codex-work-receipt 0.5.0 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.6.0
+
+- 新增 cwr2 协议：按“会话 × 记账自然日”生成稳定的 canonical facts，重叠的今日、近 7 日和本周小票可由接收端可靠去重。
+- 新增 fact、session、receipt 的稳定匿名身份，以及 manifest、content hash 和 source revision，便于幂等导入和追加式会话更新。
+- Token 统计改为按来源顺序处理累计值重置，避免重置后出现负数或漏计。
+- 新增 `cwr2p` 分片二维码；单个 cwr2 超出安全二维码容量时自动拆分，最多 12 片，并支持乱序重组和分片/总校验。
+- 网页导入联可展示多张数据二维码；命令行输出二维码数量和 canonical fact 数量。
+- 保留 cwr1 解码兼容；旧版小票仍可作为私人历史导入，但不包含精确去重所需的 canonical facts。
+- 更新中英文手机导入、数据协议和隐私说明。
+
 ## 0.5.0
 
 - 新增网页版“保存完整长图”功能。

package/README.en.md

@@ -22,6 +22,8 @@
 
 Codex Work Receipt summarizes turns, tool calls, Tokens, duration, and models, then turns them into playful AI work points, a job title, and a review. Receipts never include prompts, responses, source code, project paths, or file names.
 
+Version `0.6.0` uses the cwr2 protocol to create stable privacy-safe facts for each session and calendar day. Overlapping today, last-seven-days, and this-week receipts can be deduplicated by the receiver, and oversized payloads are automatically split into reorderable multipart QR codes.
+
 ## Quickstart
 
 Requires Node.js 20+ and local Codex session records. No clone required; choose today, the last 7 days, this week, or a specific session:
@@ -54,7 +56,7 @@ Codex will choose the range and theme, run the CLI, and open the receipt. See th
 
 ## Desktop to mobile
 
-The desktop page generates a privacy-safe data QR code. The companion WeChat mini program supports QR import, local history, themes, and image export. See [mobile import](docs/mobile-import.en.md).
+The desktop page generates one or more privacy-safe data QR codes. The companion WeChat mini program supports multipart scanning, private history, themes, and image export. See [mobile import](docs/mobile-import.en.md).
 
 ## Docs
 

package/README.md

@@ -22,6 +22,8 @@
 
 它会统计 Codex 会话中的轮次、工具调用、Token、时长和模型，生成带有 AI 工分、今日工种和点评的小票。不会把 Prompt、回复正文、代码、项目路径或文件名写入小票。
 
+`0.6.0` 使用 cwr2 协议，按“会话 × 自然日”生成稳定的脱敏事实。今日、近 7 日和本周小票即使范围重叠，接收端也能识别相同工作；数据过大时会自动生成多张可重组的分片二维码。
+
 ## Quickstart
 
 需要 Node.js 20 或更高版本，并且本机已经使用过 Codex。无需克隆仓库，运行后选择“今天 / 近 7 日 / 本周 / 指定会话”：
@@ -54,7 +56,7 @@ Codex 会选择统计范围和主题、执行命令并打开小票。详见 [Cod
 
 ## 从电脑到手机
 
-桌面网页会生成脱敏的数据二维码。配套微信小程序支持扫码导入、本地历史、主题切换和保存图片。详见 [手机扫码导入](docs/mobile-import.md)。
+桌面网页会生成一张或多张脱敏数据二维码。配套微信小程序支持分片扫码、私人历史、主题切换和保存图片。详见 [手机扫码导入](docs/mobile-import.md)。
 
 ## 文档
 

package/docs/cli.en.md

@@ -79,7 +79,7 @@ Default output:
 
 Default filenames include the calendar range. Latest-session and selected-session receipts include a short identifier so receipts from different dates or sessions do not overwrite one another.
 
-Open the generated HTML and click “Save full PNG” to download a high-resolution image. It includes the main receipt, mini-program code, and data QR import stub in the currently selected theme. Theme controls, the page background, and the footer note are excluded.
+Open the generated HTML and click “Save full PNG” to download a high-resolution image. It includes the main receipt, mini-program code, and data QR import stub in the currently selected theme. Theme controls, the page background, and the footer note are excluded. When cwr2 data exceeds the safe capacity of one QR code, the import stub automatically shows numbered multipart codes that must all be scanned in the mini program.
 
 Set a timezone and output path:
 

package/docs/cli.md

@@ -79,7 +79,7 @@ npx codex-work-receipt@latest --latest --theme diner
 
 默认文件名会携带统计日期范围；最近会话和指定会话则携带短编号，避免不同日期或会话的小票互相覆盖。
 
-打开生成的 HTML 后，点击“保存完整长图”即可下载高清 PNG。图片包含主小票、小程序码和数据二维码导入联，并自动使用当前选择的主题；主题按钮、网页背景和底部说明不会进入图片。
+打开生成的 HTML 后，点击“保存完整长图”即可下载高清 PNG。图片包含主小票、小程序码和数据二维码导入联，并自动使用当前选择的主题；主题按钮、网页背景和底部说明不会进入图片。cwr2 数据超过单个二维码的安全容量时，导入联会自动展示多张带序号的分片二维码，需在小程序中全部扫完。
 
 指定时区和输出路径：
 

package/docs/mobile-import.en.md

@@ -2,17 +2,19 @@
 
 <p><a href="./mobile-import.md">中文</a> · <strong>English</strong> · <a href="../README.en.md">Back to README</a></p>
 
-The desktop page shows both the fixed mini-program code and a data QR code for the current receipt. The companion mini program can complete the MVP import without a server:
+The desktop page shows both the fixed mini-program code and a data QR code for the current receipt. The companion mini program validates the protocol and privacy-safe fields on the phone, then saves the private receipt to the user's anonymous account database:
 
 1. Scan the fixed mini-program code in WeChat and open the companion mini program.
 2. Tap the desktop-import action.
 3. Scan the adjacent data QR code.
-4. Validate the `cwr1` prefix, checksum, and schema version.
+4. Validate the `cwr1`, `cwr2`, or multipart `cwr2p` prefix, checksum, and schema version.
 5. Decompress and parse the privacy-safe metrics.
-6. Recognize a session, today, last-seven-days, or this-week range, then deduplicate by receipt ID and store it locally.
+6. Recognize a session, today, last-seven-days, or this-week range. New receipts use canonical facts for deduplication and are stored in the anonymous account database by default.
 7. Render the selected template with Canvas and save it to the phone.
 
