sintbot 1.4.15 → 1.4.17

package/src/agent/privatecore.js

@@ -1,9 +1,9 @@
-// ABI v35 adapter for the private binary decision core. Manifest assembly still stays in JS.
+// ABI v36 adapter for the private binary decision core. Manifest assembly still stays in JS.
 const fs = require('node:fs')
 const path = require('node:path')
 const { createHash } = require('node:crypto')
 
-const EXPECTED_SHA256 = 'a7ad2bd9210906ee6f5d7893ed3d9632769b6e2dbec285c1102492e3ba1257b5'
+const EXPECTED_SHA256 = 'c79f12ceb1ef79aceb0ab54cf87052127325a1d8fdfd5c02e3509fef39f6f511'
 let bytes
 try {
   bytes = fs.readFileSync(path.join(__dirname, 'privatecore.wasm'))
@@ -26,7 +26,7 @@ try {
 } catch (cause) {
   throw new Error('SintBot binary core cannot start on this runtime', { cause })
 }
-if (core.abi_version() !== 35) throw new Error('SintBot binary core ABI mismatch')
+if (core.abi_version() !== 36) throw new Error('SintBot binary core ABI mismatch')
 const encoder = new TextEncoder()
 const decoder = new TextDecoder('utf-8', { fatal: true })
 
@@ -771,6 +771,67 @@ function manifestPolicy(permissionMode, isCodex, allowedTools, disallowedTools)
   return value
 }
 
+// ABI 36 JSON decisions (sintbot-core docs/ABI36_CONTRACTS.md). Each wrapper only
+// checks the envelope shape the host relies on; the core owns the rules and wording.
+const isObject = value => !!value && typeof value === 'object' && !Array.isArray(value)
+
+function connectManifest(basic, userName, version) {
+  const value = coreJson('connect_manifest', { basic: !!basic, userName: String(userName || ''), version: String(version || '') }, 'build the Feishu connect manifest')
+  if (!isObject(value) || !isObject(value.appPreset) || !isObject(value.addons) ||
+      !Array.isArray(value.addons.scopes) || !Array.isArray(value.addons.events) ||
+      !Array.isArray(value.addons.callbacks) || typeof value.hint !== 'string') {
+    throw new Error('SintBot binary core returned an invalid connect manifest')
+  }
+  return value
+}
+
+function connectPlan(step, { basic = false, status = null, code = null, msg = '', observed = {} } = {}) {
+  const value = coreJson('connect_plan', { step, basic: !!basic, status, code, msg: String(msg || ''), observed: isObject(observed) ? observed : {} }, `decide the connect step ${step}`)
+  if (!isObject(value) || !['ok', 'stop', 'wait', 'warn'].includes(value.verdict) || typeof value.notice !== 'string' ||
+      !(value.next === null || typeof value.next === 'string') ||
+      !(value.retryAfterMs === null || Number.isSafeInteger(value.retryAfterMs))) {
+    throw new Error('SintBot binary core returned an invalid connect decision')
+  }
+  return value
+}
+
+function connectConfig(input) {
+  const value = coreJson('connect_config', input, 'build the Feishu connect configuration')
+  if (!isObject(value) || typeof value.ok !== 'boolean' ||
+      (value.ok && (!isObject(value.config) || typeof value.readme !== 'string')) ||
+      (!value.ok && typeof value.error !== 'string')) {
+    throw new Error('SintBot binary core returned an invalid connect configuration')
+  }
+  return value
+}
+
+function qrMatrix(text, ec = 'M') {
+  const value = coreJson('qr_matrix', { text: String(text), ec }, 'encode a QR code')
+  if (!isObject(value) || !Number.isInteger(value.size) || !Array.isArray(value.rows) ||
+      value.rows.length !== value.size || value.rows.some(row => typeof row !== 'string' || row.length !== value.size)) {
+    throw new Error('SintBot binary core returned an invalid QR matrix')
+  }
+  return value
+}
+
+function usageParse(provider, source, status, body, now = Date.now()) {
+  const value = coreJson('usage_parse', { provider, source, status, body, now }, `parse ${provider} ${source} usage`)
+  if (!isObject(value) || typeof value.ok !== 'boolean' ||
+      (value.ok && !Array.isArray(value.windows)) || (!value.ok && typeof value.error !== 'string')) {
+    throw new Error('SintBot binary core returned an invalid usage result')
+  }
+  return value
+}
+
+function envConflicts(input) {
+  const value = coreJson('env_conflicts', input, 'check environment conflicts')
+  if (!isObject(value) || !Array.isArray(value.warnings) ||
+      value.warnings.some(w => !isObject(w) || typeof w.key !== 'string' || typeof w.where !== 'string' || typeof w.reason !== 'string')) {
+    throw new Error('SintBot binary core returned an invalid environment check')
+  }
+  return value
+}
+
 // A trap or exhausted stack can leave the instance's own stack pointer wrong, and
 // C1 calls hold no state, so the next call simply gets a fresh instance.
 function guarded(fn) {
@@ -798,7 +859,7 @@ function followupCall(name, value) {
 function followupEnabled(group, runner) { return followupCall('followup_policy', { group, runner }) }
 function claudeFollowupStep(state, event) { return followupCall('claude_followup_step', { state, event }) }
 
