wezard 2.6.3 → 2.6.4

package/dist/daemon/mirror-bridge.js

@@ -1,3 +1,5 @@
+import { finalId } from "./message-events.js";
+import { parseEnvelope } from "../shared/reminder.js";
 import { codexSessions, codexSessionForPane } from "../shared/codex.js";
 import { codexHookLaunchArgs, codexHookCommand } from "../shared/codex-hooks.js";
 import { fileURLToPath } from "node:url";
@@ -40,9 +42,9 @@ import { hasRegistry, liveSessionPids, markTranscript, probeOf, sessionOnPane, s
 import { waitForIdle } from "./graph.js";
 import { wizardStore } from "./wizard.js";
 import { startSubagentWatch } from "./subagent-tail.js";
-import { knowsToolUse, recordTool, recordToolResult, recordMark, recordTurnStart, recordTurnQuery, recordTurnInject, recordTurnItem, recordTurnUsage, recordTurnClose, recordCloseOpenTurns, lastChannelOf, openTurnsOf, buildDetailUrl, buildChatUrl, roleUniq } from "./detail.js";
+import { getDetail, knowsToolUse, recordTool, recordToolResult, recordMark, recordTurnStart, recordTurnQuery, recordTurnInject, recordTurnItem, recordTurnUsage, recordTurnClose, recordCloseOpenTurns, lastChannelOf, openTurnsOf, buildDetailUrl, buildChatUrl, roleUniq } from "./detail.js";
 import { errText } from "./last-response.js";
-import { labelFor, tagOfKey, baseOfKey, keyOf, stripSigil, displayName, withTagHeader, withLinkedTagHeader, chatHead, headed, tagBadge, linkTags, parseTagHeader, MAX_BODY_LINKS, isInternalKey, sameBot } from "../shared/session-label.js";
+import { labelFor, tagOfKey, baseOfKey, keyOf, stripSigil, displayName, withTagHeader, withLinkedTagHeader, chatHead, headed, tagBadge, parseTagHeader, MAX_BODY_LINKS, isInternalKey, sameBot } from "../shared/session-label.js";
 import { splitMarkdown } from "../shared/md-chunk.js";
 import { isWxFrame } from "../shared/wx-text.js";
 import { chatBaseOf, chatNameOf, listChatNames, parsePeerRef, peerAddress } from "./chat-name.js";
@@ -526,7 +528,7 @@ const renderLine = (raw, deps) => {
     if (line.type === "attachment" && line.attachment?.type === "queued_command" && typeof line.attachment.prompt === "string") {
         const said = cleanUserText(line.attachment.prompt);
         const ts = Date.parse(line.timestamp ?? "");
-        return said ? [{ kind: "user_inject", said, ts: Number.isNaN(ts) ? Date.now() : ts }] : [];
+        return said ? [{ kind: "user_inject", said, eventId: parseEnvelope(line.attachment.prompt)?.eventId, ts: Number.isNaN(ts) ? Date.now() : ts }] : [];
     }
     const out = [];
     if (line.type === "user") {
@@ -576,8 +578,9 @@ const renderLine = (raw, deps) => {
             if (deps.isKeepalivePing?.(text))
                 return [{ kind: "keepalive_start", body: text }];
             // 自己注入的那一行不回显, 但要报个到: 它的印章 (谁说的、回复去哪) 在这一刻认领。
-            if (deps.isOwnInject(text))
-                return [{ kind: "user_query", body: unwrapPasted(c).trim(), said: text, ts: lineTs(line) }];
+            const eventId = c.includes('wezard="message-event"') ? parseEnvelope(c)?.eventId : undefined;
+            if (eventId || deps.isOwnInject(text))
+                return [{ kind: "user_query", eventId, body: unwrapPasted(c).trim(), said: text, ts: lineTs(line) }];
             const quoted = text.split("\n").map((l) => `> ${l}`).join("\n");
             // includeUser 只决定"渲不渲染", 不决定"算不算边界" —— quiet 的这一条照样发出,
             // onItem 消费完边界语义后自己丢掉。
@@ -588,11 +591,11 @@ const renderLine = (raw, deps) => {
             // 回显去重对得上; 记进详情页的则是带占位符的原样文本, 图本身不画。
             const raw = c.filter((b) => b?.type === "text").map((b) => b.text ?? "").join("\n");
             const text = cleanUserText(raw.replace(IMAGE_REF_RE, ""));
-            if (text && !deps.isOwnInject(text)) {
+            if (text && !parseEnvelope(raw)?.eventId && !deps.isOwnInject(text)) {
                 out.push({ kind: "user_text", body: cleanUserText(raw).split("\n").map((l) => `> ${l}`).join("\n"), quiet: !deps.includeUser, ts: lineTs(line) });
             }
             else {
-                out.push({ kind: "user_query", body: unwrapPasted(raw).trim(), said: text, ts: lineTs(line) });
+                out.push({ kind: "user_query", eventId: parseEnvelope(raw)?.eventId, body: unwrapPasted(raw).trim(), said: text, ts: lineTs(line) });
             }
         }
         else if (Array.isArray(c)) {
@@ -1842,11 +1845,12 @@ const inject = async (args) => {
         return classify(await withPaneInput(target, async (live) => {
             // Busy and unknown are both a deferred delivery. Never hold the input
             // lock while waiting for a model's whole turn to finish.
