metame-cli 1.4.18 → 1.4.20

package/scripts/daemon-claude-engine.js

@@ -103,7 +103,7 @@ function createClaudeEngine(deps) {
       const existsInCwd = recentInCwd.some(s => s.sessionId === safeSessionId);
       return cacheSessionCwdValidation(cacheKey, existsInCwd);
     } catch {
-      // Conservative fallback: if validation infra fails, avoid false positives by preserving current session.
+      // Conservative fallback: if validation infra fails, avoid false negatives by preserving current session.
       return cacheSessionCwdValidation(cacheKey, true);
     }
   }
@@ -189,6 +189,16 @@ function createClaudeEngine(deps) {
     return /(邮件|邮箱|收件箱|mail|email|calendar|日历|日程|会议|提醒|remind|草稿|发送邮件|打开|关闭|启动|切到|前台|音量|静音|睡眠|锁屏|Finder|Safari|微信|WeChat|Terminal|iTerm|System Events)/i.test(text);
   }
 
+  // Returns true when the message is a task/technical request that warrants full memory hints (rules 3-5).
+  // Errs on the side of over-inclusion: false negatives (missing hints) are worse than false positives.
+  function isTaskIntent(prompt) {
+    const text = String(prompt || '').trim();
+    if (!text) return false;
+    // Errs on the side of over-inclusion: false negatives (missing hints) are worse than false positives.
+    if (/^\/\w+/.test(text)) return true;  // slash command / dispatch prefix
+    return text.length > 30 || /(node|git|npm|daemon|script|debug|fix|bug|error|api|sql|review|实现|修改|排查|架构|配置|代码|函数|部署|测试|调试|重构|优化|回滚|日志|迁移|升级|接口|监控|错误|修复|异常|警告|单测|崩|死锁|内存)/i.test(text);
+  }
+
   /**
    * Auto-generate a session name using Haiku (async, non-blocking).
    * Writes to Claude's session file (unified with /rename).
@@ -227,7 +237,7 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
    * Spawn claude as async child process (non-blocking).
    * Returns { output, error } after process exits.
    */
-  function spawnClaudeAsync(args, input, cwd, timeoutMs = 300000) {
+  function spawnClaudeAsync(args, input, cwd, timeoutMs = 300000, metameProject = '') {
     return new Promise((resolve) => {
       const child = spawn(CLAUDE_BIN, args, {
         cwd,
@@ -237,6 +247,7 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
           ...getActiveProviderEnv(),
           CLAUDECODE: undefined,
           METAME_INTERNAL_PROMPT: '1',
+          METAME_PROJECT: metameProject || ''
         },
       });
 
@@ -301,7 +312,7 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
    * Calls onStatus callback when tool usage is detected.
    * Returns { output, error } after process exits.
    */
-  function spawnClaudeStreaming(args, input, cwd, onStatus, timeoutMs = 600000, chatId = null) {
+  function spawnClaudeStreaming(args, input, cwd, onStatus, timeoutMs = 600000, chatId = null, metameProject = '') {
     return new Promise((resolve) => {
       // Add stream-json output format (requires --verbose)
       const streamArgs = [...args, '--output-format', 'stream-json', '--verbose'];
@@ -310,12 +321,17 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
         cwd,
         stdio: ['pipe', 'pipe', 'pipe'],
         detached: true, // Create new process group so killing -pid kills all sub-agents too
-        env: { ...process.env, ...getActiveProviderEnv(), CLAUDECODE: undefined },
+        env: {
+          ...process.env,
+          ...getActiveProviderEnv(),
+          CLAUDECODE: undefined,
+          METAME_PROJECT: metameProject || ''
+        },
       });
 
       // Track active process for /stop
       if (chatId) {
-        activeProcesses.set(chatId, { child, aborted: false });
+        activeProcesses.set(chatId, { child, aborted: false, startedAt: Date.now() });
         saveActivePids(); // Fix3: persist PID to disk
       }
 