-const entries = { followupEnabled, claudeFollowupStep, classifyError, routeBackend, sandboxTier, appErrorOverride, appNormalizeItem, appStreamTail, appNoticeAction, appDeltaNext, appLandedAction, appCompletionAction, appCompletionNoticeAction, manifestFeatures, manifestHeader, manifestContext, manifestSkills, manifestStyleBoard, manifestImagenAsset, manifestRuntime, manifestPolicy, systemAppendix, codexEffortRejection, wecomGatePrompt, imagenPrompt, turnPrompt, compactEvent, engineQueueStep, engineSlotsStep, engineTurnStep, engineSessionStep, engineHandoffStep, engineIntakeStep, engineLifecycleStep, engineTerminalStep, engineSteerStep, engineRecoveryStep, engineFailoverStep, parseResetFields, chooseResetEpoch, codexBuildPrompt, codexBuildArgs, appUsageFromTotal, settleUsage, appBuildRequest, claudeBaseSkillAllows, claudeBuildArgs, claudePluginAllowRules, claudeNormalizeEvent, codexNormalizeEvent, codexParseError }
+const entries = { followupEnabled, claudeFollowupStep, classifyError, routeBackend, sandboxTier, appErrorOverride, appNormalizeItem, appStreamTail, appNoticeAction, appDeltaNext, appLandedAction, appCompletionAction, appCompletionNoticeAction, manifestFeatures, manifestHeader, manifestContext, manifestSkills, manifestStyleBoard, manifestImagenAsset, manifestRuntime, manifestPolicy, systemAppendix, codexEffortRejection, wecomGatePrompt, imagenPrompt, turnPrompt, compactEvent, engineQueueStep, engineSlotsStep, engineTurnStep, engineSessionStep, engineHandoffStep, engineIntakeStep, engineLifecycleStep, engineTerminalStep, engineSteerStep, engineRecoveryStep, engineFailoverStep, parseResetFields, chooseResetEpoch, codexBuildPrompt, codexBuildArgs, appUsageFromTotal, settleUsage, appBuildRequest, claudeBaseSkillAllows, claudeBuildArgs, claudePluginAllowRules, claudeNormalizeEvent, codexNormalizeEvent, codexParseError, connectManifest, connectPlan, connectConfig, qrMatrix, usageParse, envConflicts }
 for (const name of Object.keys(entries)) entries[name] = guarded(entries[name])
 
 module.exports = { ...entries, engineStep, resetBinaryCore, HUMAN_BY_KIND: HUMAN }

package/src/c2configcontrol.js

@@ -8,20 +8,24 @@ const { loadInstallationFromRaw, assertJournalScope, assertRunnerExecutable,
   MANIFEST, VALIDATORS, SUPPORTED_RUNNERS } = require('./c2install')
 const { C2DurableJournal } = require('./core/c2durablejournal')
 const { assertNoLegacyGroupState } = require('./c2migration')
+const { applyBrainChange } = require('./groupbrain')
 
 const GLOBAL_TASK_KEYS = ['agent', 'timezone', 'brand']
-const RESET_KEYS = ['provider', 'model', 'workdir', 'codexApp']
+// A group's model and depth (providerPrefs, legacy model) are not here: the
+// executors resume the same session with another model of the same backend.
+const RESET_KEYS = ['provider', 'workdir', 'codexApp']
 const EFFORT_ENV = 'CLAUDE_CODE_EFFORT_LEVEL'
 