-            if (args.requireIdle && !args.requireIdle())
+            const idleApproved = !args.requireIdle || await args.requireIdle();
+            if (!idleApproved)
                 return { ok: false, reason: "target has no confirmed idle evidence" };
             const text = args.prepareText?.() ?? args.text;
             const guard = (phase) => {
-                if (!live() || (!exposed && args.requireIdle && !args.requireIdle()) || (args.guard && !args.guard(phase)))
+                if (!live() || (!exposed && !idleApproved) || (args.guard && !args.guard(phase)))
                     return false;
                 if (phase && !exposed) {
                     exposed = true;
@@ -2044,6 +2048,7 @@ export const startMirror = (deps) => {
                 turnRegistry.delete(k);
     };
     const TOOL_DETAIL_PREFIX = "TOOL_DETAIL|";
+    let eventFinalGate = () => true;
     const newTurnId = () => `t${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`;
     const newMarkId = () => `m${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`;
     const detailCardFor = (s, target) => {
@@ -2547,6 +2552,61 @@ export const startMirror = (deps) => {
     let silenceAnswer = () => false;
     const answerSilent = (a) => silenceAnswer(a.target, a.briefTurnId ?? a.liveStream?.turnId ?? "");
     const turnSilent = (a) => answerSilent(a) || isPrivate(a) || (cfg.wrc.mirror.brief && cfg.wrc.mirror.chatOriginOnly && a.turnFromChat === false);
+    const formatFinal = (target, turn, channel, body) => {
+        const pieces = splitMarkdown(body, Math.max(200, cfg.wrc.mirror.chunkBytes - TAG_HEADER_BUDGET));
+        return pieces.map((text, n) => withLinkedTagHeader(target, text, chatTurnUrl(target, turn), pieces.length > 1 ? `${n + 1}/${pieces.length}` : undefined, undefined, channel));
+    };
+    const finalProgress = new Map();
+    const settleFinalProgress = async (id) => {
+        await finalProgress.get(id)?.catch(() => undefined);
+        finalProgress.delete(id);
+    };
+    const queueFinal = (target, turn, channel, body, eventId, bubble) => {
+        if (!deps.events || !channel || !body.trim())
+            return undefined;
+        const revision = finalId(eventId || turn, channel, body);
+        const id = finalId(eventId || turn, channel, revision);
+        const chunks = formatFinal(target, turn, channel, body);
+        if (bubble?.pending)
+            finalProgress.set(id, bubble.pending);
+        deps.events.delivery({ id, eventId, target, turn, channel, body, revision, chunks,
+            ...(bubble && !bubble.done ? { stream: { frame: bubble.frame, id: bubble.streamId, expires: bubble.expires ?? Date.now() } } : {}) });
+        if (bubble) {
+            bubble.done = true;
+            clearTimeout(bubble.hardTimer);
+        }
+        return id;
+    };
+    const recoverEventFinal = (event, bubble) => {
+        if (!event.result || event.interjected || event.canceled)
+            return;
+        const turn = event.turn || event.id;
+        const record = getDetail(turn);
+        if (!record)
+            recordTurnStart({ id: turn, eventId: event.id, target: event.target,
+                userQuery: event.payload.text, createdAt: event.originalAt ?? event.at, channel: event.channel,
+                speaker: event.payload.human ? event.speaker : undefined, from: event.payload.peer?.from });
+        if (record?.kind !== "turn" || !record.items.some((x) => x.t === "text" && x.final && x.body === event.result.body))
+            recordTurnItem(turn, { t: "text", final: true, body: event.result.body, ts: event.result.at });
+        recordTurnClose(turn);
+        if (!event.turn)
+            deps.events?.bind(event.id, turn);
+        const parent = event.replyTo?.kind === "chat" ? deps.events?.get(event.replyTo.turn) : undefined;
+        if (parent && event.channel === parent.channel) {
+            const original = deps.events.continueResult(event.id);
+            if (!original)
+                return;
+            if (eventFinalGate({ ...original, awaitingContinuation: false }))
+                deps.events.defer(original.id, false);
+            const fresh = deps.events.get(original.id);
+            if (fresh.replyTo?.kind === "chat")
+                recoverEventFinal(fresh, bubble);
+            else if (eventFinalGate(fresh))
+                queueFinal(fresh.target, fresh.turn || fresh.id, fresh.channel, event.result.body, fresh.id, bubble);
+        }
+        else if (event.channel && eventFinalGate(event))
+            queueFinal(event.target, turn, event.channel, event.result.body, event.id, bubble);
+    };
     const answerBubbles = new Map();
     const answerLine = (held, text) => withLinkedTagHeader(held.receiver, text, chatTurnUrl(held.receiver, held.sourceTurn), undefined, undefined, held.channel);
     // Serialise the old owner's in-flight refresh, reset, progress and final.
