sintbot 1.4.14 → 1.4.16

package/CHANGELOG.en.json

@@ -1,4 +1,42 @@
 [
+  {
+    "version": "1.4.16",
+    "date": "2026-11-11",
+    "name": "Per-group model and thinking depth",
+    "items": [
+      {
+        "t": "Choose model and depth per group",
+        "d": "Pick the backend, model and thinking depth on each group card in the console. Model lists come live from the local Codex and Claude Code. Subscription model cards no longer carry a model or depth; a third-party endpoint keeps its model on the model card."
+      },
+      {
+        "t": "Group command /model",
+        "d": "Send /model for a tap-to-pick card and confirm to apply, or send /model high, /model <model>, or /model <backend> <model> <depth>. A model or depth change on the same backend continues the conversation; a backend change starts a new one. Changes wait until the group is idle; receipts and the audit log record who made them."
+      },
+      {
+        "t": "Existing settings migrate automatically",
+        "d": "After the upgrade connects, each model card's model and depth move into its groups with the same effective values and no session reset, after a configuration backup. Custom Codex context windows are checked against each group's chosen model."
+      }
+    ]
+  },
+  {
+    "version": "1.4.15",
+    "date": "2026-11-11",
+    "name": "Simpler model settings",
+    "items": [
+      {
+        "t": "Configure the Codex context window",
+        "d": "Choose the executor default or a custom window on each model card. Validate known limits and distinguish requested settings from runtime reports."
+      },
+      {
+        "t": "Keep compaction settings per model",
+        "d": "Remove global inheritance. Choose the executor default or a custom value. Existing explicit global values become independent settings on existing models; new models use the executor default."
+      },
+      {
+        "t": "Streamline model configuration",
+        "d": "Group model and reasoning, context and compaction, and connection settings. Show numeric inputs only when needed and collapse capacity details. Model trials now use the model compaction setting."
+      }
+    ]
+  },
   {
     "version": "1.4.14",
     "date": "2026-11-11",

package/CHANGELOG.json

@@ -1,4 +1,42 @@
 [
+  {
+    "version": "1.4.16",
+    "date": "2026-11-11",
+    "name": "按群选型号与思考深度",
+    "items": [
+      {
+        "t": "型号与深度按群选",
+        "d": "控制台「群 · 项目」卡上选后端、具体型号和思考深度，型号清单取自本机 Codex / Claude Code 的实时数据；订阅登录的模型卡不再设型号和深度，第三方端点的型号仍在模型卡上。"
+      },
+      {
+        "t": "群命令 /model",
+        "d": "发 /model 打开点选卡，选好点「确认更新」生效；也可直接发 /model high、/model 型号、/model 后端 型号 深度。同一后端换型号或调深度接着当前对话，换后端开新对话；都要等群空闲，回执和审计记下是谁改的。"
+      },
+      {
+        "t": "原有设置自动迁移",
+        "d": "升级连上后，模型卡上原有的型号和深度写进各群，生效值不变、会话不重置；改前自动备份配置。Codex 自定义上下文窗口按各群所选型号的上限校验。"
+      }
+    ]
+  },
+  {
+    "version": "1.4.15",
+    "date": "2026-11-11",
+    "name": "模型设置简化",
+    "items": [
+      {
+        "t": "独立设置 Codex 上下文窗口",
+        "d": "在模型卡片选择执行器默认或自定义窗口，保存时校验已知上限；窗口设置与实际运行回报分开展示。"
+      },
+      {
+        "t": "统一逐模型压缩设置",
+        "d": "取消全局继承，只保留执行器默认与自定义；旧显式全局值转为原有模型的独立设置，新模型使用执行器默认。"
+      },
+      {
+        "t": "精简模型配置交互",
+        "d": "型号推理、上下文压缩、连接登录分组；数值按需显示，容量说明可展开。测试入口同步采用模型的压缩设置。"
+      }
+    ]
+  },
   {
     "version": "1.4.14",
     "date": "2026-11-11",

package/README.md

@@ -31,7 +31,7 @@ SintBot is distributed under the [PolyForm Shield License 1.0.0](./LICENSE).
 <p align="center"><img src="https://raw.githubusercontent.com/sintlab/sintbot/main/docs/assets/how-it-works.svg" alt="Group (Slack, Feishu or WeCom) → SintBot on your machine → Claude Code or Codex in the project directory → the model chosen for that group; progress and results flow back to the group" width="880"></p>
 
 - **One group, one project.** Each group gets its own project directory, session, queue, permissions and scheduled tasks.
-- **Same agent, any brain.** Switch models with `/model` in the chat. Project files and shared notes in `CLAUDE.md` and `AGENTS.md` carry over. Switching starts a new conversation; save important decisions in the project first.
+- **Same agent, any brain.** Pick the backend, model and thinking depth with `/model` in the chat. A model or depth change continues the conversation; a backend change starts a new one, while project files and shared notes in `CLAUDE.md` and `AGENTS.md` carry over, so save important decisions in the project first.
 - **Stays on your machine.** Projects, sessions, memory and logs live on your disk and never pass through a SintBot server. Prompts and the code the model reads still go to the provider you chose.
 - **No public IP.** Every platform uses an outbound long connection (Socket Mode on Slack). One daemon can serve Slack, Feishu and WeCom at the same time.
 

