sintbot 1.0.15 → 1.3.0

package/CHANGELOG.en.json

@@ -1,4 +1,122 @@
 [
+  {
+    "version": "1.3.0",
+    "date": "2026-11-08",
+    "name": "Built-in core",
+    "items": [
+      {
+        "t": "Adds a built-in core",
+        "d": "This release supports Codex messages in one Feishu group on macOS. Whiteboards, multiple groups and other platforms will follow. Keep existing multi-group installations and configure this release separately using the installation guide."
+      }
+    ]
+  },
+  {
+    "version": "1.2.1",
+    "date": "2026-11-05",
+    "name": "Follow-up notice fix",
+    "items": [
+      {
+        "t": "No false queue notice right after a task starts",
+        "d": "A follow-up sent in the first few seconds joins the running task once the channel is ready, without first saying it will wait until the task ends."
+      }
+    ]
+  },
+  {
+    "version": "1.2.0",
+    "date": "2026-11-05",
+    "name": "Steadier follow-ups, clearer errors",
+    "items": [
+      {
+        "t": "The reply card follows the latest follow-up",
+        "d": "Once a follow-up is accepted, the card moves under that message, so the answer ends up at the bottom of the group. A short notice is sent only when the card cannot move."
+      },
+      {
+        "t": "Recalls and redos no longer lose messages",
+        "d": "A recalled follow-up that had not been delivered no longer runs on its own. A redo in a new session or on another model keeps delivered follow-ups, except recalled ones."
+      },
+      {
+        "t": "Codex requests no longer stall a task",
+        "d": "Approval and question requests are declined according to the protocol, and the task continues."
+      },
+      {
+        "t": "Console messages can join the running task",
+        "d": "A console message with Reply checked is treated like a group member's. The group line is posted first, the dialog says where the message will go, and the result reports where it landed."
+      },
+      {
+        "t": "Feishu answer cards show the model and quota",
+        "d": "The small print on the card now includes the current model and account quota."
+      },
+      {
+        "t": "Plain explanations for network and billing errors",
+        "d": "Network failures, low balance and expired subscriptions are explained in the group. Repeated network failures alert the operator, and account problems can fail over."
+      },
+      {
+        "t": "Lost sessions are redone automatically",
+        "d": "Claude and Codex groups clear a session that no longer exists, redo the message in a new one, and say so in the group."
+      }
+    ]
+  },
+  {
+    "version": "1.1.0",
+    "date": "2026-11-05",
+    "name": "Codex busy follow-up",
+    "items": [
+      {
+        "t": "Codex can receive follow-ups during a task",
+        "d": "Busy follow-up is on by default for Codex groups. Ordinary human follow-up messages enter the active task through the App Server; related requests can adjust the work, independent requests are answered separately in order, and unconfirmed deliveries return to the queue. It can be disabled per group; Claude groups and scheduled, quiet, and polled messages keep their existing behavior."
+      },
+      {
+        "t": "Busy follow-up is limited to the effective Codex backend",
+        "d": "The console shows the control for the backend currently in use, and the server validates it too. Changes apply from the next turn."
+      }
+    ]
+  },
+  {
+    "version": "1.0.17",
+    "date": "2026-11-05",
+    "name": "More reliable installs and runs",
+    "items": [
+      {
+        "t": "Installs are verified by running the program",
+        "d": "After installing a model CLI, setup runs it once to confirm its version. A file on disk or a clean installer exit no longer counts as success, and a failed check explains what went wrong and what to do next."
+      },
+      {
+        "t": "Health checks ignore files that cannot run",
+        "d": "Files without execute permission are no longer reported as installed programs. Automatic installs also keep the platform components the CLI needs to run."
+      },
+      {
+        "t": "Finds a model CLI that has moved",
+        "d": "If the configured path stops working, SintBot looks for the same program in common install locations and keeps going. If it is nowhere to be found, the group gets a plain explanation and the operator gets an alert."
+      },
+      {
+        "t": "Clearer handling of lost logins and crashes",
+        "d": "A revoked login token now counts as an account problem, so the group can fail over and alert. A Codex run that exits with only an error gets the same treatment."
+      },
+      {
+        "t": "Fixed occasional garbled Chinese",
+        "d": "Characters split across output chunks no longer turn into garbage."
+      }
+    ]
+  },
+  {
+    "version": "1.0.16",
+    "date": "2026-10-30",
+    "name": "Safer AI-assisted setup, quieter design tools",
+    "items": [
+      {
+        "t": "Safer AI-assisted installation",
+        "d": "API keys are masked as they are entered in the local terminal, keeping them out of AI conversation logs. Without an interactive terminal, the installer stops if Node is missing or too old; otherwise it skips model setup and the background service and explains what remains."
+      },
+      {
+        "t": "Clearer install and first-use flow",
+        "d": "Add bilingual guides for AI-assisted installation and first use. The one-line preview lists planned operations and confirmations, and warns that a model trial may use quota or incur a charge."
+      },
+      {
+        "t": "Design and icon libraries on demand",
+        "d": "Both libraries are collapsed by default; style presets are recommended only for a new product with no visual direction yet."
+      }
+    ]
+  },
   {
     "version": "1.0.15",
     "date": "2026-10-30",

