feat(ops): wechat-viewer /ops 后台监管页 + UI 总闸；修复开机自启/回复监督器 pid 复用

- /ops：服务/任务/UI 操作审计/crontab/日志，可启停服务、终止进程（admin 登录） - ui_guard：ui.paused 存在时拒绝 input/am start/monkey，覆盖 MCP、hook 发送、orchestrator、reply-sender、orig-save - wechat_reply_daemon.sh：校验锁文件 pid 的 cmdline，避免重启后 pid 复用导致监督器不启动 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

feat(ops): wechat-viewer /ops 后台监管页 + UI 总闸；修复开机自启/回复监督器 pid 复用
- /ops：服务/任务/UI 操作审计/crontab/日志，可启停服务、终止进程（admin 登录） - ui_guard：ui.paused 存在时拒绝 input/am start/monkey，覆盖 MCP、hook 发送、orchestrator、reply-sender、orig-save - wechat_reply_daemon.sh：校验锁文件 pid 的 cmdline，避免重启后 pid 复用导致监督器不启动 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
yibo
1 parent 52823fc4
Showing 10 changed files with 317 additions and 1 deletions
device/pixelphone/event_bus/device_tools.py
device/pixelphone/event_bus/ui_control_tools.py
device/pixelphone/event_bus/ui_guard.py
device/pixelphone/scripts/orig-save.sh
device/pixelphone/scripts/reply-sender.py
device/pixelphone/wechat_reply/wechat_reply_daemon.sh
device/pixelphone/wechat_reply/wechat_reply_orchestrator.py
device/wechat-viewer/app.py
device/wechat-viewer/templates/base.html
device/wechat-viewer/templates/ops.html
@@ -47,6 +47,8 @@ import json
 import os
 import re
 import subprocess
+
+import ui_guard
 from pathlib import Path
  
 # ── shell routing (on-device su  /  off-device adb) ──────────────────────────
@@ -74,6 +76,8 @@ def _run(cmd: str, timeout: int = _TIMEOUT) -&gt; subprocess.CompletedProcess:
     `su -c`. Off-device we drive the phone through `adb shell`, whose uid
     already holds those permissions — no `su` needed.
     """
+    if ui_guard.check(cmd):   # ui.paused：拒绝动屏幕的命令
+        return subprocess.CompletedProcess(cmd, 75, "", "UI paused (ui.paused)")
     if _ON_DEVICE:
         argv = ["su", "-c", cmd]
     else:
@@ -48,6 +48,8 @@ import json
 import os
 import re
 import subprocess
+
+import ui_guard
 import time
 from pathlib import Path
 from typing import Any, Optional
@@ -78,6 +80,8 @@ def _run(cmd: str, timeout: int = _TIMEOUT) -&gt; subprocess.CompletedProcess:
     uid already holds those permissions — no `su` needed (and it avoids the
     nested-quoting trap of `adb shell su -c '...'`).
     """
+    if ui_guard.check(cmd):   # ui.paused：拒绝动屏幕的命令
+        return subprocess.CompletedProcess(cmd, 75, "", "UI paused (ui.paused)")
     if _ON_DEVICE:
         argv = ["su", "-c", cmd]
     else:
+"""UI 操作总闸：ui.paused 存在 → 所有会动屏幕的命令（input / am start / monkey）被拒（rc=75）。
+所有 UI 驱动方（ui_control_tools/device_tools 的 _run、orchestrator 的前后台切换、reply-sender、orig-save.sh）
+共用这一个文件。wechat-viewer 的 /ops 页面负责创建/删除它。动作审计写 ui-actions.log 供 /ops 展示。"""
+import os
+import re
+import sys
+import time
+
+PAUSE_FILE = "/data/data/com.termux/files/home/pixelphone/ui.paused"
+AUDIT_FILE = "/data/data/com.termux/files/home/pixelphone/ui-actions.log"
+_UI_RE = re.compile(r"\binput\s+\w+|\bam\s+start\b|\bmonkey\b")   # 只管"动手"的；dump/screencap 只读不拦
+_MAX = 512 * 1024
+
+
+def paused() -> bool:
+    return os.path.exists(PAUSE_FILE)
+
+
+def is_ui(cmd: str) -> bool:
+    return bool(_UI_RE.search(cmd))
+
+
+def audit(what: str, blocked: bool = False) -> None:
+    try:
+        if os.path.exists(AUDIT_FILE) and os.path.getsize(AUDIT_FILE) > _MAX:
+            os.replace(AUDIT_FILE, AUDIT_FILE + ".1")
+        new = not os.path.exists(AUDIT_FILE)
+        who = os.path.basename(sys.argv[0] or "?")
