thincoder 0.12.63 → 0.12.64

package/CHANGELOG.md

@@ -1,3 +1,21 @@
+## [0.12.64] — 2026-09-21
+
+> 0.12.63 → 0.12.64（连续号——发布时定号）
+
+### Added
+
+- **PROJECT-MANIFEST 模型（按用点解析）**：owning-ancestor 归属 + 五级梯发现；整档缺失非致命（启动降级 + 建档流提示）。
+- **批档生命周期工具** `batch`（create / append / status / close）· **台账执行人列**（F-LX1）· **信号行两档标签**（digest/ask）+ 起始行 · **会话认领释放**（F-CR1/CR2，拒绝零写入）。
+- **启动非阻塞**：会话 GC 异步化 + 陈旧清扫 + traces 清理；**启动加载行**（包裹父进程 + TUI 首帧，含修复轮收正）。
+
+### Changed
+
+- **工程模式排除 `plan` 角色**（FR31）。
+
+### Fixed
+
+- 批别名残留（断言 / 提示词文档引用 / 错误串）· VSC 子代理块标题对齐（CLI 标题段补全）· README 依赖声明口径收正（零三方运行时依赖）。
+
 ## [0.12.63] — 2026-09-21
 
 > 0.12.62 → 0.12.63（连续号——发布时定号；本版随核首发联动）

package/README.md

@@ -2,13 +2,13 @@
 
 **Sharp Code, Zero Bloat.**
 
-**A "thin" AI coding agent: pure `.mjs`, no build step, zero npm dependencies, native Node.js.**
+**A "thin" AI coding agent: pure `.mjs`, no build step, zero third-party dependencies, native Node.js.**
 
 The "Thin" in ThinCoder doesn't mean "feature-poor" — it means **sharp thinking, straight to the point** — like a blade.
 While every AI agent races to be "all-powerful", ThinCoder plays the opposite card: **restraint, precision, no filler**.
 Its persona is a geek engineer of few words who cuts to the bone: give it a complex requirement, get back a clean implementation.
 
-Design philosophy (the entire meaning of the name): if the Node standard library can do it, no dependency is allowed. The project's `node_modules` is empty.
+Design philosophy (the entire meaning of the name): if the Node standard library can do it, no third-party dependency is allowed. The project's `node_modules` contains no third-party packages — only the first-party `@thincoder/core` shared core (a local link in development, resolved from the npm registry for releases).
 
 ## Features
 
@@ -166,43 +166,25 @@ Configuration comes exclusively from `~/.thincoder/config.json` — no environme
 ## Architecture
 
 ```
-bin/thincoder.mjs   command entry (tui / chat / memory / sync / distill)
+bin/thincoder.mjs   command entry (tui / chat / memory / sync / distill / reindex / completion / upgrade / acp / session gc)
+bin/thincoder.cjs   CommonJS shim → bin/thincoder.mjs
 src/
-  provider/         LLM calls — core.mjs (fetch, SSE streaming, reasoning_content, usage, retries),
-                    rate.mjs (TPM/RPM proactive rate gate), index.mjs (entry)
-  embedding.mjs     vector embeddings (OpenAI-compatible /v1/embeddings)
-  tools/            16 builtin tools + MCP wrapping + readonly scheduling flags
-                    index.mjs (registry), file/git/patch/system/web.mjs (groups), shared.mjs (schema utils),
-                    repomap.mjs (repo dependency outline: import/export regex parsing, on-demand via tool)
-  tools.mjs         re-export shim → src/tools/index.mjs
-  mcp/              MCP client — helpers.mjs, transport-stdio/http/ws.mjs (JSON-RPC, zero-dependency)
-  mcp.mjs           MCP client entry (connectMcpServer), delegates to src/mcp/
-  agent.mjs         main loop + two-phase tool execution + reminder injection + completion guard + fix-verify loop
-                    + incremental indexing (auto reindexFile after write/edit/delete)
-  agent/            agent loop helpers — dispatch.mjs (two-phase execution), setup.mjs (system prompt assembly), helpers.mjs
-  agent-tools/      self-discipline tools (task/plan/goal/verify/subagent/skill/recent_changes)
-  context.mjs       rough token estimation + history compaction + task re-injection
-  memory/           three-layer memory — schema.mjs (DDL/constants), core.mjs (CRUD + retrieval),
-                    code-index.mjs + code-sync.mjs (code_chunks), docs.mjs (doc_chunks)
-  memory.mjs        re-export shim → src/memory/*
-  session.mjs       session persistence (unlimited archive slots, isolated by project cwd, process-level isolation via sessionId + slotSessions)
-  skills.mjs        skill discovery/loading (.thincoder/skills/*.md)
-  markdown.mjs      entry format (frontmatter parse/serialize)
-  git/              checkpoint.mjs (git patch snapshots / rewind), gitmem.mjs (Team layer git sync)
-  distill.mjs       session knowledge extraction (candidates + human confirmation)
-  config.mjs        config loading
-  tui/              bare-ANSI terminal UI — index.mjs (startTUI), render.mjs (drawing primitives),
-                    render-frame.mjs (frame layout), render-conversation.mjs (conversation panel),
-                    markdown.mjs (lightweight inline markdown → ANSI), mouse.mjs (SGR clicks),
-                    clipboard.mjs (paste/copy), ansi.mjs
-  tui.mjs           re-export shim → src/tui/index.mjs
-  tui-render.mjs    re-export shim → src/tui/render.mjs
-  prompts/          prompt texts — slot-based (PROMPT-SYSTEM): persona-engineering / persona-normal /
-                    persona-{eng-coder,explore,coder,plan,eng-designer} + common + discipline-engineering / discipline-normal
-                    + special modules (consult-base / advisor-design / advisor-round{1,2,3});
-                    assembly = assemblePrompt (prompt-overlays.mjs): persona → common → discipline → [4] AGENTS+skills
+  acp/                   Agent Client Protocol bridge — bridge, client caps, session/slot handlers, login, transport
+  acp.mjs                thincoder acp entry → src/acp/
+  cli/                   top-level command implementations — setup-wizard, memory-command, distill-command,
+                         make-agent (assembly), permission
+  completions.mjs        shell completion scripts (thincoder completion <shell>)
+  crash-reports.mjs      crash capture and forensics — fatal records, stderr capture, heap snapshots
+  distill.mjs            session knowledge extraction (candidates + human confirmation)
+  heap-watch.mjs         heap telemetry / watchdog
+  prompt-injections.mjs  prompt-anchor values for this end — tool face (bash / question)
+  tui/                   bare-ANSI terminal UI — index.mjs (startTUI), frame/conversation rendering,
+                         key handling, mouse/clipboard, the cmd-* command family, subagent panels
+  tui.mjs                re-export shim → src/tui/index.mjs
+  upgrade.mjs            version check and self-upgrade
 test/               node:test offline unit tests (npm test)
-scripts/            real-environment verification scripts (compaction, team sync)
+scripts/            repo-side scripts — release check, doc-impact, syntax/endpoint probes,
+                    real-environment verification (compaction, team sync)
 ```
 
 Key design decisions:
@@ -222,7 +204,7 @@ node scripts/verify-compress.mjs  # real-API verification of context compaction
 node scripts/verify-team.mjs      # team memory A->git->B full-chain verification (local git, offline)
 ```
 
-Code conventions: pure `.mjs`, no semicolons, no npm dependencies allowed (including devDependencies).
