sintbot 1.4.1 → 1.4.3

package/src/core/turnprogress.js

@@ -0,0 +1,135 @@
+'use strict'
+
+// 卡片进度:里程碑 · 「最近在做」· 脉搏文案(纯函数)。
+// 发行宿主(v2engine)与卡片收尾共用一份。只做展示,不参与任何收据或效果判定。
+// 卡片文案与旧引擎逐字一致,便于逐字对照。
+
+// 长任务的「活着」信号与「做到哪了」。⚠ 只在卡里滚动,不另发消息 —— 群里多一条就是一次刷屏。
+const T = {
+  // 迟迟没动静时先回一声:填进本来就要建的那张流式卡,答案到了原地替换 —— 不多发消息。
+  // 文案过零工具名,且不说「马上/很快」这类无法兑现的承诺。
+  ackWorking: '⏳ 已收到,正在处理…',
+  // 「最近动静」只在**停滞**时才有信息量 ⇒ 超过 cardPulseStaleMs(默认 2 分钟)没动静才追加。
+  // 还没调过任何工具时退回「处理中 · 已跑」。
+  pulse: (ran, doing, stale) => (doing && doing.length ? `⏳ 已跑 ${ran} · ${T.pulseDoing(doing)}` : `⏳ 处理中 · 已跑 ${ran}`) + (stale ? ` · 最近动静 ${stale}前` : ''),
+  // 由工具调用**确定性**推出(describeTool),模型一个字不说也有东西看。脉搏与 /status 共用。
+  // 只给文件名不给路径、不给命令内容 —— 群面零机器路径。
+  pulseDoing: (list) => `最近在做:${list.join(' · ')}`,
+}
+
+// 脉搏「已跑多久」:分钟粒度够用(卡片底部那行的耗时另算到秒)。
+function humanDur(ms) {
+  const s = Math.max(0, Math.round(ms / 1000))
+  if (s < 60) return `${s} 秒`
+  const m = Math.floor(s / 60)
+  if (m < 60) return `${m} 分钟`
+  const h = Math.floor(m / 60)
+  return m % 60 ? `${h} 小时 ${m % 60} 分钟` : `${h} 小时`
+}
+
+// ── 里程碑与「最近在做」─────────────────────────────────────────────────────
+// 模型每完成一个阶段输出一行 `>> …`,引擎认它 —— 跑的时候随打字机进卡(显示成 ▶),收尾收进卡片
+// 折叠区,不再被「只留最后一段」丢掉。判据收在这里,不散在三处(打字机 / 脉搏 / 收尾)。
+const MILESTONE_MAX = 12
+const MILESTONE_RE = /^>>\s*(.*\S)\s*$/
+// 逐行扫、跳过代码围栏 —— shell 的 `>> file` 与 Python 的 `>>>` 都可能出现在代码块里。
+function scanMilestoneLines(text, onLine) {
+  let fence = false
+  for (const line of String(text || '').split('\n')) {
+    if (/^\s*```/.test(line)) { fence = !fence; onLine(line, null); continue }
+    const m = fence ? null : MILESTONE_RE.exec(line)
+    onLine(line, m ? m[1] : null)
+  }
+}
+// 本轮全部里程碑(去重、封顶),从流式全量文本里取 —— 中途说的与收尾说的都算。
+function milestonesOf(text) {
+  const out = []
+  scanMilestoneLines(text, (_l, m) => { if (m && !out.includes(m) && out.length < MILESTONE_MAX) out.push(m) })
+  return out
+}
+// 打字机 / 脉搏用:`>> ` 原地换成 ▶(不换的话 markdown 会把 `>>` 渲染成嵌套引用)。
+function renderMilestones(text) {
+  const lines = []
+  scanMilestoneLines(text, (l, m) => lines.push(m == null ? l : '▶ ' + m))
+  return lines.join('\n')
+}
+// 收尾用:正文里的里程碑行剔掉(它们进折叠区),只剩答案。
+function stripMilestones(text) {
+  const lines = []
+  scanMilestoneLines(text, (l, m) => { if (m == null) lines.push(l) })
+  return lines.join('\n').replace(/\n{3,}/g, '\n\n').trim()
+}
+// 「最近在做」:一次工具调用 → 一句人话。只给文件名不给路径(群面零机器路径);命令内容不给
+// (那是 agent 写的,可能带机器路径);插件按名字;认不出的返回 null,不拿框架里的工具名去凑数。
+// codex 的工具名经 codexcode 映射后与 claude 同形(Bash / Write / MCP)。
+const baseName = (p) => String(p || '').split(/[\\/]/).filter(Boolean).pop() || ''
+function describeTool(name, input = {}) {
+  const n = String(name || '')
+  const inp = input && typeof input === 'object' ? input : {}
+  const file = baseName(inp.file_path || inp.path || inp.notebook_path)
+  const withFile = (verb) => (file ? `${verb} ${file}` : `${verb}文件`)
+  const mcp = /^mcp__(.+?)__/.exec(n)
+  if (mcp) return `用插件 ${mcp[1]}`
+  switch (n) {
+    case 'Read': return withFile('看')
+    case 'Edit': case 'MultiEdit': case 'NotebookEdit': return withFile('改')
+    case 'Write': return withFile('写')
+    case 'Delete': return withFile('删')
+    case 'Bash': return '跑命令'
+    case 'Glob': case 'Grep': case 'FileSearch': return '搜代码'
+    case 'WebFetch': case 'WebSearch': return '查网页'
+    case 'Task': case 'Agent': return '派子任务'
+    case 'MCP': return `用插件${inp.server ? ' ' + baseName(inp.server) : ''}`
+    default: return null
+  }
+}
+// ── 确定性里程碑 ──────────────────────────────────────────────────────────────
+// 「最近在做」只滚最近 3 条,回答的是「还活着吗」;这里回答「做到哪了」:从工具调用里只认**交付类**
+// 动作(写 / 改文件 · 发到群 · 上画布 / 生图 / 预览 · git 提交推送 · 出 PDF),累积、去重、封顶,
+// 与模型自己的 `>> ` 行并排进卡、收尾同进折叠区。只给文件名不给路径,临时目录里的脚本不算
+// (那是它写给自己用的),命令内容不给 —— 群面零机器路径。一次 Bash 只记最重的一条。
+const TMP_PATH_RE = /^(?:\/private)?\/tmp\/|^\/var\/folders\/|^\$TMPDIR|^%TEMP%|\\Temp\\/i
+const unquote = (s) => String(s || '').trim().replace(/^(["'])(.*)\1$/, '$2')
+const SH_ARG = '("[^"]+"|\'[^\']+\'|[^\\s;|&<>]+)'
+function autoMilestone(name, input = {}) {
+  const n = String(name || '')
+  const inp = input && typeof input === 'object' ? input : {}
