chatccc 0.2.267 → 0.2.268

package/README.md

@@ -426,11 +426,17 @@ Codex 的默认模型和推理强度可继续由 `~/.codex/config.toml` 管理
 | `/abd<内容>` | 去掉 `/abd` 前缀后把内容发给 Agent，并在消息末尾追加第一性原理需求澄清提示 |
 | `/plan <内容>` | 只读计划模式：仅允许读文件和 stop-stuck-loop 请求，不执行任何写操作 |
 | `/ask <内容>` | 只读问答模式：与 /plan 相同，仅允许读文件和 stop-stuck-loop 请求 |
-| `/restart` | 重启机器人进程 |
-| `/update` | 更新 npm 全局包并重启（仅限 `npm install -g chatccc` 安装的全局进程；同一飞书事件跨重启去重） |
+| `/restart` | 重启机器人进程 |
+| `/restart safe` | 停止接受新任务，等待现有会话、缓存消息和依赖安装完成后重启 |
+| `/update` | 更新 npm 全局包并重启（仅限 `npm install -g chatccc` 安装的全局进程；同一飞书事件跨重启去重） |
+| `/update safe` | 停止接受新任务，排空现有工作后更新并重启 |
+| `/safestatus` | 查看安全重启/更新的等待状态 |
+| `/cancelsf` | 取消尚未开始执行的安全重启/更新预约 |
 | `/deleteg` | 解散当前飞书会话群；Agent 会话记录保留 |
 
-`/update` 会在执行 npm 更新前把飞书消息或按钮事件 ID 原子写入 `~/.chatccc/state/update-command-guard.json`。同一 ID 跨重启重投时会静默忽略；用户主动发送的新 `/update` 因事件 ID 不同，仍可立即执行。该保护仅作用于 `/update`，普通消息与 `/restart` 的处理不变。
+`/update` 与 `/update safe` 会把飞书消息或按钮事件 ID 原子写入 `~/.chatccc/state/update-command-guard.json`。同一 ID 跨重启重投时会静默忽略；用户主动发送的新更新指令因事件 ID 不同，仍可执行。该保护不改变普通消息与重启指令的处理方式。
+
+`/restart safe` 与 `/update safe` 会先建立全局准入门禁：指令到达前已经运行或进入单会话缓存队列的工作会继续完成，之后到达的新普通任务会被提示在维护完成后重发。维护任务持久化到 `~/.chatccc/state/safe-maintenance.json`，进程意外退出后可继续排空；依赖安装、会话收尾、自动恢复和 Agent Teams 执行也计入等待条件。内存缓存随重启自然重建，磁盘会话、看板、图片等持久数据不会被清理。
 
 > **模型切换**：`/model` 查看当前会话 Agent 的可选模型清单，`/model <名称>` 模糊匹配切换，`/model clear` 恢复默认。可选模型来自当前 Agent 的配置：Claude 使用 `claude.model` / `claude.subagentModel`；Cursor、Codex、CCC Agent 和 DSH 使用各自的 `model` / `alternativeModel`。
 

package/dist/src/agent-delegate-task-rpc.js

@@ -3,6 +3,7 @@ import { resolveDefaultAgentTool } from "./config.js";
 import { readUtf8JsonBody } from "./agent-rpc-body.js";
 import { delegateAgentTask } from "./agent-delegate-task.js";
 import { applySharedPrefix } from "./shared-prefix.js";
+import { beginSafeMaintenanceTrackedWork, isSafeMaintenanceAdmissionClosed, } from "./safe-maintenance.js";
 export const AGENT_DELEGATE_TASK_PATH = "/api/agent/delegate-task";
 const MAX_REQUEST_BYTES = 128 * 1024;
 const VALID_TOOLS = new Set(["claude", "cursor", "codex"]);
@@ -83,21 +84,31 @@ export async function handleAgentDelegateTaskRequest(req, res, platform) {
         return true;
     }
     try {
-        const result = await delegateAgentTask({
-            platform,
-            tool,
-            cwd,
-            promptText,
-            openIds,
-            chatNamePrefix: stringValue(payload.chat_name) || promptNamePrefix.slice(0, 10),
-        });
-        jsonReply(res, 200, {
-            ok: true,
-            chat_id: result.chatId,
-            session_id: result.sessionId,
-            tool: result.tool,
-            cwd: result.cwd,
-        });
+        if (isSafeMaintenanceAdmissionClosed()) {
+            jsonReply(res, 409, { ok: false, error: "ChatCCC 正在等待安全维护，暂不接受新的委派任务。" });
+            return true;
+        }
+        const release = beginSafeMaintenanceTrackedWork("agent-delegate-task");
+        try {
+            const result = await delegateAgentTask({
+                platform,
+                tool,
+                cwd,
+                promptText,
+                openIds,
+                chatNamePrefix: stringValue(payload.chat_name) || promptNamePrefix.slice(0, 10),
+            });
+            jsonReply(res, 200, {
+                ok: true,
+                chat_id: result.chatId,
+                session_id: result.sessionId,
+                tool: result.tool,
+                cwd: result.cwd,
+            });
+        }
+        finally {
+            release();
+        }
     }
     catch (err) {
         jsonReply(res, 500, { ok: false, error: err.message });

package/dist/src/agent-team/application/main-agent-service.js

@@ -2,6 +2,7 @@ import { isAgentTool } from "../../agent-tool.js";
 import { sessionChatName } from "../../session-name.js";
 import { isValidFeishuOpenId, } from "../repositories/feishu-p2p-contact-store.js";
 import { BoardStoreError } from "../repositories/board-repository.js";
+import { beginSafeMaintenanceTrackedWork, isSafeMaintenanceAdmissionClosed, } from "../../safe-maintenance.js";
 export class MainAgentService {
     options;
     now;
@@ -17,18 +18,26 @@ export class MainAgentService {
         return this.options.bindingRepository.get(projectId);
     }
     setPrimaryAgent(projectId, agentId, expectedRevision) {
+        if (isSafeMaintenanceAdmissionClosed()) {
+            throw new BoardStoreError("safe_maintenance_draining", "ChatCCC 正在等待安全维护，暂不接受新的主 Agent 设置。", 409);
+        }
         if (!isAgentTool(agentId)) {
             throw new BoardStoreError("invalid_request", `Unsupported primary Agent: ${String(agentId)}`, 400);
         }
+        const release = beginSafeMaintenanceTrackedWork("agent-team-main-agent");
         return this.exclusive(projectId, async () => {
             const board = await this.options.boardService.getBoard(projectId);
             if (board.revision !== expectedRevision) {
                 throw new BoardStoreError("revision_conflict", `Board changed in another page (expected revision ${expectedRevision}, current ${board.revision})`, 409);
             }
             return this.provision(board, agentId, false);
-        });
+        }).finally(release);
     }
     relinkWorkspace(projectId, workspacePath, expectedRevision) {
+        if (isSafeMaintenanceAdmissionClosed()) {
+            throw new BoardStoreError("safe_maintenance_draining", "ChatCCC 正在等待安全维护，暂不接受目录重新关联。", 409);
+        }
+        const release = beginSafeMaintenanceTrackedWork("agent-team-relink");
         return this.exclusive(projectId, async () => {
             const existing = await this.options.bindingRepository.get(projectId);
             const currentSessionId = existing ? (await this.resolveCurrentSession(existing)).sessionId : null;
@@ -39,7 +48,7 @@ export class MainAgentService {
             if (!existing || !board.primaryAgentId)
                 return { board, binding: null };
             return this.provision(board, board.primaryAgentId, true);
-        });
+        }).finally(release);
     }
     async provision(board, agentId, forceNewSession) {
         const existing = await this.options.bindingRepository.get(board.boardId);

package/dist/src/agent-team/application/task-execution-service.js

@@ -1,6 +1,7 @@
 import { randomUUID } from "node:crypto";
 import { isActiveTaskRun } from "../domain/task-run.js";
 import { BoardStoreError } from "../repositories/board-repository.js";
+import { beginSafeMaintenanceTrackedWork, isSafeMaintenanceAdmissionClosed, } from "../../safe-maintenance.js";
 export class TaskExecutionService {
     options;
     now;
@@ -12,10 +13,25 @@ export class TaskExecutionService {
         this.now = options.now ?? (() => new Date());
         this.idFactory = options.idFactory ?? randomUUID;
     }
-    listRuns(projectId) {
-        return this.options.repository.listByProject(projectId);
+    async listRuns(projectId) {
+        const runs = await this.options.repository.listByProject(projectId);
+        return runs.map(withoutTranscript);
+    }
+    async getRun(projectId, runId) {
+        const run = await this.options.repository.get(runId);
+        if (!run || run.projectId !== projectId) {
+            throw new BoardStoreError("task_run_not_found", "找不到这次任务执行记录", 404);
+        }
+        if (!isActiveTaskRun(run) || !this.options.runtime.getTranscript)
+            return run;
+        const live = await this.options.runtime.getTranscript(run.sessionId).catch(() => []);
+        return live.length ? { ...run, transcript: mergeTranscript(run.transcript, live) } : run;
     }
     async startTask(projectId, taskId, expectedRevision) {
+        if (isSafeMaintenanceAdmissionClosed()) {
+            throw new BoardStoreError("safe_maintenance_draining", "ChatCCC 正在等待安全维护，暂不接受新的 Agent Team 任务。", 409);
+        }
+        const release = beginSafeMaintenanceTrackedWork("agent-team-task-start");
         return this.exclusive(projectId, async () => {
             let board = await this.options.boardService.getBoard(projectId);
             const active = (await this.options.repository.listByProject(projectId)).find(isActiveTaskRun);
@@ -54,6 +70,10 @@ export class TaskExecutionService {
                 createdAt: timestamp,
                 updatedAt: timestamp,
             };
+            run = {
+                ...run,
+                transcript: [{ type: "prompt", at: timestamp, text: taskPrompt(run) }],
+            };
             await this.options.repository.save(run);
             try {
                 if (task.columnId !== "doing") {
@@ -80,7 +100,7 @@ export class TaskExecutionService {
                 console.error(`[Agent Team] Task run ${run.runId} failed to persist its terminal state: ${err.message}`);
             });
             return { board, run };
-        });
+        }).finally(release);
     }
     async stopRun(projectId, runId) {
         return this.exclusive(projectId, async () => {
@@ -125,14 +145,15 @@ export class TaskExecutionService {
                 prompt: taskPrompt(run),
             });
             if (result.outcome === "done") {
-                return this.finishRun(run, "succeeded", { result: result.result, moveTask: true });
+                return this.finishRun(run, "succeeded", { result: result.result, transcript: result.transcript, moveTask: true });
             }
             if (result.outcome === "stopped") {
-                return this.finishRun(run, "canceled", { error: result.error, moveTask: true });
+                return this.finishRun(run, "canceled", { error: result.error, transcript: result.transcript, moveTask: true });
             }
             return this.finishRun(run, "failed", {
                 error: result.error || (result.outcome === "auto_ended" ? "Agent response timed out" : "Agent execution failed"),
                 result: result.result,
+                transcript: result.transcript,
                 moveTask: true,
             });
         }
@@ -150,6 +171,7 @@ export class TaskExecutionService {
             state,
             updatedAt: now,
             finishedAt: now,
+            ...(details.transcript?.length ? { transcript: mergeTranscript(latest.transcript, details.transcript) } : {}),
             ...(details.result ? { result: details.result } : {}),
             ...(details.error ? { error: details.error } : {}),
         };
@@ -195,6 +217,13 @@ export class TaskExecutionService {
         }
     }
 }
+function mergeTranscript(existing, appended) {
+    return [...(existing ?? []), ...appended];
+}
+function withoutTranscript(run) {
+    const { transcript: _transcript, ...summary } = run;
+    return summary;
+}
 function taskPrompt(run) {
     return [
         "你正在执行 Agent Team 看板中的一个明确任务。请在当前工作目录完成任务，进行必要验证，并用简洁结果说明完成内容。",