-The QR code does not transfer an image. The desktop page and mini program independently render the same structured receipt data. Older QR codes without an explicit range field remain supported through the legacy label fallback.
+The phone keeps only multipart staging, pending database writes, and necessary caches. Saving a private receipt does not automatically join public statistics; participation in the AI Cooperative is a separate choice inside the companion mini program.
+
+The QR code does not transfer an image. The desktop page and mini program independently render the same structured receipt data. Older QR codes without an explicit range field remain supported through the legacy label fallback. QR payloads exclude prompts, response text, source code, project paths, file names, and original session IDs.
 
 The companion mini program is a separate product. This repository does not contain its source code, AppID, backend code, or server credentials.
 

package/docs/mobile-import.md

@@ -2,17 +2,19 @@
 
 <p><strong>中文</strong> · <a href="./mobile-import.en.md">English</a> · <a href="../README.md">返回 README</a></p>
 
-桌面网页会同时展示固定小程序码和当前小票的数据二维码。配套小程序无需服务器即可完成 MVP 导入：
+桌面网页会同时展示固定小程序码和当前小票的数据二维码。配套小程序会先在手机端完成协议和隐私字段校验，再把私人小票保存到用户的匿名账号数据库：
 
 1. 微信扫描固定小程序码并打开配套小程序。
 2. 点击“从电脑导入”。
 3. 扫描网页旁边的数据二维码。
-4. 小程序校验 `cwr1` 前缀、checksum 和结构版本。
+4. 小程序校验 `cwr1`、`cwr2` 或 `cwr2p` 分片前缀、checksum 和结构版本。
 5. 解压并解析脱敏统计数据。
-6. 识别单会话、今日、近七日或本周范围，并按小票 ID 去重写入本地历史。
+6. 识别单会话、今日、近七日或本周范围；新版小票按规范事实去重，完整记录默认保存到匿名账号数据库。
 7. 使用 Canvas 重新绘制所选模板并保存到手机相册。
 
-二维码不会传输图片。桌面端和小程序端根据同一份结构数据分别渲染小票；旧版二维码没有显式范围字段时仍按原有文案兼容识别。
+手机本地只保留扫码分片、待入库记录和必要缓存。私人小票入库不等于自动加入公开统计；是否参与 AI 供销社匿名汇总由用户在配套小程序中单独决定。
+
+二维码不会传输图片。桌面端和小程序端根据同一份结构数据分别渲染小票；旧版二维码没有显式范围字段时仍按原有文案兼容识别。二维码不包含 Prompt、回复正文、代码、项目路径、文件名或原始会话 ID。
 
 配套小程序是独立产品，本仓库不包含其源码、AppID、后台代码或服务端密钥。
 

package/docs/privacy.en.md

@@ -23,6 +23,8 @@ Generated HTML and JSON files are written to `codex-work-receipt-output/` by def
 
 The runtime does not upload Codex session data to a project server. The initial or updated package download performed by `npx` is a normal package-manager network request and does not contain local session data.
 
+If the user actively scans a data QR code, the companion mini program saves the privacy-safe receipt to the user's anonymous account database for history recovery and canonical deduplication. This happens inside the companion product and does not upload prompts, response text, source code, project paths, file names, or original session IDs. Joining AI Cooperative aggregate statistics remains a separate user choice.
+
 ## QR payload
 
 The QR code contains versioned, privacy-safe receipt metrics only. It does not contain the original session or an image. Treat the QR code as a scannable data file and share it only with people you trust.

package/docs/privacy.md

@@ -23,6 +23,8 @@ AI 打工小票在本机读取 Codex 会话，并在本机完成统计和渲染
 
 运行期间不会把 Codex 会话数据上传到本项目的服务器。通过 `npx` 首次下载或更新 npm 包属于包管理器的正常网络请求，不包含本地会话内容。
 
+如果用户主动扫描数据二维码，配套小程序会把二维码中的脱敏小票保存到用户的匿名账号数据库，用于历史恢复和规范去重。这一步发生在配套小程序中，不会上传 Prompt、回复正文、代码、项目路径、文件名或原始会话 ID；是否参与 AI 供销社匿名统计仍由用户单独决定。
+
 ## 二维码
 
 二维码只包含当前小票的版本化脱敏统计，不包含原始会话或图片。二维码等同于一份可扫描的数据文件，请只向信任的人展示。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-work-receipt",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "type": "module",
   "description": "Generate a privacy-first Codex work receipt from local session metadata.",
   "author": "a-bai-2026",

package/src/cli.mjs

@@ -7,9 +7,10 @@ import { fileURLToPath } from "node:url";
 import QRCode from "qrcode";
 
 import { parseArgs, printHelp } from "./core/args.mjs";
+import { buildCanonicalFacts } from "./core/fact-buckets.mjs";
 import { collectMetrics } from "./core/metrics.mjs";
 import { getReceiptCopy } from "./core/presentation.mjs";
-import { encodeReceiptPayload } from "./core/qr-payload.mjs";
+import { encodeReceiptPayloads } from "./core/qr-payload.mjs";
 import { outputSlugForRange, resolveRange } from "./core/range.mjs";
 import { buildReceiptRecord, persistReceiptRecord } from "./core/receipt-record.mjs";
 import { promptForRange } from "./core/selector.mjs";
@@ -77,14 +78,16 @@ async function main() {
   const range = resolveRange(options.mode, options.timezone, new Date(), options.sessionId);
   const sessions = loadCodexSessions(range);
   const metrics = collectMetrics(sessions, range);
-  const record = buildReceiptRecord(metrics, options.theme, options.locale);
-  const qrPayload = encodeReceiptPayload(record);
-  const dataQrDataUrl = await QRCode.toDataURL(qrPayload, {
+  const observedAt = new Date().toISOString();
+  const canonical = buildCanonicalFacts(sessions, range, { observedAt });
+  const record = buildReceiptRecord(metrics, options.theme, options.locale, canonical);
+  const qrPayloads = encodeReceiptPayloads(record);
+  const dataQrDataUrls = await Promise.all(qrPayloads.map((payload) => QRCode.toDataURL(payload, {
     errorCorrectionLevel: "M",
     margin: 2,
     width: 360,
     color: { dark: "#171713", light: "#ffffff" },
-  });
+  })));
 
