fix: sign session export cursors with install secret

Author: wesm

internal/db/session_export.go

@@ -18,10 +18,7 @@ import (
 	"go.kenn.io/agentsview/internal/export"
 )
 
-const (
-	sessionExportOrder         = "last_activity_at DESC, id ASC"
-	sessionExportCursorHMACKey = "agentsview-session-summary-export-v1"
-)
+const sessionExportOrder = "last_activity_at DESC, id ASC"
 
 type sessionExportQuerier interface {
 	QueryContext(context.Context, string, ...any) (*sql.Rows, error)
@@ -744,7 +741,11 @@ func (db *DB) attachSessionExportWorktrees(
 
 func (db *DB) encodeSessionExportCursor(c sessionExportCursorPayload) string {
 	data, _ := json.Marshal(c)
-	mac := hmac.New(sha256.New, []byte(sessionExportCursorHMACKey))
+
+	db.cursorMu.RLock()
+	mac := hmac.New(sha256.New, db.cursorSecret)
+	db.cursorMu.RUnlock()
+
 	mac.Write(data)
 	sig := mac.Sum(nil)
 	return base64.RawURLEncoding.EncodeToString(data) + "." +
@@ -775,7 +776,10 @@ func (db *DB) decodeSessionExportCursor(
 		return sessionExportCursorPayload{},
 			fmt.Errorf("%w: invalid signature encoding: %v", ErrInvalidCursor, err)
 	}
-	mac := hmac.New(sha256.New, []byte(sessionExportCursorHMACKey))
+	db.cursorMu.RLock()
+	mac := hmac.New(sha256.New, db.cursorSecret)
+	db.cursorMu.RUnlock()
+
 	mac.Write(data)
 	if !hmac.Equal(sig, mac.Sum(nil)) {
 		return sessionExportCursorPayload{},

internal/db/session_export_test.go

@@ -2,6 +2,8 @@ package db
 
 import (
 	"context"
+	"crypto/hmac"
+	"crypto/sha256"
 	"database/sql"
 	"encoding/base64"
 	"encoding/json"
@@ -969,6 +971,12 @@ func TestSessionExportCursorRejectsWrongDatabaseAndChangedFilters(t *testing.T)
 	d2 := testDB(t)
 	require.NoError(t, d1.SetDatabaseIDForTest(ctx, "db-one"), "set db one")
 	require.NoError(t, d2.SetDatabaseIDForTest(ctx, "db-two"), "set db two")
+	// Two archives on the same install share the config cursor_secret; the
+	// wrong-database reset path applies to that case. Cursors from another
+	// install fail signature verification instead.
+	sharedSecret := []byte("session-export-shared-install-secret")
+	d1.SetCursorSecret(sharedSecret)
+	d2.SetCursorSecret(sharedSecret)
 	for _, d := range []*DB{d1, d2} {
 		insertExportSession(t, d, Session{
 			ID:               "cursor-reset-row",
@@ -1123,6 +1131,62 @@ func TestSessionExportCursorTamperingReturnsInvalidCursor(t *testing.T) {
 		"tampered cursor must not be treated as a valid wrong-database cursor")
 }
 
