@openchambery/web 1.18.2-beta.12 → 1.18.2-beta.13

package/server/lib/session-turn-pages/reconcile.routes.test.js

@@ -244,17 +244,21 @@ describe('registerSessionTurnPageRoutes — reconcile', () => {
 
     expect(res.statusCode).toBe(200);
     expect(res.body.records[0].info.summary).toEqual({
+      diffs: [{
+        file: 'src/large.ts',
+        status: 'modified',
+        additions: 5,
+        deletions: 1,
+      }],
       diffCount: 1,
       hasDiffs: true,
     });
-    expect(res.body.records[0].info.summary.diffs).toBeUndefined();
     expect(res.body.records[0].parts[0]).toEqual({
       id: 'prt_1',
       type: 'text',
       text: 'full recovery text',
     });
     expect(JSON.stringify(res.body)).not.toContain(patch);
-    expect(JSON.stringify(res.body)).not.toContain('src/large.ts');
   });
 
   it('returns HTTP 200 for resetRequired (anchor lost / budget rebuild)', async () => {

package/server/lib/session-turn-pages/reconcile.service.test.js

@@ -512,13 +512,17 @@ describe('createSessionReconcileService', () => {
 
     expect(result.ok).toBe(true);
     expect(result.records[0].info.summary).toEqual({
+      diffs: [{
+        file: 'src/large.ts',
+        status: 'modified',
+        additions: 7,
+        deletions: 2,
+      }],
       diffCount: 1,
       hasDiffs: true,
     });
-    expect(result.records[0].info.summary.diffs).toBeUndefined();
     expect(result.responseBytes).toBeLessThanOrEqual(1024);
     expect(JSON.stringify(result.records)).not.toContain(patch);
-    expect(JSON.stringify(result.records)).not.toContain('src/large.ts');
   });
 
   it('rejects continuation that does not bind runtime/directory/session/anchor/head', async () => {

package/server/lib/session-turn-pages/routes.js

@@ -307,7 +307,7 @@ const createSdkFetchDiff = ({ buildOpenCodeUrl, getOpenCodeAuthHeaders, logger }
 
 /**
  * Project exact message GET payload: keep original `{ info, parts }` shape,
- * only L1-project `info.summary.diffs` → diffCount/hasDiffs.
+ * only L1-project `info.summary.diffs` → slim file list + diffCount/hasDiffs.
  */
 export const projectExactMessagePayload = (payload) => {
   if (!payload || typeof payload !== 'object' || Array.isArray(payload)) {
@@ -625,8 +625,8 @@ export const registerSessionTurnPageRoutes = (app, dependencies = {}) => {
 
   /**
    * Exact message GET — registered before generic `/api` proxy so materialize /
-   * recovery never relay a raw 14MB `summary.diffs` array. Returns the official
-   * `{ info, parts }` shape with L1 summary projection only.
+   * recovery never relay raw multi-megabyte patch bodies in `summary.diffs`.
+   * Returns the official `{ info, parts }` shape with L1 slim-list projection.
    */
   app.get('/api/session/:sessionID/message/:messageID', async (req, res) => {
     const sessionID = req.params?.sessionID;

package/server/lib/session-turn-pages/routes.test.js

@@ -320,7 +320,7 @@ describe('registerSessionTurnPageRoutes', () => {
     expect(part.state.output).toBeUndefined();
   });
 
-  it('projects message summary.diffs to L1 count/marker before serializing a turn-page response', async () => {
+  it('projects message summary.diffs to L1 slim list + markers before serializing a turn-page response', async () => {
     const patch = 'diff-body-'.repeat(20_000);
     const loadPage = vi.fn(async () => ({
       ok: true,
@@ -335,6 +335,8 @@ describe('registerSessionTurnPageRoutes', () => {
               additions: 9,
               deletions: 3,
               patch,
+              before: 'old',
+              after: 'new',
             }],
           },
         },
@@ -356,15 +358,21 @@ describe('registerSessionTurnPageRoutes', () => {
 
     expect(res.statusCode).toBe(200);
     expect(res.body.records[0].info.summary).toEqual({
+      diffs: [{
+        file: 'src/large.ts',
+        status: 'modified',
+        additions: 9,
+        deletions: 3,
+      }],
       diffCount: 1,
       hasDiffs: true,
     });
-    expect(res.body.records[0].info.summary.diffs).toBeUndefined();
     expect(JSON.stringify(res.body)).not.toContain(patch);
-    expect(JSON.stringify(res.body)).not.toContain('src/large.ts');
+    expect(JSON.stringify(res.body)).not.toContain('"before"');
+    expect(JSON.stringify(res.body)).not.toContain('"after"');
   });
 