package/README.zh-CN.md

@@ -31,7 +31,7 @@ SintBot 按 [PolyForm Shield 1.0.0 许可](./LICENSE) 分发。
 <p align="center"><img src="https://raw.githubusercontent.com/sintlab/sintbot/main/docs/assets/how-it-works-zh.svg" alt="群(飞书、Slack 或企业微信)→ 你机器上的 SintBot → 项目目录里的 Claude Code 或 Codex → 这个群选的模型;进度与结果回到群里" width="880"></p>
 
 - **一群一项目。** 每个群各有自己的项目目录、会话、排队、权限和定时任务。
-- **同一套 agent,任意大脑。** 群里发 `/model` 就能换模型。项目文件及 `CLAUDE.md`、`AGENTS.md` 中的共享记录可以延续。换模型会开新对话，重要决定先写进项目。
+- **同一套 agent,任意大脑。** 群里发 `/model` 点选后端、型号和思考深度。换型号或调深度接着当前对话；换后端会开新对话，项目文件及 `CLAUDE.md`、`AGENTS.md` 中的共享记录可以延续，重要决定先写进项目。
 - **数据留在本机。** 项目、会话、记忆、日志都在你自己的硬盘上,不经过任何 SintBot 服务器。提示词和模型读到的代码照常发给你选的模型服务商。
 - **不要公网 IP。** 每个平台都是机器主动往外连的长连接(Slack 用 Socket Mode)。一个守护进程可以同时接飞书、Slack、企业微信。
 

package/bin/sintbot-v2.js

@@ -48,6 +48,50 @@ async function startService(rest) {
   return startMultiGroupService({ installation, preflightOnly, uiEnabled, uiHost, uiPort })
 }
 