package/CHANGELOG.json

@@ -1,4 +1,122 @@
 [
+  {
+    "version": "1.3.0",
+    "date": "2026-11-08",
+    "name": "补充内置核心",
+    "items": [
+      {
+        "t": "补充内置核心",
+        "d": "本版支持 macOS 上的飞书单群 Codex 消息；画布、多群和其他平台后续迭代。已有多群安装请保留原版本，按新版安装指南单独配置。"
+      }
+    ]
+  },
+  {
+    "version": "1.2.1",
+    "date": "2026-11-05",
+    "name": "修复补话时的误报",
+    "items": [
+      {
+        "t": "刚开始处理时补话不再误报已排队",
+        "d": "任务刚开始的几秒内补话，会在通道就绪后并入当前任务，不再先说一句「当前任务结束后处理」。"
+      }
+    ]
+  },
+  {
+    "version": "1.2.0",
+    "date": "2026-11-05",
+    "name": "忙时跟进更可靠，出错说得更清楚",
+    "items": [
+      {
+        "t": "回答卡片跟着最新的跟进走",
+        "d": "跟进被接受后，回复卡片移到这条消息下面，做完时答案在群底部；卡片搬不了时才发一句「已加入」。"
+      },
+      {
+        "t": "撤回和重做不再丢消息",
+        "d": "撤回还没送达的跟进后不会再单独执行；换会话或切模型重做时，已送达的跟进会一起带上，撤回过的除外。"
+      },
+      {
+        "t": "Codex 主动请求不再卡住任务",
+        "d": "无人值守时按协议拒绝审批和提问请求，任务继续往下走。"
+      },
+      {
+        "t": "控制台插话可以加入当前任务",
+        "d": "勾了「回复」的插话按群成员消息处理；先等群里那行发出去再执行，插话框说明去向，提交后回报落点。"
+      },
+      {
+        "t": "飞书回答卡显示模型和额度",
+        "d": "卡片右下角的小字增加当前模型和账号额度。"
+      },
+      {
+        "t": "连不上模型、余额不足都说人话",
+        "d": "网络不通、余额不足、订阅过期在群里都有清楚的说明；连续网络失败发运维告警，账号类问题可切备用模型。"
+      },
+      {
+        "t": "续接的会话不见了会自动重做",
+        "d": "Claude 和 Codex 群都会清掉失效的会话，在新会话里重做这条，并在群里说一句。"
+      }
+    ]
+  },
+  {
+    "version": "1.1.0",
+    "date": "2026-11-05",
+    "name": "Codex 忙时跟进",
+    "items": [
+      {
+        "t": "Codex 可接收任务进行中的后续消息",
+        "d": "Codex 群默认开启忙时跟进，通过 App Server 将普通真人后续消息送入当前任务；关联要求及时吸收，独立请求按序分别回应，未确认送达的消息回到队列。可按群关闭；Claude 群及定时、静默、轮询消息维持原行为。"
+      },
+      {
+        "t": "忙时跟进仅对实际 Codex 后端开放",
+        "d": "控制台按当前生效的后端显示开关，服务端也会校验；设置从下一轮开始生效。"
+      }
+    ]
+  },
+  {
+    "version": "1.0.17",
+    "date": "2026-11-05",
+    "name": "安装判定和运行稳定性",
+    "items": [
+      {
+        "t": "安装后实际运行一次才算成功",
+        "d": "向导装好模型程序后会实际运行一次确认版本，文件存在或安装命令正常退出都不再算成功；校验失败时会说明原因和处理办法。"
+      },
+      {
+        "t": "体检不再把不能运行的文件当成已安装",
+        "d": "没有执行权限的文件不再被识别为可用程序。自动安装时也会带上程序运行所需的平台组件。"
+      },
+      {
+        "t": "模型程序换位置后自动找回",
+        "d": "配置的路径失效时，会在常见安装位置找同一个程序继续运行；哪里都找不到时在群里说明，并发运维告警。"
+      },
+      {
+        "t": "登录失效和异常退出说得更清楚",
+        "d": "登录令牌被吊销算账号问题，可切备用模型并告警；Codex 只输出错误就退出时也走同样的处理。"
+      },
+      {
+        "t": "修复中文偶尔乱码",
+        "d": "输出中的汉字被分块拆开时不再变成乱码。"
+      }
+    ]
+  },
+  {
+    "version": "1.0.16",
+    "date": "2026-10-30",
+    "name": "AI 安装更安全，设计入口更克制",
+    "items": [
+      {
+        "t": "AI 协助安装更安全",
+        "d": "API key 在本机终端输入时会遮蔽回显，避免进入 AI 对话记录。没有交互终端时，缺少合格 Node 就停止；已有 Node 时则跳过模型配置和后台服务并说明后续步骤。"
+      },
+      {
+        "t": "安装流程与首次使用更清晰",
+        "d": "新增中英文 AI 安装与首次使用指南；一键预览会列出操作和确认项，并提示模型试跑可能消耗额度或产生费用。"
+      },
+      {
+        "t": "设计库和图标库按需展示",
+        "d": "两类资源默认折叠；仅在从零设计新产品且尚未确定视觉方向时推荐风格预设。"
+      }
+    ]
+  },
   {
     "version": "1.0.15",
     "date": "2026-10-30",