+Code conventions: pure `.mjs`, no semicolons, no third-party npm dependencies allowed (including devDependencies) — the first-party `@thincoder/core` shared core is the only npm dependency.
 
 ## Roadmap
 
@@ -230,6 +212,20 @@ Code conventions: pure `.mjs`, no semicolons, no npm dependencies allowed (inclu
 
 ## Changelog
 
+### 0.12.64 (2026-09)
+- **PROJECT-MANIFEST model** — per-use project resolution (owning-ancestor discovery + a five-step ladder); a missing manifest is no longer fatal (degrade at startup + a clear prompt to build one).
+- **Batch record lifecycle tool** (`batch`: create / append / status / close), **ledger executor column**, **two-tier signal lines** (digest/ask) with the start line, and **session claim release** (rejections write nothing).
+- **Non-blocking startup** — async session GC, stale sweep, traces cleanup; the CLI start line shares the wrapped-parent + TUI first-paint path.
+- **Engineering mode**: the `plan` role is excluded from the engineering tool set (FR31).
+- **Fixes** — batch-alias residue across assertions, prompt doc-refs and error strings; subagent block-title parity; README dependency claims corrected to zero third-party runtime deps.
+
+### 0.12.63 (2026-09)
+- **Core dependency live** — now depends on `@thincoder/core@^0.9.1` (the shared-mechanism core's first npm release); installed packages resolve the core from the registry instead of shipping duplicated copies.
+- **Fix: smoke probe always skipped** — `isBailianHost` was imported from the wrong module behind a silent catch, so the pre-release real-endpoint smoke test never actually ran. Fixed; smoke now performs the real three-call thinking-mapping check.
+
+### 0.12.62 (2026-09)
+- Last release in the pre-core shape (self-contained copies); 0.12.63 onward resolves the core from `@thincoder/core`.
+
 ### 0.12.11 (2026-08)
 - **Subagent model per type** — `subagent` tool `model` arg, `config.agent.subagentModels` (per explore/plan/coder/eng-coder) and `config.agent.subagentModel` (global fallback); priority: tool arg > type > global > parent provider. `/submodel` TUI command: picker over 5 slots (global + 4 roles) with provider→model selection, or direct args (`/submodel coder deepseek:deepseek-v4-flash`).
 - **Configurable bash shell** — `config.shell` or `/shell` TUI command: platform-aware picker (Windows: pwsh/Git Bash/WSL bash; POSIX: bash/zsh/fish — availability-detected, custom path supported). Windows default cmd now forces UTF-8 per command (`chcp 65001`) — fixes garbled Chinese output on win11.

package/bin/thincoder.mjs

@@ -17,7 +17,8 @@ import { readFileSync } from "node:fs"
 import { isAbsolute, join } from "node:path"
 import { runAgent } from "@thincoder/core/agent.mjs"
 import { loadConfig, configPath } from "@thincoder/core/config.mjs"
-import { cleanupTraces } from "@thincoder/core/traces/trace-store.mjs"
+import { tracesRoot } from "@thincoder/core/traces/trace-store.mjs"
+import { scheduleTraceCleanup } from "@thincoder/core/traces/trace-cleanup.mjs"
 import { createMemory, syncDir } from "@thincoder/core/memory.mjs"
 // 批 1 CORE-DEFECT-FIXES B3：onWait 相位值域 + 文案单源（消费面禁各自枚举——PROVIDER.md §6.20）
 import { waitStatusText } from "@thincoder/core/provider/wait-status.mjs"
@@ -32,9 +33,8 @@ import { spawnTuiWrapped } from "../src/tui/wrapped-spawn.mjs"
 import { configurePromptInjections } from "@thincoder/core/prompt-files.mjs"
 import { CLI_PROMPT_INJECTIONS } from "../src/prompt-injections.mjs"
 
-// U2（CORE-UNIFICATION §2.6.3 专项补⑦ / §2.13.8（六））：CLI 端锚取值表——**进程入口、
-// 任何装配之前**注册一次（调用期应用 ⇒ 无导入序要求）。漏配 = 锚字面静默进模型
-// ⇒ 入口面用例（test/integration/cli-prompt-entry.test.mjs）显式覆盖本调用路径。
+// U2（CORE-UNIFICATION §2.6.3 专项补⑦ / §2.13.8（六））：CLI 端锚取值表——**进程入口、任何装配之前**注册一次（调用期应用 ⇒ 无导入序要求）。
+// 漏配 = 锚字面静默进模型 ⇒ 入口面用例（test/integration/cli-prompt-entry.test.mjs）显式覆盖本调用路径。
 configurePromptInjections(CLI_PROMPT_INJECTIONS)
 
 const [command, ...args] = process.argv.slice(2)
@@ -116,7 +116,8 @@ Usage:
                             Extract knowledge candidates from a session
                             transcript file; confirm each before saving
   thincoder session gc --dry-run | --confirm <hash|--all>
-                            Session dir GC: report/delete cold project data (cold = manifest idle >90d, no live slots)
+                            Session dir GC: report/recycle cold & stale project data into a 7-day recycle bin
+                            (cold = manifest idle >90d; stale = no live owner + unreachable/empty cwd + 7-day window)
   thincoder upgrade         Update to the latest version from npm
   thincoder completion <sh>  Generate shell completion script (bash / zsh / fish)
   thincoder -v, --version   Print version
@@ -134,12 +135,18 @@ function exitSoon(code) {
   setTimeout(() => process.exit(code), 100)
 }
 
-// D-TR9（2026-09-05）：启动轨迹清理——删除超过 traces.retentionHours（默认 24h）的