+  // 路径里带 shell 变量(`$OUT`)或命令替换 ⇒ 名字解不出来,只报动作不报名
+  const fileMs = (verb, raw) => { const p = unquote(raw); const f = baseName(p); return f && !TMP_PATH_RE.test(p) && !/[$`]/.test(p) ? `${verb} ${f}` : null }
+  const target = inp.file_path || inp.path || inp.notebook_path
+  switch (n) {
+    case 'Write': return fileMs('写了', target)
+    case 'Edit': case 'MultiEdit': case 'NotebookEdit': return fileMs('改了', target)
+    case 'Bash': break
+    default: return null
+  }
+  const cmd = String(inp.command || '')
+  const grab = (re) => { const m = re.exec(cmd); return m ? m[1] : '' }
+  let a
+  // 平台基础技能的命令名不写死(sbot feishu / sbot wecom …):里程碑只认动作名
+  if ((a = grab(new RegExp('\\bsbot\\s+[a-z]+\\s+send-file\\s+' + SH_ARG)))) return fileMs('已发文件', a) || '已发文件到群'
+  if ((a = grab(new RegExp('\\bsbot\\s+[a-z]+\\s+send-image\\s+' + SH_ARG)))) return fileMs('已发图片', a) || '已发图片到群'
+  if (/\bsbot\s+[a-z]+\s+send-notice\b/.test(cmd)) return '已发通知到群'
+  if (/\bsbot\s+[a-z]+\s+send-msg\b/.test(cmd)) return '已发消息到群'
+  if (/\bsbot\s+feishu\s+board-add-(?:image|diagram|nodes)\b/.test(cmd)) return '已上画布'
+  if (/\bsbot\s+imagen\s/.test(cmd) && /--out\b/.test(cmd)) return '已提交生图'
+  if (/\bsbot\s+preview\s+start\b/.test(cmd)) return '已开预览'
+  if (/\bgit\s+(?:-C\s+\S+\s+)?push\b/.test(cmd)) return '已推送远端'
+  if (/\bgit\s+(?:-C\s+\S+\s+)?commit\b/.test(cmd)) return '已提交代码'
+  if ((a = grab(new RegExp('--print-to-pdf=' + SH_ARG)))) return fileMs('已出 PDF', a) || '已出 PDF'
+  if (/--print-to-pdf\b/.test(cmd)) return '已出 PDF'
+  if ((a = grab(new RegExp('(?:^|[\\s;&|(])cat\\s*>{1,2}\\s*' + SH_ARG)))) return fileMs('写了', a)
+  return null
+}
+// 最多留 3 条、去重、最新在最后(脉搏与 /status 共用同一个列表)。
+function pushDoing(list, d) {
+  if (!d) return list
+  const i = list.indexOf(d)
+  if (i >= 0) list.splice(i, 1)
+  list.push(d)
+  while (list.length > 3) list.shift()
+  return list
+}
+
+module.exports = { T, humanDur, MILESTONE_MAX, milestonesOf, renderMilestones,
+  stripMilestones, describeTool, autoMilestone, pushDoing }

package/src/core/v2engine.js

@@ -15,6 +15,7 @@ const { createC2TurnProjection } = require('./c2turnprojection')
 const { prepareC2RunnerInput } = require('./c2runnerinput')
 const { continueC2Successor } = require('./c2successorbridge')
 const { rejectC2Input } = require('./c2inputrejection')
+const progress = require('./turnprogress')
 const NO_REPLY = 'NO_REPLY'
 const SYSTEM_APPENDIX = systemAppendix(NO_REPLY)
 const V2_NORMAL_ROUTE_MISSING = Object.freeze(['complete durable v2 authority'])
@@ -47,8 +48,10 @@ const T = {
     '/issue 一句话 记下问题反馈',
     steer ? '直接发文字就是派任务；任务进行中再发的消息会补充进当前任务。'
       : '直接发文字就是派任务；任务进行中再发的消息会排队，等这一轮结束再处理。'].join('\n'),
-  status: ({ model, project, state, queue, session }) => ['【本群状态】', `· 模型：${model}`,
-    `· 项目：${project}`, `· 状态：${state}`, `· 排队：${queue}`, `· 对话：${session}`].join('\n'),
+  status: ({ model, project, state, doing = [], queue, session }) => ['【本群状态】', `· 模型：${model}`,
+    `· 项目：${project}`, `· 状态：${state}`,
+    ...(doing.length ? [`· 最近在做：${doing.join(' · ')}`] : []),
+    `· 排队：${queue}`, `· 对话：${session}`].join('\n'),
   freshSession: '✅ 已开始新的一段对话，之前聊的内容不再带着',
   newBusy: '⚠ 手头还有任务在跑 —— 等它跑完，或先发 /stop 再发 /new',
   quotaShow: (name, value) => `${name} 额度：${value}`,
@@ -68,6 +71,7 @@ const T = {
   stopPending: '正在停止当前任务，这条消息没有处理，请稍后重发。',
   stopUnavailable: '当前任务正在收尾，暂时无法停止。',
   stoppedWithQueue: n => `已停止 — 连同排队的 ${n} 条一并取消`,
+  quotaFailure: 'Codex 订阅额度已用完，本次任务未完成。请恢复额度后重新发送；本次请求不会自动重试。',
   cardFooter: ({ ms, tokens }) => {
     const parts = [`耗时 ${Math.max(0, Math.round(ms / 1000))} 秒`]
     const tokenLabel = n => n >= 1000 ? (n / 1000).toFixed(1) + 'k' : String(n)
@@ -351,11 +355,14 @@ async _durableV2Command(msg, cmd, rest) {
     if (cmd === '/status') {
       const rt = this.rts.get(msg.chatId)
       const queued = this.durableV2Runtime.snapshot().state?.lanes?.queue?.[msg.chatId]?.queue?.length || 0
-      const state = rt?.v2NormalRouteActive
-        ? `运行中（已跑 ${humanDuration(Date.now() - (rt.v2StartedAt || Date.now()))}）`
+      // "Running for long" is not "stuck": steps and the last activity tell them apart.
