thincoder 0.12.61 → 0.12.62

package/src/tui/cmd-session.mjs

@@ -1,4 +1,4 @@
-import { listSlots, switchToSlot, applySession, renameSlot, activeSlot, slotOccupancy, readEndMarker } from "../session.mjs"
+import { listSlots, switchToSlot, applySession, renameSlot, activeSlot, slotOccupancy, readEndMarker, sessionDescriptor } from "../session.mjs"
 import { ansi, C } from "./ansi.mjs"
 import { restoreLines } from "./startup.mjs"
 import { stringWidth, sliceByWidth } from "./render.mjs"
@@ -89,14 +89,18 @@ export async function handleSessionCommand(ctx) {
   if (occ.occupied) {
     pushLine(`⚠ Slot ${e.slot} is being used by another live process (${occ.owner}) — continuing here will create a new copy on the next save`, C.warn)
   }
-  applySession(agent, data)
+  applySession(agent, data, occ.occupied ? {} : { slot: e.slot })
   // Rebuild from history (lazy) — the display snapshot is deprecated.
+  // §14.3.6：描述符 { history（尾窗+±1）, total, base }——标签口径 = total（非窗口长度）；
+  // 未绑定（占用分支——模式 F）回退全量数组。
+  const desc = sessionDescriptor(agent, data)
   state.lines = []
-  restoreLines(state, data.history)
+  state._linesChars = 0 // TUI-OOM-ROOTCAUSE（§15.3.2）：切槽重建行集 → 字符账归零，restoreLines 重新入账
+  restoreLines(state, desc)
   state.tasks = agent.tasks ?? []
   if (state.tasks.length > 0 && state.tasks.every((t) => t.status === "done")) {
     state.tasks = []
   }
-  pushLabel(`── Switched to slot ${e.slot} (${data.history.length} messages) ──`, C.warn)
+  pushLabel(`── Switched to slot ${e.slot} (${desc.total} messages) ──`, C.warn)
   render()
 }

