@wrongstack/core 0.306.3 → 0.307.0

package/dist/session-catalog/project-server.js

@@ -4,7 +4,7 @@
 import { randomBytes as randomBytes2, randomUUID as randomUUID2 } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as net from "node:net";
-import * as path3 from "node:path";
+import * as path4 from "node:path";
 import { bindProjectEndpoint } from "@wrongstack/persistence";
 
 // src/security/file-permissions.ts
@@ -179,9 +179,9 @@ function sessionCatalogProjectServerMetadataPath(projectDir) {
 }
 
 // src/session-catalog/store.ts
-import { createHash as createHash2, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
-import * as fs from "node:fs";
-import * as path2 from "node:path";
+import { randomBytes, randomUUID } from "node:crypto";
+import * as fs2 from "node:fs";
+import * as path3 from "node:path";
 
 // src/coordination/sqlite-mailbox-schema.ts
 import { createRequire } from "node:module";
@@ -221,6 +221,24 @@ function loadDatabaseSync() {
 }
 
 // src/security/secret-scrubber.ts
+var JSON_CREDENTIAL_KEY_ANCHORS = [
+  'Key"',
+  'key"',
+  'KEY"',
+  'token"',
+  'Token"',
+  'TOKEN"',
+  'secret"',
+  'Secret"',
+  'SECRET"',
+  'password"',
+  'Password"',
+  'PASSWORD"',
+  'authorization"',
+  'Authorization"',
+  'bearer"',
+  'Bearer"'
+];
 var PATTERNS = [
   // Anchored at the start where possible so partial matches inside larger
   // strings don't trigger false positives.
@@ -323,6 +341,30 @@ var PATTERNS = [
     regex: /(^|\s)([A-Z_]{4,}(?:KEY|TOKEN|SECRET|PASSWORD|PWD))\s*[:=]\s*['"]?([A-Za-z0-9_/+=-]{20,512})['"]?(?=\s|$)/g,
     anchor: ["KEY", "TOKEN", "SECRET", "PASSWORD", "PWD"]
   },
+  {
+    type: "json_credential_key",
+    // The JSON counterpart to `high_entropy_env`, and the pattern that the
+    // now-deleted `JSON_KEY_ANCHORS` list was written for. Without it those
+    // anchors only widened the cheap pre-scan — `hasCredentialAnchors` said
+    // "this text may hold a secret", every pattern then declined to match, and
+    // the value went out verbatim. `high_entropy_env` cannot cover these: it
+    // requires an UPPERCASE unquoted key (`API_KEY=…`), so `{"apiKey":"…"}`
+    // never matched.
+    //
+    // Tool results are routinely serialised as JSON, and a credential with no
+    // recognisable prefix (Azure, self-hosted gateways, Anthropic/Codex OAuth)
+    // has no other pattern that can catch it — this is the only thing standing
+    // between such a value and the session JSONL, chronicle, HQ broadcast and
+    // the model's own context.
+    //
+    // The key may carry a prefix (`"anthropicApiKey"`), but the credential word
+    // must END the key: `"tokenCount"` and `"maxTokens"` do not match, because
+    // the closing quote has to follow the word immediately.
+    // Value floor of 8 chars keeps enum-ish values (`"authorization":"none"`)
+    // out. Capture groups: 1=key + punctuation, 2=value, 3=closing quote.