@@ -2667,10 +2727,10 @@ export const startMirror = (deps) => {
             writeAnswerProgress(held, `\`${held.progress}\``);
         return { taken: true, cleared };
     };
-    const deliverAnswer = async (id, target, turn, channel, _prefix, body, standalone) => {
+    const deliverAnswer = async (id, target, turn, channel, _prefix, body, standalone, frozen = false) => {
         const held = answerBubbles.get(id);
         const text = body.trim();
-        const content = withLinkedTagHeader(target, text, chatTurnUrl(target, turn), undefined, undefined, channel);
+        const content = frozen ? body : withLinkedTagHeader(target, text, chatTurnUrl(target, turn), undefined, undefined, channel);
         stopAnswerProgress(id);
         if (held?.bubble && !held.bubble.done) {
             held.bubble.done = true;
@@ -2679,10 +2739,12 @@ export const startMirror = (deps) => {
             try {
                 // Failure closes progress first; the terminal explanation is a standalone message.
                 const progress = withLinkedTagHeader(target, "回答已转交", chatTurnUrl(target, turn), undefined, undefined, channel);
-                await client.replyStream(held.bubble.frame, held.bubble.streamId, standalone ? progress : content, true);
+                const ack = frozen && !standalone
+                    ? await deps.sendFrozen(channel, content, { frame: held.bubble.frame, id: held.bubble.streamId })
+                    : await client.replyStream(held.bubble.frame, held.bubble.streamId, standalone ? progress : content, true);
                 if (!standalone) {
                     answerBubbles.delete(id);
-                    return;
+                    return ack;
                 }
             }
             catch (e) {
@@ -2707,8 +2769,10 @@ export const startMirror = (deps) => {
                 }
             }
         }
-        await client.sendMessage(channel.replace(/^(user|chat|group):/, ""), { msgtype: "markdown", markdown: { content } });
+        const ack = frozen ? await deps.sendFrozen(channel, content)
+            : await client.sendMessage(channel.replace(/^(user|chat|group):/, ""), { msgtype: "markdown", markdown: { content } });
         answerBubbles.delete(id);
+        return ack;
     };
     // 收口一条 loading 气泡: finish=true 写入最终内容, 只生效一次。发送失败退回 standalone。
     // raw=true skips withTagHeader (used when content already contains the linked tag header).
@@ -2785,6 +2849,7 @@ export const startMirror = (deps) => {
     const openingOf = (a) => {
         const t = a.jsonlPath ? lastUserTurn(a.jsonlPath) : undefined;
         const env = t?.env;
+        a.activeEventId = env?.eventId;
         if (!env)
             return undefined;
         const home = baseOfKey(a.target);
@@ -2846,7 +2911,7 @@ export const startMirror = (deps) => {
         return undefined;
     };
     /** 本轮落 turn 记录的频道字段。 */
-    const channelFields = (a) => ({ channel: a.channel ?? baseOfKey(a.target), speaker: a.speaker });
+    const channelFields = (a) => ({ channel: a.channel ?? baseOfKey(a.target), speaker: a.speaker, eventId: a.activeEventId });
     /** 私聊轮: 回复只落 turn 记录。 */
     const isPrivate = (a) => a.channel === "";
     /** 本轮回复该推去的 chatId。 */
@@ -2872,9 +2937,9 @@ export const startMirror = (deps) => {
     };
     /** 露面的这一行认领它的印章, 先注入的先认。CLI 把排队的几句并成一行时, 包含在里面的都算
      *  露过面, 出处取第一枚。认不出 = undefined。 */
-    const takeSeal = (a, said, pick = () => true) => {
+    const takeSeal = (a, said, pick = () => true, eventId) => {
         const t = said.trim();
-        const hit = (x) => pick(x) && x.keys.some((k) => k === t || (k.length >= 8 && t.includes(k)));
+        const hit = (x) => pick(x) && (eventId ? x.eventId === eventId : !x.eventId && x.keys.some((k) => k === t || (k.length >= 8 && t.includes(k))));
         const seals = a.seals ?? [];
         const hits = seals.filter(hit);
         // CLI 把排队的几句并成一行, 这一轮只能有一个去向: 里面有私聊的那句就是私聊 —— 它的答复不能
@@ -2895,6 +2960,9 @@ export const startMirror = (deps) => {
      *  `at` = 那一行落盘的时刻: 排队的那句从这一刻才开始被处理, 轮次的起点以它为准; 闲时当场接上就是投递那一刻。 */
     const activateDispatch = (a, s, at = s.at) => {
         const q = s.turn;
+        if (a.briefTurnId && a.briefTurnId !== q.turnId)
+            closeBriefTurn(a);
+        a.activeEventId = s.eventId;
         s.activated = true;
