thincoder 0.12.62 → 0.12.64

package/CHANGELOG.md

@@ -1,3 +1,30 @@
+## [0.12.64] — 2026-09-21
+
+> 0.12.63 → 0.12.64（连续号——发布时定号）
+
+### Added
+
+- **PROJECT-MANIFEST 模型（按用点解析）**：owning-ancestor 归属 + 五级梯发现；整档缺失非致命（启动降级 + 建档流提示）。
+- **批档生命周期工具** `batch`（create / append / status / close）· **台账执行人列**（F-LX1）· **信号行两档标签**（digest/ask）+ 起始行 · **会话认领释放**（F-CR1/CR2，拒绝零写入）。
+- **启动非阻塞**：会话 GC 异步化 + 陈旧清扫 + traces 清理；**启动加载行**（包裹父进程 + TUI 首帧，含修复轮收正）。
+
+### Changed
+
+- **工程模式排除 `plan` 角色**（FR31）。
+
+### Fixed
+
+- 批别名残留（断言 / 提示词文档引用 / 错误串）· VSC 子代理块标题对齐（CLI 标题段补全）· README 依赖声明口径收正（零三方运行时依赖）。
+
+## [0.12.63] — 2026-09-21
+
+> 0.12.62 → 0.12.63（连续号——发布时定号；本版随核首发联动）
+
+### Fixed
+
+- **发布依赖收正**：`@thincoder/core` `^0.1.0` → `^0.9.1`（核首发 `@thincoder/core@0.9.1` 同日落地——声明面与 registry 实发对齐；0.12.62 及以前发布形态为合并前自带拷贝、无核依赖）。
+- **smoke 探针 import 修复**：`isBailianHost` 实居 `config.mjs`——原从 `provider/normalize.mjs` 静默容错导入（`catch(() => ({}))`）恒 undefined ⇒ smoke 恒 skip（假绿）✗ 修正后真跑三连测（OFF 无思考 / XHIGH / DEFAULT 有思考——dashscope 百炼 qwen 实测过 ✓）。
+
 ## [0.12.62] — 2026-09-13
 
 > 0.12.61 → 0.12.62（§4.3 连续号——发布时定号）

package/README.md

@@ -2,25 +2,25 @@
 
 **Sharp Code, Zero Bloat.**
 
-**A "thin" AI coding agent: pure `.mjs`, no build step, zero npm dependencies, native Node.js.**
+**A "thin" AI coding agent: pure `.mjs`, no build step, zero third-party dependencies, native Node.js.**
 
 The "Thin" in ThinCoder doesn't mean "feature-poor" — it means **sharp thinking, straight to the point** — like a blade.
 While every AI agent races to be "all-powerful", ThinCoder plays the opposite card: **restraint, precision, no filler**.
 Its persona is a geek engineer of few words who cuts to the bone: give it a complex requirement, get back a clean implementation.
 
-Design philosophy (the entire meaning of the name): if the Node standard library can do it, no dependency is allowed. The project's `node_modules` is empty.
+Design philosophy (the entire meaning of the name): if the Node standard library can do it, no third-party dependency is allowed. The project's `node_modules` contains no third-party packages — only the first-party `@thincoder/core` shared core (a local link in development, resolved from the npm registry for releases).
 
 ## Features
 
 - **Fix-verify loop**: file changes without `verify` get pushed back — syntax check + tests must pass before the agent can claim completion (auto-repair up to 3 rounds)
 - **Checkpoint system**: auto-snapshot before every user task, `list`/`create`/`rewind` tools for the model, single-file restore — rewinding itself is reversible (pre-rewind state auto-saved)
 - **Codebase understanding** ⭐0.5.0: `repo_outline` (dependency outline, auto-injected at startup), `code_search` (source FTS5 + vectors + JSDoc extraction), `doc_search` (docs chunked by ## headings) — background indexing, auto-incremental updates on file writes, three tools guided by "structure → intent → details"
-- **Model adaptation** ⭐: top-tier only, latest only. Built-in flagship models from twenty providers — DeepSeek / Kimi / Kimi For Coding / GLM / GLM Coding Plan (智谱 Coding) / Qwen / Qwen Token Plan / MiMo (小米) / MiMo Token Plan (小米套餐) / MiniMax / OpenAI / Claude / Gemini / Grok / Mistral / Volcengine Ark (豆包) / Hunyuan (腾讯混元) / SiliconFlow (硅基流动) / OpenRouter / Groq. No legacy model compatibility. Auto-matched context windows, truncation-resume protocols (prefix/partial), thinking-mode APIs (thinking.type / reasoning_effort), reasoning_content echo strategies (reasoningEcho), output limits, temperature range clamping — all deeply adapted.
+- **Model adaptation** ⭐: top-tier only, latest only. Built-in flagship models from twenty-one providers — DeepSeek / Kimi / Kimi For Coding / GLM / GLM Coding Plan (智谱 Coding) / Qwen / Qwen Token Plan / MiMo (小米) / MiMo Token Plan (小米套餐) / MiniMax / OpenAI / Claude / Gemini / Grok / Mistral / Volcengine Ark (豆包) / Hunyuan (腾讯混元) / Tencent TokenHub (腾讯混元网关) / SiliconFlow (硅基流动) / OpenRouter / Groq. No legacy model compatibility. Auto-matched context windows, truncation-resume protocols (prefix/partial), thinking-mode APIs (thinking.type / reasoning_effort), reasoning_content echo strategies (reasoningEcho), output limits, temperature range clamping — all deeply adapted.
 - **Toolset**: `read` / `write` / `edit` / `bash` / `glob` (supports `**`) / `grep` / `websearch` / `ls` / `fetch` + `read_image` (image/video paste) + three retrieval tools + MCP — all zero-dependency, file tools confined to the working directory
 - **Memory system**: three layers (personal/project/team), FTS5 + vector RRF hybrid retrieval, git-friendly markdown format
 - **Two-phase tool scheduling**: permission prompts serialized, read-only tools parallelized, side-effect tools serialized
 - **Session persistence** ⭐0.5.0: unlimited archive slots, `/session` to switch anytime, tool results visible after restore. Process-level isolation — multiple instances in the same directory each get their own session slot
-- **Concurrent subagents**: three roles — `explore`/`plan`/`coder` — dispatched in parallel, streaming output visible, reports land in the conversation; per-subagent model override (`subagent` tool `model` arg or `agent.subagentModel` config — e.g. discuss with `glm-5.2`, let `deepseek-v4-flash` implement)
+- **Concurrent subagents**: five roles — `explore`/`plan`/`coder`/`eng-coder`/`eng-designer` — dispatched in parallel, streaming output visible, reports land in the conversation; per-subagent model override (`subagent` tool `model` arg or `agent.subagentModel` config — e.g. discuss with `glm-5.2`, let `deepseek-v4-flash` implement)
 - **Multi-model consultation 会诊 + 飞刀 (escalate)** ⭐0.12.30: `consult_start`/`consult_stop` run several configured models in parallel as independent read-only consultants (each with its own TUI activity card, `main_history` access to the failure trail); when every model settles, the full verdict digest is delivered automatically (R17 — consult_check retired). `escalate` flies in a stronger model for a single expert implementation run with full write access (default-async since R17 — the post-op report arrives automatically with its mutations merged). Candidate pool = `agent.consultModels` ([{ provider, model, effort? }], up to 5); budgets via `agent.consultTurns` / `agent.consultTimeoutMs`
 - **Plan Mode**: read-only exploration + design, implement after user approval
 - **AUTO mode**: `/auto` full authorization, no confirmations on long tasks
@@ -49,7 +49,8 @@ Three layers, all "query if present, skip if absent", unified hybrid retrieval:
   - IDE-native diffs — `write`/`edit` route through the editor buffer
   - Persisted sessions: list / load (history replay) / resume / delete
   - Per-session config: model / thinking / mode
-  - Setup: [docs/guides/ides.md](docs/guides/ides.md)
+  - Setup: [ACP 接入设计](../docs/cli/design/ACP-CLIENT.md)
+  - Login: `thincoder acp --login` — one interactive terminal login; ACP clients and orchestrators then drive sessions headlessly
 