   const requestedOutput = options.output || path.join(
     DEFAULT_OUTPUT_DIR,
@@ -97,7 +100,7 @@ async function main() {
 
   fs.writeFileSync(
     outputFile,
-    renderHtml({ record, dataQrDataUrl, miniProgramCodeDataUrl }),
+    renderHtml({ record, dataQrDataUrls, miniProgramCodeDataUrl }),
     "utf8",
   );
   const persisted = persistReceiptRecord(record, outputFile, options.dataDir);
@@ -108,7 +111,7 @@ async function main() {
     console.log(`Local history: ${persisted.receiptPath}`);
     console.log(`Range: ${getReceiptCopy(options.locale).scope[record.source.scope]} · ${record.stats.session_count} session(s)`);
     console.log(`Stats: ${record.stats.completed_turns} turns · ${formatNumber(record.stats.tokens.total_tokens, options.locale)} Tokens · ${record.stats.tool_calls} tool calls`);
-    console.log(`Data QR: ${qrPayload.length} characters · schema v${record.schema_version}`);
+    console.log(`Data QR: ${qrPayloads.length} code(s) · ${record.manifest.fact_count} canonical fact(s) · schema v${record.schema_version}`);
     if (!miniProgramCodeDataUrl) console.log("Mini-program code: not configured; using the explicit placeholder");
   } else {
     console.log(`已生成网页：${outputFile}`);
@@ -116,7 +119,7 @@ async function main() {
     console.log(`本地历史：${persisted.receiptPath}`);
     console.log(`统计范围：${getReceiptCopy(options.locale).scope[record.source.scope]} · ${record.stats.session_count} 个会话`);
     console.log(`统计：${record.stats.completed_turns} 轮 · ${formatNumber(record.stats.tokens.total_tokens, options.locale)} Token · ${record.stats.tool_calls} 次工具调用`);
-    console.log(`数据二维码：${qrPayload.length} 字符 · schema v${record.schema_version}`);
+    console.log(`数据二维码：${qrPayloads.length} 个 · ${record.manifest.fact_count} 条规范事实 · schema v${record.schema_version}`);
     if (!miniProgramCodeDataUrl) console.log("小程序码：尚未配置，页面使用明确占位符");
   }
   if (options.open) openFile(outputFile);

package/src/core/canonical.mjs

@@ -0,0 +1,27 @@
+import crypto from "node:crypto";
+
+function normalize(value) {
+  if (Array.isArray(value)) return value.map(normalize);
+  if (!value || typeof value !== "object") return value;
+
+  return Object.fromEntries(
+    Object.keys(value)
+      .sort()
+      .map((key) => [key, normalize(value[key])]),
+  );
+}
+
+export function canonicalStringify(value) {
+  return JSON.stringify(normalize(value));
+}
+
+export function sha256Hex(value) {
+  const input = Buffer.isBuffer(value) || value instanceof Uint8Array
+    ? value
+    : Buffer.from(typeof value === "string" ? value : canonicalStringify(value), "utf8");
+  return crypto.createHash("sha256").update(input).digest("hex");
+}
+
+export function stableId(prefix, domain, parts) {
+  return `${prefix}_${sha256Hex([domain, ...parts])}`;
+}