         a.activePeerTurn = undefined;
         a.queryEpoch = (a.queryEpoch ?? 0) + 1; // WeCom 侧的新一轮同样是 query 边界
@@ -2906,9 +2974,7 @@ export const startMirror = (deps) => {
         a.pendingBriefQuery = undefined;
         a.pendingChannel = { channel: s.channel ?? baseOfKey(a.target), speaker: s.speaker, at: Date.now() };
         consumeChannel(a, true, undefined);
-        recordTurnStart({ id: q.turnId, target: a.target, sessionId: a.sessionId, cli: cliOf(a), initialModel: a.model || undefined, initialEffort: a.effort || undefined, cwd: a.runningCwd || undefined, userQuery: s.query.trim() || undefined, createdAt: at, ...channelFields(a) });
-        if (a.briefTurnId)
-            closeBriefTurn(a);
+        recordTurnStart({ id: q.turnId, target: a.target, sessionId: a.sessionId, cli: cliOf(a), initialModel: a.model || undefined, initialEffort: a.effort || undefined, cwd: a.runningCwd || undefined, userQuery: s.query.trim() || undefined, createdAt: (s.eventId ? deps.events?.get(s.eventId)?.originalAt : undefined) ?? at, ...channelFields(a) });
         openBriefTurn(a, q);
     };
     /** 一句插话记进它插进的那一轮: 出处、频道、发话人都取它自己的印章 (没写频道 = 在 home 里开口)。 */
@@ -2916,16 +2982,21 @@ export const startMirror = (deps) => {
     /** `attachment.queued_command` 露面: 那句被正在跑的这一轮中途吃进去了。认领它的印章记成插话。
      *  人从聊天里说的那句 (印章带预建的轮) 不在这里认: 它已有自己的轮次记录。认不出 (人在 CLI 里
      *  忙时敲的) 不记 —— 说不清是谁、在哪个频道说的。 */
-    const interject = (a, said, ts) => {
+    const interject = (a, said, ts, eventId) => {
         if (!a.briefTurnId)
             return;
-        const s = takeSeal(a, said, (x) => !x.turn);
+        const s = takeSeal(a, said, (x) => !x.turn, eventId);
         if (s)
             injectInto(a.briefTurnId, a, s, ts);
     };
     /** 一行注入露面了: 把它的印章落成下一轮的出处 / 频道。返回认领到的印章。`ts` = 那一行落盘的时刻。 */
-    const bindLine = (a, said, ts) => {
-        const s = takeSeal(a, said);
+    const bindLine = (a, said, ts, eventId) => {
+        const recovered = eventId ? deps.events?.get(eventId) : undefined;
+        const s = takeSeal(a, said, undefined, eventId) ?? (recovered?.target === a.target ? {
+            eventId, keys: [], at: recovered.at, query: recovered.payload.text, channel: recovered.channel,
+            speaker: recovered.payload.human ? recovered.speaker : undefined, from: recovered.payload.peer?.from,
+            fresh: recovered.priority === "normal" || idleVerdict(a.target) === true,
+        } : undefined);
         if (!s)
             return undefined;
         if (s.turn) {
@@ -2941,6 +3012,7 @@ export const startMirror = (deps) => {
         }
         if (a.briefTurnId)
             closeBriefTurn(a);
+        a.activeEventId = s.eventId;
         const now = Date.now();
         a.activePeerTurn = s.from?.kind === "peer" ? s.from.turn : undefined;
         a.pendingFrom = s.from ? { from: s.from, at: now } : undefined;
@@ -2956,10 +3028,12 @@ export const startMirror = (deps) => {
         }
         return s;
     };
-    const startBriefTurn = async (a, frame, streamId, isSlash = false, userQuery = "", channel, speaker) => {
+    const startBriefTurn = async (a, frame, streamId, isSlash = false, userQuery = "", channel, speaker, eventId) => {
         const turnId = newTurnId();
         // hardTimer 兜底: turn 若无终句 / turn_end 收口 (卡死/漏收), 到点仍收气泡。
-        const bubble = { frame, streamId, done: false };
+        const bubble = { frame, streamId, done: false, expires: (eventId ? deps.events?.get(eventId)?.at ?? Date.now() : Date.now()) + HARD_TIMEOUT_MS };
+        if (eventId)
+            deps.events?.bind(eventId, turnId);
         const q = { turnId, bubble, isSlash };
         // 微信帧不挂: 没有 stream 窗口要赶, 气泡等终句来了再一次发出 (见 openStream 同一条)。
         if (!isWxFrame(frame))
@@ -2970,23 +3044,17 @@ export const startMirror = (deps) => {
                 const live = a.briefBubble === bubble && !a.briefConcluded;
                 void finishBubble(a, bubble, briefLine(a, turnId, live ? STILL_WORKING : "", channel), true);
             }, HARD_TIMEOUT_MS);
-        const seal = { keys: sealKeys(userQuery), at: Date.now(), query: userQuery, channel, speaker, fresh: true, turn: q };
+        const seal = { eventId, keys: sealKeys(userQuery), at: Date.now(), query: userQuery, channel, speaker, fresh: true, turn: q };
         // 对方闲着 → 这一句就是下一轮, 当场接上。正忙 (在跑别人的回执 / 派活 / 上一句) 就先排着:
         // 那一轮的回复不能流进这一句的气泡, 等它在 transcript 里露面再接 (bindLine)。turn 记录
         // 先建好, ack 里的链接点得开。斜杠命令的行未必露面, 当场接。
         const queued = !isSlash && idleVerdict(a.target) === false;
         pushSeal(a, seal);
         if (queued)
-            recordTurnStart({ id: turnId, target: a.target, sessionId: a.sessionId, cli: cliOf(a), initialModel: a.model || undefined, initialEffort: a.effort || undefined, cwd: a.runningCwd || undefined, userQuery: userQuery.trim() || undefined, channel: channel ?? baseOfKey(a.target), speaker });
+            recordTurnStart({ id: turnId, target: a.target, sessionId: a.sessionId, cli: cliOf(a), initialModel: a.model || undefined, initialEffort: a.effort || undefined, cwd: a.runningCwd || undefined, userQuery: userQuery.trim() || undefined, eventId, createdAt: eventId ? deps.events?.get(eventId)?.originalAt : undefined, channel: channel ?? baseOfKey(a.target), speaker });
         else
             activateDispatch(a, seal);
-        // 新消息 = 对话边界: 立刻收掉上一 turn, 新 turn 直接激活、不排队。收口语义见
-        // closeBriefTurn: 有正文收入旧气泡, 没正文不写一个字 (绝不因边界结束凭空新发/
-        // 覆盖消息)。旧 turn 在 CLI 侧的剩余产出自然流入新气泡 —— "新回复走最新气泡"
-        // 正是这个语义。代价是旧 turn 页提前标完、尾部 item 记到新 turn 名下, 但远小于
-        // 排队的代价: 排队 turn 的 frame 在前一个长 turn 期间 (可达数分钟) 过期, 激活后
-        // replyStream 全被 WeCom 拒收 (#stream 事故的静默根因)。所以只在前面真有别人的行排着时
-        // 才排 (见上): 接上时气泡若已过期, 正文走 standalone (concludeBriefTurn)。
+        // Durable normal inputs arrive only after the preceding full turn; expired bubbles use the final outbox standalone path.
         // ack 即详情链接。URL 的三个入参 (turnId / target / host) 在收消息这一刻全部已知 ——
         // turnId 是本地生成的, 详情页记录也已在 recordTurnStart 建好, 所以不必等 CLI 产出,
         // 也不必猜后端: codebuddy 那种几十秒后才落盘的轮, 入口从第一秒就在。
@@ -3005,8 +3073,11 @@ export const startMirror = (deps) => {
         if (a.channelSeeded)
             return false;
         const head = (t) => (t ?? "").replace(/\s+/g, " ").trim().slice(0, 60);
-        const said = head(a.jsonlPath ? lastUserTurn(a.jsonlPath)?.text : undefined);
-        const r = said ? openTurnsOf(a.target, a.sessionId).find((t) => head(t.userQuery) === said) : undefined;
+        const opening = a.jsonlPath ? lastUserTurn(a.jsonlPath) : undefined;
+        const said = head(opening?.text);
+        const eventId = opening?.env?.eventId;
+        const r = openTurnsOf(a.target, a.sessionId).find((t) => eventId ? t.eventId === eventId : !!said && head(t.userQuery) === said);
+        a.activeEventId = eventId;
         if (!r)
             return false;
         a.channelSeeded = true;
@@ -3052,6 +3123,8 @@ export const startMirror = (deps) => {
         const from = fresh ?? a.convFrom;
         recordTurnStart({ id: turnId, target: a.target, sessionId: a.sessionId, cli: cliOf(a), initialModel: a.model || undefined, initialEffort: a.effort || undefined, cwd: a.runningCwd || undefined, userQuery: query || opened || undefined, origin: consumeOrigin(a), from, ...channelFields(a), ...(query && at ? { createdAt: at } : {}) });
         a.briefTurnId = turnId;
+        if (a.activeEventId)
+            deps.events?.bind(a.activeEventId, turnId);
         a.briefBubble = undefined;
         a.briefIsSlash = false;
         a.briefHadTool = false;
@@ -3094,28 +3167,26 @@ export const startMirror = (deps) => {
             return;
         if (!body.trim())
             return;
-        if (isDuplicateConclusion(a, body)) {
+        if (!a.activeEventId && isDuplicateConclusion(a, body)) {
             a.briefConcluded = true; // 本轮已"定稿", 只是不投递
             log.info({ sessionId: a.sessionId, turnId, epoch: a.queryEpoch ?? 0 }, "brief: duplicate conclusion suppressed");
             return;
         }
+        const event = a.activeEventId ? deps.events?.get(a.activeEventId) : undefined;
+        if (event)
+            deps.events.result(event.id, body, finalId(event.id, event.channel, body), turnId);
+        if (!answerSilent(a) && !turnSilent(a) && (!event || eventFinalGate(event))) {
+            if (event)
+                recoverEventFinal(deps.events.get(event.id), a.briefBubble);
+            else
+                queueFinal(a.target, turnId, a.channel ?? baseOfKey(a.target), body, undefined, a.briefBubble);
+        }
+        // The durable result/outbox must exist before this in-memory dedup bit advances.
