@awak-app/simy-cli 0.7.20 → 0.7.22

package/README.md

@@ -60,6 +60,22 @@ Provider login is separate from model access; unverified model access remains
 files scoped to the Web/account/organization, rotate each writer's four 64 KiB
 segments, and keep lifetime failure counts after event rotation.
 
+Each AI app card separates **SIMY connection: on / stopped** from CLI, sign-in
+and plugin health. Disconnecting collapses those details and explains that SIMY
+monitoring and automatic continuation are stopped. Details can still be opened;
+reconnecting restores the item statuses. Plugin inspection failure never changes
+the connection setting or hides its disconnect action.
+
+Connection settings show **Repair automatically** beside a failed, missing or
+disabled SIMY plugin. Clicking it rechecks only that provider with a longer,
+bounded timeout; a missing or disabled managed plugin is installed or enabled,
+then its actual inventory is checked again. Success is shown only after that
+inventory confirms the plugin is enabled. Repair progress and failure reasons
+are displayed in the card; safe reason codes and elapsed times are saved in
+`$SIMY_HOME/logs/desktop-host.log`. Repair preserves SIMY connection consent,
+provider sign-in and native hook permissions. Project/managed settings and
+conflicting plugin sources require review instead of being overwritten.
+
 The desktop host continues sampling connection and access while optional
 conversation metadata is pending. It retains the last completed conversation
 metadata only within the same verified scope, clears it after access or account
@@ -341,8 +357,10 @@ seven days. Usage counters alone leave work time, idle time and utilization
 unavailable; a single observed activity event is a measured zero-duration sample.
 Missing usage records remain distinct from recorded zero tokens.
 
-The desktop Sessions page loads a recent window of up to 200 conversations,
-selected by last activity. The macOS work list then prioritizes verified running
+The desktop Sessions page loads the full available Codex and Claude Code
+conversation catalog without a 200-conversation display limit. Live process
+probes remain limited to recent conversations and explicitly retained work;
+older rows remain visible with unverified execution state. The macOS work list then prioritizes verified running
 conversations, including families with running children, followed by work needing
 a human response and recent activity. Its All, Running, Needs attention, Completed
 and Archived views combine with search. Tracking and auto-continue settings never
@@ -362,13 +380,15 @@ Codex candidates come from CLI, VS Code and app-server
 conversation sources; non-interactive exec, unknown sources and delegated agents
 are excluded. A hook observation alone cannot restore a filtered conversation.
 Explicitly tracked, monitored, auto-continue and unsettled supervision records
-remain visible even outside that window. When a retained Codex conversation is
+remain visible even during a provider discovery failure. When a retained Codex conversation is
 omitted from the recent provider page, SIMY reads its exact metadata without
 loading turns or taking writer ownership. The same interactive source filter and
 a matching active rollout path are required before restoring provider capabilities
 and probing its latest turn. Exact reads and turn probes share a bounded
 observation deadline. Claude discovery
-ranks file metadata before opening selected transcripts. A conflicting saved
+reads metadata with a bounded I/O pool and bounded transcript prefixes. Full
+catalog reads include every project and transcript, while exact conversation
+content and statistics remain separate reads. A conflicting saved
 workspace leaves only that conversation's Action association unavailable; it
 does not stop discovery or change the saved identity. The page lets users
 choose monitoring or supported session supervision with a goal, acceptance
@@ -1304,9 +1324,9 @@ original machine. See [setup, access requirements and recovery](docs/remote-code
 
 ### Local conversation list on NVIDIA / Linux
 
-Run `simy sessions` directly on the machine where Codex is running. It reads
-that machine's actual Codex conversation metadata without starting the agent,
-updater, analysis worker or a Delivery Loop. No Mac or SSH bridge is needed.
+Run `simy sessions` to list local and explicitly registered SSH hosts. It reads
+both providers' actual conversation metadata without starting the agent,
+updater, analysis worker or a Delivery Loop. Remote reads use SSH with the existing user identity and verified host key.
 
 ```sh
 simy sessions --query NVIDIA
@@ -1315,12 +1335,28 @@ simy sessions --json
 ```
 