package/README.md

@@ -1,177 +1,41 @@
-<p align="center">
-  <a href="https://sintbot.com"><picture><source srcset="https://raw.githubusercontent.com/sintlab/sintbot/main/docs/assets/hero.svg" type="image/svg+xml"><img src="https://raw.githubusercontent.com/sintlab/sintbot/main/docs/assets/banner.png" alt="SintBot — the group-project AI daemon, running on your own machine" width="880"></picture></a>
-</p>
+# SintBot
 
-<p align="center"><b>Say it in the group. Any model, one memory. On your own machine.</b></p>
+[简体中文](./README.zh-CN.md) · [Install](./docs/install.md) · [Website](https://sintbot.com)
 
-<p align="center">
-  <a href="https://www.npmjs.com/package/sintbot"><img src="https://img.shields.io/npm/v/sintbot?style=flat-square&color=d68f44" alt="npm version"></a>
-  <a href="https://github.com/sintlab/sintbot/actions/workflows/test.yml"><img src="https://img.shields.io/github/actions/workflow/status/sintlab/sintbot/test.yml?branch=main&style=flat-square&label=tests" alt="tests"></a>
-  <img src="https://img.shields.io/node/v/sintbot?style=flat-square" alt="node version">
-  <a href="./LICENSE"><img src="https://img.shields.io/badge/license-PolyForm%20Shield-blue?style=flat-square" alt="PolyForm Shield license"></a>
-</p>
+SintBot runs a coding agent on your Mac from a Feishu group. Bind **one group to one local project**, send a request, and receive progress and the final reply in that group.
 
-<p align="center">
-  <a href="https://sintbot.com">Website</a> ·
-  <a href="./README.zh-CN.md">简体中文</a> ·
-  <a href="./docs/install.md">Install guide</a> ·
-  <a href="https://github.com/sintlab/sintbot/releases">Releases</a>
-</p>
+## Version 1.3.0
 
----
+This first built-in-core release supports **macOS, Node.js 22 or newer, one Feishu group and Codex message turns**. You need a working local Codex installation and login, plus a Feishu custom app. Model usage follows your Codex account's terms and limits.
 
