sintbot 1.4.7 → 1.4.9

package/src/core/c2terminaleffectbridge.js

@@ -6,6 +6,9 @@
 // receive only the v2 decision and stable effect/receipt identities.
 const { C2DurableRuntime } = require('./c2durableruntime')
 const { C2PayloadHandles } = require('./c2payloadhandles')
+const { engineTerminalStep } = require('../agent/privatecore')
+
+const FAILURE_NOTICE = '本次任务执行失败。若已执行过工具，请先核对实际结果，再决定是否重试。'
 
 const RECEIPT_ID = /^[0-9a-f]{32}$/
 const GENERATION = /^[0-9a-f]{32}$/
@@ -23,6 +26,14 @@ function terminalReplyText(payload) {
       typeof payload.answerText !== 'string') {
     throw new TypeError('C2 terminal reply text fields invalid')
   }
+  // The core classifies the result; the host supplies a fixed display string.
+  // Neither a provider error nor unfinished assistant text is a final answer.
+  if (payload.source === 'result' && payload.isError === true) {
+    const event = { ...payload, type: 'finalize' }
+    delete event.receiptId; delete event.turnToken; delete event.quiet
+    if (engineTerminalStep({ finalized: false, outcome: null }, event)
+      .state.outcome.status === 'error') return FAILURE_NOTICE
+  }
   return (payload.answerText.trim() ? payload.answerText : payload.bufferText) ||
     payload.resultText
 }
@@ -106,7 +117,7 @@ function prepareTerminalEffectBridge({ runtime, payloadHandles, receiptId, chatI
           }
         }
         const effect = { effectId: final.effectId, receiptId, chatId,
-          turnToken, generation, verifyGeneration }
+          turnToken, generation, verifyGeneration, assertWriterLock }
         if (final.type === 'quietCompletion') {
           if (replyText !== undefined || resolveTarget !== undefined ||
               sendReply !== undefined || confirmReply !== undefined) {

package/src/core/v2engine.js

@@ -2,11 +2,13 @@
 // this class owns process-local payloads, runner handles and platform I/O.
 // No legacy Engine, retry/failover scheduler or v1 reducer is loaded here.
 'use strict'
+const fs = require('node:fs')
+const path = require('node:path')
 const { randomBytes } = require('node:crypto')
 const { isDeepStrictEqual } = require('node:util')
 const { redact } = require('./redact')
 const { fmtStamp, normalizeTz } = require('./time')
-const { settleUsage, manifestPolicy, manifestHeader, manifestContext,
+const { settleUsage, manifestPolicy, manifestHeader, manifestContext, manifestFeatures, manifestSkills,
   systemAppendix, turnPrompt, engineTerminalStep, engineQueueStep } = require('../agent/privatecore')
 const { taskId } = require('./enginecheckpoint')
 const { prepareCardTerminalPath } = require('./c2cardterminalpath')
@@ -37,6 +39,31 @@ function humanDuration(ms) {
   if (minutes < 60) return `${minutes} 分 ${seconds % 60} 秒`
   return `${Math.floor(minutes / 60)} 小时 ${minutes % 60} 分`
 }
+// The final card is an accounting line: keep seconds for short turns and
+// switch to minutes/hours before a long turn becomes an unreadable number.
+function cardDuration(ms) {
+  const seconds = Math.max(0, Math.round(ms / 1000))
+  if (seconds < 60) return `${seconds} 秒`
+  const minutes = Math.floor(seconds / 60)
+  if (minutes < 60) return seconds % 60 ? `${minutes} 分 ${seconds % 60} 秒` : `${minutes} 分钟`
+  const hours = Math.floor(minutes / 60)
+  return minutes % 60 ? `${hours} 小时 ${minutes % 60} 分` : `${hours} 小时`
+}
+function cardModelInfo(group, provider) {
+  if (!provider) return { model: '', effort: '' }
+  const model = group?.model || provider.model ||
+    (provider.runner === 'codex' ? '' : provider.env?.ANTHROPIC_MODEL) || ''
+  const effort = provider.runner === 'codex'
+    ? provider.reasoningEffort : provider.env?.CLAUDE_CODE_EFFORT_LEVEL
+  const clean = value => String(value || '').replace(/\s+/g, ' ').trim()
+  return { model: clean(model), effort: clean(effort) }
+}
+function cardModelDetail(info, result) {
+  // A rejected configured effort may have been retried at the model default.
+  const fellBack = result?.effortFellBack || result?.result?.effortFellBack
+  return [info?.model, fellBack ? '' : info?.effort]
+    .filter(Boolean).join(' ')
+}
 // Group texts name the project by its folder only, never by a machine path.
 function projectName(group) {
   return String(group?.workdir || '').split(/[\\/]/).filter(Boolean).pop() || '（未设）'
@@ -102,9 +129,11 @@ const T = {
   skipPending: '正在跳过当前任务，这条消息没有处理，请稍后重发。',
   quotaFailure: 'Codex 订阅额度已用完，本次任务未完成。请恢复额度后重新发送；本次请求不会自动重试。',
   cardFooter: ({ ms, tokens }) => {
-    const parts = [`耗时 ${Math.max(0, Math.round(ms / 1000))} 秒`]
+    const parts = [`耗时 ${cardDuration(ms)}`]
     const tokenLabel = n => n >= 1000 ? (n / 1000).toFixed(1) + 'k' : String(n)
-    if (tokens) parts.push(`tokens ↑${tokenLabel((tokens.in || 0) + (tokens.cr || 0) + (tokens.cw || 0))} ↓${tokenLabel(tokens.out || 0)}`)
+    if (tokens && ((tokens.in || 0) + (tokens.cr || 0) + (tokens.cw || 0) + (tokens.out || 0)) > 0) {
+      parts.push(`tokens ↑${tokenLabel((tokens.in || 0) + (tokens.cr || 0) + (tokens.cw || 0))} ↓${tokenLabel(tokens.out || 0)}`)
+    }
     return parts.join(' · ')
   },
 }
@@ -134,6 +163,20 @@ function supportedV2QuotaFailure(payload, runnerResult) {
     outcome.sideEffects === false
 }
 