-// 轨迹文件（fire-and-forget——不阻塞启动——失败静默——与轨迹写盘同纪律）。
-try {
-  const startupCfg = loadConfig()
-  cleanupTraces({ retentionHours: startupCfg.traces?.retentionHours ?? 24 }).catch(() => {})
-} catch { /* 配置缺失/损坏 → 跳过清理（零风险） */ }
+// D-TR9（2026-09-05）：启动轨迹清理——删除超过 traces.retentionHours（默认 24h）的轨迹文件
+// （fire-and-forget——不阻塞启动——失败静默——与轨迹写盘同纪律）。
+// D-TR13（2026-09-21 · STARTUP-LATENCY 批 · TRACES.md §6.4）：触发面 = **会话型命令白名单**
+// （`tui` 含无参默认路径 `command === undefined` / `chat` / `acp`）；白名单外命令（`--version` /
+// `--help` / `completion` / `memory` / `sync` / `reindex` / `distill` / `upgrade` / `session`）
+// 零启动清理。**启动清理 = 启动窗外延迟拍**——核侧 `scheduleTraceCleanup`（`TRACE_CLEANUP_DELAY_MS` = 3s，自调度点起；失败静默 / 不 unref 保后台排空）。
+if (command === undefined || command === "tui" || command === "chat" || command === "acp") {
+  try {
+    const startupCfg = loadConfig()
+    scheduleTraceCleanup({ dir: tracesRoot(), retentionHours: startupCfg.traces?.retentionHours ?? 24 })
+  } catch { /* 配置缺失/损坏 → 跳过清理（零风险） */ }
+}
 
 switch (command) {
   case "chat": {
@@ -414,7 +421,8 @@ switch (command) {
   }
 
   case "session": {
-    // SESSION.md §6.12：会话目录 GC 手动面（F2 冷 cwd 报告/删除——VS Code 端无 shell 通道，仅 CLI）
+    // SESSION.md §6.12 / §6.17：会话目录 GC 显式面（冷 cwd 90 天面 + 三合取存量组全量面）——
+    // 双端同面（2026-09-21 端差注销：VS Code 端命令 `thincoder.sessionGc` 走同一核数据面）。
     const { runSessionGc } = await import("@thincoder/core/session-gc.mjs")
     process.exitCode = await runSessionGc(args)
     break

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "thincoder",
-  "version": "0.12.63",
-  "description": "Thin coding agent - zero dependencies, no build step, Node.js native. Sharp code, zero bloat.",
+  "version": "0.12.64",
+  "description": "Thin coding agent - zero third-party dependencies, no build step, Node.js native. Sharp code, zero bloat.",
   "keywords": [
     "ai",
     "agent",

package/src/acp/handlers-session.mjs

@@ -11,8 +11,13 @@
  */
 import { resolve } from "node:path"
 import { normalizeCwd, bindRecordStore, newSession, slotPath } from "@thincoder/core/session.mjs"
+import { PLAN_ENGINEERING_REFUSED } from "@thincoder/core/agent-tools/plan.mjs"
 import { ACP_ERRORS } from "./transport.mjs"
 
+/** ENG-PLAN-EXCLUSION（FR31 ② · E7「命令面逐面钉定」）：工程真值 = 核单源同键
+ *  `agent.config.agent.engineering`。 */
+const isEngineering = (agent) => agent?.config?.agent?.engineering === true
+
 /** Session-level config options exposed to clients — schema `SessionConfigOption.required = ["id","name"]`
  *  (响应侧用 `id`；请求侧 `SetSessionConfigOptionRequest` 用 `configId`——不对称属契约本身 · §11.3 G2-8). */
 export const CONFIG_OPTIONS = [
@@ -209,6 +214,13 @@ export function createSessionHandlers(ctx) {
       if (!configId || value === undefined) {
         return { error: { ...ACP_ERRORS.INVALID_PARAMS, message: "set_config_option requires configId and value" } }
       }
+      // ENG-PLAN-EXCLUSION（FR31 ② / 评审轮 1 发现 #4 出口钉定）：工程模式 ⇒ plan 面**前置判**
+      // ⇒ 携共用文案的 INVALID_PARAMS。`applyConfigOption` 布尔契约零改（`false` 仍 = unknown
+      // configId——工程拒绝不经该路径，下方 `:unknown configId` 误导文案对 mode=plan 不再可达）；
+      // `mode:"normal"` 照常接受（唯一合法态，幂等）。
+      if (configId === "mode" && value === "plan" && isEngineering(found.session.agent)) {
+        return { error: { ...ACP_ERRORS.INVALID_PARAMS, message: PLAN_ENGINEERING_REFUSED } }
+      }
       const applied = applyConfigOption(found.session.agent, configId, value)
       if (!applied) {
         return { error: { ...ACP_ERRORS.INVALID_PARAMS, message: `unknown configId: ${configId}` } }
@@ -229,6 +241,11 @@ export function createSessionHandlers(ctx) {
       if (params.mode !== "plan" && params.mode !== "normal") {
         return { error: { ...ACP_ERRORS.INVALID_PARAMS, message: "mode must be plan or normal" } }
       }
+      // ENG-PLAN-EXCLUSION（FR31 ② / 同 #4）：工程模式 + `mode:"plan"` ⇒ 前置判 ⇒ 携共用文案
+      // 的 INVALID_PARAMS（状态零变、零通知）；`normal` 照常（幂等）。
+      if (params.mode === "plan" && isEngineering(found.session.agent)) {
+        return { error: { ...ACP_ERRORS.INVALID_PARAMS, message: PLAN_ENGINEERING_REFUSED } }
+      }
       found.session.agent.planMode = params.mode === "plan"
       notifyRef.current("session/update", {
         sessionId: String(params.sessionId),

package/src/cli/make-agent.mjs

@@ -8,7 +8,7 @@ import { discoverRules } from "@thincoder/core/rules.mjs"
 // （静态表 ∪ memory / code_search / doc_search / repo_outline / settings / peer_instances 六面 ∪ 门控 read_image）。
 // 传 `model` 必需：漏传 ⇒ `read_image` 对所有模型静默消失（门判据 = specForModel(model)?.multimodal）。
 import { assembleBuiltinTools } from "@thincoder/core/tools/index.mjs"
-import { resolveEngineeringManifest } from "@thincoder/core/manifest.mjs"
+import { resolveEngineeringManifest, projectView } from "@thincoder/core/manifest.mjs"
 
 /** 第 27 批 §12.3⑤（R-A1.1）：装配期工具剔除——按 `name` 过滤的纯函数（机验锚）。
  *  恒等语义：空列表 / 零命中 → 原数组原样返回（零意外剔除——T15）。