-SintBot is a self-hosted daemon that puts a coding agent in your team's group chat. You bind a group to a project directory, and then anyone in that group can hand it work. It reads and changes code, designs, runs scripts and reports back, all on your own machine.
+The application runs in the foreground. Keep its terminal open; stop it with Ctrl-C and wait for shutdown to finish. This release does not install an automatic background service.
 
-Each turn runs the official **Claude Code** or **Codex** CLI headless, so tools, MCP servers, skills and project memory behave just as they do in your terminal. Each group chooses its model: Claude, GPT, DeepSeek, GLM, MiniMax, Kimi, or one you host yourself.
+Multiple groups, Claude and other model routes, Slack, WeCom, international Lark, the management console, scheduled tasks, terminal chat, busy-turn steering and whiteboards are outside this release's supported scope. Existing installations using those features should keep their current version. Support will expand in subsequent releases.
 
-Full source, docs and tests are public and downloadable under the [PolyForm Shield License 1.0.0](./LICENSE).
+## Install and connect
 
-## How it works
-
-<p align="center"><img src="https://raw.githubusercontent.com/sintlab/sintbot/main/docs/assets/how-it-works.svg" alt="Group (Slack, Feishu or WeCom) → SintBot on your machine → Claude Code or Codex in the project directory → the model chosen for that group; progress and results flow back to the group" width="880"></p>
-
-- **One group, one project.** Each group gets its own project directory, session, queue, permissions and scheduled tasks.
-- **Same agent, any brain.** Switch models with `/model` in the chat. The project's `CLAUDE.md`, `AGENTS.md` and memory carry over to whichever agent runs next.
-- **Stays on your machine.** Projects, sessions, memory and logs live on your disk and never pass through a SintBot server. Prompts and the code the model reads still go to the provider you chose.
-- **No public IP.** Every platform uses an outbound long connection (Socket Mode on Slack). One daemon can serve Slack, Feishu and WeCom at the same time.
-
-## Quick start
-
-**1. Install** on macOS or Linux:
-
-```bash
-curl -fsSL https://sintbot.com/install.sh | bash
-```
-
-The script checks for Node.js 22+, installs sintbot, sets up a model with a live trial turn and offers to install the background service, then opens the console at http://127.0.0.1:4600. It asks before every change and never uses `sudo`. Read [install.sh](./install.sh) first, or add `--dry-run` to see what it would do.
-
-To install by hand instead:
+Follow the [installation guide](./docs/install.md) to install the exact version into a separate directory, configure one group, initialize a new receipt journal and start the bot. The installer leaves existing installations and services in place.
 
 ```bash
-npm i -g sintbot
-sintbot setup             # set up a model, with a live trial turn
-sintbot service install   # restarted on crash, started at login; the console stays at http://127.0.0.1:4600
+curl -fsSL https://sintbot.com/install.sh -o /tmp/sintbot-install.sh
+bash /tmp/sintbot-install.sh --dry-run
+bash /tmp/sintbot-install.sh
 ```
 
