codebee 0.1.98 → 0.1.100

package/app/ui/app.js

@@ -812,8 +812,14 @@ function onTypeChange() {
 }
 
 function directProviders() {
-  /* 停用厂商不列出（用户拍板 2026-09-21「停用的不弄出来」）；只列启用且有 key 的 */
-  return (S.providers || []).filter((p) => p.enabled !== false && p.api_key);
+  /* 停用厂商不列出（用户拍板 2026-09-21「停用的不弄出来」）；只列启用且有 key 的。
+   * 模型名单已抓取但启用数为零的也不列——「随厂商推荐」没有可落的模型。 */
+  return (S.providers || []).filter((p) => {
+    if (p.enabled === false || !p.api_key) return false;
+    const ms = p.models;
+    if (Array.isArray(ms) && ms.length && !ms.some((m) => m.enabled !== false && !m.hidden)) return false;
+    return true;
+  });
 }
 
 function renderDirectModelPicker() {
@@ -826,7 +832,8 @@ function renderDirectModelPicker() {
   if (prev && provs.some((p) => p.id === prev)) ps.value = prev;
   const p = provs.find((x) => x.id === ps.value);
   const oldModel = ms.value;
-  const names = p ? (p.models || []).filter((m) => !m.hidden)
+  // 只列启用模型（停用/已删除的与后端 resolve 同口径；已选模型被停用时自然回落「随厂商推荐」）
+  const names = p ? (p.models || []).filter((m) => !m.hidden && m.enabled !== false)
     .map((m) => m.name).filter(Boolean) : [];
   ms.innerHTML = '<option value="">' + t("随厂商推荐") + '</option>' + names.map((name) =>
     '<option value="' + esc(name) + '">' + esc(name) + "</option>").join("");
@@ -4757,7 +4764,8 @@ window.loadProjectMemory = async function (taskId) {
     box.innerHTML = entries.map((entry) => {
       const canApprove = entry.status === "pending" && !entry.expired && entry.verified;
       const canRestore = entry.status === "archived" && !entry.expired && entry.verified;
-      const actions = (canApprove ? '<button type="button" class="ghost small" onclick="decideProjectMemory(\'' + jsq(taskId) + '\',\'' + jsq(entry.id) + '\',\'approve\',' + Number(entry.version) + ')">' + esc(t("批准")) + "</button><button type=\"button\" class=\"ghost small\" onclick=\"decideProjectMemory('" + jsq(taskId) + "','" + jsq(entry.id) + "','reject'," + Number(entry.version) + ')\">' + esc(t("拒绝")) + "</button>" : "") +
+      const feedback = entry.status === "approved" ? '<button type="button" class="ghost small" onclick="feedbackProjectMemory(\'' + jsq(taskId) + '\',\'' + jsq(entry.id) + '\',true,' + Number(entry.version) + ')">' + esc(t("有用")) + '</button><button type="button" class="ghost small" onclick="feedbackProjectMemory(\'' + jsq(taskId) + '\',\'' + jsq(entry.id) + '\',false,' + Number(entry.version) + ')">' + esc(t("无用")) + '</button>' : "";
+      const actions = feedback + (canApprove ? '<button type="button" class="ghost small" onclick="decideProjectMemory(\'' + jsq(taskId) + '\',\'' + jsq(entry.id) + '\',\'approve\',' + Number(entry.version) + ')">' + esc(t("批准")) + "</button><button type=\"button\" class=\"ghost small\" onclick=\"decideProjectMemory('" + jsq(taskId) + "','" + jsq(entry.id) + "','reject'," + Number(entry.version) + ')">' + esc(t("拒绝")) + "</button>" : "") +
         (entry.status === "approved" ? '<button type="button" class="ghost small" onclick="decideProjectMemory(\'' + jsq(taskId) + '\',\'' + jsq(entry.id) + '\',\'archive\',' + Number(entry.version) + ')">' + esc(t("归档")) + "</button>" : "") +
         (canRestore ? '<button type="button" class="ghost small" onclick="decideProjectMemory(\'' + jsq(taskId) + '\',\'' + jsq(entry.id) + '\',\'restore\',' + Number(entry.version) + ')">' + esc(t("恢复")) + "</button>" : "");
       return '<article class="rd-memory-row"><div><strong>' + esc(entry.title || t("项目记忆")) + '</strong><span class="chip">' + esc(entry.status || "") + (entry.expired ? " · " + esc(t("已过期")) : "") + '</span></div><pre>' + esc(entry.content || "") + '</pre><div class="rd-memory-actions">' + actions + "</div></article>";
@@ -4775,6 +4783,16 @@ window.decideProjectMemory = async function (taskId, id, action, version) {
   } catch (error) { toast(t("项目记忆操作失败：") + error.message, true); }
 };
 
