thincoder 0.12.67 → 0.12.69

package/src/tui/clipboard.mjs

@@ -1,3 +1,9 @@
+import { mkdirSync, writeFileSync } from "node:fs"
+import { readFile, stat, unlink } from "node:fs/promises"
+import { tmpdir } from "node:os"
+import { join } from "node:path"
+import { IMAGE_MAX_BYTES, savePastedImages } from "@thincoder/core/attachments.mjs"
+import { cleanupOldToolResults } from "@thincoder/core/agent/helpers.mjs"
 import { C } from "./ansi.mjs"
 
 /** Windows clipboard-read command: force UTF-8 console output so Get-Clipboard's bytes
@@ -132,49 +138,87 @@ export function stripKeyboardProtocol(text) {
   return text.replace(/\x1b\[\d+;\d+u/g, "").replace(/\x1b\[27;\d+;\d+~/g, "")
 }
 
-/** Ctrl+V / Alt+V: read clipboard image → write temp file in working directory → insert read_image command into input box.
- *  Extracted from index.mjs.
- *  ctx: { agent, state, pushLine, render } */
-export async function pasteClipboardImage(ctx) {
-  const { agent, state, pushLine, render } = ctx
+/** 平台剪贴板图像捕获（缺省实现——写 staging ∥ 无图抛）：Windows = PowerShell
+ *  System.Windows.Forms（无图 ⇒ exit 1 ⇒ 抛）；macOS = osascript PNGf；其余 = xclip → wl-paste 回退。
+ *  截图直接写 `dest`（系统临时区 staging——不入项目树）。 */
+async function captureClipboardImage(dest) {
   const { execFile } = await import("node:child_process")
-  const { stat, unlink } = await import("node:fs/promises")
-  const { join } = await import("node:path")
-
   const run = (cmd, args) => new Promise((resolve, reject) => {
     execFile(cmd, args, { timeout: 10000 }, (err, stdout) => { if (err) reject(err); else resolve(stdout) })
   })
-
-  const dest = join(agent.cwd, `.thincoder-paste-${Date.now()}.png`)
   const isWin = process.platform === "win32"
   const isMac = process.platform === "darwin"
+  if (isWin) {
+    const psScript = `Add-Type -AssemblyName System.Windows.Forms; if ([System.Windows.Forms.Clipboard]::ContainsImage()) { [System.Windows.Forms.Clipboard]::GetImage().Save('${dest.replace(/\\/g, "\\\\")}', [System.Drawing.Imaging.ImageFormat]::Png); exit 0 } else { exit 1 }`
+    await run("powershell", ["-NoProfile", "-Command", psScript])
+  } else if (isMac) {
+    const script = `try; set f to (POSIX file "${dest}"); set img to the clipboard as «class PNGf»; set fd to open for access f with write permission; write img to fd; close access fd; end try`
+    await run("osascript", ["-e", script])
+  } else {
+    await run("bash", ["-c", `xclip -selection clipboard -t image/png -o > "${dest}" 2>/dev/null || { which wl-paste >/dev/null 2>&1 && wl-paste -t image/png > "${dest}" 2>/dev/null; } || exit 1`])
+  }
+}
 
+/** 贴图 buffer ⇒ 核正路落盘（**唯一写盘者 = 核 `savePastedImages`**）：写时扫除
+ *  （`cleanupOldToolResults(<cwd>/.thincoder/tmp)`——3 天窗 mtime 回收；扫除失败不影响落盘）⇒
+ *  构 dataURL ⇒ 调核 `savePastedImages(dataUrls, cwd, { fs })` ⇒ 路径 ∥ null（核弃项 ∥ 写败）。
+ *  @returns {Promise<string|null>} `<cwd>/.thincoder/tmp/paste-<id>-0.png` 绝对路径 / null */
+export async function savePastedImageBuffer(buffer, cwd) {
+  const tmpDir = join(cwd, ".thincoder", "tmp")
+  await cleanupOldToolResults(tmpDir)
+  const dataUrl = `data:image/png;base64,${buffer.toString("base64")}`
+  // 契约「路径 ∥ null」——核内异常（未接线等）归「写败」径，不越出本函数
   try {
-    if (isWin) {
-      const psScript = `Add-Type -AssemblyName System.Windows.Forms; if ([System.Windows.Forms.Clipboard]::ContainsImage()) { [System.Windows.Forms.Clipboard]::GetImage().Save('${dest.replace(/\\/g, "\\\\")}', [System.Drawing.Imaging.ImageFormat]::Png); exit 0 } else { exit 1 }`
-      await run("powershell", ["-NoProfile", "-Command", psScript])
-    } else if (isMac) {
-      const script = `try; set f to (POSIX file "${dest}"); set img to the clipboard as «class PNGf»; set fd to open for access f with write permission; write img to fd; close access fd; end try`
-      await run("osascript", ["-e", script])
-    } else {
-      await run("bash", ["-c", `xclip -selection clipboard -t image/png -o > "${dest}" 2>/dev/null || { which wl-paste >/dev/null 2>&1 && wl-paste -t image/png > "${dest}" 2>/dev/null; } || exit 1`])
-    }
+    const { paths } = savePastedImages([dataUrl], cwd, { fs: { mkdirSync, writeFileSync } })
+    return paths[0] ?? null
   } catch {
-    pushLine("Clipboard does not contain an image, or clipboard access failed", C.dim)
-    try { await unlink(dest) } catch {}
-    return
+    return null
   }
+}
 