-**2. Connect a chat platform in the console.** Create a bot, add it to a group and enter its credentials under Settings; each platform has a step-by-step guide there and here: [Slack](./docs/platforms/slack.md) · [Feishu](./docs/platforms/feishu.md) · [WeCom](./docs/platforms/wecom.md). Then bind the group to a project folder under Groups.
-
-**3. @ the bot in your group.** Switch models and watch live activity in the same console.
-
-### Pick a model: no Claude subscription needed
-
-The wizard checks what this machine is logged in to and recommends in this order:
-
-| You have | Use | What to do |
-|---|---|---|
-| A Claude subscription (Pro / Max) | Claude | run `claude auth login` before the wizard |
-| A ChatGPT account | GPT, via Codex | `npm i -g @openai/codex`, then `codex login` |
-| Neither | **DeepSeek** (recommended) | sign up at [platform.deepseek.com](https://platform.deepseek.com), top up, create an API key and paste it into the wizard; it runs a trial turn on the spot |
-
-The other presets are Zhipu GLM, MiniMax and Volcano Ark. GLM and MiniMax also have international sites (Z.ai, minimax.io); the wizard finds out which site your key belongs to by trying it. Kimi and any other Anthropic-compatible endpoint can be added as custom endpoints in the console.
-
-Without a Claude subscription, Claude Code is only the agent framework and needs no login. The only features you lose are GPT groups and image generation, both of which borrow Codex. In mainland China, see the [Chinese README](./README.zh-CN.md#在中国大陆).
-
-## What you get
-
-| Area | What it does |
-|---|---|
-| **In the group** | Streaming progress: Slack shows its native "Working…" status and a Stop button; Feishu cards update in place. Messages that arrive mid-turn are merged into the next turn. |
-| **Commands** | `/help` · `/status` · `/model <name>` · `/stop` · `/skip` · `/new` · `/hud` · `/issue`. On Slack, use a `!` prefix because Slack consumes messages that start with `/`. |
-| **Permissions** | Set per group, read-only by default. Thirteen secret and PII patterns are masked before a message reaches the group. |
-| **Scheduled tasks** | Cron, aliases such as `daily`, or plain "every day at 09:00". A task can wake the agent, post a reminder or run a script. |
-| **Design** | Distill a style from a site, a project folder or an image you like, or start from sixteen built-in styles. The result is a per-project `DESIGN.md` the agent must read, and every hand-off is checked against it. Iterate by annotating Feishu whiteboards. |
-| **Images** | Generated with the machine's Codex subscription, so no API key is needed. Edit an existing image, repaint a masked region, or produce a transparent background. |
-| **Previews & browser** | HTML prototypes are served on your LAN for the group to see. When the bot's browser hits a login or captcha, a group member takes over through a one-time link. |
-| **Console** | One local page for every group: a "Needs you" list (failed turns with their reason, takeover requests, open feedback), projects, models, permissions, design library, live activity and release history. Available in English or Chinese. |
-| **Operations** | Turns are capped at 30 minutes, and at most two run at once. Turns interrupted by a restart are redone automatically. Includes `sintbot doctor`, an ops alert group and quota warnings. |
-
-## Everyday commands
-
-```bash
-sintbot doctor                    # health check: config, CLIs, models, platforms, groups
-sintbot service status | logs     # is the service up, and what is it doing
-sintbot agent run "…"             # a read-only trial turn in the current directory
-sintbot ui                        # open the console
-sintbot chat -C <project-dir>     # simulate group messages in the terminal, no chat platform needed
-sintbot help                      # all commands
-```
-
-Configuration lives in `~/.sbot/config.json`. See [docs/config.md](./docs/config.md) for the fields, or the annotated [sbot.config.example.json](./sbot.config.example.json). The package installs two equivalent commands, `sintbot` and `sbot`.
-
-## Status
-
-| Area | Status |
-|---|---|
-| **macOS** | Verified. Real-machine testing covered the main flows on Slack and Feishu: messaging, streaming progress, model switching and scheduled tasks. |
-| **Linux** | Experimental. The systemd unit is covered by unit tests but has not yet been installed on real hardware. |
-| **Windows** | Not verified. Install manually; `sintbot service install` prints the NSSM and pm2 commands to run. |
-| **WeCom** | The newest integration, with the least real-world use. |
-| **Slack** | The native Stop button, `!status` and the thread buttons are covered by tests but have had little real-world use. |
-| **Kimi** | Not a preset and not yet tested. Add it in the console as a custom endpoint (Models → Add model → Custom); if you try it, please [report how it went](https://github.com/sintlab/sintbot/issues). |
-
-"Feishu" here means the China edition (open.feishu.cn). The international Lark (larksuite.com) runs on a separate open platform and is not supported yet. The bot's built-in messages and `sintbot doctor` are in Chinese; the installer, the setup wizard and the console also speak English.
-
-## Security
-
-- The bot **executes commands** in the bound project directory. Permissions are set per group: read-only by default, with "full access" for groups you trust. File tools are confined to the project directory; shell commands are not sandboxed. See [docs/security.md](./docs/security.md).
-- The console listens on this machine only. Before opening it to your LAN, run `sintbot ui --set-password`.
-- Personal Claude or ChatGPT subscriptions may not permit multi-user groups; check the provider's terms before team use.
-
-## FAQ
-
-<details>
-<summary><b>Do I need a Claude subscription?</b></summary>
-
-No. If the wizard finds no Claude or Codex login, it recommends DeepSeek and runs a trial turn as soon as you paste the API key. Claude Code is still the agent framework; it just needs no login.
-</details>
-
-<details>
-<summary><b>Can I use it in mainland China?</b></summary>
-
-Yes. Use Feishu as the chat platform and DeepSeek (or the mainland sites of Zhipu GLM, MiniMax or Kimi) as the model: they connect directly, with no proxy. A proxy is needed only for Claude, ChatGPT or Slack.
-</details>
-
-<details>
-<summary><b>Do I need a server or a public IP?</b></summary>
-
-No. SintBot runs on a computer you keep on; a Mac is the tested setup. It only makes outbound connections: Socket Mode for Slack, a WebSocket long connection for Feishu and a long connection for WeCom. The console stays local unless you open it.
-</details>
-
-<details>
-<summary><b>Does switching models lose the project's memory?</b></summary>
-
-No. A switch starts a fresh conversation, but the project's `CLAUDE.md`, `AGENTS.md` and memory directory are handed to whichever agent runs next. Long sessions are compacted automatically.
-</details>
-
-<details>
-<summary><b>How is it different from cc-bot?</b></summary>
-
-Both are free. [cc-bot](https://github.com/WaterTian/cc-bot) is a Claude Code plugin: it runs inside your own interactive session, on that session's model. SintBot is a standalone daemon: no one has to keep a terminal open, each group has its own project, model and permissions, it drives both Claude Code and Codex, and it comes with a local console.
-</details>
-
-## Documentation
+The installer installs the package only. It does not authenticate Codex, collect credentials, connect the group or start a service. An [AI-assisted installation guide](./docs/AI-ASSISTED-INSTALL.md) covers the same steps.
 