         a.briefConcluded = true;
         a.lastConcludedBody = body;
         a.lastConcludedEpoch = a.queryEpoch ?? 0;
         a.lastConcludedAt = Date.now();
-        if (answerSilent(a)) {
-            log.info({ target: a.target, turnId }, "answer transferred; source conclusion suppressed");
-        }
-        else if (a.briefBubble && !a.briefBubble.done) {
-            void finishBriefBubble(a, briefLine(a, turnId, linkTags(a.target, body)), true);
-        }
-        else if (turnSilent(a)) {
-            // CLI 手敲的一轮: 终稿只留在 turn store, 详情页照常实时可见。
-            log.info({ sessionId: a.sessionId, turnId }, "brief: CLI-origin conclusion kept out of chat");
-        }
-        else {
-            sendStandalone(a, body); // 详情链接由 withLinkedTag 统一前缀, 不在这里拼
-        }
+        clearCot(a);
         // 只保留当前 turn: 其余仍开着的 turn 记录是漏收的 close, 一并扫掉。
         recordCloseOpenTurns({ target: a.target, sessionId: a.sessionId, exceptIds: [turnId] });
     };
@@ -3382,6 +3453,8 @@ export const startMirror = (deps) => {
             return;
         }
         if (item.kind === "turn_end") {
+            if (a.activeEventId && !item.soft)
+                deps.events?.finished(a.activeEventId);
             closeBriefTurn(a);
             return;
         }
@@ -3590,7 +3663,7 @@ export const startMirror = (deps) => {
         if (item.kind === "user_text") {
             // 回显去重只认 60s 内的注入: 排在长轮后面的那一行露面时已经过期, 会被当成人在 CLI 里敲的。
             // 印章认得出就仍是那次注入 —— 不回显, 也不算 CLI 轮。
-            if (bindLine(a, item.body.replace(/^> ?/gm, ""), item.ts))
+            if (bindLine(a, item.body.replace(/^> ?/gm, ""), item.ts, item.eventId))
                 return;
             endKeepaliveSwallow(a);
             // 对话边界 = 旧 turn 清算。上一 turn 派发而未返回的前台 Agent/Task 到此作废,
@@ -3605,19 +3678,20 @@ export const startMirror = (deps) => {
             a.activePeerTurn = undefined;
             a.pendingFrom = undefined;
             a.pendingChannel = undefined;
+            a.activeEventId = item.eventId;
             a.pendingFromCli = true;
             if (!cfg.wrc.mirror.brief)
                 consumeChannel(a, true, undefined);
         }
         if (item.kind === "user_inject") {
-            interject(a, item.said, item.ts);
+            interject(a, item.said, item.ts, item.eventId);
             return;
         }
         // 还有一轮等着懒建 (peer / graph 注入先记了 pendingBriefQuery) 就换掉它; 否则这句话
         // 就是已开好的那一轮 (IM 侧说的, startBriefTurn 在注入前建好)。
         if (item.kind === "user_query") {
             // 同伴 / 定时 / graph 注入的那一行: 问话就是印章里的原话 (不带信封)。
-            const sealed = bindLine(a, item.said, item.ts);
+            const sealed = bindLine(a, item.said, item.ts, item.eventId);
             if (sealed && !sealed.turn)
                 return;
             if (a.pendingBriefQuery !== undefined || !a.briefTurnId) {
@@ -3840,6 +3914,19 @@ export const startMirror = (deps) => {
                 }
             }
         }
+        if (!cfg.wrc.mirror.brief && item.kind === "text" && item.final !== false && a.activeEventId && deps.events) {
+            const e = deps.events.get(a.activeEventId);
+            if (e) {
+                // Soft final text waits for transcript/idle evidence; it must not escape through the legacy stream.
