cx-viewer 1.0.3 → 1.0.4

package/src/utils/pinnedMenu.js

@@ -0,0 +1,55 @@
+// 汉堡菜单「钉住 → 快捷方式」的全局持久化（localStorage，跨项目共享）。
+// 纯函数：parse / serialize / toggle；localStorage I/O 留在组件侧（AppHeader）。
+// 存储值是一个菜单 key 字符串数组，顺序即用户钉住（pin）的先后顺序。
+
+export const PINNED_KEY = 'cxv_pinnedMenuKeys';
+
+// 解析 localStorage 原始字符串 → string[]。
+// 任何异常（null / 非 JSON / 非数组）一律降级为 []，并过滤掉非字符串元素 + 去重。
+export function parsePinned(raw) {
+  if (typeof raw !== 'string' || raw === '') return [];
+  let arr;
+  try {
+    arr = JSON.parse(raw);
+  } catch {
+    return [];
+  }
+  if (!Array.isArray(arr)) return [];
+  const seen = new Set();
+  const out = [];
+  for (const item of arr) {
+    if (typeof item !== 'string' || item === '') continue;
+    if (seen.has(item)) continue;
+    seen.add(item);
+    out.push(item);
+  }
+  return out;
+}
+
+// 序列化 string[] → 可写入 localStorage 的字符串。
+export function serializePinned(arr) {
+  return JSON.stringify(Array.isArray(arr) ? arr : []);
+}
+
+// 切换某个 key 的钉住状态：已存在则移除，不存在则追加到末尾（保持插入顺序）。
+// 返回新数组（不修改入参）；顺带去重。
+export function togglePinned(arr, key) {
+  const list = parsePinnedArray(arr);
+  if (typeof key !== 'string' || key === '') return list;
+  if (list.includes(key)) return list.filter(k => k !== key);
+  return [...list, key];
+}
+
+// 内部：把任意入参规整成「去重的字符串数组」，避免脏数据传播。
+function parsePinnedArray(arr) {
+  if (!Array.isArray(arr)) return [];
+  const seen = new Set();
+  const out = [];
+  for (const item of arr) {
+    if (typeof item !== 'string' || item === '') continue;
+    if (seen.has(item)) continue;
+    seen.add(item);
+    out.push(item);
+  }
+  return out;
+}

package/src/utils/presetShortcuts.js

@@ -0,0 +1,14 @@
+// 把 preset shortcut items 序列化为 onUpdatePreferences 的 API payload。
+// dismissed 是 Set；为 undefined 时不写入 payload，避免覆盖服务端已有值。
+export function buildPresetShortcutsPayload(items, dismissed) {
+  const payload = {
+    presetShortcuts: items.map(i => {
+      const o = { teamName: i.teamName, description: i.description };
+      if (i.builtinId) o.builtinId = i.builtinId;
+      if (i.modified) o.modified = true;
+      return o;
+    }),
+  };
+  if (dismissed) payload.dismissedBuiltinPresets = [...dismissed];
+  return payload;
+}

package/src/utils/projectAlias.js

@@ -0,0 +1,135 @@
+// Per-project alias persistence.
+//
+// User-facing UI:
+//   header「当前项目 cx-viewer」 hover → pencil icon → modal → input → save
+//
+// Effects when set:
+//   - document.title overrides projectName (handled by AppBase._applyDocTitle)
+//   - header / mobile ctx label append " (alias)" after projectName
+//
+// Storage: localStorage, keyed by projectName. Stale aliases for projects no
+// longer present are harmless (inert until matched projectName reappears).
+//
+// Cross-tab sync: native `storage` event fires in OTHER tabs only. Same-tab
+// updates need explicit pubsub — we expose an EventTarget so AppHeader / Mobile
+// / AppBase pick up local mutations without a full reload.
+
+// Key prefix mirrors existing `cxv_` convention (cf. cxv_themeColor / cxv_viewMode).
