@thincoder/core 0.10.1 → 0.10.3

package/manifest.mjs

@@ -4,10 +4,12 @@
  * （机制代码在核，操作对象 = 被开发项目 cwd 根的 PROJECT-MANIFEST.json 数据档）。
  *
  * 契约速览（全量见模块设计 §2.2）：
- *  - readManifest(cwd) → { ok, manifest, missingKeys, errors, reason }：
+ *  - readManifest(cwd) → { ok, manifest, missingKeys, unknownKeys, errors, reason }：
  *    读 + validateManifest(obj)；缺键 → 产 missingKeys（非拒）→ 补默认值 →
  *    再校验通过；整档缺失 → { ok:false, reason:'missing' }（不静默 fallback）。
- *  - validateManifest(obj) → { ok, errors, missingKeys }：枚举 / version 数值 /
+ *    未知键（#802 / KD-M1-36）→ 产 unknownKeys + 一行可见告警（console.warn + logEvent；
+ *    同档同键集去重、读到零未知键清该档 memo）——非拒定性零变。
+ *  - validateManifest(obj) → { ok, errors, missingKeys, unknownKeys }：枚举 / version 数值 /
  *    docRoot 子键值形态（串 | 数组，F7）+ checkConfig.lineCounts 元素层形态——**纯函数、零 fs**；不落盘。
  *  - 三族声明键（`codePaths` / `index.{codeExtensions,docExtensions,publicRepos}` / `advisor.{docMap,standardsDoc}`——
  *    KD-M1-31 / M1-32）：缺键补默认；形态错 = 档非法（fail-closed，与 docRoot 子键同款）；
@@ -39,6 +41,8 @@ import { readFileSync, writeFileSync } from "node:fs"
 import { join, resolve } from "node:path"
 import { DEFAULT_MANIFEST, isValidDocRootValue, validateManifest, fillDefaults } from "./manifest-schema.mjs"
 import { MANIFEST_REL, discoverProjects, owningProject, resolveProjectRoot } from "./manifest-discovery.mjs"
+// #802（KD-M1-36）：未知键读面告警的事件面——诊断日志（fire-and-forget，失败静默降级）。
+import { logEvent } from "./log.mjs"
 // 同名 re-export（2026-09-29 structure-split-2 · 台账 #620——缝 = 同名再出口）：发现 ∕ 归属族与校验 ∕ 默认值族出档
 // `manifest-discovery.mjs` ∕ `manifest-schema.mjs`；全迁移导出经本档转口——消费者 import 面零改。
 export { MANIFEST_REL, discoverProjects, discoverRepos, owningProject, projectRootView, resolveProjectRoot, _setProjectRootForTest, _resetProjectRootForTest } from "./manifest-discovery.mjs"
@@ -126,19 +130,33 @@ export function manifestFilePath(cwd) {
   return join(writeRoot(cwd), MANIFEST_REL)
 }
 
+/** #802（KD-M1-36）未知键告警去重 memo：档路径 → 上次观测键集（进程内）；读到零未知键即清该条。 */
+const unknownKeysSeen = new Map()
+
+/** 读面一行可见告警（#802）：含键名；同档同键集恰一次——console.warn + logEvent('manifest:unknown-keys')。 */
+function warnUnknownKeys(file, unknownKeys) {
+  if (unknownKeys.length === 0) { unknownKeysSeen.delete(file); return }
+  const sig = JSON.stringify([...unknownKeys].sort())
+  if (unknownKeysSeen.get(file) === sig) return
+  unknownKeysSeen.set(file, sig)
+  console.warn(`[manifest] ${MANIFEST_REL} unknown key(s) ignored: ${unknownKeys.join(", ")} — not an error; check spelling / version mismatch (KD-M1-36)`)
+  logEvent("manifest:unknown-keys", { path: file, keys: unknownKeys.join(",") })
+}
+
 /**
  * 读 cwd 根数据档（模块设计 §2.2）：读 + validateManifest(obj) → 缺键产
  * missingKeys（非拒）→ 补默认值 → 再校验通过。整档缺失 → { ok:false, reason:'missing' }
  * （绝不静默 fallback——KD-M1-2）；JSON 非法 / 顶层非对象 → reason:'invalid'。
- * @returns {{ok:boolean, manifest:object|null, missingKeys:string[], errors:string[], reason?:string}}
+ * @returns {{ok:boolean, manifest:object|null, missingKeys:string[], unknownKeys:string[], errors:string[], reason?:string}}
  */
 export function readManifest(cwd) {
   let raw
+  const file = manifestFilePath(cwd) // #802：档路径单点（读 / 告警 memo 同源）
   try {
-    raw = readFileSync(manifestFilePath(cwd), "utf8")
+    raw = readFileSync(file, "utf8")
   } catch (e) {
     if (e.code === "ENOENT") {
-      return { ok: false, reason: "missing", errors: [], missingKeys: [], manifest: null }
+      return { ok: false, reason: "missing", errors: [], missingKeys: [], unknownKeys: [], manifest: null }
     }
     throw e // 权限/目录等其他读错——fail-closed 上抛，不伪装成缺失
   }
@@ -146,15 +164,16 @@ export function readManifest(cwd) {
   try {
     obj = JSON.parse(raw)
   } catch {
-    return { ok: false, reason: "invalid", errors: [`${MANIFEST_REL} 不是合法 JSON`], missingKeys: [], manifest: null }
+    return { ok: false, reason: "invalid", errors: [`${MANIFEST_REL} 不是合法 JSON`], missingKeys: [], unknownKeys: [], manifest: null }
   }
   if (obj === null || typeof obj !== "object" || Array.isArray(obj)) {
-    return { ok: false, reason: "invalid", errors: ["manifest 顶层必须是 JSON 对象"], missingKeys: [], manifest: null }
+    return { ok: false, reason: "invalid", errors: ["manifest 顶层必须是 JSON 对象"], missingKeys: [], unknownKeys: [], manifest: null }
   }
   const first = validateManifest(obj)
+  warnUnknownKeys(file, first.unknownKeys) // #802：读面单点告警（非拒——ok 定性零变）
   const manifest = fillDefaults(obj)
   const final = validateManifest(manifest)
-  return { ok: final.ok, manifest, missingKeys: first.missingKeys, errors: final.errors, reason: final.ok ? undefined : "invalid" }
+  return { ok: final.ok, manifest, missingKeys: first.missingKeys, unknownKeys: first.unknownKeys, errors: final.errors, reason: final.ok ? undefined : "invalid" }
 }
 
