@a2hmarket/a2hmarket 1.0.11 → 1.3.2

package/index.ts

@@ -18,8 +18,9 @@ import { join } from "node:path";
 import { mkdirSync } from "node:fs";
 
 import { setA2HRuntime } from "./src/runtime.js";
-import { setLastChannelStore } from "./src/channel-state.js";
+import { setLastChannelStore, setPrimaryChannelStore } from "./src/channel-state.js";
 import { LastChannelStore } from "./src/last-channel.js";
+import { PrimaryChannelStore } from "./src/primary-channel.js";
 import { initCredentials, loadCredentials } from "./src/credentials.js";
 import { A2HApiClient } from "./src/api-client.js";
 import { startAgentService } from "./src/agent-service.js";
@@ -35,8 +36,8 @@ import { registerSendTool } from "./src/tools/send.js";
 import { registerAddressTools } from "./src/tools/address.js";
 import { registerDiscussionTools } from "./src/tools/discussion.js";
 import { registerPaymentTools } from "./src/tools/payment.js";
-import { registerTempoPaymentTools } from "./src/tools/tempo-payment.js";
 import { registerApprovalTools } from "./src/tools/approval.js";
+import { registerAuthTools } from "./src/tools/auth.js";
 import { initApprovalStore } from "./src/approval-store.js";
 
 export default {
@@ -45,11 +46,14 @@ export default {
   description:
     "A2H Market — AI agent marketplace with self-managed A2A messaging and human notification.",
 
-  register(api: OpenClawPluginApi) {
+  async register(api: OpenClawPluginApi) {
     // ── Init runtime & credentials ───────────────────────────────
     setA2HRuntime(api.runtime);
     initCredentials(api.pluginConfig as Record<string, unknown> | undefined);
 
+    // ── Auth tools (always registered, even without credentials) ──
+    registerAuthTools(api);
+
     // ── Register tools ───────────────────────────────────────────
     let apiClient: A2HApiClient | null = null;
     try {
@@ -69,46 +73,48 @@ export default {
       registerSendTool(api, creds);
       registerAddressTools(api, apiClient);
       registerDiscussionTools(api, apiClient);
-      // registerPaymentTools(api, apiClient);
-      // registerTempoPaymentTools(api, apiClient, creds);  // Tempo 内测中，暂不注册
+      registerPaymentTools(api, apiClient);
       registerInboxHistoryTool(api, apiClient);
       registerApprovalTools(api);
     }
 
