thincoder 0.12.61 → 0.12.62

package/src/tui/subagent-children.mjs

@@ -15,9 +15,26 @@
  * trim = 单载体最旧先行（原树级 trim「子块先丢 / done 豁免」随子块内容层退役）。
  * 省略计数真值（N6——D-ST5）：`…（已省略 N 行）` 的 N 只随内容移除增长；标记自身
  * 不占额度、不被丢弃、不计入 N。
+ *
+ * TUI-OOM-ROOTCAUSE（TUI.md §15.1 事实 3 / §15.3.3）：原环按 `\n` 计数——无换行巨 chunk
+ * 净增 0 行 → 环永不触发、文本无界。本模块加**字符维**（第二维——行数维逐字不动，D-TB5）：
+ * `carrier._charCount` 与 `SUB_BLOCK_CHAR_LIMIT` 双维同时满足（先到先裁）；字符维裁剪
+ * 按被裁文本行数折算 N（无幽灵计数——N6）。
  */
+import { SUB_BLOCK_CHAR_LIMIT, MIDDLE_TRUNC_MARKER, capText } from "./display-budget.mjs"
+
 export const SUB_BLOCK_LINE_LIMIT = 500
 
+/** 单块自身额度（TUI-OOM-ROOTCAUSE §15.1 事实 3：无换行巨 chunk —— 行数维净增 0、
+ *  环永不触发；入块文本先过本条（头 3/4 + 尾 1/4 + 中段标记）——单行内容不因字符维
+ *  裁剪被整行丢光（环总量裁剪仍按最旧先行）。 */
+const SUB_BLOCK_CAP_OPTS = {
+  max: SUB_BLOCK_CHAR_LIMIT,
+  keepHead: 90_000,
+  keepTail: 30_000,
+  marker: MIDDLE_TRUNC_MARKER,
+}
+
 /** 显示行计数（N6 口径）：块尾 `\n` 的空元素不计（行结束符非空行）。 */
 const countBlockLines = (text) => {
   const lines = String(text ?? "").split("\n")
@@ -27,11 +44,42 @@ const countBlockLines = (text) => {
 /** 省略标记块判定（trim 产物——不占额度/不可被丢；N6）。 */
 const isTrimMarker = (b) => b?.kind === "meta" && b._trimMarker === true
 
