shennian 0.3.85 → 0.3.86

package/dist/src/native-fusion/local-repository.js

@@ -1,2 +1,569 @@
-import p from"node:crypto";import l from"node:fs";import f from"node:path";import{sessionPreviewFromPayload as L}from"@shennian/wire";import{resolvePersonalSyncV1Path as R}from"../personal-sync/paths.js";import{getCanonicalSessionStore as P,getDaemonInstallationId as H,listSessionRecords as x,recordSession as w}from"../session/store.js";import{readToolDetail as U,writeToolDetail as J}from"../session/tool-detail-store.js";import{NativeSourceDeletionStore as V}from"./native-source-deletions.js";import{recordPersonalSyncLocalMetric as v}from"../personal-sync/metrics.js";const I=1;class q extends Error{code="missing_user_boundary";constructor(e){super(`native source ${e} does not start at a visible user boundary`),this.name="MissingUserBoundaryError"}}class W extends Error{code="native_source_deleted";constructor(e){super(`native source ${e} is blocked by a durable deletion tombstone`),this.name="NativeSourceDeletedError"}}class z extends Error{sourceEventKey;code="native_event_identity_conflict";constructor(e){super(`native event identity conflict: ${e}`),this.sourceEventKey=e,this.name="NativeEventIdentityConflictError"}}class de{options;constructor(e={}){this.options=e}commitEvents(e){return[...e].sort((s,o)=>s.ts-o.ts).map(s=>this.commitEvent(s))}updateMessageDeliveryState(e,s,o){if(!this.canonicalStore().updateMessageDeliveryState(e,s,o))return;const i=(this.options.listLocalSessions??x)().find(a=>a.sessionId===e);if(!i)return;(this.options.recordLocalSession??w)({...i})}commitEvent(e){if(G(e),this.isSourceDeleted(e.agentType,e.sourceSessionKey))throw new W(e.sourceSessionKey);const s=this.installationId(),o=this.readSources(),n=b(e.agentType,e.sourceSessionKey),i=o.sources[n],c=Y(e),a=this.ledgerFile(e.agentType,e.sourceEventKey),r=l.existsSync(a)?D(a):null;if(r&&r.daemonInstallationId!==s)throw new Error("native event ledger belongs to another daemon installation");if(r&&r.eventFingerprint!==c)throw new z(e.sourceEventKey);if(!i&&!r&&e.role!=="user")throw new q(e.sourceSessionKey);const m=e.claimSessionId??null,d=i?.sessionId??r?.sessionId??m??Q(s,e.agentType,e.sourceSessionKey);if(m&&i&&i.sessionId!==m)throw new Error(`managed claim session conflicts with source binding ${e.sourceSessionKey}`);const h=this.canonicalStore(),y=e.localDisposition==="managed_echo_suppressed"||r?.mappedBy==="managed_echo_suppressed",u=r?.canonicalMessageId??(y?null:e.claimCanonicalMessageId??X(s,e.agentType,e.canonicalMessageKey??e.sourceEventKey));let S=h.getManifest(d)?.bodyRevision??0,T=!!r;const E=!y&&!!e.claimCanonicalMessageId;if(E){if(!u)throw new Error("managed echo claim requires a canonical message");const M=h.getMessageState(d,u);if(!M||M.tombstoned)throw new Error(`managed echo claim target is not durable: ${u}`)}if(!r&&!E&&!y){if(!u)throw new Error("native event requires a canonical message");const M=e.canonicalMessageKey?h.getMessageState(d,u):null,F=e.canonicalMutation==="upsert"||!!M,$=F?M??h.getMessageState(d,u):null,_={id:u,sessionId:d,role:e.role,ts:$?.message?.ts??e.ts,payload:Z($?.message?.payload,e.payload)},C=F?h.upsert(d,_):h.append(d,_);if(S=C.bodyRevision,T=C.duplicate,e.localToolDetail){const N=this.options.writeLocalToolDetail??J,j=this.options.readLocalToolDetail??U,B=ee(j(d,e.localToolDetail.toolCallId),e.localToolDetail);N({sessionId:d,...B,ts:e.ts,detailRef:{toolIndex:0}})}}e.terminal&&(S=h.completeStartedUserMessages(d,e.ts).at(-1)?.bodyRevision??S),(!r||e.terminal)&&!y&&this.recordIndex(e,d,u,S);const K=new Date().toISOString();return r||g(a,{schemaVersion:I,daemonInstallationId:s,sessionId:d,agentType:e.agentType,sourceSessionKey:e.sourceSessionKey,sourceEventKey:e.sourceEventKey,eventFingerprint:c,canonicalMessageId:u,canonicalRevision:S,cursor:e.cursor??null,mappedBy:y?"managed_echo_suppressed":E?"managed_echo_claim":e.sourceMode,eventTs:e.ts,createdAt:K}),o.sources[n]={schemaVersion:I,daemonInstallationId:s,sessionId:d,agentType:e.agentType,sourceSessionKey:e.sourceSessionKey,sourceMode:r?i?.sourceMode??e.sourceMode:e.sourceMode,lastCursor:r?i?.lastCursor??r.cursor:e.cursor??i?.lastCursor??null,bodyRevision:S,createdAt:i?.createdAt??K,updatedAt:K},g(this.sourcesFile(),o),!r&&e.cursor&&v("sourceCursorAdvanced"),!r&&!E&&!y&&!T&&v("canonicalCommits"),{sessionId:d,messageId:u,bodyRevision:S,duplicate:T,claimed:E,suppressed:y}}repairMissingUserBoundaries(){const e=this.options.listLocalSessions??x,s=this.options.recordLocalSession??w,o=this.canonicalStore();let n=0;for(const i of e()){if(i.localReady)continue;const a=o.getManifest(i.sessionId)?.firstAvailableSeq;if(a==null)continue;const r=o.readPage(i.sessionId,{limit:1,beforeSequence:a+1}).entries[0];!r||r.sequence!