-  const st = await stat(dest).catch(() => null)
+/** Ctrl+V / Alt+V：读剪贴板图像 → 系统临时区 staging（不入项目树）→ 读 buffer ⇒ staging 用毕即清
+ *  （读取后——与失败径同口径）⇒ `savePastedImageBuffer` 落 `<cwd>/.thincoder/tmp/paste-<id>-0.png`
+ *  → 插入 `read_image <最终绝对路径>`。
+ *  失败径（dim 提示行 ×3）：无图（捕获抛 ∥ 零字节）· 超阈（`IMAGE_MAX_BYTES` 单源早筛——stat 后
+ *  读前，不读巨件）· 写败（核落盘 ≤0 项）——均零插入、返回 null。
+ *  @param {{agent:{cwd:string}, state, pushLine:Function, render:Function}} ctx
+ *  @param {((dest:string)=>Promise<void>)|null} [captureImpl] — 捕获面测试缝（写 staging ∥ 无图抛）；
+ *    缺省 null ⇒ 平台捕获实现（生产调用点零改；参数作用域——零跨调用残留）
+ *  @returns {Promise<{insert:string, path:string}|null>} 成功 = 插入文本 + 最终绝对路径；失败 = null */
+export async function pasteClipboardImage(ctx, captureImpl = null) {
+  const { agent, state, pushLine, render } = ctx
+  const staging = join(tmpdir(), `thincoder-paste-${Date.now()}.png`)
+  const capture = captureImpl ?? captureClipboardImage
+  try {
+    await capture(staging)
+  } catch {
+    pushLine("Clipboard does not contain an image, or clipboard access failed", C.dim)
+    try { await unlink(staging) } catch {}
+    return null
+  }
+  const st = await stat(staging).catch(() => null)
   if (!st || st.size === 0) {
     pushLine("Clipboard does not contain an image, or clipboard access failed", C.dim)
-    try { await unlink(dest) } catch {}
-    return
+    try { await unlink(staging) } catch {}
+    return null
   }
-
-  const cmd = `read_image ${dest}`
-  state.input.splice(state.cursor, 0, ...[...cmd])
-  state.cursor += cmd.length
-  pushLine(`[image pasted → ${dest}]`, C.tool)
+  if (st.size > IMAGE_MAX_BYTES) {
+    pushLine("Clipboard image too large (max 15MB)", C.dim)
+    try { await unlink(staging) } catch {}
+    return null
+  }
+  const buffer = await readFile(staging)
+  try { await unlink(staging) } catch {}
+  const path = await savePastedImageBuffer(buffer, agent.cwd)
+  if (!path) {
+    pushLine("Clipboard image could not be saved (write failed)", C.dim)
+    return null
+  }
+  const insert = `read_image ${path}`
+  const chars = [...insert] // codepoint 数组（同 insertPastedText 口径——cwd 含星平面字符时游标不漂）
+  state.input.splice(state.cursor, 0, ...chars)
+  state.cursor += chars.length
+  pushLine(`[image pasted → ${path}]`, C.tool)
   render()
+  return { insert, path }
 }

package/src/tui/cmd-advisor.mjs

@@ -4,11 +4,16 @@
 import { readFileSync } from "node:fs"
 import { ansi, C } from "./ansi.mjs"
 import { activeSlot, slotPath } from "@thincoder/core/session.mjs"
+// off 形族单源（`docs/core/design/MODEL-SPECS.md` §16.2 / §16.3 / §16.4）——取形与「有效 off 路径」
+// 判据一律自本档取，本档零副本（叶档：零 import 纯函数）。
+import { thinkOffShape, thinkOffPath } from "@thincoder/core/think-off.mjs"
 import { writeSessionFile } from "./cmd-eng.mjs"
 
 export async function handleAdvisorCommand(ctx) {
   const { agent, showPicker, pushLine, pushLabel } = ctx
   const cfg = agent.config.advisor ??= {}
+  // 入口预载规格面（懒加载面零改：不做顶层静态 import）——同步的状态行（`advisorStatus`）亦须取 spec。
+  const { specForModel } = await import("@thincoder/core/config.mjs")
   // Deprecated field cleanup (2026-08-21): advisor.enabled is no longer read
   // anywhere; drop it here so persist() never re-writes the stale flag.
   delete cfg.enabled
@@ -17,13 +22,20 @@ export async function handleAdvisorCommand(ctx) {
     if (ctx.persistRaw) {
       await ctx.persistRaw((raw) => {
         raw.agent ??= {}
-        raw.agent.advisor = cfg
+        // advisor.guard is session-level (#382 同口径收 · slot authority — VSC parity): the guard
+        // never rides the config write — only the config-scoped keys (model/thinking/effort/timeout)
+        // persist；盘上既有 guard 值原样保留（回退面不动 —— 读链 = 槽 ?? config）。
+        const scoped = { ...cfg }
+        delete scoped.guard
+        const diskAdvisor = typeof raw.agent.advisor === "object" && raw.agent.advisor !== null ? raw.agent.advisor : {}
+        raw.agent.advisor = { ...diskAdvisor, ...scoped }
       })
     }
   }
 
-  // Guard-only dual write (2026-08-29 — advisor.guard is session-level): the guard goes into
-  // the CURRENT session slot first (shared with VS Code), the config.json mirror follows.
+  // Guard-only slot write (2026-08-29 — advisor.guard is session-level; #382 同口径收): the guard
+  // goes into the CURRENT session slot (shared with VS Code) — the slot is the single authority;
+  // no config.json mirror write (与 VSC 面板写面同判——guard 不入 config 写面).
   // Other advisor keys (model/thinking/effort/timeout) stay config-scoped — persist() only.
   const persistGuard = async () => {
     try {
@@ -33,19 +45,23 @@ export async function handleAdvisorCommand(ctx) {
         data.advisor = { ...(typeof data.advisor === "object" && data.advisor !== null ? data.advisor : {}), guard: cfg.guard === true }
         writeSessionFile(p, data)
       }
-    } catch { /* slot missing/unreadable — config mirror still written */ }
-    await persist()
+    } catch { /* slot missing/unreadable — guard stays in-memory for this session (zero config write) */ }
   }
 