+/** 省略标记幂等更新（不占额度/不计入字符账——N6）。 */
+function updateTrimMarker(carrier) {
+  const marker = `…（已省略 ${carrier.dropped} 行）`
+  const head = carrier.blocks[0]
+  if (head && isTrimMarker(head)) head.text = marker // 既有标记原位更新（不重复 unshift）
+  else carrier.blocks.unshift({ kind: "meta", text: marker, _trimMarker: true })
+}
+
+/** 单行丢弃（最旧内容块首行——字符维/行维共用）：返回释放字符数（行级元数据同步）。 */
+function dropFirstContentLine(carrier) {
+  for (;;) {
+    const idx = carrier.blocks.findIndex((b) => !isTrimMarker(b))
+    if (idx === -1) return 0 // 仅余省略标记（内容耗尽）——不再产生幽灵行
+    const first = carrier.blocks[idx]
+    const before = countBlockLines(first.text)
+    if (before <= 0) { carrier.blocks.splice(idx, 1); continue }
+    const parts = String(first.text).split("\n")
+    const droppedLine = parts.shift() ?? ""
+    const kept = parts.join("\n")
+    if (kept === "") carrier.blocks.splice(idx, 1)
+    else first.text = kept
+    const lineDelta = before - (kept === "" ? 0 : countBlockLines(kept))
+    carrier._lineCount = Math.max(0, (carrier._lineCount ?? 0) - lineDelta)
+    carrier.dropped = (carrier.dropped ?? 0) + lineDelta
+    // 释放字符数 = 本行正文 + 行分隔符（parts.join("\n") 同步移除——代码评审 #6：少记 1
+    // 字符会使 _charCount 偏高、触发早裁）
+    return droppedLine.length + (kept === "" ? 0 : 1)
+  }
+}
+
 /** 载体级丢行（D-ST4 单环最旧先行）：从头部内容块 FIFO 丢行；省略标记跳过（不占额度/
- *  不被丢弃/不计入 N——N6）。返回实际丢弃行数（= N 增量——无幽灵行）。 */
+ *  不被丢弃/不计入 N——N6）。返回实际丢弃行数（= N 增量——无幽灵行）。字符账同步扣减。 */
 function dropCarrierLines(carrier, want) {
   if (want <= 0) return 0
   let dropped = 0
+  let freedChars = 0
   while (want > dropped) {
     const idx = carrier.blocks.findIndex((b) => !isTrimMarker(b))
     if (idx === -1) break // 仅余省略标记（内容耗尽）——不再产生幽灵行
@@ -42,39 +90,63 @@ function dropCarrierLines(carrier, want) {
     if (take >= lines) {
       carrier.blocks.splice(idx, 1)
       dropped += lines
+      freedChars += String(first.text).length
     } else {
-      first.text = first.text.split("\n").slice(take).join("\n")
+      const kept = String(first.text).split("\n").slice(take).join("\n")
+      freedChars += String(first.text).length - kept.length
+      first.text = kept
       dropped += take
     }
   }
   carrier._lineCount = Math.max(0, (carrier._lineCount ?? 0) - dropped)
   carrier.dropped = (carrier.dropped ?? 0) + dropped
-  if (dropped > 0) {
-    const marker = `…（已省略 ${carrier.dropped} 行）`
-    const head = carrier.blocks[0]
-    if (head && isTrimMarker(head)) head.text = marker // 既有标记原位更新（不重复 unshift）
-    else carrier.blocks.unshift({ kind: "meta", text: marker, _trimMarker: true }) // 标记不占额度（N6）
-  }
+  carrier._charCount = Math.max(0, (carrier._charCount ?? 0) - freedChars)
+  if (dropped > 0) updateTrimMarker(carrier)
   return dropped
 }
 
-/** 单载体 trim（原树级 trimSubTree 收窄——D-ST4）：超 500 显示行 → 最旧先行丢行。 */
+/** 字符维裁剪（§15.3.3——无换行巨 chunk 的堵口）：逐行丢最旧直至释放 ≥ want 字符；
+ *  行数按实际被丢行折算 N（无幽灵计数——N6）；标记不占额度。返回释放字符数。 */
+function dropCarrierChars(carrier, want) {
+  if (!(want > 0)) return 0
+  let freed = 0
+  while (freed < want) {
+    const got = dropFirstContentLine(carrier)
+    if (got <= 0) break // 内容耗尽（不再产生幽灵行）
+    freed += got
+  }
+  if (freed > 0) {
+    carrier._charCount = Math.max(0, (carrier._charCount ?? 0) - freed)
+    updateTrimMarker(carrier)
+  }
+  return freed
+}
+
+/** 单载体 trim（原树级 trimSubTree 收窄——D-ST4）：超 500 显示行 → 最旧先行丢行；
+ *  超 SUB_BLOCK_CHAR_LIMIT 字符 → 同款最旧先行（双维先到先裁——TUI.md §15.3.4）。 */
 function trimSubCarrier(carrier) {
   const over = (carrier._lineCount ?? 0) - SUB_BLOCK_LINE_LIMIT
   if (over > 0) dropCarrierLines(carrier, over)
+  const overChars = (carrier._charCount ?? 0) - SUB_BLOCK_CHAR_LIMIT
+  if (overChars > 0) dropCarrierChars(carrier, overChars)
 }
 
