// @vitest-environment node
import { mkdtempSync, readFileSync, rmSync } from 'node:fs'
import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { DatabaseSync } from 'node:sqlite'
import { afterEach, describe, expect, it, vi } from 'vitest'
import { ChatCacheCoordinator, ChatCacheStore, chatCacheKey } from '../../src/server/chatCache.js'
import type { UpstreamServiceSession } from '../../src/server/localAuth.js'
import type { UpstreamResponse } from '../../src/server/upstream.js'

const homes: string[] = []
const owner = 'owner-1'
const profile = 'default'
const sessionID = 'session-web'

function response(value: unknown, status = 200, contentType = 'application/json'): UpstreamResponse {
  return { status, headers: new Headers({ 'content-type': contentType }), body: Buffer.from(typeof value === 'string' ? value : JSON.stringify(value)) }
}

function fixture() {
  const home = mkdtempSync(join(tmpdir(), 'yaoyao-chat-cache-'))
  homes.push(home)
  const store = new ChatCacheStore(home)
  const upstream = { request: vi.fn() } as unknown as UpstreamServiceSession
  return { home, store, coordinator: new ChatCacheCoordinator(store, upstream, 'prefer-local') }
}

afterEach(() => {
  for (const home of homes.splice(0)) rmSync(home, { recursive: true, force: true })
})

describe('durable source=web chat cache', () => {
  it.each(['prefer-local', 'shadow', 'upstream-only'] as const)(
    'preserves newer session activity and cached files after a stale 404 in %s mode', async mode => {
      const f = fixture()
      const coordinator = new ChatCacheCoordinator(f.store, f.coordinator.upstream, mode)
      const sourcePath = '/tmp/final-report.png'
      try {
        f.store.recordCommand(owner, profile, sessionID, 'session.create', { source: 'web' })
        f.store.putSnapshot(owner, 'tail', 'messages', profile, sessionID, response({
          messages: [{ id: 'latest', role: 'assistant', content: `![报告](${sourcePath})` }],
          pagination: { total: 2, offset: 0, has_more: true },
        }))
        f.store.storeAttachment(owner, sourcePath, response('report-bytes', 200, 'image/png'))
        const asset = f.store.attachment(owner, sourcePath)!
        const changed = vi.fn()
        coordinator.onSynchronized = changed
        const result = await coordinator.messages(owner, 'older', profile, sessionID, 1, 1, async () => {
          f.store.recordCommand(owner, profile, sessionID, 'prompt.submit', { text: '新消息' })
          return response({ detail: 'Session not found' }, 404)
        })
        expect(result.response.status).toBe(404)
        expect(f.store.ownsSession(owner, profile, sessionID)).toBe(true)
        expect(JSON.parse(f.store.messagePage(owner, profile, sessionID, 0, 1)!.response.body.toString()).messages)
          .toEqual([expect.objectContaining({ id: 'latest' })])
        expect(readFileSync(asset.localPath, 'utf8')).toBe('report-bytes')
        expect(changed).not.toHaveBeenCalled()

        await coordinator.messages(owner, 'older', profile, sessionID, 1, 1,
          async () => response({ detail: 'Session not found' }, 404))
        expect(f.store.ownsSession(owner, profile, sessionID)).toBe(false)
        expect(changed).toHaveBeenCalledWith(owner, profile, sessionID)
      } finally { coordinator.close(); f.store.close() }
    },
  )

  it('cleans confirmed missing sessions behind a warm list without pruning filtered or unavailable sessions', async () => {
    const f = fixture()
    const ids = ['missing', 'archived', 'unavailable', 'new-session', 'other-profile']
    for (const id of ids) {
      const scope = id === 'other-profile' ? 'another' : profile
      f.store.recordCommand(owner, scope, id, 'session.create', { source: 'web' })
      f.store.putSnapshot(owner, `detail:${id}`, 'detail', scope, id, response({ id, profile: scope, title: id }))
    }
    f.store.db.prepare('UPDATE chat_sessions SET owned_at=? WHERE session_id<>?').run(Date.now() - 120_000, 'new-session')
    const request = vi.mocked(f.coordinator.upstream.request).mockImplementation(async path => {
      if (path.endsWith('/archived')) return response({ id: 'archived', archived: true })
      if (path.endsWith('/unavailable')) return response({}, 503)
      return response({ detail: 'Session not found' }, 404)
    })
    const changed = vi.fn()
    f.coordinator.onSynchronized = changed
    const load = vi.fn(async () => response({ sessions: [], total: 0 }))
    await f.coordinator.read(owner, 'list', 'list', profile, undefined, load, true)
    await vi.waitFor(() => expect(f.store.ownsSession(owner, profile, 'missing')).toBe(false))
    expect(f.store.ownsSession(owner, profile, 'archived')).toBe(true)
    expect(f.store.ownsSession(owner, profile, 'unavailable')).toBe(true)
    expect(f.store.ownsSession(owner, profile, 'new-session')).toBe(true)
    expect(f.store.ownsSession(owner, 'another', 'other-profile')).toBe(true)
    expect(request.mock.calls.every(([, options]) => !options?.method || options.method === 'GET')).toBe(true)
    expect(changed).toHaveBeenCalledWith(owner, profile, 'missing')
    await f.coordinator.read(owner, 'list', 'list', profile, undefined, load, true)
    expect(load).toHaveBeenCalledTimes(1)
    f.store.close()
  })

  it('removes a missing session when reconciliation receives a definitive 404', async () => {
    const f = fixture()
    f.store.recordCommand(owner, profile, sessionID, 'session.create', { source: 'web' })
    f.store.putSnapshot(owner, 'detail', 'detail', profile, sessionID, response({ id: sessionID, title: 'ghost' }))
    vi.mocked(f.coordinator.upstream.request).mockResolvedValue(response({ detail: 'Session not found' }, 404))
    await f.coordinator.reconcile(owner, profile, sessionID).catch(() => {})
    expect(f.store.ownsSession(owner, profile, sessionID)).toBe(false)
    expect(f.store.localDetail(owner, profile, sessionID)).toBeUndefined()
    f.store.close()
  })