@@ -123,9 +123,9 @@ export async function assembleAgent({ excludeTools = [], slotData } = {}) {
   agent.activeModel = provider.model ?? null
   agent._mcpWarnings = mcpWarnings
   // M1 装配钩子（会话起点①——装配期）：判据 = 会话权威值（`slotData` 槽值优先 + config 回退）；
-  // 附着 agent.manifest 供下游 M2–M9 读面（普通会话 = null）。钩子后移的可观察后果（拒 / 建档
-  // 晚于 memory sync / MCP 连接 / 工具装配——功能等价，仍在进入正常循环之前）见
-  // docs/core/design/MANIFEST.md §2.2。
+  // 附着 agent.manifest 供下游 M2–M9 读面（普通会话 = null）；非 ok 态不抛（启动零拒绝）。
+  // 钩子后移的可观察后果（报明 / 建档晚于 memory sync / MCP 连接 / 工具装配——功能等价，仍在
+  // 进入正常循环之前）见 docs/core/design/MANIFEST.md §2.2。
   attachManifest(agent, { cwd, slotData })
   // SESSION.md §6.8 D-S1：assembleAgent 后唯一校验点（TUI/chat 两路径同源）——不抛错不退出，
   // 标记由调用侧消费（TUI 弹重选 / headless 报错）。空 provider 由 TUI 路径在 startTUI 前清空。
@@ -145,20 +145,20 @@ export async function assembleAgent({ excludeTools = [], slotData } = {}) {
  * 「恢复槽带 `engineering` 字段 ? 槽值 : `agent.config.agent.engineering`」（槽字段在场判据
  * 与 `applySession` 同款——`thincoder-core/session.mjs:314-317`）。普通会话 → **装配钩子
  * 零 manifest I/O**（不读 / 不拒 / 不建档）+ `agent.manifest = null`（清残留附着——复用
- * agent 跨模式防陈旧）；工程模式四态：合法档 → 附着；缺档 + 根可解析 → `initManifest`
- * 建档（拒进正常循环直到生成——E2 前置门槛）；缺档 + 根不可解析 → 抛「工程模式启动拒绝」
- * **不自动建档**；非法档 → fail-closed 抛出。
+ * agent 跨模式防陈旧）。
+ *
+ * 工程模式分支 = 核单源决策树 `resolveEngineeringManifest`（KD-M1-20）；**非 fatal**
+ * （KD-M1-25 / M1-29——**启动零拒绝**）：档合法 / 梯②④⑤ 缺档（轻动作就地建档，`writer:'main'`）
+ * ⇒ 附着；歧义（≥2 候选）/ 档非法 / 建档失败 ⇒ **不抛**——`agent.manifest = null` + 记
+ * `agent._projectView`（形状 = `projectView` 返回面 + `created` 建档标记——§2.2 钩子段）。
+ * 需要项目参数者各自报明（情境行 §2.6 / 动作侧各自报错——§2.9 C）。
  *
  * `slotData` = 恢复槽记录，由调用方经**参数注入**（`bin` TUI 分支既有 `resumeSlot` 调用
  * 前移——KD-M1-15：钩子内不调 `resumeSlot`（该函数非纯读：GC / 认领 / 端标写）；`chat` /
  * ACP 装配无会话 ⇒ 不传 ⇒ config 回退）。重估点不传（`applySession` 已按槽订正 config）。
- *
- * #41（薄包装——KD-M1-20 / AC-19）：工程模式分支的决策树 = 核单源
- * `resolveEngineeringManifest`（非抛错形态）；本函数只把它翻回「抛错」——四条出口
- * （附着 / 缺档建档 / 根不可解析抛 / 档非法抛）的**结果与文案逐字不变**（原句由决策树构造）。
- * @param {object} agent — createAgent 产物（读 agent.config；写 agent.manifest）
+ * @param {object} agent — createAgent 产物（读 agent.config；写 agent.manifest / agent._projectView）
  * @param {{cwd?: string, slotData?: object|null}} [opts]
- * @returns {object|null} 附着后的 manifest / 普通会话 null
+ * @returns {object|null} 附着后的 manifest / 非 ok 态与普通会话 null
  */
 export function attachManifest(agent, { cwd = process.cwd(), slotData } = {}) {
   const slotEng = slotData?.engineering
@@ -167,10 +167,11 @@ export function attachManifest(agent, { cwd = process.cwd(), slotData } = {}) {
     agent.manifest = null // 清残留附着（KD-M1-12）——普通会话不读 / 不拒 / 不建档
     return null
   }
-  // 缺档 + 根可解析 → 就地建档（writer 显式 'main'——写门 fail-closed 缺省拒，KD-M1-3）。
+  // 决策树（writer 显式 'main'——写门 fail-closed 缺省拒，KD-M1-3；漏传 ⇒ 缺档格退化
+  // `init-failed`）。任何非 ok 态都不抛（KD-M1-25）。
   const r = resolveEngineeringManifest(cwd, { writer: "main" })
-  if (!r.ok) throw new Error(r.message)
-  agent.manifest = r.manifest
+  agent._projectView = { ...projectView(cwd), created: r.ok && r.created === true }
+  agent.manifest = r.ok ? r.manifest : null
   return agent.manifest
 }
 

package/src/tui/cmd-eng.mjs

@@ -12,6 +12,7 @@ import { purgeExpiredDesignTokens } from "@thincoder/core/token-ttl.mjs"
 import { resolveEngineeringManifest } from "@thincoder/core/manifest.mjs"
 
 import { ENG_OFF_REMINDER } from "@thincoder/core/agent.mjs"
+import { clearPlanMode } from "@thincoder/core/agent-tools/plan.mjs"
 
 /** Atomic slot write (same shape as session.mjs writeSessionFile — kept local to avoid a
  *  private-import; cmd-advisor's guard toggle shares this helper). */
@@ -48,6 +49,9 @@ export async function handleEngCommand(ctx) {
     agent.manifest = r.manifest
   }
   agent.config.agent.engineering = !agent.config.agent.engineering
+  // FR31 ③ / KD10（翻转点②·CLI `/eng`）：ON ⇒ 清 plan 残留（内存位 + 未注入的 plan 提示语）；
+  // OFF 方向不动（普通模式零改——FR31 边界）。提示行仅在真清到东西时出（不喧宾）。
+  const planReset = agent.config.agent.engineering ? clearPlanMode(agent) : false
   // §11.2 D-24b: per-review instances die with the mode (fresh convergence cycles
   // on the next toggle).
   agent._advisorRuns = new Map()
@@ -68,6 +72,9 @@ export async function handleEngCommand(ctx) {
   pushLine(`Engineering mode: ${agent.config.agent.engineering ? "ON" : "OFF"} (session)`, C.tool)
   if (agent.config.agent.engineering) {
     pushLine(`  → design-before-code enforced (design review + user approval before code)`, C.dim)
+    if (planReset) {
+      pushLine(`  → plan mode reset (engineering mode excludes plan mode)`, C.dim)
+    }
     if (clearedExpired > 0) {
       pushLine(`  → cleared ${clearedExpired} expired design token${clearedExpired === 1 ? "" : "s"}; valid tokens from prior reviews stay usable`, C.dim)
     }
@@ -80,6 +87,8 @@ export async function handleEngCommand(ctx) {
  * VS Code, per-session; config.json is just the initial default, no mirror write).