package/dist/src/agent-team/domain/task-run.js

@@ -1,4 +1,5 @@
 import { isAgentTool } from "../../agent-tool.js";
+import { isExecutionTranscriptEntry } from "../../execution-transcript.js";
 export const TASK_RUN_SCHEMA_VERSION = 1;
 export function isActiveTaskRun(run) {
     return run.state === "queued" || run.state === "running";
@@ -25,5 +26,8 @@ export function parseTaskRun(value) {
         if (run[field] !== undefined && typeof run[field] !== "string")
             throw new Error(`Invalid task run ${field}`);
     }
+    if (run.transcript !== undefined && (!Array.isArray(run.transcript) || !run.transcript.every(isExecutionTranscriptEntry))) {
+        throw new Error("Invalid task run transcript");
+    }
     return run;
 }

package/dist/src/agent-team/http/board-routes.js

@@ -109,6 +109,12 @@ export function createAgentTeamRequestHandler(options) {
                 jsonReply(res, 200, { ok: true, runs });
                 return true;
             }
+            const runDetailMatch = pathname.match(/^\/api\/agent-team\/boards\/([^/]+)\/runs\/([^/]+)$/);
+            if (runDetailMatch && method === "GET") {
+                const run = await requireTaskExecutionService(taskExecutionService()).getRun(decodeURIComponent(runDetailMatch[1]), decodeURIComponent(runDetailMatch[2]));
+                jsonReply(res, 200, { ok: true, run });
+                return true;
+            }
             const runTaskMatch = pathname.match(/^\/api\/agent-team\/boards\/([^/]+)\/tasks\/([^/]+)\/run$/);
             if (runTaskMatch && method === "POST") {
                 const body = await bodyJson(req);

package/dist/src/agent-team/infrastructure/task-execution-runtime.js

@@ -11,10 +11,14 @@ export function createTaskExecutionRuntime(platform) {
             }
             return {
                 outcome,
+                ...(stream?.transcript?.length ? { transcript: stream.transcript } : {}),
                 ...(stream?.finalReply ? { result: stream.finalReply } : {}),
                 ...(stream?.terminalError?.message ? { error: stream.terminalError.message } : {}),
             };
         },
+        async getTranscript(sessionId) {
+            return (await readStreamState(sessionId))?.transcript ?? [];
+        },
         stop: stopSession,
         isSessionRunning,
     };