+    regex: /("[A-Za-z0-9_]*(?:apiKey|api_key|token|secret|password|authorization|bearer|private_key|access_token|refresh_token|client_secret)"\s*:\s*")([^"\\]{8,512})(")/gi,
+    anchor: JSON_CREDENTIAL_KEY_ANCHORS
+  },
   // ── Ported from packages/plugins credential-patterns.ts (WS-034) ─────────
   // The plugin runtime carried 37 patterns while this scrubber — the one that
   // guards session JSONL, chronicle, HQ broadcast, WebUI events and the auth
@@ -405,9 +447,12 @@ var PATTERNS = [
     anchor: "GOCSPX-"
   }
 ];
-var SIMPLE_PATTERNS = PATTERNS.filter((p) => p.type !== "high_entropy_env");
+var SIMPLE_PATTERNS = PATTERNS.filter(
+  (p) => p.type !== "high_entropy_env" && p.type !== "json_credential_key"
+);
 var COMBINED_REGEX = new RegExp(SIMPLE_PATTERNS.map((p) => `(${p.regex.source})`).join("|"), "g");
 var HIGH_ENTROPY_REGEX = PATTERNS.find((p) => p.type === "high_entropy_env").regex;
+var JSON_CREDENTIAL_REGEX = PATTERNS.find((p) => p.type === "json_credential_key").regex;
 var COMBINED_REPLACEMENTS = SIMPLE_PATTERNS.map((p) => `[REDACTED:${p.type}]`);
 var SCRUB_CHUNK_BYTES = 64 * 1024;
 var SCRUB_OVERLAP_BYTES = 1024;
@@ -418,20 +463,7 @@ var PATTERN_ANCHORS = [
     )
   )
 ];
-var JSON_KEY_ANCHORS = [
-  '"apiKey"',
-  '"api_key"',
-  '"token"',
-  '"secret"',
-  '"password"',
-  '"authorization"',
-  '"bearer"',
-  '"private_key"',
-  '"access_token"',
-  '"refresh_token"',
-  '"client_secret"'
-];
-var ALL_ANCHORS = [...PATTERN_ANCHORS, ...JSON_KEY_ANCHORS];
+var ALL_ANCHORS = PATTERN_ANCHORS;
 function hasCredentialAnchors(text) {
   for (const anchor of ALL_ANCHORS) {
     if (text.includes(anchor)) return true;
@@ -480,6 +512,9 @@ var DefaultSecretScrubber = class {
     out = out.replace(HIGH_ENTROPY_REGEX, (_match, lead, key, _value) => {
       return `${lead}${key}=[REDACTED:high_entropy_env]`;
     });
+    out = out.replace(JSON_CREDENTIAL_REGEX, (_match, keyPrefix, _value, closingQuote) => {
+      return `${keyPrefix}[REDACTED:json_credential_key]${closingQuote}`;
+    });
     return out;
   }
   /**
@@ -521,6 +556,10 @@ function isPidAlive(pid) {
   }
 }
 
+// src/session-catalog/store-rebuild.ts
+import * as fs from "node:fs";
+import * as path2 from "node:path";
+
 // src/utils/session-scoped-path.ts
 var SESSION_SIDECAR_JSONL_SUFFIXES = [
   ".replay.jsonl",
@@ -537,7 +576,8 @@ function isSessionTranscriptFileName(name) {
   return !SESSION_SIDECAR_JSONL_SUFFIXES.some((suffix) => name.endsWith(suffix));
 }
 
-// src/session-catalog/store.ts
+// src/session-catalog/store-schema.ts
+import { createHash as createHash2, timingSafeEqual } from "node:crypto";
 var SCHEMA_VERSION = 1;
 var MAX_LEASE_MS = 12e4;
 var MAX_RESERVATION_MS = 6e4;
@@ -582,12 +622,192 @@ function boundPresenceValue(value, depth) {
   }
   return result;
 }
+function configureCatalogDatabase(db) {
+  db.exec(
+    "PRAGMA journal_mode=WAL; PRAGMA foreign_keys=ON; PRAGMA busy_timeout=5000; PRAGMA synchronous=NORMAL;"
+  );
+}
+function initializeCatalogSchema(db) {
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS catalog_meta (key TEXT PRIMARY KEY, value TEXT NOT NULL);
+    CREATE TABLE IF NOT EXISTS sessions (
+      session_id TEXT PRIMARY KEY,
+      transcript_relative_path TEXT NOT NULL,
+      summary_relative_path TEXT NOT NULL,
+      summary_json TEXT NOT NULL,
+      transcript_size INTEGER NOT NULL DEFAULT 0,
+      transcript_mtime_ms REAL NOT NULL DEFAULT 0,
+      summary_revision INTEGER NOT NULL DEFAULT 1,
+      indexed_at TEXT NOT NULL,
+      damaged INTEGER NOT NULL DEFAULT 0
+    );
+    CREATE TABLE IF NOT EXISTS session_leases (
+      session_id TEXT PRIMARY KEY,
+      lease_id TEXT NOT NULL UNIQUE,
+      lease_secret_hash TEXT NOT NULL,
+      owner_instance_id TEXT NOT NULL,
+      owner_pid INTEGER NOT NULL,
+      owner_started_at TEXT NOT NULL,
+      entry_json TEXT NOT NULL,