  it('keeps local chats during a list outage and ignores deletion probes superseded by a new turn', async () => {
    const f = fixture()
    f.store.recordCommand(owner, profile, sessionID, 'session.create', { source: 'web' })
    f.store.putSnapshot(owner, 'detail', 'detail', profile, sessionID, response({ id: sessionID, title: '保留' }))
    f.store.db.prepare('UPDATE chat_sessions SET owned_at=?').run(Date.now() - 120_000)
    const load = vi.fn().mockRejectedValueOnce(new Error('offline')).mockResolvedValue(response({ sessions: [] }))
    vi.useFakeTimers({ toFake: ['Date'] })
    try {
      await f.coordinator.read(owner, 'list', 'list', profile, undefined, load, true)
      await new Promise(resolve => setTimeout(resolve, 0))
      expect(f.store.ownsSession(owner, profile, sessionID)).toBe(true)
      vi.setSystemTime(Date.now() + 31_000)
      vi.mocked(f.coordinator.upstream.request).mockImplementation(async () => {
        f.store.recordCommand(owner, profile, sessionID, 'prompt.submit', { text: 'new turn' })
        return response({}, 404)
      })
      await f.coordinator.read(owner, 'list', 'list', profile, undefined, load, true)
      await vi.waitFor(() => expect(f.coordinator.upstream.request).toHaveBeenCalled())
      expect(f.store.ownsSession(owner, profile, sessionID)).toBe(true)
    } finally { vi.useRealTimers(); f.store.close() }
  })

  it('keeps acknowledged flags across aliases and rejects a deleted session sync', () => {
    const f = fixture()
    f.store.recordCommand(owner, profile, sessionID, 'session.create', { source: 'web' })
    f.store.putSnapshot(owner, 'detail', 'detail', profile, sessionID, response({ id: sessionID, is_pinned: false }))
    const revision = f.store.revision(owner, profile, sessionID)
    f.store.recordSessionPatch(owner, profile, sessionID, { pinned: true })
    expect(JSON.parse(f.store.localDetail(owner, profile, sessionID)!.response.body.toString()).pinned).toBe(true)
    expect(f.store.applySync(owner, profile, sessionID, revision, [], false)).toBe(false)
    f.store.deleteSession(owner, profile, sessionID)
    expect(f.store.applySync(owner, profile, sessionID, 0, [], true)).toBe(false)
    f.store.close()
  })

  it('keeps session metadata when message envelopes only contain session_id and advances activity from messages', () => {
    const f = fixture()
    f.store.recordRoute(owner, profile, sessionID, 'runtime-web')
    f.store.putSnapshot(owner, 'detail', 'detail', profile, sessionID, response({
      id: sessionID, profile, source: 'ios', title: '准备 GPT-6 详细 Markdown 文档',
      started_at: 1_788_661_637, last_active: 1_788_661_640, pinned: true, message_count: 1,
    }))
    f.store.putSnapshot(owner, 'tail', 'messages', profile, sessionID, response({
      session_id: sessionID, model: 'test-model',
      messages: [{ id: 'latest', timestamp: 1_788_663_697.824613, role: 'assistant', content: '完成' }],
      pagination: { total: 2, offset: 0 },
    }))
    f.store.putSnapshot(owner, 'older', 'messages', profile, sessionID, response({
      session_id: sessionID,
      messages: [{ id: 'first', timestamp: 1_788_661_640_000, role: 'user', content: '开始' }],
      pagination: { total: 2, offset: 1 },
    }))
    const summary = JSON.parse(f.store.localDetail(owner, profile, sessionID)!.response.body.toString())
    expect(summary).toMatchObject({
      id: sessionID, profile, source: 'ios', title: '准备 GPT-6 详细 Markdown 文档',
      started_at: 1_788_661_637, last_active: 1_788_663_697.824613,
      pinned: true, model: 'test-model', message_count: 2,
    })
    expect(summary).not.toHaveProperty('messages')
    expect(summary).not.toHaveProperty('pagination')
    f.store.close()
  })

  it('repairs overwritten summaries on restart using message time instead of cache refresh time', () => {
    const f = fixture()
    f.store.recordRoute(owner, profile, sessionID, 'runtime-web')
    f.store.recordCommand(owner, profile, sessionID, 'session.create', { source: 'ios' })
    f.store.putSnapshot(owner, 'messages', 'messages', profile, sessionID, response({
      session_id: sessionID,
      messages: [
        { id: 'first', timestamp: '2026-09-06T03:00:00Z', role: 'user', content: '开始' },
        { id: 'last', timestamp: 1_788_663_697.824613, role: 'assistant', content: '完成' },
      ],
      pagination: { total: 2, offset: 0 },
    }))
    f.store.db.prepare(`UPDATE chat_sessions SET data=?,owned_at=?,last_synced_at=?
      WHERE owner=? AND profile=? AND session_id=?`).run(JSON.stringify({
      session_id: sessionID, title: '准备 GPT-6 详细 Markdown 文档', model: 'test-model',
      messages: [], pagination: { total: 2 },
    }), 1_788_661_637_003, 1_900_000_000_000, owner, profile, sessionID)
    f.store.db.prepare("DELETE FROM chat_meta WHERE key='session-activity-v1'").run()
    f.store.close()

    const restored = new ChatCacheStore(f.home)
    const summary = JSON.parse(restored.localList(owner, profile, {}).body.toString()).sessions[0]
    expect(summary).toMatchObject({
      id: sessionID, source: 'ios', title: '准备 GPT-6 详细 Markdown 文档',
      started_at: 1_788_663_600, last_active: 1_788_663_697.824613, message_count: 2,
    })
    expect(summary).not.toHaveProperty('messages')
    expect(summary).not.toHaveProperty('pagination')
    restored.close()
    const again = new ChatCacheStore(f.home)
    expect(JSON.parse(again.localList(owner, profile, {}).body.toString()).sessions[0]).toEqual(summary)
    again.close()
  })

  it('orders owned conversations by real time across seconds and milliseconds', () => {
    const f = fixture()
    for (const [id, activity] of [['older', 1_788_561_050_759], ['newer', 1_788_663_697.824613]] as const) {
      f.store.recordRoute(owner, profile, id, `runtime-${id}`)
      f.store.putSnapshot(owner, id, 'detail', profile, id, response({ id, last_active: activity }))
    }
    expect(JSON.parse(f.store.localList(owner, profile, {}).body.toString()).sessions.map((s: { id: string }) => s.id))
      .toEqual(['newer', 'older'])
    f.store.close()
  })