-    // ── Auto-fix tools.alsoAllow at startup ──────────────────────
-    // If openclaw.json has a tools.alsoAllow whitelist (e.g. from feishu plugin),
-    // ensure a2h tools are included. This handles the case where a2hmarket was
-    // installed before other plugins that create the whitelist.
+    // ── Ensure plugin tools are accessible under active profile ────
+    // When tools.profile (e.g. "coding") is set, it generates an implicit
+    // allowlist that blocks plugin tools. Add "a2hmarket" (the plugin ID)
+    // to tools.alsoAllow so the policy pipeline includes all a2h_* tools.
+    // Uses the SDK's writeConfigFile (async) for safe, validated config writes.
     try {
       const cfg = api.runtime.config.loadConfig() as Record<string, unknown>;
       const tools = cfg.tools as Record<string, unknown> | undefined;
-      const alsoAllow = tools?.alsoAllow;
-      if (Array.isArray(alsoAllow)) {
-        const a2hTools = [
-          "a2h_status", "a2h_profile_get", "a2h_profile_upload_qrcode",
-          "a2h_profile_delete_qrcode", "a2h_profile_set_default_payment", "a2h_file_upload",
-          "a2h_works_search", "a2h_works_list", "a2h_works_publish",
-          "a2h_works_update", "a2h_works_delete",
-          "a2h_order_create", "a2h_order_action", "a2h_order_get", "a2h_order_list",
-          "a2h_send", "a2h_inbox_history",
-          "a2h_address_list", "a2h_address_create", "a2h_address_delete", "a2h_address_set_default",
-          "a2h_discussion_publish", "a2h_discussion_reply", "a2h_discussion_list",
-          "a2h_create_approval", "a2h_approval_response", "a2h_approval_list",
-          // Tempo 内测中，暂不加入 allowlist
-          // "a2h_tempo_balance", "a2h_tempo_checkout", "a2h_tempo_transfer", "a2h_tempo_confirm",
-        ];
-        const missing = a2hTools.filter((t) => !alsoAllow.includes(t));
-        if (missing.length > 0) {
-          alsoAllow.push(...missing);
-          api.runtime.config.writeConfigFile(cfg as any);
-          api.logger.info(`a2hmarket: added ${missing.length} tools to alsoAllow`);
+      if (tools) {
+        const PLUGIN_ID = "a2hmarket";
+        const profile = tools.profile as string | undefined;
+        const allow = Array.isArray(tools.allow) ? tools.allow as string[] : [];
+        const alsoAllow = Array.isArray(tools.alsoAllow) ? tools.alsoAllow as string[] : [];
+        const isInList = allow.includes(PLUGIN_ID) || alsoAllow.includes(PLUGIN_ID);
+
+        if (profile && profile !== "full" && !isInList) {
+          // Determine target: append to existing list, or create alsoAllow.
+          // Never write to both — OpenClaw rejects allow + alsoAllow together.
+          if (allow.length > 0) {
+            (tools.allow as string[]).push(PLUGIN_ID);
+          } else if (alsoAllow.length > 0) {
+            (tools.alsoAllow as string[]).push(PLUGIN_ID);
+          } else {
+            tools.alsoAllow = [PLUGIN_ID];
+          }
+          await api.runtime.config.writeConfigFile(cfg as any);
+          api.logger.info(`a2hmarket: added plugin ID to tools allowlist for profile "${profile}"`);
         }
       }
     } catch {
       // Best effort — don't block startup
     }
 
-    // ── Track last channel when a2h_* tools are used ─────────────
+    // ── Track last channel + detect primary channel need ──────────
+    const pendingPrimaryPrompt = new Set<string>();
+    const primaryPrompted = new Set<string>();
+
     api.on("after_tool_call", (event) => {
       const toolName = (event as any)?.toolName ?? "";
       if (!toolName.startsWith("a2h_")) return;
@@ -121,12 +127,39 @@ export default {
 
       const channel = parts[2];
       const target = parts.slice(4).join(":");
-      // LastChannelStore is initialized in service start (needs stateDir)
-      import("./src/channel-state.js").then(({ getLastChannelStore }) => {
+
+      import("./src/channel-state.js").then(({ getLastChannelStore, getPrimaryChannelStore }) => {
         getLastChannelStore()?.set({ channel, target, sessionKey });
+
+        // Check if primaryChannel needs configuration
+        if (primaryPrompted.has(sessionKey)) return;
+        const primary = getPrimaryChannelStore()?.get();
+        if (!primary || primary.sessionKey !== sessionKey) {
+          pendingPrimaryPrompt.add(sessionKey);
+        }
       });
     });
 
+    // ── Auto-prompt for primary channel setup ───────────────────
+    api.on("before_prompt_build", (event) => {
+      const sessionKey = (event as any)?.sessionKey ?? "";
+      if (!sessionKey || sessionKey.includes(":a2hmarket:")) return;
+      if (!pendingPrimaryPrompt.has(sessionKey)) return;
+
+      pendingPrimaryPrompt.delete(sessionKey);
+      primaryPrompted.add(sessionKey);
+
+      return {
+        prependContext:
+          "【系统提示】检测到当前 channel 尚未设为 A2H Market 的汇报 session。" +
+          "请询问用户：'是否将当前聊天设为 A2H Market 的汇报 session？设置后，IM 协商的重要通知（如审批请求）会发送到这里。' " +
+          "如果用户同意，从当前 sessionKey 解析出 channel 和 target（sessionKey 格式：agent:main:{channel}:direct:{target}），" +
+          "写入文件 ~/.a2h_store/a2h_data/primary-channel.json，格式：" +
+          JSON.stringify({ channel: "{channel}", target: "{target}", sessionKey: "{sessionKey}", setPrimary: true, updatedAt: "{ISO日期}" }) +
+          "。如果用户拒绝，不做任何操作。",
+      };
+    });
+
     // ── Notify human when a2h tools were used ────────────────────
     const a2hToolUsedSessions = new Set<string>();
 