 /**

package/mcp/transport-http.mjs

@@ -17,6 +17,11 @@ export function httpTransport(baseURL, extraHeaders = {}) {
   let legacySSE = false
   let deadFired = false
   let deadListeners = new Set()
+  // #850 D-MC18：会话过期（HTTP 404）自愈链状态——重建单飞 promise ∥ initialize 参数单源
+  //（建连时 `setInitPayload` 注入）∥ 会话死态标记（未修复 ⇒ isAlive false ⇒ ensureAlive 走重连）。
+  let reinitPromise = null
+  let initPayload = null
+  let sessionDead = false
 
   /** 2026-08-31 MCP 会诊 P5：意外死亡通知（SSE 流断/error，非主动 close）。 */
   const fireDead = (msg) => {
@@ -118,7 +123,7 @@ export function httpTransport(baseURL, extraHeaders = {}) {
     await Promise.race([gotEndpoint, wait])
   }
 
-  async function postRequest(method, params) {
+  async function postOnce(method, params, retried) {
     const id = rpcId()
     const body = JSON.stringify({ jsonrpc: "2.0", id, method, params })
 
@@ -167,7 +172,22 @@ export function httpTransport(baseURL, extraHeaders = {}) {
           if (resp.status === 202) return
           if (!resp.ok) {
             pending.delete(id)
-            resolve({ id, error: { code: -32000, message: `HTTP ${resp.status}` } })
+            const error = { id, error: { code: -32000, message: `HTTP ${resp.status}` } }
+            // #850 D-MC18：404（MCP 会话失效语义）⇒ 自愈三步——清会话 ⇒ 重建（单飞）⇒ 重试原请求一次。
+            if (resp.status === 404 && !retried) {
+              sessionId = null   // ① 清会话（后续请求不再携失效 id）
+              const healed = await reinitialize().then(() => true, () => false)
+              // ③ 只重试一次（close 竞态：关闭后自愈链随连接生命周期终止——不重试）
+              if (healed && !closed) { resolve(postOnce(method, params, true)); return }
+            }
+            if (resp.status === 404) {
+              // 重建失败 / 二次 404：不第三次——原错误透传 + fireDead（既有退避重连链兜底）
+              if (!closed) {
+                sessionDead = true
+                fireDead("session expired")
+              }
+            }
+            resolve(error)
             return
           }
           if (ct.includes("text/event-stream")) {
@@ -203,6 +223,9 @@ export function httpTransport(baseURL, extraHeaders = {}) {
     }).finally(() => pending.delete(id))
   }
 
+  /** 原请求入口（每次调用一个 `retried` 份额——自愈重试恒为 true，二次不再重试）。 */
+  const postRequest = (method, params) => postOnce(method, params, false)
+
   const send = async (method, params) => withTimeout(postRequest(method, params), CALL_TIMEOUT_MS)
 
   const notify = (method, params) => {
@@ -217,8 +240,32 @@ export function httpTransport(baseURL, extraHeaders = {}) {
     })
   }
 
+  /** #850 D-MC18：404 自愈重建（单飞）——重新 `initialize`（+ `notifications/initialized`）。
+   *  并发 404 共享同一重建；失败抛（调用面归入「不重试」+ fireDead + sessionDead）。
+   *  重建请求自身以 retried=true 走 postOnce——重建中再 404 不再触自愈。 */
+  const reinitialize = () => {
+    if (!reinitPromise) {
+      reinitPromise = (async () => {
+        // close 竞态：关闭后自愈不再继续（重建 ∥ 通知 ∥ 会话复活全停）
+        if (closed) throw new Error("connection closed")
+        if (!initPayload) throw new Error("initialize payload not set (setInitPayload)")
+        const resp = await postOnce("initialize", initPayload, true)
+        if (resp?.error) throw new Error(resp.error.message ?? "initialize failed")
+        if (closed) throw new Error("connection closed")
+        notify("notifications/initialized", {})
+        sessionDead = false
+      })().finally(() => { reinitPromise = null })
+    }
+    return reinitPromise
+  }
+
+  /** initialize 参数单源注入（建连方：mcp.mjs——握手与自愈重建共用同一参数）。 */
+  const setInitPayload = (payload) => { initPayload = payload }
+
   const close = () => {
     closed = true
+    // 关闭态由 closed 判死；会话死态标记随连接生命周期结束复位（无残留歧义）。
+    sessionDead = false
     abortController?.abort()
     if (sessionId) {
       fetch(postUrl, {
@@ -242,7 +289,8 @@ export function httpTransport(baseURL, extraHeaders = {}) {
     send, notify, close, openSSE, url, headers: extraHeaders,
     // F1：POST-only 降级（postOnly）与 legacy SSE 流（eventSource）都算活连接——
     // 不得因 eventSource == null 误判死（glm-websearch "reconnect failed" 根因）。
-    isAlive: () => !closed && (eventSource != null || postOnly),
-    onDead, markPostOnly,
+    // D-MC18：会话过期未修复（sessionDead）⇒ 判死——ensureAlive 据此走重连。
+    isAlive: () => !closed && !sessionDead && (eventSource != null || postOnly),
+    onDead, markPostOnly, setInitPayload,
   }
 }

package/mcp/transport-stdio.mjs

@@ -1,30 +1,55 @@
 /**
  * mcp/transport-stdio.mjs — MCP stdio transport
  */
-import { spawn } from "node:child_process"
+import { spawn, spawnSync } from "node:child_process"
 import { rpcId, CALL_TIMEOUT_MS, withTimeout, quoteArg } from "./helpers.mjs"
 
