zen-gitsync 2.17.16 → 2.17.17

package/src/ui/public/index.html

@@ -5,41 +5,42 @@
     <meta name="google" content="notranslate" />
     <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <!-- 浏览器 chrome 配色与页面背景对齐（浅色 --bg-page / 深色 --bg-page-dark） -->
+    <meta name="theme-color" content="#f0f2f5" />
+    <meta name="theme-color" content="#141820" media="(prefers-color-scheme: dark)" />
     <title>Zen GitSync</title>
-    <!-- Premium fonts: Plus Jakarta Sans (UI) + JetBrains Mono (code) -->
-    <link rel="preconnect" href="https://fonts.googleapis.com" />
-    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
-    <link href="https://fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,400&family=JetBrains+Mono:wght@400;500&display=swap" rel="stylesheet" />
-    <script type="module" crossorigin src="/assets/index-CHuCYLWm.js"></script>
+    <!-- 字体改为自托管(@font-face 见 src/main.css),不再依赖 Google Fonts 外链 -->
+    <script type="module" crossorigin src="/assets/index-Di5cimoI.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-C0FnF6B9.js">
-    <link rel="modulepreload" crossorigin href="/assets/element-plus-DxBPQwL7.js">
+    <link rel="modulepreload" crossorigin href="/assets/element-plus-D7LDHcAn.js">
     <link rel="modulepreload" crossorigin href="/assets/monaco-BScz9v63.js">
-    <link rel="modulepreload" crossorigin href="/assets/vendor-bdHhLiED.js">
-    <link rel="modulepreload" crossorigin href="/assets/_plugin-vue_export-helper-dg2VUnSQ.js">
-    <link rel="modulepreload" crossorigin href="/assets/SvgIcon-D_mFHXP4.js">
-    <link rel="modulepreload" crossorigin href="/assets/IconButton-DEARmMkZ.js">
-    <link rel="modulepreload" crossorigin href="/assets/configStore-DtjAc3w9.js">
+    <link rel="modulepreload" crossorigin href="/assets/vendor-CLmPUj3K.js">
+    <link rel="modulepreload" crossorigin href="/assets/_plugin-vue_export-helper-BLGowG5t.js">
+    <link rel="modulepreload" crossorigin href="/assets/SvgIcon-Bkc_oGUI.js">
+    <link rel="modulepreload" crossorigin href="/assets/IconButton-BEiZI4F6.js">
+    <link rel="modulepreload" crossorigin href="/assets/configStore-BUXv5i5j.js">
     <link rel="modulepreload" crossorigin href="/assets/socket-io-BFqQXqAp.js">
-    <link rel="modulepreload" crossorigin href="/assets/gitStore-BZo9_zyy.js">
-    <link rel="modulepreload" crossorigin href="/assets/useThemeObserver-E7Hk50l3.js">
-    <link rel="modulepreload" crossorigin href="/assets/flow-mindmap-BqFb1WO5.js">
-    <link rel="modulepreload" crossorigin href="/assets/previewSandbox-BTTTXooN.js">
-    <link rel="modulepreload" crossorigin href="/assets/FileDiffViewer-B_qEKA9L.js">
-    <link rel="modulepreload" crossorigin href="/assets/CommonDialog-ChZbqfRF.js">
-    <link rel="modulepreload" crossorigin href="/assets/TemplateManager-BzKVXZhy.js">
-    <link rel="modulepreload" crossorigin href="/assets/vue-flow-fLUQ0_kE.js">
-    <link rel="stylesheet" crossorigin href="/assets/element-plus-Cwwq-Gje.css">
+    <link rel="modulepreload" crossorigin href="/assets/gitStore-BGbEYd0U.js">
+    <link rel="modulepreload" crossorigin href="/assets/useThemeObserver-QpveGpnn.js">
+    <link rel="modulepreload" crossorigin href="/assets/flow-mindmap-zXXF3qDh.js">
+    <link rel="modulepreload" crossorigin href="/assets/previewSandbox-DEQpyVNu.js">
+    <link rel="modulepreload" crossorigin href="/assets/CommonDialog-CecgvEzd.js">
+    <link rel="modulepreload" crossorigin href="/assets/FileDiffViewer-DH8Y2lUO.js">
+    <link rel="modulepreload" crossorigin href="/assets/toolsStore-DMCSd287.js">
+    <link rel="modulepreload" crossorigin href="/assets/TemplateManager-9e4amMlI.js">
+    <link rel="modulepreload" crossorigin href="/assets/vue-flow-CxnoC7Uq.js">
+    <link rel="stylesheet" crossorigin href="/assets/element-plus-C1xzgNSR.css">
     <link rel="stylesheet" crossorigin href="/assets/monaco-B2lPvkrc.css">
-    <link rel="stylesheet" crossorigin href="/assets/vendor-DnB9EJa3.css">
+    <link rel="stylesheet" crossorigin href="/assets/vendor-C-GCxMMu.css">
     <link rel="stylesheet" crossorigin href="/assets/SvgIcon-CDNsk4-Q.css">
-    <link rel="stylesheet" crossorigin href="/assets/IconButton-tjkOjzkC.css">
+    <link rel="stylesheet" crossorigin href="/assets/IconButton-RlXqKOeu.css">
     <link rel="stylesheet" crossorigin href="/assets/flow-mindmap-DnzM9SlK.css">
-    <link rel="stylesheet" crossorigin href="/assets/previewSandbox-CgdwPcuW.css">
-    <link rel="stylesheet" crossorigin href="/assets/FileDiffViewer-B9EkuKdF.css">
-    <link rel="stylesheet" crossorigin href="/assets/CommonDialog-jP0E9mco.css">
-    <link rel="stylesheet" crossorigin href="/assets/TemplateManager-DMuG4i3G.css">
+    <link rel="stylesheet" crossorigin href="/assets/previewSandbox-CxLaNg4X.css">
+    <link rel="stylesheet" crossorigin href="/assets/CommonDialog-w6EmBEXv.css">
+    <link rel="stylesheet" crossorigin href="/assets/FileDiffViewer-n5ea9qMe.css">
+    <link rel="stylesheet" crossorigin href="/assets/TemplateManager-DO7EPfj8.css">
     <link rel="stylesheet" crossorigin href="/assets/vue-flow-CavUTEzp.css">
-    <link rel="stylesheet" crossorigin href="/assets/index-CmbatbSR.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-DIU5200G.css">
   </head>
   <body>
     <div id="app"></div>