+// Admit only an observed, closed result on this release's no-retry route.
+// Error classification remains in the core; close/session/effect authority is
+// checked by the terminal path before any delivery can be attempted.
+function supportedV2ClosedFailure(payload, runnerResult) {
+  if (!payload || payload.source !== 'result' || payload.aborted ||
+      payload.sessionMissing || payload.transientNetwork || payload.hasQuota ||
+      payload.freshRetried || payload.resumedSessionCurrent ||
+      runnerResult?.aborted !== false) return false
+  const terminal = { ...payload, type: 'finalize' }
+  delete terminal.receiptId; delete terminal.turnToken; delete terminal.quiet
+  return engineTerminalStep({ finalized: false, outcome: null }, terminal)
+    .state.outcome.status === 'error'
+}
+
 function ordinaryV2Cohort(snapshot, jobs, binding, chatId, receiptId) {
   if (!Array.isArray(jobs) || !jobs.length ||
       jobs.some(job => !job || job.msg?.batch || job.msg?.synthetic ||
@@ -171,6 +214,39 @@ function v2QueueSelection(queue) {
   if (jobs.some(job => !job)) throw new Error('binary selected unknown queue handle')
   return { jobs, anchor: effect.anchor.slice('receipt:job:'.length) }
 }
+
+// The group skills the release entry serves through `sbot feishu` (the same
+// executable as `sintbot`): messages, notice cards, history, reply, edit,
+// recall, download and reactions. Canvas, image generation and takeover cards
+// are not in this release, and neither are scheduled tasks, so the cron
+// section the core renders after the skills is cut off.
+function releaseSkillLines(platform) {
+  const features = manifestFeatures({ ...(platform?.features || {}),
+    boards: false, imagen: false, takeoverCard: false })
+  const lines = manifestSkills({ features,
+    platformName: String(platform?.chatLabel || '飞书群').replace(/群$/, '') })
+  const cron = lines.findIndex(line => line.startsWith('【定时任务】'))
+  return cron < 0 ? lines : lines.slice(0, cron)
+}
+
+// The group skills call `sbot feishu`. A machine can carry another `sbot` on
+// PATH (an older global install), so a turn puts first the bin directory whose
+// `sbot` is this very entry: an npm global prefix's bin next to
+// lib/node_modules/sintbot. Nothing is changed when no such directory exists
+// (a source checkout, tests).
+let releaseBin
+function releaseBinDir(entry = path.join(__dirname, '..', '..', 'bin', 'sintbot-v2.js')) {
+  if (releaseBin !== undefined && arguments.length === 0) return releaseBin
+  let found = null
+  try {
+    const self = fs.realpathSync(entry)
+    const dir = path.resolve(path.dirname(self), '..', '..', '..', '..', 'bin')
+    if (fs.realpathSync(path.join(dir, 'sbot')) === self) found = dir
+  } catch {}
+  if (arguments.length === 0) releaseBin = found
+  return found
+}
+
 class Engine {
   constructor(cfg, options = {}) {
     const { store, log = () => {}, durableV2Runtime, durableV2Payloads,
@@ -347,7 +423,9 @@ _rt(chatId) {
 
 baseSkillEnv(chatId) {
     const g = (this.cfg.groups || {})[chatId]
-    return { SBOT_CHAT_ID: chatId, ...(g && g.platform ? { SBOT_PLATFORM: g.platform } : {}), TZ: this.tz, ...(this.cfg._path ? { SBOT_CONFIG: this.cfg._path } : {}), ...(this.uiLocalUrl ? { SBOT_UI_URL: this.uiLocalUrl } : {}) }
+    const bin = releaseBinDir()
+    return { ...(bin ? { PATH: [bin, process.env.PATH].filter(Boolean).join(path.delimiter) } : {}),
+      SBOT_CHAT_ID: chatId, ...(g && g.platform ? { SBOT_PLATFORM: g.platform } : {}), TZ: this.tz, ...(this.cfg._path ? { SBOT_CONFIG: this.cfg._path } : {}), ...(this.uiLocalUrl ? { SBOT_UI_URL: this.uiLocalUrl } : {}) }
   }
 