+// Model and depth used to live on model cards; they now belong to each group.
+// Once every group is connected (a console upgrade can no longer roll back
+// onto this configuration), copy each card's value into the groups that have
+// not chosen and remove it from the card, in one validated write. Effective
+// values do not change, so no session resets. The file is backed up first;
+// a group still running is retried later.
+function scheduleCardDefaultsMigration({ service, configControl, updater, cfg, stateDir, log,
+  delayMs = 15_000, tries = 40 } = {}) {
+  const fs = require('node:fs')
+  const { fillGroupPicks, stripCardDefaults } = require('../src/groupbrain')
+  const pending = () => {
+    const probe = JSON.parse(fs.readFileSync(cfg._path, 'utf8'))
+    const filled = fillGroupPicks(probe).changed
+    return stripCardDefaults(probe).changed || filled
+  }
+  try { if (!pending()) return } catch (error) { log(`card defaults migration skipped: ${error?.message || String(error)}`); return }
+  let left = tries
+  const attempt = () => {
+    left -= 1
+    try {
+      if (!service.serving || service.held.size || service.inMaintenance ||
+          updater?.status?.()?.job?.state === 'switching') throw new Error('service not settled')
+      if (!pending()) return
+      const dir = path.join(stateDir, 'config-backups')
+      fs.mkdirSync(dir, { recursive: true, mode: 0o700 })
+      const backup = path.join(dir, `${new Date().toISOString().replace(/[:.]/g, '-')}-group-model.json`)
+      fs.copyFileSync(cfg._path, backup)
+      fs.chmodSync(backup, 0o600)
+      let summary = null
+      configControl.writeConfig(raw => {
+        const filled = fillGroupPicks(raw)
+        const stripped = stripCardDefaults(raw)
+        summary = { groups: filled.groups.length, providers: stripped.providers }
+      })
+      log(`model and depth moved from model cards into groups: ${summary.groups} group(s), cards ${summary.providers.join(', ') || '-'}; backup ${path.basename(backup)}`)
+    } catch (error) {
+      if (left > 0) { const t = setTimeout(attempt, delayMs * 4); t.unref?.() }
+      else log(`card defaults migration not applied: ${error?.message || String(error)}`)
+    }
+  }
+  const timer = setTimeout(attempt, delayMs)
+  timer.unref?.()
+}
+
 async function startMultiGroupService({ installation, preflightOnly, uiEnabled = false, uiHost, uiPort }) {
   const { stateDir, cfg, routes } = installation
   const { assertPrivateDirectory, assertJournalScope } = require('../src/c2install')
@@ -72,6 +116,21 @@ async function startMultiGroupService({ installation, preflightOnly, uiEnabled =
   const issues = require('../src/core/issues').createIssues(path.join(stateDir, 'issues.jsonl'),
     { withFileLock: require('../src/core/store').withFileLock,
       log: message => process.stderr.write(`C2 multi-group · ${message}\n`) })
+  // Backend · model · depth: one live model list per process (also used by the
+  // console), and every effective change is audited.
+  const modelCatalog = require('../src/modelcatalog').createModelCatalog({
+    codexstatus: require('../src/agent/codexstatus'), claudemodels: require('../src/agent/claudemodels'),
+    claudeBin: cfg.agent?.bin || 'claude', cacheFile: path.join(stateDir, 'model-lists.json'),
+    log: message => process.stderr.write(`C2 multi-group · ${message}\n`) })
+  const groupBrainMod = require('../src/groupbrain')
+  const { buildModelCard } = require('../src/platform/modelcard')
+  const audit = require('../src/core/ledger').createLedger(path.join(stateDir, 'audit.jsonl'),
+    message => process.stderr.write(`C2 multi-group · ${message}\n`))
+  const setGroupBrain = (chatId, change, { by = '', source = 'console' } = {}) => {
+    const result = configControl.setGroupBrain(chatId, change)
+    if (result?.changed) audit.append(groupBrainMod.auditRow(chatId, result, { source, by }))
+    return result
+  }
   const runner = require('../src/agent/runner')
   const validators = { validateState: validatePersistentState,
     validateReceipts: validatePersistentReceipts, validateRelation: validatePersistentRelation }
@@ -173,6 +232,18 @@ async function startMultiGroupService({ installation, preflightOnly, uiEnabled =
       // Faults in a shared resource stop every group; others hold one group.
       sharedFault: () => capacity.snapshot().closed ? 'model concurrency closed' : null,
       log: message => process.stderr.write(`C2 multi-group · ${message}\n`),
+      // /model card taps: the engine decides, the reply replaces the card.
+      onModelCard: async (event, binding) => {
+        let who = event.operator?.name || ''
+        const adapter = liveTransport?.platform.forChat(event.chatId)
+        if (!who && adapter?.nameOf && event.operator?.openId) { try { who = (await adapter.nameOf(event.operator.openId)) || '' } catch {} }
+        const out = await binding.engine.handleModelCard({ chatId: event.chatId, who,
+          value: event.action.value || {}, option: event.action.option })
+        const resp = {}
+        if (out?.toast) resp.toast = out.toast
+        if (out?.state) resp.card = { type: 'raw', data: buildModelCard(out.state) }
+        return Object.keys(resp).length ? resp : undefined
+      },
       onFatal: (error, result) => {
         process.stderr.write(`C2 multi-group failure: ${error?.message || String(error)}\n`)
         finish(result)
@@ -250,8 +321,14 @@ async function startMultiGroupService({ installation, preflightOnly, uiEnabled =
             },
             durableV2SwitchProvider: (chatId, name) => {
               if (chatId !== route.chatId) throw new Error('Model switch targets another group')
-              configControl.switchGroupProvider(chatId, name)
+              setGroupBrain(chatId, { provider: name }, { source: 'command' })
+            },
+            durableV2SetBrain: (chatId, change, meta) => {
+              if (chatId !== route.chatId) throw new Error('Model change targets another group')
+              return setGroupBrain(chatId, change, meta)
             },
+            durableV2ModelCatalog: (name, provider) => modelCatalog(name, provider),
+            durableV2ModelCard: state => buildModelCard(state),
             durableV2UsageProbe: usageProbe, durableV2Issues: issues,
             durableV2Version: require('../package.json').version,
             durableV2DataDir: stateDir,
@@ -301,7 +378,7 @@ async function startMultiGroupService({ installation, preflightOnly, uiEnabled =
         getPlatform: chatId => liveTransport?.platform.forChat(chatId) || null,
         routeMessage: (msg, adapter) => service.routeMessage(msg, adapter),
         isServing: () => service.serving, isFrozen: () => service.inMaintenance,
-        assertWriterLock, ...configControl, updater,
+        assertWriterLock, ...configControl, setGroupBrain, modelCatalog, updater,
         log: message => process.stderr.write(`Console · ${message}\n`) })
       await new Promise((resolve, reject) => {
         ui.server.once('error', reject)
@@ -337,6 +414,14 @@ async function startMultiGroupService({ installation, preflightOnly, uiEnabled =
     // group is connected; then the daily version check starts.
     if (!started.held?.length) updater?.confirmStarted()
     void updater?.start()
+    // Model lists are probed once in the background shortly after startup, so
+    // a later /model or console group card does not wait for a CLI handshake.
+    const runners = new Set(Object.values(cfg.providers || {}).filter(p => p && !p.hidden)
+      .map(p => p.runner === 'codex' ? 'codex' : !p.baseUrl ? 'claude' : '').filter(Boolean))
+    const warm = setTimeout(() => { void modelCatalog.warm([...runners]).catch(() => {}) }, 30_000)
+    warm.unref?.()
+    scheduleCardDefaultsMigration({ service, configControl, updater, cfg, stateDir,
+      log: message => process.stderr.write(`SintBot · ${message}\n`) })
   } catch (error) {
     ui?.close()
     const stopped = await service?.stop('startup-failed', 1)

package/docs/AI-ASSISTED-INSTALL.md

@@ -1,4 +1,4 @@
-# Install SintBot 1.4.14 with an AI assistant
+# Install SintBot 1.4.16 with an AI assistant
 
 English · [简体中文](./zh-CN/AI-ASSISTED-INSTALL.md)
 
@@ -15,5 +15,5 @@ Use the terminal on the Mac that will run SintBot. A cloud shell cannot install
 ## Copyable request
 
 ```text
-Install SintBot 1.4.14 on this Mac using the one-line installation guide. Preserve existing services, configuration, state and Codex or Claude Code account data. Do not expose credentials. Verify the actual installed executable and binary core, configure the Feishu groups with their runners, and initialize only clean new state. Run the foreground preflight and an authorized read-only group test, check the result, then verify clean stop/restart. Stop temporary processes when finished, and distinguish package installation from successful group acceptance.
+Install SintBot 1.4.16 on this Mac using the one-line installation guide. Preserve existing services, configuration, state and Codex or Claude Code account data. Do not expose credentials. Verify the actual installed executable and binary core, configure the Feishu groups with their runners, and initialize only clean new state. Run the foreground preflight and an authorized read-only group test, check the result, then verify clean stop/restart. Stop temporary processes when finished, and distinguish package installation from successful group acceptance.
 ```

package/docs/install.md

@@ -1,4 +1,4 @@
-# Install SintBot 1.4.14
+# Install SintBot 1.4.16
 
 English · [简体中文](./zh-CN/install.md)
 
