@agentunion/fastaun 0.5.16 → 0.5.18

package/dist/client/v2-e2ee.js

@@ -10,6 +10,52 @@ const V2_GROUP_STALE_BOOTSTRAP_CODE = -33054;
 const V2_PULL_DEFAULT_PAGE_LIMIT = 50;
 const V2_PULL_MAX_PAGE_LIMIT = 50;
 const V2_SENDER_IK_SYNC_FETCH_TIMEOUT_MS = 3_000;
+const V2_PULL_PIPELINE_QUEUE_CAPACITY = 100;
+class V2PullPageQueue {
+    capacity;
+    items = [];
+    takers = [];
+    putters = [];
+    queuedWeight = 0;
+    closed = false;
+    constructor(capacity) {
+        this.capacity = capacity;
+    }
+    async put(item, weight = 1) {
+        const itemWeight = Math.max(1, Math.trunc(weight));
+        while (!this.closed && this.items.length > 0 && this.queuedWeight + itemWeight > this.capacity) {
+            await new Promise((resolve) => this.putters.push(resolve));
+        }
+        if (this.closed)
+            return false;
+        const taker = this.takers.shift();
+        if (taker)
+            taker(item);
+        else {
+            this.items.push(item);
+            this.queuedWeight += itemWeight;
+        }
+        return true;
+    }
+    async take() {
+        const item = this.items.shift();
+        if (item !== undefined) {
+            this.queuedWeight = Math.max(0, this.queuedWeight - Math.max(1, Math.trunc(Number(item.weight ?? 1))));
+            this.putters.shift()?.();
+            return item;
+        }
+        if (this.closed)
+            return undefined;
+        return await new Promise((resolve) => this.takers.push(resolve));
+    }
+    close() {
+        this.closed = true;
+        for (const resolve of this.takers.splice(0))
+            resolve(undefined);
+        for (const resolve of this.putters.splice(0))
+            resolve();
+    }
+}
 function pullGateKeyForClient(client, method, params, fallback) {
     const key = client._rpcPipeline?.pullGateKeyForCall?.(method, params);
     return typeof key === 'string' && key ? key : fallback;
@@ -773,6 +819,12 @@ export class V2E2EECoordinator {
                     }
                     continue;
                 }
+                if (!entry.groupId && String(entry.msg.storage ?? '') === 'volatile') {
+                    await this.publishPendingV2VolatileMessage(entry.msg, plaintext, 'pending_retry');
+                    pending.delete(key);
+                    client._clientLog.debug(`V2 sender IK pending retry delivered: key=${key}`);
+                    continue;
+                }
                 pending.delete(key);
                 const seq = Number(entry.msg.seq ?? 0);
                 if (entry.groupId) {
@@ -795,6 +847,30 @@ export class V2E2EECoordinator {
             }
         }
     }
+    async publishPendingV2VolatileMessage(rawMessage, plaintext, source) {
+        const delivery = this.client._delivery;
+        const claim = delivery.beginVolatileDelivery(rawMessage);
+        if (claim === 'inflight')
+            return;
+        if (claim === 'seen') {
+            await delivery.ackVolatileMessages([rawMessage], true, false);
+            return;
+        }
+        try {
+            const publicMessage = delivery.publicVolatileMessage(plaintext);
+            for (const key of ['storage', 'volatile_cursor', 'created_at', 'expires_at', 'persist']) {
+                if (Object.prototype.hasOwnProperty.call(rawMessage, key))
+                    publicMessage[key] = rawMessage[key];
+            }
+            const appEvent = delivery.p2pAppEventForMessage(publicMessage);
+            await this.client._publishAppEvent(appEvent.event, appEvent.payload, source);
+            delivery.markVolatileSeen(rawMessage);
+        }
+        finally {
+            delivery.finishVolatileDelivery(rawMessage);
+        }
+        await delivery.ackVolatileMessages([rawMessage], true, false);
+    }
     async buildV2P2PEnvelope(opts) {
         const client = this.client;
         if (!client._v2Session) {
@@ -841,6 +917,10 @@ export class V2E2EECoordinator {
         if (peerDevices.length === 0) {
             throw new E2EEError(`V2 bootstrap: no devices found for ${to}`);
         }
+        const targetDeviceId = String(opts.deviceId ?? '').trim();
+        if (targetDeviceId && !peerDevices.some((dev) => String(dev.device_id ?? '').trim() === targetDeviceId)) {
+            throw new E2EEError(`V2 bootstrap: target device ${targetDeviceId} not found for ${to}`);
+        }
         let targetSet = useCache ? this.getTargetSetCache(to) : undefined;
         if (targetSet) {
             targetSet = this.cloneP2PTargetSet(targetSet);
@@ -926,6 +1006,20 @@ export class V2E2EECoordinator {
         if (targetSet.targets.length === 0) {
             throw new E2EEError(`V2 bootstrap: no usable devices found for ${to}`);
         }
+        if (targetDeviceId) {
+            let peerTargetFound = false;
+            targetSet.targets = targetSet.targets.filter((target) => {
+                const isPeerTarget = target.aid === to
+                    && (target.deviceId === targetDeviceId || (wrapPolicy.scope === 'aid' && !target.deviceId))
+                    && target.role !== 'self_sync';
+                if (isPeerTarget)
+                    peerTargetFound = true;
+                return isPeerTarget || target.role === 'self_sync';
+            });
+            if (!peerTargetFound) {
+                throw new E2EEError(`V2 bootstrap: target device ${targetDeviceId} not found for ${to}`);
+            }
+        }
         const envelope = encryptP2PMessage(session.getSenderIdentity(), targetSet, opts.payload, {
             messageId: opts.messageId,
             timestamp: opts.timestamp,
@@ -954,6 +1048,7 @@ export class V2E2EECoordinator {
         const client = this.client;
         await client._ensureV2SessionReady('message.send', 'V2 session not initialized; encrypted message.send requires V2 (V1 E2EE removed)');
         const toAid = String(to ?? '').trim();
+        const targetDeviceId = String(opts?.deviceId ?? '').trim();
         if (!toAid)
             throw new ValidationError("message.send requires 'to'");
         if (!isJsonObject(payload))
@@ -971,6 +1066,7 @@ export class V2E2EECoordinator {
                 payload,
                 messageId,
                 timestamp: opts?.timestamp,
+                deviceId: targetDeviceId || undefined,
                 protectedHeaders: opts?.protectedHeaders,
                 context: opts?.context,
                 useCache,
@@ -979,6 +1075,8 @@ export class V2E2EECoordinator {
                 to: toAid,
                 payload: envelope,
                 message_id: messageId,
+                ...(targetDeviceId ? { device_id: targetDeviceId } : {}),
+                ...(opts?.ttl !== undefined ? { ttl: opts.ttl } : {}),
                 encrypt: false,
                 _skip_send_result_envelope: true,
             });
@@ -992,6 +1090,7 @@ export class V2E2EECoordinator {
                 payload,
                 message_id: messageId,
                 timestamp: opts?.timestamp,
+                ttl: opts?.ttl,
                 protected_headers: opts?.protectedHeaders,
                 context: opts?.context,
             }, result, true);
@@ -1007,6 +1106,7 @@ export class V2E2EECoordinator {
                     payload,
                     message_id: messageId,
                     timestamp: opts?.timestamp,
+                    ttl: opts?.ttl,
                     protected_headers: opts?.protectedHeaders,
                     context: opts?.context,
                 }, result, true);
@@ -1043,6 +1143,11 @@ export class V2E2EECoordinator {
                     payload: payload,
                     encrypted: false,
                 };
+                if (msg.sender_device_id !== undefined)
+                    plaintext.sender_device_id = msg.sender_device_id;
+                const direction = String(msg.direction ?? '').trim();
+                if (direction)
+                    plaintext.direction = direction;
                 attachGatewayProximity(plaintext, msg);
             }
             else if (isJsonObject(payload)
@@ -1060,6 +1165,9 @@ export class V2E2EECoordinator {
             client._clientLog.warn(`P2P Tail 单条消息解密失败，连续性证明仍保留: seq=${seq}`);
             return null;
         }
+        if (publish && client._delivery.isSelfSentP2PMessage?.(plaintext)) {
+            return plaintext;
+        }
         if (publish) {
             const event = client._delivery.p2pAppEventForMessage(plaintext);
             await client._publishAppEvent(event.event, event.payload, source);
@@ -1112,6 +1220,8 @@ export class V2E2EECoordinator {
                     payload: payload,
                     encrypted: false,
                 };
+                if (msg.sender_device_id !== undefined)
+                    plaintext.sender_device_id = msg.sender_device_id;
                 plaintext = normalizeGroupMentionMode(plaintext, msg, msg.envelope_json);
                 attachGatewayProximity(plaintext, msg);
             }
@@ -1223,6 +1333,7 @@ export class V2E2EECoordinator {
             }), true);
         }
         const decrypted = [];
+        let volatileCursor = String(opts?.afterVolatileCursor ?? client._delivery.volatilePullCursor?.() ?? '').trim();
         let nextAfterSeq = opts?.force ? afterSeq : (afterSeq || (ns ? client._seqTracker.getContiguousSeq(ns) : 0));
         let pullGateKey = ns
             ? pullGateKeyForClient(client, 'message.v2.pull', {
@@ -1235,264 +1346,412 @@ export class V2E2EECoordinator {
         let lastAutoAckSeq = 0;
         let pendingAckSeq = deferredForwardAck;
         const maxPages = Math.max(1, Math.min(100, Math.trunc(Number(opts?.maxPages ?? 100) || 100)));
-        while (pageCount < maxPages) {
-            pageCount += 1;
-            const ackUpToSeq = pendingAckSeq;
-            const inlineAckGeneration = ackUpToSeq > 0
-                ? client._delivery.captureP2PInlineAckGeneration()
-                : null;
-            client._clientLog.debug(`message.v2.pull page request: page=${pageCount}, after_seq=${nextAfterSeq}, limit=${limit}, ack_up_to_seq=${ackUpToSeq}, ns=${ns || '<none>'}`);
-            const result = await client._callRawV2Rpc('message.v2.pull', {
-                after_seq: nextAfterSeq,
-                limit,
-                ...(opts?.force ? { force: true } : {}),
-                ...(ackUpToSeq > 0 ? { ack_up_to_seq: ackUpToSeq } : {}),
-            }, pullGateKey);
-            if (ackUpToSeq > 0) {
-                const actualAckSeq = client._delivery.resolveP2PPullAckSeq(result, ackUpToSeq);
-                if (actualAckSeq >= ackUpToSeq) {
-                    if (inlineAckGeneration !== null) {
-                        client._delivery.onP2PV2PullAckResult(result, ackUpToSeq, inlineAckGeneration);
+        let pipelineRunning = false;
+        let pipelineError = null;
+        const pipelineQueue = new V2PullPageQueue(V2_PULL_PIPELINE_QUEUE_CAPACITY);
+        let pipelineProducer = null;
+        let pipelineStopped = false;
+        const startPipeline = (startAfterSeq, startVolatileCursor) => {
+            if (pipelineRunning || pageCount >= maxPages || limit < V2_PULL_MAX_PAGE_LIMIT)
+                return;
+            pipelineRunning = true;
+            pipelineProducer = (async () => {
+                let producerAfterSeq = startAfterSeq;
+                let producerVolatileCursor = startVolatileCursor;
+                for (let produced = pageCount; produced < maxPages; produced += 1) {
+                    if (pipelineStopped)
+                        break;
+                    const requestedVolatileCursor = producerVolatileCursor;
+                    const result = await client._callRawV2Rpc('message.v2.pull', {
+                        after_seq: producerAfterSeq,
+                        limit,
+                        ...(producerVolatileCursor ? { after_volatile_cursor: producerVolatileCursor } : {}),
+                        ...(opts?.force ? { force: true } : {}),
+                    }, pullGateKey);
+                    if (pipelineStopped)
+                        break;
+                    const rawPageMessages = (Array.isArray(result?.messages) ? result.messages : []);