+func TestSessionExportCursorRejectsForgeryWithKnownKey(t *testing.T) {
+	ctx := context.Background()
+	d := testSessionExportDB(t)
+	require.NoError(t, d.SetDatabaseIDForTest(ctx, "forge-db"), "set database id")
+	for _, row := range []struct {
+		id, ended string
+	}{
+		{"forge-a", "2026-05-01T10:00:00Z"},
+		{"forge-b", "2026-05-01T09:00:00Z"},
+	} {
+		insertExportSession(t, d, Session{
+			ID:               row.id,
+			Project:          "forge",
+			Machine:          "local",
+			Agent:            "claude",
+			StartedAt:        Ptr("2026-05-01T00:00:00Z"),
+			EndedAt:          Ptr(row.ended),
+			MessageCount:     1,
+			UserMessageCount: 1,
+		})
+	}
+	first, err := d.ExportSessionSummaries(ctx, SessionExportOptions{
+		Filter: SessionFilter{Project: "forge"},
+		Limit:  1,
+	})
+	require.NoError(t, err, "first page")
+	require.NotEmpty(t, first.NextCursor, "next cursor")
+
+	// A consumer holding a cursor must not be able to widen its scope by
+	// rewriting the payload and re-signing with a publicly known key, such
+	// as the constant this cursor was signed with before per-install
+	// secrets.
+	parts := strings.Split(first.NextCursor, ".")
+	require.Len(t, parts, 2, "cursor parts")
+	data, err := base64.RawURLEncoding.DecodeString(parts[0])
+	require.NoError(t, err, "decode cursor payload")
+	var payload map[string]any
+	require.NoError(t, json.Unmarshal(data, &payload), "unmarshal payload")
+	payload["filters"] = map[string]any{}
+	forged, err := json.Marshal(payload)
+	require.NoError(t, err, "marshal forged payload")
+	mac := hmac.New(sha256.New, []byte("agentsview-session-summary-export-v1"))
+	mac.Write(forged)
+	forgedCursor := base64.RawURLEncoding.EncodeToString(forged) + "." +
+		base64.RawURLEncoding.EncodeToString(mac.Sum(nil))
+
+	_, err = d.ExportSessionSummaries(ctx, SessionExportOptions{
+		Cursor:          forgedCursor,
+		UseCursorFilter: true,
+		Limit:           1,
+	})
+	require.Error(t, err, "forged cursor")
+	assert.True(t, errors.Is(err, ErrInvalidCursor),
+		"expected invalid cursor, got %v", err)
+}
+
 func testSessionExportDB(t *testing.T) *DB {
 	t.Helper()
 	d := testDB(t)

