@thincoder/core 0.10.2 → 0.10.3

package/manifest.mjs

@@ -4,10 +4,12 @@
  * （机制代码在核，操作对象 = 被开发项目 cwd 根的 PROJECT-MANIFEST.json 数据档）。
  *
  * 契约速览（全量见模块设计 §2.2）：
- *  - readManifest(cwd) → { ok, manifest, missingKeys, errors, reason }：
+ *  - readManifest(cwd) → { ok, manifest, missingKeys, unknownKeys, errors, reason }：
  *    读 + validateManifest(obj)；缺键 → 产 missingKeys（非拒）→ 补默认值 →
  *    再校验通过；整档缺失 → { ok:false, reason:'missing' }（不静默 fallback）。
- *  - validateManifest(obj) → { ok, errors, missingKeys }：枚举 / version 数值 /
+ *    未知键（#802 / KD-M1-36）→ 产 unknownKeys + 一行可见告警（console.warn + logEvent；
+ *    同档同键集去重、读到零未知键清该档 memo）——非拒定性零变。
+ *  - validateManifest(obj) → { ok, errors, missingKeys, unknownKeys }：枚举 / version 数值 /
  *    docRoot 子键值形态（串 | 数组，F7）+ checkConfig.lineCounts 元素层形态——**纯函数、零 fs**；不落盘。
  *  - 三族声明键（`codePaths` / `index.{codeExtensions,docExtensions,publicRepos}` / `advisor.{docMap,standardsDoc}`——
  *    KD-M1-31 / M1-32）：缺键补默认；形态错 = 档非法（fail-closed，与 docRoot 子键同款）；
@@ -39,6 +41,8 @@ import { readFileSync, writeFileSync } from "node:fs"
 import { join, resolve } from "node:path"
 import { DEFAULT_MANIFEST, isValidDocRootValue, validateManifest, fillDefaults } from "./manifest-schema.mjs"
 import { MANIFEST_REL, discoverProjects, owningProject, resolveProjectRoot } from "./manifest-discovery.mjs"
+// #802（KD-M1-36）：未知键读面告警的事件面——诊断日志（fire-and-forget，失败静默降级）。
+import { logEvent } from "./log.mjs"
 // 同名 re-export（2026-09-29 structure-split-2 · 台账 #620——缝 = 同名再出口）：发现 ∕ 归属族与校验 ∕ 默认值族出档
 // `manifest-discovery.mjs` ∕ `manifest-schema.mjs`；全迁移导出经本档转口——消费者 import 面零改。
 export { MANIFEST_REL, discoverProjects, discoverRepos, owningProject, projectRootView, resolveProjectRoot, _setProjectRootForTest, _resetProjectRootForTest } from "./manifest-discovery.mjs"
@@ -126,19 +130,33 @@ export function manifestFilePath(cwd) {
   return join(writeRoot(cwd), MANIFEST_REL)
 }
 
+/** #802（KD-M1-36）未知键告警去重 memo：档路径 → 上次观测键集（进程内）；读到零未知键即清该条。 */
+const unknownKeysSeen = new Map()
+
+/** 读面一行可见告警（#802）：含键名；同档同键集恰一次——console.warn + logEvent('manifest:unknown-keys')。 */
+function warnUnknownKeys(file, unknownKeys) {
+  if (unknownKeys.length === 0) { unknownKeysSeen.delete(file); return }
+  const sig = JSON.stringify([...unknownKeys].sort())
+  if (unknownKeysSeen.get(file) === sig) return
+  unknownKeysSeen.set(file, sig)
+  console.warn(`[manifest] ${MANIFEST_REL} unknown key(s) ignored: ${unknownKeys.join(", ")} — not an error; check spelling / version mismatch (KD-M1-36)`)
+  logEvent("manifest:unknown-keys", { path: file, keys: unknownKeys.join(",") })
+}
+
 /**
  * 读 cwd 根数据档（模块设计 §2.2）：读 + validateManifest(obj) → 缺键产
  * missingKeys（非拒）→ 补默认值 → 再校验通过。整档缺失 → { ok:false, reason:'missing' }
  * （绝不静默 fallback——KD-M1-2）；JSON 非法 / 顶层非对象 → reason:'invalid'。
- * @returns {{ok:boolean, manifest:object|null, missingKeys:string[], errors:string[], reason?:string}}
+ * @returns {{ok:boolean, manifest:object|null, missingKeys:string[], unknownKeys:string[], errors:string[], reason?:string}}
  */
 export function readManifest(cwd) {
   let raw
+  const file = manifestFilePath(cwd) // #802：档路径单点（读 / 告警 memo 同源）
   try {
-    raw = readFileSync(manifestFilePath(cwd), "utf8")
+    raw = readFileSync(file, "utf8")
   } catch (e) {
     if (e.code === "ENOENT") {
-      return { ok: false, reason: "missing", errors: [], missingKeys: [], manifest: null }
+      return { ok: false, reason: "missing", errors: [], missingKeys: [], unknownKeys: [], manifest: null }
     }
     throw e // 权限/目录等其他读错——fail-closed 上抛，不伪装成缺失
   }
@@ -146,15 +164,16 @@ export function readManifest(cwd) {
   try {
     obj = JSON.parse(raw)
   } catch {
-    return { ok: false, reason: "invalid", errors: [`${MANIFEST_REL} 不是合法 JSON`], missingKeys: [], manifest: null }
+    return { ok: false, reason: "invalid", errors: [`${MANIFEST_REL} 不是合法 JSON`], missingKeys: [], unknownKeys: [], manifest: null }
   }
   if (obj === null || typeof obj !== "object" || Array.isArray(obj)) {
-    return { ok: false, reason: "invalid", errors: ["manifest 顶层必须是 JSON 对象"], missingKeys: [], manifest: null }
+    return { ok: false, reason: "invalid", errors: ["manifest 顶层必须是 JSON 对象"], missingKeys: [], unknownKeys: [], manifest: null }
   }
   const first = validateManifest(obj)
+  warnUnknownKeys(file, first.unknownKeys) // #802：读面单点告警（非拒——ok 定性零变）
   const manifest = fillDefaults(obj)
   const final = validateManifest(manifest)
-  return { ok: final.ok, manifest, missingKeys: first.missingKeys, errors: final.errors, reason: final.ok ? undefined : "invalid" }
+  return { ok: final.ok, manifest, missingKeys: first.missingKeys, unknownKeys: first.unknownKeys, errors: final.errors, reason: final.ok ? undefined : "invalid" }
 }
 