+                    const enqueued = await pipelineQueue.put({
+                        result,
+                        afterSeq: producerAfterSeq,
+                        ackUpToSeq: 0,
+                        inlineAckGeneration: null,
+                        requestedVolatileCursor,
+                        weight: rawPageMessages.length,
+                    }, rawPageMessages.length);
+                    if (!enqueued || pipelineStopped)
+                        break;
+                    const volatileMessages = client._delivery.volatileMessages?.(rawPageMessages) ?? [];
+                    if (volatileMessages.length > 0)
+                        break;
+                    const messages = deduplicateForwardPageMessages(rawPageMessages, producerAfterSeq);
+                    const seqs = messages
+                        .map((msg) => Number(msg.seq ?? 0))
+                        .filter((seq) => Number.isFinite(seq) && seq > 0);
+                    const nextAfter = Math.max(contiguousPullSeq(producerAfterSeq, seqs, result.contiguous_seq), producerAfterSeq);
+                    const cursor = isJsonObject(result.cursor)
+                        ? result.cursor : null;
+                    const shouldContinue = shouldContinueForwardPage({
+                        rawCount: messages.length,
+                        nextAfterSeq: producerAfterSeq,
+                        nextAfter,
+                        limit,
+                        hasMoreField: Object.prototype.hasOwnProperty.call(result, 'has_more'),
+                        hasMore: result.has_more === true,
+                        serverHead: safeNonNegativeSeq(cursor?.latest_seq) ?? 0,
+                        observedUpper: Math.max(nextAfter, Number(client._pendingP2pPullUpper?.get?.(ns) ?? 0)),
+                        pendingAckSeq: 0,
+                    });
+                    if (!shouldContinue)
+                        break;
+                    producerAfterSeq = nextAfter;
+                    producerVolatileCursor = '';
+                }
+            })().catch((error) => {
+                pipelineError = error;
+            }).finally(() => {
+                pipelineQueue.close();
+            });
+        };
+        const stopPipeline = async () => {
+            pipelineStopped = true;
+            pipelineQueue.close();
+            if (pipelineProducer) {
+                const producer = pipelineProducer;
+                pipelineProducer = null;
+                await producer;
+            }
+            pipelineRunning = false;
+        };
+        try {
+            while (pageCount < maxPages) {
+                let pipelinePage;
+                if (pipelineRunning) {
+                    pipelinePage = await pipelineQueue.take();
+                    if (!pipelinePage) {
+                        pipelineRunning = false;
+                        if (pipelineError)
+                            throw pipelineError;
+                        break;
                     }
-                    pendingAckSeq = 0;
-                    lastAutoAckSeq = Math.max(lastAutoAckSeq, ackUpToSeq);
-                    this.clearForwardAck(ns, ackUpToSeq);
                 }
-                else {
-                    client._clientLog.warn(`message.v2.pull piggyback ACK below target: requested=${ackUpToSeq}, actual=${actualAckSeq}; fallback terminal ACK`);
-                    await this.confirmForwardP2PAck(ackUpToSeq);
-                    pendingAckSeq = 0;
-                    lastAutoAckSeq = Math.max(lastAutoAckSeq, ackUpToSeq);
+                pageCount += 1;
+                const requestedVolatileCursor = pipelinePage?.requestedVolatileCursor ?? volatileCursor;
+                const ackUpToSeq = pipelinePage?.ackUpToSeq ?? pendingAckSeq;
+                const inlineAckGeneration = pipelinePage?.inlineAckGeneration ?? (ackUpToSeq > 0
+                    ? client._delivery.captureP2PInlineAckGeneration()
+                    : null);
+                client._clientLog.debug(`message.v2.pull page request: page=${pageCount}, after_seq=${nextAfterSeq}, limit=${limit}, ack_up_to_seq=${ackUpToSeq}, ns=${ns || '<none>'}`);
+                let result;
+                if (pipelinePage) {
+                    nextAfterSeq = pipelinePage.afterSeq;
+                    result = pipelinePage.result;
                 }
-            }
-            const pageMessages = (Array.isArray(result?.messages) ? result.messages : []);
-            const messages = deduplicateForwardPageMessages(pageMessages, nextAfterSeq);
-            const cursor = isJsonObject(result.cursor) ? result.cursor : null;
-            const hasMoreField = Object.prototype.hasOwnProperty.call(result, 'has_more');
-            const hasMore = result.has_more === true;
-            const serverHead = safeNonNegativeSeq(cursor?.latest_seq) ?? 0;
-            client._clientLog.debug(`message.v2.pull page response: page=${pageCount}, raw_count=${messages.length}, stale_count=${Math.max(0, pageMessages.length - messages.length)}, has_more=${String(result.has_more ?? '')}, server_head=${serverHead}, server_ack_seq=${String(result.server_ack_seq ?? '')}`);
-            for (const msg of messages) {
-                client._logMessageDebug('pull-raw', 'message.v2.pull', 'message.received', msg);
-            }
-            const seqs = messages
-                .map((msg) => Number(msg.seq ?? 0))
-                .filter((seq) => Number.isFinite(seq) && seq > 0);
-            const pageContigBefore = ns ? client._seqTracker.getContiguousSeq(ns) : 0;
-            const pageTrackerSnapshot = ns && typeof client._seqTracker.snapshotNamespace === 'function'
-                ? client._seqTracker.snapshotNamespace(ns)
-                : null;
-            let pageMaxSeq = nextAfterSeq;
-            if (seqs.length > 0) {
-                pageMaxSeq = Math.max(...seqs);
-            }
-            const pageContiguousSeq = contiguousPullSeq(pageContigBefore, seqs, result.contiguous_seq);
-            const deferredKeyFetches = new Map();
-            let blockedSeq = 0;
-            const pageDecryptedBefore = decrypted.length;
-            for (const msg of messages) {
-                const seq = Number(msg.seq ?? 0);
-                if (!Number.isFinite(seq) || seq <= 0)
-                    continue;
-                const version = String(msg.version ?? 'v2');
-                if (version === 'v1') {
-                    const legacy = isJsonObject(msg.legacy_v1) ? msg.legacy_v1 : {};
-                    const legacyPayload = legacy.payload !== undefined ? legacy.payload : msg.payload;
-                    const payloadType = isJsonObject(legacyPayload)
-                        ? String(legacyPayload.type ?? '').trim()
-                        : '';
-                    if (legacyPayload !== undefined && legacyPayload !== null
-                        && !['e2ee.encrypted', 'e2ee.group_encrypted', 'e2ee.p2p_encrypted'].includes(payloadType)) {
-                        const v1Msg = {
-                            message_id: String(msg.message_id ?? ''),
-                            from: String(msg.from_aid ?? ''),
-                            to: String(legacy.to ?? client._aid ?? ''),
-                            seq: msg.seq,
-                            type: String(msg.type ?? ''),
-                            timestamp: msg.t_server,
-                            payload: legacyPayload,
-                            encrypted: false,
-                        };
-                        attachGatewayProximity(v1Msg, msg);
-                        const appEvent = client._delivery.p2pAppEventForMessage(v1Msg);
-                        if (ns) {
-                            await client._publishPulledMessage(appEvent.event, ns, seq, appEvent.payload, false);
-                        }
-                        else {
-                            await client._publishAppEvent(appEvent.event, appEvent.payload, 'pull');
-                        }
-                        decrypted.push(v1Msg);
-                        client._clientLog.debug(`message.v2.pull plaintext V1 delivered: seq=${seq}, ns=${ns || '<none>'}`);
+                else {
+                    try {
+                        result = await client._callRawV2Rpc('message.v2.pull', {
+                            after_seq: nextAfterSeq,
+                            limit,
+                            ...(volatileCursor ? { after_volatile_cursor: volatileCursor } : {}),
+                            ...(opts?.force ? { force: true } : {}),
+                            ...(ackUpToSeq > 0 ? { ack_up_to_seq: ackUpToSeq } : {}),
+                        }, pullGateKey);
                     }
-                    else if (isJsonObject(legacyPayload)
-                        && ['e2ee.p2p_encrypted', 'e2ee.encrypted'].includes(payloadType)) {
-                        const deferStatus = {};
-                        const plaintext = await client._decryptV2Message({ ...msg, envelope_json: JSON.stringify(legacyPayload) }, true, true, true, true, deferStatus, true, 'pull');
-                        if (deferStatus.deferred) {
-                            blockedSeq = blockedSeq > 0 ? Math.min(blockedSeq, seq) : seq;
-                            if (deferStatus.fromAid) {
-                                const key = `${deferStatus.fromAid}\u0000${deferStatus.senderDeviceId ?? ''}\u0000${deferStatus.groupId ?? ''}`;
-                                deferredKeyFetches.set(key, { fromAid: deferStatus.fromAid, senderDeviceId: deferStatus.senderDeviceId ?? '', groupId: deferStatus.groupId ?? '' });
-                            }
+                    catch (exc) {
+                        if (!volatileCursor || !String(exc instanceof Error ? exc.message : exc).toLowerCase().includes('volatile cursor epoch mismatch')) {
+                            throw exc;
                         }
-                        if (plaintext) {
-                            if (ns)
-                                await client._publishPulledMessage('message.received', ns, seq, plaintext, false);
-                            else
-                                await client._publishAppEvent('message.received', plaintext, 'pull');
-                            decrypted.push(plaintext);
+                        client._delivery.resetVolatilePullCursor?.();
+                        volatileCursor = '';
+                        pageCount -= 1;
+                        continue;
+                    }
+                }
+                if (ackUpToSeq > 0) {
+                    const actualAckSeq = client._delivery.resolveP2PPullAckSeq(result, ackUpToSeq);
+                    if (actualAckSeq >= ackUpToSeq) {
+                        if (inlineAckGeneration !== null) {
+                            client._delivery.onP2PV2PullAckResult(result, ackUpToSeq, inlineAckGeneration);
                         }
+                        pendingAckSeq = 0;
+                        lastAutoAckSeq = Math.max(lastAutoAckSeq, ackUpToSeq);
+                        this.clearForwardAck(ns, ackUpToSeq);
                     }
                     else {
-                        client._clientLog.debug(`message.v2.pull skipping V1 envelope seq=${seq} payload_type=${payloadType || '<none>'} (V1 E2EE removed)`);
+                        client._clientLog.warn(`message.v2.pull piggyback ACK below target: requested=${ackUpToSeq}, actual=${actualAckSeq}; fallback terminal ACK`);
+                        await this.confirmForwardP2PAck(ackUpToSeq);
+                        pendingAckSeq = 0;
+                        lastAutoAckSeq = Math.max(lastAutoAckSeq, ackUpToSeq);
                     }
-                    continue;
                 }
-                if (version !== 'v2') {
-                    client._clientLog.debug(`message.v2.pull skipping non-V2 row seq=${seq} version=${String(msg.version ?? '')}`);
-                    continue;
-                }
-                const spkId = String(msg.spk_id ?? '');
-                if (spkId && client._v2Session && !client._v2Session.isCurrentSPK(spkId)) {
-                    client._v2Session.trackOldSPKMaxSeq(spkId, seq);
