thincoder 0.12.53 → 0.12.54

package/CHANGELOG.md

@@ -1,3 +1,20 @@
+## [0.12.54] — 2026-09-01
+
+### Added
+
+- **Checkpoint 事故恢复闭环（CLI ↔ VS Code 两端）**：git 工具破坏性操作（checkout -- / restore / reset --hard / clean / rebase）前自动快照 + schema 描述含 rewind 恢复指引；`checkpointAction=list` 输出尾部提示行；**commit 后清空该项目 checkpoint**（commit = 安全点；懒兜底覆盖外部 git/IDE commit）；每 cwd 快照上限 100（最旧淘汰）；git 工具补齐 11 个 action（clone/init/rebase/remote/clean/switch/apply/worktree/archive/blame/mv）；`/restore` 改为两级 picker 逐文件恢复；bash guard 保留并对齐（宽匹配 + 全量副本 + rewind 指引，与 VS Code 同构）
+- **TUI 子 agent 运行中面板固定化**：运行中子 agent 活动从会话流内联改为固定底部面板（会话与 todo 之间，不随会话滚动）；完全自适应高度；默认折叠（头部 + tail 3，⏸ = 等待审批）；完成仍冻结进会话流（✓ 头可展开）
+- **TUI 渲染鲁棒性**：wrap-off 硬截断（Ambiguous 宽度字符防软折行污染）；启动/退出序列抽取（tui-lifecycle.mjs）
+
+### Changed
+
+- **跨端会话共享一致性（会诊 4 模型收敛）**：sessionStart 打点（跨端同槽不再 F2 互轮转）；F2 写前磁盘校验（同会话并发追加 → 轮转 .bak 保留）；legacy transient 双端过滤；contextHistory 机读线判定（length>0）；activeModel 双向；cwd 先行校验；newSession 死主清理落盘（deletions）
+- **checkpoint cwdHash 归一化**：`sha1(normalizeCwd(cwd)).slice(0,12)`——CLI/VS Code 快照跨端互通（存量旧路径孤儿化不迁移）
+
+### Fixed
+
+- **hex-escape 毒载荷 400**（deepseek-v4-flash 实测）：发送前统一中和字面 `\\x`/`\\u` 不足位序列（escape.mjs，VS Code 同构）
+
 ## [0.12.52] — 2026-08-31
 ## [0.12.53] — 2026-08-31
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thincoder",
-  "version": "0.12.53",
+  "version": "0.12.54",
   "description": "Thin coding agent - zero dependencies, no build step, Node.js native. Sharp code, zero bloat.",
   "keywords": [
     "ai",

package/src/acp.mjs

@@ -19,28 +19,15 @@ import { assembleAgent } from "./cli/make-agent.mjs"
 import { createAcpServer, ACP_ERRORS } from "./acp/transport.mjs"
 import { createAcpSession } from "./acp/session.mjs"
 import { replayHistory } from "./acp/bridge.mjs"
-import { listSlots, applySession, deleteSlot, sessionPath, normalizeCwd, isLegacyTransient } from "./session.mjs"
+import { listSlots, applySession, deleteSlot, normalizeCwd, loadSlotFile, slotOccupancy, loadManifest, saveManifest, getSessionId, newSession } from "./session.mjs"
 import { createCheckpoint, listCheckpoints, rewind, isGitRepo } from "./git/checkpoint.mjs"
 import { createMemory, list as memList, remove as memRemove } from "./memory.mjs"
 
 const VERSION = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version
 
 /** Load a specific slot file (not the active one) — session/load by id.
- *  Same validation as loadSession: version 1/2, cwd match, legacy-transient
- *  filtering (pre-filtering slot files must not leak machine lines into replay). */
-function loadSlotFile(cwd, slot) {
-  const path = `${sessionPath(cwd)}.${slot}`
-  try {
-    const data = JSON.parse(readFileSync(path, "utf8"))
-    if (data?.version !== 1 && data?.version !== 2) return null
-    if (!Array.isArray(data.history)) return null
-    if (data.cwd && normalizeCwd(data.cwd).toLowerCase() !== normalizeCwd(cwd).toLowerCase()) return null
-    data.history = data.history.filter((m) => !isLegacyTransient(m))
-    return data
-  } catch {
-    return null
-  }
-}
+ *  2026-08-31 会诊 deepseek 🟡：改用 session.mjs 共享 loadSlotFile（校验/保现场/.tmp
+ *  回退与主路径一致）——本地实现此前无 .unreadable/.corrupted 保留。 */
 