@@ -512,6 +528,23 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
    * Shared ask logic — full Claude Code session (stateful, with tools)
    * Now uses spawn (async) instead of execSync to allow parallel requests.
    */
+
+  /**
+   * Reset active provider back to anthropic/opus and reload config.
+   * Returns the freshly loaded config so callers can reassign their local variable.
+   */
+  function fallbackToDefaultProvider(reason) {
+    log('WARN', `Falling back to anthropic/opus — reason: ${reason}`);
+    if (providerMod && providerMod.getActiveName() !== 'anthropic') {
+      providerMod.setActive('anthropic');
+    }
+    const cfg = yaml.load(fs.readFileSync(CONFIG_FILE, 'utf8')) || {};
+    if (!cfg.daemon) cfg.daemon = {};
+    cfg.daemon.model = 'opus';
+    writeConfigSafe(cfg);
+    return loadConfig();
+  }
+
   async function askClaude(bot, chatId, prompt, config, readOnly = false) {
     log('INFO', `askClaude for ${chatId}: ${prompt.slice(0, 50)}`);
     // Track interaction time for idle/sleep detection
@@ -670,12 +703,25 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
       const _agentMap = { ...(_cfg.telegram ? _cfg.telegram.chat_agent_map : {}), ...(_cfg.feishu ? _cfg.feishu.chat_agent_map : {}) };
       const projectKey = _agentMap[_cid] || projectKeyFromVirtualChatId(_cid);
 
+      // L1: NOW.md shared whiteboard injection
+      if (!session.started) {
+        try {
+          const nowPath = path.join(HOME, '.metame', 'memory', 'NOW.md');
+          if (fs.existsSync(nowPath)) {
+            const nowContent = fs.readFileSync(nowPath, 'utf8').trim();
+            if (nowContent) {
+              memoryHint += `\n\n[Current task context:\n${nowContent}]`;
+            }
+          }
+        } catch { /* non-critical */ }
+      }
+
       // 1. Inject recent session memories ONLY on first message of a session
       if (!session.started) {
-        const recent = memory.recentSessions({ limit: 3, project: projectKey || undefined });
+        const recent = memory.recentSessions({ limit: 1, project: projectKey || undefined });
         if (recent.length > 0) {
           const items = recent.map(r => `- [${r.created_at}] ${r.summary}${r.keywords ? ' (keywords: ' + r.keywords + ')' : ''}`).join('\n');
-          memoryHint += `\n\n<!-- MEMORY:START -->\n[Session memory - recent context from past sessions, use to inform your responses:\n${items}]\n<!-- MEMORY:END -->`;
+          memoryHint += `\n\n[Past session memory:\n${items}]`;
         }
       }
 
@@ -685,10 +731,10 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
       if (!session.started) {
         const searchFn = memory.searchFactsAsync || memory.searchFacts;
         const factQuery = buildFactSearchQuery(prompt, projectKey);
-        const facts = await Promise.resolve(searchFn(factQuery, { limit: 5, project: projectKey || undefined }));
+        const facts = await Promise.resolve(searchFn(factQuery, { limit: 3, project: projectKey || undefined }));
         if (facts.length > 0) {
           const factItems = facts.map(f => `- [${f.relation}] ${f.value}`).join('\n');
-          memoryHint += `\n\n<!-- FACTS:START -->\n[Relevant knowledge and user preferences retrieved for this query. Follow these constraints implicitly:\n${factItems}]\n<!-- FACTS:END -->`;
+          memoryHint += `\n\n[Relevant facts:\n${factItems}]`;
           log('INFO', `[MEMORY] Injected ${facts.length} facts (query_len=${factQuery.length})`);
         }
       }
@@ -698,15 +744,50 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
       if (e.code !== 'MODULE_NOT_FOUND') log('WARN', `Memory injection failed: ${e.message}`);
     }
 