@@ -10,13 +10,13 @@ You need a Mac, Node.js 22 or newer, and projects stored on that Mac. Install an
 curl -fsSL https://sintbot.com/install.sh | bash
 ```
 
-The installer checks the environment, installs `sintbot@1.4.14` into `~/.local/share/sintbot`, and verifies the entry, built-in core and Feishu module. Continue when you see `Installed and verified SintBot 1.4.14`. No sudo is needed.
+The installer checks the environment, installs `sintbot@1.4.16` into `~/.local/share/sintbot`, and verifies the entry, built-in core and Feishu module. Continue when you see `Installed and verified SintBot 1.4.16`. No sudo is needed.
 
 To preview, append `-s -- --dry-run`. To choose another location, set `SINTBOT_INSTALL_DIR` and adjust the executable paths below.
 
 ## 2. Connect Feishu
 
-In the [Feishu Open Platform](https://open.feishu.cn/), create a custom app, enable the bot and the permissions to receive and reply to messages, choose long connection for event subscription and subscribe to message receipt. Publish the app, add the bot to the groups you will use, and copy each group's `oc_…` chat ID.
+In the [Feishu Open Platform](https://open.feishu.cn/), create a custom app, enable the bot and the permissions to receive and reply to messages, choose long connection for event subscription and subscribe to message receipt. For callbacks, also choose long connection and subscribe to card action callbacks (the tap-to-pick `/model` card needs them). Publish the app, add the bot to the groups you will use, and copy each group's `oc_…` chat ID.
 
 Enter the app credentials in the default macOS terminal (the secret is not echoed):
 
@@ -94,7 +94,7 @@ Any text message is a task. Replies arrive in a card that appears once the model
 | `/skip` | Cancel only the current task; queued messages run next and the conversation is kept |
 | `/stop` | Stop the current task and cancel queued ones; the conversation is kept |
 | `/new` | Start a new conversation, forgetting the previous one (only while the group is idle) |
-| `/model` | List models; `/model name` switches (only while the group is idle; starts a new conversation) |
+| `/model` | Opens a tap-to-pick card: choose the backend, model and thinking depth, then confirm. You can also send `/model high`, `/model <model>` or `/model <backend>`. A model or depth change continues the conversation; a backend change starts a new one. Only while the group is idle |
 | `/hud` | Quota of the current model and usage of this conversation |
 | `/issue text` | Log feedback; review and close it in the console overview |
 | `/help` | List commands, with this group's project and model |
@@ -107,7 +107,7 @@ When the reply card moves below a confirmed follow-up, its existing text is show
 
 ## 6. Console
 
-Model cards show the official context limit when known, otherwise the active executor window. These values are read-only. Set auto-compaction separately for each model: Codex uses a requested token threshold; Claude Code uses a compaction window and can compact before it fills. A value of `0` leaves timing to the executor; models without a per-model setting retain the legacy global value. The configured value is not a confirmed trigger point.
+Model and thinking depth are chosen per group: on the group card, the Model row picks the backend and model and the next row picks the depth, from lists read live from the local Codex and Claude Code. Subscription model cards no longer carry a model or depth; a third-party endpoint keeps its model on the model card. After the upgrade, each model card's existing model and depth move into its groups with the same effective values and no session reset, after a configuration backup. Model cards distinguish requested settings from runtime reports; expand Capacity and runtime details for reference limits. Codex context and per-model compaction each offer Executor default or Custom. Numeric inputs appear only for Custom. Changes apply next turn without resetting the session; known catalog context limits are enforced. Compaction means a threshold for Codex and a window for Claude Code, and may start earlier. Explicit legacy global compaction values are converted into independent settings for existing models, preserving per-model overrides. New models use executor defaults. Reading does not rewrite the file; the converted settings are persisted on the next normal configuration save.
 
 The overview combines group projects and concurrency. Each row shows the runner, state and elapsed time, project folder, model and configured reasoning effort, and the latest reported context usage. Select a group to view its tasks, then expand a task for tools, reply and usage. Context is a session sample, not cumulative token consumption; unknown capacity and older samples are labeled. Row icons provide console messages, stop and new-session controls according to the current group state.
 

package/docs/zh-CN/AI-ASSISTED-INSTALL.md

@@ -1,4 +1,4 @@
-# 用 AI 助手安装 SintBot 1.4.14
+# 用 AI 助手安装 SintBot 1.4.16
 
 [English](../AI-ASSISTED-INSTALL.md) · 简体中文
 
@@ -15,5 +15,5 @@
 ## 可复制的请求
 