   // Lazy model cache — fetched once per /advisor session
   let modelCache = null
 
   // ── State helpers ──
+  /** 状态行（§16.4）：无有效 off 路径（`thinkOffPath === false`）⇒ **不报 off**——残留 off 标记
+   *  （`null` / `{type:"disabled"}`）按「未设档」渲染：有档报 `on (<档>)`，无档报 `on`
+   *  （服务端恒思考 / 形不发字段 ⇒ 「Think: off」会是假断言）。 */
   function advisorStatus() {
     const curModel = cfg.model || agent.provider.model
-    const thinkInfo = cfg.thinking === null ? "off"
-      : cfg.thinking?.type === "disabled" ? "off"
+    const offPath = thinkOffPath(specForModel(getEffectiveModel(agent, cfg)))
+    const offMarked = cfg.thinking === null || cfg.thinking?.type === "disabled"
+    const thinkInfo = offPath && offMarked ? "off"
       : cfg.reasoningEffort ? `on (${cfg.reasoningEffort})`
+      : offMarked ? "on"
       : cfg.thinking ? `on (${cfg.thinking.type})` : "(main)"
     return `Advisor | Model: ${curModel} | Think: ${thinkInfo}`
   }
@@ -55,12 +71,14 @@ export async function handleAdvisorCommand(ctx) {
   }
 
   /** off 形落盘（`think_off` 与归一后的 `effort_none` 共用——单一口径，防同状态两公式）：
-   *  自定义开值族（`thinkEnabledValue` ≠ "enabled"）取 `null`（NF1 显式 off）；其余取 `{type:"disabled"}`。 */
+   *  取形 = 单源 `thinkOffShape`（`@thincoder/core/think-off.mjs`；§15.4-2 族别判据 / §16.2 生产者表）——
+   *  effort 族（`thinkApi === "effort"`）⇒ `thinking: null`（载荷层 off 门首款要求；`{type:"disabled"}`
+   *  不开门 ⇒ 关思考静默失效）；其余（type 族默认 / 自定义开值族）⇒ `{type:"disabled"}`（达载荷层）。
+   *  三支同清 `reasoningEffort`（§16.6-⑵：off 标记与档位不得同盘——F2 违约族）。 */
   async function applyThinkOff() {
-    const { specForModel } = await import("@thincoder/core/config.mjs")
     const spec = specForModel(getEffectiveModel(agent, cfg))
-    const isCustomThink = (spec.thinkEnabledValue ?? "enabled") !== "enabled"
-    cfg.thinking = isCustomThink ? null : { type: "disabled" }
+    cfg.thinking = thinkOffShape(spec)
+    delete cfg.reasoningEffort
   }
 
   // ── Model picker sub-loop ──
@@ -107,7 +125,6 @@ export async function handleAdvisorCommand(ctx) {
         pushLabel("❯ Advisor", ansi.bold + C.tool)
         pushLine("Thinking: using main model settings", C.tool)
       } else if (c.action === "think_on") {
-        const { specForModel } = await import("@thincoder/core/config.mjs")
         const spec = specForModel(getEffectiveModel(agent, cfg))
         cfg.thinking = { type: spec.thinkEnabledValue ?? "enabled" }
         if (spec.thinkApi === "effort") delete cfg.thinking
@@ -129,6 +146,10 @@ export async function handleAdvisorCommand(ctx) {
         pushLabel("❯ Advisor", ansi.bold + C.tool)
         pushLine("Thinking: OFF", C.tool)
       } else if (c.action.startsWith("effort_")) {
+        // #346-①（§16.4 表末行）：选档 = 要思考 ⇒ 先清 `thinking === null` 标记（对齐
+        // `cmd-think.mjs:119-120` 先例 / §15.4-2 末句）；`{type:"disabled"}` 不动（同先例；
+        // 残余登记 = §16.6-⑸——type 族 off ⇒ 选档 后该标记保持）。
+        if (cfg.thinking === null) delete cfg.thinking
         cfg.reasoningEffort = c.action.slice(7)
         await persist()
         pushLabel("❯ Advisor", ansi.bold + C.tool)
@@ -247,6 +268,7 @@ async function buildThinkingEntries(agent, cfg) {
   const thinkOnValue = spec.thinkEnabledValue ?? "enabled"
   const isCustomThink = thinkOnValue !== "enabled"
   const isEffortOnly = spec.thinkApi === "effort"
+  const offPath = thinkOffPath(spec)
   const effortLevels = spec.reasoningEffortEnum ?? ["high", "max"]
 
   const curEffort = cfg.reasoningEffort ?? providerForDefaults.reasoningEffort
@@ -260,7 +282,11 @@ async function buildThinkingEntries(agent, cfg) {
   if (!isEffortOnly) {
     entries.push({ type: "header", text: "Thinking mode" })
     entries.push({ type: "item", text: `Enabled  ${thinkingEnabled ? "← current" : ""}`, action: "think_on" })
-    entries.push({ type: "item", text: `Disabled ${(curThinking?.type === "disabled" || curThinking === null) ? "← current" : ""}`, action: "think_off" })
+    // §16.4：无有效 off 路径（服务端强制族 / 形不发字段）⇒ Disabled 项**不渲染**；
+    // Enabled 项保留 = 残留 `{type:"disabled"}` 标记的恢复径（`/think on` 同旨）。
+    if (offPath) {
+      entries.push({ type: "item", text: `Disabled ${(curThinking?.type === "disabled" || curThinking === null) ? "← current" : ""}`, action: "think_off" })
+    }
   }
   entries.push({ type: "header", text: "Reasoning effort" })
   for (const level of effortLevels) {