 
 ## Requirements
@@ -68,7 +69,7 @@ npm install -g thincoder
 thincoder
 ```
 
-First launch walks you through a setup wizard: arrow keys to pick a provider (built-in presets or a custom endpoint) → enter API key → optionally enter an embedding key (SiliconFlow, enables vector memory search, skippable) → arrow keys to pick a model — no hand-editing config files. Adjust anytime with `/provider`, `/model`, `/config embedkey`. `chat`/`distill` also offer in-place interactive setup when no key is configured in a terminal (in pipes/CI they exit with an error and instructions).
+First launch walks you through a setup wizard: arrow keys to pick a provider (built-in presets or a custom endpoint) → enter API key → optionally enter an embedding key (SiliconFlow, enables vector memory search, skippable) → arrow keys to pick a model — no hand-editing config files. Adjust anytime with `/model` (add/remove providers, set keys, custom endpoints) or `/config embedkey`. `chat`/`distill` also offer in-place interactive setup when no key is configured in a terminal (in pipes/CI they exit with an error and instructions).
 
 You can also hand-write `~/.thincoder/config.json` (see "Configuration" below), then:
 
@@ -94,7 +95,7 @@ thincoder upgrade
 
 Running from source: replace `thincoder` above with `node bin/thincoder.mjs`.
 
-Slash commands in the TUI: `/help`, `/model` (two-level picker: first select provider, then model; `/model <provider>:<name>` switches directly), `/submodel` (subagent models per type — picker over global + explore/plan/coder/eng-coder slots, or `/submodel <type> <provider:model>` directly), `/shell` (platform-aware picker of available shells — e.g. `/shell` → pick Git Bash/pwsh, or `/shell "C:\Program Files\Git\bin\bash.exe"`, `/shell reset`; fixes win11 cmd encoding/command issues), `/provider` (add/remove providers, set keys, custom endpoints), `/think` (thinking mode toggle and reasoning effort), `/config` (view config, `/config embedkey` for the embedding key, `/config set` for parameters), `/session` (list/switch archived sessions), `/reindex` (rebuild the index), `/extract` (extract knowledge from the current session), `/restore` (restore checkpoint), `/clear`, `/exit`. High-frequency commands support abbreviations: `/h` `/x` `/m` `/p` `/t` `/c` `/n`. Typing `/` shows live matching hints in the status bar. Model picker supports search/filter — type to narrow down results.
+Slash commands in the TUI: `/help`, `/model` (two-level picker: first select provider, then model; also add/remove providers, set keys, custom endpoints; `/model <provider>:<name>` switches directly), `/submodel` (subagent models per type — picker over global + explore/plan/coder/eng-coder/eng-designer slots, or `/submodel <type> <provider:model>` directly), `/shell` (platform-aware picker of available shells — e.g. `/shell` → pick Git Bash/pwsh, or `/shell "C:\Program Files\Git\bin\bash.exe"`, `/shell reset`; fixes win11 cmd encoding/command issues), `/think` (thinking mode toggle and reasoning effort), `/config` (view config; no-argument form opens the interactive menu — e.g. default model, embedding key, proxy; `/config embedkey` sets the embedding key directly), `/session` (list/switch archived sessions), `/reindex` (rebuild the index), `/extract` (extract knowledge from the current session), `/restore` (restore checkpoint), `/clear`, `/exit`. High-frequency commands support abbreviations: `/h` `/x` `/m` `/p` `/t` `/c` `/n`. Typing `/` shows live matching hints in the status bar. Model picker supports search/filter — type to narrow down results.
 
 Configuration comes exclusively from `~/.thincoder/config.json` — no environment-variable configuration is supported.
 
@@ -102,16 +103,16 @@ Configuration comes exclusively from `~/.thincoder/config.json` — no environme
 
 ## Configuration
 
-`~/.thincoder/config.json`:
+`~/.thincoder/config.json` — strictly parsed (`JSON.parse`); the `//` annotations below are illustrative only and are not valid in the actual file:
 
-```jsonc
+```json
 {
   "providers": [
     // multiple allowed; switch with /model <name>
     {
       "name": "deepseek",
       "baseURL": "https://api.deepseek.com/v1", // any OpenAI-compatible endpoint
-      "apiKey": "sk-...", // or leave empty to use env vars
+      "apiKey": "sk-...", // or leave empty — the TUI prompts for a key when this provider is selected
       "model": "deepseek-chat",
       // optional: proactive throttling budget (match your account's rate-limit tier;
       // without it the gate is off, 429 backoff still applies).
@@ -120,7 +121,7 @@ Configuration comes exclusively from `~/.thincoder/config.json` — no environme
       // "rpm": 50,     // requests/minute
     },
   ],
-  "activeProvider": "deepseek", // currently active provider name
+  "defaultModel": "deepseek:deepseek-chat", // new-session starting model — "provider:model" (set via /config → 默认模型; /model switches the current session)
   "shell": null, // bash tool shell (win11: e.g. "C:\\Program Files\\Git\\bin\\bash.exe" or "pwsh"); null = system default — cmd on Windows (UTF-8 forced per command), /bin/sh elsewhere. TUI: /shell; a leading ~ in the path expands to the home directory
   "embedding": {
     // optional: without it, retrieval is pure FTS
@@ -131,7 +132,7 @@ Configuration comes exclusively from `~/.thincoder/config.json` — no environme
   "agent": {
     "maxTurns": 100, // tool-loop cap
     "subagentModel": null, // default subagent provider/model override: "provider:model" | provider name | model name; null = inherit parent provider. Per-call: subagent tool `model` arg
-    "subagentModels": {}, // per-type override: { "explore": "...", "plan": "...", "coder": "...", "eng-coder": "..." }; priority: tool model arg > this > subagentModel > parent provider
+    "subagentModels": {}, // per-type override: { "explore": "...", "plan": "...", "coder": "...", "eng-coder": "...", "eng-designer": "..." }; priority: tool model arg > this > subagentModel > parent provider
     "compactThreshold": 100000, // context compaction threshold (approx. tokens)
   },
   "memory": {
@@ -165,43 +166,25 @@ Configuration comes exclusively from `~/.thincoder/config.json` — no environme
 ## Architecture
 