 _resolveGroup(chatId) {
@@ -744,7 +822,9 @@ async _runDurableV2Steer(rt, receiptId) {
         invoke: () => control.steerDurable({ msgId: job.msg.msgId, text }) })
       entry.accepted = accepted
       if (accepted) {
-        if (entry.landed) authority.commitSteerObservation({ ...identity, type: 'landed' })
+        if (entry.landed) {
+          authority.commitSteerObservation({ ...identity, type: 'landed' })
+        }
         return { receiptId, steered: true, accepted: true, landed: entry.landed, staged: true }
       }
       if (entry.landed) throw new Error('C2 rejected steer also landed; outcome inconsistent')
@@ -766,9 +846,20 @@ async _runDurableV2Steer(rt, receiptId) {
       return { receiptId, queued: true, staged: true, accepted: false }
     })()
     rt.v2QueueNoticePromise = work
-    try { return await work }
+    let outcome
+    try { outcome = await work }
     catch (error) { authority.close(); rt.v2Controller?.abort(); this.durableV2SealCapacity?.(error); throw error }
     finally { if (rt.v2QueueNoticePromise === work) rt.v2QueueNoticePromise = null }
+    try {
+      if (outcome.accepted && entry.landed) {
+        await rt.v2SteerLandedChain
+        await rt.v2MoveCard?.(entry)
+      }
+      return outcome
+    } catch (error) {
+      authority.close(); rt.v2Controller?.abort(); this.durableV2SealCapacity?.(error)
+      throw error
+    }
   }
 