 In the interactive list, use Up/Down to select a conversation, `/` to search its
-title, folder or ID, Enter to finish searching, Esc to clear the filter, `r` to
+title, folder, provider or ID, Enter to finish searching, Esc to clear the filter, `r` to
 refresh and `q` to quit. The selected conversation shows its exact ID and folder.
-Search covers the current recent window (up to 200 active conversations and,
-with `--include-archived`, up to 200 archived conversations); older entries outside
-that window are not searched. This view respects the saved
-Codex provider connection setting and never enables automatic continuation.
+Search covers the full available catalog, including older conversations. Use
+`--include-archived` to include archived conversations from both providers.
+Each row identifies its provider; identical IDs in Codex and Claude remain
+separate rows. A provider failure preserves the other provider's results with
+an explicit incomplete warning (`complete: false` and `warnings` in JSON).
+This view respects both saved provider connection settings and never enables
+automatic continuation. Disconnected providers are not read.
+
+The terminal command reads this host and hosts explicitly registered in
+`~/.simy/remote-hosts.json`. Use `--local-only` to skip SSH, and
+`--provider codex` or `--provider claude` to select a provider. Remote SIMY must
+also include these options; older hosts produce an incomplete warning instead
+of silently disappearing. Each row retains its host, provider and conversation
+ID; search also matches the host label. SSH reads run `simy sessions --local-only`
+and do not start a desktop host, supervisor, or provider turn. Both the local
+and remote provider connection settings apply.
+
+The desktop bridge also includes both providers. Neither interface imports
+Codex desktop connection settings automatically or claims to discover
+unregistered hosts, another OS user's history, or malformed/unsupported records.
 
 The existing per-provider heartbeat now includes `device_io` with
 `schema_version: local_device_io.v1`. It distinguishes Codex verified native-cwd
@@ -1350,3 +1386,28 @@ When supervision is already live, install the candidate, request
 `runtime supervisor-handover --release ABSOLUTE_RELEASE`, and wait for activation.
 The watcher preserves the live supervisor while service registration is updated.
 No command here enrolls an unrelated conversation or renews an existing budget.
+
+### Resume after sleep, logout or reboot
+
+The OS watchdog retains activation in `supervisor-runtime/control.json`. Sleep
+re-observes the existing process before replacing it. After logout/login or a
+shutdown/reboot, the registered OS service loads the same runtime and saved task
+state. Linux uses a systemd user service (user lingering permits running after
+logout); macOS uses a login LaunchAgent; Windows uses the interactive user's
+scheduled task. macOS/Windows recovery therefore starts after that user logs in.
+No work runs while the computer is powered off or asleep.
+
+To enable durable recovery for one existing opted-in conversation:
+
+```sh
+~/.simy/bin/simy delivery runtime supervisor-enable --provider codex --session SESSION_ID
+~/.simy/bin/simy delivery runtime supervisor-watchdog-install
+```
+
+This selection binds its existing run and consent epoch, excluding other tasks.
+The recovered host starts by reading saved results and current artifacts. It
+retains the goal, budgets and unresolved effects; it does not replay an
+interrupted write or approve a pending external action. Explicit task
+stop/pause, provider permission prompts and unanswered user questions remain
+boundaries. `runtime supervisor-disable` is a durable explicit stop and is never
+reversed by waking or booting. A later explicit enable is required.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awak-app/simy-cli",
-  "version": "0.7.20",
+  "version": "0.7.22",
   "description": "Local SIMY executor for non-coding Local Tasks and Agentic Loop runs.",
   "type": "module",
   "bin": {
@@ -42,7 +42,7 @@
     "check:session-supervision-syntax": "node --check ./src/session-supervision/session-list.js && node --check ./src/console/sessions.js && node --check ./src/session-supervision/remote-hosts.js && node --check ./src/session-supervision/remote-entry.js && node --check ./src/session-supervision/index.js && node --check ./src/session-supervision/discovery-window.js && node --check ./src/session-supervision/codex-app-server.js && node --check ./src/session-supervision/claude-sessions.js && node --check ./src/session-supervision/original-session-target.js && node --check ./src/session-supervision/action-association.js && node --check ./src/session-supervision/action-association-host.js && node --check ./src/session-supervision/action-association-api.js && node --check ./src/session-supervision/association-store.js && node --check ./src/session-supervision/action-deadline.js && node --check ./src/session-supervision/action-deadline-store.js && node --check ./src/codex-plugins/simy/hooks/action-association.mjs && node --check ./src/session-supervision/purpose-instruction.js && node --check ./src/session-supervision/purpose-recovery.js && node --check ./src/session-supervision/purpose-candidate.js && node --check ./src/codex-plugins/simy/hooks/scene-reasoning.mjs && node --check ./src/codex-plugins/simy/hooks/purpose-cycle.mjs && node --check ./src/codex-plugins/simy/hooks/purpose-rule-review.mjs && node --check ./src/codex-plugins/simy/hooks/purpose-search.mjs && node --check ./src/codex-plugins/simy/hooks/purpose-evidence.mjs && node --check ./src/session-supervision/purpose-observer.js && node --check ./src/session-supervision/purpose-verification.js && node --check ./src/codex-plugins/simy/hooks/purpose-workspace.mjs && node --check ./scripts/purpose-search-live-e2e.js",
     "check:auto-update": "node --check ./src/auto-update.js && node --check ./scripts/auto-update-e2e.js && npm run check:sqm",
     "check:workflow-observation-sender": "node --check ./src/workflow-observation-sender.js",
-    "check:sqm": "node --check ./src/sqm/advisory-guidance.js && node --check ./src/sqm/canonical.js && node --check ./src/sqm/validation.js && node --check ./src/sqm/reliability.js && node --check ./src/sqm/repository.js && node --check ./src/sqm/checkers.js && node --check ./src/sqm/bundle-store.js && node --check ./src/sqm/proof.js && node --check ./src/sqm/evidence-client.js && node --check ./src/sqm/session.js && node --check ./src/sqm/index.js && node --check ./src/sqm/command.js && node --check ./src/sqm/agent-skill.js && node --check ./src/sqm/workflow-onboarding.js && node --check ./src/sqm/workflow-update.js && node --check ./src/sqm/history-store.js && node --check ./src/sqm/review-worker.js && node --check ./scripts/sqm-complete-loop-e2e.js && node --check ./scripts/sqm-local-review-e2e.js",
+    "check:sqm": "node --check ./src/sqm/provider-plugin-repair.js && node --check ./src/sqm/provider-plugin-status.js && node --check ./src/sqm/advisory-guidance.js && node --check ./src/sqm/canonical.js && node --check ./src/sqm/validation.js && node --check ./src/sqm/reliability.js && node --check ./src/sqm/repository.js && node --check ./src/sqm/checkers.js && node --check ./src/sqm/bundle-store.js && node --check ./src/sqm/proof.js && node --check ./src/sqm/evidence-client.js && node --check ./src/sqm/session.js && node --check ./src/sqm/index.js && node --check ./src/sqm/command.js && node --check ./src/sqm/agent-skill.js && node --check ./src/sqm/workflow-onboarding.js && node --check ./src/sqm/workflow-update.js && node --check ./src/sqm/history-store.js && node --check ./src/sqm/review-worker.js && node --check ./scripts/sqm-complete-loop-e2e.js && node --check ./scripts/sqm-local-review-e2e.js",
     "check:real-provider-syntax": "node --check ./scripts/real-codex-probe.js && node --check ./scripts/real-claude-probe.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/claude-parity-runtime-e2e.js && node --check ./scripts/claude-plugin-runtime-e2e.js && node --check ./scripts/codex-plugin-runtime-e2e.js",
     "check:syntax": "node --check ./src/purpose-local-proof.js && node --check ./src/device-signing-identity.js && node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/connection-discovery.js && node --check ./src/connection-diagnostics.js && node --check ./src/launch-authorization.js && node --check ./src/codex-plugins/simy/hooks/connection-reminder.mjs && node --check ./src/codex-plugins/simy/hooks/dev-work.mjs && node --check ./src/dev-work-events.js && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/login-shell-path.js && node --check ./src/hook-runtime.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/pr-preparation.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/orchestrator/delivery/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./src/coding-run-store.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js && node --check ./src/codex-plugins/simy/hooks/delivery-loop.mjs && node --check ./src/delivery-hooks/command.js && node --check ./src/delivery-hooks/desktop.js && node --check ./src/delivery-hooks/supervisor.js && node --check ./src/delivery-hooks/recovery.js && node --check ./src/delivery-hooks/supervisor-owner.js && node --check ./src/delivery-hooks/supervisor-watchdog.js && node --check ./src/delivery-hooks/supervisor-service.js && node --check ./scripts/supervisor-watchdog-live-e2e.js && node --check ./src/codex-plugins/simy/hooks/recovery-incident.mjs && node --check ./src/session-supervision/automatic-continuation.js && node --check ./src/session-supervision/stop-notifications.js",
     "check:package": "node ./scripts/check-package-contents.js",