 /**
  * Apply a session-level config option to the agent instance (memory only —
@@ -160,6 +147,11 @@ export function buildAcpHandlers({
           const id = String(nextId++)
           const session = await createSession({ id, notify: notifyRef.current, request: requestRef.current, log })
           // `id` is immutable after construction (baked into the callbacks) — never reassign.
+          // 2026-09-01 会诊 kimi/glm 🔴：立即认领独立槽（对齐 cmd-new）——否则首回合保存
+          // 走 _slot ??= activeSlot() → ensureActive 早退分支（slotSessions[active]===
+          // mySessionId 同进程恒真）→ 第二个会话拿到与第一个相同的槽号 → 双写同槽
+          // F2 互旋。getSessionId() 是进程级，_slot 是 agent 级——粒度错配必须在此切断。
+          session.agent._slot = newSession(getCwd())
           sessions.set(id, session)
           return { id, configOptions: [{ configId: "model" }, { configId: "thinking" }, { configId: "mode" }] }
         } catch (e) {
@@ -185,6 +177,7 @@ export function buildAcpHandlers({
       },
 
       "session/cancel": (params) => {
+        if (!authenticated) return { error: ACP_ERRORS.AUTH_REQUIRED } // 2026-08-31 advisor round2 🔵：与其他 handler 一致
         const found = findSession(params)
         if (found.error) return found
         found.session.cancel()
@@ -192,6 +185,7 @@ export function buildAcpHandlers({
       },
 
