thincoder 0.8.2 → 0.8.4

package/src/tools/system.mjs

@@ -13,14 +13,11 @@ import {
   insideGitRepo,
   globToRegex
 } from "./shared.mjs";
-import { spawn } from "node:child_process";
-import { execFileSync } from "node:child_process";
-import { readFile } from "node:fs/promises";
-import { readdir } from "node:fs/promises";
-import { stat, lstat } from "node:fs/promises";
+import { spawn, execFileSync } from "node:child_process";
+import { readFile, readdir, stat, lstat } from "node:fs/promises";
 import { join } from "node:path";
 
-/** 子进程环境变量白名单：只透传安全变量，隔离 API key 等敏感信息 */
+/** Child process environment variable whitelist: only pass through safe variables, isolate sensitive info like API keys */
 const SAFE_ENV_KEYS = new Set([
   "PATH", "HOME", "USERPROFILE", "APPDATA", "LOCALAPPDATA",
   "TEMP", "TMP", "TMPDIR", "LANG", "LC_ALL", "LC_CTYPE", "SHELL",
@@ -30,6 +27,152 @@ const SAFE_ENV_KEYS = new Set([
   "GIT_PAGER", "PAGER", "TERM",
 ])
 
+/** Maximum buffer size per stream (stdout / stderr) before truncation */
+const MAX_STREAM_BUF = 2_000_000
+
+// ====================================================================
+// bash — command execution with safety gates
+// ====================================================================
+
+/**
+ * Pre-execution safety checks for bash commands.
+ * Three layers: file redirection → destructive commands → destructive git ops with uncommitted changes.
+ * Throws with actionable guidance on failure.
+ */
+function checkBashSafety(command, cwd) {
+  if (hasFileRedirection(command)) {
+    throw new Error("File redirection via bash is not allowed — use the write/edit/insert_after tools instead")
+  }
+  if (shellSegments(command).some(isDestructiveCommand)) {
+    throw new Error(
+      "Destructive command blocked — use specific tools or confirm with the user first. " +
+      "(If work was already destroyed, recover from auto-snapshot: checkpoint action=list then action=rewind.)"
+    )
+  }
+  if (shellSegments(command).some(isDestructiveGitSegment)) {
+    if (!insideGitRepo(cwd)) {
+      throw new Error(`Refusing destructive git command: not a git repository: ${cwd}`)
+    }
+    const status = execFileSync("git", ["status", "--porcelain"], {
+      cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"],
+    }).trim()
+    if (status) {
+      throw new Error(
+        `Refusing destructive git command: uncommitted changes exist.\n` +
+        `First create a checkpoint (action=create) to protect current work, then commit or stash before the destructive operation.\n` +
+        `(If uncommitted work was already lost, recover from the latest auto-snapshot: checkpoint action=list, then action=rewind.)\n\n${status}`
+      )
+    }
+  }
+}
+
+/**
+ * Build a sanitized environment for the child process.
+ * Whitelists safe variables, forces non-interactive defaults (EDITOR/PAGER/TERM),
+ * and sets PYTHONIOENCODING on Windows to override GBK default for Python scripts.
+ */
+function buildBashEnv() {
+  const winCmd = process.platform === "win32"
+  return {
+    ...Object.fromEntries(
+      Object.entries(process.env).filter(([k]) => SAFE_ENV_KEYS.has(k))
+    ),
+    GIT_EDITOR: "true",
+    EDITOR: "true",
+    VISUAL: "true",
+    GIT_PAGER: "cat",
+    PAGER: "cat",
+    TERM: "dumb",
+    ...(winCmd ? { PYTHONIOENCODING: "utf-8" } : {}),
+  }
+}
+
+/**
+ * Platform-aware process tree kill.
+ * POSIX: kill process group (spawned with detached=true).
+ * Windows: taskkill /T to reach grandchildren (npm test's subprocesses, etc.).
+ */
+function killProcessTree(child) {
+  if (process.platform === "win32") {
+    try { execFileSync("taskkill", ["/PID", String(child.pid), "/T", "/F"], { stdio: "ignore" }) } catch {}
+  } else {
+    try { process.kill(-child.pid, "SIGKILL") } catch {}