@@ -169,6 +202,40 @@ export default {
       return { cancel: true };
     });
 
+    // ── Welcome message on first boot after install ────────────────
+    api.on("gateway_start", async () => {
+      try {
+        const { readPendingWelcome, deletePendingWelcome, sendWelcome } =
+          await import("./src/pending-welcome.js");
+        const pending = readPendingWelcome();
+        if (!pending) return;
+
+        const cfg = api.runtime.config.loadConfig() as Record<string, unknown>;
+        const channels = (cfg.channels ?? {}) as Record<string, Record<string, unknown>>;
+        const channelCfg = channels[pending.channel];
+        if (!channelCfg) {
+          api.logger.warn(
+            `a2hmarket: welcome skipped, no config for channel "${pending.channel}"`,
+          );
+          deletePendingWelcome();
+          return;
+        }
+
+        const sent = await sendWelcome(pending, channelCfg, {
+          info: (m) => api.logger.info(`a2hmarket: ${m}`),
+          warn: (m) => api.logger.warn(`a2hmarket: ${m}`),
+        });
+        deletePendingWelcome();
+        if (sent) {
+          api.logger.info("a2hmarket: welcome message sent");
+        }
+      } catch (err) {
+        api.logger.warn(
+          `a2hmarket: welcome failed: ${err instanceof Error ? err.message : String(err)}`,
+        );
+      }
+    });
+
     // ── Register agent service ───────────────────────────────────
     let serviceAbort: AbortController | null = null;
     api.registerService({
@@ -190,6 +257,7 @@ export default {
         initReplyBridge(join(dataDir, "reply-bridge.json"));
         initApprovalStore(join(dataDir, "approvals.json"));
         setLastChannelStore(new LastChannelStore(join(dataDir, "last-channel.json")));
+        setPrimaryChannelStore(new PrimaryChannelStore(join(dataDir, "primary-channel.json")));
 
         const serviceLog = {
           info: (m: string) => ctx.logger.info(`[a2hmarket] ${m}`),
@@ -210,7 +278,7 @@ export default {
           );
         }
       },
-      stop: async () => {
+      stop: async (_ctx) => {
         serviceAbort?.abort();
       },
     });

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "a2hmarket",
   "name": "A2H Market",
   "description": "A2H Market \u2014 AI agent marketplace with self-managed A2A messaging via MQTT.",
-  "version": "1.0.11",
+  "version": "1.3.2",
   "hosts": [
     "openclaw"
   ],

package/package.json

@@ -1,23 +1,18 @@
 {
   "name": "@a2hmarket/a2hmarket",
-  "version": "1.0.11",
+  "version": "1.3.2",
   "type": "module",
   "files": [
     "index.ts",
     "openclaw.plugin.json",
-    "scripts/",
     "skills/",
     "src/"
   ],
   "description": "A2H Market OpenClaw plugin \u2014 AI agent marketplace with A2A messaging via MQTT.",
   "license": "MIT-0",
   "main": "index.ts",
-  "bin": {
-    "a2hmarket-install": "./scripts/install.mjs"
-  },
   "dependencies": {
-    "mqtt": "^5.10.0",
-    "viem": "^2.43.0"
+    "mqtt": "^5.10.0"
   },
   "devDependencies": {
     "typescript": "^5.7.0",

package/skills/a2hmarket/SKILL.md

@@ -55,6 +55,29 @@ A2H Market 是一个人类和 AI Agent 都可以使用的 AI 交易市场。你
 | 需求帖 | works (type=2) | 买家发布的悬赏求助帖子 |
 | 讨论帖 | works (type=4) | 讨论交流帖子，支持回复 |
 