package/src/core/fact-buckets.mjs

@@ -0,0 +1,205 @@
+import { canonicalStringify, sha256Hex } from "./canonical.mjs";
+import {
+  ACCOUNTING_TIMEZONE,
+  buildFactId,
+  buildSessionId,
+  FACT_SCHEMA_VERSION,
+  METRIC_SCHEMA_VERSION,
+} from "./fact-identity.mjs";
+import { dateKey, rowDate } from "../lib/time.mjs";
+import { isCalendarScope, isDateInRange, shiftDateKey } from "./range.mjs";
+
+const TOKEN_KEYS = [
+  "input_tokens",
+  "cached_input_tokens",
+  "output_tokens",
+  "reasoning_output_tokens",
+  "total_tokens",
+];
+
+function zeroUsage() {
+  return Object.fromEntries(TOKEN_KEYS.map((key) => [key, 0]));
+}
+
+function tokenUsage(row) {
+  return row.type === "event_msg" && row.payload?.type === "token_count"
+    ? row.payload?.info?.total_token_usage || null
+    : null;
+}
+
+function tokenDeltaForDate(rows, localDate, timezone) {
+  const totals = zeroUsage();
+  const previous = zeroUsage();
+  let resetCount = 0;
+
+  for (const row of rows) {
+    const usage = tokenUsage(row);
+    const date = rowDate(row);
+    if (!usage || !date) continue;
+    const key = dateKey(date, timezone);
+    if (key > localDate) break;
+    let rowReset = false;
+
+    for (const tokenKey of TOKEN_KEYS) {
+      const current = Math.max(0, Number(usage[tokenKey] || 0));
+      if (key === localDate) {
+        if (current >= previous[tokenKey]) totals[tokenKey] += current - previous[tokenKey];
+        else {
+          totals[tokenKey] += current;
+          rowReset = true;
+        }
+      }
+      previous[tokenKey] = current;
+    }
+    if (key === localDate && rowReset) resetCount += 1;
+  }
+
+  return { totals, resetCount };
+}
+
+function metricsForRows(sessionRows, bucketRows, localDate, timezone) {
+  let completedTurns = 0;
+  let userMessages = 0;
+  let toolCalls = 0;
+  let interruptions = 0;
+  let workDurationMs = 0;
+  let firstTokenTotalMs = 0;
+  let firstTokenSampleCount = 0;
+  const models = new Set();
+
+  for (const row of bucketRows) {
+    if (row.type === "turn_context" && row.payload?.model) models.add(row.payload.model);
+    if (row.type === "event_msg") {
+      if (row.payload?.type === "task_complete") {
+        completedTurns += 1;
+        workDurationMs += Math.max(0, Number(row.payload.duration_ms || 0));
+        if (Number.isFinite(row.payload.time_to_first_token_ms)) {
+          firstTokenTotalMs += Math.max(0, Number(row.payload.time_to_first_token_ms));
+          firstTokenSampleCount += 1;
+        }
+      } else if (row.payload?.type === "user_message") userMessages += 1;
+      else if (row.payload?.type === "turn_aborted") {
+        interruptions += 1;
+        workDurationMs += Math.max(0, Number(row.payload.duration_ms || 0));
+      }
+    }
+    if (
+      row.type === "response_item" &&
+      (row.payload?.type === "custom_tool_call" || row.payload?.type === "function_call")
+    ) toolCalls += 1;
+  }
+
+  if (!models.size) {
+    const fallback = [...sessionRows]
+      .reverse()
+      .find((row) => row.type === "turn_context" && row.payload?.model)?.payload?.model;
+    if (fallback) models.add(fallback);
+  }
+
+  const tokenResult = tokenDeltaForDate(sessionRows, localDate, timezone);
+  return {
+    completed_turns: completedTurns,
+    user_messages: userMessages,
+    tool_calls: toolCalls,
+    interruptions,
+    work_duration_ms: Math.round(workDurationMs),
+    first_token_total_ms: Math.round(firstTokenTotalMs),
+    first_token_sample_count: firstTokenSampleCount,
+    ...tokenResult.totals,
+    token_reset_count: tokenResult.resetCount,
+    models: [...models].sort(),
+  };
+}
+
+function coverageForRange(range, scanMode, observedAt) {
+  if (!isCalendarScope(range.scope)) {
+    return {
+      kind: "selected_sessions",
+      scan_mode: "none",
+      start_date: range.startDate,
+      end_date: range.endDate,
+      complete_through_date: null,
+      observed_through_at: observedAt,
+    };
+  }
+
+  const full = scanMode === "full";
+  return {
+    kind: "calendar_range",
+    scan_mode: full ? "full" : "best_effort",
+    start_date: range.startDate,
+    end_date: range.endDate,
+    complete_through_date: full ? shiftDateKey(range.endDate, -1) : null,
+    observed_through_at: observedAt,
+  };
+}
+
+export function buildCanonicalFacts(sessions, range, options = {}) {
+  const sourceType = options.sourceType || "codex";
+  const accountingTimezone = options.accountingTimezone || ACCOUNTING_TIMEZONE;
+  const collectorVersion = options.collectorVersion || "0.6.0";
+  const observedAt = options.observedAt || new Date().toISOString();
+  const facts = [];
+
+  for (const session of sessions) {
+    const identityQuality = session.identityQuality || "metadata";
+    const sessionId = buildSessionId(sourceType, session.sessionId, identityQuality);
+    const sessionRows = [...session.rows].sort(
+      (left, right) => Number(left.__sourceLine || 0) - Number(right.__sourceLine || 0),
+    );
+    const buckets = new Map();
+
+    for (const row of sessionRows) {
+      const date = rowDate(row);
+      if (!date || (isCalendarScope(range.scope) && !isDateInRange(date, range))) continue;
+      const localDate = dateKey(date, accountingTimezone);
+      const rows = buckets.get(localDate) || [];
+      rows.push(row);
+      buckets.set(localDate, rows);
+    }
+
+    for (const [localDate, bucketRows] of buckets) {
+      const timestamps = bucketRows.map(rowDate).filter(Boolean).sort((left, right) => left - right);
+      if (!timestamps.length) continue;
+      const stats = metricsForRows(sessionRows, bucketRows, localDate, accountingTimezone);
+      const factId = buildFactId({ sourceType, sessionId, accountingTimezone, localDate });
+      const sourceRevision = session.sourceRevision || {
+        kind: "append-only-jsonl-v1",
+        row_count: sessionRows.length,
+        byte_length: 0,
+        tail_hash: sha256Hex(sessionRows.map((row) => row.__sourceLine || 0)),
+      };
+      const content = {
+        fact_id: factId,
+        session_id: sessionId,
+        source_type: sourceType,
+        accounting_timezone: accountingTimezone,
+        local_date: localDate,
+        bucket_start_at: timestamps[0].toISOString(),
+        bucket_end_at: timestamps.at(-1).toISOString(),
+        stats,
+      };
+
+      facts.push({
+        ...content,
+        identity_quality: identityQuality,
+        fact_schema_version: FACT_SCHEMA_VERSION,
+        metric_schema_version: METRIC_SCHEMA_VERSION,
+        collector_version: collectorVersion,
+        source_watermark_at: timestamps.at(-1).toISOString(),
+        source_revision: sourceRevision,
+        observed_at: observedAt,
+        content_hash: sha256Hex(canonicalStringify(content)),
+      });
+    }
+  }
+
+  facts.sort((left, right) => (
+    left.local_date.localeCompare(right.local_date) || left.fact_id.localeCompare(right.fact_id)
+  ));
+
+  return {
+    facts,
+    coverage: coverageForRange(range, sessions.scanMode || options.scanMode || "best_effort", observedAt),
+  };
+}

package/src/core/fact-identity.mjs

@@ -0,0 +1,39 @@
+import { stableId } from "./canonical.mjs";
+
+export const ACCOUNTING_TIMEZONE = "Asia/Shanghai";
+export const FACT_SCHEMA_VERSION = 1;
+export const METRIC_SCHEMA_VERSION = 1;
+
+export function buildSessionId(sourceType, rawSessionId, identityQuality = "metadata") {
+  return stableId("cws", "codex-work-receipt/session/v1", [
+    sourceType,
+    identityQuality,
+    rawSessionId,
+  ]);
+}
+
+export function buildFactId({ sourceType, sessionId, accountingTimezone, localDate }) {
+  return stableId("cwf", "codex-work-receipt/fact/session-day/v1", [
+    sourceType,
+    sessionId,
+    accountingTimezone,
+    localDate,
+  ]);
+}
+
+export function buildLogicalReceiptKey(metrics) {
+  const sessionPart = stableId("cwg", "codex-work-receipt/session-group/v1", [
+    ...[...metrics.sessionIds].sort(),
+  ]);
+  if (metrics.mode === "latest" || metrics.mode === "session") {
+    return `${metrics.mode}:${sessionPart}:${metrics.timezone}`;
+  }
+  if (metrics.mode === "this-week") {
+    return `this-week:${metrics.rangeStartDate}:${metrics.timezone}`;
+  }
+  return `${metrics.mode}:${metrics.rangeStartDate}:${metrics.rangeEndDate}:${metrics.timezone}`;
+}
+
+export function buildProtocolReceiptId(sourceVersion, logicalReceiptKey) {
+  return stableId("cwr2", "codex-work-receipt/receipt/v2", [sourceVersion, logicalReceiptKey]);
+}