 /**

package/mcp/transport-http.mjs

@@ -17,6 +17,11 @@ export function httpTransport(baseURL, extraHeaders = {}) {
   let legacySSE = false
   let deadFired = false
   let deadListeners = new Set()
+  // #850 D-MC18：会话过期（HTTP 404）自愈链状态——重建单飞 promise ∥ initialize 参数单源
+  //（建连时 `setInitPayload` 注入）∥ 会话死态标记（未修复 ⇒ isAlive false ⇒ ensureAlive 走重连）。
+  let reinitPromise = null
+  let initPayload = null
+  let sessionDead = false
 
   /** 2026-08-31 MCP 会诊 P5：意外死亡通知（SSE 流断/error，非主动 close）。 */
   const fireDead = (msg) => {
@@ -118,7 +123,7 @@ export function httpTransport(baseURL, extraHeaders = {}) {
     await Promise.race([gotEndpoint, wait])
   }
 
-  async function postRequest(method, params) {
+  async function postOnce(method, params, retried) {
     const id = rpcId()
     const body = JSON.stringify({ jsonrpc: "2.0", id, method, params })
 
@@ -167,7 +172,22 @@ export function httpTransport(baseURL, extraHeaders = {}) {
           if (resp.status === 202) return
           if (!resp.ok) {
             pending.delete(id)
-            resolve({ id, error: { code: -32000, message: `HTTP ${resp.status}` } })
+            const error = { id, error: { code: -32000, message: `HTTP ${resp.status}` } }
+            // #850 D-MC18：404（MCP 会话失效语义）⇒ 自愈三步——清会话 ⇒ 重建（单飞）⇒ 重试原请求一次。
+            if (resp.status === 404 && !retried) {
+              sessionId = null   // ① 清会话（后续请求不再携失效 id）
+              const healed = await reinitialize().then(() => true, () => false)
+              // ③ 只重试一次（close 竞态：关闭后自愈链随连接生命周期终止——不重试）
+              if (healed && !closed) { resolve(postOnce(method, params, true)); return }
+            }
+            if (resp.status === 404) {
+              // 重建失败 / 二次 404：不第三次——原错误透传 + fireDead（既有退避重连链兜底）
+              if (!closed) {
+                sessionDead = true
+                fireDead("session expired")
+              }
+            }
+            resolve(error)
             return
           }
           if (ct.includes("text/event-stream")) {
@@ -203,6 +223,9 @@ export function httpTransport(baseURL, extraHeaders = {}) {
     }).finally(() => pending.delete(id))
   }
 
+  /** 原请求入口（每次调用一个 `retried` 份额——自愈重试恒为 true，二次不再重试）。 */
+  const postRequest = (method, params) => postOnce(method, params, false)
+
   const send = async (method, params) => withTimeout(postRequest(method, params), CALL_TIMEOUT_MS)
 
   const notify = (method, params) => {
@@ -217,8 +240,32 @@ export function httpTransport(baseURL, extraHeaders = {}) {
     })
   }
 
+  /** #850 D-MC18：404 自愈重建（单飞）——重新 `initialize`（+ `notifications/initialized`）。
+   *  并发 404 共享同一重建；失败抛（调用面归入「不重试」+ fireDead + sessionDead）。
+   *  重建请求自身以 retried=true 走 postOnce——重建中再 404 不再触自愈。 */
+  const reinitialize = () => {
+    if (!reinitPromise) {
+      reinitPromise = (async () => {
+        // close 竞态：关闭后自愈不再继续（重建 ∥ 通知 ∥ 会话复活全停）
+        if (closed) throw new Error("connection closed")
+        if (!initPayload) throw new Error("initialize payload not set (setInitPayload)")
+        const resp = await postOnce("initialize", initPayload, true)
+        if (resp?.error) throw new Error(resp.error.message ?? "initialize failed")
+        if (closed) throw new Error("connection closed")
+        notify("notifications/initialized", {})
+        sessionDead = false
+      })().finally(() => { reinitPromise = null })
+    }
+    return reinitPromise
+  }
+
+  /** initialize 参数单源注入（建连方：mcp.mjs——握手与自愈重建共用同一参数）。 */
+  const setInitPayload = (payload) => { initPayload = payload }
+
   const close = () => {
     closed = true
+    // 关闭态由 closed 判死；会话死态标记随连接生命周期结束复位（无残留歧义）。
+    sessionDead = false
     abortController?.abort()
     if (sessionId) {
       fetch(postUrl, {
@@ -242,7 +289,8 @@ export function httpTransport(baseURL, extraHeaders = {}) {
     send, notify, close, openSSE, url, headers: extraHeaders,
     // F1：POST-only 降级（postOnly）与 legacy SSE 流（eventSource）都算活连接——
     // 不得因 eventSource == null 误判死（glm-websearch "reconnect failed" 根因）。
-    isAlive: () => !closed && (eventSource != null || postOnly),
-    onDead, markPostOnly,
+    // D-MC18：会话过期未修复（sessionDead）⇒ 判死——ensureAlive 据此走重连。
+    isAlive: () => !closed && !sessionDead && (eventSource != null || postOnly),
+    onDead, markPostOnly, setInitPayload,
   }
 }

package/mcp/transport-stdio.mjs

@@ -1,30 +1,55 @@
 /**
  * mcp/transport-stdio.mjs — MCP stdio transport
  */
-import { spawn } from "node:child_process"
+import { spawn, spawnSync } from "node:child_process"
 import { rpcId, CALL_TIMEOUT_MS, withTimeout, quoteArg } from "./helpers.mjs"
 
