wezard 1.4.1 → 2.0.0

package/dist/daemon/mirror-bridge.js

@@ -17,20 +17,21 @@ import { existsSync, readdirSync, statSync, watch, openSync, readSync, closeSync
 import { join, dirname } from "node:path";
 import { expandHome, sanitizeId } from "../shared/paths.js";
 import { augmentedPath } from "../shared/exec-path.js";
-import { sleep, truncateWithCount } from "../shared/std.js";
+import { sleep, truncateWithCount, mapLimit } from "../shared/std.js";
 import { activeBackends, backendForPath, projectDirFor, projectDirsFor, } from "../shared/cli-backends.js";
 import { isModalPane, isAskqSubmitPage, parseModalOptions, pickModalAnswer, pickAutoAllowAnswer, parseConfirmContext, looksLikePicker } from "../shared/modal-pane.js";
-import { hasMirrorAskq, runMirrorAskqFlow, hasMirrorPlan, mootMirrorPlan, runMirrorPlanFlow, hasMirrorPicker, mootMirrorPicker, runMirrorPickerFlow } from "./approval.js";
+import { bindCardChannel, hasMirrorAskq, runMirrorAskqFlow, hasMirrorPlan, mootMirrorPlan, runMirrorPlanFlow, hasMirrorPicker, mootMirrorPicker, runMirrorPickerFlow } from "./approval.js";
 import { isAutoWindowActive } from "./session-cache.js";
 import { noticeSuffixFor } from "./notices.js";
 import { dangerOf } from "./danger.js";
 import { runTmux, spawnTmuxClaude } from "./spawn-tmux.js";
+import { wizardStore } from "./wizard.js";
 import { startSubagentWatch } from "./subagent-tail.js";
 import { recordTool, recordToolResult, recordMark, recordTurnStart, recordTurnItem, recordTurnUsage, recordTurnClose, recordCloseOpenTurns, buildDetailUrl, buildChatUrl } from "./detail.js";
-import { labelFor, tagOfKey, baseOfKey, keyOf, withTagHeader, headSep, parseTagHeader } from "../shared/session-label.js";
+import { labelFor, tagOfKey, baseOfKey, keyOf, stripSigil, displayName, withTagHeader, withLinkedTagHeader, linkedTagHead, linkTags, parseTagHeader, MAX_BODY_LINKS } from "../shared/session-label.js";
 import { splitMarkdown } from "../shared/md-chunk.js";
 import { randomTip } from "./tips.js";
-import { chatBaseOf, chatNameOf, listChatNames, normChatName, parsePeerRef, peerAddress } from "./chat-name.js";
+import { chatBaseOf, chatNameOf, listChatNames, parsePeerRef, peerAddress } from "./chat-name.js";
 import { stripAnsi, compactPane, paneIsBusy, paneIsStalled, transcriptStalled, summarizeTail, lastAssistantText, lastContextTokens, keepaliveStamps, tailTurns, renderDialog } from "./peers.js";
 // Same PATH augmentation logic as cc-bridge: launchd / systemd start the daemon
 // with a stripped PATH that often lacks nvm / homebrew, breaking spawn(claudeBin).
@@ -677,9 +678,10 @@ const renderLine = (raw, deps) => {
 };
 // Block-wise packing (shared/md-chunk): never cuts mid-line, and never cuts a
 // fenced block or table in a way that breaks rendering — see splitMarkdown.
-// Room reserved in every chunk for the `emoji \`#tag\` \`2/5\`` header line
-// (up to ~110 bytes in its linked `[🧙 #tag](url)` form).
-const TAG_HEADER_BUDGET = 64;
+// Room reserved in every chunk for the `emoji \`#tag\` \`2/5\`` header line and
+// the chat-detail links linkTags hangs on it and on up to MAX_BODY_LINKS body
+// mentions — each `(url)` runs ~200-250 bytes.
+const TAG_HEADER_BUDGET = 256 * (1 + MAX_BODY_LINKS);
 export const startMirrorTail = (deps) => {
     const { log } = deps;
     // A single logical tail follows ONE sessionId whose transcript file may move
@@ -799,11 +801,10 @@ export const startMirrorTail = (deps) => {
         livePath: resolveLive,
     };
 };
-// Run a tmux subcommand, capturing stdout/stderr. Delegates to spawn-tmux's
-// runTmux so there is exactly ONE tmux exec path in the daemon — and therefore
-// exactly one place where the hard timeout lives. (Two hand-rolled copies used
-// to exist here; both could hang forever, which is how a wedged tmux server
-// silently killed a whole chat. See TMUX_TIMEOUT_MS.)
+const parsePaneList = (out) => new Map(out.split("\n").flatMap((line) => {
+    const [id, ...rest] = line.trim().split("\t");
+    return id?.startsWith("%") ? [[id, rest.join("\t")]] : [];
+}));
 // Stable JSON: sort object keys recursively. Used to fingerprint a tool_use's
 // `input` so the hook-side and the jsonl-side compute the same signature even
 // when the model emits keys in arbitrary order.
@@ -1581,8 +1582,8 @@ export const startMirror = (deps) => {
     const detailCardFor = (s, target) => {
         if (s.tools.length === 0)
             return undefined;
-        const tag = tagOfKey(target);
-        const titlePrefix = tag ? `${labelFor(tag)} #${tag} · ` : "";
+        const name = displayName(target);
+        const titlePrefix = name ? `${labelFor(name)} .${name} · ` : "";
         return {
             card_type: "button_interaction",
             main_title: { title: `${titlePrefix}本轮工具调用` },
@@ -1598,7 +1599,7 @@ export const startMirror = (deps) => {
         const content = s.acc;
         s.lastSent = content;
         try {
-            await client.replyStream(s.frame, s.streamId, withTagHeader(s.target, content || " "), false);
+            await client.replyStream(s.frame, s.streamId, withLinkedTagHeader(s.target, content || " ", chatTurnUrl(s.target, s.turnId)), false);
             log.debug({ turnId: s.turnId, len: content.length }, "stream flush ok");
         }
         catch (e) {
@@ -1679,32 +1680,26 @@ export const startMirror = (deps) => {
     };
     // Standalone fallback (no live stream / stream dead). Per-attachment FIFO so
     // pushes from a single mirror stay ordered; different mirrors run in parallel.
-    // Linked tag prefix: emoji+tag becomes a chat-detail link. Falls back to
-    // plain withTagHeader when no turnId is available (no active turn to link).