       "session/close": (params) => {
+        if (!authenticated) return { error: ACP_ERRORS.AUTH_REQUIRED } // 2026-08-31 advisor round2 🔵：与其他 handler 一致
         const found = findSession(params)
         if (!found.error) {
           // Abort any in-flight turn first — the client is gone, the agent must
@@ -233,11 +227,33 @@ export function buildAcpHandlers({
           const id = String(nextId++)
           const session = await createSession({ id, notify: notifyRef.current, request: requestRef.current, log })
           applySession(session.agent, data)
+          // 2026-08-31 advisor round2 🟡：钉 _slot 前查活主——目标槽被另一活进程（CLI/另一
+          // IDE）占用时不得钉回（双方 sessionStart 一致 → F2 永不轮转 → 同槽 last-write-wins
+          // 静默互覆盖）。空闲则认领后钉回；占用则不钉 → 下次保存经 activeSlot 自然 fork
+          // 到新槽（与 switchToSlot 的"占用则 fork"语义对齐）。
+          const occ = slotOccupancy(getCwd(), slot)
+          // 2026-09-01 会诊 kimi/glm 🔴：同进程双会话同槽——slotOccupancy 排除本进程属主后，
+          // 同进程防护完全由 sameProcessPinned 承担：本进程另一 session 已钉该槽即视为占用
+          // （进程级属主无法区分 agent，双方 sessionStart 相同 → F2 永不触发 → 静默互覆盖）。
+          const sameProcessPinned = [...sessions.values()].some((s) => s.agent?._slot === slot)
+          if (!occ.occupied && !sameProcessPinned) {
+            const m = loadManifest(getCwd())
+            m.slotSessions ??= {}
+            m.slotSessions[slot] = getSessionId()
+            saveManifest(getCwd(), m)
+            session.agent._slot = slot
+          } else {
+            // 2026-09-01 advisor 🔴：占用时显式分配全新槽（fork）——原 `_slot = null` 的
+            // fork 会经 saveSession → activeSlot → ensureActive 分支1 早退（slotSessions
+            // [active] === mySessionId 同进程恒真）落回同进程 active 槽 → 两会话写同一槽
+            // 静默互覆盖。newSession 跳过活认领号/现存文件号，必定落到新槽。
+            session.agent._slot = newSession(getCwd())
+          }
           sessions.set(id, session)
           // Replay the human line (role → chunk mapping, design §4.5) so the
           // client renders the restored conversation.
           replayHistory({ sessionId: id, notify: notifyRef.current, history: data.history, log })
-          log(`session ${slot} loaded as session ${id} (${data.history?.length ?? 0} messages replayed)`)
+          log(`session ${slot} loaded as session ${id} (${data.history?.length ?? 0} messages replayed)${occ.occupied || sameProcessPinned ? ` — slot busy, forked to ${session.agent._slot}` : ""}`)
           return { id, cwd: getCwd(), configOptions: [{ configId: "model" }, { configId: "thinking" }, { configId: "mode" }] }
         } catch (e) {
           return { error: { code: ACP_ERRORS.INTERNAL.code, message: `failed to load session ${slot}: ${e.message}` } }
@@ -258,9 +274,25 @@ export function buildAcpHandlers({
           const id = String(nextId++)
           const session = await createSession({ id, notify: notifyRef.current, request: requestRef.current, log })
           applySession(session.agent, data)
+          // 2026-08-31 advisor round2 🟡：同 session/load——活主占用的槽不钉回（防同槽双写，
+          // 下次保存 fork 新槽）；空闲则认领后钉回。
+          const occ = slotOccupancy(getCwd(), slot)
+          // 2026-09-01 会诊 kimi/glm 🔴：同 session/load——同进程其他 session 已钉同槽视为占用 → fork
+          const sameProcessPinned = [...sessions.values()].some((s) => s.agent?._slot === slot)
+          if (!occ.occupied && !sameProcessPinned) {
+            const m = loadManifest(getCwd())
+            m.slotSessions ??= {}
+            m.slotSessions[slot] = getSessionId()
+            saveManifest(getCwd(), m)
+            session.agent._slot = slot
+          } else {
+            // 2026-09-01 advisor 🔴：同 load——显式 newSession fork（_slot=null 的 fork 会
+            // 落回同进程 active 槽 → 两会话写同一槽静默互覆盖）
+            session.agent._slot = newSession(getCwd())
+          }
           sessions.set(id, session)
           // resume: no history replay — the client keeps its own rendering.
-          log(`session ${slot} resumed as session ${id} (no replay)`)
+          log(`session ${slot} resumed as session ${id} (no replay)${occ.occupied || sameProcessPinned ? ` — slot busy, forked to ${session.agent._slot}` : ""}`)
           return { id, cwd: getCwd(), configOptions: [{ configId: "model" }, { configId: "thinking" }, { configId: "mode" }] }
         } catch (e) {
           return { error: { code: ACP_ERRORS.INTERNAL.code, message: `failed to resume session ${slot}: ${e.message}` } }
@@ -278,6 +310,16 @@ export function buildAcpHandlers({
         if (!deleteSlot(getCwd(), slot)) {
           return { error: { ...ACP_ERRORS.INVALID_PARAMS, message: `session ${slot} not found` } }
         }
+        // 2026-08-31 会诊 deepseek 🟡：被删槽的在存会话 _slot 仍钉着 → 下次保存会重建
+        // 文件并重注册（删后复活）。清空其 _slot，下次保存重新认领新槽。
+        // 2026-09-01 advisor round2 🔴：不能清 _slot 等下次保存——saveSession 走
+        // activeSlot → ensureActive 分支1 早退（slotSessions[active] === mySessionId 同
+        // 进程恒真）→ 落回同进程 active 槽（另一在存会话的槽）→ 两会话写同一槽静默
+        // 互覆盖（sessionStart 均 null → F2 永不轮转）。与 load/resume 同型修复：
+        // 立即 newSession 钉全新槽（跳过活认领号/现存文件号）。
+        for (const s of sessions.values()) {
+          if (s.agent?._slot === slot) s.agent._slot = newSession(getCwd())
+        }
         log(`session ${slot} archive deleted`)
         return {}
       },