+      const busy = !!rt?.v2NormalRouteActive
+      const state = busy
+        ? `运行中（已跑 ${humanDuration(Date.now() - (rt.v2StartedAt || Date.now()))}${rt.v2Steps ? ` · 已执行 ${rt.v2Steps} 步` : ''}${rt.v2AliveAt ? ` · 最近动静 ${humanDuration(Date.now() - rt.v2AliveAt)}前` : ''}）`
         : rt?.v2AdmissionPending ? '消息已登记，等待并发名额' : '空闲'
       const project = String(group.workdir || '').split(/[\\/]/).filter(Boolean).pop() || '（未设）'
-      return reject('status', T.status({ model: label(name, provider), project, state, queue: queued,
+      return reject('status', T.status({ model: label(name, provider), project, state,
+        doing: busy && Array.isArray(rt.v2Doing) ? rt.v2Doing : [], queue: queued,
         session: this.store.getSession(msg.chatId) ? '进行中（记着上下文）' : '未开始' }))
     }
     if (cmd === '/new') {
@@ -1258,6 +1265,13 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
     const generation = randomBytes(16).toString('hex')
     rt.v2RunnerGeneration = generation
     rt.v2StartedAt = Date.now()
+    // Evidence that the turn is still moving, for /status and the card pulse;
+    // every turn starts from zero.
+    rt.v2Steps = 0
+    rt.v2AliveAt = 0
+    rt.v2Doing = []
+    rt.v2AutoMilestones = []
+    rt.v2CardQuotaFailure = false
     rt.v2CardBinding = null
     rt.v2StreamRequested = false
     rt.v2StreamQuiescing = false
@@ -1271,6 +1285,13 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
     let accepted = false
     let controller = null
     let capTimer = null
+    let ackTimer = null
+    let ackDue = false
+    let pulseTimer = null
+    const stopProgressTimers = () => {
+      if (ackTimer) { clearTimeout(ackTimer); ackTimer = null }
+      if (pulseTimer) { clearInterval(pulseTimer); pulseTimer = null }
+    }
     try {
       capability = authority.beginRunnerStart({ receiptId, chatId, turnToken,
         generation, verifyGeneration })
@@ -1346,19 +1367,28 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
       rt.v2RunnerNotStarted = false
       let streamChain = Promise.resolve()
       let streamFailure = null
-      const enqueueFrame = event => {
-        if (!this.durableV2StreamFrames || event.type !== 'assistant') return
-        if (!event.text || controller.signal.aborted || rt.v2CancelControl ||
-            rt.v2StreamQuiescing ||
-            authority.scopeState('stopIntent', chatId)) return
-        const buffer = projection.streamSnapshot().bufferText
-        const trimmed = buffer.trim()
-        if (!trimmed || NO_REPLY.startsWith(trimmed)) return
-        const text = buffer
+      // Card progress (same mechanism and wording as the legacy engine): deterministic
+      // milestones and "recently doing" from tool calls, an early "received" card
+      // and a pulse line. All of it is process-local card text; the card itself is
+      // still opened through the durable terminal path below.
+      const autoMs = []
+      rt.v2AutoMilestones = autoMs
+      const pushAuto = m => {
+        if (m && !autoMs.includes(m) && autoMs.length < progress.MILESTONE_MAX) autoMs.push(m)
+      }
+      const autoBlock = () => (autoMs.length ? autoMs.map(m => '▶ ' + m).join('\n') + '\n\n' : '')
+      const pulseFrom = Date.now()
+      let cardTouchedAt = 0
+      const progressClosed = () => rt.v2RunnerGeneration !== generation ||
+        rt.v2TerminalStarted || controller.signal.aborted || rt.v2CancelControl ||
+        rt.v2StreamQuiescing || !!authority.scopeState('stopIntent', chatId)
+      const enqueueCardText = text => {
         rt.v2StreamRequested = true
         streamChain = streamChain.then(async () => {
           if (rt.v2QueueNoticePromise) await rt.v2QueueNoticePromise
-          if (authority.blocked) throw new Error('C2 v2 stream authority closed')
+          // An earlier frame or pulse may still await its platform response;
+          // only a closed authority ends the stream.
+          if (authority.closed) throw new Error('C2 v2 stream authority closed')
           if (controller.signal.aborted || rt.v2CancelControl ||
               authority.scopeState('stopIntent', chatId)) return
           if (!rt.v2CardBinding) {
@@ -1368,8 +1398,10 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
               generation, verifyGeneration,
               applyLocalEffect: this.durableV2ApplyLocalEffect,
               assertWriterLock: this.durableV2AssertWriterLock,
-              redactText: value => redact(value,
-                { pii: job.group?.redactPii !== false }),
+              // An early card may end as the supported quota failure; its final
+              // text then uses the same fixed notice as an unopened card.