package/src/ui/server/routes/workbench/agentChat.js

@@ -31,7 +31,6 @@
 import path from 'path';
 import os from 'os';
 import { logger } from './shared.js';
-import { agentSessionStore } from './agentSessionStore.js';
 
 // 从 CLI 侧导入工具定义、执行器与 LLM 传输层（同一 monorepo，路径可达）
 import { TOOL_DEFINITIONS, executeTool } from '../../../../cli/ai/tools.js';
@@ -242,6 +241,9 @@ ${isWin ? `- This is Windows. The following Unix commands do NOT exist here:
 //   - model: { baseURL, model, apiKey }
 //   - userMessage: 用户输入文本
 //   - images: base64 dataURL 数组(可选,多模态图片,随最新一条 user 消息发给模型)
+//   - openFilePath: 文件空间里当前打开的文档(可选,注入请求副本,不落库)
+//   - attachments: 非图片附件(可选) = [{ name, path }],path 是**服务端落盘后的绝对路径**,
+//     只把路径写进请求副本的 system 提示,内容由模型自己用工具读(见 utils/agentAttachments.js)
 //   - cwd: 工作目录
 //   - locale: 'zh' | 'en'
 //   - signal: AbortSignal (客户端断开时触发)
@@ -252,7 +254,7 @@ ${isWin ? `- This is Windows. The following Unix commands do NOT exist here:
 //     (由 agentRoutes 注入:最近目录/tasks.json/看板统计只有 GUI 侧拿得到)
 //
 // 返回: { aborted: boolean }
-export async function runAgentTurn({ session, model, userMessage, images = [], cwd, locale, signal, send, onChild, askUser, listProjects }) {
+export async function runAgentTurn({ session, model, userMessage, images = [], cwd, locale, openFilePath, attachments = [], signal, send, onChild, askUser, listProjects }) {
   const ctx = { cwd, locale, onChild, askUser, listProjects };
 