+/** 退出相位标志（D-MC19）：模块加载期注册的 exit 钩子置位——退出相位无事件循环，
+ *  只同步操作可落地（注册序恒早于宿主 cleanup——`thincoder-cli/src/tui/index.mjs:125`）。 */
+let exiting = false
+process.on("exit", () => { exiting = true })
+
+/** 测试缝（先例 `provider/rate.mjs` `_rateHooks`）：组杀 / 单进程杀 / 定时器可注入
+ *  （POSIX 分流在生产 win32 机位的直驱 = 临时覆写 `process.platform`——见批内件 T-A12–A14）。 */
+export const _killHooks = {
+  groupKill: (pid, sig) => process.kill(-pid, sig),
+  childKill: (child, sig) => child.kill(sig),
+  setTimer: (fn, ms) => setTimeout(fn, ms),
+}
+
 /** Kill the child AND its whole process tree.
  *  win32: cmd.exe 包装 spawn 的孙进程（npx/node）必须 taskkill /T /F 才能杀净
  *  （2026-08-31 MCP 会诊 P2：此前只 child.kill() 杀 cmd.exe 壳，真 server 成僵尸
- *  并在 Windows 团队每人每次断开/重连泄漏一批）；
- *  POSIX: SIGTERM 后 2s 未退 SIGKILL 兜底。 */
+ *  并在 Windows 团队每人每次断开/重连泄漏一批）；taskkill 必须 **spawnSync**（同步）——
+ *  调用链挂在 `process.on("exit")`（退出相位仅同步操作可落地：异步 spawn 的 taskkill
+ *  随父进程退出被一并带走 ⇒ 子树泄漏——#17 · 2026-10-03）；
+ *  POSIX（D-MC19）：detached 新进程组（组长 pid = 组 id）⇒ 组杀 `process.kill(-pid, sig)`
+ *  （组杀覆盖孙进程——原单进程 SIGTERM 只达直接子进程）；正常相位 = 组 SIGTERM → 2s 组
+ *  SIGKILL 升级；退出相位（升级 timer 不触发）⇒ 同步组 SIGKILL 直达（不做 SIGTERM 等待）。
+ *  ESRCH（无此进程组）⇒ fallback 单进程 kill；其余错误 best-effort。 */
 function killTree(child) {
   if (!child.pid) return
   if (process.platform === "win32") {
-    try { spawn("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore", windowsHide: true }) } catch { /* best effort */ }
+    try { spawnSync("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore", windowsHide: true }) } catch { /* best effort */ }
     return
   }
-  try {
-    child.kill("SIGTERM")
-    setTimeout(() => { try { child.kill("SIGKILL") } catch { /* already gone */ } }, 2000).unref?.()
-  } catch { /* best effort */ }
+  const groupKill = (sig) => {
+    try { _killHooks.groupKill(child.pid, sig) } catch (e) {
+      if (e?.code === "ESRCH") { try { _killHooks.childKill(child, sig) } catch { /* already gone */ } }
+    }
+  }
+  if (exiting) { groupKill("SIGKILL"); return }
+  groupKill("SIGTERM")
+  const timer = _killHooks.setTimer(() => groupKill("SIGKILL"), 2000)
+  timer?.unref?.()
 }
 
 /** Create an MCP stdio transport over a spawned child process.
  *  @param {Object} [env] — extra environment variables merged on top of process.env */
 export function stdioTransport(command, args, env) {
   const spawnOptions = { stdio: ["pipe", "pipe", "pipe"], windowsHide: true, env: { ...process.env, ...env } }
+  // D-MC19：POSIX 加 detached——新进程组（组杀覆盖孙进程）；win32 分支零改（taskkill /T /F 已覆盖）。
+  if (process.platform !== "win32") spawnOptions.detached = true
   const child =
     process.platform === "win32" && !/\.exe$/i.test(command)
       ? spawn("cmd.exe", ["/d", "/s", "/c", [command, ...(args ?? [])].map(quoteArg).join(" ")], {

package/mcp.mjs

@@ -51,6 +51,16 @@ export const _mcpHooks = {
   reconnectDelays: [1000, 2000, 4000, 8000],
 }
 
+/** initialize 请求参数单源（D-MC18）：建连握手（doInitialize）与 transport 内 404 自愈重建共用——
+ *  建连时经 `transport.setInitPayload(...)` 注入。导出面供批内件复用（参数单源不可分叉）。 */
+export function buildInitParams() {
+  return {
+    protocolVersion: "2024-11-05",
+    capabilities: {},
+    clientInfo: { name: "thincoder", version: "1.0.0" },
+  }
+}
+
 /** 按 config 创建并完成握手的 transport（findTransportConfig 与 vscode 对齐）。 */
 async function createConnectedTransport(rawConfig, serverName) {
   // #57（provider-config-family 批）：值位 `${env:VAR}` 消费侧解析（CONFIG.md §6.3）——传输建连单点
@@ -62,6 +72,8 @@ async function createConnectedTransport(rawConfig, serverName) {
     await transport.connect()
   } else if (config.url) {
     transport = httpTransport(config.url, config.headers ?? {})
+    // D-MC18：#850——initialize 参数单源注入（404 自愈重建走同一参数）
+    transport.setInitPayload(buildInitParams())
     try {
       await transport.openSSE()
     } catch {
@@ -194,11 +206,7 @@ function truncateMcpOutput(text) {
 
 async function doInitialize(transport, _name) {
   const initResp = await withTimeout(
-    transport.send("initialize", {
-      protocolVersion: "2024-11-05",
-      capabilities: {},
-      clientInfo: { name: "thincoder", version: "1.0.0" },
-    }),
+    transport.send("initialize", buildInitParams()),
     INIT_TIMEOUT_MS,
   )
   if (initResp.error) throw new Error(`initialize error: ${initResp.error.message}`)

package/memory/code-search.mjs

@@ -5,7 +5,7 @@
  * ∥ `codeSearchTool`——迁出块逐字；原档 `memory/code-sync.mjs` 经 `export { … } from` 转口保名
  * （消费面 / 批内件 import 面零改）。
  */
-import { embed, cosine, toBlob, fromBlob } from "../embedding.mjs"
+import { embed, embedTolerant, cosine, toBlob, fromBlob } from "../embedding.mjs"
 import { scanVectors, createTopK } from "./scan.mjs"
 import { normalizeOrigin } from "./origin.mjs"
 import { declaredPublicRoots } from "../conventions.mjs"
@@ -118,10 +118,12 @@ async function _runEnsureCodeEmbeddings(memory) {
   if (pending.length === 0) return
 