testdata/golden/session_export_v1.json

@@ -1 +1 @@
-{"schema_version":1,"database_id":"00000000-0000-4000-8000-000000000001","cursor":{"next":"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.EC0xdv3RLutSecdfxC3L_uVQxc9KLHGDn8iI5lF2Qek"},"pricing":{"source":"fetched","table_version":"2026-07-03T12:00:00Z","latest_row_updated_at":"2026-07-03T12:00:00Z","custom_override_count":0,"effective_row_count":2,"digest":"sha256:28ef6086990aaf44088d7bffc0a7f952068e7399c6a042121ce631beb66d901d","cost_source":"mixed","fallback":{"used":false,"models":[]},"models":{"fixture-model-computed":{"matched_pattern":"fixture-model-computed","input_cost_per_mtok":2,"output_cost_per_mtok":8,"cache_write_cost_per_mtok":3,"cache_read_cost_per_mtok":0.5,"cost_source":"computed"},"fixture-model-reported":{"matched_pattern":"fixture-model-reported","input_cost_per_mtok":1,"output_cost_per_mtok":4,"cache_write_cost_per_mtok":2,"cache_read_cost_per_mtok":0.25,"cost_source":"reported"}}},"projects":{"path-project":{"resolution":"resolved","identity":{"key":"sha256:ae326f252aaa4ab91664d4f43245d8e7f3e3fd073da5bd36a3f72eb72f44526d","key_source":"root_path","root_path":"/fixtures/path-project","machine_local":true}},"remote-project":{"resolution":"resolved","identity":{"key":"sha256:97879729c8ab311e9d4b28941e3a04830b28c527f00af53f2270212eccdbbd39","key_source":"git_remote","normalized_remote":"github.com/acme/remote-project"}}},"sessions":[{"id":"path-current","project":"path-project","machine":"golden-host","agent":"claude","cwd":"/fixtures/path-project/pkg","started_at":"2026-07-03T11:00:00Z","ended_at":"2026-07-03T11:10:00Z","last_activity_at":"2026-07-03T11:10:00Z","duration_seconds":600,"message_count":4,"user_message_count":2,"assistant_message_count":2,"turn_count":2,"classification":"interactive","is_automated":false,"model_usage":{"models":["fixture-model-reported"],"input_tokens":300,"output_tokens":60,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"reasoning_tokens":0,"cost_usd":0.0125,"has_cost":true,"by_model":{"fixture-model-reported":{"model":"fixture-model-reported","input_tokens":300,"output_tokens":60,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"reasoning_tokens":0,"cost_usd":0.0125,"has_cost":true,"cost_source":"reported"}}},"parent_session_id":null,"relationship_type":"root","worktree":null,"total_output_tokens":0,"peak_context_tokens":0,"has_total_output_tokens":false,"has_peak_context_tokens":false},{"id":"remote-current","project":"remote-project","machine":"golden-host","agent":"codex","cwd":"/fixtures/remote-project/worktrees/feature/app","git_branch":"feature/golden","started_at":"2026-07-03T10:00:00Z","ended_at":"2026-07-03T10:30:00Z","last_activity_at":"2026-07-03T10:30:00Z","duration_seconds":1800,"message_count":4,"user_message_count":2,"assistant_message_count":2,"turn_count":2,"classification":"interactive","is_automated":false,"model_usage":{"models":["fixture-model-computed"],"input_tokens":1200,"output_tokens":240,"cache_creation_input_tokens":80,"cache_read_input_tokens":400,"reasoning_tokens":0,"cost_usd":0.00476,"has_cost":true,"by_model":{"fixture-model-computed":{"model":"fixture-model-computed","input_tokens":1200,"output_tokens":240,"cache_creation_input_tokens":80,"cache_read_input_tokens":400,"reasoning_tokens":0,"cost_usd":0.00476,"has_cost":true,"cost_source":"computed"}}},"parent_session_id":null,"relationship_type":"root","worktree":{"name":"feature","root_path":"/fixtures/remote-project"},"total_output_tokens":240,"peak_context_tokens":0,"has_total_output_tokens":true,"has_peak_context_tokens":false}]}