package/src/core/metrics.mjs

@@ -12,14 +12,6 @@ function zeroUsage() {
   };
 }
 
-function subtractUsage(after = {}, before = {}) {
-  const result = zeroUsage();
-  for (const key of Object.keys(result)) {
-    result[key] = Math.max(0, Number(after[key] || 0) - Number(before[key] || 0));
-  }
-  return result;
-}
-
 function addUsage(target, source) {
   for (const key of Object.keys(target)) target[key] += Number(source[key] || 0);
 }
@@ -27,23 +19,25 @@ function addUsage(target, source) {
 function sessionTokenUsage(rows, range) {
   const events = rows
     .filter((row) => row.type === "event_msg" && row.payload?.type === "token_count")
-    .filter((row) => row.payload?.info?.total_token_usage)
-    .sort((left, right) => (rowDate(left)?.getTime() || 0) - (rowDate(right)?.getTime() || 0));
+    .filter((row) => row.payload?.info?.total_token_usage);
 
   if (!events.length) return zeroUsage();
-  if (!isCalendarScope(range.scope)) {
-    return { ...zeroUsage(), ...events.at(-1).payload.info.total_token_usage };
-  }
+  const totals = zeroUsage();
+  const previous = zeroUsage();
 
-  const lastInRange = events.filter((row) => isDateInRange(rowDate(row), range)).at(-1);
-  if (!lastInRange) return zeroUsage();
-
-  const baseline = events.filter((row) => {
+  for (const row of events) {
+    const currentUsage = row.payload.info.total_token_usage;
     const date = rowDate(row);
-    return date && dateKey(date, range.timezone) < range.startDate;
-  }).at(-1)?.payload.info.total_token_usage || zeroUsage();
+    const selected = !isCalendarScope(range.scope) || isDateInRange(date, range);
+
+    for (const key of Object.keys(totals)) {
+      const current = Math.max(0, Number(currentUsage[key] || 0));
+      if (selected) totals[key] += current >= previous[key] ? current - previous[key] : current;
+      previous[key] = current;
+    }
+  }
 
-  return subtractUsage(lastInRange.payload.info.total_token_usage, baseline);
+  return totals;
 }
 
 function calculateWorkPoints(metrics) {

package/src/core/qr-payload.mjs

@@ -1,9 +1,17 @@
 import crypto from "node:crypto";
 import zlib from "node:zlib";
+import QRCode from "qrcode";
 
 import { buildCompensation, getWorkProfileCopy } from "./presentation.mjs";
 
-export function compactReceipt(record) {
+const MAX_QR_VERSION = 25;
+const MAX_MULTIPART_PARTS = 12;
+
+function checksum(value, length = 8) {
+  return crypto.createHash("sha256").update(value).digest("hex").slice(0, length);
+}
+
+function compactPresentation(record) {
   const profileId = record.presentation.work_profile;
   const scope = record.source?.scope || (record.presentation.compensation?.label === "本日工资" ? "today" : "latest");
   const mobileProfile = profileId
@@ -13,11 +21,21 @@ export function compactReceipt(record) {
     ? buildCompensation(scope, record.presentation.compensation?.amount, "zh-CN")
     : record.presentation.compensation;
 
+  return {
+    profileId,
+    scope,
+    mobileProfile,
+    mobileCompensation,
+  };
+}
+
+function compactBase(record) {
+  const presentation = compactPresentation(record);
   return {
     v: record.schema_version,
     i: record.id,
     g: record.generated_at,
-    o: scope,
+    o: presentation.scope,
     d: [
       record.period.start_at,
       record.period.end_at,
@@ -43,35 +61,206 @@ export function compactReceipt(record) {
     ],
     m: record.stats.models,
     l: record.locale || "zh-CN",
-    r: profileId || null,
+    r: presentation.profileId || null,
     p: [
       record.presentation.default_theme,
-      mobileProfile.title,
-      mobileProfile.review,
-      mobileCompensation
+      presentation.mobileProfile.title,
+      presentation.mobileProfile.review,
+      presentation.mobileCompensation
         ? [
-            mobileCompensation.label,
-            mobileCompensation.amount,
-            mobileCompensation.unit,
-            mobileCompensation.note,
-            mobileCompensation.formula_version,
+            presentation.mobileCompensation.label,
+            presentation.mobileCompensation.amount,
+            presentation.mobileCompensation.unit,
+            presentation.mobileCompensation.note,
+            presentation.mobileCompensation.formula_version,
           ]
         : null,
     ],
   };
 }
 
