[DEBUG-r99] 有界观测：定位剪贴板占用反馈后45秒超时（诊断分支）

.gitattributes

@@ -5,3 +5,6 @@
 *.py text eol=lf
 *.ps1 text eol=crlf
 experiments/core/fixtures/*.bin binary
+# Preserve upstream license bytes and unified-diff context prefixes.
+research/msys-runtime-window-prefix/CYGWIN_LICENSE whitespace=-blank-at-eol,-blank-at-eof
+research/msys-runtime-window-prefix/window-prefix.patch whitespace=-blank-at-eol,-space-before-tab

.github/workflows/build.yml

@@ -53,6 +53,9 @@ jobs:
       - name: Test
         env:
           TERMFORGE_REQUIRE_SYSTEM_CLIPBOARD: ${{ runner.os == 'Windows' && '1' || '0' }}
+          # [DEBUG-r99] opt-in stage logging for issue #99 bounded observation;
+          # consumed only by the ui-clipboard-system scenario debug logger.
+          TERMFORGE_DEBUG_R99: '1'
         run: ctest --test-dir build -C Release --output-on-failure --output-junit test-results.xml
       - name: Preserve clipboard and window integration evidence
         if: always() && runner.os == 'Windows'

.github/workflows/conpty-upstream.yml

@@ -0,0 +1,78 @@
+name: Fixed upstream ConPTY build experiment
+
+on:
+  pull_request:
+    paths:
+      - '.github/workflows/conpty-upstream.yml'
+      - 'experiments/conpty/upstream/**'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  upstream:
+    runs-on: windows-2025
+    timeout-minutes: 45
+    env:
+      PYTHONUTF8: '1'
+      NUGET_CLI_LANGUAGE: en-us
+      VCPKG_DISABLE_METRICS: '1'
+      VCPKG_MAX_CONCURRENCY: '1'
+    steps:
+      - name: Preserve canonical source bytes in disposable checkouts
+        run: |
+          git config --global core.autocrlf false
+          git config --global core.eol lf
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          path: project
+          persist-credentials: false
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          repository: microsoft/terminal
+          ref: dc8ae365847d41f62d1ebca93815bb00959bc12f
+          path: upstream
+          persist-credentials: false
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          repository: microsoft/vcpkg
+          ref: 927f62e4b8838bd7e441e9c45103a16ffd75007e
+          fetch-depth: 0
+          path: vcpkg
+          persist-credentials: false
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
+        with:
+          python-version: '3.12'
+      - name: Test result rejection gates
+        working-directory: project
+        run: python -m unittest experiments.conpty.upstream.test_taef_result -v
+      - name: Build and test fixed upstream variants
+        shell: pwsh
+        run: >-
+          ./project/experiments/conpty/upstream/build_hosted.ps1
+          -Source ./upstream -Vcpkg ./vcpkg -Out ./upstream-result
+      - name: Preserve source and test identity
+        if: always()
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+        with:
+          name: conpty-upstream-summary
+          retention-days: 14
+          if-no-files-found: warn
+          path: upstream-result/public/
+      - name: Preserve experimental pair after adapter verification
+        if: success()
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+        with:
+          name: conpty-upstream-experimental-pair
+          retention-days: 14
+          if-no-files-found: error
+          path: upstream-result/pair/
+      - name: Preserve same-source baseline for native comparison
+        if: success()
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+        with:
+          name: conpty-upstream-baseline-pair
+          retention-days: 14
+          if-no-files-found: error
+          path: upstream-result/baseline-pair/

.github/workflows/core-candidate.yml

@@ -84,7 +84,9 @@ jobs:
       - name: Build native measurement
         run: cmake --build build --config Release --target core_measure
       - name: Build and test candidate C++ adapter
-        run: cmake --build build --config Release --target candidate_core_test && ctest --test-dir build -C Release -R candidate_core --output-on-failure
+        run: cmake --build build --config Release --target candidate_core_test workflow_checkpoint_test && ctest --test-dir build -C Release -R "^(candidate_core|workflow_checkpoint)$" --no-tests=error --output-on-failure
+      - name: Verify resize trace and actual replay input rejection
+        run: cmake --build build --config Release --target candidate_resize_replay && ctest --test-dir build -C Release -R "^(resize_trace|candidate_resize_replay)$" --no-tests=error --output-on-failure
       - name: Build and test candidate shell on Windows
         if: runner.os == 'Windows'
         run: cmake --build build --config Release --target shell_test_launcher && ctest --test-dir build -C Release -R candidate_shell_tui --output-on-failure