-    const linkedTagPrefix = (target, turnId) => {
-        if (!turnId)
-            return "";
-        const url = buildChatUrl(cfg.daemon.detailPublicBase, cfg.daemon.host, cfg.daemon.port, turnId, stripPrincipalPrefix(target));
-        const tag = tagOfKey(target);
-        return tag ? `[${labelFor(tag)} #${tag}](${url})` : `[🧙](${url})`;
-    };
-    const withLinkedTag = (a, content, seq, turnId) => {
-        const prefix = linkedTagPrefix(a.target, turnId ?? a.briefTurnId);
-        if (prefix) {
-            const seqBit = seq ? ` ${seq}` : "";
-            return `${prefix}${seqBit}${headSep(content)}${content}`;
-        }
-        return withTagHeader(a.target, content, seq);
-    };
+    // 头挂 chat 详情页的票据: 本轮那条 turn。没有活 turn 可挂 → undefined, 头退回裸
+    // `emoji #tag` (withLinkedTagHeader 自己兜)。
+    const chatTurnUrl = (target, turnId) => turnId
+        ? buildChatUrl(cfg.daemon.detailPublicBase, cfg.daemon.host, cfg.daemon.port, turnId, stripPrincipalPrefix(target))
+        : undefined;
+    const withLinkedTag = (a, content, seq, turnId) => withLinkedTagHeader(a.target, content, chatTurnUrl(a.target, turnId ?? a.briefTurnId), seq);
     // 空正文一票否决 (近源拦截): 剥掉可能存在的路由头 (`🦊 #tag` / `[🧙](url)`)
     // 后没有可见内容就不发。中央 chat-gate (last-response 的 SDK 包装) 是最后一道
     // 防线; 这里拦在源头 —— 空内容不进 standalonePending FIFO、不占防抖 buf、
     // 不重置计时器, 免得"空 part 入队 → flush 时 join 出空串"的死角。
     const hasVisibleBody = (content) => parseTagHeader(content).body.length > 0;
+    // 推到本轮的频道 (人从别的群叫它 → 回那个群)。私聊轮的正文 brief 下在上游
+    // turnSilent 已被拦下; 非 brief 的逐条推送在这里兜一道 —— 只放 `[mirror]` /
+    // `[wezard]` 系统提示 (它们回 home)。
     const sendStandalone = (a, content) => {
         if (!hasVisibleBody(content))
             return;
-        const chatId = stripPrincipalPrefix(a.target);
+        if (isPrivate(a) && !/^\[(mirror|wezard)\]/.test(content.trim()))
+            return;
+        const chatId = replyChatId(a);
         const pieces = splitMarkdown(content, Math.max(200, cfg.wrc.mirror.chunkBytes - TAG_HEADER_BUDGET));
         const chunks = pieces.map((p, i) => withLinkedTag(a, p, pieces.length > 1 ? `${i + 1}/${pieces.length}` : undefined));
         a.standalonePending = a.standalonePending
@@ -1724,7 +1719,7 @@ export const startMirror = (deps) => {
     const sendRaw = (a, content) => {
         if (!hasVisibleBody(content))
             return;
-        const chatId = stripPrincipalPrefix(a.target);
+        const chatId = replyChatId(a);
         a.standalonePending = a.standalonePending
             .then(async () => {
             try {
@@ -2045,18 +2040,15 @@ export const startMirror = (deps) => {
     // 链接落到 chat 视图: 默认选中本 turn 所属的 #tag, 贴底显示整条会话。turnId 依旧
     // 是凭据 (不可枚举), 只是页面从"一个 turn"扩成"这个 chat 的全部会话"。
     // target 作为 ww_uniq 传下去, 让同 chat 的所有 turn 详情都复用一个 WeCom 窗口。
-    const briefDetailLink = (turnId, target) => {
-        const url = buildChatUrl(cfg.daemon.detailPublicBase, cfg.daemon.host, cfg.daemon.port, turnId, stripPrincipalPrefix(target));
-        const tag = tagOfKey(target);
-        return tag ? `[${labelFor(tag)} #${tag}](${url})` : `[🧙](${url})`;
-    };
+    const briefDetailLink = (turnId, target) => linkedTagHead(target, buildChatUrl(cfg.daemon.detailPublicBase, cfg.daemon.host, cfg.daemon.port, turnId, stripPrincipalPrefix(target)));
     // ── 出处门 (chatOriginOnly) ───────────────────────────────────────────
     // 人在 CLI 里手敲的一轮, 镜像只发生在两处: 他眼前的终端, 和 chat 详情页 (turn
     // store 全量记录 + SSE 实时刷新)。聊天里不再下发它的气泡 —— 那份内容他本来就
     // 在看。群里保留的是需要在群里发生的事: WeCom 发起的轮次、审批/提问卡、
     // `[mirror]` 系统提示 —— 它们都不走这道门。
     // 只在 brief 下生效: 抑制的前提是详情页兜得住内容, 而 turn store 只有 brief 在写。
-    const turnSilent = (a) => cfg.wrc.mirror.brief && cfg.wrc.mirror.chatOriginOnly && a.turnFromChat === false;
+    // 私聊轮 (wizard 之间, 非 public) 同理: 它的回复属于那场私聊, 只进双方的 rolepage。
+    const turnSilent = (a) => isPrivate(a) || (cfg.wrc.mirror.brief && cfg.wrc.mirror.chatOriginOnly && a.turnFromChat === false);
     // 收口一条 loading 气泡: finish=true 写入最终内容, 只生效一次。发送失败退回 standalone。
     // raw=true skips withTagHeader (used when content already contains the linked tag header).