 ```
-bin/thincoder.mjs   command entry (tui / chat / memory / sync / distill)
+bin/thincoder.mjs   command entry (tui / chat / memory / sync / distill / reindex / completion / upgrade / acp / session gc)
+bin/thincoder.cjs   CommonJS shim → bin/thincoder.mjs
 src/
-  provider/         LLM calls — core.mjs (fetch, SSE streaming, reasoning_content, usage, retries),
-                    rate.mjs (TPM/RPM proactive rate gate), index.mjs (entry)
-  embedding.mjs     vector embeddings (OpenAI-compatible /v1/embeddings)
-  tools/            16 builtin tools + MCP wrapping + readonly scheduling flags
-                    index.mjs (registry), file/git/patch/system/web.mjs (groups), shared.mjs (schema utils),
-                    repomap.mjs (repo dependency outline: import/export regex parsing, on-demand via tool)
-  tools.mjs         re-export shim → src/tools/index.mjs
-  mcp/              MCP client — helpers.mjs, transport-stdio/http/ws.mjs (JSON-RPC, zero-dependency)
-  mcp.mjs           MCP client entry (connectMcpServer), delegates to src/mcp/
-  agent.mjs         main loop + two-phase tool execution + reminder injection + completion guard + fix-verify loop
-                    + incremental indexing (auto reindexFile after write/edit/delete)
-  agent/            agent loop helpers — dispatch.mjs (two-phase execution), setup.mjs (system prompt assembly), helpers.mjs
-  agent-tools/      self-discipline tools (task/plan/goal/verify/subagent/skill/recent_changes)
-  context.mjs       rough token estimation + history compaction + task re-injection
-  memory/           three-layer memory — schema.mjs (DDL/constants), core.mjs (CRUD + retrieval),
-                    code-index.mjs + code-sync.mjs (code_chunks), docs.mjs (doc_chunks)
-  memory.mjs        re-export shim → src/memory/*
-  session.mjs       session persistence (unlimited archive slots, isolated by project cwd, process-level isolation via sessionId + slotSessions)
-  skills.mjs        skill discovery/loading (.thincoder/skills/*.md)
-  markdown.mjs      entry format (frontmatter parse/serialize)
-  git/              checkpoint.mjs (git patch snapshots / rewind), gitmem.mjs (Team layer git sync)
-  distill.mjs       session knowledge extraction (candidates + human confirmation)
-  config.mjs        config loading
-  tui/              bare-ANSI terminal UI — index.mjs (startTUI), render.mjs (drawing primitives),
-                    render-frame.mjs (frame layout), render-conversation.mjs (conversation panel),
-                    markdown.mjs (lightweight inline markdown → ANSI), mouse.mjs (SGR clicks),
-                    clipboard.mjs (paste/copy), ansi.mjs
-  tui.mjs           re-export shim → src/tui/index.mjs
-  tui-render.mjs    re-export shim → src/tui/render.mjs
-  prompts/          prompt texts — slot-based (PROMPT-SYSTEM): persona-engineering / persona-normal /
-                    persona-{eng-coder,explore,coder,plan} + common + discipline-engineering / discipline-normal
-                    + special modules (consult-base / advisor-design / advisor-round{1,2,3});
-                    assembly = assemblePrompt (prompt-overlays.mjs): persona → common → discipline → [4] AGENTS+skills
+  acp/                   Agent Client Protocol bridge — bridge, client caps, session/slot handlers, login, transport
+  acp.mjs                thincoder acp entry → src/acp/
+  cli/                   top-level command implementations — setup-wizard, memory-command, distill-command,
+                         make-agent (assembly), permission
+  completions.mjs        shell completion scripts (thincoder completion <shell>)
+  crash-reports.mjs      crash capture and forensics — fatal records, stderr capture, heap snapshots
+  distill.mjs            session knowledge extraction (candidates + human confirmation)
+  heap-watch.mjs         heap telemetry / watchdog
+  prompt-injections.mjs  prompt-anchor values for this end — tool face (bash / question)
+  tui/                   bare-ANSI terminal UI — index.mjs (startTUI), frame/conversation rendering,
+                         key handling, mouse/clipboard, the cmd-* command family, subagent panels
+  tui.mjs                re-export shim → src/tui/index.mjs
+  upgrade.mjs            version check and self-upgrade
 test/               node:test offline unit tests (npm test)
-scripts/            real-environment verification scripts (compaction, team sync)
+scripts/            repo-side scripts — release check, doc-impact, syntax/endpoint probes,
+                    real-environment verification (compaction, team sync)
 ```
 
 Key design decisions:
@@ -221,7 +204,7 @@ node scripts/verify-compress.mjs  # real-API verification of context compaction
 node scripts/verify-team.mjs      # team memory A->git->B full-chain verification (local git, offline)
 ```
 
-Code conventions: pure `.mjs`, no semicolons, no npm dependencies allowed (including devDependencies).
+Code conventions: pure `.mjs`, no semicolons, no third-party npm dependencies allowed (including devDependencies) — the first-party `@thincoder/core` shared core is the only npm dependency.
 