+                const pageMessages = (Array.isArray(result?.messages) ? result.messages : []);
+                const volatileMessages = client._delivery.volatileMessages?.(pageMessages) ?? [];
+                if (volatileMessages.length > 0) {
+                    decrypted.push(...await this.publishV2VolatileMessages(volatileMessages, 'pull', true));
+                    volatileCursor = String(client._delivery.volatilePullCursor?.() ?? '').trim();
                 }
-                const deferStatus = {};
-                const plaintext = await client._decryptV2Message(msg, true, true, true, true, deferStatus, true, 'pull');
-                if (deferStatus.deferred) {
-                    blockedSeq = blockedSeq > 0 ? Math.min(blockedSeq, seq) : seq;
+                const messages = deduplicateForwardPageMessages(pageMessages, nextAfterSeq);
+                const cursor = isJsonObject(result.cursor) ? result.cursor : null;
+                const hasMoreField = Object.prototype.hasOwnProperty.call(result, 'has_more');
+                const hasMore = result.has_more === true;
+                const volatileHasMore = result.volatile_has_more === true;
+                const serverHead = safeNonNegativeSeq(cursor?.latest_seq) ?? 0;
+                client._clientLog.debug(`message.v2.pull page response: page=${pageCount}, raw_count=${messages.length}, stale_count=${Math.max(0, pageMessages.length - messages.length)}, has_more=${String(result.has_more ?? '')}, server_head=${serverHead}, server_ack_seq=${String(result.server_ack_seq ?? '')}`);
+                for (const msg of messages) {
+                    client._logMessageDebug('pull-raw', 'message.v2.pull', 'message.received', msg);
                 }
-                if (deferStatus.deferred && deferStatus.fromAid) {
-                    const key = `${deferStatus.fromAid}\u0000${deferStatus.senderDeviceId ?? ''}\u0000${deferStatus.groupId ?? ''}`;
-                    deferredKeyFetches.set(key, {
-                        fromAid: deferStatus.fromAid,
-                        senderDeviceId: deferStatus.senderDeviceId ?? '',
-                        groupId: deferStatus.groupId ?? '',
-                    });
+                const seqs = messages
+                    .map((msg) => Number(msg.seq ?? 0))
+                    .filter((seq) => Number.isFinite(seq) && seq > 0);
+                const pageContigBefore = ns ? client._seqTracker.getContiguousSeq(ns) : 0;
+                const pageTrackerSnapshot = ns && typeof client._seqTracker.snapshotNamespace === 'function'
+                    ? client._seqTracker.snapshotNamespace(ns)
+                    : null;
+                let pageMaxSeq = nextAfterSeq;
+                if (seqs.length > 0) {
+                    pageMaxSeq = Math.max(...seqs);
                 }
-                if (plaintext === null) {
-                    client._clientLog.debug(`message.v2.pull decrypt returned null: seq=${seq}, ns=${ns || '<none>'}`);
-                    continue;
+                const pageContiguousSeq = contiguousPullSeq(pageContigBefore, seqs, result.contiguous_seq);
+                const deferredKeyFetches = new Map();
+                let blockedSeq = 0;
+                const pageDecryptedBefore = decrypted.length;
+                for (const msg of messages) {
+                    const seq = Number(msg.seq ?? 0);
+                    if (!Number.isFinite(seq) || seq <= 0)
+                        continue;
+                    const version = String(msg.version ?? 'v2');
+                    if (version === 'v1') {
+                        const legacy = isJsonObject(msg.legacy_v1) ? msg.legacy_v1 : {};
+                        const legacyPayload = legacy.payload !== undefined ? legacy.payload : msg.payload;
+                        const payloadType = isJsonObject(legacyPayload)
+                            ? String(legacyPayload.type ?? '').trim()
+                            : '';
+                        if (legacyPayload !== undefined && legacyPayload !== null
+                            && !['e2ee.encrypted', 'e2ee.group_encrypted', 'e2ee.p2p_encrypted'].includes(payloadType)) {
+                            const v1Msg = {
+                                message_id: String(msg.message_id ?? ''),
+                                from: String(msg.from_aid ?? ''),
+                                to: String(legacy.to ?? client._aid ?? ''),
+                                seq: msg.seq,
+                                type: String(msg.type ?? ''),
+                                timestamp: msg.t_server,
+                                payload: legacyPayload,
+                                encrypted: false,
+                            };
+                            const direction = String(msg.direction ?? '').trim();
+                            if (direction)
+                                v1Msg.direction = direction;
+                            else if (String(msg.from_aid ?? '').trim() && String(msg.from_aid ?? '').trim() !== String(client._aid ?? '').trim()) {
+                                v1Msg.direction = 'inbound';
+                            }
+                            if (msg.sender_device_id !== undefined)
+                                v1Msg.sender_device_id = msg.sender_device_id;
+                            attachGatewayProximity(v1Msg, msg);
+                            const appEvent = client._delivery.p2pAppEventForMessage(v1Msg);
+                            if (ns) {
+                                await client._publishPulledMessage(appEvent.event, ns, seq, appEvent.payload, false);
+                            }
+                            else {
+                                await client._publishAppEvent(appEvent.event, appEvent.payload, 'pull');
+                            }
+                            decrypted.push(v1Msg);
+                            client._clientLog.debug(`message.v2.pull plaintext V1 delivered: seq=${seq}, ns=${ns || '<none>'}`);
+                        }
+                        else if (isJsonObject(legacyPayload)
+                            && ['e2ee.p2p_encrypted', 'e2ee.encrypted'].includes(payloadType)) {
+                            const deferStatus = {};
+                            const plaintext = await client._decryptV2Message({ ...msg, envelope_json: JSON.stringify(legacyPayload) }, true, true, true, true, deferStatus, true, 'pull');
+                            if (deferStatus.deferred) {
+                                blockedSeq = blockedSeq > 0 ? Math.min(blockedSeq, seq) : seq;
+                                if (deferStatus.fromAid) {
+                                    const key = `${deferStatus.fromAid}\u0000${deferStatus.senderDeviceId ?? ''}\u0000${deferStatus.groupId ?? ''}`;
+                                    deferredKeyFetches.set(key, { fromAid: deferStatus.fromAid, senderDeviceId: deferStatus.senderDeviceId ?? '', groupId: deferStatus.groupId ?? '' });
+                                }
+                            }
+                            if (plaintext) {
+                                if (ns)
+                                    await client._publishPulledMessage('message.received', ns, seq, plaintext, false);
+                                else
+                                    await client._publishAppEvent('message.received', plaintext, 'pull');
+                                decrypted.push(plaintext);
+                            }
+                        }
+                        else {
+                            client._clientLog.debug(`message.v2.pull skipping V1 envelope seq=${seq} payload_type=${payloadType || '<none>'} (V1 E2EE removed)`);
+                        }
+                        continue;
+                    }
+                    if (version !== 'v2') {
+                        client._clientLog.debug(`message.v2.pull skipping non-V2 row seq=${seq} version=${String(msg.version ?? '')}`);
+                        continue;
+                    }
+                    const spkId = String(msg.spk_id ?? '');
+                    if (spkId && client._v2Session && !client._v2Session.isCurrentSPK(spkId)) {
+                        client._v2Session.trackOldSPKMaxSeq(spkId, seq);
+                    }
+                    const deferStatus = {};
+                    const plaintext = await client._decryptV2Message(msg, true, true, true, true, deferStatus, true, 'pull');
+                    if (deferStatus.deferred) {
+                        blockedSeq = blockedSeq > 0 ? Math.min(blockedSeq, seq) : seq;
+                    }
+                    if (deferStatus.deferred && deferStatus.fromAid) {
+                        const key = `${deferStatus.fromAid}\u0000${deferStatus.senderDeviceId ?? ''}\u0000${deferStatus.groupId ?? ''}`;
+                        deferredKeyFetches.set(key, {
+                            fromAid: deferStatus.fromAid,
+                            senderDeviceId: deferStatus.senderDeviceId ?? '',
+                            groupId: deferStatus.groupId ?? '',
+                        });
+                    }
+                    if (plaintext === null) {
+                        client._clientLog.debug(`message.v2.pull decrypt returned null: seq=${seq}, ns=${ns || '<none>'}`);
+                        continue;
+                    }
+                    if (ns) {
+                        await client._publishPulledMessage('message.received', ns, seq, plaintext, false);
+                    }
+                    else {
+                        await client._publishAppEvent('message.received', plaintext, 'pull');
+                    }
+                    decrypted.push(plaintext);
+                    client._logMessageDebug('decrypt-ok', 'message.v2.pull', 'message.received', plaintext);
                 }
+                const hasServerAckSeq = Object.prototype.hasOwnProperty.call(result, 'server_ack_seq');
+                const parsedServerAckSeq = hasServerAckSeq ? safeNonNegativeSeq(result.server_ack_seq) : null;
+                const serverAckSeq = parsedServerAckSeq ?? 0;
+                const retentionFloor = Math.max(0, Number(result.retention_floor_seq ?? 0));
                 if (ns) {
-                    await client._publishPulledMessage('message.received', ns, seq, plaintext, false);
-                }
-                else {
-                    await client._publishAppEvent('message.received', plaintext, 'pull');
-                }
-                decrypted.push(plaintext);
-                client._logMessageDebug('decrypt-ok', 'message.v2.pull', 'message.received', plaintext);
-            }
-            const hasServerAckSeq = Object.prototype.hasOwnProperty.call(result, 'server_ack_seq');
-            const parsedServerAckSeq = hasServerAckSeq ? safeNonNegativeSeq(result.server_ack_seq) : null;
-            const serverAckSeq = parsedServerAckSeq ?? 0;
-            const retentionFloor = Math.max(0, Number(result.retention_floor_seq ?? 0));
-            if (ns) {
-                const commitTarget = Math.max(pageContigBefore, Number.isFinite(retentionFloor) ? retentionFloor : 0, pageCount === 1 ? deferredServerCursor : 0, serverAckSeq, blockedSeq > 0 ? blockedSeq - 1 : pageContiguousSeq);
-                let ackSeq = pageContigBefore;
-                let contigAdvanced = false;
-                try {
-                    if (commitTarget > pageContigBefore) {
-                        client._seqTracker.forceContiguousSeq(ns, commitTarget);
-                        if (retentionFloor > pageContigBefore) {
-                            client._clientLog.info(`message.v2.pull retention-floor advance: ns=${ns} contiguous=${pageContigBefore} -> retention_floor_seq=${retentionFloor}`);
+                    const commitTarget = Math.max(pageContigBefore, Number.isFinite(retentionFloor) ? retentionFloor : 0, pageCount === 1 ? deferredServerCursor : 0, serverAckSeq, blockedSeq > 0 ? blockedSeq - 1 : pageContiguousSeq);
+                    let ackSeq = pageContigBefore;
+                    let contigAdvanced = false;
+                    try {
+                        if (commitTarget > pageContigBefore) {