+    try { child.kill("SIGKILL") } catch {} // fallback: kill directly if group kill fails
+  }
+}
+
+/**
+ * Run a bash command: spawn, stream stdout/stderr with buffering and decoding,
+ * enforce timeout and signal abort, return formatted result.
+ *
+ * Returns a promise that resolves to the formatted output string (stdout + stderr + status + truncation note).
+ */
+function runBash(command, cwd, { timeout, signal, onOutput }) {
+  return new Promise((resolve) => {
+    const child = spawn(command, {
+      cwd,
+      shell: true,
+      windowsHide: true,
+      detached: process.platform !== "win32",
+      stdio: ["ignore", "pipe", "pipe"],
+      env: buildBashEnv(),
+    })
+
+    const killTree = () => killProcessTree(child)
+
+    // Separate decoders for stdout / stderr (same encoding in practice, but separate
+    // collection is cleaner and lets the model locate errors via stderr quickly)
+    const outDecoder = makeDecoder()
+    const errDecoder = makeDecoder()
+    let outBuf = ""
+    let errBuf = ""
+    let truncatedNote = ""
+
+    child.stdout.on("data", (d) => {
+      const s = sanitizeOutput(outDecoder(d))
+      if (s) {
+        onOutput?.(s)
+        if (outBuf.length < MAX_STREAM_BUF) outBuf += s
+        else if (!truncatedNote) truncatedNote =
+          "\n[... output exceeded 2MB, remainder discarded — redirect to a file if you need the full output]"
+      }
+    })
+
+    child.stderr.on("data", (d) => {
+      const s = sanitizeOutput(errDecoder(d))
+      if (errBuf.length < MAX_STREAM_BUF) errBuf += s
+    })
+
+    const timer = setTimeout(killTree, timeout)
+    if (signal) signal.addEventListener("abort", killTree, { once: true })
+
+    child.on("error", (error) => {
+      clearTimeout(timer)
+      resolve(truncate(`Command failed: ${error.message}\n[stdout]:\n${outBuf || "(empty)"}`))
+    })
+
+    child.on("close", (code, exitSignal) => {
+      clearTimeout(timer)
+      // Flush decoder tails (trailing multi-byte sequences that incomplete buffers left pending)
+      outBuf += sanitizeOutput(outDecoder(Buffer.alloc(0), true))
+      errBuf += sanitizeOutput(errDecoder(Buffer.alloc(0), true))
+
+      const status = exitSignal
+        ? `killed: ${signal?.aborted ? "user interrupted" : "timeout"}`
+        : `exit code ${code}`
+
+      const parts = [`[stdout]:\n${outBuf.trim() || "(empty)"}`]
+      if (errBuf.trim()) parts.push(`[stderr]:\n${errBuf.trim()}`)
+      parts.push(`(${status})`)
+      resolve(truncate(parts.join("\n\n") + truncatedNote))
+    })
+  })
+}
+
+// ====================================================================
+// tool definitions
+// ====================================================================
+
 export const bashTool = {
   name: "bash",
   description: DESC("bash"),
@@ -42,111 +185,13 @@ export const bashTool = {
     required: ["command"],
   },
   readonly: false,
+  outputPanel: true, // stream stdout/stderr to panel during execution, collapse to summary on completion
   async execute(args, ctx) {
-    // 安全预检：禁止 shell 重定向（> >> <）——应改用 write/edit/insert_after 工具
-    if (hasFileRedirection(args.command)) {
-      throw new Error("File redirection via bash is not allowed — use the write/edit/insert_after tools instead")
-    }
-    // 安全预检：破坏性非 git 命令（rm -rf / DROP TABLE 等）直接拒绝
-    if (shellSegments(args.command).some(isDestructiveCommand)) {
-      throw new Error("Destructive command blocked — use specific tools or confirm with the user first")
-    }
-    // 安全预检：销毁性 git 操作先检查未提交改动，有则拒绝——防一键清掉几小时工作
-    if (shellSegments(args.command).some(isDestructiveGitSegment)) {
-      if (!insideGitRepo(ctx.cwd)) {
-        throw new Error(`Refusing destructive git command: not a git repository: ${ctx.cwd}`)
-      }
-      const status = execFileSync("git", ["status", "--porcelain"], {
-        cwd: ctx.cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"],