+/** 退出相位标志（D-MC19）：模块加载期注册的 exit 钩子置位——退出相位无事件循环，
+ *  只同步操作可落地（注册序恒早于宿主 cleanup——`thincoder-cli/src/tui/index.mjs:125`）。 */
+let exiting = false
+process.on("exit", () => { exiting = true })
+
+/** 测试缝（先例 `provider/rate.mjs` `_rateHooks`）：组杀 / 单进程杀 / 定时器可注入
+ *  （POSIX 分流在生产 win32 机位的直驱 = 临时覆写 `process.platform`——见批内件 T-A12–A14）。 */
+export const _killHooks = {
+  groupKill: (pid, sig) => process.kill(-pid, sig),
+  childKill: (child, sig) => child.kill(sig),
+  setTimer: (fn, ms) => setTimeout(fn, ms),
+}
+
 /** Kill the child AND its whole process tree.
  *  win32: cmd.exe 包装 spawn 的孙进程（npx/node）必须 taskkill /T /F 才能杀净
  *  （2026-08-31 MCP 会诊 P2：此前只 child.kill() 杀 cmd.exe 壳，真 server 成僵尸
- *  并在 Windows 团队每人每次断开/重连泄漏一批）；
- *  POSIX: SIGTERM 后 2s 未退 SIGKILL 兜底。 */
+ *  并在 Windows 团队每人每次断开/重连泄漏一批）；taskkill 必须 **spawnSync**（同步）——
+ *  调用链挂在 `process.on("exit")`（退出相位仅同步操作可落地：异步 spawn 的 taskkill
+ *  随父进程退出被一并带走 ⇒ 子树泄漏——#17 · 2026-10-03）；
+ *  POSIX（D-MC19）：detached 新进程组（组长 pid = 组 id）⇒ 组杀 `process.kill(-pid, sig)`
+ *  （组杀覆盖孙进程——原单进程 SIGTERM 只达直接子进程）；正常相位 = 组 SIGTERM → 2s 组
+ *  SIGKILL 升级；退出相位（升级 timer 不触发）⇒ 同步组 SIGKILL 直达（不做 SIGTERM 等待）。
+ *  ESRCH（无此进程组）⇒ fallback 单进程 kill；其余错误 best-effort。 */
 function killTree(child) {
   if (!child.pid) return
   if (process.platform === "win32") {
-    try { spawn("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore", windowsHide: true }) } catch { /* best effort */ }
+    try { spawnSync("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore", windowsHide: true }) } catch { /* best effort */ }
     return
   }
-  try {
-    child.kill("SIGTERM")
-    setTimeout(() => { try { child.kill("SIGKILL") } catch { /* already gone */ } }, 2000).unref?.()
-  } catch { /* best effort */ }
+  const groupKill = (sig) => {
+    try { _killHooks.groupKill(child.pid, sig) } catch (e) {
+      if (e?.code === "ESRCH") { try { _killHooks.childKill(child, sig) } catch { /* already gone */ } }
+    }
+  }
+  if (exiting) { groupKill("SIGKILL"); return }
+  groupKill("SIGTERM")
+  const timer = _killHooks.setTimer(() => groupKill("SIGKILL"), 2000)
+  timer?.unref?.()
 }
 
 /** Create an MCP stdio transport over a spawned child process.
  *  @param {Object} [env] — extra environment variables merged on top of process.env */
 export function stdioTransport(command, args, env) {
   const spawnOptions = { stdio: ["pipe", "pipe", "pipe"], windowsHide: true, env: { ...process.env, ...env } }
+  // D-MC19：POSIX 加 detached——新进程组（组杀覆盖孙进程）；win32 分支零改（taskkill /T /F 已覆盖）。
+  if (process.platform !== "win32") spawnOptions.detached = true
   const child =
     process.platform === "win32" && !/\.exe$/i.test(command)
       ? spawn("cmd.exe", ["/d", "/s", "/c", [command, ...(args ?? [])].map(quoteArg).join(" ")], {

package/mcp.mjs

@@ -51,6 +51,16 @@ export const _mcpHooks = {
   reconnectDelays: [1000, 2000, 4000, 8000],
 }
 
+/** initialize 请求参数单源（D-MC18）：建连握手（doInitialize）与 transport 内 404 自愈重建共用——
+ *  建连时经 `transport.setInitPayload(...)` 注入。导出面供批内件复用（参数单源不可分叉）。 */
+export function buildInitParams() {
+  return {
+    protocolVersion: "2024-11-05",
+    capabilities: {},
+    clientInfo: { name: "thincoder", version: "1.0.0" },
+  }
+}
+
 /** 按 config 创建并完成握手的 transport（findTransportConfig 与 vscode 对齐）。 */
 async function createConnectedTransport(rawConfig, serverName) {
   // #57（provider-config-family 批）：值位 `${env:VAR}` 消费侧解析（CONFIG.md §6.3）——传输建连单点
@@ -62,6 +72,8 @@ async function createConnectedTransport(rawConfig, serverName) {
     await transport.connect()
   } else if (config.url) {
     transport = httpTransport(config.url, config.headers ?? {})
+    // D-MC18：#850——initialize 参数单源注入（404 自愈重建走同一参数）
+    transport.setInitPayload(buildInitParams())
     try {
       await transport.openSSE()
     } catch {
@@ -194,11 +206,7 @@ function truncateMcpOutput(text) {
 
 async function doInitialize(transport, _name) {
   const initResp = await withTimeout(
-    transport.send("initialize", {
-      protocolVersion: "2024-11-05",
-      capabilities: {},
-      clientInfo: { name: "thincoder", version: "1.0.0" },
-    }),
+    transport.send("initialize", buildInitParams()),
     INIT_TIMEOUT_MS,
   )
   if (initResp.error) throw new Error(`initialize error: ${initResp.error.message}`)

package/memory/code-search.mjs

@@ -5,7 +5,7 @@
  * ∥ `codeSearchTool`——迁出块逐字；原档 `memory/code-sync.mjs` 经 `export { … } from` 转口保名
  * （消费面 / 批内件 import 面零改）。
  */
-import { embed, cosine, toBlob, fromBlob } from "../embedding.mjs"
+import { embed, embedTolerant, cosine, toBlob, fromBlob } from "../embedding.mjs"
 import { scanVectors, createTopK } from "./scan.mjs"
 import { normalizeOrigin } from "./origin.mjs"
 import { declaredPublicRoots } from "../conventions.mjs"
@@ -118,10 +118,12 @@ async function _runEnsureCodeEmbeddings(memory) {
   if (pending.length === 0) return
 
   const texts = pending.map((r) => `${r.path}${r.symbol_name ? " :: " + r.symbol_name : ""}\n${safeSliceUTF16(r.content, EMBED_TEXT_MAX_LEN)}`)
-  const vecs = await embed(memory.embedder, texts)
+  // #859（MEMORY.md §6.3 ∥ D-MEM31）：400 类毒行逐条隔离——null 行跳过不写（backlog 不堵）+ 一行可见回执
+  const { vectors: vecs, skipped } = await embedTolerant(memory.embedder, texts)
+  if (skipped.length) console.warn(`[code] embedding skipped ${skipped.length} row(s, first): ${skipped[0]}`)
 
   const update = memory.db.prepare(`UPDATE code_chunks SET embedding = ? WHERE rowid = ?`)
-  pending.forEach((r, i) => update.run(toBlob(vecs[i]), r.rowid))
+  pending.forEach((r, i) => { if (vecs[i]) update.run(toBlob(vecs[i]), r.rowid) })
 }
 
