orc-ai 0.1.37 → 0.1.41

package/dist/skills/orc-platform/SKILL.md

@@ -18,6 +18,12 @@ installation as a side effect.
 Read only the reference matching the request. Related operations share a file so
 one recipe does not require a chain of tiny reads.
 
+Bundled ORC skill scripts are trusted operational helpers. Use the matching
+reference and `--help` (or the short file header) rather than reading their full
+source into context. Read the source for debugging or when a script comes from
+an untrusted source. Signed downloads of bundled scripts retain this workflow;
+verify the returned hash/size without loading the script body into context.
+
 | Request | Reference |
 | --- | --- |
 | Install, connect an agent, CLI/API/MCP, configure auth, diagnose connectivity | [Setup and interfaces](references/setup.md) |
@@ -25,6 +31,7 @@ one recipe does not require a chain of tiny reads.
 | KB intake/search/edit, parsers, embeddings, README/Markdown and living Learnings digests | [Knowledge and documentation](references/knowledge.md) |
 | Projects, tasks/flows, jobs, gateway, status, tags and audit | [Work and operations](references/work.md) |
 | Session continuity/handoff, terminals, chat, SSH execution, Git/GitHub | [Sessions and execution](references/execution.md) |
+| Archive local coding sessions on remote ORC, incremental sync/deduplication, session retrieval design | [Session archive and search](references/session-archive.md) |
 | Deterministic rules, hooks and enforcement capabilities | [Rules](references/rules.md) |
 | Author/import/edit skills, agent profiles and packages | [Reusable definitions](references/packages.md) |
 

package/dist/skills/orc-platform/references/execution.md

@@ -4,6 +4,9 @@ Sources: [Live sessions](https://github.com/niradler/orc/blob/master/docs/live-s
 
 ## Session continuity
 
+For bulk/offline local history sync, use [session-archive.md](session-archive.md).
+It stores histories without running agents; the handoff below moves active work.
+
 Use the supplied ORC session ID. At meaningful milestones record decisions, failures,
 artifact/commit references and next action with `session_event`; avoid per-line
 noise. `session_snapshot` preserves compact context; after compaction use
@@ -63,7 +66,10 @@ an ORC event snapshot. Parent sessions are required for Codex child-agent histor
    `${CODEX_HOME:-~/.codex}/sessions/YYYY/MM/DD/rollout-*-<session-id>.jsonl`
    or an explicitly selected archive. Use the actual parent native session.
 5. Confirm `status: ready`, destination cwd and `live_session_id`, then use
-   **Sessions → Open in terminal**. Upload acceptance alone does not prove readiness.
+   **Sessions → Open in terminal**. If the user requested move-and-continue, finish
+   the launch through `POST /api/terminals` with the agent kind and live_session_id
+   and verify the running terminal/cwd/host. Do not leave the user at Ready.
+   Upload acceptance alone does not prove readiness or continuation.
 
 Inspect `GET /api/session-handoffs/<id>` on failure. After correcting a preparation
 failure, retry `POST /api/session-handoffs/<id>/prepare` using normal auth. A consumed