-      }).trim()
-      if (status) {
-        throw new Error(
-          `Refusing destructive git command: uncommitted changes exist. Commit or stash first.\n` +
-          `(If uncommitted work was already lost, the checkpoint tool can restore the auto-snapshot: action=list, then action=rewind.)\n\n${status}`
-        )
-      }
-    }
-
-    return new Promise((resolve) => {
-      // detached: 让子进程成为进程组组长，超时/中断时才能整树杀掉（POSIX 用负 pid 组杀，
-      // Windows 用 taskkill /T）——只 kill 壳进程会把孙进程（如 npm test）留在后台继续跑
-      const killTree = () => {
-        if (process.platform === "win32") {
-          try { execFileSync("taskkill", ["/PID", String(child.pid), "/T", "/F"], { stdio: "ignore" }) } catch {}
-        } else {
-          try { process.kill(-child.pid, "SIGKILL") } catch {}
-          try { child.kill("SIGKILL") } catch {} // 组杀失败时兜底杀本体
-        }
-      }
-      // Windows 中文系统默认代码页是 GBK (CP936)，cmd.exe 重定向写文件时用 ANSI 代码页，
-      // chcp 65001 也改不了重定向的编码。bash 工具写含 CJK 的文件会产生 GBK——
-      // 提示词层已禁止用 bash 写文件（用 write/edit 工具替代），这里设 PYTHONIOENCODING
-      // 覆盖 Python 脚本的 stdout 编码（Python 是唯一可能正确响应环境变量的子进程）
-      const winCmd = process.platform === "win32"
-      const child = spawn(args.command, {
-        cwd: ctx.cwd,
-        shell: true,
-        windowsHide: true,
-        detached: process.platform !== "win32",
-        stdio: ["ignore", "pipe", "pipe"],
-        env: {
-          ...Object.fromEntries(
-            Object.entries(process.env).filter(([k]) => SAFE_ENV_KEYS.has(k))
-          ),
-          GIT_EDITOR: "true",
-          EDITOR: "true",
-          VISUAL: "true",
-          GIT_PAGER: "cat",
-          PAGER: "cat",
-          TERM: "dumb",
-          ...(winCmd ? { PYTHONIOENCODING: "utf-8" } : {}),
-        },
-      })
-      // stdout / stderr 各自独立解码（同进程通常同编码，但分开收集更干净，
-      // 且允许模型按 stderr 快速定位错误）
-      const outDecoder = makeDecoder()
-      const errDecoder = makeDecoder()
-      let outBuf = ""
-      let errBuf = ""
-      let truncatedNote = ""
-
-      const onStdout = (d) => {
-        const s = sanitizeOutput(outDecoder(d))
-        if (s) {
-          ctx.onOutput?.(s)
-          if (outBuf.length < 2_000_000) outBuf += s
-          else if (!truncatedNote) truncatedNote = "\n[... output exceeded 2MB, remainder discarded]"
-        }
-      }
-      const onStderr = (d) => {
-        const s = sanitizeOutput(errDecoder(d)) // 始终解码，防 pending 无限累积
-        if (errBuf.length < 2_000_000) errBuf += s
-      }
-
-      child.stdout.on("data", onStdout)
-      child.stderr.on("data", onStderr)
-
-      const timer = setTimeout(killTree, args.timeout ?? BASH_TIMEOUT_MS)
-      if (ctx.signal) {
-        ctx.signal.addEventListener("abort", killTree, { once: true })
-      }
-      child.on("error", (error) => {
-        clearTimeout(timer)
-        resolve(truncate(`Command failed: ${error.message}\n[stdout]:\n${outBuf || "(empty)"}`))
-      })
-      child.on("close", (code, signal) => {
-        clearTimeout(timer)
-        // 冲刷解码器尾部
-        outBuf += sanitizeOutput(outDecoder(Buffer.alloc(0), true))
-        errBuf += sanitizeOutput(errDecoder(Buffer.alloc(0), true))
-        const status = signal
-          ? `killed: ${ctx.signal?.aborted ? "user interrupted" : "timeout"}`
-          : `exit code ${code}`
-        const parts = [`[stdout]:\n${outBuf.trim() || "(empty)"}`]
-        if (errBuf.trim()) parts.push(`[stderr]:\n${errBuf.trim()}`)
-        parts.push(`(${status})`)
-        resolve(truncate(parts.join("\n\n") + truncatedNote))
-      })
+    checkBashSafety(args.command, ctx.cwd)
+    return runBash(args.command, ctx.cwd, {
+      timeout: args.timeout ?? BASH_TIMEOUT_MS,
+      signal: ctx.signal,
+      onOutput: ctx.onOutput,
     })
   },
 }
@@ -180,7 +225,7 @@ export const globTool = {
   },
 }
 