 ```text
-按一行安装指南，在这台 Mac 安装 SintBot 1.4.14。保留已有服务、配置、状态和 Codex 或 Claude Code 账号数据，不输出凭据。验证实际入口与二进制核心，配置飞书群及各群的执行器，只对全新状态初始化。运行前台预检和已授权的只读群测试，对照结果，再验证正常停止与重启。完成后停止临时进程，并区分程序包安装与群验收结果。
+按一行安装指南，在这台 Mac 安装 SintBot 1.4.16。保留已有服务、配置、状态和 Codex 或 Claude Code 账号数据，不输出凭据。验证实际入口与二进制核心，配置飞书群及各群的执行器，只对全新状态初始化。运行前台预检和已授权的只读群测试，对照结果，再验证正常停止与重启。完成后停止临时进程，并区分程序包安装与群验收结果。
 ```

package/docs/zh-CN/install.md

@@ -1,4 +1,4 @@
-# 安装 SintBot 1.4.14
+# 安装 SintBot 1.4.16
 
 [English](../install.md) · 简体中文
 
@@ -10,13 +10,13 @@
 curl -fsSL https://sintbot.com/install.sh | bash
 ```
 
-安装器会自动检查环境，把 `sintbot@1.4.14` 装到 `~/.local/share/sintbot`，并验证程序入口、内置核心和飞书模块。看到 `Installed and verified SintBot 1.4.14` 就可以继续。不需要 sudo。
+安装器会自动检查环境，把 `sintbot@1.4.16` 装到 `~/.local/share/sintbot`，并验证程序入口、内置核心和飞书模块。看到 `Installed and verified SintBot 1.4.16` 就可以继续。不需要 sudo。
 
 可选预览：在命令末尾加 `-s -- --dry-run`。要自定义安装位置，设置 `SINTBOT_INSTALL_DIR` 环境变量，并同步修改后面的可执行文件路径。
 
 ## 2. 连接飞书
 
-在 [飞书开放平台](https://open.feishu.cn/) 创建企业自建应用，启用机器人、接收和回复消息的权限，事件订阅选择长连接并订阅消息接收。发布应用后，把机器人加入要使用的群，取得每个群的 `oc_…` 群 ID。
+在 [飞书开放平台](https://open.feishu.cn/) 创建企业自建应用，启用机器人、接收和回复消息的权限，事件订阅选择长连接并订阅消息接收；回调订阅同样选择长连接接收回调并订阅卡片回传交互（群里点选 `/model` 卡片要用）。发布应用后，把机器人加入要使用的群，取得每个群的 `oc_…` 群 ID。
 
 在 macOS 默认终端中输入应用凭据（密钥输入时不显示）：
 
@@ -94,7 +94,7 @@ SINTBOT="$HOME/.local/share/sintbot/bin/sintbot"
 | `/skip` | 只放弃当前任务，排队的接着处理，之前的对话保留 |
 | `/stop` | 停止当前任务，连同排队的一起取消；之前的对话保留 |
 | `/new` | 忘掉之前的对话，开始新的一段（只在本群空闲时生效） |
-| `/model` | 查看可选模型；`/model 名字` 切换（只在本群空闲时生效，切换后开始新的一段对话） |
+| `/model` | 打开点选卡，选后端、型号和思考深度后点「确认更新」；也可直接发 `/model high`、`/model 型号`、`/model 后端`。换型号或调深度接着当前对话，换后端开始新的一段对话；只在本群空闲时生效 |
 | `/hud` | 当前模型的额度与本段对话的用量 |
 | `/issue 一句话` | 记下问题反馈，在控制台概览里查看和标记处理 |
 | `/help` | 查看可用命令，以及本群的项目和模型 |
@@ -107,7 +107,7 @@ Codex 和 Claude Code 的忙时跟进默认开启；`steer:false` 改为排队
 
 ## 6. 控制台
 
-模型卡有可靠官方资料时显示模型上下文上限，否则显示当前执行器窗口，均为只读。自动压缩按模型单独设置：Codex 接收请求阈值；Claude Code 接收压缩窗口，可能在窗口满前压缩。填 `0` 交给执行器决定；尚未单独设置的模型沿用旧全局值。设置值不代表已确认的实际触发点。
+型号与思考深度按群选：在「群 · 项目」卡的「模型」行选后端和型号，下一行选深度，清单取自本机 Codex / Claude Code 的实时数据；订阅登录的模型卡上不再设型号和深度，第三方端点的型号仍在模型卡上设置。升级后，模型卡上原有的型号和深度会自动写进各群，生效值不变、会话不重置，改前备份配置。模型卡区分设置值与运行回报，容量依据可在「容量与运行信息」中查看。Codex 上下文窗口和各模型自动压缩都只提供「执行器默认 / 自定义」，仅自定义时显示数值输入；从下轮生效，保留当前会话。Codex 自定义窗口不能超过已知目录上限。压缩值对 Codex 表示阈值，对 Claude Code 表示窗口，实际可能提前触发。旧配置中的全局压缩值会转换为原有各模型的独立值，已有逐模型设置优先；新模型默认交给执行器，不继续继承旧全局值。读取不改磁盘，下一次正常保存配置时写入转换结果。
 