==a||r.message.role!=="user"||(s({sessionId:i.sessionId,agentType:i.agentType,sessionMode:i.sessionMode,managerConfig:i.managerConfig,workDir:i.workDir,agentSessionId:i.agentSessionId,modelId:i.modelId,managerDefaultWorkerAgentType:i.managerDefaultWorkerAgentType,managerDefaultWorkerModelId:i.managerDefaultWorkerModelId,status:i.status,lastActivityAt:i.lastActivityAt,lastMessagePreview:i.lastMessagePreview,localReady:!0,firstUserMessageId:r.message.id,firstUserBodyRevision:r.revision}),n+=1)}return n}listManagedClaims(){return Object.values(this.readManagedEchoState().claims)}listManagedSuppressions(){return Object.values(this.readManagedEchoState().suppressions)}upsertManagedClaim(e){A(e);const s=this.readManagedEchoState();s.claims[e.canonicalMessageId]=e,g(this.managedEchoStateFile(),s)}updateManagedClaimSource(e,s,o){const n=this.readManagedEchoState();let i=!1;for(const c of Object.values(n.claims))c.sessionId!==e||c.sourceAgentType!==s||(c.sourceSessionKey=o,i=!0);i&&g(this.managedEchoStateFile(),n)}removeManagedClaim(e){const s=this.readManagedEchoState();s.claims[e]&&(delete s.claims[e],g(this.managedEchoStateFile(),s))}completeManagedClaim(e,s){const o=this.readManagedEchoState();delete o.claims[e],s&&(k(s),o.suppressions[b(s.agentType,s.sourceSessionKey)]=s),g(this.managedEchoStateFile(),o)}removeManagedSuppression(e,s){const o=this.readManagedEchoState(),n=b(e,s);o.suppressions[n]&&(delete o.suppressions[n],g(this.managedEchoStateFile(),o))}listSourceBindings(){return Object.values(this.readSources().sources).filter(e=>!this.isSourceDeleted(e.agentType,e.sourceSessionKey))}purgeSession(e){if(!e)throw new Error("sessionId is required");const s=this.readSources();let o=!1;for(const[a,r]of Object.entries(s.sources))r.sessionId===e&&(delete s.sources[a],o=!0);o&&g(this.sourcesFile(),s);const n=this.readManagedEchoState();let i=!1;for(const[a,r]of Object.entries(n.claims))r.sessionId===e&&(delete n.claims[a],i=!0);for(const[a,r]of Object.entries(n.suppressions))r.sessionId===e&&(delete n.suppressions[a],i=!0);i&&g(this.managedEchoStateFile(),n);const c=f.join(this.rootDir(),"ledger");if(l.existsSync(c))for(const a of l.readdirSync(c,{withFileTypes:!0})){if(!a.isFile()||!a.name.endsWith(".json"))continue;const r=f.join(c,a.name),m=D(r);if(m.daemonInstallationId!==this.installationId())throw new Error("native event ledger belongs to another daemon installation");m.sessionId===e&&l.unlinkSync(r)}}isSourceDeleted(e,s){return(this.options.deletionStore??new V({rootDir:f.basename(this.rootDir())==="native-fusion"?f.dirname(this.rootDir()):this.rootDir(),daemonInstallationId:this.installationId()})).has(e,s)}observeNativeTitle(e,s,o){const n=o.trim().slice(0,120);if(!n)return!1;const i=this.readSources().sources[b(e,s)];if(!i||this.isSourceDeleted(e,s))return!1;const c=(this.options.listLocalSessions??x)().find(m=>m.sessionId===i.sessionId);if(c?.titleLockedByUser||c?.titleSource==="agent_native"&&c.title===n)return!1;const a=p.createHash("sha256").update(`${e}\0${s}\0${n}`).digest("hex");return(this.options.recordLocalSession??w)({sessionId:i.sessionId,agentType:i.agentType,workDir:c?.workDir??"",agentSessionId:s,title:n,titleSource:"agent_native",titleOriginEventId:`agent-native:${a}`}),!0}recordIndex(e,s,o,n){const i=this.options.recordLocalSession??w,c=e.terminal?`terminal:${p.createHash("sha256").update(e.sourceEventKey).digest("hex")}`:void 0,a=e.role==="user"||e.role==="agent"?O(e.payload):null,r=a&&o?{lastMessagePreview:a,lastMessagePreviewMessageId:o,lastMessagePreviewAt:new Date(e.ts).toISOString()}:{};i({sessionId:s,agentType:e.agentType,workDir:e.workDir??"",agentSessionId:e.sourceSessionKey,modelId:e.modelId??null,status:e.terminal?e.terminalState==="failed"||e.terminalState==="aborted"?"failed":"completed":"active",attentionId:c,lastActivityAt:new Date(e.ts).toISOString(),...r,...e.role==="user"&&o?{localReady:!0,firstUserMessageId:o,firstUserBodyRevision:n}:{},title:e.title?.trim()||(e.role==="user"?O(e.payload)??"":void 0),titleSource:e.title?.trim()?e.titleSource??"first_user_fallback":"first_user_fallback",titleOriginEventId:e.sourceEventKey})}readSources(){const e=this.sourcesFile();if(!l.existsSync(e))return{schemaVersion:I,daemonInstallationId:this.installationId(),sources:{}};const s=D(e);if(s.schemaVersion!==I||s.daemonInstallationId!==this.installationId()||!s.sources)throw new Error("invalid native source binding store");for(const o of Object.values(s.sources))if(o.daemonInstallationId!