package/dist/src/agent-team/web/agent-team-page.js

@@ -14,9 +14,9 @@ export const AGENT_TEAM_PAGE_HTML = `<!DOCTYPE html>
 .status-row{display:flex;align-items:center;justify-content:space-between;gap:12px;margin:0 3px 10px;color:var(--muted);font-size:11px}.workspace-name{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.save-state{min-width:78px;text-align:right;color:var(--success);font-weight:700}.save-state::before{content:"● ";font-size:9px}.save-state.saving{color:#b7791f}.save-state.error{color:var(--danger)}
 .board-scroll{overflow-x:auto;padding-bottom:12px}.board{display:grid;grid-template-columns:repeat(5,minmax(230px,1fr));gap:11px;min-width:1200px}.column{display:flex;flex-direction:column;min-height:calc(100vh - 230px);background:var(--soft);border:1px solid var(--line);border-radius:15px;overflow:hidden}.column.drag-over{border-color:var(--accent);box-shadow:0 0 0 3px rgba(103,88,232,.13)}.column-head{display:flex;align-items:center;gap:8px;padding:11px 10px 7px 13px}.column-dot{width:7px;height:7px;border-radius:50%;background:var(--accent)}.column-title{font-size:13px;font-weight:800}.count{margin-left:auto;display:inline-grid;place-items:center;min-width:23px;height:23px;padding:0 7px;border-radius:999px;background:var(--panel);border:1px solid var(--line);color:var(--muted);font-size:10px}.column-add{width:27px;height:27px;display:grid;place-items:center;padding:0;border-color:transparent;border-radius:8px;background:transparent;color:var(--muted);font-size:19px;font-weight:500;line-height:1}.column-add:hover{border-color:var(--line);background:var(--panel);color:var(--accent)}.task-list{flex:1;min-height:100px;padding:4px 10px 10px}.task{position:relative;background:var(--panel2);border:1px solid var(--line);border-radius:11px;padding:12px;margin:8px 0;box-shadow:0 4px 15px rgba(34,42,65,.045);cursor:pointer}.task:hover{border-color:#d1d5e1;box-shadow:0 8px 22px rgba(34,42,65,.08)}.task.dragging{opacity:.35;cursor:grabbing}.task h3{font-size:13px;line-height:1.45;margin:0 42px 6px 0}.task p{font-size:11px;line-height:1.55;color:var(--muted);margin:0;white-space:pre-wrap;display:-webkit-box;-webkit-line-clamp:4;-webkit-box-orient:vertical;overflow:hidden}.task-actions{display:flex;gap:4px;position:absolute;right:7px;top:7px;opacity:0;transition:opacity .15s}.task:hover .task-actions,.task:focus-within .task-actions{opacity:1}.icon-btn{padding:3px 6px;border-radius:6px;background:var(--soft);color:var(--muted);font-size:10px}.empty{padding:20px 8px;text-align:center;color:#9aa3b4;font-size:11px}
 .task.running{cursor:default;border-color:#cfc8ff}.task-run{margin-top:10px;padding-top:9px;border-top:1px solid var(--line)}.task-run-head{display:flex;align-items:center;justify-content:space-between;gap:7px}.run-status{font-size:10px;font-weight:800;color:var(--muted)}.run-status.running,.run-status.queued{color:var(--accent)}.run-status.succeeded{color:var(--success)}.run-status.failed,.run-status.interrupted{color:var(--danger)}.run-result{margin-top:6px!important;padding:7px 8px;border-radius:7px;background:var(--soft);display:-webkit-box!important;-webkit-line-clamp:3!important}.run-button{padding:5px 8px;font-size:10px;border-radius:7px}.run-button.primary{box-shadow:none}
-.modal-backdrop{position:fixed;inset:0;z-index:20;background:rgba(24,32,51,.36);display:grid;place-items:center;padding:20px;backdrop-filter:blur(3px)}.modal{width:min(560px,100%);background:var(--panel);border:1px solid var(--line);border-radius:16px;padding:20px;box-shadow:0 28px 90px rgba(35,43,65,.24)}.modal h2{margin:0 0 16px}.field{display:grid;gap:7px;margin-bottom:14px}.field label{font-size:13px;color:var(--text);font-weight:650}.field textarea{min-height:150px;resize:vertical}.modal-actions{display:flex;justify-content:flex-end;gap:9px}.directory-modal{width:min(820px,100%)}.directory-layout{display:grid;grid-template-columns:180px minmax(0,1fr);min-height:430px;border:1px solid var(--line);border-radius:12px;overflow:hidden;margin-bottom:16px}.directory-sidebar{padding:12px;background:var(--soft);border-right:1px solid var(--line)}.directory-label{margin:2px 6px 9px;color:var(--muted);font-size:11px;font-weight:800;letter-spacing:.05em}.directory-locations{display:grid;gap:4px}.directory-location{width:100%;padding:8px 9px;border:0;background:transparent;text-align:left;font-size:12px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.directory-location:hover{border:0;background:var(--accent-soft);color:var(--accent)}.directory-main{min-width:0;display:flex;flex-direction:column;padding:12px}.directory-toolbar{display:grid;grid-template-columns:auto auto minmax(0,1fr);gap:7px}.directory-toolbar button{padding:8px 11px}.directory-toolbar input{min-width:0;padding:8px 10px}.directory-list{flex:1;height:310px;overflow:auto;margin-top:10px;border:1px solid var(--line);border-radius:10px;background:var(--soft);padding:6px}.directory-row{width:100%;display:flex;align-items:center;gap:9px;padding:9px 10px;border:0;background:transparent;text-align:left;font-size:12px}.directory-row:hover{border:0;background:#fff}.directory-row.selected{border:0;background:var(--accent-soft);color:var(--accent)}.directory-folder-icon{color:#b7791f;font-size:15px}.directory-empty{padding:46px 16px;text-align:center;color:var(--muted);font-size:12px}.directory-footer{display:flex;align-items:center;justify-content:space-between;gap:12px;margin-top:10px;color:var(--muted);font-size:11px}.directory-footer label{display:flex;align-items:center;gap:6px;white-space:nowrap}.directory-footer input{width:15px;height:15px;margin:0}.directory-selected{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;text-align:right}.toast{position:fixed;right:22px;bottom:22px;z-index:30;max-width:min(420px,calc(100vw - 44px));padding:12px 15px;border-radius:10px;background:#253047;color:#fff;border:1px solid #35415a;box-shadow:0 16px 50px rgba(35,43,65,.25)}.toast.error{border-color:#ef9bad;background:#9f2942}
+.modal-backdrop{position:fixed;inset:0;z-index:20;background:rgba(24,32,51,.36);display:grid;place-items:center;padding:20px;backdrop-filter:blur(3px)}.modal{width:min(560px,100%);background:var(--panel);border:1px solid var(--line);border-radius:16px;padding:20px;box-shadow:0 28px 90px rgba(35,43,65,.24)}.modal h2{margin:0 0 16px}.field{display:grid;gap:7px;margin-bottom:14px}.field label{font-size:13px;color:var(--text);font-weight:650}.field textarea{min-height:150px;resize:vertical}.modal-actions{display:flex;justify-content:flex-end;gap:9px}.task-detail-modal{width:min(980px,100%);max-height:calc(100vh - 40px);padding:0;display:flex;flex-direction:column;overflow:hidden}.task-detail-scroll{min-height:0;overflow-y:auto;padding:22px 24px}.task-detail-modal>.modal-actions{flex:none;padding:14px 24px;border-top:1px solid var(--line);background:var(--panel)}.task-execution-details{margin-top:22px;padding-top:20px;border-top:1px solid var(--line)}.task-execution-title{display:flex;align-items:center;justify-content:space-between;gap:12px;margin-bottom:12px}.task-execution-title h3{margin:0;font-size:16px}.run-meta{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:8px;margin-bottom:14px}.run-meta-item{padding:9px 10px;border:1px solid var(--line);border-radius:9px;background:var(--soft);min-width:0}.run-meta-item span{display:block;color:var(--muted);font-size:10px;margin-bottom:4px}.run-meta-item strong{display:block;font-size:11px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.execution-timeline{display:grid;gap:9px}.timeline-entry{border:1px solid var(--line);border-radius:10px;background:var(--soft);overflow:hidden}.timeline-entry.tool_use{border-left:3px solid var(--accent)}.timeline-entry.tool_result{border-left:3px solid var(--success)}.timeline-entry.error{border-left-color:var(--danger)}.timeline-head{display:flex;justify-content:space-between;gap:12px;padding:8px 10px;border-bottom:1px solid var(--line);color:var(--muted);font-size:10px;font-weight:800}.timeline-entry pre{margin:0;padding:11px 12px;max-height:none;overflow:visible;white-space:pre-wrap;overflow-wrap:anywhere;font:11px/1.65 ui-monospace,SFMono-Regular,Consolas,monospace;color:var(--text)}.timeline-empty{padding:22px;border:1px dashed var(--line);border-radius:10px;text-align:center;color:var(--muted);font-size:12px}.directory-modal{width:min(820px,100%)}.directory-layout{display:grid;grid-template-columns:180px minmax(0,1fr);min-height:430px;border:1px solid var(--line);border-radius:12px;overflow:hidden;margin-bottom:16px}.directory-sidebar{padding:12px;background:var(--soft);border-right:1px solid var(--line)}.directory-label{margin:2px 6px 9px;color:var(--muted);font-size:11px;font-weight:800;letter-spacing:.05em}.directory-locations{display:grid;gap:4px}.directory-location{width:100%;padding:8px 9px;border:0;background:transparent;text-align:left;font-size:12px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.directory-location:hover{border:0;background:var(--accent-soft);color:var(--accent)}.directory-main{min-width:0;display:flex;flex-direction:column;padding:12px}.directory-toolbar{display:grid;grid-template-columns:auto auto minmax(0,1fr);gap:7px}.directory-toolbar button{padding:8px 11px}.directory-toolbar input{min-width:0;padding:8px 10px}.directory-list{flex:1;height:310px;overflow:auto;margin-top:10px;border:1px solid var(--line);border-radius:10px;background:var(--soft);padding:6px}.directory-row{width:100%;display:flex;align-items:center;gap:9px;padding:9px 10px;border:0;background:transparent;text-align:left;font-size:12px}.directory-row:hover{border:0;background:#fff}.directory-row.selected{border:0;background:var(--accent-soft);color:var(--accent)}.directory-folder-icon{color:#b7791f;font-size:15px}.directory-empty{padding:46px 16px;text-align:center;color:var(--muted);font-size:12px}.directory-footer{display:flex;align-items:center;justify-content:space-between;gap:12px;margin-top:10px;color:var(--muted);font-size:11px}.directory-footer label{display:flex;align-items:center;gap:6px;white-space:nowrap}.directory-footer input{width:15px;height:15px;margin:0}.directory-selected{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;text-align:right}.toast{position:fixed;right:22px;bottom:22px;z-index:30;max-width:min(420px,calc(100vw - 44px));padding:12px 15px;border-radius:10px;background:#253047;color:#fff;border:1px solid #35415a;box-shadow:0 16px 50px rgba(35,43,65,.25)}.toast.error{border-color:#ef9bad;background:#9f2942}