+                            client._seqTracker.forceContiguousSeq(ns, commitTarget);
+                            if (retentionFloor > pageContigBefore) {
+                                client._clientLog.info(`message.v2.pull retention-floor advance: ns=${ns} contiguous=${pageContigBefore} -> retention_floor_seq=${retentionFloor}`);
+                            }
+                            if (deferredServerCursor > pageContigBefore && pageCount === 1) {
+                                client._clientLog.info(`message.v2.pull restore local A from deferred server ACK cursor: ns=${ns}, contiguous=${pageContigBefore} -> server_ack_seq=${deferredServerCursor}`);
+                            }
+                            if (seqs.length > 0) {
+                                client._clientLog.debug(`message.v2.pull force contiguous: ns=${ns}, page_max_seq=${pageMaxSeq}, previous=${pageContigBefore}`);
+                            }
                         }
-                        if (deferredServerCursor > pageContigBefore && pageCount === 1) {
-                            client._clientLog.info(`message.v2.pull restore local A from deferred server ACK cursor: ns=${ns}, contiguous=${pageContigBefore} -> server_ack_seq=${deferredServerCursor}`);
+                        ackSeq = client._seqTracker.getContiguousSeq(ns);
+                        contigAdvanced = ackSeq !== pageContigBefore;
+                        if (contigAdvanced) {
+                            await client._commitSeqTrackerState(ns);
+                            if (pageCount === 1 && deferredServerCursor > 0)
+                                this.clearForwardCursor(ns, ackSeq);
                         }
-                        if (seqs.length > 0) {
-                            client._clientLog.debug(`message.v2.pull force contiguous: ns=${ns}, page_max_seq=${pageMaxSeq}, previous=${pageContigBefore}`);
+                    }
+                    catch (exc) {
+                        if (typeof client._seqTracker.restoreNamespaceSnapshot === 'function') {
+                            client._seqTracker.restoreNamespaceSnapshot(ns, pageTrackerSnapshot);
                         }
+                        client._clientLog.error?.(`message.v2.pull Forward commit rolled back: ns=${ns} target=${commitTarget} error=${formatE2EEError(exc)}`);
+                        throw exc;
                     }
-                    ackSeq = client._seqTracker.getContiguousSeq(ns);
-                    contigAdvanced = ackSeq !== pageContigBefore;
-                    if (contigAdvanced) {
-                        await client._commitSeqTrackerState(ns);
-                        if (pageCount === 1 && deferredServerCursor > 0)
-                            this.clearForwardCursor(ns, ackSeq);
+                    if (contigAdvanced)
+                        await client._drainOrderedMessages(ns, undefined, false, false, 'pull');
+                    for (const fetch of deferredKeyFetches.values()) {
+                        this.scheduleSenderIKFetch(fetch.fromAid, fetch.senderDeviceId, fetch.groupId);
                     }
-                }
-                catch (exc) {
-                    if (typeof client._seqTracker.restoreNamespaceSnapshot === 'function') {
-                        client._seqTracker.restoreNamespaceSnapshot(ns, pageTrackerSnapshot);
+                    if (parsedServerAckSeq !== null && serverAckSeq > ackSeq) {
+                        this.recordForwardCursor(ns, serverAckSeq, ackSeq);
+                    }
+                    // 无本页服务端水位时，只有本页成功提交了比已知服务端更高的 A
+                    // 才新增 ACK 义务。空页不能仅因本地已有 A 而重复 ACK。
+                    const knownServerAckSeq = hasServerAckSeq
+                        ? serverAckSeq
+                        : (pageCount === 1 ? deferredServerCursor : 0);
+                    const ackNeeded = ackSeq > 0
+                        && ackSeq > lastAutoAckSeq
+                        && ((hasServerAckSeq && ackSeq > serverAckSeq)
+                            || (contigAdvanced && ackSeq > knownServerAckSeq));
+                    if (ackNeeded) {
+                        this.recordForwardAck(ns, ackSeq);
+                        const nextAfter = Math.max(pageContiguousSeq, nextAfterSeq);
+                        const canContinuePage = blockedSeq <= 0 && messages.length > 0 && nextAfter > nextAfterSeq;
+                        if (canContinuePage && !pipelineRunning) {
+                            pendingAckSeq = Math.max(pendingAckSeq, ackSeq);
+                            lastAutoAckSeq = Math.max(lastAutoAckSeq, ackSeq);
+                            client._clientLog.debug(`message.v2.pull queued piggyback auto-ack: ns=${ns}, ack_seq=${pendingAckSeq}, raw_count=${messages.length}`);
+                        }
+                        else {
+                            client._clientLog.debug(`message.v2.pull sending terminal auto-ack: ns=${ns}, ack_seq=${ackSeq}, raw_count=${messages.length}`);
+                            await this.confirmForwardP2PAck(ackSeq);
+                            lastAutoAckSeq = Math.max(lastAutoAckSeq, ackSeq);
+                        }
                     }
-                    client._clientLog.error?.(`message.v2.pull Forward commit rolled back: ns=${ns} target=${commitTarget} error=${formatE2EEError(exc)}`);
-                    throw exc;
-                }
-                if (contigAdvanced)
-                    await client._drainOrderedMessages(ns, undefined, false, false, 'pull');
-                for (const fetch of deferredKeyFetches.values()) {
-                    this.scheduleSenderIKFetch(fetch.fromAid, fetch.senderDeviceId, fetch.groupId);
-                }
-                if (parsedServerAckSeq !== null && serverAckSeq > ackSeq) {
-                    this.recordForwardCursor(ns, serverAckSeq, ackSeq);
                 }
-                // 无本页服务端水位时，只有本页成功提交了比已知服务端更高的 A
-                // 才新增 ACK 义务。空页不能仅因本地已有 A 而重复 ACK。
-                const knownServerAckSeq = hasServerAckSeq
-                    ? serverAckSeq
-                    : (pageCount === 1 ? deferredServerCursor : 0);
-                const ackNeeded = ackSeq > 0
-                    && ackSeq > lastAutoAckSeq
-                    && ((hasServerAckSeq && ackSeq > serverAckSeq)
-                        || (contigAdvanced && ackSeq > knownServerAckSeq));
-                if (ackNeeded) {
-                    this.recordForwardAck(ns, ackSeq);
-                    const nextAfter = Math.max(pageContiguousSeq, nextAfterSeq);
-                    const canContinuePage = blockedSeq <= 0 && messages.length > 0 && nextAfter > nextAfterSeq;
-                    if (canContinuePage) {
-                        pendingAckSeq = Math.max(pendingAckSeq, ackSeq);
-                        lastAutoAckSeq = Math.max(lastAutoAckSeq, ackSeq);
-                        client._clientLog.debug(`message.v2.pull queued piggyback auto-ack: ns=${ns}, ack_seq=${pendingAckSeq}, raw_count=${messages.length}`);
+                if (!ns) {
+                    for (const fetch of deferredKeyFetches.values()) {
+                        this.scheduleSenderIKFetch(fetch.fromAid, fetch.senderDeviceId, fetch.groupId);
                     }
-                    else {
-                        client._clientLog.debug(`message.v2.pull sending terminal auto-ack: ns=${ns}, ack_seq=${ackSeq}, raw_count=${messages.length}`);
-                        await this.confirmForwardP2PAck(ackSeq);
-                        lastAutoAckSeq = Math.max(lastAutoAckSeq, ackSeq);
+                }
+                if (ns)
+                    client._delivery.syncProgress(ns, {
+                        rawCount: messages.length,
+                        pulledCount: decrypted.length - pageDecryptedBefore,
+                        remaining: result.remaining,
+                        hasMore: hasMoreField ? hasMore : undefined,
+                        currentSeq: client._seqTracker.getContiguousSeq(ns),
+                        targetSeq: serverHead,
+                    });
+                const nextAfter = Math.max(pageContiguousSeq, nextAfterSeq);
+                const rawCount = messages.length;
+                if (blockedSeq > 0)
+                    break;
+                const shouldContinuePersistent = shouldContinueForwardPage({
+                    rawCount,
+                    nextAfterSeq,
+                    nextAfter,
+                    limit,
+                    hasMoreField,
+                    hasMore,
+                    serverHead,
+                    observedUpper: Math.max(client._seqTracker.getMaxSeenSeq(ns), Number(client._pendingP2pPullUpper?.get?.(ns) ?? 0)),
+                    pendingAckSeq,
+                });
+                const shouldContinueForPipeline = shouldContinueForwardPage({
+                    rawCount,
+                    nextAfterSeq,
+                    nextAfter,
+                    limit,
+                    hasMoreField,
+                    hasMore,
+                    serverHead,
+                    observedUpper: Math.max(client._seqTracker.getMaxSeenSeq(ns), Number(client._pendingP2pPullUpper?.get?.(ns) ?? 0)),
+                    pendingAckSeq: 0,
+                });
+                const shouldContinueVolatile = (hasMore || volatileHasMore)
+                    && volatileMessages.length > 0
+                    && Boolean(volatileCursor)
+                    && volatileCursor !== requestedVolatileCursor;
+                if (!shouldContinuePersistent && !shouldContinueVolatile)
+                    break;
+                if (shouldContinueForPipeline && !pipelineRunning && limit >= V2_PULL_MAX_PAGE_LIMIT) {
+                    if (pendingAckSeq > 0) {
+                        await this.confirmForwardP2PAck(pendingAckSeq);
+                        pendingAckSeq = 0;
                     }
+                    startPipeline(nextAfter, volatileCursor);
                 }
-            }
-            if (!ns) {
-                for (const fetch of deferredKeyFetches.values()) {
-                    this.scheduleSenderIKFetch(fetch.fromAid, fetch.senderDeviceId, fetch.groupId);
+                if (!pipelineRunning && pullGateKey && opts?.gateLocked && client._rpcPipeline?.yieldPullGate) {
+                    const nextKey = pullGateKeyForClient(client, 'message.v2.pull', {
+                        after_seq: nextAfter, force: opts?.force === true, limit,
+                    }, `${ns}|forward|after=${nextAfter}|force=${String(Boolean(opts?.force))}|limit=${limit}`);
+                    await client._rpcPipeline.yieldPullGate(pullGateKey, nextKey, true);
+                    pullGateKey = nextKey;
                 }
+                const tailDelayMs = v2PullTailDelayMs(rawCount, limit);
+                if (tailDelayMs > 0)
+                    await v2Sleep(tailDelayMs);
+                nextAfterSeq = nextAfter;
             }
-            if (ns)
-                client._delivery.syncProgress(ns, {
-                    rawCount: messages.length,
-                    pulledCount: decrypted.length - pageDecryptedBefore,
-                    remaining: result.remaining,
-                    hasMore: hasMoreField ? hasMore : undefined,
-                    currentSeq: client._seqTracker.getContiguousSeq(ns),
-                    targetSeq: serverHead,
-                });
-            const nextAfter = Math.max(pageContiguousSeq, nextAfterSeq);
-            const rawCount = messages.length;
-            if (blockedSeq > 0)
-                break;
-            const shouldContinue = shouldContinueForwardPage({
-                rawCount,
-                nextAfterSeq,
-                nextAfter,
-                limit,
-                hasMoreField,
-                hasMore,
-                serverHead,
-                observedUpper: Math.max(client._seqTracker.getMaxSeenSeq(ns), Number(client._pendingP2pPullUpper?.get?.(ns) ?? 0)),
-                pendingAckSeq,
-            });
-            if (!shouldContinue)
-                break;
-            if (pullGateKey && opts?.gateLocked && client._rpcPipeline?.yieldPullGate) {