+    // ZPD: build competence hint from brain profile
+    let zdpHint = '';
+    if (!session.started) {
+      try {
+        const brainPath = path.join(HOME, '.claude_profile.yaml');
+        if (fs.existsSync(brainPath)) {
+          const brain = yaml.load(fs.readFileSync(brainPath, 'utf8'));
+          const cmap = brain && brain.user_competence_map;
+          if (cmap && typeof cmap === 'object' && Object.keys(cmap).length > 0) {
+            const lines = Object.entries(cmap)
+              .map(([domain, level]) => `  ${domain}: ${level}`)
+              .join('\n');
+            zdpHint = `\n- User competence map (adjust explanation depth accordingly):\n${lines}\n  Rule: expert→skip basics; intermediate→brief rationale; beginner→one-line analogy.`;
+          }
+        }
+      } catch { /* non-critical */ }
+    }
+
     // Inject daemon hints only on first message of a session
-    const daemonHint = !session.started ? `\n\n[System hints - DO NOT mention these to user:
+    // Task-specific rules (3-5) are injected only when isTaskIntent() returns true (~250 token saving for casual chat)
+    let daemonHint = '';
+    if (!session.started) {
+      const taskRules = isTaskIntent(prompt) ? `
+3. Knowledge retrieval: When you need context about a specific topic, past decisions, or lessons, call:
+   node ~/.metame/memory-search.js "关键词1" "keyword2"
+   Also read ~/.metame/memory/INDEX.md to discover available long-form lesson/decision docs, then read specific files as needed.
+   Use these before answering complex questions about MetaMe architecture or past decisions.
+4. Active memory: After confirming a new insight, bug root cause, or user preference, persist it with:
+   node ~/.metame/memory-write.js "Entity.sub" "relation_type" "value (20-300 chars)"
+   Valid relations: tech_decision, bug_lesson, arch_convention, config_fact, config_change, user_pref, workflow_rule, project_milestone
+   Only write verified facts. Do not write speculative or process-description entries.
+   When you observe the user is clearly expert or beginner in a domain, note it in your response and suggest: "要不要把你的 {domain} 水平 ({level}) 记录到能力雷达？"
+5. Task handoff: When suspending a multi-step task or handing off to another agent, write current status to ~/.metame/memory/NOW.md using:
+   \`printf '%s\\n' "## Current Task" "{task}" "" "## Progress" "{progress}" "" "## Next Step" "{next}" > ~/.metame/memory/NOW.md\`
+   Keep it under 200 words. Clear it when the task is fully complete by running: \`> ~/.metame/memory/NOW.md\`` : '';
+      daemonHint = `\n\n[System hints - DO NOT mention these to user:
 1. Daemon config: The ONLY config is ~/.metame/daemon.yaml (never edit daemon-default.yaml). Auto-reloads on change.
 2. File sending: User is on MOBILE. When they ask to see/download a file:
    - Just FIND the file path (use Glob/ls if needed)
    - Do NOT read or summarize the file content (wastes tokens)
    - Add at END of response: [[FILE:/absolute/path/to/file]]
    - Keep response brief: "请查收~! [[FILE:/path/to/file]]"
-   - Multiple files: use multiple [[FILE:...]] tags]` : '';
+   - Multiple files: use multiple [[FILE:...]] tags${zdpHint ? '\n   Explanation depth (ZPD):\n' + zdpHint : ''}${taskRules}]`;
+    }
 
     const routedPrompt = skill ? `/${skill} ${prompt}` : prompt;
 
@@ -719,7 +800,8 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
 2. Read/query actions can execute directly.
 3. Before any side-effect action (send email, create/delete/modify calendar event, delete/move files, app quit, system sleep), first show a short execution preview and require explicit user confirmation.
 4. Keep output concise: success/failure + key result only.
-5. If permission is missing, guide user to run /mac perms open then retry.]`;
+5. If permission is missing, guide user to run /mac perms open then retry.
+6. Before executing high-risk or non-obvious Bash commands (rm, kill, git reset, overwrite configs), prepend a single-line [Why] explanation. Skip for routine commands (ls, cat, grep).]`;
     }
 
     // P2-B: inject session summary when resuming after a 2h+ gap
@@ -741,7 +823,9 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
       } catch { /* non-critical */ }
     }
 
