feat: v0.8.0 流语义补全 · 会话可靠 · 恢复力 — finish_reason 全链路贯通根治"思考中停止" · 2445 用例全量回归

P0 会话可靠性收口（根治"模型思考着会话就停止"）：
- P0-1 finish_reason 全链路贯通：DONE 事件与 IterationStep 新增 finishReason，OpenAI 共享 SSE / Anthropic message_delta.stop_reason / Ollama done_reason 三路采集，TRACE 层弃用硬编码 'stop' 记录真值
- P0-2 空响应守卫 + 降级重试：零产出流→可重试错误走退避；思考耗尽输出预算（reasoning-only + length）→自动关闭思考降级重试一次；仍失败→OUTPUT_LENGTH_EXCEEDED 结构化错误 + 故障转移；附带根治 abort 恰逢零工具调用轮被 COMPLETED 抢占的真实缺陷
- P0-3 思考×能力×预算三对齐：DeepSeek/MiMo/Agnes/Ollama 四家 supportsThinking=false 强制不发思考参数；小输出预算告警；设置页联动提示
- P0-4 渲染层可见性：截断/空完成/友好错误三类提示，i18n 全部出层
- P0-5 回归四件套：reasoning-only 终止判定、集成级空闲超时、504 引擎重试归类、思考中 abort→USER_INTERRUPT、P4-2 强制收尾路径

FEAT-1：LLM 设置新增「最大输出上限」——Provider 支持矩阵显隐 + 模型上限钳制提示 + 超限保存警告 + llm.maxTokens 热生效

P1 修复面收口：
- 渲染层三缺陷根治：后台会话回放缓冲（2000 条/4MB 有界 + agent:getReplayState + 事件总线）+ abort 双层自愈 + sendMessage 收尾兜底 + 中断卡片清扫
- 工具 abort 信号全覆盖：web_search/web_fetch/http_request/code_search/git 系列/delegate_task 全部接入引擎中断；web_search 时间预算收敛（720s→≤240s）；移除伪造 ToolExecutionContext 与死代码
- 安全：本地 Pinned CONNECT 代理根治浏览器通道 DNS rebinding（校验期 IP pinning，可注入 resolver 表测）；配置 URL 域名解析深校验（DeepCheckSoftFailure 软失败）；SSE 空 error 帧防御修复；Ollama generate/embed AbortSignal.any 合并
- 缺陷清单：UTF-16 BOM 读取、tmp 同毫秒碰撞（nanoid 后缀）、code_search JS 回退参数对称（case_sensitive/前后文独立）、list_directory include_node_modules、崩溃自愈退避（60s 窗 ≥3 次停 reload）、MemoryViewer/Sidebar i18n 收口

P2 能力演进：
- 会话回收站：SCHEMA_VERSION 3 + 迁移 10（deleted_at，存在性守卫），软删除/恢复/彻底删除/30 天自动清理（启动+24h），searchMessages 聚合剔除，Sidebar 回收站面板
- 会话回放播放器：sessions:listRecordings/readRecording（白名单+目录边界+20MB 上限），SessionReplayPlayer 时间轴/步进/变速，Trace 面板入口
- electron-updater 自动更新：双轨（手动 feed 比对保留），生产环境启动静默检查 + update:status 广播 + app:updateInstall + LogsSettings UpdatePanel + builder publish 配置
- @ 文件提及：workspace.listFiles/readFileClip（边界/512KB/NUL 拒绝/MEMORY.md 保护），ChatInput Fuse 联想+键盘导航+附件管线注入
- MCP Resources/Prompts 发现：可选能力 try/catch 降级，mcp:listServerContents，MCPSettings 展开视图
- 文档对齐：内部 API 标准 HTML（Adapter 清单补 MiMo/已实现注记/STREAM_RESET/DONE.finishReason/ repetition_truncation 映射）；README v0.8.0 亮点表

P3 测试基建：
- 新增 4 个测试文件：engine-stream-contract（6）、engine-stream-reliability（4：集成空闲超时/504 重试/思考中 abort/P4-2 强制收尾）、thinking-capability-gate（7）、pinned-proxy（9，含深校验 5）、session-trash（5，DB 域）、use-agent-stream hook 级（5）、agent.test 回放缓冲（2）
- 契约更新：orchestrator 被中断 SubAgent success=false（abort 优先级修复语义）、SSE 空 error 帧、UTF-16 正常读取、DeepSeek 未配置思考显式 disabled、迁移矩阵 v2→3
- 弱断言根治：registry WEBP 单向断言、hooks-contracts 自比恒真、memory 空 token 补强