  it('hydrates all owned list metadata before paging and keeps upstream activity aliases authoritative', async () => {
    const f = fixture()
    const sessions = Array.from({ length: 103 }, (_, index) => ({
      id: `owned-${index}`, profile, source: 'web', title: `Conversation ${index}`,
      started_at: 1_700_000_000 - index, last_active_at: 1_700_000_100 - index,
      message_count: 0, pinned: index === 102,
    }))
    for (const session of sessions) {
      f.store.recordCommand(owner, profile, session.id, 'session.create', { source: 'web' })
    }
    const load = vi.fn(async () => response({ sessions: [
      { id: 'unowned-history', profile, source: 'web', title: 'Private native history' }, ...sessions,
    ] }))
    const first = await f.coordinator.read(owner, 'first', 'list', profile, undefined, load, true, { limit: 100 })
    const firstPage = JSON.parse(first.response.body.toString())
    expect(firstPage.sessions[0]).toMatchObject({ id: 'owned-102', last_active: sessions[102]!.last_active_at })
    expect(firstPage.sessions[1]).toMatchObject({ id: 'owned-0', last_active: sessions[0]!.last_active_at })
    expect(f.store.needsListMetadata(owner, profile)).toBe(false)
    const second = await f.coordinator.read(owner, 'second', 'list', profile, undefined, load, true, { offset: 100, limit: 100 })
    expect(second.source).toBe('local')
    expect(load).toHaveBeenCalledTimes(1)
    const secondPage = JSON.parse(second.response.body.toString())
    const ids = [...firstPage.sessions, ...secondPage.sessions].map((session: { id: string }) => session.id)
    expect(ids).toEqual(['owned-102', ...sessions.slice(0, 102).map(session => session.id)])
    expect(f.store.snapshot(owner, 'first')!.response.body.toString()).not.toContain('unowned-history')
    expect(f.store.localDetail(owner, profile, 'unowned-history')).toBeUndefined()
    f.store.close()
  })

  it('serves a warm list without a second 9119 request and survives restart', async () => {
    const f = fixture()
    f.store.recordRoute(owner, profile, sessionID, 'runtime-web')
    f.store.recordCommand(owner, profile, sessionID, 'session.create', { source: 'web' })
    const search = new URLSearchParams({ source: 'web', profile })
    const key = chatCacheKey('list', profile, undefined, search)
    const load = vi.fn(async () => response({ sessions: [{ id: sessionID, profile, source: 'web', title: '本地会话' }] }))

    f.store.putSnapshot(owner, 'seed-detail', 'detail', profile, sessionID, response({ id: sessionID, profile, title: '本地会话', message_count: 0 }))
    const first = await f.coordinator.read(owner, key, 'list', profile, undefined, load, true)
    const second = await f.coordinator.read(owner, key, 'list', profile, undefined, load, true)
    expect(first.source).toBe('local')
    expect(second.source).toBe('local')
    expect(load).not.toHaveBeenCalled()

    f.store.close()
    const restored = new ChatCacheStore(f.home)
    const cached = restored.localList(owner, profile, {})
    expect(JSON.parse(cached.body.toString()).sessions[0].title).toBe('本地会话')
    restored.close()
  })

  it('reprojects a pre-ownership list snapshot after restart before serving it', async () => {
    const f = fixture()
    const search = new URLSearchParams({ profile, offset: '0', limit: '100' })
    const key = chatCacheKey('list', profile, undefined, search)
    f.store.recordRoute(owner, profile, sessionID, 'runtime-web')
    f.store.recordCommand(owner, profile, sessionID, 'session.create', { source: 'ios' })
    f.store.putSnapshot(owner, key, 'list', profile, undefined, response({
      sessions: [{ id: sessionID, profile, source: 'ios', title: '旧快照标题' }],
      total: 1,
    }), true)
    f.store.db.prepare(`UPDATE chat_sessions SET authoritative_title=NULL,authoritative_title_at=0
      WHERE owner=? AND profile=? AND session_id=?`).run(owner, profile, sessionID)
    expect(JSON.parse(f.store.snapshot(owner, key)!.response.body.toString()).sessions[0].owned)
      .toBeUndefined()
    f.store.close()

    const restored = new ChatCacheStore(f.home)
    expect(restored.snapshot(owner, key)?.state).toBe('stale')
    expect((restored.db.prepare(`SELECT authoritative_title FROM chat_sessions
      WHERE owner=? AND profile=? AND session_id=?`).get(owner, profile, sessionID) as { authoritative_title: string }).authoritative_title)
      .toBe('旧快照标题')
    const coordinator = new ChatCacheCoordinator(
      restored,
      { request: vi.fn() } as unknown as UpstreamServiceSession,
      'prefer-local',
    )
    const projected = await coordinator.read(
      owner,
      key,
      'list',
      profile,
      undefined,
      async () => { throw new Error('9119 offline') },
      true,
      { offset: 0, limit: 100 },
    )
    expect(projected).toMatchObject({ source: 'local', state: 'current' })
    expect(JSON.parse(projected.response.body.toString()).sessions[0]).toMatchObject({
      id: sessionID,
      source: 'ios',
      owned: true,
    })
    restored.close()
  })

  it('adopts the released v0.3.26 registry once without using source for later membership', () => {
    const home = mkdtempSync(join(tmpdir(), 'yaoyao-v026-registry-'))
    homes.push(home)
    const legacy = new DatabaseSync(join(home, 'chat-cache.sqlite3'))
    legacy.exec(`CREATE TABLE chat_sessions(
      owner TEXT NOT NULL, profile TEXT NOT NULL, session_id TEXT NOT NULL,
      runtime_id TEXT, source TEXT NOT NULL, data TEXT NOT NULL,
      sync_state TEXT NOT NULL DEFAULT 'stale', complete INTEGER NOT NULL DEFAULT 0,
      last_event_seq INTEGER NOT NULL DEFAULT 0, last_synced_at INTEGER NOT NULL,
      PRIMARY KEY(owner,profile,session_id))`)
    legacy.prepare(`INSERT INTO chat_sessions(
      owner,profile,session_id,runtime_id,source,data,sync_state,complete,last_event_seq,last_synced_at
    ) VALUES(?,?,?,?,?,?,?,?,?,?)`).run(
      owner,
      profile,
      'v026-session',
      null,
      'web',
      JSON.stringify({ id: 'v026-session', profile, source: 'web', title: '已发布旧会话' }),
      'current',
      0,
      0,
      1_000,
    )
    legacy.close()

