sintbot 1.4.17 → 1.4.18

package/src/agent/claudeusage.js

@@ -171,7 +171,56 @@ const sleepMs = (ms) => new Promise((r) => setTimeout(r, ms))
 // 里所有人都查不到额度(而这接口恰恰偶发超时/限流);完全不压又让连点几下就把限流捅穿。
 // 10 秒 = 人再问一次就真的重试,机器连点仍被挡住。
 const RAW = { at: 0, data: null }
+
+// ── 额度事件(ABI 37)──────────────────────────────────────────────────────────
+// claude CLI 每次运行都在 stream 里吐一个 `rate_limit_event`(订阅登录时),runner 收到就喂进来;解析在核心
+// `usage_parse('claude','event')`。EVENT_TTL 内有事件 ⇒ 5 小时窗 / 7 天窗用它,不打接口;按模型分的周窗
+// 事件里没有的窗口仍取接口；事件新鲜时接口最多 SCOPED_TTL 请求一次，避免频繁探测触发限流。
+const EVENT_TTL_MS = 10 * 60_000
+const SCOPED_TTL_MS = 30 * 60_000
+const EVT = { at: 0, windows: null } // windows: { session?: {percent, resetsAt, at}, weekly_all?: {…} }
+const EVENT_KIND = { session: 'session', weekly: 'weekly_all' } // 核心的窗口名 → 接口 limits[] 的 kind
+function noteRateLimit(info, now = Date.now()) {
+  if (!info || typeof info !== 'object') return false
+  let parsed
+  try { parsed = require('./privatecore').usageParse('claude', 'event', null, info, now) } catch { return false }
+  if (!parsed.ok) return false
+  const windows = {}
+  for (const w of parsed.windows) {
+    const kind = EVENT_KIND[w.kind]
+    if (kind) windows[kind] = { percent: w.percentUsed, resetsAt: w.resetsAt ?? null, at: now }
+  }
+  if (!Object.keys(windows).length) return false
+  EVT.windows = { ...(EVT.windows || {}), ...windows } // 只有一个窗时别把另一个窗的旧值丢了
+  EVT.at = now
+  // A new event must be visible immediately without invalidating the endpoint cache.
+  CACHE.at = 0; CACHE.val = null
+  return true
+}
+const eventFresh = (now = Date.now()) => !!(EVT.at && now - EVT.at < EVENT_TTL_MS && EVT.windows)
+// 事件与接口数据合成 parseLimits 的形状;同一个窗两边都有 ⇒ 取更新的那份(人点了「刷新」时接口比事件新)。
+function mergeEvent(limits, dataAt, now = Date.now()) {
+  const out = Array.isArray(limits) ? limits.slice() : []
+  for (const [kind, w] of Object.entries(EVT.windows || {})) {
+    if (!w || now - w.at >= EVENT_TTL_MS) continue
+    const i = out.findIndex(l => l && l.kind === kind)
+    if (i >= 0 && dataAt > w.at) continue
+    const row = { kind, percent: w.percent, resetsAt: w.resetsAt, scopeName: '' }
+    if (i >= 0) out[i] = row; else out.push(row)
+  }
+  return out
+}
+function clearEvents() { EVT.at = 0; EVT.windows = null } // 单测用
+
 async function fetchRaw(token, { ttl = 60_000, now = Date.now, log = warn, curl = fetchCurl, sleep = sleepMs } = {}) {
+  const t = now()
+  if (eventFresh(t)) {
+    // 事件新鲜:接口只为补「按模型分的周窗」,最多 SCOPED_TTL 打一次(成败都算一次 —— 限流时不连环重试)。
+    if ((RAW.at && t - RAW.at < SCOPED_TTL_MS) || !token) return RAW.data
+    const data = await curl(token, { log }) // 不重试:事件已经给了主要的两个窗
+    RAW.at = now(); RAW.data = data
+    return data
+  }
   if (RAW.at && now() - RAW.at < (RAW.data ? ttl : FAIL_TTL_MS)) return RAW.data
   // 只走 curl(纪律 1);失败隔一下再问一次 —— 超时与短限流重试一次往往就通,再不通就认了。
   let data = await curl(token, { log })
@@ -371,9 +420,9 @@ async function usageLine({ ttl = TTL, now = Date.now, readToken = readAccessToke
   if (CACHE.at && now() - CACHE.at < (CACHE.val ? ttl : FAIL_TTL_MS)) return CACHE.val
   let val = null
   const token = readToken()
-  if (token) {
-    const data = await fetchRaw(token, { ttl, now, log: io.log, curl: io.curl, sleep: io.sleep })
-    val = formatClaudeUsage(parseLimits(data), now())
+  if (token || eventFresh(now())) { // 令牌读不到(钥匙串偶发)但有新鲜的额度事件,照样出数
+    const data = token ? await fetchRaw(token, { ttl, now, log: io.log, curl: io.curl, sleep: io.sleep }) : null
+    val = formatClaudeUsage(mergeEvent(parseLimits(data), RAW.at, now()), now())
   } else {
     try { val = await fallback({ now, ...(home ? { home } : {}), ...(bin ? { bin } : {}), ...io }) } catch { val = null }
   }
@@ -382,4 +431,4 @@ async function usageLine({ ttl = TTL, now = Date.now, readToken = readAccessToke
 }
 function clearCache() { CACHE.at = 0; CACHE.val = null; RAW.at = 0; RAW.data = null }
 