==this.installationId())throw new Error("native source binding belongs to another daemon installation");return s}installationId(){return this.options.daemonInstallationId??H()}canonicalStore(){return this.options.canonicalStore??P()}rootDir(){return this.options.rootDir??R("native-fusion")}sourcesFile(){return f.join(this.rootDir(),"sources.json")}managedEchoStateFile(){return f.join(this.rootDir(),"managed-echo-state.json")}readManagedEchoState(){const e=this.managedEchoStateFile();if(!l.existsSync(e))return{schemaVersion:I,daemonInstallationId:this.installationId(),claims:{},suppressions:{}};const s=D(e);if(s.schemaVersion!==I||s.daemonInstallationId!==this.installationId()||!s.claims||!s.suppressions)throw new Error("invalid managed echo state");for(const o of Object.values(s.claims))A(o);for(const o of Object.values(s.suppressions))k(o);return s}ledgerFile(e,s){const o=p.createHash("sha256").update(`${e}\0${s}`).digest("hex");return f.join(this.rootDir(),"ledger",`${o}.json`)}}function G(t){if(!t.agentType||!t.sourceSessionKey||!t.sourceEventKey||!t.payload)throw new Error("invalid native event");if(!Number.isFinite(t.ts))throw new Error("invalid native event timestamp")}function b(t,e){return p.createHash("sha256").update(`${t}\0${e}`).digest("hex")}function Q(t,e,s){return`native-session-${p.createHash("sha256").update(`${t}\0${e}\0${s}`).digest("hex").slice(0,32)}`}function X(t,e,s){return`native-${p.createHash("sha256").update(`${t}\0${e}\0${s}`).digest("hex").slice(0,32)}`}function Y(t){return p.createHash("sha256").update(JSON.stringify({agentType:t.agentType,sourceSessionKey:t.sourceSessionKey,sourceEventKey:t.sourceEventKey,role:t.role,ts:t.ts,payload:t.payload,canonicalMessageKey:t.canonicalMessageKey??null,canonicalMutation:t.canonicalMutation??"append"})).digest("hex")}function A(t){if(!t.sessionId||!t.canonicalMessageId||!t.textHash||!Number.isFinite(t.createdAt)||!["codex","claude","opencode"].includes(t.sourceAgentType)||!["suppress_following","import_following"].includes(t.managedEchoPolicy))throw new Error("invalid managed echo claim")}function k(t){if(!t.sessionId||!t.sourceSessionKey||!t.claimSourceEventKey||!["codex","claude","opencode"].includes(t.agentType)||!Number.isFinite(t.startedAt)||!Number.isFinite(t.endsAt)||t.endsAt<t.startedAt)throw new Error("invalid managed echo suppression")}function Z(t,e){if(!t)return e;try{const s=JSON.parse(t),o=JSON.parse(e);if(s.type!=="tool"||o.type!=="tool"||s.toolCallId!==o.toolCallId)return e;const n=typeof o.name=="string"?o.name:"",i=/(?:_output|_result)$/.test(n);return JSON.stringify({...s,...o,...i&&typeof s.name=="string"?{name:s.name}:{}})}catch{return e}}function ee(t,e){if(!t||t.toolCallId!==e.toolCallId)return e;const s=/(?:_output|_result)$/.test(e.name);return{...e,name:s?t.name:e.name,...e.args===void 0&&t.args!==void 0?{args:t.args}:{},...e.result===void 0&&t.result!==void 0?{result:t.result}:{}}}function O(t){return L(t,120)}function g(t,e){const s=f.dirname(t);l.mkdirSync(s,{recursive:!0,mode:448});const o=`${t}.tmp-${process.pid}-${p.randomBytes(6).toString("hex")}`;let n;try{n=l.openSync(o,"wx",384),l.writeFileSync(n,`${JSON.stringify(e,null,2)}
-`,"utf8"),l.fsyncSync(n),l.closeSync(n),n=void 0,l.renameSync(o,t)}finally{n!==void 0&&l.closeSync(n);try{l.unlinkSync(o)}catch{}}}function D(t){return JSON.parse(l.readFileSync(t,"utf8"))}export{q as MissingUserBoundaryError,z as NativeEventIdentityConflictError,de as NativeFusionLocalRepository,W as NativeSourceDeletedError};
+// @arch docs/architecture/cli/native-session-fusion.md#2-本地-source-binding-与事件账本
+// @test src/__tests__/native-fusion-local-repository.test.ts
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { sessionPreviewFromPayload, } from '@shennian/wire';
+import { resolvePersonalSyncV1Path } from '../personal-sync/paths.js';
+import { getCanonicalSessionStore, getDaemonInstallationId, listSessionRecords, recordSession, } from '../session/store.js';
+import { readToolDetail, writeToolDetail } from '../session/tool-detail-store.js';
+import { NativeSourceDeletionStore } from './native-source-deletions.js';
+import { recordPersonalSyncLocalMetric } from '../personal-sync/metrics.js';
+const SCHEMA_VERSION = 1;
+export class MissingUserBoundaryError extends Error {
+    code = 'missing_user_boundary';
+    constructor(sourceSessionKey) {
+        super(`native source ${sourceSessionKey} does not start at a visible user boundary`);
+        this.name = 'MissingUserBoundaryError';
+    }
+}
+export class NativeSourceDeletedError extends Error {
+    code = 'native_source_deleted';
+    constructor(sourceSessionKey) {
+        super(`native source ${sourceSessionKey} is blocked by a durable deletion tombstone`);
+        this.name = 'NativeSourceDeletedError';