package/src/cli-contract.js

@@ -14,7 +14,7 @@ import {
 } from "./durable-local-task-steps-contract.js";
 import { buildExecutionCapabilityContract } from "./execution-capability-contract.js";
 
-export const CLI_VERSION = "0.7.20";
+export const CLI_VERSION = "0.7.22";
 export const CLI_API_CONTRACT_VERSION = 10;
 
 export function narrativeImageCapabilityMetadata() {

package/src/codex-plugins/simy/hooks/delivery-loop.mjs

@@ -824,7 +824,7 @@ function hookDeliveryContext(record, automatic = false) {
     `Preserve the current task and its permissions, pauses and stops; never restart or reset it automatically.`;
 }
 export async function startDelivery({ root = rootDirectory(), provider, session, cwd = process.cwd(), executionCwd, upgradeRunId, previousRunId, reconcileRunId, objective, nextStep, maxMinutes, maxContinuations, maxFailures, continuationPolicy, managed, admission,
-  liveHookAdmission, autoContinueEpoch, providerLinkEpoch, inspectProcess = processIdentity, now = Date.now() }) {
+  liveHookAdmission, autoContinueEpoch, followupAutoContinue = false, providerLinkEpoch, inspectProcess = processIdentity, now = Date.now() }) {
   const link = await providerLinkState(root, provider);
   if (providerLinkEpoch !== undefined && providerLinkEpoch !== link.epoch) throw Object.assign(new Error("SIMY provider connection changed before enrollment."), { code: "provider_link_changed" });
   if (!link.connected) throw Object.assign(new Error("Reconnect this provider to SIMY before using it."), { code: "provider_link_disconnected" });
@@ -871,6 +871,7 @@ export async function startDelivery({ root = rootDirectory(), provider, session,
     if ((following || reconciling) && (provider !== 'codex' || !admitted || !managedState?.autoRecovery || managedState.capability !== 'codex_app_server' || managedState.initialAction.kind !== 'read' || managedState.contextBootstrap)) throw new Error('Follow-up requires exact-session managed supervision, a concrete goal and read-only reconciliation.');
     if (upgrading && (!managedState?.autonomyPolicy || managedState.initialAction.kind !== 'read' || managedState.contextBootstrap)) throw new Error('Upgrade requires read-only reconciliation and frozen acceptance of the original objective.');
     if (!managedState && continuationMode(continuationPolicy) === 'progress') throw new Error('Progress continuation requires frozen managed acceptance criteria.');
+    if (followupAutoContinue && !(following || reconciling)) throw new Error('Auto-continue follow-up requires the exact finished run.');
     if (autoContinueEpoch && managedState) managedState.autoContinueEpoch = autoContinueEpoch;
     if (managedState && previous.associationTaskId) {
       managedState.taskId = previous.associationTaskId;
@@ -916,6 +917,13 @@ export async function startDelivery({ root = rootDirectory(), provider, session,
       if (saved && digest(saved) !== digest(archive)) throw new Error('Finished run archive differs; reconcile its history before enrolling follow-up work.');
       if (!saved) atomicSave(file, archive);
     }
+    // The explicit follow-up dialog enrolls and saves ON in one transaction.
+    // A failed/stale request never leaves a half-enabled preference behind.
+    if (followupAutoContinue) {
+      const epoch = randomUUID();
+      managedState.autoContinueEpoch = epoch;
+      return { ...previous, autoContinue: true, autoContinueEpoch: epoch, run };
+    }
     return { ...previous, run };
   });
 }

package/src/codex-work-pattern-sync.js

@@ -13,9 +13,11 @@ const MAX_MESSAGES = 24;
 const MAX_MESSAGE_CHARS = 1_500;
 const MAX_CANDIDATE_FILES = 200;
 export const MAX_GATEWAY_BODY_BYTES = 512 * 1024;
+const MAX_STATUS_RECEIPTS = 10;
+const MAX_STATUS_BODY_BYTES = 12 * 1024;
 const DEFAULT_LOOKBACK_DAYS = 90;
 const POLL_INTERVAL_MS = 15 * 60 * 1_000;
-const STATE_SCHEMA_VERSION = "work-pattern-history-sync.v6";
+const STATE_SCHEMA_VERSION = "work-pattern-history-sync.v7";
 export const HISTORY_EXTRACTION_POLICY = "user_conversation.v2";
 const PROVIDER_CODEX = "codex";
 const PROVIDER_CLAUDE = "claude";
@@ -125,7 +127,20 @@ export async function syncCodexWorkPatterns({
     deviceId,
   });
   const persistedState = await readSyncState(statePath);
-  const previousState = statusPayload.reset_cursor === true ? {} : persistedState;
+  const pendingReceipts = pendingReceiptMetadata(persistedState.pending_receipts);
+  if (pendingReceipts.length > 0) {
+    const pendingResult = await pollTimedOutReceipt({
+      endpoint,
+      token,
+      receipts: pendingReceipts,
+      fetchImpl,
+      signal,
+      authorizeProviders,
+    });
+    if (pendingResult.pending) return { status: "pending", uploaded: 0 };
+  }
+  const { pending_receipts: _pendingReceipts, ...resolvedPersistedState } = persistedState;
+  const previousState = statusPayload.reset_cursor === true ? {} : resolvedPersistedState;
   const state = { ...previousState, providers: Object.fromEntries(Object.entries(previousState.providers || {})
     .filter(([, cursor]) => cursor?.reset_pending !== true && (cursor?.lookback_days ?? previousState.lookback_days) === lookbackDays)) };
   const lookbackCutoffMs = now - lookbackDays * 24 * 60 * 60 * 1_000;
@@ -175,10 +190,12 @@ export async function syncCodexWorkPatterns({
   }))).flat();
   const selectedFiles = selectSessionFiles(files);
   const threads = [];
-  const acknowledgedRevisions = new Set(providerSpecs.flatMap((spec) =>
+  const acknowledgedRevisions = new Set([
+    ...providerSpecs.flatMap((spec) =>
     Object.values(providerCursor(state, spec.provider).processed_files)
       .filter((file) => file.lineage_ref && file.revision_ref)
-      .map((file) => `${file.lineage_ref}\0${file.revision_ref}`)));
+      .map((file) => `${file.lineage_ref}\0${file.revision_ref}`)),
+  ]);
   const successfullyReadFiles = [];
   const unreadableFiles = [];
   for (const file of selectedFiles) {
@@ -212,6 +229,7 @@ export async function syncCodexWorkPatterns({
       if (
         chunk.messages.length > 0
         && Date.parse(chunk.observed_at) >= lookbackCutoffMs
+        && !pendingReceipts.some(receipt => receiptKey(receipt) === threadReceiptKey(chunk))
       ) {
         threads.push(chunk);
       }
@@ -228,9 +246,38 @@ export async function syncCodexWorkPatterns({
     return { status: "up_to_date", uploaded: 0 };
   }
 
