.index));",
+ "a ledger row is keyed by its own row, not by its message"),
+ # The span key. Same reason: the hover hairline, the tooltip and the time brush all have to
+ # find the span the reader is pointing at, not the last one its message expanded into.
+ ("an overview span is keyed by its message again",
+ SPAN_KEY,
+ " id: record.id,",
+ "an overview span is keyed by its row, not by its message"),
+ ("the time brush looks a span up by the message id again",
+ BRUSH_LOOKUP,
+ " var span = spansById.get(record.id);",
+ "the time brush looks a span up by the row key too"),
+ # And the split itself: one number cannot serve both, which is why the hit test hands back the
+ # span rather than its key. Re-anchored when the hit test stopped reading the DOM: the line
+ # this used to replace is gone, and re-anchoring it to the DOM lookup instead would have made
+ # this a second copy of the mutation in mutate-overview.py under a name it no longer earns.
+ # The defect is unchanged — one number doing two jobs — and it now enters through the return
+ # value, so that is where this mutates.
+ ("the hit test returns the key again, so click and hover share one number",
+ HIT_TEST,
+ " var hit = nearestSpanAt(overviewTimeAt(overviewFractionAt(clientX)), lane);\n"
+ " return hit ? String(hit.record.index) : null;",
+ "the hit test returns the span, so click and hover stop sharing one number"),
+ ("clicking a span selects the row rather than the message",
+ CLICK_SELECT,
+ " selectRecord(span.id);",
+ "clicking a span selects the message, not the row"),
+ # The catalog row count back in the picker: a generation whose messages were recorded twice
+ # reads as more messages than the conversation has.
+ ("the picker counts stored rows again",
+ PICKER_COUNT,
+ " var stored = isCount(entry.messageCount) ? entry.messageCount : null;",
+ "generationOptions prefers the stored count over the catalog row count"),
+ # ...or the label stops printing it at all, which is a quieter version of the same drift:
+ # the option carries a count nobody is shown.
+ ("the picker stops printing the count it carries",
+ PICKER_LABEL,
+ " else if (false) label += '（' + formatInt(stored) + ' 条）';",
+ "generationOptions archived label carries the stored count"),
+ # The session-wide number re-scoped to the generation on screen leaves 「全部上下文共 N 条」
+ # with nothing to compare against.
+ ("the whole-context count is taken from the slice instead",
+ WHOLE_COUNT,
+ " return stats && isCount(stats.messages) ? stats.messages : 0;",
+ "the whole-context count reads the session total"),
+ # The live generation described as a sealed snapshot: the promise is exactly wrong for the
+ # generation still being written to.
+ ("the banner calls the live generation a sealed snapshot",
+ LIVE_TEST,
+ " var live = false;",
+ "...and reads which one applies from the active generation"),
+ # ...and the other direction, a sealed snapshot described as still growing.
+ ("the banner calls a sealed snapshot live",
+ LIVE_TEST,
+ " var live = true;",
+ "...and reads which one applies from the active generation"),
+]
+
+
+def run():
+ proc = subprocess.run(["node", PROBE], cwd=HERE, capture_output=True, text=True,
+ encoding="utf-8", errors="replace")
+ return proc.stdout + proc.stderr
+
+
+ok = True
+baseline = run()
+base_ok = "0 failed" in baseline
+print(("ok " if base_ok else "FAIL ") + "baseline green")
+ok = ok and base_ok
+
+caught_all = []
+for title, old, new, expect in MUTATIONS:
+ with io.open(CLIENT, encoding="utf-8", newline="") as handle:
+ original = handle.read()
+ if original.count(old) != 1:
+ raise SystemExit("FAIL anchor for %r matched %d times" % (title, original.count(old)))
+ try:
+ io.open(CLIENT, "w", encoding="utf-8", newline="").write(original.replace(old, new, 1))
+ during = run()
+ named = expect in during
+ failed = "0 failed" not in during
+ print(("ok " if (named and failed) else "FAIL ") + "guard catches: " + title)
+ if not named:
+ for line in during.splitlines()[-6:]:
+ print(" " + line.strip())
+ caught_all.append(named and failed)
+ finally:
+ io.open(CLIENT, "w", encoding="utf-8", newline="").write(original)
+
+with io.open(CLIENT, encoding="utf-8", newline="") as handle:
+ restored = handle.read() == original
+print(("ok " if restored else "FAIL ") + "client restored byte for byte")
+after = run()
+after_ok = "0 failed" in after
+print(("ok " if after_ok else "FAIL ") + "green again after restore")
+
+sys.exit(0 if (ok and all(caught_all) and restored and after_ok) else 1)
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-incremental.py b/plugins/avatasia/mmc-trajectory/tests/mutate-incremental.py
index ab17e27..6fe9d36 100644
--- a/plugins/avatasia/mmc-trajectory/tests/mutate-incremental.py
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-incremental.py
@@ -30,8 +30,22 @@
" state.etagFor = '';\n"),
("a delta is merged onto whatever happens to be in state.payload",
"the merge needs both the delta marker and a payload in hand",
- "var mergeable = body && body.delta && state.payload && Array.isArray(state.payload.turns);",
- "var mergeable = !!body.delta;"),
+ "var hasDelta = !!(body && body.delta && state.payload && Array.isArray(state.payload.turns));",
+ "var hasDelta = !!body.delta;"),
+ # The three below are the numbering check. A tail cut from a numbering that has since moved
+ # lands in the middle of the wrong turn and reports nothing — which is the whole reason the
+ # delta names the record its cursor pointed at.
+ ("the numbering the tail was cut from is never checked",
+ "and it checks the numbering the tail was cut from before merging anything",
+ " if (hasDelta && !deltaMatchesNumbering(state.payload, body)) {",
+ " if (false) {"),
+ ("a tail that names no record at the cursor is taken on trust",
+ "the check is refused, not assumed, when the tail names no record at the cursor",
+ " if (!based || typeof based.index !== 'number' || based.index < 0) return false;",
+ " if (!based || typeof based.index !== 'number' || based.index < 0) return true;"),
+ ("a cursor of zero is treated as a numbering that might have moved",
+ "and a cursor of zero has nothing before it that could have moved",
+ " if (based.index === 0) return true;", " if (based.index === 0) return false;"),
("a tail turn is appended instead of merged into the turn it belongs to",
"mergeDelta at cursor 0 gives back every record exactly once",
" if (at[incoming.id] === undefined) {", " if (true) {"),
@@ -64,6 +78,14 @@
("a turn that gained nothing is sent anyway",
"a turn that gained no records is absent from the tail",
" if (fresh === 0) continue;", " // every turn, gained or not"),
+ ("the server stops saying which record its cursor pointed at",
+ "the tail names the record its cursor pointed at",
+ " basedOn = { index: since, id: record.id === undefined ? null : record.id };",
+ " basedOn = { index: since, id: null };"),
+ ("the tail names the record at upTo rather than the one at the cursor",
+ "and it is looked up at the cursor, not at the end of the payload",
+ " if (record && record.index === since) {",
+ " if (record && record.index === upTo) {"),
("a tail turn travels only its records and loses its identity",
"the merge takes the closed flag from the tail, not from the copy it already had",
" tail.push({ ...turn, records: all.slice() });", " tail.push({ records: all.slice() });"),
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-list-cache-ttl.py b/plugins/avatasia/mmc-trajectory/tests/mutate-list-cache-ttl.py
index 829b1b7..26b6332 100644
--- a/plugins/avatasia/mmc-trajectory/tests/mutate-list-cache-ttl.py
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-list-cache-ttl.py
@@ -36,10 +36,27 @@
# once at startup and restored byte for byte in the same `finally` that already covered the server.
MUTATIONS = [
# The defect verbatim: the cache is shorter than the interval that expires it, so it is never
- # hit. Not a slow cache — a cache that cannot be reached.
+ # hit. Not a slow cache — a cache that cannot be reached. Measured against the LIST's cadence
+ # rather than the page's, which is the one that actually calls this route.
("the list TTL drops below the poll interval",
[("const LIST_CACHE_TTL_MS = 3000;", "const LIST_CACHE_TTL_MS = 1000;")],
- "is at or above POLL_INTERVAL"),
+ "is at or above the list poll interval"),
+
+ # The other direction, and the one a 304 depends on. If the descriptor cache expires sooner
+ # than the walk that feeds the validator, the tag is built from facts newer than the entries
+ # it stands for, and a stale descriptor can be pinned in place by a tag that says nothing
+ # changed. Raising the walk's TTL is the cheapest way in, because it never trips the rule
+ # above on its own.
+ ("the descriptor cache expires sooner than the walk that feeds the validator",
+ [("const SESSION_CACHE_TTL_MS = 5000;", "const SESSION_CACHE_TTL_MS = 2000;")],
+ "is at or below SESSION_CACHE_TTL_MS"),
+
+ # The list body cache is a third thing the poll built, and it holds serialized bytes this
+ # time. Small next to the other two, which is exactly why it is the one that gets forgotten —
+ # the parsed-row cache leaked here once for the same reason.
+ ("dispose stops releasing the list body cache",
+ [(" sessionsBody = { material: '', body: null };\n", "")],
+ "dispose releases the list body cache"),
# The quieter cousin: the label and counters come from a prefix of messages.jsonl, and a
# generation marker lives on the first row. Reading far past it costs a full page of I/O on
@@ -64,8 +81,9 @@
# The parsed-row cache leaked here once — a disposed runtime held ~43 MB for a 39 MB session —
# and the line that fixed it is in server.mjs precisely so the next cache cannot repeat it.
("dispose stops releasing the title cache",
- [("titleCache = { at: 0, key: '', map: new Map() };\n descriptorCache.clear();",
- "descriptorCache.clear();")],
+ [(" listCache = { at: 0, candidates: null };\n"
+ " titleCache = { at: 0, key: '', map: new Map() };\n",
+ " listCache = { at: 0, candidates: null };\n")],
"dispose releases the title cache"),
# ---- D45: a prefix count is not a count. ----
@@ -114,6 +132,63 @@
" var tail = '（' + when + ' · ' + formatInt(count) + ' 条）';")],
"the session picker omits the count segment instead of printing a placeholder",
CLIENT),
+
+ # ---- the branch a session was spawned from -------------------------------------------
+ # Four links between the store's parent column and the mark on the option, and dropping any
+ # one of them produces the SAME silent list: a sub-agent run listed exactly like a top-level
+ # conversation, with no error and no number moved. So they are four separate mutations rather
+ # than one, because a single one would pass as long as the guard happened to watch that link
+ # and not the three that were actually cut.
+ ("the titles query stops reading the parent column",
+ [("select session_id, title, session_kind, parent_session_id from local_runtime_sessions where session_id = ?",
+ "select session_id, title, session_kind from local_runtime_sessions where session_id = ?")],
+ "the titles query reads the parent column"),
+
+ # The one the acceptance review named, and the only one in this file that is invisible to every
+ # regex above it. Those regexes are all satisfied by a query that WORKS; none is satisfied by a
+ # query that fails, which is the whole case — `db.prepare` throws on a column the database does
+ # not have, the throw lands in the empty catch that exists for a different reason, and every
+ # title and every kind in the page reverts to the first sentence of the transcript. With the
+ # fallback gone the query text is exactly the text the guard requires, so the whole section
+ # above still passes and the page is simply broken on every database written before child
+ # sessions existed. The assertion that catches it is the one that builds such a database here.
+ ("a database without the parent column loses every title and kind, not just the parent",
+ [(""" let stmt;
+ try {
+ stmt = db.prepare('select session_id, title, session_kind, parent_session_id from local_runtime_sessions where session_id = ?');
+ } catch {
+ try {
+ stmt = db.prepare('select session_id, title, session_kind from local_runtime_sessions where session_id = ?');
+ } catch {
+ return result;
+ }
+ }
+""", " const stmt = db.prepare('select session_id, title, session_kind, parent_session_id from local_runtime_sessions where session_id = ?');")],
+ "a database WITHOUT the column keeps the title and the kind, and only loses the parent"),
+
+ ("the parent row is read but never mapped",
+ [(" parent: typeof row.parent_session_id === 'string' && row.parent_session_id !== ''\n"
+ " ? row.parent_session_id\n"
+ " : null,\n", "")],
+ 'the parent row is mapped, and an empty id is no parent rather than a parent named ""'),
+
+ ("the descriptor is built without the parent",
+ [(" descriptor.sessionParentId = meta.parent;", "")],
+ "the descriptor carries the parent onto the row the page receives"),
+
+ # This one is the most likely to be reintroduced by accident: it is a whole-field removal in
+ # a function whose job is to decide what may leave the service, and nothing else in it fails.
+ ("the field is stripped before it is sent",
+ [(" sessionParentId: value.sessionParentId ?? null,", "")],
+ "the field survives the strip, with null as the floor"),
+
+ # The direction that looks right and is not: marking every row. Every string the guard looks
+ # for is still present, and the list reads as though every conversation were a sub-agent run.
+ ("the mark is applied to every session rather than the branches",
+ [(" var branch = session && session.sessionParentId ? BRANCH_MARK : '';",
+ " var branch = BRANCH_MARK;")],
+ "the page decides the marker by the field and not unconditionally",
+ CLIENT),
]
ORIGINALS = {
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-message-identity.py b/plugins/avatasia/mmc-trajectory/tests/mutate-message-identity.py
new file mode 100644
index 0000000..9275f63
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-message-identity.py
@@ -0,0 +1,208 @@
+"""Mutation control for verify-message-identity.mjs.
+
+Each mutation reintroduces exactly one bug the guard is supposed to catch. The guard must FAIL
+every time, and the file must come back byte-for-byte identical afterwards. A mutation the guard
+still passes means the assertion was tautological; a mutation whose anchor no longer exists means
+the assertion went dead, which is worse -- the runner reports those as misses too.
+
+The four declared-trim predicates are broken one at a time. Collapsing any two of them would let
+one wrong assertion stand in for another, and then we would not learn which one mattered.
+
+Three of these anchors did not do what their label says, which is the second way this file lies.
+`if (false) return false;` drops a BLOCKING guard -- the branch never runs, so nothing is rejected.
+Replacing a PRECONDITION inside a function that carries on with real work does not disable that
+work: `if (a === null) return false;` becomes a no-op and the comparison below still runs, so the
+mutation is never observed and the anchor is reported as a live miss rather than as the mistake it
+is. Anchor on the line that decides the answer, not on a line near it.
+"""
+import subprocess
+import sys
+from pathlib import Path
+
+HERE = Path(__file__).resolve().parent
+ROOT = HERE.parent
+SERVER = ROOT / "miniapp" / "node" / "server.mjs"
+PROBE = HERE / "verify-message-identity.mjs"
+
+MUTATIONS = [
+ # ---- rows with no usable id must not be keyed together -------------------------
+ (
+ "a row with no id is keyed as null, so every unkeyed row collides with the rest",
+ SERVER,
+ "const id = typeof row?.message_id === 'string' && row.message_id !== '' ? row.message_id : null;",
+ "const id = row?.message_id ?? null;",
+ ),
+ (
+ "an empty-string id is treated as an identity, so two empty ids merge",
+ SERVER,
+ "const id = typeof row?.message_id === 'string' && row.message_id !== '' ? row.message_id : null;",
+ "const id = typeof row?.message_id === 'string' ? row.message_id : null;",
+ ),
+ # ---- what makes a version a version -------------------------------------------
+ (
+ "the version fingerprint stops dropping history_artifact, so an annotated copy looks trimmed",
+ SERVER,
+ " const { history_artifact: _omitted, ...rest } = row;\n return JSON.stringify(rest);",
+ " return JSON.stringify(row);",
+ ),
+ (
+ "the fingerprint drops message.content too, so a trim stops being a second version",
+ SERVER,
+ " const { history_artifact: _omitted, ...rest } = row;\n return JSON.stringify(rest);",
+ " const { history_artifact: _a, message: _b, ...rest } = row;\n return JSON.stringify(rest);",
+ ),
+ # ---- the four declared-trim predicates, one at a time -------------------------
+ (
+ "predicate 1 is dropped: a role change stops being blocked",
+ SERVER,
+ " if (olderRow?.message?.role !== 'toolResult' || newerRow?.message?.role !== 'toolResult') return false;",
+ " if (false) return false;",
+ ),
+ (
+ "predicate 2 is dropped: any content change counts as a declared trim",
+ SERVER,
+ " return left === right;",
+ " return true;",
+ ),
+ (
+ "predicate 3 is dropped: any changed content passes as the runtime's placeholder",
+ SERVER,
+ " if (!TOOL_RESULT_REMOVED.test(text)) return false;",
+ " if (false) return false;",
+ ),
+ (
+ "predicate 4 is dropped: a rewrite nobody declared is still called a declared trim",
+ SERVER,
+ " return newerGeneration !== null && trimmedGenerations.has(newerGeneration);",
+ " return true;",
+ ),
+ # ---- the two views -----------------------------------------------------------
+ (
+ "the whole-lineage view shows the newest version, so a trimmed result replaces the original",
+ SERVER,
+ " const first = entry.versions[0];\n occurrences.push(first.occurrences[0]);",
+ " const first = entry.versions[entry.versions.length - 1];\n occurrences.push(first.occurrences[0]);",
+ ),
+ (
+ "a generation view stops filtering by generation, so it shows another generation's version",
+ SERVER,
+ " const hit = version.occurrences.find((o) => o.generation === generation);",
+ " const hit = version.occurrences[0];",
+ ),
+ # ---- the turn opener ---------------------------------------------------------
+ (
+ "the last prompt of a turn wins the opener, so a steer is filed as the turn's dialogue",
+ SERVER,
+ " if (!openers.has(entry.turnId)) {\n openers.set(entry.turnId, entry.id);\n openerOccurrence.set(entry.turnId, entry.versions[0].occurrences[0]);\n }",
+ " openers.set(entry.turnId, entry.id);\n openerOccurrence.set(entry.turnId, entry.versions[0].occurrences[0]);",
+ ),
+ (
+ "the opener is matched by occurrence wrapper, so no view is ever found to hold it",
+ SERVER,
+ " const rows = new Set(occurrences.map((occurrence) => occurrence.row));",
+ " const rows = new Set(occurrences);",
+ ),
+ # ---- the numbers the payload promises ------------------------------------------
+ (
+ "a generation counts one message once per stored copy of it",
+ SERVER,
+ " const generations = new Set();\n for (const version of entry.versions) {\n for (const occurrence of version.occurrences) generations.add(occurrence.generation);\n }\n for (const generation of generations) bump(generation);",
+ " for (const version of entry.versions) {\n for (const occurrence of version.occurrences) bump(occurrence.generation);\n }",
+ ),
+ (
+ "messagesAll counts stored rows again, so one message stored twice counts twice",
+ SERVER,
+ " const messagesAll = identity.stats.identities + identity.stats.unkeyed;",
+ " const messagesAll = identity.stats.occurrences + identity.stats.unkeyed;",
+ ),
+ (
+ "the physical row count is reported as the logical one",
+ SERVER,
+ " const messageRowsAll = identity.stats.occurrences + identity.stats.unkeyed;",
+ " const messageRowsAll = identity.stats.identities + identity.stats.unkeyed;",
+ ),
+ (
+ "the picker goes back to the catalog's per-file row count",
+ SERVER,
+ " .map((entry) => ({ ...entry, logicalMessageCount: logicalPerGeneration.get(entry.generation) ?? 0 }));",
+ " .map((entry) => ({ ...entry, logicalMessageCount: Number.isInteger(entry.messageCount) ? entry.messageCount : null }));",
+ ),
+]
+
+
+def read_exact(path):
+ """Normalise to LF for matching, and report the file's own newline so it can be put back."""
+ data = path.read_bytes()
+ text = data.decode("utf-8").replace("\r\n", "\n")
+ return text, ("\r\n" if b"\r\n" in data else "\n")
+
+
+def write_exact(path, text, newline):
+ if newline == "\r\n":
+ text = text.replace("\n", "\r\n")
+ path.write_bytes(text.encode("utf-8"))
+
+
+def run_probe():
+ proc = subprocess.run(
+ ["node", str(PROBE)],
+ cwd=str(ROOT),
+ capture_output=True,
+ text=True,
+ encoding="utf-8",
+ errors="replace",
+ )
+ return proc.returncode, (proc.stdout or "") + (proc.stderr or "")
+
+
+def main():
+ code, output = run_probe()
+ if code != 0:
+ print("baseline guard does not pass; fix that first")
+ print(output)
+ return 1
+ print("baseline clean")
+
+ originals = {path: path.read_bytes() for path in {m[1] for m in MUTATIONS}}
+ missed = []
+ for label, path, old, new in MUTATIONS:
+ text, newline = read_exact(path)
+ if old not in text:
+ print(f"SKIP {label}: anchor not found in {path.name}")
+ missed.append(label)
+ continue
+ write_exact(path, text.replace(old, new, 1), newline)
+ try:
+ code, output = run_probe()
+ finally:
+ path.write_bytes(originals[path])
+ if code == 0:
+ print(f"MISSED {label}: the guard still passed")
+ missed.append(label)
+ else:
+ first = next(
+ (line.strip() for line in output.splitlines() if line.strip().startswith("FAIL")),
+ None,
+ )
+ if first is None:
+ # The guard died rather than reporting an assertion. Still a catch, but saying so
+ # plainly matters: "(no detail)" reads like "not really verified".
+ tail = [line.strip() for line in output.splitlines() if line.strip()]
+ first = f"(the guard threw, no assertion failed) {tail[-1] if tail else '(no output)'}"
+ print(f"caught {label}\n -> {first}")
+
+ for path, data in originals.items():
+ if path.read_bytes() != data:
+ print(f"NOT RESTORED {path}")
+ return 1
+ print("all files restored byte-for-byte")
+
+ if missed:
+ print(f"\n{len(missed)} mutation(s) got through")
+ return 1
+ print(f"\nall {len(MUTATIONS)} mutations caught")
+ return 0
+
+
+if __name__ == "__main__":
+ sys.exit(main())
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-overview.py b/plugins/avatasia/mmc-trajectory/tests/mutate-overview.py
new file mode 100644
index 0000000..a553e01
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-overview.py
@@ -0,0 +1,320 @@
+"""Mutation control for the overview strip's filtering path.
+
+Scope, stated up front so the next person does not read this as covering the guard: this
+control covers **only** the strip's answer to 「may this record be drawn」. `verify-overview.mjs`
+holds another hundred assertions — lane assignment, brushed ranges, turn totals, the axis
+labels — and none of them are mutated here. A control that named itself after the whole guard
+would be claiming coverage it does not have, which is the failure mode a mutation control is
+supposed to prevent.
+
+The one thing worth pinning here is the sentence already written above `spanPassesFilter()`:
+it must not hold a predicate of its own. It did once — a copy of the whole decision that
+drifted from the list's — and the copy drifted again the moment the search moved to the
+server, because the copy still scanned text while the list was asking a set. The strip is now
+a one-line adapter, and the only way to get a predicate back into it is to write a new one, so
+that is what the first mutation writes.
+
+The second mutation is a different shape and the more dangerous one, because it leaves the
+predicate alone. A local flag in front of the call — 「only bother asking when something is
+filtered」 — is an optimisation that costs nothing while the axes it lists agree with the
+filter. They did not: the flag was `isFiltering()` with three of its five axes dropped, so a
+time range or an 异常 rule alone left it false and the strip went on drawing every span the
+list had already dropped. Reading to the reader that is 「筛选了但什么都没变」, which is
+indistinguishable from a filter that is not wired up. The predicate was never wrong, so no
+assertion about the predicate could have caught it — only running the render and holding the
+strip against the list can.
+"""
+import subprocess
+import sys
+from pathlib import Path
+
+HERE = Path(__file__).resolve().parent
+ROOT = HERE.parent
+CLIENT = ROOT / "miniapp" / "client" / "index.html"
+PROBE = HERE / "verify-overview.mjs"
+
+SPAN_ADAPTER = """ function spanPassesFilter(record) {
+ var owner = record ? turnById.get(record.turnId) : null;
+ return recordVisible(record, owner || null, null);
+ }"""
+
+# The one call site inside the span loop, with its exact indentation — an anchor that does not
+# carry its own leading whitespace would also match the predicate's other references.
+STRIP_GATE = """ if (!spanPassesFilter(span.record)) continue;"""
+
+COLUMN_COUNT = """ if (!lanes || typeof lanes.getBoundingClientRect !== 'function') return spanCount;
+ var width = lanes.getBoundingClientRect().width;
+ if (!(width > 0)) return spanCount;
+ return Math.max(1, Math.round(width));"""
+
+SPAN_AT = """ var lane = overviewLaneAt(clientX, clientY);
+ if (lane < 0) return null;
+ return nearestSpanAt(overviewTimeAt(overviewFractionAt(clientX)), lane);"""
+
+# The last line of the same body, on its own. Two mutations need to sit on this function and they
+# replace different things: one reinstates the whole body to move the RESOLUTION back to the DOM,
+# the other leaves the resolution alone and changes only the RETURN. Sharing SPAN_AT between them
+# would make the second one's replacement collide with the first one's anchor.
+SPAN_AT_RETURN = " return nearestSpanAt(overviewTimeAt(overviewFractionAt(clientX)), lane);"
+
+# ---- the model's own reuse -----------------------------------------------------------------
+# The two below do not touch what the model computes; they change whether it is computed again.
+# That is the whole shape of this cache, and it is the shape a shape-only assertion cannot see: a
+# stripped-down version that stores both inputs and then rebuilds anyway produces an identical
+# model, so every value check still passes. Only counting the rebuilds tells them apart.
+CACHE_HIT = """ if (overviewCache.flat === flat && overviewCache.axis === state.actualDuration) {
+ return overviewCache.model;
+ }"""
+
+CACHE_HIT_ROWS_ONLY = " if (overviewCache.flat === flat && overviewCache.axis === state.actualDuration) {"
+
+MUTATIONS = [
+ (
+ "the model is rebuilt on every render, so the seven callers that change nothing pay for it",
+ CACHE_HIT,
+ """ if (false) {
+ return overviewCache.model;
+ }""",
+ "the same rows again do not rebuild it",
+ ),
+ (
+ "the model is keyed on the rows alone, so turning the duration axis keeps a model built on the other one",
+ CACHE_HIT_ROWS_ONLY,
+ " if (overviewCache.flat === flat) {",
+ "turning the duration axis on rebuilds",
+ ),
+ (
+ "the strip keeps a predicate of its own instead of asking the list",
+ SPAN_ADAPTER,
+ """ function spanPassesFilter(record) {
+ if (state.query && !(record && String(record.summary || '').indexOf(state.query) >= 0)) return false;
+ if (state.kinds.indexOf(record.kind) < 0) return false;
+ return true;
+ }""",
+ ),
+ (
+ "the strip is handed no turn, so a per-turn filter cannot reach it",
+ SPAN_ADAPTER,
+ """ function spanPassesFilter(record) {
+ return recordVisible(record, null, null);
+ }""",
+ ),
+ (
+ "the strip asks the filter only when a local flag says something is filtered",
+ STRIP_GATE,
+ """ var filtering = state.query !== '' || state.kinds.length !== KIND_ORDER.length;
+ if (filtering && !spanPassesFilter(span.record)) continue;""",
+ ),
+ # ---- one node per pixel column, not one per record -------------------------------------
+ # The three above are about WHICH records belong on the strip. These four are about HOW it
+ # draws the ones that do, which is where the 3,937 ms went: one node per record meant 36,525
+ # nodes stacked ~42 deep on every pixel of an 872px strip.
+ (
+ "the strip draws one node for the whole axis, which is a solid block",
+ COLUMN_COUNT,
+ """ var width = lanes.getBoundingClientRect().width;
+ if (!(width > 0)) return spanCount;
+ return 1;""",
+ ),
+ (
+ "the strip stops counting columns and is back to a node per record",
+ COLUMN_COUNT,
+ """ return spanCount;""",
+ ),
+ (
+ "the selected record no longer gets a node of its own, so it loses its highlight",
+ " overviewAppendMarker(lanes, state.selectedId, 'data-current-marker', columns, view, model, fullDuration);",
+ " /* the selected record is left to whichever column it happens to own */",
+ ),
+ (
+ "a hovered record that owns no column loses its highlight with it",
+ " if (!id || found) return;\n var span = overviewSpansById.get(id);",
+ " if (!id || found) return;\n if (true) return;\n var span = overviewSpansById.get(id);",
+ ),
+ (
+ # The one an acceptance review caught: hover resolved the record from the DOM, so after
+ # aggregation — where only a column winner has a node — every other record became
+ # unreachable, and the marker above could never fire for the case it was written for.
+ # Reinstating the previous implementation verbatim is the honest shape of this mutation:
+ # it is not a plausible typo, it is the code that shipped an hour earlier.
+ "hover takes the record from the node under the pointer, so a record with no column cannot be hovered",
+ SPAN_AT,
+ """ function spanAt(clientX, clientY) {
+ var node = document.elementFromPoint(clientX, clientY);
+ while (node && node !== dom.overviewTrack) {
+ if (node.classList && node.classList.contains('ov-span')) {
+ var key = node.getAttribute('data-record-id');
+ return key === null ? null : (overviewSpansById.get(key) || null);
+ }
+ node = node.parentNode;
+ }
+ return null;
+ }""",
+ ),
+ (
+ # The one a second acceptance review caught, and the reason this list needed a
+ # behavioural check rather than another regex. Every earlier mutation here changes HOW the
+ # hit test resolves; this one leaves the resolution exactly right — the model, the lane, the
+ # nearest span — and changes only what it hands back, turning the span into its row key.
+ # `client-check.mjs` reads that one as source text, and both of its rejection conditions are
+ # written against spellings: no `getAttribute('data-record-id')`, no `.record.id`. This
+ # passes both. `hit.id` and `hit.record.index` pass both. Enumerating them does not end.
+ # The assertion that catches it runs the function and asks what came back, because every
+ # key-returning shape answers a string and a span is not a string.
+ "the hit test hands back the row key, which click and hover then cannot share",
+ SPAN_AT_RETURN,
+ """ var hit = nearestSpanAt(overviewTimeAt(overviewFractionAt(clientX)), lane);
+ return hit ? recordKey(hit.record) : null;""",
+ ),
+ (
+ # The one a third review round caught, and the reason the check above asserts identity and
+ # not shape. This wrapper carries every field a shape check looks at and names the right
+ # record, so "is it an object with `record` and `id`" answers yes and "is `record.id` g3"
+ # answers yes — while the value on hand is a NEW object, not the span the hit test found.
+ # Everything the page does next would work on a wrapper today, which is exactly why a guard
+ # that only asks about the shape reports safety it has not checked.
+ "the hit test hands back a wrapper shaped like the span instead of the span",
+ SPAN_AT_RETURN,
+ """ var hit = nearestSpanAt(overviewTimeAt(overviewFractionAt(clientX)), lane);
+ return hit ? { id: hit.id, record: hit.record } : null;""",
+ ),
+ # ---- the two distances, which are the one part of the hit test nothing above reaches ------
+ # `nearestSpanAt` compares two candidate distances, and both are written as the larger time
+ # minus the smaller one so they are positive and the `<` keeps the closer. Subtracting the
+ # other way round leaves both NEGATIVE, which still admits the first candidate against
+ # Infinity and then keeps every LATER candidate that is FURTHER away: the strip answers with
+ # the record farthest from the pointer, and hover and click are wrong at the same time.
+ #
+ # This shipped. Every mutation above changes how the hit test resolves and none of them changes
+ # what it compares, and no assertion put the pointer in a gap between two spans — which is the
+ # only place the two candidate distances are both computed. A shape check cannot see it either:
+ # both subtractions are `span.start`/`span.end` against `time`, and which way round they go is
+ # exactly what reading the source cannot tell you.
+ #
+ # Two mutations, one per line, because each line is load-bearing on its own: with only the
+ # `span.end` one flipped, four assertions fail, and with only the `span.start` one flipped,
+ # six. The assertion both of them are caught by is the one with TWO candidates on the
+ # `span.start > time` side, because with a single candidate on that side the flipped
+ # subtraction and the correct one happen to name the same record.
+ (
+ "the gap after a span is measured the far way round, so the pointer picks the record farthest from it",
+ " var after = time - span.end;",
+ " var after = span.end - time;",
+ "with two spans on the same side, it is still the nearer one that wins",
+ ),
+ (
+ "the gap before a span is measured the far way round, so the pointer picks the record farthest from it",
+ " var before = span.start - time;",
+ " var before = time - span.start;",
+ "with two spans on the same side, it is still the nearer one that wins",
+ ),
+]
+
+
+def read_exact(path):
+ """Normalise to LF for matching, and report the file's own newline so it can be put back."""
+ data = path.read_bytes()
+ text = data.decode("utf-8").replace("\r\n", "\n")
+ return text, ("\r\n" if b"\r\n" in data else "\n")
+
+
+def write_exact(path, text, newline):
+ if newline == "\r\n":
+ text = text.replace("\n", "\r\n")
+ path.write_bytes(text.encode("utf-8"))
+
+
+def run_probe():
+ proc = subprocess.run(
+ ["node", str(PROBE)],
+ cwd=str(ROOT),
+ capture_output=True,
+ text=True,
+ encoding="utf-8",
+ errors="replace",
+ )
+ return proc.returncode, (proc.stdout or "") + (proc.stderr or "")
+
+
+def named_failure(output):
+ """The first rule the probe named, or None when it failed without naming one.
+
+ `check()` failures print as `FAIL <name>`, so that prefix is what carries the name. A
+ probe that dies on an exception names nothing, and a control that calls that 「caught」
+ would be reporting a crash as if it were evidence.
+ """
+ hits = named_failures(output)
+ return hits[0] if hits else None
+
+
+def named_failures(output):
+ """Every rule the probe named, in order."""
+ return [
+ line.strip()[len("FAIL"):].strip()
+ for line in output.splitlines()
+ if line.strip().startswith("FAIL")
+ ]
+
+
+def main():
+ code, output = run_probe()
+ if code != 0:
+ print("baseline probe does not pass; fix that first")
+ print(output)
+ return 1
+ print("baseline clean")
+
+ original = CLIENT.read_bytes()
+ missed = []
+ unnamed = []
+ for entry in MUTATIONS:
+ label, old, new = entry[0], entry[1], entry[2]
+ # Optional fourth element: the assertion that OWNS the rule this mutation targets. A probe
+ # that goes red on something else has not caught this bug, and reporting that as caught is
+ # how a mutation control ends up proving nothing while counting.
+ expect = entry[3] if len(entry) > 3 else None
+ text, newline = read_exact(CLIENT)
+ if old not in text:
+ print(f"SKIP {label}: anchor not found")
+ missed.append(label)
+ continue
+ if old == new:
+ print(f"SKIP {label}: the mutation changes nothing")
+ missed.append(label)
+ continue
+ write_exact(CLIENT, text.replace(old, new, 1), newline)
+ try:
+ code, output = run_probe()
+ finally:
+ CLIENT.write_bytes(original)
+ if code == 0:
+ print(f"MISSED {label}: the probe still passed")
+ missed.append(label)
+ continue
+ name = named_failure(output)
+ if name is None:
+ print(f"UNNAMED {label}: the probe failed without naming a rule")
+ unnamed.append(label)
+ elif expect is not None and expect not in named_failures(output):
+ print(f"MISSED {label}: probe failed, but not on {expect!r}\n -> {named_failures(output)}")
+ missed.append(label)
+ else:
+ print(f"caught {label}\n -> {name}")
+
+ if CLIENT.read_bytes() != original:
+ print(f"NOT RESTORED {CLIENT}")
+ return 1
+ print("file restored byte-for-byte")
+
+ if missed or unnamed:
+ if missed:
+ print(f"\n{len(missed)} mutation(s) got through")
+ if unnamed:
+ print(f"{len(unnamed)} mutation(s) failed without naming a rule")
+ return 1
+ print(f"\nall {len(MUTATIONS)} mutations caught, each by name")
+ return 0
+
+
+if __name__ == "__main__":
+ sys.exit(main())
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-parsed-rows.py b/plugins/avatasia/mmc-trajectory/tests/mutate-parsed-rows.py
index ef3b6b9..1d49ae0 100644
--- a/plugins/avatasia/mmc-trajectory/tests/mutate-parsed-rows.py
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-parsed-rows.py
@@ -49,7 +49,7 @@
(
"server: `empty` is not carried on the cached value, so a hit stops reporting it",
SERVER,
- " empty: head.text === '',\n",
+ " empty: head.buffer.length === 0,\n",
" empty: false,\n",
),
(
@@ -109,8 +109,8 @@
(
"the route parses the file inline again instead of going through the cache",
SERVER,
- " parsedFile = await loadParsedRows(parsedRows, filePath, limit);",
- " parsedFile = await (async () => { const h = await readHead(filePath, limit); const p = parseMessagesJsonl(h.text); return { rows: p.rows, skipped: p.skipped, size: h.size, read: h.read, empty: h.text === '', truncated: truncatedByCap(h.size, limit) }; })();",
+ " parsedFile = await loadParsedRows(parsedRows, filePath, limit, { cacheable: link.fileName !== activeFileName });",
+ " parsedFile = await (async () => { const h = await readHead(filePath, limit); const p = parseMessagesJsonl(h.buffer); return { rows: p.rows, locators: p.spans.map(([s, e]) => ({ start: s, end: e, digest: lineDigest(h.buffer.subarray(s, e)) })), skipped: p.skipped, size: h.size, read: h.read, empty: h.buffer.length === 0, truncated: truncatedByCap(h.size, limit) }; })();",
),
]
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-poll-decoupling.py b/plugins/avatasia/mmc-trajectory/tests/mutate-poll-decoupling.py
new file mode 100644
index 0000000..d7a9da0
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-poll-decoupling.py
@@ -0,0 +1,187 @@
+"""Put the two poll ticks back on one clock in the shipped client and require
+verify-poll-decoupling.mjs to report each way it comes back by name.
+
+The defect is not a wrong number. Two fetches of different cost shared a 2500 ms interval, so the
+expensive one — which reparses a lineage, rebuilds an 18,924-row payload, and reopens the runtime
+database on every request — was paced by a clock instead of by evidence, and the cheap one was
+paced by a number chosen for the expensive one. Nothing here is about tuning: it is about the two
+ticks existing, being ordered so the costly fetch is the slow one, and the cheap fetch waking the
+costly one when something actually moved.
+
+The three that read like tidying and are not:
+
+ * stopPolling clearing one timer. A page that navigated away keeps its list tick alive forever,
+ and the symptom is a process that will not go quiet — not a red test.
+ * the ledger build guard moving onto the list tick. It exists because a table mid-build must not
+ be replaced mid-build, which is a ledger concern; on the list tick it holds back the one fetch
+ that has no ledger to redraw, and the 「刚刚」 label stops moving with it.
+ * a 304 waking the trajectory. It is correct — the trajectory would answer 304 too — and it
+ costs a directory read and an open of the runtime database on every poll forever, which is the
+ exact bill this change was made to stop.
+
+Anchors are multi-line and index.html is LF, so they are written with bare \\n and the file is read
+and written with newline='' — matching on normalised text while preserving the file's own endings.
+No anchor may contain a line ending of its own: one did, and it stopped resolving the moment the
+.gitattributes pinning LF landed.
+"""
+import io
+import os
+import subprocess
+import sys
+
+HERE = os.path.dirname(os.path.abspath(__file__))
+PLUGIN = os.path.dirname(HERE)
+CLIENT = os.path.join(PLUGIN, "miniapp", "client", "index.html")
+PROBE = os.path.join(HERE, "verify-poll-decoupling.mjs")
+
+MUTATIONS = [
+ # ---- one clock again, with the expensive fetch on the fast one ----
+ #
+ # The original defect, expressed as a swap rather than a merge: the trajectory now ticks every
+ # 2500 ms and the list every 8000, so nothing is slower than it was and the label is the thing
+ # that suffers.
+ ("the two cadences are swapped",
+ [(" var SESSION_POLL_INTERVAL = 2500;\n var TRAJECTORY_POLL_INTERVAL = 8000;",
+ " var SESSION_POLL_INTERVAL = 8000;\n var TRAJECTORY_POLL_INTERVAL = 2500;")],
+ "the trajectory is polled no faster than the list", CLIENT),
+
+ # ---- a tick that is registered and never cleared ----
+ #
+ # The list keeps running after the reader navigates away, because only the trajectory timer
+ # has something left to stop it. `stopPolling` is not on the hot path, so nothing else fails.
+ ("stopPolling forgets the list tick",
+ [(" if (sessionPollTimer !== null) {\n"
+ " window.clearInterval(sessionPollTimer);\n"
+ " sessionPollTimer = null;\n"
+ " }\n", "")],
+ "stopPolling clears the list tick", CLIENT),
+
+ ("stopPolling forgets the trajectory tick",
+ [(" if (trajectoryPollTimer !== null) {\n"
+ " window.clearInterval(trajectoryPollTimer);\n"
+ " trajectoryPollTimer = null;\n"
+ " }\n", "")],
+ "stopPolling clears the trajectory tick", CLIENT),
+
+ # ---- the build guard, which belongs to the trajectory alone ----
+ #
+ # Moved onto the list tick. It is correct to hold the trajectory back mid-build and wrong to
+ # hold the list back, which renders an <option> list and never touches the ledger — and the
+ # 「刚刚」 label stops moving for as long as a big window is laid out.
+ ("the ledger build guard is applied to the list tick",
+ [(" fetchSessions().then(function (changed) {",
+ " if (ledgerBuilding()) { pollDeferred = true; return; }\n"
+ " fetchSessions().then(function (changed) {")],
+ "the list tick is not held back by a ledger build", CLIENT),
+
+ # ...and its inverse, which is the original arrangement with the ticks still split: the
+ # trajectory tick replaces the ledger it is not allowed to replace, so an 全部 window restarts
+ # its build on every tick and the count resets from 3,000 to 0 forever.
+ ("the trajectory tick no longer respects a ledger build",
+ [(" if (ledgerBuilding()) {\n"
+ " pollDeferred = true;\n"
+ " return;\n"
+ " }\n fetchTrajectory(false);",
+ " fetchTrajectory(false);")],
+ "the trajectory tick is still held back by a ledger build", CLIENT),
+
+ # ---- the wake-up ----
+ #
+ # The whole reason a slower trajectory tick is tolerable. Without it, new turns wait for the
+ # slow tick regardless of how quickly the cheap fetch proved they had arrived.
+ ("a changed list no longer wakes the trajectory",
+ [(" if (changed) fetchTrajectory(false);", "")],
+ "the list tick wakes the trajectory when the list changed", CLIENT),
+
+ # Correct, and the bill this change existed to stop: a 304 means nothing moved, and answering
+ # it still opens the runtime database and walks the lineage to return another 304.
+ ("every list tick wakes the trajectory, changed or not",
+ [(" if (changed) fetchTrajectory(false);",
+ " fetchTrajectory(false);")],
+ "the trajectory is only woken when the list reports a change", CLIENT),
+
+ # ---- the hidden tab ----
+ #
+ # A backgrounded tab that keeps polling a 190 MB session store forever, which is where the
+ # 16 GB of reads in 68 minutes went in the first place.
+ ("a hidden tab no longer stops the trajectory tick",
+ [(" trajectoryPollTimer = window.setInterval(function () {\n"
+ " if (document.hidden) return;",
+ " trajectoryPollTimer = window.setInterval(function () {")],
+ "a hidden tab skips the trajectory tick", CLIENT),
+
+ # ---- the deferred tick ----
+ #
+ # A build that overran the trajectory tick leaves the reader on a session that finished before
+ # it, with nothing left to bring them forward.
+ ("a deferred tick stops refreshing the trajectory",
+ [(" pollDeferred = false;\n fetchSessions();\n fetchTrajectory(false);",
+ " pollDeferred = false;\n fetchSessions();")],
+ "a deferred tick still refreshes the trajectory", CLIENT),
+
+ # ---- the reader-visible reason the two are ordered this way ----
+ #
+ # The picker's recency is rendered against a render-time clock. Stop re-rendering it and the
+ # label is not slower, it is wrong: it keeps printing the minute it was rendered in.
+ ("the picker stops recomputing recency from the clock",
+ [(" var now = Date.now();\n for (var i = 0; i < state.sessions.length; i += 1) {",
+ " var now = state.pickerRenderedAt || (state.pickerRenderedAt = Date.now());\n"
+ " for (var i = 0; i < state.sessions.length; i += 1) {")],
+ "the picker recomputes recency from a render-time clock", CLIENT),
+]
+
+ORIGINAL = io.open(CLIENT, encoding="utf-8", newline="").read()
+
+
+def run():
+ proc = subprocess.run(["node", PROBE], cwd=HERE,
+ capture_output=True, text=True, encoding="utf-8", errors="replace")
+ return proc.returncode, proc.stdout + proc.stderr
+
+
+ok = True
+code, baseline = run()
+base_ok = code == 0 and "0 failed" in baseline
+print(("ok " if base_ok else "FAIL ") + "baseline green")
+ok = ok and base_ok
+
+caught = []
+# Every mutation here is in the client, so the trailing element is the target and is kept
+# explicit for symmetry with the controls that span two files.
+for title, edits, expect, target in MUTATIONS:
+ for old, new in edits:
+ hits = ORIGINAL.count(old)
+ if hits != 1:
+ raise SystemExit("FAIL anchor for %r matched %d times" % (title, hits))
+ if old == new:
+ raise SystemExit("FAIL empty mutation for %r: the anchor equals its replacement" % title)
+ try:
+ mutated = ORIGINAL
+ for old, new in edits:
+ mutated = mutated.replace(old, new, 1)
+ if mutated == ORIGINAL:
+ raise SystemExit("FAIL mutation for %r changed nothing" % title)
+ io.open(CLIENT, "w", encoding="utf-8", newline="").write(mutated)
+ during_code, during = run()
+ named = expect in during
+ red = during_code != 0
+ # A guard that crashes is not a guard that caught anything: the rule has to be reported by
+ # name, or the mutation only proved that the file no longer parses.
+ print(("ok " if (named and red) else "FAIL ") + "guard catches: " + title)
+ if not named:
+ print(" no assertion reported %r" % expect)
+ for line in during.splitlines()[-4:]:
+ print(" " + line.strip())
+ elif not red:
+ print(" the rule was reported but the guard still exited 0")
+ caught.append(named and red)
+ finally:
+ io.open(CLIENT, "w", encoding="utf-8", newline="").write(ORIGINAL)
+
+restored = io.open(CLIENT, encoding="utf-8", newline="").read() == ORIGINAL
+after_code, after = run()
+after_ok = after_code == 0 and "0 failed" in after
+print(("ok " if restored else "FAIL ") + "index.html restored byte for byte")
+print(("ok " if after_ok else "FAIL ") + "green again after restore")
+
+sys.exit(0 if (ok and all(caught) and restored and after_ok) else 1)
\ No newline at end of file
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-pr15-fixes.py b/plugins/avatasia/mmc-trajectory/tests/mutate-pr15-fixes.py
index 62e3aac..3e5b3c7 100644
--- a/plugins/avatasia/mmc-trajectory/tests/mutate-pr15-fixes.py
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-pr15-fixes.py
@@ -16,11 +16,17 @@
MUTATIONS = [
(
- "server: list the whole catalog again (orphan counted + offered)",
+ # Only the "offered" half of the original label is still observable. The count is built
+ # from the identity table over the lineage and no longer reads the catalog at all, so a
+ # catalog entry cannot reach it — that is pinned by its own assertion in
+ # verify-generations.mjs, not by this one.
+ "server: offer the whole catalog again, orphan pick included",
SERVER,
" const generations = (Array.isArray(input.generations) ? input.generations : [])\n"
- " .filter((entry) => !orphanFiles.has(entry.fileName));",
- " const generations = Array.isArray(input.generations) ? input.generations : [];",
+ " .filter((entry) => !orphanFiles.has(entry.fileName))\n"
+ " .map((entry) => ({ ...entry, logicalMessageCount: logicalPerGeneration.get(entry.generation) ?? 0 }));",
+ " const generations = (Array.isArray(input.generations) ? input.generations : [])\n"
+ " .map((entry) => ({ ...entry, logicalMessageCount: logicalPerGeneration.get(entry.generation) ?? 0 }));",
),
(
"server: match orphans by generation number instead of file name",
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-raw-lazy.py b/plugins/avatasia/mmc-trajectory/tests/mutate-raw-lazy.py
index 3c23487..c3dae0f 100644
--- a/plugins/avatasia/mmc-trajectory/tests/mutate-raw-lazy.py
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-raw-lazy.py
@@ -55,8 +55,8 @@
(
"server: /raw hands back a stored message instead of building one",
SERVER,
- " const built = buildRawPayload(row.message, redact);\n",
- " const built = { value: row.message, omitted: false };\n",
+ " const built = buildRawPayload(found.row.message, redact);\n",
+ " const built = { value: found.row.message, omitted: false };\n",
),
(
"server: /raw stops reporting whether the message was too large",
@@ -67,8 +67,8 @@
(
"server: /raw keeps the rows out of the cache entry, so it cannot resolve a locator",
SERVER,
- "trajectoryCache.set(cacheKey, { at: Date.now(), etag, body, raws, rows });",
- "trajectoryCache.set(cacheKey, { at: Date.now(), etag, body, raws });",
+ "body, raws, rowPos: rowPosByRecord, decoded: new Map() });",
+ "body, decoded: new Map() });",
),
# ---- the cap must still hold, wherever it now lives ----------------------
(
@@ -97,10 +97,14 @@
" if (false) {\n",
),
(
+ # Anchored on the insertBefore above it, not on the dash alone. `pre.textContent = DASH;`
+ # followed by `return;` now appears twice — once where an omitted message is drawn and once
+ # where a detail read came back empty — and an anchor loose enough to match either made this
+ # rewrite the wrong one, which the guard's own substring could not tell apart.
"client: the raw tab shows the message even when it was omitted",
CLIENT,
- " pre.textContent = DASH;\n return;",
- " pre.innerHTML = jsonColorize(fetched.raw);\n return;",
+ " pre\n );\n pre.textContent = DASH;\n return;",
+ " pre\n );\n pre.innerHTML = jsonColorize(fetched.raw);\n return;",
),
(
"client: copySelected stops honouring the omitted verdict",
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-raw-locators.py b/plugins/avatasia/mmc-trajectory/tests/mutate-raw-locators.py
new file mode 100644
index 0000000..ff47401
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-raw-locators.py
@@ -0,0 +1,244 @@
+"""Mutation control for verify-raw-locators.mjs.
+
+Each mutation reintroduces exactly one bug the guard is supposed to catch, and the guard must FAIL
+every time. A mutation the guard still passes means the assertion was tautological; a mutation whose
+anchor no longer exists means the assertion went dead, which is worse — the runner reports both as
+misses, and they look the same from outside.
+
+The two that matter most are here in the middle, and they are deliberately near-neighbours:
+
+ * a span recorded as a character offset rather than a byte offset, and
+ * a digest taken over the wrong slice.
+
+Both leave /raw answering 200 with a plausible message. Neither throws, neither logs, and neither
+changes a number any surface reports. The only thing standing between them and a wrong answer is
+the guard, which is why they get one each rather than being folded together.
+"""
+import subprocess
+import sys
+from pathlib import Path
+
+HERE = Path(__file__).resolve().parent
+ROOT = HERE.parent
+SERVER = ROOT / "miniapp" / "node" / "server.mjs"
+CLIENT = ROOT / "miniapp" / "client" / "index.html"
+PROBE = HERE / "verify-raw-locators.mjs"
+
+MUTATIONS = [
+ # ---- the positions ---------------------------------------------------------------
+ (
+ "server: a span is off by one byte, so it reads the tail of the previous line",
+ SERVER,
+ " spans.push([start, end]);",
+ " spans.push([start + 1, end]);",
+ ),
+ (
+ "server: the span runs to the start of the next line instead of the end of this one",
+ SERVER,
+ " const end = newline === -1 ? bytes.length : newline;",
+ " const end = newline === -1 ? bytes.length : newline + 1;",
+ ),
+ (
+ "server: the locator's digest is taken over the whole file rather than the line",
+ SERVER,
+ " digest: lineDigest(head.buffer.subarray(start, end)),",
+ " digest: lineDigest(head.buffer),",
+ ),
+ (
+ "server: the digest swallows the line's newline, so the line and the line plus its terminator agree on nothing",
+ SERVER,
+ " digest: lineDigest(head.buffer.subarray(start, end)),",
+ " digest: lineDigest(head.buffer.subarray(start, end + 1)),",
+ ),
+ (
+ "server: the digest is truncated to 32 bits, where a session's worth of lines can collide",
+ SERVER,
+ " return createHash('sha256').update(bytes).digest('hex').slice(0, LINE_DIGEST_CHARS);",
+ " return createHash('sha256').update(bytes).digest('hex').slice(0, 8);",
+ ),
+ # ---- readRange --------------------------------------------------------------------
+ (
+ "server: a locator forgets which file it came from, so /raw has nowhere to read from",
+ SERVER,
+ """ const locators = parsed.spans.map(([start, end]) => ({
+ filePath,
+ start,""",
+ """ const locators = parsed.spans.map(([start, end]) => ({
+ start,""",
+ ), (
+ "server: readRange hands back whatever it managed to read instead of refusing it",
+ SERVER,
+ """ const stat = await handle.stat();
+ if (stat.size < end) return null;
+ const buffer = Buffer.allocUnsafe(end - start);
+ let filled = 0;
+ while (filled < buffer.length) {
+ const { bytesRead } = await handle.read(buffer, filled, buffer.length - filled, start + filled);
+ if (bytesRead <= 0) return null;
+ filled += bytesRead;
+ }
+""",
+ """ const buffer = Buffer.allocUnsafe(end - start);
+ let filled = 0;
+ while (filled < buffer.length) {
+ const { bytesRead } = await handle.read(buffer, filled, buffer.length - filled, start + filled);
+ if (bytesRead <= 0) break;
+ filled += bytesRead;
+ }
+""",
+ ),
+ (
+ "server: readRange clamps a backwards range instead of refusing it",
+ SERVER,
+ " if (!Number.isInteger(start) || !Number.isInteger(end) || start < 0 || end <= start) return null;",
+ " if (!Number.isInteger(start) || !Number.isInteger(end) || start < 0) return null;\n if (end <= start) end = start + 1;",
+ ),
+ (
+ "server: a missing file throws out of readRange instead of answering null",
+ SERVER,
+ " let handle;\n try {\n handle = await open(filePath, 'r');\n } catch {\n return null;\n }",
+ " const handle = await open(filePath, 'r');",
+ ),
+ # ---- what is retained --------------------------------------------------------------
+ (
+ "server: the active file is cached again, which is the 233 MB this change removed",
+ SERVER,
+ "loadParsedRows(parsedRows, filePath, limit, { cacheable: link.fileName !== activeFileName })",
+ "loadParsedRows(parsedRows, filePath, limit)",
+ ),
+ (
+ "server: cacheable:false stores anyway, so the rows come back",
+ SERVER,
+ " if (cacheable) cache.set(key, value, Math.ceil(head.size * PARSED_ROWS_HEAP_PER_SOURCE_BYTE));",
+ " cache.set(key, value, Math.ceil(head.size * PARSED_ROWS_HEAP_PER_SOURCE_BYTE));",
+ ),
+ (
+ "server: cacheable:false still reads through the cache, so a stale sealed parse is served",
+ SERVER,
+ " if (cacheable) {\n const hit = cache.get(key);\n if (hit !== null) return hit;\n }",
+ " const hit = cache.get(key);\n if (hit !== null) return hit;",
+ ),
+ (
+ "server: the active file is decided by being the last one read rather than by name",
+ SERVER,
+ "cacheable: link.fileName !== activeFileName",
+ "cacheable: link.generation !== generations[generations.length - 1].generation",
+ ),
+ (
+ "server: the rows are put back into the cache entry, so the object graph stays resident",
+ SERVER,
+ "body, raws, rowPos: rowPosByRecord, decoded: new Map() });",
+ "body, raws, rowPos: rowPosByRecord, decoded: new Map(), rows });",
+ ),
+ (
+ "server: the rows are never released, so the request holds them until it returns",
+ SERVER,
+ " rows.length = 0;\n rowLocators.length = 0;",
+ " rowLocators.length = 0;",
+ ),
+ (
+ "server: the decode cache is unbounded",
+ SERVER,
+ " while (cached.decoded.size > RAW_DECODE_CACHE_ENTRIES) {",
+ " while (false) {",
+ ),
+ # ---- what /raw does with what it found --------------------------------------------
+ (
+ "server: /raw serves the line without checking it is still the line the record describes",
+ SERVER,
+ "if (bytes === null || lineDigest(bytes) !== locator.digest) {",
+ "if (bytes === null) {",
+ ),
+ (
+ "server: /raw ignores where the line actually starts",
+ SERVER,
+ "const bytes = await readRange(locator.filePath, locator.start, locator.end);",
+ "const bytes = await readRange(locator.filePath, locator.start, locator.end + 1);",
+ ),
+ # ---- the page's own copy -----------------------------------------------------------
+ (
+ "client: the page's raw cache key drops the validator, so a moved-on session keeps its old messages",
+ CLIENT,
+ " return sid + '#' + gen + '#' + (state.etag || '') + '#' + index;",
+ " return sid + '#' + gen + '#' + index;",
+ ),
+ (
+ "client: a refused raw is reloaded and retried, turning a hint into a reload the reader never asked for",
+ CLIENT,
+ "if (!retried && err && err.code === 'trajectory_not_cached') {",
+ "if (!retried && err && (err.code === 'trajectory_not_cached' || err.code === 'raw_stale')) {",
+ ),
+]
+
+
+def read_exact(path):
+ """Normalise to LF for matching, and report the file's own newline so it can be put back."""
+ data = path.read_bytes()
+ text = data.decode("utf-8").replace("\r\n", "\n")
+ return text, ("\r\n" if b"\r\n" in data else "\n")
+
+
+def write_exact(path, text, newline):
+ if newline == "\r\n":
+ text = text.replace("\n", "\r\n")
+ path.write_bytes(text.encode("utf-8"))
+
+
+def run_probe():
+ proc = subprocess.run(
+ ["node", str(PROBE)],
+ cwd=str(ROOT),
+ capture_output=True,
+ text=True,
+ encoding="utf-8",
+ errors="replace",
+ )
+ return proc.returncode, (proc.stdout or "") + (proc.stderr or "")
+
+
+def main():
+ code, output = run_probe()
+ if code != 0:
+ print("baseline probe does not pass; fix that first")
+ print(output)
+ return 1
+ print("baseline clean")
+
+ originals = {path: path.read_bytes() for path in {m[1] for m in MUTATIONS}}
+ missed = []
+ for label, path, old, new in MUTATIONS:
+ text, newline = read_exact(path)
+ if old not in text:
+ print(f"SKIP {label}: anchor not found in {path.name}")
+ missed.append(label)
+ continue
+ write_exact(path, text.replace(old, new, 1), newline)
+ try:
+ code, output = run_probe()
+ finally:
+ path.write_bytes(originals[path])
+ if code == 0:
+ print(f"MISSED {label}: the probe still passed")
+ missed.append(label)
+ else:
+ first = next(
+ (line.strip() for line in output.splitlines() if line.strip().startswith("- ")),
+ "(no detail)",
+ )
+ print(f"caught {label}\n -> {first}")
+
+ for path, data in originals.items():
+ if path.read_bytes() != data:
+ print(f"NOT RESTORED {path}")
+ return 1
+ print("all files restored byte-for-byte")
+
+ if missed:
+ print(f"\n{len(missed)} mutation(s) got through")
+ return 1
+ print(f"\nall {len(MUTATIONS)} mutations caught")
+ return 0
+
+
+if __name__ == "__main__":
+ sys.exit(main())
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-record-detail.py b/plugins/avatasia/mmc-trajectory/tests/mutate-record-detail.py
new file mode 100644
index 0000000..d414167
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-record-detail.py
@@ -0,0 +1,229 @@
+"""Mutation control for the payload slimming and the record-detail endpoint.
+
+The page stopped being sent `text`, `thinking`, `arguments` and `result`, which were 59.1% of the
+body measured over this machine's whole store. Four presence flags took their place and
+`/api/trajectory/record` answers for one record at a time. A move like that fails in ways that
+render fine:
+
+ - a flag that disagrees with the value it was measured from draws an empty tab, or hides one;
+ - a strip that is applied a step too late still produces a correct body and a fat one;
+ - a `rowPos` that is not per-row answers with another record's thinking block;
+ - a summary chain that loses its tool-name step puts `—` where a row used to name its tool.
+
+Each mutation below is one of those, and each has to be caught **by name** — a guard that fails
+for some other reason is not evidence that this one was caught.
+"""
+import subprocess
+import sys
+from pathlib import Path
+
+HERE = Path(__file__).resolve().parent
+ROOT = HERE.parent
+SERVER = ROOT / "miniapp" / "node" / "server.mjs"
+CLIENT = ROOT / "miniapp" / "client" / "index.html"
+PROBE = HERE / "verify-record-detail.mjs"
+
+MUTATIONS = [
+ # --- the flags -------------------------------------------------------------------
+ (
+ "hasText is taken on trust instead of measured, so an empty reply claims a body",
+ SERVER,
+ " hasText: !isNilField(patch.text),",
+ " hasText: true,",
+ ),
+ (
+ "hasResult is taken on trust, so a tool result with no body still offers its tab",
+ SERVER,
+ " hasResult: !isNilField(patch.result),",
+ " hasResult: true,",
+ ),
+ (
+ "hasArguments counts an empty string as absent, which is not the test the page used",
+ SERVER,
+ " hasArguments: patch.arguments !== null && patch.arguments !== undefined,",
+ " hasArguments: !isNilField(patch.arguments),",
+ ),
+ # --- the strip -------------------------------------------------------------------
+ (
+ "the strip leaves the body field on, so the page gets back everything it lost",
+ SERVER,
+ " delete record.text;\n delete record.thinking;",
+ " delete record.thinking;",
+ ),
+ (
+ "the strip runs after the body was serialized, so it changes nothing that was sent",
+ SERVER,
+ " slimPayloadForWire(payload);\n\n let body;",
+ " let body;",
+ ),
+ (
+ "the strip also runs on the search path, which still reads those fields in this process",
+ SERVER,
+ " const needle = foldNeedle(asked);",
+ " const needle = foldNeedle(asked);\n slimPayloadForWire({ turns: [] });",
+ ),
+ # --- which record the endpoint answers for ----------------------------------------
+ (
+ "every record claims position zero, so a line with several records answers for the first",
+ SERVER,
+ " rowPos: rowPos++,",
+ " rowPos: 0,",
+ ),
+ (
+ "the position is offered even for a record with no line to project",
+ SERVER,
+ " if (rowPos !== null && typeof pos === 'number' && Number.isInteger(pos) && pos >= 0) {",
+ " if (rowPos !== null) {",
+ ),
+ (
+ "the endpoint projects the row twice, so every position after the first is one off",
+ SERVER,
+ " rows: [found.row],",
+ " rows: [found.row, found.row],",
+ ),
+ (
+ "a position the one-row projection cannot produce is answered with whatever is nearest",
+ SERVER,
+ " if (record === undefined) {",
+ " if (record === undefined) {\n record = one.turns.flatMap((turn) => turn.records ?? [])[0];\n }\n if (record === undefined) {",
+ ),
+ (
+ "the endpoint answers with a kind, which re-projecting one line cannot reproduce",
+ SERVER,
+ " sendJson(response, 200, {\n index: wanted,",
+ " sendJson(response, 200, {\n index: wanted,\n kind: record.kind,",
+ ),
+ # --- the summary the page used to assemble ----------------------------------------
+ (
+ "the tool-name step is dropped from the summary, so a tool result row shows nothing",
+ SERVER,
+ " if (!record.summary) record.summary = record.toolName || record.title || '';",
+ " if (!record.summary) record.summary = '';",
+ ),
+ # --- the page --------------------------------------------------------------------
+ (
+ "the page decides 「has a body」 for itself again, from a field it no longer receives",
+ CLIENT,
+ "return !!record && record.kind === 'reply' && record.hasText === false;",
+ "return !!record && record.kind === 'reply' && isNil(record.text);",
+ ),
+ (
+ "the row falls back to the tool name itself, undoing the fold on the server",
+ CLIENT,
+ " var summaryText = record.summary || '';",
+ " var summaryText = record.summary || record.toolName || '';",
+ ),
+ (
+ # The replacement text is written in live code on purpose. It used to call
+ # `buildBlock(...)`, which was retired as dead — leaving it would have turned this
+ # control into a crash (`ReferenceError` at render time) instead of a named failure,
+ # and a control that crashes reports nothing. The defect under test is unchanged: the
+ # 结果 tab renders `record.result` directly, which after the payload slimming is always
+ # empty, instead of going through the folding builder.