package/src/tui/display-budget.mjs

@@ -0,0 +1,184 @@
+/**
+ * display-budget.mjs — TUI 显示层额度（TUI-OOM-ROOTCAUSE 批——TUI.md §15.3）。
+ *
+ * 职责（§15.3.2）：常量单源（D-TB4）+ 行/载体计长（`lineChars`）+ `state.lines` 总量
+ * 对账（`syncLineBudget`）。纯函数本体（`capText` / `appendCappedText`）住
+ * `src/text-budget.mjs`（零依赖）——与 agent 侧捕获共用（AGENT-LOOP.md §23.3.1，D2 单源）；
+ * 本模块只承载 TUI 面常量与对账。
+ *
+ * 依赖方向：本模块只引 `./ansi.mjs` + `../text-budget.mjs`（叶子——不引 subagent 族，
+ * 冻结锚点平移由调用方经 `onTrim` 注入，避环）。
+ *
+ * 计量口径 = UTF-16 码元（`String.length`——TUI.md §15.2 表 1）；行数维（5000 行环 /
+ * 500 行块环 / 200 条目环）**原样保留**，字符维为第二维（D-TB5——既有 N5/N6 语义不动）。
+ */
+import { C } from "./ansi.mjs"
+import { capText, appendCappedText, fillMarker } from "../text-budget.mjs"
+
+export { capText }
+
+// ─── 常量（§15.3.1——单源；数值改动一处生效）────────────────────────────────
+
+/** 单行（pushLine/pushLabel/恢复行/流式 flush 行）字符额度。 */
+export const LINE_MAX_CHARS = 64_000
+/** 工具块 `argsJson` 总量。 */
+export const ARGS_JSON_MAX_CHARS = 24_000
+/** 工具块 `result` 行数组总量（与既有 400 行双维）。 */
+export const TOOL_RESULT_MAX_CHARS = 64_000
+/** 输出环单条目（超出：尾截断 + 标记）。 */
+export const TOOL_OUTPUT_ENTRY_MAX_CHARS = 8_000
+/** 输出环总量（超出：与既有 200 条目环同款丢最旧）。 */
+export const TOOL_OUTPUT_TOTAL_MAX_CHARS = 128_000
+/** 子代理块单环（与 500 显示行双维；裁最旧——省略标记 N6 语义不变）。 */
+export const SUB_BLOCK_CHAR_LIMIT = 128_000
+/** 评审载体（`_advisorBlocks` 累积 + `_frozenAdvisor`）：头 32K + 尾 96K + 中段标记。 */
+export const ADVISOR_TEXT_MAX_CHARS = 128_000
+/** 流式缓冲（`state.streaming` / `state.reasoning`）累积额度。 */
+export const STREAM_MAX_CHARS = 256_000
+/** `state.lines` 全部行与载体文本总量（超出：与 5000 行环同款裁头 1000 行 + 收据行）。 */
+export const LINES_CHAR_BUDGET = 2_000_000
+/** 搜索匹配计数上限（超出截断 + 提示行）。 */
+export const SEARCH_MATCH_CAP = 10_000
+
+// ─── 标记形态（逐字——§15.3.2 进测试断言）──────────────────────────────────
+
+export const LINE_TRUNC_MARKER = "… [line truncated: N chars omitted]"
+export const MIDDLE_TRUNC_MARKER = "… [middle truncated: N chars omitted]"
+
+/** 评审/流式额度头尾分配（头 32K + 尾 96K——保裁决尾部；与常量同基数）。 */
+export const ADVISOR_CAP_OPTS = {
+  hard: ADVISOR_TEXT_MAX_CHARS,
+  head: 32_000,
+  tail: 96_000,
+  marker: MIDDLE_TRUNC_MARKER,
+}
+/** 流式累积额度（头/尾各半——flush 行再受 LINE_MAX_CHARS）。 */
+export const STREAM_CAP_OPTS = {
+  hard: STREAM_MAX_CHARS,
+  head: Math.floor(STREAM_MAX_CHARS / 4),
+  tail: Math.floor(STREAM_MAX_CHARS / 2),
+  marker: MIDDLE_TRUNC_MARKER,
+}
+/** 行截断（单行巨内容场景）：保留头部至 `LINE_MAX_CHARS` + 尾标记（行尾截断语义）。 */
+export function capLine(text) {
+  return capText(text, {
+    max: LINE_MAX_CHARS,
+    keepHead: LINE_MAX_CHARS,
+    keepTail: 0,
+    marker: LINE_TRUNC_MARKER,
+  })
+}
+
+/** TUI 侧流式累积（alias——本体 text-budget.appendCappedText，D2 单源）。 */
+export function appendCapped(prev, add, opts) {
+  return appendCappedText(prev, add, opts)
+}
+
+/** 评审文本单次截断（§15.3.1：头 32K + 尾 96K 保裁决尾部 + 中段标记——与累积侧同源）。 */
+export function capAdvisorText(text) {
+  return capText(text, { max: ADVISOR_TEXT_MAX_CHARS, keepHead: 32_000, keepTail: 96_000, marker: MIDDLE_TRUNC_MARKER })
+}
+
+/**
+ * 行数组总量额度（尾截断 + 标记；首行保真——ARGS_JSON/TOOL_RESULT 双维用）。
+ * 行放不下时：可放部分 → 本行头截断；无空间 → 直接以标记行收尾。
+ * @returns {string[]} 原数组或（截断 + 标记行）新数组
+ */
+export function capLines(lines, max, marker = MIDDLE_TRUNC_MARKER) {