 ## Roadmap
 
@@ -229,6 +212,20 @@ Code conventions: pure `.mjs`, no semicolons, no npm dependencies allowed (inclu
 
 ## Changelog
 
+### 0.12.64 (2026-09)
+- **PROJECT-MANIFEST model** — per-use project resolution (owning-ancestor discovery + a five-step ladder); a missing manifest is no longer fatal (degrade at startup + a clear prompt to build one).
+- **Batch record lifecycle tool** (`batch`: create / append / status / close), **ledger executor column**, **two-tier signal lines** (digest/ask) with the start line, and **session claim release** (rejections write nothing).
+- **Non-blocking startup** — async session GC, stale sweep, traces cleanup; the CLI start line shares the wrapped-parent + TUI first-paint path.
+- **Engineering mode**: the `plan` role is excluded from the engineering tool set (FR31).
+- **Fixes** — batch-alias residue across assertions, prompt doc-refs and error strings; subagent block-title parity; README dependency claims corrected to zero third-party runtime deps.
+
+### 0.12.63 (2026-09)
+- **Core dependency live** — now depends on `@thincoder/core@^0.9.1` (the shared-mechanism core's first npm release); installed packages resolve the core from the registry instead of shipping duplicated copies.
+- **Fix: smoke probe always skipped** — `isBailianHost` was imported from the wrong module behind a silent catch, so the pre-release real-endpoint smoke test never actually ran. Fixed; smoke now performs the real three-call thinking-mapping check.
+
+### 0.12.62 (2026-09)
+- Last release in the pre-core shape (self-contained copies); 0.12.63 onward resolves the core from `@thincoder/core`.
+
 ### 0.12.11 (2026-08)
 - **Subagent model per type** — `subagent` tool `model` arg, `config.agent.subagentModels` (per explore/plan/coder/eng-coder) and `config.agent.subagentModel` (global fallback); priority: tool arg > type > global > parent provider. `/submodel` TUI command: picker over 5 slots (global + 4 roles) with provider→model selection, or direct args (`/submodel coder deepseek:deepseek-v4-flash`).
 - **Configurable bash shell** — `config.shell` or `/shell` TUI command: platform-aware picker (Windows: pwsh/Git Bash/WSL bash; POSIX: bash/zsh/fish — availability-detected, custom path supported). Windows default cmd now forces UTF-8 per command (`chcp 65001`) — fixes garbled Chinese output on win11.
@@ -303,7 +300,7 @@ Code conventions: pure `.mjs`, no semicolons, no npm dependencies allowed (inclu
 
 ### 0.9.0 (2026-07)
 - **Checkpoint v2** — snapshot-before-destructive with full workspace copies, per-file restore (`cat` preview), auto-recover on failed apply, and escape-hatch hints when git checks fail
-- **Lifecycle Hooks** — `PreToolUse` / `PostToolUse` / `PostToolUseFailure` / `Notification` events. User-defined shell commands in config, with per-tool regex matching, timeout control, and `block`/`allow`/`notify` actions. Implemented in `src/hooks.mjs`, integrated into tool dispatch.
+- **Lifecycle Hooks** — `PreToolUse` / `PostToolUse` / `PostToolUseFailure` / `Stop` events. User-defined shell commands in config, with per-tool regex matching, timeout control, and `block`/`allow`/`notify` actions. Implemented in `thincoder-core/hooks.mjs`, integrated into tool dispatch.
 - **Built-in Skills (5)** — `pdf-create`, `xlsx-create`, `frontend-design`, `code-review`, `api-design` ship with the installation. Each is a standalone markdown instruction file using zero-dependency approaches (Chrome headless for PDF, PowerShell for Excel, etc.).
 - **Conversation message folding** — Long tool result blocks (>8 consecutive dim lines) auto-collapse to first 2 lines + "… N more lines — Enter to expand". `/fold on|off` toggles globally.
 - **Tree-shaped tasks** — `checklist` tool now supports hierarchical task IDs (`T1`, `T1.1`, `T1.2.1`) with auto-assigned numbering. `add` accepts `parent` parameter for subtree positioning. Indentation-based persistence in `checklist.md`.

package/bin/thincoder.mjs

@@ -7,7 +7,7 @@
  *   thincoder memory <sub>    Memory management: list / search / put / remove
  *   thincoder upgrade         Update to the latest version from npm
  *   thincoder completion <sh> Shell completion: bash / zsh / fish
- *   thincoder session gc    Session dir GC: --dry-run report / --confirm delete cold projects (SESSION.md §12)
+ *   thincoder session gc    Session dir GC: --dry-run report / --confirm delete cold projects (SESSION.md §6.12)
  *   thincoder acp             Agent Client Protocol server (stdio, for Zed/JetBrains/Paseo)
  *   thincoder -v              Print version
  *   thincoder --help          Print help
@@ -15,11 +15,14 @@
 