+window.feedbackProjectMemory = async function (taskId, id, useful, version) {
+  try {
+    await api("/api/tasks/" + encodeURIComponent(taskId) + "/memory", {
+      method: "POST", headers: Object.assign({ "Content-Type": "application/json" }, authHeaders()),
+      body: JSON.stringify({ id, action: "feedback", useful, expected_version: version }),
+    });
+    await loadProjectMemory(taskId);
+  } catch (error) { toast(t("项目记忆反馈失败：") + error.message, true); }
+};
+
 window.loadRunCheckpoints = async function (requestedRunId) {
   const runId = requestedRunId || S.detailRunId || ((S.state || {}).task_latest || {})[S.detailTaskKey]?.id;
   if (!runId) return;
@@ -6166,7 +6184,7 @@ function pbBlock(task, platform) {
     const run = (S.pubAuto && S.pubAuto.running &&
       S.pubAuto.running.platform === platform) ? S.pubAuto.running : null;
     if (run && run.status === "running") {
-      btns += '<span class="pb-book">' + esc(t("自动发布中 ") + run.done + "/" + run.total) + "</span>";
+      btns += '<span class="pb-book">' + esc((run.as_draft ? t("存草稿中 ") : t("自动发布中 ")) + run.done + "/" + run.total) + "</span>";
     } else if (au.pending > 0) {
       // 门禁不再禁用按钮：点了走 pbApiWithQualityOverride 的复审/强制对话，
       // 死按钮只会让用户无路可走（2026-10-08 实案：guard false 全灰点不了）
@@ -6174,6 +6192,12 @@ function pbBlock(task, platform) {
         ' title="' + esc(au.guard_ok ? t("按章号顺序逐章填稿（人工模式每点一次填一章，浏览器里提交后再点发下一章）") : t("护栏提示：") + (au.guard_reason || "")) + '"' +
         ' onclick="pbPublishAll(\'' + esc(task.id) + "', '" + platform + '\')">' +
         t("发布全部待发") + t("（") + au.pending + t("）") + "</button>";
+      // 全部发草稿（2026-10-09）：质量闸拦发布不拦草稿——逐章自动填稿点
+      // 「存草稿」连跑到清空，提交发布由用户到平台草稿箱手工完成
+      btns += ' <button class="ghost" ' + (busy || au.draft_ok === false ? "disabled" : "") +
+        ' title="' + esc(au.draft_ok !== false ? t("逐章自动填稿并点「存草稿」：内容落平台草稿箱不上线，不受质量门禁拦截，无需逐章人工确认；完成后到平台检查并提交发布") : t("护栏提示：") + (au.draft_reason || "")) + '"' +
+        ' onclick="pbDraftAll(\'' + esc(task.id) + "', '" + platform + '\')">' +
+        t("全部存草稿") + t("（") + au.pending + t("）") + "</button>";
     }
     // 批量选择：待发章号 chips 按卷分组（卷计划来自服务端 items[].volume），
     // 「发布所选」人工模式 / 「直发所选」逐章自动提交（护栏照常生效）。
@@ -6222,10 +6246,23 @@ function pbBlock(task, platform) {
           (au.guard_ok ? "" : "；" + t("护栏提示：") + (au.guard_reason || ""))) + '"' +
         ' onclick="pbPublishSelected(\'' + esc(task.id) + "','" + platform + '\',true)">' +
         t("直发所选") + t("（") + sel.size + t("）") + "</button>" +
+        '<button class="ghost" ' + (busy || !sel.size || au.draft_ok === false ? "disabled" : "") +
+        ' title="' + esc(t("所选章节逐章自动存草稿（不上线、不受质量门禁拦截），完成后到平台检查并提交发布") +
+          (au.draft_ok !== false ? "" : "；" + t("护栏提示：") + (au.draft_reason || ""))) + '"' +
+        ' onclick="pbDraftSelected(\'' + esc(task.id) + "','" + platform + '\')">' +
+        t("存草稿所选") + t("（") + sel.size + t("）") + "</button>" +
         "</div></div>";
     }
-    if (au.pending > 0 && !au.guard_ok) {
-      btns += '<div class="pb-err">' + esc(au.guard_reason || t("护栏拦截")) + "</div>";
+    if (au.pending > 0 && au.draft_ok === false) {
+      // 硬护栏（建书未确认/每日上限/连败退避）：存草稿也走不了，红色示警
+      btns += '<div class="pb-err">' + esc(au.draft_reason || au.guard_reason || t("护栏拦截")) + "</div>";
+    } else if (au.pending > 0 && !au.guard_ok && au.quality_blockers && au.quality_blockers.length) {
+      // 纯质量闸拦截：不给死路——提示先存草稿（2026-10-09 全部发草稿通路）
+      btns += '<div class="pb-hint">' + esc(t("质量闸未过：") + au.quality_blockers.join(t("；")) +
+        t("——可先「全部存草稿」落平台（不上线），正式发布前需复审达标或强制放行")) + "</div>";
+    }
+    if (au.drafted > 0) {
+      btns += '<div class="pb-hint">' + esc(t("已存草稿 {0} 章（未发布）：到平台章节管理/草稿箱逐章检查后提交发布", au.drafted)) + "</div>";
     }
     if (run && run.status === "manual_pause") {
       // 人工模式一轮只填一章：等用户在浏览器提交后再发起（连发会导航离开
@@ -6580,6 +6617,38 @@ window.pbPublishAll = async function (taskId, platform) {  const au = (((S.pubAu
   S._pbSig = ""; pbKick();
 };
 