  * The in-memory agent.config.agent.engineering (already flipped) stays the live authority for
  * this process; saveSession also round-trips it on every turn-end write.
+ * 槽写也担 FR31 ③ 的槽位收正（T12）：ON 时 `data.planMode = false`——否则下次装载/恢复
+ * 把 plan-active 推回 UI（半状态复活面；验收判据 = 「内存 + 槽位」双清零）。OFF 方向零改。
  */
 async function persistEngineering(agent) {
   const slot = activeSlot(agent.cwd)
@@ -88,6 +97,7 @@ async function persistEngineering(agent) {
     const data = JSON.parse(readFileSync(p, "utf8"))
     if (data && typeof data === "object" && Array.isArray(data.history)) {
       data.engineering = agent.config.agent.engineering
+      if (agent.config.agent.engineering) data.planMode = false
       writeSessionFile(p, data)
     }
   } catch { /* slot missing/unreadable — in-memory flag already flipped; saveSession persists at turn end */ }

package/src/tui/cmd-new.mjs

@@ -8,7 +8,7 @@ export async function handleNewCommand(ctx) {
 
   // F-MI7：newSession = async（探测束）——doNewSession 随之为 async，调用点 await
   const doNewSession = async () => {
-    const slot = await newSession(agent.cwd)
+    const slot = await newSession(agent.cwd, { releaseStale: true }) // F-CR1：/new 释放本进程残留认领（保留集 = {新槽}）；ACP 四点不传（F-CR3）
     // 2026-08-31 会诊 F3：resetSessionState 清全量会话态（_fullHistory/title/_sessionStart/
     // 多槽设计凭证（_engDesignTokens——单值镜像 _engDesignToken 已退役 D3）/压缩与验证计数
     // 等）——原实现只清 agent.history，新会话首次落盘把旧会话完整人类线 + 旧标题写进新

package/src/tui/cmd-plan.mjs

@@ -1,9 +1,18 @@
 /** /plan command: toggle plan mode (read-only explore → design → implement).
  *  ctx: { agent, pushLine, pushLabel } */
 import { ansi, C } from "./ansi.mjs"
+import { PLAN_ENGINEERING_REFUSED } from "@thincoder/core/agent-tools/plan.mjs"
 
 export async function handlePlanCommand(ctx) {
   const { agent, pushLine, pushLabel } = ctx
+  // ENG-PLAN-EXCLUSION（FR31 ② · 设计 `ENGINEERING-MODE-V2.md` §2.3 E7「命令面逐面钉定」）：
+  // 工程模式 ⇒ 拒绝——**前置判**：零翻转（不写 `planMode`）+ 提示行（共用文案常量逐字，
+  // 与 ACP 两面同源）；无成功标签（标签 = 成功回显——拒时零标签防假成功，同 `/eng` 先例）。
+  // 真值 = `agent.config.agent.engineering`（核单源同键）；普通模式四路径全带宽（FR31 边界）。
+  if (agent.config?.agent?.engineering === true) {
+    pushLine(PLAN_ENGINEERING_REFUSED, C.warn)
+    return
+  }
   agent.planMode = !agent.planMode
   pushLabel("❯ Plan", ansi.bold + C.tool)
   pushLine(`Plan mode: ${agent.planMode ? "ON" : "OFF"}`, C.tool)

package/src/tui/index.mjs

@@ -19,6 +19,7 @@
  */
 
 import { emitKeypressEvents } from "node:readline"
+import { readFileSync } from "node:fs"
 import { PassThrough } from "node:stream"
 import { saveSession } from "@thincoder/core/session.mjs"
 import { closeAllMcp } from "@thincoder/core/mcp.mjs"
@@ -27,7 +28,7 @@ import { createRenderLoop } from "./render-loop.mjs"
 import { makeDimsState } from "./dims.mjs"
 import { SLASH_COMMANDS, createSlashCommands } from "./slash-commands.mjs"
 import { createWizard } from "./wizard.mjs"
-import { writeStartupSequence, setTuiActive, createExitCleanup } from "./tui-lifecycle.mjs"
+import { writeStartupSequence, writeLoadingLine, setTuiActive, createExitCleanup } from "./tui-lifecycle.mjs"
 import { createPickers } from "./pickers.mjs"
 import { runDistill as runDistillImpl } from "./distill-cmd.mjs"
 import { createInteraction } from "./interaction.mjs"
@@ -159,6 +160,13 @@ export async function startTUI(agent, opts = {}) {
   // modifyOtherKeys lvl 2 (\x1b[>4;2m): Shift+Enter → \x1b[27;2;13~ (mintty / Git Bash)
   // translateShiftEnter (stdin layer) maps both to \x1b\r → meta+return → multiline branch.