+              redactText: value => redact(rt.v2CardQuotaFailure === true
+                ? T.quotaFailure : value, { pii: job.group?.redactPii !== false }),
               sendPlainReply: typeof job.platform.replyOnce === 'function'
                 ? (target, value) => job.platform.replyOnce(target.replyCtx, value)
                 : null })
@@ -1385,6 +1417,82 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
           try { controller.abort() } catch {}
         })
       }
+      const enqueueFrame = event => {
+        if (event.type !== 'assistant') return
+        // /status and the pulse read these; a late event from an older
+        // generation must not write progress into this turn.
+        if (rt.v2RunnerGeneration === generation) {
+          rt.v2AliveAt = Date.now()
+          if (event.tools && event.tools.length) {
+            rt.v2Steps = (rt.v2Steps || 0) + event.tools.length
+            for (const tool of event.tools) {
+              progress.pushDoing(rt.v2Doing, progress.describeTool(tool.name, tool.input))
+              pushAuto(progress.autoMilestone(tool.name, tool.input))
+            }
+          }
+        }
+        if (!this.durableV2StreamFrames) return
+        if (!event.text || controller.signal.aborted || rt.v2CancelControl ||
+            rt.v2StreamQuiescing ||
+            authority.scopeState('stopIntent', chatId)) return
+        const buffer = projection.streamSnapshot().bufferText
+        const trimmed = buffer.trim()
+        if (!trimmed || NO_REPLY.startsWith(trimmed)) return
+        cardTouchedAt = Date.now()
+        enqueueCardText(autoBlock() + progress.renderMilestones(buffer))
+      }
+      const cardsVisible = this.durableV2StreamFrames && !receipt.quiet &&
+        typeof job.platform?.createStreamingCard === 'function'
+      // No visible output after ackDelayMs: open the card that would be opened
+      // anyway and fill it with "received"; the answer replaces it in place and
+      // a turn that ends silent recalls it at the terminal.
+      const ackMs = this.cfg.agent?.ackDelayMs == null ? 25_000 : Number(this.cfg.agent.ackDelayMs)
+      // No card before the runner is accepted. A runner accepted after the
+      // delay (Codex holds its events until its turn start returns) gets the
+      // card as soon as it is accepted.
+      const tryAck = () => {
+        if (!accepted) { ackDue = true; return }
+        if (progressClosed() || rt.v2CardBinding || rt.v2StreamRequested ||
+            projection.streamSnapshot().bufferText.trim()) return
+        cardTouchedAt = Date.now()
+        enqueueCardText(progress.T.ackWorking)
+      }
+      const armAck = delayMs => {
+        ackTimer = setTimeout(() => { ackTimer = null; tryAck() }, delayMs)
+        if (ackTimer.unref) ackTimer.unref()
+      }
+      if (cardsVisible && ackMs > 0) armAck(ackMs)
+      // Pulse: only rewrites the open card. Every PULSE_MS for the first
+      // PULSE_SLOW_AFTER_MS, then every PULSE_SLOW_MS; "recent activity" is only
+      // added after PULSE_STALE_MS without an assistant event.
+      const agentCfg = this.cfg.agent || {}
+      const PULSE_MS = agentCfg.cardPulseMs == null ? 15_000 : Number(agentCfg.cardPulseMs)
+      const PULSE_SLOW_MS = agentCfg.cardPulseSlowMs == null ? 60_000 : Number(agentCfg.cardPulseSlowMs)
+      const PULSE_SLOW_AFTER_MS = agentCfg.cardPulseSlowAfterMs == null ? 10 * 60 * 1000 : Number(agentCfg.cardPulseSlowAfterMs)
+      const PULSE_STALE_MS = agentCfg.cardPulseStaleMs == null ? 2 * 60 * 1000 : Number(agentCfg.cardPulseStaleMs)
+      if (cardsVisible && PULSE_MS > 0) {
+        const pulseEvery = () => (Date.now() - pulseFrom >= PULSE_SLOW_AFTER_MS
+          ? Math.max(PULSE_MS, PULSE_SLOW_MS) : PULSE_MS)
+        pulseTimer = setInterval(() => {
+          const binding = rt.v2CardBinding
+          if (progressClosed() || !binding?.opened || binding.generation !== generation) return
+          if (Date.now() - cardTouchedAt < pulseEvery()) return
+          cardTouchedAt = Date.now()
+          const sinceAlive = Date.now() - (rt.v2AliveAt || pulseFrom)
+          const stale = sinceAlive >= PULSE_STALE_MS ? progress.humanDur(sinceAlive) : ''
+          // Same gate as the stream frame: text that may still become NO_REPLY
+          // never reaches the card.