+function compactFact(fact) {
+  const stats = fact.stats;
+  return [
+    fact.fact_id,
+    fact.session_id,
+    fact.identity_quality,
+    fact.source_type,
+    fact.local_date,
+    fact.bucket_start_at,
+    fact.bucket_end_at,
+    fact.source_watermark_at,
+    fact.observed_at,
+    [
+      fact.source_revision.kind,
+      fact.source_revision.row_count,
+      fact.source_revision.byte_length,
+      fact.source_revision.tail_hash,
+    ],
+    fact.content_hash,
+    [
+      stats.completed_turns,
+      stats.user_messages,
+      stats.tool_calls,
+      stats.interruptions,
+      stats.work_duration_ms,
+      stats.first_token_total_ms,
+      stats.first_token_sample_count,
+      stats.input_tokens,
+      stats.cached_input_tokens,
+      stats.output_tokens,
+      stats.reasoning_output_tokens,
+      stats.total_tokens,
+      stats.token_reset_count,
+      stats.models,
+    ],
+  ];
+}
+
+export function compactReceipt(record) {
+  const compact = compactBase(record);
+  if (record.schema_version !== 2) return compact;
+
+  const coverage = record.manifest.coverage;
+  return {
+    ...compact,
+    k: record.source.logical_key,
+    h: record.source.snapshot_hash,
+    a: [
+      record.manifest.version,
+      record.manifest.fact_schema_version,
+      record.manifest.metric_schema_version,
+      record.manifest.accounting_timezone,
+      record.manifest.fact_count,
+      record.manifest.fact_ids,
+      [
+        coverage.kind,
+        coverage.scan_mode,
+        coverage.start_date || null,
+        coverage.end_date || null,
+        coverage.complete_through_date || null,
+        coverage.observed_through_at,
+      ],
+      record.manifest.manifest_hash,
+    ],
+    f: record.facts.map(compactFact),
+  };
+}
+
+function encodeCompact(prefix, compact) {
+  const compressed = zlib.deflateRawSync(Buffer.from(JSON.stringify(compact), "utf8"));
+  return `${prefix}.${checksum(compressed)}.${compressed.toString("base64url")}`;
+}
+
 export function encodeReceiptPayload(record) {
-  const compressed = zlib.deflateRawSync(Buffer.from(JSON.stringify(compactReceipt(record)), "utf8"));
-  const checksum = crypto.createHash("sha256").update(compressed).digest("hex").slice(0, 8);
-  return `cwr1.${checksum}.${compressed.toString("base64url")}`;
+  return encodeCompact(record.schema_version === 2 ? "cwr2" : "cwr1", compactReceipt(record));
 }
 
-export function decodeReceiptPayload(payload) {
-  const [prefix, checksum, encoded] = String(payload).split(".");
-  if (prefix !== "cwr1" || !checksum || !encoded) throw new Error("无效的打工小票二维码");
+function qrVersion(payload) {
+  return QRCode.create(payload, { errorCorrectionLevel: "M" }).version;
+}
+
+function fitsVersion(payload, maxVersion) {
+  try {
+    return qrVersion(payload) <= maxVersion;
+  } catch {
+    return false;
+  }
+}
+
+function multipartPayload(transferId, partIndex, partCount, totalChecksum, chunk) {
+  return `cwr2p.${transferId}.${partIndex}.${partCount}.${totalChecksum}.${checksum(chunk)}.${chunk}`;
+}
+
+function maxChunkSize(singlePayload, maxVersion) {
+  const transferId = checksum(singlePayload, 12);
+  const totalChecksum = checksum(singlePayload);
+  let low = 32;
+  let high = singlePayload.length;
+
+  while (low < high) {
+    const middle = Math.ceil((low + high) / 2);
+    const candidate = multipartPayload(transferId, 12, 12, totalChecksum, singlePayload.slice(0, middle));
+    if (fitsVersion(candidate, maxVersion)) low = middle;
+    else high = middle - 1;
+  }
+  return low;
+}
+
+export function encodeReceiptPayloads(record, options = {}) {
+  const maxVersion = options.maxVersion || MAX_QR_VERSION;
+  const maxParts = options.maxParts || MAX_MULTIPART_PARTS;
+  const singlePayload = encodeReceiptPayload(record);
+  if (fitsVersion(singlePayload, maxVersion)) return [singlePayload];
+  if (!singlePayload.startsWith("cwr2.")) {
+    throw new Error("旧版小票数据超过单个二维码容量");
+  }
+
+  const chunkSize = maxChunkSize(singlePayload, maxVersion);
+  const chunks = [];
+  for (let offset = 0; offset < singlePayload.length; offset += chunkSize) {
+    chunks.push(singlePayload.slice(offset, offset + chunkSize));
+  }
+  if (chunks.length > maxParts) {
+    throw new Error(`小票数据需要 ${chunks.length} 个二维码，超过 ${maxParts} 个上限，请缩小统计范围`);
+  }
+
+  const transferId = checksum(singlePayload, 12);
+  const totalChecksum = checksum(singlePayload);
+  return chunks.map((chunk, index) => (
+    multipartPayload(transferId, index + 1, chunks.length, totalChecksum, chunk)
+  ));
+}
+
+function decodeSinglePayload(payload) {
+  const [prefix, expectedChecksum, encoded] = String(payload).split(".");
+  if ((prefix !== "cwr1" && prefix !== "cwr2") || !expectedChecksum || !encoded) {
+    throw new Error("无效的打工小票二维码");
+  }
   const compressed = Buffer.from(encoded, "base64url");
-  const actual = crypto.createHash("sha256").update(compressed).digest("hex").slice(0, 8);
-  if (actual !== checksum) throw new Error("二维码数据校验失败");
+  if (checksum(compressed) !== expectedChecksum) throw new Error("二维码数据校验失败");
   return JSON.parse(zlib.inflateRawSync(compressed).toString("utf8"));
 }
+
+export function decodeReceiptPayload(payload) {
+  return decodeSinglePayload(payload);
+}
+
+export function decodeMultipartReceiptPayloads(payloads) {
+  const parts = payloads.map((payload) => {
+    const fields = String(payload).split(".");
+    const [prefix, transferId, indexText, countText, totalChecksum, partChecksum] = fields;
+    const chunk = fields.slice(6).join(".");
+    const index = Number(indexText);
+    const count = Number(countText);
+    if (
+      prefix !== "cwr2p" || !transferId || !totalChecksum || !chunk ||
+      !Number.isInteger(index) || !Number.isInteger(count) || index < 1 || index > count || count > MAX_MULTIPART_PARTS ||
+      checksum(chunk) !== partChecksum
+    ) throw new Error("无效的分片二维码");
+    return { transferId, index, count, totalChecksum, chunk };
+  });
+  if (!parts.length) throw new Error("缺少分片二维码");
+  const first = parts[0];
+  if (parts.some((part) => (
+    part.transferId !== first.transferId || part.count !== first.count || part.totalChecksum !== first.totalChecksum
+  ))) throw new Error("分片二维码不属于同一张小票");
+  const unique = new Map(parts.map((part) => [part.index, part]));
+  if (unique.size !== first.count) throw new Error("分片二维码尚未集齐");
+  const singlePayload = [...unique.values()].sort((left, right) => left.index - right.index).map((part) => part.chunk).join("");
+  if (checksum(singlePayload) !== first.totalChecksum) throw new Error("分片二维码总校验失败");
+  return decodeSinglePayload(singlePayload);
+}
+
+export function inspectReceiptPayloadPart(payload) {
+  const fields = String(payload).split(".");
+  const [prefix, transferId, indexText, countText, totalChecksum, partChecksum] = fields;
+  const chunk = fields.slice(6).join(".");
+  if (prefix !== "cwr2p") return null;
+  const index = Number(indexText);
+  const count = Number(countText);
+  if (!transferId || !chunk || checksum(chunk) !== partChecksum || !Number.isInteger(index) || !Number.isInteger(count)) {
+    throw new Error("无效的分片二维码");
+  }
+  return { transferId, index, count, totalChecksum };
+}