package/dist/skills/orc-platform/references/session-archive.md

@@ -0,0 +1,199 @@
+# Coding session archive, remote sync and retrieval
+
+Status: implemented in this feature checkout; use the selected installation's
+schemas/help to confirm its version includes these operations. Archive sync and
+native continuation are two separate user outcomes. The design rationale below
+also records limits and future improvements; it is not permission to deploy.
+
+## Sync local histories for offline retrieval
+
+Use this when asked to upload this project's sessions, all Claude sessions or a
+selected collection to remote ORC. The completed outcome is searchable history in
+**Sessions → Archived sessions**, available while the PC is offline. **Show ended
+is selected by default**; explicitly hiding ended sessions also hides the archive.
+Archival creates neither a native agent process nor a worktree.
+
+1. Select the intended ORC installation and existing project(s). Call
+   `session_sync({projects:["my-app"]})` for one/more requested projects, or
+   `session_sync({})` for an all-project history request. It returns a private,
+   one-hour sync grant with covered projects. Pass the result to the helper via
+   `--grant-stdin` or a private JSON file with `--grant-file`; do not print its URL,
+   put it in argv/history or commit the grant file. The main API secret is not needed.
+   For hosted ORC behind a TLS proxy, preserve the external `Host` and set
+   `X-Forwarded-Proto: https`; grants and signed script downloads then use the
+   externally reachable HTTPS origin. Do not expose the internal API port publicly.
+   For a single project, use
+   its readable name and the local cwd. For an all-agent/history request, discover
+   remote projects and use their configured Git remote identities or a small
+   explicit cwd/repository-to-project JSON map. Unmapped histories stay local and
+   are reported; do not guess a project from a directory basename.
+2. Use trusted `scripts/sync-sessions.py` from the orc-platform root. Do not read
+   its full source. If absent locally, call
+   `skill_read({name:"orc-platform",ref:"scripts/sync-sessions.py",download:true,project})`,
+   download the signed bytes privately and verify the supplied SHA-256/size. Run
+   `python scripts/sync-sessions.py --help` for current flags. Downloading does not
+   execute the script. A configured standalone client may alternatively use
+   `ORC_API_BASE` and `ORC_API_SECRET` from its secure environment, never literal argv.
+3. Preview with `--dry-run`, then sync the requested scope. Examples using the
+   private grant JSON returned to the connected agent:
+
+   ```sh
+   python scripts/sync-sessions.py --grant-file /private/sync-grant.json --project my-app --cwd /local/repo --dry-run
+   python scripts/sync-sessions.py --grant-file /private/sync-grant.json --project my-app --cwd /local/repo
+   python scripts/sync-sessions.py --grant-file /private/sync-grant.json --agent claude --project-map /local/project-map.json
+   python scripts/sync-sessions.py --grant-file /private/sync-grant.json --agent codex --project my-app --session-file /local/rollout.jsonl
+   ```
+
+   For Windows, quote a cwd such as `"C:\Projects\my-app"`. A map is an object
+   such as `{"C:\\Projects\\my-app":"my-app","https://github.com/org/repo":"another-app"}`.
+   `--project` explicitly assigns every selected session to that project; combine
+   it with `--cwd` for a project-only request. For collections spanning projects,
+   prefer remote matching/mapping. `--root` overrides a native root for one agent;
+   `--exclude` is repeatable. Default Claude discovery uses `CLAUDE_CONFIG_DIR/projects`;
+   Codex uses `CODEX_HOME/sessions` and `archived_sessions`, with normal home fallbacks.
+4. Inspect per-session outcomes and final counts. Nonzero exit means failed,
+   unmapped or conflicting items need attention; successful items remain stored.
+   Repeat the command after correcting those items. The script persists a stable
+   source UUID and receipts under `~/.orc`, verifies unchanged receipts against the
+   remote manifest, retries transient requests and uploads changed snapshots only.
+   It extracts native identity, parent/version, cwd, available repository/branch/commit
+   and timestamps; it does not invent a historical commit from today's checkout.
+   A changing file is retried later, and an unfinished last JSONL line is held back.
+5. Verify Sessions for the selected project, search a known transcript phrase and
+   open the saved history. The archive API exposes lexical index revision, pending
+   embedding chunks and errors separately. Use `--reindex` to resend a snapshot and
+   retry its index without duplicating the archive session. No local ORC database
+   or SSH connection from the server to the PC is required.
+
+Native bundles are bounded to 64 MiB per encoded request and 128 files. Claude
+subagent sidecars are included; configuration, credentials, SQLite databases and
+repository files are not uploaded. Large collections use bounded concurrency and
+per-session checkpoints; a single file over the limit is reported, not split into
+an invalid native session. Resumable multipart uploads are future work.
+
+## Move a session and continue on ORC
+
+Use this when the user wants to close the PC and continue the work on the ORC
+execution host. The outcome is a **running resumed terminal**, not just stored
+history or a Ready badge. Keep the source idle during the final transfer.
+
+- For a currently local session, follow [execution.md](execution.md)'s handoff:
+  within the user's Git authorization commit/push the intended code, verify its
+  exact remote SHA, call `session_handoff`, then use trusted
+  `scripts/upload-session.py` with the single-use upload URL. Use its instructions
+  and `--help`; full script inspection is for debugging/untrusted code.
+- For an already archived session, use its **Prepare and resume in terminal**
+  action. Supply/verify the pushed repository, branch and commit where history
+  lacks them. The server uses the existing handoff import/checks and keeps the
+  archive revision and handoff link. Preparation copies history to a new native ID
+  and pinned worktree; the source archive remains intact.
+- After status is `ready`, an agent completing a move-and-continue request calls
+  authenticated `POST /api/terminals` with `{kind:"claude"|"codex",live_session_id}`
+  and verifies the returned terminal/cwd/host. The UI action performs this launch
+  automatically. Do not stop at upload acceptance or Ready when continuation was
+  requested. Destination agent credentials/dependencies must already be available;
+  ignored files and running local processes are not transferred.
+
+## Settings and retrieval APIs