+    }
+}
+export class NativeEventIdentityConflictError extends Error {
+    sourceEventKey;
+    code = 'native_event_identity_conflict';
+    constructor(sourceEventKey) {
+        super(`native event identity conflict: ${sourceEventKey}`);
+        this.sourceEventKey = sourceEventKey;
+        this.name = 'NativeEventIdentityConflictError';
+    }
+}
+export class NativeFusionLocalRepository {
+    options;
+    constructor(options = {}) {
+        this.options = options;
+    }
+    commitEvents(events) {
+        return [...events]
+            .sort((left, right) => left.ts - right.ts)
+            .map((event) => this.commitEvent(event));
+    }
+    updateMessageDeliveryState(sessionId, messageId, deliveryState) {
+        const committed = this.canonicalStore().updateMessageDeliveryState(sessionId, messageId, deliveryState);
+        if (!committed)
+            return;
+        const record = (this.options.listLocalSessions ?? listSessionRecords)()
+            .find((item) => item.sessionId === sessionId);
+        if (!record)
+            return;
+        const persist = this.options.recordLocalSession ?? recordSession;
+        persist({
+            ...record,
+        });
+    }
+    commitEvent(event) {
+        validateEvent(event);
+        if (this.isSourceDeleted(event.agentType, event.sourceSessionKey)) {
+            throw new NativeSourceDeletedError(event.sourceSessionKey);
+        }
+        const installationId = this.installationId();
+        const sourceFile = this.readSources();
+        const sourceKey = stableSourceKey(event.agentType, event.sourceSessionKey);
+        const existingBinding = sourceFile.sources[sourceKey];
+        const fingerprint = eventFingerprint(event);
+        const ledgerFile = this.ledgerFile(event.agentType, event.sourceEventKey);
+        const existingLedger = fs.existsSync(ledgerFile) ? readJson(ledgerFile) : null;
+        if (existingLedger && existingLedger.daemonInstallationId !== installationId) {
+            throw new Error('native event ledger belongs to another daemon installation');
+        }
+        if (existingLedger && existingLedger.eventFingerprint !== fingerprint) {
+            throw new NativeEventIdentityConflictError(event.sourceEventKey);
+        }
+        if (!existingBinding && !existingLedger && event.role !== 'user') {
+            throw new MissingUserBoundaryError(event.sourceSessionKey);
+        }
+        const claimedSessionId = event.claimSessionId ?? null;
+        const sessionId = existingBinding?.sessionId
+            ?? existingLedger?.sessionId
+            ?? claimedSessionId
+            ?? stableSessionId(installationId, event.agentType, event.sourceSessionKey);
+        if (claimedSessionId && existingBinding && existingBinding.sessionId !== claimedSessionId) {
+            throw new Error(`managed claim session conflicts with source binding ${event.sourceSessionKey}`);
+        }
+        const store = this.canonicalStore();
+        const suppressed = event.localDisposition === 'managed_echo_suppressed'
+            || existingLedger?.mappedBy === 'managed_echo_suppressed';
+        const messageId = existingLedger?.canonicalMessageId
+            ?? (suppressed ? null : event.claimCanonicalMessageId
+                ?? stableMessageId(installationId, event.agentType, event.canonicalMessageKey ?? event.sourceEventKey));
+        let bodyRevision = store.getManifest(sessionId)?.bodyRevision ?? 0;
+        let duplicate = Boolean(existingLedger);
+        const claimed = !suppressed && Boolean(event.claimCanonicalMessageId);
+        if (claimed) {
+            if (!messageId)
+                throw new Error('managed echo claim requires a canonical message');
+            const claimedState = store.getMessageState(sessionId, messageId);
+            if (!claimedState || claimedState.tombstoned) {
+                throw new Error(`managed echo claim target is not durable: ${messageId}`);
+            }
+        }
+        if (!existingLedger && !claimed && !suppressed) {
+            if (!messageId)
+                throw new Error('native event requires a canonical message');
+            // Codex can emit the same logical tool call more than once (for example,
+            // a replayed running frame before its completed frame). The source-event
+            // ledger is keyed by the physical rollout line, while canonical identity
+            // is keyed by canonicalMessageKey. Recover from that split-brain window
+            // by updating an already durable logical message instead of aborting the
+            // whole scanner batch with an append conflict.