-  const uploadResult = threads.length > 0
-    ? await uploadThreadBatches({ endpoint, token, threads, fetchImpl, signal, authorizeProviders })
-    : { uploaded: 0 };
+  let uploadResult = { uploaded: 0 };
+  if (threads.length > 0) {
+    // Persist only opaque receipt metadata before an admission request that
+    // could reach Crew after this process loses its response.  A restart polls
+    // these tuples and never reconstructs a plaintext retry from them.
+    let attempted = [...pendingReceipts];
+    const recordAttempt = async (batch, remove = false) => {
+      const keys = new Set(batch.map(threadReceiptKey));
+      attempted = attempted.filter(receipt => !keys.has(receiptKey(receipt)));
+      if (!remove) attempted.push(...batch.map(receiptMetadata));
+      if (attempted.length) {
+        await writePendingReceiptState({ statePath, lookbackDays, providers: previousState.providers || {}, receipts: attempted, now });
+      } else {
+        await clearPendingReceiptState({ statePath, lookbackDays, providers: previousState.providers || {}, now });
+      }
+    };
+    uploadResult = await uploadThreadBatches({ endpoint, token, threads, fetchImpl, signal, authorizeProviders, recordAttempt });
+    if (uploadResult.pending_receipts?.length > 0) uploadResult.pending_receipts = attempted;
+  }
+  if (uploadResult.pending_receipts?.length > 0) {
+    await writePendingReceiptState({
+      statePath,
+      lookbackDays,
+      providers: previousState.providers || {},
+      receipts: uploadResult.pending_receipts,
+      now,
+    });
+    return { status: "pending", uploaded: 0 };
+  }
+  if (threads.length > 0 && uploadResult.uploaded !== threads.length) {
+    return { status: "pending", uploaded: uploadResult.uploaded };
+  }
   if (shouldAcknowledgeEmptyReset) {
     const { payload } = await postThreadBatch({ endpoint, token, threads: [], fetchImpl, signal, authorizeProviders });
     validateThreadBatchAcknowledgement(payload, []);
@@ -279,7 +326,7 @@ export function workPatternSyncStatePath({ sessionRoot, apiOrigin, accountId, de
   return join(sessionRoot, "work-pattern-history-sync", `${scopeHash}.json`);
 }
 
-async function uploadThreadBatches({ endpoint, token, threads, fetchImpl, signal, authorizeProviders }) {
+async function uploadThreadBatches({ endpoint, token, threads, fetchImpl, signal, authorizeProviders, recordAttempt }) {
   const batches = [];
   let batch = [];
   for (const thread of threads) {
@@ -299,6 +346,7 @@ async function uploadThreadBatches({ endpoint, token, threads, fetchImpl, signal
   if (batch.length > 0) batches.push(batch);
 
   let uploaded = 0;
+  const pendingReceipts = [];
   for (const current of batches) {
     const result = await postBatchWithBounded413Recovery({
       endpoint,
@@ -307,26 +355,45 @@ async function uploadThreadBatches({ endpoint, token, threads, fetchImpl, signal
       fetchImpl,
       signal,
       authorizeProviders,
+      recordAttempt,
     });
     uploaded += result.uploaded;
+    if (result.pending_receipts?.length > 0) {
+      pendingReceipts.push(...result.pending_receipts);
+      break;
+    }
   }
-  return { uploaded };
+  return pendingReceipts.length > 0
+    ? { uploaded, pending_receipts: pendingReceipts }
+    : { uploaded };
 }
 