-// What a group's session belongs to: backend, executable, endpoint, model and
-// the environment the backend starts with. Effort, reasoning effort, tool
-// quality, key, image support, visibility and order apply from the next turn.
-function sessionIdentity(provider, group) {
+// What a group's session belongs to: backend, executable, endpoint and the
+// environment the backend starts with. Model, depth, tool quality, key, image
+// support, visibility and order apply from the next turn in the same session:
+// both executors resume a session with another model of the same backend.
+function sessionIdentity(provider) {
   if (!provider || typeof provider !== 'object') return null
   const env = { ...(provider.env && typeof provider.env === 'object' ? provider.env : {}) }
   delete env[EFFORT_ENV]
-  return { runner: provider.runner, bin: provider.bin || '', baseUrl: provider.baseUrl || '',
-    model: group?.model || provider.model || '', env }
+  delete env.ANTHROPIC_MODEL
+  return { runner: provider.runner, bin: provider.bin || '', baseUrl: provider.baseUrl || '', env }
 }
 
 // Synchronous validation/application around one atomic configuration write.
@@ -134,8 +138,8 @@ function createC2ConfigControl({ installation, getBindings, getHeld = () => new
       // A model library or default change reaches every group that runs
       // the edited provider, even though its own settings stay the same.
       const providerMoved = !isDeepStrictEqual(
-        sessionIdentity(cfg.providers?.[effective(route.chatId, route.group, cfg)], route.group),
-        sessionIdentity(next.cfg.providers?.[effective(route.chatId, target.group, next.cfg)], target.group))
+        sessionIdentity(cfg.providers?.[effective(route.chatId, route.group, cfg)]),
+        sessionIdentity(next.cfg.providers?.[effective(route.chatId, target.group, next.cfg)]))
       if (heldGroups.has(route.chatId)) {
         // Edits elsewhere proceed; the held group keeps its exact settings.
         if (!isDeepStrictEqual(route.group, target.group)) {
@@ -272,18 +276,25 @@ function createC2ConfigControl({ installation, getBindings, getHeld = () => new
     return raw
   }
 
-  function switchGroupProvider(chatId, name) {
-    return writeConfig(raw => {
-      const group = raw.groups?.[chatId]
-      if (!group) throw new Error('Unknown group')
-      if (!cfg.providers?.[name]) throw new Error('Unknown model')
-      group.provider = name
-      // A pinned model id belongs to the previous provider.
-      delete group.model
+  // Backend · model · depth of one group (console, /model, model card). The
+  // writer validates, resets the session only when the backend changes, and
+  // goes live. Returns the change summary; throws on refusal.
+  function setGroupBrain(chatId, change = {}) {
+    let summary = null
+    writeConfig(raw => {
+      if (!raw.groups?.[chatId]) throw new Error('Unknown group')
+      const result = applyBrainChange(raw, chatId, change)
+      if (result.error) throw new Error({ 'unknown-provider': 'Unknown model',
+        'bad-model': 'Invalid model id', 'bad-effort': 'Invalid thinking depth' }[result.error] || 'Unknown group')
+      summary = result
     })
+    return summary
+  }
+  function switchGroupProvider(chatId, name) {
+    return setGroupBrain(chatId, { provider: name })
   }
 
-  return { validateConfig, beforeWrite, applyConfig, writeConfig, switchGroupProvider,
+  return { validateConfig, beforeWrite, applyConfig, writeConfig, switchGroupProvider, setGroupBrain,
     // Groups whose session the last applied write reset (for the console).
     appliedResets: () => [...appliedResets] }
 }