+
+Settings → Knowledge has **Search coding sessions with embeddings**, off by
+default. It uses the existing configured embedding provider. Enabling also indexes
+discovered Claude/Codex sessions already assigned to projects on the selected host;
+**Index discovered sessions** can index those histories manually without vectors.
+The existing native metadata/ripgrep search and paged transcripts remain available.
+Uploads additionally have a persistent server-side keyword index, so fallback
+does not depend on the original PC. Provider failures/pending vectors are visible.
+
+| Operation | API |
+| --- | --- |
+| Mint scoped connected-agent sync grant | `POST /api/sessions/archive/sync` |
+| Upload one snapshot | `POST /api/sessions/archive/upload` |
+| Compare up to 100 origins | `POST /api/sessions/archive/manifest` |
+| List/search bounded hits | `GET /api/sessions/archive?q=...&project_id=...&limit=20&offset=0` |
+| Index discovered project histories | `POST /api/sessions/archive/index` |
+| Metadata, revisions and handoff links | `GET /api/sessions/archive/{id}` |
+| Pinned conversation page | `GET /api/sessions/archive/{id}/transcript?revision=1&offset=0&limit=100` |
+| Resolve a passage | `GET /api/sessions/archive/{id}/passage?revision=1&ordinal=0` |
+| Original native bundle | `GET /api/sessions/archive/{id}/export?revision=1` |
+| Prepare native continuation | `POST /api/sessions/archive/{id}/resume` |
+
+Normal installation API authentication applies. Remote hosting must configure a
+secret and HTTPS. The grant's private `/api/session-sync/<token>` base permits only
+its scoped project listing, manifest checks and uploads; it cannot read transcripts,
+mint grants or launch terminals. An expired grant needs a new `session_sync` call;
+reruns retain the local origin/receipts and do not duplicate acknowledged history.
+Upload includes required readable `project`, stable `source_id`,
+`agent`, native `session_id`, `title`, `metadata` and the existing version-1 native
+`bundle`. Optional `expected_revision` rejects stale writers; verified identical or
+older prefixes remain no-ops. A conflict returns HTTP409 with its retained revision;
+it never replaces current history. Do not blindly retry divergence as an overwrite.
+
+MCP `session_sync` supplies the uploader capability. `session_search` returns bounded cited passages; `session_read` fetches a pinned
+passage or message page. Citations are `session:<archive-id>@<revision>#<ordinal>`.
+The SDK provides archive search/upload/index/read/passage/resume under `sessions`.
+Search returns at most three passages per session; no whole history is included.
+Current archive list/search pagination uses limit/offset, not snapshot cursors.
+
+The remaining sections explain the architecture and future scale decisions.
+
+## Identity, updates and retrieval guarantees
+
+The origin key is (source installation ID, agent, native session UUID), independent
+of filename, cwd and project labels. The uploader persists its installation UUID;
+reinstallations should retain it. A copy from another PC has a different origin
+unless the operator explicitly uses the same source ID. A native ID alone never
+merges unrelated sessions. Original native files remain untouched.
+
+- Identical canonical records: return the same archive ID/revision; no re-embedding.
+- Verified extension of every existing file's ordered records: advance the same
+  archive to a new immutable revision and reuse unchanged chunk embeddings.
+- Older verified prefix: stale/no-op; never truncate current history.
+- Divergence, rewritten records, missing earlier sidecars or an incompatible
+  expected revision: retain the conflicting snapshot, return HTTP409 and leave
+  the canonical head intact. Conflicting replay is idempotent. Resolve explicitly;
+  no timestamp-based concatenation or last-write-wins.
+- Native continuation creates a new session ID; an archive-to-handoff relation
+  preserves its source revision. It never rewrites the archived original.
+
+Each revision records raw native files in private blob storage alongside the
+knowledge root. Metadata/revision pointers live in orc.db. Lexical chunks and
+vectors use a separate rebuildable session index, sharing the existing KB index
+implementation and provider/profile cache. Lost indexes rebuild from originals;
+unfinished embedding work resumes from durable pending chunks. Indexing and
+search never execute historical tool calls or trust transcript instructions.
+
+Passages are turn-aware, split at 1,600 characters after the existing bounded
+transcript normalization, and include Claude sidecar locators. Raw exports retain
+the uploaded native text rather than the bounded display projection. Search groups at most three cited passages
+per session, with separate pinned revision/message-page reads. Model/profile
+changes backfill compatible vectors; provider failure preserves keyword results.
+Embedding batches are internal provider requests, not whole-document results.
+
+Native metadata/ripgrep search remains available alongside archive retrieval.
+KB search still returns document metadata and cited passages, with kb_read for
+more context and kb_evidence for token-budgeted evidence. It is also top-k,
+not cursor-paginated. Archive pagination currently uses bounded limit/offset;
+concurrent updates can reorder pages. Snapshot cursors, resumable part uploads,
+retention/garbage collection and interactive conflict-resolution tooling are
+future improvements, not claims about the current implementation.
+
+## Operational boundaries
+
+Require HTTPS and configured API authentication for remote hosting. Existing
+shared API-secret access is installation access, not per-user tenant isolation.
+Select explicit project scope for retrieval. Session text can contain private
+code or secrets: exclude/redact at the source as needed, and enable external
+embeddings only with a provider approved for that text. Credentials/config and
+agent databases are never selected as native session inputs.
+
+Uploads count actual streamed bytes, enforce format/identity/path limits, and
+never write to uploader-supplied filesystem destinations. Failed network retries
+and stale snapshots cannot replace current data. Check storage/index/provider
+states separately. A searchable archive without available code or destination
+credentials remains readable/exportable; it is not automatically resumable.
+
+Verify both outcomes proportionally: repeat/increment/conflict/recovery tests for
+archive sync; then a real browser flow from saved history through pinned Git
+preparation to a terminal with the expected host/cwd and native session. Local
+isolated E2E evidence does not establish a hosted production deployment or a
+successful paid model turn.