-module.exports = { usageLine, fetchRaw, clearCache, parseCredentials, parseLimits, formatClaudeUsage, readAccessToken, fetchCurl, fetchNative, readCurlResult, fmtDurDecimal, cachedUsageFallback, readCachedUtilization, readClaudeJson, supportsUsageFlag, resetFallback, settleFallback, QUOTA_SEP, TIMEOUT_MS, FAIL_TTL_MS, RETRY_WAIT_MS, FALLBACK_ARGS, FALLBACK_FLAGS, FALLBACK_TIMEOUT_MS, FALLBACK_KILL_GRACE_MS, FALLBACK_INTERVAL_MS, FALLBACK_FLAG_PROBE_MS }
+module.exports = { usageLine, fetchRaw, clearCache, clearEvents, noteRateLimit, eventFresh, mergeEvent, parseCredentials, parseLimits, formatClaudeUsage, readAccessToken, fetchCurl, fetchNative, readCurlResult, fmtDurDecimal, cachedUsageFallback, readCachedUtilization, readClaudeJson, supportsUsageFlag, resetFallback, settleFallback, QUOTA_SEP, TIMEOUT_MS, FAIL_TTL_MS, RETRY_WAIT_MS, FALLBACK_ARGS, FALLBACK_FLAGS, FALLBACK_TIMEOUT_MS, FALLBACK_KILL_GRACE_MS, FALLBACK_INTERVAL_MS, FALLBACK_FLAG_PROBE_MS }

package/src/agent/privatecore.js

@@ -1,9 +1,9 @@
-// ABI v36 adapter for the private binary decision core. Manifest assembly still stays in JS.
+// ABI v37 adapter for the private binary decision core. Manifest assembly still stays in JS.
 const fs = require('node:fs')
 const path = require('node:path')
 const { createHash } = require('node:crypto')
 
-const EXPECTED_SHA256 = 'c79f12ceb1ef79aceb0ab54cf87052127325a1d8fdfd5c02e3509fef39f6f511'
+const EXPECTED_SHA256 = '9705ac11c9ddcd47c9532471603e5c0c21d189ac89e353b33fcea55de91feb51'
 let bytes
 try {
   bytes = fs.readFileSync(path.join(__dirname, 'privatecore.wasm'))
@@ -26,7 +26,7 @@ try {
 } catch (cause) {
   throw new Error('SintBot binary core cannot start on this runtime', { cause })
 }
-if (core.abi_version() !== 36) throw new Error('SintBot binary core ABI mismatch')
+if (core.abi_version() !== 37) throw new Error('SintBot binary core ABI mismatch')
 const encoder = new TextEncoder()
 const decoder = new TextDecoder('utf-8', { fatal: true })
 