   writeStartupSequence()
+  // 启动加载画面（2026-09-21 用户）：冷启动剩余期（memory 同步 / 索引扫描）非黑。
+  // 静态读（render-frame 先例——module-load 一次 ✗ 首帧 render 覆盖本行 ✗ 无需清除逻辑）。
+  {
+    let v = ""
+    try { v = JSON.parse(readFileSync(new URL("../../package.json", import.meta.url), "utf8")).version } catch { /* 尽力面 */ }
+    writeLoadingLine(undefined, v)
+  }
   setTuiActive(true) // R25（F-R25a）：终端接管完成——置 TUI 活动态（崩溃钩子恢复判定源）
 
   const utf8Decoder = new TextDecoder("utf-8", { fatal: false })

package/src/tui/ledger-surface.mjs

@@ -1,85 +1,32 @@
 /**
- * ledger-surface.mjs — TUI 台账可见面胶水（LEDGER-SURFACE 批——设计档 §2.30.3.4）。
+ * ledger-surface.mjs — TUI 台账可见面胶水（K-LX3 归核：实现单源 = `@thincoder/core/ledger-surface.mjs`，
+ * 本档只剩**动态 import + TUI 色表注入**两件事——端壳静态链不得达 `node:sqlite`（W8 契约②）；
+ * 载入失败 = 降级不崩（N1），扫描拍重试）。
  *
- * 三面：① 启动行（首扫、**任一项目可动作**才出——明细行集每项目一行）② 变化行（老化首次
- * 越线 / 池达阈值——一次性去重 + **送达门**：未送达不记账）③ 状态位（`state.ledger`——L1
- * 常驻标记，`render-frame.mjs` 消费；**不受启动行门约束**——F2 按标记态照显）。
- * 只读台账；唯一写面 = 去重档（`~/.thincoder/ledger-notify.json`）。
- *
- * M2/KD-M2-3：核台账面**动态 import**（`@thincoder/core/ledger.mjs` 静态链 `node:sqlite`——
- * 静态 import 会把 `node:sqlite` 拽进端壳静态面）；载入失败 = 降级不崩（N1），扫描拍重试。
+ * 三面语义（启动行 / 变化行 / 状态位）见核档头注；判活展示（F-LX1）亦随归核自动带上——
+ * 本档零实现、零复刻（KD-M2-3）。
  */
 import { C } from "./ansi.mjs"
 
-/** 核台账面惰性载入（KD-M2-3 动态 import——失败不缓存，下次扫描拍重试；N1 降级不崩）。 */
+/** 核台账面惰性载入（动态 import——失败不缓存，下次扫描拍重试；N1 降级不崩）。 */
 let _core = null
 function loadCore() {
   if (!_core) {
-    _core = import("@thincoder/core/ledger.mjs")
+    _core = import("@thincoder/core/ledger-surface.mjs")
     _core.catch(() => { _core = null })
   }
   return _core
 }
 
-/** 单次扫描（直驱面——timer 包装见 `startLedgerSurface`）。
- *  `startup=true` = 会话首扫（补启动行；变化行在前、明细行在后）。 */
-export async function runLedgerScan({ state, agent = null, anchor = null, notifyFile = undefined, pushLine = () => {}, render = () => {}, startup = false } = {}) {
+/** 单次扫描（直驱面——直通核实现；TUI 色表 `C` 注入）。 */
+export async function runLedgerScan(opts = {}) {
   const core = await loadCore()
-  const { buildScan, detailScans, discoverFamily, formatDetailLine, formatMarker, loadNotifyState, NOTIFY_FILE, notifyKey, planChangeLines, saveNotifyState } = core
-  const base = anchor ?? agent?.cwd ?? process.cwd()
-  const family = discoverFamily(base)
-  const scans = []
-  for (const p of family.projects) {
-    try { scans.push(buildScan({ cwd: p.root })) } catch { /* 台账不可读 → 该项目跳过（余者照常——N1/T110①） */ }
-  }
-  const current = family.current ? scans.find((s) => s.root === family.current.root) ?? null : null
-  const notify = loadNotifyState(notifyFile ?? NOTIFY_FILE)
-  const plans = scans.map((s) => ({ s, plan: planChangeLines(notify.ledgers[notifyKey(s.ledger)], s) }))
-  const changeLines = plans.flatMap(({ plan }) => plan.lines)
-  const showStartup = startup && scans.some((s) => s.actionable)
-  const rows = showStartup
-    ? [...changeLines, ...detailScans(scans, current).map((s) => ({ text: formatDetailLine(s), warn: s.actionable }))]
-    : changeLines
-  let delivered = true
-  for (const line of rows) {
-    try { pushLine(line.text, line.warn ? C.warn : C.dim) } catch { delivered = false; break }
-  }
-  // 送达门（F5）：有事件行 → 仅在送达后记账；无事件行 → 仅状态确有变化时静默同步（跌回 false 即重置）
-  const changed = plans.some(({ s, plan }) => {
-    const prev = notify.ledgers[notifyKey(s.ledger)]
-    return !prev || JSON.stringify(prev.aged ?? []) !== JSON.stringify(plan.next.aged) || Boolean(prev.threshold) !== plan.next.threshold
-  })
-  if (changeLines.length ? delivered : changed) {
-    const ledgers = { ...notify.ledgers }
-    for (const { s, plan } of plans) ledgers[notifyKey(s.ledger)] = { ...plan.next, updatedAt: Date.now() }
-    saveNotifyState(notifyFile ?? NOTIFY_FILE, { version: 1, ledgers })
-  }
-  state.ledger = { marker: current ? formatMarker(current) : null, warn: Boolean(current && current.aged > 0), scannedAt: Date.now() }
-  render()
+  return core.runLedgerScan({ ...opts, colors: C })
 }
 
-/** TUI 挂载：首扫（`setImmediate`——不抢首帧）+ 周期（`REFRESH_MS`；`state.processing` 期间跳过本轮）。 */
+/** TUI 挂载（首扫 + 周期——直通核实现；载入失败 → 空句柄 = 无周期，N1 降级不崩）。 */
 export function startLedgerSurface(ctx = {}) {
-  let disposed = false
-  let timer = null
-  const tick = async (startup) => {
-    if (disposed) return
-    if (!startup && ctx.state?.processing) return // 扫描不打断回合帧
-    try { await runLedgerScan({ ...ctx, startup }) } catch { /* 可见面尽力——不崩 TUI（N1） */ }