   // 确保 session.messages 存在
@@ -284,6 +286,8 @@ export async function runAgentTurn({ session, model, userMessage, images = [], c
     // 摘录成一条梗概 → 旧图片降级 → provider 兼容消毒。
     // 只作用于副本,session.messages 保持完整(与 CLI 的磁盘口径一致)。
     const messages = prepareRequestMessages(session.messages, { locale });
+    // 请求级上下文：当前打开的文档 + 本轮附件路径（只改副本，不落 session.messages，下一轮不重复累积）
+    injectRequestContext(messages, { cwd, openFilePath, attachments, locale });
 
     let result;
     try {
@@ -306,14 +310,6 @@ export async function runAgentTurn({ session, model, userMessage, images = [], c
       return { aborted: false };
     }
 
-    if (result.aborted) {
-      // 保存当前会话状态
-      session.updatedAt = new Date().toISOString();
-      await agentSessionStore.write(session.sessionId, session).catch(() => {});
-      send({ type: 'error', error: '已取消' });
-      return { aborted: true };
-    }
-
     const { content, toolCalls } = result;
 
     // 推理内容必须原样带回历史。DeepSeek 系 thinking 模式下带 tool_calls 的 assistant
@@ -322,6 +318,18 @@ export async function runAgentTurn({ session, model, userMessage, images = [], c
     // 口径与 CLI 侧 src/cli/ai/turn.js 的 assistant.reasoning_content 保持一致。
     const withReasoning = msg => (result.reasoning ? { ...msg, reasoning_content: result.reasoning } : msg);
 
+    if (result.aborted) {
+      // 用户点了"停止"：把已经流出来的部分正文补进历史，否则磁盘上这一轮只剩一条
+      // user 消息，重新打开会话时刚才生成的内容会整段丢失。
+      // 半截的 tool_calls 已被 transport 在中止时丢弃，这里只补正文，不会有悬空引用。
+      // 落盘由路由层统一负责（中止的轮次同样要写，见 agentRoutes.js）。
+      if (content) {
+        session.messages.push(withReasoning({ role: 'assistant', content }));
+      }
+      send({ type: 'error', error: '已取消' });
+      return { aborted: true };
+    }
+
     // 无工具调用：本轮结束
     if (toolCalls.length === 0) {
       session.messages.push(withReasoning({ role: 'assistant', content: content || null }));
@@ -409,4 +417,52 @@ function summarizeArgs(name, args) {
   }
 }
 
+// ── 请求级上下文注入（文件空间对话 / 本轮附件） ──────────────
+// 把"用户当前打开的文件"与"本轮附件的落盘路径"追加到**请求副本**的 system 消息末尾：
+// 只影响这一次请求，session.messages 与磁盘历史保持原样，下一轮也不会重复累积。
+//
+// 附件为什么只给路径、不给内容：见 utils/agentAttachments.js 的头注释 —— 非图片附件
+// 由服务端落盘，模型自己用 read / grep 按需取，比把几百 KB 文本内联进消息省得多。
+export function injectRequestContext(messages, { cwd, openFilePath, attachments = [], locale }) {
+  if (!Array.isArray(messages)) return;
+  const en = String(locale || '').startsWith('en');
+
+  const parts = [];
+
+  // ① 当前打开的文档（文件空间对话才有；项目外或等于根目录直接忽略）
+  if (openFilePath) {
+    const root = cwd || process.cwd();
+    let rel = '';
+    try {
+      rel = path.relative(root, path.resolve(root, openFilePath));
+    } catch {
+      rel = '';
+    }
+    if (rel && !rel.startsWith('..') && !path.isAbsolute(rel)) {
+      const file = rel.split(path.sep).join('/');
+      parts.push(en
+        ? `The file the user currently has open in the editor is \`${file}\` (relative to the project root). When the user says "this file" / "the current file" / "here", that is what they mean; read it with your tools before assuming its content.`
+        : `用户此刻在文件空间打开的文件是 \`${file}\`（相对项目根目录）。用户说"这个文件/当前文件"时默认指它；请先用工具读取内容，不要臆测。`);
+    }
+  }
+
+  // ② 本轮附件：只给绝对路径，内容让模型自己去读
+  const files = (Array.isArray(attachments) ? attachments : [])
+    .filter(a => a && typeof a.path === 'string' && a.path)
+    .slice(0, 20);
+  if (files.length > 0) {
+    const lines = files.map(a => `- \`${a.path}\`${a.name && a.name !== path.basename(a.path) ? ` (${a.name})` : ''}`);
+    parts.push(en
+      ? `The user attached ${files.length} file(s) this turn; they were saved to these absolute paths:\n${lines.join('\n')}\nRead them with your tools when relevant (they are NOT inlined here). Do not guess their contents.`
+      : `用户本轮附带了 ${files.length} 个文件，已保存到以下绝对路径：\n${lines.join('\n')}\n需要时用工具读取（内容没有内联在这里），不要臆测。`);
+  }
+
+  if (parts.length === 0) return;
+
+  const note = `\n\n# ${en ? 'Current context' : '当前上下文'}\n${parts.join('\n\n')}`;
+  const sys = messages.find(m => m && m.role === 'system' && typeof m.content === 'string');
+  if (sys) sys.content += note;
+  else messages.unshift({ role: 'system', content: note.trim() });
+}
+
 export { buildWebSystemPrompt };