 概览合并群项目与并发信息，每行显示执行器、状态与耗时、项目目录、模型和配置的思考深度、最近上报的上下文用量。选择群后查看对应任务，展开任务查看工具、回复和用量。上下文是当前会话采样，不是累计消耗；容量未知或历史采样会明确标注。群行图标按当前状态提供插话、停止与新会话操作。
 

package/install.sh

@@ -2,7 +2,7 @@
 # The function is parsed in full before installation starts, including when piped.
 sintbot_install() (
   set -eu
-  version=1.4.14
+  version=1.4.16
   prefix="${SINTBOT_INSTALL_DIR:-$HOME/.local/share/sintbot}"
   fail() { printf 'SintBot: %s\n' "$*" >&2; exit 1; }
   case "${1:-}" in

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sintbot",
-  "version": "1.4.14",
+  "version": "1.4.16",
   "private": false,
   "description": "Drive your Mac projects from Feishu groups with Codex or Claude Code, using a built-in agent core.",
   "bin": {
@@ -51,8 +51,8 @@
     "src/agent/codexapp.js",
     "src/agent/codexcode.js",
     "src/agent/codexstatus.js",
-    "src/agent/modelwindows.js",
     "src/agent/errtag.js",
+    "src/agent/modelwindows.js",
     "src/agent/privatecore.js",
     "src/agent/privatecore.wasm",
     "src/agent/runner.js",
@@ -71,6 +71,7 @@
     "src/config.js",
     "src/consolesay.js",
     "src/consoletrials.js",
+    "src/core/brain.js",
     "src/core/c2cardeffectbridge.js",
     "src/core/c2cardterminalpath.js",
     "src/core/c2durableingress.js",
@@ -104,6 +105,8 @@
     "src/core/issues.js",
     "src/core/ledger.js",
     "src/core/mdtable.js",
+    "src/core/modelcmd.js",
+    "src/core/modelname.js",
     "src/core/proxy.js",
     "src/core/redact.js",
     "src/core/store.js",
@@ -114,10 +117,12 @@
     "src/design.js",
     "src/feishucli.js",
     "src/gitrepo.js",
+    "src/groupbrain.js",
     "src/leftover.js",
-    "src/modelcontext.js",
+    "src/modelcatalog.js",
     "src/platform/board.js",
     "src/platform/feishu.js",
+    "src/platform/modelcard.js",
     "src/platform/multi.js",
     "src/platform/noticecard.js",
     "src/platform/noticesend.js",

package/src/agent/claudecode.js

@@ -55,7 +55,7 @@ function durableToolResults(ev) {
 // replaces provider.baseUrl for ANTHROPIC_BASE_URL — used to point `claude` at
 // the local vision strip-proxy for text-only providers. The auth
 // token is unchanged: the proxy forwards it verbatim to the real upstream.
-function buildEnv(provider = {}, baseUrlOverride, extraEnv) {
+function buildEnv(provider = {}, baseUrlOverride, extraEnv, effort = '') {
   const env = { ...process.env }
 
   // The spawn env is defined ENTIRELY by the provider:
@@ -83,6 +83,8 @@ function buildEnv(provider = {}, baseUrlOverride, extraEnv) {
   delete env.CLAUDECODE
 
   if (provider.env) Object.assign(env, provider.env)
+  // The group's own thinking depth wins over a card-level value.
+  if (effort) env.CLAUDE_CODE_EFFORT_LEVEL = effort
   // Engine-injected non-provider context (e.g. SBOT_CHAT_ID for the feishu base skill).
   // Applied last but namespaced (SBOT_*), so it never collides with provider ANTHROPIC_* env.
   if (extraEnv) Object.assign(env, extraEnv)
@@ -137,6 +139,7 @@ function runTurn({
   prompt,
   provider = {},
   model,
+  effort = '',
   workdir,
   sessionId,
   permissionMode,
@@ -238,7 +241,7 @@ function runTurn({
       const { file, spawnArgs, fallback } = resolveSpawn(bin, args)
       if (fallback) log(`配置的 agent 路径 '${bin}' 不存在,本轮改用 ${fallback} —— 请把配置改回正确路径`) // 兜底只救急,配置仍是错的
       const child = spawnFn(file, spawnArgs, {
-        env: buildEnv(provider, baseUrlOverride, extraEnv),
+        env: buildEnv(provider, baseUrlOverride, extraEnv, effort),
         cwd: workdir || process.cwd(),
         stdio: ['pipe', 'pipe', 'pipe'],
         windowsHide: true,

package/src/agent/claudemodels.js

@@ -17,15 +17,16 @@ const fs = require('node:fs')
 const os = require('node:os')
 const path = require('node:path')
 