 /** Generate the code_search tool (read-only). */

package/memory/core.mjs

@@ -6,7 +6,7 @@
  */
 
 import { parseEntry, serializeEntry, entryFilename } from "../markdown.mjs"
-import { embed, cosine, toBlob, fromBlob } from "../embedding.mjs"
+import { embed, embedTolerant, cosine, toBlob, fromBlob } from "../embedding.mjs"
 import { scanVectors, createTopK } from "./scan.mjs"
 import { normalizeOrigin } from "./origin.mjs"
 import { readFile, stat, readdir, writeFile, mkdir } from "node:fs/promises"
@@ -172,11 +172,13 @@ async function _runEnsureEmbeddings(memory) {
     if (pendingEntries.length + pendingFiles.length > 0) {
       const items = [...pendingEntries, ...pendingFiles]
       const texts = items.map((r) => `${r.title}\n${safeSliceUTF16(r.content, EMBED_TEXT_MAX_LEN)}`)
-      const vecs = await embed(memory.embedder, texts)
+      // #859（MEMORY.md §6.3 ∥ D-MEM31）：400 类毒行逐条隔离——null 行跳过不写（backlog 不堵）+ 一行可见回执
+      const { vectors: vecs, skipped } = await embedTolerant(memory.embedder, texts)
+      if (skipped.length) console.warn(`[memory] embedding skipped ${skipped.length} row(s, first): ${skipped[0]}`)
       const updateEntry = memory.db.prepare(`UPDATE entries SET embedding = ? WHERE id = ?`)
-      pendingEntries.forEach((r, i) => updateEntry.run(toBlob(vecs[i]), r.id))
+      pendingEntries.forEach((r, i) => { if (vecs[i]) updateEntry.run(toBlob(vecs[i]), r.id) })
       const updateFile = memory.db.prepare(`UPDATE files SET embedding = ? WHERE rowid = ?`)
-      pendingFiles.forEach((r, i) => updateFile.run(toBlob(vecs[pendingEntries.length + i]), r.rowid))
+      pendingFiles.forEach((r, i) => { if (vecs[pendingEntries.length + i]) updateFile.run(toBlob(vecs[pendingEntries.length + i]), r.rowid) })
     }
   }
   // 逐面判定 + 回填（code ∕ doc 面自持模型键——同判据；失配面同样零写回降级信号）

package/memory/docs.mjs

@@ -3,7 +3,7 @@
  */
 
 import { readFile, stat } from "node:fs/promises"
-import { embed, cosine, toBlob, fromBlob } from "../embedding.mjs"
+import { embed, embedTolerant, cosine, toBlob, fromBlob } from "../embedding.mjs"
 import { scanVectors, createTopK, SCAN_YIELD_MS } from "./scan.mjs"
 import { normalizeOrigin } from "./origin.mjs"
 import { MAX_DOC_FILE_BYTES } from "./schema.mjs"
@@ -196,10 +196,12 @@ async function _runEnsureDocEmbeddings(memory) {
   if (pending.length === 0) return
 
   const texts = pending.map((r) => `${r.heading || r.path}\n${safeSliceUTF16(r.content, EMBED_TEXT_MAX_LEN)}`)
-  const vecs = await embed(memory.embedder, texts)
+  // #859（MEMORY.md §6.3 ∥ D-MEM31）：400 类毒行逐条隔离——null 行跳过不写（backlog 不堵）+ 一行可见回执
+  const { vectors: vecs, skipped } = await embedTolerant(memory.embedder, texts)
+  if (skipped.length) console.warn(`[docs] embedding skipped ${skipped.length} row(s, first): ${skipped[0]}`)
 
   const update = memory.db.prepare(`UPDATE doc_chunks SET embedding = ? WHERE rowid = ?`)
-  pending.forEach((r, i) => update.run(toBlob(vecs[i]), r.rowid))
+  pending.forEach((r, i) => { if (vecs[i]) update.run(toBlob(vecs[i]), r.rowid) })
 }
 
 /** Generate the doc_search tool (read-only). */

package/memory/schema.mjs

@@ -50,6 +50,8 @@ export const SKIP_DIRS = new Set([
   "AppData", "Application Data", "Desktop", "Documents", "Downloads",
   "Music", "Pictures", "Videos", "OneDrive", "Contacts", "Favorites",
   "Links", "Saved Games", "Searches",
+  // User-home common items (Library = macOS user dir; go = Go workspace) — basename match at any depth (false-prune face accepted)
+  "Library", "go",
   // Other common non-code directories
   "Program Files", "Program Files (x86)", "Windows", "$Recycle.Bin",
 ])

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thincoder/core",
-  "version": "0.10.2",
+  "version": "0.10.3",
   "description": "ThinCoder shared core — shared mechanism modules + shared prompt content (CLI ↔ VS Code extension).",
   "keywords": [
     "ai",