 async runDurableV2Stop(msg, platform) {
@@ -1166,7 +1257,8 @@ async _drainDurableV2NormalChain(initial) {
       const outcome = engineTerminalStep({ finalized: false, outcome: null },
         terminal).state.outcome
       const quotaFailure = supportedV2QuotaFailure(payload, rt.v2RunnerResult)
-      if (['error', 'empty', 'stopped'].includes(outcome.status) && !quotaFailure) {
+      const closedFailure = supportedV2ClosedFailure(payload, rt.v2RunnerResult)
+      if (['error', 'empty', 'stopped'].includes(outcome.status) && !quotaFailure && !closedFailure) {
         const classified = this.classifyDurableV2UnresolvedTurn({ ...identity,
           payload })
         const error = new Error('C2 v2 ordinary result requires fault recovery')
@@ -1177,7 +1269,7 @@ async _drainDurableV2NormalChain(initial) {
       if (payload.source !== 'result' || payload.sessionMissing ||
           (payload.hasQuota && !quotaFailure) || payload.transientNetwork || payload.freshRetried ||
           payload.resumedSessionCurrent ||
-          (!['ok', 'no-reply'].includes(outcome.status) && !quotaFailure)) {
+          (!['ok', 'no-reply'].includes(outcome.status) && !quotaFailure && !closedFailure)) {
         authority.close()
         const error = new Error('C2 v2 ordinary result needs a retry or notice decision')
         error.code = 'C2_V2_UNRESOLVED_TURN'
@@ -1195,7 +1287,7 @@ async _drainDurableV2NormalChain(initial) {
       for (const settledReceiptId of completed.settledReceiptIds ||
         [identity.receiptId]) {
         settled.push({ receiptId: settledReceiptId,
-          status: quotaFailure ? 'error' : silent ? 'silent' : 'answered',
+          status: quotaFailure || closedFailure ? 'error' : silent ? 'silent' : 'answered',
           terminalEffectId: completed.terminalEffectId })
       }
       if (authority.blocked) {
@@ -1399,7 +1491,12 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
     rt.v2Doing = []
     rt.v2AutoMilestones = []
     rt.v2CardQuotaFailure = false
+    rt.v2CardModelInfo = null
     rt.v2CardBinding = null
+    rt.v2CardAnchor = null
+    rt.v2CardJoinedNames = []
+    rt.v2LastCardText = ''
+    rt.v2MoveCard = null
     rt.v2StreamRequested = false
     rt.v2StreamQuiescing = false
     rt.v2StreamChain = Promise.resolve()
@@ -1435,6 +1532,7 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
       if (!provider || (provider.baseUrl && !provider.apiKey)) {
         throw new Error('C2 v2 runner provider unavailable')
       }
+      rt.v2CardModelInfo = cardModelInfo(job.group, provider)
       rt.v2SteerControl = null
       rt.v2SteerEntries = new Map()
       rt.v2SteerClosing = false
@@ -1479,6 +1577,7 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
           if (rt.v2CardBinding?.opened) await rt.v2CardBinding.path.flushForTerminal()
           if (rt.v2RunnerGeneration !== generation) return
           authority.commitSteerObservation({ ...steerIdentity, receiptId: entry.identity.receiptId, type: 'landed' })
+          await rt.v2MoveCard?.(entry)
         })
         rt.v2SteerLandedChain = observation
         observation.catch(() => { authority.close(); controller?.abort() })
@@ -1494,6 +1593,8 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
       rt.v2RunnerNotStarted = false
       let streamChain = Promise.resolve()
       let streamFailure = null
+      const joinedLine = () => rt.v2CardJoinedNames.length
+        ? `\n\n↪ 已加入 ${rt.v2CardJoinedNames.join('、')} 的补充` : ''
       // Card progress (same mechanism and wording as the legacy engine): deterministic
       // milestones and "recently doing" from tool calls, an early "received" card
       // and a pulse line. All of it is process-local card text; the card itself is
@@ -1510,6 +1611,7 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
         rt.v2TerminalStarted || controller.signal.aborted || rt.v2CancelControl ||
         rt.v2StreamQuiescing || !!authority.scopeState('stopIntent', chatId)
       const enqueueCardText = text => {
+        rt.v2LastCardText = text
         rt.v2StreamRequested = true
         streamChain = streamChain.then(async () => {
           if (rt.v2QueueNoticePromise) await rt.v2QueueNoticePromise
@@ -1521,7 +1623,8 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
           if (!rt.v2CardBinding) {
             const path = prepareCardTerminalPath({ runtime: authority,
               payloadHandles: this.durableV2Payloads, platform: job.platform,
-              replyCtx: job.msg.replyCtx, receiptId, chatId, turnToken,
+              replyCtx: job.msg.replyCtx, cardAnchor: rt.v2CardAnchor,
+              receiptId, chatId, turnToken,
               generation, verifyGeneration,
               applyLocalEffect: this.durableV2ApplyLocalEffect,
               assertWriterLock: this.durableV2AssertWriterLock,
@@ -1536,7 +1639,7 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
             rt.v2CardBinding = { path, receiptId, turnToken,
               generation, opened }
           }
-          if (rt.v2CardBinding.opened) rt.v2CardBinding.path.update(text)
+          if (rt.v2CardBinding.opened) rt.v2CardBinding.path.update(text + joinedLine())
         })
         rt.v2StreamChain = streamChain
         streamChain.catch(error => {
@@ -1544,6 +1647,33 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
           try { controller.abort() } catch {}
         })
       }
+      rt.v2MoveCard = entry => {
+        if (entry.movePromise) return entry.movePromise
+        const move = streamChain.then(async () => {
+          if (progressClosed() || job.platform.features?.cardPinned !== true) return false
+          const anchor = { receiptId: entry.identity.receiptId,
+            replyCtx: entry.job.msg.replyCtx }
+          const who = entry.job.msg.senderName || entry.job.msg.userId || 'user'
+          if (!rt.v2CardJoinedNames.includes(who)) rt.v2CardJoinedNames.push(who)
+          if (!rt.v2CardBinding) {
+            rt.v2CardAnchor = anchor
+            return true
+          }
+          if (!rt.v2CardBinding.opened) return false
+          rt.v2CardBinding.path.update((rt.v2LastCardText || progress.T.ackWorking) + joinedLine())
+          const moved = await rt.v2CardBinding.path.relocate(anchor)
+          if (moved) rt.v2CardAnchor = anchor
+          return moved