+  const arr = Array.isArray(lines) ? lines : []
+  if (arr.length === 0) return arr
+  let total = 0
+  for (const s of arr) total += typeof s === "string" ? s.length : 0
+  if (total <= max) return arr
+  const out = []
+  let used = 0
+  for (const s of arr) {
+    const str = typeof s === "string" ? s : String(s ?? "")
+    const remain = max - used
+    if (str.length <= remain) { out.push(str); used += str.length; continue }
+    if (remain > 0) {
+      const kept = str.slice(0, remain)
+      out.push(kept)
+      used += kept.length
+    }
+    break
+  }
+  out.push(fillMarker(marker, total - used))
+  return out
+}
+
+// ─── 计长与总量对账（§15.3.2 / §15.3.4）───────────────────────────────────
+
+const arrChars = (a) => {
+  if (!Array.isArray(a)) return 0
+  let n = 0
+  for (const s of a) n += typeof s === "string" ? s.length : 0
+  return n
+}
+
+/** 一行 + 其 `_toolBlock`/`_frozenSubTask`/`_frozenAdvisor` 字段计长（单一口径）。 */
+export function lineChars(l) {
+  if (!l) return 0
+  let n = typeof l.text === "string" ? l.text.length : 0
+  const b = l._toolBlock
+  if (b) {
+    n += typeof b.argsSummary === "string" ? b.argsSummary.length : 0
+    n += typeof b.summary === "string" ? b.summary.length : 0
+    n += arrChars(b.argsJson) + arrChars(b.output) + arrChars(b.result)
+  }
+  if (l._frozenSubTask) n += l._frozenSubTask._charCount ?? 0
+  if (typeof l._frozenAdvisor === "string") n += l._frozenAdvisor.length
+  return n
+}
+
+/** 行增量记账（幂等——行对象上存上次计入值 `_budgetChars`；载体原地变更后重调即自愈）。 */
+export function accountLine(state, l) {
+  if (!l) return
+  const prev = Number.isFinite(l._budgetChars) ? l._budgetChars : 0
+  const next = lineChars(l)
+  state._linesChars = Math.max(0, (state._linesChars ?? 0) + (next - prev))
+  l._budgetChars = next
+}
+
+/** 直算对账（双算法对照 / 初始化 / 漂移自愈——测试直算同源）。 */
+export function accountAll(state) {
+  let total = 0
+  for (const l of state.lines ?? []) {
+    const n = lineChars(l)
+    l._budgetChars = n
+    total += n
+  }
+  state._linesChars = total
+  return total
+}
+
+/**
+ * `state.lines` 总量对账（§15.3.3 落点表末行）：超 `LINES_CHAR_BUDGET` → 与 5000 行环
+ * 同款裁头 1000 行 + 收据行；`onTrim(state, removedCount)` 由调用方注入冻结锚点平移
+ * （display-budget 不引 subagent 族——避环）。幂等（未超限零动作）。
+ * @returns {number} 本轮裁掉的行数
+ */
+export function syncLineBudget(state, { pushLineLike = null, onTrim = null } = {}) {
+  const lines = state.lines
+  if (!Array.isArray(lines)) return 0
+  if (!Number.isFinite(state._linesChars)) accountAll(state)
+  let removed = 0
+  while (state._linesChars > LINES_CHAR_BUDGET && lines.length > 1) {
+    const take = Math.min(1000, lines.length - 1)
+    const dropped = lines.splice(0, take)
+    let freed = 0
+    for (const l of dropped) freed += lineChars(l)
+    state._linesChars = Math.max(0, state._linesChars - freed)
+    removed += take
+    const receipt = `... [earlier messages trimmed — ${lines.length} lines remaining]`
+    if (typeof pushLineLike === "function") pushLineLike(receipt)
+    else {
+      const line = { text: receipt, color: C.dim }
+      line._budgetChars = receipt.length
+      lines.unshift(line)
+      state._linesChars += receipt.length
+    }
+    if (typeof onTrim === "function") onTrim(state, take)
+  }
+  return removed
+}