package/src/tui/cmd-clear.mjs

@@ -9,14 +9,14 @@ export async function handleClearCommand(ctx) {
     ], { defaultIndex: 1 })
     if (e?.action === "yes") {
       state.lines = []
-      state._linesChars = 0 // TUI-OOM-ROOTCAUSE（§15.3.2）：行集清空 → 字符账同步归零
+      state._linesChars = 0 // TUI-OOM-ROOTCAUSE（TUI-SESSION-VIEW.md §5.3）：行集清空 → 字符账同步归零
       state.streaming = ""
       render()
     }
     return
   }
   state.lines = []
-  state._linesChars = 0 // TUI-OOM-ROOTCAUSE（§15.3.2）：行集清空 → 字符账同步归零
+  state._linesChars = 0 // TUI-OOM-ROOTCAUSE（TUI-SESSION-VIEW.md §5.3）：行集清空 → 字符账同步归零
   state.streaming = ""
   render()
 }

package/src/tui/cmd-config.mjs

@@ -35,6 +35,7 @@ export async function handleConfigCommand(ctx, args = []) {
   let ac = agent.config?.agent ?? {}
   let ec = agent.config?.embedding ?? {}
   let tc = agent.config?.traces ?? {}
+  let dc = agent.config?.diagnostics ?? {}
 
   // agent.config.proxy 已被 loadConfig 归一化为 { uri, web, model } | undefined
   function proxySummary() {
@@ -250,7 +251,7 @@ export async function handleConfigCommand(ctx, args = []) {
     }
   }
 
-  // ── 并发池子菜单（§11.1/§11.2——agent.poolLimits——读/改三域；保存经 saveProxy
+  // ── 并发池子菜单（agent.poolLimits——读/改三域；保存经 saveProxy
   // 落盘 + reloadConfig 热应用——下个 spawn 生效）──
   async function poolMenu() {
     let poolIdx = 0
@@ -341,6 +342,7 @@ export async function handleConfigCommand(ctx, args = []) {
     ac = agent.config?.agent ?? {}
     ec = agent.config?.embedding ?? {}
     tc = agent.config?.traces ?? {}
+    dc = agent.config?.diagnostics ?? {}
     const consultCount = (ac.consultModels ?? []).length
     const pl = ac.poolLimits ?? {}
     const cur = poolCur(pl, DEFAULTS)
@@ -354,6 +356,7 @@ export async function handleConfigCommand(ctx, args = []) {
       { type: "item", text: `agent.verifyGuard = ${ac.verifyGuard === true ? "on" : "off"}`, action: "agent.verifyGuard" },
       { type: "item", text: `traces.enabled = ${tc.enabled === false ? "off" : "on"}（轨迹存档——发布默认关——隐私）`, action: "traces.enabled" },
       { type: "item", text: `traces.retentionHours = ${tc.retentionHours ?? 24} h（超期文件启动时清理）`, action: "traces.retentionHours" },
+      { type: "item", text: `diagnostics.heapSnapshot = ${dc.heapSnapshot === true ? "on" : "off"}（堆快照采集——默认关——桌面会话即时生效）`, action: "diagnostics.heapSnapshot" },
       { type: "item", text: `agent.consultModels = ${consultCount} model(s)${consultCount ? ` (${(ac.consultModels ?? []).map((m) => m.provider + ":" + m.model).join(", ")})` : ""}`, action: "consult" },
       { type: "item", text: `agent.consultTurns = ${ac.consultTurns ?? 40}`, action: "agent.consultTurns" },
       { type: "item", text: `agent.consultTimeoutMs = ${Math.round((ac.consultTimeoutMs ?? 600000) / 60000)} min`, action: "agent.consultTimeoutMs" },
@@ -377,6 +380,7 @@ export async function handleConfigCommand(ctx, args = []) {
       pushLine(`agent.verifyGuard: ${ac.verifyGuard === true ? "on" : "off"}`, C.dim)
       pushLine(`traces.enabled: ${tc.enabled === false ? "off" : "on"}（默认 off——发布隐私——本地分析可开）`, C.dim)
       pushLine(`traces.retentionHours: ${tc.retentionHours ?? 24}（超期文件启动清理——D-TR10）`, C.dim)
+      pushLine(`diagnostics.heapSnapshot: ${dc.heapSnapshot === true ? "on" : "off"}（堆快照采集——默认关——桌面会话即时生效）`, C.dim)
       pushLine(`agent.consultModels: ${(ac.consultModels ?? []).map((m) => `${m.provider}:${m.model}${m.effort ? ` (${m.effort})` : ""}`).join(", ") || "(none)"}`, C.dim)
       pushLine(`agent.poolLimits: { engCoder: ${cur("engCoder")}, other: ${cur("other")}, advisor: ${cur("advisor")} }（async 分域上限——默认 4/4/4——agent.poolLimits 可配）`, C.dim)
       pushLine(`agent.consultTurns: ${ac.consultTurns ?? 40}`, C.dim)
@@ -437,6 +441,18 @@ export async function handleConfigCommand(ctx, args = []) {
       continue // 回主菜单（Esc 退出）
     }
 