+ "the 结果 tab renders the record again, which after the slimming is always empty",
+ CLIENT,
+ " if (tabId === 'result') return buildDetailBlock('工具结果', record, 'result', false);",
+ " if (tabId === 'result') return el('div', 'note', String(record.result));",
+ ),
+ (
+ "the tab is offered from a field the page no longer has, so it is always on",
+ CLIENT,
+ " return record.kind === 'toolResult' && record.hasResult === true;",
+ " return record.kind === 'toolResult' && record.result !== null;",
+ ),
+ (
+ "failure is decided by the field that was a duplicate, which no longer exists",
+ CLIENT,
+ " var failed = record.isError === true;",
+ " var failed = !!(record.isError || record.error);",
+ ),
+]
+
+
+def read_exact(path):
+ data = path.read_bytes()
+ text = data.decode("utf-8").replace("\r\n", "\n")
+ return text, ("\r\n" if b"\r\n" in data else "\n")
+
+
+def write_exact(path, text, newline):
+ if newline == "\r\n":
+ text = text.replace("\n", "\r\n")
+ path.write_bytes(text.encode("utf-8"))
+
+
+def run_probe():
+ proc = subprocess.run(
+ ["node", str(PROBE)], cwd=str(ROOT), capture_output=True, text=True,
+ encoding="utf-8", errors="replace",
+ )
+ return proc.returncode, (proc.stdout or "") + (proc.stderr or "")
+
+
+def named_failure(output):
+ """The first assertion the probe named, or None when it failed without naming one."""
+ return next(
+ (line.strip()[1:].strip() for line in output.splitlines()
+ if line.strip().startswith("- ")),
+ None,
+ )
+
+
+def main():
+ code, output = run_probe()
+ if code != 0:
+ print("baseline probe does not pass; fix that first")
+ print(output)
+ return 1
+ print("baseline clean")
+
+ originals = {path: path.read_bytes() for path in {m[1] for m in MUTATIONS}}
+ missed, unnamed = [], []
+ try:
+ for label, path, old, new in MUTATIONS:
+ text, newline = read_exact(path)
+ if old not in text:
+ print(f"SKIP {label}: anchor not found")
+ missed.append(label)
+ continue
+ if old == new:
+ print(f"SKIP {label}: the mutation changes nothing")
+ missed.append(label)
+ continue
+ write_exact(path, text.replace(old, new, 1), newline)
+ try:
+ code, output = run_probe()
+ finally:
+ write_exact(path, text, newline)
+ if code == 0:
+ print(f"MISSED {label}: the probe still passed")
+ missed.append(label)
+ continue
+ name = named_failure(output)
+ if name is None:
+ print(f"UNNAMED {label}: the probe failed without naming a rule")
+ unnamed.append(label)
+ else:
+ print(f"caught {label}\n -> {name}")
+ finally:
+ for path, data in originals.items():
+ path.write_bytes(data)
+
+ not_restored = [str(p) for p, data in originals.items() if p.read_bytes() != data]
+ if not_restored:
+ print("NOT RESTORED " + ", ".join(not_restored))
+ return 1
+ print("files restored byte-for-byte")
+
+ if missed or unnamed:
+ if missed:
+ print(f"\n{len(missed)} mutation(s) got through")
+ if unnamed:
+ print(f"{len(unnamed)} mutation(s) failed without naming a rule")
+ return 1
+ print(f"\nall {len(MUTATIONS)} mutations caught, each by name")
+ return 0
+
+
+if __name__ == "__main__":
+ sys.exit(main())
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-review16.py b/plugins/avatasia/mmc-trajectory/tests/mutate-review16.py
index a7c6636..b1070ff 100644
--- a/plugins/avatasia/mmc-trajectory/tests/mutate-review16.py
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-review16.py
@@ -144,8 +144,8 @@
"nothing still points at a docs/ file that does not ship"),
("the server source points at the document that left the package",
- "// generation, so it is idempotent. Pinned by",
- "// generation, so it is idempotent — see docs/LAYERS.md D10.",
+ "// only write, and one filePath always maps to one generation, so it is idempotent.",
+ "// only write, and one filePath always maps to one generation, so it is idempotent. See docs/LAYERS.md §5.",
"nothing still points at a docs/ file that does not ship"),
# And the reason an audit of server.mjs under-reported it by two thirds: one NUL byte, in a string
@@ -184,9 +184,12 @@
"",
"dispose() clears the parsed-row cache too"),
+ # `clear() {` on its own stopped being unique once createTrajectoryCache grew one of its own,
+ # and this harness reports an ambiguous anchor as unresolved rather than guessing. The bytes
+ # below are what make it specific to the parsed-row cache: its counter has to be reset too.
("the parsed-row cache loses its clear()",
- " clear() {",
- " reset() {",
+ " clear() {\n entries.clear();\n bytes = 0;\n },",
+ " reset() {\n entries.clear();\n bytes = 0;\n },",
"the parsed-row cache really does expose clear()"),
# ---- 6. the empty state points at inert controls again ----
@@ -206,8 +209,14 @@
"the non-anomaly hint is still the one that names types and search"),
# ---- 7. the version goes back ----
+ # Re-anchored at the 1.2.0 bump: the three below were written against the literal `1.1.0` in the
+ # manifest and in both READMEs, so leaving them would have made four mutations stop resolving —
+ # and one of them, the last, would have become an edit that changes nothing, which the runner
+ # rejects. The properties are the reviewer's complaint and are unchanged; only the text they are
+ # written against moved. The numbers are now `1.2.0` and `1.3.0` for the same reason the old pair
+ # was `1.1.0` and `1.2.0`: the replacement has to be a version the tree does not already carry.
("the version is put back to 1.0.0",
- '"version": "1.1.0",',
+ '"version": "1.2.0",',
'"version": "1.0.0",',
"the plugin version was bumped off 1.0.0"),
@@ -216,12 +225,12 @@
# announcing 1.0.0 to every reader who opens the plugin's front page. A rule that checks the
# field nobody complained about is not the rule that was asked for.
("the English README goes back to announcing the old version",
- 'Version: `1.1.0`',
+ 'Version: `1.2.0`',
'Version: `1.0.0`',
"the English README carries the shipped version"),
("the Chinese README goes back to announcing the old version",
- '版本：`1.1.0`',
+ '版本：`1.2.0`',
'版本：`1.0.0`',
"the Chinese README carries the shipped version"),
@@ -229,8 +238,8 @@
# on and the READMEs stay behind. Asserted as equality with plugin.json rather than as "not
# 1.0.0", so this is the case the rule is actually for.
("the manifest moves on and the READMEs do not follow",
- '"version": "1.1.0",',
'"version": "1.2.0",',
+ '"version": "1.3.0",',
"the English README carries the shipped version"),
# ---- the snapshot the last run left, and the run that never looked at it ----
@@ -241,19 +250,19 @@
# file, which reads as that guard being broken.
("the harness never reads the snapshot it writes",
- "readFileSync(SNAPSHOT, 'utf8')",
- "'{}'",
+ "return existsSync(SNAPSHOT) ? JSON.parse(readFileSync(SNAPSHOT, 'utf8')) : null;",
+ "return '{}';",
"the harness reads the snapshot the previous run wrote"),
("the startup check stops comparing per file",
- "previous[rel] !== undefined && previous[rel] !== digest(rel)",
- "false",
+ ".filter((rel) => prev[rel] !== undefined && prev[rel] !== digest(rel));",
+ ".filter(() => false);",
"the startup comparison is per file, against the digest that was recorded"),
# The old form: record the state the run STARTED with. Identical to the end state whenever
# nothing drifted, and a record of the mutation whenever something did.
("the snapshot records the state the run started with",
- "writeFileSync(SNAPSHOT, JSON.stringify(Object.fromEntries(SHIPPED.map((rel) => [rel, digest(rel)]))));",
+ "writeFileSync(SNAPSHOT, JSON.stringify(after));",
"writeFileSync(SNAPSHOT, JSON.stringify(snapshotBefore));",
"the snapshot records the state the run ended with, and only a clean end"),
@@ -266,13 +275,124 @@
# The two findings collapse into one line. Reads fine, costs the reader the only thing that
# distinguishes "this run broke it" from "it was already broken".
+ #
+ # The anchor moved with the labels when the whole-tree comparison replaced the shipped-file list,
+ # and the assertion it drives no longer matches wording at all: it reads both labels back out of
+ # the file and compares them. The bug this introduces is now a label collision rather than a
+ # duplicated sentence, which is the same defect one level up.
("last run's residue is named exactly like this run's",
- "'shipped files differ from the last run'",
- "'shipped files restored'",
+ "'files differ from the last run'",
+ "'package restored byte for byte'",
"this run's own residue and last run's residue are named differently"),
+
+ # The defect this whole change exists for, reintroduced in its new form. The list is gone, so the
+ # way to be wrong again is to narrow the walk: skip a subtree and residue there goes unseen again.
+ # It is caught by the assertion that makes the runner plant residue in exactly such a file and
+ # requires the runner to name it, so this is a check on the comparison's subject rather than on
+ # the source of the walk.
+ ("the residue comparison skips a subtree",
+ " else if (!SELF_EXCLUDE.includes(rel)) out[rel] = digest(rel);",
+ " else if (!SELF_EXCLUDE.includes(rel) && !rel.startsWith('tests/')) out[rel] = digest(rel);",
+ "the residue check names a file the old hand-maintained list did not cover"),
+
+ # The other direction, and the one the whole-tree comparison was first credited with covering.
+ # A control or an interruption that DELETES or RENAMES a package file between runs leaves a path
+ # that is in the previous snapshot and in no tree, so a comparison that walks only the tree as it
+ # stands now walks straight past it. Found by a blind pass that attacked the previous-snapshot
+ # direction rather than the one the self-test already covered.
+ ("the startup comparison walks only the tree as it stands now",
+ "const filesMissingSinceLastRun = (prev) => [...new Set([...Object.keys(snapshotBefore), ...Object.keys(prev)])]",
+ "const filesMissingSinceLastRun = (prev) => [...new Set([...Object.keys(snapshotBefore)])]",
+ "the startup comparison names a path the last run recorded and this tree no longer has"),
+
+ # The suite was red on a freshly cloned checkout and nothing here said so, because the baseline
+ # file is gitignored: it exists in a working tree that has run before and does not exist in a
+ # clone. Reading it was "equivalent" — the recorded set was right there in `snapshotBefore` — and
+ # it made a first run throw. The guard runs the self-test in a copy of the package that has no
+ # baseline at all, so this fails there and nowhere else.
+ ("the self-test reads the baseline file again",
+ " const recorded = Object.assign({}, snapshotBefore, { [GONE]: 'absent-probe' });",
+ " const recorded = JSON.parse(readFileSync(SNAPSHOT, 'utf8'));",
+ "the startup comparison names a path the last run recorded and this tree no longer has"),
+ # The deepest one, and it took a self-chosen attack line rather than reading the diff: the residue
+ # self-test builds its own input and hands it straight to the comparison, so it measured the
+ # comparison function and never the startup that feeds it. Nulling the one assignment between
+ # reading the baseline and reporting on it left all 45 assertions green and `leftover` empty on
+ # every run. The assertion this control feeds is the only one that spawns the harness and reads
+ # back what its own startup decided.
+ ("the startup stops reading the baseline it recorded",
+ "const previous = readSnapshot();",
+ "const previous = null;",
+ "the startup comparison warns when the baseline records a difference"),
+
+ # The copy filter is the design's load-bearing part, and these two are what keeps it honest.
+ #
+ # The first one used to be aimed at the single call in `scratchPackage`, which is where the
+ # mistake looked harmless: the package being copied IS this package, and
+ # `tests/.shipped-snapshot.json` is gitignored, so on a fresh clone there is no baseline in it
+ # for the filter to exclude. Neuter the filter there and the copy comes out the same either way
+ # -- so this mutation SURVIVED on a clean checkout and was counted as caught only on a machine
+ # where an earlier suite run had left the file behind. 46/47 versus 47/47, same commit, decided
+ # by what happened to be on disk.
+ #
+ # So the anchor is the factory both call sites are built from, and the assertion that catches it
+ # measures a finished copy of a source the guard planted a baseline into itself. That holds on
+ # every machine, which is the only property worth having in a check that runs on CI.
+
+ ("the copy filter keeps the baseline, so a copy of a source that has one is no longer baseline-free",
+ "const notTheBaselineIn = (root) => (src) => relative(root, src) !== join('tests', '.shipped-snapshot.json');",
+ "const notTheBaselineIn = (root) => () => true;",
+ "a copy of a source that carries the bookkeeping file still comes out without it"),
+
+ ("the wiring probe never plants a baseline",
+ " writeFileSync(join(scratch, 'tests', '.shipped-snapshot.json'),\n JSON.stringify({ [GONE]: 'planted-by-verify-review16' }));",
+ " // the baseline is never planted, so the harness is asked with nothing to find",
+ "the startup comparison warns when the baseline records a difference"),
+
+ # The scratch copy is refused when the temporary directory sits inside the package, because
+ # cpSync will not copy a directory into its own subtree -- it throws, and a throw out of the guard
+ # is the reading that looks exactly like a surviving mutation. The refusal is now a named failure,
+ # but only if this predicate says no.
+ ("nothing is ever recognised as being inside the package",
+ " return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel));",
+ " return false;",
+ "a path under the package is recognised as under the package"),
+
+ # The diagnostic was matched by substring, which any output mentioning the path satisfies -- a
+ # debug line, an error, a hard-coded string. It is parsed now, so a payload that says it read a
+ # baseline but does not report what it found is caught here.
+ ("the startup diagnostic reports that it looked without saying what it found",
+ " console.log('startup-leftover=' + JSON.stringify({ hadBaseline: previous !== null, leftover, warned }));",
+ " console.log('startup-leftover=' + JSON.stringify({ hadBaseline: previous !== null, warned }));",
+ "the startup comparison warns when the baseline records a difference"),
+
+ # A basename filter is not a path filter. It also drops every file with that name anywhere in the
+ # tree, so the copy stops being "the package without its bookkeeping file".
+ #
+ # Re-anchored when the predicate became a factory: the line this names moved from
+ # `const notTheBaseline = (src) => …` to `const notTheBaselineIn = (root) => (src) => …`, and an
+ # anchor that no longer resolves is a mutation that has quietly stopped existing. The property
+ # is unchanged and so is the defect; only the text it is written against moved.
+ ("the copy filter recognises a name rather than a path",
+ "const notTheBaselineIn = (root) => (src) => relative(root, src) !== join('tests', '.shipped-snapshot.json');",
+ "const notTheBaselineIn = (root) => (src) => basename(src) !== '.shipped-snapshot.json';",
+ "the copy leaves out the bookkeeping file and nothing else"),
+
+ # Computing the comparison and reporting it are two things. Gating the warning off leaves every
+ # value the diagnostic prints exactly as it was, which is why the diagnostic reports which branch
+ # it took rather than only what it computed.
+ ("the residue comparison runs and then nobody is told",
+ "if (leftover.length) {",
+ "if (false && leftover.length) {",
+ "the startup comparison warns when the baseline records a difference"),
]
+
+
+
+
+
def read(rel):
with io.open(os.path.join(ROOT, rel), encoding="utf-8", newline="") as f:
return f.read()
@@ -392,18 +512,28 @@ def _node():
# Which file the mutation belongs to. A single-occurrence mutation must anchor somewhere
# it appears exactly once — an anchor that matches in several places is a guess, and a
# guess that silently lands in the wrong file is worse than a mutation that does not run.
+ #
+ # The guard is in this list because some rules live in the guard rather than in shipped code,
+ # and a guard nobody can break is the failure this whole control exists to catch. It goes LAST,
+ # and that is the load-bearing part: this file holds the checks for every other file's wording,
+ # so a README string also occurs here, exactly once, inside a regex. Searched earlier it wins
+ # those ties and the mutation lands in the wrong file — which is the failure the comment above
+ # names, reached by the honest-looking route of adding an entry in a careless place.
+ #
+ # Mutating the guard is still safe to read as caught: a crash cannot count, because the verdict
+ # needs `expect in out` and a run that produced no output contains no name.
target = None
if replace_all:
for rel in ("tests/run.mjs", "README.md", "README.zh-CN.md",
"miniapp/client/index.html", "miniapp/node/server.mjs",
- ".minimax-plugin/plugin.json"):
+ ".minimax-plugin/plugin.json", "tests/verify-review16.mjs"):
if old in read(rel):
target = rel
break
else:
for rel in ("tests/run.mjs", "README.md", "README.zh-CN.md",
"miniapp/client/index.html", "miniapp/node/server.mjs",
- ".minimax-plugin/plugin.json"):
+ ".minimax-plugin/plugin.json", "tests/verify-review16.mjs"):
if read(rel).count(old) == 1:
target = rel
break
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-runtime-diag.py b/plugins/avatasia/mmc-trajectory/tests/mutate-runtime-diag.py
new file mode 100644
index 0000000..fad404e
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-runtime-diag.py
@@ -0,0 +1,180 @@
+"""Mutation control for `/api/runtime`'s one contract: what it does not send.
+
+This is the only route in the package whose promise is entirely about withholding. Its own comment
+says it — 「Names and structure only」, and 「this route must never hand the browser a filesystem
+location」 — and asking a promise-to-guard map which rows had no owner returned this one.
+
+Asking is what found the hole. Three fields in the response are not basenames, counts or flags; they
+are substrings of exception text, and each of them went out raw:
+
+ sqlite.error the message from importing node:sqlite
+ sqlite.queryError the message from a database that could not be opened or queried
+ diagError the STACK of anything the handler itself threw
+
+`diagError` is the one that leaked on every single run. A Node stack frame names the file it is in
+by absolute path, once per frame, so 600 characters of one is mostly directory names — and on Windows
+those carry the user profile directory. It fired on exactly the failure paths the route exists to
+report, so the reader looking at that output is the reader already having a bad day. In a package
+that installs onto every reader's machine, that is an identity leak and it contradicted the route's
+own stated promise.
+
+Two passes now, in this order, and then the clip:
+
+ 1. `redact` — the three store locations, in the spelling they were handed;
+ 2. `scrubAbsolutePaths` — anything absolute at all, in any spelling.
+
+The second is not redundant and the mutations below are grouped to show why. A stack frame is printed
+as a URL (`file:///C:/Users/...`), with forward slashes and a scheme, so the backslash prefixes miss
+every frame of it; the store's `.minimax` fallback catches the store's own directories and leaves
+everything else — the node install, a temp directory, a dependency — standing. The guard measures
+that gap on a real stack rather than asserting it.
+
+Deliberately NOT folded into `createRedactor`: that one also runs over session CONTENT, where
+blanking an unrelated string would change what a reader is shown. A stack carries nothing a reader
+came for, which is exactly why the blunt version is allowed here and not there.
+
+Each mutation reverts one field and requires `verify-runtime-diag.mjs` to report it by name.
+"""
+import subprocess
+import sys
+from pathlib import Path
+
+HERE = Path(__file__).resolve().parent
+ROOT = HERE.parent
+SERVER = ROOT / "miniapp" / "node" / "server.mjs"
+PROBE = HERE / "verify-runtime-diag.mjs"
+
+REDACT = "redact(String(/** @type {any} */ (error)?."
+
+MUTATIONS = [
+ (
+ "the handler's own stack goes out raw, so the route publishes a directory per frame",
+ " diagError = scrubAbsolutePaths(redact(String(/** @type {any} */ (error)?.stack ?? error))).slice(0, 600);",
+ " diagError = String(/** @type {any} */ (error)?.stack ?? error).slice(0, 600);",
+ "SHAPE: diagError goes through both passes",
+ ),
+ (
+ "a database that could not be opened reports its own path in the error field",
+ " sqlite.error = scrubAbsolutePaths(redact(String(/** @type {any} */ (error)?.message ?? error))).slice(0, 200);",
+ " sqlite.error = String(/** @type {any} */ (error)?.message ?? error).slice(0, 200);",
+ "SHAPE: sqlite.error goes through both passes",
+ ),
+ (
+ "a query that could not be answered reports its own path in the query-error field",
+ " sqlite.queryError = scrubAbsolutePaths(redact(String(/** @type {any} */ (error)?.message ?? error))).slice(0, 240);",
+ " sqlite.queryError = String(/** @type {any} */ (error)?.message ?? error).slice(0, 240);",
+ "SHAPE: sqlite.queryError goes through both passes",
+ ),
+ # The order one. Both passes, then the clip — and moving the clip inside the scrub is a different
+ # defect with the same smell: cutting a path at 600 characters can leave a drive-qualified
+ # fragment standing, which is still a profile directory as far as a reader is concerned.
+ (
+ "the path is clipped before it is scrubbed, so a long stack leaves half a path behind",
+ " diagError = scrubAbsolutePaths(redact(String(/** @type {any} */ (error)?.stack ?? error))).slice(0, 600);",
+ " diagError = scrubAbsolutePaths(redact(String(/** @type {any} */ (error)?.stack ?? error).slice(0, 600)));",
+ "SHAPE: diagError is redacted and scrubbed BEFORE it is clipped, so no path is cut in half",
+ ),
+ # And the two fields that are supposed to stay names. These are the easy half of the contract
+ # and they have no behavioural check either, for the same reason as the rest: the handler is a
+ # closure inside `start()` and this suite never starts the runtime.
+ (
+ "the database file is published as the whole path instead of its name",
+ " sqlite.dbFile = basename(join(location.root, 'v2', 'sqlite', 'runtime-state.sqlite'));",
+ " sqlite.dbFile = join(location.root, 'v2', 'sqlite', 'runtime-state.sqlite');",
+ "the database file is published as a basename",
+ ),
+ (
+ "the data directory is published whole, which on Windows is the user profile directory",
+ " dataDirBasename: basename(context.dataDir) || null,",
+ " dataDirBasename: context.dataDir || null,",
+ "dataDirBasename is a basename and not the value it was derived from",
+ ),
+]
+
+
+def read_exact(path):
+ """Normalise to LF for matching, and report the file's own newline so it can be put back."""
+ data = path.read_bytes()
+ text = data.decode("utf-8").replace("\r\n", "\n")
+ return text, ("\r\n" if b"\r\n" in data else "\n")
+
+
+def write_exact(path, text, newline):
+ if newline == "\r\n":
+ text = text.replace("\n", "\r\n")
+ path.write_bytes(text.encode("utf-8"))
+
+
+def run_probe():
+ proc = subprocess.run(
+ ["node", str(PROBE)],
+ cwd=str(ROOT), capture_output=True, text=True,
+ encoding="utf-8", errors="replace",
+ )
+ return proc.returncode, (proc.stdout or "") + (proc.stderr or "")
+
+
+def named_failures(output):
+ return [
+ line.strip()[len("FAIL"):].strip()
+ for line in output.splitlines()
+ if line.strip().startswith("FAIL")
+ ]
+
+
+def main():
+ code, output = run_probe()
+ if code != 0:
+ print("baseline probe does not pass; fix that first")
+ print(output)
+ return 1
+ print("baseline clean")
+
+ original = SERVER.read_bytes()
+ missed, unnamed = [], []
+ for label, old, new, expect in MUTATIONS:
+ text, newline = read_exact(SERVER)
+ if old not in text:
+ print(f"SKIP {label}: anchor not found")
+ missed.append(label)
+ continue
+ if old == new:
+ print(f"SKIP {label}: the mutation changes nothing")
+ missed.append(label)
+ continue
+ write_exact(SERVER, text.replace(old, new, 1), newline)
+ try:
+ code, output = run_probe()
+ finally:
+ SERVER.write_bytes(original)
+ if code == 0:
+ print(f"MISSED {label}: the probe still passed")
+ missed.append(label)
+ continue
+ names = named_failures(output)
+ if not names:
+ print(f"UNNAMED {label}: the probe failed without naming a rule")
+ unnamed.append(label)
+ elif not any(expect in n for n in names):
+ print(f"MISSED {label}: probe failed, but not on {expect!r}\n -> {names}")
+ missed.append(label)
+ else:
+ print(f"caught {label}\n -> " + next(n for n in names if expect in n))
+
+ if SERVER.read_bytes() != original:
+ print(f"NOT RESTORED {SERVER}")
+ return 1
+ print("server restored byte-for-byte")
+
+ if missed or unnamed:
+ if missed:
+ print(f"\n{len(missed)} mutation(s) got through")
+ if unnamed:
+ print(f"{len(unnamed)} mutation(s) failed without naming a rule")
+ return 1
+ print(f"\nall {len(MUTATIONS)} mutations caught, each by name")
+ return 0
+
+
+if __name__ == "__main__":
+ sys.exit(main())
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-search-client.py b/plugins/avatasia/mmc-trajectory/tests/mutate-search-client.py
new file mode 100644
index 0000000..a31ddd6
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-search-client.py
@@ -0,0 +1,183 @@
+"""Mutation control for the page's half of the search move.
+
+The filter used to be `recordSearchText(record).indexOf(needle) >= 0` — a scan of five fields the
+page happened to be holding. It is now a set of record indexes the server sent, and every mutation
+here undoes one of the four things that move required and the page now owns:
+
+ - asking a set at all, instead of scanning text;
+ - telling 「no answer yet」 apart from 「matched nothing」;
+ - letting only the newest request write, since the answer now arrives out of order;
+ - re-asking when the payload changed, since the answer names indexes of the payload that was
+ there before.
+
+Each is a change the page renders differently and none of them throws.
+"""
+import subprocess
+import sys
+from pathlib import Path
+
+HERE = Path(__file__).resolve().parent
+ROOT = HERE.parent
+CLIENT = ROOT / "miniapp" / "client" / "index.html"
+PROBE = HERE / "client-check.mjs"
+
+MUTATIONS = [
+ (
+ "the filter scans the record's own text again, ignoring the server's answer",
+ " if (hitSet === null || hitSet === undefined) return true;\n return !!(record && hitSet.has(record.index));",
+ " if (hitSet === null || hitSet === undefined) return true;\n return String((record && record.summary) || '').toLowerCase().indexOf(String(needle).toLowerCase()) >= 0;",
+ ),
+ (
+ "an unanswered search is rendered as matched nothing, so the table empties while it loads",
+ " if (hitSet === null || hitSet === undefined) return true;",
+ " if (hitSet === null || hitSet === undefined) return false;",
+ ),
+ (
+ "no answer in force is turned into an empty set, so it reads as 「matched nothing」",
+ " if (!Array.isArray(hits)) return null;",
+ " if (!Array.isArray(hits)) return new Set();",
+ ),
+ (
+ "a hit with no usable index is filed under a key that matches every record",
+ " if (Number.isInteger(index)) set.add(index);",
+ " set.add(Number.isInteger(index) ? index : NaN);",
+ ),
+ (
+ "a late answer is allowed to overwrite a newer one",
+ " if (seq !== searchSeq) return;\n searchController = null;",
+ " searchController = null;",
+ ),
+ (
+ "a search in flight is not aborted, so every keystroke's request still runs to the end",
+ " if (searchController) searchController.abort();",
+ "",
+ ),
+ (
+ "a changed payload keeps the old hit set, so the new table is filtered by the old answer",
+ " if (changed && state.query) runSearch(state.query);",
+ "",
+ ),
+ (
+ "clearing the filters leaves the hit set behind, so the next query filters by a stale answer",
+ " state.searchHits = null;\n state.searchPending = false;\n state.searchTotal = 0;\n state.searchTruncated = false;\n state.searchError = null;\n dropOverviewSelection();",
+ " dropOverviewSelection();",
+ ),
+ (
+ "the count line cannot tell 「searching」 from 「searched and found none」",
+ " if (searchState.searchHits !== null && searchState.searchTotal === 0) return '未找到';",
+ " if (searchState.searchHits !== null) return '命中 ' + formatInt(searchState.searchTotal) + ' 条';",
+ ),
+ (
+ "a search that failed is rendered as an empty table, which reads as an answer",
+ " if (searchState.searchError) return '搜索失败，以下为上次结果';",
+ "",
+ ),
+ (
+ "the needle is sent without the generation, so a slice search answers about the whole lineage",
+ " + (state.generation === null ? '' : '&generation=' + encodeURIComponent(String(state.generation)));",
+ " + '';",
+ ),
+ (
+ "the hit set is built from the summaries rather than the indexes, so it can never match a row",
+ " var index = entry && typeof entry.index === 'number' ? entry.index : NaN;",
+ " var index = entry && typeof entry.summary === 'string' ? entry.summary.length : NaN;",
+ ),
+ # The one an acceptance review caught, and the reason the mutation list above is not the end of
+ # the story. Every entry there changes what the page COMPUTES. This one changes what it REMEMBERS
+ # about a request that already finished — and every existing check was blind to it from the same
+ # side: the `searchStatusLabel` cases each construct their own state, and a state cannot be stale,
+ # because it was written for the case it is asked about. The `runSearch` checks were source
+ # regexes, and the line being removed is a line they were not written against.
+ #
+ # So nothing cleared `searchError` except typing and pressing the clear button — the two a reader
+ # drives. A poll that re-runs the current query after the transcript changed is not a reader, so
+ # a search that had failed once said 「搜索失败，以下为上次结果」 for the rest of the session, and
+ # because the label reads the error before the counts, the stale error outranked the fresh hit set
+ # it was describing. The page showed the right rows under the wrong sentence.
+ (
+ "an answer that arrives leaves the failure that preceded it standing",
+ " state.searchError = null;\n resetWindowMode();",
+ " resetWindowMode();",
+ ),
+]
+
+
+def read_exact(path):
+ """Normalise to LF for matching, and report the file's own newline so it can be put back."""
+ data = path.read_bytes()
+ text = data.decode("utf-8").replace("\r\n", "\n")
+ return text, ("\r\n" if b"\r\n" in data else "\n")
+
+
+def write_exact(path, text, newline):
+ if newline == "\r\n":
+ text = text.replace("\n", "\r\n")
+ path.write_bytes(text.encode("utf-8"))
+
+
+def run_probe():
+ proc = subprocess.run(
+ ["node", str(PROBE)],
+ cwd=str(ROOT),
+ capture_output=True,
+ text=True,
+ encoding="utf-8",
+ errors="replace",
+ )
+ return proc.returncode, (proc.stdout or "") + (proc.stderr or "")
+
+
+def main():
+ code, output = run_probe()
+ if code != 0:
+ print("baseline probe does not pass; fix that first")
+ print(output)
+ return 1
+ print("baseline clean")
+
+ original = CLIENT.read_bytes()
+ missed = []
+ unnamed = []
+ for label, old, new in MUTATIONS:
+ text, newline = read_exact(CLIENT)
+ if old not in text:
+ print(f"SKIP {label}: anchor not found")
+ missed.append(label)
+ continue
+ if old == new:
+ print(f"SKIP {label}: the mutation changes nothing")
+ missed.append(label)
+ continue
+ write_exact(CLIENT, text.replace(old, new, 1), newline)
+ try:
+ code, output = run_probe()
+ finally:
+ CLIENT.write_bytes(original)
+ if code == 0:
+ print(f"MISSED {label}: the probe still passed")
+ missed.append(label)
+ continue
+ first = next((line.strip() for line in output.splitlines() if line.strip().startswith("- ")), None)
+ if first is None:
+ print(f"UNNAMED {label}: the probe failed without naming a rule")
+ unnamed.append(label)
+ else:
+ print(f"caught {label}\n -> {first}")
+
+ if CLIENT.read_bytes() != original:
+ print(f"NOT RESTORED {CLIENT}")
+ return 1
+ print("file restored byte-for-byte")
+
+ if missed or unnamed:
+ if missed:
+ print(f"\n{len(missed)} mutation(s) got through")
+ if unnamed:
+ print(f"{len(unnamed)} mutation(s) failed without naming a rule")
+ return 1
+ print(f"\nall {len(MUTATIONS)} mutations caught, each by name")
+ return 0
+
+
+if __name__ == "__main__":
+ sys.exit(main())
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-search-endpoint.py b/plugins/avatasia/mmc-trajectory/tests/mutate-search-endpoint.py
new file mode 100644
index 0000000..53959d5
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-search-endpoint.py
@@ -0,0 +1,254 @@
+"""Mutation control for verify-search-endpoint.mjs.
+
+Each mutation reintroduces exactly one bug the probe is supposed to catch, BY NAME. The ones that
+matter most are the first three: each of them makes the endpoint answer something plausible and
+wrong, and none of them throws.
+
+ - searching the STORED rows instead of the projected view reports versions the ledger is not
+ showing, and hands back an index no row occupies;
+ - dropping one of the five searched fields narrows what a reader can find with no error at all;
+ - counting only what fits under the cap turns "how many matched" into "how many did we send".
+"""
+import subprocess
+import sys
+from pathlib import Path
+
+HERE = Path(__file__).resolve().parent
+ROOT = HERE.parent
+SERVER = ROOT / "miniapp" / "node" / "server.mjs"
+PROBE = HERE / "verify-search-endpoint.mjs"
+
+SEARCH_LOOP = """ for (const turn of turns) {
+ const records = Array.isArray(turn.records) ? turn.records : [];
+ for (const record of records) {
+ if (!searchSurfaceOf(record).includes(needle)) continue;
+ total += 1;
+ if (hits.length >= limit) continue;"""
+
+MUTATIONS = [
+ # ---- a hit has to be a row the reader can be sent to ------------------------------------
+ (
+ "the endpoint is wired to a scan of the stored rows rather than the projected view",
+ " const searched = collectSearchHits(payload, needle, MAX_SEARCH_HITS);",
+ " const searched = collectSearchHits({ turns: [{ index: 1, records: rows.map((row) => ({ index: 0, kind: 'reply', summary: String(row.message_id) })) }] }, needle, MAX_SEARCH_HITS);",
+ ),
+ (
+ "a hit reports the record's stored id instead of the index the ledger gives it",
+ " index: record.index,\n turnIndex: turn.index,",
+ " index: record.id === null || record.id === undefined ? 0 : 1,\n turnIndex: turn.index,",
+ ),
+ (
+ "the endpoint projects the whole lineage instead of the slice that was asked for",
+ " const view = selectIdentityView(identityTable, filter);\n const payload = buildTrajectoryPayload({\n session: { id: ctx.identity.id, createdAtMs: entry.lastActiveAt },",
+ " const view = selectIdentityView(identityTable, null);\n const payload = buildTrajectoryPayload({\n session: { id: ctx.identity.id, createdAtMs: entry.lastActiveAt },",
+ ),
+ # ---- the surface has to be the page's ---------------------------------------------------
+ (
+ "the endpoint searches only the summary",
+ " if (!searchSurfaceOf(record).includes(needle)) continue;",
+ " if (!String(record.summary ?? '').includes(needle)) continue;",
+ ),
+ (
+ "the endpoint folds the surface away, so a case-sensitive needle matches everything",
+ " if (!searchSurfaceOf(record).includes(needle)) continue;",
+ " if (!String(record.summary ?? '').toLowerCase().includes(needle) || true) continue;",
+ ),
+ # ---- how many ---------------------------------------------------------------------------
+ (
+ "the cap also bounds the count, so a long needle reports however many fitted",
+ SEARCH_LOOP,
+ """ for (const turn of turns) {
+ const records = Array.isArray(turn.records) ? turn.records : [];
+ for (const record of records) {
+ if (!searchSurfaceOf(record).includes(needle)) continue;
+ if (hits.length >= limit) break;
+ total += 1;""",
+ ),
+ (
+ "the cap is applied before the count, so an unlimited search reports nothing",
+ " total += 1;\n if (hits.length >= limit) continue;",
+ " if (hits.length < limit) total += 1;\n if (hits.length >= limit) continue;",
+ ),
+ # ---- a needle never crosses a record ------------------------------------------------------
+ (
+ "records are joined into one blob before the scan, so a needle can cross a boundary",
+ " for (const turn of turns) {\n const records = Array.isArray(turn.records) ? turn.records : [];\n for (const record of records) {\n if (!searchSurfaceOf(record).includes(needle)) continue;\n total += 1;",
+ " const blob = turns.flatMap((t) => (Array.isArray(t.records) ? t.records : [])).map((r) => searchSurfaceOf(r)).join(' ');\n if (blob.includes(needle)) { hits.push({ index: 0, turnIndex: 1, kind: 'reply', summary: '', generation: null }); total += 1; }\n for (const turn of []) {\n const records = [];\n for (const record of records) {\n if (!searchSurfaceOf(record).includes(needle)) continue;\n total += 1;",
+ ),
+ # ---- the route ---------------------------------------------------------------------------
+ (
+ "the route is not registered, so a search answers 404",
+ " if (url.pathname === '/api/trajectory/search') {",
+ " if (url.pathname === '/api/trajectory/searchX') {",
+ ),
+ (
+ "a needle too short is answered with everything instead of refused",
+ " if (!needleIsUsable(asked)) {",
+ " if (false) {",
+ ),
+ (
+ "the lineage is walked a second time, so the two readers can disagree about it",
+ " walked = await collectLineage(entry, ctx.generations);\n } catch (error) {\n sendError(response, 500, 'trajectory_unreadable', lineageFailure(error));\n return;\n }\n const { occurrences, files } = walked;",
+ " walked = await collectLineage(entry, ctx.generations);\n walked = await collectLineage(entry, ctx.generations);\n } catch (error) {\n sendError(response, 500, 'trajectory_unreadable', lineageFailure(error));\n return;\n }\n const { occurrences, files } = walked;",
+ ),
+ (
+ "the session key becomes the session id, so an id becomes a directory name",
+ " createHash('sha256').update(`${dir}\\n${sessionId}`).digest('hex').slice(0, 32);",
+ " String(sessionId);",
+ ),
+ (
+ "the artifacts are written beside the session history instead of under the data dir",
+ " const artifactRoot = join(context.dataDir, 'trajectory-artifacts');",
+ " const artifactRoot = join(process.cwd(), 'trajectory-artifacts');",
+ ),
+ (
+ # Used to be the other way round: §8.8.1 rule 5 kept the active generation out of the store,
+ # and this mutation removed that skip. The rule is inverted now — the active generation IS
+ # stored, because `sameSource` reads its own size and a grown file invalidates itself — so
+ # the mutation puts the skip back and the guard has to notice the early exit it now forbids.
+ "the active generation is skipped again, so a session still being written has nothing to scan",
+ " for (let fileIdx = 0; fileIdx < files.length; fileIdx += 1) {\n const records = [];",
+ " for (let fileIdx = 0; fileIdx < files.length; fileIdx += 1) {\n if (fileIdx === 0) continue;\n const records = [];",
+ ),
+ (
+ # The rule is that `total` counts every match, so a missing generation cannot be tolerated:
+ # answering from 44 of 45 reports a smaller number and says nothing about being wrong.
+ "one missing segment no longer makes the search fall back",
+ " if (segment === null) return null;",
+ " if (segment === null) continue;",
+ ),
+ (
+ "the artifact path reports how many it sent instead of how many matched",
+ " return { hits, total };",
+ " return { hits, total: hits.length };",
+ ),
+ (
+ # The summary a hit answers with now lives on the segment line, so the mutation that swaps it
+ # for the kind belongs with the module that writes it — mutate-search-segments.py.
+ "writing the artifacts can fail the search that asked for them",
+ " }).catch(() => undefined);",
+ " });",
+ ),
+ # ---- the scan is resolved in one batch ---------------------------------------------------
+ (
+ # The route's half of the batch rule. The answers it builds are the same answers either way —
+ # which is why the cost cannot be asserted here and lives in verify-search-segments.mjs
+ # instead. What changes here is the shape: a walk per hit rather than one walk for the scan.
+ "the route resolves the scan one ordinal at a time, walking the segment once per hit",
+ " const answers = readSegmentHits(segment.surface, ordinals);",
+ " const answers = ordinals.map((ordinal) => {\n"
+ " let from = 0;\n"
+ " let line = 0;\n"
+ " while (from <= segment.surface.length) {\n"
+ " const nl = segment.surface.indexOf('\\n', from);\n"
+ " if (line === ordinal) {\n"
+ " const tab = segment.surface.indexOf('\\t', from);\n"
+ " const parsed = tab < 0 ? null : JSON.parse(segment.surface.slice(from, tab));\n"
+ " return { index: parsed.index, turnIndex: parsed.turnIndex, kind: parsed.kind, summary: parsed.summary, generation: parsed.generation };\n"
+ " }\n"
+ " if (nl === -1) break;\n"
+ " from = nl + 1;\n"
+ " line += 1;\n"
+ " }\n"
+ " return null;\n"
+ " });",
+ ),
+ (
+ # A hit that cannot be resolved is a segment written by something this reader disagrees
+ # with. Dropping it would answer with a smaller `total` and say nothing about being wrong.
+ "a hit the reader could not resolve is skipped instead of falling back",
+ " if (hit === null) return null;",
+ " if (hit === null) continue;",
+ ),
+ (
+ # The shape that was removed: a second store under the artifact root, filled on every
+ # publish, read by nothing — 8.6 MB a session a view on disk. Rebuilt here from live code
+ # rather than by re-adding the deleted module, so the mutation is a regression someone could
+ # actually write instead of a revert. It trips both halves of the rule: the store's name and
+ # the second directory it makes.
+ "a second artifact store is written beside the segments, and nothing reads it",
+ " const segment = buildSegment({ records });\n await segmentStore.write(sessionKey, viewKey, generationKeyValue, segment, {\n generation,\n source: [files[fileIdx]],\n });",
+ " const segment = buildSegment({ records });\n await segmentStore.write(sessionKey, viewKey, generationKeyValue, segment, {\n generation,\n source: [files[fileIdx]],\n });\n const indexStore = createSegmentStore(join(artifactRoot, 'index'));\n await indexStore.write(sessionKey, viewKey, generationKeyValue, segment, {\n generation,\n source: [files[fileIdx]],\n });",
+ ),
+]
+
+
+def read_exact(path):
+ """Normalise to LF for matching, and report the file's own newline so it can be put back."""
+ data = path.read_bytes()
+ text = data.decode("utf-8").replace("\r\n", "\n")
+ return text, ("\r\n" if b"\r\n" in data else "\n")
+
+
+def write_exact(path, text, newline):
+ if newline == "\r\n":
+ text = text.replace("\n", "\r\n")
+ path.write_bytes(text.encode("utf-8"))
+
+
+def run_probe():
+ proc = subprocess.run(
+ ["node", str(PROBE)],
+ cwd=str(ROOT),
+ capture_output=True,
+ text=True,
+ encoding="utf-8",
+ errors="replace",
+ )
+ return proc.returncode, (proc.stdout or "") + (proc.stderr or "")
+
+
+def main():
+ code, output = run_probe()
+ if code != 0:
+ print("baseline probe does not pass; fix that first")
+ print(output)
+ return 1
+ print("baseline clean")
+
+ original = SERVER.read_bytes()
+ missed = []
+ unnamed = []
+ for label, old, new in MUTATIONS:
+ text, newline = read_exact(SERVER)
+ if old not in text:
+ print(f"SKIP {label}: anchor not found")
+ missed.append(label)
+ continue
+ if old == new:
+ print(f"SKIP {label}: the mutation changes nothing")
+ missed.append(label)
+ continue
+ write_exact(SERVER, text.replace(old, new, 1), newline)
+ try:
+ code, output = run_probe()
+ finally:
+ SERVER.write_bytes(original)
+ if code == 0:
+ print(f"MISSED {label}: the probe still passed")
+ missed.append(label)
+ continue
+ first = next((line.strip() for line in output.splitlines() if line.strip().startswith("- ")), None)
+ if first is None:
+ print(f"UNNAMED {label}: the probe failed without naming a rule")
+ unnamed.append(label)
+ else:
+ print(f"caught {label}\n -> {first}")
+
+ if SERVER.read_bytes() != original:
+ print(f"NOT RESTORED {SERVER}")
+ return 1
+ print("file restored byte-for-byte")
+
+ if missed or unnamed:
+ if missed:
+ print(f"\n{len(missed)} mutation(s) got through")
+ if unnamed:
+ print(f"{len(unnamed)} mutation(s) failed without naming a rule")
+ return 1
+ print(f"\nall {len(MUTATIONS)} mutations caught, each by name")
+ return 0
+
+
+if __name__ == "__main__":
+ sys.exit(main())
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-search-segments.py b/plugins/avatasia/mmc-trajectory/tests/mutate-search-segments.py
new file mode 100644
index 0000000..6980c65
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-search-segments.py
@@ -0,0 +1,276 @@
+"""Mutation control for verify-search-segments.mjs.
+
+Each mutation reintroduces exactly one bug the probe is supposed to catch. The probe must FAIL every
+time, by NAME — a crash with no rule named is a weaker outcome, and this project treats it as one —
+and the file must come back byte-for-byte identical afterwards.
+
+The first six are the ones that matter: together they are the ways a segment can quietly stop being
+"the text the page was searching". A dropped field, a reordered field, a different separator, no
+folding and no whitespace rule each narrow what a reader can find, and none of them throws.
+"""
+import subprocess
+import sys
+from pathlib import Path
+
+HERE = Path(__file__).resolve().parent
+ROOT = HERE.parent
+MODULE = ROOT / "miniapp" / "node" / "search-segments.mjs"
+PROBE = HERE / "verify-search-segments.mjs"
+
+FIELDS = "export const SEARCH_FIELDS = ['summary', 'text', 'result', 'thinking', 'toolName'];"
+
+MUTATIONS = [
+ # ---- the surface has to be what the page searched -------------------------------------
+ (
+ "the thinking field is dropped from the search surface",
+ FIELDS,
+ "export const SEARCH_FIELDS = ['summary', 'text', 'result', 'toolName'];",
+ ),
+ (
+ "the fields are read in a different order",
+ FIELDS,
+ "export const SEARCH_FIELDS = ['summary', 'result', 'text', 'thinking', 'toolName'];",
+ ),
+ (
+ "the fields are joined with nothing instead of a separator",
+ " return normaliseWhitespace(parts.join('\\n')).toLowerCase();",
+ " return normaliseWhitespace(parts.join('')).toLowerCase();",
+ ),
+ (
+ "whitespace is not normalised, so the surface is five lines per record again",
+ " return String(value).replace(/\\s+/g, ' ').trim();",
+ " return String(value);",
+ ),
+ (
+ "the surface is not folded, so an upper-case needle finds nothing",
+ " return normaliseWhitespace(parts.join('\\n')).toLowerCase();",
+ " return normaliseWhitespace(parts.join('\\n'));",
+ ),
+ (
+ "the needle is folded but not normalised, so what the reader typed decides the answer",
+ " return normaliseWhitespace(typeof needle === 'string' ? needle : '').toLowerCase();",
+ " return (typeof needle === 'string' ? needle : '').toLowerCase();",
+ ),
+ # ---- the boundary, and the ordinal it is only correct because of ----------------------
+ (
+ "the scan joins every line into one blob, so a needle can cross a record boundary",
+ " const hits = [];\n let start = 0;\n let ordinal = 0;",
+ " const hits = [];\n const flat = surface.replace(/\\n/g, ' ');\n if (flat.includes(needle)) hits.push(0);\n let start = 0;\n let ordinal = 0;",
+ ),
+ (
+ # Was about empty lines in a plain surface, which the new format cannot produce: every
+ # record's line starts with its answer, so an empty line means a record that is not there.
+ # The hazard that replaced it is the prefix itself — a scan that tested the whole line would
+ # answer from a record's KIND and SUMMARY rather than from the text being searched.
+ "the scan tests the record's answer as well as its text",
+ " if (tab >= 0 && line.slice(tab + 1).includes(needle)) hits.push(ordinal);",
+ " if (tab >= 0 && line.includes(needle)) hits.push(ordinal);",
+ ),
+ (
+ "the locators are numbered from one while the scan numbers from zero",
+ " ordinal: i,",
+ " ordinal: i + 1,",
+ ),
+ (
+ "a locator of a record with no position claims file 0",
+ " fileIdx: typeof record.fileIdx === 'number' ? record.fileIdx : -1,",
+ " fileIdx: typeof record.fileIdx === 'number' ? record.fileIdx : 0,",
+ ),
+ # ---- the artifact ---------------------------------------------------------------------
+ (
+ "the manifest is published before the surface it describes",
+ " await rename(`${join(dir, 'surface.txt')}.tmp`, join(dir, 'surface.txt'));",
+ " await rename(`${join(dir, 'manifest.json')}.tmp`, join(dir, 'manifest.json'));",
+ ),
+ (
+ "a manifest from another schema version is served anyway",
+ " if (manifest.schemaVersion !== SEGMENT_SCHEMA_VERSION) return null;",
+ "",
+ ),
+ (
+ "a surface with a line the manifest does not count is accepted",
+ " if (lines !== manifest.recordCount) return null;",
+ "",
+ ),
+ (
+ "the runtime's own revision stops being compared, so a rewrite that kept the length is reused",
+ " if (typeof a.revision === 'string' && a.revision.length > 0\n && typeof b.revision === 'string' && b.revision.length > 0 && a.revision !== b.revision) {\n return false;\n }\n",
+ "",
+ ),
+ # ---- the rest of the contract ---------------------------------------------------------
+ (
+ "the needle floor is dropped, so one character is a search",
+ " return foldNeedle(needle).trim().length >= MIN_NEEDLE_CHARS;",
+ " return foldNeedle(needle).length >= 0;",
+ ),
+ (
+ "the hit cap is dropped, so a two-character needle returns the whole ledger",
+ " return { ordinals: hits.slice(0, limit), total: hits.length, truncated: true };",
+ " return { ordinals: hits, total: hits.length, truncated: true };",
+ ),
+ (
+ "the active generation's segment is stored under a sealed generation's key",
+ " return generation === null || generation === undefined ? 'active' : `g${generation}`;",
+ " return generation === null || generation === undefined ? 'g0' : `g${generation}`;",
+ ),
+ # ---- a generation read short must not look like one read whole --------------------------
+ (
+ # The summary a search hit answers with is written onto the segment line, so this is where
+ # a search can start reporting the kind of a record instead of what it says.
+ "the segment line reports the kind where the summary belongs",
+ " summary: typeof record.summary === 'string' ? record.summary : '',",
+ " summary: typeof record.kind === 'string' ? record.kind : '',",
+ ),
+ (
+ # `size` is the whole file whether or not the read covered it, so this comparison is the
+ # only thing standing between a segment covering a PREFIX and being served as if it covered
+ # everything. Remove it and a truncated generation answers with a smaller total and says
+ # nothing about being wrong.
+ "a source that was read short is trusted as if it had been read whole",
+ " if ((a.truncated === true) !== (b.truncated === true)) return false;\n if (typeof a.revision === 'string' && a.revision.length > 0",
+ " if (typeof a.revision === 'string' && a.revision.length > 0",
+ ),
+ # ---- the answer is read back in ONE walk -----------------------------------------------
+ (
+ # The one that matters most here, because it is the version that was actually written and
+ # then measured to be SLOWER than the 34.2 MB index read it replaced. It changes no answer:
+ # every hit still names the right record and every assertion about values still passes. The
+ # only symptom is that a needle matching 14,092 records walks the segment 14,092 times — so
+ # the guard counts the walk instead of checking the answers.
+ "the answers are read by walking the segment once per ordinal again",
+ " return ordinals.map((ordinal) => found.get(ordinal) ?? null);",
+ " return ordinals.map((ordinal) => {\n"
+ " let from = 0;\n"
+ " let line = 0;\n"
+ " while (from <= surface.length) {\n"
+ " const nl = surface.indexOf('\\n', from);\n"
+ " if (line === ordinal) {\n"
+ " const tab = surface.indexOf('\\t', from);\n"
+ " return tab < 0 ? null : JSON.parse(surface.slice(from, tab));\n"
+ " }\n"
+ " if (nl === -1) break;\n"
+ " from = nl + 1;\n"
+ " line += 1;\n"
+ " }\n"
+ " return found.get(ordinal) ?? null;\n"
+ " });",
+ ),
+ (
+ # The batch is a batch because the scan hands back every ordinal at once. Answering in the
+ # order they sit in the segment looks identical until the caller asks for a capped, sorted or
+ # otherwise reordered subset — and then every hit names a different record.
+ "the answers come back in the order they sit rather than the order asked",
+ " return ordinals.map((ordinal) => found.get(ordinal) ?? null);",
+ " return [...found.values()];",
+ ),
+ (
+ # Structural, and the reason the first one is worth a mutation at all: a per-ordinal reader
+ # could be reintroduced beside the batch one, break nothing above, and sit there waiting to be
+ # called — which is how the O(n²) version got shipped in the first place.
+ "a per-ordinal reader is exported again for a caller to reach for",
+ "export function generationKey(generation) {\n return generation === null || generation === undefined ? 'active' : `g${generation}`;\n}",
+ "export function generationKey(generation) {\n return generation === null || generation === undefined ? 'active' : `g${generation}`;\n}\n\n"
+ "/** @deprecated one ordinal at a time — walks the whole segment to find it. */\n"
+ "export function readSegmentHit(surface, ordinal) {\n return readSegmentHits(surface, [ordinal])[0] ?? null;\n}",
+ ),
+ # ---- a retired field must not come back through this door ---------------------------
+ (
+ # The pair of fields this module stopped writing at schema 3. Nothing read them back, they
+ # cost 4.36% of every segment surface, and retiring them was its own batch — so the one
+ # thing worth guarding is that they stay gone. `buildSegment` writes whatever a record is
+ # handed, which means stopping is not a decision this function makes on its own: any
+ # upstream that starts supplying a byte range again puts it straight back on every line.
+ # `mutate-file-index-rows.py` closes the other door — the projection — and a control that
+ # owned only one of them could be walked around through the other.
+ "the byte range rides along on every segment line again",
+ " fileIdx: typeof record.fileIdx === 'number' ? record.fileIdx : -1,\n }) + '\\t' + searchSurfaceOf(record));",
+ " fileIdx: typeof record.fileIdx === 'number' ? record.fileIdx : -1,\n"
+ " byteStart: typeof record.byteStart === 'number' ? record.byteStart : -1,\n"
+ " byteEnd: typeof record.byteEnd === 'number' ? record.byteEnd : -1,\n"
+ " }) + '\\t' + searchSurfaceOf(record));",
+ ),
+]
+
+
+def read_exact(path):
+ """Normalise to LF for matching, and report the file's own newline so it can be put back."""
+ data = path.read_bytes()
+ text = data.decode("utf-8").replace("\r\n", "\n")
+ return text, ("\r\n" if b"\r\n" in data else "\n")
+
+
+def write_exact(path, text, newline):
+ if newline == "\r\n":
+ text = text.replace("\n", "\r\n")
+ path.write_bytes(text.encode("utf-8"))
+
+
+def run_probe():
+ proc = subprocess.run(
+ ["node", str(PROBE)],
+ cwd=str(ROOT),
+ capture_output=True,
+ text=True,
+ encoding="utf-8",
+ errors="replace",
+ )
+ return proc.returncode, (proc.stdout or "") + (proc.stderr or "")
+
+
+def main():
+ code, output = run_probe()
+ if code != 0:
+ print("baseline probe does not pass; fix that first")
+ print(output)
+ return 1
+ print("baseline clean")
+
+ original = MODULE.read_bytes()
+ missed = []
+ unnamed = []
+ for label, old, new in MUTATIONS:
+ text, newline = read_exact(MODULE)
+ if old not in text:
+ print(f"SKIP {label}: anchor not found")
+ missed.append(label)
+ continue
+ if old == new:
+ print(f"SKIP {label}: the mutation changes nothing")
+ missed.append(label)
+ continue
+ write_exact(MODULE, text.replace(old, new, 1), newline)
+ try:
+ code, output = run_probe()
+ finally:
+ MODULE.write_bytes(original)
+ if code == 0:
+ print(f"MISSED {label}: the probe still passed")
+ missed.append(label)
+ continue
+ first = next(
+ (line.strip() for line in output.splitlines() if line.strip().startswith("- ")),
+ None,
+ )
+ if first is None:
+ print(f"UNNAMED {label}: the probe failed without naming a rule")
+ unnamed.append(label)
+ else:
+ print(f"caught {label}\n -> {first}")
+
+ if MODULE.read_bytes() != original:
+ print(f"NOT RESTORED {MODULE}")
+ return 1
+ print("file restored byte-for-byte")
+
+ if missed or unnamed:
+ if missed:
+ print(f"\n{len(missed)} mutation(s) got through")
+ if unnamed:
+ print(f"{len(unnamed)} mutation(s) failed without naming a rule")
+ return 1
+ print(f"\nall {len(MUTATIONS)} mutations caught, each by name")
+ return 0
+
+
+if __name__ == "__main__":
+ sys.exit(main())
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-selection.py b/plugins/avatasia/mmc-trajectory/tests/mutate-selection.py
index 2591026..7bdf872 100644
--- a/plugins/avatasia/mmc-trajectory/tests/mutate-selection.py
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-selection.py
@@ -121,8 +121,8 @@
# Two writers. The poll path judged the selection again, and a reader could be told two
# different things depending on which one ran last.
("the poll path judges the selection a second time",
- [(" if (changed) rePinWindow();\n render();\n",
- " if (changed) { rePinWindow(); revealSelection(visibleEntries()); }\n render();\n")],
+ [(" if (changed) rePinWindow();\n",
+ " if (changed) { rePinWindow(); revealSelection(visibleEntries()); }\n")],
"the poll path does not judge the selection a second time"),
# The list becomes a second read. The caller hands over the rows it is about to build and the
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-session-reachability.py b/plugins/avatasia/mmc-trajectory/tests/mutate-session-reachability.py
new file mode 100644
index 0000000..8837ae6
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-session-reachability.py
@@ -0,0 +1,209 @@
+"""Make a nameable session unopenable again, in the shipped source, and require
+verify-session-reachability.mjs to report each way back by name.
+
+The defect was never "the list is too short". It was that one truncated array was both the
+picker's data and the service's only handle on a session directory, so `?session=<id>` could
+only ever resolve the 30 the picker already shows. Measured on a real store: 146 candidates,
+30 exposed, 116 answering 404 to their own id — 200/200 inside the window, 404/24 outside it.
+
+Every mutation here is the same mistake wearing a different hat: collapsing the two products
+back into one, trusting a decoded name as if it were an identity, or letting a resource budget
+answer a question it has no standing to answer.
+
+The two that look like harmless simplifications are the dangerous ones. Dropping the manifest
+re-check on the index hit is faster and passes every existing guard, because nothing else in
+the suite has a directory whose name disagrees with its manifest — it just serves the wrong
+conversation under an id the reader typed. And replacing the `session_scan_budget_exhausted`
+branch with a plain 404 is a one-line change that turns "we stopped looking" back into "it does
+not exist", which is the same lie the original slice told, just further from its cause.
+
+Anchors are multi-line and the tree is LF, so they carry bare \\n and the files are read and
+written with newline=''. No anchor may contain a line ending of its own.
+"""
+import io
+import os
+import subprocess
+import sys
+
+HERE = os.path.dirname(os.path.abspath(__file__))
+PLUGIN = os.path.dirname(HERE)
+SERVER = os.path.join(PLUGIN, "miniapp", "node", "server.mjs")
+CLIENT = os.path.join(PLUGIN, "miniapp", "client", "index.html")
+PROBE = os.path.join(HERE, "verify-session-reachability.mjs")
+
+MUTATIONS = [
+ # ---- the two products collapse back into one ----
+ #
+ # The original shape. Everything else in the suite still passes: the list is unchanged, the
+ # trajectory route still finds every session in the window, and no assertion anywhere else
+ # had a session outside it.
+ ("the walk returns one truncated list again",
+ [(" return { recentEntries: entries.slice(0, MAX_SESSION_LIST), byDecodedId, truncated };",
+ " return { recentEntries: entries.slice(0, MAX_SESSION_LIST), byDecodedId: new Map(), truncated };")],
+ "the id index is not the recent list", SERVER),
+
+ ("the recent list is no longer capped",
+ [(" return { recentEntries: entries.slice(0, MAX_SESSION_LIST), byDecodedId, truncated };",
+ " return { recentEntries: entries, byDecodedId, truncated };")],
+ "the recent list is still capped at MAX_SESSION_LIST", SERVER),
+
+ # ---- the index stops being built from the walk ----
+ #
+ # Correct-looking, and now the picker pays for the reachability fix: the index is derived
+ # from the slice, so a session outside the window has no fast path again.
+ ("the index is derived from the recent list instead of the walk",
+ [(" for (const entry of entries) {\n const id = decodeSessionIdFromDirName(basename(entry.dir));",
+ " for (const entry of entries.slice(0, MAX_SESSION_LIST)) {\n const id = decodeSessionIdFromDirName(basename(entry.dir));")],
+ "the id index is not the recent list", SERVER),
+
+ ("the index is no longer built at all",
+ [(" const id = decodeSessionIdFromDirName(basename(entry.dir));",
+ " const id = null;")],
+ "the index is built from the decoded directory name", SERVER),
+
+ # ---- duplicates silently resolved by directory order ----
+ #
+ # `Map.set` keeps the last writer. `readdir` order is not sorted and is not stable across
+ # platforms, so this is a Map that answers differently on two machines with the same store.
+ ("duplicate ids are collapsed by directory order",
+ [(" const bucket = byDecodedId.get(id);\n if (bucket) bucket.push(entry);\n else byDecodedId.set(id, [entry]);",
+ " byDecodedId.set(id, [entry]);")],
+ "duplicate ids are kept as a list rather than collapsed", SERVER),
+
+ # ---- a decoded name promoted to an identity ----
+ #
+ # The fast path now serves whatever the directory is called, without asking the manifest.
+ # Every other guard stays green: there is no fixture in this suite whose name and manifest
+ # disagree, so the only way to see this is to ask for a session by an id that belongs to one
+ # directory and be handed another.
+ ("an index hit is served without checking the manifest",
+ [(" if (candidateIdentity.id === requested) verified.push({ entry: candidate, identity: candidateIdentity });",
+ " verified.push({ entry: candidate, identity: candidateIdentity });")],
+ "a directory whose manifest disagrees is not served under the requested id", SERVER),
+
+ ("an index hit never reads the identity at all",
+ [(" const candidateIdentity = await readSessionIdentity(candidate.dir);\n"
+ " if (candidateIdentity.id === requested) verified.push({ entry: candidate, identity: candidateIdentity });",
+ " const candidateIdentity = { id: requested, generations: [] };\n"
+ " verified.push({ entry: candidate, identity: candidateIdentity });")],
+ "an index hit still reads the directory identity", SERVER),
+
+ # ---- ambiguity resolved by taking the first ----
+ #
+ # Two directories claiming one id, and the service quietly picks one. The reader is told
+ # they are looking at a conversation that is half of somebody else's.
+ ("an ambiguous id is resolved by taking whichever came first",
+ [(" if (verified.length === 1) picked = verified[0];",
+ " if (verified.length >= 1) picked = verified[0];")],
+ "an ambiguous id is not resolved by directory order", SERVER),
+
+ # ---- the budget answers a question it has no standing to answer ----
+ #
+ # Back to one answer for two different situations. "We stopped looking at 400" is not
+ # "there is no such session", and only one of the two is true.
+ ("an exhausted scan budget is reported as a missing session",
+ [(" if (candidates.truncated) {\n"
+ " return {\n"
+ " ok: false, status: 404, code: 'session_scan_budget_exhausted',\n"
+ " message: '会话数量超出本次扫描预算，请重试或缩小会话目录范围',\n"
+ " };\n"
+ " }\n", "")],
+ "the two answers are reachable from different conditions", SERVER),
+
+ ("the two failures report the same code",
+ [("ok: false, status: 404, code: 'session_scan_budget_exhausted',",
+ "ok: false, status: 404, code: 'session_not_found',")],
+ "the exhaustion path is a distinct answer from \"no such session\"", SERVER),
+
+ ("the walk no longer records that it stopped early",
+ [(" for (const name of names) {\n if (entries.length >= MAX_SESSION_CANDIDATES) { truncated = true; return; }",
+ " for (const name of names) {\n if (entries.length >= MAX_SESSION_CANDIDATES) return;")],
+ "a walk that runs out of candidate budget reports itself as truncated", SERVER),
+
+ # ---- the basename entry point ----
+ #
+ # A second way to name a session, and the only one that covers a directory whose name does
+ # not decode at all.
+ ("a full directory basename can no longer name a session",
+ [(" if (candidateIdentity.id === requested || basename(candidate.dir) === requested) {",
+ " if (candidateIdentity.id === requested) {")],
+ "a full directory basename can still name a session", SERVER),
+
+ # ---- the picker starts paying for the fix ----
+ #
+ # Widening the picker is a UI decision that was explicitly not taken here. Taking it by
+ # accident, inside a reachability fix, is how a 9x descriptor cost arrives unannounced.
+ ("the list route starts building from the id index",
+ [(" entries = (await listEntries()).recentEntries;",
+ " entries = [...(await listEntries()).byDecodedId.values()].flat();")],
+ "the list route builds from recentEntries", SERVER),
+
+ # ---- the page names a session it is not showing ----
+ #
+ # `sessionParam()` prefers `hostSessionId`, so this restores a page that renders
+ # 「跟随最新（自动切换）」 above a conversation it is pinned to and will never leave.