-async function postBatchWithBounded413Recovery({ endpoint, token, threads, fetchImpl, signal, authorizeProviders }) {
-  const { response, payload } = await postThreadBatch({
-    endpoint,
-    token,
-    threads,
-    fetchImpl,
-    signal,
-    allow413: true,
-    authorizeProviders,
-  });
+async function postBatchWithBounded413Recovery({ endpoint, token, threads, fetchImpl, signal, authorizeProviders, recordAttempt }) {
+  await recordAttempt(threads);
+  let response, payload;
+  try {
+    ({ response, payload } = await postThreadBatch({
+      endpoint,
+      token,
+      threads,
+      fetchImpl,
+      signal,
+      allow413: true,
+      authorizeProviders,
+    }));
+  } catch (error) {
+    if (error?.definitePreAdmission === true) await recordAttempt(threads, true);
+    throw error;
+  }
   if (response.status !== 413) {
-    validateThreadBatchAcknowledgement(payload, threads);
+    const partition = validateReceiptPartition(payload, threads.map(receiptMetadata));
+    if (partition.pending > 0 || payload?._receiptPending === true) {
+      return { uploaded: 0, pending_receipts: threads.map(receiptMetadata) };
+    }
+    if (partition.notFound > 0) throwIncompleteAcknowledgement();
     return { uploaded: threads.length };
   }
+  await recordAttempt(threads, true);
   if (threads.length > 1) {
     const middle = Math.ceil(threads.length / 2);
     const left = await postBatchWithBounded413Recovery({
@@ -336,7 +403,9 @@ async function postBatchWithBounded413Recovery({ endpoint, token, threads, fetch
       fetchImpl,
       signal,
       authorizeProviders,
+      recordAttempt,
     });
+    if (left.pending_receipts?.length) return left;
     const right = await postBatchWithBounded413Recovery({
       endpoint,
       token,
@@ -344,13 +413,19 @@ async function postBatchWithBounded413Recovery({ endpoint, token, threads, fetch
       fetchImpl,
       signal,
       authorizeProviders,
+      recordAttempt,
     });
-    return { uploaded: left.uploaded + right.uploaded };
+    return {
+      uploaded: left.uploaded + right.uploaded,
+      pending_receipts: [...(left.pending_receipts || []), ...(right.pending_receipts || [])],
+    };
   }
-  throw new Error(
+  const error = new Error(
     "Work-pattern observation chunk was rejected as too large; "
     + "the complete revision was not acknowledged and will be retried unchanged.",
   );
+  error.definitePreAdmission = true;
+  throw error;
 }
 
 async function postThreadBatch({
@@ -366,46 +441,171 @@ async function postThreadBatch({
   if (Buffer.byteLength(body, "utf8") > MAX_GATEWAY_BODY_BYTES) {
     throw new Error("Work-pattern observation payload exceeds the local CLI gateway limit.");
   }
-  await authorizeProviders();
-  const response = await fetchImpl(endpoint, {
-    method: "POST",
-    headers: webApiHeaders({ token }, { "Content-Type": "application/json" }),
-    body,
-    signal: signalWithTimeout(signal, 120_000),
-  });
+  try {
+    await authorizeProviders();
+  } catch (error) {
+    error.definitePreAdmission = true;
+    throw error;
+  }
+  let response;
+  try {
+    response = await fetchImpl(endpoint, {
+      method: "POST",
+      headers: webApiHeaders({ token }, { "Content-Type": "application/json" }),
+      body,
+      signal: signalWithTimeout(signal, 120_000),
+    });
+  } catch (error) {
+    if (signal?.aborted || !isTimeout(error)) throw error;
+    const polled = await pollTimedOutReceipt({ endpoint, token, threads, fetchImpl, signal, authorizeProviders });
+    return polled.pending
+      ? { response: polled.response, payload: { ...polled.payload, _receiptPending: true } }
+      : polled;
+  }
   const payload = await response.json().catch(() => null);
   if (!response.ok && !(allow413 && response.status === 413)) {
-    throw new Error(webApiErrorMessage(payload, response.status));
+    if (response.status >= 500 || response.status === 408 || response.status === 429) {
+      const polled = await pollTimedOutReceipt({ endpoint, token, threads, fetchImpl, signal, authorizeProviders });
+      return polled.pending
+        ? { response: polled.response, payload: { ...polled.payload, _receiptPending: true } }
+        : polled;
+    }
+    const error = new Error(webApiErrorMessage(payload, response.status));
+    error.definitePreAdmission = response.status >= 400 && response.status < 500 && response.status !== 409;
+    throw error;
   }
   return { response, payload };
 }
 