+    if (choice.action === "diagnostics.heapSnapshot") {
+      const newVal = dc.heapSnapshot !== true // 显式写布尔（默认关——fail-closed 显示判定同向）
+      try {
+        await saveProxy((raw) => {
+          raw.diagnostics = { ...(raw.diagnostics ?? {}), heapSnapshot: newVal }
+        })
+        pushLabel("❯ Config", ansi.bold + C.tool)
+        pushLine(`diagnostics.heapSnapshot = ${newVal ? "on" : "off"}（桌面会话即时生效 ∕ 本进程下次启动）`, C.tool)
+      } catch (error) { pushLine(`Save failed: ${error.message}`, C.error) }
+      continue // 回主菜单（Esc 退出）
+    }
+
     // Embedding model is fixed (BAAI/bge-m3, SiliconFlow) — no picker; it's over-engineering
     // to expose model choice when the vector index format assumes one embedding space.
 

package/src/tui/cmd-eng.mjs

@@ -52,7 +52,7 @@ export async function handleEngCommand(ctx) {
   // FR31 ③ / KD10（翻转点②·CLI `/eng`）：ON ⇒ 清 plan 残留（内存位 + 未注入的 plan 提示语）；
   // OFF 方向不动（普通模式零改——FR31 边界）。提示行仅在真清到东西时出（不喧宾）。
   const planReset = agent.config.agent.engineering ? clearPlanMode(agent) : false
-  // §11.2 D-24b: per-review instances die with the mode (fresh convergence cycles
+  // AGENT-LOOP-ASYNC-POOL.md §6.10 D-24b: per-review instances die with the mode (fresh convergence cycles
   // on the next toggle).
   agent._advisorRuns = new Map()
   if (!agent.config.agent.engineering) {

package/src/tui/cmd-mcp.mjs

@@ -181,7 +181,7 @@ Return ONLY the JSON object:`,
         }],
         tools: [],
         signal: AbortSignal.timeout(15_000),
-        // §18.6 D-TR4/D-TR6（2026-09-04 fix round1）：/mcp ai 生成调用经 chat() 唯一
+        // TRACES.md §6.1 D-TR4/D-TR6（2026-09-04 fix round1）：/mcp ai 生成调用经 chat() 唯一
         // 采集点——补轨迹元数据 + traces 开关透传（agent.config.traces.enabled——
         // 关=不落盘必须全覆盖——与 agent.mjs/context.mjs 同模式）
         logCtx: {

package/src/tui/cmd-new.mjs

@@ -15,12 +15,12 @@ export async function handleNewCommand(ctx) {
     // slot（实锤 .19/.3 双副本）。_slot 更新为粘性新槽位。
     resetSessionState(agent)
     agent._slot = slot
-    // §14.3.4：/new 绑定新槽记录存储（baseHistory 空——identity 此时为 null = 待固化；
+    // SESSION.md §6.14：/new 绑定新槽记录存储（baseHistory 空——identity 此时为 null = 待固化；
     // 首次保存/首条追加时补写现场身份）
     bindRecordStore(agent, { slotFile: slotPath(agent.cwd, slot), identity: agent._sessionStart ?? null, baseHistory: [] })
     state.tasks = []
     state.lines = []
-    state._linesChars = 0 // TUI-OOM-ROOTCAUSE（§15.3.2）：行集清空 → 字符账同步归零
+    state._linesChars = 0 // TUI-OOM-ROOTCAUSE（TUI-SESSION-VIEW.md §5.3）：行集清空 → 字符账同步归零
     state.streaming = ""
     render()
     pushLine(`New session started (slot ${slot}; /session to switch back)`, C.dim)

package/src/tui/cmd-reindex.mjs

@@ -45,7 +45,7 @@ export async function handleReindexCommand(ctx) {
   const unlisted = cr?.unlistedExts?.count ? cr.unlistedExts : dr?.unlistedExts
   if (unlisted?.count > 0) {
     const sample = unlisted.exts.map((e) => e.ext).join(" ")
-    pushLine(`  ${unlisted.count} file(s) with unlisted extension(s) skipped (${sample}) — declare them in .thincoder/conventions.json (index.codeExtensions / index.docExtensions) to index them`, C.warn)
+    pushLine(`  ${unlisted.count} file(s) with unlisted extension(s) skipped (${sample}) — declare them in PROJECT-MANIFEST.json (index.codeExtensions / index.docExtensions) to index them`, C.warn)
   }
   pushLine(`[reindex] Done, ${total} entries total. Vectors will be lazily generated on next search.`, C.tool)
 }

