@thincoder/core 0.10.2 → 0.10.4

package/CHANGELOG.md

@@ -3,6 +3,71 @@
 All notable changes to the core package are documented here.
 Format: Keep a Changelog · 中文 · 号在发布时定（CalVer——见 `docs/RELEASE.md` §4）。
 
+## [Unreleased]
+
+> 0.10.3 → 0.10.4（月内 +1——发布时定号）
+
+### Added
+
+- **零落笔看门狗（#934）**：eng-coder ∥ eng-designer ∥ 评审面连续 50 轮零文本产出 ⇒ 自动上游提醒（阈值单源叶 `zero-write-watch.mjs`）。
+- **工程模式状态档写通路（#941）**：`PROJECT-MANIFEST.json` ∥ `.thincoder/conventions.json` 合规写入面（`state` 第五值——「恰执行一次」语义；`src` 段仍拒）。
+- **空目录清理通路（#943）**：`delete` 空目录臂（非空照拒 ∥ 嵌套空树自底向上——`delete` 描述面同拍）。
+- **台账变体键首启提示（#935）**：盘符大小写变体旧库检测 + `migrate` 指引（不再静默分裂）。
+- **工具面首用可发现性（#938）**：子代理派单六字段骨架进描述面 ∥ batch 头参 ∥ 占位域修正。
+- **`ledger` 统一入口（#923）**：五工具合 1（action 分派；五旧名 = 弃壳零装配）。
+
+### Changed
+
+- **消化账务语义（#930）**：投递-结算两分 ∥ 重试上限 + 升级 ∥ 未结可见。
+- **模型可见面三笔（#950）**：派单六字段骨架 ∥ 消化签收纪律线 ∥ 停摆轮引用清理。
+- **bash 执行器身份（#922）**：运行时 shell 探针 + 注入执行器行（描述与真实执行器不再相左）。
+- **advisor 主循环拆分（#951）**：时间线记录 ∥ 压缩协作外提（行为零变——结构面）。
+
+### Fixed
+
+- **消化账务取件窗（#939）**：多轮 run 首轮签收跨轮存活（假重投根治）。
+- **设计令牌裁决闸（#940）**：评审回执无 `VERDICT: pass` 不签发（机械判 ∥ 回显径）。
+- **评审串台面（#949）**：并发/排队评审按本评审实例定域 + 投递水印（不再借他场轮次）。
+- **引文核验装饰剥离（#928）**：包裹引号 ∥ 行内注记并入捕获串不再误报失配（候选集 c1–c4；零模糊）。
+- **评审 documents 域锚祖先链（#945）**：容器相对形在子仓锚下可解析（受理判据零放宽）。
+- **批次档路径多落点歧义（#942）**：无仓前缀相对形不再静默嵌套 + 歧义显式拒。
+- **docRoot 空值哨兵（#944）**：`null` = 本面无（不再被默认值补回）。
+- **responses 适配面健壮性（#907）**：SSE error 帧双分支 ∥ 错误码映射 ∥ `max_output_tokens` 显式发送。
+- **评审文档路径基面（#921）**：按候选项目根解析 + 诊断拒语 + 七处基面声明在位。
+
+## [0.10.3] — 2026-10-04
+
+> 0.10.2 → 0.10.3（月内 +1——发布时定号）
+
+### Added
+
+- **OpenCode Go 内置预设（#906）**：`opencode-go`（OpenAI 协议侧）∥ `opencode-go-anthropic`（Anthropic 协议侧）——开箱可选渠道（双协议混装建模）。
+- **ACP 结构化子代理事件（#862/#843）**：`session_info_update` 携 `_meta["thincoder.dev/subagent"]`（role ∕ id ∕ 状态 ∕ 进度）——ACP 客户端可呈现子代理活动；判据单源叶 `subagent-event.mjs`。
+- **manifest 未知键告警（#802）**：读档返回 `unknownKeys` + 恰一行可见告警（含键名；非拒——拼错 / 版本错位的声明键不再静默失效）。
+- **台账只读路径**：只读数据库打开面（CLI `ledger list` ∥ ACP `ledger/*` 接口共用）。
+- **崩溃防护两面（#865/#866）**：流响应体错误护（`stream-destroy.mjs` 四消费点）∥ win32 杀树同步化（退出阶段不漏杀）。
+
+### Changed
+
+- **模型切换解锁 · 核侧（#918）**：会话槽三键（provider ∕ model ∕ effort）**单写者**——回合关联落盘（`prefsSeedOnly`）不携三键（槽在场值赢 ∥ 缺播种）——忙期选定不再可能被旧快照覆写。
+- **环边界中止前置（#793）**：回合环头 ∥ 环尾两检查点——中止态（用户 Stop）恒以 AbortError 收束，不再产出撞帽续跑询问（需求 F5「Stop 优先」兑现）。
+- **多项目台账合计（#882）**：歧义根（容器根）下状态行台账段按族合计——多项目求和不显单一。
+
+### Fixed
+
+- **MCP 会话过期自愈（#850）**：HTTP 404 ⇒ 清会话 + 重新 initialize + 重试一次（单飞重建）；二次失败透传 + `sessionDead` 入存活判据。
+- **杀树相位（#877）**：退出阶段 POSIX 组杀 + SIGKILL 兜底（忽略 SIGTERM 的子进程不再泄漏）。
+- **SSE 重复帧守卫（#856）**：message 形状重复帧前缀补差 + tool_calls 覆盖（MiniMax v2 类端点二次追加不再叠加）。
+- **直连断流 abort 通道（#878）**：fetch 直连路径 120s 看门狗恢复生效（含遗漏路径收口）。
+- **图片字节预算（#853）**：历史图片累计驱逐（最老先出）+ 注入时同判 + 413 可操作化。
+- **embedding 毒行隔离（#859）**：孤立代理项清洗 + 单毒行不阻后续批。
+- **auto-think 守卫（#860）**：思考型模型分类调用——恒发守卫 + 失败一次可见（不再 100% 静默回退）。
+- **子代理模型形态防线（#861）**：非法 `agent.subagentModel`——加载期清洗 + 运行期明确错误（不再裸崩）。
+- **大工具回执汇总行（#796）**：批量编辑回执末行恒置 `edit batch: N/N entries — <路径清单>`——大回执（offload 截中段）也可读到结论。
+- **TUI-OOM 余项（#863）**：/undo 快照双上界 ∥ console 采集 cap ∥ advisor 关闭轻量化。
+- **台账幽灵根发现（#899）**：歧义根不再被空壳库遮蔽（族发现跳过 + 容器根合计恢复）。
+- **设计令牌回显链（#884）**：截断回显容错 + 常量标记剥离 + 正则单源（工程模式签发可靠性）。
+
 ## [0.10.2] — 2026-10-03
 