   const texts = pending.map((r) => `${r.path}${r.symbol_name ? " :: " + r.symbol_name : ""}\n${safeSliceUTF16(r.content, EMBED_TEXT_MAX_LEN)}`)
-  const vecs = await embed(memory.embedder, texts)
+  // #859（MEMORY.md §6.3 ∥ D-MEM31）：400 类毒行逐条隔离——null 行跳过不写（backlog 不堵）+ 一行可见回执
+  const { vectors: vecs, skipped } = await embedTolerant(memory.embedder, texts)
+  if (skipped.length) console.warn(`[code] embedding skipped ${skipped.length} row(s, first): ${skipped[0]}`)
 
   const update = memory.db.prepare(`UPDATE code_chunks SET embedding = ? WHERE rowid = ?`)
-  pending.forEach((r, i) => update.run(toBlob(vecs[i]), r.rowid))
+  pending.forEach((r, i) => { if (vecs[i]) update.run(toBlob(vecs[i]), r.rowid) })
 }
 
 /** Generate the code_search tool (read-only). */

package/memory/core.mjs

@@ -6,7 +6,7 @@
  */
 
 import { parseEntry, serializeEntry, entryFilename } from "../markdown.mjs"
-import { embed, cosine, toBlob, fromBlob } from "../embedding.mjs"
+import { embed, embedTolerant, cosine, toBlob, fromBlob } from "../embedding.mjs"
 import { scanVectors, createTopK } from "./scan.mjs"
 import { normalizeOrigin } from "./origin.mjs"
 import { readFile, stat, readdir, writeFile, mkdir } from "node:fs/promises"
@@ -172,11 +172,13 @@ async function _runEnsureEmbeddings(memory) {
     if (pendingEntries.length + pendingFiles.length > 0) {
       const items = [...pendingEntries, ...pendingFiles]
       const texts = items.map((r) => `${r.title}\n${safeSliceUTF16(r.content, EMBED_TEXT_MAX_LEN)}`)
-      const vecs = await embed(memory.embedder, texts)
+      // #859（MEMORY.md §6.3 ∥ D-MEM31）：400 类毒行逐条隔离——null 行跳过不写（backlog 不堵）+ 一行可见回执
+      const { vectors: vecs, skipped } = await embedTolerant(memory.embedder, texts)
+      if (skipped.length) console.warn(`[memory] embedding skipped ${skipped.length} row(s, first): ${skipped[0]}`)
       const updateEntry = memory.db.prepare(`UPDATE entries SET embedding = ? WHERE id = ?`)
-      pendingEntries.forEach((r, i) => updateEntry.run(toBlob(vecs[i]), r.id))
+      pendingEntries.forEach((r, i) => { if (vecs[i]) updateEntry.run(toBlob(vecs[i]), r.id) })
       const updateFile = memory.db.prepare(`UPDATE files SET embedding = ? WHERE rowid = ?`)
-      pendingFiles.forEach((r, i) => updateFile.run(toBlob(vecs[pendingEntries.length + i]), r.rowid))
+      pendingFiles.forEach((r, i) => { if (vecs[pendingEntries.length + i]) updateFile.run(toBlob(vecs[pendingEntries.length + i]), r.rowid) })
     }
   }
   // 逐面判定 + 回填（code ∕ doc 面自持模型键——同判据；失配面同样零写回降级信号）

package/memory/docs.mjs

@@ -3,7 +3,7 @@
  */
 
 import { readFile, stat } from "node:fs/promises"
-import { embed, cosine, toBlob, fromBlob } from "../embedding.mjs"
+import { embed, embedTolerant, cosine, toBlob, fromBlob } from "../embedding.mjs"
 import { scanVectors, createTopK, SCAN_YIELD_MS } from "./scan.mjs"
 import { normalizeOrigin } from "./origin.mjs"
 import { MAX_DOC_FILE_BYTES } from "./schema.mjs"
@@ -196,10 +196,12 @@ async function _runEnsureDocEmbeddings(memory) {
   if (pending.length === 0) return
 
   const texts = pending.map((r) => `${r.heading || r.path}\n${safeSliceUTF16(r.content, EMBED_TEXT_MAX_LEN)}`)
-  const vecs = await embed(memory.embedder, texts)
+  // #859（MEMORY.md §6.3 ∥ D-MEM31）：400 类毒行逐条隔离——null 行跳过不写（backlog 不堵）+ 一行可见回执
+  const { vectors: vecs, skipped } = await embedTolerant(memory.embedder, texts)
+  if (skipped.length) console.warn(`[docs] embedding skipped ${skipped.length} row(s, first): ${skipped[0]}`)
 
   const update = memory.db.prepare(`UPDATE doc_chunks SET embedding = ? WHERE rowid = ?`)
-  pending.forEach((r, i) => update.run(toBlob(vecs[i]), r.rowid))
+  pending.forEach((r, i) => { if (vecs[i]) update.run(toBlob(vecs[i]), r.rowid) })
 }
 