package/src/agent/setup.mjs

@@ -148,7 +148,8 @@ export async function prepareRun(agent, input, callbacks, {
     pushReal(agent, { role: "user", content: input })
   }
   // Time grounding for EVERY agent depth AND every resume, pushed LAST (after the user
-  // input): transient, dropped on persist, fresh at every run start — including resumes
+  // input): transient on the HUMAN line — dropped on persist; on the MACHINE line — kept
+  // (byte-identical resume for the provider prefix cache, 2026-08-16), fresh at every run start
   // (an interrupt-continuation must know NOW, not the pre-interrupt time; 2026-08-16).
   // Tail position keeps the second-precision content out of any prefix — caches stay hit.
   agent.history.push({

package/src/escape.mjs

@@ -10,7 +10,10 @@
  * 一个字节/码点）。JSON.stringify 层面的反斜杠转义由发送方负责，本模块不碰。
  */
 
-/** 中和单段文本里的非法字面转义序列。 */
+/** 中和单段文本里的非法字面转义序列。
+ *  Known limitation (documented, accepted, VS Code port parity): an ODD backslash
+ *  run of 3+ (e.g. "\\\x") leaves the trailing "\x" un-doubled — vanishingly rare
+ *  in real conversation text (no such hit in the 2026-08-31 repro session). */
 export function escapeLiteralEscapes(text) {
   text = String(text ?? "")
   return text
@@ -20,14 +23,21 @@ export function escapeLiteralEscapes(text) {
     .replace(/(?<!\\)\\(u)(?![0-9a-fA-F]{4})/g, "\\\\$1")
 }
 
-/** 对单条消息的 content 应用 escapeLiteralEscapes（支持字符串或 OpenAI 多模态 part 数组）。 */
+/** 对单条消息的 content 应用 escapeLiteralEscapes（支持字符串或 OpenAI 多模态 part 数组）。
+ *  2026-08-31 会诊 F5：deepseek-v4-flash 网关对 tool_calls[].function.arguments 与
+ *  reasoning_content 做同样的非标二次转义解析（字面 \x/\u 经工具参数/思考回传 → 400，
+ *  列号确定性复现 = 毒序列在 content 之外）——这两个字符串字段同样需要中和。 */
 export function escapeMessageContent(message) {
   const content = message?.content
+  let changed = false
+  let next = message
   if (typeof content === "string") {
-    return { ...message, content: escapeLiteralEscapes(content) }
-  }
-  if (Array.isArray(content)) {
-    let changed = false
+    const escaped = escapeLiteralEscapes(content)
+    if (escaped !== content) {
+      next = { ...next, content: escaped }
+      changed = true
+    }
+  } else if (Array.isArray(content)) {
     const parts = content.map((p) => {
       if (p && typeof p === "object" && p.type === "text" && typeof p.text === "string") {
         const escaped = escapeLiteralEscapes(p.text)
@@ -38,9 +48,34 @@ export function escapeMessageContent(message) {
       }
       return p
     })
-    return changed ? { ...message, content: parts } : message
+    if (changed) next = { ...next, content: parts }
+  }
+  if (Array.isArray(next.tool_calls)) {
+    let tcChanged = false
+    const tool_calls = next.tool_calls.map((tc) => {
+      const args = tc?.function?.arguments
+      if (typeof args === "string") {
+        const escaped = escapeLiteralEscapes(args)
+        if (escaped !== args) {
+          tcChanged = true
+          return { ...tc, function: { ...tc.function, arguments: escaped } }
+        }
+      }
+      return tc
+    })
+    if (tcChanged) {
+      next = { ...next, tool_calls }
+      changed = true
+    }
+  }
+  if (typeof next.reasoning_content === "string") {
+    const escaped = escapeLiteralEscapes(next.reasoning_content)
+    if (escaped !== next.reasoning_content) {
+      next = { ...next, reasoning_content: escaped }
+      changed = true
+    }
   }
-  return message
+  return changed ? next : message
 }
 