package/src/core/receipt-record.mjs

@@ -3,28 +3,27 @@ import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
+import { canonicalStringify, sha256Hex } from "./canonical.mjs";
+import { buildLogicalReceiptKey, buildProtocolReceiptId } from "./fact-identity.mjs";
 import {
   buildCompensation,
   DEFAULT_LOCALE,
   getWorkProfileCopy,
 } from "./presentation.mjs";
 
-const SCHEMA_VERSION = 1;
-const COLLECTOR_VERSION = "0.5.0";
+const SCHEMA_VERSION = 2;
+const SOURCE_VERSION = "cwr2";
+const COLLECTOR_VERSION = "0.6.0";
 
 function fingerprintSessionIds(sessionIds) {
   return crypto.createHash("sha256").update([...sessionIds].sort().join("|")).digest("hex").slice(0, 16);
 }
 
-export function buildReceiptRecord(metrics, defaultTheme = "classic", locale = DEFAULT_LOCALE) {
+export function buildReceiptRecord(metrics, defaultTheme = "classic", locale = DEFAULT_LOCALE, canonical = {}) {
   const sessionFingerprint = fingerprintSessionIds(metrics.sessionIds);
-  const logicalKey = metrics.mode === "latest" || metrics.mode === "session"
-    ? `latest:${sessionFingerprint}`
-    : metrics.mode === "this-week"
-      ? `this-week:${metrics.rangeStartDate}:${metrics.timezone}`
-      : `${metrics.mode}:${metrics.rangeStartDate}:${metrics.rangeEndDate}:${metrics.timezone}`;
-  const id = `cwr_${crypto.createHash("sha256").update(logicalKey).digest("hex").slice(0, 16)}`;
-  const snapshotHash = crypto.createHash("sha256").update(JSON.stringify({
+  const logicalKey = buildLogicalReceiptKey(metrics);
+  const id = buildProtocolReceiptId(SOURCE_VERSION, logicalKey);
+  const snapshotHash = sha256Hex({
     start: metrics.startAt.toISOString(),
     end: metrics.endAt.toISOString(),
     tokens: metrics.tokens,
@@ -34,9 +33,31 @@ export function buildReceiptRecord(metrics, defaultTheme = "classic", locale = D
     scope: metrics.mode,
     rangeStartDate: metrics.rangeStartDate,
     rangeEndDate: metrics.rangeEndDate,
-  })).digest("hex").slice(0, 16);
+  });
   const workProfileId = metrics.workProfileId || "temporary-hire";
   const workProfile = getWorkProfileCopy(workProfileId, locale);
+  const facts = Array.isArray(canonical.facts) ? canonical.facts : [];
+  const coverage = canonical.coverage || {
+    kind: "selected_sessions",
+    scan_mode: "none",
+    start_date: metrics.rangeStartDate,
+    end_date: metrics.rangeEndDate,
+    complete_through_date: null,
+    observed_through_at: new Date().toISOString(),
+  };
+  const manifestCore = {
+    version: 1,
+    fact_schema_version: 1,
+    metric_schema_version: 1,
+    accounting_timezone: "Asia/Shanghai",
+    fact_count: facts.length,
+    fact_ids: facts.map((fact) => fact.fact_id),
+    coverage,
+  };
+  const manifest = {
+    ...manifestCore,
+    manifest_hash: sha256Hex(canonicalStringify(manifestCore)),
+  };
 
   return {
     schema_version: SCHEMA_VERSION,
@@ -45,6 +66,7 @@ export function buildReceiptRecord(metrics, defaultTheme = "classic", locale = D
     generated_at: new Date().toISOString(),
     source: {
       type: "codex",
+      version: SOURCE_VERSION,
       scope: metrics.mode,
       collector_version: COLLECTOR_VERSION,
       logical_key: logicalKey,
@@ -68,6 +90,8 @@ export function buildReceiptRecord(metrics, defaultTheme = "classic", locale = D
       average_first_token_ms: Math.round(metrics.averageFirstTokenMs),
       tokens: { ...metrics.tokens },
       models: [...metrics.models],
+      receipt_work_points: metrics.workPoints,
+      receipt_formula_version: "receipt_work_points_v1",
     },
     presentation: {
       default_theme: defaultTheme,
@@ -83,6 +107,8 @@ export function buildReceiptRecord(metrics, defaultTheme = "classic", locale = D
       contains_paths: false,
       contains_filenames: false,
     },
+    manifest,
+    facts,
   };
 }
 

package/src/core/source-revision.mjs

@@ -0,0 +1,17 @@
+export function compareSourceRevision(candidate, current) {
+  if (!current) return "newer";
+  if (!candidate) return "conflict";
+
+  const candidateRows = Number(candidate.row_count ?? candidate.rowCount ?? 0);
+  const currentRows = Number(current.row_count ?? current.rowCount ?? 0);
+  const candidateBytes = Number(candidate.byte_length ?? candidate.byteLength ?? 0);
+  const currentBytes = Number(current.byte_length ?? current.byteLength ?? 0);
+  const candidateTail = String(candidate.tail_hash ?? candidate.tailHash ?? "");
+  const currentTail = String(current.tail_hash ?? current.tailHash ?? "");
+
+  if (candidateRows === currentRows && candidateBytes === currentBytes) {
+    return candidateTail === currentTail ? "same" : "conflict";
+  }
+  if (candidateRows >= currentRows && candidateBytes >= currentBytes) return "newer";
+  return "stale";
+}