+          const buffer = projection.streamSnapshot().bufferText
+          const sofar = buffer.trim()
+          const body = autoBlock() + (sofar && !NO_REPLY.startsWith(sofar)
+            ? progress.renderMilestones(buffer) + '\n\n' : '')
+          try {
+            binding.path.update(body + progress.T.pulse(
+              progress.humanDur(Date.now() - pulseFrom), rt.v2Doing, stale))
+          } catch { /* a closed card never affects the turn */ }
+        }, PULSE_MS)
+        if (pulseTimer.unref) pulseTimer.unref()
+      }
       const maxMins = Number(this.cfg.agent.maxTurnTimeMins) || 0
       const timeoutMs = maxMins > 0 ? maxMins * 60_000 : 0
       const timeoutDeadlineAt = timeoutMs > 0 ? Date.now() + timeoutMs : null
@@ -1416,6 +1524,7 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
         onTurnAccepted: value => {
           const ack = capability.onTurnAccepted(value)
           accepted = true
+          if (ackDue) { ackDue = false; armAck(0) }
           return ack
         },
         onSpawnFailed: value => capability.onSpawnFailed(value),
@@ -1440,6 +1549,7 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
       let result
       try {
         result = await running
+        stopProgressTimers()
         rt.v2SteerClosing = true
         rt.v2SteerControl = null
         if (rt.v2SteerDrain) await rt.v2SteerDrain
@@ -1462,6 +1572,7 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
       }
       finally {
         if (capTimer) clearTimeout(capTimer)
+        stopProgressTimers()
         if (rt.v2Controller === controller) rt.v2Controller = null
       }
       if (authority.blocked && rt.v2RunnerStopVerified !== true) {
@@ -1512,6 +1623,7 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
       return { effectId, accepted: true, outputHeld: true }
     } catch (error) {
       if (capTimer) clearTimeout(capTimer)
+      stopProgressTimers()
       if (controller && rt.v2Controller === controller) rt.v2Controller = null
       const proofId = `sbot-c2-runner-not-started-v1:${receiptId}:${generation}`
       const eventId = `sbot-c2-runner-not-started-commit-v1:${receiptId}:${turnToken}:${generation}`
@@ -1620,7 +1732,7 @@ async completeDurableV2CardTurn({ chatId, receiptId, turnToken, effectId,
         verifyGeneration, applyLocalEffect: this.durableV2ApplyLocalEffect,
         assertWriterLock: this.durableV2AssertWriterLock,
         redactText: text => redact(quotaFailure
-          ? 'Codex 订阅额度已用完，本次任务未完成。请恢复额度后重新发送；本次请求不会自动重试。'
+          ? T.quotaFailure
           : text, { pii: job.group?.redactPii !== false }),
         sendPlainReply: typeof job.platform.replyOnce === 'function'
           ? (target, text) => job.platform.replyOnce(target.replyCtx, text)
@@ -1631,7 +1743,15 @@ async completeDurableV2CardTurn({ chatId, receiptId, turnToken, effectId,
       for (const text of updates) path.update(text)
       const footer = T.cardFooter({ ms: Math.max(0, Date.now() - rt.v2StartedAt),
         tokens: rt.v2UsageDecision?.tokens || null })
-      const completed = await path.complete({ payload, replyText, paused, footer })
+      // Milestones from tool calls first, then the model's own `>> ` lines;
+      // the card shows them in its "process" fold (display only).
+      rt.v2CardQuotaFailure = !!quotaFailure
+      const redactMilestone = value => redact(value, { pii: job.group?.redactPii !== false })
+      const milestones = [...(rt.v2AutoMilestones || []),
+        ...progress.milestonesOf(payload.bufferText)]
+        .filter((m, i, a) => a.indexOf(m) === i).map(redactMilestone)
+        .filter(m => typeof m === 'string' && m.trim())
+      const completed = await path.complete({ payload, replyText, paused, footer, milestones })
       const after = authority.snapshot()
       const queue = after.state?.lanes?.queue?.[chatId]?.queue
       let successor = null
@@ -1668,6 +1788,8 @@ async completeDurableV2CardTurn({ chatId, receiptId, turnToken, effectId,
       rt.v2TerminalProjection = null
       rt.v2UsageDecision = null
       rt.v2StartedAt = null
+      rt.v2AutoMilestones = []
+      rt.v2CardQuotaFailure = false
       rt.v2CardBinding = null
       rt.v2StreamRequested = false
       rt.v2TimeoutProof = null

package/src/ui/console.html

@@ -2580,7 +2580,7 @@ function cronFullHtml(text){
   }).join('');
 }
 const RUNTIME_UI_TEXT={
-  "summary": "当前支持多群消息、流式卡片回复、忙时跟进、停止任务、状态查看、认证管理、绑定新群，以及空闲群的模型（Codex / Claude Code）和项目目录切换。新会话、解除绑定、控制台插话、定时任务、生图、画布、预览与升级暂不可用。",
+  "summary": "当前支持多群消息、流式卡片回复、忙时跟进、停止任务、状态查看、认证管理、绑定新群、空闲群的模型（Codex / Claude Code）和项目目录切换，以及后台运行时的软件升级。新会话、解除绑定、控制台插话、定时任务、生图、画布与预览暂不可用。",
   "groups": "可绑定新群，修改模型、项目目录、权限、数据输出和忙时跟进；该群须没有进行中的任务和未结记录。切模型或项目会开始新的一段对话。停止任务在「概览」。群里发 /model 也能切换模型。",
   "skills": "当前支持飞书文字消息、忙时跟进、任务回复和停止。定时任务、生图、群消息管理、画布与预览暂未接入。",