package/src/tui/cmd-session.mjs

@@ -1,4 +1,4 @@
-import { listSlots, switchToSlot, applySession, renameSlot, activeSlot, slotOccupancy, readEndMarker, sessionDescriptor, loadSlotFile } from "@thincoder/core/session.mjs"
+import { listSlots, switchToSlot, applySession, renameSlot, activeSlot, slotOccupancy, readEndMarker, sessionDescriptor, loadSlotFile, ledgerHealth } from "@thincoder/core/session.mjs"
 import { resolveEngineeringManifest } from "@thincoder/core/manifest.mjs"
 import { ansi, C } from "./ansi.mjs"
 import { restoreLines } from "./startup.mjs"
@@ -20,7 +20,7 @@ export async function handleRenameCommand(ctx, args) {
     pushLine(`Title too long (max 80 chars)`, C.error)
     return
   }
-  // §12.2.5：renameSlot 契约 { ok, reason }——失败原因对用户可见（F3）
+  // renameSlot 契约 { ok, reason }——失败原因对用户可见（F3）
   const r = renameSlot(agent.cwd, slot, title)
   if (!r.ok) {
     const why = {
@@ -58,7 +58,14 @@ export async function handleSessionCommand(ctx) {
     return `${dt.getMonth() + 1}/${dt.getDate()} ${String(dt.getHours()).padStart(2, "0")}:${String(dt.getMinutes()).padStart(2, "0")}`
   }
   const truncate = (s, n) => (stringWidth(s) <= n ? s : sliceByWidth(s, Math.max(1, n - 1)) + "…")
+  // F-L4（账本可靠批 · SESSION.md §6.25 判据句 4）：账本异常 ⇒ 列表头部警示行（正常 ⇒ 一行不加
+  // ——负断言）；在场条件 = `refused > 0 ∨ scene`（不继承会话计数条件）。文案 = 三端同句（zh 在册字面）。
+  const lh = ledgerHealth(agent.cwd)
+  const ledgerWarn = (lh.refused > 0 || lh.scene)
+    ? `会话账本异常（${lh.refused > 0 ? lh.lastReason : "scene"}）——打开会话即自动补回${lh.scene ? "；损坏现场档保留 30 天" : ""}`
+    : null
   const entries = [
+    ...(ledgerWarn ? [{ type: "header", text: ledgerWarn }] : []),
     { type: "header", text: `Sessions (● = active, ↑↓ select, Enter switch, Esc cancel; /rename <title> renames the active one)` },
     ...slots.map((s) => {
       // 2026-08-31 会诊：行宽必须按显示宽度截断（原按 UTF-16 length 截 40 = 中文 80 格，
@@ -66,7 +73,8 @@ export async function handleSessionCommand(ctx) {
       // wrap → 残影）；title 此前完全不截断（可任意长）也是超宽源，一并宽度截断。
       const rawLabel = s.title || (s.firstMessage ? `"${s.firstMessage}"` : "(empty)")
       const label = truncate(rawLabel, 36)
-      const turns = s.turnCount > 0 ? `${s.turnCount} turns` : "0 turns"
+      // 计数不可得（`null`）⇒ 「— turns」占位（禁显示 0——真 0 与未知可分；§6.25 判据句 4）
+      const turns = s.turnCount == null ? "— turns" : `${s.turnCount} turns`
       const when = shortDate(s.updatedAt)
       const model = s.activeProvider ? ` — ${s.activeProvider}` : ""
       const marker = s.slot === highlightSlot ? " ●" : ""
@@ -114,11 +122,11 @@ export async function handleSessionCommand(ctx) {
   // #41 准翻列：附着动作 = 翻转面自己赋值（`agent.manifest` ← 判据结果——相位行当回合起活）。
   if (manifestAfterSwitch) agent.manifest = manifestAfterSwitch
   // Rebuild from history (lazy) — the display snapshot is deprecated.
-  // §14.3.6：描述符 { history（尾窗+±1）, total, base }——标签口径 = total（非窗口长度）；
+  // SESSION.md §6.14：描述符 { history（尾窗+±1）, total, base }——标签口径 = total（非窗口长度）；
   // 未绑定（占用分支——模式 F）回退全量数组。
   const desc = sessionDescriptor(agent, data)
   state.lines = []
-  state._linesChars = 0 // TUI-OOM-ROOTCAUSE（§15.3.2）：切槽重建行集 → 字符账归零，restoreLines 重新入账
+  state._linesChars = 0 // TUI-OOM-ROOTCAUSE（TUI-SESSION-VIEW.md §5.3）：切槽重建行集 → 字符账归零，restoreLines 重新入账
   restoreLines(state, desc)
   state.tasks = agent.tasks ?? []
   if (state.tasks.length > 0 && state.tasks.every((t) => t.status === "done")) {

package/src/tui/cmd-think.mjs

@@ -2,6 +2,9 @@
  *  Interactive loop UX — stays in menu after each action, Esc to exit.
  *  ctx: { agent, showPicker, syncProviderField, pushLine, pushLabel } */
 import { ansi, C } from "./ansi.mjs"
+// off 形族单源（`docs/core/design/MODEL-SPECS.md` §16.2 / §16.4）——取形与「有效 off 路径」判据
+// 一律自本档取，本档零副本（叶档：零 import 纯函数）。
+import { thinkOffShape, thinkOffPath } from "@thincoder/core/think-off.mjs"
 
 export async function handleThinkCommand(ctx, args = []) {
   const { agent, showPicker, syncProviderField, pushLine, pushLabel } = ctx
@@ -14,11 +17,26 @@ export async function handleThinkCommand(ctx, args = []) {
   const thinkOnValue = spec.thinkEnabledValue ?? "enabled"
   const isCustomThink = thinkOnValue !== "enabled"
   const effortLevels = spec.reasoningEffortEnum ?? ["high", "max"]
+  // 有效 off 路径（判据单源 = `@thincoder/core/think-off.mjs`；§16.4）——无 ⇒ 不提供 / 不宣称 off。
+  const offPath = thinkOffPath(spec)
+
+  /** 环内头与回执共用的状态式（§16.4）：无有效 off 路径 ⇒ 恒报 ON——残留 off 标记（`null` /
+   *  `{type:"disabled"}`）不生效（服务端恒思考 / 形不发字段），「Thinking: OFF」会是假断言。
+   *  `thinking:null` 是显式 off 标记（NF1 约定）——不得落入"未设置即 ON"的默认显示（评审 #3）；
+   *  用 `!== null` 而非 `!= null`：undefined（从未设置）须保持既有 ON 显示（qwen3.x 服务端默认开思考）。 */
+  const thinkingOn = () => !offPath || cur.thinking?.type === thinkOnValue
+    || (cur.thinking !== null && cur.thinking?.type === undefined && !isCustomThink)
 