-                const nextKey = pullGateKeyForClient(client, 'message.v2.pull', {
-                    after_seq: nextAfter, force: opts?.force === true, limit,
-                }, `${ns}|forward|after=${nextAfter}|force=${String(Boolean(opts?.force))}|limit=${limit}`);
-                await client._rpcPipeline.yieldPullGate(pullGateKey, nextKey, true);
-                pullGateKey = nextKey;
-            }
-            const tailDelayMs = v2PullTailDelayMs(rawCount, limit);
-            if (tailDelayMs > 0)
-                await v2Sleep(tailDelayMs);
-            nextAfterSeq = nextAfter;
+        }
+        finally {
+            await stopPipeline();
         }
         if (pageCount >= maxPages) {
             client._clientLog.warn(`message.v2.pull reached max_pages=${maxPages} after_seq=${nextAfterSeq}`);
@@ -1518,6 +1777,73 @@ export class V2E2EECoordinator {
             throw error;
         }
     }
+    async publishV2VolatileMessages(messages, source, advanceCursor) {
+        const client = this.client;
+        if (!client._v2Session)
+            return [];
+        const processed = [];
+        const plaintextMessages = [];
+        let complete = true;
+        for (const rawMessage of messages) {
+            const claim = client._delivery.beginVolatileDelivery(rawMessage);
+            if (claim === 'seen') {
+                processed.push(rawMessage);
+                continue;
+            }
+            if (claim === 'inflight') {
+                complete = false;
+                continue;
+            }
+            let plaintext;
+            try {
+                if (this.isEncryptedPushMessage(rawMessage)) {
+                    plaintext = await client._decryptV2Message(rawMessage, true, true, true, true, undefined, false, source);
+                }
+                else {
+                    const legacy = isJsonObject(rawMessage.legacy_v1)
+                        ? rawMessage.legacy_v1
+                        : {};
+                    plaintext = {
+                        message_id: String(rawMessage.message_id ?? ''),
+                        from: String(rawMessage.from_aid ?? rawMessage.from ?? ''),
+                        to: String(legacy.to ?? rawMessage.to ?? client._aid ?? ''),
+                        type: String(rawMessage.type ?? ''),
+                        timestamp: rawMessage.t_server ?? rawMessage.timestamp,
+                        payload: legacy.payload !== undefined ? legacy.payload : rawMessage.payload,
+                        encrypted: false,
+                    };
+                    for (const key of ['context', 'protected_headers', 'headers', 'client_signature']) {
+                        if (Object.prototype.hasOwnProperty.call(rawMessage, key))
+                            plaintext[key] = rawMessage[key];
+                    }
+                    if (rawMessage.sender_device_id !== undefined)
+                        plaintext.sender_device_id = rawMessage.sender_device_id;
+                    attachGatewayProximity(plaintext, rawMessage);
+                }
+                if (!plaintext) {
+                    complete = false;
+                    continue;
+                }
+                const publicMessage = client._delivery.publicVolatileMessage(plaintext);
+                for (const key of ['storage', 'volatile_cursor', 'created_at', 'expires_at', 'persist']) {
+                    if (Object.prototype.hasOwnProperty.call(rawMessage, key))
+                        publicMessage[key] = rawMessage[key];
+                }
+                const appEvent = client._delivery.p2pAppEventForMessage(publicMessage);
+                await client._publishAppEvent(appEvent.event, appEvent.payload, source);
+                client._delivery.markVolatileSeen(rawMessage);
+                processed.push(rawMessage);
+                plaintextMessages.push(publicMessage);
+            }
+            finally {
+                client._delivery.finishVolatileDelivery(rawMessage);
+            }
+        }
+        if (processed.length > 0) {
+            await client._delivery.ackVolatileMessages(processed, true, advanceCursor && complete && processed.length === messages.length);
+        }
+        return plaintextMessages;
+    }
     async confirmForwardP2PAck(upToSeq) {
         const ns = this.client._aid ? `p2p:${this.client._aid}` : '';
         try {
@@ -1533,28 +1859,41 @@ export class V2E2EECoordinator {
             throw exc;
         }
     }
-    async ackV2(upToSeq) {
-        return this.ackV2WithConfirmation(upToSeq, false);
+    async ackV2(upToSeq, opts) {
+        return this.ackV2WithConfirmation(upToSeq, false, opts);
     }
     async ackV2ForForward(upToSeq) {
         return this.ackV2WithConfirmation(upToSeq, true);
     }
-    async ackV2WithConfirmation(upToSeq, requireServerWatermark) {
+    async ackV2WithConfirmation(upToSeq, requireServerWatermark, opts) {
         const client = this.client;
         const ns = client._aid ? `p2p:${client._aid}` : '';
-        let seq = Number(upToSeq ?? (ns ? client._seqTracker.getContiguousSeq(ns) : 0));
-        if (!Number.isFinite(seq) || seq <= 0) {
+        const volatileCursors = Array.isArray(opts?.volatileCursors) ? opts?.volatileCursors : [];
+        const volatileIds = Array.isArray(opts?.volatileIds) ? opts?.volatileIds : [];
+        let seq = Number(upToSeq ?? ((volatileCursors.length > 0 || volatileIds.length > 0)
+            ? 0
+            : (ns ? client._seqTracker.getContiguousSeq(ns) : 0)));
+        if ((!Number.isFinite(seq) || seq <= 0) && volatileCursors.length === 0 && volatileIds.length === 0) {
             client._clientLog.debug(`message.v2.ack skipped: ns=${ns || '<none>'}, up_to_seq=${String(upToSeq ?? '')}`);
             return { acked: 0 };
         }
-        seq = client._clampAckSeq('message.v2.ack', 'up_to_seq', ns, seq);
-        if (seq <= 0)
+        if (Number.isFinite(seq) && seq > 0) {
+            seq = client._clampAckSeq('message.v2.ack', 'up_to_seq', ns, seq);
+        }
+        else {
+            seq = 0;
+        }
+        if (seq <= 0 && volatileCursors.length === 0 && volatileIds.length === 0)
             return { acked: 0 };
         const inlineAckGeneration = client._delivery.captureP2PInlineAckGeneration();
         const v2SessionAtStart = client._v2Session;
         const v2RuntimeGenerationAtStart = Number(client._v2RuntimeGeneration ?? 0);
         client._clientLog.debug(`message.v2.ack send: ns=${ns || '<none>'}, up_to_seq=${seq}`);
-        const raw = await client._callRawV2Rpc('message.v2.ack', { up_to_seq: seq });
+        const raw = await client._callRawV2Rpc('message.v2.ack', {
+            ...(seq > 0 ? { up_to_seq: seq } : {}),
+            ...(volatileCursors.length > 0 ? { volatile_cursors: volatileCursors } : {}),
+            ...(volatileIds.length > 0 ? { volatile_ids: volatileIds } : {}),
+        });
         const result = isJsonObject(raw)
             ? { ...raw }
             : { result: raw };
@@ -1566,7 +1905,7 @@ export class V2E2EECoordinator {
         }
         result.ack_seq = actualAckSeq;
         result.success = true;
-        if (inlineAckGeneration !== null) {
+        if (seq > 0 && inlineAckGeneration !== null) {
             client._delivery.onP2PV2AckSucceeded(actualAckSeq, inlineAckGeneration);
         }
         if (v2SessionAtStart
@@ -1664,7 +2003,6 @@ export class V2E2EECoordinator {
         let epoch = 0;
         let stateCommitment = { state_version: 0, state_hash: '', state_chain: '' };
         let wrapPolicy = normalizeV2WrapPolicy(undefined);
-        let usedCachedBootstrap = false;
         const cached = useCache ? this.getBootstrapCacheEntry(cacheKey) : undefined;
         if (cached && Date.now() - Number(cached.cachedAt ?? 0) < V2_BOOTSTRAP_TTL_MS) {
             allDevices = (cached.devices ?? []);
@@ -1672,7 +2010,6 @@ export class V2E2EECoordinator {
             epoch = Number(cached.epoch ?? 0) || 0;
             stateCommitment = cached.stateCommitment ?? stateCommitment;
             wrapPolicy = cached.wrapPolicy ?? wrapPolicy;
-            usedCachedBootstrap = true;
             client._clientLog.debug(`group.v2.bootstrap cache hit: group=${groupId}, devices=${allDevices.length}, audit=${auditRecipientsRaw.length}, epoch=${epoch}, state_version=${stateCommitment.state_version}`);
         }
         else {
@@ -1736,13 +2073,10 @@ export class V2E2EECoordinator {
                     targets.push(target);
             }
             if (targets.length === 0) {
-                if (usedCachedBootstrap) {
-                    throw new E2EEError(`V2 group: no target devices for group ${groupId}; bootstrap may be stale`, {
-                        code: V2_GROUP_STALE_BOOTSTRAP_CODE,
-                        data: { expected_peer_aids: [] },
-                    });
-                }
-                throw new E2EEError(`V2 group: no target devices for group ${groupId}`);
+                throw new E2EEError(`V2 group: no target devices for group ${groupId}; bootstrap may be stale`, {
+                    code: V2_GROUP_STALE_BOOTSTRAP_CODE,
+                    data: { expected_peer_aids: [] },
+                });
             }
             for (const dev of auditRecipientsRaw) {
                 const target = await client._v2BuildTargetFromDevice({
@@ -1761,13 +2095,10 @@ export class V2E2EECoordinator {
             targetSet = this.cloneGroupTargetSet(targetSet);
         }
         if (targetSet.targets.length === 0) {
-            if (usedCachedBootstrap) {
-                throw new E2EEError(`V2 group: no target devices for group ${groupId}; bootstrap may be stale`, {
-                    code: V2_GROUP_STALE_BOOTSTRAP_CODE,
-                    data: { expected_peer_aids: [] },
-                });
-            }
-            throw new E2EEError(`V2 group: no target devices for group ${groupId}`);
+            throw new E2EEError(`V2 group: no target devices for group ${groupId}; bootstrap may be stale`, {
+                code: V2_GROUP_STALE_BOOTSTRAP_CODE,
+                data: { expected_peer_aids: [] },
+            });
         }
         const envelope = encryptGroupMessage(session.getSenderIdentity(), groupId, epoch, targetSet.targets, opts.payload, {
             messageId: opts.messageId,
@@ -1958,91 +2289,208 @@ export class V2E2EECoordinator {
         let lastAutoAckSeq = 0;
         let pendingAckSeq = deferredForwardAck;
         const maxPages = Math.max(1, Math.min(100, Math.trunc(Number(opts?.maxPages ?? 100) || 100)));
-        while (pageCount < maxPages) {
-            pageCount += 1;
-            const ackUpToSeq = ownsCursor ? pendingAckSeq : 0;
-            const inlineAckGeneration = ackUpToSeq > 0
-                ? client._delivery.captureGroupInlineAckGeneration()
-                : null;
-            client._clientLog.debug(`group.v2.pull page request: group=${gid}, page=${pageCount}, after_seq=${nextAfterSeq}, limit=${limit}, ack_up_to_seq=${ackUpToSeq}, ns=${ns}`);
-            const result = await client._callRawV2Rpc('group.v2.pull', withExplicitGroupAid({
-                group_id: wireGroupId,
-                after_seq: nextAfterSeq,
-                limit,
-                ...cursorParams,
-                ...(opts?.force ? { force: true } : {}),
-                ...(ackUpToSeq > 0 ? { ack_up_to_seq: ackUpToSeq } : {}),
-            }, groupAid), pullGateKey);
-            if (ackUpToSeq > 0) {
-                const actualAckSeq = client._delivery.resolveGroupPullAckSeq(result, ackUpToSeq);
-                if (actualAckSeq >= ackUpToSeq) {
-                    if (inlineAckGeneration !== null) {
-                        client._delivery.onGroupV2PullAckResult(gid, result, ackUpToSeq, inlineAckGeneration);
+        let pipelineRunning = false;
+        let pipelineError = null;
+        const pipelineQueue = new V2PullPageQueue(V2_PULL_PIPELINE_QUEUE_CAPACITY);
+        let pipelineProducer = null;
+        let pipelineStopped = false;
+        const startPipeline = (startAfterSeq) => {
+            if (pipelineRunning || pageCount >= maxPages || limit < V2_PULL_MAX_PAGE_LIMIT || !ownsCursor)
+                return;