    const migrated = new ChatCacheStore(home, owner)
    expect(migrated.ownsSession(owner, profile, 'v026-session')).toBe(true)
    expect(migrated.db.prepare(`SELECT ownership_evidence FROM chat_sessions
      WHERE owner=? AND profile=? AND session_id=?`).get(owner, profile, 'v026-session'))
      .toMatchObject({ ownership_evidence: 'legacy-single-user' })
    expect(migrated.putSnapshot(owner, 'new-source-row', 'detail', profile, 'new-source-row',
      response({ id: 'new-source-row', profile, source: 'web', title: '未登记新历史' }))).toBe(false)
    expect(migrated.ownsSession(owner, profile, 'new-source-row')).toBe(false)
    migrated.close()
  })

  it('does not adopt ambiguous multi-owner legacy cache rows without command evidence', () => {
    const home = mkdtempSync(join(tmpdir(), 'yaoyao-v026-multi-owner-'))
    homes.push(home)
    const legacy = new DatabaseSync(join(home, 'chat-cache.sqlite3'))
    legacy.exec(`CREATE TABLE chat_sessions(
      owner TEXT NOT NULL, profile TEXT NOT NULL, session_id TEXT NOT NULL,
      runtime_id TEXT, source TEXT NOT NULL, data TEXT NOT NULL,
      sync_state TEXT NOT NULL DEFAULT 'stale', complete INTEGER NOT NULL DEFAULT 0,
      last_event_seq INTEGER NOT NULL DEFAULT 0, last_synced_at INTEGER NOT NULL,
      PRIMARY KEY(owner,profile,session_id));
      CREATE TABLE chat_events(
        owner TEXT NOT NULL, profile TEXT NOT NULL, session_id TEXT NOT NULL,
        event_seq INTEGER NOT NULL, event_type TEXT NOT NULL, payload TEXT NOT NULL,
        received_at INTEGER NOT NULL, PRIMARY KEY(owner,profile,session_id,event_seq,event_type));`)
    const insertSession = legacy.prepare(`INSERT INTO chat_sessions(
      owner,profile,session_id,runtime_id,source,data,sync_state,complete,last_event_seq,last_synced_at
    ) VALUES(?,?,?,?,?,?,?,?,?,?)`)
    for (const [legacyOwner, id] of [
      ['owner-a', 'evidenced'],
      ['owner-a', 'source-only-a'],
      ['owner-b', 'source-only-b'],
    ] as const) {
      insertSession.run(
        legacyOwner,
        profile,
        id,
        null,
        'web',
        JSON.stringify({ id, profile, source: 'web', title: id }),
        'current',
        0,
        0,
        1_000,
      )
    }
    legacy.prepare(`INSERT INTO chat_events(
      owner,profile,session_id,event_seq,event_type,payload,received_at
    ) VALUES(?,?,?,?,?,?,?)`).run(
      'owner-a', profile, 'evidenced', 1, 'command:session.create', '{}', 900,
    )
    legacy.close()

    const migrated = new ChatCacheStore(home, 'owner-a')
    expect(migrated.ownsSession('owner-a', profile, 'evidenced')).toBe(true)
    expect(migrated.ownsSession('owner-a', profile, 'source-only-a')).toBe(false)
    expect(migrated.ownsSession('owner-b', profile, 'source-only-b')).toBe(false)
    migrated.close()
  })

  it('does not adopt one cached owner when the sole local user has another id', () => {
    const home = mkdtempSync(join(tmpdir(), 'yaoyao-v026-owner-mismatch-'))
    homes.push(home)
    const legacy = new DatabaseSync(join(home, 'chat-cache.sqlite3'))
    legacy.exec(`CREATE TABLE chat_sessions(
      owner TEXT NOT NULL, profile TEXT NOT NULL, session_id TEXT NOT NULL,
      runtime_id TEXT, source TEXT NOT NULL, data TEXT NOT NULL,
      sync_state TEXT NOT NULL DEFAULT 'stale', complete INTEGER NOT NULL DEFAULT 0,
      last_event_seq INTEGER NOT NULL DEFAULT 0, last_synced_at INTEGER NOT NULL,
      PRIMARY KEY(owner,profile,session_id))`)
    legacy.prepare(`INSERT INTO chat_sessions(
      owner,profile,session_id,runtime_id,source,data,sync_state,complete,last_event_seq,last_synced_at
    ) VALUES(?,?,?,?,?,?,?,?,?,?)`).run(
      'cached-old-user', profile, 'source-only', null, 'web',
      JSON.stringify({ id: 'source-only', profile, source: 'web', title: '旧缓存' }),
      'current', 0, 0, 1_000,
    )
    legacy.close()

    const migrated = new ChatCacheStore(home, 'current-sole-user')
    expect(migrated.ownsSession('cached-old-user', profile, 'source-only')).toBe(false)
    migrated.close()
  })