 /** Generate the doc_search tool (read-only). */

package/memory/schema.mjs

@@ -50,6 +50,8 @@ export const SKIP_DIRS = new Set([
   "AppData", "Application Data", "Desktop", "Documents", "Downloads",
   "Music", "Pictures", "Videos", "OneDrive", "Contacts", "Favorites",
   "Links", "Saved Games", "Searches",
+  // User-home common items (Library = macOS user dir; go = Go workspace) — basename match at any depth (false-prune face accepted)
+  "Library", "go",
   // Other common non-code directories
   "Program Files", "Program Files (x86)", "Windows", "$Recycle.Bin",
 ])

package/model-ref.mjs

@@ -11,15 +11,23 @@
  * are gone with activeProvider/activeModel (F-1), so a bare provider or bare model is
  * invalid everywhere (裁定③——裸 provider 拒——显式 p:m)。
  *
- * Runtime model resolution:
+ * Runtime model resolution (#841 单源 = resolveProviderPlan——机制全文 PROVIDER.md §6.22):
  *   parseModelRef(ref, providers)      → { ok, provider, model } | { ok:false, reason }
+ *   resolveChannelModel(entry, defaultModel)
+ *                                      → 渠道模型面单值：defaultModel 属本渠道 ⇒ 其模型段 ∥
+ *                                        渠道单值 `entry.model` ∥ null（VSC 转口面）
+ *   resolveProviderPlan({ providers, defaultModel, slot })
+ *                                      → { state, source, channel, model, provider, reason }
+ *                                        统一回退解析（纯函数 · 零 I/O——三端消费同一函数）：
+ *                                        渠道面回退序三步 + 模型面四步 + 三态 ok ∥ fallback ∥ invalid
  *   resolveRuntimeProvider(providers, defaultModel)
  *                                      → provider object with `.model` set, or {} when
  *                                        defaultModel is null/invalid (D-S1: callers mark
  *                                        _providerInvalid — never throws)
  *   defaultModelReason(providers, defaultModel) → human reason for the D-S1 marker
  *
- * Consumers: config.mjs loadConfig (re-exported as the config hub), make-agent.mjs.
+ * Consumers: config.mjs loadConfig (re-exported as the config hub), make-agent.mjs,
+ * session-lifecycle.mjs applySession（槽面）, VSC panel-turn-stages ∥ presets（核转口）。
  */
 export function parseModelRef(ref, providers) {
   if (typeof ref !== "string" || !ref.trim()) {
@@ -47,7 +55,9 @@ export function parseModelRef(ref, providers) {
 /** Resolve the runtime provider object for config.defaultModel: provider clone carrying
  *  `.model` = the parsed concrete model (API/spec consumers read provider.model unchanged).
  *  Invalid/missing defaultModel → {} (D-S1 shape — name/model/baseURL absent so
- *  validateProvider flags it; TUI/headless surface the reason from defaultModelReason). */
+ *  validateProvider flags it; TUI/headless surface the reason from defaultModelReason).
+ *  #841 后：运行时取值 = `resolveProviderPlan`（回退序 + 三态）；本函数保留为**严格单发**解析面
+ *  （零回退——解析未过即 `{}`），新码勿调。 */
 export function resolveRuntimeProvider(providers, defaultModel) {
   const r = parseModelRef(defaultModel, providers)
   if (!r.ok) return {}
@@ -64,3 +74,86 @@ export function defaultModelReason(providers, defaultModel) {
   }
   return parseModelRef(defaultModel, list).reason ?? `defaultModel "${defaultModel}" 无效`
 }
+
+/** 「持 key」判据（#841——`providers[].apiKey` trim 后非空；env 变量不是密钥源，config.mjs 档头同判）。 */
+function hasKey(entry) {
+  return typeof entry?.apiKey === "string" && entry.apiKey.trim() !== ""
+}
+
+/** 渠道模型面单值（#841 模型面 ②③——VSC `resolveDefaultModel` 转口面 · 纯函数）：
+ *  ① `defaultModel` 解析通过 ∧ 其渠道 == `entry` ⇒ 其模型段（首冒号分割 · 双段非空 · name 相等）；
+ *  ② 渠道单值 `entry.model`（非空串）；③ `null`（合法——模型由运行期 `/models` 候选 ∥ 用户选择决定）。
+ *  @param {object|null} entry — providers[] 条目（或同形对象）
+ *  @param {string|null} defaultModel — 顶层复合串
+ *  @returns {string|null} */
+export function resolveChannelModel(entry, defaultModel) {
+  if (entry?.name) {
+    const ref = parseModelRef(defaultModel, [entry])
+    if (ref.ok) return ref.model
+  }
+  return typeof entry?.model === "string" && entry.model ? entry.model : null
+}
+
+/** 运行时渠道/模型统一解析（#841 核单源——机制全文 PROVIDER.md §6.22；纯函数 · 零 I/O）。
+ *  三端（CLI ∥ VSC ∥ 桌面）消费同一函数：`loadConfig` 运行时 provider 取值 = 本函数产物（CLI ∥ 桌面
+ *  经装配自动同源）；VSC 回合面直调（接入面自建链收正）。
+ *
+ *  **渠道面回退序**：① 会话槽渠道（`slot.provider` 在场 ∧ 在册 ∧ 持 key ⇒ `source="slot"`）；
+ *  ② defaultModel 渠道（解析通过 ∧ 该渠道持 key ⇒ `source="defaultModel"`）；③ 首个持 key 渠道
+ *  （按表序 ⇒ `source="registry"`）；④ 无 ⇒ `state="invalid"`（渠表空 ∥ 全表无 key）。
+ *  槽无 key ⇒ **跳过**（不把不可运行渠道钉进运行态）。
+ *  **模型面**：① 入选来源 = 槽 ∧ 槽带模型 ⇒ 槽模型；② defaultModel 属入选渠道 ⇒ 其模型段；
+ *  ③ 入选渠道单值；④ 无 ⇒ `null`（消费者沿既有「model 缺失」处置；明示词形随缺 = 仅渠道名）。
+ *  **三态（config 级——KD-841-3：槽改写「谁在跑」，不改「默认模型是否有效」）**：`ok` =
+ *  defaultModel 独立成立（解析通过 ∧ 该渠道持 key）⇒ 零明示；`fallback` =「无有效 defaultModel」类
+ *   ∧ 全局有可运行渠道 ⇒ 可运行 + 明示必达；`invalid` =「无 provider/key」类 ⇒ 真无效 + 引导配置。
+ *  `reason` = state≠ok 的语义源（消费者按 `state` 出词——**禁串嗅探**，非契约）。
+ *  @param {{providers?: object[], defaultModel?: string|null, slot?: {provider?: string|null, model?: string|null}|null}} [input]
+ *  @returns {{state: "ok"|"fallback"|"invalid", source: "slot"|"defaultModel"|"registry"|null, channel: string|null, model: string|null, provider: object, reason: string|null}} */
+export function resolveProviderPlan({ providers, defaultModel, slot } = {}) {
+  const list = Array.isArray(providers) ? providers : []
+  const slotName = typeof slot?.provider === "string" && slot.provider ? slot.provider : null
+  const slotModel = typeof slot?.model === "string" && slot.model ? slot.model : null
+
+  // ── 渠道面回退序（三步）──
+  let entry = null
+  let source = null
+  if (slotName) {
+    const hit = list.find((p) => p?.name === slotName)
+    if (hit && hasKey(hit)) { entry = hit; source = "slot" } // 槽无 key ⇒ 跳过（落下一档）
+  }
+  const ref = parseModelRef(defaultModel, list)
+  if (!entry && ref.ok && hasKey(ref.provider)) { entry = ref.provider; source = "defaultModel" }
+  if (!entry) {
+    const first = list.find((p) => hasKey(p))
+    if (first) { entry = first; source = "registry" }
+  }
+
+  // ── 模型面（四步；无入选渠道 ⇒ null）──
+  const model = entry ? (source === "slot" && slotModel ? slotModel : resolveChannelModel(entry, defaultModel)) : null
+
+  // ── 三态（config 级）──
+  const dmOk = ref.ok && hasKey(ref.provider)
+  const state = !entry ? "invalid" : dmOk ? "ok" : "fallback"
+
+  // ── reason（语义源 · 逐档）──
+  let reason = null
+  if (state === "invalid") {
+    reason = list.length === 0
+      ? "未配置任何 provider"
+      : "未配置 API 密钥（providers[].apiKey）——请先配置渠道密钥"
+  } else if (state === "fallback") {
+    reason = ref.ok
+      ? `defaultModel 渠道 "${ref.provider.name}" 无 API 密钥——已回退到可用渠道`
+      : defaultModelReason(list, defaultModel)
+  }
+
+  return {
+    state,
+    source,
+    channel: entry?.name ?? null,
+    model,
+    provider: entry ? { ...entry, model } : {},
+    reason,
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thincoder/core",
-  "version": "0.10.1",
+  "version": "0.10.3",
   "description": "ThinCoder shared core — shared mechanism modules + shared prompt content (CLI ↔ VS Code extension).",
   "keywords": [
     "ai",