package/src/tui/index.mjs

@@ -37,8 +37,10 @@ import { runAgentTurn } from "./agent-turn.mjs"
 import { createKeyHandler, convMaxScroll, clearAttention } from "./key-handler.mjs"
 import { showStartup, backgroundIndex, createLoadOlder } from "./startup.mjs"
 import { shiftFreezeAnchors } from "./subagent-blocks.mjs"
+import { capLine, accountLine, accountAll, syncLineBudget } from "./display-budget.mjs"
 import { createConfigHelpers } from "./config-helpers.mjs"
 import { createUpdateNotice, pendingNoticeReady } from "./update-notice.mjs"
+import { startLedgerSurface } from "./ledger-surface.mjs"
 
 export { upgradeFailureText, pendingNoticeReady } from "./update-notice.mjs"
 
@@ -115,6 +117,7 @@ export async function startTUI(agent, opts = {}) {
     currentTool: null, // currently executing tool name (shown in status bar)
     processingStarted: 0, // current turn start time (status bar timer)
     status: "Ready",
+    ledger: { marker: null, warn: false, scannedAt: 0 }, // LEDGER-SURFACE（§2.30.3.4）：L1 标记位——ledger-surface 写 / render-frame 读
     queue: [], // 交接残项单容器 [{ text }]（INPUT-LOCK：submit 不再排队——仅释放窗口兜底/挂起中止残余——回合尾队列循环续发，至多一条）
     interruptPrompt: null, // Ctrl+I inject box（第 31 批——TUI-INPUT-BOX.md §8）: { chars: string[], cursor: number } or null
     attentionAwaiting: false, // 第 33 批（TUI §14.3(f)）：回合结束等待输入——链尾置位 / 用户输入清位；不落盘、不进会话
@@ -127,6 +130,7 @@ export async function startTUI(agent, opts = {}) {
     _historyLoaded: 0, // messages loaded from the TAIL of _fullHistory
     _historyTotal: 0, // total messages in the restored session
     _hasOlder: false, // more earlier messages remain unloaded
+    _linesChars: 0, // TUI-OOM-ROOTCAUSE（§15.3.2）：state.lines 全部行与载体文本总量（字符账——唯一新增状态位）
     _agent: null, // TUI state → agent 回指挂载点：startTUI 装配时置 agent 引用——
     // ① SYNC-CANCEL ⏹ 门控读 state._agent._syncChildAborts（subagent-panel.mjs，2026-09-09）；
     // ② CLI-ACTIVITY-DEBLOAT F-3（2026-09-10）：agent._tuiState = state 反向挂载——
@@ -276,7 +280,11 @@ export async function startTUI(agent, opts = {}) {
   process.on("exit", cleanup)
 
   const pushLine = (text, color, kind) => {
-    state.lines.push({ text, color, _kind: kind })
+    // TUI-OOM-ROOTCAUSE（TUI.md §15.3.1/§15.3.3）：行额度单点——行文本过 capLine
+    // （LINE_MAX_CHARS——单行巨内容/无换行巨 chunk 的堵口）+ 总量账 + 预算对账。
+    const line = { text: capLine(text), color, _kind: kind }
+    state.lines.push(line)
+    accountLine(state, line)
     if (state.lines.length > 5000) {
       state.lines.splice(0, 1000)
       state.lines.unshift({ text: `... [earlier messages trimmed — ${state.lines.length} lines remaining]`, color: C.dim })
@@ -284,14 +292,24 @@ export async function startTUI(agent, opts = {}) {
       // 流位置）——不校正则池空补发冻结（freezeSubTaskLines splice）落点漂移；校正量
       // = 净位移（裁 1000 补 1 标记行 → −999，code review round1 #3）。
       shiftFreezeAnchors(state, 1000)
+      accountAll(state) // 行对象集合已变（splice/unshift 直写）——直算重对账
     }
+    syncLineBudget(state, { onTrim: (st, n) => shiftFreezeAnchors(st, n) })
     render()
   }
 
   /** Message block label: blank line + label line. Breathing space between user/assistant messages */
   const pushLabel = (text, color) => {
-    if (state.lines.length > 0) state.lines.push({ text: "", color: C.dim })
-    state.lines.push({ text, color })
+    // 行额度同 pushLine（§15.3.1——恢复行/标签行同口径）
+    if (state.lines.length > 0) {
+      const blank = { text: "", color: C.dim }
+      state.lines.push(blank)
+      accountLine(state, blank)
+    }
+    const line = { text: capLine(text), color }
+    state.lines.push(line)
+    accountLine(state, line)
+    syncLineBudget(state, { onTrim: (st, n) => shiftFreezeAnchors(st, n) })
     render()
   }
 
@@ -316,6 +334,13 @@ export async function startTUI(agent, opts = {}) {
   // 声明在此（render 已可用）——data 回调（滚轮分支）与 createKeyHandler ctx（PgUp）共用。
   const loadOlder = createLoadOlder({ agent, state, render })
 