-/** 递归遍历文件，产出相对路径（跳过 IGNORED_DIRS） */
+/** Recursively traverse files, yield relative paths (skip IGNORED_DIRS) */
 async function* walkFiles(dir, rel = "") {
   let entries
   try {
@@ -199,7 +244,7 @@ async function* walkFiles(dir, rel = "") {
   }
 }
 
-/** glob 转正则：**\/ 匹配零或多级目录，** 跨目录，* 段内，? 段内单字符 */
+/** Glob to regex: **\/ matches zero or more directory levels, ** crosses directories, * within segment, ? single char within segment */
 
 // ---------------------------------------------------------------- grep
 
@@ -226,17 +271,17 @@ export const grepTool = {
     const after = Math.max(0, Math.floor(args.after ?? 0))
     const wantCtx = before > 0 || after > 0
     const hits = [] // { file, line(1-based), text }
-    const fileLines = new Map() // file -> string[]（仅 wantCtx 时缓存）
+    const fileLines = new Map() // file -> string[] (cached only when context lines requested)
 
     async function search(file) {
       let content
       try {
-        // 大文件保护：超 10MB 跳过，防 OOM
+        // Large file guard: skip files over 10MB to prevent OOM
         const fst = await stat(file)
         if (fst.size > 10_000_000) return
         content = await readFile(file, "utf8")
       } catch {
-        return // 不可读文件跳过；二进制会被按 utf8 读入并照常搜索（可能产生乱码匹配）
+        return // Skip unreadable files; binary files will be read as UTF-8 and searched (may produce garbled matches)
       }
       const lines = content.split("\n")
       if (wantCtx) fileLines.set(file, lines)
@@ -250,7 +295,7 @@ export const grepTool = {
 
     async function walk(target) {
       if (hits.length >= 200) return
-      // 用 lstat 不跟随符号链接——防 ./evil → /etc 时 grep 读遍 /etc
+      // Use lstat to avoid following symlinks — prevents ./evil → /etc from making grep scan the entire system
       let s
       try { s = await lstat(target) } catch { return }
       if (!s.isDirectory()) {
@@ -272,12 +317,12 @@ export const grepTool = {
     await walk(base)
     if (hits.length === 0) return "(no matches)"
 
-    // 无上下文：保持原 path:line: content 格式
+    // No context: keep original path:line: content format
     if (!wantCtx) {
       return truncate(hits.map((h) => `${h.file}:${h.line}: ${h.text}`).join("\n"))
     }
 