   "cron": "当前不执行定时任务；已有定义仅供查看。",
@@ -3485,21 +3485,27 @@ function renderSettings(){
       <div class="hint">代理第一次填,新的对话轮次就生效;改已有的地址要重启后台服务(sintbot service restart)。</div></div>
   </div>`;
   const updateJob=upd&&upd.job;
-  const updateBusy=!!(updateJob&&['queued','installing','restarting','restart-needed'].includes(updateJob.state));
-  const updateText=!upd?'后台版本检查不可用':updateJob?esc(updateJob.message||updateJob.state):upd.available?`检测到新版本 v${esc(upd.latestVersion)} · 当前 v${esc(upd.currentVersion)}`:upd.checkedAt?`当前为最新版本 v${esc(upd.currentVersion)}`:'尚未检查新版';
+  // 1.4.x 多群服务的升级器带 mode:后台托管才能一键升级,前台与开发版只给说明;不在群里播报。
+  const updMode=upd&&upd.mode||'';
+  const updateBusy=!!(updateJob&&['queued','installing','switching','restarting','restart-needed'].includes(updateJob.state));
+  const updCanInstall=!!(upd&&(updMode?upd.upgradeSupported:true));
+  const updateText=!upd?'后台版本检查不可用':updateJob&&updateJob.state!=='done'||updateJob&&!upd.available&&updMode?esc(updateJob.message||updateJob.state):upd.available?`检测到新版本 v${esc(upd.latestVersion)} · 当前 v${esc(upd.currentVersion)}`:updMode==='dev'&&upd.latestVersion?`最新正式版 v${esc(upd.latestVersion)} · 当前开发版 v${esc(upd.currentVersion)}`:upd.checkedAt&&upd.latestVersion?`当前为最新版本 v${esc(upd.currentVersion)}`:upd.checkedAt?'暂时无法确认最新版本':'尚未检查新版';
+  const updHint=updMode==='managed'?'只安装检测到的稳定版本：等所有群空闲、记录结清后装到单独的目录，再切换后台服务；新版本没在 90 秒内连上全部群会自动换回。旧版本保留用于回滚，不提权，不在群里播报。'
+    :updMode==='foreground'?'前台运行不能在控制台升级：在运行 SintBot 的终端按 Ctrl-C 等待退出，重新运行一行安装命令 curl -fsSL https://sintbot.com/install.sh | bash，再用原来的启动命令启动。'
+    :updMode==='dev'?'开发版不在控制台升级，请用部署脚本。':'只安装检测到的稳定版本;所有群任务与队列清空后才会安装。需要可写的全局安装目录,不会提权;后台服务会自动重启,前台运行需手动重启。';
   const updateCard=`<div class="card" style="grid-column:1/-1" id="updateCard"><div class="lbl">软件更新</div>
     <div id="updateStatus" class="hint" style="margin:0 0 12px;color:var(--ink)">${updateText}</div>
     ${upd&&upd.available?`<div class="hint" style="margin:-4px 0 12px">版本差异与发布说明：<a href="https://github.com/sintlab/sintbot/releases/tag/v${encodeURIComponent(upd.latestVersion)}" target="_blank" rel="noopener" style="color:var(--ember-soft)">查看 v${esc(upd.latestVersion)} 发布说明</a></div>`:''}
     <div class="inline" style="gap:14px;flex-wrap:wrap;margin-bottom:12px">
       <span class="dim">自动检查稳定版(启动时及每天)</span>
-      <label class="inline" style="gap:6px;cursor:pointer"><input type="checkbox" id="updAnnounce" ${upd&&upd.announce!==false?'checked':''} style="width:auto"/> <span class="dim">升级后向群里播报(记住选择)</span></label>
+      ${upd&&upd.announceSupported===false?'':`<label class="inline" style="gap:6px;cursor:pointer"><input type="checkbox" id="updAnnounce" ${upd&&upd.announce!==false?'checked':''} style="width:auto"/> <span class="dim">升级后向群里播报(记住选择)</span></label>`}
     </div>
     <div class="inline" style="gap:8px;flex-wrap:wrap">
       <button class="btn" id="updCheck" ${!upd?'disabled':''}>检查新版</button>
-      <button class="btn primary" id="updInstall" ${!upd||!upd.available||updateBusy?'disabled':''}>现在升级</button>
+      ${updCanInstall?`<button class="btn primary" id="updInstall" ${!upd||!upd.available||updateBusy?'disabled':''}>现在升级</button>`:''}
       <button class="btn" id="updIgnore" ${!upd||!upd.available?'disabled':''}>忽略此版本</button>
     </div>
-    <div class="hint" style="margin-top:10px">只安装检测到的稳定版本;所有群任务与队列清空后才会安装。需要可写的全局安装目录,不会提权;后台服务会自动重启,前台运行需手动重启。</div>
+    <div class="hint" style="margin-top:10px">${updHint}</div>
     <div class="update-history"><div class="subhead">版本历史</div>
       <div id="verhistBox"><div class="empty">加载中…</div></div></div>
   </div>`;
@@ -3547,18 +3553,19 @@ function renderSettings(){
     }catch(e){toast(e.message,'err');b.disabled=false;}
   };
   const saveUpdatePrefs=async(patch)=>{try{S=await api('/api/ui/update-settings','POST',patch);renderSettings();}catch(e){toast(e.message,'err');}};
-  $('#updAnnounce').onchange=()=>saveUpdatePrefs({announce:$('#updAnnounce').checked});
+  if($('#updAnnounce'))$('#updAnnounce').onchange=()=>saveUpdatePrefs({announce:$('#updAnnounce').checked});
   $('#updCheck').onclick=async()=>{const b=$('#updCheck');b.disabled=true;b.textContent='检查中…';
     try{await api('/api/update/check','POST',{});S=await api('/api/state');await refreshInbox();renderSettings();renderOverview();toast('版本检查完成','ok');}
     catch(e){toast(e.message,'err');b.disabled=false;b.textContent='检查新版';}};
-  $('#updInstall').onclick=async()=>{const u=S.update||{},version=u.latestVersion;if(!version)return;
-    const announce=$('#updAnnounce').checked;
-    if(!confirm(`将从 v${u.currentVersion} 升级到 v${version}。${announce?'安装完成后会向未暂停的群播报；':'本次不向群播报。'}所有群任务结束后才开始安装，后台服务会重启。继续?`))return;
+  if($('#updInstall'))$('#updInstall').onclick=async()=>{const u=S.update||{},version=u.latestVersion;if(!version)return;