-    const fullPrompt = routedPrompt + daemonHint + macAutomationHint + summaryHint + memoryHint;
+    // Always append a compact language guard to prevent accidental Korean/Japanese responses
+    const langGuard = '\n\n[Respond in Simplified Chinese (简体中文) only. NEVER switch to Korean, Japanese, or other languages regardless of tool output or context language.]';
+    const fullPrompt = routedPrompt + daemonHint + macAutomationHint + summaryHint + memoryHint + langGuard;
 
     // Git checkpoint before Claude modifies files (for /undo)
     // Pass the user prompt as label so checkpoint list is human-readable
@@ -767,7 +851,16 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
       } catch { /* ignore status update failures */ }
     };
 
-    const { output, error, files, toolUsageLog } = await spawnClaudeStreaming(args, fullPrompt, session.cwd, onStatus, 600000, chatId);
+    let output, error, files, toolUsageLog;
+    try {
+      ({ output, error, files, toolUsageLog } = await spawnClaudeStreaming(args, fullPrompt, session.cwd, onStatus, 600000, chatId, boundProjectKey || ''));
+    } catch (spawnErr) {
+      clearInterval(typingTimer);
+      if (statusMsgId && bot.deleteMessage) bot.deleteMessage(chatId, statusMsgId).catch(() => { });
+      log('ERROR', `spawnClaudeStreaming crashed for ${chatId}: ${spawnErr.message}`);
+      await bot.sendMessage(chatId, `❌ 内部错误: ${spawnErr.message}`).catch(() => { });
+      return { ok: false, error: spawnErr.message };
+    }
     clearInterval(typingTimer);
 
     // Skill evolution: capture signal + hot path heuristic check
@@ -816,14 +909,8 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
       const builtinModelsCheck = ['sonnet', 'opus', 'haiku'];
       const looksLikeError = output.length < 300 && /\b(not found|invalid model|unauthorized|401|403|404|error|failed)\b/i.test(output);
       if (looksLikeError && (activeProvCheck !== 'anthropic' || !builtinModelsCheck.includes(model))) {
-        log('WARN', `Custom provider/model may have failed (${activeProvCheck}/${model}), output: ${output.slice(0, 200)}`);
         try {
-          if (providerMod && activeProvCheck !== 'anthropic') providerMod.setActive('anthropic');
-          const cfg = yaml.load(fs.readFileSync(CONFIG_FILE, 'utf8')) || {};
-          if (!cfg.daemon) cfg.daemon = {};
-          cfg.daemon.model = 'opus';
-          writeConfigSafe(cfg);
-          config = loadConfig();
+          config = fallbackToDefaultProvider(`output looks like error for ${activeProvCheck}/${model}`);
           await bot.sendMessage(chatId, `⚠️ ${activeProvCheck}/${model} 疑似失败，已回退到 anthropic/opus\n输出: ${output.slice(0, 150)}`);
         } catch (fbErr) {
           log('ERROR', `Fallback failed: ${fbErr.message}`);
@@ -889,8 +976,8 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
       log('ERROR', `askClaude failed for ${chatId}: ${errMsg.slice(0, 300)}`);
 
       // If session not found (expired/deleted), create new and retry once
-      if (errMsg.includes('not found') || errMsg.includes('No session')) {
-        log('WARN', `Session ${session.id} not found, creating new`);
+      if (errMsg.includes('not found') || errMsg.includes('No session') || errMsg.includes('already in use')) {
+        log('WARN', `Session ${session.id} unusable (${errMsg.includes('already in use') ? 'locked' : 'not found'}), creating new`);
         session = createSession(chatId, session.cwd);
 