+{"schema_version":1,"database_id":"00000000-0000-4000-8000-000000000001","cursor":{"next":"eyJkYXRhYmFzZV9pZCI6IjAwMDAwMDAwLTAwMDAtNDAwMC04MDAwLTAwMDAwMDAwMDAwMSIsImZpbHRlcnMiOnsiZXhjbHVkZV9vbmVfc2hvdCI6dHJ1ZSwiYXV0b21hdGVkX3Njb3BlIjoiaHVtYW4ifSwib3JkZXIiOiJsYXN0X2FjdGl2aXR5X2F0IERFU0MsIGlkIEFTQyIsIndhdGVybWFyayI6IjIwMjYtMDctMDNUMTE6MTA6MDBaIiwid2F0ZXJtYXJrX3NvcnQiOjI0NjEyMjQuOTY1Mjc3Nzc4LCJsYXN0X2FjdGl2aXR5X2F0IjoiMjAyNi0wNy0wM1QxMDozMDowMFoiLCJsYXN0X2FjdGl2aXR5X3NvcnQiOjI0NjEyMjQuOTM3NSwibGFzdF9pZCI6InJlbW90ZS1jdXJyZW50IiwibGltaXQiOjIsInNuYXBzaG90X2NvdW50Ijo0LCJzbmFwc2hvdF9kaWdlc3QiOiJlYTdmMmFjNGMzMDUxYzRlMDI0NDVhMjM4YTM1M2M3Yjc5ZmRhYmU2OTE3ZjBlNzMyNTE3ZTg4ZjZmNDk0MTBkIiwicHJlZml4X2NvdW50IjoyLCJwcmVmaXhfZGlnZXN0IjoiNzgyNjMzYmE5MzcwODBjMGE4MWExZTA3NTc3YWVmNjJjMGJhMjM5Zjg4NmEwNDc2ZjY0MDU5NGI5NjMxN2M5ZCJ9.Ey7pMRuVxGabOp684h6ymkwQZvPRC4rj8_Sv-jQKdws"},"pricing":{"source":"fetched","table_version":"2026-07-03T12:00:00Z","latest_row_updated_at":"2026-07-03T12:00:00Z","custom_override_count":0,"effective_row_count":2,"digest":"sha256:28ef6086990aaf44088d7bffc0a7f952068e7399c6a042121ce631beb66d901d","cost_source":"mixed","fallback":{"used":false,"models":[]},"models":{"fixture-model-computed":{"matched_pattern":"fixture-model-computed","input_cost_per_mtok":2,"output_cost_per_mtok":8,"cache_write_cost_per_mtok":3,"cache_read_cost_per_mtok":0.5,"cost_source":"computed"},"fixture-model-reported":{"matched_pattern":"fixture-model-reported","input_cost_per_mtok":1,"output_cost_per_mtok":4,"cache_write_cost_per_mtok":2,"cache_read_cost_per_mtok":0.25,"cost_source":"reported"}}},"projects":{"path-project":{"resolution":"resolved","identity":{"key":"sha256:ae326f252aaa4ab91664d4f43245d8e7f3e3fd073da5bd36a3f72eb72f44526d","key_source":"root_path","root_path":"/fixtures/path-project","machine_local":true}},"remote-project":{"resolution":"resolved","identity":{"key":"sha256:97879729c8ab311e9d4b28941e3a04830b28c527f00af53f2270212eccdbbd39","key_source":"git_remote","normalized_remote":"github.com/acme/remote-project"}}},"sessions":[{"id":"path-current","project":"path-project","machine":"golden-host","agent":"claude","cwd":"/fixtures/path-project/pkg","started_at":"2026-07-03T11:00:00Z","ended_at":"2026-07-03T11:10:00Z","last_activity_at":"2026-07-03T11:10:00Z","duration_seconds":600,"message_count":4,"user_message_count":2,"assistant_message_count":2,"turn_count":2,"classification":"interactive","is_automated":false,"model_usage":{"models":["fixture-model-reported"],"input_tokens":300,"output_tokens":60,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"reasoning_tokens":0,"cost_usd":0.0125,"has_cost":true,"by_model":{"fixture-model-reported":{"model":"fixture-model-reported","input_tokens":300,"output_tokens":60,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"reasoning_tokens":0,"cost_usd":0.0125,"has_cost":true,"cost_source":"reported"}}},"parent_session_id":null,"relationship_type":"root","worktree":null,"total_output_tokens":0,"peak_context_tokens":0,"has_total_output_tokens":false,"has_peak_context_tokens":false},{"id":"remote-current","project":"remote-project","machine":"golden-host","agent":"codex","cwd":"/fixtures/remote-project/worktrees/feature/app","git_branch":"feature/golden","started_at":"2026-07-03T10:00:00Z","ended_at":"2026-07-03T10:30:00Z","last_activity_at":"2026-07-03T10:30:00Z","duration_seconds":1800,"message_count":4,"user_message_count":2,"assistant_message_count":2,"turn_count":2,"classification":"interactive","is_automated":false,"model_usage":{"models":["fixture-model-computed"],"input_tokens":1200,"output_tokens":240,"cache_creation_input_tokens":80,"cache_read_input_tokens":400,"reasoning_tokens":0,"cost_usd":0.00476,"has_cost":true,"by_model":{"fixture-model-computed":{"model":"fixture-model-computed","input_tokens":1200,"output_tokens":240,"cache_creation_input_tokens":80,"cache_read_input_tokens":400,"reasoning_tokens":0,"cost_usd":0.00476,"has_cost":true,"cost_source":"computed"}}},"parent_session_id":null,"relationship_type":"root","worktree":{"name":"feature","root_path":"/fixtures/remote-project"},"total_output_tokens":240,"peak_context_tokens":0,"has_total_output_tokens":true,"has_peak_context_tokens":false}]}