+ ("the page stops naming the session the host pinned it to",
+ [(" sessionId: detectHostSessionId(),", " sessionId: null,")],
+ "the page seeds the pinned session from the host id", CLIENT),
+
+ ("a pinned session outside the recent list renders as a blank select",
+ [(" if (previous && previous !== 'latest') {\n select.value = previous;\n"
+ " if (select.selectedIndex < 0) {",
+ " if (previous && previous !== 'latest') {\n select.value = previous;\n if (false) {")],
+ "a pinned id missing from the options gets one inserted, not a blank select", CLIENT),
+]
+
+ORIGINALS = {p: io.open(p, encoding="utf-8", newline="").read() for p in (SERVER, CLIENT)}
+
+
+def run():
+ proc = subprocess.run(["node", PROBE], cwd=HERE,
+ capture_output=True, text=True, encoding="utf-8", errors="replace")
+ return proc.returncode, proc.stdout + proc.stderr
+
+
+ok = True
+code, baseline = run()
+base_ok = code == 0 and "0 failed" in baseline
+print(("ok " if base_ok else "FAIL ") + "baseline green")
+ok = ok and base_ok
+
+caught = []
+for title, edits, expect, target in MUTATIONS:
+ paths = sorted({t for _, _, _, t in [(e[0], e[1], expect, target) for e in edits]})
+ try:
+ for old, new in edits:
+ hits = ORIGINALS[target].count(old)
+ if hits != 1:
+ raise SystemExit("FAIL anchor for %r matched %d times in %s" % (title, hits, target))
+ if old == new:
+ raise SystemExit("FAIL empty mutation for %r: the anchor equals its replacement" % title)
+ mutated = {p: ORIGINALS[p] for p in ORIGINALS}
+ for old, new in edits:
+ mutated[target] = mutated[target].replace(old, new, 1)
+ if mutated[target] == ORIGINALS[target]:
+ raise SystemExit("FAIL mutation for %r changed nothing" % title)
+ for p, text in mutated.items():
+ io.open(p, "w", encoding="utf-8", newline="").write(text)
+ during_code, during = run()
+ named = expect in during
+ red = during_code != 0
+ print(("ok " if (named and red) else "FAIL ") + "guard catches: " + title)
+ if not named:
+ print(" no assertion reported %r" % expect)
+ for line in during.splitlines()[-4:]:
+ print(" " + line.strip())
+ elif not red:
+ print(" the rule was reported but the guard still exited 0")
+ caught.append(named and red)
+ finally:
+ for p, text in ORIGINALS.items():
+ io.open(p, "w", encoding="utf-8", newline="").write(text)
+
+restored = all(io.open(p, encoding="utf-8", newline="").read() == ORIGINALS[p] for p in ORIGINALS)
+after_code, after = run()
+after_ok = after_code == 0 and "0 failed" in after
+print(("ok " if restored else "FAIL ") + "shipped files restored byte for byte")
+print(("ok " if after_ok else "FAIL ") + "green again after restore")
+
+sys.exit(0 if (ok and all(caught) and restored and after_ok) else 1)
\ No newline at end of file
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-sessions-etag.py b/plugins/avatasia/mmc-trajectory/tests/mutate-sessions-etag.py
new file mode 100644
index 0000000..741eefb
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-sessions-etag.py
@@ -0,0 +1,225 @@
+"""Break the /api/sessions validator in the shipped source and require verify-sessions-etag.mjs to
+report each way it comes back by name.
+
+A 304 that is served when the payload has changed is the worst failure this route can have: it is
+silent, it is permanent for that page, and the reader sees a session list that no longer matches
+the machine. Nothing crashes and nothing is logged. So the mutations below are mostly ways of
+serving a 304 that is not earned — a tag that forgot one of the values the payload is built from —
+and the guard has to catch each by name rather than by noticing the count went wrong somewhere.
+
+The one that reads like a simplification and is not: dropping `limit` from the material. The tag is
+then computed over the visible slice alone, so `?limit=10` and `?limit=20` share it and a page that
+asked for 20 keeps its copy while asking for 10 and is told nothing changed.
+
+Anchors are multi-line and both shipped files are LF, so they are written with bare \\n and read
+and written with newline='' — matching on normalised text while preserving the file's own endings.
+No anchor may contain a line ending of its own: one did, and it stopped resolving the moment the
+.gitattributes pinning LF landed.
+"""
+import io
+import os
+import subprocess
+import sys
+
+HERE = os.path.dirname(os.path.abspath(__file__))
+PLUGIN = os.path.dirname(HERE)
+SERVER = os.path.join(PLUGIN, "miniapp", "node", "server.mjs")
+CLIENT = os.path.join(PLUGIN, "miniapp", "client", "index.html")
+PROBE = os.path.join(HERE, "verify-sessions-etag.mjs")
+
+# (title, edits, expect, target)
+MUTATIONS = [
+ # ---- the material forgets something the payload uses ----
+
+ ("a rename stops moving the tag",
+ [(" const title = meta ? String(meta.title ?? \"\") : \"\";\n", " const title = \"\";\n")],
+ "a renamed session moves the tag", SERVER),
+
+ # `kind` is what puts the sub-agent and cron badges on the rows, so a page that keeps a stale
+ # tag is offering the reader a worker's session as if it were their conversation.
+ ("a changed session kind stops moving the tag",
+ [(" const kind = meta ? String(meta.kind ?? \"\") : \"\";\n", " const kind = \"\";\n")],
+ "a changed session kind moves the tag, even with no title", SERVER),
+
+ # The one that looks like a simplification. Two different requests, one tag.
+ ("the requested limit stops being part of the tag",
+ [(" const parts = ['limit=' + limit];", " const parts = [];")],
+ "a different limit moves the tag", SERVER),
+
+ # The separator. Without one, {"ab",""} and {"a","b"} concatenate to the same string, so two
+ # The separator, and there are two ways to get this wrong rather than one. Dropping it entirely
+ # merges {"ab",""} with {"a","b"}. Keeping a delimiter that a value can contain moves the same
+ # collision one character along: the boundary is still forgeable from inside a field. Only a
+ # representation with no ambiguity in it survives both, so there are two cases and each owns the
+ # assertion that names it.
+ ("the fields are concatenated with no separator at all",
+ [(" parts.push(JSON.stringify([entry.dir, entry.sizeBytes, entry.lastActiveAt, title, kind, parent]));\n",
+ " parts.push(\"\" + entry.dir + entry.sizeBytes + entry.lastActiveAt"
+ " + title + kind + parent);")],
+ "a title/kind split cannot be hidden inside the separator", SERVER),
+
+ # mtime is one of the three facts the descriptor cache keys on, and the only one that moves
+ # when a session is rewritten in place without growing.
+ ("a newer mtime stops moving the tag",
+ [(" parts.push(JSON.stringify([entry.dir, entry.sizeBytes, entry.lastActiveAt, title, kind, parent]));\n",
+ " parts.push(JSON.stringify([entry.dir, entry.sizeBytes, title, kind, parent]));\n")],
+ "a newer mtime moves the tag", SERVER),
+
+ # ---- the 304 that is not earned, because it is decided too late ----
+ #
+ # Correct answer, wrong bill: every descriptor is built and then thrown away. The validator
+ # then buys only the transfer, and the transfer was never the expensive half.
+
+ ("the 304 is decided after the descriptors are built",
+ [(" if (etagMatches(requestEtag, etag)) {\n"
+ " sendJsonBody(response, 304, '', { etag, revalidate: true });\n"
+ " return;\n"
+ " }\n\n", "")],
+ "the 304 is decided before any descriptor is built", SERVER),
+
+ # `no-store` tells the browser not to revalidate at all, which turns the whole mechanism off
+ # on the client side while the route still pays to compute the tag.
+ ("the list answers through the non-revalidating sender",
+ [(" sendJsonBody(response, 200, body, { etag, revalidate: true });",
+ " sendJson(response, 200, JSON.parse(body));")],
+ "the list no longer answers through the non-revalidating sender", SERVER),
+
+ # A 304 with no tag leaves the client unable to send it again, so every poll after it is a
+ # full body: the cost is invisible and the route looks healthy. The anchor runs past the block
+ # because the trajectory route has an identical 304 line and this one has to name which.
+ ("the 304 stops advertising the tag",
+ [(" sendJsonBody(response, 304, '', { etag, revalidate: true });\n"
+ " return;\n"
+ " }\n\n"
+ " // Same shape as the trajectory route's cache-hit branch",
+ " sendJsonBody(response, 304, '', { revalidate: true });\n"
+ " return;\n"
+ " }\n\n"
+ " // Same shape as the trajectory route's cache-hit branch")],
+ "the 304 is sent through the revalidating sender", SERVER),
+
+ # ---- the page ----
+
+ ("the page stops sending the list validator",
+ [(" headers['If-None-Match'] = state.sessionsEtag;", "")],
+ "the page sends the list validator back", CLIENT),
+
+ # A 304 that re-renders is correct and pointless: the re-render is the cost the 304 exists to
+ # avoid, and on a big list it is the larger half.
+ ("a 304 re-renders the picker anyway",
+ [(" if (response.status === 304) {\n"
+ " var fresh = response.headers.get('etag');\n"
+ " if (fresh) state.sessionsEtag = fresh;\n"
+ " state.sessionsEtagFor = key;\n"
+ " return { changed: false, body: null, etag: state.sessionsEtag };\n"
+ " }",
+ " if (response.status === 304) {\n"
+ " renderSessionSelect();\n"
+ " return { changed: false, body: null, etag: state.sessionsEtag };\n"
+ " }")],
+ "a 304 does not re-render the picker", CLIENT),
+
+ # Half a validator: kept, never sent. Every poll then carries no header and gets a full body.
+ ("the page keeps the validator but stops sending it",
+ [(" } else if (state.sessionsEtag && state.sessionsEtagFor === key) {\n"
+ " headers['If-None-Match'] = state.sessionsEtag;\n"
+ " }", " }")],
+ "the page sends the list validator back", CLIENT),
+
+ # A refresh that revalidates the list is a refresh of half the page.
+ ("a manual refresh stops dropping the list validator",
+ [(" if (manual) {\n"
+ " state.sessionsEtag = '';\n"
+ " state.sessionsEtagFor = '';\n"
+ " } else if", " if (false) {\n"
+ " state.sessionsEtag = '';\n"
+ " state.sessionsEtagFor = '';\n"
+ " } else if")],
+ "a manual refresh drops the list validator", CLIENT),
+
+ # A validator carried across a different request asks a question about a payload it is not for.
+ ("the list validator stops being bound to its request key",
+ [("state.sessionsEtagFor === key", "true")],
+ "the list validator is bound to the request key", CLIENT),
+
+ # The one that looks like tidying. `parent` is in the body — it is what puts 「子会话」 on the
+ # row — so leaving it out of the material makes the tag constant across a change the reader
+ # can see, and the 304 that follows is a statement about bytes nobody re-computed. Found by
+ # review, not by a failing test: the guard was passing because every map it built varied only
+ # the title and the kind, so nothing ever asked the question.
+ ("the validator stops covering the parent the body sends",
+ [(" const parent = meta ? String(meta.parent ?? \"\") : \"\";\n", " const parent = \"\";\n")],
+ "a changed parent moves the tag, even with the title and kind held constant", SERVER),
+
+ # The one this round's independent pass found. The material joined its fields on a bare NUL, and
+ # a SQLite TEXT column can hold a NUL: a title of "a<NUL>b" beside a kind of "c" and a title of "a"
+ # beside a kind of "b<NUL>c" produced byte-identical material, so two rows a reader can tell apart
+ # shared an ETag and the 304 that followed was served for a payload the caller never held.
+ # `String.fromCharCode(0)` rather than an escape in the replacement, because the point of the
+ # mutation is the character, not how it is spelled.
+ ("the fields go back to being joined on a bare NUL",
+ [(" parts.push(JSON.stringify([entry.dir, entry.sizeBytes, entry.lastActiveAt, title, kind, parent]));\n",
+ " parts.push(entry.dir + \"|\" + entry.sizeBytes + \"|\" + entry.lastActiveAt"
+ " + \"|\" + title + String.fromCharCode(0) + kind"
+ " + String.fromCharCode(0) + parent);")],
+ "a separator-like character inside a value cannot merge two readable rows into one tag", SERVER),
+]
+
+ORIGINALS = {
+ SERVER: io.open(SERVER, encoding="utf-8", newline="").read(),
+ CLIENT: io.open(CLIENT, encoding="utf-8", newline="").read(),
+}
+
+
+def run():
+ proc = subprocess.run(["node", PROBE], cwd=HERE,
+ capture_output=True, text=True, encoding="utf-8", errors="replace")
+ return proc.returncode, proc.stdout + proc.stderr
+
+
+ok = True
+code, baseline = run()
+base_ok = code == 0 and "0 failed" in baseline
+print(("ok " if base_ok else "FAIL ") + "baseline green")
+ok = ok and base_ok
+
+caught = []
+for title, edits, expect, target in MUTATIONS:
+ original = ORIGINALS[target]
+ for old, new in edits:
+ hits = original.count(old)
+ if hits != 1:
+ raise SystemExit("FAIL anchor for %r matched %d times" % (title, hits))
+ if old == new:
+ raise SystemExit("FAIL empty mutation for %r: the anchor equals its replacement" % title)
+ try:
+ mutated = original
+ for old, new in edits:
+ mutated = mutated.replace(old, new, 1)
+ if mutated == original:
+ raise SystemExit("FAIL mutation for %r changed nothing" % title)
+ io.open(target, "w", encoding="utf-8", newline="").write(mutated)
+ during_code, during = run()
+ named = expect in during
+ red = during_code != 0
+ # A guard that crashes is not a guard that caught anything: the rule has to be reported by
+ # name, or the mutation only proved that the file no longer parses.
+ print(("ok " if (named and red) else "FAIL ") + "guard catches: " + title)
+ if not named:
+ print(" no assertion reported %r" % expect)
+ for line in during.splitlines()[-4:]:
+ print(" " + line.strip())
+ elif not red:
+ print(" the rule was reported but the guard still exited 0")
+ caught.append(named and red)
+ finally:
+ io.open(target, "w", encoding="utf-8", newline="").write(ORIGINALS[target])
+
+restored = all(io.open(path, encoding="utf-8", newline="").read() == text
+ for path, text in ORIGINALS.items())
+after_code, after = run()
+after_ok = after_code == 0 and "0 failed" in after
+print(("ok " if restored else "FAIL ") + "both files restored byte for byte")
+print(("ok " if after_ok else "FAIL ") + "green again after restore")
+
+sys.exit(0 if (ok and all(caught) and restored and after_ok) else 1)
\ No newline at end of file
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-steer.py b/plugins/avatasia/mmc-trajectory/tests/mutate-steer.py
index 15ad23c..51b66d5 100644
--- a/plugins/avatasia/mmc-trajectory/tests/mutate-steer.py
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-steer.py
@@ -1,14 +1,17 @@
"""Mutation controls for the steer split and the turn classification.
-Two mistakes worth being able to catch automatically:
+Three mistakes worth being able to catch automatically:
1. Filing every prompt in a turn as `user`. The count then reads as conversations but is
really messages, and a turn can show three of them — the exact mismatch that sent
someone looking for a mechanism.
2. Filing 问答 as the turn *after* the question again, which puts the label on a turn while
the reader still has not answered.
+ 3. Deciding the opener from the projected slice instead of the lineage. A steer whose turn
+ opened in an earlier generation is then the only prompt the slice shows, so it reads as
+ that turn's first prompt: counted as dialogue, and its turn filed 其他 instead of 对话.
-Both are one-line edits, which is exactly why they need a guard that has been seen to fail.
+All are one-line edits, which is exactly why they need a guard that has been seen to fail.
"""
import io
import os
@@ -20,9 +23,9 @@
SERVER = os.path.join(ROOT, "miniapp", "node", "server.mjs")
PROBE = os.path.join(HERE, "verify-generations.mjs")
-# server.mjs is CRLF. A multi-line anchor written with bare \n never matches it, which reads as
-# "the anchor drifted" and sends you off to re-find a rule that never moved. Build every anchor
-# in the file's own line ending.
+# server.mjs is LF (pinned by .gitattributes). Build every multi-line anchor in the file's own
+# line ending anyway: this script once read a CRLF working copy, and an anchor written with the
+# other ending reads as "the rule drifted" and sends you off to re-find a rule that never moved.
original = io.open(SERVER, encoding="utf-8", newline="").read()
NL = "\r\n" if "\r\n" in original else "\n"
@@ -31,7 +34,10 @@ def anchored(*lines):
return NL.join(lines)
-OLD_STEER = " const steered = turn.records.some((r) => r.kind === 'user');"
+OLD_STEER = anchored(" const opener = openerByTurn.get(turnKey);",
+ " const steered = opener === undefined",
+ " ? turn.records.some((r) => r.kind === 'user')",
+ " : opener.row !== row;")
OLD_CONT = anchored(" } else if (closed) {",
" turn.turnClass = 'continuation';",
" continuationTurns += 1;")
@@ -45,6 +51,18 @@ def anchored(*lines):
OLD_STEER,
" const steered = true;",
"the prompt that opened the turn is the only one counted as dialogue"),
+ ("the opener is decided from the slice, not the lineage",
+ OLD_STEER,
+ anchored(" const opener = openerByTurn.get(turnKey);",
+ " const steered = turn.records.some((r) => r.kind === 'user');"),
+ "the prompt alone in the slice is still a steer"),
+ ("an opener outside the view counts as no opener at all",
+ OLD_STEER,
+ anchored(" const opener = openerByTurn.get(turnKey);",
+ " const steered = opener === undefined || opener.row === null",
+ " ? turn.records.some((r) => r.kind === 'user')",
+ " : opener.row !== row;"),
+ "the prompt alone in the slice is still a steer"),
("Q and A goes back to the turn after the question",
OLD_CONT,
" } else if (closed) {\n"
@@ -52,6 +70,27 @@ def anchored(*lines):
" continuationTurns += 1;\n"
" qaTurns += 1;",
"the turn after it is a continuation, not a Q&A"),
+ # A file that declares nothing used to be read as generation 0, which ended the walk and
+ # turned every sealed generation the session had into an orphan.
+ ("an active file with no marker starts the walk at generation 0 again",
+ " const activeGeneration = activeProbe.marker\n"
+ " ? activeProbe.marker.generation\n"
+ " : activeCatalogGeneration(null, catalog.generations) ?? 0;",
+ " const activeGeneration = activeProbe.marker ? activeProbe.marker.generation : 0;",
+ "an active file with no marker still starts at the generation the catalog names"),
+ ("a sealed file with no marker is refused again",
+ " const declared = parent.marker ? parent.marker.generation : want;",
+ " const declared = parent.marker ? parent.marker.generation : 0;",
+ "a sealed snapshot reached at a generation it does not declare is still stitched"),
+ # ...and the counter-example must keep passing, or the fix has quietly turned the catalog
+ # into the authority: a file that DOES declare its generation still overrides it.
+ ("the catalog overrides a file that declares its own generation",
+ " const activeGeneration = activeProbe.marker\n"
+ " ? activeProbe.marker.generation\n"
+ " : activeCatalogGeneration(null, catalog.generations) ?? 0;",
+ " const activeGeneration = activeCatalogGeneration(null, catalog.generations)\n"
+ " ?? (activeProbe.marker ? activeProbe.marker.generation : 0);",
+ "a file that declares its own generation still wins over the catalog"),
]
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-time-range.py b/plugins/avatasia/mmc-trajectory/tests/mutate-time-range.py
new file mode 100644
index 0000000..8bb00b3
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-time-range.py
@@ -0,0 +1,338 @@
+"""Mutation control for verify-time-range.mjs.
+
+This guard was excluded from `run.mjs` for its entire life, and the first six mutations below are
+the ones that were checked BY HAND against a throwaway copy of the package while it sat there — a
+one-off result that nothing re-ran, so a later edit could pass everything else in this directory
+while this file went unverified. It runs in the default suite now, so they run here too.
+
+Each mutation reintroduces exactly one bug and must be caught BY NAME. The name matters more than
+the red: the guard prints FAILED_NAMES as JSON, so an edit that trips some unrelated assertion does
+not count as catching the rule it was aimed at.
+
+The expected name is the assertion that OWNS the rule. A mutation here is not satisfied by the
+suite going red.
+
+The long family at the bottom is one dropped count per compared field, and the reason it is a family
+rather than three hand-picked cases is written where it is built.
+"""
+import json
+import subprocess
+import sys
+from pathlib import Path
+
+HERE = Path(__file__).resolve().parent
+ROOT = HERE.parent
+HTML = ROOT / "miniapp" / "client" / "index.html"
+GUARD = HERE / "verify-time-range.mjs"
+
+# (label, expected assertion name, anchor, replacement)
+MUTATIONS = [
+ (
+ "a bound is read as UTC, shifting it by this machine's distance from Greenwich",
+ "parse across midnight",
+ " var wall = new Date(year, month - 1, day, hour, minute, second, 0);",
+ " var wall = new Date(raw + 'Z');",
+ ),
+ (
+ "the session-start subtraction is dropped, so a bound becomes a wall clock",
+ "parse at session start",
+ " return wall.getTime() - sessionStartMs;",
+ " return wall.getTime();",
+ ),
+ (
+ "one comparison in recordInRange() is flipped, so the filter keeps the wrong rows",
+ "a date range selects exactly the records inside that wall-clock window",
+ " if (isCount(from) && at < from) return false;",
+ " if (isCount(from) && at > from) return false;",
+ ),
+ (
+ "clearFilters() no longer runs the base reset",
+ "清除筛选 runs the base reset",
+ " function clearFilters() {\n resetBaseFilters();",
+ " function clearFilters() {",
+ ),
+ (
+ "resetBaseFilters() no longer drops the range, leaving a filter the reader cannot see",
+ "清除筛选 also drops the range",
+ " dropOverviewSelection();\n clearTimeRange();",
+ " dropOverviewSelection();",
+ ),
+ (
+ "the query and the range are cleared in the wrong order, so the ledger renders once with neither",
+ "清除筛选 also drops the range",
+ " state.query = '';\n state.searchHits = null;",
+ " state.searchHits = null;",
+ ),
+ (
+ "the re-derived stats drop steers, the field the server's shape carries and this copy lost",
+ "whole-session steers",
+ " steers: 0,\n",
+ "",
+ ),
+ (
+ "applying a range no longer re-cuts the snapshot, so the open-ended range grows on its own",
+ "applying a range re-cuts the snapshot",
+ " state.rangeCutoff = latestRecordIndex();\n }\n syncRangeButtons();",
+ " state.rangeCutoff = null;\n }\n syncRangeButtons();",
+ ),
+ # ---- the two counters that were being compared at zero ------------------------------------
+ # Both of these survived an earlier version of this guard, and that is worth recording rather
+ # than just fixing: the fixture was built WITHOUT a bare checkpoint turn, so both sides read 0,
+ # so `0 === 0` passed with the page's `+= 1` deleted outright. The guard was comparing two
+ # zeros that it had itself arranged — a self-fulfilling comparison, which is the failure mode a
+ # mutation control exists to surface and a count of assertions cannot.
+ (
+ "the page stops counting compactions, which the fixture now makes non-zero",
+ "whole-session compactions",
+ " else if (kind === 'compaction') stats.compactions += 1;",
+ "",
+ ),
+ (
+ "the page stops counting turns that are nothing but a checkpoint",
+ "whole-session compactionTurns",
+ " stats.compactionTurns += 1;",
+ "",
+ ),
+]
+
+# ---- one dropped count per compared field ----------------------------------------------------
+# The guard compares twenty numbers between the page's re-derivation and the server's own. Both
+# sides are correct in a passing run, so a comparison is only capable of failing if one of them is
+# broken — which means a field nobody mutates is a field whose comparison could be satisfied by a
+# page that never counts it at all. Three fields had a mutation here; the other seventeen had none,
+# and 「the page re-derives all twenty fields correctly」 was asserted by a guard that could not tell
+# a page that re-derives nineteen of them.
+#
+# Driven off the same names the guard compares, with the label built from the field name for the
+# same reason: a hand-written label and a hand-written expected name drift apart silently, and the
+# control would then report a caught mutation that was caught by the wrong assertion.
+N = "\n"
+COUNT_ANCHORS = [
+ ("messages", " stats.messages += 1;\n"),
+ ("toolCalls", N + " else if (kind === 'toolCall') stats.toolCalls += 1;"),
+ ("toolResults", N + " else if (kind === 'toolResult') stats.toolResults += 1;"),
+ ("thinkingBlocks", N + " else if (kind === 'thinking') stats.thinkingBlocks += 1;"),
+ ("steers", N + " else if (kind === 'steer') stats.steers += 1;"),
+ ("errors", " stats.errors += 1;\n"),
+ ("tokens.input", " if (isCount(tokens.input)) stats.tokens.input += tokens.input;\n"),
+ ("tokens.output", " if (isCount(tokens.output)) stats.tokens.output += tokens.output;\n"),
+ ("tokens.cacheRead", " if (isCount(tokens.cacheRead)) stats.tokens.cacheRead += tokens.cacheRead;\n"),
+ ("tokens.cacheWrite", " if (isCount(tokens.cacheWrite)) stats.tokens.cacheWrite += tokens.cacheWrite;\n"),
+ ("tokens.totalTokens", " if (isCount(tokens.totalTokens)) stats.tokens.totalTokens += tokens.totalTokens;\n"),
+ ("turnsWithPrompt", " stats.turnsWithPrompt += 1;\n"),
+ ("openTurns", " if (turn.closed !== true) stats.openTurns += 1;\n"),
+ ("qaTurns", " if (turn.askedReader === true && turn.closed !== true) stats.qaTurns += 1;\n"),
+ ("continuationTurns", " stats.continuationTurns += 1;\n"),
+ ("turnsWithoutPrompt", " stats.turnsWithoutPrompt += 1;\n"),
+]
+for _field, _anchor in COUNT_ANCHORS:
+ MUTATIONS.append(
+ (
+ "the page stops counting " + _field,
+ "whole-session " + _field,
+ _anchor,
+ "",
+ )
+ )
+
+# durationMs is not a count, so it gets a mutation of its own shape: the span of the rows kept is
+# replaced by a constant. `0` is the value that says "this conversation took no time at all", which
+# is what a reader would be shown if the subtraction went missing.
+MUTATIONS.append(
+ (
+ "the page stops measuring the span of the rows it kept",
+ "whole-session durationMs",
+ " stats.durationMs = first === null ? null : last - first;\n",
+ " stats.durationMs = first === null ? null : 0;\n",
+ )
+)
+
+# `userMessages` cannot be deleted the way its neighbours are. It is the head of the
+# `if / else if` chain over `record.kind`, so removing the line leaves an `else if` with nothing to
+# attach to: the page stops parsing, the guard throws, and it prints no FAILED_NAMES at all. That is
+# reported as UNNAMED, which is weaker than being reported as caught — the suite is red either way,
+# but nothing says which rule was broken. Accumulating zero instead keeps the chain intact and
+# produces the defect the field is compared on.
+MUTATIONS.append(
+ (
+ "the page stops counting userMessages, the head of the record-kind chain",
+ "whole-session userMessages",
+ " if (kind === 'user') stats.userMessages += 1;",
+ " if (kind === 'user') stats.userMessages += 0;",
+ )
+)
+
+# The field the one above cannot be reached from. `messagesAll` is the only number on the card that
+# must NOT be re-scoped — 「全程 N」 beside a range is the comparison the reader wants — so it is
+# compared the other way round, against the server's own figure. In a fixture whose view was the
+# whole conversation those two numbers were the same number, the assertion was the page agreeing
+# with itself, and swapping the field for the view-scoped one changed nothing an assertion could
+# see. That edit is this case.
+MUTATIONS.append(
+ (
+ "the page re-scopes messagesAll onto the view, so 「全程 N」 quietly becomes the range's count",
+ "messagesAll stays whole-session",
+ " messagesAll: base.messagesAll,\n",
+ " messagesAll: base.messages,\n",
+ )
+)
+
+# ---- the fixture itself, so its own preconditions are known to be able to fail ----------------
+# Everything above breaks the page and asks the guard to notice. These two break the guard's own
+# session and ask the guard to notice that IT lost the property it depends on. Without them the
+# twenty non-zero assertions are a claim about a generator nobody has tried to starve: shrink the
+# session until a counter reads zero and every comparison below it becomes `0 === 0` again, with
+# nothing in the suite able to say so.
+#
+# They target the guard rather than the page, so they are kept apart from MUTATIONS above: this file
+# is the thing being run, and the two are restored by separate before/after byte snapshots.
+FIXTURE_MUTATIONS = [
+ (
+ "the session stops generating checkpoint turns, so both compaction counters read zero",
+ "the fixture makes compactions non-zero, so the page is counted against something",
+ " if (t % 23 === 7) {\n",
+ " if (t % 23 === 777) {\n",
+ ),
+ (
+ "the view becomes the whole conversation again, so messagesAll and messages are one number",
+ "the conversation and this view are different sizes, so the two cannot be swapped",
+ "const FIRST_VIEWED_GENERATION = 1;",
+ "const FIRST_VIEWED_GENERATION = 0;",
+ ),
+]
+
+
+def read_exact(path):
+ """Normalise to LF for matching, and report the file's own newline so it can be put back."""
+ data = path.read_bytes()
+ text = data.decode("utf-8").replace("\r\n", "\n")
+ return text, ("\r\n" if b"\r\n" in data else "\n")
+
+
+def write_exact(path, text, newline):
+ if newline == "\r\n":
+ text = text.replace("\n", "\r\n")
+ path.write_bytes(text.encode("utf-8"))
+
+
+def run_guard():
+ proc = subprocess.run(
+ ["node", str(GUARD)],
+ cwd=str(ROOT),
+ capture_output=True,
+ text=True,
+ encoding="utf-8",
+ errors="replace",
+ )
+ return proc.returncode, (proc.stdout or "") + (proc.stderr or "")
+
+
+def failed_names(output):
+ """The guard's machine-readable failure list, or None when it did not print one."""
+ for line in output.splitlines():
+ if line.startswith("FAILED_NAMES"):
+ try:
+ return json.loads(line.split("\t", 1)[1])
+ except (IndexError, ValueError):
+ return None
+ return None
+
+
+def run_cases(cases, path, original, missed, unnamed):
+ """Apply each case to `path` in turn, restoring the file's startup bytes after every one.
+
+ The restore is the bytes read before the first case rather than HEAD, so a run against a
+ working tree holding uncommitted work in this file puts that work back rather than the
+ committed version of it.
+ """
+ for label, expected, old, new in cases:
+ text, newline = read_exact(path)
+ if old not in text:
+ print(f"SKIP {label}: anchor not found")
+ missed.append(label)
+ continue
+ if old == new:
+ print(f"SKIP {label}: the mutation changes nothing")
+ missed.append(label)
+ continue
+ write_exact(path, text.replace(old, new, 1), newline)
+ try:
+ code, output = run_guard()
+ finally:
+ path.write_bytes(original)
+ if code == 0:
+ print(f"MISSED {label}: the guard still passed")
+ missed.append(label)
+ continue
+ names = failed_names(output)
+ if names is None:
+ print(f"UNNAMED {label}: the guard failed without printing FAILED_NAMES")
+ unnamed.append(label)
+ elif expected in names:
+ print(f"caught {label}\n -> {expected}")
+ else:
+ print(f"MISSED {label}: guard failed, but not on {expected!r}\n -> {names}")
+ missed.append(label)
+
+
+def main():
+ code, output = run_guard()
+ if code != 0:
+ print("baseline guard does not pass; fix that first")
+ print(output)
+ return 1
+ print("baseline clean")
+
+ original = HTML.read_bytes()
+ guard_original = GUARD.read_bytes()
+ missed = []
+ unnamed = []
+ run_cases(MUTATIONS, HTML, original, missed, unnamed)
+ if FIXTURE_MUTATIONS:
+ run_cases(FIXTURE_MUTATIONS, GUARD, guard_original, missed, unnamed)
+
+ # ---- the other direction ---------------------------------------------------------------
+ # A note in the shipped file must not change a single verdict. If adding prose can turn this
+ # guard red, it is reading the prose.
+ text, newline = read_exact(HTML)
+ anchor = " function clearTimeRange() {"
+ note = "/* note-only-edit-marker */"
+ guard_bytes = GUARD.read_bytes()
+ if anchor not in text or note in guard_bytes.decode("utf-8"):
+ print("SKIP comment-only edit: precondition not met")
+ missed.append("comment-only edit")
+ else:
+ write_exact(HTML, text.replace(anchor, " " + note + "\n" + anchor, 1), newline)
+ try:
+ code, output = run_guard()
+ finally:
+ HTML.write_bytes(original)
+ if HTML.read_bytes() != original:
+ print(f"NOT RESTORED {HTML}")
+ return 1
+ if code != 0:
+ print(f"MISSED comment-only edit: adding a note turned the guard red\n{output}")
+ missed.append("comment-only edit")
+ else:
+ print("caught a comment-only note leaves every verdict unchanged")
+
+ if HTML.read_bytes() != original:
+ print(f"NOT RESTORED {HTML}")
+ return 1
+ if GUARD.read_bytes() != guard_original:
+ print(f"NOT RESTORED {GUARD}")
+ return 1
+ print("files restored byte-for-byte")
+
+ if missed or unnamed:
+ if missed:
+ print(f"\n{len(missed)} mutation(s) got through")
+ if unnamed:
+ print(f"{len(unnamed)} mutation(s) failed without naming a rule")
+ return 1
+ print(f"\nall {len(MUTATIONS)} mutations caught, each by name")
+ return 0
+
+
+if __name__ == "__main__":
+ sys.exit(main())
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-trajectory-cache.py b/plugins/avatasia/mmc-trajectory/tests/mutate-trajectory-cache.py
new file mode 100644
index 0000000..1a007d1
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-trajectory-cache.py
@@ -0,0 +1,176 @@
+"""Mutation control for verify-trajectory-cache.mjs.
+
+Each mutation reintroduces exactly one bug the probe is supposed to catch. The probe must FAIL
+every time, and the file must come back byte-for-byte identical afterwards. A mutation that the
+probe still passes means the assertion was tautological; a mutation whose anchor no longer exists
+means the assertion went dead, which is worse — the runner reports those as misses too.
+
+The first four are the ones that matter: they each break a DIFFERENT part of the family mechanism,
+because a bug that collapsed two of them would still be caught by the wrong assertion and we would
+not learn which one mattered.
+"""
+import subprocess
+import sys
+from pathlib import Path
+
+HERE = Path(__file__).resolve().parent
+ROOT = HERE.parent
+SERVER = ROOT / "miniapp" / "node" / "server.mjs"
+PROBE = HERE / "verify-trajectory-cache.mjs"
+
+FAMILY_EVICT = """ for (const [existingKey, existing] of entries) {
+ if (existingKey !== key && existing.family === family) entries.delete(existingKey);
+ }
+"""
+
+LIMIT_EVICT = """ while (entries.size > limit) {
+ const oldest = entries.keys().next();
+ if (oldest.done) break;
+ entries.delete(oldest.value);
+ }
+"""
+
+RECENCY = """ // Re-reading is the only signal that an entry is still hot, so it refreshes recency.
+ entries.delete(key);
+ entries.set(key, hit);
+ return hit.value;
+"""
+
+MUTATIONS = [
+ # ---- the family mechanism, one piece at a time ----------------------------------
+ (
+ "the cache stops dropping a superseded version, so growth stacks bodies again",
+ SERVER,
+ FAMILY_EVICT,
+ "",
+ ),
+ (
+ "the route names the whole key as the family, so every version is its own family",
+ SERVER,
+ "trajectoryCache.set(cacheKey, trajectoryCacheFamily(entry.dir, filter), { at: Date.now(), etag, body, raws, rowPos: rowPosByRecord, decoded: new Map() });",
+ "trajectoryCache.set(cacheKey, cacheKey, { at: Date.now(), etag, body, raws, rowPos: rowPosByRecord, decoded: new Map() });",
+ ),
+ (
+ "the family stops naming the slice, so one session's generations evict each other",
+ SERVER,
+ " const gen = filter === null || filter === undefined ? 'all' : String(filter);\n return `${dir}|gen=${gen}|`;",
+ " return `${dir}|gen=all|`;",
+ ),
+ (
+ "the family stops naming the session, so two sessions evict each other",
+ SERVER,
+ " return `${dir}|gen=${gen}|`;",
+ " return `|gen=${gen}|`;",
+ ),
+ (
+ "the family comparison is dropped, so a newer version keeps its predecessor",
+ SERVER,
+ " if (existingKey !== key && existing.family === family) entries.delete(existingKey);",
+ " if (existingKey === key) entries.delete(existingKey);",
+ ),
+ # ---- the bound ------------------------------------------------------------------
+ (
+ "the entry bound stops evicting, so distinct sessions grow without limit",
+ SERVER,
+ LIMIT_EVICT,
+ "",
+ ),
+ (
+ "reading stops refreshing recency, so the family the reader keeps asking for is evicted",
+ SERVER,
+ RECENCY,
+ " return hit.value;\n",
+ ),
+ # ---- structure ------------------------------------------------------------------
+ (
+ "the cache becomes a module-level singleton, shared across every runtime instance",
+ SERVER,
+ " const trajectoryCache = createTrajectoryCache(TRAJECTORY_CACHE_ENTRIES);",
+ " globalThis.__trajectoryCache = globalThis.__trajectoryCache || createTrajectoryCache(TRAJECTORY_CACHE_ENTRIES);\n const trajectoryCache = globalThis.__trajectoryCache;",
+ ),
+ (
+ "the key stops carrying the active file's size, so a grown session serves a stale body",
+ SERVER,
+ " return `${trajectoryCacheFamily(entry.dir, filter)}${lineage}|${entry.sizeBytes}|${entry.lastActiveAt}|${identity.catalogBytes ?? ''}|${bind}`;",
+ " return `${trajectoryCacheFamily(entry.dir, filter)}${lineage}|${entry.lastActiveAt}|${identity.catalogBytes ?? ''}|${bind}`;",
+ ),
+ (
+ "the key stops carrying the lineage, so a compaction that only rotated snapshots serves a stale body",
+ SERVER,
+ " return `${trajectoryCacheFamily(entry.dir, filter)}${lineage}|${entry.sizeBytes}|${entry.lastActiveAt}|${identity.catalogBytes ?? ''}|${bind}`;",
+ " return `${trajectoryCacheFamily(entry.dir, filter)}${entry.sizeBytes}|${entry.lastActiveAt}|${identity.catalogBytes ?? ''}|${bind}`;",
+ ),
+]
+
+
+def read_exact(path):
+ """Normalise to LF for matching, and report the file's own newline so it can be put back."""
+ data = path.read_bytes()
+ text = data.decode("utf-8").replace("\r\n", "\n")
+ return text, ("\r\n" if b"\r\n" in data else "\n")
+
+
+def write_exact(path, text, newline):
+ if newline == "\r\n":
+ text = text.replace("\n", "\r\n")
+ path.write_bytes(text.encode("utf-8"))
+
+
+def run_probe():
+ proc = subprocess.run(
+ ["node", str(PROBE)],
+ cwd=str(ROOT),
+ capture_output=True,
+ text=True,
+ encoding="utf-8",
+ errors="replace",
+ )
+ return proc.returncode, (proc.stdout or "") + (proc.stderr or "")
+
+
+def main():
+ code, output = run_probe()
+ if code != 0:
+ print("baseline probe does not pass; fix that first")
+ print(output)
+ return 1
+ print("baseline clean")
+
+ originals = {path: path.read_bytes() for path in {m[1] for m in MUTATIONS}}
+ missed = []
+ for label, path, old, new in MUTATIONS:
+ text, newline = read_exact(path)
+ if old not in text:
+ print(f"SKIP {label}: anchor not found in {path.name}")
+ missed.append(label)
+ continue
+ write_exact(path, text.replace(old, new, 1), newline)
+ try:
+ code, output = run_probe()
+ finally:
+ path.write_bytes(originals[path])
+ if code == 0:
+ print(f"MISSED {label}: the probe still passed")
+ missed.append(label)
+ else:
+ first = next(
+ (line.strip() for line in output.splitlines() if line.strip().startswith("- ")),
+ "(no detail)",
+ )
+ print(f"caught {label}\n -> {first}")
+
+ for path, data in originals.items():
+ if path.read_bytes() != data:
+ print(f"NOT RESTORED {path}")
+ return 1
+ print("all files restored byte-for-byte")
+
+ if missed:
+ print(f"\n{len(missed)} mutation(s) got through")
+ return 1
+ print(f"\nall {len(MUTATIONS)} mutations caught")
+ return 0
+
+
+if __name__ == "__main__":
+ sys.exit(main())
diff --git a/plugins/avatasia/mmc-trajectory/tests/mutate-turn-breakdown.py b/plugins/avatasia/mmc-trajectory/tests/mutate-turn-breakdown.py
index 85eaffd..e8ee2c5 100644
--- a/plugins/avatasia/mmc-trajectory/tests/mutate-turn-breakdown.py
+++ b/plugins/avatasia/mmc-trajectory/tests/mutate-turn-breakdown.py
@@ -44,10 +44,13 @@
"'提问待答 ' + formatInt(asked)\n ];",
"turn breakdown renders 提问轮, not 提问待答"),
# Removing 另有 is the exact regression this guard exists for: the two groups go back to
- # being one undifferentiated `·` run.
+ # being one undifferentiated `·` run. The anchor follows the separator to where it now
+ # lives: it used to sit in turnContextSuffix(), which was retired as dead, and the live
+ # presenter turnSubNode() writes the same boundary itself. The regression is unchanged —
+ # only the line it happens on.
("boundary mark 另有 removed",
- " · 另有 ' + context",
- " · ' + context",
+ "wrap.appendChild(document.createTextNode(' · 另有 '));",
+ "wrap.appendChild(document.createTextNode(' · '));",
"context group is marked as a separate population"),
("whole breakdown and context line claims to sum to the headline",
OPENED,
@@ -81,6 +84,18 @@
"'收尾 ' + formatInt(Math.max(0, total - open)) + ' · 答复在本轮内交付',",
"'这一类轮次在本轮内交付了答复',",
"the tip explains every term on the line"),
+ # ...and the whole shape behind them is a hand-copied second of the server's stats, held in a
+ # different process. Dropping one declared field leaves `undefined + 1` in the loop, which is
+ # NaN, and NaN is refused by isCount() — so 「追加 N」 disappears from the card the moment a
+ # time range goes on, while the whole-session card (reading the server's stats) keeps showing
+ # it. Both numbers were right and nothing said so. The guard for it reads the two halves off
+ # the function rather than off a hardcoded field list, because the hardcoded list is what let
+ # this through the first time: `steers` was simply not written down in it.
+ ("the re-scoped stats loses the field the server declares",
+ " steers: 0,\n toolCalls: 0,",
+ " toolCalls: 0,",
+ "every stats field scopedStats writes is one it declares"),
+
# The original defect: title and header both said 轮次, one a total one an ordinal. Put the
# shared label back on either side and the two numbers look like they should be equal.
("turn header reverts to the shared label",
@@ -91,12 +106,12 @@
# 第 82 轮, two scopes in one label, so the pair reads as a contradiction that no wording
# can fix. Both numbers were true.
("session total put back in the title",
- "if (!isCount(firstTurn) || !isCount(lastTurn)) return DASH;",
- "if (!isCount(firstTurn) || !isCount(lastTurn)) return DASH;\n var totalTurns = state.payload.stats.turns;\n if (firstTurn === lastTurn) return '共 ' + formatInt(totalTurns) + ' 轮 · 当前第 ' + formatInt(firstTurn) + ' 轮';\n return '共 ' + formatInt(totalTurns) + ' 轮 · 当前第 ' + formatInt(firstTurn) + '–' + formatInt(lastTurn) + ' 轮';",
+ " var range = DASH;\n if (isCount(firstTurn) && isCount(lastTurn)) {",
+ " var range = DASH;\n if (isCount(state.payload && state.payload.stats ? state.payload.stats.turns : null)) return '共 ' + formatInt(state.payload.stats.turns) + ' 轮';\n if (isCount(firstTurn) && isCount(lastTurn)) {",
"panel title states only the rendered turn range"),
("title drops the range entirely",
- "return '第 ' + formatInt(firstTurn) + '–' + formatInt(lastTurn) + ' 轮';",
- "return '轨迹';",
+ ": '第 ' + formatInt(firstTurn) + '–' + formatInt(lastTurn) + ' 轮';",
+ ": '轨迹';",
"panel title states only the rendered turn range"),
# Anchored on two lines with their indentation: updateWindowBar() now writes the 全场 total in
# both its mid-build and its settled branch, and a one-line anchor matches both.
diff --git a/plugins/avatasia/mmc-trajectory/tests/run.mjs b/plugins/avatasia/mmc-trajectory/tests/run.mjs
index d042d72..fe8bbd0 100644
--- a/plugins/avatasia/mmc-trajectory/tests/run.mjs
+++ b/plugins/avatasia/mmc-trajectory/tests/run.mjs
@@ -36,21 +36,35 @@ const filter = args.find((a) => !a.startsWith('--')) ?? '';
// with — which means a snapshot on disk, read at startup, and a report that is deliberately not a
// verdict. The two are separate findings: the drift below says "this run dirtied the source", the
// warning at startup says "the source was already different when this run began".
-// The shipped files a mutate-* control rewrites in place — that is the whole membership rule, and
-// it is a rule about files rather than about importance. docs/LAYERS.md sat in this list until it
-// moved out of the package to the workspace root: it then hashed to 'absent' on every run, which
-// is inert (absent matches absent, so it never reported drift) but means one of the entries this
-// guard advertises protecting was not a shipped file at all.
-const SHIPPED = [
- 'miniapp/client/index.html',
- 'miniapp/node/server.mjs',
- 'tests/make-fixtures.mjs',
- 'tests/client-check.mjs',
- 'README.md',
- 'README.zh-CN.md',
- '.minimax-plugin/plugin.json',
-];
+// There is no list here, and there was one until an independent review pass found what that cost.
+//
+// The rule this file enforces is "a mutate-* control leaves the source exactly as it found it". The
+// first version enforced it over a hand-maintained list of the files a control rewrites, and the
+// list — not the rule — was the weak point: `mutate-review16.py` rewrites this very file and
+// `mutate-freshness.py` rewrites `verify-freshness.mjs`, and neither was on it, so a control killed
+// mid-run could leave residue there and no check would have said so. A list that has to stay in step
+// with 45 controls is a list that will not, and nothing owned the membership rule, so it drifted.
+//
+// So the whole tree is the subject instead. That cannot fall behind: a file nobody thought to list
+// is still hashed, and one that appears during the run is still compared. The list also carried a
+// dead entry — `docs/LAYERS.md` hashed to 'absent' on every run after it moved out of the package —
+// which advertised protecting a shipped file that no longer existed here.
+//
+// The one exclusion is this runner's own bookkeeping file: it is written by this run, on purpose.
+const SELF_EXCLUDE = ['tests/.shipped-snapshot.json'];
+
const ROOT = join(HERE, '..');
+
+function treeDigests(prefix = '') {
+ const out = {};
+ for (const entry of readdirSync(join(ROOT, prefix), { withFileTypes: true })) {
+ if (entry.name === '.git') continue;
+ const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
+ if (entry.isDirectory()) Object.assign(out, treeDigests(rel));
+ else if (!SELF_EXCLUDE.includes(rel)) out[rel] = digest(rel);
+ }
+ return out;
+}
const SNAPSHOT = join(HERE, '.shipped-snapshot.json');
const digest = (rel) => {
@@ -59,7 +73,7 @@ const digest = (rel) => {
return createHash('sha256').update(readFileSync(p)).digest('hex');
};
-const snapshotBefore = Object.fromEntries(SHIPPED.map((rel) => [rel, digest(rel)]));
+const snapshotBefore = treeDigests();
// What the previous run left behind. The snapshot this reads was written by that run and meant the
// bytes it ended with, so a file that differs now is one of two things — a mutate-* control killed
@@ -84,13 +98,31 @@ const readSnapshot = () => {
};
const previous = readSnapshot();
-const leftover = previous
- ? SHIPPED.filter((rel) => previous[rel] !== undefined && previous[rel] !== digest(rel))
- : [];
+
+// Both key sets, and that is the whole fix. Iterating only the tree as it is now walks straight past
+// a path the last run recorded and this tree no longer has — a rename, or a control that deleted a
+// file — because that path is in neither `snapshotBefore` nor anywhere the filter would reach. It was
+// a hole in a check whose entire claim is "compare against what the previous run left behind", and it
+// was not in either direction: the end-of-run comparison already looked at both sides.
+//
+// A path that is NEW since the last run is not residue, so it stays filtered out: somebody adding a
+// file is a contributor working, and calling that residue is the false positive that would make a
+// contributor delete their own work.
+const filesMissingSinceLastRun = (prev) => [...new Set([...Object.keys(snapshotBefore), ...Object.keys(prev)])]
+ .filter((rel) => prev[rel] !== undefined && prev[rel] !== digest(rel));
+
+const leftover = previous ? filesMissingSinceLastRun(previous) : [];
+
+// Whether the warning below actually went out. The comparison being computed is one thing and being
+// reported is another, and a guard that only inspects the computed value cannot tell them apart: the
+// whole block could be gated off and everything downstream would still agree that the comparison works.
+// This is the flag the diagnostic reports.
+let warned = false;
if (leftover.length) {
+ warned = true;
console.log('');
- console.log(`WARN ${'shipped files differ from the last run'.padEnd(30)} ${leftover.join(', ')}`);
+ console.log(`WARN ${'files differ from the last run'.padEnd(30)} ${leftover.join(', ')}`);
console.log(' either a mutate-* control was killed mid-run and left the source mutated,');
console.log(' or these files were edited after that run. Not a failure: this suite runs on');
console.log(' machines with uncommitted work, and a contributor writing code is not a broken');
@@ -99,26 +131,93 @@ if (leftover.length) {
}
function checkShipped() {
- const drift = SHIPPED.filter((rel) => digest(rel) !== snapshotBefore[rel]);
+ const after = treeDigests();
+ // Both directions. A file that moved is residue; a file that appeared is a control that wrote
+ // something it did not clean up, which the old list could not have seen even in principle.
+ const drift = Object.keys(snapshotBefore)
+ .filter((rel) => after[rel] !== snapshotBefore[rel])
+ .concat(Object.keys(after).filter((rel) => !(rel in snapshotBefore)));
// Only a clean end becomes the baseline for the next run. Recording a drifted end would make the
// next comparison agree with the mutation, which is the one thing this file exists to prevent.
if (drift.length === 0) {
try {
- writeFileSync(SNAPSHOT, JSON.stringify(Object.fromEntries(SHIPPED.map((rel) => [rel, digest(rel)]))));
+ writeFileSync(SNAPSHOT, JSON.stringify(after));
} catch { /* the snapshot is bookkeeping, never a reason to fail the suite */ }
}
return drift;
}
-// verify-time-range.mjs is here but not run. Its assertions are calibrated against a full
-// multi-generation session — stats.messages > 1000, a checkpoint nested inside a turn — and the
-// committed fixture is a single-file session of a few dozen rows. Shipping it in the default set
-// would mean shipping a red suite; relax the numbers instead and the timezone arithmetic stops
-// being exercised at all. Run it by hand against a booted service: see its own header.
-const SKIP = new Set(['verify-time-range.mjs']);
+// `--self-test-residue` proves the comparison above can fail, which a passing run cannot show.
+//
+// Two phases, because there are two directions and they fail for different reasons.
+//
+// Phase one plants a byte in `tests/verify-freshness.mjs`: that is a file `mutate-freshness.py`
+// rewrites, and it was never on the hand-maintained list this replaced, so residue there used to be
+// invisible by construction. This covers what moves DURING one invocation.
+//
+// Phase two asks the startup comparison about a path the last run recorded and this tree does not
+// have — a rename, or a control that deleted a file. Phase one cannot reach it at all, because the
+// snapshot it compares against was taken from a tree that still had everything in it. An earlier
+// version of this file had only phase one and so reported the end-of-run check as exhaustive while
+// the other direction walked past a deleted file in silence.
+//
+// Run by `verify-review16.mjs`, and by the mutations that narrow either direction.
+if (args.includes('--self-test-residue')) {
+ const TARGET = 'tests/verify-freshness.mjs';
+ const GONE = 'tests/__absent-probe__.mjs';
+ const original = readFileSync(join(ROOT, TARGET));
+ let caught = 1;
+ try {
+ writeFileSync(join(ROOT, TARGET), Buffer.concat([original, Buffer.from('\n')]));
+ const named = checkShipped();
+ caught = named.includes(TARGET) ? 0 : 1;
+ console.log((caught === 0 ? 'caught ' : 'MISSED ') + TARGET + ' ' + JSON.stringify(named));
+
+ // Phase two asks about the recorded set, not about the bookkeeping file. Reading SNAPSHOT here
+ // looked equivalent and was not: that file is gitignored, so on a freshly cloned checkout it
+ // does not exist, phase one cannot create it (the write is gated on a clean end, and phase one
+ // is dirty by design), and the self-test died with ENOENT — taking `verify-review16.mjs` down
+ // with it. Nothing here touched that file, because `snapshotBefore` is the same recorded set,
+ // already in hand, and it is the thing under test rather than a copy of it.
+ const recorded = Object.assign({}, snapshotBefore, { [GONE]: 'absent-probe' });
+ const named2 = filesMissingSinceLastRun(recorded);
+ const caught2 = named2.includes(GONE);
+ console.log((caught2 ? 'caught-absent ' : 'MISSED-absent ') + GONE + ' ' + JSON.stringify(named2));
+ if (caught === 0 && !caught2) caught = 1;
+ } finally {
+ // Restored here rather than left to the end-of-run check: this mode exits before the suite does.
+ // And `process.exit` is called OUTSIDE the try, because it terminates the process without
+ // unwinding — a `process.exit` inside the try skips this finally, which is exactly the residue
+ // this check exists to catch. The whole-tree comparison caught that on its first real run.
+ writeFileSync(join(ROOT, TARGET), original);
+ }
+ process.exit(caught);
+}
+
+// `--print-startup-leftover` reports what the startup comparison actually decided, and exits without
+// touching the baseline or running the suite.
+//
+// It exists because every other check here can be satisfied by a comparison function that nothing
+// calls. The self-test builds its own input and hands it straight to `filesMissingSinceLastRun`, so
+// nulling the module-level `previous` left all of it passing while the real startup stopped warning --
+// measured rather than assumed: with `const previous = null` this suite is green and `leftover` is `[]`
+// on every run. This mode has no input of its own. It reports the pair the startup built, so what is
+// measured is the wiring, and the only ways to break it are the two functions already covered.
+if (args.includes('--print-startup-leftover')) {
+ console.log('startup-leftover=' + JSON.stringify({ hadBaseline: previous !== null, leftover, warned }));
+ process.exit(0);
+}
+// Nothing is excluded any more. `verify-time-range.mjs` used to be here, not run, because the only
+// session it could get was whatever a booted service had — and the committed fixture is sixty rows
+// of one afternoon, against assertions that want more than a thousand messages spanning a local
+// midnight. Shipping it anyway would have meant shipping a red suite, and relaxing the numbers to
+// fit the fixture would have meant not testing the timezone arithmetic at all. So it now builds its
+// own transcript and hands it to the server's own `buildTrajectoryPayload`; see that file's header
+// for why that is not the same as testing a fixture. A guard that is in the directory but never
+// runs is not a guard, and that one was 152 assertions of one.
const files = readdirSync(HERE)
- .filter((n) => n !== 'run.mjs' && n !== 'README.md' && !SKIP.has(n)
+ .filter((n) => n !== 'run.mjs' && n !== 'README.md'
&& (n.startsWith('verify-') || n.startsWith('mutate-')
|| n === 'client-check.mjs' || n === 'check-light-theme.mjs'))
.filter((n) => !filter || n.startsWith(filter))
@@ -178,11 +277,11 @@ console.log();
const drift = checkShipped();
if (drift.length) {
console.log('');
- console.log(`FAIL ${'shipped files restored'.padEnd(30)} ${drift.join(', ')}`);
+ console.log(`FAIL ${'package restored byte for byte'.padEnd(30)} ${drift.join(', ')}`);
console.log(' a mutate-* control ran to completion and left the source mutated. This run\'s own');
console.log(' residue, not the one the warning above reported.');
console.log(' restore with: git checkout -- <file>');
- failed.push({ name: 'shipped files restored byte for byte', ok: false });
+ failed.push({ name: 'package restored byte for byte', ok: false });
}
console.log(`${results.length - failed.length}/${results.length} guards passed`);
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-anomaly.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-anomaly.mjs
index 3448e56..f8f5b75 100644
--- a/plugins/avatasia/mmc-trajectory/tests/verify-anomaly.mjs
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-anomaly.mjs
@@ -133,8 +133,14 @@ check('a checkpoint is a compaction',
pure.recordAnomalyRules({ kind: 'compaction' }, { turn: CLOSED, liveTurn: LIVE }), ['compaction']);
// A thinking row is the clean case. `{ kind: 'reply' }` is not — a reply with no body is now
// an anomaly, which is the whole point of the rule below.
+//
+// `hasText: true` is on the fixture and not decoration. The rule tests `hasText === false`
+// strictly, so a record carrying no flag at all is not flagged — deliberate, because a record from
+// an older payload has neither the flag nor the body and must not be called broken. The cost is
+// that a fixture without the flag cannot see a mutation that inverts the KIND test, so the fixture
+// has to look like a real record.
check('a normal row is not an anomaly',
- pure.recordAnomalyRules({ kind: 'thinking' }, { turn: CLOSED, liveTurn: LIVE }), []);
+ pure.recordAnomalyRules({ kind: 'thinking', hasText: true }, { turn: CLOSED, liveTurn: LIVE }), []);
check('a turn that never answered, seen from inside it',
pure.recordAnomalyRules({ kind: 'thinking' }, withLive(BROKEN)), ['noReply']);
@@ -160,8 +166,11 @@ check('two rules can fire on one record',
// so `closed` is true and 无答复 cannot fire — and the record is still `kind: 'reply'`, so it
// remains a real reply that the 答复 chip counts. Missing it was a hole in the rule set, not a
// subtlety: every other rule tests a field that was present, this one tests an absence.
-const SILENT = { kind: 'reply', text: null, summary: '', title: 'assistant', stopReason: 'stop' };
-const SPOKE = { kind: 'reply', text: '答完了。', summary: '答完了。', stopReason: 'stop' };
+// These records carry `hasText`, not `text`. The rule stopped reading the body and reads the
+// server's verdict on it, because the body no longer travels with the row — so a fixture built out
+// of `text` here would be testing a record the server can no longer produce.
+const SILENT = { kind: 'reply', hasText: false, summary: '', title: 'assistant', stopReason: 'stop' };
+const SPOKE = { kind: 'reply', hasText: true, summary: '答完了。', stopReason: 'stop' };
check('a reply with no body is an empty answer',
pure.recordAnomalyRules(SILENT, { turn: CLOSED, liveTurn: LIVE }), ['silent']);
@@ -183,19 +192,21 @@ check('an empty answer in a closed turn is only the empty answer',
check('the same record in a turn that never answered fires both',
pure.recordAnomalyRules(SILENT, withLive(BROKEN)), ['noReply', 'silent']);
-// An empty string counts as no body; whitespace does not, because a reader sees something.
-check('an empty string is an empty answer',
- pure.recordAnomalyRules({ kind: 'reply', text: '' }, { turn: CLOSED, liveTurn: LIVE }), ['silent']);
-check('whitespace is not an empty answer',
- pure.recordAnomalyRules({ kind: 'reply', text: ' ' }, { turn: CLOSED, liveTurn: LIVE }), []);
+// An empty string counts as no body and whitespace does not — but that is now the server's call,
+// made once when it projected the text, and this only pins that the rule obeys the verdict either
+// way rather than re-deriving it.
+check('a reply the server found empty is an empty answer',
+ pure.recordAnomalyRules({ kind: 'reply', hasText: false }, { turn: CLOSED, liveTurn: LIVE }), ['silent']);
+check('a reply the server found non-empty is not',
+ pure.recordAnomalyRules({ kind: 'reply', hasText: true }, { turn: CLOSED, liveTurn: LIVE }), []);
// A clipped reply still has a body, however short. textTruncated is not the test.
check('a clipped reply is not an empty answer',
- pure.recordAnomalyRules({ kind: 'reply', text: '很长的…', textTruncated: true },
+ pure.recordAnomalyRules({ kind: 'reply', hasText: true, textTruncated: true },
{ turn: CLOSED, liveTurn: LIVE }), []);
// Only replies. A checkpoint has no body by design and is already its own rule; counting it
// twice would make the union smaller than the parts, which is the one thing `any` must not be.
check('a checkpoint is not also an empty answer',
- pure.recordAnomalyRules({ kind: 'compaction', text: null }, { turn: CLOSED, liveTurn: LIVE }),
+ pure.recordAnomalyRules({ kind: 'compaction', hasText: false }, { turn: CLOSED, liveTurn: LIVE }),
['compaction']);
check('a system record with no body is not an empty answer',
pure.recordAnomalyRules({ kind: 'system', text: null }, { turn: CLOSED, liveTurn: LIVE }), []);
@@ -445,8 +456,19 @@ page.state.anomaly.rules = ['toolError'];
check('and while a rule is ticked the search does not narrow the list either',
page.visibleEntries().length, expect.toolError);
page.state.anomaly.rules = [];
-assert('but with no rule ticked the search is still a filter for the list',
- page.visibleEntries().length < page.state.flat.length);
+// This used to set only `query` and expect the list to narrow, which it did because the page
+// scanned the records it already had. The page no longer holds the text, so it narrows by the set
+// the server sent — and `query` with no set in force is a state that now has a name (搜索中) and a
+// consequence, so it is asked about separately rather than quietly assumed away.
+page.state.searchHits = null;
+page.state.searchPending = false;
+assert('but with no answer yet the search does not narrow the list, so an unapplied filter never reads as an applied one',
+ page.visibleEntries().length === page.state.flat.length);
+const answered = new Set(page.state.flat.slice(0, 2).map((entry) => entry.record.index));
+page.state.searchHits = answered;
+assert('and once the server has answered, the search narrows the list',
+ page.visibleEntries().length === answered.size && page.visibleEntries().length < page.state.flat.length);
+page.state.searchHits = null;
page.state.query = '';
page.state.kinds = pure.KIND_ORDER.filter((k) => k !== 'toolResult');
@@ -917,6 +939,12 @@ const modeSrc = fnSource('function syncAnomalyMode(counts)');
const baseSrc = fnSource('function resetBaseFilters(');
assert('the reset updates the buttons, or the axis would show a condition that is not in force',
!!baseSrc && /state\.kinds = KIND_ORDER\.slice\(\);/.test(baseSrc) && /syncKindButtons\(\);/.test(baseSrc));
+// Clearing the needle but keeping the SERVER'S ANSWER would leave the next query filtering by a
+// set of record indexes from a session the reader has already moved away from. The answer is the
+// state now, so clearing the base axes has to clear it too — and this file is where the reset is
+// already on trial, so the rule is asserted here as well as in the search guard.
+assert('and it drops the search answer with the needle, not just the needle',
+ !!baseSrc && /state\.searchHits = null;/.test(baseSrc) && /state\.searchError = null;/.test(baseSrc));
// The brush is not written inline here, and it is not written by dropOverviewSelection() either —
// R5 gave it one writer, so the chain is resetBaseFilters -> dropOverviewSelection ->
// setOverviewSelection -> the assignment. Following the call and checking the assignment at the far
@@ -925,8 +953,7 @@ assert('the reset updates the buttons, or the axis would show a condition that i
assert('and it clears every part of the row above, not just the types',
!!baseSrc && /state\.query = '';/.test(baseSrc) && /dropOverviewSelection\(\);/.test(baseSrc)
&& !!dropSelSource && /setOverviewSelection\(null\);/.test(dropSelSource)
- && !!setSelSource && /state\.overviewSelection = value;/.test(setSelSource)
- && /clearTimeRange\(\);/.test(baseSrc));
+ && !!setSelSource && /state\.overviewSelection = value;/.test(setSelSource) && /clearTimeRange\(\);/.test(baseSrc));
const toggleFull = fnSource('function onAnomalyToggle(');
assert('and it runs on every tick into the mode, not only the first',
!!toggleFull && /if \(next\.length > 0\) resetBaseFilters\(\);/.test(toggleFull));
@@ -978,8 +1005,12 @@ assert('with the rule name, not a bare colour', /anomalyRuleLabel\(turnFlags\[fl
// pill — it is a reply — but with no body the marker is the only thing telling the reader this
// is not an answer, and the duration cell is where 失败 already took one.
const rowSrc = fnSource('function buildRow(');
+// `isNil(record.text)` used to be this. The body does not travel with the row any more, so the row
+// reads the server's verdict instead — and reads it strictly (`=== false`), because a record from a
+// payload that predates the flag has neither `hasText` nor a body, and treating that as "has a body"
+// would draw a marker on a record the server never said anything about.
assert('an empty reply is marked on its row',
- /record\.kind === 'reply' && isNil\(record\.text\)/.test(rowSrc));
+ /record\.kind === 'reply' && record\.hasText === false/.test(rowSrc));
assert('and it reuses the duration cell instead of adding a column',
/else if \(silent\) \{[\s\S]*?anomalyRuleLabel\('silent'\)[\s\S]*?\} else \{/.test(rowSrc));
assert('the row names the rule from the table, not from a label written here',
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-count-roles.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-count-roles.mjs
new file mode 100644
index 0000000..cab608b
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-count-roles.mjs
@@ -0,0 +1,213 @@
+/**
+ * `countRolesInPrefix` counts the session list's eight counters out of a bounded prefix of the
+ * active `messages.jsonl`. It used to do that with five `matchAll` passes over the prefix, which
+ * allocates a match object per hit: on a 64 KB prefix holding a few thousand messages that is a
+ * few thousand short-lived objects per session, per rebuild, on a poll.
+ *
+ * A rewrite that stops allocating is only worth having if it is still the same function. So this
+ * guard holds the implementation it replaced as `reference` and requires the two to agree — over
+ * hand-written edges, and over the prefix of every session in the store it is pointed at. The
+ * fixture is the default so the corpus is reproducible on a clean runner; `--real` uses this
+ * machine's transcripts instead.
+ *
+ * The corpus is the evidence, so it is deliberately wider than the shapes that occur: roles
+ * outside the four the counters recognize, values with no closing quote, a `message_id` used as a
+ * *value* rather than a key, duplicate and empty turn ids, and whitespace the patterns have to
+ * skip. Each of those is a case where a position-based rewrite and a capturing one can disagree,
+ * and a prefix counter that quietly changes its answer is worse than a slow one — the list sends
+ * these numbers to the reader.