+            pipelineRunning = true;
+            pipelineProducer = (async () => {
+                let producerAfterSeq = startAfterSeq;
+                for (let produced = pageCount; produced < maxPages; produced += 1) {
+                    if (pipelineStopped)
+                        break;
+                    const result = await client._callRawV2Rpc('group.v2.pull', withExplicitGroupAid({
+                        group_id: wireGroupId,
+                        after_seq: producerAfterSeq,
+                        limit,
+                        ...cursorParams,
+                        ...(opts?.force ? { force: true } : {}),
+                    }, groupAid), pullGateKey);
+                    if (pipelineStopped)
+                        break;
+                    const pageMessages = (Array.isArray(result.messages) ? result.messages : []);
+                    const enqueued = await pipelineQueue.put({
+                        result,
+                        afterSeq: producerAfterSeq,
+                        ackUpToSeq: 0,
+                        inlineAckGeneration: null,
+                        requestedVolatileCursor: '',
+                        weight: pageMessages.length,
+                    }, pageMessages.length);
+                    if (!enqueued || pipelineStopped)
+                        break;
+                    const messages = deduplicateForwardPageMessages(pageMessages, producerAfterSeq);
+                    const seqs = messages
+                        .map((msg) => Number(msg.seq ?? 0))
+                        .filter((seq) => Number.isFinite(seq) && seq > 0);
+                    const nextAfter = Math.max(contiguousPullSeq(producerAfterSeq, seqs, result.contiguous_seq), producerAfterSeq);
+                    const cursor = isJsonObject(result.cursor)
+                        ? result.cursor : null;
+                    const shouldContinue = shouldContinueForwardPage({
+                        rawCount: messages.length,
+                        nextAfterSeq: producerAfterSeq,
+                        nextAfter,
+                        limit,
+                        hasMoreField: Object.prototype.hasOwnProperty.call(result, 'has_more'),
+                        hasMore: result.has_more === true,
+                        serverHead: Math.max(safeNonNegativeSeq(result.latest_message_seq) ?? 0, safeNonNegativeSeq(cursor?.latest_seq) ?? 0),
+                        observedUpper: Math.max(nextAfter, client._seqTracker.getMaxSeenSeq(ns)),
+                        pendingAckSeq: 0,
+                    });
+                    if (!shouldContinue)
+                        break;
+                    producerAfterSeq = nextAfter;
+                }
+            })().catch((error) => {
+                pipelineError = error;
+            }).finally(() => {
+                pipelineQueue.close();
+            });
+        };
+        const stopPipeline = async () => {
+            pipelineStopped = true;
+            pipelineQueue.close();
+            if (pipelineProducer) {
+                const producer = pipelineProducer;
+                pipelineProducer = null;
+                await producer;
+            }
+            pipelineRunning = false;
+        };
+        try {
+            while (pageCount < maxPages) {
+                let pipelinePage;
+                if (pipelineRunning) {
+                    pipelinePage = await pipelineQueue.take();
+                    if (!pipelinePage) {
+                        pipelineRunning = false;
+                        if (pipelineError)
+                            throw pipelineError;
+                        break;
                     }
-                    pendingAckSeq = 0;
-                    lastAutoAckSeq = Math.max(lastAutoAckSeq, ackUpToSeq);
-                    this.clearForwardAck(ns, ackUpToSeq);
+                }
+                pageCount += 1;
+                const ackUpToSeq = ownsCursor ? (pipelinePage?.ackUpToSeq ?? pendingAckSeq) : 0;
+                const inlineAckGeneration = pipelinePage?.inlineAckGeneration ?? (ackUpToSeq > 0
+                    ? client._delivery.captureGroupInlineAckGeneration()
+                    : null);
+                client._clientLog.debug(`group.v2.pull page request: group=${gid}, page=${pageCount}, after_seq=${nextAfterSeq}, limit=${limit}, ack_up_to_seq=${ackUpToSeq}, ns=${ns}`);
+                let result;
+                if (pipelinePage) {
+                    nextAfterSeq = pipelinePage.afterSeq;
+                    result = pipelinePage.result;
                 }
                 else {
-                    client._clientLog.warn(`group.v2.pull piggyback ACK below target: group=${gid}, requested=${ackUpToSeq}, actual=${actualAckSeq}; fallback terminal ACK`);
-                    await this.confirmForwardGroupAck(gid, ackUpToSeq, groupAid);
-                    pendingAckSeq = 0;
-                    lastAutoAckSeq = Math.max(lastAutoAckSeq, ackUpToSeq);
+                    result = await client._callRawV2Rpc('group.v2.pull', withExplicitGroupAid({
+                        group_id: wireGroupId,
+                        after_seq: nextAfterSeq,
+                        limit,
+                        ...cursorParams,
+                        ...(opts?.force ? { force: true } : {}),
+                        ...(ackUpToSeq > 0 ? { ack_up_to_seq: ackUpToSeq } : {}),
+                    }, groupAid), pullGateKey);
                 }
-            }
-            const resultGroupAid = String(result.group_aid ?? result.groupAid ?? '').trim();
-            if (resultGroupAid)
-                groupAid = resultGroupAid;
-            const eventGroupAid = resultGroupAid || groupAid || gid;
-            const pageMessages = (Array.isArray(result.messages) ? result.messages : []);
-            const messages = deduplicateForwardPageMessages(pageMessages, nextAfterSeq);
-            const cursor = isJsonObject(result.cursor) ? result.cursor : null;
-            const hasMoreField = Object.prototype.hasOwnProperty.call(result, 'has_more');
-            const hasMore = result.has_more === true;
-            const serverHead = Math.max(safeNonNegativeSeq(result.latest_message_seq) ?? 0, safeNonNegativeSeq(cursor?.latest_seq) ?? 0);
-            client._clientLog.debug(`group.v2.pull page response: group=${gid}, page=${pageCount}, raw_count=${messages.length}, stale_count=${Math.max(0, pageMessages.length - messages.length)}, has_more=${String(result.has_more ?? '')}, server_head=${serverHead}, cursor_current=${String(cursor?.current_seq ?? '')}`);
-            for (const msg of messages) {
-                client._logMessageDebug('pull-raw', 'group.v2.pull', 'group.message_created', msg);
-            }
-            const seqs = messages
-                .map((msg) => Number(msg.seq ?? 0))
-                .filter((seq) => Number.isFinite(seq) && seq > 0);
-            const pageContigBefore = client._seqTracker.getContiguousSeq(ns);
-            const pageTrackerSnapshot = typeof client._seqTracker.snapshotNamespace === 'function'
-                ? client._seqTracker.snapshotNamespace(ns)
-                : null;
-            let pageMaxSeq = nextAfterSeq;
-            if (seqs.length > 0) {
-                pageMaxSeq = Math.max(...seqs);
-            }
-            const pageContiguousSeq = contiguousPullSeq(pageContigBefore, seqs, result.contiguous_seq);
-            const deferredKeyFetches = new Map();
-            let blockedSeq = 0;
-            const pageDecryptedBefore = decrypted.length;
-            for (const msg of messages) {
-                const seq = Number(msg.seq ?? 0);
-                if (!Number.isFinite(seq) || seq <= 0)
-                    continue;
-                const version = String(msg.version ?? 'v2');
-                if (version === 'v1') {
-                    const legacy = isJsonObject(msg.legacy_v1) ? msg.legacy_v1 : {};
-                    const payload = msg.payload !== undefined ? msg.payload : legacy.payload;
-                    const payloadObj = isJsonObject(payload) ? payload : null;
-                    const payloadType = payloadObj ? String(payloadObj.type ?? '').trim() : '';
-                    // 群撤回 tombstone（占位 / 通知）：归一化为 group.message_recalled 事件，仍占 seq。
-                    if (typeof client._delivery?.recallEventFromGroupMessage === 'function'
-                        && client._delivery.recallEventFromGroupMessage(msg)) {
-                        await client._delivery.publishGroupRecallTombstone(gid, seq, {
-                            ...msg,
-                            group_id: gid,
-                            group_aid: eventGroupAid,
-                        }, 'pull');
-                        client._markPublishedSeq(ns, seq);
-                        client._clientLog.debug(`group.v2.pull recall tombstone delivered: group=${gid}, seq=${seq}`);
-                        continue;
+                if (ackUpToSeq > 0) {
+                    const actualAckSeq = client._delivery.resolveGroupPullAckSeq(result, ackUpToSeq);
+                    if (actualAckSeq >= ackUpToSeq) {
+                        if (inlineAckGeneration !== null) {
+                            client._delivery.onGroupV2PullAckResult(gid, result, ackUpToSeq, inlineAckGeneration);
+                        }
+                        pendingAckSeq = 0;
+                        lastAutoAckSeq = Math.max(lastAutoAckSeq, ackUpToSeq);
+                        this.clearForwardAck(ns, ackUpToSeq);
+                    }
+                    else {
+                        client._clientLog.warn(`group.v2.pull piggyback ACK below target: group=${gid}, requested=${ackUpToSeq}, actual=${actualAckSeq}; fallback terminal ACK`);
+                        await this.confirmForwardGroupAck(gid, ackUpToSeq, groupAid);
+                        pendingAckSeq = 0;
+                        lastAutoAckSeq = Math.max(lastAutoAckSeq, ackUpToSeq);
                     }
-                    if (payloadObj) {
-                        if (!['e2ee.encrypted', 'e2ee.group_encrypted', 'e2ee.p2p_encrypted'].includes(payloadType)) {
+                }
+                const resultGroupAid = String(result.group_aid ?? result.groupAid ?? '').trim();
+                if (resultGroupAid)
+                    groupAid = resultGroupAid;
+                const eventGroupAid = resultGroupAid || groupAid || gid;
+                const pageMessages = (Array.isArray(result.messages) ? result.messages : []);
+                const messages = deduplicateForwardPageMessages(pageMessages, nextAfterSeq);
+                const cursor = isJsonObject(result.cursor) ? result.cursor : null;
+                const hasMoreField = Object.prototype.hasOwnProperty.call(result, 'has_more');
+                const hasMore = result.has_more === true;
+                const serverHead = Math.max(safeNonNegativeSeq(result.latest_message_seq) ?? 0, safeNonNegativeSeq(cursor?.latest_seq) ?? 0);
+                client._clientLog.debug(`group.v2.pull page response: group=${gid}, page=${pageCount}, raw_count=${messages.length}, stale_count=${Math.max(0, pageMessages.length - messages.length)}, has_more=${String(result.has_more ?? '')}, server_head=${serverHead}, cursor_current=${String(cursor?.current_seq ?? '')}`);
+                for (const msg of messages) {
+                    client._logMessageDebug('pull-raw', 'group.v2.pull', 'group.message_created', msg);
+                }
+                const seqs = messages
+                    .map((msg) => Number(msg.seq ?? 0))
+                    .filter((seq) => Number.isFinite(seq) && seq > 0);
+                const pageContigBefore = client._seqTracker.getContiguousSeq(ns);
+                const pageTrackerSnapshot = typeof client._seqTracker.snapshotNamespace === 'function'
+                    ? client._seqTracker.snapshotNamespace(ns)
+                    : null;
+                let pageMaxSeq = nextAfterSeq;
+                if (seqs.length > 0) {
+                    pageMaxSeq = Math.max(...seqs);
+                }
+                const pageContiguousSeq = contiguousPullSeq(pageContigBefore, seqs, result.contiguous_seq);