-// 当前主力档 + 上一代 Opus。刻意不铺满历史版本 —— 它是挑选快捷方式,不是权威清单;
-// 4.8 留着是因为它仍在服务且额度池与 Opus 5 分开(operator 点名要能选,2026-08-05)。
-// ⚠ id 是不带日期后缀的固定串(`claude-opus-4-8`,不是 `claude-opus-4-8-2026xxxx`)。
+// Fallback candidates, used only when the live list from the CLI handshake
+// has never been obtained. Names follow core/modelname.js display names.
+// Ids carry no date suffix and use hyphens for versions (claude-opus-5-5).
 const BUILTIN = [
   { id: '', name: '默认(跟随 Claude Code)', note: '推荐 · 不指定型号' },
-  { id: 'claude-opus-5', name: 'Claude Opus 5', note: '最强 · 复杂改码 / 长链路' },
-  { id: 'claude-opus-4-8', name: 'Claude Opus 4.8', note: '上一代 Opus · 额度池独立' },
-  { id: 'claude-sonnet-5', name: 'Claude Sonnet 5', note: '速度与智能平衡' },
-  { id: 'claude-haiku-4-5', name: 'Claude Haiku 4.5', note: '最快最省 · 简单任务' },
+  { id: 'claude-opus-5-5', name: 'Opus 5.5', note: '最新 Opus · 复杂改码 / 长链路' },
+  { id: 'claude-opus-5', name: 'Opus 5', note: '上一代 Opus' },
+  { id: 'claude-sonnet-5-5', name: 'Sonnet 5.5', note: '速度与智能平衡' },
+  { id: 'claude-haiku-5-5', name: 'Haiku 5.5', note: '最快最省 · 简单任务' },
+  { id: 'claude-opus-4-8', name: 'Opus 4.8', note: '更早一代 Opus · 额度池独立' },
 ]
 
 // CLI 登录后写在 ~/.claude.json 的账号额外可选模型(本机这台是 Fable 5)。
@@ -57,4 +58,74 @@ function listModels({ loggedIn, home } = {}) {
   return { loggedIn: true, models: mergeModels(extra), source: extra.length ? 'account' : 'builtin' }
 }
 
-module.exports = { listModels, mergeModels, parseExtraModels, readExtraModels, BUILTIN }
+// Live list: Claude Code's own initialize handshake. Start
+// `claude -p --input-format stream-json --output-format stream-json`, send one
+// control_request { subtype: 'initialize' }; the response's models are the
+// CLI's /model menu for this machine and account: official display names,
+// descriptions and the depths each model supports. No question is asked and
+// no turn starts, so no quota is used, and the login token is never read.
+// Only for subscription cards: endpoint/model variables are removed first so a
+// third-party endpoint exported in the service shell cannot redirect it.
+// Unavailable (signed out, CLI too old, timeout) ⇒ null; callers then use the
+// last saved list or the built-in candidates.
+function parseInitModels(models) {
+  if (!Array.isArray(models)) return null
+  const out = [], aliasOf = {}
+  let recommended = ''
+  const seen = new Set()
+  for (const m of models) {
+    if (!m || typeof m.value !== 'string' || !m.value) continue
+    const id = typeof m.resolvedModel === 'string' && m.resolvedModel ? m.resolvedModel : m.value
+    if (m.value === 'default') { recommended = id; continue }
+    // An alias (opus → claude-opus-5-5) is stored as the concrete model, so a
+    // later CLI upgrade does not silently move the group to another generation.
+    if (m.value !== id) aliasOf[m.value] = id
+    if (seen.has(id)) continue
+    seen.add(id)
+    const efforts = Array.isArray(m.supportedEffortLevels) ? m.supportedEffortLevels.filter((e) => typeof e === 'string') : []
+    out.push({ id, name: String(m.displayName || '').trim() || id, note: String(m.description || '').slice(0, 60), efforts, effort: m.supportsEffort !== false })
+  }
+  if (!out.length) return null
+  return { models: out, aliasOf, recommended: recommended || out[0].id }
+}
+
+function probeModels(bin = 'claude', { timeoutMs = 20000, cwd = os.tmpdir(), spawnFn = null } = {}) {
+  return new Promise((resolve) => {
+    const spawn = spawnFn || require('node:child_process').spawn
+    const { resolveSpawn } = require('./winexec')
+    const env = { ...process.env }
+    delete env.ANTHROPIC_BASE_URL; delete env.ANTHROPIC_AUTH_TOKEN; delete env.ANTHROPIC_MODEL; delete env.CLAUDECODE
+    let child, buf = '', settled = false, timer = null
+    const done = (v) => {
+      if (settled) return
+      settled = true
+      clearTimeout(timer)
+      try { child.stdin.end() } catch {}
+      try { child.kill() } catch {}
+      resolve(v)
+    }
+    try {
+      const { file, spawnArgs } = resolveSpawn(bin, ['-p', '--input-format', 'stream-json', '--output-format', 'stream-json', '--verbose'])
+      child = spawn(file, spawnArgs, { cwd, env, stdio: ['pipe', 'pipe', 'ignore'], windowsHide: true })
+    } catch { return resolve(null) }
+    timer = setTimeout(() => done(null), timeoutMs)
+    if (timer.unref) timer.unref()
+    child.on('error', () => done(null))
+    child.on('close', () => done(null))
+    child.stdout.on('data', (d) => {
+      buf += d.toString('utf8')
+      let i
+      while ((i = buf.indexOf('\n')) >= 0) {
+        const line = buf.slice(0, i); buf = buf.slice(i + 1)
+        let o; try { o = JSON.parse(line) } catch { continue }
+        if (o && o.type === 'control_response') {
+          const r = o.response && (o.response.response || o.response)
+          return done(parseInitModels(r && r.models))
+        }
+      }
+    })
+    try { child.stdin.write(JSON.stringify({ type: 'control_request', request_id: 'sintbot-models', request: { subtype: 'initialize' } }) + '\n') } catch { done(null) }
+  })
+}
+
+module.exports = { listModels, mergeModels, parseExtraModels, readExtraModels, BUILTIN, parseInitModels, probeModels }