     // WeCom 客户端收到 finish=true 后仍有打字机动画要播放, 如果紧接着就下发
@@ -2118,6 +2110,34 @@ export const startMirror = (deps) => {
         a.pendingOrigin = undefined;
         return p && Date.now() - p.at <= ORIGIN_TTL_MS ? p.origin : undefined;
     };
+    /** 同上, 出处那一枚印章。 */
+    const consumeFrom = (a) => {
+        const p = a.pendingFrom;
+        a.pendingFrom = undefined;
+        return p && Date.now() - p.at <= ORIGIN_TTL_MS ? p.from : undefined;
+    };
+    /** 频道印章: 有新印章就换频道; 没有则 `reset` (CLI 手敲 / 人从聊天发起) 回到
+     *  home, 其余续写 (收口后的补写) 沿用上一轮。 */
+    const consumeChannel = (a, reset) => {
+        const p = a.pendingChannel;
+        a.pendingChannel = undefined;
+        if (p && Date.now() - p.at <= ORIGIN_TTL_MS) {
+            a.channel = p.channel === baseOfKey(a.target) ? undefined : p.channel;
+            a.speaker = p.speaker;
+        }
+        else if (reset) {
+            a.channel = undefined;
+            a.speaker = undefined;
+        }
+    };
+    /** 本轮落 turn 记录的频道字段。 */
+    const channelFields = (a) => ({ channel: a.channel ?? baseOfKey(a.target), speaker: a.speaker });
+    /** 私聊轮: 回复只落 turn 记录。 */
+    const isPrivate = (a) => a.channel === "";
+    /** 本轮回复该推去的 chatId。 */
+    const replyChatId = (a) => stripPrincipalPrefix(a.channel || a.target);
+    // 审批/提问卡同样回本轮的频道; 私聊轮 ("") 的卡回 home —— 要点它的人总得在某个群里。
+    bindCardChannel((key) => byTarget.get(key)?.channel || "");
     // 详情页要按后端的名字称呼它 ("Claude 正在思考" / "CodeBuddy 正在思考") —— 后端
     // 由 transcript 落盘路径唯一确定, 所以每次开 turn 时现算, 不必额外记在 AttachState 上。
     const cliOf = (a) => a.jsonlPath ? backendForPath(a.jsonlPath).name : undefined;
@@ -2126,7 +2146,8 @@ export const startMirror = (deps) => {
         a.queryEpoch = (a.queryEpoch ?? 0) + 1; // WeCom 侧的新一轮同样是 query 边界
         a.turnFromChat = true; // 出处确凿: 这一轮有 frame, 群里就是它的主场
         a.pendingFromCli = false; // 人改从聊天里说话了, 之前那条 CLI 输入不再是出处
-        recordTurnStart({ id: turnId, target: a.target, sessionId: a.sessionId, cli: cliOf(a), cwd: a.runningCwd || undefined, userQuery: userQuery.trim() || undefined, origin: consumeOrigin(a) });
+        consumeChannel(a, true);
+        recordTurnStart({ id: turnId, target: a.target, sessionId: a.sessionId, cli: cliOf(a), cwd: a.runningCwd || undefined, userQuery: userQuery.trim() || undefined, origin: consumeOrigin(a), from: consumeFrom(a), ...channelFields(a) });
         // hardTimer 兜底: turn 若无终句 / turn_end 收口 (卡死/漏收), 到点仍收气泡。
         const bubble = { frame, streamId, hardTimer: undefined, done: false };
         const q = { turnId, bubble, isSlash };
@@ -2172,7 +2193,8 @@ export const startMirror = (deps) => {
         const fromCli = a.pendingFromCli === true;
         a.pendingFromCli = false;
         a.turnFromChat = fromCli ? false : a.turnFromChat ?? true;
-        recordTurnStart({ id: turnId, target: a.target, sessionId: a.sessionId, cli: cliOf(a), cwd: a.runningCwd || undefined, userQuery: query || undefined, origin: consumeOrigin(a) });
+        consumeChannel(a, fromCli);
+        recordTurnStart({ id: turnId, target: a.target, sessionId: a.sessionId, cli: cliOf(a), cwd: a.runningCwd || undefined, userQuery: query || undefined, origin: consumeOrigin(a), from: consumeFrom(a), ...channelFields(a) });
         a.briefTurnId = turnId;
         a.briefBubble = undefined;
         a.briefIsSlash = false;
@@ -2181,7 +2203,7 @@ export const startMirror = (deps) => {
         a.briefLastText = undefined;
         clearCot(a);
         // 详情链接不在这里单独发 — 本轮的每条 standalone 都由 withLinkedTag 自带
-        // (linkedTagPrefix 读的正是 a.briefTurnId)。静默轮没有 standalone 可搭车, 那就
+        // (chatTurnUrl 读的正是 a.briefTurnId)。静默轮没有 standalone 可搭车, 那就
         // 一条都不发: 群里只该出现有正文的消息, 纯入口提示是噪音。
         log.info({ sessionId: a.sessionId, turnId, fromCli, silent: turnSilent(a) }, "brief: turn started (CLI-side, no bubble)");
     };
@@ -2226,7 +2248,7 @@ export const startMirror = (deps) => {
         a.lastConcludedEpoch = a.queryEpoch ?? 0;
         a.lastConcludedAt = Date.now();
         if (a.briefBubble && !a.briefBubble.done) {
-            void finishBriefBubble(a, `${briefDetailLink(turnId, a.target)} ${body}`, true);
+            void finishBriefBubble(a, `${briefDetailLink(turnId, a.target)} ${linkTags(a.target, body)}`, true);
         }
         else if (turnSilent(a)) {
             // CLI 手敲的一轮: 终稿只留在 turn store, 详情页照常实时可见。
@@ -2832,6 +2854,7 @@ export const startMirror = (deps) => {
                     && backendForPath(a.jsonlPath).name === "codebuddy"
                     && !hasMirrorPlan(a.sessionId)) {
                     void runMirrorPlanFlow({
+                        cfg,
                         log: log.child({ sessionId: a.sessionId }),
                         client,
                         sessionId: a.sessionId,
@@ -2858,6 +2881,7 @@ export const startMirror = (deps) => {
                     && backendForPath(a.jsonlPath).name === "codebuddy"
                     && !hasMirrorAskq(a.sessionId)) {
                     void runMirrorAskqFlow({
+                        cfg,
                         log: log.child({ sessionId: a.sessionId }),
                         client,
                         sessionId: a.sessionId,
@@ -3070,7 +3094,7 @@ export const startMirror = (deps) => {
     const detailUrlFor = (id, principal) => cfg.daemon.detailLinksInMirror && id
         ? buildDetailUrl(cfg.daemon.detailPublicBase, cfg.daemon.host, cfg.daemon.port, id, principal ? stripPrincipalPrefix(principal) : undefined)
         : "";
-    const attach = ({ sessionId, jsonlPath, target: targetOverride, tmuxPane, tmuxSession, cwd, model, pendingCwd }) => {
+    const attach = ({ sessionId, jsonlPath, target: targetOverride, tmuxPane, tmuxSession, cwd, model, pendingCwd, keepaliveDisabled }) => {
         const target = resolveTarget(targetOverride);
         if (!target)
             return { ok: false, reason: "no target chat (set wrc.mirror.pushChat or defaultChat, or pass target)" };
@@ -3100,6 +3124,9 @@ export const startMirror = (deps) => {
         // model it asked for (possibly "" = CLI default) and says so; a re-attach
         // onto an already-running pane doesn't, so it keeps what was recorded.
         const carryModel = model !== undefined ? model.trim() : (prevByTarget?.model ?? deps.store.get(target)?.model ?? "");
+        // Same carry rule again: an explicit spawn-time choice wins, otherwise this
+        // wizard's existing policy (in-memory, or on disk across a reload) sticks.
+        const carryKeepaliveDisabled = keepaliveDisabled !== undefined ? keepaliveDisabled : (prevByTarget?.keepaliveDisabled ?? deps.store.get(target)?.keepaliveDisabled ?? false);
         if (prevByTarget)
             detach(prevByTarget, "target reassigned");
         // Build the attachment first so the tail's onItem closure can capture it.