package/src/ui/server/routes/workbench/agentChatContext.test.js

@@ -0,0 +1,106 @@
+// injectRequestContext：把"当前打开的文档"与"本轮附件路径"注进**请求副本**。
+// 关键口径：只改请求副本、不碰 session.messages；越界路径忽略；下一轮不会重复累积；
+// 附件只给绝对路径、不给内容（内容由模型自己用 read / grep 取）。
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+import path from 'node:path'
+import { injectRequestContext } from './agentChat.js'
+
+const ROOT = path.resolve('C:/proj')
+
+test('injectRequestContext: 相对项目根的斜杠路径追加进 system 消息', () => {
+  const messages = [
+    { role: 'system', content: 'rules' },
+    { role: 'user', content: 'hi' }
+  ]
+  injectRequestContext(messages, { cwd: ROOT, openFilePath: path.join(ROOT, 'src', 'a.md'), locale: 'zh' })
+  assert.match(messages[0].content, /^rules\n\n# 当前上下文/)
+  assert.match(messages[0].content, /src\/a\.md/)
+  assert.equal(messages[1].content, 'hi', '其它消息不受影响')
+})
+
+test('injectRequestContext: 项目外路径 / 空值一律忽略', () => {
+  const outside = [{ role: 'system', content: 'rules' }]
+  injectRequestContext(outside, { cwd: ROOT, openFilePath: 'D:/other/x.md', locale: 'zh' })
+  assert.equal(outside[0].content, 'rules', '项目外路径不注入')
+
+  const none = [{ role: 'system', content: 'rules' }]
+  injectRequestContext(none, { cwd: ROOT, openFilePath: '', locale: 'zh' })
+  assert.equal(none[0].content, 'rules', '没传 openFilePath 时不动消息')
+})
+
+test('injectRequestContext: 没有 system 消息时补一条，英文 locale 用英文说明', () => {
+  const messages = [{ role: 'user', content: 'hi' }]
+  injectRequestContext(messages, { cwd: ROOT, openFilePath: 'README.md', locale: 'en' })
+  assert.equal(messages.length, 2)
+  assert.equal(messages[0].role, 'system')
+  assert.match(messages[0].content, /README\.md/)
+  assert.match(messages[0].content, /Current context/)
+})
+
+test('injectRequestContext: 每轮都基于副本重新注入，不会重复累积', () => {
+  const session = [{ role: 'system', content: 'rules' }]
+  const first = session.map(m => ({ ...m }))
+  const second = session.map(m => ({ ...m }))
+  injectRequestContext(first, { cwd: ROOT, openFilePath: 'a.md', locale: 'zh' })
+  injectRequestContext(second, { cwd: ROOT, openFilePath: 'a.md', locale: 'zh' })
+  assert.equal(session[0].content, 'rules', '原始会话记录保持干净')
+  assert.equal((first[0].content.match(/# 当前上下文/g) || []).length, 1)
+  assert.equal((second[0].content.match(/# 当前上下文/g) || []).length, 1)
+})
+
+test('injectRequestContext: 附件只注入绝对路径,内容不进消息体', () => {
+  const messages = [{ role: 'system', content: 'rules' }, { role: 'user', content: '看下这个日志' }]
+  injectRequestContext(messages, {
+    cwd: ROOT,
+    locale: 'zh',
+    attachments: [
+      { name: '错误日志.log', path: 'C:\\Users\\x\\.zen-gitsync\\agent-attachments\\20260927-193000-ab12\\错误日志.log' }
+    ]
+  })
+  assert.match(messages[0].content, /^rules\n\n# 当前上下文/)
+  assert.match(messages[0].content, /用户本轮附带了 1 个文件/)
+  assert.match(messages[0].content, /agent-attachments.+错误日志\.log/)
+  assert.match(messages[0].content, /不要臆测/)