package/dist/skills/orc-platform/scripts/sync-sessions.py

@@ -0,0 +1,297 @@
+"""Sync local Claude/Codex histories to ORC without launching agents.
+
+Use --help for project/cwd/agent selection. Authentication comes from ORC_API_SECRET,
+never argv. --dry-run previews mapping. Source files and agent credentials are untouched.
+Repeated snapshots are idempotent; divergent revisions are retained as conflicts.
+"""
+
+import argparse
+import concurrent.futures
+import datetime
+import functools
+import hashlib
+import json
+import os
+import pathlib
+import re
+import subprocess
+import sys
+import time
+import urllib.error
+import urllib.parse
+import urllib.request
+import uuid
+
+
+class NoRedirects(urllib.request.HTTPRedirectHandler):
+    def redirect_request(self, req, fp, code, msg, headers, newurl):
+        raise ValueError("ORC redirects refused; use the final API URL")
+
+
+def request(base, path, body=None):
+    if "/api/session-sync/" in base:
+        path = path.removeprefix("/sessions/archive")
+    headers = {"Content-Type": "application/json", "x-orc-source": "cli"}
+    token = None if "/api/session-sync/" in base else os.environ.get("ORC_API_SECRET")
+    if token:
+        headers["Authorization"] = "Bearer " + token
+    data = None if body is None else json.dumps(body, ensure_ascii=False).encode("utf-8")
+    if data is not None and len(data) > 64 * 1024 * 1024:
+        raise ValueError("Encoded session exceeds the 64 MiB limit")
+    req = urllib.request.Request(base + path, data=data, headers=headers)
+    for attempt in range(3):
+        try:
+            with urllib.request.build_opener(NoRedirects()).open(req, timeout=180) as response:
+                return json.load(response)
+        except urllib.error.HTTPError as error:
+            if error.code == 409:
+                return json.load(error)
+            if error.code not in (429, 502, 503, 504) or attempt == 2:
+                raise ValueError(f"ORC HTTP {error.code}; check API access and project mapping") from None
+        except (urllib.error.URLError, TimeoutError):
+            if attempt == 2:
+                raise ValueError("ORC connection failed after three attempts") from None
+        time.sleep(2 ** attempt)
+
+
+def snapshot(path):
+    before = path.stat()
+    if before.st_size > 60 * 1024 * 1024:
+        raise ValueError("Native file exceeds 60 MiB; select a smaller session")
+    text = path.read_text(encoding="utf-8-sig")
+    after = path.stat()
+    if (before.st_size, before.st_mtime_ns) != (after.st_size, after.st_mtime_ns):
+        raise ValueError("Session changed while reading; retry once it is idle")
+    lines = text.splitlines()
+    if lines and not text.endswith("\n"):
+        try:
+            json.loads(lines[-1])
+        except ValueError:
+            lines.pop()
+    rows = [json.loads(line) for line in lines if line.strip()]
+    if not rows or any(not isinstance(row, dict) for row in rows):
+        raise ValueError("Expected nonempty native JSONL objects")
+    return "\n".join(lines) + "\n", rows
+
+
+def repository_key(value):
+    value = value.strip().rstrip("/").removesuffix(".git")
+    if value.startswith("git@") and ":" in value:
+        value = value[4:].replace(":", "/", 1)
+    parsed = urllib.parse.urlparse(value)
+    port = (":" + str(parsed.port)) if parsed.port else ""
+    return ((parsed.hostname or "") + port + parsed.path if parsed.scheme else value).casefold()
+
+
+def normalized_path(value):
+    text = value.replace("\\", "/")
+    if text.startswith("//?/"):
+        text = text[4:]
+    if len(text) > 1 and text[1] == ":":
+        text = text.casefold()
+    return text.rstrip("/")
+
+
+@functools.lru_cache(maxsize=4096)
+def local_repository(cwd):
+    if not cwd or not pathlib.Path(cwd).is_dir():
+        return None, ""
+    try:
+        remote = subprocess.run(["git", "-C", cwd, "remote", "get-url", "origin"], capture_output=True, text=True, timeout=5, check=True).stdout.strip()
+        prefix = subprocess.run(["git", "-C", cwd, "rev-parse", "--show-prefix"], capture_output=True, text=True, timeout=5, check=True).stdout.strip().rstrip("/")
+        return remote, prefix
+    except (OSError, subprocess.SubprocessError):
+        return None, ""
+
+
+def identify(agent, path, text, rows):
+    if agent == "codex":
+        meta = rows[0].get("payload", {})
+        if rows[0].get("type") != "session_meta" or not isinstance(meta, dict):
+            raise ValueError("Codex file lacks session_meta")
+        native_id = meta.get("id")
+        metadata = {"cwd": meta.get("cwd", ""), "subdirectory": ""}
+        if meta.get("cli_version"):
+            metadata["agent_version"] = str(meta["cli_version"])
+        if meta.get("parent_thread_id"):
+            metadata["parent_id"] = str(meta["parent_thread_id"])
+        git = meta.get("git", {})
+        if isinstance(git, dict):
+            for key, source in [("repository", "repository_url"), ("branch", "branch"), ("commit", "commit_hash")]:
+                if git.get(source):
+                    metadata[key] = git[source]
+    else:
+        native = next((r for r in rows if r.get("sessionId") and r.get("type") in ("user", "assistant")), None)
+        if not native:
+            raise ValueError("Claude file lacks native conversation metadata")
+        native_id = native["sessionId"]
+        metadata = {"cwd": native.get("cwd", ""), "subdirectory": ""}
+        if native.get("version"):
+            metadata["agent_version"] = str(native["version"])
+        if native.get("gitBranch"):
+            metadata["branch"] = str(native["gitBranch"])
+    uuid.UUID(native_id)
+    cwd = metadata.get("cwd")
+    remote, prefix = local_repository(cwd)
+    if remote and "repository" not in metadata:
+        metadata["repository"] = remote
+    metadata["subdirectory"] = prefix
+    if metadata.get("repository"):
+        parsed = urllib.parse.urlparse(metadata["repository"])
+        if parsed.scheme in ("http", "https"):
+            metadata["repository"] = urllib.parse.urlunparse(parsed._replace(netloc=parsed.hostname + (":" + str(parsed.port) if parsed.port else ""), query="", fragment=""))
+    files = [{"path": "session.jsonl", "content": text}]
+    sidecars = path.parent / path.stem / "subagents"
+    if agent == "claude" and sidecars.is_dir():
+        for sidecar in sorted(sidecars.glob("agent-*.jsonl")):
+            if sidecar.is_symlink():
+                raise ValueError("Symbolic-link sidecars are not supported")
+            files.append({"path": "subagents/" + sidecar.name, "content": snapshot(sidecar)[0]})
+    if len(files) > 128:
+        raise ValueError("Too many sidecars")
+    title = path.stem
+    for row in rows:
+        message = row.get("message") or row.get("payload") or {}
+        if not isinstance(message, dict):
+            continue
+        content = message.get("content") if isinstance(message, dict) else None
+        if isinstance(content, list):
+            content = " ".join(str(b.get("text", "")) for b in content if isinstance(b, dict))
+        if (row.get("type") == "user" or message.get("role") == "user") and isinstance(content, str) and content.strip():
+            title = " ".join(content.split())[:200]
+            break
+    timestamps = []
+    for row in rows:
+        stamp = row.get("timestamp")
+        if isinstance(stamp, str):
+            try:
+                date = datetime.datetime.fromisoformat(stamp.replace("Z", "+00:00"))
+                if date.tzinfo:
+                    timestamps.append(date.astimezone(datetime.timezone.utc).isoformat())
+            except ValueError:
+                pass
+    if timestamps:
+        metadata.update(started_at=min(timestamps), ended_at=max(timestamps))
+    return {"agent": agent, "session_id": native_id, "title": title[:200], "metadata": metadata, "bundle": {"version": 1, "files": files}}
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("--url", default=os.environ.get("ORC_API_BASE"), help="ORC server base URL; HTTPS required except loopback")
+    parser.add_argument("--grant-file", type=pathlib.Path, help="Private JSON returned by the connected agent's session_sync tool; no main API secret needed")
+    parser.add_argument("--grant-stdin", action="store_true", help="Read session_sync grant JSON from stdin instead of a file")