全量验证：typecheck 0 错误 / lint 0 问题 / 系统 Node 2144 通过（301 DB 用例按 ABI 跳过）/ Electron ABI 2445/2445 全量通过 0 跳过

electron/harness/tools/built-in/git.ts

@@ -28,18 +28,23 @@ const MAX_DIFF_SIZE = 50 * 1024;
  *
  * v0.3.1 修复 WARN-4: 允许调用方覆盖 maxBuffer，默认 1MB；
  * git_diff 传 5MB 以支持超大变更集（避免 maxBuffer exceeded 报错而非截断返回）。
+ *
+ * v0.8.0 P1-2: 新增可选 signal —— 引擎中断（用户停止/超时）时立即 kill git
+ * 子进程（Node execFile 原生支持 AbortSignal 选项），各工具经 context 透传。
  */
 async function runGit(
   args: string[],
   cwd: string,
   timeout = 10_000,
   maxBuffer = 1024 * 1024, // 默认 1MB
+  signal?: AbortSignal,
 ): Promise<string> {
   const { stdout } = await execFileAsync('git', args, {
     cwd,
     maxBuffer,
     timeout,
     encoding: 'utf-8',
+    ...(signal ? { signal } : {}),
   });
   return stdout;
 }
@@ -84,11 +89,15 @@ function extractRenamedFile(file: string): string {
 export class GitStatusTool implements IMetonaTool {
   readonly definition: MetonaToolDef = {
     name: 'git_status',
-    description: 'Show the working tree status. Returns current branch, ahead/behind counts, and lists of staged, unstaged, and untracked files.',
+    description:
+      'Show the working tree status. Returns current branch, ahead/behind counts, and lists of staged, unstaged, and untracked files.',
     parameters: {
       type: 'object',
       properties: {
-        pathspec: { type: 'string', description: 'Limit to a path scope, e.g. "src/" or "package.json"' },
+        pathspec: {
+          type: 'string',
+          description: 'Limit to a path scope, e.g. "src/" or "package.json"',
+        },
       },
     },
     category: MetonaToolCategory.FILESYSTEM,
@@ -191,11 +200,15 @@ export class GitStatusTool implements IMetonaTool {
 export class GitDiffTool implements IMetonaTool {
   readonly definition: MetonaToolDef = {
     name: 'git_diff',
-    description: 'Show changes between the working tree and the index (or staged changes). Returns unified diff text. Output is truncated at 50KB.',
+    description:
+      'Show changes between the working tree and the index (or staged changes). Returns unified diff text. Output is truncated at 50KB.',
     parameters: {
       type: 'object',
       properties: {
-        cached: { type: 'boolean', description: 'Show only staged (cached) changes (default false)' },
+        cached: {
+          type: 'boolean',
+          description: 'Show only staged (cached) changes (default false)',
+        },
         pathspec: { type: 'string', description: 'Limit to a path scope, e.g. "src/"' },
         contextLines: { type: 'number', description: 'Number of context lines (default 3)' },
       },
@@ -269,7 +282,8 @@ export class GitDiffTool implements IMetonaTool {
 export class GitLogTool implements IMetonaTool {
   readonly definition: MetonaToolDef = {
     name: 'git_log',
-    description: 'Show commit history. Returns commits with hash, message, and optionally author/date. Supports filtering by author and path.',
+    description:
+      'Show commit history. Returns commits with hash, message, and optionally author/date. Supports filtering by author and path.',
     parameters: {
       type: 'object',
       properties: {
@@ -357,17 +371,25 @@ export class GitLogTool implements IMetonaTool {
 export class GitCommitTool implements IMetonaTool {
   readonly definition: MetonaToolDef = {
     name: 'git_commit',
-    description: 'Stage files and create a git commit. Supports amending the previous commit. In amend mode, message is optional (omitting it keeps the original commit message). Requires user confirmation.',
+    description:
+      'Stage files and create a git commit. Supports amending the previous commit. In amend mode, message is optional (omitting it keeps the original commit message). Requires user confirmation.',
     parameters: {
       type: 'object',
       properties: {
-        message: { type: 'string', description: 'Commit message. Required for new commits. Optional in amend mode (omitting keeps original message).' },
+        message: {
+          type: 'string',
+          description:
+            'Commit message. Required for new commits. Optional in amend mode (omitting keeps original message).',
+        },
         files: {
           type: 'array',
           items: { type: 'string', description: 'File path to stage' },
           description: 'Files to stage (default: all changes via git add -A)',
         },
-        amend: { type: 'boolean', description: 'Amend the previous commit instead of creating a new one (default false)' },
+        amend: {
+          type: 'boolean',
+          description: 'Amend the previous commit instead of creating a new one (default false)',
+        },
       },
       // F1-3: message 不再硬性 required — amend 模式下可省略（保留原 message）
       // 校验在 execute 内根据 amend 标志动态进行
@@ -385,11 +407,17 @@ export class GitCommitTool implements IMetonaTool {
 
     // F1-3: 非 amend 模式必须有 message；amend 模式可省略（保留原 message）
     if (!amend && (!message || message.trim().length === 0)) {
-      return { success: false, error: 'Commit message is required (use amend: true to reuse the previous message)' };
+      return {
+        success: false,
+        error: 'Commit message is required (use amend: true to reuse the previous message)',
+      };
     }
     // amend 模式下若提供 message，需校验非空字符串
     if (amend && message !== undefined && message.trim().length === 0) {
-      return { success: false, error: 'Commit message must not be empty (or omit message field to keep original)' };
+      return {
+        success: false,
+        error: 'Commit message must not be empty (or omit message field to keep original)',
+      };
     }
 
     try {
@@ -402,7 +430,10 @@ export class GitCommitTool implements IMetonaTool {
             return {
               success: false,
               error: `File path outside workspace: ${f}`,
-              commit: '', branch: '', message: '', filesChanged: 0,
+              commit: '',
+              branch: '',
+              message: '',
+              filesChanged: 0,
             };
           }
         }