+// Known limitation: keyed by projectName basename (not full path; cf. interceptor.js _projectName),
+// so two projects sharing a basename (~/work/cx-viewer + ~/tmp/cx-viewer) collide on one alias.
+// Accepted for v1; real fix would key on a full-path hash (server must also send projectPath).
+const KEY_PREFIX = 'cxv_projectAlias_';
+const MAX_LEN = 32; // taskbar typically truncates 30-50; 32 is the realistic cap.
+
+// Same-tab pubsub channel. EventTarget is native everywhere we ship (Electron,
+// modern web) — no library, no leaked listeners on module reload.
+// Event payload: { detail: { projectName, alias } }
+let _bus = typeof EventTarget !== 'undefined' ? new EventTarget() : null;
+const EVT_CHANGE = 'change';
+
+function _keyFor(projectName) {
+  if (!projectName || typeof projectName !== 'string') return null;
+  return `${KEY_PREFIX}${projectName}`;
+}
+
+// Normalise user input. Strips:
+//   - C0/C1 control characters U+0000-U+001F, U+007F-U+009F (render as garbage / NUL)
+//   - Standard whitespace controls (\r \n \t are within C0)
+//   - Unicode line/paragraph separators
+//   - BiDi overrides ‪-‮ and ⁦-⁩ — a paste containing
+//     RIGHT-TO-LEFT-OVERRIDE flips surrounding chrome text direction tab-wide.
+//     No current exploit but trivial to block (review P1-A).
+// Stripped sequences collapse to a single space, then trim + truncate to MAX_LEN.
+// Empty result → caller treats as "clear".
+export function normalizeAlias(raw) {
+  if (typeof raw !== 'string') return '';
+  return raw
+    .replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029\u202a-\u202e\u2066-\u2069]+/g, ' ')
+    .trim()
+    .slice(0, MAX_LEN);
+}
+
+export function getProjectAlias(projectName) {
+  const key = _keyFor(projectName);
+  if (!key) return '';
+  try {
+    const v = localStorage.getItem(key);
+    return typeof v === 'string' ? v : '';
+  } catch { return ''; }
+}
+
+// Returns true on success, false on failure (quota / private mode / disabled).
+// Normalisation happens here so callers (Modal save handler / migrations) can't
+// store malformed values. Empty after normalisation → clearProjectAlias path.
+export function setProjectAlias(projectName, raw) {
+  const key = _keyFor(projectName);
+  if (!key) return false;
+  const value = normalizeAlias(raw);
+  try {
+    if (value === '') {
+      localStorage.removeItem(key);
+    } else {
+      localStorage.setItem(key, value);
+    }
+    _emitChange(projectName, value);
+    return true;
+  } catch { return false; }
+}
+
+export function clearProjectAlias(projectName) {
+  const key = _keyFor(projectName);
+  if (!key) return false;
+  try {
+    localStorage.removeItem(key);
+    _emitChange(projectName, '');
+    return true;
+  } catch { return false; }
+}
+
+function _emitChange(projectName, alias) {
+  if (!_bus) return;
+  try {
+    _bus.dispatchEvent(new CustomEvent(EVT_CHANGE, { detail: { projectName, alias } }));
+  } catch {
+    // Subscriber threw — swallowed so the localStorage write isn't undone.
+    // dispatchEvent itself can also fail in some environments where CustomEvent
+    // isn't a real constructor; both cases are non-fatal for persistence.
+  }
+}
+
+// Subscribe to alias changes for a specific project — fires for both
+// same-tab updates (via internal EventTarget) and cross-tab updates
+// (via window 'storage' event).
+//   onChange(alias) — called with the new alias string ('' = cleared).
+// Returns an unsubscribe function.