package/prompts/advisor-design.md

@@ -16,11 +16,12 @@ You are an independent design reviewer for a design review inside an engineering
 - 🟡 Advisory — design could be improved; NOT a blocker for approval
 - 🔵 Note — optional observation; NOT a blocker Document ownership severity:
 - Wording that CONTRADICTS an existing document (same mechanism described differently in two places) → 🔴
-- Creating a new file for an existing section, or duplicating a description that already exists elsewhere → 🟡 ## Citation Discipline When you cite design-document text, use the exact `file:line` format (e.g. `path/to/file.ext:42`) — host-side verification will check the citation against the current disk state. If you have not read/verified the cited content, mark it `unverified` instead of presenting it as fact. ## Approval Signal The user message contains an exact token and the exact designId in an `## Approval Signal` section. Close your findings with a single verdict line — `VERDICT: pass` or `VERDICT: changes-required` — as the line immediately before the token echo; the verdict is the closing decision, output nothing beyond the token echo below.
+- Creating a new file for an existing section, or duplicating a description that already exists elsewhere → 🟡 ## Citation Discipline When you cite design-document text, use the exact `file:line` format (e.g. `path/to/file.ext:42`) — host-side verification will check the citation against the current disk state. If you have not read/verified the cited content, mark it `unverified` instead of presenting it as fact. Never abbreviate a quote with an ellipsis ("…" or "...") — a citation must be one CONTIGUOUS substring of the cited line; an abbreviated quote is reported as a non-contiguous citation (quote one contiguous excerpt instead).
+## Approval Signal The user message contains an exact token and the exact designId in an `## Approval Signal` section. Close your findings with a single verdict line — `VERDICT: pass` or `VERDICT: changes-required` — as the line immediately before the token echo; the verdict is the closing decision, output nothing beyond the token echo below.
 - VERDICT: pass = no 🔴 (Critical) issue remains — 🟡 (Advisory) and 🔵 (Note) findings do NOT block pass: list them in your table and still pass.
 - VERDICT: changes-required = any 🔴 (Critical) issue — then do NOT include the token or the designId below; list the issues instead.
 - The verdict line itself is the approval statement — no separate prose around it, no post-verdict commentary.
-- After the VERDICT line, the ONLY allowed content is the token echo: if — and ONLY if — your verdict is pass, echo this exact token: [DESIGN-TOKEN:<token>] and this exact designId: <designId>. Copy BOTH values verbatim — the designId must be the LAST thing you output. Important:
+- After the VERDICT line, the ONLY allowed content is the token echo: if — and ONLY if — your verdict is pass, echo this exact token: [DESIGN-TOKEN:<token>] and this exact designId: <designId>. Copy BOTH values verbatim — every character, including the colon and the digits after the uuid inside the token brackets; a shortened echo is flagged as truncated. The designId must be the LAST thing you output. Important:
 - Review the design on its own merits — do NOT expect code to exist yet.
 - Read the design document fully. Judge against the Project Guide (when present in the review context) and the review criteria in this prompt — do not assume any particular project files.
 - Do NOT run git diff or look for code changes — there are none at this stage.

package/prompts/advisor-round1.md

@@ -24,6 +24,7 @@ You have a budget of 20 tool rounds (chat turns) — plan your exploration accor
 - Cover everything now. Subsequent rounds only check fix status of items in this table — they will NOT find new issues.
 - Stop calling tools once you are ready to produce the review table.
 - **Host verification**: every `file:line: content` reference in your table is mechanically checked against the CURRENT file state by the host — quote exactly what `read` returned; a mismatch marks the finding unverified.
+Never abbreviate a quote with an ellipsis ("…" or "...") — a citation must be one CONTIGUOUS substring of the cited line; an abbreviated quote is reported as a non-contiguous citation (quote one contiguous excerpt instead).
 - **Closing verdict line** (rules pinned in `## Verdict Line` at the end of this prompt): after the table/findings, end your reply with exactly ONE verdict line — `VERDICT: pass` or `VERDICT: changes-required` — as its final line, and output NOTHING after it: the verdict is the closing decision.
 ## Judgment Rules (apply directly — do not re-derive) Apply each rule to the extent it matches the review type: design review — doc-state rules (R1, R7a-e) apply; code review — all rules apply. R1 Doc contradiction / state inconsistency → 🟡 (report-and-fix by the parent doc layer — NOT 🔴; exception: the same mechanism described differently in two places = Document ownership 🔴 — keep this convention — do not downgrade)
 R2 Implementation deviates from design (acceptance unmet / silent simplification) → 🔴 (must fix)

package/prompts/advisor-round2.md

@@ -9,12 +9,17 @@ You have a budget of 15 tool rounds (chat turns). Hard mechanical cap: 100 round
 3. Project conventions were established in round 1 — do NOT re-read AGENTS.md / design docs unless a prior-review item names them or a fix appears to contradict the task itself.
 4. **ALWAYS `read` the current file before judging an item fixed or unfixed.** - Never decide from the prior review output alone — fixes may already be committed. - (You have NO git tool this round; any git output in earlier messages is historical and untrustworthy.) - Batch independent tool calls in one reply.
 5. Produce your review table. Budget: read only the files named in the prior-review items. If at 8 rounds you have not yet verified all items, wrap up. Rules:
+If you must wrap up with items not fully verified, list each of them explicitly with its state (Status `Unfixed`, evidence not verified this round) — never drop an item silently; the verdict line still closes the round with a conclusion.
 - Respect the project's stated platform requirements — do not flag features as errors if they are valid under the project's target environment.
 - Primarily check fix status of items in the prior review output.
 - For items marked "fixed": verify they were actually fixed.
-- For items marked "not an issue": evaluate whether the reasoning is sound.
-- Every "Unfixed" or "New" entry MUST quote the exact line content from THIS round's `read` output (e.g. `run.mjs:180: timeoutId = setTimeout(...)`). Line numbers alone are NOT evidence — they may be fabricated or stale. Findings without a fresh quoted line are treated as unverified and will not be accepted.
+- For items left unfixed (marked "not an issue" / "Deferred", or not addressed at all): every non-fix MUST carry a reason — a technical rebuttal with evidence, or an explicit acknowledged-not-fixed record; evaluate whether that reasoning holds.
+- Where it does not hold, the item stays unresolved — push back (this round is the last one where a reasoned non-fix can be pushed back). Where it holds, close the item: list it with Status `Accepted`.
+- Zero-reason silence or evasion never closes an item — list it as `Unfixed`.
+- Status vocabulary: `Fixed` / `Accepted` (a reasoned non-fix — closed) / `Unfixed` (unresolved — including zero-reason non-fixes) / `New`. Accepted closures and unresolved items must both be listed — an item must not vanish from the table silently.
+- Every "Unfixed" or "New" entry MUST quote the exact line content from THIS round's `read` output (e.g. `run.mjs:180: timeoutId = setTimeout(() => {`). Line numbers alone are NOT evidence — they may be fabricated or stale. Findings without a fresh quoted line are treated as unverified and will not be accepted.
 - **Host verification**: your `file:line: content` citations are mechanically checked against the CURRENT file state — quote exactly what `read` returned; a mismatch marks the finding unverified.
+Never abbreviate a quote with an ellipsis ("…" or "...") — a citation must be one CONTIGUOUS substring of the cited line; an abbreviated quote is reported as a non-contiguous citation (quote one contiguous excerpt instead).
 - **Fresh context**: this round's conversation contains NO read output from earlier rounds — every file must be re-read this round.
 - You may flag obvious new problems — but only if clearly visible in the reviewed files and would cause crashes, data loss, or logic errors.
 - Do NOT nitpick style or naming.
@@ -43,4 +48,4 @@ R7d Semantic dangling → 🟡 report the design gap (parent fixes)
 R7e Never block "pass" due to doc-state contradiction — contradiction = 🟡 report-and-pass (except mechanism-level description mismatch — = 🔴 — must be resolved before pass) Source: 7-round sample — verified judgments — continuously re-reviewed. You have received the review-object declaration above — no need to infer the review target from the documents.
 ## Verdict Line — the closing decision (nothing after it)
 After the table/findings, output exactly ONE verdict line as the FINAL line of your reply: `VERDICT: pass` or `VERDICT: changes-required` — a single value, never both, no counts or extra text on the line. The verdict is final: output NOTHING after it — no post-verdict commentary, no re-opening the judgment, no further negotiation once the verdict is out.
-Verdict meaning: pass = every prior-review 🔴 issue is resolved AND the fixes introduced no new 🔴. changes-required = any prior 🔴 still unresolved, any new 🔴 introduced by the fixes, or any 🟡 the review marks as must-fix (a must-fix row states "must fix before implementation/approval" → changes-required). Remaining 🟡-optional and 🔵 items never block pass: list them in the table and pass. Any 🔴 issue → `VERDICT: changes-required`.
+Verdict meaning: pass = every prior-review 🔴 issue is resolved — fixed (verified against the current files) or accepted (a reasoned non-fix, closed at this round) — AND the fixes introduced no new 🔴. changes-required = any prior 🔴 still unresolved (including any zero-reason non-fix — silence or evasion is never accepted), any new 🔴 introduced by the fixes, or any 🟡 the review marks as must-fix (a must-fix row states "must fix before implementation/approval" → changes-required). Remaining 🟡-optional and 🔵 items never block pass: list them in the table and pass. Any 🔴 issue → `VERDICT: changes-required`.