+  // TUI-OOM-ROOTCAUSE（CRASH-REPORTS.md §8.3 订阅接线）：堆预警行入对话流（pushLine 已 render）——
+  // 不新增 TUI 定时器（采样定时器住 heap-watch 模块，bin 入口武装）；订阅失败不影响启动。
+  try {
+    const { onHeapWarn } = await import("../heap-watch.mjs")
+    onHeapWarn((line) => pushLine(line, C.warn))
+  } catch { /* 尽力面 */ }
+
   // Resize events are genuine dimension changes on every terminal (2026-08-31
   // simplification: the earlier settle-timer/double-confirm machinery was built
   // on the misdiagnosed ConPTY-stale hypothesis and even stalled drag-shrink).
@@ -438,6 +463,9 @@ export async function startTUI(agent, opts = {}) {
   await promptProviderIfInvalid(agent, () => openModelPicker(), pushLine)
 
   showStartup({ agent, state, opts, pushLine, pushLabel, render, startWizard })
+  // LEDGER-SURFACE（§2.30.3.4）：台账可见面——首扫（setImmediate）+ 周期；dispose 挂进程退出（:278 cleanup 先例）
+  const ledgerSurface = startLedgerSurface({ state, agent, pushLine, render })
+  process.on("exit", () => ledgerSurface.dispose())
   backgroundIndex({ agent, state, render })
 
   // Check for updates (non-blocking, after startup screen)——实现 update-notice.mjs

package/src/tui/key-handler-search.mjs

@@ -1,20 +1,28 @@
-/** Perform search on state.lines, update state.search.matches and clamp index */
+/** Perform search on state.lines, update state.search.matches and clamp index
+ *  TUI-OOM-ROOTCAUSE（TUI.md §15.3.1 SEARCH_MATCH_CAP）：匹配计数上限——超限截断 +
+ *  `state.search.capped` 提示标志（渲染面提示行；次要无界面）。
+ */
+import { SEARCH_MATCH_CAP } from "./display-budget.mjs"
+
 export function performSearch(state) {
   if (!state.search) return
   const query = state.search.query.toLowerCase()
   state.search.matches = []
+  state.search.capped = false
   // Clear old highlights
   state.lines.forEach(l => delete l._searchMatches)
 
   if (!query) { state.search.index = 0; return }
 
   state.lines.forEach((line, lineIndex) => {
+    if (state.search.matches.length >= SEARCH_MATCH_CAP) { state.search.capped = true; return }
     const text = (line.text || "").toLowerCase()
     let charIndex = text.indexOf(query)
     if (charIndex !== -1) {
       line._searchMatches = []
     }
     while (charIndex !== -1) {
+      if (state.search.matches.length >= SEARCH_MATCH_CAP) { state.search.capped = true; break }
       state.search.matches.push({ lineIndex, charIndex })
       line._searchMatches.push(charIndex)
       charIndex = text.indexOf(query, charIndex + 1)