+## 安装后引导
+
+当用户要求安装 a2hmarket 插件（如 "安装 a2hmarket"、"install a2hmarket"）时，
+安装成功后，**必须**将当前 channel 信息写入 pending welcome 文件，
+以便 gateway 重启后自动向用户发送欢迎消息：
+
+```bash
+mkdir -p ~/.a2h_store/a2h_config
+```
+
+写入 `~/.a2h_store/a2h_config/pending-welcome.json`：
+```json
+{
+  "channel": "{当前channel，如feishu/discord}",
+  "target": "{当前聊天的target，如chat_id/channel_id}",
+  "installedAt": "{ISO时间}"
+}
+```
+
+channel 和 target 从当前 sessionKey 解析：sessionKey 格式为 `agent:main:{channel}:direct:{target}`。
+
+完成后提示用户重启 gateway 以加载插件。
+
 ## 使用原则
 
 1. **直接调用工具** — 使用 a2h_* 工具完成任务，不要用 web search

package/skills/a2hmarket/references/approval-reporting.md

@@ -66,6 +66,6 @@ a2h_create_approval(
 |---------|---------|
 | 公开信息（价格调整、服务条件补充等） | 更新帖子（a2h_works_update） |
 | 非公开信息（底价、特定客户优惠等） | 写入沟通指示文档 `~/.a2h_store/a2h_negotiation/{worksId}.md` |
-| 行动指令（接受/拒绝/还价） | 立即执行并回复对方 |
+| 行动指令（接受/拒绝/还价） | 立即执行，并用 **a2h_send** 回复对方（审批 session 不是 DM session，[REPLY] 到不了对方） |
 
 详见 → [cross-session-sync.md](cross-session-sync.md)

package/skills/a2hmarket/references/message-routing.md

@@ -67,12 +67,12 @@
 
 当需要创建审批（a2h_create_approval）时，先回复对方一个临时回应，再创建审批：
 
-1. 先输出 `[REPLY] 收到，我确认一下，稍后回复你`
+1. 先输出 `[REPLY] 收到，我确认一下，稍后回复你`（此时在 DM session 中，[REPLY] 能到达对方）
 2. 再调用 a2h_create_approval 创建审批，等待人类决定
 3. 输出 `[SILENT] 等待人类审批` （不通知任何人）
-4. 人类回复后，根据决定输出 `[REPLY] 最终回复内容`
+4. 人类回复后（此时已在 channel session 中，不是 DM session），用 **a2h_send** 将决定发给对方
 
-> 这样对方收到临时回应，人类看到的最后一条是审批卡片。
+> 第 4 步必须用 a2h_send 而不是 [REPLY]——审批结果是在飞书/Discord channel session 中处理的，[REPLY] tag 在这些 session 里不会送达对方 agent。
 
 ---
 

package/src/agent-service.ts

@@ -170,7 +170,11 @@ export async function startAgentService(ctx: AgentServiceContext): Promise<void>
     if (event.payload.payment_qr_type) meta.push(`[payment_qr_type: ${event.payload.payment_qr_type}]`);
     if (event.payload.attachment) {
       const att = event.payload.attachment as Record<string, unknown>;
-      meta.push(`[attachment: ${att.name ?? att.url ?? "file"}]`);
+      const parts = [`attachment: ${att.name ?? "file"}`];
+      if (att.url) parts.push(`url: ${att.url}`);
+      if (att.mime_type) parts.push(`type: ${att.mime_type}`);
+      if (att.size) parts.push(`size: ${att.size}`);
+      meta.push(`[${parts.join(" | ")}]`);
     }
     let enrichedBody = `${prefix}\n${event.text}`;
     if (meta.length > 0) {
@@ -202,6 +206,8 @@ export async function startAgentService(ctx: AgentServiceContext): Promise<void>
         messageId: event.messageId,
         timestamp: Date.now(),
         commandAuthorized: true,
+        surface: "a2hmarket",
+        originatingChannel: "a2hmarket",
 