 import { readFileSync } from "node:fs"
 import { isAbsolute, join } from "node:path"
-import { runAgent } from "../src/agent.mjs"
-import { loadConfig, configPath } from "../src/config.mjs"
-import { cleanupTraces } from "../src/traces/trace-store.mjs"
-import { createMemory, syncDir } from "../src/memory.mjs"
-import { assembleAgent, teamConfig, gitAuthor, validateProvider } from "../src/cli/make-agent.mjs"
+import { runAgent } from "@thincoder/core/agent.mjs"
+import { loadConfig, configPath } from "@thincoder/core/config.mjs"
+import { tracesRoot } from "@thincoder/core/traces/trace-store.mjs"
+import { scheduleTraceCleanup } from "@thincoder/core/traces/trace-cleanup.mjs"
+import { createMemory, syncDir } from "@thincoder/core/memory.mjs"
+// 批 1 CORE-DEFECT-FIXES B3：onWait 相位值域 + 文案单源（消费面禁各自枚举——PROVIDER.md §6.20）
+import { waitStatusText } from "@thincoder/core/provider/wait-status.mjs"
+import { assembleAgent, attachManifest, teamConfig, gitAuthor, validateProvider } from "../src/cli/make-agent.mjs"
 import { memoryCommand } from "../src/cli/memory-command.mjs"
 import { setupWizard } from "../src/cli/setup-wizard.mjs"
 import { summarize, askPermission } from "../src/cli/permission.mjs"
@@ -27,6 +30,12 @@ import { distillCommand } from "../src/cli/distill-command.mjs"
 import { prepareCrashReporting, recentCrashHint, writeCrashRecord } from "../src/crash-reports.mjs"
 import { setTuiActive, restoreTerminalAfterCrash } from "../src/tui/tui-lifecycle.mjs"
 import { spawnTuiWrapped } from "../src/tui/wrapped-spawn.mjs"
+import { configurePromptInjections } from "@thincoder/core/prompt-files.mjs"
+import { CLI_PROMPT_INJECTIONS } from "../src/prompt-injections.mjs"
+
+// U2（CORE-UNIFICATION §2.6.3 专项补⑦ / §2.13.8（六））：CLI 端锚取值表——**进程入口、任何装配之前**注册一次（调用期应用 ⇒ 无导入序要求）。
+// 漏配 = 锚字面静默进模型 ⇒ 入口面用例（test/integration/cli-prompt-entry.test.mjs）显式覆盖本调用路径。
+configurePromptInjections(CLI_PROMPT_INJECTIONS)
 
 const [command, ...args] = process.argv.slice(2)
 // TUI-STDERR-CAPTURE（F-1）：TUI 启动（tui/无命令）默认包装——父 spawn 子 tee stderr 落盘（外部
@@ -93,8 +102,10 @@ const USAGE = `thincoder - thin coding agent
 
 Usage:
   thincoder                 Launch the interactive TUI
+  thincoder tui             Launch the interactive TUI (explicit form of the default)
   thincoder chat [--auto] <prompt>   One-shot agent run (tools enabled), streams reply to stdout; --auto approves all tool calls
   thincoder acp             Agent Client Protocol server (stdio — Zed/JetBrains/Paseo drive sessions)
+  thincoder acp --login     Authenticate this machine for ACP clients (terminal auth flow), then exit
   thincoder memory list [--type=<t>]           List memory entries
   thincoder memory search <query>              Search memory
   thincoder memory put --type=<t> --title=<t> --content=<c> [--tags=<t>]
@@ -105,7 +116,8 @@ Usage:
                             Extract knowledge candidates from a session
                             transcript file; confirm each before saving
   thincoder session gc --dry-run | --confirm <hash|--all>
-                            Session dir GC: report/delete cold project data (cold = manifest idle >90d, no live slots)
+                            Session dir GC: report/recycle cold & stale project data into a 7-day recycle bin
+                            (cold = manifest idle >90d; stale = no live owner + unreachable/empty cwd + 7-day window)
   thincoder upgrade         Update to the latest version from npm
   thincoder completion <sh>  Generate shell completion script (bash / zsh / fish)
   thincoder -v, --version   Print version
@@ -115,7 +127,7 @@ Config: ~/.thincoder/config.json — providers[] (one default model per channel)
 
 /** Unified message when no API key is configured */
 function noKeyMessage() {
-  return `No API key configured yet. Run "thincoder" to enter TUI, use /provider add and /provider key; or edit ${configPath} directly`
+  return `No API key configured yet. Run "thincoder" to enter TUI, use /model to add a provider and set its key; or edit ${configPath} directly`
 }
 
 /** Delay exit: process.exit right after fetch triggers libuv assertion on Windows/Node 24; let handles drain first */
@@ -123,12 +135,18 @@ function exitSoon(code) {
   setTimeout(() => process.exit(code), 100)
 }
 
-// D-TR9（2026-09-05）：启动轨迹清理——删除超过 traces.retentionHours（默认 24h）的
-// 轨迹文件（fire-and-forget——不阻塞启动——失败静默——与轨迹写盘同纪律）。
-try {
-  const startupCfg = loadConfig()
-  cleanupTraces({ retentionHours: startupCfg.traces?.retentionHours ?? 24 }).catch(() => {})
-} catch { /* 配置缺失/损坏 → 跳过清理（零风险） */ }
+// D-TR9（2026-09-05）：启动轨迹清理——删除超过 traces.retentionHours（默认 24h）的轨迹文件
+// （fire-and-forget——不阻塞启动——失败静默——与轨迹写盘同纪律）。
+// D-TR13（2026-09-21 · STARTUP-LATENCY 批 · TRACES.md §6.4）：触发面 = **会话型命令白名单**
+// （`tui` 含无参默认路径 `command === undefined` / `chat` / `acp`）；白名单外命令（`--version` /
+// `--help` / `completion` / `memory` / `sync` / `reindex` / `distill` / `upgrade` / `session`）
+// 零启动清理。**启动清理 = 启动窗外延迟拍**——核侧 `scheduleTraceCleanup`（`TRACE_CLEANUP_DELAY_MS` = 3s，自调度点起；失败静默 / 不 unref 保后台排空）。
+if (command === undefined || command === "tui" || command === "chat" || command === "acp") {
+  try {
+    const startupCfg = loadConfig()
+    scheduleTraceCleanup({ dir: tracesRoot(), retentionHours: startupCfg.traces?.retentionHours ?? 24 })
+  } catch { /* 配置缺失/损坏 → 跳过清理（零风险） */ }
+}
 
 switch (command) {
   case "chat": {
@@ -145,7 +163,7 @@ switch (command) {
     if (crashNotice) console.error(crashNotice)
 