package/src/tui/ledger-surface.mjs

@@ -0,0 +1,69 @@
+/**
+ * ledger-surface.mjs — TUI 台账可见面胶水（LEDGER-SURFACE 批——设计档 §2.30.3.4）。
+ *
+ * 三面：① 启动行（首扫、**任一项目可动作**才出——明细行集每项目一行）② 变化行（老化首次
+ * 越线 / 池达阈值——一次性去重 + **送达门**：未送达不记账）③ 状态位（`state.ledger`——L1
+ * 常驻标记，`render-frame.mjs` 消费；**不受启动行门约束**——F2 按标记态照显）。
+ * 只读台账；唯一写面 = 去重档（`~/.thincoder/ledger-notify.json`）。
+ */
+import { blameAges, detailScans, discoverFamily, formatDetailLine, formatMarker, loadNotifyState, NOTIFY_FILE, notifyKey, planChangeLines, REFRESH_MS, saveNotifyState, summarizeLedger } from "../ledger.mjs"
+import { C } from "./ansi.mjs"
+
+/** 单次扫描（直驱面——timer 包装见 `startLedgerSurface`）。
+ *  `startup=true` = 会话首扫（补启动行；变化行在前、明细行在后）。 */
+export function runLedgerScan({ state, agent = null, anchor = null, notifyFile = NOTIFY_FILE, pushLine = () => {}, render = () => {}, startup = false, ageOf = blameAges } = {}) {
+  const base = anchor ?? agent?.cwd ?? process.cwd()
+  const family = discoverFamily(base)
+  const scans = []
+  for (const p of family.projects) {
+    try { scans.push(summarizeLedger(p, { ageOf })) } catch { /* 台账不可读 → 该项目跳过（余者照常——N1/T110①） */ }
+  }
+  const current = family.current ? scans.find((s) => s.root === family.current.root) ?? null : null
+  const notify = loadNotifyState(notifyFile)
+  const plans = scans.map((s) => ({ s, plan: planChangeLines(notify.ledgers[notifyKey(s.ledger)], s) }))
+  const changeLines = plans.flatMap(({ plan }) => plan.lines)
+  const showStartup = startup && scans.some((s) => s.actionable)
+  const rows = showStartup
+    ? [...changeLines, ...detailScans(scans, current).map((s) => ({ text: formatDetailLine(s), warn: s.actionable }))]
+    : changeLines
+  let delivered = true
+  for (const line of rows) {
+    try { pushLine(line.text, line.warn ? C.warn : C.dim) } catch { delivered = false; break }
+  }
+  // 送达门（F5）：有事件行 → 仅在送达后记账；无事件行 → 仅状态确有变化时静默同步（跌回 false 即重置）
+  const changed = plans.some(({ s, plan }) => {
+    const prev = notify.ledgers[notifyKey(s.ledger)]
+    return !prev || JSON.stringify(prev.aged ?? []) !== JSON.stringify(plan.next.aged) || Boolean(prev.threshold) !== plan.next.threshold
+  })
+  if (changeLines.length ? delivered : changed) {
+    const ledgers = { ...notify.ledgers }
+    for (const { s, plan } of plans) ledgers[notifyKey(s.ledger)] = { ...plan.next, updatedAt: Date.now() }
+    saveNotifyState(notifyFile, { version: 1, ledgers })
+  }
+  state.ledger = { marker: current ? formatMarker(current) : null, warn: Boolean(current && current.aged > 0), scannedAt: Date.now() }
+  render()
+}
+
+/** TUI 挂载：首扫（`setImmediate`——不抢首帧）+ 周期（`REFRESH_MS`；`state.processing` 期间跳过本轮）。 */
+export function startLedgerSurface(ctx = {}) {
+  let disposed = false
+  let timer = null
+  const tick = (startup) => {
+    if (disposed) return
+    if (!startup && ctx.state?.processing) return // git 子进程不打断回合帧
+    try { runLedgerScan({ ...ctx, startup }) } catch { /* 可见面尽力——不崩 TUI（N1） */ }
+  }
+  setImmediate(() => {
+    if (disposed) return
+    tick(true)
+    timer = setInterval(() => tick(false), REFRESH_MS)
+    timer.unref?.()
+  })
+  return {
+    dispose() {
+      disposed = true
+      if (timer) clearInterval(timer)
+      timer = null
+    },
+  }
+}

package/src/tui/render-frame.mjs

@@ -393,5 +393,11 @@ function buildStatusLine(state, agent, { cols, slashCommands }) {
   // INPUT-LOCK-ASYNC（C'——F-3）：busy（processing 含 digest）状态栏提示——取代旧
   // 排队提示（F-7 已删）——“主会话处理中——Enter 提交禁用”
   const enterHint = state.processing ? `主会话处理中 — Enter 提交禁用（字符可输入，回合结束请重按 Enter）` : "Enter: send"
-  return ` ${statusText}${taskHint}${turnHint}${tokenHint}${ctxHint}${scrollHint} │ ${enterHint} │ /: commands │ wheel/PgUp/PgDn: scroll │ Ctrl+I: inject │ Ctrl+C: exit (×2)`
+  // LEDGER-SURFACE（§2.30.3.3/§2.30.3.4）：L1 常驻标记——状态段簇尾（scrollHint 后、键位组前）；
+  // 空标记零注入（半态逐字节等价——同 :233-238 纪律）；warn = 当前项目老化 > 0（警示色段包裹）
+  const lg = state.ledger
+  const ledgerHint = lg?.marker
+    ? ` │ ${lg.warn ? `${ansi.reset}${C.warn}${lg.marker}${ansi.reset}${ansi.dim}` : lg.marker}`
+    : ""
+  return ` ${statusText}${taskHint}${turnHint}${tokenHint}${ctxHint}${scrollHint}${ledgerHint} │ ${enterHint} │ /: commands │ wheel/PgUp/PgDn: scroll │ Ctrl+I: inject │ Ctrl+C: exit (×2)`
 }