CMakeLists.txt

@@ -2,6 +2,18 @@ cmake_minimum_required(VERSION 3.20)
 project(termforge_experiments VERSION 0.1.0 LANGUAGES CXX)
 
 option(TERMFORGE_BUILD_CANDIDATE_ADAPTER "Build the Rust candidate C++ adapter checks" OFF)
+option(TERMFORGE_BUILD_SOURCE_CONPTY_EXPERIMENT "Build isolated fixed-source ConPTY research probes" OFF)
+set(TERMFORGE_CONPTY_BACKEND_DIR "" CACHE PATH "Explicit reviewed x64 ConPTY pair; empty uses the system API")
+if(TERMFORGE_BUILD_SOURCE_CONPTY_EXPERIMENT AND (NOT WIN32 OR TERMFORGE_CONPTY_BACKEND_DIR))
+  message(FATAL_ERROR "Source ConPTY probes require Windows and a separate build without a product backend directory")
+endif()
+if(TERMFORGE_CONPTY_BACKEND_DIR AND NOT WIN32)
+  message(FATAL_ERROR "Side-by-side ConPTY is a Windows-only experiment")
+endif()
+
+if(WIN32)
+  include(cmake/ConptyBackend.cmake)
+endif()
 
 # Single-config generators use bin/, multi-config generators use bin/<config>/.
 set(CMAKE_RUNTIME_OUTPUT_DIRECTORY "${CMAKE_BINARY_DIR}/bin")
@@ -69,6 +81,14 @@ if(TERMFORGE_BUILD_CANDIDATE_ADAPTER)
   else()
     target_link_libraries(candidate_core_test PRIVATE pthread dl m)
   endif()
+  add_executable(candidate_resize_replay experiments/core/candidate_resize_replay.cpp experiments/core/candidate_terminal.cpp)
+  target_link_libraries(candidate_resize_replay PRIVATE termforge_core termforge_candidate_core)
+  termforge_warnings(candidate_resize_replay)
+  if(WIN32)
+    target_link_libraries(candidate_resize_replay PRIVATE ws2_32 userenv ntdll)
+  else()
+    target_link_libraries(candidate_resize_replay PRIVATE pthread dl m)
+  endif()
 endif()
 
 add_executable(resize_test experiments/core/resize_test.cpp)
@@ -89,6 +109,10 @@ termforge_warnings(search_test)
 