     const agent = await assembleAgent()
-    // SESSION.md §8 D-S4（F4）+ MODEL-MERGE-SESSION：headless 无 TUI —— 可读错误 + 退出码 1，
+    // SESSION.md §6.8 D-S4（F4）+ MODEL-MERGE-SESSION：headless 无 TUI —— 可读错误 + 退出码 1，
     // 不弹 UI、不崩溃；文案改引 defaultModel（F-6 引导 A headless 面——/config → 默认模型）
     if (agent._providerInvalid) {
       const dm = agent.config?.defaultModel
@@ -169,7 +187,7 @@ switch (command) {
       // Wizard may have configured an embedding key: attach vector search
       const fresh = loadConfig()
       if (fresh.embedding?.apiKey && agent.memory && !agent.memory.embedder) {
-        const { createEmbedder } = await import("../src/embedding.mjs")
+        const { createEmbedder } = await import("@thincoder/core/embedding.mjs")
         agent.memory.embedder = createEmbedder(fresh.embedding)
       }
     }
@@ -179,8 +197,9 @@ switch (command) {
     try {
       await runAgent(agent, prompt, {
         onToken: (text) => process.stdout.write(text),
-        onWait: ({ phase, seconds }) => {
-          console.error(phase === "gate" ? `[rate-limit] TPM throttle waiting ~${seconds}s` : `[rate-limit] 429 response, retrying in ${seconds}s`)
+        onWait: (ev) => {
+          const s = waitStatusText(ev)
+          if (s) console.error(`[rate-limit] ${s}`)
         },
         onToolCall: (name, toolArgs) => {
           console.error(`\n[tool] ${name} ${summarize(toolArgs)}`)
@@ -227,7 +246,7 @@ switch (command) {
     const config = loadConfig()
     const memory = createMemory({ dbPath: config.memory.dbPath })
     if (config.embedding?.apiKey) {
-      const { createEmbedder } = await import("../src/embedding.mjs")
+      const { createEmbedder } = await import("@thincoder/core/embedding.mjs")
       memory.embedder = createEmbedder(config.embedding)
     }
     if (config.memory.projectDir) {
@@ -248,7 +267,7 @@ switch (command) {
       break
     }
     const memory = createMemory({ dbPath: config.memory.dbPath })
-    const { ensureClone, pullTeam } = await import("../src/git/gitmem.mjs")
+    const { ensureClone, pullTeam } = await import("@thincoder/core/git/gitmem.mjs")
     try {
       const cloned = await ensureClone(team)
       if (cloned) console.log(`Cloned team repo to ${team.dir}`)
@@ -281,7 +300,7 @@ switch (command) {
     }
     const team = teamConfig(config)
     if (team) {
-      const { ensureClone } = await import("../src/git/gitmem.mjs")
+      const { ensureClone } = await import("@thincoder/core/git/gitmem.mjs")
       await ensureClone(team)
       const s = await syncDir(memory, { layer: "team", dir: team.dir })
       total.added += s.added
@@ -292,22 +311,26 @@ switch (command) {
 
   case "tui":
   case undefined: {
-    const agent = await assembleAgent()
-    // SESSION.md §8 D-S1：TUI 路径在 startTUI 前清空无效 provider——空 provider 不流入 runAgent
+    // 恢复上次的会话（同一项目目录）；provider 按保存的名字切回（用户上次可能换过模型）
+    // 2026-09-05 §6.10（R4）：恢复决策按本端记录 resumeSlot（D-2 ①②③）——manifest active
+    // 只作"无记录端"的一次性继承源，不再作本端恢复第一依据（D-6）。
+    // 2026-09-18（装配门禁批 #30 · KD-M1-13 / KD-M1-15）：resumeSlot **前移至装配之前**——
+    // 装配期模式门判据 = 会话权威值（槽优先 + config 回退）；恢复记录经 slotData 形参进
+    // 装配钩子（同进程同一调用前移 ⇒ 零新增写动作；钩子内不调 resumeSlot——非纯读）。
+    const { resumeSlot, applySession, sessionDescriptor } = await import("@thincoder/core/session.mjs")
+    // F-MI7：resumeSlot = async（探测束不阻塞事件循环）——此处必须 await
+    const { slot, data } = await resumeSlot(process.cwd())
+    const agent = await assembleAgent({ slotData: data })
+    // SESSION.md §6.8 D-S1：TUI 路径在 startTUI 前清空无效 provider——空 provider 不流入 runAgent
     // （崩溃源：chat() 缺 model → 网关 400 或 fetch("undefined/...") TypeError）
     if (agent._providerInvalid) agent.provider = null
     const config = loadConfig()
-    // 恢复上次的会话（同一项目目录）；provider 按保存的名字切回（用户上次可能换过模型）
-    // 2026-09-05 §10（R4）：恢复决策按本端记录 resumeSlot（D-2 ①②③）——manifest active
-    // 只作"无记录端"的一次性继承源，不再作本端恢复第一依据（D-6）。
-    const { resumeSlot, applySession, sessionDescriptor } = await import("../src/session.mjs")
-    const { slot, data } = resumeSlot(process.cwd())
     if (data) {
       // applySession 内部已按槽复合重算 compactThreshold（auto 时）——不再需要 switched 分支
-      // TUI-OOM-ROOTCAUSE（SESSION.md §14.3.4）：传 slot → 绑定记录存储（身份核验 + 对账）
+      // TUI-OOM-ROOTCAUSE（SESSION.md §6.14）：传 slot → 绑定记录存储（身份核验 + 对账）
       // ——人读线 = 尾窗（磁盘为准）；未传 = 模式 F（全量数组）
       applySession(agent, data, { slot })
-      // SESSION.md §11.2（2026-09-08——N6 评审 🔴 修复）：process restarted 句 = 进程级
+      // SESSION.md §6.11（2026-09-08——N6 评审 🔴 修复）：process restarted 句 = 进程级
       // 信号——仅本启动 resume 路径设一次（真进程重启恢复盘上会话）；/session 切换与 ACP
       // 加载走同一 applySession 收敛但不设（不误报进程重启）。prepareRun 发句即清——进程
       // 内一次。resumed:yes 独立由 applySession 的恢复事件武装（data.history 非空）。
@@ -317,6 +340,10 @@ switch (command) {
     // "load → 首回合保存"窗口内并发方翻 active 导致的静默迁移）；/new 经 resetSessionState
     // 清 _slot（newSession 已认领 + 写记录，语义保留）
     agent._slot = slot
+    // M1 重估点（会话起点②——applySession 之后 · KD-M1-13 取值点②）：CLI 的工程模式权威值 =
+    // 会话槽（/eng 只写槽不写 config.json）；此时 agent.config.agent.engineering 已由
+    // applySession 按槽订正 ⇒ 与装配期判据同值 ⇒ 幂等重估（值同 ⇒ 无副作用）。
+    attachManifest(agent)
     // D-S3 优先级补全：applySession 可能已用会话中的有效 provider 修复（config 无效 + 会话有效）——
     // 修复后复验清除标记，仅当两者都无效才弹重选（validateProvider 幂等）
     if (agent._providerInvalid) validateProvider(agent)
@@ -382,15 +409,22 @@ switch (command) {
   }
 