+export function subscribeToAlias(projectName, onChange) {
+  if (!projectName || typeof onChange !== 'function') return () => {};
+  const targetKey = _keyFor(projectName);
+
+  const sameTabHandler = (e) => {
+    if (e?.detail?.projectName === projectName) onChange(e.detail.alias || '');
+  };
+  const crossTabHandler = (e) => {
+    if (e?.key === targetKey) onChange(e.newValue || '');
+  };
+
+  if (_bus) _bus.addEventListener(EVT_CHANGE, sameTabHandler);
+  if (typeof window !== 'undefined') window.addEventListener('storage', crossTabHandler);
+
+  return () => {
+    if (_bus) _bus.removeEventListener(EVT_CHANGE, sameTabHandler);
+    if (typeof window !== 'undefined') window.removeEventListener('storage', crossTabHandler);
+  };
+}
+
+// Test-only: replaces the internal EventTarget bus so a test run starts with
+// no leftover listeners from prior test files. Also useful in dev for HMR
+// recovery (review P1-C). Never call from production code — listeners on the
+// old bus stop receiving updates.
+export function __resetBusForTest() {
+  _bus = typeof EventTarget !== 'undefined' ? new EventTarget() : null;
+}
+
+// Exported for tests — lets unit tests assert key shape without poking at
+// localStorage internals.
+export const _internals = { KEY_PREFIX, MAX_LEN, _keyFor };

package/src/utils/promptClassifier.js

@@ -0,0 +1,111 @@
+/**
+ * Prompt classification utilities for PTY prompt detection.
+ * Shared by ChatView.jsx and ChatMessage.jsx.
+ *
+ * NOTE: test/permission-detect.test.js 直接 import 本模块的真实现（不再内嵌副本），
+ * 修改本文件后跑该测试即可验证行为。
+ */
+
+export function isPlanApprovalPrompt(prompt) {
+  if (!prompt || !prompt.question) return false;
+  const q = prompt.question.toLowerCase();
+  // 文本判定：question 含 "plan" + (approv/proceed/accept)
+  if (/plan/i.test(q) && (/approv/i.test(q) || /proceed/i.test(q) || /accept/i.test(q))) {
+    return true;
+  }
+  // Options 模式兜底：Codex CLI plan inquirer prompt 不一定带 "plan" 关键字
+  // （如 "Would you like to proceed?"），但典型有 3 选项 = Approve / Approve with edits / Reject。
+  // 通过这个模式识别，保证 cliMode 下 plan modal 能弹出。
+  // 与 isDangerousOperationPrompt 的 2 选项 allow/deny 兜底正交（dangerous L15 早退避免冲突）。
+  if (Array.isArray(prompt.options) && prompt.options.length === 3) {
+    const texts = prompt.options.map(o => (o.text || '').toLowerCase());
+    const hasApprove = texts.some(t => /\bapprov/i.test(t));
+    const hasEdit = texts.some(t => /\bedits?\b|\bmodify/i.test(t));
+    const hasReject = texts.some(t => /\breject\b|\bdeny\b|keep planning|\bno,/i.test(t));
+    if (hasApprove && hasEdit && hasReject) return true;
+  }
+  return false;
+}
+
+/**
+ * Pick the option number that APPROVES a plan, for auto-approval.
+ * Mirrors the approve-button heuristic in ChatMessage's plan approval renderer:
+ * the first option whose text matches /yes|approve|accept|proceed/i AND is NOT a
+ * feedback/edit option (those open a textarea on manual click, so auto-submitting them
+ * would be wrong); otherwise the first option; otherwise 1 (the CLI default "approve").
+ * Never returns a reject or feedback option when a plain approve option exists.
