@openchambery/web 1.18.2-beta.11 → 1.18.2-beta.13

package/server/lib/session-turn-pages/DOCUMENTATION.md

@@ -79,11 +79,11 @@ Every turn-page response summarizes `tool`, `reasoning`, and `file` parts plus m
 
 | Layer | Surface | Payload |
 |---|---|---|
-| **L1** | Turn pages, reconcile response pages, message/session SSE fan-out, exact `GET /api/session/:sessionID/message/:messageID` | Any `info.summary.diffs` **array** is projected to `summary.diffCount: number` + `summary.hasDiffs: boolean` and **`summary.diffs` is removed**. Other lightweight summary fields are preserved. `diffCount` is the original array length; `hasDiffs === diffCount > 0`. L1 never retains a file array. |
+| **L1** | Turn pages, reconcile response pages, message/session SSE fan-out, exact `GET /api/session/:sessionID/message/:messageID` | Any `info.summary.diffs` **array** is projected to a **slim file list** `[{ file, status?, additions, deletions }]` plus additive markers `summary.diffCount: number` and `summary.hasDiffs: boolean`. Patch/before/after/from/to and other heavy bodies are stripped. Other lightweight summary fields are preserved. `diffCount` equals the slim array length; `hasDiffs === diffCount > 0`. Consumers may use either the slim array or the markers. |
 | **L2** | `GET /api/openchamber/sessions/:sessionID/changes?messageID=` (no `file`) | Host reads official `session.message` locally, returns only `{ files: [{ file, status?, additions, deletions }] }`. Never returns patch/before/after/from/to or the full message envelope. |
 | **L3** | Same route with `file=` | Host calls official `session.diff({ sessionID, messageID, directory })`, returns `{ diff: SnapshotFileDiff }` for the exact `file` string match (includes that file's patch). No match → HTTP 404 `{ error: 'change file not found', code: 'change_not_found' }`. |
 
-Exact message GET keeps the official `{ info, parts }` response shape and only applies L1 summary projection so materialize/recovery never relays a raw multi-megabyte `summary.diffs` array through the generic proxy. Abort/45s timeout semantics match the turn-page routes. Global `/api` auth still applies.
+Exact message GET keeps the official `{ info, parts }` response shape and only applies L1 summary projection so materialize/recovery never relays raw multi-megabyte patch bodies through the generic proxy. Abort/45s timeout semantics match the turn-page routes. Global `/api` auth still applies.
 
 Changes query guards: `sessionID` / `messageID` length `1..512`; optional `file` length `1..4096` and rejects control characters / NUL. Failures: invalid params → 400, abort → 499, upstream/malformed → 502. Logs carry only safe flags and ids — never paths, patch bodies, or tokens.
 
@@ -100,7 +100,7 @@ Rules:
 - Slim tool input keeps only short locator and task-identity fields (path, pattern, query, command, `subagent_type`, `description`, skill `name` / `id`). Slim metadata keeps `sessionId`, skill `name`, plus edit `additions`/`deletions`. Projection still drops result bodies, task prompts, patches, and large write payloads.
 - Assistant `text` stays intact. User rows are no longer wholesale pass-through: their `file` parts are projected; other user parts stay as-is.
 - `file` projection keeps already-present size/width/height (top-level or `metadata`). `byteSize` is derived from a data URL when present. PNG/GIF/JPEG/WebP headers may fill missing `width`/`height`. Unknown dimensions omit those fields.
-- Message `info.summary.diffs` is L1-projected to `diffCount` / `hasDiffs` (file array removed). Reconcile preserves full parts and applies this same L1 summary projection to response-page byte budgeting and serialization; raw upstream scan budgets retain raw bytes. Clients that need file rows or patches use the Changes L2/L3 API.
+- Message `info.summary.diffs` is L1-projected to a slim file list plus `diffCount` / `hasDiffs` (never patch bodies). Reconcile preserves full parts and applies this same L1 summary projection to response-page byte budgeting and serialization; raw upstream scan budgets retain raw bytes. Clients that need a dedicated file-list envelope or per-file patches use the Changes L2/L3 API.
 - A slim `file` part is a reference, not renderable content. Clients must hydrate the full message (`session.message` by `messageID`) before painting or editing the attachment. Do not treat slim file metadata as a complete part.
 - Records that gain nothing from projection keep their original object reference, so identity-based change detection downstream still works.
 - Projection applies to every turn-page response, including first packet, prepend, and explicit cursors (`before` present). Reconcile routes return full parts, unchanged.