+    const announce=$('#updAnnounce')?$('#updAnnounce').checked:false;
+    const what=u.mode==='managed'?'等所有群空闲、记录结清后装到单独的目录，再切换后台服务；切换期间约一分钟不处理新消息，新版本没连上全部群会自动换回。':`${announce?'安装完成后会向未暂停的群播报；':'本次不向群播报。'}所有群任务结束后才开始安装，后台服务会重启。`;
+    if(!confirm(`将从 v${u.currentVersion} 升级到 v${version}。${what}继续?`))return;
     const b=$('#updInstall');b.disabled=true;
-    try{const r=await api('/api/update/start','POST',{version,announce});S.update={...r,announce};await refreshInbox();renderSettings();renderOverview();toast('更新已排队，群任务空闲后开始','ok');}
+    try{const r=await api('/api/update/start','POST',{version,announce});S.update={...r,announce};await refreshInbox();renderSettings();renderOverview();toast(u.mode==='managed'?'升级已排队，所有群空闲后开始':'更新已排队，群任务空闲后开始','ok');}
     catch(e){toast(e.message,'err');b.disabled=false;}};
   $('#updIgnore').onclick=async()=>{const version=(S.update||{}).latestVersion;if(!version)return;
-    try{const r=await api('/api/update/ignore','POST',{version});S.update={...r,announce:$('#updAnnounce').checked};await refreshInbox();renderSettings();renderOverview();toast('已忽略此版本','ok');}
+    try{const r=await api('/api/update/ignore','POST',{version});S.update={...r,announce:$('#updAnnounce')?$('#updAnnounce').checked:false};await refreshInbox();renderSettings();renderOverview();toast('已忽略此版本','ok');}
     catch(e){toast(e.message,'err');}};
   // 只开着控制台的守护进程(还没接平台):第一次接上平台时说一句接下来会发生什么(服务托管的会自己重启连上)
   {const pl=S.platforms||{};if(S.setupMode&&(pl.feishu||pl.slack||pl.wecom)&&!window._sbRestartToast){window._sbRestartToast=1;toast(S.setupMode.supervised?'已接上聊天平台 —— 后台服务几秒后自动重启并连上':'已接上聊天平台 —— 在终端里重启 sintbot start --ui 连上','ok');}}
@@ -4032,7 +4039,7 @@ updateThemeBtn();
 const I18N_EN=[
   ["需要处理", "Needs attention"],
   ["当前可用操作", "Available controls"],
-  ["当前支持多群消息、流式卡片回复、忙时跟进、停止任务、状态查看、认证管理、绑定新群，以及空闲群的模型（Codex / Claude Code）和项目目录切换。新会话、解除绑定、控制台插话、定时任务、生图、画布、预览与升级暂不可用。", "Available: group messages, streaming reply cards, busy-turn followups, stopping tasks, live status, authentication, binding new groups, and switching the model (Codex / Claude Code) or project of an idle group. New sessions, unbinding, console messages, schedules, image generation, canvas, previews and upgrades are unavailable."],
+  ["当前支持多群消息、流式卡片回复、忙时跟进、停止任务、状态查看、认证管理、绑定新群、空闲群的模型（Codex / Claude Code）和项目目录切换，以及后台运行时的软件升级。新会话、解除绑定、控制台插话、定时任务、生图、画布与预览暂不可用。", "Available: group messages, streaming reply cards, busy-turn followups, stopping tasks, live status, authentication, binding new groups, switching the model (Codex / Claude Code) or project of an idle group, and software upgrades in a background run. New sessions, unbinding, console messages, schedules, image generation, canvas and previews are unavailable."],
   ["可绑定新群，修改模型、项目目录、权限、数据输出和忙时跟进；该群须没有进行中的任务和未结记录。切模型或项目会开始新的一段对话。停止任务在「概览」。群里发 /model 也能切换模型。", "Bind new groups and change the model, project folder, permissions, data display and busy-turn followups of a group with no running task or unsettled record. Changing the model or project starts a new conversation. Stop tasks in Overview. Members can also switch models with /model in the group."],
   ["当前支持飞书文字消息、忙时跟进、任务回复和停止。定时任务、生图、群消息管理、画布与预览暂未接入。", "Feishu text messages, busy-turn followups, task replies and stopping are supported. Schedules, image generation, group message management, canvas and previews are unavailable."],
   ["当前不执行定时任务；已有定义仅供查看。", "Schedules are not executed. Existing definitions are shown for reference only."],
@@ -4765,6 +4772,11 @@ const I18N_EN=[
   ["更新已排队，群任务空闲后开始","Update queued; installation will start when all group tasks are idle"],
   ["已忽略此版本","This version was ignored"],
   ["版本检查完成","Version check complete"],
+  ["暂时无法确认最新版本","The latest version could not be confirmed yet"],
+  ["升级已排队，所有群空闲后开始","Upgrade queued; it starts when every group is idle"],
+  ["只安装检测到的稳定版本：等所有群空闲、记录结清后装到单独的目录，再切换后台服务；新版本没在 90 秒内连上全部群会自动换回。旧版本保留用于回滚，不提权，不在群里播报。","Installs only the detected stable version: once every group is idle and settled, it goes into its own folder and the background service switches to it; if the new version does not connect every group within 90 seconds, the previous one is restored. The previous version is kept for rollback. No elevated privileges and no group announcements."],
+  ["前台运行不能在控制台升级：在运行 SintBot 的终端按 Ctrl-C 等待退出，重新运行一行安装命令 curl -fsSL https://sintbot.com/install.sh | bash，再用原来的启动命令启动。","A foreground run cannot upgrade from the console: press Ctrl-C in the terminal running SintBot and wait for it to exit, rerun the one-line installer curl -fsSL https://sintbot.com/install.sh | bash, then start with your usual command."],
+  ["开发版不在控制台升级，请用部署脚本。","Development builds are not upgraded from the console; use the deployment scripts."],