         // ③ Deliver: route AI text output based on prefix tag.
         //    [THINK]  — AI internal reasoning, don't notify anyone

package/src/channel-state.ts

@@ -1,6 +1,8 @@
 import type { LastChannelStore } from "./last-channel.js";
+import type { PrimaryChannelStore } from "./primary-channel.js";
 
 let _store: LastChannelStore | null = null;
+let _primaryStore: PrimaryChannelStore | null = null;
 
 export function setLastChannelStore(store: LastChannelStore): void {
   _store = store;
@@ -9,3 +11,11 @@ export function setLastChannelStore(store: LastChannelStore): void {
 export function getLastChannelStore(): LastChannelStore | null {
   return _store;
 }
+
+export function setPrimaryChannelStore(store: PrimaryChannelStore): void {
+  _primaryStore = store;
+}
+
+export function getPrimaryChannelStore(): PrimaryChannelStore | null {
+  return _primaryStore;
+}

package/src/credentials.ts

@@ -14,12 +14,6 @@ export interface A2HCredentials {
   apiUrl: string;
   mqttUrl: string;
   notify?: A2HNotifyConfig;
-  /**
-   * @deprecated Store the Tempo private key in macOS Keychain instead.
-   * Run `node scripts/setup-tempo-key.mjs` to migrate.
-   * Fallback priority: Keychain → TEMPO_PRIVATE_KEY env → this field.
-   */
-  tempoPrivateKey?: string;
 }
 
 // ── Load from pluginConfig (openclaw.json) — preferred ─────────────────
@@ -45,7 +39,6 @@ export function loadCredentialsFromConfig(
     apiUrl: ((pluginConfig.apiUrl as string) ?? "https://api.a2hmarket.ai").replace(/\/+$/, ""),
     mqttUrl: (pluginConfig.mqttUrl as string) ?? "mqtts://post-cn-e4k4o78q702.mqtt.aliyuncs.com:8883",
     notify,
-    tempoPrivateKey: pluginConfig.tempoPrivateKey as string | undefined,
   };
 }
 
@@ -66,8 +59,6 @@ interface RawCredentials {
   agentId?: string;
   agentKey?: string;
   secret?: string;
-  tempo_private_key?: string;
-  tempoPrivateKey?: string;
 }
 
 export function loadCredentialsFromFile(configDir?: string): A2HCredentials {
@@ -116,7 +107,6 @@ export function loadCredentialsFromFile(configDir?: string): A2HCredentials {
     apiUrl: (raw.api_url ?? "https://api.a2hmarket.ai").replace(/\/+$/, ""),
     mqttUrl: raw.mqtt_url ?? "mqtts://post-cn-e4k4o78q702.mqtt.aliyuncs.com:8883",
     notify,
-    tempoPrivateKey: raw.tempo_private_key ?? raw.tempoPrivateKey,
   };
 }
 

package/src/feishu-notify.ts

@@ -139,7 +139,7 @@ export function buildA2HNotifyCard(params: {
   let displayContent = params.content;
   if (params.type === "reply") {
     displayContent = displayContent.replace(
-      /(https:\/\/checkout\.stripe\.com\S+)/g,
+      /(https:\/\/www\.paypal\.com\/checkoutnow\S+)/g,
       "[👉 点击支付]($1)",
     );
   }

package/src/notify.ts

@@ -2,14 +2,16 @@
  * Unified notification service — dispatches to Feishu (card) or other channels (text).
  *
  * Channel resolution:
- *   1. Read credentials.notify.channel + target
- *   2. Feishu → rich interactive card via Feishu Open API
- *   3. Discord → plain text via Discord bot API
- *   4. Others → log warning (unsupported)
+ *   1. PrimaryChannelStore (user-designated runtime override)
+ *   2. credentials.notify.channel + target (install-time fallback)
+ *   3. Feishu → rich interactive card via Feishu Open API
+ *   4. Discord → plain text via Discord bot API
+ *   5. Others → log warning (unsupported)
  */
 
 import { loadCredentials } from "./credentials.js";
 import { getA2HRuntime } from "./runtime.js";
+import { getPrimaryChannelStore } from "./channel-state.js";
 import { sendFeishuCard, buildA2HNotifyCard, buildPaymentCard, type FeishuCardElement } from "./feishu-notify.js";
 import { recordCardPeer } from "./reply-bridge.js";
 