@@ -823,6 +823,27 @@ function usageParse(provider, source, status, body, now = Date.now()) {
   return value
 }
 
+// ABI 37 (docs/ABI37_CONTRACTS.md in the core): idle compaction rules. The host
+// only spawns, stops and logs; start/skip and settle outcomes are decided here.
+function idleCompactPlan(input) {
+  const value = coreJson('idle_compact_plan', input, 'plan idle compaction')
+  if (!isObject(value) || typeof value.start !== 'boolean' || !Number.isFinite(value.at) ||
+      typeof value.reason !== 'string' || typeof value.keep !== 'string' || !Number.isFinite(value.maxMs)) {
+    throw new Error('SintBot binary core returned an invalid idle compaction plan')
+  }
+  return value
+}
+
+function idleCompactSettle(input) {
+  const value = coreJson('idle_compact_settle', input, 'settle idle compaction')
+  if (!isObject(value) || !['compacted', 'stopped', 'failed'].includes(value.status) ||
+      !Number.isFinite(value.fails) || typeof value.notice !== 'string' ||
+      (value.ctx !== null && !Number.isFinite(value.ctx)) || (value.restUntil !== null && !Number.isFinite(value.restUntil))) {
+    throw new Error('SintBot binary core returned an invalid idle compaction result')
+  }
+  return value
+}
+
 function envConflicts(input) {
   const value = coreJson('env_conflicts', input, 'check environment conflicts')
   if (!isObject(value) || !Array.isArray(value.warnings) ||
@@ -859,7 +880,7 @@ function followupCall(name, value) {
 function followupEnabled(group, runner) { return followupCall('followup_policy', { group, runner }) }
 function claudeFollowupStep(state, event) { return followupCall('claude_followup_step', { state, event }) }
 
-const entries = { followupEnabled, claudeFollowupStep, classifyError, routeBackend, sandboxTier, appErrorOverride, appNormalizeItem, appStreamTail, appNoticeAction, appDeltaNext, appLandedAction, appCompletionAction, appCompletionNoticeAction, manifestFeatures, manifestHeader, manifestContext, manifestSkills, manifestStyleBoard, manifestImagenAsset, manifestRuntime, manifestPolicy, systemAppendix, codexEffortRejection, wecomGatePrompt, imagenPrompt, turnPrompt, compactEvent, engineQueueStep, engineSlotsStep, engineTurnStep, engineSessionStep, engineHandoffStep, engineIntakeStep, engineLifecycleStep, engineTerminalStep, engineSteerStep, engineRecoveryStep, engineFailoverStep, parseResetFields, chooseResetEpoch, codexBuildPrompt, codexBuildArgs, appUsageFromTotal, settleUsage, appBuildRequest, claudeBaseSkillAllows, claudeBuildArgs, claudePluginAllowRules, claudeNormalizeEvent, codexNormalizeEvent, codexParseError, connectManifest, connectPlan, connectConfig, qrMatrix, usageParse, envConflicts }
+const entries = { followupEnabled, claudeFollowupStep, classifyError, routeBackend, sandboxTier, appErrorOverride, appNormalizeItem, appStreamTail, appNoticeAction, appDeltaNext, appLandedAction, appCompletionAction, appCompletionNoticeAction, manifestFeatures, manifestHeader, manifestContext, manifestSkills, manifestStyleBoard, manifestImagenAsset, manifestRuntime, manifestPolicy, systemAppendix, codexEffortRejection, wecomGatePrompt, imagenPrompt, turnPrompt, compactEvent, engineQueueStep, engineSlotsStep, engineTurnStep, engineSessionStep, engineHandoffStep, engineIntakeStep, engineLifecycleStep, engineTerminalStep, engineSteerStep, engineRecoveryStep, engineFailoverStep, parseResetFields, chooseResetEpoch, codexBuildPrompt, codexBuildArgs, appUsageFromTotal, settleUsage, appBuildRequest, claudeBaseSkillAllows, claudeBuildArgs, claudePluginAllowRules, claudeNormalizeEvent, codexNormalizeEvent, codexParseError, connectManifest, connectPlan, connectConfig, qrMatrix, usageParse, envConflicts, idleCompactPlan, idleCompactSettle }
 for (const name of Object.keys(entries)) entries[name] = guarded(entries[name])
 
 module.exports = { ...entries, engineStep, resetBinaryCore, HUMAN_BY_KIND: HUMAN }

package/src/agent/runner.js

@@ -22,6 +22,14 @@ function runTurn(opts) {
   return claudeAgent.runTurn(opts)
 }
 