+      agent_revision INTEGER NOT NULL DEFAULT 0,
+      status TEXT NOT NULL,
+      last_heartbeat_at INTEGER NOT NULL,
+      lease_expires_at INTEGER NOT NULL
+    );
+    CREATE TABLE IF NOT EXISTS resume_reservations (
+      reservation_id TEXT PRIMARY KEY,
+      target_session_id TEXT NOT NULL UNIQUE,
+      requester_instance_id TEXT NOT NULL,
+      current_session_id TEXT,
+      created_at INTEGER NOT NULL,
+      expires_at INTEGER NOT NULL
+    );
+    CREATE TABLE IF NOT EXISTS maintenance_leases (
+      session_id TEXT PRIMARY KEY,
+      operation TEXT NOT NULL,
+      holder_id TEXT NOT NULL,
+      lease_id TEXT NOT NULL UNIQUE,
+      acquired_at INTEGER NOT NULL,
+      expires_at INTEGER NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS idx_sessions_activity ON sessions(indexed_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_leases_expiry ON session_leases(lease_expires_at);
+    CREATE INDEX IF NOT EXISTS idx_reservations_expiry ON resume_reservations(expires_at);
+    CREATE INDEX IF NOT EXISTS idx_maintenance_expiry ON maintenance_leases(expires_at);
+  `);
+  db.prepare("INSERT INTO catalog_meta(key,value) VALUES (?,?) ON CONFLICT(key) DO NOTHING").run("schema_version", String(SCHEMA_VERSION));
+  db.prepare("INSERT INTO catalog_meta(key,value) VALUES (?,?) ON CONFLICT(key) DO NOTHING").run("generation", "0");
+  const row = db.prepare("SELECT value FROM catalog_meta WHERE key=?").get("schema_version");
+  if (Number(row.value) !== SCHEMA_VERSION)
+    throw new Error(`Unsupported session catalog schema ${row.value}`);
+}
+
+// src/session-catalog/store-rebuild.ts
+function walkSessionFiles(root, suffix) {
+  const result = [];
+  const visit = (dir) => {
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+      if (entry.isDirectory()) {
+        if (entry.name !== "_cas" && entry.name !== "_trash") visit(path2.join(dir, entry.name));
+      } else if (entry.isFile() && entry.name.endsWith(suffix))
+        result.push(path2.join(dir, entry.name));
+    }
+  };
+  visit(root);
+  return result;
+}
+function summarizeTranscriptFile(transcriptFilePath, id) {
+  const lines = fs.readFileSync(transcriptFilePath, "utf8").split(/\r?\n/);
+  let start;
+  let endedAt;
+  let lastActivityAt;
+  let messageCount = 0;
+  let iterationCount = 0;
+  let toolCallCount = 0;
+  let compactionCount = 0;
+  let tokenTotal = 0;
+  for (const line of lines) {
+    if (!line) continue;
+    let event;
+    try {
+      event = parseJson(line);
+    } catch {
+      continue;
+    }
+    lastActivityAt = event.ts;
+    if (event.type === "session_start") start = event;
+    if (event.type === "session_end") endedAt = event.ts;
+    if (event.type === "message_appended" && (event.message.role === "user" || event.message.role === "assistant"))
+      messageCount++;
+    if (event.type === "llm_response") {
+      iterationCount++;
+      tokenTotal += event.usage.input + event.usage.output + (event.usage.cacheRead ?? 0) + (event.usage.cacheWrite ?? 0);
+    }
+    if (event.type === "tool_call_end") toolCallCount++;
+    if (event.type === "compaction") compactionCount++;
+  }
+  if (!start) throw new Error("missing session_start");
+  return {
+    id,
+    title: id,
+    startedAt: start.ts,
+    ...endedAt ? { endedAt } : {},
+    model: start.model,
+    provider: start.provider,
+    tokenTotal,
+    ...lastActivityAt ? { lastActivityAt } : {},
+    messageCount,
+    iterationCount,
+    toolCallCount,
+    compactionCount
+  };
+}
+function rebuildCatalogIndex(db, sessionsDir, containedPathFn, transactionFn, bumpGenerationFn) {
+  const summaries = walkSessionFiles(sessionsDir, ".summary.json");
+  const transcripts = walkSessionFiles(sessionsDir, ".jsonl").filter(
+    (file) => isSessionTranscriptFileName(path2.basename(file))
+  );
+  const ids = /* @__PURE__ */ new Set();
+  for (const file of [...summaries, ...transcripts]) {