 /** IKBGX4 (2026-08-28)：剥离仅本地使用的整消息标记字段（transient 等）——发送给 provider 前移除。

package/src/git/checkpoint.mjs

@@ -16,7 +16,7 @@ import { configDir } from "../config.mjs"
 
 const CWD_HASH_LEN = 12
 
-const MAX_CHECKPOINTS = 20
+const MAX_CHECKPOINTS = 100
 
 /** Files larger than this are NOT copied (sqlite db, bundles…) — they are recorded as skipped. */
 const MAX_FILE_BYTES = 5 * 1024 * 1024
@@ -33,8 +33,16 @@ function git(cwd, args, { allowFail = false } = {}) {
   }
 }
 
+/** Normalize cwd for hashing: uppercase the Windows drive letter so the VS Code
+ *  extension's uri.fsPath (lowercased) produces the SAME cwdHash12 as the CLI's
+ *  process.cwd() — cross-end snapshot sharing (CHECKPOINT.md F5/T7) depends on this
+ *  contract. Same normalization as session storage (session-slots.mjs normalizeCwd). */
+function normalizeCwd(cwd) {
+  return cwd.replace(/^([a-z]):/, (_, d) => d.toUpperCase() + ":")
+}
+
 function checkpointRoot(cwd) {
-  const hash = createHash("sha1").update(cwd).digest("hex").slice(0, CWD_HASH_LEN)
+  const hash = createHash("sha1").update(normalizeCwd(cwd)).digest("hex").slice(0, CWD_HASH_LEN)
   return join(configDir, "checkpoints", hash)
 }
 
@@ -412,11 +420,29 @@ export async function catFile(cwd, id, filePath) {
   }
 }
 
-/** Keep only the most recent MAX_CHECKPOINTS */
-async function pruneCheckpoints(cwd) {
+/** F6: delete ALL checkpoints for a cwd — commit = new safety baseline. Best-effort:
+ *  a missing dir is a no-op; deletion failures propagate so the git tool's commit case
+ *  can report "(checkpoint cleanup skipped: …)" without blocking the commit result. */
+export async function deleteCheckpointsForCwd(cwd) {
+  await rm(checkpointRoot(cwd), { recursive: true, force: true })
+}
+
+/** NF6: keep only the most recent `count` snapshots — oldest removed first (id sort =
+ *  timestamp prefix, so ascending order IS oldest-first). Returns how many were deleted
+ *  (0 when the cwd has no checkpoint dir). */
+export async function deleteCheckpointsOlderThan(cwd, count) {
   const root = checkpointRoot(cwd)
-  const ids = (await readdir(root)).sort()
-  while (ids.length > MAX_CHECKPOINTS) {
+  let ids
+  try { ids = (await readdir(root)).sort() } catch { return 0 }
+  let removed = 0
+  while (ids.length > count) {
     await rm(join(root, ids.shift()), { recursive: true, force: true })
+    removed++
   }
+  return removed
+}
+
+/** Keep only the most recent MAX_CHECKPOINTS (NF6 cap — runs at the end of every create) */
+async function pruneCheckpoints(cwd) {
+  await deleteCheckpointsOlderThan(cwd, MAX_CHECKPOINTS)
 }

package/src/prompts/discipline.md

@@ -22,7 +22,7 @@ UI & interface design:
 - **用户约定执行纪律（2026-08-31，两次违约教训）**：用户对交互/行为的约定以用户原话为准——实现时逐字对照，不得用"等效实现"替换约定本身（已发生：滚动→点击翻窗、滚动到头自动加载→PgUp 键触发）。已确认约定的简化/降级必须提前上报，不得包装成"升级路径"交付。注释里的 parity with X / 对齐 X 只描述来源，不代表 X 就是正确语义——以用户约定为唯一判据，实现后真机验证用户原话的每个承诺点。
 