 > 0.10.1 → 0.10.2（月内 +1——发布时定号）

package/advisor/citations.mjs

@@ -7,8 +7,8 @@
  *
  * 第 11 批（C / F14 / `ADVISOR-GUARDS.md §3`）：解析候选 = cwd + **评审对象声明范围派生根**（声明仓根 /
  * 声明文件目录 / 声明目录——纯路径派生，零扫描、零 git）；命中判据三条件全中（围栏内 ∧
- * 可读 ∧ 目标行含引文内容）⇒ 零新增假命中。失败原因三分（file unreadable /
- * content mismatch @ path / path traversal）——父侧不再人肉复核。
+ * 可读 ∧ 目标行含**任一内容候选**——c1 原捕获 / c2 剥外层装饰 / c3 首引号后段 / c4 首成对引号内层；
+ * 零模糊、零内容级归一（装饰剥离候选集 = `ADVISOR-GUARDS.md` §3）。失败原因四类（file unreadable / content mismatch @ path / path traversal / 非连续引文（省略号形——形状 vs 内容造假分列））——父侧不再人肉复核。
  */
 import { readFileSync, realpathSync } from "node:fs"
 import { resolve, relative, dirname, extname, sep, isAbsolute, join } from "node:path"
@@ -21,6 +21,10 @@ import { resolve, relative, dirname, extname, sep, isAbsolute, join } from "node
 // advisory for the parent agent, never a crash path.
 const CITATION_RE = /([\w./\\-]+\.(?:mjs|cjs|js|ts|jsx|tsx|mts|cts|py|rs|go|c|h|cpp|hpp|java|rb|php|sh|bash|json|md|markdown|mdx|yaml|yml|toml|css|html)):(\d+):\s*([^`\n]{4,})/g
 
+// 非连续引文判据（`ADVISOR-GUARDS.md §3` · 2026-10-03）：引文内容含省略号（`…` / `...`）⇒ 缩略形，
+// 非所引行的连续子串——失败分类专类（形状不符与内容造假分列；先于 `content mismatch` 判定）。
+const ELLIPSIS_RE = /…|\.\.\./
+
 /** Extract `file:line: content` citations from a review text. */
 export function extractCitations(text) {
   const out = []
@@ -75,12 +79,18 @@ function resolveCitation(citation, roots, base) {
     } catch {
       continue // 存在但读不了（目录等）——按未命中处理，试下一候选
     }
-    if (line.includes(citation.content)) {
+    if (citationCandidates(citation.content).some((c) => line.includes(c))) {
       return { matched: true, root, resolved: relative(base, real).split(sep).join("/") }
     }
     mismatch ??= real
   }
-  if (mismatch) return { matched: false, reason: `content mismatch @ ${relative(base, mismatch).split(sep).join("/")}` }
+  if (mismatch) {
+    const rel = relative(base, mismatch).split(sep).join("/")
+    // 判定优先级（`ADVISOR-GUARDS.md §3`）：含省略号且不连续 ⇒ 非连续引文类——先于 mismatch。
+    return ELLIPSIS_RE.test(citation.content)
+      ? { matched: false, reason: `not a contiguous citation (ellipsis) @ ${rel} — quote one contiguous excerpt` }
+      : { matched: false, reason: `content mismatch @ ${rel}` }
+  }
   if (traversal) return { matched: false, reason: "path traversal" }
   return { matched: false, reason: "file unreadable" }
 }
@@ -137,3 +147,29 @@ export function appendCitationReport(text, cwd, opts = {}) {
   }
   return text + lines.join("\n")
 }
+
+/** 装饰剥离候选集（`ADVISOR-GUARDS.md` §3 · 2026-10-05 批 · 台账 #928）：评审引风常含包裹引号 ∥ 行内
+ *  注记（`file:line: "…引文…" — 注记`）——捕获串带装饰时字节包含判失败 ⇒ 误报 content mismatch。
+ *  候选（任一为所引行**连续子串**即命中——零模糊、零内容级归一）：
+ *  c1 原捕获（现行行为——零回归，不设下限）∥ c2 反复剥「引号族 + 空白」的先导/尾随 ∥ c3 首个引号
+ *  字符后段（剥前注记）∥ c4 首个成对引号段内层文本；派生候选下限 2 字符（空引号 ∥ 单字符垃圾形
+ *  不成候选）。 */
+function citationCandidates(raw) {
+  const out = [raw] // c1——原捕获（零回归）
+  const add = (s) => { if (s.length >= 2 && !out.includes(s)) out.push(s) }
+  const DECOR = /^[\s"'“”「」『』]+|[\s"'“”「」『』]+$/g
+  let s = raw
+  for (;;) { const t = s.replace(DECOR, ""); if (t === s) break; s = t }
+  add(s) // c2——剥离外层装饰（反复至不动点）
+  const qi = raw.search(/["'“”「」『』]/)
+  if (qi >= 0) add(raw.slice(qi + 1).trim()) // c3——首个引号字符后段（剥前注记）
+  const spans = []
+  for (const [open, close] of [['"', '"'], ["“", "”"], ["「", "」"]]) {
+    const a = raw.indexOf(open)
+    if (a < 0) continue
+    const b = raw.indexOf(close, a + 1)
+    if (b > a + 1) spans.push({ a, inner: raw.slice(a + 1, b) })
+  }
+  if (spans.length) add(spans.sort((x, y) => x.a - y.a)[0].inner) // c4——首个成对引号段内层文本
+  return out
+}