package/src/tui/startup.mjs

@@ -3,6 +3,9 @@ import { ansi, C } from "./ansi.mjs"
 import { describeToolArgs, toolArgsLines } from "./tool-args.mjs"
 import { slimToolResultForDisplay } from "./tool-events.mjs"
 import { countConvLines } from "./render-conversation.mjs"
+// TUI-OOM-ROOTCAUSE（TUI.md §15.3.3）：恢复/翻页行过额度 + state.lines 总量对账。
+import { capLine, accountLine, accountAll, syncLineBudget } from "./display-budget.mjs"
+import { shiftFreezeAnchors } from "./subagent-blocks.mjs"
 
 /** Lazy history window (parity with VS Code HISTORY_PAGE_SIZE): first paint loads
  *  the latest INITIAL_HISTORY_MESSAGES, then PgUp-at-top loads HISTORY_PAGE_MESSAGES
@@ -115,24 +118,34 @@ export function historyToLines(history, startIdx, endIdx) {
  * INITIAL_HISTORY_MESSAGES, set the _history* counters the loadOlder closure
  * reads, and prepend the "… N more earlier messages" placeholder. Shared by
  * startup restore and /session switching (the display snapshot is deprecated).
+ * TUI-OOM-ROOTCAUSE（SESSION.md §14.3.6）：desc = `{ history, total, base? }`——
+ * history = 尾窗（≤200，含 ±1 页沿头一条——跨页回标判定用；不渲染）、total = 绝对总条数
+ * （「N messages」标签口径）、base = history[0] 的绝对序号（缺省由 total − len 推导）。
  */
-export function restoreLines(state, history) {
-  const total = Array.isArray(history) ? history.length : 0
-  if (total === 0) return
-  const start = Math.max(0, total - INITIAL_HISTORY_MESSAGES)
+export function restoreLines(state, desc) {
+  const window = Array.isArray(desc?.history) ? desc.history : (Array.isArray(desc) ? desc : [])
+  const total = Number.isFinite(desc?.total) ? desc.total : window.length
+  if (window.length === 0 || total === 0) return
+  const base = Number.isFinite(desc?.base) ? desc.base : Math.max(0, total - window.length)
+  // 已载入量 = 渲染窗口大小（±1 页沿头一条不计数），绝对起点 = total − loaded
+  const loaded = Math.min(INITIAL_HISTORY_MESSAGES, total)
+  const start = total - loaded
   state._lineIdCounter = state._lineIdCounter ?? 0
-  const fresh = historyToLines(history, start, total)
+  const fresh = historyToLines(window, Math.max(0, start - base), window.length)
+  for (const l of fresh) l.text = capLine(l.text) // 行额度（§15.3.3 恢复行过 capText）
   // Stable per-line ids (P1, 2026-08-30): fold keys for tool blocks derive from
   // _lineId so loadOlder's head-unshift cannot re-bind an expanded block to a
   // different tool (positional tool-{i} keys drift under unshift).
   for (const l of fresh) l._lineId = ++state._lineIdCounter
   state.lines.push(...fresh)
-  state._historyLoaded = total - start
+  state._historyLoaded = loaded
   state._historyTotal = total
   state._hasOlder = start > 0
   if (state._hasOlder) {
     state.lines.unshift({ text: `… ${start} more earlier messages (PgUp at top to load)`, color: C.dim })
   }
+  accountAll(state) // 行集重建 → 总量直算重对账（§15.3.4）
+  syncLineBudget(state, { onTrim: (st, n) => shiftFreezeAnchors(st, n) })
 }
 /** 懒加载更早历史（2026-08-31 用户约定："滚动到头自动加载"——滚轮/PgUp 到顶皆触发；
  *  2026-08-31 前只挂 PgUp 键 = 违约，滚轮到头无反应）。加载后滚动补偿保持锚定。
@@ -142,10 +155,12 @@ export function restoreLines(state, history) {
 export function createLoadOlder({ agent, state, render }) {
   return () => {
     if (!state._hasOlder) return
-    const full = agent._fullHistory ?? []
+    // 翻页锚 = 恢复时点 total（state._historyTotal）——活消息增长不再使页码漂移
+    // （§14.1 事实 4 / §14.3.6 顺带修复）。
+    const total = state._historyTotal ?? 0
     const loaded = state._historyLoaded
-    const start = Math.max(0, full.length - loaded - HISTORY_PAGE_MESSAGES)
-    const end = full.length - loaded
+    const start = Math.max(0, total - loaded - HISTORY_PAGE_MESSAGES)
+    const end = total - loaded
     if (start >= end) return
 