+        })
+        streamChain = move
+        rt.v2StreamChain = move
+        entry.movePromise = move
+        move.catch(error => {
+          streamFailure = error
+          try { controller.abort() } catch {}
+        })
+        return move
+      }
       const enqueueFrame = event => {
         if (event.type !== 'assistant') return
         // /status and the pulse read these; a late event from an older
@@ -1613,10 +1743,8 @@ async startDurableV2Runner({ chatId, receiptId, turnToken, effectId } = {}) {
           const sofar = buffer.trim()
           const body = autoBlock() + (sofar && !NO_REPLY.startsWith(sofar)
             ? progress.renderMilestones(buffer) + '\n\n' : '')
-          try {
-            binding.path.update(body + progress.T.pulse(
-              progress.humanDur(Date.now() - pulseFrom), rt.v2Doing, stale))
-          } catch { /* a closed card never affects the turn */ }
+          enqueueCardText(body + progress.T.pulse(
+            progress.humanDur(Date.now() - pulseFrom), rt.v2Doing, stale))
         }, PULSE_MS)
         if (pulseTimer.unref) pulseTimer.unref()
       }
@@ -1835,6 +1963,7 @@ async completeDurableV2CardTurn({ chatId, receiptId, turnToken, effectId,
     const projected = rt?.v2TerminalProjection
     const resultText = projected?.payload?.resultText
     const quotaFailure = supportedV2QuotaFailure(payload, rt?.v2RunnerResult)
+    const closedFailure = supportedV2ClosedFailure(payload, rt?.v2RunnerResult)
     if (!/^[0-9a-f]{32}$/.test(receiptId || '') ||
         !Number.isSafeInteger(turnToken) || turnToken <= 0 ||
         typeof effectId !== 'string' || !effectId ||
@@ -1866,10 +1995,9 @@ async completeDurableV2CardTurn({ chatId, receiptId, turnToken, effectId,
           (!isDeepStrictEqual(payload.batchReceiptIds, cohort.receiptIds) ||
             payload.replyTargetReceiptId !== receiptId)) ||
         !isDeepStrictEqual(payload, projected.payload) ||
-        // Only successful answers and binary-classified, side-effect-free
-        // quota failures use this no-retry terminal bridge. Unknown failures
-        // and lost-session outcomes still need a separate recovery decision.
-        payload.source !== 'result' || payload.aborted || (payload.isError && !quotaFailure) ||
+        // A deterministic failure is delivered once, after the same durable
+        // close checks as success. Retry and unknown outcomes stay sealed.
+        payload.source !== 'result' || payload.aborted || (payload.isError && !quotaFailure && !closedFailure) ||
         payload.sessionMissing || (payload.hasQuota && !quotaFailure) || payload.transientNetwork ||
         payload.freshRetried || payload.resumedSessionCurrent ||
         (replyText !== undefined && replyText !== terminalReplyText(projected.payload)) ||
@@ -1883,6 +2011,9 @@ async completeDurableV2CardTurn({ chatId, receiptId, turnToken, effectId,
       value.generation === generation && rt.v2RunnerGeneration === generation
     try {
       const preopened = rt.v2CardBinding
+      if (closedFailure) authority.assertClosedFailureReady({ receiptId, chatId,
+        turnToken, generation, verifyGeneration,
+        assertWriterLock: this.durableV2AssertWriterLock })
       if (preopened && (preopened.receiptId !== receiptId ||
           preopened.turnToken !== turnToken ||
           preopened.generation !== generation)) {
@@ -1890,7 +2021,8 @@ async completeDurableV2CardTurn({ chatId, receiptId, turnToken, effectId,
       }
       const path = preopened?.path || prepareCardTerminalPath({ runtime: authority,
         payloadHandles: handles, platform: job.platform,
-        replyCtx: job.msg.replyCtx, receiptId, chatId, turnToken, generation,
+        replyCtx: job.msg.replyCtx, cardAnchor: rt.v2CardAnchor, preferPlain: closedFailure,
+        receiptId, chatId, turnToken, generation,
         verifyGeneration, applyLocalEffect: this.durableV2ApplyLocalEffect,
         assertWriterLock: this.durableV2AssertWriterLock,
         redactText: text => redact(quotaFailure
@@ -1905,6 +2037,8 @@ async completeDurableV2CardTurn({ chatId, receiptId, turnToken, effectId,
       for (const text of updates) path.update(text)
       const footer = T.cardFooter({ ms: Math.max(0, Date.now() - rt.v2StartedAt),
         tokens: rt.v2UsageDecision?.tokens || null })
+      const footerDetail = job.platform.features?.cardQuota === true
+        ? cardModelDetail(rt.v2CardModelInfo, rt.v2RunnerResult) : ''
       // Milestones from tool calls first, then the model's own `>> ` lines;
       // the card shows them in its "process" fold (display only).
       rt.v2CardQuotaFailure = !!quotaFailure
@@ -1913,7 +2047,8 @@ async completeDurableV2CardTurn({ chatId, receiptId, turnToken, effectId,
         ...progress.milestonesOf(payload.bufferText)]
         .filter((m, i, a) => a.indexOf(m) === i).map(redactMilestone)
         .filter(m => typeof m === 'string' && m.trim())
-      const completed = await path.complete({ payload, replyText, paused, footer, milestones })
+      const completed = await path.complete({ payload, replyText, paused,
+        footer, footerDetail, milestones })
       const after = authority.snapshot()
       const queue = after.state?.lanes?.queue?.[chatId]?.queue
       let successor = null
@@ -2027,7 +2162,7 @@ classifyDurableV2UnresolvedTurn({ chatId, receiptId, turnToken, effectId,
       }
       rt.v2TerminalStarted = true
       authority.registerTerminalCallback({ receiptId, generation,
-        registeredAt: Date.now() })
+        registeredAt: Date.now(), reuse: true })
       return authority.commitUnresolvedClassification({ receiptId, generation,
         turnToken, status, payload,
         verifyGeneration: value => value.chatId === chatId &&
@@ -2057,6 +2192,7 @@ classifyDurableV2UnresolvedTurn({ chatId, receiptId, turnToken, effectId,
           { full: policy.full, isCodex: provider.runner === 'codex' }) : null,
         unredactedPii: group.redactPii === false,
         cardPinned: platform.features?.cardPinned === true, plainSend: false }),
+      ...releaseSkillLines(platform),
     ].join('\n')
     // Reinject current supported context each turn. No legacy feature menu,
     // external-message commands or v1 manifest refresh scheduler is included.
@@ -2146,4 +2282,4 @@ requestDurableV2Stop(chatId) {
 