package/advisor/compaction.mjs

@@ -7,9 +7,10 @@
  * re-attach — F13/`ADVISOR-GUARDS.md §2` #3); renderTimeline moved verbatim too, so the tail
  * GENERATOR and the tail CLASSIFIER stay in one file with the assembler they
  * feed (`ADVISOR-GUARDS.md §1` 谓词 ↔ §4 结构化尾——同族单源)。拆分线 = 行数硬帽实测（见批次档 §5）。
+ * advisor-loop-split 批：loop 的压缩检查点归位本档（`compactContextIfNeeded`——`context_limit` 尾串生成点同迁；时间线面 ⇒ `advisor/timeline.mjs`）。
  */
 
-import { providerSpec } from "../config.mjs" // 第 25 批：预算派生（与 loop.mjs:11 同源导入）
+import { providerSpec } from "../config.mjs" // 第 25 批：预算派生（与 loop.mjs:12 同源导入）
 // B4（群 B 批，ADVISOR-GUARDS.md §9——F32）：CJK 加权单源（provider/rate.mjs 叶子向无环）
 import { estimateText } from "../provider/rate.mjs"
 
@@ -82,13 +83,31 @@ export function compactMessages(messages, pinned = null) {
     ...recent)
 }
 
+/** 压缩检查点（自 advisor/loop.mjs 迁出——advisor-loop-split 批）：超 `budget.compactAt` ⇒ `onText` 通知 +
+ *  `compactMessages` 原地重写（F13 pinned 重挂随它）；重写后仍超 `budget.limit` ⇒ 返回上下文超限尾串
+ *  （调用点收尾——`context_limit` 生成点），否则 `null`。 */
+export function compactContextIfNeeded(messages, budget, pinned, onText) {
+  // Check context window and compact if needed
+  const currentTokens = estimateTokens(messages)
+  if (currentTokens > budget.compactAt) {
+    onText(`\n[Context compacted: ${currentTokens} tokens → reducing to fit window]\n`)
+    compactMessages(messages, pinned)
+    if (estimateTokens(messages) > budget.limit) {
+      // Report the POST-compaction count — the pre-compaction currentTokens
+      // is stale by the time compaction has run.
+      return `Advisor: context window limit reached (${estimateTokens(messages)} tokens). Review incomplete — too many tool calls. Try a narrower scope.`
+    }
+  }
+  return null
+}
+
 // ─────────────────────────────────────────────────────────────────────────────
 // 不完整判定族（A / F16 共用单谓词——`ADVISOR-GUARDS.md §1`；六 kind = 宿主尾族）
 // ─────────────────────────────────────────────────────────────────────────────
 
 /** 宿主尾族六 kind 的块首行逐字前缀（`ADVISOR-GUARDS.md §1` 表）。变量段（token 数 / 秒数 / 工具轮数）
  *  不入前缀——取各尾的固定字面部分；`review_failed` = run.mjs catch 的字符串 resolve
- *  形态（不 throw），其余五条 = renderTimeline 尾（loop.mjs）。 */
+ *  形态（不 throw）；`context_limit` 生成点 = 本档 `compactContextIfNeeded`，其余四条 = renderTimeline 尾（loop.mjs）。 */
 const ADVISOR_INCOMPLETE_PREFIXES = [
   ["context_limit", "Advisor: context window limit"],
   ["turn_cap", "Advisor: stopped after"],

package/advisor/convergence.mjs

@@ -24,7 +24,7 @@ export function buildConvergenceInstructions(round, scopeFiles = null) {
     "2. STALE-CONTEXT WARNING: any diff or file content from earlier messages is a historical snapshot — treat it as expired. Only fresh `read` results describe the current state.",
     "3. You have no git tool; git output in earlier messages is historical and untrustworthy (committed fixes never show in a diff).",
     "4. `read` the files named in the prior review output (or the review surface above) in full — ALWAYS. Batch reads/greps in a single reply.",
-    "5. Evidence rule: every 'Unfixed'/'New' finding MUST quote the exact line content from THIS round's `read` output (e.g. `run.mjs:180: timeoutId = setTimeout(...)`). Line numbers alone are NOT evidence — they may be stale or fabricated. Findings without a fresh quoted line are treated as unverified and will not be accepted.",
+    "5. Evidence rule: every 'Unfixed'/'New' finding MUST quote the exact line content from THIS round's `read` output (e.g. `run.mjs:180: timeoutId = setTimeout(() => {`). Line numbers alone are NOT evidence — they may be stale or fabricated. Findings without a fresh quoted line are treated as unverified and will not be accepted.",
     "6. Produce your verification table. Do not re-read content you already have.",
     round === 2
       ? "7. You may flag obvious NEW issues introduced by the fixes (crashes, data loss, logic errors — not style)."