+            const durableLogicalMessage = event.canonicalMessageKey
+                ? store.getMessageState(sessionId, messageId)
+                : null;
+            const shouldUpsert = event.canonicalMutation === 'upsert' || Boolean(durableLogicalMessage);
+            const previous = shouldUpsert
+                ? durableLogicalMessage ?? store.getMessageState(sessionId, messageId)
+                : null;
+            const envelope = {
+                id: messageId,
+                sessionId,
+                role: event.role,
+                ts: previous?.message?.ts ?? event.ts,
+                payload: mergeToolSkeleton(previous?.message?.payload, event.payload),
+            };
+            const committed = shouldUpsert
+                ? store.upsert(sessionId, envelope)
+                : store.append(sessionId, envelope);
+            bodyRevision = committed.bodyRevision;
+            duplicate = committed.duplicate;
+            if (event.localToolDetail) {
+                const persistDetail = this.options.writeLocalToolDetail ?? writeToolDetail;
+                const readDetail = this.options.readLocalToolDetail ?? readToolDetail;
+                const detail = mergeToolDetail(readDetail(sessionId, event.localToolDetail.toolCallId), event.localToolDetail);
+                persistDetail({
+                    sessionId,
+                    ...detail,
+                    ts: event.ts,
+                    detailRef: { toolIndex: 0 },
+                });
+            }
+        }
+        if (event.terminal) {
+            bodyRevision = store.completeStartedUserMessages(sessionId, event.ts).at(-1)?.bodyRevision ?? bodyRevision;
+        }
+        if ((!existingLedger || event.terminal) && !suppressed) {
+            this.recordIndex(event, sessionId, messageId, bodyRevision);
+        }
+        const now = new Date().toISOString();
+        if (!existingLedger) {
+            atomicWriteJson(ledgerFile, {
+                schemaVersion: SCHEMA_VERSION,
+                daemonInstallationId: installationId,
+                sessionId,
+                agentType: event.agentType,
+                sourceSessionKey: event.sourceSessionKey,
+                sourceEventKey: event.sourceEventKey,
+                eventFingerprint: fingerprint,
+                canonicalMessageId: messageId,
+                canonicalRevision: bodyRevision,
+                cursor: event.cursor ?? null,
+                mappedBy: suppressed
+                    ? 'managed_echo_suppressed'
+                    : claimed ? 'managed_echo_claim' : event.sourceMode,
+                eventTs: event.ts,
+                createdAt: now,
+            });
+        }
+        sourceFile.sources[sourceKey] = {
+            schemaVersion: SCHEMA_VERSION,
+            daemonInstallationId: installationId,
+            sessionId,
+            agentType: event.agentType,
+            sourceSessionKey: event.sourceSessionKey,
+            sourceMode: existingLedger ? existingBinding?.sourceMode ?? event.sourceMode : event.sourceMode,
+            lastCursor: existingLedger
+                ? existingBinding?.lastCursor ?? existingLedger.cursor
+                : event.cursor ?? existingBinding?.lastCursor ?? null,
+            bodyRevision,
+            createdAt: existingBinding?.createdAt ?? now,
+            updatedAt: now,
+        };
+        atomicWriteJson(this.sourcesFile(), sourceFile);
+        if (!existingLedger && event.cursor)
+            recordPersonalSyncLocalMetric('sourceCursorAdvanced');
+        if (!existingLedger && !claimed && !suppressed && !duplicate) {
+            recordPersonalSyncLocalMetric('canonicalCommits');
+        }
+        return { sessionId, messageId, bodyRevision, duplicate, claimed, suppressed };
+    }
+    repairMissingUserBoundaries() {
+        const list = this.options.listLocalSessions ?? listSessionRecords;
+        const record = this.options.recordLocalSession ?? recordSession;
+        const store = this.canonicalStore();
+        let repaired = 0;
+        for (const existing of list()) {
+            if (existing.localReady)
+                continue;
+            const manifest = store.getManifest(existing.sessionId);
+            const firstSequence = manifest?.firstAvailableSeq;
+            if (firstSequence == null)
+                continue;
+            const first = store.readPage(existing.sessionId, {
+                limit: 1,
+                beforeSequence: firstSequence + 1,
+            }).entries[0];
+            if (!first || first.sequence !== firstSequence || first.message.role !== 'user')
+                continue;
+            record({
+                sessionId: existing.sessionId,
+                agentType: existing.agentType,
+                sessionMode: existing.sessionMode,
+                managerConfig: existing.managerConfig,
+                workDir: existing.workDir,
+                agentSessionId: existing.agentSessionId,
+                modelId: existing.modelId,