 Tool routing — use the dedicated tool, not bash:
-- **git operations** → `git` tool (action=status/diff/log/show/add/commit/push/tag/branch/checkout/restore/stash/fetch/pull/reset/revert/merge/cherry-pick; `workdir` for sub-repos). Never run git via bash.
+- **git operations** → `git` tool (action=status/diff/log/show/add/commit/push/tag/branch/checkout/restore/stash/fetch/pull/reset/revert/merge/cherry-pick/ls-remote/clone/init/rebase/remote/clean/switch/apply/worktree/archive/blame/mv; `workdir` for sub-repos). Never run git via bash.
 - **JavaScript** → `execute` (inline code; or `scriptFile`+`nodeArgs` for `node <file>` / `node --test` / `node --check`). Never `bash node -e`.
 - **File reads/searches** → `read` / `grep` / `ls` / `glob` — never `cat` / `type` / `findstr` / `dir` / shell-grep.
 - **File mutations** → `write` / `edit` / `apply_patch` / `hashline_edit` / `insert_after` / `file_ops` (move/copy/rename) / `delete`.
@@ -51,7 +51,7 @@ Tool routing — use the dedicated tool, not bash:
 | `read_image` | view an image (vision models) | external viewers |
 | `execute` | run JS inline / scriptFile (+ nodeArgs for `node --test`/`--check`) | `bash node -e`, `node <script>` via bash |
 | `bash` | npm/vsce/CLI subprocess, servers, TTY programs, one-off pipelines no tool expresses | always; see allowed list above |
-| `git` | ALL git ops (status/diff/log/show/add/commit/push/tag/branch/checkout/restore/stash/fetch/pull/reset/revert/merge/cherry-pick/ls-remote) | `git` in bash |
+| `git` | ALL git ops (status/diff/log/show/add/commit/push/tag/branch/checkout/restore/stash/fetch/pull/reset/revert/merge/cherry-pick/ls-remote/clone/init/rebase/remote/clean/switch/apply/worktree/archive/blame/mv) | `git` in bash |
 | `process` | list running processes | `tasklist`, `ps`, `wmic` |
 | `get_current_time` | current date/time | `date` |
 | `timer` | thinking budget / wait reminder | `sleep`, `timeout` (for real waits) |

package/src/provider/core.mjs

@@ -66,6 +66,7 @@ export async function chat(provider, { messages, tools, onToken, onReasoning, on
   // the same way it bricks OpenAI-format ones (all raster-only).
   const spec = specForModel(provider.model)
   messages = stripImagesForTextModel(messages, spec)
+  const _debugBeforeLen = process.env.THIN_DEBUG_BODY ? JSON.stringify(messages).length : 0
 
   // Format dispatch: delegate to non-OpenAI transports
   if (provider.format === "anthropic") {
@@ -106,6 +107,9 @@ export async function chat(provider, { messages, tools, onToken, onReasoning, on
   // 转义的代码），Kimi 等会把它们当 hex escape 再解析 → "unexpected end of hex escape" 400。
   // 发送前统一 double 掉会形成非法转义的序列（合法 \xNN/\uNNNN 不受影响）。
   messages = escapeMessages(messages)
+  if (process.env.THIN_DEBUG_BODY) {
+    console.error(`[debug-body] escape: ${_debugBeforeLen} -> ${JSON.stringify(messages).length} chars, ${messages.length} msgs (provider=${provider.name}, model=${provider.model})`)
+  }
   // Compile string-pattern rules to RegExp at call time
   const rules = compileStreamRules(streamRules)
   const body = {
@@ -285,6 +289,44 @@ export async function listModels(provider, { signal } = {}) {
 }
 