@@ -36,13 +38,37 @@ interface ChannelConfig {
 
 export function resolveNotifyConfig(): ChannelConfig | null {
   try {
-    const creds = loadCredentials();
-    if (!creds.notify?.channel || !creds.notify?.target) return null;
-
     const runtime = getA2HRuntime();
     const cfg = runtime.config.loadConfig() as Record<string, unknown>;
     const channels = (cfg.channels ?? {}) as Record<string, Record<string, unknown>>;
 
+    // 1. Check PrimaryChannelStore (user-designated runtime override)
+    const primary = getPrimaryChannelStore()?.get();
+    if (primary?.setPrimary && primary.channel && primary.target) {
+      const channelCfg = channels[primary.channel];
+
+      if (primary.channel === "feishu" && channelCfg?.appId && channelCfg?.appSecret) {
+        return {
+          channel: "feishu",
+          target: primary.target,
+          appId: channelCfg.appId as string,
+          appSecret: channelCfg.appSecret as string,
+        };
+      }
+      if (primary.channel === "discord" && channelCfg?.token) {
+        return {
+          channel: "discord",
+          target: primary.target,
+          botToken: channelCfg.token as string,
+        };
+      }
+      // primaryChannel set but channel credentials unavailable → fallback
+    }
+
+    // 2. Fallback to credentials.notify (install-time config)
+    const creds = loadCredentials();
+    if (!creds.notify?.channel || !creds.notify?.target) return null;
+
     const channelName = creds.notify.channel;
     const channelCfg = channels[channelName];
 