+/* 全部发草稿（2026-10-09）：逐章自动填稿点「存草稿」连跑到清空，不上线、
+ * 不受质量闸拦、无需人工确认；提交发布由用户到平台草稿箱手工完成。 */
+window.pbDraftAll = async function (taskId, platform) {
+  const au = (((S.pubAuto && S.pubAuto.books) || [])
+    .find((b) => b.platform === platform)) || {};
+  if (!au.pending) return;
+  if (!(await uiConfirm(t("将对全部 {0} 章待发稿逐章自动填稿并点「存草稿」：内容落平台草稿箱不上线，不受质量门禁拦截，无需逐章人工确认（章间隔约 1 分钟防风控）。跑完后请到平台章节管理/草稿箱逐章检查，再手工提交发布。继续？", au.pending),
+    { ok: t("开始存草稿") }))) return;
+  try {
+    await api("/api/publish/task/" + encodeURIComponent(taskId) + "/publish-all",
+      { method: "POST", body: JSON.stringify({ platform, as_draft: true }) });
+    toast(t("存草稿已启动：逐章自动填稿并保存草稿，进度见发布台"));
+  } catch (e) { toast(t("存草稿启动失败：") + e.message, true); }
+  S._pbSig = ""; pbKick();
+};
+
+window.pbDraftSelected = async function (taskId, platform) {
+  const key = taskId + ":" + platform;
+  const ent = (S.pbSel || {})[key];
+  const chapters = ent ? [...ent.sel].sort((a, b) => a - b) : [];
+  if (!chapters.length) return;
+  if (!(await uiConfirm(t("将对所选 {0} 章（第 {1} 章—第 {2} 章）逐章自动填稿并点「存草稿」（不上线、不受质量门禁拦截），完成后到平台章节管理/草稿箱检查并提交发布。继续？",
+      chapters.length, chapters[0], chapters[chapters.length - 1]),
+    { ok: t("开始存草稿") }))) return;
+  try {
+    await api("/api/publish/task/" + encodeURIComponent(taskId) + "/publish-all",
+      { method: "POST", body: JSON.stringify({ platform, chapters, as_draft: true }) });
+    toast(t("存草稿已启动：逐章自动填稿并保存草稿，进度见发布台"));
+  } catch (e) { toast(t("存草稿启动失败：") + e.message, true); }
+  S._pbSig = ""; pbKick();
+};
+
 function pbKick() {
   const key = detailSideTaskKey();
   if (!key) return;
@@ -9781,7 +9850,8 @@ function rdModelMenuRender() {
         t("管理模型…") + "</span></span></button></div>";
   } else {
     const p = directProviders().find((x) => x.id === rdMenuProv);
-    const names = p ? (p.models || []).filter((m) => !m.hidden)
+    // 只列启用模型：停用的选了也会被运行时拒（builtin_agent.resolve 对账启用名单）
+    const names = p ? (p.models || []).filter((m) => !m.hidden && m.enabled !== false)
       .map((m) => m.name).filter(Boolean) : [];
     menu.innerHTML =
       '<button type="button" class="type-item" data-back="1"><span class="ti-body"><span class="ti-name">‹ ' +
@@ -10486,6 +10556,14 @@ function apnSyncActive() {
 /* ---------------------------------------------------------- 智能体目录：模型选择 */
 const MAX_ORCH_MODELS = 3;   // 与后端 modelhub.MAX_BIND_MODELS、runner 降级链保持一致
 