-  }
-  setImmediate(async () => {
-    if (disposed) return
-    tick(true)
-    const core = await loadCore().catch(() => null)
-    if (disposed || !core) return // 载入失败 → 无周期（N1——降级不崩）
-    timer = setInterval(() => tick(false), core.REFRESH_MS)
-    timer.unref?.()
-  })
-  return {
-    dispose() {
-      disposed = true
-      if (timer) clearInterval(timer)
-      timer = null
-    },
-  }
+  return loadCore()
+    .then((core) => core.startLedgerSurface({ ...ctx, colors: C }))
+    .catch(() => ({ dispose() {} }))
 }

package/src/tui/render-frame.mjs

@@ -404,5 +404,9 @@ function buildStatusLine(state, agent, { cols, slashCommands }) {
   const ledgerHint = lg?.marker
     ? ` │ ${lg.warn ? `${ansi.reset}${C.warn}${lg.marker}${ansi.reset}${ansi.dim}` : lg.marker}`
     : ""
-  return ` ${statusText}${taskHint}${turnHint}${tokenHint}${ctxHint}${scrollHint}${ledgerHint} │ ${enterHint} │ /: commands │ wheel/PgUp/PgDn: scroll │ Ctrl+I: inject │ Ctrl+C: exit (×2)`
+  // D8（2026-09-21 块标题行对齐批——会话标题常显 · `docs/cli/design/TUI.md` §7.4）：状态段簇尾
+  // （ledgerHint 后、键位组前）；取值 = `agent.title` 活读（每帧 recompute）· 空值零注入。
+  const titleRaw = typeof agent.title === "string" ? agent.title.trim() : ""
+  const titleHint = titleRaw ? ` │ ${stringWidth(titleRaw) > 40 ? sliceByWidth(titleRaw, 39) + "…" : titleRaw}` : ""
+  return ` ${statusText}${taskHint}${turnHint}${tokenHint}${ctxHint}${scrollHint}${ledgerHint}${titleHint} │ ${enterHint} │ /: commands │ wheel/PgUp/PgDn: scroll │ Ctrl+I: inject │ Ctrl+C: exit (×2)`
 }

package/src/tui/suspension-drive.mjs

@@ -11,7 +11,9 @@
  * done 冻结自然退出。状态机行表见 AGENT-LOOP.md §9.2。
  * F-UC7（2026-09-19 批，AGENT-LOOP-SUBAGENT.md §6.27.12）：第二开轮源 = 未 drain 的上行
  * ask（`upstreamWaiting` 谓词——ask 入队即唤醒本驱动）；唤醒轮同走 auto-turn（旗标
- * `upstreamTurn` 供核域文本选择，提示行走第三档）。
+ * `upstreamTurn` 供核域文本选择）。
+ * F-UC8（2026-09-21 批，§6.27.12.13）：可见提示面**按因两档**（ask 携「谁 + 啥」——
+ * 核单点 `upstreamAskLabelVars` / digest）+ 起跑数行与轮尾收尾行同守 `pend0 > 0`。
  */
 
 // 函数级静态环（2026-09-05）：drive 的 digestTurn/用户回合经 runAgentTurn 递归进入
@@ -24,7 +26,8 @@ import { C } from "./ansi.mjs"
 // ASYNC-RESULT-CONTAINER.md D1/D2：池 accessor（双池 absorb）+ pending 单容器停靠
 import { getAsyncPool, parkAsyncPending, releaseSettledEntry } from "@thincoder/core/agent-tools/async-settle.mjs"
 // F-UC7（AGENT-LOOP-SUBAGENT.md §6.27.12——2026-09-19 批）：上行 ask 开轮谓词单点（核导出）
-import { upstreamWaiting } from "@thincoder/core/agent-tools/parent-channel.mjs"
+// F-UC8（§6.27.12.13 ②——2026-09-21 批）：ask 提示行携参单点（同档导出——显示面单源）
+import { upstreamAskLabelVars, upstreamWaiting } from "@thincoder/core/agent-tools/parent-channel.mjs"
 // X9（2026-09-20 端差·显示面消差批）：消化收尾文案单源 = 核 i18n 容器（禁第三份字面）
 import { t } from "@thincoder/core/i18n.mjs"
 // 批 4 CLI-ASYNC-DISCARD（AGENT-LOOP-SUBAGENT.md §6.20）：中止分支「只清已死」收尾单点
@@ -162,33 +165,40 @@ function backgroundStatusText(agent) {
  *  契约——denied 不弹面板、不悬挂）；AUTO 档沿用普通回调（autoApprove 短路自动
  *  执行）。_suspended 保持 true：消化中 settle 延迟冻结 + 移交 pending。R17：pending
  *  计数/消化触发 = 任一 pending 族（T-R17j——consult/escalate 空闲 settle 也触发消化轮）。
- *  F-UC7（§6.27.12.5 D）：`upstream` = 未 drain 的 ask 在场（唤醒轮）——提示行走第三
- *  档、旗标随 auto 轮贯通到核 `runAgent`（域文本选择面）、`digest:*` 载荷条件携带
- *  `upstream: true`（宿主日志区分唤醒轮与 digest 轮——两端同规）。 */
+ *  F-UC7（§6.27.12.5 D）：`upstream` = 未 drain 的 ask 在场（唤醒轮）——旗标随 auto 轮
+ *  贯通到核 `runAgent`（域文本选择面）、`digest:*` 载荷条件携带 `upstream: true`（宿主
+ *  日志区分唤醒轮与 digest 轮——两端同规）。
+ *  F-UC8（§6.27.12.13 ①–③）：可见提示面**按因两档 × 全档**——标签行 ask 携「谁 + 啥」
+ *  （核容器键，CLI 零自持字面）/ digest（manual 与 AUTO 同判——泛句退场）；起跑数行
+ *  与轮尾收尾行同守 `pend0 > 0`（ask-only 轮两行皆不出）。 */
 async function digestTurn(ctx, upstream = false) {
   const { agent, pushLine } = ctx
   const manual = !agent.autoApprove
-  // 提示行三分（§6.27.12.5 D）：manual 档 ask 轮 = 第三档（「消化已完成的报告」字面在
-  // ask 轮相抵——本轮主事 = 答复子代理在飞提问）；既有两档字面零改。
-  const label = manual
-    ? (upstream ? "[auto-turn: answering a subagent's in-flight message…]" : "[auto-turn: digesting finished subagent reports…]")
-    : "[auto-turn: continuing background work…]"
-  pushLine(label, C.dim)
+  // 起跑数前置（§6.27.12.13 ③）：起跑行与轮尾收尾行同源（皆 = 起跑口径）
+  const pend0 = pendingFamilyCount(agent)
+  // 标签两档（§6.27.12.13 ①）：ask 因恒优先——携参单源 = 核 `upstreamAskLabelVars`
+  // （队首 ask 的 `from` + 单行归一截断 `msg`）；digest 因沿用既有字面；AUTO 档同判
+  // （泛句无生产者——开轮因穷尽；模式可见性另有 `AUTO│` 横幅载体）。
+  const ask = upstream ? upstreamAskLabelVars(agent) : null