+    const relative3 = path2.relative(sessionsDir, file).replaceAll("\\", "/");
+    ids.add(relative3.replace(/\.summary\.json$|\.jsonl$/, ""));
+  }
+  let indexed = 0;
+  let damaged = 0;
+  transactionFn(() => {
+    db.prepare("DELETE FROM sessions").run();
+    for (const id of ids) {
+      try {
+        const summaryFile = containedPathFn(`${id}.summary.json`);
+        const summary = fs.existsSync(summaryFile) ? parseJson(fs.readFileSync(summaryFile, "utf8")) : summarizeTranscriptFile(containedPathFn(`${id}.jsonl`), id);
+        if (!summary || summary.id !== id) throw new Error("summary identity mismatch");
+        const transcript = containedPathFn(`${id}.jsonl`);
+        const stat = fs.existsSync(transcript) ? fs.statSync(transcript) : void 0;
+        const now = (/* @__PURE__ */ new Date()).toISOString();
+        db.prepare(
+          "INSERT INTO sessions(session_id,transcript_relative_path,summary_relative_path,summary_json,transcript_size,transcript_mtime_ms,summary_revision,indexed_at,damaged) VALUES (?,?,?,?,?,?,?,?,0)"
+        ).run(
+          id,
+          `${id}.jsonl`,
+          `${id}.summary.json`,
+          JSON.stringify(summary),
+          stat?.size ?? 0,
+          stat?.mtimeMs ?? 0,
+          1,
+          now
+        );
+        indexed++;
+      } catch {
+        const now = (/* @__PURE__ */ new Date()).toISOString();
+        const fallback = {
+          id,
+          title: id,
+          startedAt: now,
+          model: "",
+          provider: "",
+          tokenTotal: 0
+        };
+        db.prepare(
+          "INSERT INTO sessions(session_id,transcript_relative_path,summary_relative_path,summary_json,summary_revision,indexed_at,damaged) VALUES (?,?,?,?,1,?,1)"
+        ).run(id, `${id}.jsonl`, `${id}.summary.json`, JSON.stringify(fallback), now);
+        damaged++;
+      }
+    }
+    db.prepare(
+      "INSERT INTO catalog_meta(key,value) VALUES ('last_reconciliation',?) ON CONFLICT(key) DO UPDATE SET value=excluded.value"
+    ).run((/* @__PURE__ */ new Date()).toISOString());
+    bumpGenerationFn();
+  });
+  return { indexed, damaged };
+}
+
+// src/session-catalog/store.ts
 var SessionCatalogStore = class {
   constructor(projectDir) {
     this.projectDir = projectDir;
-    this.sessionsDir = path2.join(projectDir, "sessions");
-    fs.mkdirSync(this.sessionsDir, { recursive: true, mode: 448 });
-    this.databasePath = path2.join(this.sessionsDir, "catalog.sqlite");
+    this.sessionsDir = path3.join(projectDir, "sessions");
+    fs2.mkdirSync(this.sessionsDir, { recursive: true, mode: 448 });
+    this.databasePath = path3.join(this.sessionsDir, "catalog.sqlite");
     const Database = loadDatabaseSync();
     this.db = new Database(this.databasePath);
     try {
@@ -604,12 +824,12 @@ var SessionCatalogStore = class {
       this.db.close();
       const quarantine = `${this.databasePath}.corrupt-${Date.now()}`;
       try {
-        fs.renameSync(this.databasePath, quarantine);
+        fs2.renameSync(this.databasePath, quarantine);
       } catch {
       }
       for (const suffix of ["-wal", "-shm"]) {
         try {
-          fs.renameSync(`${this.databasePath}${suffix}`, `${quarantine}${suffix}`);
+          fs2.renameSync(`${this.databasePath}${suffix}`, `${quarantine}${suffix}`);
         } catch {
         }
       }
@@ -621,7 +841,7 @@ var SessionCatalogStore = class {
     const rowCount = Number(
       this.db.prepare("SELECT COUNT(*) AS count FROM sessions").get().count
     );
-    if (rowCount === 0 && this.walkFiles(this.sessionsDir, ".jsonl").some((file) => !file.endsWith("_index.jsonl"))) {
+    if (rowCount === 0 && walkSessionFiles(this.sessionsDir, ".jsonl").some((file) => !file.endsWith("_index.jsonl"))) {
       this.rebuildCatalog();
     }
   }
@@ -631,66 +851,13 @@ var SessionCatalogStore = class {
   db;
   scrubber = new DefaultSecretScrubber();
