tianshu-mcp 0.3.1 → 0.3.3

package/CHANGELOG.en.md

@@ -16,6 +16,82 @@ Chinese version: [CHANGELOG.md](CHANGELOG.md)
 - TraeWork executable discovery and native-dialog driving on macOS (currently fail-closed).
 - Optional project-level skill seeding (by default nothing is written into target repos).
 - macOS hardware verification for the Codex GUI adapter (built-in status remains `research`).
+- Best-effort stop of a GUI-side pending session (via a temporary CDP connection) when cancelling
+  a task in the `needs_user` state.
+
+---
+
+## [0.3.3] — 2026-09-12
+
+Fixes issues #4 / #7 by adapting the ZCode GUI driver to the 3.11.2 model-menu and project-binding semantics, while making acceptance fail closed for zero-test and zero-change outcomes.
+
+### Fixed
+
+- ZCode provider selectors now support both `group-provider` and the 3.11.2 `group-family` prefix. Model selection tries the visible model first and only expands a provider/family group as a fallback; failures include visible text and `data-testid` candidates.
+- New-project import dismisses the stale workspace menu before opening Add Project and uses a bounded three-round dismiss/click/verify loop, preventing the first click from being consumed as an outside click.
+- Project binding prioritizes the composer menu's `menuitemcheckbox`; the legacy sidebar item remains a compatibility fallback. Display-name matching normalizes NFKC, whitespace, and case.
+- Binding read-back combines the composer trigger text with the full-path fast path, rejects known unbound placeholders, and retries the idempotent bind operation for up to two rounds.
+- Built-in ZCode and TraeWork discovery paths use `{PROGRAMFILES}` / `{PROGRAMFILES(X86)}`. Environment placeholders in custom profiles are expanded case-insensitively while unknown placeholders remain unchanged.
+- A mandatory test check is failed when it exits with code 0 but its output reports zero executed tests.
+- Git projects now require a change relative to the pre-work baseline by default. Pure question/analysis tasks can explicitly opt out with `"requireChanges": false` in `.tianshu-mcp/acceptance.json`.
+
+### Tests
+
+- Regression coverage now models ZCode 3.11.2 flat family layouts, legacy provider fallback, testid diagnostics, swallowed project clicks, composer binding and read-back retries, plus zero-test/zero-change acceptance gates.
+
+---
+
+## [0.3.2] — 2026-09-12
+
+Fixes for issues #5 / #6: **the MCP task model was disconnected from the state of the turn inside
+the Codex GUI**. The former is the completion-detection deadlock that kept reporting `running`
+while Codex waited for user confirmation; the latter is `cancel_task` only aborting the MCP-side
+wait loop, never stopping the in-GUI run, with a misleading description. Both share the same root
+cause and are resolved together.
+
+### Fixed
+
+- **Waiting-for-user detection (issue #5)**:
+  - `judgeCodexPoll` gains a stall fallback: while the stop button stays visible and the
+    conversation hash is unchanged for `gui.stallTimeoutMs` (default 5 minutes), the task
+    transitions to `needs_user` (`needsUserKind=user_confirmation`) instead of deadlocking in
+    `running` until the overall timeout; the stall timer resets as soon as content changes again.
+  - New configurable UI detection `gui.selectors.userGate` (e.g. the embedded-checkout page or
+    approval cards): when configured and matched, transitions to `needs_user` immediately.
+    Unset by default (disabled) — no unverified selectors are built in.
+  - Tightened the `stopButton` selector: removed the `aria-label*="取消"` over-match (the Cancel
+    button on waiting-for-user screens used to be mistaken for a running signal).
+- **Recovery path (issue #5 fallout)**: `continue_task` now supports codex —
+  - `user_confirmation`: after the user completes the action in the Codex window, resume by
+    re-attaching as an observer of the in-GUI run (no message is sent); if the turn already
+    finished before resuming, the task is still judged `succeeded` correctly;
+  - `login_required`: after login, re-checks the environment and re-dispatches the task brief
+    (fresh session + project binding + full initial prompt);
+  - zcode recovery behaviour is unchanged; other agents are rejected explicitly.
+- **Cancel actually stops the GUI (issue #6)**:
+  - `cancel_task` no longer succeeds on request alone for GUI agents: it first best-effort clicks
+    the in-app stop button over CDP, then waits (bounded by `gui.cancelWaitMs`, default 15s) for
+    the GUI to become idle before settling `cancelled`; if the stop could not be confirmed the
+    terminal message states "GUI 内运行未确认停止…" (the in-GUI run may still be going);
+  - process-tree termination for CLI agents is unchanged;
+  - cancelling from `needs_user` now notes that a pending session may remain in the GUI
+    (no CDP connection exists at that point — documented limitation).
+- **Re-dispatch anti-overlap guard (issue #6 chain risk)**: when dispatching, if the managed
+  instance still has an unstopped run, MCP first tries to stop it; if it cannot, the dispatch
+  fails hard with `instance_busy`, preventing old and new turns from overlapping inside the same
+  app (observed in the wild when re-dispatching right after a cancel).
+- The startup log no longer hardcodes the tool count as `8`; it reports the actual registry size
+  (`TOOL_DEFS.length`, currently 9).
+
+### Changed
+
+- Tool descriptions match actual semantics: `cancel_task` distinguishes CLI (kill process tree)
+  from GUI (best-effort stop click + bounded wait); `continue_task` no longer claims to be
+  ZCode-only.
+- `GuiProfile` gains two configurable options, `stallTimeoutMs` (default 300000) and
+  `cancelWaitMs` (default 15000), both overridable via agent-profiles.json.
+- Skill docs (SKILL.md §4/§5, usage-examples.md §7) document the codex `user_confirmation` /
+  `login_required` recovery flows, GUI cancel semantics and the new options.
 