+ *
+ * @param {Array<{number:number,text?:string}>} options - plan prompt options
+ * @returns {number} the option number to send for approval
+ */
+export function pickPlanApproveOptionNumber(options) {
+  if (!Array.isArray(options) || options.length === 0) return 1;
+  const approve = options.find(o => {
+    const text = (o && o.text) || '';
+    return /yes|approve|accept|proceed/i.test(text) && !/type|tell|change|feedback|edit/i.test(text);
+  });
+  if (approve && typeof approve.number === 'number') return approve.number;
+  const first = options[0];
+  return (first && typeof first.number === 'number') ? first.number : 1;
+}
+
+export function isDangerousOperationPrompt(prompt) {
+  if (!prompt || !prompt.question) return false;
+  const q = prompt.question;
+  if (isPlanApprovalPrompt(prompt)) return false;
+  // Match Codex permission prompt patterns:
+  // - "Do you want to make this edit" / "Do you want to write" / "Do you want to proceed"
+  // - "Allow X to Y" / "Want to allow" / "wants to (execute|run|...)"
+  // - "May Codex read/write/execute..." / "grant access/permission" / "permit"
+  if (/do you want to (make this edit|write|proceed|create|delete)|allow\b.*\bto\b|want to allow|wants to (execute|run|read|write|access|create|delete|modify|use)|may .*(read|write|execute|run|access|create|delete|modify)|grant .*(access|permission)|permit/i.test(q)) {
+    return true;
+  }
+  // Also detect by options: if options contain both Allow/Yes and Deny/No keywords
+  if (prompt.options && prompt.options.length >= 2) {
+    const texts = prompt.options.map(o => (o.text || '').toLowerCase());
+    const hasAllow = texts.some(t => /^allow|^yes/i.test(t));
+    const hasDeny = texts.some(t => /^no$|^no[^a-z]|^deny|^reject/i.test(t));
+    if (hasAllow && hasDeny) return true;
+  }
+  return false;
+}
+
+/**
+ * Parse tool name and input from the PTY buffer surrounding a detected prompt.
+ * Used to populate ToolApprovalPanel for subAgent permission prompts that bypass hooks.
+ *
+ * @param {string} buf - ANSI-stripped PTY buffer (up to 4KB)
+ * @param {string} question - Detected prompt question text
+ * @param {Array} options - Detected prompt options [{text, number, selected}]
+ * @returns {{ toolName: string, input: object }}
+ */
+export function parseToolInfoFromBuffer(buf, question, options) {
+  const q = (question || '').toLowerCase();
+  const optTexts = (options || []).map(o => o.text || '').join(' ').toLowerCase();
+
+  // 1. shell_command: buffer contains "Run shell command"
+  if (/run shell command/i.test(buf)) {
+    const cmdMatch = buf.match(/Run shell command\s*\n\s*\n((?:\s{4,}.+\n?)+)/i);
+    const cmd = cmdMatch ? cmdMatch[1].replace(/^\s{4}/gm, '').trim() : null;