+  // 消息体本身没有任何文件内容
+  assert.equal(messages[1].content, '看下这个日志')
+})
+
+test('injectRequestContext: 文档 + 附件可以同时注入,各成一段', () => {
+  const messages = [{ role: 'system', content: 'rules' }]
+  injectRequestContext(messages, {
+    cwd: ROOT,
+    openFilePath: 'src/a.md',
+    locale: 'en',
+    attachments: [
+      { name: 'a.log', path: '/tmp/att/a.log' },
+      { name: 'b.csv', path: '/tmp/att/b.csv' }
+    ]
+  })
+  const sys = messages[0].content
+  assert.match(sys, /# Current context/)
+  assert.match(sys, /src\/a\.md/)
+  assert.match(sys, /attached 2 file/)
+  assert.match(sys, /\/tmp\/att\/a\.log/)
+  assert.match(sys, /\/tmp\/att\/b\.csv/)
+  // 只加一个标题段
+  assert.equal((sys.match(/# Current context/g) || []).length, 1)
+})
+
+test('injectRequestContext: 脏附件数据(缺 path / 空数组)不会破坏消息,也不留空段', () => {
+  const dirty = [{ role: 'system', content: 'rules' }]
+  injectRequestContext(dirty, { cwd: ROOT, locale: 'zh', attachments: [{ name: 'x.txt' }, null, 'oops'] })
+  assert.equal(dirty[0].content, 'rules', '没有可用 path 时不注入')
+
+  const empty = [{ role: 'system', content: 'rules' }]
+  injectRequestContext(empty, { cwd: ROOT, locale: 'zh', attachments: [] })
+  assert.equal(empty[0].content, 'rules')
+})
+
+test('injectRequestContext: 附件条数超过 20 时截断(防御性上限)', () => {
+  const messages = [{ role: 'system', content: 'rules' }]
+  const many = Array.from({ length: 25 }, (_, i) => ({ name: `f${i}.txt`, path: `/tmp/att/f${i}.txt` }))
+  injectRequestContext(messages, { cwd: ROOT, locale: 'zh', attachments: many })
+  assert.match(messages[0].content, /用户本轮附带了 20 个文件/)
+  assert.ok(!messages[0].content.includes('f24.txt'), '第 21 个之后不该出现')
+})

package/src/ui/server/routes/workbench/agentChatShared.test.js

@@ -45,16 +45,18 @@ const longSession = () => {
 }
 
 // 跑一轮真实的 runAgentTurn,桩掉 globalThis.fetch —— 抓住发出去的请求体与产生的事件
-async function runWeb({ session, userMessage, respond, locale = 'zh-CN' }) {
+// (respond 收到 fetch 的 init,方便测试按 signal 模拟"读到一半被中止")
+async function runWeb({ session, userMessage, respond, locale = 'zh-CN', signal, onEvent }) {
   const { runAgentTurn } = await import('./agentChat.js')
   const events = []
   let sent
   const original = globalThis.fetch
-  globalThis.fetch = async (_url, init) => { sent = JSON.parse(init.body); return respond() }
+  globalThis.fetch = async (_url, init) => { sent = JSON.parse(init.body); return respond(init) }
   try {
     const result = await runAgentTurn({
       session, model, userMessage, locale, cwd: process.cwd(),
-      signal: new AbortController().signal, send: e => events.push(e),
+      signal: signal ?? new AbortController().signal,
+      send: e => { events.push(e); onEvent?.(e) },
     })
     return { sent, events, result }
   } finally {
@@ -134,6 +136,34 @@ test('流被截断（没有 finish_reason 也没有 [DONE]）时不执行半截
   assert.equal(session.messages.some(m => m.role === 'tool'), false, '被截断的调用不得留下工具结果')
 })
 