+    parser.add_argument("--project", help="Existing ORC project for the selected sessions")
+    parser.add_argument("--project-map", type=pathlib.Path, help="JSON mapping of source cwd prefixes or repository URLs to ORC project names")
+    parser.add_argument("--agent", choices=["all", "claude", "codex"], default="all")
+    parser.add_argument("--cwd", help="Only sessions at or below this local project directory")
+    parser.add_argument("--exclude", action="append", default=[], help="Skip native paths matching this glob; repeatable")
+    parser.add_argument("--root", type=pathlib.Path, help="Override native projects/sessions root; requires --agent")
+    parser.add_argument("--session-file", action="append", type=pathlib.Path, help="Explicit native file; repeatable; requires --agent")
+    parser.add_argument("--source-id", help="Stable origin ID; defaults to a UUID persisted in ~/.orc/session-sync-id")
+    parser.add_argument("--workers", type=int, choices=range(1, 5), default=2)
+    parser.add_argument("--reindex", action="store_true", help="Resend unchanged snapshots to refresh/recover their search index")
+    parser.add_argument("--dry-run", action="store_true", help="Preview discovery and project mapping without uploads")
+    args = parser.parse_args()
+    if args.grant_file and args.grant_stdin:
+        parser.error("Choose --grant-file or --grant-stdin")
+    if args.grant_file or args.grant_stdin:
+        grant = json.loads(args.grant_file.read_text()) if args.grant_file else json.load(sys.stdin)
+        args.url = grant.get("sync_url")
+    if not args.url:
+        parser.error("Set --url or ORC_API_BASE")
+    url = urllib.parse.urlparse(args.url)
+    if (args.grant_file or args.grant_stdin) and not re.search(r"/api/session-sync/[A-Za-z0-9_-]{43}$", url.path):
+        parser.error("Expected a scoped session_sync capability")
+    if url.username or url.password or url.query or url.fragment or url.scheme not in ("http", "https") or (url.scheme != "https" and url.hostname not in ("localhost", "127.0.0.1", "::1")):
+        parser.error("Use credential-free HTTPS (or loopback HTTP)")
+    if (args.root or args.session_file) and args.agent == "all":
+        parser.error("Select --agent with --root or --session-file")
+    base = args.url.rstrip("/") if re.search(r"/api/session-sync/[A-Za-z0-9_-]{43}$", url.path) else args.url.rstrip("/").removesuffix("/api") + "/api"
+    projects = request(base, "/projects?limit=100")["projects"]
+    names = {p["name"].casefold(): p["name"] for p in projects}
+    mappings = json.loads(args.project_map.read_text()) if args.project_map else {}
+    if not isinstance(mappings, dict) or any(not isinstance(k, str) or not isinstance(v, str) for k,v in mappings.items()):
+        parser.error("--project-map must map cwd/repository strings to project name strings")
+    if args.project and args.project.casefold() not in names:
+        parser.error("--project must name an existing ORC project")
+    identity = pathlib.Path.home() / ".orc" / "session-sync-id"
+    if args.source_id:
+        source_id = args.source_id
+    else:
+        identity.parent.mkdir(parents=True, exist_ok=True)
+        try:
+            with identity.open("x") as handle:
+                handle.write(str(uuid.uuid4()))
+        except FileExistsError:
+            pass
+        source_id = identity.read_text().strip()
+    receipt_base = base.split("/api/session-sync/")[0] + "/api" if "/api/session-sync/" in base else base
+    receipts = pathlib.Path.home() / ".orc" / "session-sync-receipts" / hashlib.sha256(receipt_base.encode()).hexdigest()
+    if not args.dry_run:
+        receipts.mkdir(parents=True, exist_ok=True)
+    candidates = []
+    for agent in (["claude", "codex"] if args.agent == "all" else [args.agent]):
+        root = args.root or ((pathlib.Path(os.environ.get("CLAUDE_CONFIG_DIR", str(pathlib.Path.home() / ".claude"))) / "projects") if agent == "claude" else pathlib.Path(os.environ.get("CODEX_HOME", str(pathlib.Path.home() / ".codex"))) / "sessions")
+        paths = args.session_file or sorted(root.rglob("*.jsonl"))
+        if not args.session_file and not args.root and agent == "codex":
+            paths += sorted((root.parent / "archived_sessions").rglob("*.jsonl"))
+        candidates.extend((agent, p) for p in paths if not p.is_symlink() and "subagents" not in p.parts and not any(p.match(pattern) for pattern in args.exclude))
+    def sync(item):
+        agent, path = item
+        try:
+            text, rows = snapshot(path)
+            upload = identify(agent, path, text, rows)
+            cwd = upload["metadata"].get("cwd", "")
+            if args.cwd and not (normalized_path(cwd) == normalized_path(os.path.abspath(args.cwd)) or normalized_path(cwd).startswith(normalized_path(os.path.abspath(args.cwd)) + "/")):
+                return "excluded"
+            project = args.project
+            if not project:
+                repo = repository_key(upload["metadata"].get("repository", ""))
+                matches = {value for key, value in mappings.items() if (cwd and (normalized_path(cwd) == normalized_path(key) or normalized_path(cwd).startswith(normalized_path(key) + "/"))) or (repo and repository_key(key) == repo)}
+                matches.update(p["name"] for p in projects if repo and p.get("git_remote_url") and repository_key(p["git_remote_url"]) == repo)
+                if len(matches) == 1:
+                    project = matches.pop()
+            if not project or project.casefold() not in names:
+                print(f"UNMAPPED {agent} {upload['session_id']}; select --project or --project-map", file=sys.stderr)
+                return "unmapped"
+            upload.update(project=names[project.casefold()], source_id=source_id)
+            if args.reindex:
+                upload["reindex"] = True
+            if args.dry_run:
+                print(f"WOULD UPLOAD {agent} {upload['session_id']} -> {upload['project']}")
+                return "preview"
+            receipt_path = receipts / (hashlib.sha256(f"{source_id}:{agent}:{upload['session_id']}".encode()).hexdigest() + ".json")
+            local_hash = hashlib.sha256(json.dumps(upload["bundle"], sort_keys=True, ensure_ascii=False).encode()).hexdigest()
+            identity_request = {key: upload[key] for key in ("project", "source_id", "agent", "session_id")}
+            head = request(base, "/sessions/archive/manifest", {"sessions": [identity_request]})["sessions"][0]["archive"]
+            try:
+                receipt = json.loads(receipt_path.read_text())
+            except (OSError, ValueError):
+                receipt = {}
+            if not args.reindex and receipt.get("local_hash") == local_hash and head and receipt.get("remote_hash") == head["content_hash"]:
+                print(f"UNCHANGED {agent} {upload['session_id']} (manifest verified)")
+                return "unchanged"
+            result = request(base, "/sessions/archive/upload", upload)
+            outcome = result["outcome"]
+            if outcome in ("created", "updated", "unchanged"):
+                temporary = receipt_path.with_suffix("." + uuid.uuid4().hex + ".tmp")
+                temporary.write_text(json.dumps({"local_hash": local_hash, "remote_hash": result["session"]["content_hash"]}))
+                os.replace(temporary, receipt_path)
+            print(f"{outcome.upper()} {agent} {upload['session_id']} revision={result['session']['revision']}")
+            return outcome
+        except (OSError, ValueError, KeyError, TypeError) as error:
+            print(f"FAILED {agent} {path.name}: {error}", file=sys.stderr)
+            return "failed"
+    with concurrent.futures.ThreadPoolExecutor(max_workers=args.workers) as pool:
+        outcomes = list(pool.map(sync, candidates))
+    counts = {key: outcomes.count(key) for key in sorted(set(outcomes))}
+    print(json.dumps({"discovered": len(candidates), "results": counts}))
+    return 1 if any(k in counts for k in ("failed", "conflict", "unmapped")) else 0
+
+
+if __name__ == "__main__":
+    try:
+        sys.exit(main())
+    except (OSError, ValueError, KeyError) as error:
+        print(f"Session sync failed: {error}", file=sys.stderr)
+        sys.exit(1)