package/src/agent/codexapp.js

@@ -64,7 +64,7 @@ function itemEvent(method, item) {
 // App Server 的请求和通知共用一条 stdout 流；单轮独立进程使关闭成为续接边界。
 function runTurn(opts = {}) {
   const {
-    bin = 'codex', prompt, provider = {}, model, workdir, sessionId,
+    bin = 'codex', prompt, provider = {}, model, effort: wantEffort, workdir, sessionId,
     permissionMode, autocompactTokens, appendSystemPrompt, codexApp, codexProjectDocFallback, extraEnv,
     onEvent, onDurableEvent, onSteerReady, onSteerLanded, onTurnAccepted, onSpawnFailed, signal, log = () => {},
     softStopGraceMs = 10000, spawnFn = spawn,
@@ -78,6 +78,7 @@ function runTurn(opts = {}) {
     delete env.CLAUDECODE
     delete env.OPENAI_API_KEY // 只使用机器现有的 ChatGPT 订阅登录态，与 codex exec 一致。
     const args = ['app-server', '-c', 'approval_policy=never']
+    if (Number.isSafeInteger(provider.contextWindowTokens) && provider.contextWindowTokens > 0) args.push('-c', `model_context_window=${provider.contextWindowTokens}`)
     if (autocompactTokens > 0) args.push('-c', `model_auto_compact_token_limit=${autocompactTokens}`)
     const { file, spawnArgs, fallback } = resolveSpawn(bin, args)
     if (fallback) log(`配置的 agent 路径 '${bin}' 不存在,本轮改用 ${fallback}`)
@@ -101,7 +102,8 @@ function runTurn(opts = {}) {
     let childCloseObserved = false
     let settled = false
     let completed = false
-    let effort = provider.reasoningEffort || ''
+    const configuredEffort = wantEffort || provider.reasoningEffort || ''
+    let effort = configuredEffort
     let retriedEffort = false
     let pendingTurnStart = false
     let acceptedTurnId = null
@@ -349,7 +351,7 @@ function runTurn(opts = {}) {
       else if (action === 3) { aborted = true; lastResult = null }
       else lastResult = { type: 'result', subtype: 'success', text: lastAgentText, usage: totalUsage, usageCumulative: !!totalUsage,
         contextTokens, contextWindowTokens, contextCompacted }
-      if (lastResult && retriedEffort) lastResult.effortFellBack = provider.reasoningEffort || ''
+      if (lastResult && retriedEffort) lastResult.effortFellBack = configuredEffort
       if (lastResult) emit(lastResult)
       // 让服务端自行落盘退出；收到完成通知就强杀会破坏下一轮 resume。
       try { child.stdin.end() } catch {}

package/src/agent/codexcode.js

@@ -83,8 +83,10 @@ function buildPrompt(prompt, appendSystemPrompt, isResume) {
 // 2026-07-07): resume takes `resume <id>`, REJECTS `--sandbox` (use `-c sandbox_mode=`)
 // and `--cd` (relies on process cwd); fresh accepts `--sandbox` + `--cd`. Prompt rides
 // on stdin (trailing `-`), dodging Windows argv mangling of arbitrary chat text.
-function buildArgs({ sessionId, model, workdir, permissionMode, reasoningEffort, autocompactTokens }) {
-  return codexBuildArgs({ sessionId, model, workdir, permissionMode, reasoningEffort, autocompactTokens })
+function buildArgs({ sessionId, model, workdir, permissionMode, reasoningEffort, autocompactTokens, contextWindowTokens }) {
+  const args = codexBuildArgs({ sessionId, model, workdir, permissionMode, reasoningEffort, autocompactTokens })
+  if (Number.isSafeInteger(contextWindowTokens) && contextWindowTokens > 0) args.unshift('-c', `model_context_window=${contextWindowTokens}`)
+  return args
 }
 
 // A codex turn.failed / error result whose offending param is the reasoning effort —
@@ -106,7 +108,7 @@ function isEffortRejection(result) {
  * @returns {Promise<import('../core/interfaces').RunTurnResult>}
  */
 function runTurn(opts = {}) {
-  const wantEffort = (opts.provider && opts.provider.reasoningEffort) || ''
+  const wantEffort = opts.effort || (opts.provider && opts.provider.reasoningEffort) || ''
   if (!wantEffort) return runOnce(opts, '')
   // Attempt 1 with the configured effort. Hold back only ERROR result events so a
   // recoverable effort-rejection can't finalize the turn early (the engine finalizes on
@@ -191,7 +193,7 @@ function runOnce(opts, effort) {
     // so no collision with codex's own env. read-only sandbox can't run the command anyway.
     if (extraEnv) Object.assign(env, extraEnv)
 
-    const args = buildArgs({ sessionId, model: model || provider.model, workdir, permissionMode, reasoningEffort: effort, autocompactTokens })
+    const args = buildArgs({ sessionId, model: model || provider.model, workdir, permissionMode, reasoningEffort: effort, autocompactTokens, contextWindowTokens: provider.contextWindowTokens })
     const { file, spawnArgs, fallback } = resolveSpawn(bin, args)
     if (fallback) log(`配置的 agent 路径 '${bin}' 不存在,本轮改用 ${fallback} —— 请把配置改回正确路径`) // 与 claude runner 同一条兜底
     const child = spawnFn(file, spawnArgs, {