+/* 供应商有无可用密钥：keys 结构以「有启用且未冷却」为准；老数据单 KEY 看
+ * api_key 镜像（与后端 _chain_keys / resolve_binding 的「无可用密钥」同口径） */
+function provKeyOk(p) {
+  const ks = (p || {}).keys || [];
+  if (ks.length) return ks.some((k) => k.enabled !== false && !k.cooling);
+  return !!(p || {}).api_key;
+}
+
 /* 供应商 → 已启用模型（按优先级），用于分组下拉与多选面板 */
 function modelGroups() {
   const out = [];
@@ -10496,7 +10574,7 @@ function modelGroups() {
       .sort((a, b) => (a.priority || 0) - (b.priority || 0))
       .map((m) => m.name).filter(Boolean);
     if (ms.length) out.push({ id: p.id, name: p.name, models: ms,
-      protocol: p.protocol || "", caps: p.wire_caps || {} });
+      protocol: p.protocol || "", caps: p.wire_caps || {}, keyOk: provKeyOk(p) });
   }
   return out;
 }
@@ -10556,9 +10634,10 @@ function bindAllowedProtocols(kind) {
 function modelSelectHtml(id, current, kind) {
   const cur = fmtModel(current);
   const allow = bindAllowedProtocols(kind);
+  // 无可用密钥的供应商不进下拉：默认模型配上去解析时也会被跳过（死配置）
   const groups = modelGroups().filter((g) => {
     const p = (S.providers || []).find((x) => x.id === g.id);
-    return provAdaptedProto(p, allow, kind);
+    return g.keyOk !== false && provAdaptedProto(p, allow, kind);
   });
   let opts = '<option value="">' + t("（未设置）") + '</option>';
   if (cur && !groups.some((g) => g.models.includes(cur))) {
@@ -10685,7 +10764,7 @@ function chainProvUsable(p, allow, kind) {
   if (!p || p.enabled === false) return false;
   if (!provAdaptedProto(p, allow, kind)) return false;
   const ks = p.keys || [];
-  if (!ks.length) return true; // 老数据单 KEY（api_key 镜像）：无 keys 结构视为可用
+  if (!ks.length) return !!p.api_key;   // 老数据单 KEY（api_key 镜像）；两者皆无=没配密钥，不推荐
   return ks.some((k) => k.enabled !== false && !k.cooling);
 }
 
@@ -10847,16 +10926,19 @@ function bindPanel(c) {
            ? t("注入该厂商凭据") : t("已适配 · 注入该厂商凭据"))) + '</span></div>' +
       g.models.map((m) => {
         // 本供应商注入本 CLI 实际走的 wire（与后端 _entry_endpoint 同规则）；
-        // 无命中 = 勾了也会被解析层整条跳过，标死防止白配
+        // 无命中 = 勾了也会被解析层整条跳过，标死防止白配。
+        // 无可用密钥同理：勾了也是死条目（解析层「无可用密钥」跳过）
         const wire = provAdaptedProto(g, allow, c.orch_kind);
-        const dead = !wire;
+        const dead = !wire || g.keyOk === false;
         const has = st.chain.some((x) => x.p === g.id && x.m === m);
         return '<label class="oitem' + (dead ? " dim" : "") + '"><input type="checkbox" value="' + esc(m) + '" data-p="' + esc(g.id) + '"' +
           (has ? " checked" : "") + (dead ? " disabled" : "") +
           " onchange=\"bindPick('" + esc(c.id) + "', this, this.checked)\">" + esc(m) +
           (modelHasImage(g.id, m)
             ? ' <span class="tag ok" title="' + esc(t("支持图片输入")) + '">' + t("图") + "</span>" : "") +
-          (dead ? ' <span class="hint warn">' + esc(t("无可用 wire，解析时跳过")) + "</span>" : "") +
+          (dead ? ' <span class="hint warn">' + esc(!wire
+            ? t("无可用 wire，解析时跳过")
+            : t("无可用密钥，解析时跳过")) + "</span>" : "") +
           "</label>";
       }).join("") +
       "</div>").join("") + "</div>";
@@ -11995,7 +12077,8 @@ function renderAuModelPicker(pid, model) {
   ps.value = provs.some((p) => p.id === keepP) ? keepP : "";
   const fillModels = (keepM) => {
     const p = provs.find((x) => x.id === ps.value);
-    const names = p ? (p.models || []).filter((m) => !m.hidden)
+    // 只列启用模型：停用的不允许在定时任务里选（运行时同样会拒）
+    const names = p ? (p.models || []).filter((m) => !m.hidden && m.enabled !== false)
       .map((m) => m.name).filter(Boolean) : [];
     ms.innerHTML = '<option value="">' + t("随厂商推荐") + "</option>" + names.map((name) =>
       '<option value="' + esc(name) + '">' + esc(name) + "</option>").join("");
@@ -13290,8 +13373,77 @@ async function loadSettings() {
     }
   } catch (e) { /* 忽略 */ }
   loadSettingsV2();   // 引擎调参卡独立拉取（挂了不影响基础设置）
+  loadBackendProfiles();
+  loadCommandAuth();
+}
+
+async function loadBackendProfiles() {
+  const box = $("acp-profiles");
+  if (!box) return;
+  try {
+    const data = await api("/api/backend-profiles");
+    const rows = data.profiles || [];
+    box.innerHTML = rows.length ? rows.map((row) =>
+      '<div class="list-row"><span><b>' + esc(row.label || row.id) + '</b> · ' + esc(row.command || "") +
+      (row.enabled === false ? ' · ' + esc(t("已停用")) : '') + '</span><button class="ghost small" type="button" onclick="deleteAcpProfile(\'' + jsq(row.id) + '\')">' + esc(t("删除")) + '</button></div>'
+    ).join("") : '<span class="hint">' + esc(t("暂无 ACP 后端")) + '</span>';
+  } catch (error) {
+    box.innerHTML = '<span class="hint">' + esc(t("ACP 配置加载失败：")) + esc(error.message) + '</span>';
+  }
 }
 