-/** kind 合并追加（载体级）——净增行记账（显示行口径；省略标记不参与合并——N6）。 */
+/** kind 合并追加（载体级）——净增行记账（显示行口径；省略标记不参与合并——N6）；
+ *  字符账同步累加（第二维——§15.3.4）。 */
 function pushBlock(carrier, kind, text, fresh) {
   if (!text) return
+  const capped = capText(text, SUB_BLOCK_CAP_OPTS) // 单块自身额度（无换行巨 chunk 堵口）
   const last = carrier.blocks.at(-1)
   if (!fresh && last && last.kind === kind && !isTrimMarker(last)) {
     const before = countBlockLines(last.text)
-    last.text += text
+    const beforeChars = last.text.length
+    last.text = capText(last.text + capped, SUB_BLOCK_CAP_OPTS)
     carrier._lineCount = (carrier._lineCount ?? 0) + countBlockLines(last.text) - before
+    carrier._charCount = (carrier._charCount ?? 0) + (last.text.length - beforeChars)
   } else {
-    carrier.blocks.push({ kind, text })
-    carrier._lineCount = (carrier._lineCount ?? 0) + countBlockLines(text)
+    carrier.blocks.push({ kind, text: capped })
+    carrier._lineCount = (carrier._lineCount ?? 0) + countBlockLines(capped)
+    carrier._charCount = (carrier._charCount ?? 0) + capped.length
   }
   carrier.blockEpoch = (carrier.blockEpoch ?? 0) + 1
 }
@@ -102,7 +174,7 @@ export function ensureSubChild(carrier, seg) {
       started: Date.now(), done: false, doneAt: null, stopped: false,
       blocks: [], currentTool: null, toolArgs: null,
       approval: null, lastError: null, dropped: 0,
-      blockEpoch: 0, children: [], _lineCount: 0,
+      blockEpoch: 0, children: [], _lineCount: 0, _charCount: 0,
     }
     carrier.children.push(c)
   }

package/src/tui/subagent-freeze.mjs

@@ -12,6 +12,8 @@
 
 import { C } from "./ansi.mjs"
 import { closeOpenSubChildren } from "./subagent-children.mjs"
+// TUI-OOM-ROOTCAUSE（TUI.md §15.3.3 落点表末行）：state.lines 总量账——splice 插入路径过账。
+import { accountLine } from "./display-budget.mjs"
 
 // ─── §19.6 D-P1 面板视图（subagent panel 检查工具）───
 // CLI-ACTIVITY-DEBLOAT F-3：面板区块列表由消费面**读时现算**（action:"panel" 经
@@ -84,9 +86,13 @@ export function freezeSubTaskLines(state, sub) {
   sub.done = true
   sub.doneAt = sub.doneAt ?? Date.now()
   const anchor = sub._freezeAt ?? state.lines.length
-  state.lines.splice(Math.min(anchor, state.lines.length), 0, {
+  const line = {
     text: `subagent activity: ${sub.key}`, color: C.dim, _frozenSubTask: sub,
-  })
+  }
+  state.lines.splice(Math.min(anchor, state.lines.length), 0, line)
+  // TUI-OOM-ROOTCAUSE（TUI.md §15.3.3 落点表末行「冻结子代理 splice 插入——经
+  // syncLineBudget 同款对账」）：冻结行进 state.lines 总量账（splice 插入路径）。
+  accountLine(state, line)
 }
 
 /** 头裁锚点校正（index.mjs pushLine 调用）：裁 removedCount 补 1 标记行 = 净位移

package/src/tui/suspension-drive.mjs

@@ -19,7 +19,7 @@ import { sweepToolBlocks } from "./tool-events.mjs"
 import { logEvent } from "../log.mjs"
 import { C } from "./ansi.mjs"
 // ASYNC-RESULT-CONTAINER.md D1/D2：池 accessor（双池 absorb）+ pending 单容器停靠
-import { getAsyncPool, parkAsyncPending } from "../agent-tools/async-settle.mjs"
+import { getAsyncPool, parkAsyncPending, releaseSettledEntry } from "../agent-tools/async-settle.mjs"
 
 // INPUT-LOCK-ASYNC（C'——2026-09-09，本档 INPUT-LOCK-ASYNC.md）：R15 排队
 // 用户指令合并（§11.3 D-24c——攒批计划/合并文案/上限常量）整批废弃
@@ -285,6 +285,8 @@ export async function suspensionSession(ctx) {
         for (const e of residual.splice(0)) {
           if (e.role === "consult") await injectConsultResult(agent, e)
           else await injectAsyncResult(agent, e)
+          // TUI-OOM-ROOTCAUSE（§23.3.1 消费点③——挂起残差注入）：注入完成 → 释放条目持有
+          releaseSettledEntry(e)
         }
       }
     }

package/src/tui/tool-args.mjs

@@ -12,6 +12,7 @@
  * 全量必须落行）。
  */
 import { sliceByWidth } from "./render.mjs"
+import { capLines, ARGS_JSON_MAX_CHARS } from "./display-budget.mjs"
 