package/server/lib/session-turn-pages/reconcile.routes.test.js

@@ -244,17 +244,21 @@ describe('registerSessionTurnPageRoutes — reconcile', () => {
 
     expect(res.statusCode).toBe(200);
     expect(res.body.records[0].info.summary).toEqual({
+      diffs: [{
+        file: 'src/large.ts',
+        status: 'modified',
+        additions: 5,
+        deletions: 1,
+      }],
       diffCount: 1,
       hasDiffs: true,
     });
-    expect(res.body.records[0].info.summary.diffs).toBeUndefined();
     expect(res.body.records[0].parts[0]).toEqual({
       id: 'prt_1',
       type: 'text',
       text: 'full recovery text',
     });
     expect(JSON.stringify(res.body)).not.toContain(patch);
-    expect(JSON.stringify(res.body)).not.toContain('src/large.ts');
   });
 
   it('returns HTTP 200 for resetRequired (anchor lost / budget rebuild)', async () => {

package/server/lib/session-turn-pages/reconcile.service.test.js

@@ -512,13 +512,17 @@ describe('createSessionReconcileService', () => {
 
     expect(result.ok).toBe(true);
     expect(result.records[0].info.summary).toEqual({
+      diffs: [{
+        file: 'src/large.ts',
+        status: 'modified',
+        additions: 7,
+        deletions: 2,
+      }],
       diffCount: 1,
       hasDiffs: true,
     });
-    expect(result.records[0].info.summary.diffs).toBeUndefined();
     expect(result.responseBytes).toBeLessThanOrEqual(1024);
     expect(JSON.stringify(result.records)).not.toContain(patch);
-    expect(JSON.stringify(result.records)).not.toContain('src/large.ts');
   });
 
   it('rejects continuation that does not bind runtime/directory/session/anchor/head', async () => {

package/server/lib/session-turn-pages/routes.js

@@ -307,7 +307,7 @@ const createSdkFetchDiff = ({ buildOpenCodeUrl, getOpenCodeAuthHeaders, logger }
 
 /**
  * Project exact message GET payload: keep original `{ info, parts }` shape,
- * only L1-project `info.summary.diffs` → diffCount/hasDiffs.
+ * only L1-project `info.summary.diffs` → slim file list + diffCount/hasDiffs.
  */
 export const projectExactMessagePayload = (payload) => {
   if (!payload || typeof payload !== 'object' || Array.isArray(payload)) {
@@ -625,8 +625,8 @@ export const registerSessionTurnPageRoutes = (app, dependencies = {}) => {
 
   /**
    * Exact message GET — registered before generic `/api` proxy so materialize /
-   * recovery never relay a raw 14MB `summary.diffs` array. Returns the official
-   * `{ info, parts }` shape with L1 summary projection only.
+   * recovery never relay raw multi-megabyte patch bodies in `summary.diffs`.
+   * Returns the official `{ info, parts }` shape with L1 slim-list projection.
    */
   app.get('/api/session/:sessionID/message/:messageID', async (req, res) => {
     const sessionID = req.params?.sessionID;

package/server/lib/session-turn-pages/routes.test.js

@@ -320,7 +320,7 @@ describe('registerSessionTurnPageRoutes', () => {
     expect(part.state.output).toBeUndefined();
   });
 
-  it('projects message summary.diffs to L1 count/marker before serializing a turn-page response', async () => {
+  it('projects message summary.diffs to L1 slim list + markers before serializing a turn-page response', async () => {
     const patch = 'diff-body-'.repeat(20_000);
     const loadPage = vi.fn(async () => ({
       ok: true,
@@ -335,6 +335,8 @@ describe('registerSessionTurnPageRoutes', () => {
               additions: 9,
               deletions: 3,
               patch,
+              before: 'old',
+              after: 'new',
             }],
           },
         },
@@ -356,15 +358,21 @@ describe('registerSessionTurnPageRoutes', () => {
 
     expect(res.statusCode).toBe(200);
     expect(res.body.records[0].info.summary).toEqual({
+      diffs: [{
+        file: 'src/large.ts',
+        status: 'modified',
+        additions: 9,
+        deletions: 3,
+      }],
       diffCount: 1,
       hasDiffs: true,
     });
-    expect(res.body.records[0].info.summary.diffs).toBeUndefined();
     expect(JSON.stringify(res.body)).not.toContain(patch);
-    expect(JSON.stringify(res.body)).not.toContain('src/large.ts');
+    expect(JSON.stringify(res.body)).not.toContain('"before"');
+    expect(JSON.stringify(res.body)).not.toContain('"after"');
   });
 