+window.saveAcpProfile = async function () {
+  const msg = $("acp-msg");
+  try {
+    const argsText = ($("acp-args") || {}).value || "[]";
+    const args = JSON.parse(argsText);
+    if (!Array.isArray(args)) throw new Error(t("参数必须是 JSON 数组"));
+    await api("/api/backend-profiles", { method: "POST", headers: Object.assign({ "Content-Type": "application/json" }, authHeaders()),
+      body: JSON.stringify({ label: $("acp-label").value, command: $("acp-command").value,
+        args, workspace_path: $("acp-workspace").value }) });
+    if (msg) msg.textContent = t("ACP 后端已保存");
+    ["acp-label", "acp-command", "acp-args", "acp-workspace"].forEach((id) => { const el = $(id); if (el) el.value = id === "acp-args" ? "[]" : ""; });
+    await loadBackendProfiles();
+    await refreshState();
+  } catch (error) { if (msg) msg.textContent = t("ACP 保存失败：") + error.message; }
+};
+
+window.deleteAcpProfile = async function (id) {
+  try {
+    await api("/api/backend-profiles/" + encodeURIComponent(id) + "/delete", { method: "POST", headers: authHeaders(), body: "{}" });
+    await loadBackendProfiles();
+    await refreshState();
+  } catch (error) { toast(t("删除 ACP 失败：") + error.message, true); }
+};
+
+async function loadCommandAuth() {
+  const pendingBox = $("command-auth-pending");
+  const mode = $("command-auth-mode");
+  if (!pendingBox || !mode) return;
+  try {
+    const data = await api("/api/command-auth");
+    mode.value = data.mode || "legacy";
+    const rows = data.pending || [];
+    pendingBox.innerHTML = rows.length ? rows.map((row) =>
+      '<div class="list-row"><span><code>' + esc(row.command || "") + '</code> · ' + esc(row.source || "") + '</span><button class="ghost small" type="button" onclick="decideCommandAuth(\'' + jsq(row.id) + '\',true)">' + esc(t("批准一次")) + '</button><button class="ghost small" type="button" onclick="decideCommandAuth(\'' + jsq(row.id) + '\',false)">' + esc(t("拒绝")) + '</button></div>'
+    ).join("") : '<span class="hint">' + esc(t("暂无待批准命令")) + '</span>';
+  } catch (error) { pendingBox.innerHTML = '<span class="hint">' + esc(t("授权状态加载失败：")) + esc(error.message) + '</span>'; }
+}
+
+window.saveCommandAuthMode = async function () {
+  try {
+    await api("/api/command-auth", { method: "POST", headers: Object.assign({ "Content-Type": "application/json" }, authHeaders()), body: JSON.stringify({ mode: $("command-auth-mode").value }) });
+    await loadCommandAuth();
+  } catch (error) { const msg = $("command-auth-msg"); if (msg) msg.textContent = t("授权策略保存失败：") + error.message; }
+};
+
+window.decideCommandAuth = async function (id, approve) {
+  try {
+    await api("/api/command-auth/requests/" + encodeURIComponent(id), { method: "POST", headers: Object.assign({ "Content-Type": "application/json" }, authHeaders()), body: JSON.stringify({ approve, scope: "once" }) });
+    await loadCommandAuth();
+  } catch (error) { const msg = $("command-auth-msg"); if (msg) msg.textContent = t("命令授权操作失败：") + error.message; }
+};
+
 /* ---------------- settings_v2 引擎调参卡（schema 驱动） ----------------
  * /api/settings-v2 拉 describe（含字段元数据），按 namespace 渲染控件；
  * 保存走 /api/settings-v2/<ns> mutate（expected_revision CAS，409=别处已改，