package/prompts/advisor-design.md

@@ -16,11 +16,12 @@ You are an independent design reviewer for a design review inside an engineering
 - 🟡 Advisory — design could be improved; NOT a blocker for approval
 - 🔵 Note — optional observation; NOT a blocker Document ownership severity:
 - Wording that CONTRADICTS an existing document (same mechanism described differently in two places) → 🔴
-- Creating a new file for an existing section, or duplicating a description that already exists elsewhere → 🟡 ## Citation Discipline When you cite design-document text, use the exact `file:line` format (e.g. `path/to/file.ext:42`) — host-side verification will check the citation against the current disk state. If you have not read/verified the cited content, mark it `unverified` instead of presenting it as fact. ## Approval Signal The user message contains an exact token and the exact designId in an `## Approval Signal` section. Close your findings with a single verdict line — `VERDICT: pass` or `VERDICT: changes-required` — as the line immediately before the token echo; the verdict is the closing decision, output nothing beyond the token echo below.
+- Creating a new file for an existing section, or duplicating a description that already exists elsewhere → 🟡 ## Citation Discipline When you cite design-document text, use the exact `file:line` format (e.g. `path/to/file.ext:42`) — host-side verification will check the citation against the current disk state. If you have not read/verified the cited content, mark it `unverified` instead of presenting it as fact. Never abbreviate a quote with an ellipsis ("…" or "...") — a citation must be one CONTIGUOUS substring of the cited line; an abbreviated quote is reported as a non-contiguous citation (quote one contiguous excerpt instead).
+## Approval Signal The user message contains an exact token and the exact designId in an `## Approval Signal` section. Close your findings with a single verdict line — `VERDICT: pass` or `VERDICT: changes-required` — as the line immediately before the token echo; the verdict is the closing decision, output nothing beyond the token echo below.
 - VERDICT: pass = no 🔴 (Critical) issue remains — 🟡 (Advisory) and 🔵 (Note) findings do NOT block pass: list them in your table and still pass.
 - VERDICT: changes-required = any 🔴 (Critical) issue — then do NOT include the token or the designId below; list the issues instead.
 - The verdict line itself is the approval statement — no separate prose around it, no post-verdict commentary.
-- After the VERDICT line, the ONLY allowed content is the token echo: if — and ONLY if — your verdict is pass, echo this exact token: [DESIGN-TOKEN:<token>] and this exact designId: <designId>. Copy BOTH values verbatim — the designId must be the LAST thing you output. Important:
+- After the VERDICT line, the ONLY allowed content is the token echo: if — and ONLY if — your verdict is pass, echo this exact token: [DESIGN-TOKEN:<token>] and this exact designId: <designId>. Copy BOTH values verbatim — every character, including the colon and the digits after the uuid inside the token brackets; a shortened echo is flagged as truncated. The designId must be the LAST thing you output. Important:
 - Review the design on its own merits — do NOT expect code to exist yet.
 - Read the design document fully. Judge against the Project Guide (when present in the review context) and the review criteria in this prompt — do not assume any particular project files.
 - Do NOT run git diff or look for code changes — there are none at this stage.