   ["访问地址正在切换;页面即将重载","Changing the access address; this page will reload"],
   ["访问设置已保存","Access settings saved"],
   ["开启局域网访问前要设置至少 6 位访问密码","Set an access password of at least 6 characters before enabling LAN access"],
@@ -5380,16 +5392,25 @@ const I18N_EN_RX=[
   [/^登录失败 \(HTTP (\d+)\)$/,"Sign-in failed (HTTP $1)"],
   [/^检测到新版本 v([\d.]+) · 当前 v([\d.]+)$/,"New version v$1 · current v$2"],
   [/^当前为最新版本 v([\d.]+)$/,"v$1 is the latest version"],
+  [/^最新正式版 v([\d.]+) · 当前开发版 v(\S+)$/,"Latest release v$1 · this development build v$2"],
   [/^等待所有群任务结束后更新$/,"Waiting for all group tasks to finish"],
   [/^正在检查安装位置并安装指定版本$/,"Checking the install location and installing the selected version"],
   [/^已安装，正在重启后台服务$/,"Installed; restarting the background service"],
   [/^已安装新版；后台服务未能自动重启，请手动重启$/,"The new version is installed, but the background service did not restart; restart it manually"],
   [/^已安装新版；当前不是受托管服务，请手动重启 SintBot$/,"The new version is installed; restart SintBot manually"],
   [/^更新完成并已重启$/,"Update completed and restarted"],
+  [/^等所有群空闲、记录结清后升级$/,"Waiting until every group is idle and settled"],
+  [/^正在安装 v([\d.]+)$/,"Installing v$1"],
+  [/^v([\d.]+) 已安装，等所有群空闲后切换$/,"v$1 is installed; switching when every group is idle"],
+  [/^正在切换到 v([\d.]+)；期间的消息会提示稍后重发$/,"Switching to v$1; messages meanwhile are asked to be resent later"],
+  [/^已升级到 v([\d.]+)$/,"Upgraded to v$1"],
+  [/^没有切换到 v([\d.]+)：([\s\S]*)；已换回 v([\d.]+)$/,"Did not switch to v$1 ($2); v$3 was restored"],
+  [/^等待群空闲超时；可在空闲后重新发起$/,"Timed out waiting for idle groups; retry when they are idle"],
+  [/^有暂停的群，升级已取消；先处理暂停的群$/,"A group is paused, so the upgrade was cancelled; handle the paused group first"],
   [/^更新后未能自动重启，请手动重启服务$/,"The update could not restart automatically; restart the service manually"],
   [/^等待群任务结束超时；可在任务空闲后重新发起$/,"Timed out waiting for group tasks; retry when they are idle"],
   [/^当前运行的是开发目录或非全局副本；请在终端手动更新$/,"This is a development or non-global install; update it from a terminal"],
-  [/^将从 v([\d.]+) 升级到 v([\d.]+)。([\s\S]*)$/,(a,from,to,what)=>`Upgrade from v${from} to v${to}. ${what.replace('所有群任务结束后才开始安装，后台服务会重启。','Installation waits until all group tasks finish, then restarts the background service.').replace('本次不向群播报。','This update will not be announced in groups.').replace('安装完成后会向未暂停的群播报；','After installation, it will be announced in active groups;')}`],
+  [/^将从 v([\d.]+) 升级到 v([\d.]+)。([\s\S]*)$/,(a,from,to,what)=>`Upgrade from v${from} to v${to}. ${what.replace('等所有群空闲、记录结清后装到单独的目录，再切换后台服务；切换期间约一分钟不处理新消息，新版本没连上全部群会自动换回。','Once every group is idle and settled, it installs into its own folder and switches the background service; new messages wait about a minute during the switch, and the previous version is restored if the new one does not connect every group. ').replace('所有群任务结束后才开始安装，后台服务会重启。','Installation waits until all group tasks finish, then restarts the background service.').replace('本次不向群播报。','This update will not be announced in groups.').replace('安装完成后会向未暂停的群播报；','After installation, it will be announced in active groups;')}`],
 ];
 /* I18N_DICT_END */
 
@@ -5590,7 +5611,7 @@ async function fetchCodexModels(){if(CX_MODELS)return CX_MODELS;try{CX_MODELS=aw
 function cxDefEffortLabel(model){const m=CX_MODELS&&(CX_MODELS.models||[]).find(x=>x.model===model);return '默认'+(m&&m.defEffort?'('+m.defEffort+')':'');}
 /* 有 codex provider 时启动即预热模型列表(server 缓存 10min)→ 卡片默认档标注补齐 + 面板秒开 */
 function warmCodexModels(){if(!CX_MODELS&&S&&(S.providers||[]).some(x=>x.runner==='codex'&&!x.hidden))fetchCodexModels().then(()=>renderProviders());}
-const RUNTIME_DISABLED_SELECTORS='[data-osay],[data-onew],.gpv,[data-rm],[data-gcfg],[data-cronnew],[data-cronadd],[data-crontgl],[data-cronrm],[data-reposave],[data-repotest],[data-iconuse],[data-iconsys],[data-iconstyle],[data-stylecollect],#mNewChat,#addModel,.pcard [data-act="edit"],.pcard [data-act="test"],#amSave,#amDel,#mNewGo,#pgSend,#pgNew,#fSave,#slSave,#wSave,#bSave,#styleNew,[data-styleedit],[data-styledup],[data-styledel],#nsSave,#nsExtract,#clSave,#updCheck,#updInstall,#updIgnore,[data-pvstop],[data-lvkill],[data-lvkillall]';
+const RUNTIME_DISABLED_SELECTORS='[data-osay],[data-onew],.gpv,[data-rm],[data-gcfg],[data-cronnew],[data-cronadd],[data-crontgl],[data-cronrm],[data-reposave],[data-repotest],[data-iconuse],[data-iconsys],[data-iconstyle],[data-stylecollect],#mNewChat,#addModel,.pcard [data-act="edit"],.pcard [data-act="test"],#amSave,#amDel,#mNewGo,#pgSend,#pgNew,#fSave,#slSave,#wSave,#bSave,#styleNew,[data-styleedit],[data-styledup],[data-styledel],#nsSave,#nsExtract,#clSave,[data-pvstop],[data-lvkill],[data-lvkillall]';
 function disableRuntimeControl(el,reason){
   el.disabled=true;el.title=trText(reason);el.dataset.runtimeDisabled='1';
   el.setAttribute('aria-disabled','true');