package/dist/web/assets/{Agents-BbR4Bppp.js → Agents-1lX_DRrR.js}

@@ -1,4 +1,4 @@
-import{r as b,j as e,U as J,W as X,X as Z,Y as M,Z as B,B as k,k as I,_ as ee,$ as K,a as te,u as U,a0 as ae,b as T,E as G,V as ne,L as se,a1 as re,a2 as ie,a3 as oe,a4 as de,a5 as le,a6 as ce,a7 as ue,a8 as W,d as D}from"./index-CRsafixF.js";import{p as ge,i as q}from"./public-api-BvD4z7ja.js";const _={specialist:`---
+import{r as b,j as e,U as J,W as X,X as Z,Y as M,Z as B,B as k,k as I,_ as ee,$ as K,a as te,u as U,a0 as ae,b as T,E as G,V as ne,L as se,a1 as re,a2 as ie,a3 as oe,a4 as de,a5 as le,a6 as ce,a7 as ue,a8 as W,d as D}from"./index-BqQDBYwx.js";import{p as ge,i as q}from"./public-api-BvD4z7ja.js";const _={specialist:`---
 name: Specialist
 description: Describe when to use this specialist
 ---

package/dist/web/assets/{Audit-BFK82hee.js → Audit-DnRP9Ivm.js}

@@ -1 +1 @@
-import{aa as T,j as e,a2 as L,a3 as P,a4 as $,a5 as R,a6 as O,E as w,S,ab as A,ac as h,r as k,ad as I,f as V,l as H,$ as z,a0 as B,ae as U,af as F,T as J,s as G,t as v,v as c,w as M,x,V as Y}from"./index-CRsafixF.js";import{P as Z}from"./Pager-B53jtBdE.js";import{S as y}from"./scroll-area-B2WVTNHY.js";import{u as q}from"./useProjectScope-NKMBMTCk.js";const K={file:"text-outline",task:"text-outline",decision:"text-outline",error:"text-error",git:"text-outline",rule:"text-outline",plan:"text-outline"},Q="text-outline";function W(n){return K[n]??Q}function X({sessionId:n,open:a,onClose:r}){const{data:t,isLoading:u,error:p,refetch:j}=T(n??"");return e.jsx(L,{open:a,onOpenChange:o=>!o&&r(),children:e.jsxs(P,{side:"right",className:"w-[540px] max-w-[90vw]",children:[e.jsx($,{children:e.jsx(R,{children:u?"Loading...":t?`${t.agent??"Session"} ${t.agent_version?`v${t.agent_version}`:""}`:"Session Detail"})}),e.jsxs(O,{children:[e.jsx("p",{className:"mb-4 text-sm text-outline",children:"This audit record contains summaries and events. Open Sessions to read native agent conversations or resume them."}),p?e.jsx(w,{message:p.message,onRetry:()=>j()}):u?e.jsx("div",{className:"space-y-4",children:[...Array(4)].map((o,i)=>e.jsx(S,{className:"h-8 w-full bg-surface-highest"},i))}):t?e.jsxs("div",{className:"space-y-6",children:[t.summary&&e.jsx("div",{className:"font-body text-xs text-on-surface leading-relaxed",children:e.jsx(A,{children:t.summary})}),e.jsxs("div",{className:"grid grid-cols-1 sm:grid-cols-2 gap-4",children:[e.jsx(h,{label:"ID",children:e.jsx("span",{className:"font-mono text-xs break-all",children:t.id})}),e.jsx(h,{label:"Project ID",children:t.project_id??"—"}),e.jsx(h,{label:"Job Run ID",children:t.job_run_id??"—"}),e.jsx(h,{label:"Tokens Used",children:t.tokens_used!=null?t.tokens_used.toLocaleString():"—"}),e.jsx(h,{label:"Created",children:new Date(t.created_at).toLocaleString()})]}),t.events.length>0&&e.jsxs("div",{children:[e.jsxs("div",{className:"font-label text-xs font-medium text-outline mb-3",children:["Events (",t.events.length,")"]}),e.jsx(y,{className:"h-[300px]",children:e.jsx("div",{className:"space-y-1",children:[...t.events].sort((o,i)=>new Date(o.created_at).getTime()-new Date(i.created_at).getTime()).map(o=>e.jsx(ee,{event:o},o.id))})})]}),t.snapshot&&e.jsxs("div",{children:[e.jsx("div",{className:"font-label text-xs font-medium text-outline mb-3",children:"Snapshot"}),e.jsx(y,{className:"h-[200px]",children:e.jsx("pre",{className:"font-mono text-xs text-on-surface-variant whitespace-pre-wrap break-words bg-background border-l border-border p-3",children:t.snapshot})})]})]}):e.jsx("div",{className:"font-body text-xs text-outline py-8 text-center",children:"Session not found"})]})]})})}function ee({event:n}){const[a,r]=k.useState(!1),t=n.data!=null;return e.jsxs("div",{className:"border-b border-border/65",children:[e.jsxs("button",{type:"button",className:"w-full flex items-center gap-2 px-3 py-2 text-left hover:bg-surface-high transition-colors",onClick:()=>t&&r(!a),"aria-expanded":t?a:void 0,children:[t?a?e.jsx(I,{size:10,className:"text-outline flex-shrink-0"}):e.jsx(V,{size:10,className:"text-outline flex-shrink-0"}):e.jsx("span",{className:"w-[10px] flex-shrink-0"}),e.jsx("span",{className:`inline-flex items-center px-1.5 py-0.5 text-[10px] font-label font-medium  ${W(n.type)}`,children:n.type}),e.jsx("span",{className:"flex-1 font-body text-xs text-outline truncate",children:se(n.data)}),e.jsx("span",{className:"font-label text-[10px] text-outline flex-shrink-0",children:new Date(n.created_at).toLocaleTimeString()})]}),a&&t&&e.jsx("div",{className:"px-3 pb-2",children:e.jsx("pre",{className:"font-mono text-xs text-on-surface-variant whitespace-pre-wrap break-words bg-background border-l border-border/65 p-2 max-h-48 overflow-auto",children:JSON.stringify(n.data,null,2)})})]})}function se(n){if(n==null)return"";if(typeof n=="string")return n;if(typeof n=="object"){const a=n;if(typeof a.path=="string")return a.path;if(typeof a.content=="string")return a.content.length>80?`${a.content.slice(0,80)}...`:a.content;if(typeof a.message=="string")return a.message;if(typeof a.summary=="string")return a.summary;const r=Object.keys(a);return r.length<=3?r.join(", "):`${r.length} fields`}return String(n)}const b=25,m="font-label text-xs font-medium text-outline";function te({projectId:n}){const a=H("sm"),[r,t]=z("order","desc",["asc","desc"]),[u,p]=k.useState({order:r,page:0}),j=u.order===r?u.page:0,o=s=>p({order:r,page:s}),{selectedId:i,openDetail:g,closeDetail:_}=B("/audit","sessionId"),{data:l,isLoading:D,error:N,refetch:E}=U({...n==="all"?{}:{project_id:n},limit:b,offset:j*b,order:r});if(N)return e.jsx(w,{message:N.message,onRetry:()=>E()});const f=(l==null?void 0:l.sessions)??