+  pushLine(ask ? t("digest.turnLabelAsk", ask) : t("digest.turnLabel"), C.dim)
+  // 起跑数行（对位 VSC `.digest-status` 元素）：`n > 0` 规则——ask-only 轮（`n = 0`）零行
+  if (pend0 > 0) pushLine(t("digest.start", { n: pend0 }), C.dim)
   const digestCtx = manual
     ? { ...ctx, askPermission: null, askBatchPermission: null, askQuestion: null }
     : ctx
   // LOGGING：digest:* 事件（D-S9 消化轮边界——LOGGING.md F-L4 挂起态覆盖）
   const d0 = Date.now()
-  const pend0 = pendingFamilyCount(agent)
   logEvent("digest:start", { pendingN: pend0, ...(upstream ? { upstream: true } : {}) })
   const outcome = await runAgentTurn(digestCtx, "", { autoTurn: true, upstreamTurn: upstream, skipSession: true })
   logEvent("digest:end", { pendingN: pendingFamilyCount(agent), ms: Date.now() - d0, ...(upstream ? { upstream: true } : {}) })
   // X9（2026-09-20 端差·显示面消差批）：轮尾**可见**收尾行（修前只有 `digest:end` 日志事件——
-  // 用户不可见；对位 VSC `webview/chat.js:394-401`）。计数口径 = **起跑数** `pend0`
-  // （与 VSC `suspension.mjs:302/:314` 同源）；文案单源 = 核 i18n `digest.done` /
+  // 用户不可见；对位 VSC `webview/chat.js` `showDigestStatus` end 段）。计数口径 = **起跑数**
+  // `pend0`（与 VSC `suspension.mjs` 起跑 post 同源）；文案单源 = 核 i18n `digest.done` /
   // `digest.aborted`；终态 ≠ ok（中止/失败）⇒ aborted 形态（VSC ok 旗标同口径）。
+  // F-UC8 守卫（§6.27.12.13 ③）：`pend0 = 0`（ask-only 轮）⇒ **零收尾行**——与起跑行
+  // 同规则（两行成对）；done / aborted 两形态同判（VSC 零动作守卫先于 ok 判）。
   const seconds = ((Date.now() - d0) / 1000).toFixed(1)
-  pushLine(t(outcome === "ok" ? "digest.done" : "digest.aborted", { n: pend0, seconds }), C.dim)
+  if (pend0 > 0) pushLine(t(outcome === "ok" ? "digest.done" : "digest.aborted", { n: pend0, seconds }), C.dim)
 }
 
 /**

package/src/tui/tui-lifecycle.mjs

@@ -15,6 +15,15 @@ export function writeStartupSequence(write = (s) => process.stdout.write(s)) {
   write(ansi.altBuffer + ansi.hideCursor + ansi.mouseOn + ansi.bracketedPasteOn + ansi.keyboardPush + ansi.modifyOtherKeysOn + ansi.wrapOff)
 }
 
+// 启动加载画面（2026-09-21 用户）：双进程冷启动（wrapped spawn + 全链 import）期间 alt buffer
+// 全黑 → 用户以为死了。序列后立即写一行 loading（首帧 render 自然覆盖 ✗ 无需清除逻辑 ✗）。
+// 版本号由调用方传入（bin 入口已读 package.json——零重复 IO）；wrapped 父进程同款（spawn 前写——
+// 父子两段冷启动都非黑）。纯文本行 ✗ 无 ANSI 位置控制 ✗ 首帧覆盖依赖 render-loop 全屏重绘 ✓
+export function writeLoadingLine(write = (s) => process.stdout.write(s), version = "") {
+  const v = version ? ` v${version}` : ""
+  try { write(`\n\n  ◌ thincoder loading...${v}\n`) } catch { /* 尽力面——TTY 不可写不阻断启动 */ }
+}
+
 /** TUI 清理序列 = 异常退出恢复序列（单一来源——§9.2 表 2 候选 1）：清屏 + 关闭鼠标/
  *  粘贴/键盘增强 + 退出 alt buffer + 显示光标 + 恢复环绕。
  *  TUI-OOM-ROOTCAUSE（CRASH-REPORTS.md §9.3）：提取为导出常量 `RECOVERY_SEQUENCE`——

package/src/tui/wrapped-spawn.mjs

@@ -2,11 +2,11 @@
  * spawn 子（自身 bin）tee stderr → 终端 + crash-reports/tui-stderr-<ts>-<pid>.log（外部终止/
  * native abort——fd 2 进程内不可改——诊断唯一默认捕获路）。子死 → 日志收尾 → 同码退（null 映射
  * code??(signal?1:0)——评审 #1）；spawn error → 注日志 + exit 1（评审 #5——不挂死）。 */
-import { appendFileSync, mkdirSync, writeFileSync } from "node:fs"
+import { appendFileSync, mkdirSync, writeFileSync, readFileSync } from "node:fs"
 import { spawn } from "node:child_process"
 import { fileURLToPath } from "node:url"
 import { crashReportsDir } from "../crash-reports.mjs"
-import { RECOVERY_SEQUENCE } from "./tui-lifecycle.mjs"
+import { RECOVERY_SEQUENCE, writeLoadingLine } from "./tui-lifecycle.mjs"
 
 // F-3 信号语义（raw mode 既有 key-handler 双按语义——Ctrl+C = stdin 字节不产生信号 → 子正常退 → 父收
 // exit 同码退）：父忽略 SIGINT/SIGTERM——tee 不被打断。2026-09-09 实测：Windows process.kill(SIGINT)
@@ -21,6 +21,10 @@ export function spawnTuiWrapped({ dir = crashReportsDir(), script = fileURLToPat
     logPath = `${dir}/tui-stderr-${Date.now()}-${process.pid}.log`
     writeFileSync(logPath, `# tui-stderr ${new Date().toISOString()} pid=${process.pid} argv=${JSON.stringify(process.argv)}\n`, { flag: "a", mode: 0o600 })
   } catch { return false }
+  // ①⸸ 启动加载行（spawn 前——回车后立刻可见 ✗ 冷启动期非黑）：复用 tui-lifecycle.writeLoadingLine（修正轮 F-A ✗ 父段副本删）
+  let v = ""
+  try { v = JSON.parse(readFileSync(new URL("../../package.json", import.meta.url), "utf8")).version } catch { /* 尽力面——读失败 → 无版本尾 */ }
+  writeLoadingLine(writeImpl, v)
   process.on("SIGINT", ignoreSignal); process.on("SIGTERM", ignoreSignal) // 父忽略信号（F-3）——tee 不被打断
   process.stderr.on("error", ignoreSignal) // 父 stderr 异步 EPIPE（终端/管道已关）→ 不炸父——tee 继续
   const note = (s) => { try { appendFileSync(logPath, s) } catch { /* 落盘尽力面——不阻断 tee */ } }