 @media(max-width:1100px){.app-shell{grid-template-columns:78px minmax(0,1fr)}.sidebar{padding:22px 12px;align-items:center}.brand span:last-child,.nav-item span:last-child,.side-note{display:none}.nav-item{width:45px;height:45px;justify-content:center;padding:0}.workspace-bar{grid-template-columns:1fr 1fr}.workspace-bar input{grid-column:1/-1}.main-agent-bar{grid-template-columns:1fr}.main-agent-controls{justify-content:flex-end}.board{min-width:1200px}}
-@media(max-width:700px){.app-shell{display:block}.sidebar{display:none}.shell{padding:14px}.top{align-items:flex-start}.workspace-bar{grid-template-columns:1fr}.workspace-bar input{grid-column:auto}.main-agent-controls{display:grid;grid-template-columns:minmax(0,1fr) auto;justify-content:stretch}.main-agent-controls select{min-width:0}.board{min-width:1180px}.directory-layout{grid-template-columns:1fr}.directory-sidebar{border-right:0;border-bottom:1px solid var(--line)}.directory-locations{display:flex;overflow-x:auto}.directory-location{width:auto;min-width:max-content}.directory-toolbar{grid-template-columns:auto auto 1fr}.directory-list{height:270px}}
+@media(max-width:700px){.app-shell{display:block}.sidebar{display:none}.shell{padding:14px}.top{align-items:flex-start}.workspace-bar{grid-template-columns:1fr}.workspace-bar input{grid-column:auto}.main-agent-controls{display:grid;grid-template-columns:minmax(0,1fr) auto;justify-content:stretch}.main-agent-controls select{min-width:0}.board{min-width:1180px}.task-detail-scroll{padding:18px}.task-detail-modal>.modal-actions{padding:12px 18px}.run-meta{grid-template-columns:repeat(2,minmax(0,1fr))}.directory-layout{grid-template-columns:1fr}.directory-sidebar{border-right:0;border-bottom:1px solid var(--line)}.directory-locations{display:flex;overflow-x:auto}.directory-location{width:auto;min-width:max-content}.directory-toolbar{grid-template-columns:auto auto 1fr}.directory-list{height:270px}}
 </style>
 </head>
 <body>
@@ -53,11 +53,18 @@ export const AGENT_TEAM_PAGE_HTML = `<!DOCTYPE html>
 </main>
 </div>
 <div id="modal" class="modal-backdrop hidden" role="dialog" aria-modal="true">
-  <form class="modal" id="task-form">
-    <h2 id="modal-title">添加任务</h2>
-    <div class="field"><label for="task-title">标题</label><input id="task-title" maxlength="200" required></div>
-    <div class="field"><label for="task-description">描述</label><textarea id="task-description" maxlength="20000"></textarea></div>
-    <div class="modal-actions"><button type="button" id="cancel" class="ghost">取消</button><button type="submit" class="primary">保存</button></div>
+  <form class="modal task-detail-modal" id="task-form">
+    <div class="task-detail-scroll">
+      <h2 id="modal-title">添加任务</h2>
+      <div class="field"><label for="task-title">标题</label><input id="task-title" maxlength="200" required></div>
+      <div class="field"><label for="task-description">描述</label><textarea id="task-description" maxlength="20000"></textarea></div>
+      <section id="task-execution-details" class="task-execution-details hidden">
+        <div class="task-execution-title"><h3>完整执行过程</h3><span id="task-run-status" class="run-status"></span></div>
+        <div id="task-run-meta" class="run-meta"></div>
+        <div id="task-transcript" class="execution-timeline"></div>
+      </section>
+    </div>
+    <div class="modal-actions"><button type="button" id="cancel" class="ghost">取消</button><button type="submit" id="task-save" class="primary">保存</button></div>
   </form>
 </div>
 <div id="dm-modal" class="modal-backdrop hidden" role="dialog" aria-modal="true" aria-labelledby="dm-modal-title">
@@ -100,7 +107,7 @@ export const AGENT_TEAM_PAGE_HTML = `<!DOCTYPE html>
 <div id="toast" class="toast hidden"></div>
 <script>
 (function(){
-  var state={board:null,binding:null,runs:[],runPollTimer:null,runPollBusy:false,workspaces:[],agentOptions:[],dragTaskId:null,modalTaskId:null,modalColumnId:null,relinkBoardId:null,pendingAgentId:null,pendingWorkspacePath:null,workspaceSelectionVersion:0,directoryLocations:[],directoryPath:null,directoryParentPath:null,directorySelectedPath:null,directoryBrowseVersion:0,contactTimer:null,contactChecking:false,mutationQueue:Promise.resolve()};
+  var state={board:null,binding:null,runs:[],runPollTimer:null,runPollBusy:false,workspaces:[],agentOptions:[],dragTaskId:null,modalTaskId:null,modalColumnId:null,modalDetailVersion:0,relinkBoardId:null,pendingAgentId:null,pendingWorkspacePath:null,workspaceSelectionVersion:0,directoryLocations:[],directoryPath:null,directoryParentPath:null,directorySelectedPath:null,directoryBrowseVersion:0,contactTimer:null,contactChecking:false,mutationQueue:Promise.resolve()};
   var columns=['brainstorm','todo','doing','done','on_hold'];
   var recent=document.getElementById('recent');
   var pathInput=document.getElementById('workspace-path');
@@ -165,7 +172,7 @@ export const AGENT_TEAM_PAGE_HTML = `<!DOCTYPE html>
   function isActiveRun(run){return !!run&&(run.state==='queued'||run.state==='running');}
   function runLabel(run){var labels={queued:'等待执行',running:run.stopRequestedAt?'正在停止':'主 Agent 执行中',succeeded:'执行成功',failed:'执行失败',canceled:'已停止',interrupted:'重启时中断'};return labels[run.state]||run.state;}
   function scheduleRunPoll(){if(state.runPollTimer){clearTimeout(state.runPollTimer);state.runPollTimer=null;}if(!state.runs.some(isActiveRun))return;state.runPollTimer=setTimeout(pollRuns,1500);}
-  async function pollRuns(){if(state.runPollBusy||!state.board)return scheduleRunPoll();state.runPollBusy=true;var boardId=state.board.boardId;try{var results=await Promise.all([api('/api/agent-team/boards/'+encodeURIComponent(boardId)),api('/api/agent-team/boards/'+encodeURIComponent(boardId)+'/runs')]);if(state.board&&state.board.boardId===boardId){state.board=results[0].board;state.binding=results[0].binding||null;state.runs=results[1].runs||[];renderBoard();if(!state.runs.some(isActiveRun))setSaving('已保存','');}}catch(error){toast(error.message,true);}finally{state.runPollBusy=false;scheduleRunPoll();}}
+  async function pollRuns(){if(state.runPollBusy||!state.board)return scheduleRunPoll();state.runPollBusy=true;var boardId=state.board.boardId;try{var results=await Promise.all([api('/api/agent-team/boards/'+encodeURIComponent(boardId)),api('/api/agent-team/boards/'+encodeURIComponent(boardId)+'/runs')]);if(state.board&&state.board.boardId===boardId){state.board=results[0].board;state.binding=results[0].binding||null;state.runs=results[1].runs||[];renderBoard();if(state.modalTaskId)await loadOpenTaskRunDetails(false);if(!state.runs.some(isActiveRun))setSaving('已保存','');}}catch(error){toast(error.message,true);}finally{state.runPollBusy=false;scheduleRunPoll();}}
   async function startTaskRun(task){if(!state.board)return;if(!state.binding||state.binding.status!=='ready')return toast('请先设置可用的主 Agent',true);try{setSaving('正在交给主 Agent…','saving');var result=await request('POST','/api/agent-team/boards/'+encodeURIComponent(state.board.boardId)+'/tasks/'+encodeURIComponent(task.id)+'/run',{expectedRevision:state.board.revision});state.board=result.board;state.runs=[result.run].concat(state.runs.filter(function(run){return run.runId!==result.run.runId;}));renderBoard();scheduleRunPoll();setSaving('任务执行中','saving');}catch(error){if(error.code==='revision_conflict')await reloadBoard();toast(error.message,true);setSaving('执行失败','error');}}
   async function stopTaskRun(run){if(!state.board)return;try{var result=await request('POST','/api/agent-team/boards/'+encodeURIComponent(state.board.boardId)+'/runs/'+encodeURIComponent(run.runId)+'/stop',{});state.runs=state.runs.map(function(item){return item.runId===result.run.runId?result.run:item;});renderBoard();scheduleRunPoll();toast('已请求主 Agent 停止任务');}catch(error){toast(error.message,true);}}
   function activeTasks(columnId){return state.board?state.board.tasks.filter(function(task){return !task.deletedAt&&task.columnId===columnId;}).sort(function(a,b){return a.order-b.order;}):[];}
@@ -176,9 +183,9 @@ export const AGENT_TEAM_PAGE_HTML = `<!DOCTYPE html>
       if(!tasks.length){var empty=document.createElement('div');empty.className='empty';empty.textContent='暂无任务';list.appendChild(empty);}
       tasks.forEach(function(task){var run=latestRun(task.id);var active=isActiveRun(run);var dragged=false;var card=document.createElement('article');card.className='task'+(active?' running':'');card.draggable=!active;card.dataset.taskId=task.id;
         var title=document.createElement('h3');title.textContent=task.title;card.appendChild(title);if(task.description){var desc=document.createElement('p');desc.textContent=task.description;card.appendChild(desc);}
-        var actions=document.createElement('div');actions.className='task-actions';var edit=document.createElement('button');edit.type='button';edit.className='icon-btn';edit.textContent='编辑';edit.disabled=active;edit.addEventListener('click',function(event){event.stopPropagation();showEdit(task);});var del=document.createElement('button');del.type='button';del.className='icon-btn';del.textContent='删除';del.disabled=active;del.addEventListener('click',function(event){event.stopPropagation();removeTask(task);});actions.append(edit,del);card.appendChild(actions);