+    return { toolName: 'shell_command', input: cmd ? { command: cmd } : { description: question } };
+  }
+
+  // 2. apply_patch: "make this edit to <path>"
+  const editMatch = q.match(/make this edit to\s+(.+?)\s*\??$/);
+  if (editMatch) return { toolName: 'apply_patch', input: { file_path: editMatch[1], description: question } };
+
+  // 3. apply_patch: "write" + path
+  const writeMatch = q.match(/write (?:this new file|to)\s+(.+?)\s*\??$/);
+  if (writeMatch) return { toolName: 'apply_patch', input: { file_path: writeMatch[1], description: question } };
+  if (/write/i.test(q)) return { toolName: 'apply_patch', input: { description: question } };
+
+  // 4. read_mcp_resource: "read <path>" or options contain "allow reading from <path>"
+  const readMatch = q.match(/read\s+(.+?)\s*\??$/) || optTexts.match(/allow reading from\s+(.+?)(?:\s+from this project)?/);
+  if (readMatch) return { toolName: 'read_mcp_resource', input: { uri: readMatch[1], description: question } };
+
+  // 5. web_search
+  if (/fetch|url|search/i.test(q)) return { toolName: 'web_search', input: { description: question } };
+
+  // 6. Fallback
+  return { toolName: 'Tool', input: { description: question } };
+}

package/src/utils/promptDetect.js

@@ -0,0 +1,196 @@
+/**
+ * promptDetect —— PTY prompt 检测（ChatView._detectPrompt 的提取 + 线性化重写）。
+ *
+ * 为什么存在：旧实现的 Pattern 1/2 多行正则带嵌套量词
+ *   /([^\n]*\?)\s*\n((?:\s*[❯>]?\s*\d+\.\s+[^\n]+\n?){2,})(?:\n[^\d❯>\n][^\n]*|\n)*$/
+ * 中 `\s*` 可吃换行、`[^\n]+` 可吃空格、行内 `\d+\.`（版本号）提供多重切分点，
+ * 失配时回溯组合数按行数指数爆炸——实测 /plugins 菜单形态文本 4 行 84ms、
+ * 6 行 2.2s、8 行 >90s；_ptyBuffer 4KB ≈ 40~80 行 → 单次同步 match 永久占死
+ * 主线程（Windows /plugins 菜单整页卡死的根因）。
+ *
+ * detectPromptInBuffer 用「行式扫描」复刻旧正则语义，可证 O(n·行长)：
+ * 全程只对单行跑 `^...$` 锚定、无嵌套量词的正则。语义对齐要点（以
+ * test/prompt-detect.test.js 的等价回归 fixture 为准绳）：
+ *   - 按 /\r?\n/ 分行：Windows ConPTY 输出 CRLF，行尾 \r 必须在分行时吃掉
+ *     （单行正则的 `.`/`$` 都不容忍 \r，legacy 靠 [^\n] 容忍——此处对齐）；
+ *   - leftmost：与 JS regex 一致，自上而下取第一个结构成立的 question 行；
+ *   - Pattern 1 question 行须以 `?` 结尾（容尾随空白）；选项块=连续编号行，
+ *     块内/块前允许空行；块后所有行须为 trailing（空行或首字符 ∉ {数字,❯,>}）；
+ *   - Pattern 2 question 为任意非空行；选项块成员=两段空白结构
+ *     `\s+[❯>]?\s+内容` 的行（与旧块正则同构，单段空白如 " X" 不是成员）；
+ *     须 ≥2 项且含 ❯/> 选中项；trailing 定义不同（空行或首字符 ∉ {空白,❯,>}）；
+ *     与旧实现一致，结构首次匹配后验证失败即整体放弃（不向后重试）；
+ *   - 输出形状 {question, options:[{number,text,selected}]} 与旧实现逐字段一致。
+ *
+ * The original regex implementation (detectPromptLegacy) and its
+ * cxv_legacy_prompt_detect escape hatch were removed after the linear rewrite
+ * (first shipped in 1.6.308) proved stable in the field; its behavior is
+ * pinned by the golden-master corpus in test/prompt-detect.test.js.