package/advisor/history.mjs

@@ -17,13 +17,15 @@ const DEFAULT_CRITERIA = `Review the code changes, focusing on:
 /**
  * Extract the agent's response table (| # | Action | Detail |) — the fix-claims
  * reference for convergence rounds.
- * Semantics (decision 2026-08-08): without sinceIdx, scan BACKWARD for the
- * MOST RECENT response table (no prior-table index is carried anymore — the
- * agent response is a focus aid only; format drift falls back to the
- * no-response text and never drives control flow). With sinceIdx, scan
- * FORWARD from it (legacy callers/tests).
+ * Semantics: with sinceIdx, scan FORWARD from it — the review instance passes
+ * its delivery watermark (`agent._advisorResponseAnchor`), so the table taken
+ * is the one written after THIS review's delivery. Without sinceIdx (legacy
+ * direct callers — no watermark), fall back to scanning BACKWARD for the most
+ * recent table. The agent response is a focus aid only — format drift falls
+ * back to the no-response text and never drives control flow (decision
+ * 2026-08-08).
  * @param {Array} history — message history
- * @param {number} [sinceIdx] — legacy: start scanning forward from this index
+ * @param {number} [sinceIdx] — delivery watermark: start scanning forward from this index
  * @returns {string|null} the response table content, or null
  */
 export function extractAgentResponseTable(history, sinceIdx) {

package/advisor/loop.mjs

@@ -2,6 +2,7 @@
  * advisor/loop.mjs — advisor tool loop: chat → execute tools → repeat, plus the
  * review timeline (split out of advisor/run.mjs, 第 11 批 — run.mjs was 498/500
  * 硬帽；拆分保持既有 import 面：run.mjs 继续 re-export 本文件导出）。
+ * 自本档再拆（advisor-loop-split 批）：时间线记录面 ⇒ `advisor/timeline.mjs`；压缩协作面 ⇒ `advisor/compaction.mjs`（`compactContextIfNeeded`）。
  *
  * 第 11 批（F15/`ADVISOR-GUARDS.md §4`）：每次 chat 调用携带硬墙信号（`AbortSignal.any([signal,
  * AbortSignal.timeout(remaining)])`；墙判定绑信号状态——抛错 / partial 两形态同判），
@@ -13,10 +14,11 @@ import { toOpenAISchema } from "../tools/index.mjs"
 import { truncateAdvisorResult } from "./truncate.mjs"
 import { batchTool } from "../agent-tools/batch.mjs"
 import {
-  estimateTokens, compactMessages, shouldBudgetNudge, budgetNudgeText, timeoutTail, renderTimeline,
+  shouldBudgetNudge, budgetNudgeText, timeoutTail, renderTimeline, compactContextIfNeeded,
   MAX_ADVISOR_TURNS, advisorContextBudget, TOOL_TIMEOUT_MS, REVIEW_TIMEOUT_MS, MAX_RESULT_CHARS,
   ADVISOR_THINKING_PLACEHOLDER,
 } from "./compaction.mjs"
+import { createTimelineRecorder } from "./timeline.mjs"
 
 const { readTool, globTool, grepTool, lsTool } = await import("../tools/index.mjs")
 const { lspTool } = await import("../tools/lsp.mjs")
@@ -68,21 +70,7 @@ async function runAdvisorToolLoop(provider, messages, onOutput, signal, agent, c
   // 未注入 ⇒ 不发进度行（核内零端名分支——契约 5 / 10）。端在装配层传入自己的格式化器。
   const describeArgs = seams.describeArgs ?? (() => "")
   // 第 11 批硬墙 / 预算 / 尾：实现注解见下方各点；守卫函数与 renderTimeline 在 compaction.mjs。
-  // Kind-tagged wrappers: the TUI panel colors reasoning / answer / tool progress differently.
-  // Every chunk is ALSO recorded into an ordered timeline — the persisted record
-  // must show the review process (thinking ↔ tool progress ↔ final text) at its
-  // real positions, not a summary appended at the end. Same-kind consecutive
-  // chunks merge (token streams); kind flips start a new entry.
-  const timeline = []
-  const record = (kind, text) => {
-    const last = timeline.at(-1)
-    if (last && last.kind === kind) last.text += text
-    else timeline.push({ kind, text })
-  }
-  const emit = (kind) => (text) => { record(kind, text); onOutput?.({ kind, text }) }
-  const onThink = emit("think")
-  const onText = emit("text")
-  const onTool = emit("tool")
+  const { timeline, onThink, onText, onTool } = createTimelineRecorder(onOutput)
   // toolsOverride = test seam (T-TS8/9): the real advisor tool set, or a mock
   // set with controllable timing/errors.
   const { schemas: toolSchemas, byName: toolByName } = toolsOverride ?? advisorToolsFor(agent, reviewType, batchDoc)
@@ -90,10 +78,20 @@ async function runAdvisorToolLoop(provider, messages, onOutput, signal, agent, c
   let toolCallCount = 0
   let reviewTextProduced = false
   let budgetNudged = false
+  // #934（零落笔看门狗——§6.32.2 ②）：连续无文本产出轮计数（循环局部——单次评审运行内计数，
+  // 修复轮 = 新运行 ⇒ 重新计数）+ 单次运行通报闩（文本产出后不再触发——「连续无产出」条件不回头）
+  // + 本轮有无文本标记（轮顶结上一轮用）。
+  let silentRounds = 0
+  let stallAlerted = false
+  let roundHadText = false
   const startTime = now()
   // 第 25 批（`ADVISOR-GUARDS.md §8`）：上下文预算跟随评审模型窗口——`providerSpec`（模型规格表 × provider 级
   // context 覆盖）派生；函数体内、while 轮次外一次性（provider 全场不变），两档消费见下守卫。
   const budget = advisorContextBudget(provider)
+  // #934（零落笔看门狗——AGENT-LOOP-UPSTREAM.md §6.32.2 ②）：阈值单源（叶档 agent-tools/zero-write-watch.mjs）——
+  // 函数域动态 import：模块域会与既有环（叶 → parent-channel → async-settle ↔ advisor-async → 本档）
+  // 互锁（加载期 TLA 死锁）；函数运行时图已就绪，模块缓存 ⇒ 每次评审一次代价。
+  const { ZERO_WRITE_ALERT_ROUNDS } = await import("../agent-tools/zero-write-watch.mjs")
 