+        with open(AUDIT_FILE, "a") as f:
+            f.write(f"{time.strftime('%F %T')}\t{'BLOCKED' if blocked else 'ok'}\t{who}[{os.getpid()}]\t{what[:200]}\n")
+        if new:
+            os.chmod(AUDIT_FILE, 0o666)
+    except OSError:
+        pass
+
+
+def check(cmd: str) -> bool:
+    """是 UI 命令则记审计；返回 True = 该拦截。"""
+    if not is_ui(cmd):
+        return False
+    b = paused()
+    audit(cmd, b)
+    return b
@@ -13,6 +13,8 @@ LOG=$HOME/tmp/orig_save_$(date +%Y%m%d_%H%M).log
 mkdir -p "$HOME/tmp"
 say() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG"; }
  
+[ -e "$HOME/pixelphone/ui.paused" ] && { say "UI 已暂停，跳过原图保存"; exit 0; }
+
 LOCK=$TMPDIR/orig-save.lock   # send 阶段看到它在就等下一轮（两边都要用微信界面）
 if ! mkdir "$LOCK" 2>/dev/null; then
   [ -n "$(find "$LOCK" -maxdepth 0 -mmin +90 2>/dev/null)" ] && { rmdir "$LOCK"; mkdir "$LOCK"; } || { say "上一轮还在跑，跳过"; exit 0; }
@@ -139,6 +139,9 @@ def _rm(path):
  
  
 def main():
+    if os.path.exists("/data/data/com.termux/files/home/pixelphone/ui.paused"):
+        print(f"[{time.strftime('%H:%M:%S')}] SKIP: UI paused (队列保留，恢复后再发)")
+        return
     # ── WeChat Login Gate ──
     gate = check_wechat_ready()
     if not gate["ready"]:
@@ -18,7 +18,8 @@ mkdir -p &quot;$W&quot;
 # ── 单实例：已有活着的监督器就退出 ──
 if [ -f "$LOCK" ]; then
     OLD=$(cat "$LOCK" 2>/dev/null)
-    if [ -n "$OLD" ] && kill -0 "$OLD" 2>/dev/null; then
+    if [ -n "$OLD" ] && kill -0 "$OLD" 2>/dev/null \
+       && grep -q wechat_reply_daemon "/proc/$OLD/cmdline" 2>/dev/null; then  # 重启后 pid 会被复用，必须校验 cmdline
         echo "$(date) 监督器已在跑 pid=$OLD，退出" >> "$LOG"
         exit 0
     fi
@@ -347,10 +347,21 @@ VERIFY_POLL = 3       # 前台停留期每次查 status 的间隔
 DWELL_POLLS = 4       # 一次 onResume 后停留前台查几次(给网络发送时间,不立刻再背景化打断)
  
  
+def _ui_paused(what):
+    """UI 总闸（见 event_bus/ui_guard.py）；非暂停时记一笔审计。"""
+    sys.path.insert(0, EVENT_BUS)
+    import ui_guard
+    b = ui_guard.paused()
+    ui_guard.audit(what, b)
+    return b
+
+
 def _onresume_cycle():
     """一次真实的 onPause→onResume:HOME 背景化 → 停顿 → 拉回微信前台。
     触发 WeChat NetSceneQueue flush 卡在 status=1 的发送。切换要给足时间——太快
     (背景/前台 <2s)微信来不及走完 onPause/onResume+网络 tick,flush 不了。"""
+    if _ui_paused("HOME+am start LauncherUI (onResume cycle)"):
+        return
     try:
         subprocess.run(["input", "keyevent", "KEYCODE_HOME"], capture_output=True, timeout=6)
         time.sleep(2.5)   # 让 onPause 走完、微信真的进后台
@@ -465,6 +476,8 @@ def _send_text_verified(to_wxid, text, key):
     超时仍卡在发送中/失败 → 返回 ok=False,由调用方标 failed 进审核(不假装成功)。
     ponytail: 校验靠反复拷库(~96MB/次)读 status；发送稀疏可接受,首轮多半即达。
     上限=拷库 I/O;升级=让 hook 直接回报送达 / 常驻前台。"""
+    if _ui_paused("send_text_verified " + to_wxid):
+        return {"ok": False, "reason": "ui_paused"}
     _, db, _ = w.account_paths()
     st = w.copy_db(db, "_stage_verify")
     try:
@@ -6810,6 +6810,177 @@ def _sync_scores_to_db():
     db.close()
  
  
+# ── /ops：后台任务监管 + UI 总闸 ───────────────────────────────────
+# 路径刻意不放 /api/ 下：/api/ 对本机 127.0.0.1 免登录，而这里能杀进程，必须登录（且仅 admin，见 check_auth）。
+# UI 总闸 = 文件 ui.paused，由 event_bus/ui_guard.py 等各 UI 驱动方共同遵守。
+import re as _re
+_PX = "/data/data/com.termux/files/home/pixelphone"
+_UI_PAUSE = f"{_PX}/ui.paused"
+_UI_AUDIT = f"{_PX}/ui-actions.log"
+_TERMUX_ENV = ("HOME=/data/data/com.termux/files/home PREFIX=/data/data/com.termux/files/usr "