package/prompts/advisor-round3.md

@@ -8,10 +8,15 @@ You have a budget of 15 tool rounds (chat turns). Hard mechanical cap: 100 round
 3. Project conventions were established in round 1 — do NOT re-read AGENTS.md / design docs unless a prior-review item names them.
 4. **ALWAYS `read` the current file before judging an item fixed or unfixed.** - Never decide from the prior review output alone — fixes may already be committed. - (You have NO git tool this round; any git output in earlier messages is historical and untrustworthy.) - Batch independent tool calls in one reply.
 5. Produce your review table. Budget: read only the files named in the prior-review items. If at 8 rounds you have not yet verified all items, wrap up. Rules:
+If you must wrap up with items not fully verified, list each of them explicitly with its state (Status `Unfixed`, evidence not verified this round) — never drop an item silently; the verdict line still closes the round with a conclusion.
 - Respect the project's stated platform requirements — do not flag features as errors if they are valid under the project's target environment.
 - Only check fix status of items in the prior review output.
-- Every "Unfixed" or "New" entry MUST quote the exact line content from THIS round's `read` output (e.g. `run.mjs:180: timeoutId = setTimeout(...)`). Line numbers alone are NOT evidence — they may be fabricated or stale. Findings without a fresh quoted line are treated as unverified and will not be accepted.
+- For prior items the agent left unfixed with a reason (a technical rebuttal with evidence, or an explicit acknowledged-not-fixed record): ACCEPT them — at this round a reasoned non-fix closes the item (do not re-adjudicate the reasoning here; list it with Status `Accepted`); do not push back on the same item again.
+- Items with no reason (silence, evasion, a bare claim without justification) stay unresolved — list them with Status `Unfixed`; a zero-reason non-fix is never accepted.
+- Status vocabulary: `Fixed` / `Accepted` (a reasoned non-fix — closed at this round) / `Unfixed` (unresolved — including zero-reason non-fixes). Every prior item must receive one of these dispositions; accepted and unresolved items must be listed — never drop an item silently.
+- Every "Unfixed" or "New" entry MUST quote the exact line content from THIS round's `read` output (e.g. `run.mjs:180: timeoutId = setTimeout(() => {`). Line numbers alone are NOT evidence — they may be fabricated or stale. Findings without a fresh quoted line are treated as unverified and will not be accepted.
 - **Host verification**: your `file:line: content` citations are mechanically checked against the CURRENT file state — quote exactly what `read` returned; a mismatch marks the finding unverified.
+Never abbreviate a quote with an ellipsis ("…" or "...") — a citation must be one CONTIGUOUS substring of the cited line; an abbreviated quote is reported as a non-contiguous citation (quote one contiguous excerpt instead).
 - **Fresh context**: this round's conversation contains NO read output from earlier rounds — every file must be re-read this round.
 - Do NOT look for new issues. This round exists ONLY to verify that the items from the prior review output are resolved.
 - Do NOT nitpick style or naming.
@@ -39,4 +44,4 @@ R7d Semantic dangling → 🟡 report the design gap (parent fixes)
 R7e Never block "pass" due to doc-state contradiction — contradiction = 🟡 report-and-pass (except mechanism-level description mismatch — = 🔴 — must be resolved before pass) Source: 7-round sample — verified judgments — continuously re-reviewed. You have received the review-object declaration above — no need to infer the review target from the documents.
 ## Verdict Line — the closing decision (nothing after it)
 After the table/findings, output exactly ONE verdict line as the FINAL line of your reply: `VERDICT: pass` or `VERDICT: changes-required` — a single value, never both, no counts or extra text on the line. The verdict is final: output NOTHING after it — no post-verdict commentary, no re-opening the judgment, no further negotiation once the verdict is out.
-Verdict meaning: pass = every prior-review 🔴 issue is resolved AND the fixes introduced no new 🔴. changes-required = any prior 🔴 still unresolved, any new 🔴 introduced by the fixes, or any 🟡 the review marks as must-fix (a must-fix row states "must fix before implementation/approval" → changes-required). Remaining 🟡-optional and 🔵 items never block pass: list them in the table and pass. Any 🔴 issue → `VERDICT: changes-required`.
+Verdict meaning: pass = every prior-review 🔴 issue is resolved — fixed (verified against the current files) or accepted (a reasoned non-fix, closed at this round) — AND the fixes introduced no new 🔴. changes-required = any prior 🔴 still unresolved (including any zero-reason non-fix — silence or evasion is never accepted), any new 🔴 introduced by the fixes, or any 🟡 the review marks as must-fix (a must-fix row states "must fix before implementation/approval" → changes-required). Remaining 🟡-optional and 🔵 items never block pass: list them in the table and pass. Any 🔴 issue → `VERDICT: changes-required`.