+function isTimeout(error) {
+  return error?.name === "TimeoutError" || error?.name === "AbortError";
+}
+
+async function pollTimedOutReceipt({ endpoint, token, threads, receipts, fetchImpl, signal, authorizeProviders }) {
+  const expectedReceipts = receipts || threads.map(receiptMetadata);
+  const batches = receiptBatches(expectedReceipts);
+  await authorizeProviders();
+  const responses = [];
+  let hasPending = false;
+  for (const batch of batches) {
+    const response = await fetchImpl(new URL("status/", endpoint), {
+      method: "POST",
+      headers: webApiHeaders({ token }, { "Content-Type": "application/json" }),
+      body: JSON.stringify({ receipts: batch }),
+      signal: signalWithTimeout(signal, 5_000),
+    });
+    const payload = await response.json().catch(() => null);
+    if (!response.ok) throw new Error(webApiErrorMessage(payload, response.status));
+    const partition = validateReceiptPartition(payload, batch);
+    if (partition.notFound > 0) throwIncompleteAcknowledgement();
+    hasPending ||= partition.pending > 0;
+    responses.push({ response, payload });
+  }
+  const last = responses.at(-1);
+  return hasPending
+    ? { response: last.response, payload: last.payload, pending: true }
+    : { response: last.response, payload: last.payload };
+}
+
 function validateThreadBatchAcknowledgement(payload, threads) {
+  const partition = validateReceiptPartition(payload, threads.map(receiptMetadata));
+  if (partition.pending > 0 || partition.notFound > 0) throwIncompleteAcknowledgement();
+}
+
+function validateReceiptPartition(payload, expectedReceipts) {
+  const accepted = Array.isArray(payload?.accepted_receipts) ? payload.accepted_receipts : [];
+  const pending = Array.isArray(payload?.pending_receipts) ? payload.pending_receipts : [];
+  const notFound = Array.isArray(payload?.not_found_receipts) ? payload.not_found_receipts : [];
   if (
-    payload?.raw_content_persisted !== false ||
-    !Number.isInteger(payload?.accepted) ||
-    payload.accepted !== threads.length ||
-    !Array.isArray(payload.accepted_receipts) ||
-    payload.accepted_receipts.length !== threads.length
-  ) {
+    payload?.raw_content_persisted !== false
+    || !Number.isInteger(payload?.accepted)
+    || payload.accepted !== accepted.length
+    || (payload?.pending !== undefined && (!Number.isInteger(payload.pending) || payload.pending !== pending.length))
+    || (payload?.not_found !== undefined && (!Number.isInteger(payload.not_found) || payload.not_found !== notFound.length))
+  ) throwIncompleteAcknowledgement();
+  const expected = expectedReceipts.map(receiptKey).sort();
+  const actual = [...accepted, ...pending, ...notFound].map(receiptKey).sort();
+  if (actual.length !== expected.length || actual.some((key, index) => key !== expected[index])) {
     throwIncompleteAcknowledgement();
   }
-  const expected = threads.map(threadReceiptKey).sort();
-  const actual = payload.accepted_receipts.map(receiptKey).sort();
-  for (let index = 0; index < expected.length; index += 1) {
-    if (actual[index] !== expected[index]) throwIncompleteAcknowledgement();
-  }
+  if (new Set(actual).size !== actual.length) throwIncompleteAcknowledgement();
+  return { accepted: accepted.length, pending: pending.length, notFound: notFound.length };
 }
 
 function threadReceiptKey(thread) {
-  return receiptKey({
+  return receiptKey(receiptMetadata(thread));
+}
+
+function receiptMetadata(thread) {
+  return {
     source_ref: thread.source_ref,
     revision_ref: thread.revision_ref,
     lineage_ref: thread.lineage_ref,
     chunk_index: thread.chunk_index,
     chunk_count: thread.chunk_count,
     message_offset: thread.message_offset,
-    message_count: Array.isArray(thread.messages) ? thread.messages.length : -1,
+    message_count: Array.isArray(thread.messages)
+      ? thread.messages.length
+      : (Number.isInteger(thread.message_count) ? thread.message_count : -1),
+    extraction_policy: thread.extraction_policy,
+  };
+}
+
+function pendingReceiptMetadata(receipts) {
+  if (receipts === undefined) return [];
+  if (!Array.isArray(receipts)) {
+    throw new Error("Pending work-pattern receipt state is invalid; history was not resent.");
+  }
+  return receipts.map((receipt) => {
+    if (
+      !/^(?:codex|claude):[0-9a-f]{64}$/.test(receipt?.source_ref || "")
+      || !/^(?:codex|claude):[0-9a-f]{64}$/.test(receipt?.lineage_ref || "")
+      || !/^[0-9a-f]{64}$/.test(receipt?.revision_ref || "")
+      || receipt?.extraction_policy !== HISTORY_EXTRACTION_POLICY
+      || !Number.isInteger(receipt?.chunk_index)
+      || !Number.isInteger(receipt?.chunk_count)
+      || !Number.isInteger(receipt?.message_offset)
+      || !Number.isInteger(receipt?.message_count)
+    ) {
+      throw new Error("Pending work-pattern receipt state is invalid; history was not resent.");
+    }
+    return receipt;
+  });
+}
+
+function receiptBatches(receipts) {
+  const batches = [];
+  let batch = [];
+  for (const receipt of receipts) {
+    const candidate = [...batch, receipt];
+    if (candidate.length > MAX_STATUS_RECEIPTS || Buffer.byteLength(JSON.stringify({ receipts: candidate }), "utf8") > MAX_STATUS_BODY_BYTES) {
+      if (batch.length === 0) throw new Error("Work-pattern receipt metadata exceeds the local gateway limit.");
+      batches.push(batch);
+      batch = [receipt];
+    } else {
+      batch = candidate;
+    }
+  }
+  if (batch.length > 0) batches.push(batch);
+  return batches;
+}
+
+async function writePendingReceiptState({ statePath, lookbackDays, providers, receipts, now }) {
+  await writeSyncState(statePath, {
+    schema_version: STATE_SCHEMA_VERSION,
+    lookback_days: lookbackDays,
+    providers,
+    pending_receipts: receipts,
+    last_synced_at: new Date(now).toISOString(),
+  });
+}
+
+async function clearPendingReceiptState({ statePath, lookbackDays, providers, now }) {
+  await writeSyncState(statePath, {
+    schema_version: STATE_SCHEMA_VERSION,
+    lookback_days: lookbackDays,
+    providers,
+    last_synced_at: new Date(now).toISOString(),
   });
 }
 