+               "PATH=/data/data/com.termux/files/usr/bin:/system/bin TMPDIR=/data/data/com.termux/files/usr/tmp")
+# (key, 显示名, ARGS 正则, 类型, 是否会动 UI)
+_OPS_PROCS = [
+    ("reply-daemon", "微信回复·监督器", r"wechat_reply_daemon\.sh", "service", False),
+    ("reply-watcher", "微信回复·watcher", r"wechat_reply_watcher\.py", "service", False),
+    ("orchestrator", "微信回复·orchestrator(生成+发送)", r"wechat_reply_orchestrator\.py", "task", True),
+    ("reply-sender", "回复队列发送器", r"reply-sender\.py", "task", True),
+    ("orig-save", "原图保存(接管屏幕)", r"orig-save\.sh|save_originals_batch|upload_originals", "task", True),
+    ("dsh-headless", "dsh headless 任务(手机MCP)", r"dsh --profile headless|run-headless\.sh|run-reply-member\.sh", "task", True),
+    ("digest", "日报链/预摘要", r"daily-digest\.sh|gen_daily|send_digest|tgo_summarize_batch", "task", False),
+    ("boss-resume", "BOSS 简历管线", r"boss-resume\.sh", "task", False),
+    ("dsh-web", "dsh web", r"\.bin/dsh web", "service", False),
+    ("glm-proxy", "GLM failover proxy", r"glm_failover_proxy", "service", False),
+    ("crond", "crond", r"^crond", "service", False),
+    ("viewer", "wechat-viewer(本页)", r"python3 app\.py", "service", False),
+]
+_OPS_SVC = {   # 可启停的常驻服务：key -> (start 命令, stop 用的 pkill -f 模式；None=pkill -x key)
+    "reply-daemon": (f"{_TERMUX_ENV} nohup sh {_PX}/wechat_reply/wechat_reply_daemon.sh >/dev/null 2>&1 &",
+                     ["wechat_reply_daemon.sh", "wechat_reply_watcher.py"]),
+    "dsh-web": (f"su -G 3003 10329 -c '{_TERMUX_ENV} nohup /data/data/com.termux/files/home/dsh/run-web.sh "
+                f"> /data/data/com.termux/files/home/dsh/web.log 2>&1 < /dev/null &'",
+                [r"\.bin/dsh web"]),
+    "crond": (f"su -G 3003 10329 -c '{_TERMUX_ENV} /data/data/com.termux/files/usr/bin/crond'", None),
+}
+
+
+def _ops_su(cmd, timeout=15):
+    r = subprocess.run(["su", "-c", cmd], capture_output=True, text=True, timeout=timeout)
+    return (r.stdout or "").strip()
+
+
+def _ops_ps():
+    out = _ops_su("ps -A -o PID,ETIME,ARGS")
+    rows = []
+    for line in out.splitlines()[1:]:
+        parts = line.split(None, 2)
+        if len(parts) < 3 or not parts[0].isdigit():
+            continue
+        pid, etime, args = int(parts[0]), parts[1], parts[2]
+        if args.startswith(("su ", "ps ", "sh -c", "grep ")) or "ps -A -o" in args:
+            continue
+        for key, name, rx, kind, ui in _OPS_PROCS:
+            if _re.search(rx, args):
+                rows.append({"pid": pid, "etime": etime, "key": key, "name": name, "kind": kind,
+                             "ui": ui, "args": args[:300]})
+                break
+    return rows
+
+
+def _ops_ui_actions(n=60):
+    try:
+        with open(_UI_AUDIT, errors="replace") as f:
+            lines = f.readlines()[-n:]
+    except OSError:
+        return []
+    out = []
+    for l in reversed(lines):
+        p = l.rstrip("\n").split("\t", 3)
+        if len(p) == 4:
+            out.append({"ts": p[0], "result": p[1], "who": p[2], "what": p[3]})
+    return out
+
+
+def _ops_guard():
+    if request.headers.get("X-Requested-With") != "ops":
+        return jsonify(error="forbidden"), 403
+
+
+@app.route("/ops")
+def ops_page():
+    return render_template("ops.html")
+
+
+@app.route("/ops/state")
+def ops_state():