 ---
 
@@ -438,7 +514,9 @@ project → pick model and reasoning level → send instructions → run detecti
 
 ---
 
-[Unreleased]: https://github.com/lanlan0811/tianshu-mcp/compare/v0.3.1...HEAD
+[Unreleased]: https://github.com/lanlan0811/tianshu-mcp/compare/v0.3.3...HEAD
+[0.3.3]: https://github.com/lanlan0811/tianshu-mcp/compare/v0.3.2...v0.3.3
+[0.3.2]: https://github.com/lanlan0811/tianshu-mcp/compare/v0.3.1...v0.3.2
 [0.3.1]: https://github.com/lanlan0811/tianshu-mcp/compare/v0.3.0...v0.3.1
 [0.3.0]: https://github.com/lanlan0811/tianshu-mcp/compare/v0.2.0...v0.3.0
 [0.2.0]: https://github.com/lanlan0811/tianshu-mcp/compare/v0.1.10...v0.2.0

package/CHANGELOG.md

@@ -15,6 +15,71 @@
 - TraeWork 在 macOS 下的可执行探测与原生对话框驱动（当前 macOS 分支 fail-closed）。
 - 可选的项目级技能播种（默认不写入目标项目仓库）。
 - Codex GUI 的 macOS 真机验证（当前内置状态为 `research`）。
+- needs_user 状态下取消任务时经临时 CDP 连接尽力停止 GUI 内等待中的会话。
+
+---
+
+## [0.3.3] — 2026-09-12
+
+修复 issue #4 / #7：适配 ZCode 3.11.2 的模型菜单与项目绑定语义，并将验收引擎收紧为 fail-closed，防止零用例、零变更任务假绿。
+
+### 修复
+
+- ZCode 供应商分组选择器同时兼容 `group-provider` 与 3.11.2 `group-family`；模型流程改为直选优先、供应商分组展开兜底，并在失败信息中附带可见文本与 `data-testid` 候选。
+- 添加新项目前收起残留工作区菜单，以最多三轮“收起—点击—验证”闭环消除首次点击被吞。
+- 项目选择优先点击 composer 菜单的 `menuitemcheckbox`，旧版侧栏项仅作回退；项目名称按 NFKC、空白和大小写归一化。
+- 项目绑定回读同时校验 composer 触发器文本与完整路径，未绑定占位词不再误判；绑定失败最多两轮幂等重试。
+- ZCode/TraeWork 内置发现目录统一为 `{PROGRAMFILES}` / `{PROGRAMFILES(X86)}`；自定义 profile 的环境占位符按大小写不敏感方式展开，未知占位符保留原样。
+- 非 optional 测试检查在退出码为 0 但输出显示零用例时改判失败。
+- Git 项目默认要求相对动工前基线产生变更；纯问答/分析任务可在 `.tianshu-mcp/acceptance.json` 设置 `"requireChanges": false` 显式关闭。
+
+### 测试
+
+- 回归覆盖 ZCode 3.11.2 family 平铺模型、旧版分组兜底、testid 诊断、项目点击被吞、composer 绑定与回读重试，以及零用例/零变更门禁。
+
+---
+
+## [0.3.2] — 2026-09-12