 /** 单行参数摘要：按工具挑关键字段（vscode 卡片头对齐），未知工具回退 JSON。 */
 export function describeToolArgs(name, args) {
@@ -74,8 +75,10 @@ export function describeToolArgs(name, args) {
 }
 
 /** 恢复路径用：全量参数 pretty JSON 的 dim 行（非空才输出）。
- *  与工具结果的恢复惯例一致——完整落行，超长由连续 dim 折叠收纳。 */
+ *  与工具结果的恢复惯例一致——完整落行；**总量额度**（TUI-OOM-ROOTCAUSE §15.3.1
+ *  ARGS_JSON_MAX_CHARS——`write`/`apply_patch` 整文件内容进显示层的堵口）：超出尾截断
+ *  + 标记，首行保真。 */
 export function toolArgsLines(args) {
   if (!args || typeof args !== "object" || Object.keys(args).length === 0) return []
-  return JSON.stringify(args, null, 2).split("\n")
+  return capLines(JSON.stringify(args, null, 2).split("\n"), ARGS_JSON_MAX_CHARS)
 }

package/src/tui/tool-display.mjs

@@ -7,6 +7,9 @@
  * 不禁内容变更（.set/.delete/.push），调用方行为与同模块时代一致。
  */
 
+// TUI-OOM-ROOTCAUSE（TUI.md §15.3.1）：显示层额度常量/工具行定位（display-budget 叶子）。
+import { capLines, TOOL_RESULT_MAX_CHARS } from "./display-budget.mjs"
+
 // Tool execution start timestamps (performance.now ms). Keyed by tool_call id
 // when available (parallel same-name tools each get their own tick — the
 // P0-3 fix, 2026-08-30), falling back to a per-name FIFO queue for callers
@@ -73,7 +76,9 @@ export function sweepToolBlocks(state) {
  *  1) Multimodal results (read_image) embed FULL base64 images in the JSON —
  *     the human needs only the text part (model gets images via the multimodal
  *     channel); 2) results beyond maxRows are truncated in the block (full
- *     text always lives in history for the model). Returns row array. */
+ *     text always lives in history for the model). Returns row array.
+ *  TUI-OOM-ROOTCAUSE（§15.3.1 TOOL_RESULT_MAX_CHARS）：总量额度与 400 行双维
+ *  （单行任意大——无 `\n` 巨 chunk/JSON 尾行），尾截断 + 标记。 */
 export function slimToolResultForDisplay(result, maxRows = 400) {
   let displayResult = result
   try {
@@ -81,9 +86,18 @@ export function slimToolResultForDisplay(result, maxRows = 400) {
     if (parsed?.images?.length) displayResult = parsed.text ?? result
   } catch { /* not JSON — show as-is */ }
   const rows = String(displayResult).split("\n").filter((l) => l.trim())
-  return rows.length > maxRows
+  const capped = rows.length > maxRows
     ? [...rows.slice(0, maxRows), `… (result truncated at ${maxRows} rows — full text in history)`]
     : rows
+  return capLines(capped, TOOL_RESULT_MAX_CHARS)
+}
+
+/** 按块定位其载体行（字符账 re-account 用——块对象唯一）。 */
+export function findToolLine(state, name, toolId) {
+  const block = findToolBlock(state, name, toolId)
+  if (!block) return null
+  for (const l of state.lines ?? []) if (l._toolBlock === block) return l
+  return null
 }
 /** Mark the dispatch-level tool carrier done when its result is consumed by a
  *  dedicated branch (subagent/escalate/advisor blocks) — without this the turn