         const retryArgs = ['-p', '--session-id', session.id];
@@ -922,14 +1009,8 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
         const activeProv = providerMod ? providerMod.getActiveName() : 'anthropic';
         const builtinModels = ['sonnet', 'opus', 'haiku'];
         if (activeProv !== 'anthropic' || !builtinModels.includes(model)) {
-          log('WARN', `Custom provider/model failed (${activeProv}/${model}), falling back to anthropic/opus`);
           try {
-            if (providerMod && activeProv !== 'anthropic') providerMod.setActive('anthropic');
-            const cfg = yaml.load(fs.readFileSync(CONFIG_FILE, 'utf8')) || {};
-            if (!cfg.daemon) cfg.daemon = {};
-            cfg.daemon.model = 'opus';
-            writeConfigSafe(cfg);
-            config = loadConfig();
+            config = fallbackToDefaultProvider(`${activeProv}/${model} error: ${errMsg.slice(0, 100)}`);
             await bot.sendMessage(chatId, `⚠️ ${activeProv}/${model} 失败，已回退到 anthropic/opus\n原因: ${errMsg.slice(0, 100)}`);
           } catch (fallbackErr) {
             log('ERROR', `Fallback failed: ${fallbackErr.message}`);
@@ -941,8 +1022,6 @@ Reply with ONLY the name, nothing else. Examples: 插件开发, API重构, Bug
         return { ok: false, error: errMsg };
       }
     }
-
-    return { ok: true };
   }
 
   return {

package/scripts/daemon-command-router.js

@@ -24,6 +24,7 @@ function createCommandRouter(deps) {
     log,
     agentTools,
     pendingAgentFlows,
+    pendingActivations,
     agentFlowTtlMs,
   } = deps;
 
@@ -426,7 +427,7 @@ function createCommandRouter(deps) {
     if (wantsCreate) {
       if (!workspaceDir) {
         await bot.sendMessage(chatId, [
-          '我可以帮你创建并绑定 Agent，还差一个工作目录。',
+          '我可以帮你创建 Agent，还差一个工作目录。',
           '例如：`给这个群创建一个 Agent，目录是 ~/projects/foo`',
           '也可以直接回我一个路径（`~/`、`/`、`./`、`../` 开头都行）。',
         ].join('\n'));
@@ -434,15 +435,24 @@ function createCommandRouter(deps) {
       }
       const agentName = deriveAgentName(input, workspaceDir);
       const roleDelta = deriveCreateRoleDelta(input);
-      const res = await agentTools.createNewWorkspaceAgent(agentName, workspaceDir, roleDelta, chatId);
+      // Always skip binding creating chat — new group activates via /activate
+      const res = await agentTools.createNewWorkspaceAgent(agentName, workspaceDir, roleDelta, chatId, { skipChatBinding: true });
       if (!res.ok) {
         await bot.sendMessage(chatId, `❌ 创建 Agent 失败: ${res.error}`);
         return true;
       }
       const data = res.data || {};
       const projName = projectNameFromResult(data, agentName);
-      if (data.cwd) attachOrCreateSession(chatId, normalizeCwd(data.cwd), projName);
-      await bot.sendMessage(chatId, `✅ Agent 已创建并绑定\n名称: ${projName}\n目录: ${data.cwd || '（未知）'}`);
+      if (data.projectKey && pendingActivations) {
+        pendingActivations.set(data.projectKey, {
+          agentKey: data.projectKey, agentName: projName, cwd: data.cwd,
+          createdByChatId: String(chatId), createdAt: Date.now(),
+        });
+      }
+      await bot.sendMessage(chatId,
+        `✅ Agent「${projName}」已创建\n目录: ${data.cwd || '（未知）'}\n\n` +
+        `**下一步**: 在新群里发送 \`/activate\` 完成绑定（30分钟内有效）`
+      );
       return true;
     }
 
