[qingnian108]

Follow-up after #747 and #758. This batches several UI/reliability fixes that landed locally after 1.3.1. Community main already has 1.3.2 from #758 (Codex picker reads model_catalog_json), so this bumps packages/agent-console to 1.3.3.

What it does

• Stuck 等待授权. If a permission request is still open when its turn ends, the daemon cancels it. The page only shows “等待授权” when a card still has buttons the user can press, so a finished turn no longer wedges the thread.
• 添加到对话 icon. The popover’s left icon is a speech bubble (outline + three dots) instead of the quote mark that read as garbled.
• Sidebar status dots. A conversation’s dot blinks light/dark while running, turns green after a completed turn, stays red on failure, and amber while waiting for permission.
• Reconnect button. The wrapper’s disconnect / invalid-link end states always offer 重新连接. The last safe Magpie back URL is kept in sessionStorage so a click can still recover when #b= is missing.
• Reconnect on return. Coming back to the page (visibilitychange → visible, or window focus) checks the child at once instead of waiting out timers that were pushed back while hidden. After a 4 s probe (two heartbeats), a silent child is recovered; if an end state is already showing, coming back is the same as clicking Reconnect.

The security model is unchanged: page token (x-agent-console header), Host check, WS hello auth within 5 s. safeBack still only accepts a loopback Magpie plugin page URL.

Tests

• npm run check, npm test: 65 files, 489 passed / 17 skipped (including perm-stuck, acp-perm, threadDot, extra wrapper cases)
• npm run build + verify:build: OK, app/ and daemon/dist committed
• Live check on Linux: killing the daemon while the gate stayed up showed “连接中断，正在重新连接…” and the page recovered in about 7 seconds

@yetone could you take a look when you have time? Thanks!