+                if (item.final !== true)
+                    return;
+                const turn = a.liveStream?.turnId ?? e.id;
+                deps.events.result(e.id, item.body, finalId(e.id, e.channel, item.body), turn);
+                if (eventFinalGate(e))
+                    recoverEventFinal(deps.events.get(e.id));
+                return;
+            }
+        }
         if (!cfg.wrc.mirror.brief && isPrivate(a))
             return;
         // /goal mode overrides everything below: the session-scoped Stop hook
@@ -5435,7 +5522,16 @@ export const startMirror = (deps) => {
         const live = pane ? activeBackends().map((b) => sessionOnPane(b.homeDir, pane)).find(Boolean) : undefined;
         return live?.status === "idle" && hanging(target, live.sessionId);
     };
-    const idleNow = async (target) => idleVerdict(target) ?? !(await isBusy(target));
+    const idleNow = async (target) => {
+        const registry = idleVerdict(target);
+        if (registry !== undefined)
+            return registry;
+        const pane = paneOf(target);
+        if (!pane || !(await tmuxPaneAlive(pane)))
+            return false;
+        const { cap, box } = await readPaneInput(pane);
+        return !!cap.trim() && box.known && !paneIsBusy(cap) && !isModalPane(cap).modal;
+    };
     // 等到它闲下来, 事件驱动: 注册表目录一有写入就重判, 翻成 idle 的那一刻即返回。
     // 兜底轮询只防 watch 漏事件 (以及悬着的审批被点掉后 status 没再动的边角)。
     const IDLE_SAFETY_POLL_MS = 1000;
@@ -6294,7 +6390,7 @@ export const startMirror = (deps) => {
                 a.pendingFromCli = false;
                 a.turnFromChat = true;
                 rememberInject(full);
-                pushSeal(a, { keys: sealKeys(full), at: Date.now(), query: text, from: opts?.from, channel: opts?.channel, origin, fresh: idleVerdict(target) === true });
+                pushSeal(a, { eventId: parseEnvelope(full)?.eventId, keys: sealKeys(full), at: Date.now(), query: text, from: opts?.from, channel: opts?.channel, origin, fresh: idleVerdict(target) === true });
                 a.muteUntilInject = false;
                 a.justSpawned = false;
             };
@@ -6306,7 +6402,7 @@ export const startMirror = (deps) => {
             const r = await inject({
                 text: full, images: [], cfg, guard: (phase) => permitted() && a.tmuxPane === injectPane && (!opts?.guard || opts.guard(phase)), log: log.child({ principal: target, sessionId: sid, sub: "init-demo" }),
                 sessionId: sid, jsonlPath: a.jsonlPath, tmuxTarget: a.tmuxPane, freshSpawn: fresh,
-                requireIdle: opts?.requireIdle ? () => idleVerdict(target) === true : undefined,
+                requireIdle: opts?.requireIdle ? () => idleNow(target) : undefined,
                 prepareText: () => (full = text + envelope + noticeSuffixFor(target, text)),
                 beforeInput,
             });
@@ -6321,9 +6417,15 @@ export const startMirror = (deps) => {
             return r;
         },
         interruptPane: async (target, opts) => {
+            if (opts?.guard && !opts.guard())
+                return { ok: false, reason: "interrupt authority changed" };
             const a = byTarget.get(target);
             if (!a)
                 return { ok: false, reason: "no mirror attached for target" };
+            const interruptedEvent = a.activeEventId;
+            const interruptedPane = a.tmuxPane;
+            if (opts?.teardown && interruptedEvent)
+                deps.events?.cancel((e) => e.id === interruptedEvent);
             // `/stop` (teardown: true) must work when tmux itself is the problem, so
             // the order is: local state first, pane second. The old implementation
             // probed the pane FIRST and returned early on failure — meaning a wedged
@@ -6360,7 +6462,13 @@ export const startMirror = (deps) => {
                 escReason = "tmux pane no longer alive";
             }
             else {
-                const r = await runTmux(["send-keys", "-t", a.tmuxPane, "Escape"]);
+                if (byTarget.get(target) !== a || a.tmuxPane !== interruptedPane || a.activeEventId !== interruptedEvent || (opts?.guard && !opts.guard()))
+                    return { ok: false, reason: "turn changed during interrupt probe; Escape withheld" };
+                const r = await withPaneInput(interruptedPane, async (live) => {
+                    if (!live() || a.activeEventId !== interruptedEvent || a.tmuxPane !== interruptedPane || (opts?.guard && !opts.guard()))
+                        return { ok: false, stderr: "turn changed before Escape", stdout: "", code: 1 };
+                    return runTmux(["send-keys", "-t", interruptedPane, "Escape"]);
+                });
                 escOk = r.ok;
                 if (!r.ok)