-  it('keeps L1 turn-page serialization under 64KiB for a 463-file / ~14MB patch summary', async () => {
+  it('keeps L1 turn-page serialization under 256KiB for a 463-file / ~14MB patch summary', async () => {
     const patchBody = 'P'.repeat(Math.floor((14 * 1024 * 1024) / 463));
     const diffs = Array.from({ length: 463 }, (_, i) => ({
       file: `src/generated/file-${i}.ts`,
@@ -374,6 +382,8 @@ describe('registerSessionTurnPageRoutes', () => {
       patch: `${patchBody}-${i}`,
       before: `before-${i}`,
       after: `after-${i}`,
+      from: `from-${i}`,
+      to: `to-${i}`,
     }));
     const loadPage = vi.fn(async () => ({
       ok: true,
@@ -401,16 +411,29 @@ describe('registerSessionTurnPageRoutes', () => {
 
     expect(res.statusCode).toBe(200);
     const serialized = JSON.stringify(res.body);
-    expect(res.body.records[0].info.summary).toEqual({
-      title: 'huge',
-      diffCount: 463,
-      hasDiffs: true,
+    const summary = res.body.records[0].info.summary;
+    expect(summary.diffCount).toBe(463);
+    expect(summary.hasDiffs).toBe(true);
+    expect(summary.diffs).toHaveLength(463);
+    expect(summary.diffs[0]).toEqual({
+      file: 'src/generated/file-0.ts',
+      status: 'modified',
+      additions: 0,
+      deletions: 0,
+    });
+    expect(summary.diffs[462]).toEqual({
+      file: 'src/generated/file-462.ts',
+      status: 'modified',
+      additions: 462 % 7,
+      deletions: 462 % 3,
     });
-    expect(res.body.records[0].info.summary.diffs).toBeUndefined();
-    expect(serialized).not.toContain('"diffs"');
     expect(serialized).not.toContain(patchBody.slice(0, 64));
-    expect(serialized).not.toContain('src/generated/file-0.ts');
-    expect(Buffer.byteLength(serialized, 'utf8')).toBeLessThan(64 * 1024);
+    expect(serialized).not.toContain('"patch"');
+    expect(serialized).not.toContain('"before"');
+    expect(serialized).not.toContain('"after"');
+    expect(serialized).not.toContain('"from"');
+    expect(serialized).not.toContain('"to"');
+    expect(Buffer.byteLength(serialized, 'utf8')).toBeLessThan(256 * 1024);
   });
 
   it('projects file parts on first packet and prepend the same way', async () => {
@@ -630,6 +653,12 @@ describe('registerSessionTurnPageRoutes — exact message GET', () => {
         role: 'user',
         summary: {
           title: 'turn',
+          diffs: [{
+            file: 'a.ts',
+            status: 'modified',
+            additions: 2,
+            deletions: 1,
+          }],
           diffCount: 1,
           hasDiffs: true,
         },
@@ -637,7 +666,6 @@ describe('registerSessionTurnPageRoutes — exact message GET', () => {
       parts: [{ id: 'prt_1', type: 'text', text: 'hello' }],
     });
     expect(JSON.stringify(res.body)).not.toContain(patch);
-    expect(JSON.stringify(res.body)).not.toContain('a.ts');
   });
 
   it('rejects oversize messageID / sessionID with 400', async () => {

package/server/lib/session-turn-pages/service.js

@@ -459,8 +459,10 @@ const isUserRecord = (record) => {
 };
 
 /**
- * L1: project message `summary.diffs` arrays to `{ diffCount, hasDiffs }` and
- * remove the file array. Preserves every other message / summary field.
+ * L1: project message `summary.diffs` to a slim file list
+ * `{ file, status?, additions, deletions }` plus additive `diffCount` /
+ * `hasDiffs`. Never retains patch/before/after/from/to. Preserves every other
+ * message / summary field.
  */
 export const projectMessageDiffSummaries = (records) => {
   if (!Array.isArray(records) || records.length === 0) return records;

package/server/lib/session-turn-pages/service.test.js

@@ -172,7 +172,7 @@ describe('projectSlimParts', () => {
     },
   });
 
-  it('projects message summary.diffs to L1 count/marker even when parts are empty', () => {
+  it('projects message summary.diffs to L1 slim list + markers even when parts are empty', () => {
     const patch = 'diff-body-'.repeat(20_000);
     const [projected] = projectSlimParts([{
       info: {
@@ -186,6 +186,10 @@ describe('projectSlimParts', () => {
             additions: 12,
             deletions: 4,
             patch,
+            before: 'old-body',
+            after: 'new-body',
+            from: 'from-blob',
+            to: 'to-blob',
           }],
         },
       },
@@ -194,12 +198,18 @@ describe('projectSlimParts', () => {
 
     expect(projected.info.summary).toEqual({
       title: 'kept',
+      diffs: [{
+        file: 'src/large.ts',
+        status: 'modified',
+        additions: 12,
+        deletions: 4,
+      }],
       diffCount: 1,
       hasDiffs: true,
     });
-    expect(projected.info.summary.diffs).toBeUndefined();
     expect(JSON.stringify(projected)).not.toContain(patch);
-    expect(JSON.stringify(projected)).not.toContain('src/large.ts');
+    expect(JSON.stringify(projected)).not.toContain('old-body');
+    expect(JSON.stringify(projected)).not.toContain('from-blob');
   });
 
   it('drops tool output and metadata but keeps identity and status', () => {