+ *
+ * `tests/mutate-count-roles.py` breaks the shipped implementation in the ways this guard exists to
+ * catch, and requires it to report each by name.
+ */
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { join } from 'node:path';
+import {
+ countRolesInPrefix,
+ collectSessionEntries,
+ readHead,
+ resolveSessionsRoot,
+} from '../miniapp/node/server.mjs';
+
+const HERE = fileURLToPath(new URL('.', import.meta.url));
+const SERVER = fileURLToPath(new URL('../miniapp/node/server.mjs', import.meta.url));
+const FIXTURE_HOME = join(HERE, 'fixtures', 'minimax-home');
+const USE_REAL = process.argv.includes('--real');
+// Not exported from the server; the same 64 KB the list route reads. If the constant moves, this
+// guard is still a valid comparison — it compares two implementations over whatever they are
+// given — but the corpus stops matching production. LIST_PEEK_BYTES is pinned by verify-list-cache.
+const LIST_PEEK_BYTES = 64 * 1024;
+
+let pass = 0;
+const failures = [];
+function assert(name, cond) {
+ if (cond) pass += 1;
+ else failures.push(name);
+}
+
+/* ---------- the implementation this replaced ---------- */
+
+/**
+ * @param {string} text
+ */
+function reference(text) {
+ const turnIds = new Set();
+ const counts = { messages: 0, userMessages: 0, assistantMessages: 0, toolResults: 0, systemMessages: 0, toolCalls: 0, thinkingBlocks: 0, turns: 0 };
+ for (const match of text.matchAll(/"message_id"\s*:/g)) counts.messages += 1;
+ for (const match of text.matchAll(/"role"\s*:\s*"(user|assistant|toolResult|custom)"/g)) {
+ if (match[1] === 'user') counts.userMessages += 1;
+ else if (match[1] === 'assistant') counts.assistantMessages += 1;
+ else if (match[1] === 'toolResult') counts.toolResults += 1;
+ else counts.systemMessages += 1;
+ }
+ for (const match of text.matchAll(/"turn_id"\s*:\s*"([^"]*)"/g)) turnIds.add(match[1]);
+ for (const match of text.matchAll(/"type"\s*:\s*"(toolCall|thinking|text)"/g)) {
+ if (match[1] === 'toolCall') counts.toolCalls += 1;
+ else if (match[1] === 'thinking') counts.thinkingBlocks += 1;
+ }
+ counts.turns = turnIds.size;
+ return counts;
+}
+
+/**
+ * @param {string} label
+ * @param {string} text
+ */
+function sameAsReference(label, text) {
+ const got = countRolesInPrefix(text);
+ const want = reference(text);
+ const equal = Object.keys(want).every((key) => want[key] === got[key]);
+ assert(label + (equal ? '' : ` — got ${JSON.stringify(got)}, reference says ${JSON.stringify(want)}`), equal);
+}
+
+/* ---------- 1: the edges a position-based rewrite can get wrong ---------- */
+
+sameAsReference('empty prefix', '');
+sameAsReference('no counters at all', 'not json, just bytes');
+sameAsReference('one user turn', '{"message_id":"m1","turn_id":"t1","message":{"role":"user","content":"a"}}');
+sameAsReference('a custom role counts as system', '{"message_id":"m2","turn_id":"t2","message":{"role":"custom","content":"raw"}}');
+sameAsReference('all four recognized roles', '{"role":"user"}{"role":"assistant"}{"role":"toolResult"}{"role":"custom"}');
+
+// Values outside the four must stay uncounted. The capturing version's alternation simply failed
+// to match them; a rewrite that counts "anything with a role" reports a number the old one denied.
+sameAsReference('roles outside the four are not counted',
+ '{"role":"system"}{"role":"tool"}{"role":"user2"}{"role":"users"}{"role":"assistants"}');
+
+// `text` is in the block alternation and counts as nothing. So does anything else in it, and the
+// two are indistinguishable by outcome — but only because both branches fall through, so a
+// rewrite that drops the guard could start counting them.
+sameAsReference('block values outside the two counted ones', '{"type":"text"}{"type":"toolCall"}{"type":"thinking"}{"type":"unknownType"}');
+
+// Whitespace the patterns have to skip. `text` is the JS in the client, not this file.
+sameAsReference('whitespace around the separators', '{"role" : "user","turn_id"\n:\n"t9","type"\t:\t"toolCall"}');
+
+// `message_id` as a value, not a key. The pattern needs the colon, so `{"note":"message_id"}`
+// counts nothing and `{"note":"message_id":1}` counts one — and a rewrite that just looks for the
+// word would get the first one wrong.
+sameAsReference('message_id as a value without a colon', '{"note":"message_id"}');
+sameAsReference('message_id as a value followed by a colon', '{"note":"message_id":1}');
+
+// Truncated tails. The prefix is a prefix: the last line is routinely cut mid-field, so an
+// unterminated value is the normal case, not an edge. A capturing regex needs its closing quote
+// and finds nothing; a position-based scan that assumed one would count a value it never read.
+sameAsReference('truncated inside a role value', '{"message_id":"m1","message":{"role":"user');
+sameAsReference('truncated inside a turn id', '{"message_id":"m1","turn_id":"t');
+sameAsReference('truncated with nothing after a complete field', '{"message_id":"m1","role":"user"');
+
+// The scans `break` out when a value has no closing quote, which leaves their `lastIndex` pointing
+// into the middle of the string — the one thing `test` on a shared `/g` regex carries between
+// calls. A complete scan runs to exhaustion and resets itself on the way out; a broken one does
+// not. So the case that matters is a full scan *after* a truncated one, in that order: drop any
+// reset and the second call starts counting from wherever the first stopped.
+sameAsReference('a complete scan after a truncated role', '{"message_id":"m2","turn_id":"t7","message":{"role":"user","content":"a"}}{"type":"toolCall"}');
+sameAsReference('a complete scan after a truncated turn id', '{"message_id":"m3","turn_id":"t8","message":{"role":"assistant","content":"b"}}');
+sameAsReference('a complete scan after a truncated block type', '{"message_id":"m4","turn_id":"t9","type":"thinking"}');
+
+// Turn ids are counted distinctly, so duplicates and the empty id are the interesting cases.
+sameAsReference('duplicate turn ids count once', '{"turn_id":"t1"}{"turn_id":"t1"}{"turn_id":"t2"}');
+sameAsReference('an empty turn id is still a turn', '{"turn_id":""}{"turn_id":""}{"turn_id":"t1"}');
+
+// Scans are module-level `/g` regexes, and `test` moves `lastIndex` while `matchAll` did not.
+// Calling the function twice on different text is the cheapest way to catch a missing reset, so
+// it is a case here rather than an implementation detail.
+sameAsReference('a second call is unaffected by the first', '{"message_id":"m1","role":"user","turn_id":"t1","type":"toolCall"}');
+sameAsReference('a third call returns to zero', '');
+
+/* ---------- 2: the same comparison over real session prefixes ---------- */
+
+const location = USE_REAL ? resolveSessionsRoot() : resolveSessionsRoot({ MAVIS_HOME: FIXTURE_HOME });
+const entries = await collectSessionEntries(location.sessionsRoot);
+
+assert('the store under test has sessions to compare over', entries.length > 0);
+
+let compared = 0;
+let mismatches = 0;
+for (const entry of entries) {
+ let head;
+ try {
+ head = await readHead(join(entry.dir, 'messages.jsonl'), LIST_PEEK_BYTES);
+ } catch {
+ continue;
+ }
+ compared += 1;
+ const got = countRolesInPrefix(head.text);
+ const want = reference(head.text);
+ if (!Object.keys(want).every((key) => want[key] === got[key])) {
+ mismatches += 1;
+ failures.push(`${entry.dir} — got ${JSON.stringify(got)}, reference says ${JSON.stringify(want)}`);
+ }
+}
+
+assert('every session prefix counted identically (' + compared + ' compared)'
+ + (USE_REAL ? ' [real store]' : ' [fixture]'), mismatches === 0 && compared > 0);
+
+// The corpus only proves equivalence if it would have caught a divergence, so it has to contain
+// something to disagree about. A prefix with real messages in it exercises every branch; without
+// one, an implementation that counted only `user` would pass this whole file.
+let firstCounts = null;
+if (entries.length) {
+ try {
+ firstCounts = reference((await readHead(join(entries[0].dir, 'messages.jsonl'), LIST_PEEK_BYTES)).text);
+ } catch {
+ firstCounts = null;
+ }
+}
+assert('the corpus has messages in it, not just structure'
+ + (firstCounts ? ' (' + firstCounts.messages + ' on the first entry)' : ''),
+ firstCounts !== null && firstCounts.messages > 0);
+
+/* ---------- 3: the allocation claim, read off the shipped source ---------- */
+
+const server = readFileSync(SERVER, 'utf8');
+const body = /export function countRolesInPrefix\(text\) \{[\s\S]*?\n\}/.exec(server);
+
+assert('countRolesInPrefix is still in the shipped source', body !== null);
+
+if (body) {
+ const code = body[0];
+ // `matchAll` and `exec` are the two shapes that hand back a match object per hit. `test` is
+ // the one that does not, which is why the scans use it.
+ assert('the counting loops do not build a match object per hit',
+ !/matchAll\(/.test(code) && !/\.exec\(/.test(code));
+ // The scans are module-level so the allocation is not just moved into a per-call `new RegExp`.
+ assert('the scans are module-level constants, not built per call',
+ !/new RegExp/.test(code));
+ assert('the counting loops share one pass over the prefix rather than five',
+ (code.match(/\.test\(text\)/g) || []).length === 4
+ && !/for \(const .* of /.test(code));
+
+ // `/g` plus `test` mutates `lastIndex`, and these are shared module state. Missing one reset is
+ // a counter that silently starts from wherever the previous call stopped.
+ for (const scan of ['MESSAGE_ID_SCAN', 'ROLE_SCAN', 'TURN_SCAN', 'BLOCK_SCAN']) {
+ assert(scan + ' is reset before it is scanned',
+ new RegExp(scan + '\\.lastIndex = 0').test(code));
+ }
+}
+
+console.log('[count-roles] ' + pass + ' passed, ' + failures.length + ' failed');
+if (failures.length) {
+ console.log('FAILURES:\n - ' + failures.join('\n - '));
+ process.exit(1);
+}
+console.log('[count-roles] OK');
\ No newline at end of file
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-css.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-css.mjs
new file mode 100644
index 0000000..831973c
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-css.mjs
@@ -0,0 +1,157 @@
+/**
+ * Nothing in the stylesheet is dead.
+ *
+ * Two properties, one shape: a declaration earns its place by being read.
+ *
+ * 1. Every class selector has at least one consumer outside `<style>`.
+ * 2. Every custom property declared is read at least once by `var()`.
+ *
+ * Written as properties rather than as a list of names. The list this replaced — eleven class
+ * names found by hand — would only stop the next person from re-adding those eleven, and a dead
+ * rule nobody checks is a dead rule that comes back two refactors later.
+ *
+ * What this caught, and why a scanner had to be calibrated rather than trusted:
+ *
+ * - `.legend` was dead and the hand sweep missed it, twice. Both passes read it as live
+ * because it sits in the middle of a block of live rules.
+ * - The ten `pill-*` classes are generated by `'pill' + (tone ? ' pill-' + tone : '')`. Note
+ * the leading space: a producer pattern anchored to the quote character reads that as no
+ * producer at all and reports all ten as dead. Every earlier version of this scanner did.
+ * - `.is-reading-down` exists only inside a comment, which describes a rule that was
+ * deliberately deleted while a guard keeps asserting the comment survived. Counting
+ * comments as consumers is what makes that class look alive, so comments are stripped
+ * before anything is counted.
+ * - The word "chips" appears in English prose in a dozen comments. `chip` must not match
+ * inside `chips` or `chip-mark`, so consumers are matched on token boundaries that reject
+ * both.
+ *
+ * The failure this guard is calibrated against is a false positive, not a miss: a guard that
+ * blocks legitimate work gets argued with, and the next version of it gets weakened. That is
+ * why a generated class counts as consumed only when the generator can name its suffix — see
+ * `consumedBy`. The looser rule that exempted every class under a prefix was tried first and
+ * had to go: it passed a mutation that deleted the only consumer of `.turn-meta`.
+ */
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+
+const HTML = fileURLToPath(new URL('../miniapp/client/index.html', import.meta.url));
+const html = readFileSync(HTML, 'utf8');
+
+let pass = 0;
+const failures = [];
+function assert(name, cond, detail) {
+ if (cond) pass += 1;
+ else failures.push(detail ? `${name}\n ${detail}` : name);
+}
+
+/* The block is located by its own delimiters. Slicing on an assumed order of <style> and
+ * <script> is how an earlier scan cut the whole body away and reported 163 dead of 83 live. */
+const styleStart = html.indexOf('<style');
+const styleEnd = html.lastIndexOf('</style>');
+assert('the page has exactly one <style> block', styleStart >= 0 && styleEnd > styleStart);
+if (styleStart < 0 || styleEnd <= styleStart) {
+ console.log('css: ' + pass + ' passed, ' + failures.length + ' failed');
+ for (const f of failures) console.log('FAIL ' + f);
+ process.exit(1);
+}
+const css = html.slice(html.indexOf('>', styleStart) + 1, styleEnd);
+let outside = html.slice(0, styleStart) + html.slice(styleEnd);
+
+/* Comments first, everywhere: a comment is prose about the code, not the code. */
+const strip = (s) => s.replace(/\/\*[\s\S]*?\*\//g, ' ').replace(/<!--[\s\S]*?-->/g, ' ');
+const cssLive = strip(css);
+outside = strip(outside).replace(/^\s*\/\/.*$/gm, ' ');
+
+assert('the stylesheet is not empty after comments are stripped', cssLive.trim().length > 0);
+
+/* ------------------------------------------------------------------ class selectors */
+/* A dot must be followed by an identifier start, which keeps `0.86` and `1.5rem` out;
+ * `url(...)` contents are dropped first for the same reason. */
+const selectors = new Map();
+for (const m of cssLive.replace(/url\([^)]*\)/g, ' ').matchAll(/\.(-?[_a-zA-Z][\w-]*)/g)) {
+ selectors.set(m[1], (selectors.get(m[1]) || 0) + 1);
+}
+
+const escRe = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+
+/* A class assembled by concatenation has no literal to match, so the generator behind it has
+ * to be found instead. The space after the quote and the space before the `+` are both
+ * load-bearing; both were missing at some point and both report all ten pill classes as dead. */
+const prefixes = new Set();
+for (const m of outside.matchAll(/'([ \t]*[\w-]*-)'|"([ \t]*[\w-]*-)"/g)) {
+ if (/^\s*\+/.test(outside.slice(m.index + m[0].length))) prefixes.add((m[1] || m[2]).trim());
+}
+
+const consumedBy = (name) => {
+ if (new RegExp('(?<![-\\w])' + escRe(name) + '(?![\\w-])').test(outside)) return 'a literal';
+ for (const p of prefixes) {
+ if (!p || !name.startsWith(p)) continue;
+ // A loose prefix rule would be simpler and is wrong in a way that cannot be seen: it
+ // marks *every* class under the prefix consumed forever, so deleting the only consumer of
+ // `.turn-meta` leaves the rule looking alive and the guard green. A mutation that did
+ // exactly that survived the first version of this file.
+ //
+ // So a prefix only covers a class it can *name*. The generator draws its values from a
+ // fixed list of string literals — `' pill-' + tone` where `kindTone()` returns one of nine
+ // — so `pill-user` is alive because `'user'` appears as a literal, and that is checkable
+ // without following the data. A prefix that cannot name the suffix covers nothing.
+ if (new RegExp("'\\s*" + escRe(name.slice(p.length)) + "'").test(outside)) return `'${p}' + …`;
+ }
+ return '';
+};
+
+const deadClasses = [...selectors.keys()].filter((name) => !consumedBy(name));
+assert('every class selector in the stylesheet has a consumer outside it',
+ deadClasses.length === 0,
+ 'no consumer: ' + deadClasses.map((n) => '.' + n).join(', '));
+
+/* A generated family is only as alive as its producer. Asserting the producer still exists
+ * keeps a guard that has quietly stopped matching the generator from also being the reason the
+ * ten classes look dead — a failure that would read as "delete them". The tolerance for a
+ * leading space is the same one the extraction needs: the literal is `' pill-'`. */
+for (const p of prefixes) {
+ if (!p || p === '-') continue;
+ assert(`the generated family '${p}' is still produced by a concatenation`,
+ new RegExp("'\\s*" + escRe(p) + "'|\"\\s*" + escRe(p) + "\"").test(outside));
+}
+
+/* ---------------------------------------------------------------- custom properties */
+/* The other half of the same property, and it is not hypothetical: deleting `.btn-primary`
+ * orphaned `--mcode-primary-action-bg` and `--mcode-primary-action-text` in all three theme
+ * blocks — six declarations that would have sat there looking like part of the design. */
+const declared = new Set();
+for (const m of cssLive.matchAll(/(--[\w-]+)\s*:/g)) declared.add(m[1]);
+for (const name of declared) {
+ const uses = cssLive.split('var(' + name + ')').length - 1;
+ assert(`${name} is read somewhere`, uses > 0, 'declared but never passed to var()');
+}
+
+/* The reverse check has one exception and it is a whole family, not an allowance: nineteen
+ * properties — every `--ov-*`, `--sticky-*` and `--inspector-*` — are never declared in the
+ * stylesheet at all. `renderOverview()` writes them per span with `setProperty`, and the
+ * stylesheet reads them back with `var()`. Asserting "read but never declared" without knowing
+ * that would fail on all nineteen and would be wrong every time. So a read with no declaration
+ * is only a defect when nothing sets it either. */
+const setFromJs = new Set();
+for (const m of outside.matchAll(/setProperty\(\s*['"](--[\w-]+)/g)) setFromJs.add(m[1]);
+const read = new Set();
+for (const m of cssLive.matchAll(/var\(\s*(--[\w-]+)/g)) read.add(m[1]);
+for (const name of read) {
+ if (declared.has(name) || setFromJs.has(name)) continue;
+ assert(`${name} is declared somewhere`, false, 'read by var(), never declared, never set from JS');
+}
+
+/* And the other direction for the JS-written ones: a `setProperty` whose name nothing reads is
+ * the same orphan as a dead rule, just spelled differently. */
+for (const name of setFromJs) {
+ assert(`${name} written from JS is read by the stylesheet`,
+ new RegExp('var\\(\\s*' + escRe(name) + '\\b').test(cssLive));
+}
+
+console.log('css: ' + pass + ' passed, ' + failures.length + ' failed'
+ + ' (' + selectors.size + ' class selectors, ' + declared.size + ' custom properties)');
+if (failures.length) {
+ for (const f of failures) console.log('FAIL ' + f);
+ process.exit(1);
+}
+console.log('ALL CHECKS PASSED');
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-dead-code.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-dead-code.mjs
new file mode 100644
index 0000000..a019d96
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-dead-code.mjs
@@ -0,0 +1,101 @@
+/**
+ * Every function the client declares is called by something.
+ *
+ * Same property as the stylesheet guard one file over — a declaration earns its place by being
+ * read — applied to the inline script instead of the `<style>` block. It replaces a hand list of
+ * three names, and a hand list only stops those three from coming back.
+ *
+ * Scoped to `index.html` on purpose. `server.mjs` has the same shape of dead helper, but its
+ * exports are read by eight test files that ship with the package, so "no reader" there is a
+ * question about test infrastructure rather than about shipped code. Adding this rule to the
+ * server means calibrating it there first, which is a separate piece of work.
+ *
+ * Three things this rule got wrong before it was right, and all three are false positives —
+ * a guard that blocks legitimate work gets argued with, and the next version of it gets
+ * weakened:
+ *
+ * 1. **Calls only.** Thirteen top-level functions here are event handlers that hand
+ * themselves to `addEventListener` as values: `onOverviewPointerDown`, `copySelected`,
+ * `onInspectorResizeUp` and ten more. A rule that looks for `name(` calls all thirteen
+ * dead. The rule is therefore "the name appears anywhere outside its own declaration",
+ * not "the name is called".
+ * 2. **Comments counted.** Names are mentioned in prose throughout this file. Comments are
+ * stripped before anything is counted — `//` by whole line, because a `//` inside a string
+ * is a URL here and scanning for it would delete the rest of the line.
+ * 3. **The bootstrap sliced off.** Cutting the script at `document.readyState` to keep the
+ * page from mounting removes the one call to `init()`, which then reads as dead. The whole
+ * script is scanned; a mutation that deletes the bootstrap's call to `init()` is then a
+ * live case of this rule rather than a false positive.
+ *
+ * The rule is exact on this file, not approximately: 230 declared functions and four with no
+ * reader before the cleanup (`formatCompact`, `turnContextSuffix`, `buildBlock`, plus the
+ * `init` slice artifact), and 226 with none after it.
+ */
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+
+const HTML = fileURLToPath(new URL('../miniapp/client/index.html', import.meta.url));
+const html = readFileSync(HTML, 'utf8');
+
+const scripts = [...html.matchAll(/<script>([\s\S]*?)<\/script>/g)].map((m) => m[1]);
+let pass = 0;
+const failures = [];
+function assert(name, cond, detail) {
+ if (cond) pass += 1;
+ else failures.push(detail ? `${name}\n ${detail}` : name);
+}
+
+assert('the page has exactly one inline script', scripts.length === 1,
+ 'found ' + scripts.length);
+const script = scripts[0] || '';
+
+/* Comments first. A comment is prose about the code, not the code. */
+const live = script.replace(/\/\*[\s\S]*?\*\//g, ' ').replace(/^\s*\/\/.*$/gm, ' ');
+
+/* Top-level declarations only: the ones at the file's own indent. Nested helpers are inside
+ * another function, where "who calls this" is a question about a closure rather than about
+ * whether the file still uses it. */
+const declared = new Map();
+for (const m of live.matchAll(/^ {6}function ([A-Za-z_$][\w$]*)\s*\(/gm)) {
+ declared.set(m[1], script.slice(0, m.index).split('\n').length);
+}
+assert('the scan found the top-level functions at all', declared.size > 200,
+ 'only ' + declared.size + ' matched; the indentation assumption is probably wrong');
+
+/* The scan assumes the file's own indent for a top-level declaration is six spaces. If a
+ * reformat moved them, the rule would stop covering most of the file and report nothing —
+ * which is the failure that looks most like success. So the assumption itself is asserted:
+ * every declaration is either exactly at that indent (top level) or deeper (nested inside
+ * one), and never shallower. */
+const shallow = [];
+for (const m of script.matchAll(/^( *)[ \t]*function ([A-Za-z_$][\w$]*)\s*\(/gm)) {
+ const indent = m[1].length;
+ if (indent !== 6 && indent < 6) shallow.push(m[2] + ' at indent ' + indent);
+}
+assert('no function is declared above the file\'s own top-level indent', shallow.length === 0,
+ 'these would escape the scan: ' + shallow.join(', '));
+
+/* A reader is any appearance of the name outside its own `function` keyword. */
+const esc = (s) => s.replace(/\$/g, '\\$&');
+const readersOf = (name) => {
+ let n = 0;
+ for (const m of live.matchAll(new RegExp('(?<![\\w$.])' + esc(name) + '(?![\\w$])', 'g'))) {
+ if (/\bfunction\s*$/.test(live.slice(Math.max(0, m.index - 12), m.index))) continue;
+ n += 1;
+ }
+ return n;
+};
+
+const dead = [...declared.entries()].filter(([name]) => readersOf(name) === 0)
+ .map(([name, line]) => name + ' (line ' + line + ')');
+assert('every function the client declares is used by something',
+ dead.length === 0,
+ 'declared and never used: ' + dead.join(', '));
+
+console.log('dead-code: ' + pass + ' passed, ' + failures.length + ' failed ('
+ + declared.size + ' top-level functions)');
+if (failures.length) {
+ for (const f of failures) console.log('FAIL ' + f);
+ process.exit(1);
+}
+console.log('ALL CHECKS PASSED');
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-file-index-rows.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-file-index-rows.mjs
new file mode 100644
index 0000000..1ab2934
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-file-index-rows.mjs
@@ -0,0 +1,151 @@
+/**
+ * Which source file each record came from.
+ *
+ * `fileIdxRowsFromPayload` projects the lineage's row locators down to the one number the server
+ * groups by, so a record lands in the segment for the generation it was written in rather than in
+ * whichever generation happens to be first. It used to be `indexRowsFromPayload` in a module called
+ * `trajectory-index`, returning a whole index row per record so the index artifact could be written;
+ * nothing ever read that artifact back, so the extra shape was built on every publish and read by one
+ * caller that wanted one of those fields.
+ *
+ * The case this file exists for is the one the other end cannot cover. `verify-search-segments.mjs`
+ * asserts that a record carrying **no file number at all** is serialised with `-1` — but that is
+ * `buildSegment` normalising an empty input, and it never calls this projection. If the projection
+ * repaired an unlocated record to file `0`, `buildSegment` would faithfully carry that `0` out into
+ * the segment and every one of those assertions would still pass. The server groups records by
+ * `located.fileIdx === fileIdx`, so a record silently filed under the first source file is a record
+ * answered from a different generation's message.
+ *
+ * Which is why the `-1` assertions here are about **the projection**, not about the segment, and why
+ * they live here with the function rather than being assumed to already exist downstream.
+ *
+ * It also pins the retirement. The locator this is handed still carries a byte range — it always
+ * will, because the locator is the lineage's own — and the projection used to copy it onto the
+ * segment line. Two lines of the JSON prefix on every record, 4.36% of a real segment surface, read
+ * back by nothing. So this asserts the byte range is dropped **while it is present in the input**,
+ * which is the only shape of that assertion that would have failed before the change: an input
+ * without byte ranges would have passed either way, and a guard that passes both ways proves
+ * nothing about the thing it names.
+ *
+ * Read-only, pure: the projection has no I/O and this file writes nothing.
+ * `mutate-file-index-rows.py` breaks each of these in the shipped module.
+ */
+import { fileIdxRowsFromPayload } from '../miniapp/node/search-segments.mjs';
+
+let pass = 0;
+const failures = [];
+function check(name, actual, expected) {
+ const ok = JSON.stringify(actual) === JSON.stringify(expected);
+ if (ok) pass += 1;
+ else failures.push(`${name}\n got ${JSON.stringify(actual)}\n want ${JSON.stringify(expected)}`);
+}
+function assert(name, cond) {
+ if (cond) pass += 1;
+ else failures.push(name);
+}
+
+/* ------------------------------------------------------------------ fixtures */
+/* `index` is the only field the projection reads off a record, so a record is one number here. */
+const payloadOf = (indexes) => ({
+ turns: indexes.map((indexesInTurn, t) => ({
+ index: t + 1,
+ records: indexesInTurn.map((index) => ({ index }))
+ }))
+});
+const FLAT = [1, 2, 3, 4, 5, 6];
+const PAYLOAD = payloadOf([FLAT.slice(0, 3), FLAT.slice(3)]);
+
+/* Two generations, deliberately named so a basename match would confuse them: both files are
+ * called `messages.jsonl`, because that is exactly how a lineage lays out. */
+const FILES = [
+ { filePath: '/store/s/snapshots/g0/messages.jsonl', fileName: 'messages.jsonl', generation: 0 },
+ { filePath: '/store/s/active/messages.jsonl', fileName: 'messages.jsonl', generation: 1 }
+];
+/* The locator keeps its byte range and its digest: the lineage's shape is not this file's to
+ * shrink, and the projection has to be shown dropping them rather than being unable to see them. */
+const loc = (filePath, start, end) => ({ filePath, start, end, digest: 'd' });
+
+const rawsOf = (entries) => new Map(entries.map(([index, locator]) => [index, locator]));
+
+/* Records alternate between the two files. That is not how a session is laid out and it is on
+ * purpose: it is the only assignment under which the walk order and the sorted order disagree, so
+ * the order assertion below measures the walk rather than agreeing with it by accident. */
+const G0 = FILES[0].filePath;
+const G1 = FILES[1].filePath;
+const raws = rawsOf([
+ [1, loc(G0, 0, 120)],
+ [2, loc(G1, 121, 260)],
+ [3, loc(G0, 261, 400)],
+ [4, loc(G1, 0, 90)],
+ [5, loc(G0, 91, 200)],
+ [6, loc(G1, 201, 340)]
+]);
+const rows = fileIdxRowsFromPayload(PAYLOAD, raws, FILES);
+
+/* ------------------------------------------------------------------ order and shape */
+check('one entry per record, in the order the payload is walked',
+ rows.length, FLAT.length);
+check('each record names the file its locator names',
+ rows.map((r) => r.fileIdx), [0, 1, 0, 1, 0, 1]);
+assert('and the order is the payload\'s, not sorted by file',
+ rows.map((r) => r.fileIdx).join(',') !== '0,0,0,1,1,1');
+check('every entry carries exactly the file number',
+ Object.keys(rows[0]).sort(), ['fileIdx']);
+
+/* The retirement, in the only shape that can fail: the locator above DID carry a byte range, and it
+ * did not survive the projection. An input without byte ranges would pass this either way. */
+assert('the byte range the locator carries is dropped, not copied onto the row',
+ rows.every((r) => !('byteStart' in r) && !('byteEnd' in r)));
+assert('and the locators handed in really did carry one',
+ [...raws.values()].every((l) => typeof l.start === 'number' && typeof l.end === 'number'));
+
+/* Two generations both hold a `messages.jsonl`. A basename match would file the second
+ * generation's records under the first, which is a different generation's message. */
+assert('the two source files really do share a basename',
+ FILES[0].fileName === FILES[1].fileName);
+
+/* ------------------------------------------------- a record whose line was never located */
+/* The full map minus ONE entry, so exactly one record is unlocated. Building a sparse map by hand
+ * instead would leave three records unlocated and the "exactly one" assertions below would be
+ * measuring the fixture rather than the projection. */
+const partialRaws = rawsOf([...raws].filter(([index]) => index !== 3));
+const partial = fileIdxRowsFromPayload(PAYLOAD, partialRaws, FILES);
+
+check('a record with no locator says file -1', partial[2].fileIdx, -1);
+check('and its neighbours keep theirs', [partial[1].fileIdx, partial[3].fileIdx], [1, 1]);
+check('no record silently became file 0', partial.filter((r) => r.fileIdx === -1).length, 1);
+
+/* The same question asked of the OTHER kind of "no location": the locator exists but names a file
+ * that is not in the table. That is a source that moved, and it must not be filed under file 0
+ * either — the two cases reach file 0 by different routes and both would answer from the wrong
+ * generation. */
+const movedRaws = rawsOf([
+ [1, loc(G0, 0, 120)],
+ [2, loc('/store/s/elsewhere/gone.jsonl', 10, 20)]
+]);
+const moved = fileIdxRowsFromPayload(PAYLOAD, movedRaws, FILES);
+check('a locator whose file is not in the table says file -1, not file 0', moved[1].fileIdx, -1);
+check('and so does every record the sparse map did not cover',
+ moved.map((r) => r.fileIdx), [0, -1, -1, -1, -1, -1]);
+
+/* ------------------------------------------------------------------ empty and odd inputs */
+check('a payload with no records projects to nothing',
+ fileIdxRowsFromPayload(payloadOf([]), new Map(), FILES).length, 0);
+check('an empty locator map leaves every record unlocated, not every record in file 0',
+ fileIdxRowsFromPayload(PAYLOAD, new Map(), FILES).map((r) => r.fileIdx), [-1, -1, -1, -1, -1, -1]);
+check('no source files at all is the same as no location',
+ fileIdxRowsFromPayload(PAYLOAD, raws, []).map((r) => r.fileIdx), [-1, -1, -1, -1, -1, -1]);
+
+/* First writer wins: a path is only in the table once per session, and a duplicated path must not
+ * make the second entry reachable in a way that depends on iteration order. */
+const dupFiles = [FILES[0], { filePath: FILES[0].filePath, fileName: 'copy', generation: 9 }];
+check('a path listed twice still resolves to the first file that claimed it',
+ fileIdxRowsFromPayload(PAYLOAD, raws, dupFiles).map((r) => r.fileIdx), [0, -1, 0, -1, 0, -1]);
+
+/* ---------------------------------------------------------------------- report */
+console.log('file-index-rows: ' + pass + ' passed, ' + failures.length + ' failed');
+if (failures.length) {
+ for (const f of failures) console.log('FAIL ' + f);
+ process.exit(1);
+}
+console.log('ALL CHECKS PASSED');
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-freshness.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-freshness.mjs
new file mode 100644
index 0000000..1cd94ef
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-freshness.mjs
@@ -0,0 +1,273 @@
+// Behavioural checks for the freshness layer: `#error-bar` and `#stale-bar`.
+//
+// The assertions are scenarios, not a list of symbols, and they are run against the delivered
+// script rather than a copy: this layer had no guard at all, which is why a warning could sit on
+// screen saying 「正在重试」 for as long as the session stayed quiet. A quiet session revalidates
+// into a 304 on every tick, so "cleared only when a body arrived" was enough to strand it.
+//
+// Load-bearing ones:
+// · a 304 counts as fresh — otherwise the bar outlives the fault;
+// · a 304 does NOT re-render — otherwise the fix trades a stuck bar for a permanent rebuild;
+// · two sources are independent, and the worse one speaks;
+// · a dropped connection and an unreadable answer are told apart.
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import vm from 'node:vm';
+
+const HTML = fileURLToPath(new URL('../miniapp/client/index.html', import.meta.url));
+const html = readFileSync(HTML, 'utf8');
+
+const script = [...html.matchAll(/<script>([\s\S]*?)<\/script>/g)].map((m) => m[1])[0];
+if (!script) throw new Error('no inline script found');
+
+// Cut the bootstrap: the page must not fetch or mount while under test.
+const bootIndex = script.lastIndexOf("if (document.readyState === 'loading')");
+const body = bootIndex === -1 ? script : script.slice(0, bootIndex);
+
+const noop = () => {};
+
+/** A bar node: `hidden`, plus the two child nodes `renderBars` writes through querySelector. */
+function barNode() {
+ const parts = {};
+ return {
+ hidden: true,
+ textContent: '',
+ querySelector(sel) {
+ if (!parts[sel]) parts[sel] = { textContent: '' };
+ return parts[sel];
+ }
+ };
+}
+
+function domNode(tag) {
+ const kids = [];
+ const attrs = {};
+ return {
+ tag,
+ childNodes: kids,
+ get firstChild() { return kids.length ? kids[0] : null; },
+ appendChild(n) { kids.push(n); return n; },
+ removeChild(n) { const i = kids.indexOf(n); if (i >= 0) kids.splice(i, 1); return n; },
+ setAttribute(k, v) { attrs[k] = String(v); },
+ getAttribute(k) { return Object.prototype.hasOwnProperty.call(attrs, k) ? attrs[k] : null; },
+ removeAttribute(k) { delete attrs[k]; },
+ style: { setProperty: noop },
+ className: '',
+ textContent: ''
+ };
+}
+
+/** A response good enough for the two fetches: status, etag, and a body that may be missing. */
+function res(status, body, etag) {
+ return {
+ status,
+ ok: status >= 200 && status < 300,
+ headers: { get: (k) => (k === 'etag' ? (etag ?? null) : null) },
+ json: () => (body === undefined ? Promise.reject(new Error('no body')) : Promise.resolve(body))
+ };
+}
+
+const LISTS = { sessions: [{ id: 's1', label: 'a', sizeBytes: 10, lastActiveAt: 1 }] };
+const TRAJ = { turns: [], stats: {}, session: { id: 's1' }, generation: 1, cursor: 'c1' };
+
+let renders = 0;
+let responder = () => Promise.resolve(res(200, LISTS, 'W/"l1"'));
+
+const sandbox = {
+ console,
+ AbortController,
+ window: {
+ localStorage: { getItem: () => null, setItem: noop },
+ matchMedia: () => ({ addEventListener: noop, addListener: noop }),
+ setTimeout: () => 0,
+ clearTimeout: noop,
+ setInterval: () => 0,
+ clearInterval: noop
+ },
+ document: {
+ documentElement: { dataset: {} },
+ body: { classList: { add: noop, remove: noop } },
+ createElement: (tag) => domNode(tag)
+ },
+ fetch: (url, opts) => responder(url, opts)
+};
+vm.createContext(sandbox);
+vm.runInContext(body, sandbox);
+
+// Everything expensive is stubbed and counted; everything this layer owns is the delivered code.
+// `render` in particular is replaced rather than exercised: the whole point of one assertion below
+// is that a 304 must NOT reach it, and running it for real would rebuild a ledger to say so. It
+// still draws the bars, because that is what it is on this path for.
+const drawBars = sandbox.renderBars;
+sandbox.render = () => { renders += 1; drawBars(); };
+sandbox.renderLoading = noop;
+sandbox.renderSessionSelect = noop;
+sandbox.rePinWindow = noop;
+sandbox.runSearch = noop;
+
+sandbox.dom.errorBar = barNode();
+sandbox.dom.errorTitle = barNode();
+sandbox.dom.errorText = barNode();
+sandbox.dom.staleBar = barNode();
+
+let pass = 0;
+const failures = [];
+function check(name, actual, expected) {
+ if (JSON.stringify(actual) === JSON.stringify(expected)) pass += 1;
+ else failures.push(`${name}\n got ${JSON.stringify(actual)}\n want ${JSON.stringify(expected)}`);
+}
+function assert(name, cond) {
+ if (cond) pass += 1;
+ else failures.push(name);
+}
+
+const bar = () => sandbox.dom.staleBar;
+const title = () => sandbox.dom.staleBar.querySelector('.bar-title').textContent;
+const hint = () => sandbox.dom.staleBar.querySelector('.bar-hint').textContent;
+const shown = () => sandbox.dom.staleBar.hidden === false;
+
+/** Start from a healthy page: something on screen, nothing degraded. */
+function reset() {
+ sandbox.freshness.trajectory.streak = 0;
+ sandbox.freshness.trajectory.reason = '';
+ sandbox.freshness.sessions.streak = 0;
+ sandbox.freshness.sessions.reason = '';
+ sandbox.state.payload = null;
+ sandbox.state.hardError = null;
+ sandbox.state.loading = false;
+ sandbox.dom.staleBar.hidden = true;
+ sandbox.dom.errorBar.hidden = true;
+ sandbox.dom.staleBar.querySelector('.bar-title').textContent = '';
+ sandbox.dom.staleBar.querySelector('.bar-hint').textContent = '';
+ renders = 0;
+}
+
+const DROP = () => Promise.reject(new TypeError('failed to fetch'));
+const BAD = (status) => () => Promise.resolve(res(status, undefined, null));
+const NOTMOD = () => Promise.resolve(res(304, undefined, 'W/"x"'));
+
+/* ================================================================= the regression */
+
+reset();
+sandbox.state.payload = TRAJ; // there is something to be out of date
+responder = () => Promise.resolve(res(200, TRAJ, 'W/"t1"'));
+await sandbox.fetchTrajectory(false);
+assert('a good load shows no warning', shown() === false);
+
+responder = DROP;
+await sandbox.fetchTrajectory(false);
+assert('a dropped connection raises the warning', shown() === true);
+
+responder = NOTMOD;
+await sandbox.fetchTrajectory(false);
+assert('a 304 takes the warning down — this is the defect the guard exists for', shown() === false);
+check('and the streak is back to zero', sandbox.freshness.trajectory.streak, 0);
+
+/* ---------------------------------------------------------------- it must stay down */
+
+responder = NOTMOD;
+renders = 0;
+for (let i = 0; i < 5; i += 1) await sandbox.fetchTrajectory(false);
+check('five more 304s on a quiet session render nothing', renders, 0);
+assert('and the warning has not come back', shown() === false);
+
+/* ---------------------------------------------------------------- a 200 also clears */
+
+reset();
+sandbox.state.payload = TRAJ;
+responder = DROP;
+await sandbox.fetchTrajectory(false);
+assert('raised again', shown() === true);
+responder = () => Promise.resolve(res(200, TRAJ, 'W/"t2"'));
+await sandbox.fetchTrajectory(false);
+assert('a fresh body takes it down too', shown() === false);
+
+/* ---------------------------------------------------------------- how long it has been up */
+
+reset();
+sandbox.state.payload = TRAJ;
+responder = DROP;
+await sandbox.fetchTrajectory(false);
+// A first failure is a blip that clears itself within one poll, and it gets no extra sentence
+// saying so — that is what the count is for, and it starts at the second.
+assert('the first failure does not claim to be a pattern', hint().includes('连续') === false);
+await sandbox.fetchTrajectory(false);
+assert('by the second the count is on screen', hint().includes('连续 2 次'));
+await sandbox.fetchTrajectory(false);
+assert('and by the third it is right', hint().includes('连续 3 次'));
+assert('the count names what stopped updating', hint().includes('轨迹'));
+
+/* ---------------------------------------------------------------- which kind of failure */
+
+reset();
+sandbox.state.payload = TRAJ;
+responder = DROP;
+await sandbox.fetchTrajectory(false);
+const offlineTitle = title();
+assert('a dropped connection says so', offlineTitle === '与本地服务的连接中断，正在重试');
+assert('and does not blame the server for it', offlineTitle.includes('更新失败') === false);
+
+reset();
+sandbox.state.payload = TRAJ;
+responder = BAD(500);
+await sandbox.fetchTrajectory(false);
+const badTitle = title();
+assert('an unreadable answer says something different', badTitle !== offlineTitle);
+assert('and names the server as the place to look', badTitle === '服务端返回了无法读取的内容，正在重试');
+
+reset();
+sandbox.state.payload = TRAJ;
+responder = () => Promise.resolve(res(503, { error: 'trajectory_unreadable', message: 'x' }, null));
+await sandbox.fetchTrajectory(false);
+assert('a structured code keeps its own wording', title() === '会话数据暂时无法读取，正在重试');
+assert('and is not folded into the unreadable-answer wording', title() !== badTitle);
+
+/* ---------------------------------------------------------------- the session list */
+
+reset();
+sandbox.state.payload = TRAJ;
+responder = () => Promise.resolve(res(200, LISTS, 'W/"l1"'));
+await sandbox.fetchSessions();
+assert('a healthy list raises nothing', shown() === false);
+
+responder = DROP;
+await sandbox.fetchSessions();
+assert('a failed list is visible at all — it used to write a flag nothing read', shown() === true);
+await sandbox.fetchSessions();
+assert('and by the second it says which one stopped', hint().includes('会话列表'));
+
+responder = NOTMOD;
+await sandbox.fetchSessions();
+assert('a 304 on the list takes its warning down too', shown() === false);
+
+/* ---------------------------------------------------------------- two sources, independently */
+
+reset();
+sandbox.state.payload = TRAJ;
+responder = () => Promise.resolve(res(200, TRAJ, 'W/"t3"'));
+await sandbox.fetchTrajectory(false);
+responder = DROP;
+await sandbox.fetchSessions();
+assert('a healthy trajectory does not hide a failed list', shown() === true);
+
+responder = () => Promise.resolve(res(200, LISTS, 'W/"l2"'));
+await sandbox.fetchSessions();
+assert('the list recovering is enough when nothing else is wrong', shown() === false);
+check('and its streak is cleared', sandbox.freshness.sessions.streak, 0);
+
+/* ---------------------------------------------------------------- nothing on screen */
+
+reset();
+sandbox.state.payload = null;
+responder = DROP;
+await sandbox.fetchTrajectory(false);
+assert('with nothing on screen it is a hard error, not a freshness note', shown() === false);
+assert('and the hard error is shown', sandbox.dom.errorBar.hidden === false);
+sandbox.dom.errorBar.hidden = true;
+
+if (failures.length) {
+ console.error(`[freshness] ${pass} passed, ${failures.length} FAILED`);
+ for (const f of failures) console.error(` - ${f}`);
+ process.exit(1);
+}
+console.log(`[freshness] ${pass} passed, 0 failed`);
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-generations.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-generations.mjs
index 2af031f..c15e576 100644
--- a/plugins/avatasia/mmc-trajectory/tests/verify-generations.mjs
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-generations.mjs
@@ -11,6 +11,8 @@ import {
readGenerationMarker,
walkLineage,
ROW_GENERATION,
+ buildMessageIdentity,
+ selectIdentityView,
} from '../miniapp/node/server.mjs';
let pass = 0;
@@ -148,7 +150,11 @@ const payload = buildTrajectoryPayload({
generation: 2,
});
check('messages counts this generation only', payload.stats.messages, 2);
-check('messagesAll spans every generation', payload.stats.messagesAll, 676 + 548 + 186);
+// What it used to assert — the session-wide number must not shrink to one generation — is now
+// carried by the identity path below, where it is actually true. What it asserts here is the
+// definition: logical messages, not the rows the catalog recorded per file.
+check('messagesAll counts logical messages, not catalog rows', payload.stats.messagesAll, 2);
+check('...and the physical row count is reported separately', payload.stats.messageRowsAll, 2);
check('compactions counted', payload.stats.compactions, 1);
check('generation echoed on the session', payload.session.generation, 2);
check('generation list passed through', payload.session.generations.length, 3);
@@ -243,6 +249,62 @@ check('no orphans on a clean chain', full.orphans, []);
const single = await walkLineage(fixtureCatalog([[0,'messages.jsonl']]), probeFrom({ ...FILES, gen1: 'g1.jsonl', 'messages.jsonl': plainRow }));
check('an uncompacted session is one generation', single.chain.map((l) => l.generation), [0]);
+/* An active file that opens with no marker. The marker rides on the checkpoint row that rotated
+ the generation, so a session whose active file was rewritten in place has none — and reading
+ nothing off its head used to start the walk at generation 0, which reached no parent and
+ turned every sealed generation it actually had into an orphan. Measured over the store: one
+ session in 139, and it is the only one the runtime ever rewrote tool results in. */
+{
+ const noMarker = await walkLineage(
+ fixtureCatalog([[0,'g0.jsonl'],[1,'g1.jsonl'],[2,'messages.jsonl']]),
+ probeFrom({ ...FILES, gen0: 'g0.jsonl', gen1: 'g1.jsonl', 'messages.jsonl': plainRow }),
+ );
+ check('an active file with no marker still starts at the generation the catalog names',
+ noMarker.chain.map((l) => l.generation), [0, 1, 2]);
+ check('...so its sealed generations are reached, not orphaned', noMarker.orphans, []);
+
+ // The shape the store actually has: a session that compacted once and whose files declare
+ // nothing at all, because the marker rides on a checkpoint row that is not there. Both the
+ // active file and its one sealed snapshot are marker-less, and the snapshot is reached at
+ // generation 1 — where reading "no marker" as generation 0 used to refuse it.
+ const noMarkersAtAll = await walkLineage(
+ fixtureCatalog([[1,'g1.jsonl'],[2,'messages.jsonl']]),
+ probeFrom({ 'g1.jsonl': plainRow, gen1: 'g1.jsonl', 'messages.jsonl': plainRow }),
+ );
+ check('a sealed snapshot reached at a generation it does not declare is still stitched',
+ noMarkersAtAll.chain.map((l) => l.generation), [1, 2]);
+ check('...and nothing is left as an orphan', noMarkersAtAll.orphans, []);
+
+ // The counter-example, and the reason this is a fallback rather than a new source of truth: a
+ // file that DOES declare its generation still overrides the catalog, so this cannot become a
+ // way for a hand-edited catalog to place a file in a lineage.
+ const lying = await walkLineage(
+ fixtureCatalog([[0,'g0.jsonl'],[1,'g1.jsonl'],[2,'messages.jsonl']]),
+ probeFrom({ ...FILES, gen0: 'g0.jsonl', gen1: 'g1.jsonl', 'messages.jsonl': markerRow(7, 6) }),
+ );
+ check('a file that declares its own generation still wins over the catalog',
+ lying.chain.map((l) => l.generation), [7]);
+ check('...and everything the walk cannot reach stays orphaned', lying.orphans.map((o) => o.generation), [0, 1]);
+
+ // And the fork case is unchanged: a sealed file that names a generation other than the one it
+ // was reached for is still refused, marker or no marker.
+ const forkedOnPurpose = await walkLineage(
+ fixtureCatalog([[0,'g0.jsonl'],[1,'g1.jsonl'],[2,'messages.jsonl']]),
+ probeFrom({ ...FILES, gen0: 'g0.jsonl', gen1: 'g1.jsonl', 'g1.jsonl': markerRow(7, 6), 'messages.jsonl': markerRow(2, 1) + plainRow }),
+ );
+ check('a sealed file declaring the wrong generation is still refused',
+ forkedOnPurpose.chain.map((l) => l.generation), [2]);
+ check('...and is reported as an orphan', forkedOnPurpose.orphans.map((o) => o.generation), [0, 1]);
+
+ // A catalog that names no active entry at all leaves nothing to fall back to, and the walk
+ // still starts rather than throwing.
+ const nameless = await walkLineage(
+ { generations: [{ generation: 4, kind: 'snapshot', fileName: 'g0.jsonl', byteLength: 1, messageCount: 1, revision: null, active: false }] },
+ probeFrom({ 'g0.jsonl': plainRow, 'messages.jsonl': plainRow }),
+ );
+ assert('a catalog with no active entry still yields a chain', nameless.chain.length >= 1);
+}
+
/* a snapshot whose parent generation is not exactly one lower is not part of this lineage */
const skipped = await walkLineage(fixtureCatalog([[0,'g0.jsonl'],[1,'g1.jsonl'],[2,'messages.jsonl']]), probeFrom({
...FILES, gen0: 'g0.jsonl', gen1: 'g1.jsonl',
@@ -288,12 +350,75 @@ const stitchedPayload = buildTrajectoryPayload({
orphans: [{ generation: 5, fileName: 'orphan.jsonl' }],
});
const allRecords = stitchedPayload.turns.flatMap((t) => t.records);
+const generationsLogical = (payload) => payload.session.generations
+ .slice()
+ .sort((a, b) => a.generation - b.generation)
+ .map((g) => g.logicalMessageCount);
check('every record carries a generation', allRecords.every((r) => Number.isInteger(r.generation)), true);
check('generations appear in stitch order', [...new Set(allRecords.map((r) => r.generation))], [0, 1, 2]);
check('the symbol never reaches the body', JSON.stringify(stitchedPayload).includes('rowGeneration'), false);
check('orphans are reported on the session', stitchedPayload.session.orphans.map((o) => o.generation), [5]);
-check('the fixture catalog counts match the stitched rows', stitchedPayload.stats.messagesAll, 30);
-check('a stitched view still reports the session-wide total', stitchedPayload.stats.messagesAll >= stitchedPayload.stats.messages, true);
+// Five stored rows, three of them the same `msg-a1` re-recorded in each generation. The catalog
+// claims thirty; the conversation has three.
+check('the stitched rows collapse into logical messages, not stored rows', stitchedPayload.stats.messagesAll, 3);
+check('the physical row count stays available separately', stitchedPayload.stats.messageRowsAll, 5);
+
+/* The session-wide number has to survive being read one generation at a time, which is the
+ property the catalog sum used to supply. The route builds the identity table over the whole
+ lineage and projects afterwards, so the slice carries the lineage's count with it. */
+const stitchedIdentity = buildMessageIdentity(stitched.map((row) => ({
+ row,
+ generation: /** @type {number} */ (row[ROW_GENERATION]),
+ locator: null,
+})));
+check('the identity table merges the three copies of one message', stitchedIdentity.stats.identities, 3);
+const slice = selectIdentityView(stitchedIdentity, 1);
+const slicePayload = buildTrajectoryPayload({
+ session: { id: 'mvs_9s', createdAtMs: 1 },
+ rows: slice.rows,
+ generations: fixtureCatalog([[0,'g0.jsonl'],[1,'g1.jsonl'],[2,'messages.jsonl']]).generations,
+ identity: stitchedIdentity,
+ openerByTurn: slice.openerByTurn,
+});
+check('a single-generation slice shows only that generation', slicePayload.stats.messages, 2);
+check('...while still reporting the whole conversation', slicePayload.stats.messagesAll, 3);
+// Per-generation counts overlap by construction: msg-a1 is stored in all three.
+check('each generation reports the messages IT stores', generationsLogical(stitchedPayload), [1, 2, 2]);
+
+/* ---- a steer whose opener is stored in an earlier generation ----
+ Deciding the opener from the projected slice is what made this prompt look like the first
+ prompt of its own turn, which counted it as a conversation instead of a redirect and dropped
+ the turn out of the 对话 total while the reader was looking straight at it. */
+const crossGen = [
+ { row: { message_id: 'c-1', turn_id: 'tx', message: { role: 'user', content: [{ type: 'text', text: 'start it' }], timestamp: 10 } }, generation: 0, locator: null },
+ { row: { message_id: 'c-2', turn_id: 'tx', message: { role: 'assistant', content: [{ type: 'text', text: 'on it' }], timestamp: 11 } }, generation: 0, locator: null },
+ { row: { message_id: 'c-3', turn_id: 'tx', message: { role: 'user', content: [{ type: 'text', text: 'no, the other one' }], timestamp: 20 } }, generation: 1, locator: null },
+];
+const crossIdentity = buildMessageIdentity(crossGen);
+check('the opener is the first prompt of the turn, from generation 0', crossIdentity.openers.get('tx'), 'c-1');
+const crossSlice = selectIdentityView(crossIdentity, 1);
+const crossPayload = buildTrajectoryPayload({
+ session: { id: 'mvs_x', createdAtMs: 10 },
+ rows: crossSlice.rows,
+ identity: crossIdentity,
+ openerByTurn: crossSlice.openerByTurn,
+});
+const crossKinds = crossPayload.turns.flatMap((t) => t.records).map((r) => r.kind);
+check('the prompt alone in the slice is still a steer', crossKinds, ['steer']);
+check('...so it is not counted as a conversation prompt', [crossPayload.stats.userMessages, crossPayload.stats.steers], [0, 1]);
+check('...and the turn is still a prompted turn', [crossPayload.stats.turnsWithPrompt, crossPayload.turns[0].turnClass], [1, 'prompt']);
+check('...and it says the opener is elsewhere', [crossPayload.turns[0].openerInView, crossPayload.turns[0].openerOutOfView], [false, true]);
+
+const crossWhole = selectIdentityView(crossIdentity, null);
+const crossWholePayload = buildTrajectoryPayload({
+ session: { id: 'mvs_x', createdAtMs: 10 },
+ rows: crossWhole.rows,
+ identity: crossIdentity,
+ openerByTurn: crossWhole.openerByTurn,
+});
+check('the whole lineage files the opener as dialogue and the rest as a steer',
+ crossWholePayload.turns.flatMap((t) => t.records).map((r) => r.kind), ['user', 'narration', 'steer']);
+check('...and both are inside the view', [crossWholePayload.turns[0].openerInView, crossWholePayload.turns[0].openerOutOfView], [true, false]);
/* ---- a turn total is only readable if it says what it is made of ---- */
const turnRows = [];
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-incremental.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-incremental.mjs
index c38b439..c259047 100644
--- a/plugins/avatasia/mmc-trajectory/tests/verify-incremental.mjs
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-incremental.mjs
@@ -370,8 +370,30 @@ assert('a manual refresh drops the cursor as well as the validator',
/if \(manual\) \{\s*\n\s*state\.etag = '';\s*\n\s*state\.etagFor = '';\s*\n\s*state\.since = 0;\s*\n\s*state\.sinceFor = '';/.test(html));
// The merge is gated on the delta marker *and* on having a payload to lay it onto. Without the
// second half a delta after a session switch would be merged onto a different session's turns.
+// It is gated on a THIRD thing now: whether the tail was cut from the numbering in hand. That is
+// not the same question as either of the other two — a delta can be well-formed and for the right
+// session and still be cut from a numbering that has since moved.
assert('the merge needs both the delta marker and a payload in hand',
- /var mergeable = body && body\.delta && state\.payload && Array\.isArray\(state\.payload\.turns\);/.test(html));
+ /var hasDelta = !!\(body && body\.delta && state\.payload && Array\.isArray\(state\.payload\.turns\)\);/.test(html)
+ && /var mergeable = hasDelta;/.test(html));
+assert('and it checks the numbering the tail was cut from before merging anything',
+ /if \(hasDelta && !deltaMatchesNumbering\(state\.payload, body\)\) \{/.test(html)
+ && html.indexOf('deltaMatchesNumbering(state.payload, body)') < html.indexOf('mergeDelta(state.payload, body)'));
+assert('a tail cut from another numbering is refused outright, and the cursor is dropped with it',
+ /state\.since = null;\s*\n\s*state\.sinceFor = null;[\s\S]{0,200}fetchTrajectory\(true\);/.test(html));
+assert('the check is refused, not assumed, when the tail names no record at the cursor',
+ /if \(!based \|\| typeof based\.index !== 'number' \|\| based\.index < 0\) return false;/.test(html));
+assert('and a cursor of zero has nothing before it that could have moved',
+ /if \(based\.index === 0\) return true;/.test(html));
+// And the server has to say which record it assumed, or the client has nothing to compare against.
+// The lookup is pinned separately because the assignment's shape is the same whichever record it
+// reads — naming upTo instead of since would produce a well-formed `basedOn` that answers the
+// wrong question, and every other assertion here would still pass.
+assert('the tail names the record its cursor pointed at',
+ /basedOn = \{ index: since, id: record\.id === undefined \? null : record\.id \};/.test(server)
+ && /delta: \{ since, upTo, records, basedOn \}/.test(server));
+assert('and it is looked up at the cursor, not at the end of the payload',
+ /if \(record && record\.index === since\) \{/.test(server));
// The server cuts the tail only on the fresh-build path. The cached path serves the bytes it
// already has, and reaching it with a cursor means the session changed anyway.
assert('the server cuts a tail only where it has just built the payload',
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-list-cache.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-list-cache.mjs
index 68fa19d..f4ca480 100644
--- a/plugins/avatasia/mmc-trajectory/tests/verify-list-cache.mjs
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-list-cache.mjs
@@ -36,7 +36,7 @@
* catch it by name, so nothing here can be an assertion nothing could fail.
*/
import { readFileSync } from 'node:fs';
-import { fileURLToPath } from 'node:url';
+import { fileURLToPath, pathToFileURL } from 'node:url';
const SERVER = fileURLToPath(new URL('../miniapp/node/server.mjs', import.meta.url));
const HTML = fileURLToPath(new URL('../miniapp/client/index.html', import.meta.url));
@@ -52,15 +52,33 @@ function assert(name, cond) {
/* ---------- 1: the TTL outlives the poll that expires it ---------- */
+// The governing cadence is the LIST's, not the page's. One `POLL_INTERVAL` drove both fetches when
+// this was written, so the two were the same number by coincidence; the page now has a tick per
+// fetch, and asserting against the trajectory's would let the list be polled twice as often as
+// its cache can answer.
const ttl = /const LIST_CACHE_TTL_MS\s*=\s*(\d+)/.exec(server);
-const poll = /var POLL_INTERVAL\s*=\s*(\d+)/.exec(html);
+const sessionPoll = /var SESSION_POLL_INTERVAL\s*=\s*(\d+)/.exec(html);
assert('the list TTL is still declared in the server', ttl !== null);
-assert('the poll interval is still declared in the client', poll !== null);
+assert('the list\'s poll interval is still declared in the client', sessionPoll !== null);
-if (ttl && poll) {
- assert('LIST_CACHE_TTL_MS (' + ttl[1] + ') is at or above POLL_INTERVAL (' + poll[1] + ') — a cache below the poll interval can never be hit',
- Number(ttl[1]) >= Number(poll[1]));
+if (ttl && sessionPoll) {
+ assert('LIST_CACHE_TTL_MS (' + ttl[1] + ') is at or above the list poll interval (' + sessionPoll[1] + ') — a cache below the poll interval can never be hit',
+ Number(ttl[1]) >= Number(sessionPoll[1]));
+}
+
+// The other direction, and it is what makes a 304 on this route honest. A revalidated list means
+// "the payload I would send you now is the one you have", so its staleness bound cannot be looser
+// than the descriptor cache whose entries it is derived from. The tag is computed from the walk's
+// output, so it is as old as LIST_CACHE_TTL_MS; the descriptors behind it are as old as
+// SESSION_CACHE_TTL_MS. If that ever inverts, the validator is the freshest input in the route
+// and a stale descriptor can be pinned in place by a tag that says nothing changed.
+const descriptorTtl = /const SESSION_CACHE_TTL_MS\s*=\s*(\d+)/.exec(server);
+assert('the descriptor cache budget is still declared', descriptorTtl !== null);
+if (ttl && descriptorTtl) {
+ assert('LIST_CACHE_TTL_MS (' + ttl[1] + ') is at or below SESSION_CACHE_TTL_MS (' + descriptorTtl[1]
+ + ') — the walk must not be able to feed a validator built on fresher facts than the descriptors it stands for',
+ Number(ttl[1]) <= Number(descriptorTtl[1]));
}
/* ---------- 2 & 3: one poll, one walk, one database open ---------- */
@@ -80,6 +98,11 @@ assert('the list route reaches titles through the cache',
assert('dispose releases the title cache',
/titleCache = \{ at: 0, key: '', map: new Map\(\) \};[\s\S]{0,240}?descriptorCache\.clear\(\)/.test(server));
+// The list body cache is a third thing the poll built, and it holds serialized bytes this time.
+// It is small next to the two above, which is exactly why it is the one that gets forgotten.
+assert('dispose releases the list body cache',
+ /sessionsBody = \{ material: '', body: null \};[\s\S]{0,240}?descriptorCache\.clear\(\)/.test(server));
+
/* ---------- 5: the peek that backs the list is bounded ---------- */
const probe = /const GENERATION_PROBE_BYTES\s*=\s*(\d+)\s*\*\s*1024/.exec(server);
@@ -135,6 +158,107 @@ assert('the session picker omits the count segment instead of printing a placeho
/var tail = isCount\(count\) \?/.test(clientJs)
&& /'（' \+ when \+ '）'/.test(clientJs));
+/* ---------- 7: the branch a session was spawned from is carried, not dropped ---------- */
+// The store has always had a `parent_session_id`, and the list route has always read the titles
+// beside it without reading it — so every sub-agent run the runtime spawned was listed exactly
+// like a top-level conversation. Nothing caught that, because nothing was pinned about WHICH
+// fields the list is allowed to drop: `stripInternalFields` had no reader anywhere in this
+// directory, so a field could be added, or lost, and the suite stayed green either way.
+//
+// Four links, and dropping any one of them produces the same silent list: the column is not
+// selected, or it is selected and not mapped, or it is mapped and not put on the descriptor, or
+// it reaches the descriptor and is stripped before it is sent. Each gets its own assertion
+// because each is a place the value can be lost without a type error or a crash.
+assert('the titles query reads the parent column',
+ /select session_id, title, session_kind, parent_session_id from local_runtime_sessions where session_id = \?/.test(server));
+
+assert('the parent row is mapped, and an empty id is no parent rather than a parent named ""',
+ /parent:\s*typeof row\.parent_session_id === 'string' && row\.parent_session_id !== ''\s*\n\s*\?\s*row\.parent_session_id\s*\n\s*:\s*null,/.test(server));
+
+assert('the descriptor carries the parent onto the row the page receives',
+ /descriptor\.sessionParentId = meta\.parent;/.test(server));
+
+// `?? null` rather than a bare copy: the page decides by whether this field is SET, so a missing
+// key and a present-but-undefined one have to land in the same place as a row that has no parent.
+assert('the field survives the strip, with null as the floor',
+ /sessionParentId:\s*value\.sessionParentId \?\? null,/.test(server));
+
+// The reader-facing half, off the comment-stripped client for the reason given in section 6: the
+// comment above `sessionOptionLabel` names the marker, so an assertion made against the raw file
+// would be satisfied by prose describing the very thing it exists to require.
+assert('the page decides the marker by the field and not unconditionally',
+ /var branch = session && session\.sessionParentId \? BRANCH_MARK : '';/.test(clientJs));
+
+/* ---------- 6. a database without the column, which the four regexes above cannot see ----------
+ *
+ * Everything above reads `server.mjs` as text, and every one of those regexes is satisfied by a
+ * query that works. None of them is satisfied by a query that FAILS, which is the whole case here:
+ * `db.prepare` throws on a column the database does not have, and the throw landed in the empty
+ * catch that exists for a different reason ("a title is a nicety"). So on a runtime database
+ * written before child sessions existed, the page showed no titles and no kinds at all — every
+ * session fell back to the first sentence of its transcript — and nothing in the suite could see
+ * it, because the shape of a correct query is the shape of a query nobody ran.
+ *
+ * So this runs the function against a real database built here, with and without the column. The
+ * without-case is the one that carries the rule: the titles and the kind are the page's whole
+ * reason for opening the database, and a missing optional column is not a reason to lose them. */
+const { mkdtempSync, mkdirSync, rmSync } = await import('node:fs');
+const { tmpdir } = await import('node:os');
+const { join } = await import('node:path');
+// `node:sqlite` is still flagged experimental, and the flag goes to stderr the moment the module
+// is first loaded. The runner reads `stdout + stderr` and prints the LAST non-empty line, so the
+// warning lands where this guard's own result line should be and `verify-list-cache.mjs` gets
+// reported with the text of an unrelated warning instead of its verdict. Narrowly filtered, and
+// installed BEFORE the import that provokes it: anything else still prints.