testdata/golden/session_export_v1.ndjson

@@ -1,3 +1,3 @@
-{"type":"meta","schema_version":1,"database_id":"00000000-0000-4000-8000-000000000001","cursor":{"next":"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.EC0xdv3RLutSecdfxC3L_uVQxc9KLHGDn8iI5lF2Qek"},"pricing":{"source":"fetched","table_version":"2026-07-03T12:00:00Z","latest_row_updated_at":"2026-07-03T12:00:00Z","custom_override_count":0,"effective_row_count":2,"digest":"sha256:28ef6086990aaf44088d7bffc0a7f952068e7399c6a042121ce631beb66d901d","cost_source":"mixed","fallback":{"used":false,"models":[]},"models":{"fixture-model-computed":{"matched_pattern":"fixture-model-computed","input_cost_per_mtok":2,"output_cost_per_mtok":8,"cache_write_cost_per_mtok":3,"cache_read_cost_per_mtok":0.5,"cost_source":"computed"},"fixture-model-reported":{"matched_pattern":"fixture-model-reported","input_cost_per_mtok":1,"output_cost_per_mtok":4,"cache_write_cost_per_mtok":2,"cache_read_cost_per_mtok":0.25,"cost_source":"reported"}}},"projects":{"path-project":{"resolution":"resolved","identity":{"key":"sha256:ae326f252aaa4ab91664d4f43245d8e7f3e3fd073da5bd36a3f72eb72f44526d","key_source":"root_path","root_path":"/fixtures/path-project","machine_local":true}},"remote-project":{"resolution":"resolved","identity":{"key":"sha256:97879729c8ab311e9d4b28941e3a04830b28c527f00af53f2270212eccdbbd39","key_source":"git_remote","normalized_remote":"github.com/acme/remote-project"}}}}
+{"type":"meta","schema_version":1,"database_id":"00000000-0000-4000-8000-000000000001","cursor":{"next":"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.Ey7pMRuVxGabOp684h6ymkwQZvPRC4rj8_Sv-jQKdws"},"pricing":{"source":"fetched","table_version":"2026-07-03T12:00:00Z","latest_row_updated_at":"2026-07-03T12:00:00Z","custom_override_count":0,"effective_row_count":2,"digest":"sha256:28ef6086990aaf44088d7bffc0a7f952068e7399c6a042121ce631beb66d901d","cost_source":"mixed","fallback":{"used":false,"models":[]},"models":{"fixture-model-computed":{"matched_pattern":"fixture-model-computed","input_cost_per_mtok":2,"output_cost_per_mtok":8,"cache_write_cost_per_mtok":3,"cache_read_cost_per_mtok":0.5,"cost_source":"computed"},"fixture-model-reported":{"matched_pattern":"fixture-model-reported","input_cost_per_mtok":1,"output_cost_per_mtok":4,"cache_write_cost_per_mtok":2,"cache_read_cost_per_mtok":0.25,"cost_source":"reported"}}},"projects":{"path-project":{"resolution":"resolved","identity":{"key":"sha256:ae326f252aaa4ab91664d4f43245d8e7f3e3fd073da5bd36a3f72eb72f44526d","key_source":"root_path","root_path":"/fixtures/path-project","machine_local":true}},"remote-project":{"resolution":"resolved","identity":{"key":"sha256:97879729c8ab311e9d4b28941e3a04830b28c527f00af53f2270212eccdbbd39","key_source":"git_remote","normalized_remote":"github.com/acme/remote-project"}}}}
 {"id":"path-current","project":"path-project","machine":"golden-host","agent":"claude","cwd":"/fixtures/path-project/pkg","started_at":"2026-07-03T11:00:00Z","ended_at":"2026-07-03T11:10:00Z","last_activity_at":"2026-07-03T11:10:00Z","duration_seconds":600,"message_count":4,"user_message_count":2,"assistant_message_count":2,"turn_count":2,"classification":"interactive","is_automated":false,"model_usage":{"models":["fixture-model-reported"],"input_tokens":300,"output_tokens":60,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"reasoning_tokens":0,"cost_usd":0.0125,"has_cost":true,"by_model":{"fixture-model-reported":{"model":"fixture-model-reported","input_tokens":300,"output_tokens":60,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"reasoning_tokens":0,"cost_usd":0.0125,"has_cost":true,"cost_source":"reported"}}},"parent_session_id":null,"relationship_type":"root","worktree":null,"total_output_tokens":0,"peak_context_tokens":0,"has_total_output_tokens":false,"has_peak_context_tokens":false}
 {"id":"remote-current","project":"remote-project","machine":"golden-host","agent":"codex","cwd":"/fixtures/remote-project/worktrees/feature/app","git_branch":"feature/golden","started_at":"2026-07-03T10:00:00Z","ended_at":"2026-07-03T10:30:00Z","last_activity_at":"2026-07-03T10:30:00Z","duration_seconds":1800,"message_count":4,"user_message_count":2,"assistant_message_count":2,"turn_count":2,"classification":"interactive","is_automated":false,"model_usage":{"models":["fixture-model-computed"],"input_tokens":1200,"output_tokens":240,"cache_creation_input_tokens":80,"cache_read_input_tokens":400,"reasoning_tokens":0,"cost_usd":0.00476,"has_cost":true,"by_model":{"fixture-model-computed":{"model":"fixture-model-computed","input_tokens":1200,"output_tokens":240,"cache_creation_input_tokens":80,"cache_read_input_tokens":400,"reasoning_tokens":0,"cost_usd":0.00476,"has_cost":true,"cost_source":"computed"}}},"parent_session_id":null,"relationship_type":"root","worktree":{"name":"feature","root_path":"/fixtures/remote-project"},"total_output_tokens":240,"peak_context_tokens":0,"has_total_output_tokens":true,"has_peak_context_tokens":false}