package/src/c2console.js

@@ -13,10 +13,11 @@ const READ_PATHS = ['/api/state', '/api/events', '/api/inbox', '/api/activity',
   '/api/plugins', '/api/design/styles', '/api/design/icons', '/api/fs/listdir',
   '/api/feishu/admin-candidates', '/api/feishu/org-users', '/api/feishu/resolve-contact',
   '/api/feishu/chats', '/api/feishu/chat-members', '/api/update', '/api/claude/models',
+  '/api/groups/model-options',
   START_PATH, CALLBACK_PATH]
 const WRITE_PATHS = ['/api/login', '/api/logout', '/api/logout/all',
   '/api/ui/network', '/api/ui/public-url', '/api/ui/update-settings', '/api/feishu/admins',
-  '/api/groups', '/api/groups/provider', '/api/fs/mkdir',
+  '/api/groups', '/api/groups/provider', '/api/groups/brain', '/api/fs/mkdir',
   '/api/groups/order', '/api/groups/policy', '/api/groups/redact',
   '/api/groups/codex-steer', '/api/groups/steer', '/api/groups/pause', '/api/groups/stop',
   // A fresh session only for an idle, settled group (same rule as /new).
@@ -38,9 +39,18 @@ const WRITE_PATHS = ['/api/login', '/api/logout', '/api/logout/all',
   // manages this exact entry (the updater refuses every other run mode).
   '/api/update/check', '/api/update/start', '/api/update/ignore']
 const SUPPORTED_RUNNERS = ['claude', 'codex']
-const { modelContext } = require('./modelcontext')
+const { groupBrain } = require('./core/brain')
+const { codexCatalogWindows, windowForProvider } = require('./agent/modelwindows')
 const { GROUP_COMMANDS } = require('./runtimefacts')
 
+// What a group runs on one backend, for console rows: configured values only;
+// what the executor finally selected is reported by the run itself.
+function brainFields(group, name, provider, cfg) {
+  const b = groupBrain(group, name, provider, { defaultProvider: cfg.defaultProvider })
+  return { model: b.model, reasoningEffort: b.effort, groupModel: b.groupModel, groupEffort: b.groupEffort,
+    source: b.groupModel ? 'group' : b.defaultModel ? 'provider' : 'default', actualModel: null }
+}
+
 function createC2ConsoleFacade({ getBindings, getCapacity, getConfig, getHeld = () => new Map(), activity = null, store = null,
   assertWriterLock, validateConfig, applyConfig, beforeWrite = () => true,
   appliedResets = () => [], now = Date.now,
@@ -222,8 +232,7 @@ function createC2ConsoleFacade({ getBindings, getCapacity, getConfig, getHeld =
         ? { usedTokens: stats.ctx, windowTokens: null, measuredAt: null, quality: 'historical' } : null)
       return { chatId, name: group.name || chatId.slice(-8), project: path.basename(group.workdir || '') || '—',
         workdir: group.workdir || '', runner: provider.runner || 'claude',
-        ...modelContext(group, provider),
-        reasoningEffort: (provider.runner === 'codex' ? provider.reasoningEffort : provider.env?.CLAUDE_CODE_EFFORT_LEVEL) || '',
+        ...brainFields(group, providerName, provider, cfg),
         paused: !!group.paused, ...live.groups[chatId], context }
     })
     const rows = getActivity().filter(row => (!query.chatId || row.chatId === query.chatId) && (!query.status || row.status === query.status))
@@ -249,8 +258,13 @@ function createC2ConsoleFacade({ getBindings, getCapacity, getConfig, getHeld =
       for (const group of state.groups || []) {
         const cfg = getConfig(), source = cfg.groups?.[group.chatId] || {}
         const provider = cfg.providers?.[group.effectiveProvider || source.provider || cfg.defaultProvider]
-        const model = modelContext(source, provider)
-        Object.assign(group, { configuredModel: model.model, modelSource: model.source, actualModel: model.actualModel })
+        const name = group.effectiveProvider || source.provider || cfg.defaultProvider
+        const fields = brainFields(source, name, provider, cfg)
+        Object.assign(group, { configuredModel: fields.model, modelSource: fields.source,
+          actualModel: null, brain: { provider: name, model: fields.model, effort: fields.reasoningEffort,
+            groupModel: fields.groupModel, groupEffort: fields.groupEffort },
+          providerPrefs: source.providerPrefs || null,
+          contextWindow: provider ? windowForProvider({ ...provider, model: fields.model }, null, codexCatalogWindows()) : null })
       }
       state.previews = (state.previews || []).filter(item => getConfig().groups?.[item.chatId])
       state.leftovers = { supported: false, rows: [], error: null }
@@ -290,6 +304,8 @@ function createC2Console(options = {}) {
     throw new TypeError('C2 console requires explicit installation paths')
   }
   const facade = createC2ConsoleFacade(options)
+  // The process-wide model list (also used by /model), when the service has one.
+  facade.modelCatalog = typeof options.modelCatalog === 'function' ? options.modelCatalog : null
   const ui = createUiServer({ configPath, host, log, getConnHealth, updater: options.updater || null,
     onHostChange: options.onHostChange,
     getLiveState: facade.getLiveState, control: facade.control, runtimePolicy: facade,