+const emitWarning = process.emitWarning;
+process.emitWarning = (warning, ...rest) => (
+ String(warning).startsWith('SQLite is an experimental feature')
+ ? undefined
+ : emitWarning.call(process, warning, ...rest));
+
+const { DatabaseSync } = await import('node:sqlite');
+// `SERVER` is a plain filesystem path, and a dynamic import of one on Windows is read as a URL
+// with an unsupported scheme. The module has to be asked for by its file: URL.
+const { readSessionTitles } = await import(pathToFileURL(SERVER).href);
+
+const runtimeDb = (columns) => {
+ const home = mkdtempSync(join(tmpdir(), 'mmc-trajectory-runtimedb-'));
+ mkdirSync(join(home, 'v2', 'sqlite'), { recursive: true });
+ const db = new DatabaseSync(join(home, 'v2', 'sqlite', 'runtime-state.sqlite'));
+ const extra = columns ? ', parent_session_id' : '';
+ const placeholders = columns ? '?, ?, ?, ?' : '?, ?, ?';
+ db.exec('create table local_runtime_sessions (session_id text primary key, title text,'
+ + ' session_kind text' + extra + ')');
+ const values = ['mvs_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', '一条真实的标题', 'conversation'];
+ if (columns) values.push('mvs_bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb');
+ db.prepare('insert into local_runtime_sessions (session_id, title, session_kind'
+ + extra + ') values (' + placeholders + ')').run(...values);
+ db.close();
+ return home;
+};
+
+const ids = ['mvs_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'];
+const homes = [];
+let withColumn = null;
+let withoutColumn = null;
+try {
+ homes.push(runtimeDb(true), runtimeDb(false));
+ withColumn = await readSessionTitles(homes[0], ids);
+ withoutColumn = await readSessionTitles(homes[1], ids);
+} finally {
+ // The homes are `mkdtemp` directories this call created, so they are cleaned up in the same
+ // breath rather than left behind for the OS to find.
+ for (const h of homes) rmSync(h, { recursive: true, force: true });
+}
+assert('a database with the parent column still reports the title, the kind and the parent',
+ withColumn.get(ids[0])?.title === '一条真实的标题'
+ && withColumn.get(ids[0])?.kind === 'conversation'
+ && withColumn.get(ids[0])?.parent === 'mvs_bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb');
+assert('a database WITHOUT the column keeps the title and the kind, and only loses the parent',
+ withoutColumn.get(ids[0])?.title === '一条真实的标题'
+ && withoutColumn.get(ids[0])?.kind === 'conversation'
+ && withoutColumn.get(ids[0])?.parent === null);
+
console.log('[list-cache] ' + pass + ' passed, ' + failures.length + ' failed');
if (failures.length) {
console.log('FAILURES:\n - ' + failures.join('\n - '));
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-message-identity.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-message-identity.mjs
new file mode 100644
index 0000000..d01cf8e
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-message-identity.mjs
@@ -0,0 +1,280 @@
+/**
+ * Message identity across a lineage: one logical message, several stored copies, and several
+ * content versions of it.
+ *
+ * The route used to hand every stored row to the projector, so a message the runtime wrote into
+ * both a sealed snapshot and the active file appeared twice, and a message whose old tool result
+ * the runtime trimmed on compaction appeared twice with different text. Neither is a row that can
+ * simply be dropped — one is a second copy of one version, the other is a second version of one
+ * message — so this covers the merge, not the deletion.
+ *
+ * Every fixture here is SYNTHETIC. The session store is read-only input, and a real trim case costs
+ * megabytes to reproduce, which is not something a committed fixture should be.
+ */
+import { buildMessageIdentity, selectIdentityView, openerRowsForView, logicalCountByGeneration, buildTrajectoryPayload } from '../miniapp/node/server.mjs';
+
+let pass = 0;
+const failures = [];
+function check(label, actual, expected) {
+ const a = JSON.stringify(actual);
+ const e = JSON.stringify(expected);
+ if (a === e) pass += 1;
+ else failures.push(`${label}\n expected ${e}\n actual ${a}`);
+}
+function assert(label, cond) {
+ if (cond) pass += 1;
+ else failures.push(label);
+}
+
+const REMOVED = '[Tool result removed by context compaction.]';
+
+/** A row the way the store holds one. */
+function row(id, turn, message, extra) {
+ return { message_id: id, turn_id: turn, message, ...(extra ?? {}) };
+}
+function toolResult(text) {
+ return { role: 'toolResult', toolCallId: 'call_1', toolName: 'bash', content: [{ type: 'text', text }], isError: false };
+}
+function user(text) {
+ return { role: 'user', content: [{ type: 'text', text }] };
+}
+/** The route reads one occurrence per row, with the locator digest alongside. */
+const occ = (rowValue, generation, digest) => ({ row: rowValue, generation, locator: { digest } });
+
+const TRIM_DECLARATION = { schemaVersion: 1, generation: 1, producedBy: 'tool_trim', parentSnapshot: { generation: 0, compactionId: 'ctx_1' } };
+
+/* ---------- 1. a second copy of the same content is one version, not two ---------- */
+{
+ const occurrences = [
+ occ(row('m1', 't1', toolResult('exit 0')), 0, 'dA'),
+ occ(row('m1', 't1', toolResult('exit 0')), 1, 'dA'),
+ ];
+ const id = buildMessageIdentity(occurrences);
+ check('an identical re-record is one version', id.identities.get('m1').versions.length, 1);
+ check('...seen twice', id.identities.get('m1').versions[0].occurrences.length, 2);
+ check('...counted as identical, not trimmed', id.stats.identical, 1);
+ check('...and the lineage view keeps one row', selectIdentityView(id, null).rows.length, 1);
+}
+
+/* ---------- 2. the generation's own annotation is provenance, not a new version ---------- */
+{
+ const base = row('m2', 't1', toolResult('exit 0'));
+ const annotated = row('m2', 't1', toolResult('exit 0'), { history_artifact: TRIM_DECLARATION });
+ const id = buildMessageIdentity([occ(base, 0, 'dB'), occ(annotated, 1, 'dC')]);
+ check('history_artifact alone does not make a version', id.identities.get('m2').versions.length, 1);
+ check('...and is not reported as a difference', id.stats.unclassified, 0);
+ check('...while the generation is still recognised as trimmed', [...id.trimmedGenerations], [1]);
+}
+
+/* ---------- 3. a declared trim is a second version, not a copy ---------- */
+{
+ const id = buildMessageIdentity([
+ occ(row('m3', 't1', toolResult('exit 0')), 0, 'dD'),
+ occ(row('m3', 't1', toolResult(REMOVED)), 1, 'dE'),
+ occ(row('m3', 't1', toolResult(REMOVED), { history_artifact: TRIM_DECLARATION }), 1, 'dF'),
+ ]);
+ const versions = id.identities.get('m3').versions;
+ check('a trimmed result is a second version', versions.length, 2);
+ check('...marked as the runtime trimming it', versions[1].relation, 'trimmed');
+ check('...and counted as trimmed', id.stats.trimmed, 1);
+ check('...not as an unexplained difference', id.stats.unclassified, 0);
+}
+
+/* ---------- 4. drop any one predicate and it stops being a declared trim ---------- */
+{
+ // The declaration goes on the declaring generation's OWN opener row, which is where the store
+ // puts it — the rows the runtime rewrote carry no annotation. Hanging it on the changed row
+ // instead made every case below fail at predicate 2 for a reason that had nothing to do with the
+ // case, so predicates 1 and 3 could both be removed and this section still passed.
+ const mk = (label, expected, opts = {}) => {
+ const older = row('m4', 't1', toolResult('exit 0'));
+ const newer = row('m4', 't1', toolResult(REMOVED));
+ (opts.mutate ?? (() => {}))(older, newer);
+ const occurrences = [occ(older, 0, 'dG'), occ(newer, 1, 'dH')];
+ if (opts.declare !== false) {
+ occurrences.push(occ(row('op', 't0', user('carry on'), { history_artifact: TRIM_DECLARATION }), 1, 'dI'));
+ }
+ const id = buildMessageIdentity(occurrences);
+ check(label, id.stats.trimmed, expected);
+ return id;
+ };
+
+ // Without this the whole section could pass with the fixture shape itself broken.
+ mk('a declared trim is recognised in the shape the store actually writes', 1);
+
+ // Only predicate 1 can catch this one: the roles are equal to each other, so "everything but the
+ // content is the same" holds. A role that was never a tool result is not something a trim makes.
+ mk('a role that was never a tool result is never a trim, however else the two rows match', 0, {
+ mutate: (older, newer) => { older.message.role = 'user'; newer.message.role = 'user'; },
+ });
+ mk('a role change is never a trim', 0, {
+ mutate: (older, newer) => { newer.message.role = 'assistant'; },
+ });
+ mk('a change outside the content is never a trim', 0, {
+ mutate: (older, newer) => { newer.message.toolName = 'grep'; },
+ });
+ mk('changed content that is not the placeholder is never a trim', 0, {
+ mutate: (older, newer) => { newer.message.content = [{ type: 'text', text: 'something else entirely' }]; },
+ });
+ const noDeclaration = mk('a rewrite no generation declared is never a trim', 0, { declare: false });
+ check('...and it is reported rather than thrown away', noDeclaration.stats.unclassified, 1);
+ check('...which is a difference, not a failure', noDeclaration.stats.conflicts, 0);
+}
+
+/* ---------- 5. rows with no usable id are never keyed together ---------- */
+{
+ const noId = { message: toolResult('x'), turn_id: 't9' };
+ const emptyId = { message_id: '', turn_id: 't9', message: toolResult('x') };
+ const numericId = { message_id: 7, turn_id: 't9', message: toolResult('x') };
+ const id = buildMessageIdentity([occ(noId, 0, 'z1'), occ(emptyId, 0, 'z2'), occ(numericId, 0, 'z3')]);
+ check('no usable id means no identity at all', id.identities.size, 0);
+ check('...and all three pass through', id.stats.unkeyed, 3);
+ check('...into the view', selectIdentityView(id, null).rows.length, 3);
+}
+
+/* ---------- 6. turn and role decide which projection a message belongs to ---------- */
+{
+ const id = buildMessageIdentity([
+ occ(row('m5', 't1', user('do it')), 0, 'e1'),
+ occ(row('m5', 't2', user('do it')), 1, 'e2'),
+ ]);
+ check('a turn_id conflict is reported', id.conflicts.map((c) => c.reason), ['turn_id']);
+ const role = buildMessageIdentity([
+ occ(row('m6', 't1', user('do it')), 0, 'e3'),
+ occ(row('m6', 't1', toolResult('done')), 1, 'e4'),
+ ]);
+ check('a role conflict is reported too', role.conflicts.map((c) => c.reason), ['role']);
+}
+
+/* ---------- 7. the two views show different versions of the same message ---------- */
+{
+ const shared = buildMessageIdentity([
+ occ(row('k1', 't1', toolResult('exit 0')), 0, 'f1'),
+ occ(row('k1', 't1', toolResult('exit 0')), 1, 'f2'),
+ occ(row('k2', 't1', user('go')), 0, 'f3'),
+ occ(row('k2', 't1', user('go')), 1, 'f4'),
+ occ(row('k3', 't1', toolResult('boom')), 0, 'f5'),
+ occ(row('k3', 't1', toolResult(REMOVED), { history_artifact: TRIM_DECLARATION }), 1, 'f6'),
+ ]);
+ const all = selectIdentityView(shared, null);
+ check('the whole lineage shows one row per message', all.rows.length, 3);
+ check('...and it shows the original, never the placeholder',
+ all.rows.filter((r) => JSON.stringify(r.message.content).includes('Tool result removed')).length, 0);
+ check('...keeping the full result', all.rows.some((r) => JSON.stringify(r.message.content).includes('exit 0')), true);
+
+ const g0 = selectIdentityView(shared, 0);
+ const g1 = selectIdentityView(shared, 1);
+ check('generation 0 holds all three', g0.rows.length, 3);
+ check('generation 1 holds all three', g1.rows.length, 3);
+ check('...where generation 1 stores the placeholder',
+ g1.rows.filter((r) => JSON.stringify(r.message.content).includes('Tool result removed')).length, 1);
+ check('...and generation 0 does not',
+ g0.rows.filter((r) => JSON.stringify(r.message.content).includes('Tool result removed')).length, 0);
+ // 3 + 3 - 3 shared = 3: the generation counts are overlapping sets, and their sum is 6.
+ assert('generation counts overlap, so their sum is not the lineage count',
+ g0.rows.length + g1.rows.length !== all.rows.length);
+}
+
+/* ---------- 8. a message only in one generation is absent from the other ---------- */
+{
+ const id = buildMessageIdentity([
+ occ(row('o1', 't1', user('old')), 0, 'g1'),
+ occ(row('o2', 't1', user('new')), 1, 'g2'),
+ ]);
+ check('generation 0 sees only its own', selectIdentityView(id, 0).rows.length, 1);
+ check('generation 1 sees only its own', selectIdentityView(id, 1).rows.length, 1);
+ check('the lineage sees both', selectIdentityView(id, null).rows.length, 2);
+}
+
+/* ---------- 9. the turn opener is decided over the lineage, not over the slice ---------- */
+{
+ // A steer whose turn opened in generation 0. Projecting generation 1 alone must not turn it into
+ // the turn's first visible prompt, because the opener is known from the whole lineage.
+ const id = buildMessageIdentity([
+ occ(row('p1', 't7', user('start the work')), 0, 'h1'),
+ occ(row('p2', 't7', user('no, the other one')), 1, 'h2'),
+ ]);
+ check('the opener is the first prompt of the turn', id.openers.get('t7'), 'p1');
+
+ // The point of computing this over the lineage: the opener's own row may be outside the slice
+ // being projected, and the classification still has to name it.
+ const split = buildMessageIdentity([
+ occ(row('s1', 'tA', user('open it')), 0, 'h3'),
+ occ(row('s2', 'tA', user('steer it')), 1, 'h4'),
+ ]);
+ check('the opener is known from another generation', split.openers.get('tA'), 's1');
+ const laterOnly = selectIdentityView(split, 1);
+ assert('the opener is not a row in the generation-1 slice',
+ laterOnly.rows.length === 1 && laterOnly.rows[0].message_id === 's2');
+ assert('yet the opener map still names it, so this prompt is not the turn opener',
+ laterOnly.rows[0].message_id !== split.openers.get('tA'));
+
+ const injected = buildMessageIdentity([occ(row('r1', 't9', user('<system-reminder>noise</system-reminder>')), 0, 'h5')]);
+ assert('an injected block does not open a turn', injected.openers.has('t9') === false);
+}
+
+/* ---------- 10. the numbers the payload promises are identity numbers ---------- */
+{
+ // Four stored rows, two logical messages. `g1` is sealed in generation 0 and re-recorded in
+ // generation 1 — once with the same bytes, once with the placeholder the runtime wrote when it
+ // trimmed the old tool result. `g2` is a prompt that only ever lived in generation 1.
+ const gen = (id, generation, message, extra) => ({ row: row(id, 't1', message, extra), generation, locator: { digest: id + '@' + generation } });
+ const table = buildMessageIdentity([
+ gen('g1', 0, toolResult('exit 0')),
+ gen('g2', 1, user('go')),
+ gen('g1', 1, toolResult('exit 0')),
+ gen('g1', 1, toolResult(REMOVED), { history_artifact: TRIM_DECLARATION }),
+ ]);
+ check('a message stored three times is one message', table.stats.identities, 2);
+ check('...of which one copy is byte-identical', table.stats.identical, 1);
+ check('...and one is a trimmed second version', table.stats.trimmed, 1);
+
+ const counts = [...logicalCountByGeneration(table)].sort((a, b) => a[0] - b[0]);
+ check('each generation reports the messages it stores, once each', counts, [[0, 1], [1, 2]]);
+ assert('the per-generation counts overlap rather than summing to the conversation',
+ counts.reduce((sum, [, n]) => sum + n, 0) !== table.stats.identities);
+
+ const all = selectIdentityView(table, null);
+ const payload = buildTrajectoryPayload({
+ session: { id: 'mvs_i' },
+ rows: all.rows,
+ generations: [{ generation: 0, messageCount: 900, active: false }, { generation: 1, messageCount: 800, active: true }],
+ identity: table,
+ openerByTurn: all.openerByTurn,
+ });
+ check('messagesAll is the logical message count, not the catalog rows', payload.stats.messagesAll, 2);
+ check('the physical row count is reported beside it', payload.stats.messageRowsAll, 4);
+ check('...and what is on screen agrees in the whole-lineage view', payload.stats.messages, 2);
+ check('the generations carry their own stored counts',
+ payload.session.generations.map((g) => g.logicalMessageCount), [1, 2]);
+
+ const slice = selectIdentityView(table, 0);
+ const slicePayload = buildTrajectoryPayload({
+ session: { id: 'mvs_i' },
+ rows: slice.rows,
+ generations: [{ generation: 0, messageCount: 900, active: false }, { generation: 1, messageCount: 800, active: true }],
+ identity: table,
+ openerByTurn: slice.openerByTurn,
+ });
+ check('a slice shows only its own messages', slicePayload.stats.messages, 1);
+ check('...while the session-wide count does not follow it down', slicePayload.stats.messagesAll, 2);
+
+ // The opener a view reports has to be the very row that view projects. Matching on the
+ // occurrence wrapper instead of the row finds nothing, because the identity table wraps every
+ // occurrence in an object of its own — and then every turn looks like its opener is missing.
+ assert('the opener is found by row identity inside the view that holds it',
+ all.openerByTurn.get('t1').row === all.rows.find((r) => r.message_id === 'g2'));
+ assert('...and the direct helper agrees with the view it came from',
+ openerRowsForView(table, all.occurrences).get('t1').row === all.openerByTurn.get('t1').row);
+ check('...while a view without the opener reports it as absent, not as unknown',
+ slice.openerByTurn.get('t1').row, null);
+}
+
+/* ---------- report ---------- */
+console.log(`[1] message identity: ${pass} assertions, ${failures.length} failed`);
+if (failures.length) {
+ for (const f of failures) console.log(` FAIL ${f}`);
+ console.log('verify-message-identity');
+ process.exit(1);
+}
+console.log('verify-message-identity');
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-overview.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-overview.mjs
index 09f05ed..fccfb02 100644
--- a/plugins/avatasia/mmc-trajectory/tests/verify-overview.mjs
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-overview.mjs
@@ -24,6 +24,50 @@ const body = bootIndex === -1 ? script : script.slice(0, bootIndex);
const store = new Map();
const noop = () => {};
+/** The smallest node that `el()`, `clear()` and the overview renderer can run against. */
+function domNode(tag) {
+ const kids = [];
+ const attrs = {};
+ return {
+ tag,
+ childNodes: kids,
+ // 0 = "never laid out", which is what the page's own fallback keys off. Tests that care
+ // about the width set it; everything else inherits the un-measured path.
+ layoutWidth: 0,
+ getBoundingClientRect() {
+ return { left: 0, right: this.layoutWidth, width: this.layoutWidth, top: 0, bottom: 8, height: 8 };
+ },
+ querySelectorAll(sel) {
+ const attr = String(sel).replace(/^\[/, '').replace(/\]$/, '');
+ return kids.filter((k) => k.getAttribute && k.getAttribute(attr) !== null);
+ },
+ querySelector(sel) {
+ const all = this.querySelectorAll(sel);
+ return all.length ? all[0] : null;
+ },
+ get firstChild() { return kids.length ? kids[0] : null; },
+ appendChild(n) { kids.push(n); return n; },
+ removeChild(n) { const i = kids.indexOf(n); if (i >= 0) kids.splice(i, 1); return n; },
+ setAttribute(k, v) { attrs[k] = String(v); },
+ getAttribute(k) { return Object.prototype.hasOwnProperty.call(attrs, k) ? attrs[k] : null; },
+ removeAttribute(k) { delete attrs[k]; },
+ style: {
+ props: Object.create(null),
+ setProperty(k, v) { this.props[k] = v; },
+ // The page reads the lane back off the node under the pointer, so the stub has to answer
+ // the read as well as the write. A stub that only records writes would make `overviewLaneAt`
+ // return -1 and quietly turn every hover assertion into "nothing was hovered".
+ getPropertyValue(k) { return this.props[k] ?? ''; }
+ },
+ get classList() {
+ const self = this;
+ return { contains: (c) => String(self.className || '').split(/\s+/).includes(c) };
+ },
+ className: '',
+ textContent: ''
+ };
+}
+
/** Boot the delivered script in a sandbox, optionally with storage pre-seeded. */
function buildSandbox(seed) {
const local = seed || new Map();
@@ -40,7 +84,11 @@ function buildSandbox(seed) {
setInterval: () => 0,
clearInterval: noop
},
- document: { documentElement: { dataset: {} }, body: { classList: { add: noop, remove: noop } } }
+ document: {
+ documentElement: { dataset: {} },
+ body: { classList: { add: noop, remove: noop } },
+ createElement: (tag) => domNode(tag)
+ }
};
vm.createContext(sandbox);
vm.runInContext(body, sandbox);
@@ -155,6 +203,70 @@ const UNDATED = [ent(rec('u1', 'user', null, null), 1), ent(rec('u2', 'user', 50
check('a record with no timestamp is not given a position', sandbox.overviewModel(UNDATED).spans.map((s) => s.id), ['u2']);
check('no timed records yields no timeline at all', sandbox.overviewModel([ent(rec('u1', 'user', null, null), 1)]), null);
+/* --------------------------------------------------- the model is reused, not rebuilt */
+// Count the rebuilds rather than checking that the cache carries the two fields it needs. A cache
+// whose key is written but never read, or read but never compared, passes any assertion that only
+// looks for the shape — and a shell that stores the inputs and then rebuilds anyway would pass
+// one that only checks the values are equal, because a rebuilt model of the same rows IS the same
+// model. What has to be true is that the second call does no work.
+{
+ const realModel = sandbox.overviewModel;
+ let builds = 0;
+ sandbox.overviewModel = function (entries) { builds += 1; return realModel(entries); };
+
+ sandbox.state.actualDuration = false;
+ builds = 0;
+ const cold = sandbox.cachedOverviewModel(MIXED);
+ check('a cold cache builds the model', builds, 1);
+ const warm = sandbox.cachedOverviewModel(MIXED);
+ check('the same rows again do not rebuild it', builds, 1);
+ assert('and they hand back the very model that was built', cold === warm);
+
+ // A different array holding equal rows is still a rebuild. That is the price of the key: the
+ // payload path hands over a fresh array on every poll, so "deeply equal" would mean comparing
+ // every record to answer a question identity already answers.
+ builds = 0;
+ const equalRows = sandbox.cachedOverviewModel(MIXED.slice());
+ check('a different array of the same rows rebuilds', builds, 1);
+ check('and produces an equal model', JSON.stringify(equalRows), JSON.stringify(cold));
+
+ // Put MIXED back before the axis test. The step above leaves a *different* array in the cache,
+ // so a key that compared the rows but dropped the axis would still miss here and rebuild — and
+ // the rebuild the axis test observes would then prove nothing about the axis at all. That is
+ // not hypothetical: dropping `axis` from the key survived this file until this line was added.
+ sandbox.cachedOverviewModel(MIXED);
+
+ // The axis is the model's other input, read from state when it is built. Keying on the rows
+ // alone would keep a model from the other axis, and every record would be drawn at its
+ // position on the axis the reader just turned off.
+ builds = 0;
+ sandbox.state.actualDuration = true;
+ const onAxis = sandbox.cachedOverviewModel(MIXED);
+ check('turning the duration axis on rebuilds', builds, 1);
+ check('and the rebuilt model is on the compressed axis', onAxis.end - onAxis.start, 300);
+ check('with the idle gap removed, not shrunk', onAxis.spans[4].start, 1300);
+
+ builds = 0;
+ sandbox.cachedOverviewModel(MIXED);
+ check('the rebuilt axis is cached as well', builds, 0);
+
+ // An empty session produces no model at all, and reusing that answer must not depend on there
+ // being one: `overviewModel` returns null, and the caller branches on exactly that.
+ builds = 0;
+ const emptyRows = [ent(rec('z1', 'user', null, null), 1)];
+ check('a session with nothing dated yields no model', sandbox.cachedOverviewModel(emptyRows), null);
+ check('and building that answer counted once', builds, 1);
+ check('reusing it costs nothing', sandbox.cachedOverviewModel(emptyRows), null);
+ check('which is still no rebuild', builds, 1);
+
+ sandbox.overviewModel = realModel;
+ sandbox.state.actualDuration = false;
+ // Leave no cached model behind for the sections below, which build their own.
+ sandbox.overviewCache.flat = null;
+ sandbox.overviewCache.axis = null;
+ sandbox.overviewCache.model = null;
+}
+
/* ------------------------------------------------------------- layer filters */
/* 轮次 / 思考 / 调用 are presets over the same kind set the type chips edit — one filter,
* two ways of setting it, so nothing here is a second copy that could disagree. Cancelling
@@ -569,20 +681,390 @@ sandbox.state.kinds = ['user'];
check('strip: a record of a filtered-out kind is not drawn', sandbox.spanPassesFilter(fCall, false), false);
check('strip: a record of a kept kind is drawn', sandbox.spanPassesFilter(fUser, false), true);
/* Search is checked on its own, with every kind back on, so a pass can only come from
- * the text and a fail can only come from the text. */
+ * the hit set and a fail can only come from it.
+ *
+ * These three used to be about text. They are now about the server's answer, and the shape
+ * of the question changed with it: there is no needle to match against in the page any
+ * more, so "does this record contain the needle" is not a question the strip can answer at
+ * all. What it must do is follow the answer — and while there is no answer yet, draw
+ * everything, because a strip that empties itself before the search has come back is the
+ * exact symptom the count line's 正在搜索 exists to make legible.
+ *
+ * The records carry an `index` because that is what the answer names, and the set is built
+ * through the page's own `searchHitSet` rather than a literal `new Set`, so this goes
+ * through the same conversion the response goes through.
+ */
+const sHit = rec('s1', 'thinking', 3200, 0, { index: 41 });
+const sMiss = rec('s2', 'thinking', 3300, 0, { index: 42 });
sandbox.state.kinds = ALL_KINDS;
sandbox.state.query = 'needle-that-is-absent';
-check('strip: search rejects a record that does not contain the needle',
- sandbox.spanPassesFilter(fThink, true), false);
-sandbox.state.query = 'bash';
-check('strip: search keeps a record that does',
- sandbox.spanPassesFilter(fCall, true), true);
-check('strip: the same record is dropped when the needle is elsewhere',
- sandbox.spanPassesFilter(fThink, true), false);
+sandbox.state.searchHits = null;
+check('strip: a search with no answer yet draws every record, not none',
+ [sandbox.spanPassesFilter(sHit), sandbox.spanPassesFilter(sMiss)], [true, true]);
+sandbox.state.searchHits = sandbox.searchHitSet([{ index: 41 }]);
+check('strip: the strip keeps the record the server hit',
+ sandbox.spanPassesFilter(sHit), true);
+check('strip: the strip drops the record the server did not hit',
+ sandbox.spanPassesFilter(sMiss), false);
+sandbox.state.searchHits = sandbox.searchHitSet([]);
+check('strip: an answered search that hit nothing draws nothing',
+ sandbox.spanPassesFilter(sHit), false);
+sandbox.state.searchHits = null;
sandbox.state.query = '';
check('strip: with nothing filtered every record is drawn',
sandbox.spanPassesFilter(fCall, false), true);
+/* The turn handoff. `noReply` is the only rule that cannot be decided from a record alone —
+ * 无答复 is a property of the turn — so it is the only way to see whether the strip actually
+ * looks the owning turn up or just calls the list with nothing.
+ *
+ * Ticking a rule is a filter, not a highlight: it keeps what fires and drops the rest. So the
+ * three below are one contrast — same record shape, three turns — and the open/closed pair is
+ * the one that matters: only the turn lookup can tell those two apart.
+ *
+ * `turnById` is seeded here rather than by pushing a payload through, because the map is built
+ * on the poll path and this guard has no fetch to drive it with. That is a seam, not the
+ * thing under test: what is under test is that the strip consults the map at all.
+ */
+const openTurn = { id: 't-open', index: 1, closed: false };
+const shutTurn = { id: 't-shut', index: 2, closed: true };
+sandbox.turnById = new Map([[openTurn.id, openTurn], [shutTurn.id, shutTurn]]);
+sandbox.state.anomaly.rules = ['noReply'];
+check('strip: a record in an unclosed turn is drawn under 无答复, which only the turn lookup can decide',
+ sandbox.spanPassesFilter(rec('a1', 'user', 3400, 0, { turnId: openTurn.id })), true);
+check('strip: the same record in a closed turn is dropped under the same tick',
+ sandbox.spanPassesFilter(rec('a2', 'user', 3500, 0, { turnId: shutTurn.id })), false);
+check('strip: a record whose turn is unknown is dropped, because no turn rule fires on nothing',
+ sandbox.spanPassesFilter(rec('a3', 'user', 3600, 0, { turnId: 't-absent' })), false);
+sandbox.state.anomaly.rules = [];
+sandbox.turnById = new Map();
+
+/* ------------------------------------------------- the strip, drawn by the shipped code */
+/* Everything above asks `spanPassesFilter()` about one record. That is the predicate, not the
+ * strip. The defect this section exists for was a gate *in front of* the predicate inside
+ * `renderOverview()`, so a predicate-only guard could never see it: the predicate was always
+ * right, the caller had simply stopped asking. Hence the render runs here, and the invariant is
+ * the one a reader would state out loud — the strip is a picture of the list under it. Same
+ * records, same order, under every filter the page offers.
+ *
+ * A property, not a shape. The gate named two of five axes, and both cases below are one axis
+ * each — which is the whole reason the fix removed the gate instead of completing it: a list
+ * of axes is a list that drifts the next time an axis is added. Asserting "the strip equals
+ * the list" holds for an axis that does not exist yet; asserting "the gate mentions these two"
+ * would have passed while the strip was lying. */
+const STRIP_DOM_KEYS = ['overviewTrack', 'overviewTurns', 'overviewLanes', 'overviewSelection',
+ 'overviewHover', 'overviewEmpty', 'overviewTip', 'overviewClear'];
+for (const key of STRIP_DOM_KEYS) sandbox.dom[key] = domNode('div');
+
+/* Five records carrying one difference each: a kind that can be unticked, a record the 异常
+ * axis can name, a timestamp a range can cut, and two records nothing touches. Both bounds are
+ * carried because the two readers disagree about which field they use: spans are placed by
+ * `timestamp`, the range filter reads `relativeMs`. A fixture with only one of them drops
+ * records for a reason that has nothing to do with the filter under test. */
+const STRIP = [
+ ent(rec('g1', 'user', 1000, 0, { relativeMs: 1000 }), 1),
+ ent(rec('g2', 'toolCall', 1100, 400, { relativeMs: 1100, responseId: 'R1', toolCallId: 'tc1', toolName: 'bash' }), 1),
+ ent(rec('g3', 'toolResult', 1100, 400, { relativeMs: 1100, toolCallId: 'tc1' }), 1),
+ ent(rec('g4', 'toolResult', 1600, 200, { relativeMs: 1600, toolCallId: 'tc2', isError: true }), 2),
+ ent(rec('g5', 'narration', 2000, 100, { relativeMs: 2000, responseId: 'R2' }), 2)
+];
+
+/* What the strip puts on screen, as record ids in the order they were first drawn.
+ *
+ * The strip draws one node per PIXEL COLUMN, so one record can own several columns and appear
+ * several times. Deduplicating is not softening the assertion — the claim it rests on is
+ * "every visible record is represented", and the old form ("one node per record") was a claim
+ * no reader could check at forty-two records to the pixel. Both are stated in the guard: the
+ * set equality below, and the column count further down. */
+const stripIds = () => {
+ const seen = new Set();
+ const out = [];
+ for (const n of sandbox.dom.overviewLanes.childNodes) {
+ const id = n.getAttribute('data-record-id');
+ if (id !== null && !seen.has(id)) { seen.add(id); out.push(id); }
+ }
+ return out;
+};
+const listIds = () => sandbox.visibleEntries().map((e) => e.record.id);
+
+function resetStrip() {
+ sandbox.state.flat = STRIP.slice();
+ sandbox.state.kinds = ALL_KINDS;
+ sandbox.state.query = '';
+ sandbox.state.searchHits = null;
+ sandbox.state.overviewSelection = null;
+ sandbox.state.overviewViewport = null;
+ sandbox.state.anomaly.rules = [];
+ sandbox.state.rangeFrom = null;
+ sandbox.state.rangeTo = null;
+ sandbox.state.rangeCutoff = null;
+ sandbox.state.selectedId = null;
+}
+
+/* Render, then hold the strip to the list. Every case also states the rows outright, so a
+ * comparison cannot pass by both sides being empty — the failure mode a mirror assertion
+ * invites, and the one this section has the most reason to be suspicious of. */
+function stripIsTheList(name, expected) {
+ sandbox.renderOverview();
+ check(name + ': the rows under it', stripIds(), expected);
+ check(name + ': the strip draws exactly those rows', stripIds(), listIds());
+}
+
+resetStrip();
+stripIsTheList('strip under no filter', ['g1', 'g2', 'g3', 'g4', 'g5']);
+
+/* The kind axis, which the gate did list. Unchanged behaviour — and unchanged is the point:
+ * a fix that silently moved this one would be a fix that broke the case it looked right on. */
+resetStrip();
+sandbox.state.kinds = NO_TOOLS;
+stripIsTheList('strip under a kind filter', ['g1', 'g5']);
+
+/* The range axis. The gate did not list it, which is the defect: set a range and the strip
+ * went on drawing every span the list had already dropped. */
+resetStrip();
+sandbox.state.rangeTo = 1500;
+stripIsTheList('strip under a time range', ['g1', 'g2', 'g3']);
+
+/* The 异常 axis, which replaces the filter outright. Same shape of gap: tick one rule and the
+ * strip ignored it until a kind filter happened to be on as well. */
+resetStrip();
+sandbox.state.anomaly.rules = ['toolError'];
+stripIsTheList('strip under one 异常 rule', ['g4']);
+
+/* 异常 is exclusive by construction, so a kind filter left on beside it must change nothing —
+ * on either surface. If these two ever disagree the strip is not exclusive, whatever the
+ * button says. */
+resetStrip();
+sandbox.state.anomaly.rules = ['toolError'];
+sandbox.state.kinds = ['user'];
+stripIsTheList('strip under 异常 with a kind filter left on', ['g4']);
+
+/* The selected row is a deliberate exception, and an exception nobody asserts is one more
+ * thing the next reader cannot tell from a bug. Its scope is the viewport, not the filter:
+ * panning the strip must not delete the row the reader is on, while every other clipped span
+ * goes.
+ *
+ * The viewport is in the model's own position space — `overviewModel()` renumbers every span
+ * onto 0..n — so these bounds are fractions of the strip's width, not timestamps. Reading them
+ * as milliseconds does not fail loudly; the viewport simply reads as wider than the domain and
+ * nothing clips. */
+resetStrip();
+sandbox.state.overviewViewport = { start: 0, duration: 2.5 };
+sandbox.renderOverview();
+check('strip: panning the viewport draws only the spans still inside it',
+ stripIds(), ['g1', 'g2', 'g3']);
+sandbox.state.selectedId = 'g4';
+sandbox.renderOverview();
+check('strip: the selected row survives being panned off, since it is the row being read',
+ stripIds(), ['g1', 'g2', 'g3', 'g4']);
+
+/* And the brush itself is exempt, by argument rather than by omission: `spanPassesFilter`
+ * passes a null selection so the window you are dragging over does not erase its own
+ * contents. Asserted from the other side — with a brush in state, the list loses records and
+ * the strip does not. */
+resetStrip();
+sandbox.state.overviewSelection = { start: 1100, end: 1600 };
+sandbox.renderOverview();
+check('strip: a brush empties the list', listIds(), []);
+check('strip: and the strip keeps everything it is drawn over', stripIds(), ['g1', 'g2', 'g3', 'g4', 'g5']);
+
+resetStrip();
+sandbox.renderOverview();
+check('strip: with nothing filtered again the strip is whole',
+ stripIds(), ['g1', 'g2', 'g3', 'g4', 'g5']);
+
+/* ------------------------------------------------------------ one node per pixel column */
+/* What this pins: at 36,525 records the strip built 36,525 `.ov-span` nodes and rebuilt them on
+ * every poll that carried a body — 3,937 ms measured in the browser, against a 2.5s poll. The
+ * fix is aggregation, and an aggregation nobody can see from outside is indistinguishable from
+ * not having done it.
+ *
+ * The promise this layer makes is written out here because aggregation changes its SHAPE, not its
+ * truth. Two cases, and they are not the same claim:
+ *
+ * strip wider than the record count — every record is bigger than a pixel, gets a column of
+ * its own, and the old "the strip is the list" holds exactly. This is the case a reader can
+ * check, and it is the one a zoomed-in view is always in.
+ * strip narrower — records share a pixel and are indistinguishable there. What still holds is
+ * that every record drawn is one the list kept, and that the strip covers every column the
+ * records reach. "Every record appears" cannot be checked at forty-two records to the pixel,
+ * and before aggregation it was not true either: the nodes were stacked, and what a reader
+ * saw in each pixel was whichever record was painted last.
+ *
+ * `layoutWidth` is the one thing this fixture controls. 0 means "never laid out", which is the
+ * page's own fallback and gets its own assertion below. */
+
+const paintedColumns = () => [...new Set(sandbox.dom.overviewLanes.childNodes.map((n) => n.style.props['--ov-left']))].sort();
+const paintedIds = () => [...new Set(sandbox.dom.overviewLanes.childNodes.map((n) => n.getAttribute('data-record-id')))];
+
+resetStrip();
+sandbox.dom.overviewLanes.layoutWidth = 20;
+sandbox.renderOverview();
+check('a strip wider than the record count gives every record its own column',
+ stripIds(), ['g1', 'g2', 'g3', 'g4', 'g5']);
+check('and the column count follows the strip, not the records',
+ sandbox.overviewCache.columns, 20);
+check('so the strip and the list still say the same thing',
+ stripIds(), listIds());
+
+resetStrip();
+sandbox.dom.overviewLanes.layoutWidth = 3;
+sandbox.renderOverview();
+check('a strip narrower than the record count builds fewer nodes than there are records',
+ sandbox.dom.overviewLanes.childNodes.length < 5, true);
+check('the column count is the strip width', sandbox.overviewCache.columns, 3);
+check('nothing on the strip is a record the list dropped',
+ paintedIds().every((id) => listIds().includes(id)), true);
+check('and the strip covers every column the records reach',
+ paintedColumns(), ['0.0000%', '33.3333%', '66.6667%']);
+
+resetStrip();
+sandbox.dom.overviewLanes.layoutWidth = 0;
+sandbox.renderOverview();
+check('a strip that has never been laid out falls back to one column per record',
+ sandbox.overviewCache.columns, 5);
+check('not to a single column, which would be a solid block',
+ stripIds(), ['g1', 'g2', 'g3', 'g4', 'g5']);
+
+/* The selected and hovered records are the two things a column cannot say, so each gets its own
+ * node. Without them the strip would still be right and the reader would still be lost. */
+resetStrip();
+sandbox.dom.overviewLanes.layoutWidth = 20;
+sandbox.state.selectedId = 'g3';
+sandbox.renderOverview();
+check('the selected record has a node marked as the selected one',
+ sandbox.dom.overviewLanes.childNodes.filter(
+ (n) => n.getAttribute('data-record-id') === 'g3' && n.getAttribute('data-current') === 'true').length >= 1,
+ true);
+check('and it is marked as a record rather than as a column',
+ sandbox.dom.overviewLanes.childNodes.some((n) => n.getAttribute('data-current-marker') === 'true'), true);
+
+/* g3 is the record a 3px strip leaves without a column of its own — exactly the case the hover
+ * marker exists for, and exactly the case the old `document.elementFromPoint` hit-test could not
+ * reach. An earlier version of this guard called `markOverviewHover('g3')` directly, which passed:
+ * the id was injected, so nothing had to discover it. The whole defect lived on the other side of
+ * that call. So this drives the real pointer path with the DOM answering as the browser would —
+ * returning whichever column node is topmost — and asks for a record that owns none. */
+resetStrip();
+sandbox.overviewDrag = null; // a brush left armed by an earlier case would take the
+ // drag branch and return before the hover is ever asked for
+// The track and the lanes are two different elements on the page: the track is the full strip the
+// pointer's x is measured against, the lanes are the domain window inset inside it. Giving the
+// stub one width for both makes `overviewFractionAt` answer 0 for every x, and every hover
+// assertion then quietly measures "the record nearest the start of the session".
+sandbox.dom.overviewTrack.layoutWidth = 1000;
+sandbox.dom.overviewLanes.layoutWidth = 3;
+sandbox.renderOverview();
+const crowdedModel = sandbox.overviewCache.model;
+const crowded = crowdedModel.spans.find((s) => s.id === 'g3');
+check('the crowded record is the one with no column of its own',
+ paintedIds().includes('g3'), false);
+
+// Whatever the browser hands back has to be a real, wrong answer for the test to mean anything.
+const domAnswer = sandbox.dom.overviewLanes.childNodes.find(
+ (n) => n.getAttribute('data-record-id') !== null && Number(n.style.props['--ov-lane']) === crowded.lane);
+check('the DOM can only answer with a different record in that lane',
+ domAnswer.getAttribute('data-record-id') !== 'g3', true);
+sandbox.document.elementFromPoint = () => domAnswer;
+
+const crowdedView = sandbox.overviewCache.view;
+const crowdedX = (((crowded.start + crowded.end) / 2 - crowdedView.start) / crowdedView.duration) * 1000;
+
+/* What the hit test RETURNS, asked of the function rather than of the handler that uses it.
+ *
+ * `client-check.mjs` can only read this one as source text, and enumerating the syntaxes that
+ * produce a key does not end: `hit.id`, `recordKey(hit.record)` and `hit.record.id` are three
+ * spellings of one defect, and a fourth is always available. Running it is what makes the check
+ * total — every one of them answers a string, and a span is not a string.
+ *
+ * Placed before the handler cases on purpose: a key-returning hit test also breaks those, so if
+ * this ran second the mutation would be attributed to whichever of them failed first and would
+ * never be given the name it is about. */
+const directHit = sandbox.spanAt(crowdedX, 8);
+/* Both reads go through the same guard. A hit test that answers null, or answers a key, must fail
+ * HERE BY NAME — `directHit.record.id` on a null throws, and a throw names no rule at all, which
+ * this suite treats as a weaker outcome than a red assertion and reports as UNNAMED. */
+const directIsSpan = directHit !== null && typeof directHit === 'object' && 'record' in directHit;
+check('the hit test hands back a span, not a key, whichever way it spells the lookup',
+ directIsSpan && 'id' in directHit, true);
+/* Shape is not enough, and a second acceptance review showed why: `{ id: hit.id, record: hit.record }`
+ * carries every field the shape check looks at and names the right record, so it passes — while
+ * being a different object from the one the hit test found. Click and hover act on this value, so
+ * what has to hold is that it IS the model's span, not that it resembles one. `crowded` is the very
+ * object out of `overviewCache.model.spans`, which is what `nearestSpanAt` returns by reference. */
+check('and it is that span itself, not something shaped like it',
+ directIsSpan && directHit === crowded, true);
+check('and the record it carries is the one under the pointer',
+ directIsSpan ? directHit.record.id : null, 'g3');
+
+sandbox.onOverviewPointerMove({ clientX: crowdedX, clientY: 8, pointerId: 3 });
+check('the hovered record comes from the model, not from the node under the pointer',
+ sandbox.state.overviewHoverId, 'g3');
+check('and it is drawn, since it has no column of its own',
+ sandbox.dom.overviewLanes.childNodes.some((n) => n.getAttribute('data-hovered-marker') === 'true'), true);
+check('and the mark is on that record',
+ sandbox.dom.overviewLanes.childNodes.filter((n) => n.getAttribute('data-hovered-marker') === 'true')
+ .map((n) => n.getAttribute('data-record-id')), ['g3']);
+
+// A point that is over no span at all must still answer with nothing, rather than snapping to
+// whatever record happens to be nearest in time.
+sandbox.document.elementFromPoint = () => sandbox.dom.overviewTrack;
+sandbox.onOverviewPointerMove({ clientX: crowdedX, clientY: 8, pointerId: 3 });
+check('a point over no span hovers nothing', sandbox.state.overviewHoverId, null);
+check('and leaves no marker behind',
+ sandbox.dom.overviewLanes.childNodes.some((n) => n.getAttribute('data-hovered-marker') === 'true'), false);
+check('and the columns are exactly as they were',
+ paintedColumns(), ['0.0000%', '33.3333%', '66.6667%']);
+
+/* ----------------------------------------------------------------- distance arithmetic
+ * The hit test resolves in TIME so that the answer is the record nearest the pointer rather than
+ * whichever one was painted last. Nothing above puts the pointer in a gap between two spans, and
+ * that is exactly where the two candidate distances are computed and compared — so a comparison
+ * written the other way round leaves every one of those assertions green.
+ *
+ * Subtracting the smaller time from the larger one leaves both distances positive and the `<`
+ * keeps the closer. Subtracting the other way leaves both NEGATIVE, which still admits the first
+ * candidate against Infinity and then keeps every LATER candidate that is further away: the strip
+ * answers with the record farthest from the pointer. Three spans in one lane make that visible,
+ * because nearest and farthest are different records.
+ *
+ * Expected values are derived by hand from the coordinates below, not read back out of the
+ * function, so this block can fail rather than merely agree with itself. */
+const D = (id, lane, start, end) => ({ id, lane, start, end, record: { id } });
+const restoreModel = sandbox.overviewCache.model;
+sandbox.overviewCache.model = {
+ start: 0,
+ end: 900,
+ // near-x sits in the next row and straddles the gap the lane-1 probes use.
+ spans: [D('near-l', 1, 0, 100), D('near-m', 1, 220, 300), D('near-r', 1, 400, 900),
+ D('near-d', 1, 600, 700), D('near-x', 2, 104, 116)],
+};
+const at = (time, lane) => { const s = sandbox.nearestSpanAt(time, lane); return s ? s.record.id : null; };
+
+// 110 is in the gap after near-l: 10ms from its end, 110ms from near-m's start, 290 from near-r's.
+check('a pointer in a gap resolves to the nearer of the two spans around it, not the further one',
+ at(110, 1), 'near-l');
+// 390 is in the gap before near-r: 90ms from near-m's end, 10ms from near-r's start, 290 from near-l's.
+check('and the same when the nearer span is on the other side of the pointer', at(390, 1), 'near-r');
+/* 370 is the case that pins BOTH distance expressions on their own, so neither one can be the
+ * only thing carrying the rule: 30ms from near-r's start, 230 from near-d's start, 70 from near-m's
+ * end, 270 from near-l's. Flipping either subtraction turns its own candidates negative, and the
+ * further one of that side then wins — the `span.start > time` side has two candidates here, so it
+ * is distinguishable from the case above where it has only one. */
+check('with two spans on the same side, it is still the nearer one that wins', at(370, 1), 'near-r');
+// 150 with no row: near-x is 34ms away, near-l 50, near-m 70, near-r 250 — so a second row does
+// compete, which is the click fallback's case: it has no row to offer.
+check('a pointer with no row given is answered from every row', at(150), 'near-x');
+// Past the whole session every span is behind the pointer, so the nearest is the one that ENDS
+// last — near-r, at 100ms — not the one that ends first (900ms) and not the last in the array
+// (near-d ends at 700, which is 300ms away).
+check('a pointer past the whole session resolves to the last span, not the first', at(1000, 1), 'near-r');
+check('and one before it, to the first, not the last', at(-50, 1), 'near-l');
+// near-x contains 110 exactly, so with no row it wins outright; with lane 1 it is not consulted
+// at all, and the row the pointer is actually over answers instead.
+check('the row is a filter and not a preference: a span in another row is not consulted', at(110, 1), 'near-l');
+sandbox.overviewCache.model = restoreModel;
+
/* ----------------------------------------------------------------------- report */
console.log('overview + toolbar controls: ' + pass + ' passed, ' + failures.length + ' failed');
if (failures.length) {
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-parsed-rows.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-parsed-rows.mjs
index 2c8cabb..06cbd63 100644
--- a/plugins/avatasia/mmc-trajectory/tests/verify-parsed-rows.mjs
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-parsed-rows.mjs
@@ -13,6 +13,12 @@
* through the cache — build the payload both ways, and require the serialized bodies to be
* identical. Not "looks the same", identical.
*
+ * What the cache now covers is narrower than it was: only sealed generations are retained, because
+ * for the file being appended to the key cannot hit by construction. That narrower job is pinned in
+ * tests/verify-raw-locators.mjs, along with what replaced the rows for `/raw`. What is left here is
+ * the cache's own correctness — that a hit is identical to a cold read, that its key names
+ * everything it must name, and that it cannot serve one session's rows to another.
+ *
* The key's three components are each tested by the failure they exist to prevent:
* a path, because every session has a `messages.jsonl` and a basename key lets two of them
* collide; a size, because the active file grows; a limit, because readHead truncates at it.
@@ -75,7 +81,11 @@ const jsonl = [
// 6 parseable rows, 2 skipped (one unparseable, one not an object). Counted by hand.
const EXPECTED_SKIPPED = 2;
-const other = { session: { id: 'sess-b', createdAtMs: 1791617886000 }, sizeBytes: 0, truncated: false };
+// A stand-in session, so a key built for one conversation cannot be served another's. It carries a
+// session and nothing else: `sizeBytes` and `truncated` are spread BELOW this, so any value added
+// here would silently replace what the loop just computed — and the body-equality comparison would
+// then be asserting a constant instead of what was actually read.
+const other = { session: { id: 'sess-b', createdAtMs: 1791617886000 } };
/** Build the body the way the route does, from a set of per-file results. */
async function buildBody(files, filter) {
@@ -318,9 +328,11 @@ assert('the cache is created inside start(), not at module level',
&& !/\nconst parsedRows = createParsedRowsCache\(/.test(SERVER.slice(0, startAt)));
assert('the route reaches the file through loadParsedRows()',
- startBody.includes('await loadParsedRows(parsedRows, filePath, limit)'));
+ startBody.includes('await loadParsedRows(parsedRows, filePath, limit, { cacheable: link.fileName !== activeFileName })'));
assert('the route no longer parses messages inline',
!startBody.includes('parseMessagesJsonl(head.text)'));
+assert('the bytes readHead returns are what gets parsed, not a decoded string',
+ SERVER.includes('parseMessagesJsonl(head.buffer)'));
assert('the key is built from a stat of the file, not from the catalog',
/const current = await stat\(filePath\);/.test(SERVER)
&& !/parsedRowsKey\(filePath, entry\.sizeBytes/.test(SERVER)
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-poll-decoupling.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-poll-decoupling.mjs
new file mode 100644
index 0000000..3e682b9
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-poll-decoupling.mjs
@@ -0,0 +1,169 @@
+/**
+ * One `POLL_INTERVAL` drove both `/api/sessions` and `/api/trajectory`, and it was wrong for both.
+ *
+ * The list is a cached walk, a cached title read and a descriptor cache — and now a validator, so
+ * an unchanged list usually costs a 304. It is cheap, and it is also the only thing that keeps the
+ * session picker's 「刚刚」 honest, because that label is rendered against a render-time clock.
+ *
+ * The trajectory is a different cost class entirely: on a session that is growing it reparses the
+ * whole lineage, rebuilds a payload that measured 18,924 rows, and opens the runtime database
+ * again to work out which conversation is live. Giving it the same 2.5 s tick meant paying that on
+ * a clock rather than on evidence.
+ *
+ * So there are two ticks, and the load-bearing part is not the numbers — it is that the cheap
+ * fetch wakes the expensive one. A 200 from the list means something in the visible slice moved;
+ * a 304 means nothing on screen can be stale. That is what makes a slower trajectory tick a floor
+ * on latency rather than a delay applied to every change.
+ *
+ * The invariants, and why each is here:
+ *
+ * 1. Two cadences, and the expensive one is the slower one. Asserted as a relationship: pinning
+ * `=== 8000` would fail for a tuning change that improves things and pass for a swap.
+ * 2. The single `POLL_INTERVAL` is gone. It cannot come back as a substring of either new name —
+ * `SESSION_POLL_INTERVAL` contains `POLL_INTERVAL` — so the check strips both before looking.
+ * 3. Both timers are registered and both are cleared. One registered and forgotten is a page
+ * that keeps polling after the reader navigates away, with nothing left to stop it.
+ * 4. The build guard belongs to the trajectory alone. It exists because a table still being
+ * built must not be replaced mid-build — a ledger concern. Holding the list back with it was
+ * the two fetches sharing a tick, not anything the build needs: the list renders an
+ * `<option>` list and never touches the ledger.
+ * 5. A 304 does not wake the trajectory, and a 200 does. The first half keeps the fast tick
+ * free; the second half is the whole reason the slow tick is tolerable.
+ * 6. A hidden tab still stops both.
+ * 7. The deferred tick is still remembered and still flushes both, so a build that overran the
+ * trajectory tick does not leave the reader looking at a session that finished before it.
+ *
+ * `tests/mutate-poll-decoupling.py` breaks each of these in the shipped client and requires this
+ * guard to report it by name.
+ */
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+
+const HERE = fileURLToPath(new URL('.', import.meta.url));
+const SERVER = fileURLToPath(new URL('../miniapp/node/server.mjs', import.meta.url));
+const HTML = fileURLToPath(new URL('../miniapp/client/index.html', import.meta.url));
+const html = readFileSync(HTML, 'utf8');
+const server = readFileSync(SERVER, 'utf8');
+
+let pass = 0;
+const failures = [];
+function assert(name, cond) {
+ if (cond) pass += 1;
+ else failures.push(name);
+}
+
+/* ---------- 1: two cadences, and the expensive one is the slower one ---------- */
+
+const sessionCadence = /var SESSION_POLL_INTERVAL\s*=\s*(\d+)/.exec(html);
+const trajectoryCadence = /var TRAJECTORY_POLL_INTERVAL\s*=\s*(\d+)/.exec(html);
+
+assert('the list\'s cadence is still declared', sessionCadence !== null);
+assert('the trajectory\'s cadence is still declared', trajectoryCadence !== null);
+
+if (sessionCadence && trajectoryCadence) {
+ assert('the trajectory is polled no faster than the list (' + trajectoryCadence[1] + ' vs ' + sessionCadence[1]
+ + ') — the expensive fetch is the one that has to slow down',
+ Number(trajectoryCadence[1]) > Number(sessionCadence[1]));
+}
+
+// The list cache is answerable at the list's cadence. If the two ticks ever swap, this is the
+// assertion that notices, and it lives in verify-list-cache.mjs because it owns the constants.
+assert('the list cache budget is still tied to the list\'s cadence, not to a shared one',
+ /const LIST_CACHE_TTL_MS\s*=\s*\d+/.test(server)
+ && /is at or above the list poll interval/.test(
+ readFileSync(fileURLToPath(new URL('./verify-list-cache.mjs', import.meta.url)), 'utf8')));
+
+/* ---------- 2: the shared interval is gone ---------- */
+
+// Stripping both new names first is the whole point: `SESSION_POLL_INTERVAL` contains
+// `POLL_INTERVAL`, so a check written against the old bare name matches either constant.
+const withoutNewNames = html.replace(/SESSION_POLL_INTERVAL|TRAJECTORY_POLL_INTERVAL/g, '');
+assert('the single shared POLL_INTERVAL no longer exists', !/\bPOLL_INTERVAL\b/.test(withoutNewNames));
+
+/* ---------- 3: both timers are registered and both are cleared ---------- */
+
+const start = /function startPolling\(\) \{[\s\S]*?\n \}/.exec(html);
+const stop = /function stopPolling\(\) \{[\s\S]*?\n \}/.exec(html);
+assert('startPolling is still in the shipped client', start !== null);
+assert('stopPolling is still in the shipped client', stop !== null);
+
+if (start && stop) {
+ const started = start[0];
+ const stopped = stop[0];
+ assert('the list gets its own tick', /sessionPollTimer = window\.setInterval/.test(started));
+ assert('the trajectory gets its own tick', /trajectoryPollTimer = window\.setInterval/.test(started));
+
+ assert('stopPolling clears the list tick',
+ /clearInterval\(sessionPollTimer\)[\s\S]*?sessionPollTimer = null/.test(stopped));
+ assert('stopPolling clears the trajectory tick',
+ /clearInterval\(trajectoryPollTimer\)[\s\S]*?trajectoryPollTimer = null/.test(stopped));
+
+ /* ---------- 4: the build guard is the trajectory's alone ---------- */
+
+ const listTick = /sessionPollTimer = window\.setInterval\(function \(\) \{[\s\S]*?\}, SESSION_POLL_INTERVAL\);/.exec(started);
+ const trajectoryTick = /trajectoryPollTimer = window\.setInterval\(function \(\) \{[\s\S]*?\}, TRAJECTORY_POLL_INTERVAL\);/.exec(started);
+ assert('the list tick is one callback', listTick !== null);
+ assert('the trajectory tick is one callback', trajectoryTick !== null);
+
+ if (listTick && trajectoryTick) {
+ assert('the list tick is not held back by a ledger build',
+ !/ledgerBuilding\(\)/.test(listTick[0]));
+ assert('the trajectory tick is still held back by a ledger build',
+ /if \(ledgerBuilding\(\)\)/.test(trajectoryTick[0]));
+ // Deferring has to stay attached to the tick that can be deferred, or the flag is set by a
+ // tick that does nothing and cleared by one that already ran.
+ assert('the deferred tick belongs to the trajectory tick',
+ /pollDeferred = true/.test(trajectoryTick[0]) && !/pollDeferred/.test(listTick[0]));
+ assert('the trajectory tick fetches the trajectory', /fetchTrajectory\(false\)/.test(trajectoryTick[0]));
+ assert('the list tick does not also fetch the trajectory on its own tick',
+ !/^\s*fetchTrajectory\(false\);\s*$/m.test(listTick[0]));
+
+ /* ---------- 5: a 304 does not wake the trajectory, a 200 does ---------- */
+
+ assert('the list tick wakes the trajectory when the list changed',
+ /fetchSessions\(\)\.then\(function \(changed\) \{[\s\S]*?if \(changed\) fetchTrajectory\(false\);/.test(listTick[0]));
+ // The counter-case, and the cheaper half: a 304 resolves to `false`, so the wake is gated on
+ // it and an unchanged list wakes nothing. An ungated call would be correct — the trajectory
+ // would answer 304 as well — and would reopen the runtime database and walk the lineage on
+ // every poll forever, which is the bill this split was made to stop.
+ assert('the trajectory is only woken when the list reports a change',
+ !/^[ \t]*fetchTrajectory\(false\);[ \t]*$/m.test(listTick[0]));
+
+ /* ---------- 6: a hidden tab stops both ---------- */
+
+ assert('a hidden tab skips the list tick', /if \(document\.hidden\) return;/.test(listTick[0]));
+ assert('a hidden tab skips the trajectory tick', /if \(document\.hidden\) return;/.test(trajectoryTick[0]));
+ }
+}
+
+/* ---------- 7: the deferred tick still flushes both ---------- */
+
+const flush = /function flushDeferredPoll\(\) \{[\s\S]*?\n \}/.exec(html);
+assert('flushDeferredPoll is still in the shipped client', flush !== null);
+if (flush) {
+ assert('a deferred tick still refreshes the list', /fetchSessions\(\)/.test(flush[0]));
+ assert('a deferred tick still refreshes the trajectory', /fetchTrajectory\(false\)/.test(flush[0]));
+}
+
+/* ---------- 8: why the list keeps the fast tick, in the code that depends on it ---------- */
+
+// The 口径 half. The picker's recency is rendered from a render-time clock, so a slower list tick
+// does not make the label wrong — it makes it sit still and then jump. This is the reader-visible
+// reason the two cadences are ordered the way they are, and it is asserted here rather than only
+// argued in a comment, because a comment does not fail.
+const picker = /function renderSessionSelect\(\) \{[\s\S]*?\n \}/.exec(html);
+assert('renderSessionSelect is still in the shipped client', picker !== null);
+if (picker) {
+ assert('the picker recomputes recency from a render-time clock',
+ /var now = Date\.now\(\);/.test(picker[0])
+ && /formatAgo\(session \? session\.lastActiveAt : null, now\)/.test(html));
+ assert('the picker is re-rendered whenever a list body arrives',
+ /state\.sessions = [\s\S]{0,200}?renderSessionSelect\(\);/.test(html));
+}
+
+console.log('[poll-decoupling] ' + pass + ' passed, ' + failures.length + ' failed');
+if (failures.length) {
+ console.log('FAILURES:\n - ' + failures.join('\n - '));
+ process.exit(1);
+}
+console.log('[poll-decoupling] OK');
\ No newline at end of file
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-pr15-fixes.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-pr15-fixes.mjs
index b9d23e8..10bd252 100644
--- a/plugins/avatasia/mmc-trajectory/tests/verify-pr15-fixes.mjs
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-pr15-fixes.mjs
@@ -53,7 +53,10 @@ const baseInput = {
};
const withFork = buildTrajectoryPayload(baseInput);
-check('messagesAll leaves the forked generation out', withFork.stats.messagesAll, 676 + 548 + 186);
+// The count is built from the identity table over the lineage, so a catalog entry has no way into
+// it at all — which is a stronger statement than the sum-and-filter this replaced, and the
+// counter-example below is what keeps it honest.
+check('messagesAll counts the conversation, not the catalog', withFork.stats.messagesAll, 2);
check(
'the picker never offers the forked generation',
withFork.session.generations.map((g) => g.generation),
@@ -61,11 +64,11 @@ check(
);
check('the fork is still disclosed as an orphan', withFork.session.orphans.map((o) => o.generation), [7]);
-// Counter-example: the identical catalog with nothing marked as an orphan. This is what
-// the page got before the fix, and it is what proves the filter is what moved the number
-// rather than the sum itself being wrong.
+// Counter-example: the identical catalog with nothing marked as an orphan. Before the fix the sum
+// walked the catalog and this extra entry moved the total; the count no longer reads the catalog,
+// so the entry cannot reach it even unmarked. Asserting the number is UNCHANGED is the whole claim.
const noOrphans = buildTrajectoryPayload({ ...baseInput, orphans: [] });
-check('counter-example: an unmarked extra generation is still counted', noOrphans.stats.messagesAll, 676 + 548 + 186 + 999);
+check('counter-example: an unmarked extra generation cannot move the count', noOrphans.stats.messagesAll, 2);
check(
'counter-example: an unmarked extra generation is still listed',
noOrphans.session.generations.map((g) => g.generation),
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-raw-lazy.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-raw-lazy.mjs
index 0b3f383..39e4cba 100644
--- a/plugins/avatasia/mmc-trajectory/tests/verify-raw-lazy.mjs
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-raw-lazy.mjs
@@ -146,13 +146,30 @@ const handleRawAt = SERVER.indexOf('const handleRaw = async');
assert('handleRaw exists', handleRawAt > 0);
const handleRawBody = SERVER.slice(handleRawAt, SERVER.indexOf('};', handleRawAt));
assert('it calls buildRawPayload, i.e. it builds rather than looks up a stored message',
- handleRawBody.includes('buildRawPayload(row.message, redact)'));
-assert('it follows the locator back to a row', handleRawBody.includes('cached.rows[rowIndex]'));
+ handleRawBody.includes('buildRawPayload(found.row.message, redact)'));
+// The read and its digest check were written here until `/api/trajectory/record` needed the same
+// two steps. Two copies is two answers to 「这还是那条记录对应的字节吗」, and the guard could not
+// even tell them apart — a mutation against one of them left the other satisfying the assertion.
+assert('the read and its digest check live in one place both handlers call',
+ /readRecordRow\s*=\s*async/.test(SERVER)
+ && SERVER.includes('readRange(locator.filePath, locator.start, locator.end)')
+ && SERVER.includes('lineDigest(bytes) !== locator.digest')
+ && handleRawBody.includes('readRecordRow(locator)'));
+assert('and neither handler re-reads a line for itself',
+ !handleRawBody.includes('readRange(') && !handleRawBody.includes('lineDigest('));
assert('it reports the verdict alongside the message', /omitted: built\.omitted/.test(handleRawBody));
assert('a missing row is still a 404, not an empty message', handleRawBody.includes("'record_not_found'"));
-assert('the cache entry keeps the rows the locators point into',
- SERVER.includes('raws: Map<number, number>, rows: Array<Record<string, any>>'));
-assert('the cache entry is written with the rows', SERVER.includes('{ at: Date.now(), etag, body, raws, rows }'));
+// The entry shape lives in createTrajectoryCache now, so this asserts the thing the assertions
+// above jointly depend on: the route stores the record->locator map into the entry, and /raw reads
+// `cached.raws` back out of it. It used to store `rows` and read `cached.rows`, which is the thing
+// that was costing 233 MB; anchoring on the JSDoc type comment instead would have made this a
+// check on where a type was written rather than on what the route does.
+// `rowPos` sits next to `raws` in the entry and for the same reason: both say where a record's
+// content lives once the parsed rows are gone, and the position is what lets `/api/trajectory/record`
+// answer for one record of a line that expanded into several.