   const autoThinkEnabled = agent.config?.agent?.autoThink === true
   const sub = args[0]?.toLowerCase()
   if (sub === "on" || sub === "off") {
     if (autoThinkEnabled) { pushLine("Auto-think is ON — manual settings are overridden each turn; turn Auto off first via /think", C.error); return }
+    // §16.4：无有效 off 路径 ⇒ 拒绝该动作（不写盘）——服务端恒思考 / 形不发字段，供一个不生效
+    // 的入口 + 措辞免责 = 半实现（§16.12 项 3）。`/think on` 与档位面零改。
+    if (sub === "off" && !offPath) {
+      pushLine("No off path for this model — thinking cannot be turned off here (use /think effort <level>)", C.error)
+      return
+    }
     await applyThink({ action: sub }, agent, syncProviderField, spec, isEffortOnly, isCustomThink, thinkOnValue)
     pushLabel("❯ Think", ansi.bold + C.tool)
     pushLine(`Thinking: ${sub}`, C.tool)
@@ -43,16 +61,16 @@ export async function handleThinkCommand(ctx, args = []) {
   let mainIdx = 0
   for (;;) {
     const autoOn = agent.config?.agent?.autoThink === true
-    // thinking:null 是显式 off 标记（NF1 约定）——不得落入"未设置即 ON"的默认显示（评审 #3）。
-    // 用 !== null 而非 != null：undefined（从未设置）须保持既有 ON 显示（qwen3.x 服务端默认开思考）。
-    const thinkingEnabled = cur.thinking?.type === thinkOnValue
-      || (cur.thinking !== null && cur.thinking?.type === undefined && !isCustomThink)
+    // 头 / 回执同式（`thinkingOn` 单口径）——状态与回执不得各自成式。
+    const thinkingEnabled = thinkingOn()
 
     const entries = [
       { type: "header", text: `Auto: ${autoOn ? "ON" : "OFF"} | Thinking: ${thinkingEnabled ? "ON" : "OFF"} | Effort: ${cur.reasoningEffort || "—"}` },
       { type: "item", text: `Auto: ${autoOn ? "ON" : "OFF"}`, action: "auto" },
     ]
-    if (!isEffortOnly && !autoOn) {
+    // Thinking 开关项：非 effort 族 ∧ 有有效 off 路径才渲染（§16.4——无有效 off 路径族不提供该动作，
+    // 入口在位 = 对无效操作的假告知）。
+    if (!isEffortOnly && offPath && !autoOn) {
       entries.push({ type: "item", text: `Thinking: ${thinkingEnabled ? "ON" : "OFF"}`, action: thinkingEnabled ? "off" : "on" })
     }
     if (!autoOn) {
@@ -66,10 +84,6 @@ export async function handleThinkCommand(ctx, args = []) {
     if (!e) return // Esc
     mainIdx = Math.max(0, entries.filter((en) => en.type === "item").indexOf(e))
 
-    const prevAuto = autoOn
-    const prevThinking = thinkingEnabled
-    const prevEffort = cur.reasoningEffort
-
     await applyThink(e, agent, syncProviderField, spec, isEffortOnly, isCustomThink, thinkOnValue)
 
     // Feedback
@@ -81,11 +95,9 @@ export async function handleThinkCommand(ctx, args = []) {
     } else if (e.action === "effort") {
       pushLine(e.level === "none" ? "Thinking: OFF" : `Reasoning effort: ${e.level}`, C.tool)
     } else {
-      // 与菜单头（:47-48）同式：`thinking:null`（NF1 显式 off）必须落 OFF——本式缺 `!== null` 守卫时
-      // effort 型 off 后回执误报 ON（同一状态、两处公式——单一口径 = 面板式）。
-      const nowEnabled = cur.thinking?.type === thinkOnValue
-        || (cur.thinking !== null && cur.thinking?.type === undefined && !isCustomThink)
-      pushLine(`Thinking: ${nowEnabled ? "ON" : "OFF"}`, C.tool)
+      // 与菜单头（`thinkingOn`）同式：`thinking:null`（NF1 显式 off）落 OFF；无有效 off 路径族
+      // 恒报 ON（§16.4——残留 off 标记不生效；本式缺守卫时 effort 型 off 后回执误报 ON = 红）。
+      pushLine(`Thinking: ${thinkingOn() ? "ON" : "OFF"}`, C.tool)
     }
   }
 }
@@ -93,7 +105,9 @@ export async function handleThinkCommand(ctx, args = []) {
 /** Shared apply logic — extracted from handleThinkCommand for reuse in both fast path and loop.
  *  Named export (2026-09-20): the on-default-effort rule (§2.8) is unit-tested by driving this
  *  directly with a synthetic spec — behavior otherwise unchanged.
- *  Effort 档位 `"none"` = 关思考 ⇒ 入口归一到 off 路径（与菜单 off 项同形——见内注释）。 */
+ *  Effort 档位 `"none"` = 关思考 ⇒ 入口归一到 off 路径（与菜单 off 项同形——见内注释）。
+ *  `spec` 同时供 off 取形（单源 = `@thincoder/core/think-off.mjs`）；`isCustomThink` 参数为调用面
+ *  既有形状保留（off 支取形已归单源，本档不再自行分族）。 */
 export async function applyThink(e, agent, syncProviderField, spec, isEffortOnly, isCustomThink, thinkOnValue) {
   const cur = agent.provider
   // `effort` 档位取 `"none"` = **关思考**（非“强度零”）：与本面 off 动作同语义 ⇒ 归一到 off 路径
@@ -124,7 +138,8 @@ export async function applyThink(e, agent, syncProviderField, spec, isEffortOnly
     if (isEffortOnly) {
       // Explicit off persists thinking:null (NF1 convention — distinguishable from autoThink's
       // delete/undefined); "on" deletes the marker so enable_thinking maps from effort again.
-      if (!enable) { cur.thinking = null; delete cur.reasoningEffort }
+      // off 取形同走单源（`thinkOffShape`——effort 族 ⇒ `null`；本支与下方非 effort 支同源零副本）。
+      if (!enable) { cur.thinking = thinkOffShape(spec); delete cur.reasoningEffort }
       // "on" 默认 effort 取 spec 枚举的**首个非 "none"** 档（批次档 §1.8-② / 设计 §2.8 D-9）：硬编码 "high"
       // 对 qwen3.8-max（enum xhigh/medium/low）无效，会被 core.mjs 枚举校验 throw（400 前置）；而直接取枚举
       // 首项在新档（首项 "none"）等于把思考关掉 ⇒ 跳过 "none"；枚举全 "none" 时与无枚举同型 ⇒ 回退 "high"
@@ -137,7 +152,10 @@ export async function applyThink(e, agent, syncProviderField, spec, isEffortOnly
         cur.thinking = { type: thinkOnValue }
         if (!cur.reasoningEffort) cur.reasoningEffort = "high"
       } else {
-        cur.thinking = isCustomThink ? undefined : { type: "disabled" }
+        // off 取形 = 单源 `thinkOffShape`（§15.4-2 / §16.2 生产者表第 2 行）：非 effort 族 ⇒
+        // `{type:"disabled"}`——自定义开值族随 §15.4-2 表改判由 `undefined`（不发字段 = 服务端
+        // 默认 = 想）改本形（达载荷层 = 真 off）。
+        cur.thinking = thinkOffShape(spec)
         delete cur.reasoningEffort
       }
       await syncProviderField(agent.activeProvider, "thinking", cur.thinking)