 add_executable(paste_test experiments/shell/paste_test.cpp)
 termforge_warnings(paste_test)
+add_executable(sender_fence_test experiments/shell/sender_fence_test.cpp)
+termforge_warnings(sender_fence_test)
+find_package(Threads REQUIRED)
+target_link_libraries(sender_fence_test PRIVATE Threads::Threads)
 add_executable(clipboard_policy_test experiments/shell/clipboard_policy_test.cpp)
 termforge_warnings(clipboard_policy_test)
 add_executable(keyboard_test experiments/shell/keyboard_test.cpp)
@@ -111,6 +135,23 @@ if(WIN32)
   termforge_warnings(conpty_margin_probe)
   target_compile_definitions(conpty_margin_probe PRIVATE NOMINMAX WIN32_LEAN_AND_MEAN _WIN32_WINNT=0x0A00)
   target_link_libraries(conpty_margin_probe PRIVATE user32 bcrypt)
+  add_executable(conpty_backend_probe experiments/conpty/backend_probe.cpp)
+  termforge_warnings(conpty_backend_probe)
+  target_compile_definitions(conpty_backend_probe PRIVATE NOMINMAX WIN32_LEAN_AND_MEAN _WIN32_WINNT=0x0A00)
+  if(TERMFORGE_BUILD_SOURCE_CONPTY_EXPERIMENT)
+    add_executable(conpty_source_margin_probe experiments/conpty/margin_probe.cpp)
+    add_executable(conpty_source_backend_probe experiments/conpty/backend_probe.cpp)
+    foreach(target conpty_source_margin_probe conpty_source_backend_probe)
+      termforge_warnings(${target})
+      target_compile_definitions(${target} PRIVATE NOMINMAX WIN32_LEAN_AND_MEAN _WIN32_WINNT=0x0A00
+        TERMFORGE_CONPTY_SOURCE_EXPERIMENT=1)
+      target_link_libraries(${target} PRIVATE user32 bcrypt)
+    endforeach()
+  endif()
+  add_executable(conpty_resize_native_probe experiments/conpty/resize_native_probe.cpp)
+  termforge_warnings(conpty_resize_native_probe)
+  target_compile_definitions(conpty_resize_native_probe PRIVATE NOMINMAX WIN32_LEAN_AND_MEAN _WIN32_WINNT=0x0A00)
+  target_link_libraries(conpty_resize_native_probe PRIVATE bcrypt)
   add_executable(presentation_probe experiments/presentation/presentation.cpp)
   termforge_warnings(presentation_probe)
   target_compile_definitions(presentation_probe PRIVATE NOMINMAX WIN32_LEAN_AND_MEAN UNICODE _UNICODE)
@@ -140,6 +181,9 @@ if(WIN32)
   target_compile_definitions(shell_query_client PRIVATE NOMINMAX WIN32_LEAN_AND_MEAN UNICODE _UNICODE)
   add_dependencies(termforge_shell shell_query_client)
   add_executable(shell_queue_probe experiments/shell/queue_probe.cpp)
+  add_executable(sender_fence_pipe_test experiments/shell/sender_fence_pipe_test.cpp)
+  termforge_warnings(sender_fence_pipe_test)
+  target_compile_definitions(sender_fence_pipe_test PRIVATE NOMINMAX WIN32_LEAN_AND_MEAN)
   add_executable(shell_size_client experiments/shell/size_client.cpp)
   add_executable(shell_input_client experiments/shell/input_client.cpp)
   add_executable(shell_text_client experiments/shell/text_client.cpp)
@@ -221,6 +265,16 @@ if(BUILD_TESTING)
       add_test(NAME candidate_title COMMAND candidate_title_test)
       set_tests_properties(candidate_title PROPERTIES TIMEOUT 35
         ENVIRONMENT "TERMFORGE_TEST_ARTIFACTS=${PROJECT_BINARY_DIR}/test-artifacts")
+      if(TERMFORGE_CONPTY_BACKEND_DIR)
+        add_executable(candidate_reply_close_test experiments/shell/candidate_reply_close_test.cpp experiments/shell/shell_launch.cpp)
+        termforge_warnings(candidate_reply_close_test)
+        target_compile_definitions(candidate_reply_close_test PRIVATE NOMINMAX WIN32_LEAN_AND_MEAN UNICODE _UNICODE)
+        target_link_libraries(candidate_reply_close_test PRIVATE termforge_core d2d1 dwrite gdi32 user32 imm32 ole32 oleaut32 uuid bcrypt)
+        termforge_candidate_shell(candidate_reply_close_test)
+        add_dependencies(candidate_reply_close_test termforge_shell_assets)
+        add_test(NAME candidate_reply_close COMMAND candidate_reply_close_test)
+        set_tests_properties(candidate_reply_close PROPERTIES TIMEOUT 30)
+      endif()
     endif()
     add_dependencies(runtime_observation_test termforge_shell_assets)
     add_test(NAME runtime_observation COMMAND runtime_observation_test)
@@ -263,6 +317,13 @@ if(BUILD_TESTING)
   add_executable(transport_completion_test experiments/shell/transport_completion_test.cpp)
   termforge_warnings(transport_completion_test)
   add_test(NAME transport_completion COMMAND transport_completion_test)