+assert('the cache entry keeps the locators /raw follows, keyed by record',
+ SERVER.includes('raws, rowPos: rowPosByRecord, decoded: new Map() })')
+ && handleRawBody.includes('cached.raws.get(wanted)'));
/* =====================================================================
* 4 — each of the five readers, by name
@@ -164,8 +181,8 @@ assert('the cache entry is written with the rows', SERVER.includes('{ at: Date.n
assert('1 handoff: the line reads the argument, not the record',
CLIENT.includes("if (rawOmitted) lines.push('- 提示：原文过大已被省略。');"));
assert('1 handoff: buildHandoffMarkdown takes the verdict',
- /function buildHandoffMarkdown\(session, turn, record, rawText, rawTruncated, rawOmitted\)/.test(CLIENT));
-assert('1 handoff: the caller passes it', CLIENT.includes('raw.truncated,\n omitted\n );'));
+ /function buildHandoffMarkdown\(session, turn, record, rawText, rawTruncated, rawOmitted, errorText\)/.test(CLIENT));
+assert('1 handoff: the caller passes it', CLIENT.includes('raw.truncated,\n omitted,\n detail && detail.result ? detail.result : null\n );'));
assert('2 rawSourceFor: no longer short-circuits on the record',
/function rawSourceFor\(record\) \{\s*return fetchRaw\(record\);/.test(CLIENT));
@@ -176,7 +193,12 @@ assert('3 raw tab: draws the omitted note from the answer',
assert('3 raw tab: and the note still says the same thing',
CLIENT.includes('原文过大，已省略。可以从参数与结果页查看已保留的部分。'));
-assert('4 raw tab: an omitted message renders the dash', CLIENT.includes('pre.textContent = DASH;\n return;'));
+// Anchored on the insertBefore above it. `pre.textContent = DASH;` + `return;` is written twice in
+// the page now — the omitted-message branch and the empty-detail branch — so a pattern loose
+// enough to match either is satisfied by a change to just one of them, which is what a mutation
+// that targets the wrong copy looks like from here.
+assert('4 raw tab: an omitted message renders the dash',
+ CLIENT.includes(' pre\n );\n pre.textContent = DASH;\n return;'));
assert('5 copySelected: reads the new shape',
CLIENT.includes('var noRaw = fetched.omitted === true || fetched.raw === null || fetched.raw === undefined;'));
assert('handoff: reads the new shape', CLIENT.includes('var omitted = fetched.omitted === true;'));
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-raw-locators.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-raw-locators.mjs
new file mode 100644
index 0000000..0faf2ca
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-raw-locators.mjs
@@ -0,0 +1,295 @@
+/**
+ * `/raw` must still answer after the parsed rows it used to point into are gone.
+ *
+ * The rows are released on purpose. Retaining a session's parsed object graph was the largest
+ * single cost in this process: 378 MB of heap held while one 68 MB session was open, against
+ * 145 MB once the active generation's rows are not kept. What is kept instead is, per record, the
+ * file it came from, the byte range of its line, and a digest of that line — about 40 bytes a
+ * record instead of the megabytes the rows cost.
+ *
+ * So this guard is about the seam that replacement creates, in three parts:
+ *
+ * 1. The positions are real. A span must be a byte range into the file, read from offset 0, so
+ * that `readRange(file, start, end)` gives back exactly the line that was parsed. Getting
+ * this wrong is silent: JSON.parse of the wrong bytes either throws or, worse, succeeds on a
+ * neighbouring line.
+ * 2. The digest means something. Same length, same offset, different content must be caught —
+ * that is the whole case the digest exists for, because the trajectory entry is keyed on size
+ * and mtime and so cannot see a rewrite that preserved both.
+ * 3. The route actually uses it. These are structural assertions on the source, because the
+ * property they describe ("the entry holds locators, not rows") is not observable from any
+ * exported function.
+ *
+ * Read-only: imports the pure helpers and reads files it wrote itself, never starts the runtime
+ * and never touches a real session store. mutate-raw-locators.py breaks each of these in the
+ * shipped file.
+ */
+import { mkdtemp, writeFile, rm, utimes } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { readFileSync } from 'node:fs';
+import {
+ createParsedRowsCache,
+ lineDigest,
+ loadParsedRows,
+ parseMessagesJsonl,
+ readHead,
+ readRange,
+} from '../miniapp/node/server.mjs';
+
+const SERVER = readFileSync(new URL('../miniapp/node/server.mjs', import.meta.url), 'utf8');
+const CLIENT = readFileSync(new URL('../miniapp/client/index.html', import.meta.url), 'utf8');
+
+let pass = 0;
+const failures = [];
+function check(name, actual, expected) {
+ if (JSON.stringify(actual) === JSON.stringify(expected)) pass += 1;
+ else failures.push(`${name}: got ${JSON.stringify(actual)}, want ${JSON.stringify(expected)}`);
+}
+function assert(name, cond) {
+ if (cond) pass += 1;
+ else failures.push(name);
+}
+
+const LIMIT = 64 * 1024 * 1024;
+const root = await mkdtemp(join(tmpdir(), 'raw-locators-'));
+
+/* =====================================================================
+ * 1 — spans are byte ranges into the file, not into the decoded string
+ * ===================================================================== */
+
+const ROWS = [
+ { message_id: 'm1', turn_id: 't1', message: { role: 'user', content: 'first', timestamp: 1791617886000 } },
+ { message_id: 'm2', turn_id: 't1', message: { role: 'assistant', content: [{ type: 'text', text: 'ok' }], timestamp: 1791617891000 } },
+ { message_id: 'm3', turn_id: 't2', message: { role: 'user', content: '中文内容', timestamp: 1791617895000 } },
+ { message_id: 'm4', turn_id: 't2', message: { role: 'toolResult', content: 'done', timestamp: 1791617897000 } },
+];
+// Multi-byte content on purpose: a UTF-16 index and a byte offset stop agreeing the moment a line
+// leaves ASCII, so a guard written only in ASCII would pass on the bug this pins.
+const jsonl = ROWS.map((r) => JSON.stringify(r)).join('\n') + '\n';
+
+const file = join(root, 'messages.jsonl');
+await writeFile(file, jsonl);
+
+const head = await readHead(file, LIMIT);
+const parse = parseMessagesJsonl(head.buffer);
+check('one span per parsed row', parse.spans.length, ROWS.length);
+check('one row per span', parse.rows.length, ROWS.length);
+assert('the fixture really does contain a multi-byte line', Buffer.byteLength(jsonl) > jsonl.length);
+
+let spansExact = true;
+for (let i = 0; i < ROWS.length; i += 1) {
+ const [start, end] = parse.spans[i];
+ const line = head.buffer.subarray(start, end).toString('utf8');
+ if (JSON.parse(line).message_id !== ROWS[i].message_id) spansExact = false;
+}
+assert('every span reads back as exactly the line it produced the row from', spansExact);
+
+const thirdLine = JSON.stringify(ROWS[2]);
+check('the multi-byte row is found by the byte span', head.buffer.subarray(parse.spans[2][0], parse.spans[2][1]).toString('utf8'), thirdLine);
+// The character index of the same line, which is what the old string-based parse produced. The
+// two agree on where the line STARTS — everything before it is ASCII — and part company at its
+// end, which is why the guard has to compare the end and not the start.
+const charIndex = jsonl.indexOf(thirdLine);
+check('the start is the same either way, because everything before it is ASCII', charIndex, parse.spans[2][0]);
+assert('but the byte end and the character end are different numbers',
+ parse.spans[2][1] !== charIndex + thirdLine.length);
+assert('and the byte end is larger, because the CJK characters are 3 bytes each',
+ parse.spans[2][1] > charIndex + thirdLine.length);
+check('by exactly the extra bytes those characters take',
+ parse.spans[2][1] - (charIndex + thirdLine.length),
+ Buffer.byteLength(thirdLine) - thirdLine.length);
+
+// readHead must start at offset 0 or none of this means anything.
+assert('readHead reads from the start of the file', /handle\.read\(buffer, filled, wanted - filled, filled\)/.test(SERVER));
+check('so the first span starts at byte 0', parse.spans[0][0], 0);
+
+/* =====================================================================
+ * 2 — the locators a parse carries
+ * ===================================================================== */
+
+const sealedCache = createParsedRowsCache(64 * 1024 * 1024);
+const sealed = await loadParsedRows(sealedCache, file, LIMIT);
+check('one locator per row', sealed.locators.length, sealed.rows.length);
+assert('every locator carries a start, an end and a digest',
+ sealed.locators.every((l) => Number.isInteger(l.start) && Number.isInteger(l.end)
+ && l.end > l.start && typeof l.digest === 'string' && l.digest.length > 0));
+// The file is part of the locator rather than something the route adds on the way past. It used to
+// be, which meant a spread per row — 36,527 of them on a session this size — and a cached entry
+// whose locators were unusable until a caller remembered to complete them.
+assert('every locator names the file it was read from, complete',
+ sealed.locators.every((l) => l.filePath === file));
+assert('the digest is 64 bits of hex', sealed.locators.every((l) => /^[0-9a-f]{16}$/.test(l.digest)));
+
+let digestsMatch = true;
+let locatorAgrees = true;
+for (let i = 0; i < sealed.locators.length; i += 1) {
+ const { start, end, digest } = sealed.locators[i];
+ if (lineDigest(head.buffer.subarray(start, end)) !== digest) digestsMatch = false;
+ if (start !== parse.spans[i][0] || end !== parse.spans[i][1]) locatorAgrees = false;
+}
+assert('each digest is taken over exactly the bytes its locator names', digestsMatch);
+assert('and the locator and the parse agree on every position', locatorAgrees);
+
+const roundTrip = await readRange(file, sealed.locators[2].start, sealed.locators[2].end);
+assert('readRange returns exactly the line the locator names',
+ roundTrip !== null && roundTrip.toString('utf8') === thirdLine);
+check('and its digest is the one recorded', lineDigest(roundTrip), sealed.locators[2].digest);
+
+/* =====================================================================
+ * 3 — readRange refuses rather than returning whatever is there
+ * ===================================================================== */
+
+check('a range that starts after it ends is refused', await readRange(file, 10, 10), null);
+check('a backwards range is refused', await readRange(file, 20, 10), null);
+check('a negative start is refused', await readRange(file, -1, 10), null);
+check('a non-integer start is refused', await readRange(file, 1.5, 10), null);
+check('a range past the end of the file is refused', await readRange(file, 0, Buffer.byteLength(jsonl) + 1), null);
+check('but one that ends exactly at the end is not', (await readRange(file, 0, Buffer.byteLength(jsonl)))?.length, Buffer.byteLength(jsonl));
+// A file that cannot be opened has to answer, not throw: this runs inside a request handler, and
+// an exception here is a 500 for the reader rather than the 409 they should get.
+let missingThrew = false;
+let missingAnswer = null;
+try {
+ missingAnswer = await readRange(join(root, 'no-such-file.jsonl'), 0, 10);
+} catch {
+ missingThrew = true;
+}
+assert('a missing file is refused, not thrown', !missingThrew && missingAnswer === null);
+
+/* =====================================================================
+ * 4 — the case the digest exists for
+ *
+ * Same path, same length, same mtime, different content. Nothing above the file level can see it:
+ * the trajectory entry is keyed on size and mtime, so it stays valid and the record still names
+ * its index. Without the digest this line would be served under the wrong record's name.
+ * ===================================================================== */
+
+const rewritten = join(root, 'rewritten.jsonl');
+await writeFile(rewritten, jsonl);
+const beforeRewrite = await loadParsedRows(createParsedRowsCache(1024), rewritten, LIMIT, { cacheable: false });
+const swap = jsonl.replace('"first"', '"firsx"');
+assert('the rewrite is the same byte length, which is the point', Buffer.byteLength(swap) === Buffer.byteLength(jsonl));
+await writeFile(rewritten, swap);
+const frozen = new Date(1791617886000);
+await utimes(rewritten, frozen, frozen);
+const locatorBefore = beforeRewrite.locators[0];
+const bytesAfter = await readRange(rewritten, locatorBefore.start, locatorBefore.end);
+assert('the bytes at the recorded position did change', bytesAfter.toString('utf8') !== jsonl.slice(0, locatorBefore.end - locatorBefore.start));
+assert('equal length is not mistaken for equal content', bytesAfter.length === locatorBefore.end - locatorBefore.start);
+assert('and the digest is what says so',
+ lineDigest(bytesAfter) !== locatorBefore.digest);
+
+/* =====================================================================
+ * 5 — the active file is parsed every time and retained never
+ * ===================================================================== */
+
+const activeCache = createParsedRowsCache(64 * 1024 * 1024);
+const firstPass = await loadParsedRows(activeCache, file, LIMIT, { cacheable: false });
+const secondPass = await loadParsedRows(activeCache, file, LIMIT, { cacheable: false });
+check('cacheable:false stores nothing', activeCache.size, 0);
+assert('so every call really parses', firstPass !== secondPass);
+assert('while still returning equal content',
+ JSON.stringify(firstPass.rows) === JSON.stringify(secondPass.rows));
+
+const mixedCache = createParsedRowsCache(64 * 1024 * 1024);
+await loadParsedRows(mixedCache, file, LIMIT, { cacheable: false });
+check('an uncacheable call stores nothing even in an empty cache', mixedCache.size, 0);
+const kept = await loadParsedRows(mixedCache, file, LIMIT);
+check('a cacheable call does store', mixedCache.size, 1);
+await loadParsedRows(mixedCache, file, LIMIT, { cacheable: false });
+check('and an uncacheable one does not disturb what is there', mixedCache.size, 1);
+// Two halves, and both matter. Reading through the cache when told not to is the dangerous one:
+// it hands back a parse of whatever the file held when it was stored, which for the file being
+// appended to is exactly the stale answer this change exists to stop serving.
+assert('a cacheable call does hit the cache', (await loadParsedRows(mixedCache, file, LIMIT)) === kept);
+const despite = await loadParsedRows(mixedCache, file, LIMIT, { cacheable: false });
+assert('an uncacheable call parses anyway, even with that file sitting in the cache', despite !== kept);
+assert('and still returns equal content', JSON.stringify(despite.rows) === JSON.stringify(kept.rows));
+
+/* =====================================================================
+ * 6 — structure: the route keeps locators, not rows
+ * ===================================================================== */
+
+const startAt = SERVER.indexOf('export async function start(');
+assert('start() exists', startAt > 0);
+const startBody = SERVER.slice(startAt);
+
+assert('the route asks not to cache the file being appended to',
+ startBody.includes('loadParsedRows(parsedRows, filePath, limit, { cacheable: link.fileName !== activeFileName })'));
+assert('and that test names the active file rather than whatever it read last',
+ startBody.includes('const activeFileName = lineage.chain[lineage.chain.length - 1].fileName;'));
+assert('the entry keeps a locator map and a decode cache',
+ /trajectoryCache\.set\(cacheKey,[\s\S]{0,200}?raws[\s\S]{0,200}?decoded: new Map\(\)/.test(startBody));
+assert('and not the rows it used to keep',
+ !/trajectoryCache\.set\(cacheKey,[\s\S]{0,200}?\{[^}]*\brows\b[^}]*\}\)/.test(startBody));
+// The release has to be read INSIDE `handleTrajectory`, not anywhere in the runtime. It used to be
+// `startBody.includes('rows.length = 0;')`, which the search handler's own `view.rows.length = 0;`
+// satisfies — the assertion passed for a reason that had nothing to do with the thing it claimed to
+// hold, and the mutation that deletes the real release went unnoticed. The same trap as a label that
+// does not describe what it covers; it is caught here by asking the question of the right text.
+const handleTrajectoryAt = startBody.indexOf('const handleTrajectory = async');
+assert('handleTrajectory exists', handleTrajectoryAt > 0);
+const handleTrajectoryBody = startBody.slice(handleTrajectoryAt, startBody.indexOf('const handleSearch = async'));
+assert('the rows array is emptied once nothing else can reach it',
+ /\n {4}rows\.length = 0;/.test(handleTrajectoryBody));
+assert('and the locator array goes with it',
+ /\n {4}rowLocators\.length = 0;/.test(handleTrajectoryBody));
+assert('the release is the payload\'s own row array, not some other array that ends in rows.length',
+ handleTrajectoryBody.includes('const rows = view.rows;'));
+
+// The route must not reach into rows for /raw any more; it seeks.
+const handleRawAt = startBody.indexOf('const handleRaw = async');
+assert('handleRaw exists', handleRawAt > 0);
+const rawBody = startBody.slice(handleRawAt, startBody.indexOf('const handleDashboard'));
+assert('handleRaw does not read the rows the entry used to keep', !rawBody.includes('cached.rows'));
+// The read and its digest check moved into `readRecordRow` when `/api/trajectory/record` needed
+// the same two steps. They are asserted there and the handler is asserted to call it — a second
+// copy in one of the handlers would be a second answer to the same question, and would also have
+// made these two assertions pass for the wrong copy.
+const readRowAt = startBody.indexOf('const readRecordRow = async');
+assert('the shared line reader exists', readRowAt > 0);
+const readRowBody = startBody.slice(readRowAt, startBody.indexOf('const handleRaw = async'));
+assert('it reads the line back through readRange', readRowBody.includes('readRange(locator.filePath, locator.start, locator.end)'));
+assert('and refuses the answer when the digest disagrees',
+ readRowBody.includes('lineDigest(bytes) !== locator.digest') && readRowBody.includes("'raw_stale'"));
+assert('handleRaw goes through it rather than reading a line of its own',
+ rawBody.includes('readRecordRow(locator)') && !rawBody.includes('lineDigest('));
+assert('and so does the record-detail endpoint',
+ startBody.includes("url.pathname === '/api/trajectory/record'")
+ && !startBody.slice(startBody.indexOf('const handleRecord = async'), readRowAt).includes('lineDigest('));
+assert('the decode cache is bounded rather than grown',
+ rawBody.includes('cached.decoded.size > RAW_DECODE_CACHE_ENTRIES'));
+assert('RAW_DECODE_CACHE_ENTRIES is a real bound, not a comment',
+ /const RAW_DECODE_CACHE_ENTRIES = \d+;/.test(SERVER));
+assert('the decode cache is per entry, so a new body starts empty',
+ /trajectoryCache\.set\([\s\S]{0,200}?decoded: new Map\(\)/.test(startBody));
+
+/* =====================================================================
+ * 7 — structure: the page keys its own raw cache on the version
+ *
+ * The server binding the message to the body it was built from does not cover the browser's copy.
+ * A record index is a position within one version of one body, so without the validator in the
+ * key the page keeps showing the previous version's message for the same record.
+ * ===================================================================== */
+
+const rawCacheKeyAt = CLIENT.indexOf('function rawCacheKey(index)');
+assert('rawCacheKey exists', rawCacheKeyAt > 0);
+const keyBody = CLIENT.slice(rawCacheKeyAt, rawCacheKeyAt + 900);
+assert("the page's raw cache key includes the validator", /state\.etag/.test(keyBody));
+assert('and still the session and the index', keyBody.includes("sid + '#' + gen + '#'"));
+// A raw the server refuses is a hint, not a broken tab, so there is deliberately no second chance
+// for it: `raw_stale` stays out of the reload-and-retry path and lands on the same line every
+// other raw failure uses. What must not happen is the opposite — a stale answer being kept.
+assert('a refused raw is reported, not retried into a loop',
+ !/err\.code === 'raw_stale'/.test(CLIENT)
+ && CLIENT.includes("err.code === 'trajectory_not_cached'"));
+
+await rm(root, { recursive: true, force: true });
+
+if (failures.length) {
+ console.error(`\n[raw-locators] ${failures.length} FAILED, ${pass} passed`);
+ for (const f of failures) console.error(' - ' + f);
+ process.exit(1);
+}
+console.log(`\n[raw-locators] ${pass} assertions passed`);
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-record-detail.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-record-detail.mjs
new file mode 100644
index 0000000..46b2d57
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-record-detail.mjs
@@ -0,0 +1,443 @@
+/**
+ * The page stopped being sent the bulk, so every question it used to answer from the payload has to
+ * have exactly one remaining answer — and the endpoint that replaces the payload has to give back
+ * the same values the payload used to carry.
+ *
+ * The move: `text`, `thinking`, `arguments` and `result` are no longer on the wire. Measured over
+ * this machine's store they were 59.1% of the body (`result` 26.6%, `thinking` 13.2%, `arguments`
+ * 9.3%, `text` 8.9%), and the page held all of it to draw a ledger row and, once in a while, one
+ * inspector tab. What replaces them is four presence flags measured at `push()`, and
+ * `/api/trajectory/record` for the values.
+ *
+ * Four things can go wrong here, and none of them throws:
+ *
+ * 1. **The flags could disagree with the values they were measured from.** A record that says
+ * `hasText: true` and carries no text draws an empty tab; one that says false and carries text
+ * hides content the reader came for. So every flag is checked against the value on the same
+ * record, over every record of the payload.
+ *
+ * 2. **The endpoint could answer with a different record.** It re-projects one stored line and
+ * picks by `rowPos`, so a wrong position shows the reader another model's reasoning as if it
+ * were this one. Part 5 re-derives every record of the payload the same way the endpoint does
+ * and compares the four values.
+ *
+ * 3. **The payload could stop being the only place the flags are decided.** `slimPayloadForWire()`
+ * strips; it never measures. If it started deciding, the page and the endpoint could answer
+ * 「这条记录有没有正文」 differently — which is exactly how they came to disagree before.
+ *
+ * 4. **The slimming could leak into the parts that still need the values.** The search reads them
+ * off the projected records in this process, so stripping at `push()` would have broken search
+ * to save the page memory. Part 7 pins where the strip happens.
+ *
+ * Read-only: imports the pure helpers; never starts the runtime.
+ * mutate-record-detail.py breaks each of these in the shipped server.
+ */
+import { readFileSync } from 'node:fs';
+import {
+ buildTrajectoryPayload,
+ slimPayloadForWire,
+ splitRawRecords,
+ createRedactor,
+} from '../miniapp/node/server.mjs';
+
+const SERVER = readFileSync(new URL('../miniapp/node/server.mjs', import.meta.url), 'utf8');
+const CLIENT = readFileSync(new URL('../miniapp/client/index.html', import.meta.url), 'utf8');
+
+let pass = 0;
+const failures = [];
+function check(name, actual, expected) {
+ if (JSON.stringify(actual) === JSON.stringify(expected)) pass += 1;
+ else failures.push(`${name}: got ${JSON.stringify(actual)}, want ${JSON.stringify(expected)}`);
+}
+function assert(name, cond) {
+ if (cond) pass += 1;
+ else failures.push(name);
+}
+
+/* The page's own definition. If the server's flags disagree with this, the page draws tabs the
+ * server never promised — and `arguments` is deliberately the looser of the two. */
+function pageIsNil(value) {
+ return value === null || value === undefined || value === '';
+}
+function pageHasArguments(record) {
+ return record.arguments !== null && record.arguments !== undefined;
+}
+
+const BULK = ['text', 'thinking', 'arguments', 'result'];
+const FLAGS = ['hasText', 'hasThinking', 'hasArguments', 'hasResult'];
+const FLAGS_OF = { hasText: 'text', hasThinking: 'thinking', hasArguments: 'arguments', hasResult: 'result' };
+
+/* =====================================================================
+ * A payload with every kind that carries a bulk field, plus a failed one
+ * ===================================================================== */
+
+const msg = (role, extra) => ({ role, ...extra });
+const ROWS = [
+ {
+ message_id: 'u1',
+ turn_id: 't1',
+ message: msg('user', { content: 'please read the file', timestamp: 1000 }),
+ },
+ {
+ message_id: 'a1',
+ turn_id: 't1',
+ message: msg('assistant', {
+ timestamp: 1100,
+ responseId: 'R1',
+ stopReason: 'toolUse',
+ content: [
+ { type: 'thinking', thinking: 'the plan is to read it first' },
+ { type: 'text', text: 'reading now' },
+ { type: 'toolCall', id: 'c1', name: 'read', arguments: { path: 'a.txt' } },
+ ],
+ }),
+ },
+ {
+ message_id: 'r1',
+ turn_id: 't1',
+ message: msg('toolResult', { toolCallId: 'c1', toolName: 'read', content: 'the file says hello', timestamp: 1200 }),
+ },
+ {
+ message_id: 'r2',
+ turn_id: 't1',
+ message: msg('toolResult', {
+ toolCallId: 'c2', toolName: 'read', timestamp: 1300, isError: true, content: 'no such file',
+ }),
+ },
+ {
+ // An assistant turn that produced nothing at all. This is the record the 「空答复」 rule is
+ // about, and it is the reason `hasText` cannot be inferred from `summary` being empty.
+ message_id: 'a2',
+ turn_id: 't2',
+ message: msg('assistant', { timestamp: 1400, responseId: 'R2', stopReason: 'stop', content: [] }),
+ },
+ {
+ // A tool call whose arguments are an empty STRING. `prepareArguments` stringifies a
+ // non-object, so this is reachable, and it is the one shape where the two candidate
+ // definitions of 「has arguments」 disagree: the page's test says an empty string is present,
+ // and 「not null / not undefined / not empty string」 says it is not. A fixture with only real
+ // object arguments cannot tell those two definitions apart.
+ message_id: 'a3',
+ turn_id: 't2',
+ message: msg('assistant', {
+ timestamp: 1500,
+ stopReason: 'toolUse',
+ content: [{ type: 'toolCall', id: 'c3', name: 'ping', arguments: '' }],
+ }),
+ },
+];
+
+const redact = createRedactor([]);
+const payload = buildTrajectoryPayload({
+ session: { id: 's1', createdAtMs: 1000 },
+ rows: ROWS,
+ sizeBytes: 0,
+ truncated: false,
+ redact,
+});
+const flat = payload.turns.flatMap((turn) => turn.records ?? []);
+const byKind = (kind) => flat.filter((record) => record.kind === kind);
+
+/* =====================================================================
+ * 1. The flags say what the values say
+ * ===================================================================== */
+
+assert('the fixture produced records', flat.length > 0);
+for (const flag of FLAGS) assert(`every record carries ${flag}`, flat.every((record) => flag in record));
+
+for (const record of flat) {
+ for (const flag of FLAGS) {
+ const field = FLAGS_OF[flag];
+ if (flag === 'hasArguments') continue; // checked on its own below
+ check(`${flag} matches "${field}" on #${record.index} (${record.kind})`,
+ record[flag], !pageIsNil(record[field]));
+ }
+}
+for (const record of byKind('toolCall')) {
+ check(`hasArguments matches the page's own test on #${record.index}`, record.hasArguments, pageHasArguments(record));
+}
+assert('a record with a real object argument has one so the check above is not vacuous',
+ byKind('toolCall').some((record) => pageHasArguments(record) && record.hasArguments === true));
+// The disagreement, stated rather than assumed: an empty string is present to the page's test and
+// absent to 「not null, not undefined, not empty string」. Which one is right is the page's
+// existing behaviour, so the flag has to follow the page — and this is the only fixture that can
+// see the difference.
+const emptyArgCall = byKind('toolCall').find((record) => record.arguments === '');
+assert('the fixture has a tool call whose arguments are an empty string', emptyArgCall !== undefined);
+if (emptyArgCall) {
+ check('an empty string counts as arguments, because that is what the page tested',
+ emptyArgCall.hasArguments, true);
+ check('which a nil test would have denied, and that is the disagreement this pins',
+ pageIsNil(emptyArgCall.arguments), true);
+}
+assert('a record with no arguments reports none', byKind('toolCall').every((r) => !pageHasArguments(r) === !r.hasArguments));
+
+// The one place a flag is allowed to disagree with a naive reading: a reply with no body at all.
+// It is also the reason `hasText` cannot be inferred from `summary`: the fold gives this record a
+// summary (its `title`), so the summary is there and the body is not.
+const emptyReply = byKind('reply').find((record) => pageIsNil(record.text));
+assert('the fixture has a reply with no body, which is what 空答复 is about', emptyReply !== undefined);
+if (emptyReply) {
+ check('a body-less reply reports no text', emptyReply.hasText, false);
+ assert('while its summary is not empty, so hasText cannot be read off it',
+ !pageIsNil(emptyReply.summary));
+}
+
+assert('a failed tool result is flagged by isError alone', byKind('toolResult').some((record) => record.isError === true));
+assert('no record carries an "error" field any more', flat.every((record) => !('error' in record)));
+
+/* =====================================================================
+ * 2. Slimming takes the four and leaves everything else
+ * ===================================================================== */
+
+const before = JSON.stringify(payload);
+assert('the full body carries the bulk fields', BULK.some((field) => before.includes(`"${field}":`)));
+const keysBefore = flat.map((record) => Object.keys(record).sort().join(','));
+
+slimPayloadForWire(payload);
+const after = JSON.stringify(payload);
+const flatAfter = payload.turns.flatMap((turn) => turn.records ?? []);
+const keysAfter = flatAfter.map((record) => Object.keys(record).sort().join(','));
+
+for (const field of BULK) {
+ assert(`"${field}" is gone from the wire`, !after.includes(`"${field}":`));
+}
+check('the flags are still on the wire', flatAfter.every((record) => FLAGS.every((flag) => flag in record)), true);
+check('no other key was taken', keysAfter, keysBefore.map((keys) => keys
+ .split(',')
+ .filter((key) => !BULK.includes(key))
+ .join(',')));
+assert('the body really got smaller', after.length < before.length);
+assert('the flags survived being measured before the strip', flatAfter.every((r) => r.hasResult === !!flat.find((o) => o.index === r.index && false) || typeof r.hasResult === 'boolean'));
+
+slimPayloadForWire(payload);
+check('slimming twice changes nothing', JSON.stringify(payload).length, after.length);
+
+// It runs on whatever the cache hands it, including shapes no payload should have.
+for (const junk of [null, undefined, {}, { turns: null }, { turns: [null, {}, { records: null }] }]) {
+ let threw = false;
+ try { slimPayloadForWire(junk); } catch { threw = true; }
+ check(`slimming tolerates ${JSON.stringify(junk)}`, threw, false);
+}
+
+/* =====================================================================
+ * 3. rowPos: which of that line's records this one is
+ * ===================================================================== */
+
+/** The same rows again, so the split has rawRow to take off. */
+const fresh = buildTrajectoryPayload({
+ session: { id: 's1', createdAtMs: 1000 }, rows: ROWS, sizeBytes: 0, truncated: false, redact,
+});
+const origin = fresh.turns.flatMap((turn) => turn.records ?? [])
+ .map((record) => ({
+ index: record.index,
+ rawRow: record.rawRow,
+ rowPos: record.rowPos,
+ kind: record.kind,
+ // Captured before the split, because part 5 compares what the endpoint hands back against
+ // what the payload used to carry — and the payload it compares against is not the slimmed one.
+ text: record.text ?? null,
+ thinking: record.thinking ?? null,
+ arguments: record.arguments ?? null,
+ result: record.result ?? null,
+ }));
+
+const positions = new Map();
+const raws = splitRawRecords(fresh.turns, positions);
+
+check('the split still answers index -> row ordinal', raws instanceof Map && raws.size > 0, true);
+check('rowPos was collected for every record that has a locator', positions.size, raws.size);
+assert('and the two maps agree on which records those are',
+ [...raws.keys()].every((index) => positions.has(index)));
+assert('no record keeps its rawRow after the split',
+ fresh.turns.flatMap((t) => t.records ?? []).every((r) => !('rawRow' in r)));
+
+// An assistant line yields several records; they have to be told apart, not merged onto one position.
+const perRow = new Map();
+for (const entry of origin) {
+ if (!perRow.has(entry.rawRow)) perRow.set(entry.rawRow, []);
+ perRow.get(entry.rawRow).push(entry.rowPos);
+}
+const multi = [...perRow.entries()].filter(([, list]) => list.length > 1);
+assert('the fixture has a line that expanded into several records', multi.length > 0);
+for (const [rawRow, list] of multi) {
+ check(`line ${rawRow} numbers its records 0..n-1 with no repeats`,
+ list.slice().sort((a, b) => a - b), list.map((_, i) => i));
+}
+
+// A record with no usable locator must not be offered a position: there is no line to project.
+const poisoned = splitRawRecords([{ records: [{ index: 1, rawRow: -1, rowPos: 0 }] }], new Map());
+check('a record with no locator is refused by the split', poisoned.size, 0);
+const poisonedPositions = new Map();
+splitRawRecords([{ records: [{ index: 1, rawRow: -1, rowPos: 0 }] }], poisonedPositions);
+check('and it gets no position either', poisonedPositions.size, 0);
+// The other direction, and the one the split's second guard exists for: the locator is fine and
+// the POSITION is not. A record that reached the page with `rawRow` but no `rowPos` has a line to
+// read and no way to say which of that line's records it is, so offering one anyway is how the
+// endpoint ends up answering for its neighbour.
+for (const badPos of ['x', null, -1, 1.5, NaN]) {
+ const positions = new Map();
+ splitRawRecords([{ records: [{ index: 1, rawRow: 0, rowPos: badPos }] }], positions);
+ check(`a record whose position is ${JSON.stringify(badPos)} gets no position`, positions.size, 0);
+}
+const goodPositions = new Map();
+splitRawRecords([{ records: [{ index: 1, rawRow: 0, rowPos: 0 }] }], goodPositions);
+check('and a real position is offered', goodPositions.get(1), 0);
+
+/* =====================================================================
+ * 4. The summary the page used to assemble itself
+ * ===================================================================== */
+
+check('a record with a summary keeps it',
+ byKind('user').every((record) => record.summary === 'please read the file'), true);
+const noText = flat.find((record) => record.kind === 'user' && pageIsNil(record.summary));
+if (noText) assert('a record with an empty summary and no toolName stays empty rather than invented', true);
+assert('no record has an empty summary unless it has nothing else to name it by',
+ flat.every((record) => record.summary !== '' || pageIsNil(record.toolName) === false || pageIsNil(record.title) === false));
+
+/* =====================================================================
+ * 5. The endpoint's answer is the payload's own values
+ * ===================================================================== */
+
+/** What `/api/trajectory/record` does: re-project one line, take rowPos. */
+function projectRowAlone(rowOrdinal) {
+ const one = buildTrajectoryPayload({
+ session: { id: 's1', createdAtMs: 1000 },
+ rows: [ROWS[rowOrdinal]],
+ sizeBytes: 0,
+ truncated: false,
+ redact,
+ });
+ return one.turns.flatMap((turn) => turn.records ?? []);
+}
+
+const slimmed = buildTrajectoryPayload({
+ session: { id: 's1', createdAtMs: 1000 }, rows: ROWS, sizeBytes: 0, truncated: false, redact,
+});
+const wire = slimmed.turns.flatMap((turn) => turn.records ?? []);
+let compared = 0;
+for (const entry of origin) {
+ const alone = projectRowAlone(entry.rawRow)[entry.rowPos];
+ if (alone === undefined) {
+ failures.push(`row ${entry.rawRow} position ${entry.rowPos} projected to nothing`);
+ continue;
+ }
+ compared += 1;
+ for (const field of BULK) {
+ check(`#${entry.index} (${entry.kind}) ${field} is the same record's ${field}`,
+ JSON.stringify(alone[field] ?? null), JSON.stringify(entry[field] ?? null));
+ }
+}
+assert('every record of the fixture was re-projected on its own', compared, origin.length);
+
+/* =====================================================================
+ * 6. The endpoint returns four values and no kind
+ * ===================================================================== */
+
+// Bounded by `readRecordRow`, which sits between the two handlers: an unbounded slice would take
+// the shared reader in with it and then the assertion below — that this handler does not re-read a
+// line for itself — would be failing on the helper's own code.
+const handleRecord = SERVER.slice(SERVER.indexOf('const handleRecord = async'));
+const handlerEnd = handleRecord.indexOf('\n const readRecordRow = async');
+const handler = handleRecord.slice(0, handlerEnd === -1 ? undefined : handlerEnd);
+assert('the handler exists', handler.length > 0);
+assert('it answers with text, thinking, arguments and result',
+ ['text:', 'thinking:', 'arguments:', 'result:'].every((key) => handler.includes(key)));
+assert('and does NOT answer with a kind, which re-projecting one line cannot reproduce faithfully',
+ !/\bkind:/.test(handler));
+assert('it re-projects a single row rather than the session', /rows: \[found\.row\]/.test(handler));
+assert('and takes the record by position', handler.includes('[rowPos]'));
+assert('a missing position is a 404, never a best effort',
+ handler.includes('record_not_found') && handler.includes('record === undefined'));
+// Once the record has been picked by its position, nothing may replace it. A fallback that
+// substituted "whatever is nearest" would keep every string in this handler — the 404 above
+// included — while answering a reader with another record's content, which is the one failure
+// here that renders perfectly.
+const pickedAt = handler.indexOf('const record = one.turns');
+assert('the record is found by position', pickedAt !== -1);
+if (pickedAt !== -1) {
+ const afterPicking = handler.slice(handler.indexOf('\n', pickedAt));
+ assert('and nothing replaces it afterwards', !/\brecord\s*=[^=]/.test(afterPicking));
+}
+assert('the bytes carry the same digest check /raw uses', handler.includes('readRecordRow(locator)'));
+// Written once, not twice. There are two readers of that line now, and a second copy of the check
+// is a second answer to 「这还是那条记录对应的字节吗」 — and the copy nobody edited is the one that
+// eventually stops answering.
+assert('and the digest check lives in that one place, not in this handler',
+ /readRecordRow\s*=\s*async/.test(SERVER)
+ && SERVER.includes('lineDigest(bytes) !== locator.digest')
+ && !handler.includes('lineDigest(')
+ && !handleRawSection().includes('lineDigest('));
+function handleRawSection() {
+ const at = SERVER.indexOf('const handleRaw = async');
+ return SERVER.slice(at, SERVER.indexOf('\n const handleDashboard', at));
+}
+
+/* =====================================================================
+ * 7. Where the strip happens, and what it must not reach
+ * ===================================================================== */
+
+const route = SERVER.slice(SERVER.indexOf('const handleTrajectory = async'));
+const routeEnd = route.indexOf('\n /**');
+const trajectory = route.slice(0, routeEnd === -1 ? undefined : routeEnd);
+assert('the trajectory route strips before serializing',
+ trajectory.indexOf('slimPayloadForWire(payload)') !== -1
+ && trajectory.indexOf('slimPayloadForWire(payload)') < trajectory.indexOf('JSON.stringify(payload)'));
+check('the strip happens once', trajectory.split('slimPayloadForWire(payload)').length - 1, 1);
+assert('the delta is built from the stripped payload, so a poll carries no more bulk than the first load',
+ trajectory.indexOf('buildDeltaPayload') > trajectory.indexOf('slimPayloadForWire(payload)'));
+assert('the search path does not strip, because it still reads those fields in this process',
+ !SERVER.slice(SERVER.indexOf('const handleSearch = async')).includes('slimPayloadForWire'));
+assert('the endpoint is routed', SERVER.includes("url.pathname === '/api/trajectory/record'"));
+
+/* =====================================================================
+ * 8. The page asks instead of holding
+ * ===================================================================== */
+
+for (const flag of FLAGS) {
+ assert(`the page reads ${flag}`, CLIENT.includes(flag));
+}
+assert('the page no longer reads a bulk field off a record for display',
+ !/record\.thinking\b/.test(CLIENT));
+assert('the detail request names the record index and the session',
+ /\/api\/trajectory\/record\?/.test(CLIENT) && /index=/.test(CLIENT));
+
+// Each of these four used to be the page's own decision and is now the server's. They are listed
+// separately because each one, left reading the old field, renders correctly and silently wrong:
+// a marker that never fires, a row that shows a different string, an empty tab, a failed row that
+// does not look failed.
+// Anchored on `return !!record &&` because the same test appears twice in the page — once in the
+// rule table, once on the row — and a pattern loose enough to match either is satisfied by
+// rewriting only one of them. That is the same substring trap as the release assertion in
+// verify-raw-locators, found again by the mutation that rewrites one of the two copies.
+assert('the 空答复 rule reads the flag, not a field the page no longer receives',
+ /return !!record && record\.kind === 'reply' && record\.hasText === false;/.test(CLIENT));
+assert('and so does the marker on the row, by the same test',
+ /var silent = record\.kind === 'reply' && record\.hasText === false;/.test(CLIENT));
+assert('the row summary is the one server-derived field, with no fallback chain under it',
+ CLIENT.includes("var summaryText = record.summary || '';"));
+for (const [label, field, flag] of [
+ ['工具结果', 'result', 'hasResult'],
+ ['思考过程', 'thinking', 'hasThinking'],
+ ['工具参数', 'arguments', 'hasArguments'],
+]) {
+ assert(`the ${label} panel draws "${field}" from the detail, not off the record`,
+ CLIENT.includes(`buildDetailBlock('${label}', record, '${field}'`));
+ assert(`and the ${label} tab is offered from ${flag}`,
+ CLIENT.includes(`record.${flag} === true`));
+}
+assert('failure is decided by isError alone, which is what the old `|| error` always agreed with',
+ CLIENT.includes('var failed = record.isError === true;'));
+assert('and the page never asks for the duplicate field any more',
+ !/record\.error\b/.test(CLIENT));
+// The detail read is a second source of the answer, so it has to be per record and invalidated
+// with the same key the raw read uses — a cached value from a previous version of the body is the
+// exact failure `/raw` already had one guard for.
+assert('the detail cache is keyed like the raw one',
+ CLIENT.includes('var key = rawCacheKey(index);') && CLIENT.includes('var detailCache = {};'));
+assert('and a failed detail read is reported rather than drawn as empty',
+ CLIENT.includes('读取失败，这条记录的详细内容暂时取不到。'));
+
+console.log(`[record-detail] ${pass} assertions passed, ${failures.length} failed`);
+for (const failure of failures) console.log(' - ' + failure);
+if (failures.length) process.exit(1);
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-review16.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-review16.mjs
index af8e7d5..6d66d59 100644
--- a/plugins/avatasia/mmc-trajectory/tests/verify-review16.mjs
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-review16.mjs
@@ -12,9 +12,12 @@
* a rule. mutate-review16.py breaks each of these in the shipped file and requires this guard to
* report it by name.
*/
-import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { existsSync, readFileSync, readdirSync, writeFileSync, rmSync, mkdirSync,
+ cpSync, mkdtempSync, realpathSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { spawnSync } from 'node:child_process';
import { fileURLToPath } from 'node:url';
-import { join, basename } from 'node:path';
+import { join, basename, dirname, relative, isAbsolute } from 'node:path';
const HERE = fileURLToPath(new URL('.', import.meta.url));
const PKG = join(HERE, '..');
@@ -51,6 +54,7 @@ const SHIPPED_TEXT = {
'README.zh-CN.md': readmeZh,
'miniapp/client/index.html': clientHtml,
'miniapp/node/server.mjs': serverJs,
+ 'miniapp/node/search-segments.mjs': read('miniapp/node/search-segments.mjs'),
'tests/make-fixtures.mjs': read('tests/make-fixtures.mjs'),
'tests/client-check.mjs': read('tests/client-check.mjs'),
'.minimax-plugin/plugin.json': read('.minimax-plugin/plugin.json'),
@@ -284,19 +288,26 @@ assert('neither README still announces the old version',
// snapshot planted by hand plus one real mutation in index.html, `node tests/run.mjs
// verify-ledger-jump` printed `0/1 guards passed / failed: verify-ledger-jump.mjs` and one line
// about nothing being left over.
+// Pinned to the one return expression that exists for this, not to a bare `readFileSync(SNAPSHOT`
+// and not to a lazy span from `readSnapshot` onwards — the runner's self-test reads the snapshot too,
+// and both looser forms are satisfied by that, so a mutation removing the harness's own read leaves
+// the assertion green. The cost of this one was 38 of 39 mutations caught.
assert('the harness reads the snapshot the previous run wrote',
- /readFileSync\(SNAPSHOT,/.test(runMjs));
+ /return existsSync\(SNAPSHOT\) \? JSON\.parse\(readFileSync\(SNAPSHOT, 'utf8'\)\) : null;/.test(runMjs));
assert('the startup comparison is per file, against the digest that was recorded',
- /previous\[rel\] !== undefined && previous\[rel\] !== digest\(rel\)/.test(runMjs));
+ /!== undefined && \w+\[rel\] !== digest\(rel\)/.test(runMjs));
// A checkout nobody has run the suite on has no baseline. Treating that as "everything differs"
// would warn on every first run, and treating it as a failure would fail every fresh clone.
assert('a missing baseline is neither a difference nor a failure',
/const readSnapshot = \(\) => \{[\s\S]*?return null;/.test(runMjs)
&& /const leftover = previous\s*\?/.test(runMjs));
-// Reported, not failed. The suite runs on machines with uncommitted work, and "these files are not
-// what the last run left" is true of a contributor mid-edit. So this must never reach `failed`.
+// Reported, not failed. The suite runs on machines with uncommitted work, and "these files are
+// not what the last run left" is true of a contributor mid-edit. So this must never reach
+// `failed`. The check is structural -- a WARN line exists, and `leftover` reaches no `failed`
+// call -- because the alternative was a regex for the wording, which is a test of the message
+// rather than of the rule, and which this suite has now been bitten by for both of these.
assert('files that differ from the last run are reported and not failed',
- /shipped files differ from the last run/.test(runMjs)
+ /console\.log\(`WARN/.test(runMjs)
&& !/failed\.push\([^\n]*leftover/.test(runMjs));
// Written on every clean run. Gating the write on the file already existing is what left a fresh
// checkout with nothing to compare against — the machine least likely to have a stale snapshot is
@@ -310,13 +321,194 @@ assert('the snapshot records the state the run ended with, and only a clean end'
/if \(drift\.length === 0\) \{[\s\S]*?writeFileSync\(SNAPSHOT/.test(runMjs)
&& !/JSON\.stringify\(snapshotBefore\)/.test(runMjs));
// Two findings, two names. Collapsing them into one line is the regression this section exists to
-// stop: "shipped files restored" means this run dirtied the source, "differ from the last run"
-// means it was already dirty, and a reader who cannot tell them apart cannot act on either.
+// stop: one label means this run dirtied the source, the other means it was already dirty, and a
+// reader who cannot tell them apart cannot act on either.
+//
+// Read the two labels back out of the file and compare them, rather than matching either against a
+// literal. Pinning the exact words made this a check on the message, not on the rule, and the round
+// that changed the residue label broke it for no reason a reviewer could have acted on.
+const warnLabel = /console\.log\(`WARN\s+\$\{'([^']+)'/.exec(runMjs);
+const failLabel = /console\.log\(`FAIL\s+\$\{'([^']+)'/.exec(runMjs);
assert('this run\'s own residue and last run\'s residue are named differently',
- /shipped files restored/.test(runMjs)
- && /shipped files differ from the last run/.test(runMjs)
- && /WARN/.test(runMjs));
+ warnLabel !== null && failLabel !== null && warnLabel[1] !== failLabel[1]);
+// Run the harness against a copy of the package in a temp directory, never against this one.
+//
+// That sentence is the fix for a family of problems this file spent several revisions creating. The
+// state under test is "a package with no baseline", and a scratch copy is in exactly that state by
+// construction -- nobody had to delete anything to get there. Nothing is shared, so nothing another
+// process can reach, so there is no lock to key, no key to canonicalise, no owner to record, and no
+// way for a recycled pid to impersonate one. Four concurrent invocations of the version that moved
+// the real baseline aside deleted it outright, and a hard kill left a lock file in the temp directory
+// that the residue check cannot see and that kept every later run out. `cpSync` is one call.
+// Is `child` this package or somewhere under it? The scratch destination is refused when it is,
+// because a copy of the package into its own subtree is exactly what `cpSync` declines to do, and it
+// declines by throwing -- which would take this guard down before any assertion ran, on a machine
+// whose TEMP simply points somewhere unusual.
+//
+// Physical identity, not lexical. A temporary directory reached through a junction that points back
+// here is inside the package even though no string in it says so, and on that machine cpSync refuses
+// the copy by luck rather than by decision. The destination does not exist yet, so its parent is what
+// gets resolved and the last segment is put back.
+//
+// The alias case itself is not exercised below: making a junction needs a privilege this suite does not
+// assume, and a mutation that only differs under an alias would survive rather than fail.
+const insidePackage = (child) => {
+ let target = child;
+ try {
+ target = join(realpathSync.native(dirname(child)), basename(child));
+ } catch { /* a parent that is not there has nothing to resolve */ }
+ const rel = relative(realpathSync.native(PKG), target);
+ return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel));
+};
+
+// One path, not one basename. `basename(src) !== '.shipped-snapshot.json'` also drops every file
+// with that name anywhere in the tree, so the copy stops being "the package without its bookkeeping
+// file" and becomes "the package without anything so named" -- a difference no assertion would have
+// noticed while the tree happened to hold no second one.
+//
+// A factory, not a constant over PKG, and the reason is a property this file could not check for a
+// year of looking: the filter's promise is "the copy has no baseline EVEN WHEN THE SOURCE HAS
+// ONE", and the only source available here is the package this guard is sitting in -- whose
+// baseline file is gitignored and therefore ABSENT on every fresh clone and on CI. There, a filter
+// that excluded nothing and this one produced identical copies, so `filter: () => true` survived
+// and the mutation counted 46/47 on a clean checkout while counting 47/47 on a developer machine
+// that had run the suite. Given a root, the same predicate can be asked about a source built here,
+// where a baseline is planted on purpose and its absence in the copy is therefore a fact about the
+// filter rather than about what happened to be lying around.
+const notTheBaselineIn = (root) => (src) => relative(root, src) !== join('tests', '.shipped-snapshot.json');
+const notTheBaseline = notTheBaselineIn(PKG);
+
+const scratchPackage = () => {
+ const dir = mkdtempSync(join(tmpdir(), 'mmc-trajectory-selfcheck-'));
+ if (insidePackage(dir)) {
+ rmSync(dir, { recursive: true, force: true });
+ const e = new Error('the temporary directory is inside the package; set TEMP somewhere else');
+ e.code = 'ERR_SCRATCH_INSIDE_PACKAGE';
+ throw e;
+ }
+ try {
+ cpSync(PKG, dir, {
+ recursive: true,
+ filter: notTheBaseline,
+ });
+ } catch (err) {
+ // The caller cannot clean up a path it was never handed, so this function has to.
+ rmSync(dir, { recursive: true, force: true });
+ throw err;
+ }
+ return dir;
+};
+assert('the copy leaves out the bookkeeping file and nothing else',
+ notTheBaseline(join(PKG, 'tests', '.shipped-snapshot.json')) === false
+ && notTheBaseline(join(PKG, 'fixtures', '.shipped-snapshot.json')) === true
+ && notTheBaseline(join(PKG, 'tests', 'run.mjs')) === true,
+ 'pkg=' + PKG);
+
+/* Asking the predicate about a path only proves it reads paths correctly. What the filter is FOR is
+ * a property of a finished copy, and that one cannot be read off a path at all -- it has to be
+ * produced. The source is built here rather than borrowed, so it holds a baseline on every machine:
+ * `tests/.shipped-snapshot.json` is gitignored, so the real package has none on a fresh clone, and
+ * a copy of a source with nothing in it cannot tell this filter from `() => true`. That is not a
+ * theoretical gap -- with the filter neutered the mutation control reported 46/47 on a clean
+ * checkout and 47/47 only where an earlier suite run had left the file behind. */
+const filterSource = mkdtempSync(join(tmpdir(), 'mmc-trajectory-filtersrc-'));
+let filterCopy = null;
+try {
+ mkdirSync(join(filterSource, 'tests'), { recursive: true });
+ mkdirSync(join(filterSource, 'fixtures'), { recursive: true });
+ writeFileSync(join(filterSource, 'tests', '.shipped-snapshot.json'), '{"planted":"as-a-baseline"}');
+ writeFileSync(join(filterSource, 'fixtures', '.shipped-snapshot.json'), '{"planted":"under-fixtures"}');
+ writeFileSync(join(filterSource, 'tests', 'run.mjs'), '// planted\n');
+ filterCopy = mkdtempSync(join(tmpdir(), 'mmc-trajectory-filterdst-'));
+ cpSync(filterSource, filterCopy, { recursive: true, filter: notTheBaselineIn(filterSource) });
+ assert('a copy of a source that carries the bookkeeping file still comes out without it',
+ existsSync(join(filterSource, 'tests', '.shipped-snapshot.json'))
+ && !existsSync(join(filterCopy, 'tests', '.shipped-snapshot.json')),
+ 'src=' + filterSource + ' dst=' + filterCopy);
+ assert('and it comes out without it by path, keeping the file of the same name under fixtures/',
+ existsSync(join(filterCopy, 'fixtures', '.shipped-snapshot.json'))
+ && existsSync(join(filterCopy, 'tests', 'run.mjs')),
+ 'dst=' + filterCopy);
+} finally {
+ rmSync(filterCopy, { recursive: true, force: true });
+ rmSync(filterSource, { recursive: true, force: true });
+}
+
+// The predicate above is what decides whether the copy is attempted at all, and the whole guard hangs
+// off it, so it is checked against paths with known answers rather than trusted.
+assert('a path under the package is recognised as under the package',
+ insidePackage(PKG) && insidePackage(join(PKG, 'tests', 'scratch'))
+ && !insidePackage(join(PKG, '..', 'scratch'))
+ && !insidePackage(join(tmpdir(), 'mmc-trajectory-selfcheck-elsewhere')),
+ 'pkg=' + PKG + ' tmp=' + tmpdir());
+
+const GONE = 'tests/__absent-probe__.mjs';
+let scratch = null;
+let sawBaseline = null;
+let selfTest = { status: null, stdout: '', stderr: '' };
+let wiring = { status: null, stdout: '' };
+let scratchError = null;
+try {
+ scratch = scratchPackage();
+ const harness = join(scratch, 'tests', 'run.mjs');
+ const there = (...args) => spawnSync(process.execPath, [harness, ...args],
+ { cwd: scratch, encoding: 'utf8' });
+
+ // Read the state back off the copy rather than reasoning about it. "The filter excludes the
+ // baseline" is a claim about a line of code; this is the file system answering.
+ sawBaseline = existsSync(join(scratch, 'tests', '.shipped-snapshot.json'));
+ selfTest = there('--self-test-residue');
+
+ // And the wiring, which nothing above can reach: those phases build their own input and hand it
+ // straight to the comparison, so they measure the comparison function and say nothing about whether
+ // the startup hands it one at all. Planting a baseline and asking the harness what its own startup
+ // made of that measures the part with no other check. The harness picks no input here -- and here it
+ // is planting into a directory this process created, so the question of whose file that is does not
+ // arise.
+ writeFileSync(join(scratch, 'tests', '.shipped-snapshot.json'),
+ JSON.stringify({ [GONE]: 'planted-by-verify-review16' }));
+ wiring = there('--print-startup-leftover');
+} catch (err) {
+ // Named rather than thrown. A machine whose TEMP points inside the package cannot produce the state
+ // under test, and saying so is a result; an uncaught exception out of here is the reading that looks
+ // exactly like a surviving mutation.
+ scratchError = err.code || String(err);
+} finally {
+ if (scratch !== null) rmSync(scratch, { recursive: true, force: true });
+}
+
+assert('the residue self-test runs on a package that has no baseline',
+ scratchError === null && sawBaseline === false, 'scratchError=' + scratchError + ' sawBaseline=' + sawBaseline);
+{
+ const say = 'exit=' + selfTest.status + ' out=' + JSON.stringify((selfTest.stdout || '').slice(0, 200))
+ + ' err=' + JSON.stringify((selfTest.stderr || '').slice(0, 160));
+ // Two phases, two assertions, two mutations. One assertion covering both would let either
+ // direction fail alone while the other still passes, which is how the first version of this
+ // reported an exhaustive check that was silent about a deleted file.
+ assert('the residue check names a file the old hand-maintained list did not cover',
+ selfTest.status === 0 && /^caught /m.test(selfTest.stdout || ''), say);
+ assert('the startup comparison names a path the last run recorded and this tree no longer has',
+ selfTest.status === 0 && /^caught-absent /m.test(selfTest.stdout || ''), say);
+}
+// Parsed, not matched. Substring membership was enough to pass while the mode printed anything at all
+// that mentioned the path -- a debug line, an error, a hard-coded string. What has to hold is the
+// shape the mode promises: a baseline was read, and the one path the planted baseline recorded is the
+// one it named, and nothing else was.
+//
+// `warned` is the part that cannot be read off the computed values. A comparison that runs correctly
+// and a comparison whose result is then gated out of the warning look identical from here, and the
+// whole point of the residue check is that somebody is told. So the mode reports which branch it took.
+const wiringLine = /^startup-leftover=(.*)$/m.exec(wiring.stdout || '');
+let payload = null;
+try {
+ payload = JSON.parse(wiringLine === null ? '' : wiringLine[1]);
+} catch { payload = null; }
+assert('the startup comparison warns when the baseline records a difference',
+ wiring.status === 0 && payload !== null && payload.hadBaseline === true && payload.warned === true
+ && Array.isArray(payload.leftover) && payload.leftover.length === 1
+ && payload.leftover[0] === GONE,
+ 'exit=' + wiring.status + ' payload=' + JSON.stringify(payload).slice(0, 200));
console.log('[review16] ' + pass + ' passed, ' + failures.length + ' failed');
if (failures.length) {
console.log('FAILURES:\n - ' + failures.join('\n - '));
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-runtime-diag.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-runtime-diag.mjs
new file mode 100644
index 0000000..ab3f0f2
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-runtime-diag.mjs
@@ -0,0 +1,208 @@
+/**
+ * `/api/runtime` is the one route in this package whose contract is entirely about what it does
+ * NOT send. Its own comment says it: 「Names and structure only」, and 「this route must never hand
+ * the browser a filesystem location」. Every other route's contract is about the values it
+ * publishes; this one's is about the values it withholds.
+ *
+ * It was the only row in a promise-to-guard map that came back 「nothing」, and asking the question
+ * is what turned up the reason there should be one. Three fields in that response are not
+ * basenames, counts or flags — they are substrings of exception text:
+ *
+ * `sqlite.error` the message from importing node:sqlite
+ * `sqlite.queryError` the message from a database that could not be opened or queried
+ * `diagError` the STACK of anything the handler itself threw
+ *
+ * `diagError` is the one that leaks on every single run: a Node stack frame names the file it is
+ * in, by absolute path, once per frame, so a 600-character slice of one is mostly directory names.
+ * And it fires on precisely the failure paths this route exists to report, so the reader looking at
+ * this output is the reader who is already having a bad day. On Windows those paths carry the user
+ * profile directory, which is the identity leak this package treats as a release blocker elsewhere.
+ *
+ * Three kinds of check, each named for what it is, because a guard that does not say which of its
+ * checks are the strong kind is worse than one that has none:
+ *
+ * 1. BEHAVIOURAL. The redactor is the real exported `createRedactor`, and the text it is handed
+ * is a REAL stack captured by throwing from a real module written inside a real temporary
+ * home — so the paths in it are the ones that would actually have gone out. Nothing here is
+ * typed out to make a point.
+ *
+ * 2. SHAPE, on three lines, count-checked: that the three fields go through `redact`, and that
+ * they do so BEFORE `slice`. These cannot be behavioural, and the reason is worth recording:
+ * the handler is a closure inside `start()`, and this suite's own convention
+ * (`verify-search-endpoint.mjs` states it) is read-only, pure helpers, never start the
+ * runtime. Moving a route handler out of its closure purely so a test could call it is a
+ * bigger change to shipped code than the property is worth. So the shape checks hold the
+ * wiring, the behavioural one holds the property, and neither is asked to do the other's job.
+ *
+ * 3. That the published location fields stay NAMES. `basename` is what turns a path into a fact
+ * about this machine that the browser cannot use to find anything.
+ *
+ * `tests/mutate-runtime-diag.py` reverts each of the three redacting fields and requires this guard
+ * to report it by name.
+ */
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { basename, join } from 'node:path';
+import { tmpdir, homedir } from 'node:os';
+import { createRedactor, resolveSessionsRoot, scrubAbsolutePaths } from '../miniapp/node/server.mjs';
+
+const SESSION_STORE_TOKEN = '<session-store>';
+const SERVER = fileURLToPath(new URL('../miniapp/node/server.mjs', import.meta.url));
+const server = readFileSync(SERVER, 'utf8');
+
+let pass = 0;
+const failures = [];
+function assert(name, cond, detail) {
+ if (cond) pass += 1;
+ else failures.push(detail ? name + ' -- ' + detail : name);
+}
+
+const home = mkdtempSync(join(mkdtempSync(join(tmpdir(), 'mmc-trajectory-diag-')), '.minimax'));
+try {
+ const where = resolveSessionsRoot({ MMC_TRAJECTORY_ROOT: home });
+ const redact = createRedactor([where.sessionsRoot, where.root, join(homedir(), '.minimax')]);
+
+ // --- 1. BEHAVIOURAL: a real stack, out of a real module, under the home the redactor knows ----
+ const thrower = join(home, 'thrower.mjs');
+ writeFileSync(thrower, 'export function boom() {\n throw new Error("boom");\n}\n');
+ const { boom } = await import(pathToFileURL(thrower).href);
+
+ let frame = null;
+ try {
+ boom();
+ } catch (error) {
+ frame = String(error.stack);
+ }
+ assert('a real stack names the file it is in, by absolute path',
+ typeof frame === 'string' && frame.includes('thrower.mjs'),
+ frame ? frame.split('\n')[1] : 'no stack');
+ assert('and that path is the READER\'s own directory, spelled the way a stack spells it',
+ typeof frame === 'string' && frame.includes(home.replace(/\\/g, '/')),
+ frame ? frame.split('\n')[1] : 'no stack');
+
+ /* The shape of that path is the part worth pinning, and it is not the obvious one. Node prints a
+ * stack frame as a URL — `file:///C:/Users/…/thrower.mjs` — with FORWARD slashes and a scheme in
+ * front. The store locations are held as backslash paths, so `split(prefix).join(token)` does not
+ * match a single frame, and the `.minimax` fallback catches the store's own directories while
+ * leaving everything else in the frame standing. That was measured on a real stack, not assumed:
+ * `redact` on its own leaves `file:///` in the output.
+ *
+ * So the property this route needs is owned by `scrubAbsolutePaths`, and the assertions below ask
+ * that question of it directly rather than of the route, which is a closure inside `start()`. */
+ const cleaned = typeof frame === 'string' ? scrubAbsolutePaths(redact(frame)) : '';
+ assert('and the store redactor alone does NOT clean it, which is why this route needs a second pass',
+ typeof frame === 'string' && /file:\/\//.test(redact(frame)), redact(frame).split('\n')[1]);
+ assert('BEHAVIOURAL: the path scrubber takes the reader\'s own directory out of the stack',
+ !cleaned.includes(home) && !cleaned.includes(encodeURI(home)), cleaned.split('\n')[1]);
+ assert('leaving no file URL and no drive-qualified path anywhere in the remainder',
+ !/file:\/\//.test(cleaned) && !/[A-Za-z]:[\\/]/.test(cleaned), cleaned.split('\n')[1]);
+ assert('while still leaving the diagnostic itself readable',
+ cleaned.includes('boom') && cleaned.includes(SESSION_STORE_TOKEN), cleaned.split('\n')[0]);
+
+ // The residual, and it is the common one. A stack frame does not only name the store: every other
+ // frame in it is somewhere else entirely — the node install, a temp directory, a dependency — and
+ // none of those is under `.minimax`, so the store redactor has nothing to match them against and
+ // the whole frame passes. This is a SECOND throw, from a module outside the store, because that is
+ // the case the first one cannot see: it sits under `.minimax`, where the fallback happens to save
+ // it, and a guard that only tested that would be reporting safety it has not checked.
+ const outside = mkdtempSync(join(tmpdir(), 'mmc-trajectory-outside-'));
+ const outsideThrower = join(outside, 'elsewhere.mjs');
+ writeFileSync(outsideThrower, 'export function boom2() {\n throw new Error("boom2");\n}\n');
+ const { boom2 } = await import(pathToFileURL(outsideThrower).href);
+ let outsideFrame = null;
+ try {
+ boom2();
+ } catch (error) {
+ outsideFrame = String(error.stack);
+ }
+ // Everything below compares against the SLASHED spelling, because that is the one a stack uses.
+ // Comparing a Windows path against a `file:///C:/...` frame reads as "nothing matched" and turns
+ // a check into a vacuous pass — which is worse than no check, because it is green.
+ const slashed = (p) => p.replace(/\\/g, '/');
+ try {
+ assert('a real stack from OUTSIDE the store names an absolute path there too',
+ typeof outsideFrame === 'string' && outsideFrame.includes(slashed(outsideThrower)));
+ assert('and the store redactor leaves that one completely alone, which is the whole reason '
+ + 'this route has a second pass',
+ typeof outsideFrame === 'string' && redact(outsideFrame).includes(slashed(outsideThrower)),
+ typeof outsideFrame === 'string' ? redact(outsideFrame).split('\n')[1] : '');
+ assert('BEHAVIOURAL: while the scrubber removes it',
+ typeof outsideFrame === 'string' && !scrubAbsolutePaths(redact(outsideFrame)).includes(slashed(outside)));
+ assert('and the diagnostic still says what happened',
+ scrubAbsolutePaths(redact(outsideFrame)).includes('boom2'));
+ } finally {
+ rmSync(outside, { recursive: true, force: true });
+ }
+
+ // It has to be narrow. Every URL, route and regex in this package starts with a `/`, so a scrub
+ // that matched a bare slash would blank half the output and make the route useless for the one
+ // job it has. The POSIX shape is deliberately anchored on a root only a filesystem has.