package/prompts/discipline-normal.md

@@ -125,8 +125,9 @@ The report must contain: what changed / why, the paths of files touched, how you
   `Action` is one of exactly four values: `Fixed` (you edited the code — landed), `Dispatched` (fix round in flight — not yet landed), `Not an issue` (technical rebuttal with evidence), `Deferred` (admitted, not fixed now — with a reason).
 - `Detail` = what changed and where (file:line), or your evidence/reason.
 - **No "pre-existing" cop-out.** You own the whole code. "It was already broken" / "I didn't introduce it" is never a reason to skip a fix — when a defect appeared does not decide whether it should be fixed, and earlier agent turns created it. Rebut only on technical grounds, otherwise fix it.
-- **Do not bury 🔴.** A 🔴 you neither fix nor rebut blocks convergence. `Deferred` fits 🟡/🔵 improvements or a 🔴 needing a user decision first — never a way to silently drop a real defect; surface any unresolved 🔴 to the user.
+- **Do not bury 🔴.** A 🔴 you neither fix nor rebut blocks convergence. `Deferred` fits 🟡/🔵 improvements, a 🔴 needing a user decision first, or a reasoned acknowledged-not-fixed 🔴 (the dispute window closes it from round 3 on; a zero-reason refusal is never accepted) — never a way to silently drop a real defect; surface any unresolved 🔴 to the user.
 - Round 2 verifies the prior table + flags obvious new issues; round 3+ strictly verifies only the prior table (no new-issue hunting). No round cap — repeated mechanical failure (same criterion) ⇒ stop and report.
+Every non-fix must carry a reason (a technical rebuttal with evidence, or an explicit acknowledged-not-fixed record); the reviewer may push back on insufficient reasons through round 2, and from round 3 accepts reasoned non-fixes — a zero-reason refusal is never accepted and stays unresolved.
 - When the advisor reports all clear (no 🔴 remaining), run `verify`.
 
 ## Common disciplines

package/prompts/persona-engineering.md

@@ -76,6 +76,7 @@ Batch record, dispatch task books, verification conclusions, review firing, requ
 - **Parent does not ghost-write**: you do NOT write the design doc — anything needing change goes **via a fix round** to eng-designer; three exception categories: ① your own write domain (batch record §1/§4/§6 · ledger · requirement docs) ② purely mechanical form corrections (line folding / pointer form / counts) ③ **small edits** (single-line / table-level · no new semantics · verifiable one by one).
   **All three must be marked** ("parent direct execution" + revertable). **Judgment lines**: you content-writing on a dispatched surface without a fix round ⇒ violation; mechanical form correction unmarked ⇒ violation.
 - **Close three states (no "promises")**: each round's close allows **only three states** — ① **Do** (the action **was fired THIS round**: tool call / edit landed — the report only describes **what happened this round**); ② **Wait** (real dependency: waiting for the user's nod / a subagent's return — **must state what you're waiting for**); ③ **Stop** (anomaly / pending judgment — **state the stop point**). **The fourth state "promise" is forbidden**: writing "right away / next stroke / immediately / I will / up next" + an action WITHOUT firing that action in the same round ⇒ **treated as "not done"** — that wording must not be used: either do it in the same round, or rewrite it as "Wait".
+- **Every claim carries its basis**: at close, each judgment / conclusion / reading must carry its basis — one of: a judgment source (what it stands on), a `file:line` coordinate, or an explicit `unverified`; a claim with none of the three must not be output as a conclusion; a basis present must be checkable, one absent must be marked — no format mandated, existing documents not retrofitted.
 - **Debts go on the list**: undispatched / unfinished items of your own ⇒ **immediately written into batch record §6 unresolved (or a ledger row)** — debts **must be visible**, never living only in report prose, a code comment, or an inline note waiting for the user to chase.
 - **Fix in place first**: one-off small-form items (wording / coordinates / indexes / cleanup) from reviews or sweeps get fixed on the spot — never booked. **Only real debts enter the pool** (needs its own round / conditional / needs design). Triage aged pool entries before disposals: landed ⇒ retro-close; premise gone / duplicate ⇒ withdraw.
 - **Drain first (auto mode)**: while subagents are in flight, **clear your own queue in parallel** (verification / closure / settlement / mechanical corrections) — "waiting" **only holds for real dependencies**; parking doable work on "waiting" ⇒ violation.
@@ -105,13 +106,14 @@ Batch record, dispatch task books, verification conclusions, review firing, requ
   No "pre-existing" cop-out: "it was already broken" is never a reason to skip a fix — you own the whole design/code, and when a defect appeared does not decide whether it should be fixed.
   Findings beyond the approved design's scope: surface them or propose a design update — never silently ignore.
   A 🔴 you neither fix nor surface blocks convergence.
-  `Deferred` fits 🟡/🔵 improvements or a 🔴 needing the user's decision first — never a way to silently drop a real defect; unresolved 🔴 must be surfaced to the user.
+  `Deferred` fits 🟡/🔵 improvements, a 🔴 needing the user's decision first, or a reasoned acknowledged-not-fixed 🔴 (the dispute window closes it from round 3 on; a zero-reason refusal is never accepted) — never a way to silently drop a real defect; unresolved 🔴 must be surfaced to the user.
 - **Fix round ⇄ user approval timing** (post-review): after review passes you adjudicate one by one (adjudication table) — fixes your adjudication demands (design-doc revisions / implementation repairs)
   **land via a fix round and pass your verification BEFORE you may request user approval**; while a fix round is in flight you must NOT request approval — in-flight status is reported only, and the report carries no approval request.
   **Fix-round boundary**: only fixes directly derived from review findings and your adjudication — **no smuggled new semantics/scope**; smuggling = new content,
   to be explicitly laid before the user for a separate decision, never default-approved along with the approval request.
   In the approval request, the adjudication table's `Dispatched` rows must have converged to `Fixed` one by one (with landing evidence: file:line or design-doc section).
 - Round decay: round 2 verifies the prior table + flags obvious new issues; round 3+ strictly verifies only the prior table (no new-issue hunting). No round cap — repeated mechanical failure (same criterion) ⇒ stop and report.
+Every non-fix must carry a reason (a technical rebuttal with evidence, or an explicit acknowledged-not-fixed record); the reviewer may push back on insufficient reasons through round 2, and from round 3 accepts reasoned non-fixes — a zero-reason refusal is never accepted and stays unresolved.
   When the advisor reports all clear (no 🔴 remaining), run `verify`.
 - Async: **advisor calls are async by default at the top level.** On approval the design token is issued to the session automatically and the digest echoes the designId for the eng-coder spawn.
 