+                managerDefaultWorkerAgentType: existing.managerDefaultWorkerAgentType,
+                managerDefaultWorkerModelId: existing.managerDefaultWorkerModelId,
+                status: existing.status,
+                lastActivityAt: existing.lastActivityAt,
+                lastMessagePreview: existing.lastMessagePreview,
+                localReady: true,
+                firstUserMessageId: first.message.id,
+                firstUserBodyRevision: first.revision,
+            });
+            repaired += 1;
+        }
+        return repaired;
+    }
+    listManagedClaims() {
+        return Object.values(this.readManagedEchoState().claims);
+    }
+    listManagedSuppressions() {
+        return Object.values(this.readManagedEchoState().suppressions);
+    }
+    upsertManagedClaim(claim) {
+        validateManagedClaim(claim);
+        const state = this.readManagedEchoState();
+        state.claims[claim.canonicalMessageId] = claim;
+        atomicWriteJson(this.managedEchoStateFile(), state);
+    }
+    updateManagedClaimSource(sessionId, agentType, sourceSessionKey) {
+        const state = this.readManagedEchoState();
+        let changed = false;
+        for (const claim of Object.values(state.claims)) {
+            if (claim.sessionId !== sessionId || claim.sourceAgentType !== agentType)
+                continue;
+            claim.sourceSessionKey = sourceSessionKey;
+            changed = true;
+        }
+        if (changed)
+            atomicWriteJson(this.managedEchoStateFile(), state);
+    }
+    removeManagedClaim(canonicalMessageId) {
+        const state = this.readManagedEchoState();
+        if (!state.claims[canonicalMessageId])
+            return;
+        delete state.claims[canonicalMessageId];
+        atomicWriteJson(this.managedEchoStateFile(), state);
+    }
+    completeManagedClaim(canonicalMessageId, suppression) {
+        const state = this.readManagedEchoState();
+        delete state.claims[canonicalMessageId];
+        if (suppression) {
+            validateSuppression(suppression);
+            state.suppressions[stableSourceKey(suppression.agentType, suppression.sourceSessionKey)] = suppression;
+        }
+        atomicWriteJson(this.managedEchoStateFile(), state);
+    }
+    removeManagedSuppression(agentType, sourceSessionKey) {
+        const state = this.readManagedEchoState();
+        const key = stableSourceKey(agentType, sourceSessionKey);
+        if (!state.suppressions[key])
+            return;
+        delete state.suppressions[key];
+        atomicWriteJson(this.managedEchoStateFile(), state);
+    }
+    listSourceBindings() {
+        return Object.values(this.readSources().sources)
+            .filter((binding) => !this.isSourceDeleted(binding.agentType, binding.sourceSessionKey));
+    }
+    purgeSession(sessionId) {
+        if (!sessionId)
+            throw new Error('sessionId is required');
+        const sourceFile = this.readSources();
+        let sourceChanged = false;
+        for (const [key, binding] of Object.entries(sourceFile.sources)) {
+            if (binding.sessionId !== sessionId)
+                continue;
+            delete sourceFile.sources[key];
+            sourceChanged = true;
+        }
+        if (sourceChanged)
+            atomicWriteJson(this.sourcesFile(), sourceFile);
+        const managedState = this.readManagedEchoState();
+        let managedChanged = false;
+        for (const [key, claim] of Object.entries(managedState.claims)) {
+            if (claim.sessionId !== sessionId)
+                continue;
+            delete managedState.claims[key];
+            managedChanged = true;
+        }
+        for (const [key, suppression] of Object.entries(managedState.suppressions)) {
+            if (suppression.sessionId !== sessionId)
+                continue;
+            delete managedState.suppressions[key];
+            managedChanged = true;
+        }
+        if (managedChanged)
+            atomicWriteJson(this.managedEchoStateFile(), managedState);
+        const ledgerDirectory = path.join(this.rootDir(), 'ledger');
+        if (!fs.existsSync(ledgerDirectory))
+            return;
+        for (const entry of fs.readdirSync(ledgerDirectory, { withFileTypes: true })) {
+            if (!entry.isFile() || !entry.name.endsWith('.json'))
+                continue;
+            const file = path.join(ledgerDirectory, entry.name);
+            const ledger = readJson(file);
+            if (ledger.daemonInstallationId !== this.installationId()) {
+                throw new Error('native event ledger belongs to another daemon installation');
+            }
+            if (ledger.sessionId === sessionId)
+                fs.unlinkSync(file);
+        }
+    }
+    isSourceDeleted(agentType, sourceSessionKey) {
+        const store = this.options.deletionStore ?? new NativeSourceDeletionStore({
+            rootDir: path.basename(this.rootDir()) === 'native-fusion'
+                ? path.dirname(this.rootDir())
+                : this.rootDir(),
+            daemonInstallationId: this.installationId(),