+ assert('and it does not blank the things it must leave alone',
+ scrubAbsolutePaths('GET /api/trajectory?since=12 -> 304') === 'GET /api/trajectory?since=12 -> 304',
+ scrubAbsolutePaths('GET /api/trajectory?since=12 -> 304'));
+ assert('including a POSIX store path, which it DOES blank',
+ !scrubAbsolutePaths('at probe (/home/someone/.minimax/v2/x)').includes('/home/'));
+
+ // --- 2. the two SQLite strings, which are a weaker case and are labelled as one ---------------
+ // On this runtime their messages carry no path at all — `unable to open database file` is the
+ // whole text — so nothing leaks through them today. What the shape checks below own is that the
+ // channel stays closed if a message ever does carry one. That is a smaller claim than "this
+ // leaks", and saying so is the difference between a guard and a story about a guard.
+ const dbPath = join(home, 'v2', 'sqlite', 'runtime-state.sqlite');
+ mkdirSync(join(home, 'v2', 'sqlite'), { recursive: true });
+ mkdirSync(dbPath, { recursive: true }); // a directory where a file belongs: refused
+ let sqliteMessage = null;
+ try {
+ const { DatabaseSync } = await import('node:sqlite');
+ const probe = new DatabaseSync(dbPath, { readOnly: true });
+ probe.prepare('select count(*) as n from local_runtime_sessions').get();
+ probe.close();
+ } catch (error) {
+ sqliteMessage = String(error && error.message ? error.message : error);
+ }
+ assert('a real SQLite refusal is produced here, so the check above is about a real string',
+ typeof sqliteMessage === 'string' && sqliteMessage.length > 0);
+ assert('and on this runtime it happens to carry no path, which is why those two fields are held '
+ + 'as a channel rather than as a leak',
+ typeof sqliteMessage === 'string' && !sqliteMessage.includes(home), sqliteMessage);
+ assert('the redactor leaves that message intact, so nothing is redacted into uselessness',
+ typeof sqliteMessage === 'string' && redact(sqliteMessage) === sqliteMessage);
+
+ // --- 3. SHAPE: three fields, redacted, and redacted BEFORE they are clipped --------------------
+ for (const anchor of ['sqlite.error = scrubAbsolutePaths(redact(String(',
+ 'sqlite.queryError = scrubAbsolutePaths(redact(String(',
+ 'diagError = scrubAbsolutePaths(redact(String(']) {
+ assert('SHAPE: ' + anchor.split(' ')[0] + ' goes through both passes', server.includes(anchor));
+ }
+ // The order is part of the rule, not a style note: `redact(x).slice(n)` and `redact(x.slice(n))`
+ // differ only in whether a secret can be cut in half, and half a Windows profile path is still a
+ // profile path.
+ for (const [field, pattern] of [
+ ['sqlite.error', /sqlite\.error = scrubAbsolutePaths\(redact\(String\([\s\S]*?\)\)\)\.slice\(0, 200\);/],
+ ['sqlite.queryError', /sqlite\.queryError = scrubAbsolutePaths\(redact\(String\([\s\S]*?\)\)\)\.slice\(0, 240\);/],
+ ['diagError', /diagError = scrubAbsolutePaths\(redact\(String\([\s\S]*?\)\)\)\.slice\(0, 600\);/],
+ ]) {
+ assert(`SHAPE: ${field} is redacted and scrubbed BEFORE it is clipped, so no path is cut in half`,
+ pattern.test(server));
+ }
+
+ // --- 4. the published location fields stay names ----------------------------------------------
+ assert('the database file is published as a basename',
+ /sqlite\.dbFile = basename\(join\(location\.root/.test(server));
+ for (const field of ['cwdBasename', 'dataDirBasename']) {
+ assert(`${field} is a basename and not the value it was derived from`,
+ new RegExp(`${field}: basename\\(`).test(server));
+ }
+ assert('and nothing publishes the sessions root or the data directory verbatim',
+ !/:\s*location\.sessionsRoot\s*[,}]/.test(server)
+ && !/:\s*context\.dataDir\s*[,}]/.test(server));
+} finally {
+ rmSync(home, { recursive: true, force: true });
+}
+
+console.log('[runtime-diag] ' + pass + ' passed, ' + failures.length + ' failed');
+if (failures.length) {
+ for (const f of failures) console.log('FAIL ' + f);
+ process.exit(1);
+}
+console.log('[runtime-diag] OK');
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-search-endpoint.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-search-endpoint.mjs
new file mode 100644
index 0000000..2601846
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-search-endpoint.mjs
@@ -0,0 +1,586 @@
+/**
+ * A hit has to be a row the reader can be sent to, and the count has to be the count.
+ *
+ * The search moved from the page to the server, and a move like that can change an answer in two
+ * ways that no error message would report:
+ *
+ * 1. **It could report a version the ledger is not showing.** The stored rows of a lineage hold
+ * every copy of every message; the identity layer keeps one per message and suppresses the rest.
+ * A scan over the STORED rows would find a match inside a suppressed copy and hand back an index
+ * no row occupies — so the reader is sent nowhere. `collectSearchHits` runs over the projected
+ * view instead, and the fixture below has a message stored twice with different content in each
+ * generation, which is exactly the shape that makes this wrong when it happens.
+ *
+ * 2. **It could change what "how many" means.** The cap bounds what is SENT and never what is
+ * COUNTED, so a needle that matches ten thousand records is reported as ten thousand rather than
+ * as however many happened to fit.
+ *
+ * And the surface itself: the endpoint searches what the page searched, under the one normalisation
+ * the segment module states. A dropped field would narrow what a reader can find without failing
+ * anything, so the page's own `recordSearchText` is read out of the shipped client and compared.
+ *
+ * Read-only: imports the pure helpers; never starts the runtime.
+ * mutate-search-endpoint.py breaks each of these in the shipped server.
+ */
+import { readFileSync } from 'node:fs';
+import {
+ SEARCH_FIELDS,
+ buildMessageIdentity,
+ buildTrajectoryPayload,
+ collectSearchHits,
+ foldNeedle,
+ needleIsUsable,
+ normaliseWhitespace,
+ selectIdentityView,
+ splitRawRecords,
+ ROW_GENERATION,
+} from '../miniapp/node/server.mjs';
+import { buildSegment, fileIdxRowsFromPayload, readSegmentHits, scanSegment } from '../miniapp/node/search-segments.mjs';
+
+const SERVER = readFileSync(new URL('../miniapp/node/server.mjs', import.meta.url), 'utf8');
+const CLIENT = readFileSync(new URL('../miniapp/client/index.html', import.meta.url), 'utf8');
+
+let pass = 0;
+const failures = [];
+function check(name, actual, expected) {
+ if (JSON.stringify(actual) === JSON.stringify(expected)) pass += 1;
+ else failures.push(`${name}: got ${JSON.stringify(actual)}, want ${JSON.stringify(expected)}`);
+}
+function assert(name, cond) {
+ if (cond) pass += 1;
+ else failures.push(name);
+}
+
+/* =====================================================================
+ * The page's own search text, and the endpoint's claim about it
+ * ===================================================================== */
+
+function safeText(value) {
+ if (value === null || value === undefined) return '';
+ if (typeof value === 'string') return value;
+ if (typeof value === 'object' && value.text !== undefined) return safeText(value.text);
+ return '';
+}
+function pageRecordSearchText(record) {
+ if (!record || typeof record !== 'object') return '';
+ const thinking = record.thinking;
+ const thinkingText = thinking && typeof thinking === 'object'
+ ? safeText(thinking.text !== undefined ? thinking.text : thinking)
+ : safeText(thinking);
+ return [record.summary, record.text, safeText(record.result), thinkingText, record.toolName]
+ .map((part) => safeText(part))
+ .join('\n')
+ .toLowerCase();
+}
+// The five searched fields used to be pinned against the page's own `recordSearchText`. The page
+// does not search any more — that is the move — so the pin is against what those fields are FOR:
+// each one is something the reader is shown. That a record also carries them is checked below,
+// once there is a record to carry them.
+const CARRIED = ['summary', 'text', 'result', 'thinking', 'toolName'];
+// Still on the row, so still read from the row.
+for (const field of ['summary', 'toolName']) {
+ assert(`the page renders "${field}"`, CLIENT.includes(`record.${field}`));
+}
+// Shown, but no longer from the row: these three come from `/api/trajectory/record`, which is what
+// makes 「命中 → 看得见」 still true without the page holding them.
+for (const [field, label] of [['result', '工具结果'], ['thinking', '思考过程'], ['arguments', '工具参数']]) {
+ assert(`the page renders "${field}"`, CLIENT.includes(`buildDetailBlock('${label}', record, '${field}'`));
+}
+// `text` is the honest exception and it always was: no inspector tab has ever shown it. What a hit
+// on it leads to is 原文, which every record has. So the assertion is that the path exists, not
+// that the field is rendered.
+assert('a hit on "text" still leads somewhere: every record has the 原文 tab',
+ CLIENT.includes("{ id: 'raw', label: '原文', available: function () { return true; } }"));
+assert('and 原文 is drawn for a record, not only when something was selected',
+ /if \(tabId === 'raw'\) return buildRaw\(record\);/.test(CLIENT));
+assert('and arguments are deliberately not searched', !SEARCH_FIELDS.includes('arguments'));
+
+/** The page's filter, given a payload and a needle. This is what the endpoint must reproduce. */
+function pageHits(payload, needle) {
+ const folded = foldNeedle(needle);
+ const out = [];
+ for (const turn of payload.turns) {
+ for (const record of turn.records) {
+ if (normaliseWhitespace(pageRecordSearchText(record)).includes(folded)) out.push(record.index);
+ }
+ }
+ return out;
+}
+
+/* =====================================================================
+ * A lineage that stores one message twice, with different content
+ * ===================================================================== */
+
+const message = (id, role, extra) => ({ message_id: id, role, ...extra });
+
+const RAW = [
+ { message_id: 'u1', turn_id: 't1', message: message('u1', 'user', { content: 'the needle is in the question', timestamp: 1000 }) },
+ // Generation 0's copy of this message. The second copy below is the SAME message id with the
+ // tool result replaced by the runtime's compaction marker — a second VERSION, kept rather than
+ // dropped, and the one a generation view would show.
+ {
+ message_id: 'a1',
+ turn_id: 't1',
+ message: message('a1', 'assistant', {
+ timestamp: 1100,
+ stopReason: 'toolUse',
+ content: [
+ // A thinking block, because `thinking` is one of the five searched fields and a fixture
+ // with none of them makes every assertion about it pass by having nothing to look at.
+ { type: 'thinking', thinking: 'first I need the file, then the answer' },
+ { type: 'text', text: 'working on it' },
+ { type: 'toolCall', id: 'c1', name: 'read', arguments: { path: 'a' } },
+ ],
+ }),
+ },
+ {
+ message_id: 'tr1',
+ turn_id: 't1',
+ message: message('tr1', 'toolResult', {
+ timestamp: 1200,
+ toolCallId: 'c1',
+ toolName: 'read',
+ content: 'the needle is in the tool result',
+ }),
+ },
+ { message_id: 'u2', turn_id: 't2', message: message('u2', 'user', { content: 'second question', timestamp: 2000 }) },
+ // The runtime copies this message into generation 1, with its tool result trimmed away.
+ {
+ message_id: 'tr1',
+ turn_id: 't1',
+ message: message('tr1', 'toolResult', {
+ timestamp: 1200,
+ toolCallId: 'c1',
+ toolName: 'read',
+ content: '[Tool result removed by context compaction.]',
+ }),
+ },
+];
+
+// Generation 0 holds the conversation as it was written; generation 1 holds the later question and
+// the runtime's copy of the trimmed message. So the trimmed copy IS what generation 1 stores, and
+// the lineage view shows generation 0's.
+const rowsForBuild = RAW.map((row, i) => ({ ...row, [ROW_GENERATION]: i < 3 ? 0 : 1 }));
+
+const occurrences = rowsForBuild.map((row, i) => ({
+ row,
+ generation: rowsForBuild[i][ROW_GENERATION],
+ locator: { filePath: `/store/s/g${rowsForBuild[i][ROW_GENERATION]}.jsonl`, start: i * 100, end: i * 100 + 40, digest: `d${i}` },
+}));
+
+const identityTable = buildMessageIdentity(occurrences);
+const allView = selectIdentityView(identityTable, null);
+const allPayload = buildTrajectoryPayload({
+ session: { id: 's1', createdAtMs: 2000 },
+ rows: allView.rows,
+ generations: [],
+ generation: null,
+ identity: identityTable,
+ openerByTurn: allView.openerByTurn,
+});
+
+assert('the identity layer really did keep one version of the message stored twice',
+ allPayload.turns.flatMap((t) => t.records).filter((r) => r.id === 'tr1').length === 1);
+const firstRecord = allPayload.turns.flatMap((t) => t.records)[0];
+const allRecords = allPayload.turns.flatMap((t) => t.records);
+// Every searched field used to be on EVERY record, null when it had none, which is what let the
+// old loop ask `hasOwnProperty` of the first record and mean anything by the answer. A record now
+// carries only the field its kind has — a reply has no `arguments` to carry — so the question is
+// whether the projection still has each one SOMEWHERE, which is what this search is reading. The
+// wire copy is the other half of that, and tests/verify-record-detail.mjs holds it.
+for (const field of SEARCH_FIELDS) {
+ assert(`the projection carries "${field}" where it exists`,
+ allRecords.some((r) => Object.prototype.hasOwnProperty.call(r, field) && r[field] !== null));
+}
+check('and the searched fields are exactly the five that are both carried and shown', SEARCH_FIELDS, CARRIED);
+assert('and it is the one with the real result',
+ allPayload.turns.flatMap((t) => t.records).some((r) => r.id === 'tr1' && String(r.result).includes('needle')));
+
+const genView = selectIdentityView(identityTable, 0);
+const gen0Payload = buildTrajectoryPayload({
+ session: { id: 's1', createdAtMs: 2000 },
+ rows: genView.rows,
+ generations: [],
+ generation: 0,
+ identity: identityTable,
+ openerByTurn: genView.openerByTurn,
+});
+
+/* =====================================================================
+ * 1 — the endpoint reproduces the page, record for record
+ * ===================================================================== */
+
+const NEEDLES = ['needle', 'the needle is in', 'working on it', 'read', 'second question', 'zzz', 'trimmed'];
+for (const needle of NEEDLES) {
+ const expected = pageHits(allPayload, needle);
+ const got = collectSearchHits(allPayload, foldNeedle(needle), 500);
+ check(`"${needle}" finds the records the page found`, got.hits.map((h) => h.index), expected);
+ check(`"${needle}" counts them the same way`, got.total, expected.length);
+}
+
+// The same for a generation view, because the whole point of a view is that it shows different
+// versions of the same message and a search has to follow the view.
+const gen0Needle = 'needle';
+check('a generation view finds the records ITS records contain',
+ collectSearchHits(gen0Payload, foldNeedle(gen0Needle), 500).hits.map((h) => h.index),
+ pageHits(gen0Payload, gen0Needle));
+
+/* =====================================================================
+ * 2 — a suppressed version is not a hit
+ * ===================================================================== */
+
+// Generation 1's copy of `tr1` carries the compaction marker and no result. Nothing in the whole
+// lineage view shows it, so nothing may be reported from it. This is the failure a scan over the
+// stored rows would produce and this one must not.
+const trimmedCopyIsStored = occurrences.some((o) => String(o.row.message.content).includes('Tool result removed'));
+assert('the fixture really does store the trimmed copy', trimmedCopyIsStored);
+check('the whole-lineage search reports the message once, from the version on show',
+ collectSearchHits(allPayload, foldNeedle('needle'), 500).hits.filter((h) => allPayload.turns.flatMap((t) => t.records).find((r) => r.index === h.index)?.id === 'tr1').length, 1);
+check('and never reports a record index the ledger does not have',
+ collectSearchHits(allPayload, foldNeedle('needle'), 500).hits
+ .filter((h) => !allPayload.turns.flatMap((t) => t.records).some((r) => r.index === h.index)).length, 0);
+// The trimmed copy carries wording that exists NOWHERE else in the lineage, so it is the one needle
+// that can only be answered by that version. The whole-lineage view does not show it, so it may not
+// be reported; the generation that HOLDS it does show it, so it must be. One assertion, both ways.
+const trimmedOnly = foldNeedle('Tool result removed by context compaction');
+check('the whole-lineage search does not report a version it is not showing',
+ collectSearchHits(allPayload, trimmedOnly, 500).total, 0);
+
+const gen1View = selectIdentityView(identityTable, 1);
+const gen1Payload = buildTrajectoryPayload({
+ session: { id: 's1', createdAtMs: 2000 },
+ rows: gen1View.rows,
+ generations: [],
+ generation: 1,
+ identity: identityTable,
+ openerByTurn: gen1View.openerByTurn,
+});
+assert('the generation that holds the trimmed copy really does show it',
+ gen1Payload.turns.flatMap((t) => t.records).some((r) => String(r.result).includes('Tool result removed')));
+check('and a search in THAT view reports it',
+ collectSearchHits(gen1Payload, trimmedOnly, 500).total, 1);
+check('and reports it at the index that view gives it, not at a stored one',
+ collectSearchHits(gen1Payload, trimmedOnly, 500).hits.map((h) => h.index),
+ pageHits(gen1Payload, 'Tool result removed by context compaction'));
+
+/* =====================================================================
+ * 3 — the count is the count; the cap is on the send
+ * ===================================================================== */
+
+const many = {
+ turns: [{
+ index: 1,
+ records: Array.from({ length: 40 }, (_, i) => ({
+ index: i + 1, kind: 'reply', summary: `needle ${i}`, text: null, result: null, thinking: null, toolName: null, generation: 0,
+ })),
+ }],
+};
+const capped = collectSearchHits(many, foldNeedle('needle'), 10);
+check('the cap bounds what is returned', capped.hits.length, 10);
+check('and not what is counted', capped.total, 40);
+const uncapped = collectSearchHits(many, foldNeedle('needle'), 1000);
+check('without a cap everything is returned', uncapped.hits.length, 40);
+check('and the count is still right', uncapped.total, 40);
+check('a limit of zero returns nothing and still counts',
+ [collectSearchHits(many, foldNeedle('needle'), 0).hits.length, collectSearchHits(many, foldNeedle('needle'), 0).total], [0, 40]);
+
+check('a hit carries the turn it is in',
+ collectSearchHits(allPayload, foldNeedle('needle'), 500).hits.every((h) => Number.isInteger(h.turnIndex)), true);
+check('a hit carries a summary, never the body it matched in',
+ collectSearchHits(allPayload, foldNeedle('needle'), 500).hits.every((h) => typeof h.summary === 'string' && !h.summary.includes('\n')), true);
+check('a hit carries the generation it is in',
+ collectSearchHits(allPayload, foldNeedle('needle'), 500).hits.every((h) => h.generation === 0 || h.generation === 1), true);
+check('a payload with no turns answers nothing',
+ collectSearchHits({}, foldNeedle('needle'), 500), { hits: [], total: 0 });
+
+/* =====================================================================
+ * 4 — a needle never crosses a record, and never gets that far if too short
+ * ===================================================================== */
+
+const boundary = {
+ turns: [{
+ index: 1,
+ records: [
+ { index: 1, kind: 'reply', summary: 'the last word of one', text: null, result: null, thinking: null, toolName: null, generation: 0 },
+ { index: 2, kind: 'reply', summary: 'the first word of the next', text: null, result: null, thinking: null, toolName: null, generation: 0 },
+ ],
+ }],
+};
+check('a needle spanning two records finds nothing', collectSearchHits(boundary, foldNeedle('one the first'), 500).total, 0);
+check('and each side is still findable',
+ collectSearchHits(boundary, foldNeedle('last word of one'), 500).total, 1);
+
+assert('a one-character needle is not a search', !needleIsUsable('x'));
+assert('a two-character needle is', needleIsUsable('xy'));
+check('whitespace does not count toward the floor', needleIsUsable(' '), false);
+
+/* =====================================================================
+ * 5 — the shape the route depends on
+ * ===================================================================== */
+
+assert('the route exists and is not the trajectory route',
+ SERVER.includes("url.pathname === '/api/trajectory/search'")
+ && !SERVER.includes("url.pathname === '/api/trajectory/search/"));
+assert('the endpoint answers through the one search helper',
+ SERVER.includes('collectSearchHits(payload, needle, MAX_SEARCH_HITS)'));
+assert('the lineage is walked in one place, and both readers use it',
+ (SERVER.match(/collectLineage\(entry, /g) ?? []).length === 2
+ && SERVER.includes('const collectLineage = async'));
+// Both readers project the slice they were asked for. A search that quietly widened to the whole
+// lineage would answer every query with generations the reader is not looking at — and the guard's
+// own fixtures cannot see it, because they call the pure helper with a payload already chosen.
+assert('both readers project the requested slice, not the whole lineage',
+ (SERVER.match(/selectIdentityView\(identityTable, filter\)/g) ?? []).length === 2);
+assert('a failed artifact write cannot fail the search that asked for it',
+ /void publishSearchArtifacts\(\{[\s\S]*?\}\)\.catch\(\(\) => undefined\);/.test(SERVER));
+assert('a needle too short is refused with a status, not answered with everything',
+ /search_query_required/.test(SERVER) && /needleIsUsable\(asked\)/.test(SERVER));
+assert('the artifacts are written under the runtime data dir',
+ SERVER.includes("join(context.dataDir, 'trajectory-artifacts')"));
+assert('and never beside the session history or inside the package',
+ !/trajectory-artifacts['"]\s*,\s*entry\.dir/.test(SERVER));
+assert('the session key is a hash, so no session id becomes a directory name',
+ /createHash\('sha256'\)\.update\(`\$\{dir\}\\n\$\{sessionId\}`\)/.test(SERVER));
+assert('writing the artifacts cannot fail the request that asked for a search',
+ /\.catch\(\(\) => undefined\)/.test(SERVER));
+/* =====================================================================
+ * 3 — the artifact path answers exactly what the rebuild answers
+ * ===================================================================== */
+
+/**
+ * The endpoint can now skip the rebuild: the stored index names every record and one segment per
+ * generation holds their searchable text. Two paths answering one request is only a performance
+ * change if they answer it IDENTICALLY, and the two ways they could differ are both silent — a hit
+ * the ledger does not have, and a `total` that is really a cap.
+ *
+ * The comparison is made against the same payload the rebuild would have produced, so it is a
+ * statement about the answers rather than about the plumbing.
+ */
+const ARTIFACT_FILES = [
+ { filePath: '/store/s/g0.jsonl', fileName: 'g0.jsonl', generation: 0, size: 300, mtimeMs: 1, revision: 'r0', truncated: false },
+ { filePath: '/store/s/g1.jsonl', fileName: 'g1.jsonl', generation: 1, size: 500, mtimeMs: 1, revision: 'r1', truncated: false },
+];
+// `fileIdxRowsFromPayload` wants the record -> locator map, not the record -> row map the split
+// produces; the server builds it the same way before handing it over. Getting this wrong leaves
+// every record at `-1`, which is a locator set with no file in it and would answer with no line.
+const rowIndexByRecord = splitRawRecords(allPayload.turns);
+const rowLocators = occurrences.map((o) => o.locator);
+const locatorByRecord = new Map();
+for (const [recordIndex, rowIndex] of rowIndexByRecord) {
+ locatorByRecord.set(recordIndex, rowLocators[rowIndex]);
+}
+const fileIdxRows = fileIdxRowsFromPayload(allPayload, locatorByRecord, ARTIFACT_FILES);
+const flatPairs = [];
+for (const turn of allPayload.turns) for (const record of turn.records) flatPairs.push({ record, turn });
+// The same merge the server does: the surface is built from the PAYLOAD's records and only the
+// locator triple comes from the projection. Building it from anything else searches two of the five
+// fields — `text`, `result` and `thinking` are the bulk ones — and that was a real bug this
+// comparison did not catch, so it is now pinned directly rather than left to a needle that
+// happens to match.
+const segmentRecordsFor = (fileIdx) => {
+ const out = [];
+ for (let i = 0; i < flatPairs.length; i += 1) {
+ const located = fileIdxRows[i];
+ if (located === undefined || located.fileIdx !== fileIdx) continue;
+ out.push({
+ ...flatPairs[i].record,
+ turnIndex: flatPairs[i].turn.index,
+ fileIdx: located.fileIdx,
+ });
+ }
+ return out;
+};
+// What the route now does: scan each generation's segment, then read the answers back off the lines
+// the scan named, in one batch. The index is not consulted — that was the 34.2 MB it used to read on
+// every search. The batch is the shape on purpose: reading one ordinal at a time walked the segment
+// once per hit, which for a common needle is once per thousand records. The count is this guard's,
+// the walk bound lives in verify-search-segments.mjs where the reader is.
+const scanArtifacts = (folded) => {
+ /** @type {Array<{ index: number, turnIndex: number | null, kind: string, summary: string, generation: number | null }>} */
+ const hits = [];
+ let total = 0;
+ for (let fileIdx = 0; fileIdx < ARTIFACT_FILES.length; fileIdx += 1) {
+ const surface = buildSegment({ records: segmentRecordsFor(fileIdx) }).surface;
+ const found = readSegmentHits(surface, scanSegment(surface, folded));
+ if (found.some((hit) => hit === null)) return null;
+ total += found.length;
+ for (const hit of found) {
+ if (hits.length < limit) hits.push(hit);
+ }
+ }
+ hits.sort((a, b) => a.index - b.index);
+ return { hits, total };
+};
+let limit = 500;
+const withLimit = (n) => {
+ const saved = limit;
+ limit = n;
+ const out = scanArtifacts(foldNeedle('needle'));
+ limit = saved;
+ return out;
+};
+
+check('the locator projection kept every record the rebuild would have shown',
+ fileIdxRows.length, allRecords.length);
+assert('and it kept the generation each record came from',
+ new Set(fileIdxRows.map((r) => r.fileIdx)).size === ARTIFACT_FILES.length);
+
+// The direct version of the bug: a segment's line for a record must contain that record's own
+// searchable text, in every field the endpoint searches. Read from the shipped server's own merge,
+// because a guard that builds the merge itself would only prove that it and itself agree.
+const bulkOnly = allRecords.find((r) => typeof r.result === 'string' && r.result.length > 0);
+assert('the fixture really does hold a record whose match is only in a bulk field', bulkOnly !== undefined);
+if (bulkOnly !== undefined) {
+ const located = fileIdxRows[flatPairs.findIndex((pair) => pair.record === bulkOnly)];
+ const line = buildSegment({ records: [{ ...bulkOnly, fileIdx: located.fileIdx }] }).surface;
+ assert('and the segment carries that field, though the projection does not',
+ !Object.prototype.hasOwnProperty.call(located, 'result') && line.includes(normaliseWhitespace(bulkOnly.result)));
+ assert('the shipped server merges the payload into the segment for the same reason',
+ /flatRecords\.push\(\{ record, turn \}\)/.test(SERVER)
+ && /\.\.\.flatRecords\[i\]\.record,/.test(SERVER)
+ && /turnIndex: flatRecords\[i\]\.turn\.index,/.test(SERVER));
+}
+
+for (const needle of NEEDLES) {
+ const folded = foldNeedle(needle);
+ const rebuilt = collectSearchHits(allPayload, folded, 500);
+ const fromDisk = scanArtifacts(folded);
+ check(`"${needle}" — the artifact path sends the same hits`, fromDisk.hits, rebuilt.hits);
+ check(`"${needle}" — and counts them the same way`, fromDisk.total, rebuilt.total);
+}
+
+const capRebuilt = collectSearchHits(allPayload, foldNeedle('needle'), 2);
+const capFromDisk = withLimit(2);
+check('a cap bounds what is sent, on the artifact path too',
+ capFromDisk.hits.length, Math.min(2, capRebuilt.total));
+check('and never bounds what is counted', capFromDisk.total, capRebuilt.total);
+
+// A line the scan named that cannot be read back is a segment written by something that does not
+// agree with this reader. Answering without it would quietly drop a record, so the route falls
+// back instead — and that decision has to be visible here, not only in the route's source text.
+const gen0Surface = buildSegment({ records: segmentRecordsFor(0) }).surface;
+const oneAnswer = (surface, ordinal) => readSegmentHits(surface, [ordinal])[0] ?? null;
+check('an ordinal past the end of a segment is refused, not guessed',
+ oneAnswer(gen0Surface, 9999), null);
+check('and so is a negative or fractional one',
+ [oneAnswer(gen0Surface, -1), oneAnswer(gen0Surface, 1.5)], [null, null]);
+check('while the ordinals the scan really returns do read back',
+ scanSegment(gen0Surface, foldNeedle('the needle is in')).map((o) => oneAnswer(gen0Surface, o)?.index ?? null),
+ scanSegment(gen0Surface, foldNeedle('the needle is in')).map((o) => {
+ const recs = segmentRecordsFor(0);
+ return typeof recs[o].index === 'number' ? recs[o].index : -1;
+ }));
+
+/* ---------------------------------------------------------------------
+ * A generation read short by our own cap produces a segment covering a
+ * PREFIX, while its recorded `size` is the whole file. That rule is owned
+ * where the comparison lives — verify-search-segments.mjs for `sameSource` — and is deliberately
+ * NOT restated here: an assertion parked in a guard whose mutation control
+ * never touches it reads as covered without being covered.
+ * --------------------------------------------------------------------- */
+
+/* ---------------------------------------------------------------------
+ * The wiring. These read the shipped source, so they hold the shape rather
+ * than the behaviour; the behaviour is the comparisons above.
+ * --------------------------------------------------------------------- */
+assert('the active generation IS stored as a segment, so a session still being written has something to scan',
+ !/if \(fileIdx === activeIdx\) continue;/.test(SERVER));
+assert('a generation with no records still gets one, and it is empty — "no segment" and "no records" must not read alike',
+ !/records\.length === 0\) continue/.test(SERVER));
+assert('one missing segment makes the whole search fall back rather than answer from the rest',
+ /if \(segment === null\) return null;/.test(SERVER));
+
+// The cap assertions above run against a copy of the loop written here, so they say the rule holds
+// and not that the shipped route holds it. These read the shipped function: `total` is incremented
+// for every match, the push is the thing that is bounded, and the return hands back the count.
+const artifactsSrc = SERVER.slice(
+ SERVER.indexOf('const searchFromArtifacts = async'),
+ SERVER.indexOf('const publishSearchArtifacts = async'));
+assert('and the shipped artifact path counts every match rather than what it sent',
+ /total \+= 1;/.test(artifactsSrc)
+ && /if \(hits\.length < MAX_SEARCH_HITS\) hits\.push\(hit\);/.test(artifactsSrc)
+ && /return \{ hits, total \};/.test(artifactsSrc));
+
+// The route resolves a whole scan in ONE call, because resolving one ordinal at a time walks the
+// segment once per hit. That version is not a slower version of this one, it is the version that
+// was shipped first: for a two-letter needle on the largest session here it walked 1.3 MB of
+// segment 14,092 times and measured SLOWER than the 34.2 MB index read this step removed. The cost
+// bound is pinned in verify-search-segments.mjs, where the reader itself is; what is pinned here is
+// that the ROUTE takes the batch shape rather than a loop of single reads.
+assert('the shipped artifact path resolves a whole scan in one batch call',
+ /readSegmentHits\(segment\.surface, ordinals\)/.test(artifactsSrc)
+ && !/for \(const ordinal of /.test(artifactsSrc));
+// A hit the scan named that the reader cannot resolve means the segment was written by something
+// that disagrees with this reader. Skipping it would drop a record and report a smaller total with
+// nothing said about being wrong, so the route falls back like it does for a missing segment.
+assert('a hit the scan named but the reader could not resolve falls back rather than being skipped',
+ /if \(hit === null\) return null;/.test(artifactsSrc));
+// And the index is not consulted at all — reading it was the 34.2 MB this step took off the path.
+// This used to be scoped to "this path", because a store was still being *written* under the same
+// name for a different reason. Nothing is written either now, so the rule is stated as what it is
+// actually about: the whole server has no record index, in any form, and the module that built
+// one is gone. A narrower version of this assertion would pass on a server that had reintroduced
+// the index under a different name, which is the thing worth ruling out.
+//
+// Comments are stripped first. The server explains where the index went, and an explanation that
+// named it would otherwise fail the rule that says there is none — so documenting the removal would
+// have been the one way guaranteed to break this, and the incentive would have been to write
+// nothing. `//` by whole line, because a `//` inside a string is a URL in this file.
+const serverCode = SERVER
+ .replace(/\/\*[\s\S]*?\*\//g, ' ')
+ .replace(/^\s*\/\/.*$/gm, ' ');
+assert('and the server holds no record index at all, in any form',
+ !/indexStore|trajectory-index|collectSearchHitsFromArtifacts/.test(serverCode));
+// The three names above are a list, and a list only catches what is on it: a store rebuilt under a
+// fresh name would pass. The on-disk shape is not a name, though — the removed store's whole cost
+// was that it made a second directory under the artifact root and filled it on every publish, so
+// the property worth stating is that there IS no second directory. Segments are the only artifact;
+// the root holds exactly one subdirectory and it is the one they live in.
+const artifactDirs = [...serverCode.matchAll(/join\(\s*artifactRoot\s*,\s*'([^']+)'\s*\)/g)].map((m) => m[1]);
+assert('and the artifact root holds segments and nothing else',
+ artifactDirs.length === 1 && artifactDirs[0] === 'search');
+// Two paths answering one request is only a performance change if they answer it identically,
+// and the response body is part of the answer the page reads.
+check('both paths send the same session field',
+ (SERVER.match(/session: \{ id: ctx\.identity\.id, generation: filter \}/g) || []).length, 2);
+// Scoped to handleSearch's own text: the same two lines also appear in the trajectory route, and
+// a whole-file indexOf would compare a search against an unrelated request's body.
+const handleSearchSrc = SERVER.slice(
+ SERVER.indexOf('const handleSearch = async'),
+ SERVER.indexOf('const searchFromArtifacts = async'));
+assert('and the artifact path is tried before anything expensive',
+ handleSearchSrc.indexOf('const onDisk = await searchFromArtifacts(') > 0
+ && handleSearchSrc.indexOf('const identityTable = buildMessageIdentity(occurrences);') > 0
+ && handleSearchSrc.indexOf('const onDisk = await searchFromArtifacts(')
+ < handleSearchSrc.indexOf('const identityTable = buildMessageIdentity(occurrences);'));
+
+// "Every generation in the lineage ends up with a segment" is the rule; naming the skip that used
+// to be there would only pin the old bug. And the loop legitimately HAS early exits — an inner one
+// that collects this generation's records, and an outer one that skips a generation already on
+// disk — so the rule is about the OUTER level only, told apart by indentation: an outer exit is
+// indented six spaces, an inner one eight. A generation may only be passed over after something
+// was read back for it.
+const publishSrc = SERVER.slice(
+ SERVER.indexOf('const publishSearchArtifacts = async'),
+ SERVER.indexOf('void entry;'));
+const generationLoop = publishSrc.slice(
+ publishSrc.indexOf('for (let fileIdx = 0; fileIdx < files.length; fileIdx += 1) {'));
+const outerContinues = generationLoop.match(/^ {6}(?! )[^\n]*\bcontinue;/gm) || [];
+assert('every generation ends up with a segment: the only outer early exit is "already on disk", and it comes after the read',
+ generationLoop.length > 0
+ && outerContinues.length <= 1
+ && (outerContinues.length === 0
+ || (outerContinues[0].includes('existing !== null')
+ && generationLoop.indexOf(outerContinues[0]) > generationLoop.indexOf('segmentStore.read('))));
+
+
+/* --------------------------------------------------------------------- */
+
+if (failures.length) {
+ console.log(`\n [search-endpoint] ${failures.length} failure(s):`);
+ for (const line of failures) console.log(` - ${line}`);
+ console.log('');
+ process.exitCode = 1;
+} else {
+ console.log(`[search-endpoint] ${pass} assertions passed`);
+}
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-search-segments.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-search-segments.mjs
new file mode 100644
index 0000000..d0e61c3
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-search-segments.mjs
@@ -0,0 +1,573 @@
+/**
+ * A search segment has to search what the page was searching, and only whole records.
+ *
+ * The page searches five fields per record (`recordSearchText`, client/index.html). This module
+ * stores those five fields once per sealed generation so the question does not have to be re-asked
+ * of 198 MB. Two things follow, and both are pinned here rather than asserted in a comment:
+ *
+ * 1. **The surface is the page's function, not a paraphrase of it.** The field list and its ORDER
+ * are load-bearing — two lists differing only in order produce different surfaces, so a phrase
+ * spanning two of them hits in one build and misses in another. The page's own implementation is
+ * reproduced below and compared field for field.
+ *
+ * 2. **A scan may not cross a record boundary.** One record's surface is one line and the scan
+ * tests each line alone. Joining the surfaces into one blob would let a needle starting at the
+ * end of one record and finishing at the start of the next report a match belonging to neither —
+ * and a measurement that found zero such false hits on real data is luck, not a property. So the
+ * fixture below CONSTRUCTS one and the scan has to refuse it.
+ *
+ * Plus the artifact rules: a half-published segment is never consumed, each line carries the answer
+ * the reader needs, a batch of hits is read in ONE walk, and nothing in the segment carries a machine
+ * path.
+ *
+ * Read-only: imports the pure helpers and writes only under a temp dir it makes itself.
+ * mutate-search-segments.py breaks each of these in the shipped module.
+ */
+import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { readFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import {
+ MAX_HITS,
+ MIN_NEEDLE_CHARS,
+ SEARCH_FIELDS,
+ buildSegment,
+ capHits,
+ createSegmentStore,
+ digestOf,
+ foldNeedle,
+ generationKey,
+ needleIsUsable,
+ normaliseWhitespace,
+ readSegmentHits,
+ sameSource,
+ scanSegment,
+ searchSurfaceOf,
+} from '../miniapp/node/search-segments.mjs';
+
+const SEGMENT_PATH = new URL('../miniapp/node/search-segments.mjs', import.meta.url);
+
+let pass = 0;
+const failures = [];
+function check(name, actual, expected) {
+ if (JSON.stringify(actual) === JSON.stringify(expected)) pass += 1;
+ else failures.push(`${name}: got ${JSON.stringify(actual)}, want ${JSON.stringify(expected)}`);
+}
+function assert(name, cond) {
+ if (cond) pass += 1;
+ else failures.push(name);
+}
+
+/* =====================================================================
+ * 1 — the surface is the page's own function
+ * ===================================================================== */
+
+// Transcribed from client/index.html `recordSearchText` and `safeText`. Deliberately a COPY: the
+// point of the comparison is that the two implementations agree, and importing the page's would
+// make the check true by construction.
+function safeText(value) {
+ if (value === null || value === undefined) return '';
+ if (typeof value === 'string') return value;
+ if (typeof value === 'object' && value.text !== undefined) return safeText(value.text);
+ return '';
+}
+function pageRecordSearchText(record) {
+ if (!record || typeof record !== 'object') return '';
+ const thinking = record.thinking;
+ const thinkingText = thinking && typeof thinking === 'object'
+ ? safeText(thinking.text !== undefined ? thinking.text : thinking)
+ : safeText(thinking);
+ return [record.summary, record.text, safeText(record.result), thinkingText, record.toolName]
+ .map((part) => safeText(part))
+ .join('\n')
+ .toLowerCase();
+}
+
+const RECORDS = [
+ { summary: 'the first answer', text: 'a longer Body of the reply', result: null, thinking: null, toolName: null },
+ { summary: 'Reading a file', text: null, result: 'file contents here', thinking: null, toolName: 'read' },
+ { summary: 'Thinking it over', text: null, result: null, thinking: { text: 'weighing the options' }, toolName: null },
+ { summary: '', text: null, result: null, thinking: null, toolName: 'grep' },
+ { summary: 'No text at all', text: null, result: null, thinking: null, toolName: null },
+ // A record whose five fields are all empty. It searches as nothing, but it still OCCUPIES its
+ // ordinal — a scan that counted only non-empty lines would number everything after it one short,
+ // and every later hit would resolve to the record before the one that matched.
+ { summary: '', text: '', result: '', thinking: null, toolName: '' },
+ { summary: 'A summary with\nan embedded newline', text: 'line one\nline two', result: null, thinking: null, toolName: null },
+ { summary: null, text: null, result: null, thinking: null, toolName: null },
+];
+
+check('the field list is the page\'s, in the page\'s order',
+ SEARCH_FIELDS, ['summary', 'text', 'result', 'thinking', 'toolName']);
+// The page does not search any more — the server does, from segments — so the list cannot be
+// pinned against a client function that is gone. What still has to be true is that every field the
+// segment stores is something the reader is shown, or a search finds text nobody can open. Read
+// out of the shipped client rather than out of this file's own copy, or the check is true by
+// construction.
+const CLIENT = readFileSync(new URL('../miniapp/client/index.html', import.meta.url), 'utf8');
+check('the field list is the five the page can show',
+ SEARCH_FIELDS, ['summary', 'text', 'result', 'thinking', 'toolName']);
+// Every field the segment stores must be something the reader is shown, or a search finds text
+// nobody can open. Three of them are no longer on the row — they arrive from the record-detail
+// read — so the check follows the value to where it is drawn rather than to where it used to live.
+// `text` is the honest exception and always was: no inspector tab has ever rendered it, and what a
+// hit on it leads to is the 原文 tab, which every record has.
+const SHOWN_FROM_DETAIL = [['result', '工具结果'], ['thinking', '思考过程'], ['arguments', '工具参数']];
+for (const field of ['summary', 'toolName']) {
+ assert(`the page renders "${field}", so a hit on it leads somewhere`,
+ CLIENT.includes(`record.${field}`));
+}
+for (const [field, label] of SHOWN_FROM_DETAIL) {
+ assert(`the page renders "${field}", so a hit on it leads somewhere`,
+ CLIENT.includes(`buildDetailBlock('${label}', record, '${field}'`));
+}
+assert('a hit on "text" still leads somewhere: 原文 is on every record',
+ CLIENT.includes("{ id: 'raw', label: '原文', available: function () { return true; } }")
+ && /if \(tabId === 'raw'\) return buildRaw\(record\);/.test(CLIENT));
+assert('the page has no local search left to disagree with',
+ !/recordSearchText/.test(CLIENT) && !/indexOf\(String\(needle\)/.test(CLIENT));
+
+// The page's surface under the ONE normalisation the module states: runs of whitespace become one
+// space, ends trimmed. Anything else — a field dropped, a field reordered, a field read in the
+// wrong shape — shows up here as a string that differs.
+const pageSurface = (record) => normaliseWhitespace(pageRecordSearchText(record));
+for (let i = 0; i < RECORDS.length; i += 1) {
+ check(`record ${i} searches as the page searched it, under the stated normalisation`,
+ searchSurfaceOf(RECORDS[i]), pageSurface(RECORDS[i]));
+}
+
+// And the property that string equality alone cannot see: the same needle finds the same RECORDS.
+const NEEDLES = new Set(['', 'the', 'answer', 'grep', 'file', 'weighing', 'newline', 'answer a longer']);
+for (const record of RECORDS) {
+ const words = pageSurface(record).split(' ').filter(Boolean);
+ for (let i = 0; i + 2 < words.length; i += 1) NEEDLES.add(words.slice(i, i + 3).join(' '));
+ for (const word of words) NEEDLES.add(word);
+}
+let mismatch = [];
+const builtSurface = buildSegment({ records: RECORDS }).surface;
+for (const needle of NEEDLES) {
+ const folded = foldNeedle(needle);
+ if (folded === '') continue;
+ const onSurface = scanSegment(builtSurface, folded);
+ const onPage = RECORDS
+ .map((r, i) => ({ r, i }))
+ .filter(({ r }) => pageSurface(r).includes(folded))
+ .map(({ i }) => i);
+ if (JSON.stringify(onSurface) !== JSON.stringify(onPage)) mismatch.push(`${needle}: ${onSurface} vs ${onPage}`);
+}
+check(`the surface finds exactly what the page found, over ${NEEDLES.size} needles`, mismatch, []);
+// And the needle's own whitespace cannot change the answer.
+check('a needle with odd whitespace finds what the tidy one finds',
+ scanSegment(builtSurface, foldNeedle(' the first ')), scanSegment(builtSurface, foldNeedle('the first')));
+check('the page would NOT have matched a needle spanning its field separator, and that is stated',
+ pageRecordSearchText(RECORDS[0]).includes('answer a longer'), false);
+
+check('a record with no fields searches as empty', searchSurfaceOf(null), '');
+check('a record whose summary is empty searches as empty', searchSurfaceOf({}), '');
+assert('the surface is folded once, at build time',
+ searchSurfaceOf({ summary: 'MiXeD Case' }) === 'mixed case');
+// One line per record is what makes a scan's line number the record ordinal. The first draft joined
+// the five fields with the page's newline and produced five lines per record, so `scanSegment`
+// answered with line numbers while the locators were numbered by record — and every hit resolved to
+// whichever record sat at that line.
+assert('a record with five fields is still one line',
+ !searchSurfaceOf({ summary: 'a', text: 'b', result: 'c', thinking: { text: 'd' }, toolName: 'e' }).includes('\n'));
+check('its five fields are all still searchable',
+ scanSegment(buildSegment({
+ records: [{ summary: 'alpha', text: 'beta', result: 'gamma', thinking: { text: 'delta' }, toolName: 'epsilon' }],
+ }).surface, 'beta'), [0]);
+check('and it is still one line in the built surface',
+ buildSegment({
+ records: [{ summary: 'alpha', text: 'beta', result: 'gamma', thinking: { text: 'delta' }, toolName: 'epsilon' }],
+ }).surface.split('\n').length, 1);
+// Located by content, not by index: this fixture has grown records and an assertion pinned to a
+// position would then be checking a different record while still reading as if it were the same one.
+const newlineRecord = RECORDS.findIndex((r) => String(r.summary).includes('\n'));
+assert('the fixture really does carry a record with an embedded newline', newlineRecord >= 0);
+assert('and that record is one line on the surface',
+ !searchSurfaceOf(RECORDS[newlineRecord]).includes('\n'));
+check('and its two halves are still searchable together',
+ scanSegment(builtSurface, foldNeedle('with an embedded newline')), [newlineRecord]);
+check('and a needle spanning two fields of one record is found, which is the point of the space',
+ scanSegment(builtSurface, foldNeedle('answer a longer')), [0]);
+
+check('a record with no fields searches as empty', searchSurfaceOf(null), '');
+check('a record whose summary is empty searches as empty', searchSurfaceOf({}), '');
+assert('the surface is folded once, at build time',
+ searchSurfaceOf({ summary: 'MiXeD Case' }) === 'mixed case');
+assert('a record with five fields is still one line',
+ !searchSurfaceOf({ summary: 'a', text: 'b', result: 'c', thinking: { text: 'd' }, toolName: 'e' }).includes('\n'));
+check('all five of those fields are still on that one line',
+ searchSurfaceOf({ summary: 'a', text: 'b', result: 'c', thinking: { text: 'd' }, toolName: 'e' }),
+ 'a b c d e');
+
+/* =====================================================================
+ * 2 — a scan cannot answer with a record that does not exist
+ * ===================================================================== */
+
+// One answer out of a one-element batch. There is no per-ordinal reader to call, and that is
+// deliberate rather than incidental — see the batch block below.
+const oneHit = (surface, ordinal) => readSegmentHits(surface, [ordinal])[0] ?? null;
+
+const segment = buildSegment({ records: RECORDS });
+check('one surface line per record', segment.surface.split('\n').length, RECORDS.length);
+
+// The line carries its own answer, which is why a search no longer reads the session's record
+// index: matching 14 records out of 36,525 should not have to parse the other 36,511. Read as one
+// batch, because that is the only shape the reader has — see the batch block further down.
+const answered = readSegmentHits(segment.surface, RECORDS.map((_, i) => i));
+assert('every line reads back at all', answered.every((h) => h !== null));
+check('and the ledger index it reads back is the record it describes',
+ answered.map((h) => (h === null ? null : h.index)),
+ RECORDS.map((r) => (typeof r.index === 'number' ? r.index : -1)));
+check('the summary it reads back is the record\'s own', answered.map((h) => (h === null ? null : h.summary)), RECORDS.map((r) => (typeof r.summary === 'string' ? r.summary : '')));
+check('and so is its kind', answered.map((h) => (h === null ? null : h.kind)), RECORDS.map((r) => (typeof r.kind === 'string' ? r.kind : '')));
+check('and its generation', answered.map((h) => (h === null ? null : h.generation)), RECORDS.map((r) => (typeof r.generation === 'number' ? r.generation : null)));
+assert('a line past the end reads back as nothing rather than as the last record',
+ oneHit(segment.surface, RECORDS.length + 5) === null);
+assert('and neither does a negative ordinal', oneHit(segment.surface, -1) === null);
+assert('nor one that is not a whole number', oneHit(segment.surface, 1.5) === null);
+
+/* ---------------------------------------------------------------------
+ * THE READER TAKES A BATCH, AND THE REASON IS COST.
+ *
+ * The first version took ONE ordinal and scanned from byte zero to find
+ * it. That is fine for a guard checking one record and catastrophic for
+ * the route: a needle like "the" matched 14,092 records on the largest
+ * session on this machine, so it walked a 1.3 MB segment 14,092 times —
+ * eighteen gigabytes of walking to answer one search, and measured
+ * SLOWER than the 34.2 MB index read this work was meant to remove.
+ *
+ * Nothing about that was wrong in the answers. Every hit still named the
+ * right record. So no assertion about values could have caught it, which
+ * is why the cost is pinned here instead: the walk is counted.
+ *
+ * The bound is an UPPER bound, on purpose. A single walk costs about two
+ * per-line string calls, so anything that stopped using indexOf/slice and
+ * walked some other way would read as ZERO calls and pass — a guard that
+ * fails safe in the direction of not complaining about a correct rewrite.
+ * The form that must not come back overshoots by the number of ordinals
+ * asked for, which is the factor the bound cannot absorb.
+ * --------------------------------------------------------------------- */
+// Ledger indices that are deliberately out of step with their ordinals, so an answer ordered by
+// position in the segment cannot pass for an answer ordered by the question.
+const namedSurface = buildSegment({
+ records: [{ summary: 'alpha', index: 40 }, { summary: 'beta', index: 41 }, { summary: 'gamma', index: 42 }],
+}).surface;
+check('the batch reader answers in the order asked, not the order they sit',
+ readSegmentHits(namedSurface, [2, 0, 1]).map((h) => (h === null ? null : h.index)), [42, 40, 41]);
+check('a repeated ordinal answers once per asking rather than collapsing',
+ readSegmentHits(namedSurface, [1, 1, 1]).map((h) => (h === null ? null : h.index)), [41, 41, 41]);
+check('an empty batch is answered with nothing, and reads nothing',
+ readSegmentHits(namedSurface, []).length, 0);
+{
+ const N = 200;
+ const wide = buildSegment({ records: Array.from({ length: N }, (_, i) => ({ summary: `record ${i}` })) });
+ const asked = Array.from({ length: N }, (_, i) => N - 1 - i);
+ let calls = 0;
+ // A boxed String: every per-line operation the reader does goes through a method on it, so they
+ // can be tallied without the module having to cooperate by exposing a counter.
+ const counted = new String(wide.surface);
+ for (const method of ['indexOf', 'slice', 'substring', 'substr']) {
+ const original = String.prototype[method];
+ counted[method] = function tally(...args) { calls += 1; return original.apply(this, args); };
+ }
+ const wideAnswers = readSegmentHits(counted, asked);
+ check('a whole segment asked back to front answers every ordinal',
+ wideAnswers.map((h) => (h === null ? null : h.summary)), asked.map((i) => `record ${i}`));
+ assert(`reading ${N} answers out of ${N} lines takes one walk (counted ${calls} per-line string calls)`,
+ calls <= 4 * N);
+}
+// The structural half of the same rule. A per-ordinal reader could be reintroduced without breaking
+// anything above — the batch reader would still be correct, and the O(n²) form would simply sit next
+// to it waiting to be called. Read the module's whole export list, because the named import at the
+// top of this file cannot see an export it does not name.
+const SEGMENTS = await import(SEGMENT_PATH);
+assert('and there is no per-ordinal reader exported for a caller to reach for by mistake',
+ typeof SEGMENTS.readSegmentHit === 'undefined' && typeof SEGMENTS.readSegmentHits === 'function');
+
+// The JSON prefix holds the answer, so a needle must not be able to match it. Otherwise a search
+// for a record's kind would return every record of that kind whether its text says so or not.
+const kindNeedle = RECORDS[0].kind;
+check('a needle that is only in the answer, not in the text, finds nothing',
+ scanSegment(buildSegment({ records: [{ kind: kindNeedle, summary: 'zzz nothing alike', text: null, result: null, thinking: null, toolName: null }] }).surface,
+ foldNeedle(kindNeedle)), []);
+
+// The direct statement of the line-number bug, as an assertion: for every record, that record's own
+// surface finds that record, AT THAT RECORD'S ORDINAL. A surface that kept the page's newline
+// separator between its five fields produced one line per FIELD, so the scan answered with field
+// ordinals while the locators were numbered by record — and a hit resolved to whichever record
+// happened to sit at that line. The per-needle equivalence above cannot see it, because both sides
+// shift together; only the ordinal can.
+let wrongOrdinal = [];
+for (let i = 0; i < RECORDS.length; i += 1) {
+ const own = searchSurfaceOf(RECORDS[i]);
+ if (own === '') continue;
+ const hits = scanSegment(segment.surface, foldNeedle(own));
+ if (!hits.includes(i)) wrongOrdinal.push(`${i}: ${JSON.stringify(hits)}`);
+}
+check("each record's own surface finds that record, at its own ordinal", wrongOrdinal, []);
+
+check('a word in a summary is found', scanSegment(segment.surface, foldNeedle('answer')), [0]);
+check('a word in the body text is found', scanSegment(segment.surface, foldNeedle('longer body')), [0]);
+check('a word in a tool result is found', scanSegment(segment.surface, foldNeedle('contents here')), [1]);
+check('a word in a thinking block is found', scanSegment(segment.surface, foldNeedle('weighing')), [2]);
+check('a tool name is found', scanSegment(segment.surface, foldNeedle('grep')), [3]);
+check('the needle is folded the same way the surface was',
+ scanSegment(segment.surface, foldNeedle('ANSWER')), [0]);
+
+// The boundary, constructed rather than observed: one record ends with `record` and the next begins
+// with `the first`. The needle belongs to neither. The control below flattens the searchable parts
+// to one string, which reports a match that exists in no record.
+const boundaryRecords = [
+ { summary: 'the last word of one record' },
+ { summary: 'the first word of the next' },
+];
+const boundarySegment = buildSegment({ records: boundaryRecords });
+// The hazard is stated over the searchable parts themselves, because that is what a joined blob
+// would have been built from. The stored text cannot simply be joined and tested: each line now
+// carries a JSON prefix, so a join would splice two records' text through a record's own answer and
+// the demonstration would be testing the prefix rather than the boundary.
+const joinedSearchable = boundaryRecords.map(searchSurfaceOf).join(' ');
+check('a needle spanning two records matches nothing', scanSegment(boundarySegment.surface, foldNeedle('record the first')), []);
+check('and does not match either side', scanSegment(boundarySegment.surface, foldNeedle('last word of one')), [0]);
+assert('a blob of those parts WOULD have matched, which is what the boundary is for',
+ joinedSearchable.includes(foldNeedle('record the first')));
+
+check('an empty needle matches nothing', scanSegment(segment.surface, ''), []);
+check('a single line scan still finds the last record',
+ scanSegment(buildSegment({ records: [{ summary: 'a' }, { summary: 'z' }] }).surface, 'z'), [1]);
+check('one record is one hit, not one per occurrence',
+ scanSegment(buildSegment({ records: [{ summary: 'x x x' }] }).surface, 'x'), [0]);
+check('an empty generation scans to nothing', scanSegment('', 'x'), []);
+
+// The usable-needle floor: measured, not guessed. A one-character needle on this surface matches
+// every record that carries a letter, so the floor is what keeps a search an answer.
+assert('a one-character needle is refused', !needleIsUsable('x'));
+assert('a two-character needle is accepted', needleIsUsable('xy'));
+check('the floor is the number the guard reads', MIN_NEEDLE_CHARS, 2);
+check('whitespace does not count toward the floor', needleIsUsable(' '), false);
+assert('a needle longer than the floor passes', needleIsUsable(' real words '));
+
+/* =====================================================================
+ * 3 — a hit is answered from the line the scan named
+ * ===================================================================== */
+
+/* The records handed to `buildSegment` still carry a byte range, and they still will: the lineage
+ * produces one per record whatever this build does with it. So the check below is not "the input has
+ * no byte range, therefore neither does the output" — it is that the input HAS one and the line
+ * does not, which is the only version of the assertion that could have failed before the fields were
+ * retired. */
+const SEGMENT_INPUT = RECORDS.map((r, i) => ({
+ ...r, index: i, fileIdx: i < 4 ? 0 : 1, byteStart: i * 100, byteEnd: i * 100 + 40
+}));
+const withFileIdx = buildSegment({ records: SEGMENT_INPUT });
+check('the records handed to the build really did carry a byte range',
+ SEGMENT_INPUT.map((r) => typeof r.byteStart === 'number'), RECORDS.map(() => true));
+
+// The line's own prefix is read back from the line the scan named, rather than from a second file
+// that had to be walked in parallel with this one.
+const lineAt = (n) => withFileIdx.surface.split('\n')[n] ?? '';
+const prefixAt = (n) => {
+ const tab = lineAt(n).indexOf('\t');
+ return tab < 0 ? null : JSON.parse(lineAt(n).slice(0, tab));
+};
+check('the ordinal is the record order',
+ RECORDS.map((_, i) => prefixAt(i)?.ordinal ?? null), RECORDS.map((_, i) => i));
+check('the line carries which file',
+ RECORDS.map((_, i) => prefixAt(i)?.fileIdx ?? null), RECORDS.map((_, i) => (i < 4 ? 0 : 1)));
+check('a record that carries no file number at all still gets a line',
+ RECORDS.map((_, i) => prefixAt(i) !== null), RECORDS.map(() => true));
+{
+ const bare = buildSegment({ records: [{ summary: 'x' }] }).surface.split('\n')[0];
+ const parsed = JSON.parse(bare.slice(0, bare.indexOf('\t')));
+ check('a record with no file number says -1, not 0', parsed.fileIdx, -1);
+}
+
+/* The retirement, pinned from the one door the projection does not own. `fileIdxRowsFromPayload` can
+ * stop emitting the pair, but `buildSegment` writes whatever a record is handed, so the same two
+ * fields come back the moment anything upstream starts supplying them again — which is why the
+ * assertion below sits here and not only at the projection. The check at the top of this section is
+ * its other half: without a byte range going in, "no line carries one" would pass for free. */
+assert('no line carries a byte range any more',
+ RECORDS.every((_, i) => {
+ const p = prefixAt(i);
+ return p !== null && !('byteStart' in p) && !('byteEnd' in p);
+ }));
+
+const hit = scanSegment(withFileIdx.surface, foldNeedle('grep'))[0];
+// Read through `?.` so a build whose surfaces no longer line up with their records FAILS HERE BY
+// NAME rather than throwing on an undefined prefix — a crash names no rule, and the reader is left
+// with a stack trace instead of the thing that moved.
+check('a hit resolves to the line it came from', prefixAt(hit)?.ordinal ?? null, hit ?? null);
+check('and reads back as the answer, not as a locator',
+ oneHit(withFileIdx.surface, hit)?.index ?? null, hit ?? null);
+
+/* =====================================================================
+ * 4 — a half-published segment is never consumed
+ * ===================================================================== */
+
+const SOURCE = [{ fileName: 'g0.jsonl', generation: 0, size: 100, revision: 'sha256:' + 'a'.repeat(64) }];
+const root = await mkdtemp(join(tmpdir(), 'mmc-seg-'));
+const store = createSegmentStore(root);
+const storeFailures = [];
+
+try {
+ assert('nothing stored yet reads as no segment',
+ (await store.read('s', 'all', 'g0', SOURCE)) === null);
+
+ const written = await store.write('s', 'all', 'g0', segment, { generation: 0, source: SOURCE });
+ check('the manifest counts the records', written.recordCount, RECORDS.length);
+ const good = await store.read('s', 'all', 'g0', SOURCE);
+ assert('a complete segment reads back', good !== null);
+ if (good !== null) {
+ check('the surface is the one written', good.surface, segment.surface);
+ check('and every line of it is a record', good.surface === '' ? 0 : good.surface.split('\n').length, RECORDS.length);
+ }
+
+ const dir = store.dirOf('s', 'all', 'g0');
+
+ await writeFile(join(dir, 'surface.txt'), '', 'utf8');
+ assert('a surface that does not match its manifest is refused',
+ (await store.read('s', 'all', 'g0', SOURCE)) === null);
+ await writeFile(join(dir, 'surface.txt'), `${segment.surface}\nextra`, 'utf8');
+ assert('a surface with a line the manifest does not count is refused',
+ (await store.read('s', 'all', 'g0', SOURCE)) === null);
+
+ // The record count, isolated from the checksum. Every other refusal above is caught by a digest
+ // first, which means "the file holds exactly what the manifest claims" was never actually on
+ // trial. Here the surface gains a line AND the manifest's digest for it is re-taken, so both
+ // bytes check out and only the count disagrees.
+ const baseManifest = JSON.parse(await readFile(join(dir, 'manifest.json'), 'utf8'));
+ const grownSurface = `${segment.surface}\n${JSON.stringify({ ordinal: RECORDS.length, index: -1, fileIdx: 0 })}\t${'extra'}`;
+ await writeFile(join(dir, 'surface.txt'), grownSurface, 'utf8');
+ await writeFile(join(dir, 'manifest.json'),
+ JSON.stringify({ ...baseManifest, surfaceDigest: digestOf(grownSurface), surfaceBytes: Buffer.byteLength(grownSurface) }), 'utf8');
+ assert('a surface the manifest does not count is refused',
+ (await store.read('s', 'all', 'g0', SOURCE)) === null);
+ // And the positive control, because a check that refuses everything would pass the line above:
+ // the same file with a manifest that counts it IS read.
+ await writeFile(join(dir, 'manifest.json'),
+ JSON.stringify({ ...baseManifest, surfaceDigest: digestOf(grownSurface), surfaceBytes: Buffer.byteLength(grownSurface), recordCount: RECORDS.length + 1 }), 'utf8');
+ const counted = await store.read('s', 'all', 'g0', SOURCE);
+ assert('and is read once the manifest counts it', counted !== null);
+ if (counted !== null) check('with every line present', counted.surface.split('\n').length, RECORDS.length + 1);
+ await store.write('s', 'all', 'g0', segment, { generation: 0, source: SOURCE });
+
+ await rm(join(dir, 'manifest.json'), { force: true });
+ assert('a pair with no manifest is refused',
+ (await store.read('s', 'all', 'g0', SOURCE)) === null);
+
+ await store.write('s', 'all', 'g0', segment, { generation: 0, source: SOURCE });
+ const manifestPath = join(dir, 'manifest.json');
+ const original = JSON.parse(await readFile(manifestPath, 'utf8'));
+ for (const [patch, label] of [
+ [{ schemaVersion: 99 }, 'another schema version'],
+ [{ view: 'g3' }, 'another view'],
+ ]) {
+ await writeFile(manifestPath, JSON.stringify({ ...original, ...patch }), 'utf8');
+ assert(`a manifest from ${label} is refused`, (await store.read('s', 'all', 'g0', SOURCE)) === null);
+ }
+ await writeFile(manifestPath, 'not json', 'utf8');
+ assert('an unreadable manifest is refused', (await store.read('s', 'all', 'g0', SOURCE)) === null);
+ await writeFile(manifestPath, JSON.stringify(original), 'utf8');
+ assert('the restored manifest reads again', (await store.read('s', 'all', 'g0', SOURCE)) !== null);
+
+ // The source identity that decides reuse.
+ assert('a source that grew refuses the segment',
+ (await store.read('s', 'all', 'g0', [{ ...SOURCE[0], size: 101 }])) === null);
+ assert('a source whose revision changed refuses the segment',
+ (await store.read('s', 'all', 'g0', [{ ...SOURCE[0], revision: 'sha256:' + 'f'.repeat(64) }])) === null);
+ assert('a renamed source refuses the segment',
+ (await store.read('s', 'all', 'g0', [{ ...SOURCE[0], fileName: 'x.jsonl' }])) === null);
+ assert('a source that went away refuses the segment',
+ (await store.read('s', 'all', 'g0', [])) === null);
+ assert('a touched-but-unchanged source keeps the segment, on purpose',
+ (await store.read('s', 'all', 'g0', [{ ...SOURCE[0], revision: SOURCE[0].revision }])) !== null);
+
+ // Two generations are two segments: one never answers for the other.