package/src/parsers/codex.mjs

@@ -1,3 +1,4 @@
+import crypto from "node:crypto";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
@@ -20,24 +21,33 @@ function readJsonl(filePath) {
   for (const [lineIndex, line] of source.split("\n").entries()) {
     if (!line.trim()) continue;
     try {
-      rows.push(JSON.parse(line));
+      rows.push({ ...JSON.parse(line), __sourceLine: lineIndex + 1 });
     } catch {
       console.warn(`跳过无法解析的记录：${path.basename(filePath)}:${lineIndex + 1}`);
     }
   }
-  return rows;
+  return { rows, source };
 }
 
 function sessionFromFile(file) {
-  const rows = readJsonl(file.filePath);
+  const { rows, source } = readJsonl(file.filePath);
   const meta = rows.find((row) => row.type === "session_meta")?.payload || {};
+  const metadataSessionId = meta.session_id || meta.id || null;
   const timestamps = rows.map(rowDate).filter(Boolean).sort((left, right) => left - right);
   const fallbackDate = new Date(file.modifiedAt);
+  const sourceBuffer = Buffer.from(source, "utf8");
   return {
     rows,
     filePath: file.filePath,
     modifiedAt: file.modifiedAt,
-    sessionId: meta.session_id || meta.id || path.basename(file.filePath, ".jsonl"),
+    sessionId: metadataSessionId || path.basename(file.filePath, ".jsonl"),
+    identityQuality: metadataSessionId ? "metadata" : "filename_fallback",
+    sourceRevision: {
+      kind: "append-only-jsonl-v1",
+      row_count: rows.length,
+      byte_length: sourceBuffer.byteLength,
+      tail_hash: crypto.createHash("sha256").update(sourceBuffer.subarray(-4096)).digest("hex"),
+    },
     startAt: timestamps[0] || fallbackDate,
     endAt: timestamps.at(-1) || fallbackDate,
   };
@@ -62,6 +72,7 @@ function calendarCandidates(files, startDate) {
 export function loadCodexSessions(range) {
   const files = codexSessionFiles();
   let candidates = files;
+  let scanMode = "none";
 
   if (range.scope === "latest") {
     candidates = files.slice(0, 40);
@@ -69,19 +80,28 @@ export function loadCodexSessions(range) {
     const filenameMatches = files.filter((file) => path.basename(file.filePath).includes(range.sessionId));
     candidates = filenameMatches.length ? filenameMatches : files;
   } else {
-    candidates = calendarCandidates(files, range.startDate);
+    const fullScan = process.env.CODEX_WORK_RECEIPT_FULL_SCAN === "1";
+    candidates = fullScan ? files : calendarCandidates(files, range.startDate);
+    scanMode = fullScan ? "full" : "best_effort";
   }
 
   const sessions = candidates
     .map(sessionFromFile)
     .sort((left, right) => right.endAt - left.endAt);
 
-  if (range.scope === "latest") return sessions.slice(0, 1);
+  if (range.scope === "latest") {
+    const selected = sessions.slice(0, 1);
+    selected.scanMode = scanMode;
+    return selected;
+  }
   if (range.scope === "session") {
     const selected = sessions.find((session) => session.sessionId === range.sessionId);
     if (!selected) throw new Error(`没有找到指定的 Codex 会话：${range.sessionId}`);
-    return [selected];
+    const result = [selected];
+    result.scanMode = scanMode;
+    return result;
   }
+  sessions.scanMode = scanMode;
   return sessions;
 }
 

package/src/renderers/html.mjs

@@ -36,7 +36,7 @@ function formatDateKey(value, locale) {
   return locale === "en" ? `${match[2]}/${match[3]}/${match[1]}` : `${match[1]}/${match[2]}/${match[3]}`;
 }
 
-export function renderHtml({ record, dataQrDataUrl, miniProgramCodeDataUrl = null }) {
+export function renderHtml({ record, dataQrDataUrl = null, dataQrDataUrls = null, miniProgramCodeDataUrl = null }) {
   const locale = record.locale || DEFAULT_LOCALE;
   const copy = getReceiptCopy(locale);
   const startAt = new Date(record.period.start_at);
@@ -85,6 +85,17 @@ export function renderHtml({ record, dataQrDataUrl, miniProgramCodeDataUrl = nul
   const miniProgramVisual = miniProgramCodeDataUrl
     ? `<img src="${miniProgramCodeDataUrl}" alt="${escapeHtml(copy.miniProgramAlt)}">`
     : `<div class="mini-placeholder" role="img" aria-label="${escapeHtml(copy.placeholderAria)}"><span>${escapeHtml(copy.placeholderLabel)}</span><strong>${escapeHtml(copy.placeholderValue)}</strong></div>`;
+  const qrUrls = Array.isArray(dataQrDataUrls) && dataQrDataUrls.length
+    ? dataQrDataUrls
+    : dataQrDataUrl
+      ? [dataQrDataUrl]
+      : [];
+  const dataQrItems = qrUrls.map((url, index) => `
+        <div class="qr-item">
+          <div class="qr-frame"><img src="${url}" alt="${escapeHtml(copy.dataQrAlt)} ${index + 1}/${qrUrls.length}"></div>
+          <strong>${escapeHtml(copy.importData)}${qrUrls.length > 1 ? ` ${index + 1}/${qrUrls.length}` : ""}</strong>
+          <span>${escapeHtml(copy.importDataHint)}</span>
+        </div>`).join("");
 
   return `<!doctype html>
 <html lang="${escapeHtml(copy.htmlLang)}" data-theme="${escapeHtml(record.presentation.default_theme)}">
@@ -443,11 +454,7 @@ export function renderHtml({ record, dataQrDataUrl, miniProgramCodeDataUrl = nul
           <strong>${escapeHtml(copy.openMiniProgram)}</strong>
           <span>${escapeHtml(copy.openMiniProgramHint)}</span>
         </div>
-        <div class="qr-item">
-          <div class="qr-frame"><img src="${dataQrDataUrl}" alt="${escapeHtml(copy.dataQrAlt)}"></div>
-          <strong>${escapeHtml(copy.importData)}</strong>
-          <span>${escapeHtml(copy.importDataHint)}</span>
-        </div>
+        ${dataQrItems}
       </div>
       <p class="transfer-note">${escapeHtml(copy.transferNote)}</p>
       </section>