+    procs = _ops_ps()
+    screen = _ops_su("dumpsys power | grep -m1 mWakefulness=; dumpsys window | grep -m1 mCurrentFocus")
+    try:
+        cron = subprocess.run(["crontab", "-l"], capture_output=True, text=True, timeout=5).stdout
+    except Exception:  # noqa: BLE001
+        cron = ""
+    paused_at = ""
+    if os.path.exists(_UI_PAUSE):
+        paused_at = time.strftime("%F %T", time.localtime(os.path.getmtime(_UI_PAUSE)))
+    present = {p["key"] for p in procs}
+    services = [{"key": k, "name": n, "up": k in present, "controllable": k in _OPS_SVC,
+                 "pids": [p["pid"] for p in procs if p["key"] == k]}
+                for k, n, _, kind, _ in _OPS_PROCS if kind == "service"]
+    return jsonify(paused=bool(paused_at), paused_at=paused_at, screen=screen, services=services,
+                   tasks=[p for p in procs if p["kind"] == "task"], ui_actions=_ops_ui_actions(),
+                   cron=[l for l in cron.splitlines() if l.strip() and not l.startswith(("PATH", "HOME", "TMPDIR", "D=", "L="))])
+
+
+@app.route("/ops/pause", methods=["POST"])
+def ops_pause():
+    bad = _ops_guard()
+    if bad:
+        return bad
+    on = bool((request.get_json(silent=True) or {}).get("on"))
+    killed = []
+    if on:
+        with open(_UI_PAUSE, "w") as f:
+            f.write(time.strftime("%F %T") + "\n")
+        os.chmod(_UI_PAUSE, 0o666)
+        # 长时间接管屏幕的脚本直接掐掉（其余 UI 驱动方每条命令都会被总闸拒绝）
+        for p in _ops_ps():
+            if p["key"] == "orig-save":
+                _ops_su(f"kill {p['pid']}")
+                killed.append(p["pid"])
+    else:
+        try:
+            os.remove(_UI_PAUSE)
+        except FileNotFoundError:
+            pass
+    return jsonify(ok=True, paused=on, killed=killed)
+
+
+@app.route("/ops/kill", methods=["POST"])
+def ops_kill():
+    bad = _ops_guard()
+    if bad:
+        return bad
+    d = request.get_json(silent=True) or {}
+    pid = int(d.get("pid", 0))
+    tgt = next((p for p in _ops_ps() if p["pid"] == pid and p["key"] != "viewer"), None)   # 只能杀受管列表里的，且不能杀自己
+    if not tgt:
+        return jsonify(ok=False, error="pid 不在受管列表"), 404
+    _ops_su(f"kill {'-9 ' if d.get('force') else ''}{pid}")
+    return jsonify(ok=True, killed=pid)
+
+
+@app.route("/ops/service", methods=["POST"])
+def ops_service():
+    bad = _ops_guard()
+    if bad:
+        return bad
+    d = request.get_json(silent=True) or {}
+    key, act = d.get("key"), d.get("action")
+    if key not in _OPS_SVC or act not in ("start", "stop", "restart"):
+        return jsonify(ok=False, error="不支持"), 400
+    start_cmd, pats = _OPS_SVC[key]
+    if act in ("stop", "restart"):
+        for pat in (pats or []):
+            _ops_su(f"pkill -f '{pat}'")
+        if not pats:
+            _ops_su(f"pkill -x {key}")
+        time.sleep(1)
+    if act in ("start", "restart"):
+        _ops_su(start_cmd)
+    return jsonify(ok=True)
+
+
+@app.route("/ops/log")
+def ops_log():
+    paths = {"reply-daemon": f"{_PX}/wechat_reply/daemon.log", "dsh-web": "/data/data/com.termux/files/home/dsh/web.log",
+             "reply-sender": f"{_PX}/cron-logs/reply-sender.log", "orig-save": f"{_PX}/cron-logs/orig-save.log",
+             "digest": f"{_PX}/cron-logs/digest-send.log", "ui": _UI_AUDIT}
+    p = paths.get(request.args.get("name", ""))