-    // 带上下文：匹配行用 ':'，上下文行用 '-'（同 ripgrep）；同文件相邻区间去重合并
+    // With context: matching lines use ':', context lines use '-' (like ripgrep); overlapping ranges in same file are merged and de-duplicated
     const fileMatched = new Map() // file -> Set<line>
     for (const h of hits) {
       if (!fileMatched.has(h.file)) fileMatched.set(h.file, new Set())

package/src/tools/web.mjs

@@ -36,7 +36,7 @@ export const websearchTool = {
       throw new Error(`websearch request failed: ${error.cause?.code ?? error.message}`)
     }
 
-    // 结果块 <li class="b_algo">：<h2><a href>标题</a></h2> + <p>摘要</p>
+    // Result block <li class="b_algo">: <h2><a href>title</a></h2> + <p>snippet</p>
     const blocks = html.split('<li class="b_algo"').slice(1)
     const results = []
     for (const block of blocks) {
@@ -60,17 +60,17 @@ export const websearchTool = {
 
 // ---------------------------------------------------------------- ls
 
-/** SSRF 防护：拒绝内网私有段/metadata 端点（localhost 放行——用户本机，测试也依赖） */
+/** SSRF protection: block internal private-network/metadata endpoints (localhost allowed — user's dev server, tests depend on it) */
 function isPrivateUrl(urlStr) {
   let u
   try { u = new URL(urlStr) } catch { return true }
   const host = u.hostname.toLowerCase()
-  // localhost / 127.x 放行（用户本机开发服务器、测试 mock server）
+  // localhost / 127.x allowed (user's dev server on local machine, test mock server)
   if (host === "localhost" || host === "0.0.0.0" || host.endsWith(".localhost")) return false
   if (host === "127.0.0.1" || host.startsWith("127.")) return false
-  // 云 metadata 端点
+  // cloud metadata endpoint
   if (host === "169.254.169.254" || host === "metadata.google.internal") return true
-  // IPv4 私有段
+  // IPv4 private ranges
   const m = host.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/)
   if (m) {
     const [a, b] = [Number(m[1]), Number(m[2])]
@@ -80,7 +80,7 @@ function isPrivateUrl(urlStr) {
     if (a === 169 && b === 254) return true
     if (a === 0) return true
   }
-  // IPv6 环回 / 链路本地 / 唯一本地地址
+  // IPv6 loopback / link-local / unique local addresses
   if (host === "::1" || host === "fe80::1" || host.startsWith("fc") || host.startsWith("fd")) return true
   return false
 }

package/src/tui/agent-turn.mjs

@@ -3,8 +3,8 @@ import { saveSession } from "../session.mjs"
 import { sliceByWidth } from "./render.mjs"
 import { ansi, C } from "./ansi.mjs"
 
-/** 执行一轮 agent 对话（从 submit 或队列取出调用）。
- *  从 index.mjs 抽出：agent 循环 + 回调构建 + 错误处理 + 队列处理。
+/** Execute one agent conversation turn (triggered by submit or queue).
+ *  Extracted from index.mjs: agent loop + callback construction + error handling + queue processing.
  *  ctx: { agent, state, pushLine, pushLabel, render, scheduleRender,
  *         ensureAssistantLabel, askPermission, askQuestion,
  *         handleSlash, summarize } */
@@ -13,12 +13,12 @@ export async function runAgentTurn(ctx, text) {
   pushLabel(`❯ You:`, ansi.bold + C.user)
   pushLine(text, C.text)
 
-  // 任务开始前自动打存档点 (git 仓库内；失败静默，不挡任务）
+  // Auto-checkpoint before task (git repo only; failure is silent, doesn't block the task)
   try {
     const { createCheckpoint } = await import("../git/checkpoint.mjs")
     await createCheckpoint(agent.cwd)
   } catch {
-    // 存档失败不影响任务
+    // Checkpoint failure doesn't block the task
   }
 
   ctx.assistantLabeled = false
@@ -30,7 +30,7 @@ export async function runAgentTurn(ctx, text) {
   state.currentTool = null
   state.processingStarted = Date.now()
   state.controller = new AbortController()
-  // 处理中每秒刷新一次状态栏 (运行计时）
+  // Refresh status bar every second during processing (elapsed timer)
   const ticker = setInterval(() => {
     if (state.processing) render()
   }, 1000)
@@ -49,7 +49,7 @@ export async function runAgentTurn(ctx, text) {
 