+
+修复 issue #5 / #6：**MCP 任务模型与 Codex GUI 内 turn 的状态脱节**。
+前者是"等用户确认时恒报 running"的完成判定死锁，后者是 `cancel_task` 只停 MCP 侧等待、
+不停 GUI 内运行且描述失实。同根问题一并收敛。
+
+### 修复
+
+- **等待用户检测（issue #5）**：
+  - `judgeCodexPoll` 新增 stall 兜底：停止按钮持续可见且对话哈希 `gui.stallTimeoutMs`
+    （默认 5 分钟）不变 → 判定等待用户，任务转 `needs_user`（`needsUserKind=user_confirmation`），
+    不再死锁在 `running` 直到总超时；对话内容恢复变化会重置 stall 计时。
+  - 新增可配置界面检测 `gui.selectors.userGate`（如结账页 `embedded-checkout`、确认卡）：
+    命中即快速转 `needs_user`；默认未配置 = 禁用，不内置未真机验证的选择器。
+  - 收紧 `stopButton` 选择器：移除 `aria-label*="取消"` 过匹配（等待用户界面的"取消"
+    按钮曾被误判为运行信号）。
+- **恢复通道（issue #5 牵连）**：`continue_task` 扩展支持 codex——
+  - `user_confirmation`：用户在 Codex 窗口处理完后恢复，MCP 仅重新接入观察 GUI 内运行
+    （不发送消息）；恢复前 turn 已完成也能正确判 `succeeded`；
+  - `login_required`：复检环境后重新派发任务书（新会话 + 项目绑定 + 完整初始指令）；
+  - zcode 原有恢复行为不变；其他 agent 明确拒绝。
+- **取消真停 GUI（issue #6）**：
+  - `cancel_task` 对 GUI agent 不再"请求即成功"：先经 CDP 尽力点击界面停止按钮，
+    并在 `gui.cancelWaitMs`（默认 15 秒）内有界等待 GUI 真正空闲后落 `cancelled`；
+    未确认停止时终态文案明示"GUI 内运行未确认停止，Codex 窗口中的任务可能仍在继续"；
+  - CLI agent 的进程树终止语义不变；
+  - `needs_user` 状态取消的文案提示"GUI 内可能仍有等待中的会话"（此时 MCP 侧无 CDP 连接，
+    列为已知边界）。
+- **重派防交叠护栏（issue #6 连锁）**：派发前发现受管实例上仍有未停止的运行时，
+  先尽力停止；仍不空闲则以 `instance_busy` 硬失败拒绝派发，杜绝新旧 turn 在同一
+  应用内交叠（取消后立刻重派曾实测踩中）。
+- 启动日志的工具数由硬编码 `8` 改为按注册表实际数量（`TOOL_DEFS.length`，当前为 9）输出。
+
+### 变更
+
+- 工具描述对齐实际语义：`cancel_task` 区分 CLI（kill 进程树）与 GUI（尽力点击停止 +
+  有界等待）；`continue_task` 去掉"只用于 ZCode"限定。
+- `GuiProfile` 新增 `stallTimeoutMs`（默认 300000）与 `cancelWaitMs`（默认 15000）配置项，
+  均可由 agent-profiles.json 覆盖。
+- 技能文档（SKILL.md §4/§5、usage-examples.md §7）补齐 codex `user_confirmation` /
+  `login_required` 恢复方式、GUI 取消语义与相关配置示例。
 