+// 空闲整理只有 Claude 路线有(无头 /compact);GPT ⇒ null = 不支持,引擎只在轮内压缩。
+function compactSession(opts) {
+  const route = routeBackend(opts && opts.provider && opts.provider.runner, opts && opts.codexApp, opts && opts.codexSteer, opts && opts.codexProjectDocFallback)
+  if (route !== 'claude') return null
+  const compact = Number(opts.autocompactTokens ?? opts.provider?.autocompactTokens) || 0
+  return claudeAgent.compactSession({ ...opts, autocompactTokens: compact > 0 ? Math.min(1_000_000, Math.max(100_000, Math.floor(compact))) : 0 })
+}
+
 const isClosedRunnerResult = value => [claudeAgent, codexAgent, codexApp].some(agent => agent.isClosedRunnerResult(value))
 const isClosedRunnerError = value => [claudeAgent, codexAgent, codexApp].some(agent => agent.isClosedRunnerError(value))
-module.exports = { runTurn, probeVersion: claudeAgent.probeVersion, isClosedRunnerResult, isClosedRunnerError }
+module.exports = { runTurn, compactSession, probeVersion: claudeAgent.probeVersion, isClosedRunnerResult, isClosedRunnerError }

package/src/c2configcontrol.js

@@ -200,6 +200,13 @@ function createC2ConfigControl({ installation, getBindings, getHeld = () => new
     if (!prepared || prepared.raw !== JSON.stringify(raw)) {
       throw new Error('Configuration was not validated against the current service')
     }
+    const bindings = getBindings()
+    // Stop every affected compactor before mutating any session or file.
+    let stopping = false
+    for (const chatId of prepared.resets) {
+      if (bindings.get(chatId)?.engine?.stopIdleCompact?.(chatId, '会话已重置')) stopping = true
+    }
+    if (stopping) throw new Error('正在停止会话整理，请稍后再保存设置')
     for (const chatId of prepared.resets) store.resetGroupSession(chatId)
     if (prepared.added.length) {
       for (const route of prepared.added) {

package/src/c2console.js

@@ -110,6 +110,9 @@ function createC2ConsoleFacade({ getBindings, getCapacity, getConfig, getHeld =
     try { assertJournalScope(binding.journal, chatId, { requireSettled: true }) } catch (error) {
       throw new Error(busy, { cause: error })
     }
+    if (binding.engine.stopIdleCompact?.(chatId, '会话已重置')) {
+      throw new Error('正在停止会话整理，请稍后再开新会话')
+    }
     binding.engine.store.resetSessionAndStats(chatId)
     return true
   }

package/src/c2multigroupservice.js

@@ -164,7 +164,7 @@ function createC2MultiGroupService({ routes, assertWriterLock,
       binding.engine.shutdown()
       await bounded(() => binding.engine.drainDurableV2(drainTimeoutMs), drainTimeoutMs + 100)
       const quiescent = [...binding.engine.rts.values()].every(rt =>
-        !rt.v2Controller && !rt.v2NormalRouteActive)
+        !rt.v2Controller && !rt.v2NormalRouteActive && !rt.v2Compacting)
       if (!quiescent || !writerHeld() || !route) throw new Error('C2 group fault is not quiescent')
       const turns = activeTurns(binding.journal.snapshot())
       const proofs = turns.length ? binding.engine.durableV2ActiveFaultProofs?.(turns) || null : null