package/prompts/advisor-round1.md

@@ -24,6 +24,7 @@ You have a budget of 20 tool rounds (chat turns) — plan your exploration accor
 - Cover everything now. Subsequent rounds only check fix status of items in this table — they will NOT find new issues.
 - Stop calling tools once you are ready to produce the review table.
 - **Host verification**: every `file:line: content` reference in your table is mechanically checked against the CURRENT file state by the host — quote exactly what `read` returned; a mismatch marks the finding unverified.
+Never abbreviate a quote with an ellipsis ("…" or "...") — a citation must be one CONTIGUOUS substring of the cited line; an abbreviated quote is reported as a non-contiguous citation (quote one contiguous excerpt instead).
 - **Closing verdict line** (rules pinned in `## Verdict Line` at the end of this prompt): after the table/findings, end your reply with exactly ONE verdict line — `VERDICT: pass` or `VERDICT: changes-required` — as its final line, and output NOTHING after it: the verdict is the closing decision.
 ## Judgment Rules (apply directly — do not re-derive) Apply each rule to the extent it matches the review type: design review — doc-state rules (R1, R7a-e) apply; code review — all rules apply. R1 Doc contradiction / state inconsistency → 🟡 (report-and-fix by the parent doc layer — NOT 🔴; exception: the same mechanism described differently in two places = Document ownership 🔴 — keep this convention — do not downgrade)
 R2 Implementation deviates from design (acceptance unmet / silent simplification) → 🔴 (must fix)

package/prompts/advisor-round2.md

@@ -9,12 +9,17 @@ You have a budget of 15 tool rounds (chat turns). Hard mechanical cap: 100 round
 3. Project conventions were established in round 1 — do NOT re-read AGENTS.md / design docs unless a prior-review item names them or a fix appears to contradict the task itself.
 4. **ALWAYS `read` the current file before judging an item fixed or unfixed.** - Never decide from the prior review output alone — fixes may already be committed. - (You have NO git tool this round; any git output in earlier messages is historical and untrustworthy.) - Batch independent tool calls in one reply.
 5. Produce your review table. Budget: read only the files named in the prior-review items. If at 8 rounds you have not yet verified all items, wrap up. Rules:
+If you must wrap up with items not fully verified, list each of them explicitly with its state (Status `Unfixed`, evidence not verified this round) — never drop an item silently; the verdict line still closes the round with a conclusion.
 - Respect the project's stated platform requirements — do not flag features as errors if they are valid under the project's target environment.
 - Primarily check fix status of items in the prior review output.
 - For items marked "fixed": verify they were actually fixed.
-- For items marked "not an issue": evaluate whether the reasoning is sound.
-- Every "Unfixed" or "New" entry MUST quote the exact line content from THIS round's `read` output (e.g. `run.mjs:180: timeoutId = setTimeout(...)`). Line numbers alone are NOT evidence — they may be fabricated or stale. Findings without a fresh quoted line are treated as unverified and will not be accepted.
+- For items left unfixed (marked "not an issue" / "Deferred", or not addressed at all): every non-fix MUST carry a reason — a technical rebuttal with evidence, or an explicit acknowledged-not-fixed record; evaluate whether that reasoning holds.
+- Where it does not hold, the item stays unresolved — push back (this round is the last one where a reasoned non-fix can be pushed back). Where it holds, close the item: list it with Status `Accepted`.
+- Zero-reason silence or evasion never closes an item — list it as `Unfixed`.
+- Status vocabulary: `Fixed` / `Accepted` (a reasoned non-fix — closed) / `Unfixed` (unresolved — including zero-reason non-fixes) / `New`. Accepted closures and unresolved items must both be listed — an item must not vanish from the table silently.
+- Every "Unfixed" or "New" entry MUST quote the exact line content from THIS round's `read` output (e.g. `run.mjs:180: timeoutId = setTimeout(() => {`). Line numbers alone are NOT evidence — they may be fabricated or stale. Findings without a fresh quoted line are treated as unverified and will not be accepted.
 - **Host verification**: your `file:line: content` citations are mechanically checked against the CURRENT file state — quote exactly what `read` returned; a mismatch marks the finding unverified.
+Never abbreviate a quote with an ellipsis ("…" or "...") — a citation must be one CONTIGUOUS substring of the cited line; an abbreviated quote is reported as a non-contiguous citation (quote one contiguous excerpt instead).
 - **Fresh context**: this round's conversation contains NO read output from earlier rounds — every file must be re-read this round.
 - You may flag obvious new problems — but only if clearly visible in the reviewed files and would cause crashes, data loss, or logic errors.
 - Do NOT nitpick style or naming.
@@ -43,4 +48,4 @@ R7d Semantic dangling → 🟡 report the design gap (parent fixes)
 R7e Never block "pass" due to doc-state contradiction — contradiction = 🟡 report-and-pass (except mechanism-level description mismatch — = 🔴 — must be resolved before pass) Source: 7-round sample — verified judgments — continuously re-reviewed. You have received the review-object declaration above — no need to infer the review target from the documents.
 ## Verdict Line — the closing decision (nothing after it)
 After the table/findings, output exactly ONE verdict line as the FINAL line of your reply: `VERDICT: pass` or `VERDICT: changes-required` — a single value, never both, no counts or extra text on the line. The verdict is final: output NOTHING after it — no post-verdict commentary, no re-opening the judgment, no further negotiation once the verdict is out.
-Verdict meaning: pass = every prior-review 🔴 issue is resolved AND the fixes introduced no new 🔴. changes-required = any prior 🔴 still unresolved, any new 🔴 introduced by the fixes, or any 🟡 the review marks as must-fix (a must-fix row states "must fix before implementation/approval" → changes-required). Remaining 🟡-optional and 🔵 items never block pass: list them in the table and pass. Any 🔴 issue → `VERDICT: changes-required`.
+Verdict meaning: pass = every prior-review 🔴 issue is resolved — fixed (verified against the current files) or accepted (a reasoned non-fix, closed at this round) — AND the fixes introduced no new 🔴. changes-required = any prior 🔴 still unresolved (including any zero-reason non-fix — silence or evasion is never accepted), any new 🔴 introduced by the fixes, or any 🟡 the review marks as must-fix (a must-fix row states "must fix before implementation/approval" → changes-required). Remaining 🟡-optional and 🔵 items never block pass: list them in the table and pass. Any 🔴 issue → `VERDICT: changes-required`.