 ---
 
@@ -386,7 +451,9 @@ Codex 桌面端改为 **GUI 驱动**：新增 `codex-gui` adapter，通过 MSIX
 
 ---
 
-[未发布]: https://github.com/lanlan0811/tianshu-mcp/compare/v0.3.1...HEAD
+[未发布]: https://github.com/lanlan0811/tianshu-mcp/compare/v0.3.3...HEAD
+[0.3.3]: https://github.com/lanlan0811/tianshu-mcp/compare/v0.3.2...v0.3.3
+[0.3.2]: https://github.com/lanlan0811/tianshu-mcp/compare/v0.3.1...v0.3.2
 [0.3.1]: https://github.com/lanlan0811/tianshu-mcp/compare/v0.3.0...v0.3.1
 [0.3.0]: https://github.com/lanlan0811/tianshu-mcp/compare/v0.2.0...v0.3.0
 [0.2.0]: https://github.com/lanlan0811/tianshu-mcp/compare/v0.1.10...v0.2.0

package/dist/agents/adapter.d.ts

@@ -47,6 +47,11 @@ export interface TaskContext {
         kind: "continue" | "rework";
         message?: string;
         sendMessage: boolean;
+        /**
+         * 重新接入观察（不发送任何消息）：codex user_confirmation 恢复专用。
+         * 用户在 GUI 处理完等待项后 turn 自行继续，MCP 只需重连 CDP 观察到终态。
+         */
+        reobserve?: boolean;
         sessionId?: string;
         sessionTitle?: string;
         boundProjectPath?: string;
@@ -75,8 +80,17 @@ export interface AgentRunResult {
     endReason?: string;
     /** GUI 实例是否因任务未真正完成而被保留 */
     keptInstance?: boolean;
-    needsUserKind?: "agent_question" | "close_existing_instance" | "login_required" | "system_permission";
+    needsUserKind?: "agent_question" | "close_existing_instance" | "login_required" | "system_permission" | "user_confirmation";
     pendingQuestion?: string;
+    /**
+     * 取消路径的 GUI 侧停止结果（GUI agent 专用）：
+     * clicked=是否点击了界面停止按钮；idle=等待窗口内 GUI 是否真正空闲。
+     * idle=false 时编排方必须在终态文案中明示「GUI 内运行未停止」。
+     */
+    guiStop?: {
+        clicked: boolean;
+        idle: boolean;
+    };
     session?: {
         id?: string;
         title?: string;