-| Topic | Docs |
-|---|---|
-| Getting started | [Install](./docs/install.md) · [Models](./docs/models.md) · [Configuration](./docs/config.md) · [Security](./docs/security.md) · [Features](./docs/features.md) |
-| Chat platforms | [Slack](./docs/platforms/slack.md) · [Feishu](./docs/platforms/feishu.md) · [WeCom](./docs/platforms/wecom.md) |
-| Features | [Whiteboard](./docs/BOARD.md) · [Previews](./docs/PREVIEW.md) · [Browser](./docs/BROWSER.md) · [Icons](./docs/ICONS.md) · [Codex runner](./docs/CODEX-RUNNER.md) · [Public console access](./docs/PUBLIC-ACCESS.md) |
-| Project | [Architecture (DESIGN.md)](./DESIGN.md) · [Contributing](./CONTRIBUTING.md) · [Changelog](./CHANGELOG.en.json) |
+## First task
 
-## Feedback
+Start with a read-only request in your configured group, for example: “Read the first line of this project's README and reply with that line.” Check the answer against the local file, stop the foreground process cleanly, then start it again. A successful package install alone does not verify the group connection or a model turn.
 
-Please report bugs and request features in [GitHub Issues](https://github.com/sintlab/sintbot/issues). Include the following, with secrets redacted:
+## Data and recovery
 
-- `sintbot version`
-- your OS
-- your chat platform
-- the output of `sintbot doctor`
+Project files, configuration and persistent receipts remain on your Mac. Feishu receives messages and replies, and Codex sends model input to its configured provider. Read-only is the recommended initial permission level; granting full access allows the agent to change files and execute commands.
 
-Report security issues privately through [GitHub Security Advisories](https://github.com/sintlab/sintbot/security/advisories/new); see [SECURITY.md](./SECURITY.md).
+If startup reports unresolved receipts or uncertain external effects, preserve the state and investigate. Do not delete the journal, clear receipts or resend the task merely to get past startup: the prior request may already have executed. Existing multi-group state is not automatically migrated by 1.3.0.
 
 ## License
 
-Full source, docs and tests are public and downloadable under the [PolyForm Shield License 1.0.0](./LICENSE) © WaterTian. The license text governs.
+SintBot is distributed under [PolyForm Shield 1.0.0](./LICENSE). The package includes a built-in core. Use of the software is covered by the included license. Dependency notices are in [THIRD-PARTY-NOTICES.md](./THIRD-PARTY-NOTICES.md).
 
-- You may use, modify and run it for yourself, your team or your company.
-- You may not use it to offer a product that competes with SintBot, paid or free.
+Author: **WaterTian**.