-  it('keeps L1 turn-page serialization under 64KiB for a 463-file / ~14MB patch summary', async () => {
+  it('keeps L1 turn-page serialization under 256KiB for a 463-file / ~14MB patch summary', async () => {
     const patchBody = 'P'.repeat(Math.floor((14 * 1024 * 1024) / 463));
     const diffs = Array.from({ length: 463 }, (_, i) => ({
       file: `src/generated/file-${i}.ts`,
@@ -374,6 +382,8 @@ describe('registerSessionTurnPageRoutes', () => {
       patch: `${patchBody}-${i}`,
       before: `before-${i}`,
       after: `after-${i}`,
+      from: `from-${i}`,
+      to: `to-${i}`,
     }));
     const loadPage = vi.fn(async () => ({
       ok: true,
@@ -401,16 +411,29 @@ describe('registerSessionTurnPageRoutes', () => {
 
     expect(res.statusCode).toBe(200);
     const serialized = JSON.stringify(res.body);
-    expect(res.body.records[0].info.summary).toEqual({
-      title: 'huge',
-      diffCount: 463,
-      hasDiffs: true,
+    const summary = res.body.records[0].info.summary;
+    expect(summary.diffCount).toBe(463);
+    expect(summary.hasDiffs).toBe(true);
+    expect(summary.diffs).toHaveLength(463);
+    expect(summary.diffs[0]).toEqual({
+      file: 'src/generated/file-0.ts',
+      status: 'modified',
+      additions: 0,
+      deletions: 0,
+    });
+    expect(summary.diffs[462]).toEqual({
+      file: 'src/generated/file-462.ts',
+      status: 'modified',
+      additions: 462 % 7,
+      deletions: 462 % 3,
     });
-    expect(res.body.records[0].info.summary.diffs).toBeUndefined();
-    expect(serialized).not.toContain('"diffs"');
     expect(serialized).not.toContain(patchBody.slice(0, 64));
-    expect(serialized).not.toContain('src/generated/file-0.ts');
-    expect(Buffer.byteLength(serialized, 'utf8')).toBeLessThan(64 * 1024);
+    expect(serialized).not.toContain('"patch"');
+    expect(serialized).not.toContain('"before"');
+    expect(serialized).not.toContain('"after"');
+    expect(serialized).not.toContain('"from"');
+    expect(serialized).not.toContain('"to"');
+    expect(Buffer.byteLength(serialized, 'utf8')).toBeLessThan(256 * 1024);
   });
 
   it('projects file parts on first packet and prepend the same way', async () => {
@@ -630,6 +653,12 @@ describe('registerSessionTurnPageRoutes — exact message GET', () => {
         role: 'user',
         summary: {
           title: 'turn',
+          diffs: [{
+            file: 'a.ts',
+            status: 'modified',
+            additions: 2,
+            deletions: 1,
+          }],
           diffCount: 1,
           hasDiffs: true,
         },
@@ -637,7 +666,6 @@ describe('registerSessionTurnPageRoutes — exact message GET', () => {
       parts: [{ id: 'prt_1', type: 'text', text: 'hello' }],
     });
     expect(JSON.stringify(res.body)).not.toContain(patch);
-    expect(JSON.stringify(res.body)).not.toContain('a.ts');
   });
 
   it('rejects oversize messageID / sessionID with 400', async () => {

package/server/lib/session-turn-pages/service.js

@@ -459,8 +459,10 @@ const isUserRecord = (record) => {
 };
 
 /**
- * L1: project message `summary.diffs` arrays to `{ diffCount, hasDiffs }` and
- * remove the file array. Preserves every other message / summary field.
+ * L1: project message `summary.diffs` to a slim file list
+ * `{ file, status?, additions, deletions }` plus additive `diffCount` /
+ * `hasDiffs`. Never retains patch/before/after/from/to. Preserves every other
+ * message / summary field.
  */
 export const projectMessageDiffSummaries = (records) => {
   if (!Array.isArray(records) || records.length === 0) return records;

package/server/lib/session-turn-pages/service.test.js

@@ -172,7 +172,7 @@ describe('projectSlimParts', () => {
     },
   });
 
-  it('projects message summary.diffs to L1 count/marker even when parts are empty', () => {
+  it('projects message summary.diffs to L1 slim list + markers even when parts are empty', () => {
     const patch = 'diff-body-'.repeat(20_000);
     const [projected] = projectSlimParts([{
       info: {
@@ -186,6 +186,10 @@ describe('projectSlimParts', () => {
             additions: 12,
             deletions: 4,
             patch,
+            before: 'old-body',
+            after: 'new-body',
+            from: 'from-blob',
+            to: 'to-blob',
           }],
         },
       },
@@ -194,12 +198,18 @@ describe('projectSlimParts', () => {
 
     expect(projected.info.summary).toEqual({
       title: 'kept',
+      diffs: [{
+        file: 'src/large.ts',
+        status: 'modified',
+        additions: 12,
+        deletions: 4,
+      }],
       diffCount: 1,
       hasDiffs: true,
     });
-    expect(projected.info.summary.diffs).toBeUndefined();
     expect(JSON.stringify(projected)).not.toContain(patch);
-    expect(JSON.stringify(projected)).not.toContain('src/large.ts');
+    expect(JSON.stringify(projected)).not.toContain('old-body');
+    expect(JSON.stringify(projected)).not.toContain('from-blob');
   });
 
   it('drops tool output and metadata but keeps identity and status', () => {