fix(聊天): 提问卡截止时间容忍远端时钟偏移

倒计时归零硬禁用交互后，WebUI 的截止时间（桌面时钟盖章的绝对毫秒）
与本机 Date.now() 跨机器比较：浏览器时钟偏移超界会把仍在挂起的提问
卡一挂载就锁死。现仅当截止时间落在"挂载时刻～挂载时刻+完整应答窗口"
内才采信，否则回退挂载近似；过期提交仍由桌面挂起表权威拒绝。

Author: su-fen

crates/agent-gateway/web/src/components/chat/AskUserQuestionCard.tsx

@@ -28,10 +28,21 @@ function formatCountdown(remainingMs: number) {
  * 网关参数上的 deadline 盖章），两端与桌面计时同源；缺失时（历史/降级数据）
  * 回退为挂载时刻近似。倒计时归零立即禁止交互，随后 tool_result 把卡片
  * 切到只读态。
+ *
+ * 盖章用的是桌面时钟，而倒计时读本机时钟：远端浏览器时钟偏移足够大时，
+ * 一个仍在挂起的提问会在挂载瞬间就显示过期（或远超完整窗口）。因此仅当
+ * 截止时间落在“挂载时刻（不含）～挂载时刻 + 完整应答窗口（含）”内才采信，
+ * 否则视为时钟不可比、回退挂载近似，避免把可作答的卡片锁死；真正过期的
+ * 提交仍由桌面挂起表权威拒绝。
  */
 function useAnswerCountdown(active: boolean, deadlineAt?: number) {
-  const [fallbackDeadline] = useState(() => Date.now() + ASK_USER_QUESTION_TIMEOUT_MS);
-  const deadline = deadlineAt ?? fallbackDeadline;
+  const [mountedAt] = useState(() => Date.now());
+  const deadline =
+    deadlineAt !== undefined &&
+    deadlineAt > mountedAt &&
+    deadlineAt <= mountedAt + ASK_USER_QUESTION_TIMEOUT_MS
+      ? deadlineAt
+      : mountedAt + ASK_USER_QUESTION_TIMEOUT_MS;
   const [remainingMs, setRemainingMs] = useState(() => deadline - Date.now());
 
   useEffect(() => {

crates/agent-gui/src/components/chat/AskUserQuestionCard.tsx

@@ -28,10 +28,21 @@ function formatCountdown(remainingMs: number) {
  * 网关参数上的 deadline 盖章），两端与桌面计时同源；缺失时（历史/降级数据）
  * 回退为挂载时刻近似。倒计时归零立即禁止交互，随后 tool_result 把卡片
  * 切到只读态。
+ *
+ * 盖章用的是桌面时钟，而倒计时读本机时钟：远端浏览器时钟偏移足够大时，
+ * 一个仍在挂起的提问会在挂载瞬间就显示过期（或远超完整窗口）。因此仅当
+ * 截止时间落在“挂载时刻（不含）～挂载时刻 + 完整应答窗口（含）”内才采信，
+ * 否则视为时钟不可比、回退挂载近似，避免把可作答的卡片锁死；真正过期的
+ * 提交仍由桌面挂起表权威拒绝。
  */
 function useAnswerCountdown(active: boolean, deadlineAt?: number) {
-  const [fallbackDeadline] = useState(() => Date.now() + ASK_USER_QUESTION_TIMEOUT_MS);
-  const deadline = deadlineAt ?? fallbackDeadline;
+  const [mountedAt] = useState(() => Date.now());
+  const deadline =
+    deadlineAt !== undefined &&
+    deadlineAt > mountedAt &&
+    deadlineAt <= mountedAt + ASK_USER_QUESTION_TIMEOUT_MS
+      ? deadlineAt
+      : mountedAt + ASK_USER_QUESTION_TIMEOUT_MS;
   const [remainingMs, setRemainingMs] = useState(() => deadline - Date.now());
 
   useEffect(() => {

crates/agent-gui/test/chat/ask-user-question-card.test.mjs

@@ -8,6 +8,10 @@ const i18nPath = fileURLToPath(new URL("../../src/i18n/index.ts", import.meta.ur
 const iconsPath = fileURLToPath(new URL("../../src/components/icons/index.ts", import.meta.url));
 const utilsPath = fileURLToPath(new URL("../../src/lib/shared/utils.ts", import.meta.url));
 