package/src/tui/tool-events.mjs

@@ -24,6 +24,7 @@ import {
   SUBAGENT_ROLES, routeSubToken, routeSubReasoning, routeSubToolCall,
   routeSubToolOutput, finishSubTask, finishSubTaskKey, finishSubTasksByRole, freezeDoneSubTasks,
   ensureCompressPanel, markCompressFailed, markCompressDone, markCompressFallback,
+  shiftFreezeAnchors,
 } from "./subagent-blocks.mjs"
 // 第 27 批 §12.3②：前缀正则换名 + import 源改文法模块（纯换名——语义零改）。
 import { RELAY_PREFIX_RE } from "../agent/relay-prefix.mjs"
@@ -34,14 +35,42 @@ import {
   TOOL_OUTPUT_LINE_CAP, REMINDER_CAP, REMINDER_PERSIST_TURNS,
   _toolTicks, _subActions, _subActionQ,
   tickStart, tickTake, settleToolBlock, isAsyncSpawnResult, isSpawnErrorResult,
-  findToolBlock, slimToolResultForDisplay, sweepToolBlocks,
+  findToolBlock, findToolLine, slimToolResultForDisplay, sweepToolBlocks,
 } from "./tool-display.mjs"
 export { sweepToolBlocks, slimToolResultForDisplay } from "./tool-display.mjs"
+// TUI-OOM-ROOTCAUSE（TUI.md §15.3.1/§15.3.3）：显示层额度（行/载体/输出环/评审/流式）。
+import {
+  capText, capLine, capLines, appendCapped, capAdvisorText, accountLine, syncLineBudget,
+  LINE_TRUNC_MARKER, MIDDLE_TRUNC_MARKER, ADVISOR_CAP_OPTS, STREAM_CAP_OPTS,
+  TOOL_OUTPUT_ENTRY_MAX_CHARS, TOOL_OUTPUT_TOTAL_MAX_CHARS, ADVISOR_TEXT_MAX_CHARS,
+} from "./display-budget.mjs"
+
+/** 输出环字符维总量（§15.3.1 TOOL_OUTPUT_TOTAL_MAX_CHARS——与 200 条目环同款丢最旧）。 */
+function trimOutputChars(block) {
+  let total = 0
+  for (const s of block.output) total += s.length
+  while (total > TOOL_OUTPUT_TOTAL_MAX_CHARS && block.output.length > 0) {
+    total -= block.output.shift().length
+  }
+}
 