package/prompts/advisor-round3.md

@@ -8,10 +8,15 @@ You have a budget of 15 tool rounds (chat turns). Hard mechanical cap: 100 round
 3. Project conventions were established in round 1 — do NOT re-read AGENTS.md / design docs unless a prior-review item names them.
 4. **ALWAYS `read` the current file before judging an item fixed or unfixed.** - Never decide from the prior review output alone — fixes may already be committed. - (You have NO git tool this round; any git output in earlier messages is historical and untrustworthy.) - Batch independent tool calls in one reply.
 5. Produce your review table. Budget: read only the files named in the prior-review items. If at 8 rounds you have not yet verified all items, wrap up. Rules:
+If you must wrap up with items not fully verified, list each of them explicitly with its state (Status `Unfixed`, evidence not verified this round) — never drop an item silently; the verdict line still closes the round with a conclusion.
 - Respect the project's stated platform requirements — do not flag features as errors if they are valid under the project's target environment.
 - Only check fix status of items in the prior review output.
-- Every "Unfixed" or "New" entry MUST quote the exact line content from THIS round's `read` output (e.g. `run.mjs:180: timeoutId = setTimeout(...)`). Line numbers alone are NOT evidence — they may be fabricated or stale. Findings without a fresh quoted line are treated as unverified and will not be accepted.
+- For prior items the agent left unfixed with a reason (a technical rebuttal with evidence, or an explicit acknowledged-not-fixed record): ACCEPT them — at this round a reasoned non-fix closes the item (do not re-adjudicate the reasoning here; list it with Status `Accepted`); do not push back on the same item again.
+- Items with no reason (silence, evasion, a bare claim without justification) stay unresolved — list them with Status `Unfixed`; a zero-reason non-fix is never accepted.
+- Status vocabulary: `Fixed` / `Accepted` (a reasoned non-fix — closed at this round) / `Unfixed` (unresolved — including zero-reason non-fixes). Every prior item must receive one of these dispositions; accepted and unresolved items must be listed — never drop an item silently.
+- Every "Unfixed" or "New" entry MUST quote the exact line content from THIS round's `read` output (e.g. `run.mjs:180: timeoutId = setTimeout(() => {`). Line numbers alone are NOT evidence — they may be fabricated or stale. Findings without a fresh quoted line are treated as unverified and will not be accepted.
 - **Host verification**: your `file:line: content` citations are mechanically checked against the CURRENT file state — quote exactly what `read` returned; a mismatch marks the finding unverified.
+Never abbreviate a quote with an ellipsis ("…" or "...") — a citation must be one CONTIGUOUS substring of the cited line; an abbreviated quote is reported as a non-contiguous citation (quote one contiguous excerpt instead).
 - **Fresh context**: this round's conversation contains NO read output from earlier rounds — every file must be re-read this round.
 - Do NOT look for new issues. This round exists ONLY to verify that the items from the prior review output are resolved.
 - Do NOT nitpick style or naming.
@@ -39,4 +44,4 @@ R7d Semantic dangling → 🟡 report the design gap (parent fixes)
 R7e Never block "pass" due to doc-state contradiction — contradiction = 🟡 report-and-pass (except mechanism-level description mismatch — = 🔴 — must be resolved before pass) Source: 7-round sample — verified judgments — continuously re-reviewed. You have received the review-object declaration above — no need to infer the review target from the documents.
 ## Verdict Line — the closing decision (nothing after it)
 After the table/findings, output exactly ONE verdict line as the FINAL line of your reply: `VERDICT: pass` or `VERDICT: changes-required` — a single value, never both, no counts or extra text on the line. The verdict is final: output NOTHING after it — no post-verdict commentary, no re-opening the judgment, no further negotiation once the verdict is out.
-Verdict meaning: pass = every prior-review 🔴 issue is resolved AND the fixes introduced no new 🔴. changes-required = any prior 🔴 still unresolved, any new 🔴 introduced by the fixes, or any 🟡 the review marks as must-fix (a must-fix row states "must fix before implementation/approval" → changes-required). Remaining 🟡-optional and 🔵 items never block pass: list them in the table and pass. Any 🔴 issue → `VERDICT: changes-required`.
+Verdict meaning: pass = every prior-review 🔴 issue is resolved — fixed (verified against the current files) or accepted (a reasoned non-fix, closed at this round) — AND the fixes introduced no new 🔴. changes-required = any prior 🔴 still unresolved (including any zero-reason non-fix — silence or evasion is never accepted), any new 🔴 introduced by the fixes, or any 🟡 the review marks as must-fix (a must-fix row states "must fix before implementation/approval" → changes-required). Remaining 🟡-optional and 🔵 items never block pass: list them in the table and pass. Any 🔴 issue → `VERDICT: changes-required`.

package/prompts/discipline-normal.md

@@ -125,8 +125,9 @@ The report must contain: what changed / why, the paths of files touched, how you
   `Action` is one of exactly four values: `Fixed` (you edited the code — landed), `Dispatched` (fix round in flight — not yet landed), `Not an issue` (technical rebuttal with evidence), `Deferred` (admitted, not fixed now — with a reason).
 - `Detail` = what changed and where (file:line), or your evidence/reason.
 - **No "pre-existing" cop-out.** You own the whole code. "It was already broken" / "I didn't introduce it" is never a reason to skip a fix — when a defect appeared does not decide whether it should be fixed, and earlier agent turns created it. Rebut only on technical grounds, otherwise fix it.
-- **Do not bury 🔴.** A 🔴 you neither fix nor rebut blocks convergence. `Deferred` fits 🟡/🔵 improvements or a 🔴 needing a user decision first — never a way to silently drop a real defect; surface any unresolved 🔴 to the user.
+- **Do not bury 🔴.** A 🔴 you neither fix nor rebut blocks convergence. `Deferred` fits 🟡/🔵 improvements, a 🔴 needing a user decision first, or a reasoned acknowledged-not-fixed 🔴 (the dispute window closes it from round 3 on; a zero-reason refusal is never accepted) — never a way to silently drop a real defect; surface any unresolved 🔴 to the user.
 - Round 2 verifies the prior table + flags obvious new issues; round 3+ strictly verifies only the prior table (no new-issue hunting). No round cap — repeated mechanical failure (same criterion) ⇒ stop and report.
+Every non-fix must carry a reason (a technical rebuttal with evidence, or an explicit acknowledged-not-fixed record); the reviewer may push back on insufficient reasons through round 2, and from round 3 accepts reasoned non-fixes — a zero-reason refusal is never accepted and stays unresolved.
 - When the advisor reports all clear (no 🔴 remaining), run `verify`.
 
 ## Common disciplines