     const d = state.dims ? state.dims.get() : {}
@@ -154,14 +169,29 @@ export function createLoadOlder({ agent, state, render }) {
 
     if (state.lines[0]?.text?.startsWith("… ")) state.lines.shift()
     state._lineIdCounter = state._lineIdCounter ?? 0
-    const older = historyToLines(full, start, end)
+    // 页源（§14.3.6）：绑定态 → store.page 绝对区间 + ±1 页沿（页前一消息供跨页回合
+    // 标签判定、页后一消息供 tool_result 配对）；未绑定（模式 F）→ 内存全量数组回退。
+    const store = agent._recordStore
+    let older
+    if (store?.page) {
+      const { messages, base } = store.page(start, end, { margin: 1 })
+      older = historyToLines(messages, Math.max(0, start - base), Math.min(messages.length, end - base))
+    } else {
+      older = historyToLines(agent._fullHistory ?? [], start, end)
+    }
+    for (const l of older) l.text = capLine(l.text) // 行额度（§15.3.3 翻页行过 capText）
     for (const l of older) l._lineId = ++state._lineIdCounter
     state.lines.unshift(...older)
+    for (const l of older) accountLine(state, l)
     state._historyLoaded += end - start
     state._hasOlder = start > 0
     if (state._hasOlder) {
-      state.lines.unshift({ text: `… ${start} more earlier messages (scroll to top to load)`, color: C.dim })
+      const ph = { text: `… ${start} more earlier messages (scroll to top to load)`, color: C.dim }
+      state.lines.unshift(ph)
+      accountLine(state, ph)
     }
+    // 页内不裁头（保锚定）——§15.3.3：总量的裁头由 syncLineBudget 兜（此处只对账字符预算）
+    syncLineBudget(state, { onTrim: (st, n) => shiftFreezeAnchors(st, n) })
 
     const after = countConvLines(state, cols, (state.dims?.get() ?? {}).rows ?? (process.stdout.rows || 24))
     state.scroll += Math.max(0, after - before)
@@ -194,8 +224,10 @@ export function showStartup(ctx) {
   // Recover previous session: rebuild from history (lazy — display snapshot is
   // deprecated; it drifted out of sync with history on VS Code writes).
   if (opts.restored?.history?.length) {
-    restoreLines(state, opts.restored.history)
-    pushLabel(`── Restored previous session (${opts.restored.history.length} messages); /new for a fresh session ──`, C.warn)
+    restoreLines(state, opts.restored)
+    // 「N messages」标签口径 = total（§14.3.6——非窗口长度）
+    const total = Number.isFinite(opts.restored.total) ? opts.restored.total : opts.restored.history.length
+    pushLabel(`── Restored previous session (${total} messages); /new for a fresh session ──`, C.warn)
   }
 
   // Hint when multiple sessions exist

package/src/tui/subagent-blocks.mjs

@@ -87,6 +87,7 @@ export function ensureSubTaskKey(state, key, role) {
       key, role, model: undefined, started: Date.now(), done: false, doneAt: null,
       blocks: [], currentTool: null, toolArgs: null, turn: 0, maxTurns: 0, approval: null,
       lastError: null, dropped: 0,
+      _lineCount: 0, _charCount: 0, // 双维记账（TUI.md §15.3.4——行数维 + 字符维，subagent-children.mjs）
       stopped: false, // §19.5: ⟦ev⟧stopped 冻结标记（标题 "stopped"）
       children: [], // SUBAGENT-TAIL: 嵌套子代理守护载体（内容并入本块——subagent-children.mjs）
     }