 /** Build the agent callbacks + the shared flushStream for one turn.
  *          askPermission, askQuestion, saveSessionImpl } */
 export function buildToolCallbacks(deps) {
   const { agent, state, pushLine, render, scheduleRender, ensureAssistantLabel, askPermission, askBatchPermission, askQuestion, saveSessionImpl } = deps
+  // 行集总量对账便捷式（§15.3.3——冻结锚点平移交 subagent 族函数）
+  const budgetSync = () => syncLineBudget(state, { onTrim: (st, n) => shiftFreezeAnchors(st, n) })
+  /** Advisor 有序块累积 + 额度（§15.3.1 ADVISOR_TEXT_MAX_CHARS——头 32K/尾 96K/中段标记）。 */
+  const pushAdvisorChunk = (raw, kind) => {
+    const blocks = state._advisorBlocks ??= []
+    const last = blocks.at(-1)
+    if (last && last.kind === kind) last.text = appendCapped(last.text, raw, ADVISOR_CAP_OPTS)
+    else blocks.push({ kind, text: appendCapped("", raw, ADVISOR_CAP_OPTS) })
+    // 多块总量：丢最旧块直至 ≤ 额度（裁决尾部优先）
+    let total = 0
+    for (const b of blocks) total += b.text.length
+    while (total > ADVISOR_TEXT_MAX_CHARS && blocks.length > 1) total -= blocks.shift().text.length
+  }
   // NOTE: advisor buffers (_advisorThink/advisorStreaming) are cleared here too.
   // Timing safety: onToolResult flushes _advisorThink into history and empties
   // the buffers BEFORE onTurnEnd can call flushStream (tool result is
@@ -69,7 +98,7 @@ export function buildToolCallbacks(deps) {
       // block content, never the main stream (D1). Routing details in subagent-blocks.
       if (routeSubToken(state, t, scheduleRender)) return
       ensureAssistantLabel()
-      state.streaming += t
+      state.streaming = appendCapped(state.streaming, t, STREAM_CAP_OPTS) // §15.3.1 STREAM_MAX_CHARS
       scheduleRender()
     },
     onReasoning: (t) => {
@@ -77,7 +106,7 @@ export function buildToolCallbacks(deps) {
       // buffer as kind=think (F2: same treatment as the main reasoning stream).
       if (routeSubReasoning(state, t, scheduleRender)) return
       ensureAssistantLabel()
-      state.reasoning += t
+      state.reasoning = appendCapped(state.reasoning, t, STREAM_CAP_OPTS) // §15.3.1 STREAM_MAX_CHARS
       scheduleRender()
     },
     onToolCall: (name, args, toolId) => {
@@ -139,6 +168,8 @@ export function buildToolCallbacks(deps) {
           done: false,
         },
       })
+      accountLine(state, state.lines[state.lines.length - 1]) // 载体入总量账（§15.3.4）
+      budgetSync()
       tickStart(name, toolId)
     },
     // §7.2.3（方案 e）：dispatch runOne 把工具 ctx 上的 _subagentKey（sync spawn/
@@ -236,11 +267,13 @@ export function buildToolCallbacks(deps) {
           // screen of garbage (user report 2026-08-30). The model gets the image
           // via the multimodal channel (agent.mjs), the human needs only the
           // text part: strip image parts from the displayed result.
-          block.result = slimToolResultForDisplay(result)
+          block.result = slimToolResultForDisplay(result) // §15.3.1 RESULT 额度（行 400 + 字符 64K 双维）
           block.summary = formatToolSummary(name, result)
           block.done = true
           const started = tickTake(name, toolId)
           block.elapsed = started !== null ? Math.round(performance.now() - started) : null
+          accountLine(state, findToolLine(state, name, toolId)) // 载体原地变更 → 重新入账
+          budgetSync()
         }
       }
       if (name === "advisor") {
@@ -255,17 +288,22 @@ export function buildToolCallbacks(deps) {
         // _advisorBlocks keep rendering the running view until cleared at turn end.
         const blocks = state._advisorBlocks ?? []
         if (blocks.length > 0) {
-          const text = blocks
+          // 冻结文本额度（§15.3.1：头 32K + 尾 96K 保裁决尾部 + 中段标记——非静默截断，
+          // 代码评审 #3：capLines(...)[0] 会丢标记且截尾）
+          const text = capAdvisorText(blocks
             .map((b) => b.text.replaceAll(ADVISOR_THINKING_PLACEHOLDER, ""))
             .join("")
             .replace(/\n{3,}/g, "\n\n")
-            .trim()
+            .trim())
           if (text) {
-            state.lines.push({
+            const line = {
               text: "advisor review",
               color: C.dim,
               _frozenAdvisor: text,
-            })
+            }
+            state.lines.push(line)
+            accountLine(state, line)
+            budgetSync()
           }
         }
       }
@@ -298,25 +336,26 @@ export function buildToolCallbacks(deps) {
         const isString = typeof chunk === "string"
         const raw = isString ? chunk : String(chunk?.text ?? "")
         const kind = isString ? "text" : (chunk?.kind ?? "text")
-        const blocks = state._advisorBlocks ??= []
-        const last = blocks.at(-1)
-        if (last && last.kind === kind) last.text += raw
-        else blocks.push({ kind, text: raw })
+        pushAdvisorChunk(raw, kind) // §15.3.1 累积额度（多块丢最旧）
         scheduleRender()
         return
       }
       // Append into the CURRENT tool block's output buffer (the block is the
       // display; no _live scroll lines anymore). N2-style cap keeps memory
-      // bounded: keep the LAST 200 output lines per call.
+      // bounded: keep the LAST 200 output lines per call; 字符维双维
+      // （§15.3.1：单条目 ≤ TOOL_OUTPUT_ENTRY_MAX_CHARS、总量 ≤ TOOL_OUTPUT_TOTAL_MAX_CHARS 丢最旧）。
       const block = findToolBlock(state, name, toolId)
       if (block) {
         for (const line of part.text.split("\n")) {
           const trimmed = line.trimEnd()
-          if (trimmed) block.output.push(trimmed)
+          if (trimmed) block.output.push(capText(trimmed, { max: TOOL_OUTPUT_ENTRY_MAX_CHARS, keepHead: 6_000, keepTail: 2_000, marker: MIDDLE_TRUNC_MARKER }))
         }
         if (block.output.length > TOOL_OUTPUT_LINE_CAP) {
           block.output.splice(0, block.output.length - TOOL_OUTPUT_LINE_CAP)
         }
+        trimOutputChars(block)
+        accountLine(state, findToolLine(state, name, toolId))
+        budgetSync()
       }
       scheduleRender()
     },