package/dist/agents/builtin.js

@@ -37,6 +37,8 @@ export const BUILTIN_PROFILES = {
             pollIntervalMs: 3_000,
             stableRounds: 4,
             idleTimeoutMs: 10 * 60_000,
+            stallTimeoutMs: 5 * 60_000,
+            cancelWaitMs: 15_000,
             cdpSendTimeoutMs: 15_000,
             progressIntervalMs: 30_000,
             modelSwitch: true,
@@ -71,8 +73,8 @@ export const BUILTIN_PROFILES = {
         authNote: "复用本机 ZCode 登录态",
         executableDiscovery: {
             dirs: [
-                "{ProgramFiles}/ZCode",
-                "{ProgramFiles(x86)}/ZCode",
+                "{PROGRAMFILES}/ZCode",
+                "{PROGRAMFILES(X86)}/ZCode",
                 "{LOCALAPPDATA}/Programs/ZCode",
                 "{LOCALAPPDATA}/ZCode",
                 "/Applications/ZCode.app/Contents/MacOS",
@@ -94,6 +96,8 @@ export const BUILTIN_PROFILES = {
             pollIntervalMs: 3_000,
             stableRounds: 4,
             idleTimeoutMs: 10 * 60_000,
+            stallTimeoutMs: 5 * 60_000,
+            cancelWaitMs: 15_000,
             cdpSendTimeoutMs: 15_000,
             progressIntervalMs: 30_000,
             modelSwitch: true,
@@ -125,8 +129,8 @@ export const BUILTIN_PROFILES = {
         executableDiscovery: {
             dirs: [
                 "D:/TRAE Work CN",
-                "{ProgramFiles}/TRAE WORK CN",
-                "{ProgramFiles(x86)}/TRAE WORK CN",
+                "{PROGRAMFILES}/TRAE WORK CN",
+                "{PROGRAMFILES(X86)}/TRAE WORK CN",
                 "{LOCALAPPDATA}/Programs/TRAE WORK CN",
                 "{LOCALAPPDATA}/TRAE WORK CN",
                 "{APPDATA}/TRAE SOLO CN",
@@ -150,6 +154,8 @@ export const BUILTIN_PROFILES = {
             pollIntervalMs: 3_000,
             stableRounds: 12,
             idleTimeoutMs: 10 * 60_000,
+            stallTimeoutMs: 5 * 60_000,
+            cancelWaitMs: 15_000,
             cdpSendTimeoutMs: 15_000,
             progressIntervalMs: 30_000,
             modelSwitch: true,

package/dist/agents/codex/cdp.d.ts

@@ -26,6 +26,8 @@ export interface CodexPoll {
     conversationText: string;
     /** 登录/引导页可见 */
     loginVisible: boolean;
+    /** 「等待用户」界面检测命中（gui.selectors.userGate 配置后启用） */
+    userGateVisible: boolean;
 }
 export declare class CodexCdpClient {
     private readonly selectors;

package/dist/agents/codex/cdp.js

@@ -258,11 +258,16 @@ export class CodexCdpClient {
          const els=__codexResolve(${specArgs("modelMenuItem", this.selectors)}).filter(vis);
          const available=els.map((e)=>(e.innerText||'').replace(/\\s+/g,' ').trim()).filter(Boolean);
          const hits=els.filter((e)=>norm(e.innerText)===target);
-         if(hits.length===1){const e=hits[0];const r=e.getBoundingClientRect();return {count:1,available,point:{x:Math.round(r.left+r.width/2),y:Math.round(r.top+r.height/2)}}}
+         if(hits.length===1){
+           // 真机实测（26.903.9818.0）：模型 radio 对 trusted 鼠标点击只收起菜单、不切换选中态，
+           // DOM .click() 才会真正生效（aria-checked 翻转）且菜单保持打开（后续调滑块依赖它）。
+           // 与「项目选择触发器需要 trusted 才能展开」相反——菜单项选择用 DOM click。
+           hits[0].click();
+           return {count:1,available,clicked:true};
+         }
          return {count:hits.length,available};`));
-        if (!found.point)
+        if (!found.clicked)
             return { clicked: false, count: found.count, available: found.available };
-        await this.clickAt(found.point.x, found.point.y);
         return { clicked: true, count: found.count, available: found.available };
     }
     /** 读取当前模型/思考等级触发器文本（限定输入框作用域，排除菜单栏与模式切换器） */
@@ -336,6 +341,7 @@ export class CodexCdpClient {
             sendButton: specArgs("sendButton", this.selectors),
             chatInput: specArgs("chatInput", this.selectors),
             loginIndicator: specArgs("loginIndicator", this.selectors),
+            userGate: specArgs("userGate", this.selectors),
             messageArea: specArgs("messageArea", this.selectors),
         })};${this.visibleFilter}
         const resolve=(k)=>__codexResolve(JSON.parse(sels[k]));
@@ -346,7 +352,8 @@ export class CodexCdpClient {
           sendVisible:visAny('sendButton'),
           composerText:(textOf('chatInput')||'').trim(),
           conversationText:(textOf('messageArea')||'').trim().slice(0,20000),
-          loginVisible:visAny('loginIndicator')
+          loginVisible:visAny('loginIndicator'),
+          userGateVisible:visAny('userGate')
         };`));
     }
 }