   while (true) {
     // Interrupted (Ctrl+I) — stop immediately instead of spinning a fresh uncancellable signal
@@ -120,19 +118,23 @@ async function runAdvisorToolLoop(provider, messages, onOutput, signal, agent, c
     if (++turns > MAX_ADVISOR_TURNS) {
       return renderTimeline(timeline, "Advisor: stopped after " + MAX_ADVISOR_TURNS + " tool rounds — the review appears to be looping. You may retry with a narrower scope.")
     }
-    
-    // Check context window and compact if needed
-    const currentTokens = estimateTokens(messages)
-    if (currentTokens > budget.compactAt) {
-      onText(`\n[Context compacted: ${currentTokens} tokens → reducing to fit window]\n`)
-      compactMessages(messages, pinned)
-      if (estimateTokens(messages) > budget.limit) {
-        // Report the POST-compaction count — the pre-compaction currentTokens
-        // is stale by the time compaction has run.
-        return renderTimeline(timeline, `Advisor: context window limit reached (${estimateTokens(messages)} tokens). Review incomplete — too many tool calls. Try a narrower scope.`)
+
+    // #934（零落笔看门狗——§6.32.2 ② / §6.32.6 触发接线②）：轮顶结上一轮（首轮无上一轮可结）——
+    // 上一轮无文本 ⇒ silentRounds += 1；越阈且未通报 ⇒ 恰一次通报（可选钩子——缺省零行为；
+    // 钩子恒零抛：抛错不得上抛为评审 failed 面——实现面兜底捕获兑现）。
+    if (turns > 1) {
+      if (!roundHadText) silentRounds += 1
+      roundHadText = false
+      if (!stallAlerted && silentRounds >= ZERO_WRITE_ALERT_ROUNDS) {
+        stallAlerted = true
+        try { seams.onStallRound?.(silentRounds) } catch { /* #934：恒零抛 */ }
       }
     }
     
+    // 压缩协作（迁出 compaction.mjs `compactContextIfNeeded`）：超限尾 ⇒ 收尾
+    const contextTail = compactContextIfNeeded(messages, budget, pinned, onText)
+    if (contextTail) return renderTimeline(timeline, contextTail)
+    
     // LLM generation silence: the reasoning phase produces no SSE bytes for
     // seconds to tens of seconds (server-side prefill on large contexts, per
     // tool-round LLM return). A placeholder keeps the panel visibly working.
@@ -155,7 +157,7 @@ async function runAdvisorToolLoop(provider, messages, onOutput, signal, agent, c
         messages,
         tools: toolSchemas,
         signal: callSignal,
-        onToken: (t) => { if (String(t ?? "").trim()) reviewTextProduced = true; onText(t) },
+        onToken: (t) => { if (String(t ?? "").trim()) { reviewTextProduced = true; silentRounds = 0; roundHadText = true } onText(t) },
         onReasoning: onThink,
         // LOGGING（vscode advisor/run.mjs parity——按 stage 可 grep）
         // TRACES.md §6.1 D-TR4：轨迹元数据增补——kind=advisor（评审独立于子代理——T-TR2）；role

package/advisor/messages.mjs

@@ -48,12 +48,13 @@ export function buildObjectDeclarationBlock(object = null) {
  */
 export function buildDesignApprovalBlock(designToken, designId) {
   const echo = designId
-    ? `If — and ONLY if — your review finds NO 🔴 (Critical) issues, end your reply with this exact token: [DESIGN-TOKEN:${designToken}] and this exact designId: ${designId}. Copy BOTH values verbatim.`
-    : `If — and ONLY if — your review finds NO 🔴 (Critical) issues, end your reply with this exact token: [DESIGN-TOKEN:${designToken}]`
+    ? `If — and ONLY if — no unresolved 🔴 (Critical) issue remains, end your reply with this exact token: [DESIGN-TOKEN:${designToken}] and this exact designId: ${designId}. Copy BOTH values verbatim — every character, including the colon and the digits after the uuid inside the token brackets; a shortened echo is flagged as truncated.`
+    : `If — and ONLY if — no unresolved 🔴 (Critical) issue remains, end your reply with this exact token: [DESIGN-TOKEN:${designToken}]. Copy it verbatim — every character, including the colon and the digits after the uuid; a shortened echo is flagged as truncated.`
   return [
     "## Approval Signal",
     echo,
-    "🟡 (Advisory) and 🔵 (Note) findings do NOT block approval — list them if present, but still include the token. If there are any 🔴 issues, do NOT include the token.",
+    "The verdict line is checked mechanically: without a `VERDICT: pass` line, or with a `VERDICT: changes-required` line, no token is issued even when the token is echoed.",
+    "🟡 (Advisory) and 🔵 (Note) findings do NOT block approval — list them if present, but still include the token. If any 🔴 (Critical) issue remains unresolved, do NOT include the token. A reasoned non-fix accepted by the reviewer does not block (🔴 only — 🟡/🔵 never block approval); anything else stays unresolved.",
   ].join("\n")
 }
 