package/src/pending-welcome.ts

@@ -0,0 +1,151 @@
+/**
+ * Pending welcome — one-time welcome message after plugin install.
+ *
+ * Flow:
+ *   1. Agent installs plugin, writes ~/.a2h_store/a2h_config/pending-welcome.json
+ *      with { channel, target, installedAt }
+ *   2. Gateway restarts, plugin gateway_start hook reads + sends + deletes the file
+ *
+ * The file acts as a one-shot trigger: created at install, consumed on first boot.
+ */
+
+import { readFileSync, unlinkSync, mkdirSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { homedir } from "node:os";
+
+// ── Types ──────────────────────────────────────────────────────────────
+
+export interface PendingWelcome {
+  channel: string;   // "feishu" | "discord" | ...
+  target: string;    // chat_id / channel_id / user_id
+  installedAt: string;
+}
+
+// ── File I/O ───────────────────────────────────────────────────────────
+
+export function pendingWelcomePath(): string {
+  return join(homedir(), ".a2h_store", "a2h_config", "pending-welcome.json");
+}
+
+export function readPendingWelcome(): PendingWelcome | null {
+  try {
+    const data = JSON.parse(readFileSync(pendingWelcomePath(), "utf-8"));
+    if (data.channel && data.target) return data as PendingWelcome;
+    return null;
+  } catch {
+    return null;
+  }
+}
+
+export function deletePendingWelcome(): void {
+  try {
+    unlinkSync(pendingWelcomePath());
+  } catch {
+    // file may not exist — that's fine
+  }
+}
+
+// ── Welcome Content ────────────────────────────────────────────────────
+
+const WELCOME_TITLE = "🎉 A2H Market 插件已就绪";
+
+const WELCOME_FEISHU_ELEMENTS = [
+  {
+    tag: "markdown" as const,
+    content:
+      "我是你的 **A2H Market** AI 助手，可以帮你：\n" +
+      "📦 发布商品、浏览市场\n" +
+      "💬 自动与其他 Agent 谈判协商\n" +
+      "📋 管理订单、处理支付",
+  },
+  {
+    tag: "markdown" as const,
+    content: "---\n🔐 首次使用请发送 **\"登录 A2H Market\"** 完成授权",
+  },
+];
+
+const WELCOME_TEXT = [
+  `**${WELCOME_TITLE}**`,
+  "",
+  "我是你的 A2H Market AI 助手，可以帮你：",
+  "📦 发布商品、浏览市场",
+  "💬 自动与其他 Agent 谈判协商",
+  "📋 管理订单、处理支付",
+  "",
+  "---",
+  '🔐 首次使用请发送 "登录 A2H Market" 完成授权',
+].join("\n");
+
+// ── Send Welcome ───────────────────────────────────────────────────────
+
+export interface WelcomeLog {
+  info: (m: string) => void;
+  warn: (m: string) => void;
+}
+
+/**
+ * Send the welcome message to the channel that initiated the install.
+ * Returns true if sent successfully.
+ */
+export async function sendWelcome(
+  pending: PendingWelcome,
+  channelCfg: Record<string, unknown>,
+  log: WelcomeLog,
+): Promise<boolean> {
+  if (pending.channel === "feishu") {
+    if (!channelCfg.appId || !channelCfg.appSecret) {
+      log.warn("welcome: feishu channel credentials not configured, skipped");
+      return false;
+    }
+    const { sendFeishuCard } = await import("./feishu-notify.js");
+    await sendFeishuCard({
+      appId: channelCfg.appId as string,
+      appSecret: channelCfg.appSecret as string,
+      target: pending.target,
+      title: WELCOME_TITLE,
+      titleColor: "green",
+      elements: WELCOME_FEISHU_ELEMENTS,
+    });
+    return true;
+  }
+
+  if (pending.channel === "discord") {
+    if (!channelCfg.token) {
+      log.warn("welcome: discord bot token not configured, skipped");
+      return false;
+    }
+    const botToken = channelCfg.token as string;
+    const headers = {
+      "Content-Type": "application/json",
+      Authorization: `Bot ${botToken}`,
+    };
+
+    // Resolve DM channel (target may be user ID, not channel ID)
+    let channelId = pending.target;
+    try {
+      const dmResp = await fetch("https://discord.com/api/v10/users/@me/channels", {
+        method: "POST",
+        headers,
+        body: JSON.stringify({ recipient_id: pending.target }),
+      });
+      const dmData = (await dmResp.json()) as { id?: string };
+      if (dmData.id) channelId = dmData.id;
+    } catch {
+      // fallback: use target as channel ID directly
+    }
+
+    const resp = await fetch(`https://discord.com/api/v10/channels/${channelId}/messages`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify({ content: WELCOME_TEXT }),
+    });
+    if (!resp.ok) {
+      const data = (await resp.json()) as { message?: string };
+      throw new Error(`discord send failed: ${data.message}`);
+    }
+    return true;
+  }
+
+  log.info(`welcome: channel "${pending.channel}" does not support push welcome, skipped`);
+  return false;
+}

package/src/primary-channel.ts

@@ -0,0 +1,49 @@
+import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { dirname } from "node:path";
+
+export interface PrimaryChannelRecord {
+  channel: string;       // "feishu" | "discord" | ...
+  target: string;        // user ID (e.g. feishu open_id)
+  sessionKey: string;    // full session key
+  setPrimary: boolean;   // whether user explicitly set as primary
+  updatedAt: string;     // ISO timestamp
+}
+
+/**
+ * Store for user-designated "primary channel session".
+ * Approval notifications and session injection prefer this channel/target.
+ * Persisted as JSON: ~/.a2h_store/a2h_data/primary-channel.json
+ */
+export class PrimaryChannelStore {
+  private filePath: string;
+
+  constructor(filePath: string) {
+    this.filePath = filePath;
+  }
+
+  get(): PrimaryChannelRecord | null {
+    try {
+      const raw = readFileSync(this.filePath, "utf-8");
+      return JSON.parse(raw);
+    } catch {
+      return null;
+    }
+  }
+
+  set(record: Omit<PrimaryChannelRecord, "updatedAt">): void {
+    const full: PrimaryChannelRecord = {
+      ...record,
+      updatedAt: new Date().toISOString(),
+    };
+    mkdirSync(dirname(this.filePath), { recursive: true });
+    writeFileSync(this.filePath, JSON.stringify(full, null, 2));
+  }
+
+  clear(): void {
+    try {
+      writeFileSync(this.filePath, "{}");
+    } catch {
+      // ignore
+    }
+  }
+}