package/src/tui/tui-lifecycle.mjs

@@ -15,9 +15,16 @@ export function writeStartupSequence(write = (s) => process.stdout.write(s)) {
   write(ansi.altBuffer + ansi.hideCursor + ansi.mouseOn + ansi.bracketedPasteOn + ansi.keyboardPush + ansi.modifyOtherKeysOn + ansi.wrapOff)
 }
 
-/** TUI 清理序列：清屏 + 关闭鼠标/粘贴/键盘增强 + 退出 alt buffer + 显示光标 + 恢复环绕。 */
+/** TUI 清理序列 = 异常退出恢复序列（单一来源——§9.2 表 2 候选 1）：清屏 + 关闭鼠标/
+ *  粘贴/键盘增强 + 退出 alt buffer + 显示光标 + 恢复环绕。
+ *  TUI-OOM-ROOTCAUSE（CRASH-REPORTS.md §9.3）：提取为导出常量 `RECOVERY_SEQUENCE`——
+ *  包装父在子异常退出（V8 fatal——不走 JS 钩子）时补发同一序列（单一来源，禁第三份
+ *  副本）；writeCleanupSequence 引用同常量（行为逐字不变——既有字节锁测试保持，AC-RT3）。 */
+export const RECOVERY_SEQUENCE =
+  ansi.clearScreen + ansi.mouseOff + ansi.bracketedPasteOff + ansi.keyboardPop + ansi.modifyOtherKeysOff + ansi.mainBuffer + ansi.showCursor + ansi.reset + ansi.wrapOn
+
 export function writeCleanupSequence(write = (s) => process.stdout.write(s)) {
-  write(ansi.clearScreen + ansi.mouseOff + ansi.bracketedPasteOff + ansi.keyboardPop + ansi.modifyOtherKeysOff + ansi.mainBuffer + ansi.showCursor + ansi.reset + ansi.wrapOn)
+  write(RECOVERY_SEQUENCE)
 }
 
 // R25（ARCHITECTURE.md §R25 F-R25a——复审 #1）：TUI 活动态标志——index.mjs 在终端接管

package/src/tui/wrapped-spawn.mjs

@@ -6,12 +6,13 @@ import { appendFileSync, mkdirSync, writeFileSync } from "node:fs"
 import { spawn } from "node:child_process"
 import { fileURLToPath } from "node:url"
 import { crashReportsDir } from "../crash-reports.mjs"
+import { RECOVERY_SEQUENCE } from "./tui-lifecycle.mjs"
 