+ *
+ * 纯 JS、无浏览器全局依赖（node:test 可直接 import）。
+ */
+import { now } from './monotime.js';
+
+// 与 ChatView._stripAnsi 同源（4 个正则均线性安全）。单一实现：ChatView 与
+// test/permission-detect.test.js 均从这里 import，消除多份拷贝漂移。
+export function stripAnsi(str) {
+  // Remove CSI sequences (ESC [ ... final byte), OSC sequences (ESC ] ... ST), and other escape sequences
+  return str
+    .replace(/\x1b\[[?0-9;]*[A-Za-z]/g, '')
+    .replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g, '')
+    .replace(/\x1b[^[\]](.|$)/g, '')
+    .replace(/[\x00-\x08\x0b\x0c\x0e-\x1f]/g, '');
+}
+
+// 跨 write 撕裂防护：把 data 切成 [可安全 strip 的前段, 尾部未终结的 CSI/OSC 半截]。
+// ANSI 序列被 PTY 分片切断时（"\x1b[3" | "6m…"）按单次 write strip 会让两半都剥不掉、
+// 残字污染 buffer 致漏检；调用方把 carry 缓带到下一片拼接后再 strip。
+// maxCarry 上限防畸形流（如 OSC 永不终结）让 carry 无限囤积——超限放弃缓带按原样剥。
+export function splitTrailingAnsiCarry(data, maxCarry = 512) {
+  const m = data.match(/\x1b(?:\[[?0-9;]*|\][^\x07\x1b]*)?$/);
+  if (m && m[0].length < maxCarry) return [data.slice(0, m.index), m[0]];
+  return [data, ''];
+}
+
+// false-positive 过滤（从 ChatView 平移，单行正则、线性）。返回 true = 应忽略。
+export function isFalsePositiveQuestion(question) {
+  // 形如文件/目录路径或状态栏输出
+  if (/^[■\s]*[~\/.:]/.test(question) && /\//.test(question)) return true;
+  // Codex 计时/状态输出（如 "*Crunchedfor2m18s"）
+  if (/^[*■✦⏎]/.test(question)) return true;
+  return false;
+}
+
+// ── 单行判定正则（均 ^...$ 锚定、无嵌套量词，单行长度有界 → 线性）──
+// Pattern 1 选项行：可缩进 + 可选 ❯/> 光标 + 编号 + ". " + 文本
+const P1_OPTION_RE = /^\s*([❯>])?\s*(\d+)\.\s+(.+)$/;
+// Pattern 2 块成员准入：与 legacy 块正则 \s+[❯>]?\s+[^\n]+ 同构——
+// ≥1 空白 + 可选光标 + ≥1 空白 + ≥1 字符。单段空白行（" X"）不是成员。
+const P2_MEMBER_RE = /^\s+[❯>]?\s+./;
+// Pattern 2 选项行解析（与旧 ChatView 的 per-line 解析一致）
+const P2_OPTION_PARSE_RE = /^\s*([❯>])?\s+(.+)$/;
+// trailing 合法性为「反向」判定：match = 首字符打断 trailing → 该 prompt 不成立。
+// Pattern 1 合法 trailing 行 = 空行或首字符 ∉ {数字,❯,>}
+const P1_TRAILING_BREAK_RE = /^[\d❯>]/;
+// Pattern 2 合法 trailing 行 = 空行或首字符 ∉ {空白,❯,>}
+const P2_TRAILING_BREAK_RE = /^[\s❯>]/;
+
+// overrun 监测阈值：超过仅告警 + 计数（无熔断、无降级——线性实现 4KB 封顶
+// 实践上不会触发，留作 Windows 实机回报的哨兵指标）
+const OVERRUN_MS = 50;
+
+// 诊断统计（termDiag 接线读取；>OVERRUN_MS 计 overrun）
+const _stats = { calls: 0, lastMs: 0, maxMs: 0, overruns: 0 };
+export function getPromptDetectStats() {
+  return { ..._stats };
+}
+
+function parseP1Option(line) {
+  const m = line.match(P1_OPTION_RE);
+  if (!m) return null;
+  return { number: parseInt(m[2], 10), text: m[3].trim(), selected: !!m[1] };
+}
+
+/**
+ * Pattern 1：编号选项 — "Question?\n  ❯ 1. Option A\n    2. Option B"
+ * 允许尾随空行与 hint 行（如 "\n\nEsc to cancel · Tab to amend"）。
+ */
+function detectPattern1(lines) {
+  for (let i = 0; i < lines.length - 1; i++) {
+    const q = lines[i].trimEnd();
+    if (!q.endsWith('?')) continue;
+    // 问句行下方：跳过空行后须紧跟编号选项块（块内允许夹空行）
+    const options = [];
+    let j = i + 1;
+    let lastOptionEnd = j; // 选项块后第一行（trailing 起点）