+        var actions=document.createElement('div');actions.className='task-actions';var edit=document.createElement('button');edit.type='button';edit.className='icon-btn';edit.textContent='编辑';edit.addEventListener('click',function(event){event.stopPropagation();showEdit(task);});var del=document.createElement('button');del.type='button';del.className='icon-btn';del.textContent='删除';del.disabled=active;del.addEventListener('click',function(event){event.stopPropagation();removeTask(task);});actions.append(edit,del);card.appendChild(actions);
         var runBox=document.createElement('div');runBox.className='task-run';var runHead=document.createElement('div');runHead.className='task-run-head';var status=document.createElement('span');status.className='run-status '+(run?run.state:'');status.textContent=run?runLabel(run)+(run.attempt>1?' · 第 '+run.attempt+' 次':''):'尚未执行';var runButton=document.createElement('button');runButton.type='button';runButton.className='run-button '+(!run||!active?'primary':'danger');runButton.textContent=active?'停止':(run?'重试':'交给主 Agent');runButton.addEventListener('click',function(event){event.stopPropagation();if(active)stopTaskRun(run);else startTaskRun(task);});runHead.append(status,runButton);runBox.appendChild(runHead);if(run&&(run.result||run.error)){var resultText=document.createElement('p');resultText.className='run-result';resultText.textContent=run.error||run.result;runBox.appendChild(resultText);}card.appendChild(runBox);
-        card.addEventListener('click',function(){if(!active&&!dragged)showEdit(task);});card.addEventListener('dragstart',function(event){if(active){event.preventDefault();return;}dragged=true;state.dragTaskId=task.id;card.classList.add('dragging');event.dataTransfer.effectAllowed='move';});card.addEventListener('dragend',function(){state.dragTaskId=null;card.classList.remove('dragging');document.querySelectorAll('.column').forEach(function(el){el.classList.remove('drag-over');});setTimeout(function(){dragged=false;},0);});list.appendChild(card);
+        card.addEventListener('click',function(){if(!dragged)showEdit(task);});card.addEventListener('dragstart',function(event){if(active){event.preventDefault();return;}dragged=true;state.dragTaskId=task.id;card.classList.add('dragging');event.dataTransfer.effectAllowed='move';});card.addEventListener('dragend',function(){state.dragTaskId=null;card.classList.remove('dragging');document.querySelectorAll('.column').forEach(function(el){el.classList.remove('drag-over');});setTimeout(function(){dragged=false;},0);});list.appendChild(card);
       });
     });
   }
@@ -201,9 +208,16 @@ export const AGENT_TEAM_PAGE_HTML = `<!DOCTYPE html>
     if(!state.board||!agentId)return;state.pendingAgentId=agentId;
     state.mutationQueue=state.mutationQueue.then(async function(){setSaving('创建主 Agent…','saving');mainAgentButton.disabled=true;try{var result=await request('POST','/api/agent-team/boards/'+encodeURIComponent(state.board.boardId)+'/main-agent',{expectedRevision:state.board.revision,agentId:agentId});state.board=result.board;state.binding=result.binding;state.pendingAgentId=null;renderBoard();setSaving('已保存','');toast('主 Agent 群已就绪');return true;}catch(error){setSaving('设置失败','error');renderBoard();if(error.code==='feishu_dm_required')showDmModal();else if(error.code==='revision_conflict'){try{await reloadBoard();toast('其他页面修改了项目，已载入最新版本',true);}catch(reloadError){toast(reloadError.message,true);}}else toast(error.message,true);return false;}});return state.mutationQueue;
   }
-  function showCreate(columnId){if(!state.board)return toast('请先打开一个工作目录',true);state.modalTaskId=null;state.modalColumnId=columnId;document.getElementById('modal-title').textContent='添加任务';document.getElementById('task-title').value='';document.getElementById('task-description').value='';document.getElementById('modal').classList.remove('hidden');setTimeout(function(){document.getElementById('task-title').focus();},0);}
-  function showEdit(task){state.modalTaskId=task.id;state.modalColumnId=task.columnId;document.getElementById('modal-title').textContent='编辑任务';document.getElementById('task-title').value=task.title;document.getElementById('task-description').value=task.description;document.getElementById('modal').classList.remove('hidden');}
-  function closeModal(){document.getElementById('modal').classList.add('hidden');state.modalTaskId=null;}
+  function formatRunTime(value){if(!value)return '—';var date=new Date(value);return Number.isNaN(date.getTime())?String(value):date.toLocaleString();}
+  function addRunMeta(root,label,value){var item=document.createElement('div');item.className='run-meta-item';var key=document.createElement('span');key.textContent=label;var content=document.createElement('strong');content.textContent=value||'—';content.title=value||'—';item.append(key,content);root.appendChild(item);}
+  function transcriptLabel(entry){var labels={prompt:'任务指令',thinking:'思考',text:'主 Agent 回复',tool_use:'调用工具',tool_result:'工具结果',search:'联网搜索',compact:'上下文压缩',status:'状态变化',notice:'提示'};var label=labels[entry.type]||entry.type;if(entry.name)label+=' · '+entry.name;return label;}
+  function transcriptContent(entry){if(entry.type==='tool_use')return entry.input||'';if(entry.type==='tool_result')return entry.output||'';return entry.text||'';}
+  function addTranscriptEntry(root,entry){var row=document.createElement('article');row.className='timeline-entry '+entry.type+(entry.isError?' error':'');var head=document.createElement('div');head.className='timeline-head';var label=document.createElement('span');label.textContent=transcriptLabel(entry);var time=document.createElement('span');time.textContent=formatRunTime(entry.at);head.append(label,time);var body=document.createElement('pre');body.textContent=transcriptContent(entry)||'（无文本内容）';row.append(head,body);root.appendChild(row);}
+  function renderTaskExecution(task,run){var details=document.getElementById('task-execution-details');var title=document.getElementById('task-title');var description=document.getElementById('task-description');var save=document.getElementById('task-save');var cancel=document.getElementById('cancel');var active=isActiveRun(run);title.disabled=active;description.disabled=active;save.classList.toggle('hidden',active);cancel.textContent=active?'关闭':'取消';details.classList.remove('hidden');var status=document.getElementById('task-run-status');status.className='run-status '+(run?run.state:'');status.textContent=run?runLabel(run):'尚未执行';var meta=document.getElementById('task-run-meta');meta.innerHTML='';if(run){addRunMeta(meta,'执行次数','第 '+run.attempt+' 次');addRunMeta(meta,'执行 Agent',run.agentId);addRunMeta(meta,'开始时间',formatRunTime(run.startedAt||run.createdAt));addRunMeta(meta,'结束时间',formatRunTime(run.finishedAt));}else{addRunMeta(meta,'任务状态','尚未交给主 Agent');addRunMeta(meta,'创建时间',formatRunTime(task.createdAt));addRunMeta(meta,'更新时间',formatRunTime(task.updatedAt));}var transcript=document.getElementById('task-transcript');transcript.innerHTML='';var entries=run&&Array.isArray(run.transcript)?run.transcript.slice():[];var hasText=entries.some(function(entry){return entry.type==='text';});if(run&&run.result&&!hasText)entries.push({type:'text',at:run.finishedAt||run.updatedAt,text:run.result});if(run&&run.error)entries.push({type:'notice',at:run.finishedAt||run.updatedAt,text:run.error,isError:true});if(!entries.length){var empty=document.createElement('div');empty.className='timeline-empty';empty.textContent=run?'暂时还没有可显示的执行事件':'任务尚未执行，交给主 Agent 后会在这里记录完整过程。';transcript.appendChild(empty);return;}entries.forEach(function(entry){addTranscriptEntry(transcript,entry);});}
+  async function loadOpenTaskRunDetails(showError){if(!state.board||!state.modalTaskId)return;var task=state.board.tasks.find(function(candidate){return candidate.id===state.modalTaskId&&!candidate.deletedAt;});if(!task)return;var summary=latestRun(task.id);if(!summary){renderTaskExecution(task,null);return;}var version=++state.modalDetailVersion;try{var result=await api('/api/agent-team/boards/'+encodeURIComponent(state.board.boardId)+'/runs/'+encodeURIComponent(summary.runId));if(version!==state.modalDetailVersion||state.modalTaskId!==task.id)return;renderTaskExecution(task,result.run);}catch(error){if(showError!==false)toast(error.message,true);}}
+  function showCreate(columnId){if(!state.board)return toast('请先打开一个工作目录',true);state.modalTaskId=null;state.modalColumnId=columnId;document.getElementById('modal-title').textContent='添加任务';document.getElementById('task-title').value='';document.getElementById('task-description').value='';document.getElementById('task-title').disabled=false;document.getElementById('task-description').disabled=false;document.getElementById('task-save').classList.remove('hidden');document.getElementById('cancel').textContent='取消';document.getElementById('task-execution-details').classList.add('hidden');document.getElementById('modal').classList.remove('hidden');setTimeout(function(){document.getElementById('task-title').focus();},0);}
+  function showEdit(task){state.modalTaskId=task.id;state.modalColumnId=task.columnId;document.getElementById('modal-title').textContent='任务详情';document.getElementById('task-title').value=task.title;document.getElementById('task-description').value=task.description;renderTaskExecution(task,latestRun(task.id));document.getElementById('modal').classList.remove('hidden');loadOpenTaskRunDetails(true);}
+  function closeModal(){state.modalDetailVersion++;document.getElementById('modal').classList.add('hidden');state.modalTaskId=null;}
   function removeTask(task){if(!confirm('删除任务“'+task.title+'”？'))return;mutate(function(){return request('DELETE','/api/agent-team/boards/'+encodeURIComponent(state.board.boardId)+'/tasks/'+encodeURIComponent(task.id),{expectedRevision:state.board.revision});});}
 