+// 回归：用户点"停止"（中止正在跑的这一轮）时，已经流出来的正文必须留在会话记录里。
+// 之前中止分支只把当时的状态写盘、不回填正文，重新打开这条会话时刚才生成的内容整段消失。
+test('中止时已流出的正文要留在会话记录里', async () => {
+  const session = newSession('ag-sandbox-aborted', withSystem())
+  const controller = new AbortController()
+
+  // 吐一段正文后挂住（模拟"停在生成中"）；真 fetch 在 signal abort 时会打断 body 读取，
+  // 桩里照做才能真的走到中止分支
+  const hanging = init => new Response(new ReadableStream({
+    start(stream) {
+      const bytes = new TextEncoder()
+      stream.enqueue(bytes.encode(event({ choices: [{ delta: { content: '已经写了一半' } }] })))
+      init?.signal?.addEventListener('abort', () => stream.error(new DOMException('Aborted', 'AbortError')))
+    },
+  }), { status: 200, headers: { 'content-type': 'text/event-stream' } })
+
+  const { result } = await runWeb({
+    session, userMessage: '写一半就停', respond: hanging, signal: controller.signal,
+    // 正文事件到达 = 这段已经被读进来，此刻中止最贴近用户点"停止"的时机
+    onEvent: e => { if (e.type === 'content') controller.abort() },
+  })
+
+  assert.equal(result.aborted, true)
+  const last = session.messages[session.messages.length - 1]
+  assert.equal(last.role, 'assistant')
+  assert.equal(last.content, '已经写了一半')
+})
+
 test('400 且正文提到 tool/function 时提示换模型,而不是甩网关 JSON', async () => {
   const session = newSession('ag-sandbox-nofc', withSystem())
   const noFunctionCalling = () => new Response(

package/src/ui/server/routes/workbench/agentRoutes.js

@@ -25,6 +25,7 @@ import path from 'node:path';
 import { asyncRoute, HttpError } from '../../utils/asyncRoute.js';
 import { agentSessionStore } from './agentSessionStore.js';
 import { runAgentTurn } from './agentChat.js';
+import { saveAgentAttachments, MAX_ATTACHMENTS } from '../../utils/agentAttachments.js';
 import { registerAgentMarketplaceRoutes } from './agentMarketplace.js';
 import { createProjectListProvider } from './projectTool.js';
 import { nowIso } from './shared.js';
@@ -51,6 +52,9 @@ function sessionBelongsTo(sessionCwd, projectCwd) {
 // matching response. The entry is removed on every completion or disconnect.
 const pendingAgentQuestions = new Map();
 
+/** 正在进行中的会话 id 集合：同一会话同一时刻只允许一个生成中的轮次 */
+const activeSessionTurns = new Set();
+
 function interactionKey(sessionId, interactionId) {
   return `${String(sessionId)}:${String(interactionId)}`;
 }
@@ -187,10 +191,19 @@ export function registerAgentRoutes({ app, getCurrentProjectPath, configManager
       .filter(u => typeof u === 'string' && /^data:image\/[\w.+-]+;base64,/.test(u))
       .slice(0, 10);
 
-    if (!userMessage && images.length === 0) {
+    // 非图片附件：前端只传文件名 + 字节，服务端落盘到数据目录，只把**绝对路径**交给模型。
+    // 内容不进消息体（省 token，模型自己用 read/grep 按需取），校验见 utils/agentAttachments.js。
+    const rawAttachments = (Array.isArray(req.body?.attachments) ? req.body.attachments : [])
+      .slice(0, MAX_ATTACHMENTS)
+      .map(a => ({ name: a?.name, dataUrl: a?.dataUrl }));
+
+    if (!userMessage && images.length === 0 && rawAttachments.length === 0) {
       return res.status(400).json({ success: false, error: '消息内容不能为空' });
     }
 