@@ -195,7 +196,7 @@ function buildAdvisorUserMessageInner(agent, prior, reviewType, designToken = nu
   // conversation can quote literal "\x"/"\u" sequences (server 400 risk).
   if (p && (agent._advisorRound || 0) > 0) {
     const scopeFiles = resolveScopeFiles(agent, paths)
-    const response = extractAgentResponseTable(agent.history)
+    const response = extractAgentResponseTable(agent.history, agent._advisorResponseAnchor ?? undefined)
       || (scopeFiles?.length
         ? "(Agent did not provide a response table — perform a fresh review of: " + scopeFiles.slice(0, 10).join(", ") + ")"
         : "(Agent did not provide a response table — perform a fresh review of the files named in the system prompt context)")

package/advisor/run.mjs

@@ -140,7 +140,11 @@ export async function runAdvisorReview(agent, reviewType, callbacks, designToken
   const pinned = buildPinnedBrief(reviewType, documents, object, designToken, designId)
 
   try {
-    const result = await runAdvisorToolLoop(provider, messages, onOutput, signal, agent, advisorCwd, null, reviewType, boundBatchDoc, pinned)
+    // #934（零落笔看门狗——§6.32.6 触发接线②）：评审族闸位钩子转发（callbacks 不供 `onStall` ⇒
+    // `onStallRound: undefined` ⇒ 环路零行为——同步径（advisor 工具）不供钩子）。
+    const result = await runAdvisorToolLoop(provider, messages, onOutput, signal, agent, advisorCwd, null, reviewType, boundBatchDoc, pinned, {
+      onStallRound: callbacks?.onStall,
+    })
 
     // Host-verified citations (decision d698434): mechanically check every
     // `file:line: content` reference in the review against the CURRENT file

package/advisor/timeline.mjs

@@ -0,0 +1,26 @@
+/**
+ * advisor/timeline.mjs — 评审环路的有序时间线记录器（自 advisor/loop.mjs 迁出——advisor-loop-split 批）：
+ *  记录序 / 同类合流 / 三 kind 包装一体；下游消费 = renderTimeline（compaction.mjs）。
+ *  零 import 叶（对照 agent/relay-prefix.mjs 先例家族）。
+ *
+ *  @param {Function} [onOutput] — 实时 chunk 出口；缺省 ⇒ 只记录不出口。
+ *  @returns {{ timeline: Array, onThink: Function, onText: Function, onTool: Function }}
+ */
+export function createTimelineRecorder(onOutput) {
+  // Kind-tagged wrappers: the TUI panel colors reasoning / answer / tool progress differently.
+  // Every chunk is ALSO recorded into an ordered timeline — the persisted record
+  // must show the review process (thinking ↔ tool progress ↔ final text) at its
+  // real positions, not a summary appended at the end. Same-kind consecutive
+  // chunks merge (token streams); kind flips start a new entry.
+  const timeline = []
+  const record = (kind, text) => {
+    const last = timeline.at(-1)
+    if (last && last.kind === kind) last.text += text
+    else timeline.push({ kind, text })
+  }
+  const emit = (kind) => (text) => { record(kind, text); onOutput?.({ kind, text }) }
+  const onThink = emit("think")
+  const onText = emit("text")
+  const onTool = emit("tool")
+  return { timeline, onThink, onText, onTool }
+}

package/advisor.mjs

@@ -124,7 +124,9 @@ export function buildAdvisorSystemPrompt(agent, prior, reviewType) {
  * NOTE: the caller (prepareAdvisorMessages) applies escapeLiteralEscapes to
  * the return value — direct callers must do the same (the prior table and
  * agent response can quote literal "\x"/"\u" sequences).
- * @param {Object} agent — the parent agent (history used for the response table)
+ * @param {Object} agent — the parent agent (history used for the response table:
+ *   scanned forward from `agent._advisorResponseAnchor` — this instance's delivery
+ *   watermark; absent → legacy backward scan)
  * @param {Object|null} prior — prior issue table (extracted from history when null)
  * @param {string[]|null} [scopeFiles] — review surface for the no-response fallback (cwd-relative)
  * @param {Object|null} [object] — review-object declaration (AGENT-LOOP-ASYNC-POOL.md §6.18): mechanically
@@ -156,7 +158,7 @@ export function buildAdvisorFollowUp(agent, prior, scopeFiles = null, object = n
   const noResponseFallback = scopeFiles?.length
     ? "(Agent did not provide a response table — perform a fresh review of: " + scopeFiles.slice(0, 10).join(", ") + ")"
     : "(Agent did not provide a response table — perform a fresh full review; the review surface is unknown, ask the user for the file list)"
-  const response = extractAgentResponseTable(agent.history) || noResponseFallback
+  const response = extractAgentResponseTable(agent.history, agent._advisorResponseAnchor ?? undefined) || noResponseFallback
   const round = (agent._advisorRound || 0) + 1
   // Review-object declaration FIRST (T-OA2 — round 2+ stays anchored, no re-archaeology).
   const declaration = buildObjectDeclarationBlock(object)

package/agent/completion.mjs

@@ -28,10 +28,12 @@ const MAX_EMPTY_RETRIES = 2
  * @param {object} callbacks - { onTurnEnd, onSubTurnBreak }
  */
 export function handleCompletion(agent, response, depth, turn, guardPushbacks, honestReminderInjected, advisorPushbacks, callbacks) {
-  if (!response.content) {
+  if (String(response.content ?? "").trim() === "") {
     // Transient empty response (reasoning exhausted / output truncated): instead of
     // aborting the whole turn, inject a reminder and let the model respond again.
     // Bounded — after MAX_EMPTY_RETRIES consecutive empties, surface the original error.
+    // §6.31.8 F-DA6（#929 同族 · 批 digest-accounting）：空判加宽为**空白判**（纯空白内容
+    // 原过判 truthy ⇒ 静默当正常收尾）；既有重试（≤2）/ 抛错骨架零改。
     const retries = agent._emptyRetries ?? 0
     if (retries < MAX_EMPTY_RETRIES) {
       agent._emptyRetries = retries + 1