   configureDatabase() {
-    this.db.exec(
-      "PRAGMA journal_mode=WAL; PRAGMA foreign_keys=ON; PRAGMA busy_timeout=5000; PRAGMA synchronous=NORMAL;"
-    );
+    configureCatalogDatabase(this.db);
   }
   close() {
     this.db.close();
   }
   initialize() {
-    this.db.exec(`
-      CREATE TABLE IF NOT EXISTS catalog_meta (key TEXT PRIMARY KEY, value TEXT NOT NULL);
-      CREATE TABLE IF NOT EXISTS sessions (
-        session_id TEXT PRIMARY KEY,
-        transcript_relative_path TEXT NOT NULL,
-        summary_relative_path TEXT NOT NULL,
-        summary_json TEXT NOT NULL,
-        transcript_size INTEGER NOT NULL DEFAULT 0,
-        transcript_mtime_ms REAL NOT NULL DEFAULT 0,
-        summary_revision INTEGER NOT NULL DEFAULT 1,
-        indexed_at TEXT NOT NULL,
-        damaged INTEGER NOT NULL DEFAULT 0
-      );
-      CREATE TABLE IF NOT EXISTS session_leases (
-        session_id TEXT PRIMARY KEY,
-        lease_id TEXT NOT NULL UNIQUE,
-        lease_secret_hash TEXT NOT NULL,
-        owner_instance_id TEXT NOT NULL,
-        owner_pid INTEGER NOT NULL,
-        owner_started_at TEXT NOT NULL,
-        entry_json TEXT NOT NULL,
-        agent_revision INTEGER NOT NULL DEFAULT 0,
-        status TEXT NOT NULL,
-        last_heartbeat_at INTEGER NOT NULL,
-        lease_expires_at INTEGER NOT NULL
-      );
-      CREATE TABLE IF NOT EXISTS resume_reservations (
-        reservation_id TEXT PRIMARY KEY,
-        target_session_id TEXT NOT NULL UNIQUE,
-        requester_instance_id TEXT NOT NULL,
-        current_session_id TEXT,
-        created_at INTEGER NOT NULL,
-        expires_at INTEGER NOT NULL
-      );
-      CREATE TABLE IF NOT EXISTS maintenance_leases (
-        session_id TEXT PRIMARY KEY,
-        operation TEXT NOT NULL,
-        holder_id TEXT NOT NULL,
-        lease_id TEXT NOT NULL UNIQUE,
-        acquired_at INTEGER NOT NULL,
-        expires_at INTEGER NOT NULL
-      );
-      CREATE INDEX IF NOT EXISTS idx_sessions_activity ON sessions(indexed_at DESC);
-      CREATE INDEX IF NOT EXISTS idx_leases_expiry ON session_leases(lease_expires_at);
-      CREATE INDEX IF NOT EXISTS idx_reservations_expiry ON resume_reservations(expires_at);
-      CREATE INDEX IF NOT EXISTS idx_maintenance_expiry ON maintenance_leases(expires_at);
-    `);
-    this.db.prepare("INSERT INTO catalog_meta(key,value) VALUES (?,?) ON CONFLICT(key) DO NOTHING").run("schema_version", String(SCHEMA_VERSION));
-    this.db.prepare("INSERT INTO catalog_meta(key,value) VALUES (?,?) ON CONFLICT(key) DO NOTHING").run("generation", "0");
-    const row = this.db.prepare("SELECT value FROM catalog_meta WHERE key=?").get("schema_version");
-    if (Number(row.value) !== SCHEMA_VERSION)
-      throw new Error(`Unsupported session catalog schema ${row.value}`);
+    initializeCatalogSchema(this.db);
   }
   transaction(run) {
     this.db.exec("BEGIN IMMEDIATE");
@@ -731,21 +898,6 @@ var SessionCatalogStore = class {
   leaseRow(sessionId) {
     return this.db.prepare("SELECT * FROM session_leases WHERE session_id=?").get(sessionId);
   }
-  /**
-   * True when `sessionId` has a live `session_leases` row owned by a
-   * different OS process than the *caller*. Used by
-   * `acquireMaintenance` to distinguish "another running wstack" (which
-   * must be fenced off) from "this very TUI owning its own session"
-   * (which is allowed to claim a non-destructive maintenance lease on
-   * its own transcript).
-   *
-   * `callerPid` must be the pid of the process that asked for the lease,
-   * NOT `process.pid`. In the built runtime this store lives inside the
-   * detached project-catalog daemon, so `process.pid` is the daemon's and
-   * would mark every lease — including the caller's own session — foreign,
-   * making `/clear` and `/rewind` fail with "Session … is live". Callers
-   * that run the store in-process may omit it.