+    if not p:
+        return jsonify(text="无此日志"), 404
+    return jsonify(text=_ops_su(f"tail -n 80 '{p}' 2>&1")[-8000:])
+
+
 if __name__ == "__main__":
     app.config['TEMPLATES_AUTO_RELOAD'] = True
     app.run(host="0.0.0.0", port=5001, debug=False)
@@ -198,6 +198,9 @@ body { font-family: -apple-system, BlinkMacSystemFont, &#39;Segoe UI&#39;, sans-serif; b
     <a href="/cron" class="{% if request.path.startswith('/cron') %}active{% endif %}">
       <span class="icon">⏱</span> Cron 管理
     </a>
+    <a href="/ops" class="{% if request.path.startswith('/ops') %}active{% endif %}">
+      <span class="icon">🛠</span> 后台监管
+    </a>
     {% endif %}
     <a href="/boss-jobs" class="{% if request.path.startswith('/boss-job') or request.path == '/boss-jobs' %}active{% endif %}">
       <span class="icon">🏢</span> BOSS 岗位
+{% extends "base.html" %}
+{% block title %}后台监管 - WeChat Viewer{% endblock %}
+{% block body %}
+<style>
+body{overflow-y:auto!important;height:auto!important;}
+.ops{max-width:900px;margin:0 auto;padding:16px;}
+.ops h1{font-size:20px;color:#2c3e50;margin-bottom:10px;}
+.ops h2{font-size:15px;color:#2c3e50;margin:20px 0 8px;}
+.banner{border-radius:10px;padding:14px 16px;display:flex;align-items:center;gap:12px;flex-wrap:wrap;margin-bottom:6px;}
+.banner.run{background:#e8f6ee;border:1px solid #27ae60;}
+.banner.pause{background:#fdecea;border:1px solid #e74c3c;}
+.banner b{font-size:16px;}.banner small{color:#666;display:block;margin-top:2px;}
+.banner .grow{flex:1;min-width:180px;}
+.btn{border:none;border-radius:8px;padding:9px 18px;font-size:14px;color:#fff;cursor:pointer;}
+.btn.red{background:#e74c3c}.btn.green{background:#27ae60}.btn.gray{background:#7f8c8d}.btn.sm{padding:4px 10px;font-size:12px;border-radius:6px}.btn.blue{background:#3498db}
+.card{background:#fff;border-radius:8px;padding:10px 14px;margin-bottom:6px;box-shadow:0 1px 2px rgba(0,0,0,.06);display:flex;align-items:center;gap:10px;flex-wrap:wrap;}
+.card .nm{font-weight:600;font-size:14px;}.card .meta{font-size:11px;color:#888;word-break:break-all;flex:1;min-width:160px}
+.dot{width:10px;height:10px;border-radius:50%;flex-shrink:0}.dot.up{background:#27ae60}.dot.down{background:#bbb}
+.tag{font-size:10px;padding:2px 7px;border-radius:9px;background:#fdebd0;color:#b9770e;font-weight:600}
+table{width:100%;border-collapse:collapse;font-size:12px;background:#fff;border-radius:8px;overflow:hidden}
+td,th{padding:6px 8px;border-bottom:1px solid #f0f0f0;text-align:left;vertical-align:top;word-break:break-all}
+td.BLOCKED{color:#e74c3c;font-weight:600}
+pre{background:#1e1e1e;color:#ddd;padding:10px;border-radius:8px;font-size:11px;overflow:auto;max-height:260px;white-space:pre-wrap}
+.empty{color:#999;font-size:13px;padding:8px}
+</style>
+<div class="ops">
+  <h1>🛠 后台监管</h1>
+  <div id="banner" class="banner run"></div>
+  <div id="screen" style="font-size:12px;color:#888;margin-bottom:4px"></div>
+
+  <h2>🖐 UI 操作记录 <small style="font-weight:normal;color:#888">谁在动屏幕（最近 60 条，红色 = 被总闸拦下）</small></h2>
+  <div id="ui"></div>
+
+  <h2>▶ 运行中的任务</h2><div id="tasks"></div>
+  <h2>⚙ 常驻服务</h2><div id="svcs"></div>
+  <h2>⏱ Crontab</h2><pre id="cron"></pre>
+  <h2>📜 日志</h2>
+  <div style="display:flex;gap:6px;flex-wrap:wrap;margin-bottom:6px" id="logbtns"></div>
+  <pre id="log">点上面的按钮看日志</pre>