 }
 
-module.exports = { Engine }
+module.exports = { releaseBinDir, Engine }

package/src/feishucli.js

@@ -0,0 +1,211 @@
+'use strict'
+
+// Messaging actions of the `feishu` subcommand, shared by the legacy entry and
+// the release entry so a group's agent gets the same skills under both:
+// send-msg · send-notice · send-file · send-image · history · reply · edit ·
+// recall (alias delete) · download · react. Canvas actions stay in the legacy
+// entry. None of them needs the service: each call uses the bot's own app
+// credentials directly.
+//
+// Target chat: --chat, else $SBOT_CHAT_ID (injected for every group turn).
+// Configuration: --config, else $SBOT_CONFIG (also injected), else the usual
+// lookup. Paths are relative to the working directory and never leave it;
+// outbound text is redacted like the engine's replies (PII per group).
+const fs = require('node:fs')
+const config = require('./config')
+const feishu = require('./platform/feishu')
+const { cliNotice, deliverNotice } = require('./platform/noticesend')
+const { TONES, resolveTone } = require('./platform/noticecard')
+const { redact } = require('./core/redact')
+const { fmtStamp, normalizeTz } = require('./core/time')
+
+const FEISHU_MESSAGE_ACTIONS = Object.freeze(['send-msg', 'send-notice', 'send-file', 'send-image',
+  'history', 'reply', 'edit', 'recall', 'delete', 'download', 'react'])
+
+const dim = (s) => `\x1b[2m${s}\x1b[0m`
+const green = (s) => `\x1b[32m${s}\x1b[0m`
+
+// A refusal with its own wording: callers print it as is and exit 1.
+class FeishuCliError extends Error {
+  constructor(message) { super(message); this.name = 'FeishuCliError' }
+}
+const refuse = (message) => { throw new FeishuCliError(message) }
+
+// Hand-roll option parsing (not util.parseArgs): send-msg bodies / filenames legitimately start
+// with '-' (Markdown lists like "- item"), which parseArgs(strict) rejects as an unknown option —
+// and the self-knowledge manifest teaches agents exactly that form. Pull out --chat/--config; the
+// rest stays positional (message text / path), leading '-' and all. Canvas options are taken out
+// for every action, as they always were.
+function parseFeishuArgs(action, rawArgs) {
+  const o = { warnings: [], positionals: [] }
+  for (let i = 0; i < rawArgs.length; i++) {
+    const a = rawArgs[i]
+    if (a === '--chat') o.chat = rawArgs[++i]
+    else if (a.startsWith('--chat=')) o.chat = a.slice(7)
+    else if (a === '--config') o.config = rawArgs[++i]
+    else if (a.startsWith('--config=')) o.config = a.slice(9)
+    else if (action === 'send-notice' && a === '--sub') o.subtitle = rawArgs[++i]
+    else if (action === 'send-notice' && a === '--tone') o.tone = rawArgs[++i]
+    else if (action === 'send-notice' && a === '--warn') o.warnings.push(rawArgs[++i])
+    else if (action === 'send-notice' && a === '--from') o.from = rawArgs[++i]
+    else if (a === '--title') o.title = rawArgs[++i]
+    else if (a === '--new') o.new = true
+    else if (a === '--x') o.x = rawArgs[++i]
+    else if (a === '--y') o.y = rawArgs[++i]
+    else if (a === '--width') o.width = rawArgs[++i]
+    else if (a === '--height') o.height = rawArgs[++i]
+    else if (a === '--label') o.label = rawArgs[++i]
+    else if (a === '--raw') o.raw = true
+    else if (a === '--board') o.board = rawArgs[++i]
+    else if (a === '--beside') o.beside = rawArgs[++i] // 参照节点 id:新图放它右侧(按标注改的排版)
+    else if (a === '--deliver') o.deliver = true // 交付结果卡:上板 + 回填进原播报卡(单卡)/ 无原卡则新发
+    else if (a === '--note') o.note = rawArgs[++i] // 结果卡里的一句改动说明
+    else if (a === '--type') o.type = rawArgs[++i] // 图表类型(flow/mindmap/sequence/… 或中文别名)
+    else if (a === '--syntax') o.syntax = rawArgs[++i] // 图表语法(mermaid | plantuml;覆盖扩展名识别)
+    else if (a === '--as-image') o.asImage = true // 图表渲染成整张图片,否则多节点可编辑
+    else if (a === '--no-cascade') o.noCascade = true // board-del-node:只删点名的,不连带容器内容/导图子树
+    else o.positionals.push(a)
+  }
+  return o
+}
+
+// The checks every action shares, in the legacy order: Slack groups, then
+// configuration, then the target chat.
+function feishuContext(opts, { env = process.env, loadConfig = config.loadConfig,
+  findConfigPath = config.findConfigPath, applyProxyEnv = config.applyProxyEnv,
+  feishuClient = feishu.feishuClient, client } = {}) {
+  // Slack 群:引擎注入 SBOT_PLATFORM=slack。飞书这族动作在那儿一概走不通(文件上下行还没接到