  it('re-enters ownership migration when columns exist but the completion marker is missing', () => {
    const home = mkdtempSync(join(tmpdir(), 'yaoyao-v026-interrupted-migration-'))
    homes.push(home)
    const interrupted = new DatabaseSync(join(home, 'chat-cache.sqlite3'))
    interrupted.exec(`CREATE TABLE chat_sessions(
      owner TEXT NOT NULL, profile TEXT NOT NULL, session_id TEXT NOT NULL,
      runtime_id TEXT, source TEXT NOT NULL, data TEXT NOT NULL,
      authoritative_title TEXT, authoritative_title_at INTEGER NOT NULL DEFAULT 0,
      owned_at INTEGER, ownership_evidence TEXT,
      sync_state TEXT NOT NULL DEFAULT 'stale', complete INTEGER NOT NULL DEFAULT 0,
      last_event_seq INTEGER NOT NULL DEFAULT 0, last_synced_at INTEGER NOT NULL,
      PRIMARY KEY(owner,profile,session_id))`)
    interrupted.prepare(`INSERT INTO chat_sessions(
      owner,profile,session_id,runtime_id,source,data,sync_state,complete,last_event_seq,last_synced_at
    ) VALUES(?,?,?,?,?,?,?,?,?,?)`).run(
      owner, profile, 'interrupted-row', null, 'web',
      JSON.stringify({ id: 'interrupted-row', profile, source: 'web', title: '可恢复旧会话' }),
      'current', 0, 0, 1_000,
    )
    interrupted.close()

    const recovered = new ChatCacheStore(home, owner)
    expect(recovered.ownsSession(owner, profile, 'interrupted-row')).toBe(true)
    expect(recovered.db.prepare("SELECT value FROM chat_meta WHERE key='ownership-registry-v1'").get())
      .toMatchObject({ value: 'complete' })
    recovered.close()
  })

  it('materializes complete message pages and keeps owners isolated', () => {
    const f = fixture()
    f.store.recordRoute(owner, profile, sessionID, 'runtime-web')
    f.store.recordCommand(owner, profile, sessionID, 'session.create', { source: 'web' })
    f.store.putSnapshot(owner, 'detail', 'detail', profile, sessionID,
      response({ id: sessionID, profile, source: 'web', title: '对话' }))
    f.store.putSnapshot(owner, 'messages', 'messages', profile, sessionID, response({
      session: { id: sessionID, profile, source: 'web', title: '对话' },
      messages: [
        { id: 'm1', role: 'user', content: '开始' },
        { id: 'm2', role: 'assistant', content: '完成' },
      ],
      pagination: { total: 2, returned: 2, offset: 0, limit: 100, hasMore: false },
    }))

    const page = f.store.messagePage(owner, profile, sessionID, 0, 100)
    const payload = JSON.parse(page!.response.body.toString())
    expect(payload.session_id).toBe(sessionID)
    expect(payload.pagination).toMatchObject({ total: 2, returned: 2, offset: 0, limit: 100, has_more: false })
    expect(payload.messages.map((item: { id: string }) => item.id)).toEqual(['m1', 'm2'])
    expect(f.store.messagePage('another-owner', profile, sessionID, 0, 100)).toBeUndefined()
    f.store.close()
  })

  it('never persists unregistered history regardless of source metadata', () => {
    const f = fixture()
    expect(f.store.putSnapshot(owner, 'history', 'detail', profile, 'history-1',
      response({ id: 'history-1', profile, source: 'telegram', title: '历史' }))).toBe(false)
    expect(f.store.putSnapshot(owner, 'unowned-web', 'detail', profile, 'unowned-web',
      response({ id: 'unowned-web', profile, source: 'web', title: '未登记 Web 历史' }))).toBe(false)
    expect(f.store.snapshot(owner, 'history')).toBeUndefined()
    expect(f.store.snapshot(owner, 'unowned-web')).toBeUndefined()
    f.store.close()
  })

  it('marks event gaps stale, deduplicates events, and falls back while 9119 is offline', async () => {
    const f = fixture()
    const key = 'detail-key'
    f.store.recordRoute(owner, profile, sessionID, 'runtime-1')
    f.store.recordCommand(owner, profile, sessionID, 'session.create', { source: 'web' })
    f.store.putSnapshot(owner, key, 'detail', profile, sessionID,
      response({ id: sessionID, profile, source: 'web', title: '稳定内容' }))
    const frame = { type: 'message.delta', seq: 2, payload: { text: '增量' } }
    f.store.recordEvent(owner, profile, sessionID, frame)
    f.store.recordEvent(owner, profile, sessionID, frame)
    const count = f.store.db.prepare("SELECT COUNT(*) count FROM chat_events WHERE event_type='message.delta'").get() as { count: number }
    expect(count.count).toBe(1)
    expect(f.store.ownsSession(owner, profile, sessionID)).toBe(true)
    expect(f.store.ownsSession('another-owner', profile, sessionID)).toBe(false)
    const route = f.store.db.prepare('SELECT runtime_id FROM chat_sessions WHERE owner=? AND profile=? AND session_id=?')
      .get(owner, profile, sessionID) as { runtime_id: string }
    expect(route.runtime_id).toBe('runtime-1')
    const fallback = await f.coordinator.read(owner, key, 'detail', profile, sessionID,
      async () => { throw new Error('9119 offline') })
    expect(fallback).toMatchObject({ source: 'local', state: 'stale' })
    const serverFailure = await f.coordinator.read(owner, key, 'detail', profile, sessionID,
      async () => response({ error: 'unavailable' }, 503))
    expect(serverFailure).toMatchObject({ source: 'local', state: 'stale' })
    f.store.close()
  })

  it.each(['session.title', 'session.title.updated'])(
    'projects %s into the owned summary without changing source metadata',
    (eventType) => {
      const f = fixture()
      const ownedSessionID = `owned-${eventType}`
      const listKey = chatCacheKey('list', profile, undefined, new URLSearchParams({ source: 'web', profile }))
      f.store.recordRoute(owner, profile, ownedSessionID, 'runtime-owned')
      f.store.recordCommand(owner, profile, ownedSessionID, 'session.create', { source: 'ios' })
      f.store.putSnapshot(owner, listKey, 'list', profile, undefined, response({ sessions: [] }), true)

      f.store.recordEvent(owner, profile, ownedSessionID, {
        type: eventType,
        payload: { session_id: ownedSessionID, title: '服务端生成的标题' },
      })

      expect(f.store.snapshot(owner, listKey)?.state).toBe('stale')
      const merged = f.store.mergeOwnedSessionsIntoList(owner, profile, response({ sessions: [], total: 0 }))
      expect(JSON.parse(merged.body.toString()).sessions).toContainEqual(expect.objectContaining({
        id: ownedSessionID,
        profile,
        source: 'ios',
        owned: true,
        title: '服务端生成的标题',
      }))