package/agent/digest-account.mjs

@@ -0,0 +1,188 @@
+/**
+ * agent/digest-account.mjs — 消化账务单件（AGENT-LOOP-ASYNC-POOL.md §6.31 · 批 digest-accounting ·
+ * 台账 #930）：投递 ≠ 销账——报告不许无声消失。
+ *
+ * 三角色（§6.31.2）：**投递**（注入但留容器）∥ **见账**（消化轮收尾逐条机检账目覆盖）∥
+ * **销账**（覆盖才离容器 + 释放 report）。本档承载：常量（`DA_RETRY_LIMIT`）/ 回合分类
+ * （`isDigestRound`）/ 投递门控（`shouldDeliverEntry`）/ 账目合同（`coversDigestId` 解析 ∥
+ * `digestAccountRequirement` 要求行）/ 见账 pass（`accountDigestRound`——销账 ∥ 重投标记 ∥
+ * 升级）/ 读面（`unsettledRows` · `unsettledRow` · `unsettledCount`）/ 落痕清位 ∕ 取件助手
+ * （`armAccountRound` · `harvestAccountOutput`）。
+ *
+ * 载体（§6.31.2）：`_daSession`（会话标记——挂起会话置 / 复位，`agent/suspension.mjs`）与
+ * `_unsettledDigests`（升级账本——经 `async-settle.mjs` 写助手）；账目态挂条目字段
+ * （`_daDelivered` / `_daRetry` / `_daFailures`）。**fallback 面**（无 `_daSession`——headless /
+ * 直连 `runAgent`）零账目动作（不销账 / 不重投 / 不升级）：缺省条逐字沿用取尽语义（先离容后注入）；
+ * 已投递未销账条同判据跳过且留容器（§6.31 出口缝② · 父侧裁定 2026-10-05）。
+ *
+ * 边界（§6.31.12）：不做处理质量机检（只保「不许无声」）；升级账本无 TTL（会话期面——
+ * 中止清、idle 存续）。
+ */
+import { logEvent } from "../log.mjs"
+import { pushReal } from "../context.mjs"
+import { carrierField, releaseSettledEntry, appendUnsettledDigest } from "../agent-tools/async-settle.mjs"
+import { DIGEST_ACCOUNT_DOMAIN } from "./helpers.mjs"
+
+/** 同条重投上限（§6.31.5 KD-DA4）：重投 ≤ DA_RETRY_LIMIT ⇒ 总投递 ≤ 3 次；超限 ⇒ 升级。 */
+export const DA_RETRY_LIMIT = 2
+
+/**
+ * 回合分类单点（§6.31.2）：账目只属**消化轮**（autoTurn ∧ 非上行唤醒轮 ∧ 非 timer 轮）——
+ * timer / 上行轮投递不销账、不重投（其账目在后续消化轮）。
+ */
+export function isDigestRound(opts) {
+  return opts?.autoTurn === true && opts?.upstreamTurn !== true && opts?.timerTurn !== true
+}
+
+/**
+ * 投递门控（§6.31.4 单点谓词）：
+ * - `!_daDelivered` ⇒ 投（首次投递——任意回合，沿既有「user + auto」面）；
+ * - `_daRetry` ∧ 本回合 = 消化轮 ⇒ 投（重投经消化轮回路）；
+ * - 其余 ⇒ 跳过（防重复注入）。
+ */
+export function shouldDeliverEntry(entry, digestRound) {
+  if (entry?._daDelivered !== true) return true
+  return entry._daRetry === true && digestRound === true
+}
+
+/** 账目要求行（§6.31.3）：核常量（helpers.mjs）+ 未销账 id 清单动态拼（`<ids>` 占位替换）。 */
+export function digestAccountRequirement(ids) {
+  return DIGEST_ACCOUNT_DOMAIN.replace("<ids>", ids.map((id) => `#${id}`).join(", "))
+}
+
+/**
+ * 账目覆盖机检（§6.31.3）：输出文本内**存在一行**同时含标记 `[digest-ack` 与 `#<id>`
+ * （id 词界 = 后随非数字）⇒ 该条覆盖；disposition / 要点 / 原因**不参与机检**。
+ * 无标记 / 无 id / 部分覆盖各按本条判（零工具轮可满足——纯文本判据）。
+ * 注：行内扫**全部**出现位（长 id 首现不吻合不弃行——如 id=1 行内先见 `#12` 后见 `#1`）。
+ */
+export function coversDigestId(output, id) {
+  const key = `#${id}`
+  for (const line of String(output ?? "").split(/\r?\n/)) {
+    const marker = line.indexOf("[digest-ack")
+    if (marker < 0) continue
+    for (let from = marker; ;) {
+      const at = line.indexOf(key, from)
+      if (at < 0) break
+      const after = line[at + key.length]
+      if (after === undefined || !/[0-9]/.test(after)) return true
+      from = at + 1 // 词界不吻合 ⇒ 续扫下一出现位（同长 id 前缀不吞后随正例）
+    }
+  }
+  return false
+}
+
+/**
+ * 见账 pass（§6.31.5——消化轮收尾 `finalizeAgentTurn` 单点调用；调用方已判 `isDigestRound ∧
+ * `_daSession` ∧ 非会话停止径）：
+ * - 投递账 = pending ∩ `_daDelivered`；覆盖 ⇒ 离容器（splice）+ `releaseSettledEntry`（含 report 释放）；
+ * - 未覆盖 ⇒ `_daFailures += 1`；≤ `DA_RETRY_LIMIT` ⇒ `_daRetry = true`（下轮重投）；超限 ⇒ **升级**
+ *   （离容器 + 入 `_unsettledDigests` + 恰一条提醒（pushReal）+ 恰一条 `ev:unsettled`）。
+ * 缺痕（output == null——抛错 / 撞帽 / 未收口）⇒ 全条未覆盖（安全方向——假阴可重投；假阳是事故本相）。
+ */
+export function accountDigestRound(carrier) {
+  const pending = carrierField(carrier, "_pendingAsyncResults")
+  if (!Array.isArray(pending)) return { covered: 0, retried: 0, unsettled: 0 }
+  const output = harvestAccountOutput(carrier)
+  const covered = []
+  const retried = []
+  const upgraded = []
+  for (const entry of [...pending]) {
+    if (entry?._daDelivered !== true) continue
+    if (output != null && coversDigestId(output, entry.id)) { covered.push(entry); continue }
+    entry._daFailures = (entry._daFailures ?? 0) + 1