+                const deferredKeyFetches = new Map();
+                let blockedSeq = 0;
+                const pageDecryptedBefore = decrypted.length;
+                for (const msg of messages) {
+                    const seq = Number(msg.seq ?? 0);
+                    if (!Number.isFinite(seq) || seq <= 0)
+                        continue;
+                    const version = String(msg.version ?? 'v2');
+                    if (version === 'v1') {
+                        const legacy = isJsonObject(msg.legacy_v1) ? msg.legacy_v1 : {};
+                        const payload = msg.payload !== undefined ? msg.payload : legacy.payload;
+                        const payloadObj = isJsonObject(payload) ? payload : null;
+                        const payloadType = payloadObj ? String(payloadObj.type ?? '').trim() : '';
+                        // 群撤回 tombstone（占位 / 通知）：归一化为 group.message_recalled 事件，仍占 seq。
+                        if (typeof client._delivery?.recallEventFromGroupMessage === 'function'
+                            && client._delivery.recallEventFromGroupMessage(msg)) {
+                            await client._delivery.publishGroupRecallTombstone(gid, seq, {
+                                ...msg,
+                                group_id: gid,
+                                group_aid: eventGroupAid,
+                            }, 'pull');
+                            client._markPublishedSeq(ns, seq);
+                            client._clientLog.debug(`group.v2.pull recall tombstone delivered: group=${gid}, seq=${seq}`);
+                            continue;
+                        }
+                        if (payloadObj) {
+                            if (!['e2ee.encrypted', 'e2ee.group_encrypted', 'e2ee.p2p_encrypted'].includes(payloadType)) {
+                                let v1Msg = {
+                                    message_id: String(msg.message_id ?? ''),
+                                    from: String(msg.from_aid ?? ''),
+                                    group_id: gid,
+                                    group_aid: eventGroupAid,
+                                    seq: msg.seq,
+                                    type: String(msg.type ?? ''),
+                                    timestamp: msg.t_server,
+                                    payload,
+                                    encrypted: false,
+                                };
+                                if (msg.sender_device_id !== undefined)
+                                    v1Msg.sender_device_id = msg.sender_device_id;
+                                v1Msg = normalizeGroupMentionMode(v1Msg, msg, msg.envelope_json);
+                                attachGatewayProximity(v1Msg, msg);
+                                if (!client._delivery.isSelfSentGroupMessage?.(msg)) {
+                                    await client._publishPulledMessage('group.message_created', ns, seq, v1Msg, false);
+                                }
+                                else {
+                                    client._markPublishedSeq(ns, seq);
+                                }
+                                decrypted.push(v1Msg);
+                                client._clientLog.debug(`group.v2.pull plaintext V1 delivered: group=${gid}, seq=${seq}`);
+                                continue;
+                            }
+                        }
+                        else if (payload !== undefined && payload !== null) {
                             let v1Msg = {
                                 message_id: String(msg.message_id ?? ''),
                                 from: String(msg.from_aid ?? ''),
@@ -2054,209 +2502,208 @@ export class V2E2EECoordinator {
                                 payload,
                                 encrypted: false,
                             };
+                            if (msg.sender_device_id !== undefined)
+                                v1Msg.sender_device_id = msg.sender_device_id;
                             v1Msg = normalizeGroupMentionMode(v1Msg, msg, msg.envelope_json);
                             attachGatewayProximity(v1Msg, msg);
-                            if (!client._delivery.isSelfSentGroupMessage?.(msg)) {
-                                await client._publishPulledMessage('group.message_created', ns, seq, v1Msg, false);
-                            }
-                            else {
-                                client._markPublishedSeq(ns, seq);
-                            }
+                            await client._publishPulledMessage('group.message_created', ns, seq, v1Msg, false);
                             decrypted.push(v1Msg);
                             client._clientLog.debug(`group.v2.pull plaintext V1 delivered: group=${gid}, seq=${seq}`);
                             continue;
                         }
+                        if (payloadObj && ['e2ee.group_encrypted', 'e2ee.p2p_encrypted', 'e2ee.encrypted'].includes(payloadType)) {
+                            const deferStatus = {};
+                            const plaintext = await client._decryptV2Message({ ...msg, envelope_json: JSON.stringify(payloadObj) }, true, true, true, true, deferStatus, true, 'pull');
+                            if (deferStatus.deferred) {
+                                blockedSeq = blockedSeq > 0 ? Math.min(blockedSeq, seq) : seq;
+                                if (deferStatus.fromAid) {
+                                    const key = `${deferStatus.fromAid}\u0000${deferStatus.senderDeviceId ?? ''}\u0000${deferStatus.groupId ?? ''}`;
+                                    deferredKeyFetches.set(key, { fromAid: deferStatus.fromAid, senderDeviceId: deferStatus.senderDeviceId ?? '', groupId: deferStatus.groupId ?? '' });
+                                }
+                            }
+                            if (plaintext) {
+                                plaintext.group_id = gid;
+                                plaintext.group_aid = eventGroupAid;
+                                if (!client._delivery.isSelfSentGroupMessage?.(msg)) {
+                                    await client._publishPulledMessage('group.message_created', ns, seq, plaintext, false);
+                                }
+                                else {
+                                    client._markPublishedSeq(ns, seq);
+                                }
+                                decrypted.push(plaintext);
+                            }
+                        }
+                        else {
+                            client._clientLog.debug(`group.v2.pull skipping V1 envelope group=${gid} seq=${seq} payload_type=${payloadObj ? String(payloadObj.type ?? '') : '<none>'} (V1 E2EE removed)`);
+                        }
+                        continue;
                     }
-                    else if (payload !== undefined && payload !== null) {
-                        let v1Msg = {
-                            message_id: String(msg.message_id ?? ''),
-                            from: String(msg.from_aid ?? ''),
-                            group_id: gid,
-                            group_aid: eventGroupAid,
-                            seq: msg.seq,
-                            type: String(msg.type ?? ''),
-                            timestamp: msg.t_server,
-                            payload,
-                            encrypted: false,
-                        };
-                        v1Msg = normalizeGroupMentionMode(v1Msg, msg, msg.envelope_json);
-                        attachGatewayProximity(v1Msg, msg);
-                        await client._publishPulledMessage('group.message_created', ns, seq, v1Msg, false);
-                        decrypted.push(v1Msg);
-                        client._clientLog.debug(`group.v2.pull plaintext V1 delivered: group=${gid}, seq=${seq}`);
+                    if (version !== 'v2') {
+                        client._clientLog.debug(`group.v2.pull skipping non-V2 row group=${gid} seq=${seq} version=${String(msg.version ?? '')}`);
                         continue;
                     }
-                    if (payloadObj && ['e2ee.group_encrypted', 'e2ee.p2p_encrypted', 'e2ee.encrypted'].includes(payloadType)) {
-                        const deferStatus = {};
-                        const plaintext = await client._decryptV2Message({ ...msg, envelope_json: JSON.stringify(payloadObj) }, true, true, true, true, deferStatus, true, 'pull');
-                        if (deferStatus.deferred) {
-                            blockedSeq = blockedSeq > 0 ? Math.min(blockedSeq, seq) : seq;
-                            if (deferStatus.fromAid) {
-                                const key = `${deferStatus.fromAid}\u0000${deferStatus.senderDeviceId ?? ''}\u0000${deferStatus.groupId ?? ''}`;
-                                deferredKeyFetches.set(key, { fromAid: deferStatus.fromAid, senderDeviceId: deferStatus.senderDeviceId ?? '', groupId: deferStatus.groupId ?? '' });
+                    const deferStatus = {};
+                    let plaintext = await client._decryptV2Message(msg, true, true, true, true, deferStatus, true, 'pull');
+                    if (deferStatus.deferred) {
+                        blockedSeq = blockedSeq > 0 ? Math.min(blockedSeq, seq) : seq;
+                    }
+                    if (deferStatus.deferred && deferStatus.fromAid) {
+                        const key = `${deferStatus.fromAid}\u0000${deferStatus.senderDeviceId ?? ''}\u0000${deferStatus.groupId ?? ''}`;
+                        deferredKeyFetches.set(key, {
+                            fromAid: deferStatus.fromAid,
+                            senderDeviceId: deferStatus.senderDeviceId ?? '',
+                            groupId: deferStatus.groupId ?? '',
+                        });
+                    }
+                    if (plaintext === null) {
+                        client._clientLog.debug(`group.v2.pull decrypt returned null: group=${gid}, seq=${seq}`);
+                        continue;
+                    }
+                    plaintext = normalizeGroupMentionMode(plaintext, msg, msg.envelope_json);
+                    plaintext.group_id = gid;
+                    plaintext.group_aid = eventGroupAid;
+                    if (!client._delivery.isSelfSentGroupMessage?.(msg)) {
+                        await client._publishPulledMessage('group.message_created', ns, seq, plaintext, false);
+                    }
+                    else {
+                        client._markPublishedSeq(ns, seq);
+                    }
+                    decrypted.push(plaintext);
+                    client._logMessageDebug('decrypt-ok', 'group.v2.pull', 'group.message_created', plaintext);
+                }
+                const hasServerCursor = cursor !== null && Object.prototype.hasOwnProperty.call(cursor, 'current_seq');
+                const parsedCursorCurrentSeq = hasServerCursor ? safeNonNegativeSeq(cursor?.current_seq) : null;
+                const cursorCurrentSeq = parsedCursorCurrentSeq ?? 0;
+                const retentionFloor = Math.max(client._pullRetentionFloor(result, 'retention_floor_message_seq', 'retention_floor_message_seq'));
+                const visibilityFloor = Math.max(0, Math.max(0, Number(result.earliest_available_message_seq ?? 1) - 1), Number(cursor?.join_seq ?? 0));
+                const effectiveFloor = Math.max(retentionFloor, visibilityFloor);
+                const commitTarget = Math.max(pageContigBefore, effectiveFloor, ownsCursor && pageCount === 1 ? deferredServerCursor : 0, ownsCursor ? cursorCurrentSeq : 0, blockedSeq > 0 ? blockedSeq - 1 : pageContiguousSeq);
+                let ackSeq = pageContigBefore;
+                let contigAdvanced = false;
+                if (ownsCursor) {
+                    try {
+                        if (commitTarget > pageContigBefore) {
+                            client._seqTracker.forceContiguousSeq(ns, commitTarget);
+                            if (effectiveFloor > pageContigBefore) {
+                                client._clientLog.info(`group.v2.pull floor advance: ns=${ns} contiguous=${pageContigBefore} -> effective_floor=${effectiveFloor} retention_floor=${retentionFloor} visibility_floor=${visibilityFloor}`);