package/src/connect.js

@@ -12,9 +12,11 @@ const path = require('node:path')
 const readline = require('node:readline')
 const { parseArgs } = require('node:util')
 const core = require('./agent/privatecore')
-const { atomicWriteJSON } = require('./core/store')
+const { atomicWriteJSON, withFileLock } = require('./core/store')
 const { installationStateDir, MANIFEST } = require('./c2install')
 const { defaultProjectsRoot, tooWideReason, realpathLenient } = require('./projectsroot')
+const { fillPicks } = require('./core/modelcmd')
+const { applyBrainChange } = require('./groupbrain')
 
 const CONNECT_OPTIONS = Object.freeze({
   config: { type: 'string' }, 'data-dir': { type: 'string' }, workdir: { type: 'string' },
@@ -195,8 +197,48 @@ function dirObserved(fs, workdir, explicit, home) {
   return { workdir, exists, empty, tooWide, explicit }
 }
 
+// The same CLI catalog and recommendation used by /model and the console.
+// No saved cache or model prompt: a new group must pin a currently observed
+// recommendation, not inherit an old account's defaults or guess a fallback.
+function connectModelCatalog() {
+  const { createModelCatalog } = require('./modelcatalog')
+  const codex = require('./agent/codexstatus')
+  const claude = require('./agent/claudemodels')
+  return createModelCatalog({ cacheFile: null,
+    codexstatus: { listModels: bin => codex.listModels(bin, 12000) },
+    claudemodels: { ...claude, probeModels: bin => claude.probeModels(bin, { timeoutMs: 12000 }) },
+  })
+}
+
+function applyInitialGroupDefaults(config, chatId, cat) {
+  const current = applyBrainChange(config, chatId)
+  if (current.error) throw new Error(`Cannot set the new group's model defaults (${current.error})`)
+  const picks = fillPicks({ switching: true, currentModel: current.before.model || '',
+    currentEffort: current.before.effort || '', cat })
+  // fillPicks may suggest replacing an unsupported old depth on a backend
+  // switch. Onboarding only fills missing fields; it never replaces a choice.
+  const change = {}
+  if (!current.before.model && picks.model) change.model = picks.model
+  if (!current.before.effort && picks.effort) change.effort = picks.effort
+  const result = applyBrainChange(config, chatId, change)
+  if (result.error || !result.after.model || !result.after.effort) throw new Error('The live model catalog did not provide a valid model and thinking depth. Check the executor login and retry.')
+  return { provider: result.target, model: result.after.model, effort: result.after.effort,
+    name: cat.models?.find(m => m.id === result.after.model)?.name || result.after.model, source: cat.source }
+}
+
 async function runConnect(argv, deps = {}) {
   const d = defaultDeps(deps)
+  // Ctrl-C (or the setup page's cancel) aborts at the next step boundary for
+  // the whole run, not only during the scan; nothing is written after an abort.
+  const abort = new AbortController()
+  const onSignal = () => abort.abort()
+  for (const signal of ['SIGINT', 'SIGTERM']) d.signals.on(signal, onSignal)
+  try { return await connectFlow(argv, d, abort) } finally {
+    for (const signal of ['SIGINT', 'SIGTERM']) d.signals.off(signal, onSignal)
+  }
+}
+
+async function connectFlow(argv, d, abort) {
   const { fs, feishu, stderr, stdout } = d
   const { values } = parseArgs({ args: argv, allowPositionals: false, options: CONNECT_OPTIONS })
   const basic = values.basic === true
@@ -206,6 +248,11 @@ async function runConnect(argv, deps = {}) {
   if (givenChatId !== undefined && !CHAT_ID.test(givenChatId)) throw new Error('--chat must be a Feishu group id (oc_…)')
   if (values.provider !== undefined && !RUNNERS.includes(values.provider)) throw new Error('--provider must be codex or claude')
   const say = text => stderr.write(`${text}\n`)
+  const interrupted = () => {
+    if (!abort.signal.aborted) return false
+    say('已取消，没有写入任何文件。')
+    return true
+  }
   // A wait notice repeats on every poll; it is printed once per change.
   let lastWait = null
   const decide = (step, input) => {
@@ -268,8 +315,21 @@ async function runConnect(argv, deps = {}) {
   // let the core validate it now with placeholders for the scanned identities.
   const configInput = { appId: reuseAppId || 'cli_pending', appSecret: 'pending', botOpenId: 'ou_pending', adminOpenId: 'ou_pending',
     chatId: givenChatId || null, workdir, home: d.home, provider, runners }
-  const dryRun = core.connectConfig(configInput)
+  const dryRun = core.connectConfig({ ...configInput, chatId: givenChatId || 'oc_onboarding_pending' })
   if (!dryRun.ok) throw new Error(dryRun.error)
+  const catalog = d.modelCatalog || connectModelCatalog()
+  say('正在读取执行器推荐的型号和思考深度…')
+  let selectedCatalog
+  try { selectedCatalog = await catalog(provider, { runner: provider }) } catch {}
+  if (interrupted()) return EXIT_INTERRUPTED
+  if (!selectedCatalog || selectedCatalog.ok !== true || selectedCatalog.source !== 'live' ||
+      !Array.isArray(selectedCatalog.models) || !selectedCatalog.models.length) {
+    throw new Error(`Could not read live model defaults for ${provider}. Check the executor login and network, then retry. No new Feishu app was created.`)
+  }
+  const modelDefaults = applyInitialGroupDefaults(dryRun.config, givenChatId || 'oc_onboarding_pending', selectedCatalog)
+  d.onModelDefaults?.(modelDefaults)
+  say(`新群默认：${modelDefaults.name} · ${modelDefaults.effort}。接入后可在控制台修改。`)
+  if (interrupted()) return EXIT_INTERRUPTED
 