@@ -3115,6 +3142,7 @@ export const startMirror = (deps) => {
             runningCwd: expandHome(((cwd ?? "").trim()) || readCwdFromJsonl(jsonlPath) || cfg.wrc.cwd),
             pendingCwd: carryPending,
             model: carryModel,
+            keepaliveDisabled: carryKeepaliveDisabled,
             tail: { stop: () => undefined, drain: () => undefined, livePath: () => undefined }, // placeholder; replaced below
             standalonePending: Promise.resolve(),
             recentToolSigs: new Map(),
@@ -3153,8 +3181,10 @@ export const startMirror = (deps) => {
             cwd: a.runningCwd || undefined,
             model: a.model || undefined,
             pendingCwd: a.pendingCwd || undefined,
+            cwdConfirmed: prevRec?.cwdConfirmed,
             keepaliveOff: prevRec?.keepaliveOff,
             keepaliveOffAt: prevRec?.keepaliveOffAt,
+            keepaliveDisabled: carryKeepaliveDisabled || undefined,
         });
         log.info({ sessionId, jsonlPath, target, tmuxSession: a.tmuxSession, runningCwd: a.runningCwd, pendingCwd: a.pendingCwd, mirrors: bySessionId.size }, "mirror attached");
         return { ok: true, sessionId, jsonlPath, target };
@@ -3193,7 +3223,9 @@ export const startMirror = (deps) => {
                 s.add(a.sessionId);
         return s;
     };
-    const restoreFromStore = async (principal) => {
+    // `panes` = boot 快照; 给了就不再为每个 principal 单独问 tmux。lazy 调用方
+    // 不传, 维持原来的逐个探活。
+    const restoreFromStore = async (principal, panes) => {
         const rec = deps.store.get(principal);
         if (!rec)
             return undefined;
@@ -3210,7 +3242,7 @@ export const startMirror = (deps) => {
         // jsonl means "no input yet", NOT "rotated away" — healing it onto some
         // unrelated newest-in-cwd file is exactly the cross-wire we must avoid.
         const storedPane = (rec.tmuxPane ?? "").trim();
-        const livePane = storedPane && (await tmuxPaneAlive(storedPane)) ? storedPane : "";
+        const livePane = storedPane && (panes ? panes.has(storedPane) : await tmuxPaneAlive(storedPane)) ? storedPane : "";
         if (!existsSync(jsonlAbs)) {
             // First: the SAME-sid transcript may have merely relocated to a sibling
             // project dir (Claude Code EnterWorktree/ExitWorktree moved it while the
@@ -3263,8 +3295,9 @@ export const startMirror = (deps) => {
         // is silently detached; that detached chat then never mirrors again. Runs at
         // boot; the 3s drift follower maintains it thereafter.
         if (livePane) {
-            const cwdRes = await runTmux(["display-message", "-p", "-t", livePane, "#{pane_current_path}"]);
-            const paneCwd = cwdRes.stdout.trim();
+            const paneCwd = panes
+                ? (panes.get(livePane) ?? "")
+                : (await runTmux(["display-message", "-p", "-t", livePane, "#{pane_current_path}"])).stdout.trim();
             if (paneCwd) {
                 // Encode under the backend that owns the bound transcript — comparing
                 // with the primary dialect would report a phantom drift for every
@@ -3299,6 +3332,8 @@ export const startMirror = (deps) => {
         }
         // Re-hydrate the `/stop` pause so a reload doesn't resume pinging a quieted
         // session (attach preserved it on disk; this puts it back in memory).
+        // keepaliveDisabled is carried by attach() itself (same rule as `model`);
+        // only the transient `/stop` pause needs manual re-hydration here.
         const restored = byTarget.get(principal);
         if (restored && rec.keepaliveOff) {
             restored.keepaliveOff = true;
@@ -3312,18 +3347,26 @@ export const startMirror = (deps) => {
     const persistPause = (a) => {
         const rec = deps.store.get(a.target);
         if (rec)
-            deps.store.set(a.target, { ...rec, keepaliveOff: a.keepaliveOff, keepaliveOffAt: a.keepaliveOffAt });
+            deps.store.set(a.target, { ...rec, keepaliveOff: a.keepaliveOff, keepaliveOffAt: a.keepaliveOffAt, keepaliveDisabled: a.keepaliveDisabled });
     };
     // We re-attach lazily on demand too (see restoreFromStore in dispatch /
     // hasMirrorTarget), but eager boot-restore makes outbound (tail → push) work
     // even before any inbound arrives — e.g. claude finishes a long-running
     // background task and writes assistant content to the jsonl while idle.
+    const RESTORE_CONC = 8;
     const persisted = deps.store.all();
     const persistedKeys = Object.keys(persisted);
     if (persistedKeys.length > 0) {
-        for (const principal of persistedKeys) {
-            void restoreFromStore(principal);
-        }
+        // 裸 fan-out 会把 2N 次 tmux 同时压下去 —— 几百个绑定就是七百个 client 一起
+        // 撞 10s 超时, spawn 风暴顺带把事件循环压住, :17890 要 25s 才 bind, 而 CLI 的
+        // reload 探测早放弃了 (「reload issued but /status not responding」的真身)。
+        // 一张快照 + 封顶并发; await 立刻让出, startHttp 先绑端口。
+        void (async () => {
+            const snap = await runTmux(["list-panes", "-a", "-F", "#{pane_id}\t#{pane_current_path}"]);
+            const panes = snap.ok ? parsePaneList(snap.stdout) : undefined;
+            await mapLimit(persistedKeys, RESTORE_CONC, (principal) => restoreFromStore(principal, panes));
+            log.info({ restored: persistedKeys.length, panes: panes?.size ?? -1 }, "mirror: boot restore done");
+        })();
     }
     else if (cfg.wrc.mirror.sessionId.trim()) {
         // Pinned-sessionId fallback: only honor when the store is empty (otherwise
@@ -3867,9 +3910,12 @@ export const startMirror = (deps) => {
     // 由 index.ts 在启动时装上 (注册表活在那边); 没装 = 退回无身份行为, 全链路无回归。
     let charterOf;
     const setCharterProvider = (fn) => { charterOf = fn; };
-    const charterFor = (target) => {
+    // `cwd` = 这个 pane 正要启动的目录。attach 在 spawn 之后才发生, 所以此刻 getCwd
+    // 给的还是上一个 pane 的目录 —— 换目录重开时照它渲染, 新 wizard 会以为自己还在
+    // 旧工作区里。
+    const charterFor = (target, ctx) => {
         try {
-            return charterOf?.(target);
+            return charterOf?.(target, ctx);
         }
         catch {
             return undefined;
@@ -3919,7 +3965,7 @@ export const startMirror = (deps) => {
             cwdOverride: eff,
             cli: effCli,
             model: opts?.model,
-            systemPrompt: opts?.systemPrompt ?? charterFor(target),
+            systemPrompt: opts?.systemPrompt ?? charterFor(target, { cwd: eff }),
         });
         if (!r.ok)
             return { ok: false, reason: r.reason };
@@ -3933,8 +3979,11 @@ export const startMirror = (deps) => {
             // Explicit "" clears any carried-over pending — it has just been applied.
             pendingCwd: "",
             // Likewise explicit: `/new` starts a NEW session, so an unnamed model
-            // means this CLI's default, not the dead pane's model.