   document.querySelectorAll('[data-add]').forEach(function(button){button.addEventListener('click',function(){showCreate(button.dataset.add);});});

package/dist/src/cards.js

@@ -143,7 +143,10 @@ export function buildHelpCard(userText, opts = {}) {
         "发送 **/ask** 以问答模式提问（只读，不执行写操作）",
         "发送 **/usage** 查看当前 Agent 的用量或余额",
         "发送 **/restart** 重启 ChatCCC 进程",
+        "发送 **/restart safe** 等待现有任务完成后安全重启",
         "发送 **/update** 更新并重启（仅 npm 全局安装可用）",
+        "发送 **/update safe** 等待现有任务完成后安全更新",
+        "发送 **/safestatus** 查看安全维护状态，**/cancelsf** 取消等待中的预约",
         ABD_HELP_LINE,
     ].join("\n");
     return JSON.stringify({

package/dist/src/engines/engine-manager.js

@@ -4,6 +4,7 @@ import { existsSync } from "node:fs";
 import { mkdir, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { delimiter, dirname, join, relative, resolve } from "node:path";
+import { isSafeMaintenanceAdmissionClosed } from "../safe-maintenance.js";
 const STEP_DEFINITIONS = [
     ["preflight", "检查运行环境"],
     ["prepare", "准备临时目录"],
@@ -100,6 +101,9 @@ export class EngineManager {
     listSpecs() {
         return [...this.specs.values()];
     }
+    getActiveInstallIds() {
+        return [...this.activeInstalls.keys()].sort();
+    }
     getSpec(engineId) {
         const spec = this.specs.get(engineId);
         if (!spec)
@@ -133,6 +137,9 @@ export class EngineManager {
         const running = this.activeInstalls.get(engineId);
         if (running)
             return this.readJob(this.getSpec(engineId)).then((job) => job ?? this.newJob(this.getSpec(engineId)));
+        if (isSafeMaintenanceAdmissionClosed()) {
+            throw new Error("ChatCCC 正在等待安全维护，暂不接受新的依赖安装任务。");
+        }
         const spec = this.getSpec(engineId);
         const job = this.newJob(spec);
         await this.persistJob(spec, job);

package/dist/src/execution-transcript.js

@@ -0,0 +1,110 @@
+export function appendExecutionTranscriptBlock(block, state, at = new Date().toISOString()) {
+    switch (block.type) {
+        case "text_reset":
+            state.transcript = [];
+            return;
+        case "text":
+            appendText(state, block.text, at);
+            return;
+        case "text_final":
+            // Some adapters emit both deltas and an authoritative final snapshot. Keep the
+            // ordered deltas when present, otherwise retain the snapshot as the full reply.
+            if (!state.transcript.some((entry) => entry.type === "text"))
+                appendText(state, block.text, at);
+            return;
+        case "thinking":
+            appendEntry(state, { type: "thinking", at, text: block.thinking });
+            return;
+        case "tool_use":
+            appendEntry(state, {
+                type: "tool_use",
+                at,
+                name: block.name,
+                ...(block.id ? { toolUseId: block.id } : {}),
+                input: stringifyTranscriptValue(block.input),
+            });
+            return;
+        case "tool_result":
+            appendEntry(state, {
+                type: "tool_result",
+                at,
+                ...(findToolName(state.transcript, block.tool_use_id) ? { name: findToolName(state.transcript, block.tool_use_id) } : {}),
+                toolUseId: block.tool_use_id,
+                output: stringifyTranscriptValue(block.content),
+                ...(block.is_error !== undefined ? { isError: block.is_error } : {}),
+            });
+            return;
+        case "search_result":
+            appendEntry(state, { type: "search", at, text: block.query });
+            return;
+        case "compact_boundary":
+            appendEntry(state, {
+                type: "compact",
+                at,
+                text: `${block.trigger === "manual" ? "手动" : "自动"}压缩：${block.pre_tokens} → ${block.post_tokens ?? "?"} tokens`,
+            });
+            return;
+        case "agent_status": {
+            const text = block.status === "compacting" ? "正在压缩上下文" : "正在生成回复";
+            const previous = state.transcript.at(-1);
+            if (previous?.type !== "status" || previous.text !== text)
+                appendEntry(state, { type: "status", at, text });
+            return;
+        }
+        case "redacted_thinking":
+            appendEntry(state, { type: "notice", at, text: "部分思考内容已被安全过滤" });
+            return;
+        case "agent_progress":
+            // Heartbeats carry no content and can occur very frequently. Persisting them
+            // would add noise without helping users reconstruct what happened.
+            return;
+    }
+}
+export function isExecutionTranscriptEntry(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const entry = value;
+    const types = [
+        "prompt", "thinking", "text", "tool_use", "tool_result", "search", "compact", "status", "notice",
+    ];
+    if (!types.includes(entry.type) || typeof entry.at !== "string")
+        return false;
+    for (const field of ["text", "name", "toolUseId", "input", "output"]) {
+        if (entry[field] !== undefined && typeof entry[field] !== "string")
+            return false;
+    }
+    return entry.isError === undefined || typeof entry.isError === "boolean";
+}
+function findToolName(entries, toolUseId) {
+    for (let index = entries.length - 1; index >= 0; index--) {
+        const entry = entries[index];
+        if (entry?.type === "tool_use" && entry.toolUseId === toolUseId)
+            return entry.name;
+    }
+    return undefined;
+}
+function appendText(state, text, at) {
+    if (!text)
+        return;
+    const previous = state.transcript.at(-1);
+    if (previous?.type === "text") {
+        previous.text = (previous.text ?? "") + text;
+        return;
+    }
+    appendEntry(state, { type: "text", at, text });
+}
+function appendEntry(state, entry) {
+    state.transcript.push(entry);
+}
+function stringifyTranscriptValue(value) {
+    if (typeof value === "string")
+        return value;
+    if (value === undefined)
+        return "";
+    try {
+        return JSON.stringify(value, null, 2);
+    }
+    catch {
+        return String(value);
+    }
+}

package/dist/src/index.js

@@ -47,7 +47,7 @@ import { loadSessionRegistryForBinding, rebuildBindingsFromRegistry, resetState,
 import { startChromeDevtoolsGuard, stopChromeDevtoolsGuard } from "./chrome-devtools-guard.js";
 import { rebuildSessionChatsFromRegistry, setQueueConsumer, } from "./session-chat-binding.js";
 import { fixStaleStreamStates } from "./stream-state.js";
-import { handleCommand } from "./orchestrator.js";
+import { configureSafeMaintenanceRuntime, handleCommand, recoverSafeMaintenanceAfterStartup, } from "./orchestrator.js";
 import { createWechatAdapter, startWechatPlatform } from "./wechat-platform.js";
 import { handleCodexResetCardAction } from "./codex-reset-actions.js";
 import { resolveFeishuCardActionChatType } from "./card-action-routing.js";
@@ -103,11 +103,12 @@ function createFeishuAdapter() {
 }
 const feishuPlatform = createFeishuAdapter();
 const wechatPlatform = createWechatAdapter();
+configureSafeMaintenanceRuntime([feishuPlatform, wechatPlatform]);
 setSessionPlatform(feishuPlatform);
 configureAgentTeamMainAgent(feishuPlatform);
 // 注册队列消费回调：session 生成完成后自动处理缓存消息
 setQueueConsumer((platform, msg) => {
-    handleCommand(platform, msg.text, msg.chatId, msg.openId, msg.msgTimestamp, msg.chatType, msg.traceId).catch(err => console.error(`[${ts()}] Queue consume failed: ${err.message}`));
+    handleCommand(platform, msg.text, msg.chatId, msg.openId, msg.msgTimestamp, msg.chatType, msg.traceId, undefined, true).catch(err => console.error(`[${ts()}] Queue consume failed: ${err.message}`));
 });
 function getInnerEvent(data) {
     return (data.event ?? data);
@@ -596,6 +597,7 @@ async function main() {
             appendStartupTrace(opened ? "web-ui: opening simulate browser" : "web-ui: simulate browser unavailable", { url });
         }
         installShutdownHandlers(simServer, serviceLifecycle);
+        await recoverSafeMaintenanceAfterStartup();
         return;
     }
     if (Number.isNaN(CHATCCC_PORT) || CHATCCC_PORT < 1 || CHATCCC_PORT > 65535) {
@@ -647,6 +649,7 @@ async function main() {
                     });
                     try {
                         await startConfiguredPlatforms(httpServer, { failOnFeishuError: true });
+                        await recoverSafeMaintenanceAfterStartup();
                         return { ok: true };
                     }
                     catch (err) {
@@ -714,6 +717,7 @@ async function main() {
         });
     }
     await startConfiguredPlatforms(httpServer, { failOnFeishuError: false });
+    await recoverSafeMaintenanceAfterStartup();
 }
 /**
  * 生命周期健康检查发现 HTTP Server 已停止监听时，优先原地恢复同一个 Server。