   // Step 1: the scan. The link is printed, and a local page renders the QR
   // code from the core's matrix; the page is removed however this ends.
@@ -285,9 +345,6 @@ async function runConnect(argv, deps = {}) {
     qrDir = null
   }
   process.once('exit', cleanupQr)
-  const abort = new AbortController()
-  const onSignal = () => abort.abort()
-  for (const signal of ['SIGINT', 'SIGTERM']) d.signals.on(signal, onSignal)
   let lastStatus = null
   let registration
   try {
@@ -324,7 +381,6 @@ async function runConnect(argv, deps = {}) {
   } finally {
     cleanupQr()
     process.off('exit', cleanupQr)
-    for (const signal of ['SIGINT', 'SIGTERM']) d.signals.off(signal, onSignal)
   }
   const appId = registration?.client_id || ''
   const appSecret = registration?.client_secret || ''
@@ -346,6 +402,7 @@ async function runConnect(argv, deps = {}) {
     plan = decide('token', {})
   } catch (error) { plan = decide('token', failureInput(error, larkErrMsg)) }
   if (plan.verdict === 'stop') return 1
+  if (interrupted()) return EXIT_INTERRUPTED
 
   // Step 2b: app enabled, waiting for an organization review when there is one.
   let waitedMs = 0
@@ -354,6 +411,7 @@ async function runConnect(argv, deps = {}) {
     plan = decide('app', { observed: { enabled, pendingReview: enabled ? false : await pendingReview(client, appId), waitedMs } })
     if (plan.verdict !== 'wait') break
     await d.sleep(plan.retryAfterMs)
+    if (interrupted()) return EXIT_INTERRUPTED
     waitedMs += plan.retryAfterMs
     try { identity = await feishu.fetchAppIdentity(client, appId) } catch { identity = null }
   }
@@ -363,6 +421,7 @@ async function runConnect(argv, deps = {}) {
   const precheck = await feishu.feishuPrecheck(client, { appId })
   if (decide('precheck', { observed: { checks: precheck.checks } }).verdict === 'stop') return 1
   const botOpenId = precheck.botOpenId || identity?.openId || ''
+  if (interrupted()) return EXIT_INTERRUPTED
 