+  // Slack,docs/SLACK.md 第 3 步)。不拦的话要么打到飞书 API 报 lark 错、要么 feishu 没配时报「未配置」——
+  // 两种都不说人话,agent 会转头重试。显式 --chat 指向飞书群的手工用法不拦。
+  if (!opts.chat && env.SBOT_PLATFORM === 'slack') refuse('本群在 Slack 上 —— sbot feishu 的动作(发文件/发图/读历史/回复/编辑/撤回/下载/表情)在 Slack 群暂不可用,Slack 侧文件上下行还没接。要给群成员看的文件或图片:把项目内相对路径与打开方式写进回复正文;不要重试本命令。')
+  const configPath = opts.config || env.SBOT_CONFIG
+  if (!findConfigPath(configPath)) refuse('feishu 未配置:找不到配置文件 — 传 --config <path> 或设置 env SBOT_CONFIG')
+  const cfg = loadConfig(configPath)
+  if (!cfg.feishu || !cfg.feishu.appId || !cfg.feishu.appSecret) refuse('feishu 未配置(sbot.config.json 缺 feishu.appId/appSecret)')
+  const chatId = opts.chat || env.SBOT_CHAT_ID
+  if (!chatId) refuse('缺少目标群 — 传 --chat <oc_...> 或设置 env SBOT_CHAT_ID')
+  applyProxyEnv(cfg)
+  // 群面出站脱敏(与 engine 同口径):PII 按群开关(redactPii:false ⇒ 手机号/邮箱明文),密钥类恒遮盖。
+  const red = (s) => redact(s, { pii: !(cfg.groups && cfg.groups[chatId] && cfg.groups[chatId].redactPii === false) })
+  return { cfg, chatId, red, client: client || feishuClient(cfg.feishu.appId, cfg.feishu.appSecret) }
+}
+
+// args = [action, ...rest]. Confirmations go to stderr; what a program reads
+// (history lines, message ids) goes to stdout.
+async function runFeishuAction(args, deps = {}) {
+  const action = args[0]
+  if (!FEISHU_MESSAGE_ACTIONS.includes(action)) refuse(`unknown feishu action '${action || ''}' (${FEISHU_MESSAGE_ACTIONS.filter((a) => a !== 'delete').join(' | ')})`)
+  const opts = parseFeishuArgs(action, args.slice(1))
+  const { cfg, chatId, red, client } = feishuContext(opts, deps)
+  const cwd = deps.cwd || process.cwd()
+  const now = deps.now || Date.now
+  const out = deps.stdout || ((s) => process.stdout.write(s))
+  const err = deps.stderr || ((s) => process.stderr.write(s))
+  const p = opts.positionals
+  // Usage errors before any network call, worded as the legacy entry did.
+  let notice
+  if (action === 'send-msg' && !p.join(' ').trim()) refuse('缺少消息内容 — sbot feishu send-msg "<文本>"')
+  if (action === 'send-notice') {
+    // 群通知卡:标题 + 正文(其余位置参数各占一行)+ 可选副标题 / 类别 / 注意事项 / 来源。
+    // 与 send-msg 的分工:这张卡是「对大家宣布一件事」,阶段性结果与定时提醒仍走 send-msg。
+    if (!String(p[0] || '').trim()) refuse('缺少标题 — sbot feishu send-notice "<标题>" ["<正文…>"] [--sub <副标题>] [--tone 公告|升级|提醒|故障|变更|状态] [--warn <注意事项>]… [--from <来源>]')
+    try {
+      notice = cliNotice(p, { subtitle: opts.subtitle, tone: opts.tone, warnings: opts.warnings,
+        from: opts.from, stamp: fmtStamp(now(), normalizeTz(cfg.timezone)) })
+    } catch (e) { refuse(e.message) }
+  }
+  if ((action === 'reply' || action === 'edit') && (!p[0] || !p.slice(1).join(' ').trim())) {
+    refuse(action === 'reply' ? '用法: sbot feishu reply <message_id> "<文本>"' : '用法: sbot feishu edit <message_id> "<文本>"(仅能编辑 bot 自己发的消息)')
+  }
+  if ((action === 'recall' || action === 'delete') && !p[0]) refuse('用法: sbot feishu recall <message_id>(仅能撤回 bot 自己发的消息)')
+  if (action === 'download' && (!p[0] || !p[1])) refuse('用法: sbot feishu download <message_id> <file_key> <file|image> [目标相对路径]')
+  if (action === 'react' && (!p[0] || !p[1])) refuse('用法: sbot feishu react <message_id> <emoji>(如 THUMBSUP / 👍)')
+  try {
+    if (action === 'send-file' || action === 'send-image') {
+      const abs = feishu.resolveSendPath(cwd, p[0])
+      if (action === 'send-file') await feishu.sendChatFile(client, chatId, abs)
+      else await feishu.sendChatImage(client, chatId, abs)
+      err(green(`  ✓ 已发送${action === 'send-file' ? '文件' : '图片'}到群 `) + dim(chatId) + '  ' + p[0] + '\n')
+      return { action, chatId, path: abs }
+    }
+    if (action === 'send-msg') {
+      await feishu.sendChatText(client, chatId, red(p.join(' '))) // 出站脱敏,与 engine 群回复同口径(PII 按群)
+      err(green('  ✓ 已发送消息到群 ') + dim(chatId) + '\n')
+      return { action, chatId }
+    }
+    if (action === 'send-notice') {
+      // 有卡能力就发卡(逐字段脱敏);建卡被拒或没送达时退回同一份通知的文本。
+      const sent = await deliverNotice({ features: { noticeCard: true },
+        sendCard: (id, card) => feishu.sendChatCard(client, id, card),
+        send: (id, body) => feishu.sendChatText(client, id, body) }, chatId, notice, { redact: red, log: (m) => err(dim('  (' + m + ')') + '\n') })
+      if (sent.mode === 'card') {
+        err(green('  ✓ 已发送通知卡到群 ') + dim(chatId) + `  ${TONES[resolveTone(notice.tone)].label}「${notice.title}」\n`)