package/dist/src/orchestrator.js

@@ -17,7 +17,7 @@ import { CLAUDE_MODEL, GIT_TIMEOUT_MS, PROJECT_ROOT, anthropicConfigDisplay, con
 import { buildHelpCard, buildEffortCard, buildFastModeCard, buildModelCard, buildStatusCard, buildCdContent, buildCdCard, buildSessionsCard, buildQueuedCard, buildQueueFullCard, buildCodexUsageCard, } from "./cards.js";
 import { formatGitResult, gitResultHeaderTemplate, runGitCommand, } from "./git-command.js";
 import { clearSessionModelOverride, clearSessionEffortOverride, getSessionStatus, getAllSessionsStatus, initClaudeSession, lastMsgTimestamps, resumeAndPrompt, sessionInfoMap, setSessionModelOverride, setSessionEffortOverride, switchChatBinding, recordSessionRegistry, getAdapterForTool, getEffectiveModelForTool, getEffectiveEffortForTool, getEffectiveFastModeForTool, setSessionFastModeOverride, stopSession, loadSessionRegistryForBinding, removeSessionRegistryRecord, saveSessionTool, recordChatPlatform, } from "./session.js";
-import { bindChatToSession, unbindChatFromSession, isSessionRunning, displayCards, enqueueMessage, cancelQueuedMessage, } from "./session-chat-binding.js";
+import { bindChatToSession, unbindChatFromSession, isSessionRunning, displayCards, enqueueMessage, cancelQueuedMessage, getSessionDrainSnapshot, } from "./session-chat-binding.js";
 import { getCodexUsageSummary, getTenantAccessToken, sendPostMessage } from "./feishu-platform.js";
 import { getCursorUsageSummary } from "./cursor-usage.js";
 import { getChatGptSubscriptionStatus } from "./chatgpt-subscription.js";
@@ -25,8 +25,10 @@ import { applySharedPrefix } from "./shared-prefix.js";
 import { sessionChatName } from "./session-name.js";
 import { reloadRuntimeConfig } from "./runtime-reload.js";
 import { acquireUpdateCommandGuard } from "./update-command-guard.js";
-import { createInternalRestartEnv } from "./startup-lifecycle.js";
+import { createInternalRestartEnv, INTERNAL_RESTART_ENV_VAR } from "./startup-lifecycle.js";
 import { resolveChatCccRuntimeSpawnSpec } from "./runtime-entry.js";
+import { engineManager } from "./engines/engine-specs.js";
+import { beginSafeMaintenanceTrackedWork, isSafeMaintenanceAdmissionClosed, safeMaintenanceCoordinator, } from "./safe-maintenance.js";
 import { feishuP2pContactStore, isValidFeishuOpenId, } from "./agent-team/repositories/feishu-p2p-contact-store.js";
 // ---------------------------------------------------------------------------
 // 辅助函数
@@ -577,10 +579,11 @@ function updLog(msg) {
     catch { }
 }
 /** 同步更新 npm 全局包并 spawn 新进程重启。不依赖 systemd 或任何服务管理器。 */
-function syncUpdateAndRestart() {
+function syncUpdateAndRestart(options = {}) {
     updLog(`sync update start, pid=${process.pid}`);
     appendStartupTrace("update: sync update start", { pid: process.pid });
     const npmCmd = process.platform === "win32" ? "npm.cmd" : "npm";
+    let updateSucceeded = false;
     // 1. npm update
     updLog(`running: ${npmCmd} update -g chatccc`);
     appendStartupTrace("update: npm update begin", { npmCmd });
@@ -590,6 +593,7 @@ function syncUpdateAndRestart() {
         const elapsed = Date.now() - t0;
         updLog(`npm update OK (${elapsed}ms): ${out.slice(0, 500)}`);
         appendStartupTrace("update: npm update OK", { elapsedMs: elapsed, outputLen: out.length });
+        updateSucceeded = true;
     }
     catch (e) {
         const elapsed = Date.now() - t0;
@@ -605,6 +609,7 @@ function syncUpdateAndRestart() {
             const elapsed2 = Date.now() - t1;
             updLog(`npm install fallback OK (${elapsed2}ms): ${out2.slice(0, 500)}`);
             appendStartupTrace("update: npm install fallback OK", { elapsedMs: elapsed2, outputLen: out2.length });
+            updateSucceeded = true;
         }
         catch (e2) {
             const elapsed2 = Date.now() - t1;
@@ -613,6 +618,11 @@ function syncUpdateAndRestart() {
             appendStartupTrace("update: npm install fallback failed", { elapsedMs: elapsed2, message: err2.message });
         }
     }
+    if (!updateSucceeded && options.spawnOnUpdateFailure === false) {
+        updLog("safe update aborted: both npm update and fallback install failed");
+        appendStartupTrace("update: safe update aborted before restart", {});
+        return undefined;
+    }
     // 2. resolve bin path
     const npmPrefix = process.env.NPM_PREFIX || "";
     const binName = process.platform === "win32" ? "chatccc.cmd" : "chatccc";
@@ -771,15 +781,106 @@ export async function decideRestartParentExit(child, timeoutMs, pollMs = 500, tr
     trace("restart: child alive after window, parent exiting", { childPid: child.pid });
     return true;
 }
+const safeMaintenancePlatforms = new Map();
+export function configureSafeMaintenanceRuntime(platforms) {
+    safeMaintenancePlatforms.clear();
+    for (const platform of platforms) {
+        if (platform.kind)
+            safeMaintenancePlatforms.set(platform.kind, platform);
+    }
+    safeMaintenanceCoordinator.configure({
+        getSnapshot() {
+            const sessions = getSessionDrainSnapshot();
+            return {
+                ...sessions,
+                activeEngineIds: engineManager.getActiveInstallIds(),
+                activeWorkLabels: [],
+            };
+        },
+        execute(kind) {
+            return kind === "update" ? executeSafeUpdate() : executeSafeRestart();
+        },
+        async notify(requester, message) {
+            const platform = safeMaintenancePlatforms.get(requester.platform);
+            if (!platform)
+                throw new Error(`Unavailable platform: ${requester.platform}`);
+            await platform.sendText(requester.chatId, message);
+        },
+    });
+}
+export function recoverSafeMaintenanceAfterStartup() {
+    return safeMaintenanceCoordinator.recoverAfterStartup(process.env[INTERNAL_RESTART_ENV_VAR] === "1");
+}
+async function executeSafeRestart() {
+    fileLog.flush();
+    appendStartupTrace("safe-maintenance: restart spawn begin", { fromPid: process.pid });
+    const child = spawnRestartChild();
+    child.unref();
+    const shouldExit = await decideRestartParentExit(child, RESTART_CHILD_READY_MS);
+    if (!shouldExit)
+        return false;
+    appendStartupTrace("safe-maintenance: restart parent exit", { childPid: child.pid });
+    process.exit(0);
+}
+async function executeSafeUpdate() {
+    fileLog.flush();
+    appendStartupTrace("safe-maintenance: update begin", { fromPid: process.pid });
+    const child = syncUpdateAndRestart({ spawnOnUpdateFailure: false });
+    if (!child)
+        return false;
+    child.unref();
+    const shouldExit = await decideRestartParentExit(child, RESTART_CHILD_READY_MS);
+    if (!shouldExit)
+        return false;
+    appendStartupTrace("safe-maintenance: update parent exit", { childPid: child.pid });
+    process.exit(0);
+}
+function safeMaintenanceRequester(platform, chatId, openId) {
+    return { platform: platform.kind ?? "feishu", chatId, openId };
+}
+function safeMaintenancePhaseLabel(phase) {
+    const labels = {
+        draining: "等待现有任务结束",
+        executing: "正在执行维护",
+        completed: "已完成",
+        failed: "执行失败",
+    };
+    return labels[phase] ?? phase;
+}
+async function safeMaintenanceStatusText() {
+    const status = await safeMaintenanceCoordinator.status();
+    if (!status.job)
+        return "当前没有安全维护预约。";
+    const snapshot = status.snapshot;
+    return [
+        `安全维护：${status.job.kind === "update" ? "更新并重启" : "重启"}`,
+        `状态：${safeMaintenancePhaseLabel(status.job.phase)}`,
+        `执行中/收尾会话：${snapshot.activeSessionIds.length}`,
+        `已接受的缓存消息：${snapshot.queuedSessionIds.length}`,
+        `依赖安装任务：${snapshot.activeEngineIds.length}`,
+        `其他处理中入口：${Math.max(0, snapshot.activeWorkLabels.length - 1)}`,
+        ...(status.job.lastError ? [`错误：${status.job.lastError}`] : []),
+    ].join("\n");
+}
 // ---------------------------------------------------------------------------
 // handleCommand — 平台无关的命令分发
 // ---------------------------------------------------------------------------
-export async function handleCommand(platform, text, chatId, openId, msgTimestamp, chatType = "group", traceId, commandId) {
+export async function handleCommand(platform, text, chatId, openId, msgTimestamp, chatType = "group", traceId, commandId, acceptedBeforeSafeMaintenance = false) {
+    const release = beginSafeMaintenanceTrackedWork(acceptedBeforeSafeMaintenance ? "accepted-queued-message" : "chat-command");
+    try {
+        await handleCommandInternal(platform, text, chatId, openId, msgTimestamp, chatType, traceId, commandId, acceptedBeforeSafeMaintenance);
+    }
+    finally {
+        release();
+    }
+}
+async function handleCommandInternal(platform, text, chatId, openId, msgTimestamp, chatType = "group", traceId, commandId, acceptedBeforeSafeMaintenance = false) {
     const tid = traceId ?? makeTraceId();
     const sharedPrefix = applySharedPrefix(text);
     const promptText = sharedPrefix.text;
     text = sharedPrefix.body;
     const textLower = text.toLowerCase();
+    const normalizedCommandText = textLower.trim().replace(/\s+/g, " ");
     const isCommandText = !sharedPrefix.matched && textLower.startsWith("/");
     recordChatPlatform(chatId, platform);
     if (platform.kind === "feishu" && chatType === "p2p" && isValidFeishuOpenId(openId)) {
@@ -788,6 +889,77 @@ export async function handleCommand(platform, text, chatId, openId, msgTimestamp
             console.error(`[${ts()}] [AGENT-TEAM] Failed to remember Feishu private contact: ${err.message}`);
         });
     }
+    if (isCommandText && normalizedCommandText === "/safestatus") {
+        logTrace(tid, "BRANCH", { cmd: "/safestatus" });
+        await platform.sendText(chatId, await safeMaintenanceStatusText()).catch(() => { });
+        logTrace(tid, "DONE", { outcome: "safe_maintenance_status" });
+        return;
+    }
+    if (isCommandText && normalizedCommandText === "/cancelsf") {
+        logTrace(tid, "BRANCH", { cmd: "/cancelsf" });
+        const canceled = await safeMaintenanceCoordinator.cancel();
+        if (!canceled) {
+            await platform.sendText(chatId, "当前没有可取消的安全维护预约；已经开始执行的维护也不能取消。").catch(() => { });
+        }
+        logTrace(tid, "DONE", { outcome: canceled ? "safe_maintenance_canceled" : "safe_maintenance_cancel_unavailable" });
+        return;
+    }
+    if (isCommandText && normalizedCommandText === "/restart safe") {
+        logTrace(tid, "BRANCH", { cmd: "/restart safe" });
+        try {
+            const job = await safeMaintenanceCoordinator.schedule("restart", safeMaintenanceRequester(platform, chatId, openId));
+            await platform.sendText(chatId, job.phase === "executing"
+                ? "安全维护已经开始执行，无法重复预约。"
+                : job.kind === "update"
+                    ? "已经存在优先级更高的安全更新预约，将继续等待现有任务完成。发送 /safestatus 查看状态，/cancelsf 取消预约。"
+                    : "已预约安全重启。现有会话、缓存消息和依赖安装会先自然完成；现在起不再接受新的普通任务。发送 /safestatus 查看状态，/cancelsf 取消预约。").catch(() => { });
+            logTrace(tid, "DONE", { outcome: "safe_restart_scheduled", jobId: job.jobId });
+        }
+        catch (error) {
+            await platform.sendText(chatId, `安全重启预约失败：${error.message}`).catch(() => { });
+            logTrace(tid, "DONE", { outcome: "safe_restart_schedule_failed", error: error.message });
+        }
+        return;
+    }
+    if (isCommandText && normalizedCommandText === "/update safe") {
+        logTrace(tid, "BRANCH", { cmd: "/update safe" });
+        const isGlobal = isRunningFromGlobalNpm();
+        if (!isGlobal) {
+            await platform.sendText(chatId, "当前进程非 npm 全局安装，无法使用 /update safe。请通过 npm install -g chatccc 安装后使用。").catch(() => { });
+            logTrace(tid, "DONE", { outcome: "safe_update_not_global" });
+            return;
+        }
+        const updateGuard = acquireUpdateCommandGuard({ commandId });
+        if (!updateGuard.allowed) {
+            if (updateGuard.reason !== "duplicate_id") {
+                await platform.sendText(chatId, "无法写入更新保护状态。为避免连续更新和重启，本次 /update safe 未预约。").catch(() => { });
+            }
+            logTrace(tid, "DONE", { outcome: updateGuard.reason === "duplicate_id" ? "safe_update_duplicate_id" : "safe_update_guard_failed" });
+            return;
+        }
+        try {
+            const job = await safeMaintenanceCoordinator.schedule("update", safeMaintenanceRequester(platform, chatId, openId));
+            await platform.sendText(chatId, job.phase === "executing"
+                ? "安全维护已经开始执行，无法重复预约。"
+                : "已预约安全更新。现有会话、缓存消息和依赖安装会先自然完成；现在起不再接受新的普通任务。发送 /safestatus 查看状态，/cancelsf 取消预约。").catch(() => { });
+            logTrace(tid, "DONE", { outcome: "safe_update_scheduled", jobId: job.jobId });
+        }
+        catch (error) {
+            await platform.sendText(chatId, `安全更新预约失败：${error.message}`).catch(() => { });
+            logTrace(tid, "DONE", { outcome: "safe_update_schedule_failed", error: error.message });
+        }
+        return;
+    }
+    const maintenanceAllowedCommands = new Set([
+        "/stop", "/cancel", "/state", "/sessions", "/usage", "/safestatus", "/cancelsf", "/restart", "/update", "/reload", "/help",
+    ]);
+    if (isSafeMaintenanceAdmissionClosed()
+        && !acceptedBeforeSafeMaintenance
+        && (!isCommandText || !maintenanceAllowedCommands.has(normalizedCommandText))) {
+        await platform.sendText(chatId, "ChatCCC 正在等待安全重启或更新，当前不接受新的任务。请在维护完成后重新发送；可用 /safestatus 查看状态。").catch(() => { });
+        logTrace(tid, "DONE", { outcome: "safe_maintenance_admission_closed" });
+        return;
+    }
     if (isCommandText && textLower === "/reload") {
         logTrace(tid, "BRANCH", { cmd: "/reload" });
         try {
@@ -808,6 +980,14 @@ export async function handleCommand(platform, text, chatId, openId, msgTimestamp
     }
     if (isCommandText && textLower === "/restart") {
         logTrace(tid, "BRANCH", { cmd: "/restart" });
+        const safeStatus = await safeMaintenanceCoordinator.status();
+        if (safeStatus.job?.phase === "executing") {
+            await platform.sendText(chatId, "安全维护已经开始执行，请勿重复重启。").catch(() => { });
+            logTrace(tid, "DONE", { outcome: "restart_blocked_by_executing_safe_maintenance" });
+            return;
+        }
+        if (safeStatus.job?.phase === "draining")
+            await safeMaintenanceCoordinator.cancel(false);
         await platform.sendText(chatId, "重启中...请几秒后发消息唤醒我").catch(() => { });
         logTrace(tid, "DONE", { outcome: "restart" });
         appendStartupTrace("restart: spawn begin", { fromPid: process.pid });
@@ -825,6 +1005,12 @@ export async function handleCommand(platform, text, chatId, openId, msgTimestamp
     }
     if (isCommandText && textLower === "/update") {
         logTrace(tid, "BRANCH", { cmd: "/update" });
+        const safeStatus = await safeMaintenanceCoordinator.status();
+        if (safeStatus.job?.phase === "executing") {
+            await platform.sendText(chatId, "安全维护已经开始执行，请勿重复更新。").catch(() => { });
+            logTrace(tid, "DONE", { outcome: "update_blocked_by_executing_safe_maintenance" });
+            return;
+        }
         const isGlobal = isRunningFromGlobalNpm();
         appendStartupTrace("update: command received", { isGlobal, chatId });
         if (!isGlobal) {
@@ -851,6 +1037,8 @@ export async function handleCommand(platform, text, chatId, openId, msgTimestamp
             logTrace(tid, "DONE", { outcome: "update_guard_write_failed" });
             return;
         }
+        if (safeStatus.job?.phase === "draining")
+            await safeMaintenanceCoordinator.cancel(false);
         await platform.sendText(chatId, "正在更新并重启，请稍候...").catch(() => { });
         logTrace(tid, "DONE", { outcome: "update" });
         appendStartupTrace("update: sync update begin", { fromPid: process.pid });