+    if (entry._daFailures <= DA_RETRY_LIMIT) { entry._daRetry = true; retried.push(entry) }
+    else upgraded.push(entry)
+  }
+  for (const entry of covered) {
+    const i = pending.indexOf(entry)
+    if (i >= 0) pending.splice(i, 1)
+    releaseSettledEntry(entry)
+  }
+  for (const entry of upgraded) {
+    const i = pending.indexOf(entry)
+    if (i >= 0) pending.splice(i, 1)
+    appendUnsettledDigest(carrier, {
+      id: String(entry.id),
+      role: entry.role ?? "subagent",
+      failures: entry._daFailures,
+      report: entry.report ?? null,
+      at: Date.now(),
+    })
+  }
+  // 升级：恰一条提醒（机器线 + 人读线——`pushReal`）+ 恰一条留痕（同点；字段单源 = LOGGING.md §6.2）。
+  // 注：`ids` 以 join 串落盘——`logEvent` 只收标量（数组字段会被静默丢弃——先例 `ev:discarded`）。
+  if (upgraded.length > 0) {
+    const ids = upgraded.map((entry) => String(entry.id))
+    pushReal(carrier, { role: "user", content: unsettledReminder(upgraded.length, ids) })
+    logEvent("ev:unsettled", { n: upgraded.length, ids: ids.join(", ") })
+  }
+  return { covered: covered.length, retried: retried.length, unsettled: upgraded.length }
+}
+
+/** 升级提醒行（§6.31.5——逐字 = 父侧定稿：含 n / 轮数（= 重投上限 + 1）/ id 清单与接手指引）。 */
+export function unsettledReminder(n, ids) {
+  return `[System reminder: ${n} background report(s) were delivered but never accounted after ${DA_RETRY_LIMIT + 1} digest rounds — automatic re-delivery has stopped and they are marked UNSETTLED: ${ids.map((id) => `#${id}`).join(", ")}. Their content was delivered in this conversation; process them there or re-spawn the work. Readable via subagent action:'status'.]`
+}
+
+/**
+ * 读面（§6.31.6——status 段 ∥ 端面残余行共用单点）：行 = `{ id, role, state, attempts }`；
+ * state ∈ `awaiting-digest`（在途未投递 ∥ 已投递未判）/ `retrying`（判过未覆盖）/
+ * `unsettled`（已升级——随携 `preview` ≤400 字符）。
+ */
+export function unsettledRows(carrier) {
+  const rows = []
+  const pending = carrierField(carrier, "_pendingAsyncResults")
+  for (const entry of Array.isArray(pending) ? pending : []) {
+    const failures = entry?._daFailures ?? 0
+    rows.push({
+      id: String(entry.id),
+      role: entry.role ?? "subagent",
+      state: failures > 0 ? "retrying" : "awaiting-digest",
+      attempts: failures,
+    })
+  }
+  const ledger = carrierField(carrier, "_unsettledDigests")
+  for (const u of Array.isArray(ledger) ? ledger : []) {
+    rows.push({
+      id: String(u.id),
+      role: u.role ?? "subagent",
+      state: "unsettled",
+      attempts: u.failures ?? 0,
+      preview: String(u.report ?? "").slice(0, 400),
+    })
+  }
+  return rows
+}
+
+/** 单查 id 同解析（§6.31.6 单查序第三 / 四站）：命中 pending / 升级账本 ⇒ 行形同上；未命中 ⇒ null。 */
+export function unsettledRow(carrier, id) {
+  const key = String(id)
+  return unsettledRows(carrier).find((row) => row.id === key) ?? null
+}
+
+/** 端面残余行判据（§6.31.6）：pending 中 `_daFailures > 0` 条数（升级条已离容器——由升级提醒承载）。 */
+export function unsettledCount(carrier) {
+  const pending = carrierField(carrier, "_pendingAsyncResults")
+  let n = 0
+  for (const entry of Array.isArray(pending) ? pending : []) if ((entry?._daFailures ?? 0) > 0) n += 1
+  return n
+}
+
+/** 落痕清位（§6.31.5——`run-start.mjs` 会话态起跑即清；fallback 零动作）：父字段 ∥ history 双清。
+ *  注：核内写点落**父字段**（`turn-loop.mjs` 的 `agent._lastRunOutput`——逐轮追加，本批 #939
+ *  收正；抗 `history` 整体替换——`context.mjs` `applyCompression`）；`history` 级为兼容读形
+ *  （`harvestAccountOutput` 回退分支）——该痕不属跨 run 字段集，§6.31.5 边界句。 */
+export function armAccountRound(carrier) {
+  if (!carrier || typeof carrier !== "object") return
+  carrier._lastRunOutput = null
+  if (carrier.history && typeof carrier.history === "object") carrier.history._lastRunOutput = null
+}
+
+/** 落痕取件（§6.31.5——载体吸收读：父字段优先 / 回退 `history`）；读值 = 本 run 多轮累积文本（#939）；
+ *  缺痕（本 run 零输出落痕——零模型轮 / 起跑即断）⇒ null。 */
+export function harvestAccountOutput(carrier) {
+  const own = carrier?._lastRunOutput
+  if (own !== undefined && own !== null) return own
+  return carrier?.history?._lastRunOutput ?? null
+}