   // Step 3: contact range, visibility and a published version. Failures only
   // warn; --basic skips both.
@@ -383,10 +442,11 @@ async function runConnect(argv, deps = {}) {
     } catch (error) { decide('publish', failureInput(error, larkErrMsg)) }
   }
 
+  if (interrupted()) return EXIT_INTERRUPTED
   // The real configuration input, validated before anything is created.
   Object.assign(configInput, { appId, appSecret, botOpenId, adminOpenId })
   let built = core.connectConfig(configInput)
-  if (!built.ok) { decide('config', { code: LOCAL_FAILURE, msg: built.error }); return 1 }
+  if (!built.ok) { decide('config', { code: LOCAL_FAILURE, msg: built.error, observed: { configPath } }); return 1 }
 
   // Step 4: the project directory is judged now and created with the
   // configuration below, so a stopped group step leaves no folder behind.
@@ -403,36 +463,54 @@ async function runConnect(argv, deps = {}) {
       const chat = await feishu.createChat(client, chatName, '', adminOpenId ? [adminOpenId] : [])
       if (!chat.chatId) throw new Error('create chat returned no chat_id')
       chatId = chat.chatId
-      plan = decide('chat', { observed: { appId, chatId } })
+      plan = decide('chat', { observed: { appId } })   // chatId in observed means a group the user supplied
     } catch (error) { plan = decide('chat', { ...failureInput(error, larkErrMsg), observed: { appId, chatId: null } }) }
   } else {
     plan = decide('chat', { observed: { appId, chatId } })
   }
   if (plan.verdict === 'stop') return 1
+  d.onGroupReady?.({ appId, chatId })
+  if (interrupted()) return EXIT_INTERRUPTED // the group exists; the config does not, so --app-id/--chat resumes it
   try {
     await feishu.sendChatText(client, chatId,
       `你好，我是 ${chatName}。这个群绑定的项目目录是 ${workdir}；有任务直接 @ 我或在群里说。`)
   } catch {}
 
+  if (interrupted()) return EXIT_INTERRUPTED
   // Step 6: the folder, config.json (0600 in a 0700 directory) and the README.
   built = core.connectConfig({ ...configInput, chatId })
-  if (!built.ok) { decide('config', { code: LOCAL_FAILURE, msg: built.error }); return 1 }
-  let createdDir = false
+  if (!built.ok) { decide('config', { code: LOCAL_FAILURE, msg: built.error, observed: { configPath } }); return 1 }
+  applyInitialGroupDefaults(built.config, chatId, selectedCatalog)
+  let createdDir = false, createdReadme = false, configCommitted = false
+  const readme = path.join(workdir, 'README.md')
   try {
-    if (!observed.exists) {
-      fs.mkdirSync(path.dirname(workdir), { recursive: true, mode: 0o755 })
-      fs.mkdirSync(workdir, { mode: 0o755 })
-      createdDir = true
-    }
+    // A scan can wait for minutes. Recheck immediately before committing, under
+    // the same short-lived config lock as other writers; never replace a new
+    // installation that appeared while this page was waiting.
     fs.mkdirSync(path.dirname(configPath), { recursive: true, mode: 0o700 })
-    atomicWriteJSON(configPath, built.config, { mode: 0o600 })
-    fs.chmodSync(configPath, 0o600)
-    const readme = path.join(workdir, 'README.md')
-    if (!fs.existsSync(readme)) fs.writeFileSync(readme, built.readme, { mode: 0o644 })
-    plan = decide('config', {})
+    withFileLock(configPath, () => {
+      assertReplaceable(readExistingConfig(fs, configPath), configPath, reuseAppId)
+      assertFreshState(fs, stateDir)
+      if (!observed.exists) {
+        fs.mkdirSync(path.dirname(workdir), { recursive: true, mode: 0o755 })
+        fs.mkdirSync(workdir, { mode: 0o755 })
+        createdDir = true
+      }
+      // Finish fallible project preparation before the config commit. A README
+      // failure must not leave a bound config that the retry correctly refuses.
+      if (!fs.existsSync(readme)) {
+        fs.writeFileSync(readme, built.readme, { mode: 0o644, flag: 'wx' })
+        createdReadme = true
+      }
+      if (fs.existsSync(configPath)) fs.chmodSync(configPath, 0o600)
+      atomicWriteJSON(configPath, built.config, { mode: 0o600 })
+      configCommitted = true
+    })
+    plan = decide('config', { observed: { configPath } })
   } catch (error) {
+    if (createdReadme && !configCommitted) { try { fs.unlinkSync(readme) } catch {} }
     if (createdDir) { try { if (!fs.readdirSync(workdir).length) fs.rmdirSync(workdir) } catch {} }
-    plan = decide('config', { code: LOCAL_FAILURE, msg: error?.message || String(error) })
+    plan = decide('config', { code: LOCAL_FAILURE, msg: error?.message || String(error), observed: { configPath } })
   }
   if (plan.verdict === 'stop') return 1
 