package/app/ui/board.css

@@ -207,7 +207,11 @@ button { font: inherit; cursor: pointer; }
 }
 .k-lab { font-size: 11px; color: var(--t3); letter-spacing: .8px; }
 .k-row { display: flex; align-items: baseline; justify-content: space-between; gap: 10px; }
-.k-num { font: 700 27px/1 var(--mono); }
+/* k-num 不许换行：卡高 78px 固定 + overflow hidden，换行必裁字（「2246.7万」案）；
+   放不下由 fitKpis() 降档，仍放不下才在末档省略号 */
+.k-num { font: 700 27px/1 var(--mono); white-space: nowrap; }
+.k-num.sm { font-size: 21px; }
+.k-num.xs { font-size: 16px; min-width: 0; overflow: hidden; text-overflow: ellipsis; }
 .k-sub { font: 11px var(--mono); color: var(--t2); white-space: nowrap; }
 .k-run .k-num { color: var(--live-hi); }
 .k-queue .k-num { color: var(--data); }

package/app/ui/board.js

@@ -42,6 +42,20 @@ function parseTs(s) {
   const t = Date.parse(String(s || "").replace(" ", "T"));
   return isNaN(t) ? 0 : t;
 }
+/* 指标条长数值自适应：行宽放不下就逐档降字号（27→21→16px）。
+   判据用 k-row 的 scrollWidth：num/sub 都 nowrap 不收缩，超宽才会外溢。 */
+function fitKpis() {
+  document.querySelectorAll("#kpis .k-row").forEach((row) => {
+    const num = row.querySelector(".k-num");
+    if (!num) return;
+    num.classList.remove("sm", "xs");
+    if (row.scrollWidth <= row.clientWidth + 1) return;
+    num.classList.add("sm");
+    if (row.scrollWidth <= row.clientWidth + 1) return;
+    num.classList.remove("sm");
+    num.classList.add("xs");
+  });
+}
 function esc(s) {
   return String(s == null ? "" : s).replace(/[&<>"']/g,
     (c) => ({"&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;"}[c]));
@@ -167,6 +181,7 @@ function render(d) {
 
   $("#k-tokens").textContent = fmtTokens(usage.tokens);
   $("#k-use-sub").textContent = fmtCost(usage.cost_usd) + " · " + (Number(usage.calls) || 0) + " " + t("次调用");
+  fitKpis();
 
   // 顶栏态势：整屏只在这里说一次「有没有活」
   const st = $("#hd-state");
@@ -493,6 +508,7 @@ document.addEventListener("keydown", (e) => {
   if (e.key === "T" || e.key === "t") $("#sw-mode").click();
   if (e.key === "S" || e.key === "s") $("#sw-skin").click();
 });
+window.addEventListener("resize", fitKpis);
 
 /* ---------------------------------------------------------------- 时钟与耗时每秒跳 */
 setInterval(() => {