+const { ASK_USER_QUESTION_TIMEOUT_MS } = createTsModuleLoader().loadModule(
+  "src/lib/chat/askUserQuestion.ts",
+);
+
 const questions = [
   {
     id: "choice",
@@ -30,6 +34,11 @@ function createHookHarness(initialState = {}) {
     [4, initialState.customTexts ?? {}],
     [5, initialState.submitting ?? false],
   ]);
+  // useAnswerCountdown 的 remainingMs（挂载后由 interval tick 驱动）；
+  // 测试用它模拟“采信的截止时间随后归零”。
+  if (initialState.remainingMs !== undefined) {
+    stateOverrides.set(8, initialState.remainingMs);
+  }
 
   const react = {
     useState(initialValue) {
@@ -146,9 +155,11 @@ test("expired countdown disables options, custom input, and submit before tool_r
   const card = createCardHarness({
     customSelected: { choice: true },
     customTexts: { choice: "My answer" },
+    // 采信的截止时间（挂载时仍在窗口内）随 interval tick 归零。
+    remainingMs: 0,
   });
   const tree = card.render({
-    deadlineAt: Date.now() - 1,
+    deadlineAt: Date.now() + 60_000,
     onSubmit: async () => {
       submitCalls += 1;
       return { ok: true };
@@ -191,6 +202,57 @@ test("expired countdown disables options, custom input, and submit before tool_r
   assert.equal(submitCalls, 0);
 });
 
+// 截止时间由桌面时钟盖章、倒计时读本机时钟：偏移超界时必须回退挂载近似，
+// 不能把仍在挂起的提问卡一挂载就锁死（过期提交由桌面挂起表权威拒绝）。
+test("a deadline already past at mount is distrusted and the pending card stays answerable", async () => {
+  const submitted = [];
+  const card = createCardHarness({ draftSelections: { choice: "Second" } });
+  const tree = card.render({
+    // 本机时钟快于桌面盖章时钟：卡片挂载时截止时间看似早已过去。
+    deadlineAt: Date.now() - 5 * 60 * 1000,
+    onSubmit: async (answers) => {
+      submitted.push(answers);
+      return { ok: true };
+    },
+  });
+
+  const optionButtons = findAll(
+    tree,
+    (node) => node.type === "button" && node.props?.role === "radio",
+  );
+  assert.equal(optionButtons.length, 2);
+  assert.equal(optionButtons.every((button) => button.props.disabled === false), true);
+  const customOption = findAll(
+    tree,
+    (node) => node.type === "div" && node.props?.role === "radio",
+  )[0];
+  assert.equal(customOption.props["aria-disabled"], false);
+
+  const submitButton = findSubmitButton(tree);
+  assert.equal(submitButton.props.disabled, false);
+  submitButton.props.onClick();
+  await flushPromises();
+  assert.equal(submitted.length, 1);
+  assert.equal(submitted[0][0].selectedLabel, "Second");
+});
+
+test("a deadline beyond the full answer window is distrusted and clamps the countdown", () => {
+  const card = createCardHarness();
+  const tree = card.render({
+    // 本机时钟慢于桌面盖章时钟：截止时间看似远超完整应答窗口。
+    deadlineAt: Date.now() + ASK_USER_QUESTION_TIMEOUT_MS + 5 * 60 * 1000,
+    onSubmit: async () => ({ ok: true }),
+  });
+
+  const optionButtons = findAll(
+    tree,
+    (node) => node.type === "button" && node.props?.role === "radio",
+  );
+  assert.equal(optionButtons.every((button) => button.props.disabled === false), true);
+  // 倒计时按挂载近似显示完整窗口，而不是把偏移量当剩余时间。
+  assert.match(treeText(tree), /(?:3:00|2:59) chat\.askUser\.timeoutHint/);
+});
+
 test("a complete answer before the deadline submits the selected non-first option", async () => {
   const submitted = [];
   const card = createCardHarness({ draftSelections: { choice: "Second" } });