package/src/c2install.js

@@ -323,6 +323,6 @@ function registerAddedGroups(installation) {
   return addedRoutes.map(route => route.chatId)
 }
 
-module.exports = { registerAddedGroups, loadInstallation, loadInstallationFromRaw, initializeInstallation, assertPrivateDirectory,
+module.exports = { registerAddedGroups, loadInstallation, loadInstallationFromRaw, initializeInstallation, installationStateDir, assertPrivateDirectory,
   assertJournalScope, assertInstallationJournals, assertRunnerExecutable, SUPPORTED_RUNNERS, MANIFEST,
   VALIDATORS }

package/src/c2multigroupservice.js

@@ -39,7 +39,7 @@ function createC2MultiGroupService({ routes, assertWriterLock,
   createTransport, createBinding, onFatal = () => {}, closeCapacity = () => {},
   quarantine = null, stopTimeoutMs = 2_000, drainTimeoutMs = 12_000,
   createRecoveryAuthority = null, holds = new Map(), sharedFault = () => null,
-  ingressWaitMs = 60_000, now = Date.now, log = () => {} } = {}) {
+  ingressWaitMs = 60_000, onModelCard = null, now = Date.now, log = () => {} } = {}) {
   if (!Array.isArray(routes) || !routes.length ||
       new Set(routes.map(route => route.chatId)).size !== routes.length ||
       routes.some(route => !route || typeof route.chatId !== 'string' ||
@@ -392,6 +392,26 @@ function createC2MultiGroupService({ routes, assertWriterLock,
       throw error
     }
   }
+  // Taps on the /model card only. They write the configuration through the
+  // same validated writer as the console and never touch a journal, receipt
+  // or session; every other card callback stays unsupported. The return
+  // value is the platform's synchronous answer (toast and replacement card).
+  function cardAction(event) {
+    let value = event?.action?.value
+    if (typeof value === 'string') { try { value = JSON.parse(value) } catch { value = null } }
+    if (typeof onModelCard !== 'function' || !value || value.a !== 'mc' || !allowed(event?.chatId)) {
+      return unsupported('card action')(event)
+    }
+    if (maintenance) return { toast: { type: 'info', content: '正在升级，稍后再点' } }
+    if (suspended.has(event.chatId)) return { toast: { type: 'warning', content: '本群暂停处理中，请管理员处理后再改' } }
+    const binding = bindings.get(event.chatId)
+    if (!binding) return { ignored: true }
+    return Promise.resolve().then(() => onModelCard({ ...event, action: { ...event.action, value } }, binding))
+      .catch(error => {
+        log(`model card ${event.chatId}: ${error?.message || String(error)}`)
+        return { toast: { type: 'error', content: '没改成 —— 请稍后再试' } }
+      })
+  }
   function unsupported(source) {
     return event => {
       // An event without group identity cannot safely be attributed. It has
@@ -507,7 +527,7 @@ function createC2MultiGroupService({ routes, assertWriterLock,
       transportStarted = true
       await transport.platform.start(routeMessage, { onFatal: fatal,
         onRecall: recall, onReaction: unsupported('reaction'),
-        onCardAction: unsupported('card action'), onBoardUpdated: unsupported('board update') })
+        onCardAction: cardAction, onBoardUpdated: unsupported('board update') })
       held()
       if (stopPromise) throw new Error('C2 service stopped during connection')
       return { groups: bindings.size, connected: true, ...(suspended.size ? { held: heldGroups() } : {}) }