+        });
+        return store.has(agentType, sourceSessionKey);
+    }
+    observeNativeTitle(agentType, sourceSessionKey, titleValue) {
+        const title = titleValue.trim().slice(0, 120);
+        if (!title)
+            return false;
+        const binding = this.readSources().sources[stableSourceKey(agentType, sourceSessionKey)];
+        if (!binding || this.isSourceDeleted(agentType, sourceSessionKey))
+            return false;
+        const existing = (this.options.listLocalSessions ?? listSessionRecords)()
+            .find((record) => record.sessionId === binding.sessionId);
+        if (existing?.titleLockedByUser || (existing?.titleSource === 'agent_native' && existing.title === title))
+            return false;
+        const originHash = crypto.createHash('sha256')
+            .update(`${agentType}\0${sourceSessionKey}\0${title}`)
+            .digest('hex');
+        const record = this.options.recordLocalSession ?? recordSession;
+        record({
+            sessionId: binding.sessionId,
+            agentType: binding.agentType,
+            workDir: existing?.workDir ?? '',
+            agentSessionId: sourceSessionKey,
+            title,
+            titleSource: 'agent_native',
+            titleOriginEventId: `agent-native:${originHash}`,
+        });
+        return true;
+    }
+    recordIndex(event, sessionId, messageId, bodyRevision) {
+        const record = this.options.recordLocalSession ?? recordSession;
+        const attentionId = event.terminal
+            ? `terminal:${crypto.createHash('sha256').update(event.sourceEventKey).digest('hex')}`
+            : undefined;
+        const nextPreview = event.role === 'user' || event.role === 'agent'
+            ? preview(event.payload)
+            : null;
+        const previewTuple = nextPreview && messageId
+            ? {
+                lastMessagePreview: nextPreview,
+                lastMessagePreviewMessageId: messageId,
+                lastMessagePreviewAt: new Date(event.ts).toISOString(),
+            }
+            : {};
+        record({
+            sessionId,
+            agentType: event.agentType,
+            workDir: event.workDir ?? '',
+            agentSessionId: event.sourceSessionKey,
+            modelId: event.modelId ?? null,
+            status: event.terminal
+                ? event.terminalState === 'failed' || event.terminalState === 'aborted'
+                    ? 'failed'
+                    : 'completed'
+                : 'active',
+            attentionId,
+            lastActivityAt: new Date(event.ts).toISOString(),
+            ...previewTuple,
+            ...(event.role === 'user' && messageId
+                ? {
+                    localReady: true,
+                    firstUserMessageId: messageId,
+                    firstUserBodyRevision: bodyRevision,
+                }
+                : {}),
+            title: event.title?.trim() || (event.role === 'user' ? preview(event.payload) ?? '' : undefined),
+            titleSource: event.title?.trim()
+                ? event.titleSource ?? 'first_user_fallback'
+                : 'first_user_fallback',
+            titleOriginEventId: event.sourceEventKey,
+        });
+    }
+    readSources() {
+        const file = this.sourcesFile();
+        if (!fs.existsSync(file)) {
+            return { schemaVersion: SCHEMA_VERSION, daemonInstallationId: this.installationId(), sources: {} };
+        }
+        const parsed = readJson(file);
+        if (parsed.schemaVersion !== SCHEMA_VERSION
+            || parsed.daemonInstallationId !== this.installationId() || !parsed.sources) {
+            throw new Error('invalid native source binding store');
+        }
+        for (const binding of Object.values(parsed.sources)) {
+            if (binding.daemonInstallationId !== this.installationId()) {
+                throw new Error('native source binding belongs to another daemon installation');
+            }
+        }
+        return parsed;
+    }
+    installationId() {
+        return this.options.daemonInstallationId ?? getDaemonInstallationId();
+    }
+    canonicalStore() {
+        return this.options.canonicalStore ?? getCanonicalSessionStore();
+    }
+    rootDir() {
+        return this.options.rootDir ?? resolvePersonalSyncV1Path('native-fusion');
+    }
+    sourcesFile() {
+        return path.join(this.rootDir(), 'sources.json');
+    }
+    managedEchoStateFile() {
+        return path.join(this.rootDir(), 'managed-echo-state.json');
+    }
+    readManagedEchoState() {
+        const file = this.managedEchoStateFile();
+        if (!fs.existsSync(file)) {
+            return {
+                schemaVersion: SCHEMA_VERSION,
+                daemonInstallationId: this.installationId(),
+                claims: {},
+                suppressions: {},
+            };
+        }
+        const state = readJson(file);
+        if (state.schemaVersion !== SCHEMA_VERSION
+            || state.daemonInstallationId !== this.installationId()