-            model: opts?.model?.trim() ?? "",
+            // means this CLI's default, not the dead pane's model. Store what
+            // spawnTmuxClaude actually confirmed via `/model` (r.model), not the
+            // raw request — a later respawn's fast path then matches on try one.
+            model: r.model ?? (opts?.model?.trim() ?? ""),
+            keepaliveDisabled: opts?.keepalive === undefined ? undefined : !opts.keepalive,
         });
         if (!att.ok)
             return { ok: false, reason: att.reason };
@@ -3969,6 +4018,7 @@ export const startMirror = (deps) => {
                     tmuxSession: baseA.tmuxSession || undefined,
                     tmuxPane: baseA.tmuxPane || undefined,
                     cwd: baseA.runningCwd || undefined,
+                    cwdConfirmed: deps.store.get(base)?.cwdConfirmed,
                     pendingCwd: undefined,
                 });
             }
@@ -3980,7 +4030,7 @@ export const startMirror = (deps) => {
         }
         if (!opts?.silent)
             pushProjectInfo(target, "created");
-        return { ok: true, sessionId: r.sessionId, cwd: r.cwd };
+        return { ok: true, sessionId: r.sessionId, cwd: r.cwd, model: r.model, modelWarning: r.modelWarning };
     };
     // ── Clone ───────────────────────────────────────────────────────────
     // 分身 = `--resume <父 sid> --fork-session` 起的新 pane: CLI 把父亲的 transcript
@@ -4022,7 +4072,7 @@ export const startMirror = (deps) => {
         const canInherit = args.inherit !== false && !!p?.sessionId && !!p.jsonlPath && existsSync(p.jsonlPath) && sameCwd;
         if (!canInherit) {
             const r = await newSession(args.target, args.windowName, args.cli, {
-                model: args.model, cwd: args.cwd, systemPrompt: args.systemPrompt, silent: true,
+                model: args.model, cwd: args.cwd, systemPrompt: args.systemPrompt, silent: true, keepalive: args.keepalive,
             });
             return { ...r, inherited: false };
         }
@@ -4074,7 +4124,8 @@ export const startMirror = (deps) => {
             tmuxSession: r.tmuxSession,
             cwd: r.cwd,
             pendingCwd: "",
-            model: args.model?.trim() ?? "",
+            model: r.model ?? (args.model?.trim() ?? ""),
+            keepaliveDisabled: args.keepalive === undefined ? undefined : !args.keepalive,
         });
         if (!att.ok)
             return { ok: false, reason: att.reason, inherited: false };
@@ -4089,7 +4140,7 @@ export const startMirror = (deps) => {
             persistPause(spawned);
         }
         lg.info({ parent: args.parent, sessionId: fork.sessionId }, "clone: forked");
-        return { ok: true, sessionId: fork.sessionId, cwd: r.cwd, inherited: true };
+        return { ok: true, sessionId: fork.sessionId, cwd: r.cwd, inherited: true, model: r.model, modelWarning: r.modelWarning };
     };
     /** 一个会话此刻的硬事实 —— whoami / 交接判断要用的那几个数。 */
     const sessionInfo = (target) => {
@@ -4146,6 +4197,7 @@ export const startMirror = (deps) => {
                 tmuxSession: baseA.tmuxSession || undefined,
                 tmuxPane: baseA.tmuxPane || undefined,
                 cwd: baseA.runningCwd || undefined,
+                cwdConfirmed: deps.store.get(base)?.cwdConfirmed,
                 pendingCwd: baseA.pendingCwd || undefined,
             });
             log.info({ target, base, runningCwd: callerRunning, pendingCwd: expanded }, "setPendingCwd (chat-scoped, live base)");
@@ -4169,6 +4221,7 @@ export const startMirror = (deps) => {
                 tmuxSession: callerA.tmuxSession || undefined,
                 tmuxPane: callerA.tmuxPane || undefined,
                 cwd: callerA.runningCwd || undefined,
+                cwdConfirmed: deps.store.get(target)?.cwdConfirmed,
                 pendingCwd: callerA.pendingCwd || undefined,
             });
             log.info({ target, runningCwd: callerA.runningCwd, pendingCwd: callerA.pendingCwd }, "setPendingCwd (fallback: no base, wrote to caller)");
@@ -4182,6 +4235,32 @@ export const startMirror = (deps) => {
         }
         return { ok: false, reason: "no mirror binding for target — send a message in the WeCom chat first", runningCwd: "", pendingCwd: "" };
     };
+    // 「人说了就用这个目录」。一个新聊天的第一个 wizard 落在默认兜底目录里 —— 那不是
+    // 选择, 只是没人说过。所以默认按「还要换」办 (charter 让它开工前先问一句), 直到人
+    // 明说不用换。**只有这一个写入点**: 换去别的目录本身就是选择, 不必记一笔, 那时
+    // runningCwd 已经不等于默认目录, cwdUnconfirmed 自然为假。
+    // 寻址与 pendingCwd 同规 —— 写在 base 上 (聊天级), 没有 base 记录 (只有 tagged
+    // 会话的聊天) 就退回调用方自己的那条。
+    const confirmCwd = (target) => {
+        const base = baseOfKey(target);
+        const key = deps.store.get(base) ? base : deps.store.get(target) ? target : "";
+        const rec = key ? deps.store.get(key) : undefined;
+        if (!rec)
+            return { ok: false, reason: "no mirror binding for target — send a message in the WeCom chat first", cwd: "" };
+        deps.store.set(key, { ...rec, cwdConfirmed: true });
+        const cwd = getCwd(target).runningCwd;
+        log.info({ target, key, cwd }, "cwd confirmed by user");
+        return { ok: true, cwd };
+    };
+    /** 该不该问人「要在哪个项目下干活」: 还蹲在默认兜底目录里, 而且人没说过就用它。 */
+    const cwdUnconfirmed = (target, cwd) => {
+        const base = baseOfKey(target);
+        if (deps.store.get(base)?.cwdConfirmed || deps.store.get(target)?.cwdConfirmed)
+            return false;