 // F-3 信号语义（raw mode 既有 key-handler 双按语义——Ctrl+C = stdin 字节不产生信号 → 子正常退 → 父收
 // exit 同码退）：父忽略 SIGINT/SIGTERM——tee 不被打断。2026-09-09 实测：Windows process.kill(SIGINT)
 // = 硬杀 ≠ 控制台 Ctrl+C 事件（handler 不触发）——信号面测试走 mock（真控制台端到端留发布前手动 QA）。
 export const ignoreSignal = () => {} // no-op 单一引用——父信号 + stderr-error 监听共用——测试可精确复原
-export function spawnTuiWrapped({ dir = crashReportsDir(), script = fileURLToPath(new URL("../../bin/thincoder.mjs", import.meta.url)), spawnImpl = spawn, exitImpl = (code) => process.exit(code) } = {}) {
+export function spawnTuiWrapped({ dir = crashReportsDir(), script = fileURLToPath(new URL("../../bin/thincoder.mjs", import.meta.url)), spawnImpl = spawn, exitImpl = (code) => process.exit(code), writeImpl = (s) => process.stdout.write(s) } = {}) {
   // ① mkdir 前置（评审 #2——prepareCrashReporting 只在子内跑——首启目录缺失会静默不包装）+ 开日志
   //（文件头元信息行：时间/pid/argv——F-2——0600 append）——失败 → false：不包装直接跑现逻辑（尽力面）
   let logPath = null
@@ -25,14 +26,29 @@ export function spawnTuiWrapped({ dir = crashReportsDir(), script = fileURLToPat
   const note = (s) => { try { appendFileSync(logPath, s) } catch { /* 落盘尽力面——不阻断 tee */ } }
   let exitCode = null, exitSignal = null, settled = false
   const finish = (code) => { if (!settled) { settled = true; exitImpl(code) } }
-  const child = spawnImpl(process.execPath, [script, ...process.argv.slice(2)], {
+  // TUI-OOM-ROOTCAUSE（CRASH-REPORTS.md §9.3）：子异常退出（V8 fatal——不走 JS 钩子）→
+  // 包装父补发恢复序列（唯一存活方；序列单一来源 = tui-lifecycle.RECOVERY_SEQUENCE）。
+  // 守卫落点 = exit/close 处置内（**不在共享 finish**——spawn error 路径经 error→finish(1)，
+  // 字面挂 finish 会在子未启动时补发 clearScreen 序列，违 F5③）；按 exitCode/exitSignal
+  // 判定（code !== 0 || signal != null）；异常退出零动作；正常退出（code 0）零干预；
+  // 每进程恰一次（recovered 守卫，exit/close 双路 + 30s 兜底路径同守）；写失败不阻断收尾。
+  let recovered = false
+  const recoverTerminal = (code, signal) => {
+    if (recovered) return
+    if (!(code !== 0 || signal != null)) return
+    recovered = true
+    try { writeImpl(RECOVERY_SEQUENCE) } catch { /* 尽力面：终端已关/管道已断——不阻断收尾 */ }
+  }
+  // F3③（CRASH-REPORTS）：近堆上限快照落点定向——--diagnostic-dir 为 Node 选项，须在脚本路径前；
+  // 无条件注入（gate 单点在 crash-reports.mjs——包装器不判 env）；未触发快照时零副作用。
+  const child = spawnImpl(process.execPath, [`--diagnostic-dir=${dir}`, script, ...process.argv.slice(2)], {
     stdio: ["inherit", "inherit", "pipe"], // 子 stderr pipe → tee；stdin/stdout 继承（TTY 原样）
     env: { ...process.env, THINCODER_TUI_WRAPPED: "1" }, // env 门——子内判定不包装——纯现逻辑（红线）
     windowsHide: false,
   })
   child.stderr.on("data", (chunk) => { try { process.stderr.write(chunk) } catch { /* 终端已关——日志仍落 */ } note(chunk) }) // ② tee 双写：终端实时 + 日志
-  child.on("exit", (code, signal) => { exitCode = code; exitSignal = signal; setTimeout(() => finish(exitCode ?? (exitSignal ? 1 : 0)), 30_000).unref() }) // ③ exit 记码；兜底 30s 强退
-  child.on("close", () => finish(exitCode ?? (exitSignal ? 1 : 0))) // ④ close = stderr 尾数据全收（AC-2）→ 同码退
-  child.on("error", (err) => { note(`# spawn error: ${err.message}\n`); finish(1) }) // ⑤ spawn 失败不发 exit 只发 error
+  child.on("exit", (code, signal) => { exitCode = code; exitSignal = signal; recoverTerminal(code, signal); setTimeout(() => { recoverTerminal(exitCode, exitSignal); finish(exitCode ?? (exitSignal ? 1 : 0)) }, 30_000).unref() }) // ③ exit 记码；异常退出→补发恢复；兜底 30s 强退
+  child.on("close", () => { recoverTerminal(exitCode, exitSignal); finish(exitCode ?? (exitSignal ? 1 : 0)) }) // ④ close = stderr 尾数据全收（AC-2）→ 同码退
+  child.on("error", (err) => { note(`# spawn error: ${err.message}\n`); finish(1) }) // ⑤ spawn 失败不发 exit 只发 error（零序列动作——F5③）
   return true
 }