 async function requestWithRetry(provider, body, signal, onWait) {
+  // THIN_DEBUG_BODY=1：发送前诊断——复现网关侧 "unexpected end of hex escape" 400 时
+  // 定位真实载荷里的毒序列（2026-08-31 slot 3 deepseek-v4-flash）。模拟网关最宽松的
+  // 爆炸条件：任何字面 "\u"/"\x" 后不足位（不看前置反斜杠）。
+  if (process.env.THIN_DEBUG_BODY) {
+    try {
+      const msgs = body?.messages ?? []
+      const raw = JSON.stringify(body)
+      const hits = []
+      for (let i = 0; i < msgs.length; i++) {
+        const m = msgs[i] ?? {}
+        const fields = []
+        if (typeof m.content === "string") fields.push(["content", m.content])
+        else if (Array.isArray(m.content)) m.content.forEach((p, pi) => { if (p && typeof p.text === "string") fields.push([`content[${pi}]`, p.text]) })
+        if (typeof m.reasoning_content === "string") fields.push(["reasoning_content", m.reasoning_content])
+        if (Array.isArray(m.tool_calls)) m.tool_calls.forEach((tc, ti) => { if (tc && typeof tc.arguments === "string") fields.push([`tool_calls[${ti}].arguments`, tc.arguments]) })
+        if (typeof m.name === "string") fields.push(["name", m.name])
+        for (const [f, t] of fields) {
+          const re = /\\[xu]/g
+          let mm
+          while ((mm = re.exec(t))) {
+            const c = t[mm.index + 1]
+            const need = c === "u" ? 4 : 2
+            const after = t.slice(mm.index + 2, mm.index + 2 + need)
+            if (!new RegExp(`^[0-9a-fA-F]{${need}}$`).test(after)) {
+              hits.push({ i, role: m.role, field: f, ctx: t.slice(Math.max(0, mm.index - 40), mm.index + 12) })
+            }
+          }
+        }
+      }
+      console.error(`[debug-body] messages=${msgs.length} bodyLen=${raw.length} suspicious=${hits.length}`)
+      for (const h of hits.slice(0, 20)) console.error("[debug-body] hit", JSON.stringify(h))
+      if (!hits.length && msgs[1151]) {
+        console.error("[debug-body] no suspicious hit; messages[1151] =", JSON.stringify({ role: msgs[1151].role, contentLen: msgs[1151].content?.length, contentHead: String(msgs[1151].content).slice(0, 150) }))
+      }
+    } catch (e) {
+      console.error("[debug-body] diag failed:", e.message)
+    }
+  }
   let lastError
   let lastStatus = 0
   let lastWas429 = false

package/src/session-migrate.mjs

@@ -15,7 +15,12 @@ import { configDir } from "./config.mjs"
  *  Plus the previous migration attempt's assumption (normalized 12 = first 12 of the full hash).
  *  Every combination is tried — a migration that only checks one candidate misses real
  *  legacy files (drive-letter case differs between CLI and VS Code historical paths). */
+/** 2026-09-01 advisor 🔵（VS Code 侧已修，CLI 对称补齐）：已迁移/确认无 legacy 的 hash
+ *  记录在 Set 中短路——否则每次 sessionPath() 都重跑 5 候选 × 3 existsSync 的系统调用。 */
+const migratedHashes = new Set() // full 40-char hash → migration already attempted (found none or done)
+
 export function migrateHashLength(cwd, fullHash) {
+  if (migratedHashes.has(fullHash)) return false
   const dir = join(configDir, "sessions")
   const lower = cwd.replace(/^([A-Z]):/, (_, d) => d.toLowerCase() + ":")
   const candidates = [
@@ -38,5 +43,6 @@ export function migrateHashLength(cwd, fullHash) {
       }
     } catch { /* best-effort; leave files in place on failure */ }
   }
+  migratedHashes.add(fullHash)
   return migrated
 }