      const staleList = f.store.mergeOwnedSessionsIntoList(owner, profile, response({ sessions: [{
        id: ownedSessionID, profile, source: 'ios', title: '新对话',
      }] }))
      expect(JSON.parse(staleList.body.toString()).sessions[0].title).toBe('服务端生成的标题')

      const titleVersion = f.store.db.prepare(`SELECT authoritative_title_at FROM chat_sessions
        WHERE owner=? AND profile=? AND session_id=?`).get(owner, profile, ownedSessionID) as { authoritative_title_at: number }
      expect(f.store.putSnapshot(owner, 'delayed-detail', 'detail', profile, ownedSessionID,
        response({ id: ownedSessionID, profile, source: 'ios', title: '迟到的旧标题' }), false,
        titleVersion.authoritative_title_at - 1)).toBe(true)
      const afterDelayedDetail = f.store.markSessionOwnership(owner, profile, ownedSessionID,
        response({ id: ownedSessionID, profile, source: 'ios', title: '迟到的旧标题' }))
      expect(JSON.parse(afterDelayedDetail.body.toString()).title).toBe('服务端生成的标题')

      expect(f.store.putSnapshot(owner, 'newer-detail', 'detail', profile, ownedSessionID,
        response({ id: ownedSessionID, profile, source: 'ios', title: '后续详情标题' }), false,
        titleVersion.authoritative_title_at + 1)).toBe(true)
      expect(f.store.putSnapshot(owner, 'regressed-detail', 'detail', profile, ownedSessionID,
        response({ id: ownedSessionID, profile, source: 'ios', title: '新对话' }))).toBe(true)
      const afterDetail = f.store.markSessionOwnership(owner, profile, ownedSessionID,
        response({ id: ownedSessionID, profile, source: 'ios', title: '新对话' }))
      expect(JSON.parse(afterDetail.body.toString()).title).toBe('后续详情标题')
      f.store.close()
    },
  )

  it('accepts detail and messages for a registered session regardless of source metadata', () => {
    const f = fixture()
    const ownedSessionID = 'owned-ios-session'
    f.store.recordRoute(owner, profile, ownedSessionID, 'runtime-owned')
    f.store.recordCommand(owner, profile, ownedSessionID, 'session.create', { source: 'ios' })

    expect(f.store.putSnapshot(owner, 'owned-detail', 'detail', profile, ownedSessionID,
      response({ id: ownedSessionID, profile, source: 'ios', title: 'iOS 权威标题' }))).toBe(true)
    expect(f.store.putSnapshot(owner, 'owned-messages', 'messages', profile, ownedSessionID, response({
      session: { id: ownedSessionID, profile, source: 'ios', title: 'iOS 权威标题' },
      messages: [{ id: 'm-ios', role: 'assistant', content: '已同步' }],
      pagination: { total: 1, returned: 1, offset: 0, limit: 100, hasMore: false },
    }))).toBe(true)

    const page = f.store.messagePage(owner, profile, ownedSessionID, 0, 100)
    expect(JSON.parse(page!.response.body.toString())).toMatchObject({
      session_id: ownedSessionID,
      session: { source: 'ios', title: 'iOS 权威标题' },
      messages: [{ id: 'm-ios' }],
    })
    f.store.close()
  })

  it('caches only attachment paths discovered in source=web messages', () => {
    const f = fixture()
    f.store.recordRoute(owner, profile, sessionID, 'runtime-web')
    f.store.recordCommand(owner, profile, sessionID, 'session.create', { source: 'web' })
    const sourcePath = '/Users/test/.hermes/profiles/default/images/result.png'
    f.store.putSnapshot(owner, 'messages', 'messages', profile, sessionID, response({
      session: { id: sessionID, profile, source: 'web' },
      messages: [{ id: 'm1', role: 'assistant', content: `![结果](${sourcePath})` }],
      pagination: { total: 1, offset: 0, hasMore: false },
    }))
    expect(f.store.knowsAttachment(owner, sourcePath)).toBe(true)
    const bytes = response('image-data', 200, 'image/png')
    expect(f.store.storeAttachment(owner, sourcePath, bytes)).toBeTruthy()
    expect(f.store.attachment(owner, sourcePath)?.mimeType).toBe('image/png')
    expect(f.store.knowsAttachment(owner, '/Users/test/history.png')).toBe(false)
    f.store.close()
  })

  it('supports shadow and upstream-only rollback modes', async () => {
    const home = mkdtempSync(join(tmpdir(), 'yaoyao-chat-cache-modes-')); homes.push(home)
    const store = new ChatCacheStore(home)
    const upstream = { request: vi.fn() } as unknown as UpstreamServiceSession
    store.recordRoute(owner, profile, sessionID, 'runtime-web')
    store.recordCommand(owner, profile, sessionID, 'session.create', { source: 'web' })
    const load = vi.fn(async () => response({ sessions: [{ id: sessionID, profile, source: 'web' }] }))
    const search = new URLSearchParams({ source: 'web' })
    const key = chatCacheKey('list', profile, undefined, search)
    const shadow = new ChatCacheCoordinator(store, upstream, 'shadow')
    await shadow.read(owner, key, 'list', profile, undefined, load, true)
    await shadow.read(owner, key, 'list', profile, undefined, load, true)
    expect(load).toHaveBeenCalledTimes(2)
    const upstreamOnly = new ChatCacheCoordinator(store, upstream, 'upstream-only')
    const upstreamResult = await upstreamOnly.read(owner, key, 'list', profile, undefined, load, true)
    expect(load).toHaveBeenCalledTimes(3)
    expect(JSON.parse(upstreamResult.response.body.toString()).sessions).toEqual([
      expect.objectContaining({ id: sessionID, owned: true }),
    ])
    upstreamOnly.route(owner, profile, 'upstream-only-created', 'runtime-upstream-only')
    expect(store.ownsSession(owner, profile, 'upstream-only-created')).toBe(true)
    store.close()
  })