+        // `cwd` 是调用方已经知道的「即将生效的目录」(spawn 前的宪章渲染)。没给就问现状。
+        const eff = cwd?.trim() ? expandHome(cwd.trim()) : getCwd(target).runningCwd;
+        return eff === expandedDefaultCwd;
+    };
     // ── Peer graph (sibling sessions of one chat) ────────────────────────
     // A chat's sessions are exactly the keys sharing its base principal: the
     // untagged default plus every `#tag`. Live attachments are the truth; the
@@ -4195,73 +4274,36 @@ export const startMirror = (deps) => {
         const base = baseOfKey(target);
         return allTargets().filter((k) => baseOfKey(k) === base);
     };
-    // 名字解析:`daily` / `chat:wrxxx` → base principal。认不出就把已知名字一并回给
-    // 调用方 —— 跨 chat 出错时"我该写什么"比"你写错了"有用得多。
-    const resolveChatRef = (ref) => {
-        const base = chatBaseOf(cfg, ref);
-        if (base)
-            return { ok: true, base };
-        const known = listChatNames(cfg).map((c) => c.name);
-        return {
-            ok: false,
-            reason: `unknown chat '${ref}' — give that chat a name first (\`/name ${normChatName(ref) || "<name>"}\` inside it)`,
-            candidates: known,
-        };
-    };
-    // peer 寻址。地址是两级的(见 chat-name.ts):
-    //   ""            本 chat 的 default —— 自身语义不变;
-    //   `fix`         本 chat 优先,本 chat 没有再全局兜底(全 host 唯一才认)——
-    //                 命名之前唯一的跨 chat 路子,老调用方不能因为引入命名而断掉;
-    //   `daily#fix`   daily 这个 chat 里的 `#fix`,精确到点,不问 tag 全不全局唯一;
-    //   `daily#`      daily 的 default 会话;
-    //   `chat:wr…#fix` 全量 key 同理(list_peers 吐的就是它)。
-    // 裸 tag 的 0 命中 / ≥2 命中依旧拒绝,但出路从"回去改 tag 名"变成"用带 chat 名
-    // 的全称地址"——后者不需要动别人的会话。
+    // peer 寻址。地址就是 wizard 的**全局名字** (`.fix` / `fix`), 与它住在哪个聊天无关:
+    //   ""             本 chat 的默认 wizard —— 自身语义不变;
+    //   `fix` / `.fix` 名册里叫这个名字的 wizard, 全局唯一, 不分聊天;
+    //   `chat:wr…#k`   全量 key (调试 / 老调用方);
+    //   `daily#fix`    改名前的老写法 —— 名字取自 tag 迁移而来, 照旧认得。
     const resolvePeerTag = (self, ref) => {
-        const { chat, tag } = parsePeerRef(ref ?? "");
-        const t = tag.trim();
-        if (chat) {
-            const c = resolveChatRef(chat);
-            if (!c.ok)
-                return c;
-            const target = keyOf(c.base, t);
-            if (allTargets().includes(target)) {
-                return { ok: true, target, foreign: c.base !== baseOfKey(self) };
-            }
-            return {
-                ok: false,
-                reason: `chat '${chat}' has no ${t ? `'#${t}'` : "default"} session — create it with new_claude_session({ chat: '${chat}'${t ? `, tag: '${t}'` : ""}, cwd })`,
-                // 候选给**地址**而不是裸 key —— 这份清单存在的意义就是让调用方照着改一个
-                // 能用的串; 隔壁两个分支早就这么做了, 只有这一条漏掉。
-                candidates: allTargets().filter((k) => baseOfKey(k) === c.base).map((k) => peerAddress(cfg, self, k)),
-            };
-        }
-        const local = keyOf(baseOfKey(self), t);
-        if (!t)
-            return { ok: true, target: local, foreign: false };
+        const raw = stripSigil(ref);
         const all = allTargets();
-        if (all.includes(local))
-            return { ok: true, target: local, foreign: false };
-        const foreignMatches = all.filter((k) => tagOfKey(k) === t && baseOfKey(k) !== baseOfKey(self));
-        if (foreignMatches.length === 1)
-            return { ok: true, target: foreignMatches[0], foreign: true };
-        if (foreignMatches.length === 0) {
-            // 裸 token 正好是个 chat 名字 —— 用户/agent 想说的是"那个群",不是"那个 tag"。
-            // 直接给出它的会话地址,比让人再查一次 list_chats 快。
-            const asChat = chatBaseOf(cfg, t);
-            if (asChat) {
-                return {
-                    ok: false,
-                    reason: `'${t}' is a CHAT, not a tag — address one of its sessions, e.g. '${t}#' for its default`,
-                    candidates: allTargets().filter((k) => baseOfKey(k) === asChat).map((k) => peerAddress(cfg, self, k)),
-                };
-            }
-            return { ok: false, reason: `no peer with tag '#${t}' — create one with new_claude_session, or address it in full as 'chatName#${t}' (list_chats shows the names)` };
+        const hit = (target) => ({ ok: true, target, foreign: baseOfKey(target) !== baseOfKey(self) });
+        if (!raw)
+            return hit(baseOfKey(self));
+        if (/^(user|chat|group):/.test(raw)) {
+            return all.includes(raw) ? hit(raw) : { ok: false, reason: `no running session '${raw}'` };
+        }
+        const named = wizardStore()?.byName(raw)?.target;
+        if (named && all.includes(named))
+            return hit(named);
+        if (named)
+            return { ok: false, reason: `wizard '.${raw}' exists but its session is not running — respawn it (new_claude_session) or pick another` };
+        const { chat, tag } = parsePeerRef(raw);
+        if (chat) {
+            const base = chatBaseOf(cfg, chat);
+            const legacy = base ? keyOf(base, tag) : "";
+            if (legacy && all.includes(legacy))
+                return hit(legacy);
         }
         return {
             ok: false,
-            reason: `tag '#${t}' exists in ${foreignMatches.length} chats — address it in full as 'chatName#${t}' (list_chats shows the names)`,
-            candidates: foreignMatches.map((k) => peerAddress(cfg, self, k)),
+            reason: `no wizard named '.${raw}' — wizard_roster lists every name`,
+            candidates: all.map((k) => peerAddress(cfg, self, k)),
         };
     };