package/app/ui/i18n.js

@@ -824,6 +824,7 @@
     "openai 面仅 chat 形态（codex 只讲 responses）": "openai face is chat-only (codex speaks responses only)",
     "openai 面仅 chat 形态（codex 只讲 responses），解析时跳过": "openai face is chat-only (codex speaks responses only) — skipped when resolving",
     "无可用 wire，解析时跳过": "no usable wire — skipped when resolving",
+    "无可用密钥，解析时跳过": "no usable key — skipped when resolving",
     "该 CLI 只接受特定 wire 协议的供应商，当前没有匹配项——先到「模型接入」页导入对应协议的网关。": "This CLI only accepts providers on a specific wire protocol and none match — import a compatible gateway on the Models page first.",
     "%1 个供应商 wire 协议不匹配已隐藏（降级只在同协议网关间进行）。": "%1 provider(s) hidden due to wire-protocol mismatch — fallback stays within the same protocol.",
     "已适配（%1 wire）": "adapted (%1 wire)",
@@ -1407,7 +1408,7 @@
     "每套皮肤都是一份完整配色，并且各带「日间 / 夜间」两版，明暗切换不会丢皮肤。选中的皮肤立即生效并记在这台设备上（手机与电脑各自独立）。": "Each skin is a complete palette, with day / night variants — switching brightness never loses your skin. The selected skin applies instantly and is remembered on this device (phone and computer are independent).",
     "系统自己的经验沉淀：": "The system's own distilled experience:",
     "这台设备第一次连接，请输入访问令牌": "First connection from this device — enter the access token",
-    "（如七猫签约标准，自动注入小说类任务的规划与评审提示词） 与": " (e.g. the Qimao signing standard, auto-injected into planning & review prompts for novel tasks)",
+    "（如七猫签约标准，自动注入同类任务的规划与评审提示词） 与": " (e.g. the Qimao signing standard, auto-injected into planning & review prompts for matching tasks)",
     "（每次任务结束由编排者复盘本次评审暴露的问题，去重沉淀，下次同类任务自动带上）——越跑越好，无需人工维护。": " (after each task the orchestrator reviews the problems this review exposed, dedupes and distills them, and re-attaches them to the next similar task) — it gets better with every run, no manual upkeep.",
     "条": " entries",
     "（暂无，跑一次任务后自动生成）": " (none yet — generated after the first run)",
@@ -2600,6 +2601,30 @@
     "自动发布失败：": "Auto-publish failed: ",
     "已填好一章，请在浏览器确认提交": "One chapter is filled — please review and submit in the browser",
     "护栏拦截": "Blocked by guardrail",
+    "全部存草稿": "Save all as drafts",
+    "存草稿所选": "Draft selected",
+    "逐章自动填稿并点「存草稿」：内容落平台草稿箱不上线，不受质量门禁拦截，无需逐章人工确认；完成后到平台检查并提交发布": "Fills each chapter and clicks \"Save draft\": content lands in the platform's draft box without going live, bypasses the quality gate, no per-chapter confirmation; review and submit on the platform when done",
+    "所选章节逐章自动存草稿（不上线、不受质量门禁拦截），完成后到平台检查并提交发布": "Saves the selected chapters as drafts one by one (not live, quality gate not applied); review and submit on the platform when done",
+    "存草稿中 ": "Saving drafts ",
+    "已存草稿 {0} 章（未发布）：到平台章节管理/草稿箱逐章检查后提交发布": "{0} chapters saved as drafts (not published): review each in the platform's chapter management/draft box, then submit",
+    "质量闸未过：": "Quality gate not passed: ",
+    "——可先「全部存草稿」落平台（不上线），正式发布前需复审达标或强制放行": " — you can \"Save all as drafts\" first (not live); publishing requires a passing re-review or a forced override",
+    "将对全部 {0} 章待发稿逐章自动填稿并点「存草稿」：内容落平台草稿箱不上线，不受质量门禁拦截，无需逐章人工确认（章间隔约 1 分钟防风控）。跑完后请到平台章节管理/草稿箱逐章检查，再手工提交发布。继续？": "Will fill and save every pending chapter ({0} total) as a draft: content lands in the platform's draft box without going live, quality gate not applied, no per-chapter confirmation (~1 min pacing between chapters). Review each draft on the platform and submit manually when done. Continue?",
+    "将对所选 {0} 章（第 {1} 章—第 {2} 章）逐章自动填稿并点「存草稿」（不上线、不受质量门禁拦截），完成后到平台章节管理/草稿箱检查并提交发布。继续？": "Will fill and save the selected {0} chapters (ch. {1}–ch. {2}) as drafts (not live, quality gate not applied); review and submit on the platform when done. Continue?",
+    "开始存草稿": "Start saving drafts",
+    "存草稿已启动：逐章自动填稿并保存草稿，进度见发布台": "Draft saving started: chapters are filled and saved one by one — watch progress in the publish panel",
+    "存草稿启动失败：": "Failed to start draft saving: ",
+    "发布所选": "Publish selected",
+    "直发所选": "Auto-publish selected",
+    "开始直发": "Start auto-publish",
+    "清空": "Clear",
+    "待发 ": "Pending ",
+    " 章（按卷计划自动分卷）": " chapters (volumes auto-assigned per plan)",
+    "直发已启动，进度见发布台": "Auto-publish started — track progress in the publish panel",
+    "所选章节逐章自动提交（无人值守），护栏每日上限/连败退避照常生效": "Selected chapters submit automatically one by one (unattended); guards (daily cap / failure backoff) stay active",
+    "将对所选 {0} 章（第 {1} 章—第 {2} 章）逐章自动填稿并提交发布，无需人工确认；护栏（每日上限/连续失败暂停）生效。确定直发？": "Will fill and submit the selected {0} chapters (ch. {1}–ch. {2}) one by one automatically, no manual confirmation; guards (daily cap / consecutive-failure pause) stay active. Start auto-publish?",
+    "将按章号顺序逐章填所选 {0} 章（第 {1} 章—第 {2} 章）。人工模式每轮填一章并停在表单页，由你在浏览器里确认提交。分卷会按卷计划自动选/建。继续？": "Will fill the selected {0} chapters (ch. {1}–ch. {2}) in order. Manual mode fills one chapter per round and stops at the form page — you confirm each submission in the browser. Volumes are auto-picked/created per plan. Continue?",
+    "护栏提示：": "Guardrail notice: ",
 