  it('paginates the complete owner registry before slicing regardless of mixed upstream history', () => {
    const f = fixture()
    for (let index = 0; index < 15; index++) {
      const id = `owned-${index}`
      const source = index % 2 ? 'ios' : 'web'
      f.store.recordRoute(owner, profile, id, `runtime-${index}`)
      f.store.recordCommand(owner, profile, id, 'session.create', { source })
      expect(f.store.putSnapshot(owner, `detail-${index}`, 'detail', profile, id, response({
        id,
        profile,
        source,
        title: `Owned ${index}`,
        last_active: 1_000 + index,
      }))).toBe(true)
    }
    const upstreamSessions = [
      ...Array.from({ length: 40 }, (_, index) => ({
        id: `unowned-${index}`,
        profile,
        source: index % 2 ? 'ios' : 'web',
        title: `Unowned ${index}`,
        last_active: 10_000 + index,
      })),
      ...Array.from({ length: 15 }, (_, index) => ({
        id: `owned-${index}`,
        profile,
        source: index % 2 ? 'ios' : 'web',
        title: '新对话',
        last_active: 1_000 + index,
      })),
    ]
    const merged = f.store.mergeOwnedSessionsIntoList(
      owner,
      profile,
      response({ sessions: upstreamSessions, total: upstreamSessions.length }),
      { offset: 5, limit: 4, archived: 'exclude' },
    )
    const payload = JSON.parse(merged.body.toString())
    expect(payload).toMatchObject({ total: 15, offset: 5, limit: 4 })
    expect(payload.sessions.map((session: { id: string }) => session.id))
      .toEqual(['owned-9', 'owned-8', 'owned-7', 'owned-6'])
    expect(payload.sessions.every((session: { owned?: boolean }) => session.owned === true)).toBe(true)

    const history = f.store.excludeOwnedSessionsFromList(
      owner,
      profile,
      response({ sessions: upstreamSessions, total: upstreamSessions.length }),
      { offset: 7, limit: 5 },
    )
    const historyPayload = JSON.parse(history.body.toString())
    expect(historyPayload).toMatchObject({ total: 40, offset: 7, limit: 5 })
    expect(historyPayload.sessions.map((session: { id: string }) => session.id))
      .toEqual(['unowned-7', 'unowned-8', 'unowned-9', 'unowned-10', 'unowned-11'])
    expect(historyPayload.sessions.some((session: { source: string }) => session.source === 'web')).toBe(true)
    f.store.close()
  })

  it('keeps an old pinned owned session on the first page after registry projection', () => {
    const f = fixture()
    for (let index = 0; index < 101; index++) {
      const id = `owned-${index}`
      f.store.recordRoute(owner, profile, id, `runtime-${index}`)
      f.store.recordCommand(owner, profile, id, 'session.create', { source: 'ios' })
      expect(f.store.putSnapshot(owner, `detail-${index}`, 'detail', profile, id, response({
        id,
        profile,
        source: 'ios',
        title: `Owned ${index}`,
        last_active: 1_000 + index,
        pinned: index === 0,
      }))).toBe(true)
    }

    const merged = f.store.mergeOwnedSessionsIntoList(
      owner,
      profile,
      response({ sessions: [], total: 0 }),
      { offset: 0, limit: 100, archived: 'exclude' },
    )
    const payload = JSON.parse(merged.body.toString())
    expect(payload).toMatchObject({ total: 101, offset: 0, limit: 100 })
    expect(payload.sessions).toHaveLength(100)
    expect(payload.sessions[0]).toMatchObject({ id: 'owned-0', pinned: true, owned: true })
    expect(payload.sessions.map((session: { id: string }) => session.id)).not.toContain('owned-1')
    f.store.close()
  })
})

describe('local history and bounded tail synchronization', () => {
  function cached(count = 1_000) {
    const f = fixture()
    f.store.recordRoute(owner, profile, sessionID, 'runtime')
    const rows = Array.from({ length: count }, (_, i) => ({ id: `row-${i}`, role: i % 2 ? 'assistant' : 'user', content: `message ${i}` }))
    const summary = { id: sessionID, profile, title: 'cached', message_count: count }
    f.store.putSnapshot(owner, 'seed', 'messages', profile, sessionID, response({ session: summary, messages: rows,
      pagination: { total: count, offset: 0, has_more: false } }))
    return { ...f, rows, summary }
  }
  function upstreamFor(f: ReturnType<typeof cached>, rows: typeof f.rows) {
    const request = vi.fn(async (path: string, options: { search: URLSearchParams }) => {
      if (!path.endsWith('/messages')) return response({ ...f.summary, message_count: rows.length })
      const offset = Number(options.search.get('offset'))
      const limit = Number(options.search.get('limit'))
      const end = Math.max(0, rows.length - offset), start = Math.max(0, end - limit)
      return response({ messages: rows.slice(start, end), pagination: { total: rows.length, offset, has_more: start > 0 } })
    })
    const coordinator = new ChatCacheCoordinator(f.store, { request } as unknown as UpstreamServiceSession)
    return { coordinator, request }
  }

  it('never rereads stored pages while a new turn invalidates the tail', async () => {
    const f = cached()
    f.store.recordCommand(owner, profile, sessionID, 'prompt.submit', { text: 'next' })
    f.store.recordEvent(owner, profile, sessionID, { type: 'message.delta', seq: 1, payload: { delta: 'new' } })
    const load = vi.fn(async () => { throw new Error('must remain local') })
    for (let i = 0; i < 20; i++) {
      const page = await f.coordinator.messages(owner, `page-${i}`, profile, sessionID, (i % 10) * 100, 100, load)
      expect(page.source).toBe('local')
      expect(JSON.parse(page.response.body.toString()).messages).toHaveLength(100)
    }
    expect(load).not.toHaveBeenCalled()
    f.store.close()
  })