package/provider/core.mjs

@@ -126,6 +126,8 @@ async function chatImpl(provider, { messages, tools, onToken, onReasoning, onWai
   // window/clamping logic below reads the overridden value where it matters.
   const spec = providerSpec(provider)
   messages = stripImagesForTextModel(messages, spec)
+  // #853 D-PR32：历史图片累计字节预算——发送前对消息副本累计驱逐（最老先弃；history 本体零触）。
+  messages = capHistoryImages(messages)
   // SESSION.md §6.9 T-S3: local-only message fields (ts/transient) never reach the wire.
   // Stripped BEFORE format dispatch — anthropic/responses transports pass whole message
   // objects through verbatim (only the OpenAI path ran escapeMessages). Copy-on-write:
@@ -330,7 +332,7 @@ export function buildContinuationMessages(messages, result, spec) {
 // Pre-send payload normalization lives in normalize.mjs (2026-08-31 extract,
 // TODO #2); re-exported so provider/index.mjs and tool-pairing.test.mjs keep
 // their import paths.
-import { stripImagesForTextModel, normalizeToolPairing } from "./normalize.mjs"
+import { stripImagesForTextModel, normalizeToolPairing, capHistoryImages } from "./normalize.mjs"
 export { stripImagesForTextModel, normalizeToolPairing }
 /** Merge tool calls from a retry/continuation into the accumulated result.
  *  2026-08-31 会诊 #7/#17：readSSE 输出的 tc 已 finalize（无 index 字段），
@@ -392,9 +394,9 @@ async function requestWithRetry(provider, body, signal, onWait) {
         _headerTimeoutMs: effectiveFetchTimeoutMs(provider),
         _bodyIdleMs: FETCH_BODY_IDLE_MS,
       }
-      response = provider.proxyUri
-        ? await proxyFetch(url, opts, provider.proxyUri)
-        : await fetch(url, opts)
+      // #878 D-PX8：请求调用点收口——恒走 `proxyFetch`（无 proxyUri 即直连分支，内部 abort 通道单点建设；
+      // 原 call-site 分叉删除）。
+      response = await proxyFetch(url, opts, provider.proxyUri)
     } catch (error) {
       // AGENT-LOOP-SUBAGENT.md §6.12 站点 #2（第 24 批）：fetch 拒否面补标来源（undici 拒否的 AbortError 现场无 reason）
       if (error.name === "AbortError") throw annotateAbort(error, signal, "provider", "request")
@@ -406,6 +408,10 @@ async function requestWithRetry(provider, body, signal, onWait) {
 
     const text = await response.text().catch(() => "")
     let message = `LLM API error ${response.status}: ${text}`
+    // #853 D-PR32：413 可操作化——长会话图片累积的高频形态，从裸 HTTP 码变为可执行指引。
+    if (response.status === 413) {
+      message += " — request body too large (HTTP 413): run /compact to compress the conversation history, or remove historical images."
+    }
     // 401 双平台提示 + 诊断回显（2026-08-31 会诊 #15）：
     // Kimi 双平台 key 不互通的提示保留；通用加 baseURL host + key 前 6 位掩码，
     // 帮用户快速分辨"配错平台还是配错账号"。

package/provider/google.mjs

@@ -8,6 +8,7 @@ import { proxyFetch } from "../proxy.mjs"
 import { requestWithRetry } from "./retry.mjs"
 import { effectiveFetchTimeoutMs } from "./core.mjs"
 import { abortError, timeoutError } from "../abort-provenance.mjs"
+import { terminateBody } from "../stream-destroy.mjs"
 
 /** OpenAI 语义 tool_choice → Gemini FunctionCallingConfig（2026-08-31 能力层）。 */
 function mapFunctionCallingConfig(choice) {
@@ -197,10 +198,14 @@ async function parseGeminiStream(response, { onToken, onReasoning, signal }) {
   // 2026-09-01 读侧 idle 超时（同 sse.mjs）：body 有数据流动即不超时；连续 120s 无新 chunk 判死
   const READ_IDLE_MS = 120_000
   let idleTimer = null
+  let idleError = null
   const armIdle = () => {
     if (idleTimer) clearTimeout(idleTimer)
     idleTimer = setTimeout(() => {
-      try { response.body?.destroy(timeoutError(`SSE idle timeout: no data for ${READ_IDLE_MS / 1000}s`, "provider", "google-sse-idle")) } catch { /* already gone */ }
+      // #878：断流单点分流——直连 fetch（web 流）走 `IDLE_ABORT` 内部 abort 通道；
+      // proxy 形回落 destroyBody（原契约）。相位串 = 本腿专属 google-sse-idle。
+      idleError = timeoutError(`SSE idle timeout: no data for ${READ_IDLE_MS / 1000}s`, "provider", "google-sse-idle")
+      try { terminateBody(response, idleError) } catch { /* already gone */ }
     }, READ_IDLE_MS)
     idleTimer.unref?.()
   }
@@ -238,6 +243,16 @@ async function parseGeminiStream(response, { onToken, onReasoning, signal }) {
       result.interruptMessage = signal.reason.message
       return result
     }
+    // #878：看门狗终结两径归一（idleFired）——无内容 ⇒ idle 超时错误；有内容 ⇒ partial
+    //（已流出内容保留，不整轮报废）。非 idle 错误照旧走下方 hasPartial 径（原语义零变）。
+    if (idleError) {
+      if (result.content || result.reasoning || result.toolCalls.length) {
+        result.partial = true
+        result.networkError = idleError.message ?? String(idleError)
+        return result
+      }
+      throw idleError
+    }
     if (hasPartial(e)) {
       result.partial = true
       result.networkError = e.message ?? String(e)
@@ -251,7 +266,8 @@ async function parseGeminiStream(response, { onToken, onReasoning, signal }) {
   return result
 }
 
-/** google.mjs 无 hasChoices 追踪——只有流中途死且已有内容才标 partial（同 sse.mjs 语义的简化版） */
+/** google.mjs 无 hasChoices 追踪——非 idle 网络错误按文案判 partial（同 sse.mjs 语义的简化版）；
+ *  idle 径两分（有内容 ⇒ partial ∥ 无内容 ⇒ 超时错误）归 catch（#878）。 */
 function hasPartial(e) {
   return /ECONNRESET|terminated|idle timeout|network/i.test(e?.message ?? "")
 }