   const callbacks = {
     onToken: (t) => {
-      // 子 agent 流式输出：前缀格式 role#id/ → 提取 id，更新对应 subTask 的流式文本
+      // Subagent streaming: prefix format role#id/ → extract id, update subTask streaming text
       const subMatch = t.match(/^(\w+)#(\d+)\//)
       if (subMatch) {
         const key = `${subMatch[1]}#${subMatch[2]}`
@@ -69,7 +69,7 @@ export async function runAgentTurn(ctx, text) {
       scheduleRender()
     },
     onReasoning: (t) => {
-      // 子 agent 的思考 token 同样带 role#id/ 前缀，进 subTasks 面板
+      // Subagent reasoning tokens also carry role#id/ prefix, go into subTasks panel
       const subMatch = t.match(/^(\w+)#(\d+)\//)
       if (subMatch) {
         const key = `${subMatch[1]}#${subMatch[2]}`
@@ -84,7 +84,7 @@ export async function runAgentTurn(ctx, text) {
       scheduleRender()
     },
     onToolCall: (name, args) => {
-      // 子 agent 工具调用：前缀 role#id/toolName → 更新对应 subTask 的当前工具
+      // Subagent tool call: prefix role#id/toolName → update subTask current tool
       const subMatch = name.match(/^(\w+)#(\d+)\//)
       if (subMatch) {
         const key = `${subMatch[1]}#${subMatch[2]}`
@@ -105,7 +105,7 @@ export async function runAgentTurn(ctx, text) {
     },
     onToolResult: (name, result) => {
       state.currentTool = null
-      // 子 agent 结束：标记最早创建的 running subTask 为 done
+      // Subagent complete: mark earliest running subTask as done
       const isSubagent = name === "subagent"
       if (isSubagent) {
         const running = Object.entries(state.subTasks)
@@ -116,12 +116,12 @@ export async function runAgentTurn(ctx, text) {
           state.subTasks[key].done = true
           state.subTasks[key].tool = null
         }
-        // 子 agent 报告摘要 (最多 8 行）直接展示在对话区
+        // Subagent report preview (max 8 lines) displayed directly in conversation
         const lines = result.split("\n")
         const preview = lines.slice(0, 8).map((l) => l.slice(0, 120)).join("\n")
         if (preview) pushLine(preview, C.dim)
         if (lines.length > 8) pushLine(`  ... (${lines.length - 8} more lines)`, C.dim)
-        // 3 秒后清除面板中 done 的条目
+        // Clear done entries from panel after 3 seconds
         setTimeout(() => {
           for (const key of Object.keys(state.subTasks)) {
             if (state.subTasks[key].done) delete state.subTasks[key]
@@ -130,22 +130,47 @@ export async function runAgentTurn(ctx, text) {
         }, 3000)
       }
       const stream = state.toolStreams[name]
-      if (stream) {
+      const panel = state.outputPanels[name]
+      if (panel) {
+        // Tool with output panel: mark panel as done, conversation gets only summary
+        panel.done = true
+        delete state.toolStreams[name]
+        const summary = formatPanelSummary(name, result)
+        if (summary) pushLine(`  ${summary}`, C.dim)
+        // Clear panel after 3 seconds
+        setTimeout(() => {
+          delete state.outputPanels[name]
+          if (state.processing) render()
+        }, 3000)
+      } else if (stream) {
         const tail = stream.trimEnd().slice(-4000)
         if (tail) pushLine(tail, C.dim)
         delete state.toolStreams[name]
       }
-      if (!isSubagent) {
+      if (!isSubagent && !panel) {
         const first = result.split("\n")[0]
         pushLine(`  [done] ${name} → ${sliceByWidth(first, 100)}`, C.dim)
       }
     },
     onToolOutput: (name, chunk) => {
-      state.toolStreams[name] = (state.toolStreams[name] ?? "") + chunk
+      // Route streaming output to a panel if one exists or was requested via outputPanel flag.
+      let panel = state.outputPanels[name]
+      if (!panel) {
+        // Lazy-create panel: defensive against race conditions where setupOutputPanel
+        // hasn't fired yet or the callbacks chain dropped it (subagent relay, reconnect, etc.)
+        state.outputPanels[name] = { text: "", done: false }