@@ -604,19 +614,26 @@ function createCommandRouter(deps) {
       }, 5000);
       return;
     }
+    // Strict mode: chats with a fixed agent in chat_agent_map must not cross-dispatch
+    const _strictChatAgentMap = { ...(config.telegram ? config.telegram.chat_agent_map : {}), ...(config.feishu ? config.feishu.chat_agent_map : {}) };
+    const _isStrictChat = !!(_strictChatAgentMap[String(chatId)] || projectKeyFromVirtualChatId(String(chatId)));
+
     // Nickname-only switch: bypass cooldown + budget (no Claude call)
-    const quickAgent = routeAgent(text, config);
-    if (quickAgent && !quickAgent.rest) {
-      const { key, proj } = quickAgent;
-      const projCwd = normalizeCwd(proj.cwd);
-      attachOrCreateSession(chatId, projCwd, proj.name || key);
-      log('INFO', `Agent switch via nickname: ${key} (${projCwd})`);
-      await bot.sendMessage(chatId, `${proj.icon || '🤖'} ${proj.name || key} 在线`);
-      return;
-    }
+    // Skipped for strict chats (fixed-agent groups)
+    if (!_isStrictChat) {
+      const quickAgent = routeAgent(text, config);
+      if (quickAgent && !quickAgent.rest) {
+        const { key, proj } = quickAgent;
+        const projCwd = normalizeCwd(proj.cwd);
+        attachOrCreateSession(chatId, projCwd, proj.name || key);
+        log('INFO', `Agent switch via nickname: ${key} (${projCwd})`);
+        await bot.sendMessage(chatId, `${proj.icon || '🤖'} ${proj.name || key} 在线`);
+        return;
+      }
 
-    if (await tryHandleAgentIntent(bot, chatId, text, config)) {
-      return;
+      if (await tryHandleAgentIntent(bot, chatId, text, config)) {
+        return;
+      }
     }
 
     const daemonCfg = (config && config.daemon) || {};

package/scripts/daemon-default.yaml

@@ -63,6 +63,24 @@ heartbeat:
       notify: false
       enabled: true
 
+    # 夜间记忆蒸馏：每天 01:00 提炼热区事实为决策与经验文档
+    - name: nightly-reflect
+      type: script
+      command: node ~/.metame/memory-nightly-reflect.js
+      at: "01:00"
+      require_idle: true
+      notify: false
+      enabled: true
+
+    # 记忆索引：每天 01:30 更新 ~/.metame/memory/INDEX.md
+    - name: memory-index
+      type: script
+      command: node ~/.metame/memory-index.js
+      at: "01:30"
+      require_idle: true
+      notify: false
+      enabled: true
+
     # Legacy flat tasks (no project isolation). New tasks should go under projects: above.
     # Examples — uncomment or add your own:
     #

package/scripts/daemon-exec-commands.js

@@ -192,8 +192,8 @@ function createExecCommandHandler(deps) {
         const st = loadState();
         st.tasks[taskName] = { last_run: new Date().toISOString(), status: 'success', output_preview: (output || '').slice(0, 200) };
         saveState(st);
-        let reply = output || '(no output)';
-        if (reply.length > 4000) reply = reply.slice(0, 4000) + '\n... (truncated)';
+        const truncated = truncateOutput(output, 4000);
+        const reply = truncated || '(no output)';
         await bot.sendMessage(chatId, `${taskName}\n\n${reply}`);
       }
       return true;
@@ -348,16 +348,10 @@ function createExecCommandHandler(deps) {
       const cwd = session?.cwd || HOME;
       await bot.sendMessage(chatId, `📦 npm publish --otp=${otp} ...`);
       try {
-        const child = spawn('npm', ['publish', `--otp=${otp}`], { cwd, timeout: 60000 });
-        let stdout = '';
-        let stderr = '';
-        child.stdout.on('data', d => { stdout += d; });
-        child.stderr.on('data', d => { stderr += d; });
-        const exitCode = await new Promise((resolve) => {
-          child.on('close', (code) => resolve(code));
-          child.on('error', () => resolve(1));
-        });
-        const output = (stdout + stderr).trim();
+        const result = await runCommand('npm', ['publish', `--otp=${otp}`], { cwd, timeout: 60000 });
+        const exitCode = result.code;
+        // Merge stdout+stderr: npm may print the success line to either stream depending on version
+        const output = [result.stdout, result.stderr].filter(Boolean).join('\n');
         if (exitCode === 0 && output.includes('+ metame-cli@')) {
           const ver = output.match(/metame-cli@([\d.]+)/);
           await bot.sendMessage(chatId, `✅ Published${ver ? ' v' + ver[1] : ''}!`);

package/scripts/daemon-file-browser.js

@@ -89,12 +89,13 @@ function createFileBrowser(deps) {
         : mode === 'agent-new' ? '/agent-dir'
         : '/cd';
 