+  add_executable(workflow_checkpoint_test experiments/shell/workflow_checkpoint_test.cpp)
+  target_link_libraries(workflow_checkpoint_test PRIVATE termforge_core)
+  termforge_warnings(workflow_checkpoint_test)
+  if(TERMFORGE_BUILD_CANDIDATE_ADAPTER)
+    termforge_candidate_shell(workflow_checkpoint_test)
+  endif()
+  add_test(NAME workflow_checkpoint COMMAND workflow_checkpoint_test)
   add_executable(scenario_tick_gate_test experiments/shell/scenario_tick_gate_test.cpp)
   termforge_warnings(scenario_tick_gate_test)
   add_test(NAME scenario_tick_gate COMMAND scenario_tick_gate_test)
@@ -274,6 +335,12 @@ if(BUILD_TESTING)
   add_test(NAME selection_core COMMAND selection_test)
   add_test(NAME search_core COMMAND search_test)
   add_test(NAME paste COMMAND paste_test)
+  add_test(NAME sender_fence COMMAND sender_fence_test)
+  set_tests_properties(sender_fence PROPERTIES TIMEOUT 10)
+  if(WIN32)
+    add_test(NAME sender_fence_pipe COMMAND sender_fence_pipe_test)
+    set_tests_properties(sender_fence_pipe PROPERTIES TIMEOUT 10)
+  endif()
   add_test(NAME clipboard_policy COMMAND clipboard_policy_test)
   add_test(NAME keyboard COMMAND keyboard_test)
   add_test(NAME text_action_policy COMMAND text_action_policy_test)
@@ -285,7 +352,15 @@ if(BUILD_TESTING)
       WORKING_DIRECTORY "${PROJECT_SOURCE_DIR}"
       TIMEOUT 180
       ENVIRONMENT "TERMFORGE_BIN_DIR=$<TARGET_FILE_DIR:replay>;TERMFORGE_TRACE=$<TARGET_FILE:terminal_trace>;PYTHONUTF8=1")
+    if(TERMFORGE_CONPTY_BACKEND_DIR)
+      set_property(TEST ${name} APPEND PROPERTY ENVIRONMENT
+        "TERMFORGE_EXPECT_CONPTY_BACKEND=reviewed-side-by-side-1.25.260930003")
+    endif()
   endfunction()
+  if(TERMFORGE_BUILD_CANDIDATE_ADAPTER)
+    termforge_add_python_test(candidate_resize_replay -m unittest experiments.core.test_candidate_resize_replay -v)
+    set_tests_properties(candidate_resize_replay PROPERTIES TIMEOUT 30)
+  endif()
   if(TERMFORGE_BUILD_CANDIDATE_ADAPTER AND WIN32)
     termforge_add_python_test(candidate_shell_tui -m unittest experiments.shell.test_candidate_tui -v)
     set_tests_properties(candidate_shell_tui PROPERTIES TIMEOUT 120)
@@ -310,12 +385,15 @@ if(BUILD_TESTING)
   termforge_add_python_test(workflow_system_runner -m unittest research.ime.test_workflow_system_runner -v)
   set_tests_properties(workflow_system_runner PROPERTIES TIMEOUT 30)
   termforge_add_python_test(copy_error_frame -m unittest experiments.shell.test_copy_error_frame -v)
+  termforge_add_python_test(paste_fence_evidence -m unittest experiments.shell.test_paste_checks -v)
+  termforge_add_python_test(resize_trace -m unittest experiments.shell.test_resize_trace -v)
   if(WIN32)
     termforge_add_python_test(research_guards -m unittest discover -s research/tests -v)
     termforge_add_python_test(receive -m unittest experiments.receive.test_receive -v)
     termforge_add_python_test(conpty -m unittest experiments.conpty.test_conpty -v)
     termforge_add_python_test(conpty_ctrl_c -m unittest experiments.conpty.test_ctrl_c -v)
     termforge_add_python_test(conpty_margin -m unittest experiments.conpty.test_margin_run -v)
+    termforge_add_python_test(conpty_backend -m unittest experiments.conpty.test_backend -v)
     termforge_add_python_test(presentation -m unittest experiments.presentation.test_presentation -v)
     termforge_add_python_test(shell -m unittest experiments.shell.test_shell -v)
     termforge_add_python_test(selection_bytes -m unittest experiments.shell.test_selection_bytes -v)
@@ -327,3 +405,13 @@ if(BUILD_TESTING)
     termforge_add_python_test(research_guards -m unittest research.tests.test_ui_probe research.tests.test_ui_typography research.tests.test_ui_r1 research.tests.test_ime_evidence -v)
   endif()
 endif()
+
+if(WIN32)
+  foreach(target termforge_conpty_probe conpty_ctrl_c_probe conpty_margin_probe conpty_backend_probe real_app_capture
+                 termforge_shell workflow_fixture_test shell_queue_probe shell_paste_probe
+                 runtime_observation_test candidate_title_test candidate_reply_close_test raw_console_receiver_test)
+    if(TARGET ${target})
+      termforge_use_conpty_backend(${target})
+    endif()
+  endforeach()
+endif()