[],C=(l==null?void 0:l.total)??0;return e.jsxs("section",{"data-testid":"logged-sessions",children:[e.jsx("div",{className:"mb-4 flex justify-end",children:e.jsxs("select",{"aria-label":"Sort audit by date","data-testid":"audit-date-sort",value:r,onChange:s=>{o(0),t(s.target.value)},className:"min-h-11 rounded-md border border-control-border bg-background px-3 text-sm text-on-surface",children:[e.jsx("option",{value:"desc",children:"Created: newest first"}),e.jsx("option",{value:"asc",children:"Created: oldest first"})]})}),D?e.jsx("div",{className:"space-y-2",children:[...Array(5)].map((s,d)=>e.jsx(S,{className:"h-10 w-full bg-surface-highest"},d))}):f.length===0?e.jsx(F,{message:"No audit records"}):e.jsxs("div",{className:"min-w-0 overflow-hidden",children:[a?e.jsxs(J,{children:[e.jsx(G,{children:e.jsxs(v,{className:"border-b border-border hover:bg-transparent",children:[e.jsx(c,{className:m,children:"Agent"}),e.jsx(c,{className:`${m} w-24`,children:"Version"}),e.jsx(c,{className:m,children:"Summary"}),e.jsx(c,{className:`${m} w-24`,children:"Project"}),e.jsx(c,{className:`${m} w-28`,children:"Tokens Used"}),e.jsx(c,{className:`${m} w-36`,children:"Created"})]})}),e.jsx(M,{children:f.map(s=>e.jsxs(v,{"data-testid":"session-row","data-session-id":s.id,className:"border-b border-border/65 hover:bg-surface-high cursor-pointer",onClick:()=>g(s.id),children:[e.jsx(x,{className:"font-label text-xs text-primary",children:e.jsx("button",{type:"button",className:"text-left font-medium hover:underline",onClick:d=>{d.stopPropagation(),g(s.id)},children:s.agent??"Session"})}),e.jsx(x,{className:"font-label text-xs text-outline",children:s.agent_version??"—"}),e.jsx(x,{className:"font-body text-xs text-on-surface-variant max-w-sm truncate",children:s.summary??"—"}),e.jsx(x,{className:"font-label text-xs text-outline",children:s.project_id?s.project_id.slice(-6):"—"}),e.jsx(x,{className:"font-label text-xs text-outline text-right",children:s.tokens_used!=null?s.tokens_used.toLocaleString():"—"}),e.jsx(x,{className:"font-label text-xs text-outline",children:new Date(s.created_at).toLocaleString()})]},s.id))})]}):e.jsx("div",{className:"divide-y divide-border",children:f.map(s=>{var d;return e.jsxs("article",{"data-testid":"session-row","data-session-id":s.id,className:"py-4 space-y-3",children:[e.jsx("button",{type:"button",className:"min-h-11 text-sm text-left font-medium text-primary break-words",onClick:()=>g(s.id),children:s.agent??"Session"}),e.jsx("p",{className:"text-sm leading-relaxed text-on-surface break-words",children:s.summary??"No summary recorded"}),e.jsxs("div",{className:"flex flex-wrap gap-x-4 gap-y-2 text-xs text-outline",children:[e.jsxs("span",{children:["Version ",s.agent_version??"—"]}),e.jsxs("span",{children:[((d=s.tokens_used)==null?void 0:d.toLocaleString())??"—"," tokens"]}),e.jsx("span",{children:s.project_id?`Project ${s.project_id.slice(-6)}`:"Unassigned"}),e.jsx("span",{children:new Date(s.created_at).toLocaleString()})]})]},s.id)})}),e.jsx(Z,{page:j,pageSize:b,total:C,onPage:o})]}),e.jsx(X,{sessionId:i,open:!!i,onClose:_})]})}function ie({projectId:n}){const a=q(n);return e.jsxs("div",{children:[e.jsx(Y,{title:"Audit"}),e.jsx("p",{className:"mb-4 text-sm text-outline",children:"Recorded summaries and events. Open Sessions to read conversations or resume a coding agent."}),e.jsx(te,{projectId:a},a)]})}export{ie as default};
+import{aa as T,j as e,a2 as L,a3 as P,a4 as $,a5 as R,a6 as O,E as w,S,ab as A,ac as h,r as k,ad as I,f as V,l as H,$ as z,a0 as B,ae as U,af as F,T as J,s as G,t as v,v as c,w as M,x,V as Y}from"./index-BqQDBYwx.js";import{P as Z}from"./Pager-urh4-P2a.js";import{S as y}from"./scroll-area-YSA2ORI8.js";import{u as q}from"./useProjectScope-BvcpSOql.js";const K={file:"text-outline",task:"text-outline",decision:"text-outline",error:"text-error",git:"text-outline",rule:"text-outline",plan:"text-outline"},Q="text-outline";function W(n){return K[n]??Q}function X({sessionId:n,open:a,onClose:r}){const{data:t,isLoading:u,error:p,refetch:j}=T(n??"");return e.jsx(L,{open:a,onOpenChange:o=>!o&&r(),children:e.jsxs(P,{side:"right",className:"w-[540px] max-w-[90vw]",children:[e.jsx($,{children:e.jsx(R,{children:u?"Loading...":t?`${t.agent??"Session"} ${t.agent_version?`v${t.agent_version}`:""}`:"Session Detail"})}),e.jsxs(O,{children:[e.jsx("p",{className:"mb-4 text-sm text-outline",children:"This audit record contains summaries and events. Open Sessions to read native agent conversations or resume them."}),p?e.jsx(w,{message:p.message,onRetry:()=>j()}):u?e.jsx("div",{className:"space-y-4",children:[...Array(4)].map((o,i)=>e.jsx(S,{className:"h-8 w-full bg-surface-highest"},i))}):t?e.jsxs("div",{className:"space-y-6",children:[t.summary&&e.jsx("div",{className:"font-body text-xs text-on-surface leading-relaxed",children:e.jsx(A,{children:t.summary})}),e.jsxs("div",{className:"grid grid-cols-1 sm:grid-cols-2 gap-4",children:[e.jsx(h,{label:"ID",children:e.jsx("span",{className:"font-mono text-xs break-all",children:t.id})}),e.jsx(h,{label:"Project ID",children:t.project_id??"—"}),e.jsx(h,{label:"Job Run ID",children:t.job_run_id??"—"}),e.jsx(h,{label:"Tokens Used",children:t.tokens_used!=null?t.tokens_used.toLocaleString():"—"}),e.jsx(h,{label:"Created",children:new Date(t.created_at).toLocaleString()})]}),t.events.length>0&&e.jsxs("div",{children:[e.jsxs("div",{className:"font-label text-xs font-medium text-outline mb-3",children:["Events (",t.events.length,")"]}),e.jsx(y,{className:"h-[300px]",children:e.jsx("div",{className:"space-y-1",children:[...t.events].sort((o,i)=>new Date(o.created_at).getTime()-new Date(i.created_at).getTime()).map(o=>e.jsx(ee,{event:o},o.id))})})]}),t.snapshot&&e.jsxs("div",{children:[e.jsx("div",{className:"font-label text-xs font-medium text-outline mb-3",children:"Snapshot"}),e.jsx(y,{className:"h-[200px]",children:e.jsx("pre",{className:"font-mono text-xs text-on-surface-variant whitespace-pre-wrap break-words bg-background border-l border-border p-3",children:t.snapshot})})]})]}):e.jsx("div",{className:"font-body text-xs text-outline py-8 text-center",children:"Session not found"})]})]})})}function ee({event:n}){const[a,r]=k.useState(!1),t=n.data!