package/dist/src/safe-maintenance.js

@@ -0,0 +1,271 @@
+import { randomUUID } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { USER_DATA_DIR } from "./config.js";
+export const SAFE_MAINTENANCE_FILE = join(USER_DATA_DIR, "state", "safe-maintenance.json");
+export const SAFE_MAINTENANCE_STABLE_IDLE_MS = 1_000;
+const EMPTY_SNAPSHOT = {
+    activeSessionIds: [],
+    queuedSessionIds: [],
+    activeEngineIds: [],
+    activeWorkLabels: [],
+};
+export class SafeMaintenanceCoordinator {
+    filePath;
+    now;
+    idFactory;
+    stableIdleMs;
+    pollMs;
+    autoPoll;
+    trackedWork = new Map();
+    runtime = null;
+    job;
+    snapshot = EMPTY_SNAPSHOT;
+    stableSince = null;
+    timer = null;
+    tickRunning = false;
+    constructor(options = {}) {
+        this.filePath = options.filePath ?? SAFE_MAINTENANCE_FILE;
+        this.now = options.now ?? (() => new Date());
+        this.idFactory = options.idFactory ?? randomUUID;
+        this.stableIdleMs = options.stableIdleMs ?? SAFE_MAINTENANCE_STABLE_IDLE_MS;
+        this.pollMs = options.pollMs ?? 500;
+        this.autoPoll = options.autoPoll ?? true;
+        this.job = readJob(this.filePath);
+    }
+    configure(runtime) {
+        this.runtime = runtime;
+    }
+    isAdmissionClosed() {
+        return this.job?.phase === "draining" || this.job?.phase === "executing";
+    }
+    beginTrackedWork(label) {
+        const id = this.idFactory();
+        this.trackedWork.set(id, label);
+        let released = false;
+        return () => {
+            if (released)
+                return;
+            released = true;
+            this.trackedWork.delete(id);
+        };
+    }
+    async schedule(kind, requester) {
+        const now = this.now().toISOString();
+        if (this.job?.phase === "executing")
+            return structuredClone(this.job);
+        const previous = this.job;
+        if (this.job?.phase === "draining") {
+            const requesters = addRequester(this.job.requesters, requester);
+            this.job = {
+                ...this.job,
+                kind: this.job.kind === "update" || kind === "update" ? "update" : "restart",
+                requesters,
+                updatedAt: now,
+            };
+        }
+        else {
+            this.job = {
+                schemaVersion: 1,
+                jobId: this.idFactory(),
+                kind,
+                phase: "draining",
+                requestedAt: now,
+                updatedAt: now,
+                requesters: [requester],
+            };
+        }
+        this.stableSince = null;
+        try {
+            writeJob(this.filePath, this.job);
+        }
+        catch (error) {
+            this.job = previous;
+            throw error;
+        }
+        this.startPolling();
+        return structuredClone(this.job);
+    }
+    async cancel(notify = true) {
+        if (this.job?.phase !== "draining")
+            return false;
+        const requesters = this.job.requesters;
+        removeJob(this.filePath);
+        this.job = null;
+        this.snapshot = EMPTY_SNAPSHOT;
+        this.stableSince = null;
+        this.stopPolling();
+        if (notify)
+            await this.notifyAll(requesters, "已取消安全维护预约，ChatCCC 恢复接受新任务。");
+        return true;
+    }
+    async status() {
+        if (this.runtime && this.isAdmissionClosed())
+            this.snapshot = await this.collectSnapshot();
+        return {
+            job: this.job ? structuredClone(this.job) : null,
+            snapshot: structuredClone(this.snapshot),
+            waitingCount: snapshotCount(this.snapshot),
+        };
+    }
+    async tick() {
+        if (this.tickRunning || this.job?.phase !== "draining" || !this.runtime)
+            return;
+        this.tickRunning = true;
+        try {
+            this.snapshot = await this.collectSnapshot();
+            if (snapshotCount(this.snapshot) > 0) {
+                this.stableSince = null;
+                return;
+            }
+            const nowMs = this.now().getTime();
+            if (this.stableSince === null) {
+                this.stableSince = nowMs;
+                return;
+            }
+            if (nowMs - this.stableSince < this.stableIdleMs)
+                return;
+            await this.executeCurrentJob();
+        }
+        finally {
+            this.tickRunning = false;
+        }
+    }
+    async recoverAfterStartup(internalRestart) {
+        if (!this.job || !this.runtime)
+            return;
+        if (this.job.phase === "draining") {
+            this.startPolling();
+            await this.notifyAll(this.job.requesters, "ChatCCC 已恢复未完成的安全维护预约，继续等待现有任务结束。");
+            return;
+        }
+        if (this.job.phase !== "executing")
+            return;
+        if (internalRestart) {
+            const completed = { ...this.job, phase: "completed", updatedAt: this.now().toISOString() };
+            writeJob(this.filePath, completed);
+            this.job = completed;
+            await this.notifyAll(this.job.requesters, this.job.kind === "update" ? "ChatCCC 已安全更新并重新启动。" : "ChatCCC 已安全重新启动。");
+            return;
+        }
+        const message = "安全维护执行期间进程意外退出；为避免重启循环，未自动重试。";
+        const failed = {
+            ...this.job,
+            phase: "failed",
+            updatedAt: this.now().toISOString(),
+            lastError: message,
+        };
+        writeJob(this.filePath, failed);
+        this.job = failed;
+        await this.notifyAll(this.job.requesters, message);
+    }
+    async collectSnapshot() {
+        const external = await this.runtime.getSnapshot();
+        return {
+            activeSessionIds: [...external.activeSessionIds],
+            queuedSessionIds: [...external.queuedSessionIds],
+            activeEngineIds: [...external.activeEngineIds],
+            activeWorkLabels: [...external.activeWorkLabels, ...this.trackedWork.values()],
+        };
+    }
+    async executeCurrentJob() {
+        if (!this.job || !this.runtime)
+            return;
+        const executing = { ...this.job, phase: "executing", updatedAt: this.now().toISOString() };
+        writeJob(this.filePath, executing);
+        this.job = executing;
+        this.stopPolling();
+        const label = this.job.kind === "update" ? "更新并重启" : "重启";
+        await this.notifyAll(this.job.requesters, `现有任务已全部完成，开始安全${label}。`);
+        const started = await this.runtime.execute(this.job.kind).catch(async (error) => {
+            await this.markFailed(error instanceof Error ? error.message : String(error));
+            return false;
+        });
+        if (!started && this.job?.phase === "executing") {
+            await this.markFailed(`安全${label}未能启动，当前进程将继续提供服务。`);
+        }
+    }
+    async markFailed(message) {
+        if (!this.job)
+            return;
+        const failed = {
+            ...this.job,
+            phase: "failed",
+            updatedAt: this.now().toISOString(),
+            lastError: message,
+        };
+        writeJob(this.filePath, failed);
+        this.job = failed;
+        await this.notifyAll(this.job.requesters, message);
+    }
+    startPolling() {
+        if (!this.autoPoll || this.timer || this.job?.phase !== "draining")
+            return;
+        this.timer = setInterval(() => { void this.tick(); }, this.pollMs);
+        this.timer.unref?.();
+    }
+    stopPolling() {
+        if (!this.timer)
+            return;
+        clearInterval(this.timer);
+        this.timer = null;
+    }
+    async notifyAll(requesters, message) {
+        if (!this.runtime)
+            return;
+        await Promise.all(requesters.map((requester) => this.runtime.notify(requester, message).catch(() => { })));
+    }
+}
+function snapshotCount(snapshot) {
+    return snapshot.activeSessionIds.length
+        + snapshot.queuedSessionIds.length
+        + snapshot.activeEngineIds.length
+        + snapshot.activeWorkLabels.length;
+}
+function addRequester(requesters, requester) {
+    if (requesters.some((item) => item.platform === requester.platform && item.chatId === requester.chatId))
+        return requesters;
+    return [...requesters, requester];
+}
+function readJob(filePath) {
+    if (!existsSync(filePath))
+        return null;
+    try {
+        const value = JSON.parse(readFileSync(filePath, "utf8"));
+        if (value.schemaVersion !== 1 || !value.jobId || !Array.isArray(value.requesters))
+            return null;
+        if (!["restart", "update"].includes(value.kind) || !["draining", "executing", "completed", "failed"].includes(value.phase))
+            return null;
+        return value;
+    }
+    catch {
+        return null;
+    }
+}
+function writeJob(filePath, job) {
+    mkdirSync(dirname(filePath), { recursive: true });
+    const temporary = `${filePath}.${process.pid}.${randomUUID()}.tmp`;
+    try {
+        writeFileSync(temporary, `${JSON.stringify(job, null, 2)}\n`, "utf8");
+        renameSync(temporary, filePath);
+    }
+    finally {
+        rmSync(temporary, { force: true });
+    }
+}
+function removeJob(filePath) {
+    rmSync(filePath, { force: true });
+}
+export let safeMaintenanceCoordinator = new SafeMaintenanceCoordinator();
+export function _setSafeMaintenanceCoordinatorForTest(coordinator) {
+    safeMaintenanceCoordinator = coordinator;
+}
+export function _resetSafeMaintenanceCoordinatorForTest() {
+    safeMaintenanceCoordinator = new SafeMaintenanceCoordinator();
+}
+export function isSafeMaintenanceAdmissionClosed() {
+    return safeMaintenanceCoordinator.isAdmissionClosed();
+}
+export function beginSafeMaintenanceTrackedWork(label) {
+    return safeMaintenanceCoordinator.beginTrackedWork(label);
+}

package/dist/src/session-chat-binding.js

@@ -133,6 +133,18 @@ export function setUnifiedDisplayLoopHandle(h) {
     unifiedDisplayLoopHandle = h;
 }
 export const queuedMessages = new Map();
+/** Includes prompt execution, finalization, auto-recovery reservations, and accepted queues. */
+export function getSessionDrainSnapshot() {
+    const active = new Set([
+        ...activePrompts.keys(),
+        ...finalizingSessions,
+        ...autoRecoveryReservations,
+    ]);
+    return {
+        activeSessionIds: [...active].sort(),
+        queuedSessionIds: [...queuedMessages.keys()].sort(),
+    };
+}
 export function enqueueMessage(sessionId, msg) {
     if (queuedMessages.has(sessionId))
         return false;

package/dist/src/session.js

@@ -6,6 +6,7 @@ import { progressView } from "./progress/view.js";
 import { createAgentActivityTracker, formatAgentActivityTitle, updateAgentActivity, } from "./agent-activity.js";
 import { simplifyToolUse, simplifyToolResult } from "./simplify.js";
 import { logTrace } from "./trace.js";
+import { appendExecutionTranscriptBlock, } from "./execution-transcript.js";
 import { createClaudeAdapter } from "./adapters/claude-adapter.js";
 import { createCursorAdapter } from "./adapters/cursor-adapter.js";
 import { createCodexAdapter } from "./adapters/codex-adapter.js";
@@ -698,6 +699,11 @@ export function pickFinalReply(state) {
     return state.finalCompleteText || state.finalText;
 }
 export function accumulateBlockContent(block, state, toolCallMap) {
+    if (state.transcript !== undefined || (block.type !== "agent_progress" && block.type !== "text_reset")) {
+        const transcriptState = { transcript: state.transcript ?? [] };
+        appendExecutionTranscriptBlock(block, transcriptState);
+        state.transcript = transcriptState.transcript;
+    }
     switch (block.type) {
         case "thinking":
             state.chunkCount++;
@@ -1145,6 +1151,7 @@ export async function runAgentSession(sessionId, userText, platform, _chatId, ms
     refreshBusySessionAvatar(sessionId, tool, platform).catch(() => { });
     const state = {
         accumulatedContent: "",
+        transcript: [],
         finalText: "",
         finalCompleteText: "",
         chunkCount: 0,
@@ -1196,6 +1203,7 @@ export async function runAgentSession(sessionId, userText, platform, _chatId, ms
                 status: "auto_ended",
                 accumulatedContent: state.accumulatedContent,
                 finalReply: pickFinalReply(state).trim(),
+                transcript: state.transcript,
                 activity: activityTracker.activity,
                 chunkCount: state.chunkCount,
                 turnCount: nextTurnCount,
@@ -1308,6 +1316,7 @@ export async function runAgentSession(sessionId, userText, platform, _chatId, ms
                     status: "running",
                     accumulatedContent: state.accumulatedContent,
                     finalReply: pickFinalReply(state),
+                    transcript: state.transcript,
                     activity: activityTracker.activity,
                     chunkCount: state.chunkCount,
                     turnCount: nextTurnCount,
@@ -1406,6 +1415,7 @@ export async function runAgentSession(sessionId, userText, platform, _chatId, ms
                 status: finalStatus,
                 accumulatedContent: state.accumulatedContent,
                 finalReply: finalReplyToWrite,
+                transcript: state.transcript,
                 activity: activityTracker.activity,
                 chunkCount: state.chunkCount,
                 turnCount: nextTurnCount,

package/dist/src/stream-state.js

@@ -100,6 +100,7 @@ export function createEmptyStreamState(sessionId, cwd, tool, turnCount) {
         status: "running",
         accumulatedContent: "",
         finalReply: "",
+        transcript: [],
         activity: createAgentActivityTracker(now).activity,
         chunkCount: 0,
         turnCount,

package/dist/src/web-ui.js

@@ -17,6 +17,7 @@ import { AGENT_TEAM_PAGE_HTML } from "./agent-team/web/agent-team-page.js";
 export { AGENT_TEAM_PAGE_HTML } from "./agent-team/web/agent-team-page.js";
 import { buildWebUiUrl, createInternalRestartEnv, openWebUiInDefaultBrowser, } from "./startup-lifecycle.js";
 import { engineManager } from "./engines/engine-specs.js";
+import { isSafeMaintenanceAdmissionClosed } from "./safe-maintenance.js";
 const PROJECT_ROOT = CHATCCC_PACKAGE_ROOT;
 const USER_DATA_DIR = join(homedir(), ".chatccc");
 const CONFIG_FILE = join(USER_DATA_DIR, "config.json");
@@ -656,6 +657,10 @@ async function handleEngineStatus(engineId, res) {
     }
 }
 async function handleEngineInstall(engineId, res) {
+    if (isSafeMaintenanceAdmissionClosed()) {
+        jsonReply(res, 409, { ok: false, error: "ChatCCC 正在等待安全维护，暂不接受新的依赖安装任务。" });
+        return;
+    }
     try {
         jsonReply(res, 202, { ok: true, job: await engineManager.startInstall(engineId) });
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chatccc",
-  "version": "0.2.267",
+  "version": "0.2.268",
   "description": "Feishu bot bridge for Claude Code",
   "license": "Apache-2.0",
   "type": "module",