-   */
   foreignLiveLease(sessionId, callerPid = process.pid) {
     const live = this.leaseRow(sessionId);
     return Boolean(live) && live.owner_pid !== callerPid;
@@ -835,7 +987,7 @@ var SessionCatalogStore = class {
       if (this.maintenanceExists(targetSessionId))
         throw conflict(`Session ${targetSessionId} is under maintenance`);
       const catalog = this.db.prepare("SELECT 1 AS yes FROM sessions WHERE session_id=?").get(targetSessionId);
-      if (!catalog && !fs.existsSync(this.containedPath(`${targetSessionId}.jsonl`)))
+      if (!catalog && !fs2.existsSync(this.containedPath(`${targetSessionId}.jsonl`)))
         throw new Error(`Session not found: ${targetSessionId}`);
       const reservationId = randomUUID();
       const now = Date.now();
@@ -963,9 +1115,9 @@ var SessionCatalogStore = class {
   }
   containedPath(relative3) {
     assertId(relative3.replace(/\.(jsonl|summary\.json)$/, ""), "session path");
-    const root = path2.resolve(this.sessionsDir);
-    const candidate = path2.resolve(root, relative3);
-    const prefix = `${root}${path2.sep}`;
+    const root = path3.resolve(this.sessionsDir);
+    const candidate = path3.resolve(root, relative3);
+    const prefix = `${root}${path3.sep}`;
     if (candidate !== root && !(process.platform === "win32" ? candidate.toLowerCase().startsWith(prefix.toLowerCase()) : candidate.startsWith(prefix)))
       throw new TypeError("Session path escapes sessions directory");
     return candidate;
@@ -981,7 +1133,7 @@ var SessionCatalogStore = class {
     transcriptRelativePath = normalizedTranscript;
     summaryRelativePath = normalizedSummary;
     const transcript = this.containedPath(transcriptRelativePath);
-    const stat = fs.existsSync(transcript) ? fs.statSync(transcript) : void 0;
+    const stat = fs2.existsSync(transcript) ? fs2.statSync(transcript) : void 0;
     const now = (/* @__PURE__ */ new Date()).toISOString();
     return this.transaction(() => {
       const prior = this.db.prepare("SELECT summary_revision FROM sessions WHERE session_id=?").get(summary.id);
@@ -1104,7 +1256,7 @@ var SessionCatalogStore = class {
     if (trimmed) summary.name = this.scrubber.scrub(trimmed).slice(0, 500);
     else delete summary.name;
     const summaryPath = this.containedPath(current.summaryRelativePath);
-    fs.mkdirSync(path2.dirname(summaryPath), { recursive: true, mode: 448 });
+    fs2.mkdirSync(path3.dirname(summaryPath), { recursive: true, mode: 448 });
     await atomicWrite(summaryPath, `${JSON.stringify(summary)}
 `, { mode: 384 });
     try {
@@ -1164,16 +1316,16 @@ var SessionCatalogStore = class {
       this.containedPath(`${sessionId}.plan.json`),
       this.containedPath(`${sessionId}.tasks.json`),
       this.containedPath(`${sessionId}.todos.json`),
-      path2.join(path2.dirname(transcript), path2.basename(sessionId))
+      path3.join(path3.dirname(transcript), path3.basename(sessionId))
     ];
-    const trashRoot = path2.join(this.sessionsDir, "_trash", lease.leaseId);
-    fs.mkdirSync(trashRoot, { recursive: true, mode: 448 });
+    const trashRoot = path3.join(this.sessionsDir, "_trash", lease.leaseId);
+    fs2.mkdirSync(trashRoot, { recursive: true, mode: 448 });
     const moved = [];
     try {
       artifacts.forEach((artifact, index) => {
-        if (!fs.existsSync(artifact)) return;
-        const target = path2.join(trashRoot, `${index}-${path2.basename(artifact)}`);
-        fs.renameSync(artifact, target);
+        if (!fs2.existsSync(artifact)) return;
+        const target = path3.join(trashRoot, `${index}-${path3.basename(artifact)}`);
+        fs2.renameSync(artifact, target);
         moved.push({ from: artifact, to: target });
       });
       this.transaction(() => {
@@ -1188,17 +1340,17 @@ var SessionCatalogStore = class {
     } catch (error) {
       for (const item of moved.reverse()) {
         try {
-          fs.mkdirSync(path2.dirname(item.from), { recursive: true, mode: 448 });
-          fs.renameSync(item.to, item.from);
+          fs2.mkdirSync(path3.dirname(item.from), { recursive: true, mode: 448 });