     /** 已知的每个 chat:命名的 + 有会话在跑的。`name` 为空即"还没起名",那就是
@@ -4327,6 +4369,7 @@ export const startMirror = (deps) => {
         const pane = paneOf(t);
         const paneAlive = pane ? await tmuxPaneAlive(pane) : false;
         const tag = tagOfKey(t);
+        const name = displayName(t);
         let lastActivity = 0;
         try {
             if (jsonlPath)
@@ -4338,7 +4381,7 @@ export const startMirror = (deps) => {
             tag,
             chat: chatNameOf(cfg, t),
             address: peerAddress(cfg, self, t),
-            label: tag ? labelFor(tag) : "🧙",
+            label: name ? labelFor(name) : "🧙",
             sessionId: a?.sessionId || rec?.sessionId || "",
             jsonlPath,
             cwd: a?.runningCwd || rec?.cwd || expandedDefaultCwd,
@@ -4355,16 +4398,43 @@ export const startMirror = (deps) => {
     };
     const byRecent = (x, y) => y.lastActivity - x.lastActivity;
     const peers = async (target) => (await Promise.all(chatTargets(target).map((t) => peerInfoOf(t, target)))).sort(byRecent);
-    // list_peers 的跨 chat 补充:其他 chat 里**当前调用方叫得动**的 session。两条
-    // 入选路径 —— tag 全局唯一(裸 tag 就能命中),或者它所在的 chat 有名字(全称
-    // `daily#fix` 命中)。后者是命名带来的新增量:同名 tag 不再互相遮蔽,想被找到
-    // 只要给群起个名,不必回去改别人的 tag。
+    // list_peers 的跨 chat 补充: 其他 chat 里的 wizard。名字全局唯一, 所以它们
+    // 全都叫得动 —— 地址就是 `.name`, 与住在哪个聊天无关。
     const foreignPeers = async (self) => {
         const selfBase = baseOfKey(self);
-        const foreign = allTargets().filter((k) => tagOfKey(k) && baseOfKey(k) !== selfBase);
-        const tagCount = foreign.reduce((acc, k) => acc.set(tagOfKey(k), (acc.get(tagOfKey(k)) ?? 0) + 1), new Map());
-        const reachable = foreign.filter((k) => tagCount.get(tagOfKey(k)) === 1 || chatNameOf(cfg, k));
-        return (await Promise.all(reachable.map((t) => peerInfoOf(t, self)))).sort(byRecent);
+        // 只列活着的 / 有身份的 —— 冷绑定可能有几百个, 每个探活是两次 tmux。
+        const foreign = allTargets().filter((k) => baseOfKey(k) !== selfBase && (byTarget.has(k) || !!wizardStore()?.get(k)));
+        return (await Promise.all(foreign.map((t) => peerInfoOf(t, self)))).sort(byRecent);
+    };
+    // peerInfoOf 每个 target 要两次 tmux (pane 存活 + capture tail)。跑了几个月的
+    // 机器上 allTargets() 是几百个 —— 一次全量探活就是上千次 spawn, 足够打穿 fd
+    // 上限、把 tmux server 拖垮, 守护进程跟着崩进重启循环 (CLAUDE.md 的 fd 那一条
+    // 记的就是这个失效模式)。所以两道闸:
+    //   1. 先用**不 spawn 的**证据排序 —— transcript 的 mtime, 一次 statSync;
+    //      注册表里登记过的 wizard 无条件入选 (它们是有身份的那些, 也就那么几个)。
+    //   2. 探活并发封顶, 且只探前 WORLD_PROBE 个。
+    // 没被探到的照旧出现在名册里, 只是 busy/alive 按冷处理 —— 图上少一盏呼吸灯,
+    // 远好过把整台机器上的会话一起搞停。
+    const WORLD_PROBE = 48;
+    const WORLD_CONC = 6;
+    const worldPeers = async (self) => {
+        const mtimeOf = (t) => {
+            const p = jsonlOf(t);
+            if (!p)
+                return 0;
+            try {
+                return statSync(p).mtimeMs;
+            }
+            catch {
+                return 0;
+            }
+        };
+        const named = new Set(wizardStore()?.all().map((w) => w.target) ?? []);
+        const ranked = allTargets()
+            .map((t) => ({ t, ts: mtimeOf(t), named: named.has(t) }))
+            .sort((a, b) => (a.named !== b.named ? (a.named ? -1 : 1) : b.ts - a.ts));
+        const hot = ranked.slice(0, WORLD_PROBE).map((x) => x.t);
+        return (await mapLimit(hot, WORLD_CONC, (t) => peerInfoOf(t, self))).sort(byRecent);
     };
     // Capture a few extra rows then compact away the TUI's blank padding, so
     // `rows` counts lines the user actually cares about.
@@ -4481,6 +4551,8 @@ export const startMirror = (deps) => {
             const pingSigs = [normAssistant(kc.ping).slice(0, 40), normAssistant(kc.resumePing).slice(0, 40)].filter((s) => s.length > 0);
             const now = Date.now();
             for (const a of byTarget.values()) {
+                if (a.keepaliveDisabled)
+                    continue; // sticky spawn-time opt-out — never pings, never auto-resumes
                 if (!a.tmuxPane)
                     continue; // spawn-mode: no live pane to warm
                 if (a.migrationWatcher)
@@ -4715,6 +4787,7 @@ export const startMirror = (deps) => {
         chatTargets,
         peers,
         foreignPeers,
+        worldPeers,
         resolvePeerTag,
         chatRoster,
         peekPane,
@@ -4904,6 +4977,16 @@ export const startMirror = (deps) => {
             // resolve 之前就看到 user 行并开出 turn, 那时归因必须已经在位。
             if (origin)
                 a.pendingOrigin = { origin, at: Date.now() };
+            if (opts?.from)
+                a.pendingFrom = { from: opts.from, at: Date.now() };
+            if (opts?.channel !== undefined)
+                a.pendingChannel = { channel: opts.channel, at: Date.now() };
+            // 注入的那一行会被 recentInjects 当回显吞掉, 走不到 user_text —— 本轮的 query
+            // (rolepage 上「谁对它说了什么」那一半) 只能在这里记。
+            a.pendingBriefQuery = text;
+            // 公开频道里说的话, 回复就该在群里看得见 —— 哪怕上一轮是人在 CLI 里敲的。
+            if (opts?.channel)
+                a.turnFromChat = true;
             const sid = a.sessionId;
             const paneAlive = a.tmuxPane ? await tmuxPaneAlive(a.tmuxPane) : false;
             if (!paneAlive) {
@@ -4911,7 +4994,7 @@ export const startMirror = (deps) => {
                 // Same resume-fork hazard as dispatch: snapshot before spawn, re-bind
                 // onto the forked jsonl once it appears (EOF offset — fork is seeded).