package/dist/agents/codex/liveness.d.ts

@@ -9,6 +9,8 @@ export interface CodexPoll {
     loginVisible: boolean;
     /** 发送按钮当前是否可见（输入非空时） */
     sendVisible?: boolean;
+    /** 「等待用户」界面检测命中（gui.selectors.userGate 配置后启用） */
+    userGateVisible?: boolean;
 }
 export interface CodexPollState {
     hash: string;
@@ -16,12 +18,16 @@ export interface CodexPollState {
     idleSince: number;
     /** 本轮是否曾观测到权威运行信号 */
     sawRunning: boolean;
+    /** 停止按钮可见且对话哈希不变的起始时刻（0 = 未在计时） */
+    stallSince: number;
 }
 export type CodexVerdict = {
-    kind: "running" | "pending" | "finished" | "needs_login" | "idle_timeout";
+    kind: "running" | "pending" | "finished" | "needs_login" | "needs_user" | "idle_timeout";
     state: CodexPollState;
     evidence: string;
 };
+/** 与 GuiProfileSchema.stallTimeoutMs 默认一致；仅供直调兜底，生产路径由 codexGuiOf 传入 */
+export declare const DEFAULT_STALL_TIMEOUT_MS = 300000;
 export declare function hashText(text: string): string;
 export declare const initialCodexState: () => CodexPollState;
-export declare function judgeCodexPoll(poll: CodexPoll, previous: CodexPollState, stableRounds: number, idleTimeoutMs: number, now?: number): CodexVerdict;
+export declare function judgeCodexPoll(poll: CodexPoll, previous: CodexPollState, stableRounds: number, idleTimeoutMs: number, now?: number, stallTimeoutMs?: number): CodexVerdict;