                     escReason = `send-keys Escape failed: ${(r.stderr || r.stdout).slice(-200) || r.code}`;
@@ -6375,7 +6483,13 @@ export const startMirror = (deps) => {
                 return { ok: false, reason: escReason };
             return { ok: true, torndown, escOk, escReason: escReason || undefined };
         },
-        killPane: (target) => downPane(target, true),
+        killPane: async (target) => {
+            deps.events?.cancel((e) => e.target === target);
+            const r = await downPane(target, true);
+            if (r.ok)
+                deps.events?.stopped(target, "pane kill acknowledged; queued input revoked");
+            return r;
+        },
         sleepPane: (target) => downPane(target, false),
         lastActivity: (target) => {
             const jsonl = jsonlOf(target);
@@ -6650,7 +6764,11 @@ export const startMirror = (deps) => {
             const a = byTarget.get(target);
             return a?.channel ?? baseOfKey(target);
         },
-        dispatch: async ({ principal, text, images, frame, streamId, channel, speaker }) => {
+        formatFinal,
+        recoverEventFinal,
+        setEventFinalGate: (gate) => { eventFinalGate = gate; },
+        settleFinalProgress,
+        dispatch: async ({ principal, text, images, frame, streamId, channel, speaker, eventId, guard, onSubmitted }) => {
             // Route by inbound principal — the WeCom chat the user just messaged us
             // from is the same string we registered as `target` on attach. After a
             // daemon reload the in-memory map is empty; restore from the persisted
@@ -6668,6 +6786,10 @@ export const startMirror = (deps) => {
                 }
                 return;
             }
+            if (eventId && a.tmuxPane && await tmuxPaneAlive(a.tmuxPane) && !(await idleNow(principal))) {
+                onSubmitted?.({ ok: false, retryable: true, reason: "target became busy before opening the human turn" });
+                return;
+            }
             // `/clear` resets to an empty session — nothing in the cache to keep warm,
             // so pause keepalive like `/stop` instead of lifting it. Every other inbound
             // is real work: lift any prior pause and re-anchor both clocks to now.
@@ -6789,11 +6911,13 @@ export const startMirror = (deps) => {
                     log.warn({ sessionId: a.sessionId, err: e.message }, "stream initial ack failed");
                 }
             }
+            if (!brief)
+                a.activeEventId = eventId;
             if (brief) {
                 // 挂 loading 气泡并起新 turn —— 上一 turn 若还在跑, startBriefTurn 内部
                 // 会立刻把它收掉 (对话边界策略), 本轮直接成为活跃 turn。
                 // 后续 onItem 走 handleBriefItem, 不再走 stream / defer 路径。
-                await startBriefTurn(a, frame, streamId, isSlash, effText, channel ?? baseOfKey(principal), speaker);
+                await startBriefTurn(a, frame, streamId, isSlash, effText, channel ?? baseOfKey(principal), speaker, eventId);
             }
             else if (!armMigration && !eagerOpen) {
                 enterDeferred(a, frame, streamId);
@@ -6881,7 +7005,7 @@ export const startMirror = (deps) => {
                     return;
                 }
                 if (!brief)
-                    pushSeal(a, { keys: sealKeys(effText), at: Date.now(), query: effText, channel: channel ?? baseOfKey(principal), speaker, fresh: true });
+                    pushSeal(a, { eventId: a.activeEventId, keys: sealKeys(effText), at: Date.now(), query: effText, channel: channel ?? baseOfKey(principal), speaker, fresh: true });
                 rememberInject(effText);
                 // 解除静默必须在 inject 之前: inject 内部的 freshSpawn 验证循环可达 10+s
                 // (paste-verify + settle + waitForCleared + retry), 而 LLM 的回复可能在 Enter
@@ -6894,8 +7018,10 @@ export const startMirror = (deps) => {
                 const r = await inject({
                     text: effText, images: effImages, cfg, log: log.child({ principal, sessionId: sid }),
                     sessionId: sid, jsonlPath: a.jsonlPath, tmuxTarget: a.tmuxPane, freshSpawn,
-                    guard: () => byTarget.get(a.target) === a && a.tmuxPane === injectPane && (a.injectGen ?? 0) === myGen,
+                    requireIdle: eventId ? () => idleNow(a.target) : undefined,
+                    guard: (phase) => byTarget.get(a.target) === a && a.tmuxPane === injectPane && (a.injectGen ?? 0) === myGen && (!guard || guard(phase)),
                 });
+                onSubmitted?.(r);
                 if (!r.ok) {
                     if (s) {
                         s.acc = s.acc ? `${s.acc}\n\n[mirror] ✗ ${r.reason ?? "failed"}` : `[mirror] ✗ ${r.reason ?? "failed"}`;