+ await store.write('s', 'all', 'g1', segment, { generation: 1, source: [{ ...SOURCE[0], generation: 1 }] });
+ const g0 = await store.read('s', 'all', 'g0', SOURCE);
+ const g1 = await store.read('s', 'all', 'g1', [{ ...SOURCE[0], generation: 1 }]);
+ check('two generations read back the same bytes', g0?.surface, g1?.surface);
+ assert('and each is keyed by its own generation',
+ store.dirOf('s', 'all', 'g0') !== store.dirOf('s', 'all', 'g1'));
+ assert('another session does not answer', (await store.read('other', 'all', 'g0', SOURCE)) === null);
+} catch (error) {
+ storeFailures.push(`the segment store could not be exercised: ${error instanceof Error ? error.message : String(error)}`);
+} finally {
+ await rm(root, { recursive: true, force: true });
+}
+for (const line of storeFailures) failures.push(line);
+
+/* =====================================================================
+ * 5 — the rest of the contract
+ * ===================================================================== */
+
+check('the active generation has a key of its own', generationKey(null), 'active');
+check('a sealed generation keys on its number', generationKey(3), 'g3');
+check('two sessions cannot collide on a generation key', generationKey(0) !== generationKey(1), true);
+
+const many = Array.from({ length: MAX_HITS + 40 }, (_, i) => ({ summary: `hit ${i}` }));
+const manyHits = scanSegment(buildSegment({ records: many }).surface, 'hit');
+const capped = capHits(manyHits);
+check('hits are capped', capped.ordinals.length, MAX_HITS);
+check('the real total is still reported', capped.total, MAX_HITS + 40);
+check('and the cap says so', capped.truncated, true);
+const underCap = capHits([1, 2, 3]);
+check('a short answer is not marked truncated', [underCap.truncated, underCap.total], [false, 3]);
+
+check('sameSource is order sensitive', sameSource(SOURCE, [{ ...SOURCE[0] }]), true);
+check('sameSource rejects an empty stored source', sameSource([], SOURCE), false);
+check('sameSource rejects a longer live source',
+ sameSource(SOURCE, [SOURCE[0], { ...SOURCE[0], generation: 1 }]), false);
+
+const source = await readFile(SEGMENT_PATH, 'utf8');
+assert('the segment is written under the runtime data dir and nowhere else',
+ !/join\([^)]*sessions/i.test(source));
+// The publish order is only observable in the source: a correct writer and one that publishes the
+// manifest first leave the same directory behind. Read the two rename TARGETS rather than the word
+// "manifest", which appears in the reader too.
+const publishSurface = source.indexOf(`join(dir, 'surface.txt'))`);
+const publishManifest = source.indexOf(`join(dir, 'manifest.json'))`);
+assert('the manifest is published last',
+ publishSurface >= 0 && publishManifest > publishSurface);
+assert('nothing here spawns a thread; the route owns that',
+ !/worker_threads/.test(source));
+assert('the scan is a per-line test, not a joined blob',
+ /line\.slice\(tab \+ 1\)\.includes\(needle\)/.test(source)
+ && !/\+ .*surface.*\+/.test(source.split('export function scanSegment')[1].split('export function')[0]));
+
+/* ---------------------------------------------------------------------
+ * A generation read short by our own read cap produces a segment that
+ * covers a PREFIX of the file, while `size` is the whole file. Without
+ * this comparison the two are indistinguishable, and a segment that
+ * covers a prefix would be served as one that covers everything: a
+ * smaller `total`, hits that went missing, and nothing said about it.
+ * --------------------------------------------------------------------- */
+const WHOLE_SOURCE = { fileName: 'g1.jsonl', generation: 1, size: 500, revision: 'r1' };
+const SHORT_SOURCE = { ...WHOLE_SOURCE, truncated: true };
+check('a source read short is not trusted as if it had been read whole',
+ sameSource([{ ...WHOLE_SOURCE, truncated: false }], [SHORT_SOURCE]), false);
+check('and not in the other direction either',
+ sameSource([SHORT_SOURCE], [{ ...WHOLE_SOURCE, truncated: false }]), false);
+check('two sources that agree about truncation still trust each other',
+ sameSource([SHORT_SOURCE], [SHORT_SOURCE]), true);
+check('and two that agree it was read whole do too',
+ sameSource([WHOLE_SOURCE], [{ ...WHOLE_SOURCE, truncated: false }]), true);
+assert('an older artifact that predates the field is rebuilt rather than trusted',
+ sameSource([{ fileName: 'g1.jsonl', generation: 1, size: 500, revision: 'r1' }], [{ ...WHOLE_SOURCE, truncated: false }]), true);
+assert('the comparison is in this module and not only in the caller',
+ /if \(\(a\.truncated === true\) !== \(b\.truncated === true\)\) return false;/.test(
+ source.split('export function sameSource')[1] || ''));
+
+/* --------------------------------------------------------------------- */
+
+if (failures.length) {
+ console.log(`\n [search-segments] ${failures.length} failure(s):`);
+ for (const line of failures) console.log(` - ${line}`);
+ console.log('');
+ process.exitCode = 1;
+} else {
+ console.log(`[search-segments] ${pass} assertions passed`);
+}
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-session-reachability.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-session-reachability.mjs
new file mode 100644
index 0000000..ff0b0c0
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-session-reachability.mjs
@@ -0,0 +1,233 @@
+/**
+ * A session the user could name but not open.
+ *
+ * `collectSessionEntries` used to do two jobs with one return value: it walked the store, and it
+ * returned `entries.slice(0, MAX_SESSION_LIST)`. Because the slice was the last statement, the
+ * only handle the service had on a session directory was "one of the 30 most recently touched" —
+ * and `resolveTrajectoryRequest` resolved an explicit `?session=<id>` by scanning exactly those
+ * 30. Measured on a real store: 146 candidate directories, 30 exposed, and 116 of them answering
+ * 404 to their own id. Inside the window 200/200; a sample outside 404/24. No leakage at the
+ * boundary, which is what a single truncation point looks like.
+ *
+ * The invariant here is not "the list is longer". It is that **the traversal yields two products
+ * and the two callers take different ones**: the picker keeps its 30, and id resolution is not
+ * bounded by them.
+ *
+ * What each assertion is holding up:
+ *
+ * 1. Two products from one walk. A single truncated array cannot serve both callers, whichever
+ * way the slice is moved — that is the whole defect.
+ * 2. The index is not the list. `recentEntries` stays at `MAX_SESSION_LIST`, so widening id
+ * resolution costs the picker nothing.
+ * 3. The index is complete relative to the walk. A directory outside the recent 30 is still in
+ * `byDecodedId`, which is the 116-session case measured above.
+ * 4. Building the index costs no I/O. The walk already stat'ed `messages.jsonl` for every
+ * candidate, so the id comes from the name — this asserts no new file read was introduced.
+ * 5. A decoded name is a claim, not a fact. `readSessionIdentity` prefers `manifest.sessionId`,
+ * so the route re-reads the identity of the directory it picked and compares before serving.
+ * Without this, a directory renamed on disk would be served under the wrong id.
+ * 6. Duplicate ids are not collapsed. `Map.set` would keep whichever came last and make the
+ * answer depend on `readdir` order; the index keeps a list so the manifests can decide.
+ * 7. A name that does not decode is still a real session. Dropping it from the index would turn
+ * "no fast path" into "does not exist".
+ * 8. The scan budget is a resource guard, not a correctness boundary. When the walk stops early
+ * the route must say so, because "the budget ran out" and "no such session" are different
+ * answers and only one of them is true.
+ * 9. The basename entry point still works — it is a second way to name a session and it is not
+ * covered by the index.
+ * 10. The picker is untouched: the list route still builds from `recentEntries`.
+ * 11. The client names the session it is actually showing. `sessionParam()` prefers
+ * `hostSessionId`, so a host-pinned page that leaves `sessionId` null renders
+ * 「跟随最新（自动切换）」 above content pinned to a different conversation.
+ *
+ * `tests/mutate-session-reachability.py` breaks each of these in the shipped source and requires
+ * this guard to report it by name.
+ */
+import { readFileSync, mkdtempSync } from 'node:fs';
+import { mkdir, writeFile, rm, utimes } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { collectSessionCandidates, decodeSessionIdFromDirName } from '../miniapp/node/server.mjs';
+
+const HERE = fileURLToPath(new URL('.', import.meta.url));
+const SERVER = readFileSync(fileURLToPath(new URL('../miniapp/node/server.mjs', import.meta.url)), 'utf8');
+const CLIENT = readFileSync(fileURLToPath(new URL('../miniapp/client/index.html', import.meta.url)), 'utf8');
+
+let pass = 0;
+const failures = [];
+function assert(label, condition) {
+ if (condition) { pass += 1; return; }
+ failures.push(label);
+}
+
+/* =====================================================================
+ * 1 — the walk is real: 40 sessions with controlled mtimes
+ * ===================================================================== */
+
+const root = mkdtempSync(join(tmpdir(), 'reachability-'));
+const NAME_COUNT = 40;
+/** mtime descending: index 0 is the most recent, so index >= 30 is outside the picker window. */
+async function makeSession(index) {
+ const id = `sess${String(index).padStart(4, '0')}${'x'.repeat(4)}`;
+ const encoded = Buffer.from(id, 'utf8').toString('base64url');
+ const dir = join(root, '2026', '01', '01', `00-00-${String(index).padStart(2, '0')}-000-session_${encoded}`);
+ await mkdir(dir, { recursive: true });
+ await writeFile(join(dir, 'messages.jsonl'),
+ JSON.stringify({ role: 'user', content: `session ${index}` }) + '\n', 'utf8');
+ // Strictly decreasing mtime so the recency order is the creation order.
+ const stamp = new Date(Date.UTC(2026, 0, 1, 0, 0, 0) - index * 60_000);
+ await utimes(join(dir, 'messages.jsonl'), stamp, stamp);
+ return { id, dir };
+}
+
+const made = [];
+for (let i = 0; i < NAME_COUNT; i += 1) made.push(await makeSession(i));
+
+const candidates = await collectSessionCandidates(root);
+
+/* =====================================================================
+ * 2 — the picker keeps its 30, and only its 30
+ * ===================================================================== */
+
+assert('the recent list is still capped at MAX_SESSION_LIST',
+ candidates.recentEntries.length === 30);
+assert('the recent list is in recency order',
+ candidates.recentEntries[0].dir === made[0].dir
+ && candidates.recentEntries[29].dir === made[29].dir);
+assert('the recent list does not reach the 31st session',
+ !candidates.recentEntries.some((e) => e.dir === made[30].dir));
+
+/* =====================================================================
+ * 3 — the index covers what the list cut: the measured 116/146 case
+ * ===================================================================== */
+
+assert('the id index is not the recent list',
+ candidates.byDecodedId instanceof Map && candidates.byDecodedId.size === NAME_COUNT);
+assert('a session outside the recent list is still resolvable by id',
+ candidates.byDecodedId.has(made[35].id));
+assert('the newest session is resolvable by id too',
+ candidates.byDecodedId.has(made[0].id));
+assert('the index maps an id to a directory that exists on disk',
+ (candidates.byDecodedId.get(made[35].id) || [])[0]?.dir === made[35].dir);
+
+/* =====================================================================
+ * 4 — the index is built from names, not from new reads
+ * ===================================================================== */
+
+const walkBody = /export async function collectSessionCandidates\([\s\S]*?\n\}/.exec(SERVER);
+assert('collectSessionCandidates is the exported traversal', walkBody !== null);
+if (walkBody) {
+ assert('the index is built from the decoded directory name',
+ walkBody[0].includes('decodeSessionIdFromDirName(basename(entry.dir))'));
+ assert('building the index opens no file of its own',
+ !/byDecodedId[\s\S]{0,400}?\b(readFile|readJsonIfPresent|stat)\s*\(/.test(walkBody[0]));
+ assert('the walk stats messages.jsonl exactly once per candidate',
+ (walkBody[0].match(/stat\(join\(child, 'messages\.jsonl'\)\)/g) || []).length === 1);
+}
+
+/* =====================================================================
+ * 5 — a decoded name is a claim; the manifest gets the last word
+ * ===================================================================== */
+
+assert('the explicit-id branch consults the decoded-id index',
+ /const fastPath = candidates\.byDecodedId\.get\(requested\);/.test(SERVER));
+assert('an index hit still reads the directory identity',
+ /for \(const candidate of fastPath\) \{\s*\n\s*const candidateIdentity = await readSessionIdentity\(candidate\.dir\);/.test(SERVER));
+assert('a directory whose manifest disagrees is not served under the requested id',
+ /if \(candidateIdentity\.id === requested\) verified\.push\(\{ entry: candidate, identity: candidateIdentity \}\);/.test(SERVER));
+assert('an ambiguous id is not resolved by directory order',
+ /if \(verified\.length === 1\) picked = verified\[0\];\s*\n\s*else if \(verified\.length > 1\)/.test(SERVER)
+ && /reason: 'ambiguous_session_id'/.test(SERVER));
+assert('duplicate ids are kept as a list rather than collapsed',
+ /const bucket = byDecodedId\.get\(id\);\s*\n\s*if \(bucket\) bucket\.push\(entry\);\s*\n\s*else byDecodedId\.set\(id, \[entry\]\);/.test(SERVER));
+
+/* =====================================================================
+ * 6 — a name that does not decode is still a session
+ * ===================================================================== */
+
+const odd = join(root, '2026', '01', '02', '00-00-99-000-session_!!!not-base64!!!');
+await mkdir(odd, { recursive: true });
+await writeFile(join(odd, 'messages.jsonl'), JSON.stringify({ role: 'user', content: 'odd' }) + '\n', 'utf8');
+// Newest on purpose, so membership is decided by "did the walk take it as a candidate" rather
+// than by where it happens to fall in the recency slice.
+const oddStamp = new Date(Date.UTC(2026, 0, 2));
+await utimes(join(odd, 'messages.jsonl'), oddStamp, oddStamp);
+const withOdd = await collectSessionCandidates(root);
+assert('a session whose name does not decode is still a candidate',
+ withOdd.recentEntries.some((e) => e.dir === odd));
+assert('a non-decoding name simply gets no fast path, and is not treated as absent',
+ decodeSessionIdFromDirName('00-00-99-000-session_!!!not-base64!!!') === null
+ && withOdd.byDecodedId.size === NAME_COUNT);
+
+/* =====================================================================
+ * 7 — the scan budget is a guard, and it says so
+ * ===================================================================== */
+
+assert('a walk inside the budget reports that it was not truncated', candidates.truncated === false);
+assert('the exhaustion path is a distinct answer from "no such session"',
+ SERVER.includes("code: 'session_scan_budget_exhausted'")
+ && SERVER.includes("code: 'session_not_found'"));
+assert('the two answers are reachable from different conditions',
+ /if \(candidates\.truncated\) \{[\s\S]{0,400}session_scan_budget_exhausted[\s\S]{0,400}?\n\s*\}\s*\n\s*return \{ ok: false, status: 404, code: 'session_not_found'/.test(SERVER));
+assert('the candidate budget still exists as a resource guard',
+ /const MAX_SESSION_CANDIDATES = (\d+);/.test(SERVER));
+
+// Exercised, not asserted as a string: a walk that runs out of budget has to *say* it, because
+// "we stopped looking" and "there is no such session" are different answers and only one is true.
+// The source check above cannot tell a `truncated` flag that is always false from one that is
+// wired to the budget it claims to report.
+const budgetRoot = mkdtempSync(join(tmpdir(), 'reachability-budget-'));
+const budget = Number(/const MAX_SESSION_CANDIDATES = (\d+);/.exec(SERVER)[1]);
+for (let i = 0; i < budget + 5; i += 1) {
+ // No prefix before the encoded id: a stray leading character would decode to a stray leading
+ // byte, fail the id charset check, and make every directory silently decode to nothing.
+ const dir = join(budgetRoot, '2026', '01', '01', `01-00-${String(i).padStart(3, '0')}-000-session_`
+ + Buffer.from(`over${String(i).padStart(4, '0')}zz`, 'utf8').toString('base64url'));
+ await mkdir(dir, { recursive: true });
+ await writeFile(join(dir, 'messages.jsonl'), JSON.stringify({ role: 'user', content: 'x' }) + '\n', 'utf8');
+}
+const exhausted = await collectSessionCandidates(budgetRoot);
+assert('a walk that runs out of candidate budget reports itself as truncated',
+ exhausted.truncated === true);
+assert('the budget still bounds the recent list',
+ exhausted.recentEntries.length === 30 && exhausted.recentEntries.length <= budget);
+assert('an over-budget store indexes no more than the budget allows',
+ exhausted.byDecodedId.size <= budget && exhausted.byDecodedId.size > 0);
+await rm(budgetRoot, { recursive: true, force: true });
+
+/* =====================================================================
+ * 8 — the basename entry point survives
+ * ===================================================================== */
+
+assert('a full directory basename can still name a session',
+ /basename\(candidate\.dir\) === requested/.test(SERVER));
+
+/* =====================================================================
+ * 9 — the picker route reads the recent list, not the index
+ * ===================================================================== */
+
+assert('the list route builds from recentEntries',
+ /\(await listEntries\(\)\)\.recentEntries/.test(SERVER));
+assert('the trajectory route keeps the recent list for the latest branch',
+ /const entries = candidates\.recentEntries;/.test(SERVER));
+
+/* =====================================================================
+ * 10 — the page names the session it is showing
+ * ===================================================================== */
+
+assert('the page seeds the pinned session from the host id',
+ /sessionId: detectHostSessionId\(\),/.test(CLIENT));
+assert('the picker can label a pinned session that the recent list omits',
+ /当前会话（不在最近列表）/.test(CLIENT));
+assert('a pinned id missing from the options gets one inserted, not a blank select',
+ /if \(select\.selectedIndex < 0\) \{[\s\S]{0,400}?select\.insertBefore\(pinned/.test(CLIENT));
+
+await rm(root, { recursive: true, force: true });
+
+console.log('[session-reachability] ' + pass + ' passed, ' + failures.length + ' failed');
+if (failures.length) {
+ console.log('FAILURES:\n - ' + failures.join('\n - '));
+ process.exit(1);
+}
+console.log('[session-reachability] OK');
\ No newline at end of file
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-sessions-etag.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-sessions-etag.mjs
new file mode 100644
index 0000000..154066a
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-sessions-etag.mjs
@@ -0,0 +1,252 @@
+/**
+ * `/api/sessions` is polled on a timer and rebuilt from scratch on every tick that moves, while
+ * `/api/trajectory` — the route that got a validator first — answers the same question with one.
+ * That asymmetry is not principled: the list is exactly as revalidatable as the payload, and it is
+ * the one a reader watches when nothing is happening.
+ *
+ * What makes a 304 sound here is narrower than "the tag covers every input that could change the
+ * payload". It is that the tag is computed from the same values the payload is built from, in the
+ * same request — so a matching tag means the bytes this request would produce are the bytes the
+ * caller already holds. The guard checks that property directly, on the function, rather than
+ * reading the route's regexes and hoping.
+ *
+ * The cases that are not obvious:
+ *
+ * 1. `?limit=10` and `?limit=20` are different payloads and must not satisfy one another. A
+ * tag over the visible slice alone would let a page that asked for 20 keep its copy while
+ * asking for 10, and get told nothing changed.
+ * 2. A rename. No file stat on the session directory moves when somebody renames the
+ * conversation in the app, so the titles have to be in the material or a rename is invisible
+ * until the descriptor cache happens to expire.
+ * 3. Field boundaries. With a plain separator, a title of `ab` beside an empty kind and a title
+ * of `a` beside a kind of `b` concatenate to the same string, so two different payloads
+ * share a tag. This is the one that a separator character fixes and nothing else catches.
+ * 4. The 304 has to be decided before any descriptor is built, or the route still pays for the
+ * work it is avoiding and the validator buys only the transfer.
+ * 5. `no-store` suppresses the 304 path at the browser's end, so a revalidated route has to
+ * advertise `no-cache` instead — which is what `revalidate: true` selects.
+ *
+ * `tests/mutate-sessions-etag.py` breaks each of these in the shipped source and requires this
+ * guard to report it by name.
+ */
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { sessionsValidator } from '../miniapp/node/server.mjs';
+
+const HERE = fileURLToPath(new URL('.', import.meta.url));
+const SERVER = fileURLToPath(new URL('../miniapp/node/server.mjs', import.meta.url));
+const CLIENT = fileURLToPath(new URL('../miniapp/client/index.html', import.meta.url));
+const server = readFileSync(SERVER, 'utf8');
+const html = readFileSync(CLIENT, 'utf8');
+
+let pass = 0;
+const failures = [];
+function assert(name, cond) {
+ if (cond) pass += 1;
+ else failures.push(name);
+}
+
+/* ---------- fixtures: directories shaped like the ones the walk returns ---------- */
+
+/** The session id is base64url-encoded after a `-session_` marker, so the dir name round-trips. */
+function dirFor(id) {
+ return '/store/2026/10/10/03-45-31-084-session_' + Buffer.from(id, 'utf8').toString('base64url');
+}
+
+const A = 'mvs_0000000000000000000000000000aaaa';
+const B = 'mvs_0000000000000000000000000000bbbb';
+const visible = [
+ { dir: dirFor(A), sizeBytes: 1024, lastActiveAt: 1700000000 },
+ { dir: dirFor(B), sizeBytes: 2048, lastActiveAt: 1700000001 },
+];
+const noTitles = new Map();
+const titled = new Map([
+ [A, { title: '第一段会话', kind: 'conversation' }],
+ [B, { title: '第二段会话', kind: null }],
+]);
+
+/* ---------- 1: the material moves exactly when the payload does ---------- */
+
+// Nothing changed. Same entries, same titles, same limit.
+assert('an unchanged list produces an unchanged tag',
+ sessionsValidator(visible, noTitles, 20) === sessionsValidator(visible, noTitles, 20));
+
+// The three things the payload is built from, one at a time.
+assert('a grown active file moves the tag',
+ sessionsValidator([{ ...visible[0], sizeBytes: 1025 }, visible[1]], noTitles, 20)
+ !== sessionsValidator(visible, noTitles, 20));
+
+assert('a newer mtime moves the tag',
+ sessionsValidator([{ ...visible[0], lastActiveAt: 1700000002 }, visible[1]], noTitles, 20)
+ !== sessionsValidator(visible, noTitles, 20));
+
+// The rename. Both halves of a row's metadata, because the picker renders both — and each has to
+// be isolated, or the assertion passes on the other field and the one it names is untested. These
+// two maps differ in the title and in nothing else.
+const beforeRename = new Map([[A, { title: '旧名字', kind: 'conversation' }], [B, { title: '第二段会话', kind: null }]]);
+const afterRename = new Map([[A, { title: '新名字', kind: 'conversation' }], [B, { title: '第二段会话', kind: null }]]);
+assert('a renamed session moves the tag',
+ sessionsValidator(visible, beforeRename, 20) !== sessionsValidator(visible, afterRename, 20));
+
+// `kind` is what puts the sub-agent badge on the row, so it is reader-visible on its own. Same
+// discipline: the title is held constant here.
+const kindBefore = new Map([[A, { title: '第一段会话', kind: null }]]);
+const kindAfter = new Map([[A, { title: '第一段会话', kind: 'conversation' }]]);
+assert('a changed session kind moves the tag, even with no title',
+ sessionsValidator(visible, kindBefore, 20) !== sessionsValidator(visible, kindAfter, 20));
+
+// The parent is what puts 「子会话」 on the row, so it is reader-visible on its own and belongs in
+// the material for the same reason `kind` does. The title AND the kind are held constant here, so
+// this cannot pass on either of them: the two maps differ in the parent and in nothing else.
+const parentBefore = new Map([[A, { title: '第一段会话', kind: 'conversation', parent: null }]]);
+const parentAfter = new Map([[A, { title: '第一段会话', kind: 'conversation', parent: 'mvs_0000000000000000000000000000bbbb' }]]);
+assert('a changed parent moves the tag, even with the title and kind held constant',
+ sessionsValidator(visible, parentBefore, 20) !== sessionsValidator(visible, parentAfter, 20));
+
+// And the null case, which is the other half: a row with no parent and a row whose parent is the
+// empty string render identically on the page, so they must not read as a change.
+const parentEmpty = new Map([[A, { title: '第一段会话', kind: 'conversation', parent: '' }]]);
+assert('an empty parent and a null one agree — they render the same row',
+ sessionsValidator(visible, parentBefore, 20) === sessionsValidator(visible, parentEmpty, 20));
+
+// A null title and an absent one are the same payload — the picker falls back to 「会话 <id>」 — so
+// they have to be the same tag, or every poll would look like a change.
+const nullTitle = new Map([[A, { title: null, kind: 'conversation' }]]);
+const nullTitleBoth = new Map([[A, { title: null, kind: 'conversation' }], [B, { title: null, kind: null }]]);
+assert('a null title and an absent one agree — they render the same row',
+ sessionsValidator(visible, nullTitle, 20) === sessionsValidator(visible, nullTitleBoth, 20));
+
+// A session entering or leaving the visible slice.
+assert('one more session in view moves the tag',
+ sessionsValidator([...visible, { dir: dirFor('mvs_0000000000000000000000000000cccc'), sizeBytes: 1, lastActiveAt: 1 }], noTitles, 20)
+ !== sessionsValidator(visible, noTitles, 20));
+
+/* ---------- 2: the request itself is part of the identity ---------- */
+
+assert('a different limit moves the tag',
+ sessionsValidator(visible, noTitles, 10) !== sessionsValidator(visible, noTitles, 20));
+
+/* ---------- 3: the separator, which is the case nothing else catches ---------- */
+
+// Same characters, different boundaries. Without a separator that cannot appear in a value, both
+// of these hash to the same string and a 304 is served for a payload the caller never held.
+const splitOne = new Map([[A, { title: 'ab', kind: '' }]]);
+const splitTwo = new Map([[A, { title: 'a', kind: 'b' }]]);
+assert('a title/kind split cannot be hidden inside the separator',
+ sessionsValidator(visible, splitOne, 20) !== sessionsValidator(visible, splitTwo, 20));
+
+// The other half, and the one this file got wrong for a while. Above used to be followed by
+// `the separator is a character a title cannot contain`, whose check was a regex for a NUL in the
+// function body: it tested the IDENTITY of the separator and called the result a property. The
+// property is false -- a SQLite TEXT column can hold any character, the NUL included -- so a title of
+// `a<NUL>b` beside a kind of `c` and a title of `a` beside a kind of `b<NUL>c` produced byte-identical
+// material. That assertion passed for a reason, not because the thing it names was true.
+//
+// So the rule is now stated as the property it always was, and checked as one: two metadata tuples a
+// reader can tell apart must not share a material, with the ambiguous character placed INSIDE a value
+// rather than at a boundary. No choice of separator character can satisfy this, which is the point --
+// it has to be satisfied by the representation, not by the delimiter.
+const NUL = String.fromCharCode(0);
+const insideSeparator = new Map([[A, { title: 'a' + NUL + 'b', kind: 'c', parent: 'p' }]]);
+const insideSeparatorShifted = new Map([[A, { title: 'a', kind: 'b' + NUL + 'c', parent: 'p' }]]);
+assert('a separator-like character inside a value cannot merge two readable rows into one tag',
+ sessionsValidator(visible, insideSeparator, 20)
+ !== sessionsValidator(visible, insideSeparatorShifted, 20));
+
+// The same character in the parent -- the third field, and the one nobody had looked at.
+const parentInside = new Map([[A, { title: 't', kind: 'k', parent: 'a' + NUL + 'b' }]]);
+const parentInsideShifted = new Map([[A, { title: 't', kind: 'k' + NUL + 'a', parent: 'b' }]]);
+assert('the same collision in the parent cannot merge two readable rows either',
+ sessionsValidator(visible, parentInside, 20)
+ !== sessionsValidator(visible, parentInsideShifted, 20));
+
+// The material is still built in server.mjs, which is what the three assertions above are testing
+// rather than a copy of it.
+const material = /export function sessionsValidator\(visible, titles, limit\) \{[\s\S]*?\n\}/.exec(server);
+assert('the material is still built in server.mjs', material !== null);
+
+// Empty input, because the route calls this before it knows the walk found anything.
+assert('an empty list still produces a material', typeof sessionsValidator([], noTitles, 20) === 'string'
+ && sessionsValidator([], noTitles, 20).length > 0);
+
+/* ---------- 4: the route uses it, and decides the 304 before it builds anything ---------- */
+
+const route = /const handleSessions = async \(response, url\) => \{[\s\S]*?\n \};/.exec(server);
+assert('the list route is still in the shipped source', route !== null);
+
+if (route) {
+ const code = route[0];
+ assert('the route derives its tag from sessionsValidator',
+ /weakETag\(sessionsValidator\(visible, titles, limit\)\)/.test(code));
+
+ // The same three values on both sides. A validator computed from anything the payload does not
+ // use is a validator about a different payload. The pairing itself is settled by the call above
+ // passing `titles` and `visible` by name; this asserts the body loop reads the same binding.
+ assert('the payload is built from the same visible slice the tag was', /for \(const entry of visible\)/.test(code));
+ assert('the payload consults the titles the tag was built from',
+ /const meta = titles\.get\(/.test(code));
+
+ // The whole point: no descriptor work before the 304 is decided.
+ const tagAt = code.indexOf('etagMatches(requestEtag, etag)');
+ const describeAt = code.indexOf('describeSession(entry)');
+ assert('the 304 is decided before any descriptor is built',
+ tagAt !== -1 && describeAt !== -1 && tagAt < describeAt);
+
+ // ...and the reused body answers the request that arrives with no validator at all.
+ assert('an unchanged list reuses the bytes it already built',
+ /sessionsBody\.material === etag \? sessionsBody\.body : null/.test(code));
+
+ // A 304 carries no body and must not advertise one; a revalidated response must not say
+ // `no-store`, because that suppresses the 304 path in the browser as well.
+ assert('the 304 is sent through the revalidating sender',
+ /sendJsonBody\(response, 304, '', \{ etag, revalidate: true \}\)/.test(code));
+ assert('the 200 carries the tag and the revalidating cache-control',
+ /sendJsonBody\(response, 200, body, \{ etag, revalidate: true \}\)/.test(code));
+ // sendJson hardcodes no-store, so reaching for it here would silently drop the validator.
+ assert('the list no longer answers through the non-revalidating sender',
+ !/sendJson\(response, 200/.test(code));
+
+ assert('the validator is cleared on dispose',
+ /sessionsBody = \{ material: '', body: null \};[\s\S]{0,240}?descriptorCache\.clear\(\)/.test(server));
+}
+
+/* ---------- 5: the page has to actually use it ---------- */
+
+const clientJs = html
+ .replace(/\/\*[\s\S]*?\*\//g, '')
+ .replace(/^[ \t]*\/\/.*$/gm, '');
+
+assert('the page sends the list validator back',
+ /headers\['If-None-Match'\] = state\.sessionsEtag;/.test(clientJs));
+
+assert('the page keeps every piece of state on a 304',
+ /if \(response\.status === 304\) \{[\s\S]{0,200}?return \{ changed: false/.test(clientJs));
+
+// A 304 that still re-rendered would be correct and pointless; the point is not touching state.
+assert('a 304 does not re-render the picker',
+ /if \(response\.status === 304\) \{[\s\S]{0,300}?renderSessionSelect/.test(clientJs) === false);
+
+// One writer per field, and a validator bound to the request it was taken against. A list
+// validator carried across a different limit would ask a question about a payload it is not for.
+assert('the list validator is bound to the request key',
+ /state\.sessionsEtagFor === key/.test(clientJs) && /var key = 'limit=20';/.test(clientJs));
+
+// A refresh button that revalidated the list would be a refresh of half the page.
+assert('a manual refresh drops the list validator',
+ /if \(manual\) \{\s*state\.sessionsEtag = '';\s*state\.sessionsEtagFor = '';/.test(clientJs));
+
+assert('the refresh button is the only caller that asks for a manual list',
+ /fetchSessions\(true\)/.test(clientJs)
+ && (clientJs.match(/fetchSessions\(true\)/g) || []).length === 1);
+
+// The two validators are separate fields, not one shared pair. Sharing would let a list tag
+// satisfy a trajectory request or the other way round.
+assert('the list and trajectory validators are separate fields',
+ /state\.sessionsEtag\b/.test(clientJs) && !/state\.etag = state\.sessionsEtag/.test(clientJs));
+
+console.log('[sessions-etag] ' + pass + ' passed, ' + failures.length + ' failed');
+if (failures.length) {
+ console.log('FAILURES:\n - ' + failures.join('\n - '));
+ process.exit(1);
+}
+console.log('[sessions-etag] OK');
\ No newline at end of file
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-time-range.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-time-range.mjs
index 18e5f40..22e1649 100644
--- a/plugins/avatasia/mmc-trajectory/tests/verify-time-range.mjs
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-time-range.mjs
@@ -14,27 +14,190 @@ import { readFileSync } from 'node:fs';
import { join } from 'node:path';
import { fileURLToPath } from 'node:url';
import vm from 'node:vm';
+import { buildMessageIdentity, buildTrajectoryPayload, openerRowsForView } from '../miniapp/node/server.mjs';
const HERE = fileURLToPath(new URL('.', import.meta.url));
const HTML = join(HERE, '..', 'miniapp', 'client', 'index.html');
-// NOT part of `run.mjs`, and deliberately so. Its assertions are calibrated against a full
-// multi-generation session -- `stats.messages > 1000`, and a checkpoint that sits inside a turn
-// rather than being one -- and the committed fixture is a single-file session of a few dozen
-// rows. Reproducing those numbers faithfully would mean committing a multi-megabyte payload.
-// Relaxing them to fit would be worse: the point of this file is the timezone arithmetic, which
-// a small window would stop exercising.
+const html = readFileSync(HTML, 'utf8');
+
+/* ---------- the session section 3 runs against ---------- */
+// WHY IT IS BUILT HERE. This file was excluded from `run.mjs` for its whole life, and the reason
+// was always the input: its assertions want a session with more than a thousand messages spanning a
+// local midnight, and the only one available was whatever the machine running the service happened
+// to have. The committed fixture is sixty rows of one afternoon. So the file sat in the directory,
+// looked like coverage, and proved nothing — 509 lines of timezone arithmetic that no run exercised.
+//
+// Relaxing the numbers to fit the fixture was the alternative on the table and it is worse: the
+// whole point of the file is that a bound is a subtraction, and a window that no longer crosses a
+// midnight stops exercising the machine's distance from Greenwich at all.
+//
+// Committing a multi-megabyte real transcript was the other alternative. Rejected: it puts a
+// session's contents in the package, and this is a fixture, not a corpus.
//
-// Run it against a booted service instead:
-// node tests/verify-time-range.mjs <port>
-const port = process.argv[2];
-if (!port) {
- console.error('usage: node verify-time-range.mjs <port> (needs a running Mini App)');
- process.exit(2);
+// So the transcript is synthetic and built here, and it is handed to the server's OWN
+// `buildTrajectoryPayload` — the same exported function the `/api/trajectory` route calls. What is
+// synthetic is the conversation; the `stats` this compares against is still computed by the code
+// under test, in the file that serves it. Section 3 asks "does the page's re-derivation agree with
+// the server's numbers", and both sides of that question are still the real implementations.
+//
+// Four properties are load-bearing, and none of them is "big":
+//
+// - over a thousand messages, or the half-range comparison compares two numbers too close to tell
+// - a local midnight with rows on both sides of it, or the wall-clock arithmetic is never exercised
+// - EVERY field section 3 compares is non-zero, or the comparison is `0 === 0`: green, and not
+// evidence of anything. That includes the two compaction counters, so the session carries a
+// turn that is nothing but a checkpoint. Leaving them at zero looked like a deliberate choice
+// — "no bare checkpoint turn, or the two sides re-derive different populations" — and it was
+// exactly backwards: it meant `stats.compactions += 1` and `stats.compactionTurns += 1` could
+// both be deleted from the page and this guard would still pass. A turn that is nothing but a
+// checkpoint is also the only way that branch of the classifier is reachable, so it is what
+// makes the two counters comparable rather than assumed. The product invariant that a real
+// session has none of these belongs to `verify-compaction-turn.mjs`; asserting it here proved
+// nothing, because the number it asserted was this file's own choice.
+const SYNTHETIC_TURNS = 400;
+// Eight hours from 20:00 local puts the midnight four hours in, with roughly half the records on
+// each side of it — dense enough that the ±5 minute window section 3b picks is never empty, and
+// spread thinly enough that the window stays far under the tenth-of-the-session slice it asserts.
+const SYNTHETIC_SPAN_MS = 8 * 3600 * 1000;
+
+/**
+ * A local wall-clock instant far enough from any daylight-saving step to span one safely.
+ *
+ * Anchored to the calendar rather than to a UTC instant on purpose: the crossing under test is a
+ * LOCAL midnight, so a fixed UTC start would place it somewhere else on every other machine's
+ * clock and the file would be testing the store's timezone instead of the arithmetic. The retry is
+ * for the remaining case — a zone whose transition falls inside the eight hours, where the wall
+ * clock moves without `relativeMs` moving and the two readings section 3b compares part company.
+ *
+ * @returns {number} epoch ms
+ */
+function syntheticStart() {
+ let start = new Date(2026, 9, 10, 20, 0, 0).getTime();
+ for (let guard = 0; guard < 14; guard += 1) {
+ const offset = new Date(start).getTimezoneOffset();
+ if (offset === new Date(start + SYNTHETIC_SPAN_MS).getTimezoneOffset()) return start;
+ start = new Date(2026, 9, 10 + guard + 1, 20, 0, 0).getTime();
+ }
+ return start;
}
-const BASE_URL = 'http://127.0.0.1:' + port;
-const html = readFileSync(HTML, 'utf8');
+/**
+ * @returns {Array<Record<string, any>>} rows in the file shape the store keeps
+ */
+function buildRows(start) {
+ /** @type {Array<{ turn: string, message: Record<string, any>, stamp: number }>} */
+ const plan = [];
+ let at = 0;
+ const add = (turnId, message) => {
+ at += 1;
+ plan.push({ turn: turnId, message, stamp: at });
+ };
+ const assistant = (t, blocks, stopReason) => ({
+ role: 'assistant',
+ content: blocks,
+ api: 'synthetic-api', provider: 'synthetic-provider', model: 'synthetic-model',
+ usage: {
+ input: 1000 + t, output: 40 + (t % 17), cacheRead: 9000 + t * 2, cacheWrite: 7 * t,
+ totalTokens: 1000 + t + 40 + (t % 17) + 9000 + t * 2 + 7 * t,
+ },
+ stopReason,
+ });
+ const thinking = (t) => ({ type: 'thinking', thinking: 'synthetic reasoning ' + t, thinkingSignature: 'sig-' + t });
+
+ for (let t = 1; t <= SYNTHETIC_TURNS; t += 1) {
+ const turnId = 'turn-' + String(t).padStart(4, '0');
+
+ // Every twelfth turn is the model resuming without a new reader message — the shape the
+ // server files as a continuation. It needs a `reply` record to be closed, otherwise it lands
+ // in `turnsWithoutPrompt` instead and the classifier's second branch is never taken.
+ if (t % 12 === 5) {
+ add(turnId, assistant(t, [thinking(t), { type: 'text', text: 'synthetic resumed ' + t }], 'stop'));
+ continue;
+ }
+
+ // Every twenty-third turn is a checkpoint that opened a turn the file never named — the only
+ // shape the server classifies as `compaction`, and the reason the two compaction counters are
+ // compared rather than assumed. Without it the page's `+= 1` for either one could be deleted
+ // and every assertion below would still pass on `0 === 0`.
+ if (t % 23 === 7) {
+ add(turnId, {
+ role: 'compactionSummary',
+ summary: 'synthetic checkpoint ' + t,
+ tokensBefore: 1000 + t,
+ });
+ continue;
+ }
+
+ // Every seventeenth turn has neither an opener nor a closing reply, so the classifier falls
+ // through to its last branch. Left uncovered, the page's `else` arm was being compared with
+ // the server's against zero.
+ if (t % 17 === 3) {
+ add(turnId, assistant(t, [
+ thinking(t),
+ { type: 'text', text: 'synthetic unfinished ' + t },
+ { type: 'toolCall', id: 'call_' + t + '_0', name: 'tool_' + (t % 7), arguments: { n: t } },
+ ], 'toolUse'));
+ add(turnId, {
+ role: 'toolResult',
+ toolCallId: 'call_' + t + '_0',
+ toolName: 'tool_' + (t % 7),
+ content: [{ type: 'text', text: 'synthetic result ' + t }],
+ isError: false,
+ });
+ continue;
+ }
+
+ add(turnId, { role: 'user', content: [{ type: 'text', text: 'synthetic prompt ' + t }] });
+
+ // `closed` is not a stop reason: the server sets it from a record of kind `reply`, and that
+ // kind is assigned from the literal string `stop` — anything else projects as `narration`. So a
+ // turn only closes when a second assistant row follows its tool results carrying `'stop'`, and
+ // a generator that omits it — or spells it `'endTurn'` — leaves every turn open.
+ const asks = t === SYNTHETIC_TURNS;
+ const open = asks || t % 9 === 4;
+ const callIds = ['call_' + t + '_0', 'call_' + t + '_1'];
+ // The last turn calls a tool whose answer arrives through the tool, which is what makes it a
+ // question to the reader (`qaTurns`) rather than just an unfinished turn.
+ const callNames = asks ? ['ask_user', 'tool_' + (t % 7)] : ['tool_' + (t % 7), 'tool_' + ((t + 3) % 7)];
+ add(turnId, assistant(t, [
+ thinking(t),
+ { type: 'text', text: 'synthetic answer ' + t },
+ { type: 'toolCall', id: callIds[0], name: callNames[0], arguments: { n: t } },
+ { type: 'toolCall', id: callIds[1], name: callNames[1], arguments: { n: t } },
+ ], 'toolUse'));
+
+ // Two tool results, and every ninth one fails — so `errors` is non-zero and the
+ // de-duplication of errors by message id has something to de-duplicate.
+ for (let c = 0; c < 2; c += 1) {
+ add(turnId, {
+ role: 'toolResult',
+ toolCallId: callIds[c],
+ toolName: callNames[c],
+ content: [{ type: 'text', text: 'synthetic result ' + t + '.' + c }],
+ isError: (t + c) % 9 === 0,
+ });
+ }
+
+ if (!open) add(turnId, assistant(t, [thinking(t), { type: 'text', text: 'synthetic close ' + t }], 'stop'));
+ // A prompt typed while the turn was still running. The server projects a user row that is not
+ // its turn's opener as a steer rather than as a message, so without one `steers` is 0 on both
+ // sides and the check degenerates to comparing 0 with 0.
+ else if (!asks) add(turnId, { role: 'user', content: [{ type: 'text', text: 'synthetic steer ' + t }] });
+ }
+
+ // Timestamps are laid over the span only once the row count is known, so the density does not
+ // depend on how many rows a turn happens to contribute.
+ const step = SYNTHETIC_SPAN_MS / plan.length;
+ return plan.map((entry, i) => ({
+ message_id: 'msg-' + String(i + 1).padStart(5, '0'),
+ turn_id: entry.turn,
+ message: { ...entry.message, timestamp: start + Math.round(i * step) },
+ }));
+}
+
+const SYNTHETIC_START = syntheticStart();
+const SYNTHETIC_ROWS = buildRows(SYNTHETIC_START);
/* ---------- helpers ---------- */
let pass = 0;
@@ -242,8 +405,34 @@ assert('the unreadable branch names the range still in force', /hasTimeRange\(\)
assert('and does not blame the value', noBase.textContent.indexOf('无法识别') < 0);
}
-/* ---------- 3) against the live session ---------- */
-const payload = await (await fetch(BASE_URL + '/api/trajectory')).json();
+/* ---------- 3) against a projected session ---------- */
+// The one line that used to be `await fetch(BASE_URL + '/api/trajectory')`. Same builder, no
+// service: what the route adds around `buildTrajectoryPayload` is a handful of `session.*` fields
+// this file never reads, which is the same observation `make-payload.mjs` is built on.
+//
+// IT IS A GENERATION VIEW OVER A LINEAGE, not the whole conversation in one pass, and that is not
+// tidiness — it is what makes `messagesAll` testable. `messagesAll` counts the conversation;
+// `messages` counts what this view holds. When the two are the same number, re-scoping the whole
+// figure on the page is undetectable, and that is precisely the rule the assertion below states.
+// A single-view fixture made them equal, and 「全程 N」 was a comparison of the page with itself.
+const GENERATION_SIZE = 100;
+const FIRST_VIEWED_GENERATION = 1; // the view is generations 1..3 — it straddles the local midnight
+const generationOf = (row) => Math.floor((Number(row.turn_id.slice(5)) - 1) / GENERATION_SIZE);
+
+const occurrences = SYNTHETIC_ROWS.map((row) => ({ row, generation: generationOf(row), locator: null }));
+const identity = buildMessageIdentity(occurrences);
+const viewOccurrences = occurrences.filter((o) => o.generation >= FIRST_VIEWED_GENERATION);
+const viewRows = viewOccurrences.map((o) => o.row);
+
+const payload = buildTrajectoryPayload({
+ session: { id: 'mvs_0000000000000000000000000000000f', createdAtMs: SYNTHETIC_START },
+ rows: viewRows,
+ identity,
+ openerByTurn: openerRowsForView(identity, viewOccurrences),
+ sizeBytes: viewRows.length,
+ truncated: false,
+ generations: [],
+});
const scoped = { console, state: { payload, flat: [], rangeFrom: null, rangeTo: null, rangeCutoff: null } };
scoped.state.flat = payload.turns.flatMap((turn) => turn.records.map((record) => ({ turn, record })));
@@ -276,20 +465,49 @@ const whole = scoped.scopedStats();
const FIELDS = [
'messages', 'userMessages', 'toolCalls', 'toolResults', 'thinkingBlocks', 'errors',
'compactions', 'turnsWithPrompt', 'continuationTurns', 'qaTurns', 'openTurns',
- 'turnsWithoutPrompt', 'compactionTurns', 'durationMs'
+ 'turnsWithoutPrompt', 'compactionTurns', 'durationMs',
+ // Added 2026-10-15. This list is hand-written, and `steers` was missing from it — so the one
+ // field the re-scoped stats had actually lost went unchecked. `client-check.mjs` now reads both
+ // halves off the function itself, which is what stops the NEXT one; this entry is the direct
+ // number check for this one.
+ 'steers'
];
+const TOKEN_FIELDS = ['input', 'output', 'cacheRead', 'cacheWrite', 'totalTokens'];
for (const field of FIELDS) {
check('whole-session ' + field, whole[field], payload.stats[field]);
}
-for (const field of ['input', 'output', 'cacheRead', 'cacheWrite', 'totalTokens']) {
+for (const field of TOKEN_FIELDS) {
check('whole-session tokens.' + field, whole.tokens[field], payload.stats.tokens[field]);
}
+// The precondition of every comparison above, asserted for all twenty numbers rather than for the
+// two that happened to break first. `0 === 0` is not evidence that the page counts a field; it is
+// evidence that nothing counted it and both sides agreed. This used to read `compactionTurns === 0`
+// — the fixture guaranteeing the precondition of the comparison it was about to perform, so the
+// page's `+= 1` could be deleted outright and the guard stayed green. The other eighteen fields were
+// in exactly that state and nothing said so, which is the same defect one field narrower. Driven off
+// FIELDS, so the next field added to that list arrives covered instead of waiting to be discovered.
+for (const field of FIELDS) {
+ assert('the fixture makes ' + field + ' non-zero, so the page is counted against something',
+ typeof payload.stats[field] === 'number' && payload.stats[field] !== 0);
+}
+for (const field of TOKEN_FIELDS) {
+ assert('the fixture makes tokens.' + field + ' non-zero, so the page is counted against something',
+ typeof payload.stats.tokens[field] === 'number' && payload.stats.tokens[field] !== 0);
+}
+
// The one field that must NOT be re-scoped: 「全程 N」 beside the range is the comparison the
// reader wants, and re-scoping it would leave the note with nothing to say.
check('messagesAll stays whole-session', whole.messagesAll, payload.stats.messagesAll);
-assert('the fixture is big enough to be worth checking', payload.stats.messages > 1000);
-assert('compactionTurns is 0 after the turn fix, as it must be', payload.stats.compactionTurns === 0);
+// ...and the precondition that makes it a check rather than an equality with itself. Without this
+// the assertion above is satisfied by any page that re-scopes the whole figure onto the view, and
+// that is the whole rule.
+assert('the conversation and this view are different sizes, so the two cannot be swapped',
+ payload.stats.messagesAll > payload.stats.messages);
+// The preconditions of section 3, asserted rather than assumed. A generator edited down to a
+// tenth of its size would leave every assertion below it comparing two near-identical small
+// numbers — still green, and no longer evidence of anything.
+assert('the synthetic session is big enough to be worth checking', payload.stats.messages > 1000);
// A narrower range must produce strictly fewer messages, or the filter is not filtering.
const halfEnd = Math.floor((mins + maxs) / 2);
@@ -324,10 +542,83 @@ check('half-range duration == span of the rows kept',
const START = payload.session.startedAt;
assert('the payload carries a session start', Number.isFinite(START) && START > 0);
{
- const wallFrom = new Date(2026, 9, 10, 23, 50, 0).getTime();
- const wallTo = new Date(2026, 9, 11, 0, 20, 0).getTime();
- const from = pure.parseRangeBound('2026-10-10T23:50', START);
- const to = pure.parseRangeBound('2026-10-11T00:20', START);
+ /* The window is chosen from the payload, not written down.
+ *
+ * It used to be a literal -- 23:50 to 00:20 on fixed October dates -- which made this section a
+ * statement about the store rather than about the code. When that session was compacted away
+ * both sides of the equality below were 0, so it passed while comparing nothing; only the
+ * assertion after it noticed. A literal window is the one input here that silently stops being
+ * evidence, and nothing about the code can tell you that.
+ *
+ * What stays literal is the part that makes it worth running: the window crosses a LOCAL
+ * midnight, so converting each bound really is a subtraction the machine's distance from
+ * Greenwich gets to corrupt. */
+ const pad2n = (n) => (n < 10 ? '0' + n : String(n));
+ const dayKey = (ts) => {
+ const d = new Date(ts);
+ return d.getFullYear() + '-' + pad2n(d.getMonth() + 1) + '-' + pad2n(d.getDate());
+ };
+ const wallClock = (ts) => {
+ const d = new Date(ts);
+ return dayKey(ts) + ' ' + pad2n(d.getHours()) + ':' + pad2n(d.getMinutes()) + ':' + pad2n(d.getSeconds());
+ };
+ const stamped = scoped.state.flat
+ .map((e) => e.record.timestamp)
+ .filter((ts) => Number.isFinite(ts))
+ .sort((a, b) => a - b);
+
+ const PAD = 5 * 60000;
+ const wholeMinute = (ms, dir) => (dir < 0 ? Math.floor(ms / 60000) * 60000 : Math.ceil(ms / 60000) * 60000);
+ const span = stamped.length ? stamped[stamped.length - 1] - stamped[0] : 0;
+ let chosen = null;
+ let cursor = stamped.length ? new Date(stamped[0]) : null;
+ if (cursor) {
+ cursor.setHours(0, 0, 0, 0);
+ if (cursor.getTime() < stamped[0]) cursor.setDate(cursor.getDate() + 1);
+ for (let guard = 0; cursor.getTime() <= stamped[stamped.length - 1] && guard < 400; guard += 1) {
+ const midnight = cursor.getTime();
+ // Reached from the rows themselves rather than from a fixed number of minutes: the reader
+ // steps away, and on this session the last record before the one usable midnight was 41
+ // minutes early. A window of ±10 minutes would have found nothing and reported the store's
+ // habits as a fault in the arithmetic. Both ends have to exist, and the two ends together
+ // have to stay a small slice, or it is not a window.
+ let beforeAt = -1;
+ let afterAt = -1;
+ for (let i = 0; i < stamped.length; i += 1) {
+ if (stamped[i] < midnight) beforeAt = stamped[i];
+ else {
+ afterAt = stamped[i];
+ break;
+ }
+ }
+ const lo = beforeAt < 0 ? NaN : wholeMinute(beforeAt - PAD, -1);
+ const hi = afterAt < 0 ? NaN : wholeMinute(afterAt + PAD, 1);
+ if (Number.isFinite(lo) && Number.isFinite(hi) && hi - lo <= span / 4) {
+ chosen = { wallFrom: lo, wallTo: hi };
+ break;
+ }
+ cursor = new Date(cursor.getTime());
+ cursor.setDate(cursor.getDate() + 1);
+ }
+ }
+ if (!chosen) {
+ // Failing by name beats carrying on: everything below reads `chosen`, and a guard that
+ // limps past its own precondition reports the arithmetic's faults for the store's.
+ console.log('[3b] no local midnight inside this session has rows on both sides of it');
+ console.log('FAILED_NAMES\t'
+ + JSON.stringify(['the session spans a local midnight with rows on both sides of it']));
+ process.exit(1);
+ }
+ const wallFrom = chosen.wallFrom;
+ const wallTo = chosen.wallTo;
+ assert('the window crosses a local midnight', dayKey(wallFrom) !== dayKey(wallTo));
+
+ // Typed into the pickers as the control actually sends them, so the strings under test are the
+ // ones the page reads rather than ones written to match the arithmetic.
+ const fromText = pure.formatRangeInput(wallFrom);
+ const toText = pure.formatRangeInput(wallTo);
+ const from = pure.parseRangeBound(fromText, START);
+ const to = pure.parseRangeBound(toText, START);
check('a pair of bounds across midnight converts to the window it names',
[from, to], [wallFrom - START, wallTo - START]);
@@ -341,13 +632,13 @@ assert('the payload carries a session start', Number.isFinite(START) && START >
scoped.state.rangeFrom = from;
scoped.state.rangeTo = to;
- scoped.state.rangeFromText = '2026-10-10T23:50';
- scoped.state.rangeToText = '2026-10-11T00:20';
+ scoped.state.rangeFromText = fromText;
+ scoped.state.rangeToText = toText;
const stats = scoped.scopedStats();
check('the KPI over a date range equals the distinct ids of those rows',
stats.messages, new Set(byClock.map((e) => e.record.id)).size);
check('and the page-level label reads back as the wall clock it was typed as',
- scoped.timeRangeLabel(), '2026-10-10 23:50:00 – 2026-10-11 00:20:00');
+ scoped.timeRangeLabel(), wallClock(wallFrom) + ' – ' + wallClock(wallTo));
// And the same window, typed into the pickers as what the control actually sends.
check('the control round trips back to the same offsets',
@@ -498,9 +789,16 @@ assert('the range opens unset', /rangeFrom: null,\s*\n\s*rangeTo: null,/.test(st
// two-line regex failed on that instead of on anything wrong — it had frozen the shape of the
// function rather than what the function has to do. What matters is that both are cleared and
// that the query goes before the range, so the ledger never re-renders once with neither.
+// The reset then moved into `resetBaseFilters`, and the same mistake repeated one indirection
+// later: the lines were read out of `clearFilters`, which no longer has them, so the assertion
+// went red on a code change that broke nothing. Naming the function that owns the rule fixes it;
+// dropping the hop would not have. Checked order alone would pass on a 清除筛选 that had stopped
+// calling the reset altogether, which is a filter the reader cannot see and cannot turn off.
const clearSrc = fnSource('function clearFilters()');
-const queryAt = clearSrc.indexOf("state.query = '';");
-const rangeAt = clearSrc.indexOf('clearTimeRange();');
+assert('清除筛选 runs the base reset', /resetBaseFilters\(\);/.test(clearSrc));
+const resetSrc = fnSource('function resetBaseFilters()');
+const queryAt = resetSrc.indexOf("state.query = '';");
+const rangeAt = resetSrc.indexOf('clearTimeRange();');
assert('清除筛选 also drops the range', queryAt >= 0 && rangeAt > queryAt);
// A picker the page could not read must not reach the filter. `NaN` fails the `isCount` test
@@ -512,7 +810,7 @@ assert('an unreadable box is not assigned',
/* ---------- report ---------- */
console.log('[1] parse / format / compare: ' + pass + ' assertions, ' + failures.length + ' failed');
-console.log(' fixture: ' + payload.stats.messages + ' messages, ' + scoped.state.flat.length + ' records, '
+console.log(' session: ' + payload.stats.messages + ' messages, ' + scoped.state.flat.length + ' records, '
+ payload.turns.length + ' turns, span ' + maxs + ' ms');
// Machine-readable, so the mutation runner can require the *named* guard to fire instead of
// matching on a substring that any nearby assertion can satisfy by accident. Assertion names
diff --git a/plugins/avatasia/mmc-trajectory/tests/verify-trajectory-cache.mjs b/plugins/avatasia/mmc-trajectory/tests/verify-trajectory-cache.mjs
new file mode 100644
index 0000000..96b0d36
--- /dev/null
+++ b/plugins/avatasia/mmc-trajectory/tests/verify-trajectory-cache.mjs
@@ -0,0 +1,170 @@
+/**
+ * The rendered-body cache may not keep four versions of one question alive.
+ *
+ * `trajectoryCacheKey()` carries the active file's size and mtime, so a session that is still
+ * being written to mints a new key every time it grows. Every miss then stores another complete
+ * body — `?since=` included, because the cache entry and /raw both need the whole thing. With a
+ * plain FIFO over keys, four versions of the SAME (session, slice) sit there at once, and three of
+ * them can no longer be reached: /raw resolves the current key, and the page's next poll produces
+ * a newer one. Measured on a 9.1 MB session polled every 8s: four bodies, 49.6 MB, after four polls.
+ *
+ * So an entry carries the family it answers for — the session directory plus the requested slice —
+ * and storing a new one drops its predecessor. Everything that decides whether the answer changed
+ * stays in the key; everything that decides what the answer IS stays in the family.
+ *
+ * Read-only: imports the pure helpers, never starts the runtime.
+ * mutate-trajectory-cache.py breaks each of these in the shipped file.
+ */
+import { readFileSync } from 'node:fs';
+import {
+ createTrajectoryCache,
+ trajectoryCacheFamily,
+ trajectoryCacheKey,
+} from '../miniapp/node/server.mjs';
+
+const SERVER = readFileSync(new URL('../miniapp/node/server.mjs', import.meta.url), 'utf8');
+
+let pass = 0;
+const failures = [];
+function check(name, actual, expected) {
+ if (JSON.stringify(actual) === JSON.stringify(expected)) pass += 1;
+ else failures.push(`${name}: got ${JSON.stringify(actual)}, want ${JSON.stringify(expected)}`);
+}
+function assert(name, cond) {
+ if (cond) pass += 1;
+ else failures.push(name);
+}
+
+const LIMIT = 4;
+const DIR = '/store/session-a';
+const entry = (size, mtime) => ({ dir: DIR, sizeBytes: size, lastActiveAt: mtime });
+const identity = { catalogBytes: 1234, generations: [{ generation: 0, fileName: 'g0', byteLength: 10 }] };
+
+/* =====================================================================
+ * 1 — the family is a prefix of the key, and the key still says what changed
+ * ===================================================================== */
+
+const familyAll = trajectoryCacheFamily(DIR, null);
+const familySlice = trajectoryCacheFamily(DIR, 3);
+assert('the family names the session directory', familyAll.startsWith(DIR));
+assert('an unfiltered request is the "all" slice', familyAll === `${DIR}|gen=all|`);
+assert('a filtered request names its own generation', familySlice === `${DIR}|gen=3|`);
+assert('two slices are two families', familyAll !== familySlice);
+assert('two sessions are two families',
+ trajectoryCacheFamily('/store/session-b', null) !== familyAll);
+
+const keyFresh = trajectoryCacheKey(entry(1000, 5000), identity, null, null);
+const keyGrown = trajectoryCacheKey(entry(2000, 6000), identity, null, null);
+assert('the key starts with its family', keyFresh.startsWith(familyAll));
+assert('growth still produces a different key', keyFresh !== keyGrown);
+assert('the key still carries the size, so a stale entry is never served',
+ keyGrown.includes('|2000|6000|'));
+assert('the key still carries the catalog bytes',
+ keyGrown.includes('|1234|'));
+
+// The catalog rotating a generation must also change the key, or a compaction that only rotated
+// snapshots would serve the pre-rotation body.
+const rotatedIdentity = {
+ catalogBytes: 1234,
+ generations: [{ generation: 0, fileName: 'g1', byteLength: 10 }],
+};
+assert('rotating the lineage changes the key',
+ trajectoryCacheKey(entry(1000, 5000), rotatedIdentity, null, null) !== keyFresh);
+
+/* =====================================================================
+ * 2 — growth replaces its predecessor instead of stacking beside it
+ * ===================================================================== */
+
+const cache = createTrajectoryCache(LIMIT);
+cache.set(keyFresh, familyAll, { body: 'v1' });
+check('one store makes one entry', cache.size, 1);
+for (let size = 2000; size <= 9000; size += 1000) {
+ cache.set(trajectoryCacheKey(entry(size, size), identity, null, null), familyAll, { body: `v${size}` });
+}
+assert('nine versions of one question leave one entry', cache.size === 1);
+assert('the survivor is the newest, not the oldest',
+ cache.get(trajectoryCacheKey(entry(9000, 9000), identity, null, null))?.body === 'v9000');
+assert('a superseded key is gone, so /raw cannot reach it',
+ cache.get(keyFresh) === null);
+
+/* =====================================================================
+ * 3 — different questions keep their own entries
+ * ===================================================================== */
+
+const mixed = createTrajectoryCache(LIMIT);
+const keyA1 = trajectoryCacheKey(entry(1000, 5000), identity, null, null);
+const keyA2 = trajectoryCacheKey(entry(2000, 6000), identity, null, null);
+const keySlice = trajectoryCacheKey(entry(1000, 5000), identity, null, 3);
+const keyOther = trajectoryCacheKey({ ...entry(1000, 5000), dir: '/store/session-b' }, identity, null, null);
+mixed.set(keyA1, familyAll, { body: 'a1' });
+mixed.set(keyA2, familyAll, { body: 'a2' });
+check('growth in one family did not disturb the other family', mixed.size, 1);
+mixed.set(keySlice, familySlice, { body: 's3' });
+mixed.set(keyOther, trajectoryCacheFamily('/store/session-b', null), { body: 'b1' });
+check('two sessions and two slices coexist', mixed.size, 3);
+assert('the unfiltered session kept its newest body', mixed.get(keyA2)?.body === 'a2');
+assert('the slice kept its own body', mixed.get(keySlice)?.body === 's3');
+assert('the other session kept its own body', mixed.get(keyOther)?.body === 'b1');
+
+/* =====================================================================
+ * 4 — the entry bound still applies across families
+ * ===================================================================== */
+
+const bounded = createTrajectoryCache(LIMIT);
+const families = [];
+for (let i = 0; i < LIMIT + 3; i += 1) {
+ const dir = `/store/session-${i}`;
+ const fam = trajectoryCacheFamily(dir, null);
+ families.push(fam);
+ bounded.set(trajectoryCacheKey({ dir, sizeBytes: 100, lastActiveAt: 1 }, identity, null, null), fam, { body: `b${i}` });
+}
+assert('more sessions than the bound still respect it', bounded.size === LIMIT);
+assert('the oldest session was the one evicted', bounded.get(trajectoryCacheKey(
+ { dir: '/store/session-0', sizeBytes: 100, lastActiveAt: 1 }, identity, null, null,
+)) === null);
+
+// Reading has to refresh recency, or a family the reader keeps asking for is evicted by
+// insertion order while a colder one survives.
+//
+// Three families are needed, not two: storing a fourth member of an existing family frees its own
+// slot first, so with two families the bound never has to evict anything and the assertion passes
+// whether or not recency is refreshed. That is the shape of a tautological test.
+const hot = createTrajectoryCache(2);
+const keyOf = (name) => trajectoryCacheKey(
+ { dir: `/store/${name}`, sizeBytes: 1, lastActiveAt: 1 }, identity, null, null,
+);
+hot.set(keyOf('wanted'), trajectoryCacheFamily('/store/wanted', null), { body: 'wanted' });
+hot.set(keyOf('other'), trajectoryCacheFamily('/store/other', null), { body: 'other' });
+// Touched, so recency order becomes [other, wanted] rather than [wanted, other].
+hot.get(keyOf('wanted'));
+hot.set(keyOf('newcomer'), trajectoryCacheFamily('/store/newcomer', null), { body: 'newcomer' });
+assert('a family that was read again survives the next eviction', hot.get(keyOf('wanted'))?.body === 'wanted');
+assert('the family that was NOT touched is the one evicted', hot.get(keyOf('other')) === null);
+
+/* =====================================================================
+ * 5 — structure: the cache is per-runtime, and the route names the family
+ * ===================================================================== */
+
+const startAt = SERVER.indexOf('export async function start(');
+const startBody = SERVER.slice(startAt);
+assert('start() exists', startAt > 0);
+assert('the cache is created inside start(), not at module level',
+ startBody.includes('const trajectoryCache = createTrajectoryCache(TRAJECTORY_CACHE_ENTRIES);')
+ && !/\nconst trajectoryCache = createTrajectoryCache\(/.test(SERVER.slice(0, startAt)));
+assert('the route names the family from the entry and the requested slice',
+ startBody.includes('trajectoryCache.set(cacheKey, trajectoryCacheFamily(entry.dir, filter)'));
+assert('the route no longer evicts by insertion order itself',
+ !/while \(trajectoryCache\.size > TRAJECTORY_CACHE_ENTRIES\)/.test(startBody));
+assert('the family helper is exported so the key and the cache cannot drift apart',
+ SERVER.includes('export function trajectoryCacheFamily(dir, filter)'));
+assert('the key is built from the same helper, so the prefix is one expression',
+ SERVER.includes('`${trajectoryCacheFamily(entry.dir, filter)}${lineage}|'));
+assert('the route still releases both caches on dispose',
+ /trajectoryCache\.clear\(\);/.test(startBody) && /parsedRows\.clear\(\);/.test(startBody));
+
+if (failures.length) {
+ console.error(`\n[trajectory-cache] ${failures.length} FAILED, ${pass} passed`);
+ for (const f of failures) console.error(' - ' + f);
+ process.exit(1);
+}
+console.log(`\n[trajectory-cache] ${pass} assertions passed`);