                 const resumeBaseline = listJsonls(dirname(a.jsonlPath));
-                const r = await spawnTmuxClaude({ cfg, log: log.child({ sub: "respawn-init", sessionId: sid }), resumeSessionId: sid, windowName: tagOfKey(target) || target, cwdOverride: a.runningCwd, cli: backendForPath(a.jsonlPath).name, model: a.model || undefined, systemPrompt: charterFor(target) });
+                const r = await spawnTmuxClaude({ cfg, log: log.child({ sub: "respawn-init", sessionId: sid }), resumeSessionId: sid, windowName: displayName(target) || target, cwdOverride: a.runningCwd, cli: backendForPath(a.jsonlPath).name, model: a.model || undefined, systemPrompt: charterFor(target, { cwd: a.runningCwd }) });
                 if (!r.ok || !r.tmuxPane)
                     return { ok: false, reason: `respawn failed: ${r.reason ?? "unknown"}` };
                 a.tmuxPane = r.tmuxPane;
@@ -5013,6 +5096,61 @@ export const startMirror = (deps) => {
             log.info({ target, sessionId: a?.sessionId, pane }, "mirror /kill — pane killed, binding dropped");
             return { ok: true };
         },
+        reapIdle: async (ttlMs, skip) => {
+            const now = Date.now();
+            const reaped = [];
+            const skipped = {};
+            for (const target of allTargets()) {
+                const a = byTarget.get(target);
+                const sessionId = a?.sessionId || deps.store.get(target)?.sessionId || "";
+                // 便宜闸门先行: transcript mtime 一次 statSync, 不 spawn —— 跑了几个
+                // 月的机器上 allTargets 是几百个 key, 见 target 就问 tmux 会打穿 fd
+                // (同 worldPeers 的 WORLD_PROBE 取舍)。还没写过 transcript 的 spawn-mode
+                // 绑定没有活动证据, 不动它。
+                const jsonl = jsonlOf(target);
+                let mtime = 0;
+                try {
+                    if (jsonl)
+                        mtime = statSync(jsonl).mtimeMs;
+                }
+                catch { /* 文件没了 */ }
+                if (!mtime || now - mtime < ttlMs)
+                    continue;
+                const veto = skip?.(target, sessionId);
+                if (veto) {
+                    skipped[target] = veto;
+                    continue;
+                }
+                const pane = paneOf(target);
+                if (!pane || !(await tmuxPaneAlive(pane)))
+                    continue; // pane 已死, 没什么可收的
+                if (paneIsBusy(await capturePaneTail(pane, 12))) {
+                    skipped[target] = "busy";
+                    continue;
+                }
+                // 人正盯着这个 window —— 收掉他的视野比省下那点内存更讨嫌。
+                const w = await runTmux(["display-message", "-p", "-t", pane, "#{window_active}:#{session_attached}"]);
+                const [wActive, sAttached] = w.stdout.trim().split(":");
+                if (wActive === "1" && sAttached !== "0") {
+                    skipped[target] = "watched";
+                    continue;
+                }
+                // 与 killPane 同款前戏: Esc 给生成中的 CLI 一个收束落盘的机会。
+                await runTmux(["send-keys", "-t", pane, "Escape"]);
+                await sleep(250);
+                const r = await runTmux(["kill-pane", "-t", pane]);
+                if (r.code !== 0) {
+                    skipped[target] = `kill-pane failed: ${r.stdout.slice(-120) || r.code}`;
+                    continue;
+                }
+                if (a)
+                    detach(a, "idle reap");
+                // 不碰 store —— 绑定留着, 下一条 inbound 走 dead-pane `--resume` 复活。
+                reaped.push(target);
+                log.info({ target, sessionId, pane, idleHours: Math.round((now - mtime) / 3.6e6) }, "mirror idle reap — pane killed, binding kept");
+            }
+            return { reaped, skipped };
+        },
         submitPane: async (target) => {
             const a = byTarget.get(target);
             if (!a)
@@ -5094,6 +5232,8 @@ export const startMirror = (deps) => {
         },
         getCwd,
         setPendingCwd,
+        cwdUnconfirmed,
+        confirmCwd,
         newSession,
         cloneSession,
         sessionInfo,
@@ -5113,7 +5253,11 @@ export const startMirror = (deps) => {
             bySessionId.clear();
             byTarget.clear();
         },
-        dispatch: async ({ principal, text, images, frame, streamId }) => {
+        currentChannel: (target) => {
+            const a = byTarget.get(target);
+            return a?.channel ?? baseOfKey(target);
+        },
+        dispatch: async ({ principal, text, images, frame, streamId, channel, speaker }) => {
             // Route by inbound principal — the WeCom chat the user just messaged us
             // from is the same string we registered as `target` on attach. After a
             // daemon reload the in-memory map is empty; restore from the persisted
@@ -5149,6 +5293,8 @@ export const startMirror = (deps) => {
                 }
             }
             persistPause(a); // persist the pause/resume too, else a reload would revert it
+            // 频道印章要早于任何开 turn 的路径 (startBriefTurn 同步消费)。
+            a.pendingChannel = { channel: channel ?? baseOfKey(principal), speaker, at: Date.now() };
             // Finalize prior live stream (if any) so this new turn renders into its
             // own message bubble. Then open a fresh stream tied to the new frame and
             // ack immediately so WeCom doesn't time out while inject queues.
@@ -5170,10 +5316,8 @@ export const startMirror = (deps) => {
                 if (a.liveStream && !a.liveStream.closed)
                     await finalizeStream(a, a.liveStream);
                 log.info({ target: a.target, runningCwd: a.runningCwd, pendingCwd: pending }, "/clear upgraded to /new (cwd switch)");
-                // Prefer the tag suffix as tmux window name when present (matches
-                // /new #tag behavior), fall back to the full target for untagged.
-                const tag = tagOfKey(a.target);
-                const r = await newSession(a.target, tag || a.target);
+                // The wizard's global name is the tmux window name (matches /new).
+                const r = await newSession(a.target, displayName(a.target) || a.target);
                 if (!r.ok) {
                     try {
                         await client.replyStream(frame, streamId, withTagHeader(a.target, `[mirror] 切换失败: ${r.reason ?? "unknown"}`), true);
@@ -5279,7 +5423,7 @@ export const startMirror = (deps) => {
                     const resumeBaseline = !armMigration ? listJsonls(dirname(a.jsonlPath)) : undefined;
                     // Respawn in the binding's runningCwd (pendingCwd doesn't apply to a
                     // mid-turn reincarnation — only /new and /clear-with-pending swap cwd).
-                    const r = await spawnTmuxClaude({ cfg, log: log.child({ sub: "respawn", sessionId: sid }), resumeSessionId: sid, windowName: tagOfKey(a.target) || a.target, cwdOverride: a.runningCwd, cli: backendForPath(a.jsonlPath).name, model: a.model || undefined, systemPrompt: charterFor(a.target) });
+                    const r = await spawnTmuxClaude({ cfg, log: log.child({ sub: "respawn", sessionId: sid }), resumeSessionId: sid, windowName: displayName(a.target) || a.target, cwdOverride: a.runningCwd, cli: backendForPath(a.jsonlPath).name, model: a.model || undefined, systemPrompt: charterFor(a.target, { cwd: a.runningCwd }) });
                     if (r.ok && r.tmuxPane && r.tmuxSession) {
                         a.tmuxPane = r.tmuxPane;
                         a.tmuxSession = r.tmuxSession;