+    for (; j < lines.length; j++) {
+      const line = lines[j];
+      if (!line.trim()) continue;          // 空行：块前/块内均容忍
+      const opt = parseP1Option(line);
+      if (!opt) break;                     // 非选项非空行：块结束
+      options.push(opt);
+      lastOptionEnd = j + 1;
+    }
+    if (options.length < 2) continue;
+    // 块后全部行须为 trailing（空行或首字符 ∉ {数字,❯,>}），否则该问句不成立
+    let trailingOk = true;
+    for (let k = lastOptionEnd; k < lines.length; k++) {
+      if (P1_TRAILING_BREAK_RE.test(lines[k])) { trailingOk = false; break; }
+    }
+    if (!trailingOk) continue;
+    return { question: q.trim(), options };
+  }
+  return null;
+}
+
+/**
+ * Pattern 2：无编号光标选项（Ink Select）— "Some prompt text\n  ❯ Allow once\n    Deny"
+ * 问句行可不带 "?"；须 ≥2 项且含 ❯/> 选中项。与旧实现一致：结构首次匹配后
+ * 验证（项数/选中）失败即整体放弃，不向后重试。
+ */
+function detectPattern2(lines) {
+  for (let i = 0; i < lines.length - 1; i++) {
+    if (lines[i].length === 0) continue;   // question 须非空行（与旧 [^\n]+ 一致，纯空白行也算）
+    // 块成员：两段空白结构（P2_MEMBER_RE，与 legacy 块正则同构）；块内允许夹空行
+    const memberLines = [];
+    let j = i + 1;
+    let lastOptionEnd = j;
+    for (; j < lines.length; j++) {
+      const line = lines[j];
+      if (!line.trim()) continue;
+      if (!P2_MEMBER_RE.test(line)) break;
+      memberLines.push(line);
+      lastOptionEnd = j + 1;
+    }
+    if (memberLines.length < 2) continue;
+    let trailingOk = true;
+    for (let k = lastOptionEnd; k < lines.length; k++) {
+      if (P2_TRAILING_BREAK_RE.test(lines[k])) { trailingOk = false; break; }
+    }
+    if (!trailingOk) continue;
+    // 结构成立（leftmost）→ 解析验证；失败则与旧实现一致整体放弃
+    const parsed = [];
+    for (const line of memberLines) {
+      const m = line.match(P2_OPTION_PARSE_RE);
+      if (m && m[2].trim()) {
+        parsed.push({ number: parsed.length + 1, text: m[2].trim(), selected: !!m[1] });
+      }
+    }
+    if (parsed.length >= 2 && parsed.some(p => p.selected)) {
+      const question = lines[i].trim();
+      // 纯空白问句行：与旧实现等价——结构成立但 question 为空即整体放弃（不向后重试）
+      if (!question) return null;
+      return { question, options: parsed };
+    }
+    return null;
+  }
+  return null;
+}
+
+/**
+ * 检测 PTY buffer 尾部是否呈现交互式 prompt。
+ * @param {string} buf - ANSI-stripped PTY buffer（≤4KB）
+ * @returns {{question: string, options: Array<{number:number,text:string,selected:boolean}>} | null}
+ *   不含 false-positive 过滤（调用方按需用 isFalsePositiveQuestion，
+ *   ChatView 对「过滤」与「未检出」有不同的 dismiss 语义）。
+ */
+export function detectPromptInBuffer(buf) {
+  const t0 = now();
+  let result = null;
+  const trimmed = (buf || '').trimEnd();
+  if (trimmed) {
+    // /\r?\n/ 分行吃掉 CRLF 行尾的 \r（Windows ConPTY），否则单行正则的
+    // `.`/`$` 均不容忍 \r → 选项行整行失配 → 目标平台全量漏检
+    const lines = trimmed.split(/\r?\n/);
+    result = detectPattern1(lines) || detectPattern2(lines);
+  }
+  const ms = now() - t0;
+  _stats.calls++;