+      const PAGE_SIZE = 10;
+      const totalPages = Math.max(1, Math.ceil(entries.length / PAGE_SIZE));
+      const safePage = Math.max(0, Math.min(page, totalPages - 1));
+      const start = safePage * PAGE_SIZE;
+      const pageSubdirs = entries.slice(start, start + PAGE_SIZE);
+
       if (bot.sendButtons) {
-        const PAGE_SIZE = 10;
-        const totalPages = Math.max(1, Math.ceil(entries.length / PAGE_SIZE));
-        const safePage = Math.max(0, Math.min(page, totalPages - 1));
-        const start = safePage * PAGE_SIZE;
-        const pageSubdirs = entries.slice(start, start + PAGE_SIZE);
         const buttons = [];
         buttons.push([{ text: `✓ 选择「${displayPath}」`, callback_data: `${cmd} ${shortenPath(dirPath)}` }]);
         for (const name of pageSubdirs) {

package/scripts/daemon-runtime-lifecycle.js

@@ -93,6 +93,7 @@ function setupRuntimeWatchers(deps) {
   const startTime = Date.now();
   let restartDebounce = null;
   let pendingRestart = false;
+  let deferredRestartTimer = null; // guard: prevent duplicate deferred restart timers
 
   fs.watchFile(daemonScript, { interval: 3000 }, (curr, prev) => {
     if (curr.mtimeMs === prev.mtimeMs) return;
@@ -103,8 +104,20 @@ function setupRuntimeWatchers(deps) {
         log('INFO', `daemon.js changed on disk — deferring restart (${activeProcesses.size} active task(s))`);
         pendingRestart = true;
       } else {
-        log('INFO', 'daemon.js changed on disk — exiting for restart...');
-        onRestartRequested();
+        // Even with no active processes, wait 5s for any in-flight cleanup
+        // (sendCard/sendMarkdown may still be running after activeProcesses.delete)
+        log('INFO', 'daemon.js changed on disk — no active tasks, restarting in 5s...');
+        if (deferredRestartTimer) clearTimeout(deferredRestartTimer);
+        deferredRestartTimer = setTimeout(() => {
+          if (activeProcesses.size > 0) {
+            log('INFO', `Deferred restart cancelled — ${activeProcesses.size} task(s) started during grace period`);
+            deferredRestartTimer = null;
+            pendingRestart = true;
+            return;
+          }
+          log('INFO', 'daemon.js changed on disk — exiting for restart...');
+          onRestartRequested();
+        }, 5000);
       }
     }, 2000);
   });
@@ -112,9 +125,9 @@ function setupRuntimeWatchers(deps) {
   const origDelete = activeProcesses.delete.bind(activeProcesses);
   activeProcesses.delete = function (key) {
     const result = origDelete(key);
-    if (pendingRestart && activeProcesses.size === 0) {
-      log('INFO', 'All tasks completed — executing deferred restart...');
-      setTimeout(onRestartRequested, 500);
+    if (pendingRestart && activeProcesses.size === 0 && !deferredRestartTimer) {
+      log('INFO', 'All tasks completed — executing deferred restart in 8s...');
+      deferredRestartTimer = setTimeout(onRestartRequested, 8000); // 给 sendMessage/deleteMessage 等 cleanup 留出足够时间
     }
     return result;
   };
@@ -124,6 +137,7 @@ function setupRuntimeWatchers(deps) {
     fs.unwatchFile(daemonScript);
     if (reloadDebounce) clearTimeout(reloadDebounce);
     if (restartDebounce) clearTimeout(restartDebounce);
+    if (deferredRestartTimer) clearTimeout(deferredRestartTimer);
     activeProcesses.delete = origDelete;
   }