+          fs2.renameSync(item.to, item.from);
         } catch {
         }
       }
       throw error;
     }
     try {
-      fs.rmSync(trashRoot, { recursive: true, force: true });
-      const trashParent = path2.dirname(trashRoot);
-      if (fs.readdirSync(trashParent).length === 0) fs.rmdirSync(trashParent);
+      fs2.rmSync(trashRoot, { recursive: true, force: true });
+      const trashParent = path3.dirname(trashRoot);
+      if (fs2.readdirSync(trashParent).length === 0) fs2.rmdirSync(trashParent);
     } catch {
     }
   }
@@ -1219,122 +1371,13 @@ var SessionCatalogStore = class {
     return deleted;
   }
   rebuildCatalog() {
-    const summaries = this.walkFiles(this.sessionsDir, ".summary.json");
-    const transcripts = this.walkFiles(this.sessionsDir, ".jsonl").filter(
-      (file) => isSessionTranscriptFileName(path2.basename(file))
+    return rebuildCatalogIndex(
+      this.db,
+      this.sessionsDir,
+      (rel) => this.containedPath(rel),
+      (run) => this.transaction(run),
+      () => this.bumpGeneration()
     );
-    const ids = /* @__PURE__ */ new Set();
-    for (const file of [...summaries, ...transcripts]) {
-      const relative3 = path2.relative(this.sessionsDir, file).replaceAll("\\", "/");
-      ids.add(relative3.replace(/\.summary\.json$|\.jsonl$/, ""));
-    }
-    let indexed = 0;
-    let damaged = 0;
-    this.transaction(() => {
-      this.db.prepare("DELETE FROM sessions").run();
-      for (const id of ids) {
-        try {
-          const summaryFile = this.containedPath(`${id}.summary.json`);
-          const summary = fs.existsSync(summaryFile) ? parseJson(fs.readFileSync(summaryFile, "utf8")) : this.summarizeTranscript(id);
-          if (!summary || summary.id !== id) throw new Error("summary identity mismatch");
-          const transcript = this.containedPath(`${id}.jsonl`);
-          const stat = fs.existsSync(transcript) ? fs.statSync(transcript) : void 0;
-          const now = (/* @__PURE__ */ new Date()).toISOString();
-          this.db.prepare(
-            "INSERT INTO sessions(session_id,transcript_relative_path,summary_relative_path,summary_json,transcript_size,transcript_mtime_ms,summary_revision,indexed_at,damaged) VALUES (?,?,?,?,?,?,?,?,0)"
-          ).run(
-            id,
-            `${id}.jsonl`,
-            `${id}.summary.json`,
-            JSON.stringify(summary),
-            stat?.size ?? 0,
-            stat?.mtimeMs ?? 0,
-            1,
-            now
-          );
-          indexed++;
-        } catch {
-          const now = (/* @__PURE__ */ new Date()).toISOString();
-          const fallback = {
-            id,
-            title: id,
-            startedAt: now,
-            model: "",
-            provider: "",
-            tokenTotal: 0
-          };
-          this.db.prepare(
-            "INSERT INTO sessions(session_id,transcript_relative_path,summary_relative_path,summary_json,summary_revision,indexed_at,damaged) VALUES (?,?,?,?,1,?,1)"
-          ).run(id, `${id}.jsonl`, `${id}.summary.json`, JSON.stringify(fallback), now);
-          damaged++;
-        }
-      }
-      this.db.prepare(
-        "INSERT INTO catalog_meta(key,value) VALUES ('last_reconciliation',?) ON CONFLICT(key) DO UPDATE SET value=excluded.value"
-      ).run((/* @__PURE__ */ new Date()).toISOString());
-      this.bumpGeneration();
-    });
-    return { indexed, damaged };
-  }
-  walkFiles(root, suffix) {
-    const result = [];
-    const visit = (dir) => {
-      for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-        if (entry.isDirectory()) {
-          if (entry.name !== "_cas" && entry.name !== "_trash") visit(path2.join(dir, entry.name));
-        } else if (entry.isFile() && entry.name.endsWith(suffix))
-          result.push(path2.join(dir, entry.name));
-      }
-    };
-    visit(root);
-    return result;
-  }
-  summarizeTranscript(id) {
-    const file = this.containedPath(`${id}.jsonl`);
-    const lines = fs.readFileSync(file, "utf8").split(/\r?\n/);
-    let start;
-    let endedAt;
-    let lastActivityAt;
-    let messageCount = 0;