=null;return e.jsxs("div",{className:"border-b border-border/65",children:[e.jsxs("button",{type:"button",className:"w-full flex items-center gap-2 px-3 py-2 text-left hover:bg-surface-high transition-colors",onClick:()=>t&&r(!a),"aria-expanded":t?a:void 0,children:[t?a?e.jsx(I,{size:10,className:"text-outline flex-shrink-0"}):e.jsx(V,{size:10,className:"text-outline flex-shrink-0"}):e.jsx("span",{className:"w-[10px] flex-shrink-0"}),e.jsx("span",{className:`inline-flex items-center px-1.5 py-0.5 text-[10px] font-label font-medium  ${W(n.type)}`,children:n.type}),e.jsx("span",{className:"flex-1 font-body text-xs text-outline truncate",children:se(n.data)}),e.jsx("span",{className:"font-label text-[10px] text-outline flex-shrink-0",children:new Date(n.created_at).toLocaleTimeString()})]}),a&&t&&e.jsx("div",{className:"px-3 pb-2",children:e.jsx("pre",{className:"font-mono text-xs text-on-surface-variant whitespace-pre-wrap break-words bg-background border-l border-border/65 p-2 max-h-48 overflow-auto",children:JSON.stringify(n.data,null,2)})})]})}function se(n){if(n==null)return"";if(typeof n=="string")return n;if(typeof n=="object"){const a=n;if(typeof a.path=="string")return a.path;if(typeof a.content=="string")return a.content.length>80?`${a.content.slice(0,80)}...`:a.content;if(typeof a.message=="string")return a.message;if(typeof a.summary=="string")return a.summary;const r=Object.keys(a);return r.length<=3?r.join(", "):`${r.length} fields`}return String(n)}const b=25,m="font-label text-xs font-medium text-outline";function te({projectId:n}){const a=H("sm"),[r,t]=z("order","desc",["asc","desc"]),[u,p]=k.useState({order:r,page:0}),j=u.order===r?u.page:0,o=s=>p({order:r,page:s}),{selectedId:i,openDetail:g,closeDetail:_}=B("/audit","sessionId"),{data:l,isLoading:D,error:N,refetch:E}=U({...n==="all"?{}:{project_id:n},limit:b,offset:j*b,order:r});if(N)return e.jsx(w,{message:N.message,onRetry:()=>E()});const f=(l==null?void 0:l.sessions)??[],C=(l==null?void 0:l.total)??0;return e.jsxs("section",{"data-testid":"logged-sessions",children:[e.jsx("div",{className:"mb-4 flex justify-end",children:e.jsxs("select",{"aria-label":"Sort audit by date","data-testid":"audit-date-sort",value:r,onChange:s=>{o(0),t(s.target.value)},className:"min-h-11 rounded-md border border-control-border bg-background px-3 text-sm text-on-surface",children:[e.jsx("option",{value:"desc",children:"Created: newest first"}),e.jsx("option",{value:"asc",children:"Created: oldest first"})]})}),D?e.jsx("div",{className:"space-y-2",children:[...Array(5)].map((s,d)=>e.jsx(S,{className:"h-10 w-full bg-surface-highest"},d))}):f.length===0?e.jsx(F,{message:"No audit records"}):e.jsxs("div",{className:"min-w-0 overflow-hidden",children:[a?e.jsxs(J,{children:[e.jsx(G,{children:e.jsxs(v,{className:"border-b border-border hover:bg-transparent",children:[e.jsx(c,{className:m,children:"Agent"}),e.jsx(c,{className:`${m} w-24`,children:"Version"}),e.jsx(c,{className:m,children:"Summary"}),e.jsx(c,{className:`${m} w-24`,children:"Project"}),e.jsx(c,{className:`${m} w-28`,children:"Tokens Used"}),e.jsx(c,{className:`${m} w-36`,children:"Created"})]})}),e.jsx(M,{children:f.map(s=>e.jsxs(v,{"data-testid":"session-row","data-session-id":s.id,className:"border-b border-border/65 hover:bg-surface-high cursor-pointer",onClick:()=>g(s.id),children:[e.jsx(x,{className:"font-label text-xs text-primary",children:e.jsx("button",{type:"button",className:"text-left font-medium hover:underline",onClick:d=>{d.stopPropagation(),g(s.id)},children:s.agent??"Session"})}),e.jsx(x,{className:"font-label text-xs text-outline",children:s.agent_version??"—"}),e.jsx(x,{className:"font-body text-xs text-on-surface-variant max-w-sm truncate",children:s.summary??"—"}),e.jsx(x,{className:"font-label text-xs text-outline",children:s.project_id?s.project_id.slice(-6):"—"}),e.jsx(x,{className:"font-label text-xs text-outline text-right",children:s.tokens_used!=null?s.tokens_used.toLocaleString():"—"}),e.jsx(x,{className:"font-label text-xs text-outline",children:new Date(s.created_at).toLocaleString()})]},s.id))})]}):e.jsx("div",{className:"divide-y divide-border",children:f.map(s=>{var d;return e.jsxs("article",{"data-testid":"session-row","data-session-id":s.id,className:"py-4 space-y-3",children:[e.jsx("button",{type:"button",className:"min-h-11 text-sm text-left font-medium text-primary break-words",onClick:()=>g(s.id),children:s.agent??"Session"}),e.jsx("p",{className:"text-sm leading-relaxed text-on-surface break-words",children:s.summary??"No summary recorded"}),e.jsxs("div",{className:"flex flex-wrap gap-x-4 gap-y-2 text-xs text-outline",children:[e.jsxs("span",{children:["Version ",s.agent_version??"—"]}),e.jsxs("span",{children:[((d=s.tokens_used)==null?void 0:d.toLocaleString())??"—"," tokens"]}),e.jsx("span",{children:s.project_id?`Project ${s.project_id.slice(-6)}`:"Unassigned"}),e.jsx("span",{children:new Date(s.created_at).toLocaleString()})]})]},s.id)})}),e.jsx(Z,{page:j,pageSize:b,total:C,onPage:o})]}),e.jsx(X,{sessionId:i,open:!!i,onClose:_})]})}function ie({projectId:n}){const a=q(n);return e.jsxs("div",{children:[e.jsx(Y,{title:"Audit"}),e.jsx("p",{className:"mb-4 text-sm text-outline",children:"Recorded summaries and events. Open Sessions to read conversations or resume a coding agent."}),e.jsx(te,{projectId:a},a)]})}export{ie as default};