+    // 文件空间对话：客户端把"当前打开的文档"带上来，服务端只在请求副本里注入上下文（不落库）
+    const openFilePath = String(req.body?.openFilePath || '').trim().slice(0, 512);
+
     // SSE 头
     res.set({
       'Content-Type': 'text/event-stream',
@@ -207,6 +220,15 @@ export function registerAgentRoutes({ app, getCurrentProjectPath, configManager
     let finished = false;
     let activeChild = null;
 
+    // 同一会话同一时刻只允许一个进行中的生成：跨视图（对话 Tab / 文件空间面板）
+    // 或前端连点都靠这道闸挡住，否则两个流各自的会话快照会互相覆盖。
+    if (sessionIdInput && activeSessionTurns.has(sessionIdInput)) {
+      send({ type: 'error', error: '该会话正在生成中，请等它结束后再发送' });
+      finished = true;
+      return res.end();
+    }
+    let activeSessionKey = null;
+
     // 客户端断开
     if (req.socket) {
       req.socket.once('close', () => {
@@ -264,6 +286,19 @@ export function registerAgentRoutes({ app, getCurrentProjectPath, configManager
         isNew = true;
       }
 
+      // 本轮占用该会话（finally 里释放）
+      activeSessionKey = session.sessionId;
+      activeSessionTurns.add(activeSessionKey);
+
+      // 附件落盘（拿到绝对路径后再把路径交给模型）。落盘失败不该拖垮整轮对话：
+      // 拿不到路径最多是模型看不到附件，用户仍能正常对话。
+      const attachments = await saveAgentAttachments(rawAttachments, {
+        onSkip: (info) => console.warn('[agent] 附件被忽略:', info.name, info.reason)
+      }).catch((err) => {
+        console.warn('[agent] 附件落盘失败:', err?.message || err);
+        return [];
+      });
+
       // 获取模型配置
       let model;
       try {
@@ -297,13 +332,15 @@ export function registerAgentRoutes({ app, getCurrentProjectPath, configManager
       });
 
       // 运行 agent 循环
-      const { aborted } = await runAgentTurn({
+      await runAgentTurn({
         session,
         model,
         userMessage,
         images,
         cwd,
         locale,
+        openFilePath,
+        attachments,
         signal: abortController.signal,
         send,
         onChild: (child) => { activeChild = child; },
@@ -320,17 +357,13 @@ export function registerAgentRoutes({ app, getCurrentProjectPath, configManager
         listProjects
       });
 
-      if (aborted) {
-        finished = true;
-        return res.end();
-      }
-
       // 更新标题(新会话从第一条 user 消息自动生成)
       if (isNew) {
         session.title = autoTitle(session.messages);
       }
 
-      // 持久化
+      // 持久化。中止(用户点"停止")的轮次同样要落盘 —— 磁盘上没有这条会话时，
+      // 前端停止后立刻刷新列表会把左栏这一条整个吞掉（表现为"一停止任务就没了"）。
       session.updatedAt = nowIso();
       await writeSession(session.sessionId, session);
       enforceRetention().catch(() => {});
@@ -341,6 +374,8 @@ export function registerAgentRoutes({ app, getCurrentProjectPath, configManager
       send({ type: 'error', error: '智能体对话失败: ' + (err?.message || String(err)) });
       finished = true;
       res.end();
+    } finally {
+      if (activeSessionKey) activeSessionTurns.delete(activeSessionKey);
     }
   });
 }