+            || !state.claims || !state.suppressions)
+            throw new Error('invalid managed echo state');
+        for (const claim of Object.values(state.claims))
+            validateManagedClaim(claim);
+        for (const suppression of Object.values(state.suppressions))
+            validateSuppression(suppression);
+        return state;
+    }
+    ledgerFile(agentType, sourceEventKey) {
+        const name = crypto.createHash('sha256').update(`${agentType}\0${sourceEventKey}`).digest('hex');
+        return path.join(this.rootDir(), 'ledger', `${name}.json`);
+    }
+}
+function validateEvent(event) {
+    if (!event.agentType || !event.sourceSessionKey || !event.sourceEventKey || !event.payload) {
+        throw new Error('invalid native event');
+    }
+    if (!Number.isFinite(event.ts))
+        throw new Error('invalid native event timestamp');
+}
+function stableSourceKey(agentType, sourceSessionKey) {
+    return crypto.createHash('sha256').update(`${agentType}\0${sourceSessionKey}`).digest('hex');
+}
+function stableSessionId(installationId, agentType, sourceSessionKey) {
+    const digest = crypto.createHash('sha256')
+        .update(`${installationId}\0${agentType}\0${sourceSessionKey}`).digest('hex').slice(0, 32);
+    return `native-session-${digest}`;
+}
+function stableMessageId(installationId, agentType, sourceEventKey) {
+    const digest = crypto.createHash('sha256')
+        .update(`${installationId}\0${agentType}\0${sourceEventKey}`).digest('hex').slice(0, 32);
+    return `native-${digest}`;
+}
+function eventFingerprint(event) {
+    return crypto.createHash('sha256').update(JSON.stringify({
+        agentType: event.agentType,
+        sourceSessionKey: event.sourceSessionKey,
+        sourceEventKey: event.sourceEventKey,
+        role: event.role,
+        ts: event.ts,
+        payload: event.payload,
+        canonicalMessageKey: event.canonicalMessageKey ?? null,
+        canonicalMutation: event.canonicalMutation ?? 'append',
+    })).digest('hex');
+}
+function validateManagedClaim(claim) {
+    if (!claim.sessionId || !claim.canonicalMessageId || !claim.textHash
+        || !Number.isFinite(claim.createdAt)
+        || !['codex', 'claude', 'opencode'].includes(claim.sourceAgentType)
+        || !['suppress_following', 'import_following'].includes(claim.managedEchoPolicy))
+        throw new Error('invalid managed echo claim');
+}
+function validateSuppression(window) {
+    if (!window.sessionId || !window.sourceSessionKey || !window.claimSourceEventKey
+        || !['codex', 'claude', 'opencode'].includes(window.agentType)
+        || !Number.isFinite(window.startedAt) || !Number.isFinite(window.endsAt)
+        || window.endsAt < window.startedAt)
+        throw new Error('invalid managed echo suppression');
+}
+function mergeToolSkeleton(previousPayload, incomingPayload) {
+    if (!previousPayload)
+        return incomingPayload;
+    try {
+        const previous = JSON.parse(previousPayload);
+        const incoming = JSON.parse(incomingPayload);
+        if (previous.type !== 'tool' || incoming.type !== 'tool' ||
+            previous.toolCallId !== incoming.toolCallId)
+            return incomingPayload;
+        const incomingName = typeof incoming.name === 'string' ? incoming.name : '';
+        const usePreviousName = /(?:_output|_result)$/.test(incomingName);
+        return JSON.stringify({
+            ...previous,
+            ...incoming,
+            ...(usePreviousName && typeof previous.name === 'string' ? { name: previous.name } : {}),
+        });
+    }
+    catch {
+        return incomingPayload;
+    }
+}
+function mergeToolDetail(previous, incoming) {
+    if (!previous || previous.toolCallId !== incoming.toolCallId)
+        return incoming;
+    const usePreviousName = /(?:_output|_result)$/.test(incoming.name);
+    return {
+        ...incoming,
+        name: usePreviousName ? previous.name : incoming.name,
+        ...(incoming.args === undefined && previous.args !== undefined ? { args: previous.args } : {}),
+        ...(incoming.result === undefined && previous.result !== undefined ? { result: previous.result } : {}),
+    };
+}
+function preview(payload) {
+    return sessionPreviewFromPayload(payload, 120);
+}
+function atomicWriteJson(file, value) {
+    const directory = path.dirname(file);
+    fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const temp = `${file}.tmp-${process.pid}-${crypto.randomBytes(6).toString('hex')}`;
+    let descriptor;
+    try {
+        descriptor = fs.openSync(temp, 'wx', 0o600);
+        fs.writeFileSync(descriptor, `${JSON.stringify(value, null, 2)}\n`, 'utf8');
+        fs.fsyncSync(descriptor);
+        fs.closeSync(descriptor);
+        descriptor = undefined;
+        fs.renameSync(temp, file);
+    }
+    finally {
+        if (descriptor !== undefined)
+            fs.closeSync(descriptor);
+        try {
+            fs.unlinkSync(temp);
+        }
+        catch { }
+    }
+}
+function readJson(file) {
+    return JSON.parse(fs.readFileSync(file, 'utf8'));
+}