cmake/ConptyBackend.cmake

@@ -0,0 +1,46 @@
+# Experimental, explicit side-by-side ConPTY selection. No downloads/fallback.
+add_library(termforge_conpty_backend INTERFACE)
+target_link_libraries(termforge_conpty_backend INTERFACE bcrypt)
+
+if(TERMFORGE_CONPTY_BACKEND_DIR)
+  if(NOT CMAKE_SIZEOF_VOID_P EQUAL 8)
+    message(FATAL_ERROR "The reviewed ConPTY package is Windows x64 only")
+  endif()
+  if(NOT TERMFORGE_BUILD_CANDIDATE_ADAPTER)
+    message(FATAL_ERROR "Experimental side-by-side ConPTY requires TERMFORGE_BUILD_CANDIDATE_ADAPTER=ON")
+  endif()
+  if(NOT IS_ABSOLUTE "${TERMFORGE_CONPTY_BACKEND_DIR}")
+    message(FATAL_ERROR "TERMFORGE_CONPTY_BACKEND_DIR must be an absolute directory")
+  endif()
+  foreach(name conpty.dll OpenConsole.exe)
+    if(NOT EXISTS "${TERMFORGE_CONPTY_BACKEND_DIR}/${name}")
+      message(FATAL_ERROR "Reviewed ConPTY package is incomplete: ${name}")
+    endif()
+    file(SHA256 "${TERMFORGE_CONPTY_BACKEND_DIR}/${name}" actual)
+    if(name STREQUAL "conpty.dll")
+      set(expected "feeef341d891643c62d30b6b07800bc70f0bc148f44cb8c3bee84aa557ae805a")
+    else()
+      set(expected "3d66b23d0a71bb8eed2b77edc8b9df9bf54ce6c8fb74c863a30e760997f80586")
+    endif()
+    if(NOT actual STREQUAL expected)
+      message(FATAL_ERROR "Reviewed ConPTY identity mismatch: ${name}")
+    endif()
+  endforeach()
+  target_compile_definitions(termforge_conpty_backend INTERFACE TERMFORGE_CONPTY_SIDEBYSIDE=1)
+  add_custom_target(termforge_conpty_bundle
+    COMMAND "${CMAKE_COMMAND}" -E make_directory "$<TARGET_FILE_DIR:termforge_shell>/conpty-backend"
+    COMMAND "${CMAKE_COMMAND}" -E copy_if_different
+      "${TERMFORGE_CONPTY_BACKEND_DIR}/conpty.dll"
+      "${TERMFORGE_CONPTY_BACKEND_DIR}/OpenConsole.exe"
+      "${PROJECT_SOURCE_DIR}/third_party/conpty/manifest.json"
+      "${PROJECT_SOURCE_DIR}/third_party/conpty/LICENSE"
+      "$<TARGET_FILE_DIR:termforge_shell>/conpty-backend"
+    VERBATIM)
+endif()
+
+function(termforge_use_conpty_backend target)
+  target_link_libraries(${target} PRIVATE termforge_conpty_backend)
+  if(TERMFORGE_CONPTY_BACKEND_DIR)
+    add_dependencies(${target} termforge_conpty_bundle)
+  endif()
+endfunction()