     // —— 报告区 / 状态 / 杂项 ——
     "将于 {0} 自动续跑": "Auto-resumes at {0}",

package/app/ui/index.html

@@ -957,7 +957,7 @@
         <div class="panel wide">
           <div class="panel-head"><h2 data-i18n="经验库">经验库</h2>
             <button class="hhelp" data-help-topic="features" title="这是什么？点开看帮助" data-i18n-title="这是什么？点开看帮助" aria-label="帮助" data-i18n-aria="帮助"><svg class="ico" aria-hidden="true"><use href="#i-help"></use></svg></button></div>
-          <p class="hint"><span data-i18n="系统自己的经验沉淀：">系统自己的经验沉淀：</span><b data-i18n="内置规范包">内置规范包</b><span data-i18n="（如七猫签约标准，自动注入小说类任务的规划与评审提示词） 与">（如七猫签约标准，自动注入小说类任务的规划与评审提示词）
+          <p class="hint"><span data-i18n="系统自己的经验沉淀：">系统自己的经验沉淀：</span><b data-i18n="内置规范包">内置规范包</b><span data-i18n="（如七猫签约标准，自动注入同类任务的规划与评审提示词） 与">（如七猫签约标准，自动注入同类任务的规划与评审提示词）
             与</span><b data-i18n="运行中自动学到的教训">运行中自动学到的教训</b><span data-i18n="（每次任务结束由编排者复盘本次评审暴露的问题，去重沉淀，下次同类任务自动带上）——越跑越好，无需人工维护。">（每次任务结束由编排者复盘本次评审暴露的问题，去重沉淀，下次同类任务自动带上）——越跑越好，无需人工维护。</span></p>
           <h3 data-i18n="内置规范包" class="sec-title">内置规范包</h3>
           <div id="skill-packs" class="cards"></div>
@@ -1076,6 +1076,25 @@
             </div>
             <p data-i18n="内置智能体（直连对话/直接执行）会把服务器的工具并入工具循环（mcp__服务器__工具 名）。命令在你本机执行，与「执行命令」工具同一自主权级别；工具清单缓存 5 分钟。留空 = 不启用。" class="hint">内置智能体（直连对话/直接执行）会把服务器的工具并入工具循环（mcp__服务器__工具 名）。命令在你本机执行，与「执行命令」工具同一自主权级别；工具清单缓存 5 分钟。留空 = 不启用。</p>
           </div>
+          <h3 class="sec-title">ACP Backend Profiles</h3>
+          <p class="hint">接入遵循 Agent Client Protocol v1 的本地或 SSH stdio Agent。密钥只保存在本机，读取时始终脱敏。</p>
+          <div class="field">
+            <div id="acp-profiles" class="list"></div>
+            <div class="input-row" style="margin-top:6px">
+              <input id="acp-label" type="text" placeholder="名称">
+              <input id="acp-command" type="text" placeholder="启动命令，例如 acp-agent">
+              <input id="acp-args" type="text" placeholder="参数 JSON 数组，例如 [\"--stdio\"]">
+              <input id="acp-workspace" type="text" placeholder="Agent 工作区（可空）">
+              <button class="ghost small" type="button" onclick="saveAcpProfile()">保存 ACP</button>
+            </div>
+            <p id="acp-msg" class="hint"></p>
+          </div>
+          <h3 class="sec-title">命令授权</h3>
+          <div class="field">
+            <div class="input-row"><select id="command-auth-mode"><option value="legacy">legacy：自动执行</option><option value="restricted">restricted：逐条等待批准</option></select><button class="ghost small" type="button" onclick="saveCommandAuthMode()">保存策略</button></div>
+            <div id="command-auth-pending" class="list"></div>
+            <p id="command-auth-msg" class="hint"></p>
+          </div>
           <h3 data-i18n="推送通知" class="sec-title">推送通知</h3>
           <div class="field"><label data-i18n="群机器人 Webhook（钉钉 / 飞书 / 企业微信，按域名自动适配）">群机器人 Webhook（钉钉 / 飞书 / 企业微信，按域名自动适配）</label>
             <div class="input-row">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codebee",
-  "version": "0.1.98",
+  "version": "0.1.100",
   "description": "CodeBee · 多智能体编排台 — 统一编排本机 AI 编码 CLI（Codex / Claude Code / QwenCode / OpenCode / Aider…）：目标→拆解→路由→执行→验证→跨厂商评审→修复→报告。纯 Python 标准库实现，本地 Web UI。",
   "license": "MIT",
   "bin": {