-    let iterationCount = 0;
-    let toolCallCount = 0;
-    let compactionCount = 0;
-    let tokenTotal = 0;
-    for (const line of lines) {
-      if (!line) continue;
-      let event;
-      try {
-        event = parseJson(line);
-      } catch {
-        continue;
-      }
-      lastActivityAt = event.ts;
-      if (event.type === "session_start") start = event;
-      if (event.type === "session_end") endedAt = event.ts;
-      if (event.type === "message_appended" && (event.message.role === "user" || event.message.role === "assistant"))
-        messageCount++;
-      if (event.type === "llm_response") {
-        iterationCount++;
-        tokenTotal += event.usage.input + event.usage.output + (event.usage.cacheRead ?? 0) + (event.usage.cacheWrite ?? 0);
-      }
-      if (event.type === "tool_call_end") toolCallCount++;
-      if (event.type === "compaction") compactionCount++;
-    }
-    if (!start) throw new Error("missing session_start");
-    return {
-      id,
-      title: id,
-      startedAt: start.ts,
-      ...endedAt ? { endedAt } : {},
-      model: start.model,
-      provider: start.provider,
-      tokenTotal,
-      ...lastActivityAt ? { lastActivityAt } : {},
-      messageCount,
-      iterationCount,
-      toolCallCount,
-      compactionCount
-    };
   }
   health(base) {
     this.reapExpired();
@@ -1366,13 +1409,13 @@ function parseArgs(argv) {
   const projectRoot = values.get("--project-root");
   if (!projectDir) throw new Error("Session Catalog project server requires --project-dir");
   if (!projectRoot) throw new Error("Session Catalog project server requires --project-root");
-  return { projectDir: path3.resolve(projectDir), projectRoot: path3.resolve(projectRoot) };
+  return { projectDir: path4.resolve(projectDir), projectRoot: path4.resolve(projectRoot) };
 }
 useDaemonPerfDefaults();
 var parsed = parseArgs(process.argv.slice(2));
 var endpoint = sessionCatalogProjectServerEndpoint(parsed.projectDir);
 var metadataPath = sessionCatalogProjectServerMetadataPath(parsed.projectDir);
-var databasePath = path3.join(parsed.projectDir, "sessions", "catalog.sqlite");
+var databasePath = path4.join(parsed.projectDir, "sessions", "catalog.sqlite");
 var startedAt = (/* @__PURE__ */ new Date()).toISOString();
 var instanceId = randomUUID2();
 var authToken = randomBytes2(32).toString("hex");
@@ -1389,7 +1432,7 @@ var serverInfo = {
   instanceId,
   startedAt
 };
-process.title = `wrongstack-session-catalog:${path3.basename(parsed.projectRoot)}`;
+process.title = `wrongstack-session-catalog:${path4.basename(parsed.projectRoot)}`;
 var store;
 var activeRequests = 0;
 var stopping = false;
@@ -1493,13 +1536,13 @@ function validateOperationArgs(op, args) {
   if (record["entry"] !== void 0) exact(record["entry"], `${op}.entry`, entryKeys);
   if (record["entry"] && typeof record["entry"] === "object") {
     const entry = record["entry"];
-    if (typeof entry["projectRoot"] !== "string" || (process.platform === "win32" ? path3.resolve(entry["projectRoot"]).toLowerCase() !== parsed.projectRoot.toLowerCase() : path3.resolve(entry["projectRoot"]) !== parsed.projectRoot)) {
+    if (typeof entry["projectRoot"] !== "string" || (process.platform === "win32" ? path4.resolve(entry["projectRoot"]).toLowerCase() !== parsed.projectRoot.toLowerCase() : path4.resolve(entry["projectRoot"]) !== parsed.projectRoot)) {
       throw new TypeError(`${op}.entry project identity does not match this daemon`);
     }
     if (typeof entry["workingDir"] !== "string")
       throw new TypeError(`${op}.entry workingDir is required`);
-    const relative3 = path3.relative(parsed.projectRoot, path3.resolve(entry["workingDir"]));
-    if (relative3 === ".." || relative3.startsWith(`..${path3.sep}`) || path3.isAbsolute(relative3)) {
+    const relative3 = path4.relative(parsed.projectRoot, path4.resolve(entry["workingDir"]));
+    if (relative3 === ".." || relative3.startsWith(`..${path4.sep}`) || path4.isAbsolute(relative3)) {
       throw new TypeError(`${op}.entry workingDir is outside the project root`);
     }
   }