package/dist/agents/codex/liveness.js

@@ -1,5 +1,5 @@
 /**
- * Codex 任务运行判定（开发计划决策 7/8）。
+ * Codex 任务运行判定（开发计划决策 7/8；issue #5 修复后含 stall 判定）。
  *
  * 设计（吸取 TraeWork 误判完成的教训）：
  * 1. 停止按钮为**权威运行信号**：出现即 running，绝不在此时判完成。
@@ -7,8 +7,17 @@
  *    把「其实还在生成、只是 DOM 恰好静止」误判为完成。
  * 3. 若始终未观测到运行信号（选择器未命中）→ 不判完成，转入空闲计时，最终 idle_timeout：
  *    结束本轮但**不终止实例**（失败开放，不比现状更糟）。
+ * 4. 等待用户判定（issue #5）：「方案确认卡/订阅结账页」等场景下 turn 是暂停而非结束，
+ *    停止按钮恒可见 → 上面的规则会死锁。两条出路：
+ *    - userGateVisible：profile.gui.selectors.userGate 配置的界面检测（快速路径）；
+ *    - stall 兜底：停止按钮持续可见且对话哈希 stallTimeoutMs 不变 → needs_user。
+ *      它无法区分「等用户确认」与「长时间静默的合法长命令」，误判后果是转
+ *      needs_user（非终态、可 continue 恢复），远好于死等总超时；长命令任务
+ *      应调大 gui.stallTimeoutMs。
  */
 import { createHash } from "node:crypto";
+/** 与 GuiProfileSchema.stallTimeoutMs 默认一致；仅供直调兜底，生产路径由 codexGuiOf 传入 */
+export const DEFAULT_STALL_TIMEOUT_MS = 300_000;
 export function hashText(text) {
     return createHash("sha256").update(text).digest("hex").slice(0, 12);
 }
@@ -17,29 +26,55 @@ export const initialCodexState = () => ({
     stable: 0,
     idleSince: 0,
     sawRunning: false,
+    stallSince: 0,
 });
-export function judgeCodexPoll(poll, previous, stableRounds, idleTimeoutMs, now = Date.now()) {
+export function judgeCodexPoll(poll, previous, stableRounds, idleTimeoutMs, now = Date.now(), stallTimeoutMs = DEFAULT_STALL_TIMEOUT_MS) {
     const hash = hashText(poll.conversationText);
     if (poll.loginVisible)
         return {
             kind: "needs_login",
-            state: { hash, stable: 0, idleSince: 0, sawRunning: previous.sawRunning },
+            state: { hash, stable: 0, idleSince: 0, sawRunning: previous.sawRunning, stallSince: 0 },
             evidence: "login_indicator",
         };
-    if (poll.stopVisible)
+    // 等待用户快速路径：界面检测命中（如结账页/确认卡，选择器可配置）
+    if (poll.userGateVisible)
+        return {
+            kind: "needs_user",
+            state: { hash, stable: 0, idleSince: 0, sawRunning: previous.sawRunning, stallSince: 0 },
+            evidence: "user_gate",
+        };
+    if (poll.stopVisible) {
+        // stall 兜底（issue #5）：停止按钮恒可见时对话哈希长时间不变 → 判定等待用户。
+        const hashUnchanged = hash === previous.hash;
+        const stallSince = hashUnchanged ? previous.stallSince || now : now;
+        if (hashUnchanged && previous.stallSince && now - previous.stallSince >= stallTimeoutMs)
+            return {
+                kind: "needs_user",
+                state: { hash, stable: 0, idleSince: 0, sawRunning: true, stallSince },
+                evidence: "stop_button+stall",
+            };
         return {
             kind: "running",
-            state: { hash, stable: 0, idleSince: 0, sawRunning: true },
+            state: { hash, stable: 0, idleSince: 0, sawRunning: true, stallSince },
             evidence: "stop_button",
         };
+    }
     const sawRunning = previous.sawRunning;
     const stable = hash === previous.hash && poll.conversationText.trim() ? previous.stable + 1 : 0;
     const idleSince = stable >= stableRounds ? previous.idleSince || now : 0;
     // 权威完成：曾运行 → 停止钮消失 → 文本稳定
     if (sawRunning && stable >= stableRounds && poll.conversationText.trim())
-        return { kind: "finished", state: { hash, stable, idleSince, sawRunning }, evidence: "stop_button_gone+text_stable" };
+        return {
+            kind: "finished",
+            state: { hash, stable, idleSince, sawRunning, stallSince: 0 },
+            evidence: "stop_button_gone+text_stable",
+        };
     // 失败开放：始终无运行信号 → 空闲超时（结束本轮、保留实例）
     if (idleSince && now - idleSince >= idleTimeoutMs)
-        return { kind: "idle_timeout", state: { hash, stable, idleSince, sawRunning }, evidence: "no_running_signal+idle" };
-    return { kind: "pending", state: { hash, stable, idleSince, sawRunning }, evidence: "none" };
+        return {
+            kind: "idle_timeout",
+            state: { hash, stable, idleSince, sawRunning, stallSince: 0 },
+            evidence: "no_running_signal+idle",
+        };
+    return { kind: "pending", state: { hash, stable, idleSince, sawRunning, stallSince: 0 }, evidence: "none" };
 }