+        panel = state.outputPanels[name]
+      }
+      panel.text = (panel.text ?? "") + chunk
+      if (panel.text.length > 4000) panel.text = panel.text.slice(-4000)
       scheduleRender()
     },
     onPermissionRequest: (name, args) => askPermission(name, args),
     onQuestion: (text, options) => askQuestion(text, options),
+    setupOutputPanel: (name) => {
+      state.outputPanels[name] = { text: "", done: false }
+      scheduleRender()
+    },
     onCompress: () => {
       pushLine("  [context] Context too long, auto-compacted (early conversation summarized by LLM, task state preserved)", C.warn)
     },
@@ -155,7 +180,7 @@ export async function runAgentTurn(ctx, text) {
       state.tokens.cacheHit += usage.prompt_cache_hit_tokens ?? 0
       state.tokens.cacheMiss += usage.prompt_cache_miss_tokens ?? 0
     },
-    // 节流等待 (主动闸门 / 429 退避）：状态栏明示，防用户以为卡死
+    // Throttle wait (active gate / 429 backoff): show in status bar so user knows it's not frozen
     onWait: ({ phase, seconds }) => {
       state.status = phase === "gate" ? `TPM throttle wait ~${seconds}s` : `Rate-limited 429, retry in ${seconds}s`
       render()
@@ -163,12 +188,12 @@ export async function runAgentTurn(ctx, text) {
     onTaskUpdate: (items) => {
       state.tasks = items
       const done = items.filter((i) => i.status === "done").length
-      // 留痕带上current任务标题：回看历史时知道进行到哪一项
+      // Leave trace with current task title: reviewing history shows what was in progress
       const current = items.find((i) => i.status === "in_progress")
       pushLine(`  [task] ${done}/${items.length}${current ? ` ▶ ${current.title}` : ""}`, C.dim)
       render()
     },
-    // 增量保存：每 5 个工具 turn 落一次盘，中途崩溃丢失窗口从一整轮缩到几轮
+    // Incremental save: flush to disk every 5 tool turns — mid-crash loss window shrinks from an entire round to a few turns
     onTurnEnd: (() => {
       let n = 0
       return () => {
@@ -182,7 +207,7 @@ export async function runAgentTurn(ctx, text) {
     try {
       await runAgent(agent, text, callbacks, { signal: state.controller.signal, resume })
       flushStream()
-      break // 正常完成，退出循环
+      break // Normal completion, exit loop
     } catch (error) {
       flushStream()
       if (error.name === "AbortError" || state.controller?.signal.aborted) {
@@ -192,7 +217,7 @@ export async function runAgentTurn(ctx, text) {
       if (error instanceof ContinueError) {
         pushLabel(`❯ Continue`, ansi.bold + C.warn)
         pushLine(`Ran ${error.turn} turns (limit ${error.turn}). Continue?`, C.warn)
-        // 暂停询问：复用 permission 机制
+        // Pause to ask: reuse permission mechanism
         const willContinue = await new Promise((resolve) => {
           state.permission = {
             name: "continue",
@@ -208,7 +233,7 @@ export async function runAgentTurn(ctx, text) {
           break
         }
         pushLine("[continuing…]", C.tool)
-        // 重创新 AbortController：旧 signal 一旦 abort 过，resume 会立即失败 (防御性，current路径不可达但耦合紧）
+        // Recreate AbortController: once aborted, resume immediately fails (defensive; current path unreachable but tightly coupled)
         state.controller = new AbortController()
         continue
       }
@@ -222,26 +247,26 @@ export async function runAgentTurn(ctx, text) {
   state.subTasks = {}
   state.controller = null
   state.status = "Ready"
-  // 全部完成时自动收起 todo 面板 (对齐 kimi-code TUI；agent.tasks 本身保留）
+  // Auto-collapse todo panel when all tasks done (matching kimi-code TUI; agent.tasks are preserved)
   if (state.tasks.length > 0 && state.tasks.every((t) => t.status === "done")) {
     state.tasks = []
   }
-  // 每轮结束后保存会话 (崩溃也不丢）
+  // Save session after every turn (survives crashes)
   try {
     saveSession(agent, state.lines)
   } catch {
-    // 存失败不打断使用
+    // Save failure doesn't interrupt usage
   }
   render()
 