+        if (sent.result && sent.result.msgId) out(sent.result.msgId + '\n') // 给程序读:message_id(要撤回 / 回复它时用)
+      } else {
+        err(green('  ✓ 已发送通知到群 ') + dim(chatId) + '(文本)\n')
+      }
+      return { action, chatId, mode: sent.mode, msgId: (sent.result && sent.result.msgId) || null }
+    }
+    if (action === 'history') {
+      const n = p[0] ? parseInt(p[0], 10) : 20
+      const msgs = await feishu.fetchChatHistory(client, chatId, n)
+      const tz = normalizeTz(cfg.timezone)
+      // @ 标记(裁决在 feishu.js 的 historyAtMark,这里只消费):「@了别人未@bot」的消息按设计不触发轮次,
+      // 历史里不标就与真问 bot 的长得一模一样。bot 自己的 open_id 从配置来。
+      const botOid = String((cfg.feishu && cfg.feishu.botOpenId) || '')
+      const lines = msgs.map((m) => {
+        const who = m.senderType === 'app' ? 'bot' : (m.senderId || '?')
+        const body = m.text != null ? m.text : `(${m.msgType})`
+        return `[${m.createTimeMs ? fmtStamp(m.createTimeMs, tz) : '?'} ${who}${feishu.historyAtMark(m.mentions, botOid)}] ${body}  {${m.msgId}}`
+      })
+      // 群消息内容是入站上下文(给 agent 读),不脱敏;message_id 用于后续 reply/edit/recall
+      out(`共 ${msgs.length} 条群消息(新→旧):\n` + (lines.join('\n') || '(空)') + '\n')
+      return { action, chatId, count: msgs.length }
+    }
+    if (action === 'reply' || action === 'edit') {
+      const msgId = p[0]
+      await (action === 'reply' ? feishu.replyMessage : feishu.editMessage)(client, msgId, red(p.slice(1).join(' ')))
+      err(green(action === 'reply' ? '  ✓ 已回复消息 ' : '  ✓ 已编辑消息 ') + dim(msgId) + '\n')
+      return { action, chatId, msgId }
+    }
+    if (action === 'recall' || action === 'delete') {
+      await feishu.recallMessage(client, p[0])
+      err(green('  ✓ 已撤回消息 ') + dim(p[0]) + '\n')
+      return { action, chatId, msgId: p[0] }
+    }
+    if (action === 'download') {
+      const [msgId, fileKey, type] = p
+      const dest = p[3] || fileKey
+      const abs = feishu.resolveSendPath(cwd, dest, false) // 写模式:目标文件尚不存在
+      await feishu.downloadResource(client, msgId, fileKey, type === 'image' ? 'image' : 'file', abs)
+      err(green('  ✓ 已下载到 ') + dim(dest) + '\n')
+      return { action, chatId, path: abs }
+    }
+    // react
+    await feishu.reactMessage(client, p[0], p[1])
+    err(green('  ✓ 已回应 ') + dim(p[0]) + ' ' + p[1] + '\n')
+    return { action, chatId, msgId: p[0] }
+  } catch (e) {
+    throw new FeishuCliError('feishu 操作失败:' + feishu.larkErrMsg(e))
+  }
+}
+
+// `--help` text of the release entry. The legacy entry keeps its own, which
+// also lists the canvas actions.
+function feishuUsage(cmd = 'sintbot') {
+  return `用法: ${cmd} feishu <动作> [参数…] [--chat <oc_…>] [--config <path>]\n`
+    + '      目标群:--chat,不传取 $SBOT_CHAT_ID(群里跑时已注入);配置:--config,不传取 $SBOT_CONFIG;路径一律项目内相对路径\n'
+    + '\n  消息\n'
+    + '    send-msg "<文本>"                        发文本(正文以 - 开头也照收)\n'
+    + '    send-notice "<标题>" "<正文>"              发群通知卡(可加 --sub / --tone / --warn / --from)\n'
+    + '    send-file <路径> · send-image <路径>       发文件 / 图片\n'
+    + '    history [n]                              拉最近 n 条(默认 20,最多 50):每条带 message_id,并标 →@某某·未@bot / →@bot\n'
+    + '    reply <message_id> "<文本>"              回复某条\n'
+    + '    edit <message_id> "<文本>"               改自己发过的消息\n'
+    + '    recall <message_id>                      撤回自己发过的消息(别名 delete)\n'
+    + '    download <message_id> <file_key> <file|image> [目标路径]   下载群里的附件 / 图片(目标默认取 file_key)\n'
+    + '    react <message_id> <表情>                表情回应(THUMBSUP 之类的枚举名,或直接给 👍)\n'
+    + '\n  确认走 stderr;给程序读的(history / message_id)走 stdout;失败退出码 1\n'
+}
+
+module.exports = { FEISHU_MESSAGE_ACTIONS, FeishuCliError, parseFeishuArgs, feishuContext, runFeishuAction, feishuUsage }

package/src/platform/feishu.js

@@ -605,7 +605,7 @@ function createFeishuPlatform({ appId, appSecret, botOpenId = null, onlyWhenMent
   }
 
   return {
-    features: { cardQuota: true, noticeCard: true }, // 飞书支持通知卡;企微/Slack 退回文本
+    features: { cardQuota: true, noticeCard: true, cardPinned: true }, // 回复卡钉在触发消息下;补话落地后可搬到新消息下
     async start(onMessage, hooks = {}) {
       if (!botOpenId && !onlyWhenMentioned) log('warning: feishu.botOpenId not set — cannot tell @bot from @others; all group messages will be handled')
       if (hooks.onFatal !== undefined && typeof hooks.onFatal !== 'function') {