+</div>
+<script>
+const H={'Content-Type':'application/json','X-Requested-With':'ops'};
+const post=(u,b)=>fetch(u,{method:'POST',headers:H,body:JSON.stringify(b||{})}).then(r=>r.json());
+const esc=s=>String(s).replace(/[&<>"]/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;'}[c]));
+let busy=false;
+async function pause(on){ if(on||confirm('恢复 UI 操作？排队的回复会开始发送。')){await post('/ops/pause',{on});load();} }
+async function kill(pid,force){ if(confirm((force?'强杀 ':'终止 ')+pid+' ？')){await post('/ops/kill',{pid,force});load();} }
+async function svc(key,action){ if(confirm(action+' '+key+' ？')){await post('/ops/service',{key,action});setTimeout(load,1500);} }
+async function log(name){ const r=await fetch('/ops/log?name='+name).then(r=>r.json()); document.getElementById('log').textContent=r.text||'(空)'; }
+async function load(){
+  if(busy)return; busy=true;
+  try{
+    const d=await fetch('/ops/state').then(r=>r.json());
+    const b=document.getElementById('banner');
+    b.className='banner '+(d.paused?'pause':'run');
+    b.innerHTML=d.paused
+      ?`<div class="grow"><b>⏸ UI 操作已暂停</b><small>自 ${esc(d.paused_at)}；所有 input / am start 被拒绝，回复照常生成但留在队列，不会发出</small></div><button class="btn green" onclick="pause(false)">恢复 UI 操作</button>`
+      :`<div class="grow"><b>▶ UI 操作正常</b><small>后台任务可以操作手机屏幕</small></div><button class="btn red" onclick="pause(true)">⏸ 暂停所有 UI 操作</button>`;
+    document.getElementById('screen').textContent=d.screen.replace(/\s+/g,' ');
+    document.getElementById('ui').innerHTML=d.ui_actions.length
+      ?'<table><tr><th>时间</th><th>结果</th><th>来源</th><th>动作</th></tr>'+d.ui_actions.map(a=>`<tr><td>${esc(a.ts)}</td><td class="${a.result}">${a.result}</td><td>${esc(a.who)}</td><td>${esc(a.what)}</td></tr>`).join('')+'</table>'
+      :'<div class="empty">暂无记录（新加的审计，下一次有 UI 动作开始记）</div>';
+    document.getElementById('tasks').innerHTML=d.tasks.length?d.tasks.map(t=>`<div class="card"><span class="dot up"></span><span class="nm">${esc(t.name)}</span>${t.ui?'<span class="tag">会动UI</span>':''}<span class="meta">pid ${t.pid} · ${esc(t.etime)} · ${esc(t.args)}</span><button class="btn sm gray" onclick="kill(${t.pid},false)">终止</button><button class="btn sm red" onclick="kill(${t.pid},true)">强杀</button></div>`).join(''):'<div class="empty">当前没有运行中的任务</div>';
+    document.getElementById('svcs').innerHTML=d.services.map(s=>`<div class="card"><span class="dot ${s.up?'up':'down'}"></span><span class="nm">${esc(s.name)}</span><span class="meta">${s.up?'pid '+s.pids.join(','):'未运行'}</span>${s.controllable?`<button class="btn sm green" onclick="svc('${s.key}','start')">启动</button><button class="btn sm blue" onclick="svc('${s.key}','restart')">重启</button><button class="btn sm gray" onclick="svc('${s.key}','stop')">停止</button>`:''}</div>`).join('');
+    document.getElementById('cron').textContent=d.cron.join('\n');
+  }catch(e){ document.getElementById('screen').textContent='加载失败: '+e; }
+  busy=false;
+}
+document.getElementById('logbtns').innerHTML=[['ui','UI 操作审计'],['reply-daemon','回复 daemon'],['reply-sender','reply-sender'],['orig-save','原图保存'],['digest','日报发送'],['dsh-web','dsh web']].map(([k,n])=>`<button class="btn sm gray" onclick="log('${k}')">${n}</button>`).join('');
+load(); setInterval(load,4000);
+</script>
+{% endblock %}