-  // 队列里有待执行消息：自动取下一条执行
+  // Queued messages: auto-process next one
   if (state.queue.length > 0) {
     const next = state.queue.shift()
-    // 队列里的斜杠命令直接执行
+    // Queued slash commands execute directly
     if (next.text.startsWith("/")) {
       await handleSlash(next.text)
       render()
-      // 斜杠命令执行完也继续检查队列
+      // After slash command completes, continue checking queue
       if (state.queue.length > 0 && !state.processing) {
         const next2 = state.queue.shift()
         await runAgentTurn(ctx, next2.text)
@@ -252,3 +277,34 @@ export async function runAgentTurn(ctx, text) {
     }
   }
 }
+
+/** Extract a one-line summary from a panel tool's output */
+function formatPanelSummary(name, result) {
+  if (name === "verify") return _verifySummary(result)
+  // Default: first non-empty line
+  const first = result.split("\n").find((l) => l.trim())
+  return first ? `${name}: ${first.slice(0, 100)}` : null
+}
+
+function _verifySummary(result) {
+  const lines = result.split("\n")
+  const summary = []
+  // Changed files count
+  const changed = lines.find((l) => l.startsWith("Changed files:"))
+  if (changed) {
+    const m = changed.match(/files changed/) ? changed.replace(/^Changed files \(.*?\)/, "Changed files") : changed
+    summary.push(m)
+  }
+  // Syntax check results
+  const syntax = lines.filter((l) => l.startsWith("  ✗"))
+  if (syntax.length > 0) {
+    summary.push(`${syntax.length} syntax error(s)`)
+  }
+  // Test results
+  const testLine = lines.find((l) => l.startsWith("✓ Tests passed.") || l.startsWith("✗ Tests FAILED"))
+  if (testLine) summary.push(testLine.trim())
+  // Task list
+  const taskLine = lines.find((l) => l.startsWith("Task list:"))
+  if (taskLine) summary.push(taskLine)
+  return summary.length > 0 ? `verify: ${summary.join(" — ")}` : ""
+}

package/src/tui/ansi.mjs

@@ -1,6 +1,6 @@
 /**
- * tui-ansi.mjs — ANSI 转义序列与终端颜色常量
- * 零依赖，纯常量导出。
+ * tui-ansi.mjs — ANSI escape sequences and terminal color constants.
+ * Zero dependencies, pure constant exports.
  */
 
 export const ESC = "\x1b"
@@ -11,6 +11,8 @@ export const ansi = {
   mainBuffer: `${ESC}[?1049l`,
   mouseOn: `${ESC}[?1000h${ESC}[?1006h`,
   mouseOff: `${ESC}[?1000l${ESC}[?1006l`,
+  bracketedPasteOn: `${ESC}[?2004h`,
+  bracketedPasteOff: `${ESC}[?2004l`,
   home: `${ESC}[H`,
   clearLine: `${ESC}[K`,
   reset: `${ESC}[0m`,
@@ -24,7 +26,7 @@ export const C = {
   user: ansi.fg(4),
   assistant: ansi.fg(2),
   text: ansi.fg(7),
-  reason: `${ESC}[2m${ESC}[3m`,
+  reason: `${ESC}[2m`,
   tool: ansi.fg(6),
   error: ansi.fg(1),
   dim: ansi.gray,