   case "acp": {
-    const { runAcpServer } = await import("../src/acp.mjs")
+    const { runAcpServer, runAcpLogin } = await import("../src/acp.mjs")
+    // §11.2 改法 4：`args` 语义 = 追加到已配置的 agent 调用——`--login` = 终端认证流程，
+    // 不进 stdio 服务模式（不带该旗标时行为零变）；退出码语义 = 0 成功 / 非 0 失败。
+    if (args.includes("--login")) {
+      exitSoon(await runAcpLogin())
+      break
+    }
     await runAcpServer()
     break
   }
 
   case "session": {
-    // SESSION.md §12：会话目录 GC 手动面（F2 冷 cwd 报告/删除——VS Code 端无 shell 通道，仅 CLI）
-    const { runSessionGc } = await import("../src/session-gc.mjs")
-    process.exitCode = runSessionGc(args)
+    // SESSION.md §6.12 / §6.17：会话目录 GC 显式面（冷 cwd 90 天面 + 三合取存量组全量面）——
+    // 双端同面（2026-09-21 端差注销：VS Code 端命令 `thincoder.sessionGc` 走同一核数据面）。
+    const { runSessionGc } = await import("@thincoder/core/session-gc.mjs")
+    process.exitCode = await runSessionGc(args)
     break
   }
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "thincoder",
-  "version": "0.12.62",
-  "description": "Thin coding agent - zero dependencies, no build step, Node.js native. Sharp code, zero bloat.",
+  "version": "0.12.64",
+  "description": "Thin coding agent - zero third-party dependencies, no build step, Node.js native. Sharp code, zero bloat.",
   "keywords": [
     "ai",
     "agent",
@@ -19,6 +19,9 @@
   "engines": {
     "node": ">=24"
   },
+  "dependencies": {
+    "@thincoder/core": "^0.9.1"
+  },
   "files": [
     "bin/",
     "src/",
@@ -31,12 +34,10 @@
     "url": "git+https://github.com/xinbo-tech/thincoder.git"
   },
   "scripts": {
-    "test": "node test/run-fast.mjs",
+    "test": "node test/run.mjs",
     "prepublishOnly": "npm run release:check",
     "lint": "node scripts/check-syntax.mjs",
-    "release:check": "node scripts/release-check.mjs",
-    "test:full": "node test/run-full.mjs",
-    "test:integration": "node test/run-integration.mjs"
+    "release:check": "node scripts/release-check.mjs"
   },
   "author": "liwei <liwei@51marine.com> (上海新舶)",
   "license": "MIT"

package/src/acp/bridge.mjs

@@ -19,10 +19,12 @@
  * End-of-turn is NOT a notification: `session/prompt` resolves with
  * `{ stopReason: "end_turn" }` (kimi session.ts parity).
  */
-import { detectDanger, normalizeEOL, joinWithEol } from "../tools/shared.mjs"
-import { computeEditEntry, validateEditEntry, assertEditArgsExclusive, hasLineParams } from "../tools/edit-diff.mjs"
+import { detectDanger, normalizeEOL, joinWithEol } from "@thincoder/core/tools/shared.mjs"
+import { computeEditEntry, validateEditEntry, assertEditArgsExclusive, hasLineParams } from "@thincoder/core/tools/edit-diff.mjs"
 // 第 27 批 §12.3①/③：relay 前缀文法单一权威（模块直连——不自持正则副本）。
-import { parseRelayPath } from "../agent/relay-prefix.mjs"
+import { parseRelayPath } from "@thincoder/core/agent/relay-prefix.mjs"
+// 批 1 CORE-DEFECT-FIXES B3：onWait 相位值域 + 文案单源（本面仅日志——PROVIDER.md §6.20）
+import { waitStatusText } from "@thincoder/core/provider/wait-status.mjs"
 
 /** ACP ToolKind inference (schema v1 enum) — best-effort, clients render by kind. */
 function inferToolKind(name) {
@@ -52,11 +54,18 @@ function permissionToBoolean(response) {
 
 /**
  * Build the runAgent callbacks for an ACP session.
- * @param {{ sessionId: string, notify: (m, p) => void, request: (m, p, o?) => Promise<any>, log?: (s) => void }} deps
+ * @param {{ sessionId: string, notify: (m, p) => void, request: (m, p, o?) => Promise<any>, log?: (s) => void,
+ *           clientCaps?: { fs?: { readTextFile?: boolean, writeTextFile?: boolean } } }} deps
+ *   `clientCaps` = the §3.4 snapshot (taken at `session/new`); capabilities omitted by the
+ *   client are UNSUPPORTED ⇒ the fs reverse-RPC face stays local (§11.4 — never 30s 干等).
  */
-export function buildAcpCallbacks({ sessionId, notify, request, log = () => {} }) {
+export function buildAcpCallbacks({ sessionId, notify, request, log = () => {}, clientCaps = {} }) {
   const update = (sessionUpdate, extra = {}) =>
     notify("session/update", { sessionId, update: { sessionUpdate, ...extra } })
+  // §11.4 fs 能力位（默认 false——文档「MUST treat all capabilities omitted … as UNSUPPORTED」）；
+  // 判据同构 = kimi server.ts:626-636。edit 桥需读回 + 写回 ⇒ 两位皆真才路由。
+  const canReadFile = clientCaps?.fs?.readTextFile === true
+  const canWriteFile = clientCaps?.fs?.writeTextFile === true
   let toolSeq = 0
   // D15.8（TOOLS.md §15.1）：tool id FIFO 队列——并行同名工具按 call 序配对（dispatch B1
   // 已测：并行结果回调顺序 = call 顺序——T-TS8/T-TS9）。取代旧 Map 按名覆盖（后写覆盖先写
@@ -99,7 +108,10 @@ export function buildAcpCallbacks({ sessionId, notify, request, log = () => {} }
   // ——与本地通道逐字一致（NF15.6b / AC15.10：not found / occurrences / 空 old / 空 new）。
   const EDIT_ABORT_PREFIX = "edit aborted (atomic — no files written): "
 