+  _stats.lastMs = ms;
+  if (ms > _stats.maxMs) _stats.maxMs = ms;
+  if (ms > OVERRUN_MS) {
+    _stats.overruns++;
+    try { console.warn(`[cx-viewer] promptDetect overrun: ${ms.toFixed(1)}ms (buf ${trimmed.length}B)`); } catch {}
+  }
+  return result;
+}

package/src/utils/promptNav.js

@@ -0,0 +1,60 @@
+import { getSlashCommandLabel } from './slashCommandLabels.js';
+
+// buildPromptNavItems：从「当前可见项」与权威的 mainAgentSessions 计算用户 Prompt 导航的数据项。
+// 纯函数（无 React/DOM），渲染留在 ChatView——便于单测覆盖会话边界标记、去重与无 ts 容错。
+//
+// @param {Array<{props?:{role?:string,text?:string,timestamp?:string|null}}>} visible 当前渲染项
+// @param {Array<{messages?:Array<{_timestamp?:string}>}>} mainAgentSessions 权威会话数组
+// @returns {Array<{display:string, visibleIdx:number, timestamp:string|null, sessionIdx:number|null, newSession?:boolean}>}
+export function buildPromptNavItems(visible, mainAgentSessions) {
+  if (!Array.isArray(visible) || visible.length === 0) return [];
+
+  // 会话分界：用权威的 mainAgentSessions 把每条 prompt 的 _timestamp 映射到所属 session 序号。
+  // 不依赖主视图的 <Divider>（其在角色过滤时会被滤掉），保证导航里始终能标出会话边界。
+  const sessions = mainAgentSessions || [];
+  const tsToSession = new Map();
+  for (let si = 0; si < sessions.length; si++) {
+    const msgs = sessions[si] && sessions[si].messages;
+    if (!Array.isArray(msgs)) continue;
+    for (const m of msgs) {
+      const ts = m && m._timestamp;
+      if (ts != null && !tsToSession.has(ts)) tsToSession.set(ts, si);
+    }
+  }
+
+  const prompts = [];
+  const seen = new Set();
+  for (let i = 0; i < visible.length; i++) {
+    const props = visible[i] && visible[i].props;
+    if (!props || props.role !== 'user') continue;
+    const raw = props.text || '';
+    if (!raw) continue;
+    // 清理图片标记，只保留文字部分用于导航列表显示
+    const cleaned = raw
+      .replace(/\[Image(?:\s*#\d+)?(?::?\s*source)?:\s*[^\]]+\]/gi, '')
+      .replace(/"\/tmp\/cx-viewer-uploads\/[^"]+"/g, '')
+      .trim();
+    if (!cleaned) continue;
+    // 内置 slash 命令(/theme /clear …)在 nav 列表里也显示本地化标签，与主气泡保持一致；
+    // 未命中白名单的命令/普通文本走原文。
+    const text = getSlashCommandLabel(cleaned) || cleaned;
+    const key = text.substring(0, 100);
+    if (seen.has(key)) continue;
+    seen.add(key);
+    const display = text.length > 80 ? text.substring(0, 80) + '...' : text;
+    // 使用 visible 索引作为定位标识（兼容无 timestamp 的遗留消息）
+    const sessionIdx = (props.timestamp != null && tsToSession.has(props.timestamp))
+      ? tsToSession.get(props.timestamp) : null;
+    prompts.push({ display, visibleIdx: i, timestamp: props.timestamp || null, sessionIdx });
+  }
+
+  // 标记跨 session 的 prompt（其前插入会话分隔线）。session 未知（无 ts）的 prompt 不打断链路。
+  let lastSessionIdx = null;
+  for (const p of prompts) {
+    if (p.sessionIdx == null) continue;
+    if (lastSessionIdx != null && p.sessionIdx !== lastSessionIdx) p.newSession = true;
+    lastSessionIdx = p.sessionIdx;
+  }
+
+  return prompts;
+}