package/src/ui/server/routes/workbench/agentRoutes.test.js

@@ -1,7 +1,29 @@
 import { test } from 'node:test';
 import assert from 'node:assert/strict';
+import { mkdtempSync, readdirSync, readFileSync } from 'node:fs';
+import os from 'node:os';
 import path from 'node:path';
-import { registerAgentRoutes, waitForAgentAnswer } from './agentRoutes.js';
+
+// agentSessionStore 的落盘目录在模块加载时由 os.homedir() 求值，必须在 import 之前
+// 把 HOME 指到沙箱，否则这个文件会往真实 ~/.zen-gitsync/agent-sessions 里写会话。
+const SANDBOX = mkdtempSync(path.join(os.tmpdir(), 'zen-agent-routes-'));
+process.env.USERPROFILE = SANDBOX;
+process.env.HOME = SANDBOX;
+delete process.env.HOMEDRIVE;
+delete process.env.HOMEPATH;
+
+const { registerAgentRoutes, waitForAgentAnswer } = await import('./agentRoutes.js');
+
+const event = data => `data: ${JSON.stringify(data)}\n\n`;
+
+// 轮询等待条件成立（SSE 是边跑边写出来的，没有可 await 的句柄）
+async function waitUntil(check, timeoutMs = 2000) {
+  const start = Date.now();
+  while (!check()) {
+    if (Date.now() - start > timeoutMs) throw new Error('等待超时');
+    await new Promise(resolve => setTimeout(resolve, 5));
+  }
+}
 
 test('agent respond resolves a pending ask_user question and validates answers', async () => {
   let respondHandler;
@@ -133,3 +155,75 @@ test('agent chat rejects a cwd that differs from the active server project', asy
   assert.match(output, /PROJECT_MISMATCH/);
   assert.match(output, /项目不一致/);
 });
+
+// 回归：用户点"停止"（客户端断开连接 → 服务端 abort）后，这条会话仍要落盘。
+// 之前中止分支直接 res.end()，磁盘上没有会话文件，前端停止后立刻刷新列表
+// 就把左栏这一条整个吞掉了 —— 用户看到的是"一停止任务就没了"。
+test('停止(客户端断开)后会话仍要落盘，并带上自动标题与已流出的正文', async () => {
+  const activeCwd = path.resolve('active-project');
+  let chatHandler;
+  const app = {
+    get() {},
+    delete() {},
+    put() {},
+    post(route, handler) {
+      if (route === '/api/agent/chat') chatHandler = handler;
+    }
+  };
+  registerAgentRoutes({
+    app,
+    getCurrentProjectPath: () => activeCwd,
+    configManager: {
+      readRawConfigFile: async () => ({
+        models: [{ model: 'test', name: 'T', baseURL: 'https://example.invalid/v1', apiKey: 'k', isDefault: true }]
+      })
+    }
+  });
+
+  // 模型流：吐一段正文后挂住（模拟"停在生成中"）。真 fetch 在 signal abort 时会打断
+  // body 读取，桩里照做才能真的走到中止分支
+  const hanging = init => new Response(new ReadableStream({
+    start(stream) {
+      const bytes = new TextEncoder();
+      stream.enqueue(bytes.encode(event({ choices: [{ delta: { content: '已经写了一半' } }] })));
+      init?.signal?.addEventListener('abort', () => stream.error(new DOMException('Aborted', 'AbortError')));
+    }
+  }), { status: 200, headers: { 'content-type': 'text/event-stream' } });
+
+  const originalFetch = globalThis.fetch;
+  globalThis.fetch = async (_url, init) => hanging(init);
+
+  let onSocketClose;
+  let output = '';
+  let ended = false;
+  const req = {
+    body: { userMessage: '请列出当前项目的目录结构', cwd: activeCwd },
+    headers: {},
+    socket: { once(_evt, cb) { onSocketClose = cb; } }
+  };
+  const res = {
+    set() {},
+    flushHeaders() {},
+    write(chunk) { output += chunk; },
+    end() { ended = true; }
+  };
+
+  try {
+    const route = chatHandler(req, res);
+    await waitUntil(() => output.includes('"type":"content"'));
+    onSocketClose();
+    await route;
+  } finally {
+    globalThis.fetch = originalFetch;
+  }
+
+  assert.equal(ended, true, '中止后也要正常收尾');
+  const dir = path.join(SANDBOX, '.zen-gitsync', 'agent-sessions');
+  const files = readdirSync(dir).filter(f => f.endsWith('.json'));
+  assert.equal(files.length, 1, '被停止的会话必须落盘，否则左栏这一条会消失');
+  const saved = JSON.parse(readFileSync(path.join(dir, files[0]), 'utf-8'));
+  assert.equal(saved.title, '请列出当前项目的目录结构');
+  const last = saved.messages[saved.messages.length - 1];
+  assert.equal(last.role, 'assistant');
+  assert.equal(last.content, '已经写了一半');
+});