@@ -485,4 +563,4 @@ async function scannerName(client, openId, sdkName, basic, d) {
   return name ? core.connectManifest(basic, name, d.version).appPreset.name : ''
 }
 
-module.exports = { runConnect, CONNECT_OPTIONS, sdkAddons, qrPage, failureInput }
+module.exports = { runConnect, CONNECT_OPTIONS, sdkAddons, qrPage, failureInput, probeRunners, EXIT_INTERRUPTED, connectModelCatalog, applyInitialGroupDefaults }

package/src/core/c2runnerinput.js

@@ -70,4 +70,50 @@ function prepareC2RunnerInput({ prompt, appendSystemPrompt, msg, group, provider
   }
 }
 
-module.exports = { prepareC2RunnerInput }
+// Idle compaction (ABI 37): the same process-local arguments as a turn on this
+// group, minus the prompt, durable hooks and follow-up channel. Tool set, MCP,
+// system appendix, model, depth and env must match the turn exactly or the
+// session's prompt cache is rewritten.
+function prepareC2CompactionInput({ appendSystemPrompt, chatId, group, provider, config, brain = null,
+  sessionId, signal, extraEnv, keep, onEvent = () => {}, log = () => {} } = {}) {
+  if (typeof appendSystemPrompt !== 'string' || !appendSystemPrompt ||
+      typeof chatId !== 'string' || !chatId ||
+      !group || typeof group.workdir !== 'string' || !group.workdir ||
+      !provider || provider.runner !== 'claude' ||
+      !config || !config.agent || typeof config.agent !== 'object' ||
+      (brain !== null && (typeof brain !== 'object' || typeof brain.model !== 'string' ||
+        typeof brain.effort !== 'string')) ||
+      typeof sessionId !== 'string' || !sessionId ||
+      !signal || typeof signal.aborted !== 'boolean' ||
+      !extraEnv || typeof extraEnv !== 'object' || Array.isArray(extraEnv) ||
+      extraEnv.SBOT_CHAT_ID !== chatId ||
+      Object.values(extraEnv).some(value => typeof value !== 'string') ||
+      typeof keep !== 'string' || !keep ||
+      typeof onEvent !== 'function' || typeof log !== 'function') {
+    throw new TypeError('C2 compaction input requires an exact process-local session')
+  }
+  const rawCompact = Number(provider.autocompactTokens) || 0
+  const autocompactTokens = rawCompact > 0
+    ? Math.min(1_000_000, Math.max(100_000, Math.floor(rawCompact))) : 0
+  return {
+    bin: config.agent.bin,
+    appendSystemPrompt, provider,
+    steer: false,
+    model: brain ? brain.model || undefined : group.model,
+    effort: brain ? brain.effort : '',
+    workdir: group.workdir,
+    sessionId,
+    permissionMode: group.permissionMode || 'dontAsk',
+    autocompactTokens,
+    allowedTools: group.allowedTools,
+    disallowedTools: group.disallowedTools,
+    plugins: group.plugins,
+    signal,
+    extraEnv: { ...extraEnv },
+    keep,
+    log,
+    onEvent,
+  }
+}
+
+module.exports = { prepareC2RunnerInput, prepareC2CompactionInput }