  it('persists new rows using one tail page and does not rewrite unchanged history', async () => {
    const f = cached()
    f.store.db.exec('CREATE TABLE changed_rows(id TEXT); CREATE TRIGGER changed_message AFTER UPDATE ON chat_messages BEGIN INSERT INTO changed_rows VALUES(new.message_id); END')
    const rows = [...f.rows, { id: 'new-user', role: 'user', content: 'next' }, { id: 'new-answer', role: 'assistant', content: 'answer' }]
    const { coordinator, request } = upstreamFor(f, rows)
    coordinator.observe(owner, profile, sessionID, { type: 'message.complete', seq: 1 })
    const page = await coordinator.messages(owner, 'last', profile, sessionID, 0, 10, async () => { throw new Error('unexpected read') })
    expect(JSON.parse(page.response.body.toString()).messages.at(-1).id).toBe('new-answer')
    expect(request.mock.calls.filter(([path]) => path.endsWith('/messages'))).toHaveLength(1)
    expect(f.store.db.prepare('SELECT * FROM changed_rows').all()).toEqual([])
    expect(f.store.messagePage(owner, profile, sessionID, 902, 100)).toBeDefined()
    coordinator.observe(owner, profile, sessionID, { type: 'message.complete', seq: 1 })
    expect(request).toHaveBeenCalledTimes(2)
    f.store.close()
  })

  it('fetches only the missing suffix after a replay gap', async () => {
    const f = cached()
    const rows = [...f.rows, ...Array.from({ length: 130 }, (_, i) => ({ id: `new-${i}`, role: 'assistant', content: 'reply' }))]
    const { coordinator, request } = upstreamFor(f, rows)
    await coordinator.reconcile(owner, profile, sessionID)
    expect(request.mock.calls.filter(([path]) => path.endsWith('/messages'))).toHaveLength(2)
    expect(JSON.parse(f.store.messagePage(owner, profile, sessionID, 0, 10)!.response.body.toString()).pagination.total).toBe(1130)
    f.store.close()
  })

  it('refreshes old edits and deletions only when explicitly forced', async () => {
    const f = cached()
    const rows = f.rows.slice(1).map(row => row.id === 'row-2' ? { ...row, content: 'edited old message' } : row)
    const { coordinator, request } = upstreamFor(f, rows)
    await expect(coordinator.reconcile(owner, profile, sessionID)).rejects.toThrow('explicit refresh')
    expect(JSON.parse(f.store.messagePage(owner, profile, sessionID, 900, 100)!.response.body.toString()).messages[0].id).toBe('row-0')
    request.mockClear()
    await coordinator.reconcile(owner, profile, sessionID, true)
    expect(request.mock.calls.filter(([path]) => path.endsWith('/messages'))).toHaveLength(10)
    const page = JSON.parse(f.store.messagePage(owner, profile, sessionID, 899, 100)!.response.body.toString())
    expect(page.messages[0].id).toBe('row-1')
    expect(page.messages[1].content).toBe('edited old message')
    expect(page.pagination.total).toBe(999)
    f.store.close()
  })

  it('does not require a full archive before serving a stored page', async () => {
    const f = fixture()
    f.store.recordRoute(owner, profile, sessionID, 'runtime')
    f.store.putSnapshot(owner, 'tail', 'messages', profile, sessionID, response({ messages: [{ id: 'last', role: 'assistant', content: 'tail' }], pagination: { total: 400, offset: 0, has_more: true } }))
    expect(f.store.messagePage(owner, profile, sessionID, 0, 1)).toBeDefined()
    expect(f.store.messagePage(owner, profile, sessionID, 1, 100)).toBeUndefined()
    f.store.close()
  })

  it('keeps the previous archive when a forced refresh fails halfway', async () => {
    const f = cached()
    let calls = 0
    const coordinator = new ChatCacheCoordinator(f.store, { request: async (path: string) => {
      if (!path.endsWith('/messages')) return response(f.summary)
      if (++calls > 1) throw new Error('offline')
      return response({ messages: f.rows.slice(-100), pagination: { total: 1000, offset: 0, has_more: true } })
    } } as unknown as UpstreamServiceSession)
    await expect(coordinator.reconcile(owner, profile, sessionID, true)).rejects.toThrow('offline')
    expect(f.store.messagePage(owner, profile, sessionID, 900, 100)).toBeDefined()
    f.store.close()
  })

  it('does not commit an older fetch over a newer event', async () => {
    const f = cached()
    const { coordinator, request } = upstreamFor(f, f.rows)
    const original = request.getMockImplementation()!
    request.mockImplementation(async (path, options) => {
      const result = await original(path, options)
      if (path.endsWith('/messages')) f.store.recordEvent(owner, profile, sessionID, { type: 'message.delta', seq: 2, payload: { delta: 'newer' } })
      return result
    })
    await coordinator.reconcile(owner, profile, sessionID)
    expect(f.store.localDetail(owner, profile, sessionID)?.state).toBe('stale')
    f.store.close()
  })

  it('joins an in-flight completion and publishes only after the newest revision commits', async () => {
    const f = cached()
    const rows = [...f.rows, { id: 'newest', role: 'assistant', content: 'newest reply' }]
    const { coordinator, request } = upstreamFor(f, rows)
    const original = request.getMockImplementation()!
    let release!: () => void
    const gate = new Promise<void>(resolve => { release = resolve })
    let first = true
    request.mockImplementation(async (path, options) => {
      if (first) { first = false; await gate }
      return original(path, options)
    })
    const published = vi.fn(() => {
      const stored = JSON.parse(f.store.messagePage(owner, profile, sessionID, 0, 1)!.response.body.toString())
      expect(stored.messages[0].id).toBe('newest')
    })
    coordinator.onSynchronized = published
    f.store.recordEvent(owner, profile, sessionID, { type: 'message.complete', seq: 1 })
    const firstSync = coordinator.reconcile(owner, profile, sessionID)
    f.store.recordEvent(owner, profile, sessionID, { type: 'message.complete', seq: 2 })
    const latestSync = coordinator.reconcile(owner, profile, sessionID)
    release()
    await Promise.all([firstSync, latestSync])
    expect(published).toHaveBeenCalledTimes(1)
    expect(request).toHaveBeenCalledTimes(4)
    expect(f.store.localDetail(owner, profile, sessionID)?.state).toBe('current')
    f.store.close()
  })

  it('serves a cached empty conversation without requesting it again', async () => {
    const f = cached(0)
    const load = vi.fn(async () => { throw new Error('unexpected read') })
    const page = await f.coordinator.messages(owner, 'empty', profile, sessionID, 0, 100, load)
    expect(page.source).toBe('local')
    expect(JSON.parse(page.response.body.toString()).messages).toEqual([])
    expect(load).not.toHaveBeenCalled()
    f.store.close()
  })
})