package/src/console/sessions.js

@@ -7,7 +7,7 @@ export function SessionListConsole({ catalog: initial, query: initialQuery = '',
   const { exit } = useApp(), { stdout } = useStdout();
   const [catalog, setCatalog] = useState(initial), [query, setQuery] = useState(initialQuery);
   const [searching, setSearching] = useState(false), [index, setIndex] = useState(0);
-  const [busy, setBusy] = useState(false), [notice, setNotice] = useState('');
+  const [busy, setBusy] = useState(false), [notice, setNotice] = useState((initial.warnings || []).join('; '));
   const [height, setHeight] = useState(stdout.rows || 24);
   useEffect(() => { const resize = () => setHeight(stdout.rows || 24); stdout.on('resize', resize); return () => stdout.off('resize', resize); }, [stdout]);
   const rows = filterSessionList(catalog.sessions, query), selected = Math.max(0, Math.min(index, Math.max(0, rows.length - 1)));
@@ -26,7 +26,7 @@ export function SessionListConsole({ catalog: initial, query: initialQuery = '',
     if (key.downArrow) setIndex(Math.max(0, Math.min(rows.length - 1, selected + 1)));
     if (text === 'r' && !busy) {
       setBusy(true); setNotice('');
-      void refresh().then(next => { setCatalog(next); setIndex(0); }, error => {
+      void refresh().then(next => { setCatalog(next); setNotice((next.warnings || []).join('; ')); setIndex(0); }, error => {
         if (['provider_link_disconnected', 'provider_link_changed'].includes(error.code)) {
           setCatalog(current => ({ ...current, sessions: [] })); setIndex(0);
         }
@@ -36,15 +36,15 @@ export function SessionListConsole({ catalog: initial, query: initialQuery = '',
   });
   const current = rows[selected];
   return jsxs(Box, { flexDirection: 'column', children: [
-    jsx(Text, { bold: true, color: 'cyan', children: `SIMY · Codex会話一覧 · ${terminalText(catalog.host)}` }),
-    jsx(Text, { children: `表示 ${rows.length} / ${catalog.sessions.length} 件 · この端末の実会話` }),
+    jsx(Text, { bold: true, color: 'cyan', children: `SIMY · Codex / Claude Code 会話一覧 · ${terminalText(catalog.host)}` }),
+    jsx(Text, { children: `表示 ${rows.length} / ${catalog.sessions.length} 件 · 接続先の実会話` }),
     jsx(Text, { color: searching ? 'yellow' : undefined, children: `検索: ${query}${searching ? '▏' : ''}` }),
     ...rows.slice(offset, offset + pageSize).map((row, i) => jsx(Text, {
       color: offset + i === selected ? 'green' : undefined, wrap: 'truncate-end',
       children: `${offset + i === selected ? '›' : ' '} ${terminalText(row.title)}`,
-    }, row.session)),
+    }, `${row.hostId || 'local'}:${row.provider}:${row.session}`)),
     ...(!rows.length ? [jsx(Text, { children: '一致する会話はありません。' }, 'empty')] : []),
-    jsx(Text, { dimColor: true, children: current ? `${terminalText(current.workState?.label)} · ${current.session}` : '' }),
+    jsx(Text, { dimColor: true, children: current ? `${terminalText(current.hostLabel || catalog.host)} · ${current.provider === 'claude' ? 'Claude Code' : 'Codex'} · ${terminalText(current.workState?.label)} · ${current.session}` : '' }),
     jsx(Text, { dimColor: true, wrap: 'truncate-end', children: terminalText(current?.cwd) }),
     jsx(Text, { color: notice ? 'red' : undefined, children: notice || (busy ? '更新中…' : '↑↓ 選択  / 検索  Esc 解除  r 更新  q 終了') }),
   ] });