package/src/tui/cmd-timers.mjs

@@ -0,0 +1,33 @@
+/**
+ * cmd-timers.mjs — `/timers`：在途 timer 只读列表（最薄）。
+ *
+ * 机制单源 = `docs/core/design/AGENT-LOOP-ASYNC-POOL.md` §6.30；显示形态单源 = `docs/cli/design/TUI.md`
+ * §7.6（逐条 dim 行 `⏰<i> · 剩余 <mm:ss> · <message 首行（截断）>`；零在途 ⇒ 一行 `无在途 timer`）。
+ * **取消面不做**（取消 = 控制面——门 / 回执 / 持久化语义；停轮 = Ctrl+C，停机制 = `agent.timerWake` 关）。
+ * 取值 = `agent._pendingTimers` 活读（每次调用现算——零缓存）；剩余按 `expiresAt - now` 现算。
+ */
+import { C } from "./ansi.mjs"
+import { sanitizeDisplay, sliceByWidth, stringWidth } from "./render.mjs"
+
+/** 剩余 mm:ss（到期未送达 ⇒ 夹到 `00:00`——到期态另由状态行警示色承载，见 TUI.md §7.6）。 */
+function remainText(expiresAt, now) {
+  const sec = Math.max(0, Math.ceil((expiresAt - now) / 1000))
+  return `${String(Math.floor(sec / 60)).padStart(2, "0")}:${String(sec % 60).padStart(2, "0")}`
+}
+
+/** message 首行（截断——60 显示列 + `…`，同会话标题段口径）。 */
+function headText(message) {
+  const head = sanitizeDisplay(String(message ?? "").split("\n")[0])
+  return stringWidth(head) > 60 ? sliceByWidth(head, 59) + "…" : head
+}
+
+export async function handleTimersCommand(ctx) {
+  const { agent, pushLine } = ctx
+  const timers = agent?._pendingTimers ?? []
+  if (timers.length === 0) {
+    pushLine("无在途 timer", C.dim)
+    return
+  }
+  const now = Date.now()
+  timers.forEach((t, i) => pushLine(`⏰${i + 1} · 剩余 ${remainText(t.expiresAt, now)} · ${headText(t.message)}`, C.dim))
+}

package/src/tui/conversation-writer.mjs

@@ -11,7 +11,7 @@ import { shiftFreezeAnchors } from "./subagent-blocks.mjs"
  *              assistantLabeled: boolean }} */
 export function createConversationWriter({ state, render }) {
   const pushLine = (text, color, kind) => {
-    // TUI-OOM-ROOTCAUSE（TUI.md §15.3.1/§15.3.3）：行额度单点——行文本过 capLine
+    // TUI-OOM-ROOTCAUSE（TUI-SESSION-VIEW.md §5.1/§5.3）：行额度单点——行文本过 capLine
     // （LINE_MAX_CHARS——单行巨内容/无换行巨 chunk 的堵口）+ 总量账 + 预算对账。
     const line = { text: capLine(text), color, _kind: kind }
     state.lines.push(line)
@@ -31,7 +31,7 @@ export function createConversationWriter({ state, render }) {
 
   /** Message block label: blank line + label line. Breathing space between user/assistant messages */
   const pushLabel = (text, color) => {
-    // 行额度同 pushLine（§15.3.1——恢复行/标签行同口径）
+    // 行额度同 pushLine（§5.1——恢复行/标签行同口径）
     if (state.lines.length > 0) {
       const blank = { text: "", color: C.dim }
       state.lines.push(blank)