+  // 不变量（§11.7-2）：**任何** fs/* 反向 RPC 发出前必过客户端能力位——守卫住在本函数内
+  // （防御面：路由分支先判，守卫兜底，漏判不发静默超时）。
   const readBuffer = async (p) => {
+    if (!canReadFile) throw new Error("client does not advertise fs.readTextFile")
     try {
       const read = await request("fs/read_text_file", { sessionId, path: p }, { timeoutMs: 30000 })
       return read?.text ?? read?.content ?? ""
@@ -108,6 +120,7 @@ export function buildAcpCallbacks({ sessionId, notify, request, log = () => {} }
     }
   }
   const writeBuffer = async (p, content) => {
+    if (!canWriteFile) throw new Error("client does not advertise fs.writeTextFile")
     try {
       await request("fs/write_text_file", { sessionId, path: p, content }, { timeoutMs: 30000 })
     } catch (e) {
@@ -176,12 +189,14 @@ export function buildAcpCallbacks({ sessionId, notify, request, log = () => {} }
       // Strip the subagent `[model]` metadata token ([model]<name>) — it's a
       // TUI/webview display signal, not conversation content, and must not reach ACP clients.
       if (/^\[model\]/.test(payload)) return
-      // D7 (AGENT-LOOP.md §7.2 + §19.5 round2 #6 + D-M7b): strip ⟦ev⟧ event tokens (turn/
-      // approval/done/settled/stopped/async — async = §19.5 D-M7b zero-field spawn marker)
-      // — they carry RS control characters and are a TUI display signal; structured ACP
-      // mapping (tool_call_update) is tracked separately in docs/TODO.md.
+      // D7 + 批 1 B2/D13（ACP-CLIENT.md §7.2）：剥离判据 = **形态**（`⟦ev⟧<小写名>` + RS
+      // 终止符同现），不再枚举事件名——枚举是漏项发生器（`queued` / `cancelled` 发射点在位
+      // 而白名单未跟 ⇒ 随 agent_message_chunk 泄漏给客户端）。终止符约束 load-bearing：
+      // 放宽为无终止符形态会吞真实正文（先例教训见 src/tui/render.mjs:250-252）。
+      // 事件 token 是 TUI 显示信号；结构化 ACP 映射（tool_call_update）另行跟踪
+      // （docs/TODO.md）。
       // 有意为之：控制字符协议/转义序列剥离正则（ANSI/⟦ev⟧/SGR/history 双线分隔）
-      if (/^⟦ev⟧(?:turn|approval|done|settled|stopped|async)\x1e/.test(payload)) return
+      if (/^⟦ev⟧[a-z]+\x1e/.test(payload)) return
       if (!payload) return // D6：剥后空载荷不发通知（防噪声空 chunk）
       update("agent_message_chunk", { content: { type: "text", text: payload } })
     },
@@ -193,7 +208,10 @@ export function buildAcpCallbacks({ sessionId, notify, request, log = () => {} }
       update("agent_thought_chunk", { content: { type: "text", text: payload } })
     },
     onUsage: (usage) => update("usage_update", { usage }),
-    onWait: ({ phase, seconds }) => log(`[rate-limit] ${phase} waiting ~${seconds}s`),
+    onWait: (ev) => {
+      const s = waitStatusText(ev)
+      if (s) log(`[rate-limit] ${s}`)
+    },
     onCompress: () => log("[context] auto-compacted"),
 
     onToolCall: (name, args, toolId) => {
@@ -265,17 +283,19 @@ export function buildAcpCallbacks({ sessionId, notify, request, log = () => {} }
     },
 
     /**
-     * fs reverse-RPC router (dispatch.mjs toolRouter, M2):
-     * - write            → fs/write_text_file (full content, no read-back)
+     * fs reverse-RPC router (dispatch.mjs toolRouter, M2) — 能力位 + 工具形态双判（§11.4）：
+     * - write            → fs/write_text_file (full content, no read-back) — 需 clientCaps.fs.writeTextFile
      * - edit              → fs/read_text_file → computeEditEntry（本地权威——单/数组形态）→ fs/write_text_file
      *                      （§15.1 D15.7 委派——双通道同语义；数组=原子批量——逐条目串行累积）
+     *                      — 需 readTextFile ∧ writeTextFile（读回是 edit 桥的必要前提）
      * - apply_patch       → local (unified-diff application is not routed in M2)
      * - delete, reads     → local
+     * 未宣告 ⇒ `{ handled: false }` 回落本地（零反向 RPC、零超时等待）。
      */
     toolRouter: async (name, args) => {
       const base = name.includes("/") ? name.split("/").pop() : name
       const path = pathOf(args)
-      if (base === "write" && path) {
+      if (base === "write" && path && canWriteFile) {
         if (typeof args?.content !== "string") {
           return { handled: true, result: `Error: write content must be a string (got ${typeof args?.content})` }
         }
@@ -290,7 +310,7 @@ export function buildAcpCallbacks({ sessionId, notify, request, log = () => {} }
       // 2026-09-08 D1：单形态按行号改（path + line/startLine/endLine + new_string——无
       // old_string）同样走 IDE 缓冲通道（hasLineParams 判定）——否则回落本地写盘会与
       // IDE 缓冲脱敏；editSingle → computeEditEntry 行号语义自动继承。
-      if (base === "edit" && (Array.isArray(args?.edits) || (path && typeof args?.new_string === "string" && (typeof args?.old_string === "string" || hasLineParams(args))))) {
+      if (base === "edit" && canReadFile && canWriteFile && (Array.isArray(args?.edits) || (path && typeof args?.new_string === "string" && (typeof args?.old_string === "string" || hasLineParams(args))))) {
         try {
           const text = Array.isArray(args?.edits) ? await editBatch(args) : await editSingle(path, args)
           return { handled: true, result: text }