                             }
-                        }
-                        if (plaintext) {
-                            plaintext.group_id = gid;
-                            plaintext.group_aid = eventGroupAid;
-                            if (!client._delivery.isSelfSentGroupMessage?.(msg)) {
-                                await client._publishPulledMessage('group.message_created', ns, seq, plaintext, false);
+                            if (deferredServerCursor > pageContigBefore && pageCount === 1) {
+                                client._clientLog.info(`group.v2.pull restore local A from deferred server ACK cursor: group=${gid}, ns=${ns}, contiguous=${pageContigBefore} -> current_seq=${deferredServerCursor}`);
                             }
-                            else {
-                                client._markPublishedSeq(ns, seq);
+                            if (seqs.length > 0) {
+                                client._clientLog.debug(`group.v2.pull force contiguous: group=${gid}, ns=${ns}, page_max_seq=${pageMaxSeq}, previous=${pageContigBefore}`);
                             }
-                            decrypted.push(plaintext);
+                        }
+                        ackSeq = client._seqTracker.getContiguousSeq(ns);
+                        contigAdvanced = ackSeq !== pageContigBefore;
+                        if (contigAdvanced) {
+                            await client._commitSeqTrackerState(ns);
+                            if (pageCount === 1 && deferredServerCursor > 0)
+                                this.clearForwardCursor(ns, ackSeq);
                         }
                     }
-                    else {
-                        client._clientLog.debug(`group.v2.pull skipping V1 envelope group=${gid} seq=${seq} payload_type=${payloadObj ? String(payloadObj.type ?? '') : '<none>'} (V1 E2EE removed)`);
+                    catch (exc) {
+                        if (typeof client._seqTracker.restoreNamespaceSnapshot === 'function') {
+                            client._seqTracker.restoreNamespaceSnapshot(ns, pageTrackerSnapshot);
+                        }
+                        client._clientLog.error?.(`group.v2.pull Forward commit rolled back: group=${gid} ns=${ns} target=${commitTarget} error=${formatE2EEError(exc)}`);
+                        throw exc;
                     }
-                    continue;
-                }
-                if (version !== 'v2') {
-                    client._clientLog.debug(`group.v2.pull skipping non-V2 row group=${gid} seq=${seq} version=${String(msg.version ?? '')}`);
-                    continue;
-                }
-                const deferStatus = {};
-                let plaintext = await client._decryptV2Message(msg, true, true, true, true, deferStatus, true, 'pull');
-                if (deferStatus.deferred) {
-                    blockedSeq = blockedSeq > 0 ? Math.min(blockedSeq, seq) : seq;
-                }
-                if (deferStatus.deferred && deferStatus.fromAid) {
-                    const key = `${deferStatus.fromAid}\u0000${deferStatus.senderDeviceId ?? ''}\u0000${deferStatus.groupId ?? ''}`;
-                    deferredKeyFetches.set(key, {
-                        fromAid: deferStatus.fromAid,
-                        senderDeviceId: deferStatus.senderDeviceId ?? '',
-                        groupId: deferStatus.groupId ?? '',
-                    });
+                    if (contigAdvanced)
+                        await client._drainOrderedMessages(ns, undefined, false, false, 'pull');
                 }
-                if (plaintext === null) {
-                    client._clientLog.debug(`group.v2.pull decrypt returned null: group=${gid}, seq=${seq}`);
-                    continue;
-                }
-                plaintext = normalizeGroupMentionMode(plaintext, msg, msg.envelope_json);
-                plaintext.group_id = gid;
-                plaintext.group_aid = eventGroupAid;
-                if (!client._delivery.isSelfSentGroupMessage?.(msg)) {
-                    await client._publishPulledMessage('group.message_created', ns, seq, plaintext, false);
+                for (const fetch of deferredKeyFetches.values()) {
+                    this.scheduleSenderIKFetch(fetch.fromAid, fetch.senderDeviceId, fetch.groupId);
                 }
-                else {
-                    client._markPublishedSeq(ns, seq);
+                if (ownsCursor && parsedCursorCurrentSeq !== null && cursorCurrentSeq > ackSeq) {
+                    this.recordForwardCursor(ns, cursorCurrentSeq, ackSeq);
                 }
-                decrypted.push(plaintext);
-                client._logMessageDebug('decrypt-ok', 'group.v2.pull', 'group.message_created', plaintext);
-            }
-            const hasServerCursor = cursor !== null && Object.prototype.hasOwnProperty.call(cursor, 'current_seq');
-            const parsedCursorCurrentSeq = hasServerCursor ? safeNonNegativeSeq(cursor?.current_seq) : null;
-            const cursorCurrentSeq = parsedCursorCurrentSeq ?? 0;
-            const retentionFloor = Math.max(client._pullRetentionFloor(result, 'retention_floor_message_seq', 'retention_floor_message_seq'));
-            const visibilityFloor = Math.max(0, Math.max(0, Number(result.earliest_available_message_seq ?? 1) - 1), Number(cursor?.join_seq ?? 0));
-            const effectiveFloor = Math.max(retentionFloor, visibilityFloor);
-            const commitTarget = Math.max(pageContigBefore, effectiveFloor, ownsCursor && pageCount === 1 ? deferredServerCursor : 0, ownsCursor ? cursorCurrentSeq : 0, blockedSeq > 0 ? blockedSeq - 1 : pageContiguousSeq);
-            let ackSeq = pageContigBefore;
-            let contigAdvanced = false;
-            if (ownsCursor) {
-                try {
-                    if (commitTarget > pageContigBefore) {
-                        client._seqTracker.forceContiguousSeq(ns, commitTarget);
-                        if (effectiveFloor > pageContigBefore) {
-                            client._clientLog.info(`group.v2.pull floor advance: ns=${ns} contiguous=${pageContigBefore} -> effective_floor=${effectiveFloor} retention_floor=${retentionFloor} visibility_floor=${visibilityFloor}`);
-                        }
-                        if (deferredServerCursor > pageContigBefore && pageCount === 1) {
-                            client._clientLog.info(`group.v2.pull restore local A from deferred server ACK cursor: group=${gid}, ns=${ns}, contiguous=${pageContigBefore} -> current_seq=${deferredServerCursor}`);
-                        }
-                        if (seqs.length > 0) {
-                            client._clientLog.debug(`group.v2.pull force contiguous: group=${gid}, ns=${ns}, page_max_seq=${pageMaxSeq}, previous=${pageContigBefore}`);
-                        }
-                    }
-                    ackSeq = client._seqTracker.getContiguousSeq(ns);
-                    contigAdvanced = ackSeq !== pageContigBefore;
-                    if (contigAdvanced) {
-                        await client._commitSeqTrackerState(ns);
-                        if (pageCount === 1 && deferredServerCursor > 0)
-                            this.clearForwardCursor(ns, ackSeq);
+                // 无本页 cursor.current_seq 时，只有本页成功提交了比已知 cursor
+                // 更高的 A 才新增 ACK 义务；空页不得因已有本地 A 重复确认。
+                const knownServerCursorSeq = hasServerCursor
+                    ? cursorCurrentSeq
+                    : (ownsCursor && pageCount === 1 ? deferredServerCursor : 0);
+                const ackNeeded = ackSeq > 0
+                    && ackSeq > lastAutoAckSeq
+                    && ownsCursor
+                    && ((hasServerCursor && ackSeq > cursorCurrentSeq)
+                        || (contigAdvanced && ackSeq > knownServerCursorSeq));
+                if (ackNeeded) {
+                    this.recordForwardAck(ns, ackSeq);
+                    const nextAfter = Math.max(pageContiguousSeq, nextAfterSeq);
+                    const canContinuePage = blockedSeq <= 0 && messages.length > 0 && nextAfter > nextAfterSeq && ownsCursor;
+                    if (canContinuePage && !pipelineRunning) {
+                        pendingAckSeq = Math.max(pendingAckSeq, ackSeq);
+                        lastAutoAckSeq = Math.max(lastAutoAckSeq, ackSeq);
+                        client._clientLog.debug(`group.v2.pull queued piggyback auto-ack: group=${gid}, ns=${ns}, ack_seq=${pendingAckSeq}, raw_count=${messages.length}`);
                     }
-                }
-                catch (exc) {
-                    if (typeof client._seqTracker.restoreNamespaceSnapshot === 'function') {
-                        client._seqTracker.restoreNamespaceSnapshot(ns, pageTrackerSnapshot);
+                    else {
+                        client._clientLog.debug(`group.v2.pull sending terminal auto-ack: group=${gid}, ns=${ns}, ack_seq=${ackSeq}, raw_count=${messages.length}`);
+                        await this.confirmForwardGroupAck(gid, ackSeq, groupAid);
+                        lastAutoAckSeq = Math.max(lastAutoAckSeq, ackSeq);
                     }
-                    client._clientLog.error?.(`group.v2.pull Forward commit rolled back: group=${gid} ns=${ns} target=${commitTarget} error=${formatE2EEError(exc)}`);
-                    throw exc;
                 }
-                if (contigAdvanced)
-                    await client._drainOrderedMessages(ns, undefined, false, false, 'pull');
-            }
-            for (const fetch of deferredKeyFetches.values()) {
-                this.scheduleSenderIKFetch(fetch.fromAid, fetch.senderDeviceId, fetch.groupId);
-            }
-            if (ownsCursor && parsedCursorCurrentSeq !== null && cursorCurrentSeq > ackSeq) {
-                this.recordForwardCursor(ns, cursorCurrentSeq, ackSeq);
-            }
-            // 无本页 cursor.current_seq 时，只有本页成功提交了比已知 cursor
-            // 更高的 A 才新增 ACK 义务；空页不得因已有本地 A 重复确认。
-            const knownServerCursorSeq = hasServerCursor
-                ? cursorCurrentSeq
-                : (ownsCursor && pageCount === 1 ? deferredServerCursor : 0);
-            const ackNeeded = ackSeq > 0
-                && ackSeq > lastAutoAckSeq
-                && ownsCursor
-                && ((hasServerCursor && ackSeq > cursorCurrentSeq)
-                    || (contigAdvanced && ackSeq > knownServerCursorSeq));
-            if (ackNeeded) {
-                this.recordForwardAck(ns, ackSeq);
+                client._delivery.syncProgress(ns, {
+                    rawCount: messages.length,
+                    pulledCount: decrypted.length - pageDecryptedBefore,
+                    remaining: result.remaining,
+                    hasMore: hasMoreField ? hasMore : undefined,
+                    currentSeq: client._seqTracker.getContiguousSeq(ns),
+                    targetSeq: serverHead,
+                });
                 const nextAfter = Math.max(pageContiguousSeq, nextAfterSeq);
-                const canContinuePage = blockedSeq <= 0 && messages.length > 0 && nextAfter > nextAfterSeq && ownsCursor;
-                if (canContinuePage) {
-                    pendingAckSeq = Math.max(pendingAckSeq, ackSeq);
-                    lastAutoAckSeq = Math.max(lastAutoAckSeq, ackSeq);
-                    client._clientLog.debug(`group.v2.pull queued piggyback auto-ack: group=${gid}, ns=${ns}, ack_seq=${pendingAckSeq}, raw_count=${messages.length}`);
+                if (!ownsCursor)
+                    break;
+                const rawCount = messages.length;
+                if (blockedSeq > 0)
+                    break;
+                const shouldContinue = shouldContinueForwardPage({
+                    rawCount,
+                    nextAfterSeq,
+                    nextAfter,
+                    limit,
+                    hasMoreField,
+                    hasMore,
+                    serverHead,
+                    observedUpper: Math.max(client._seqTracker.getMaxSeenSeq(ns), Number(client._delivery.pendingPullUpper?.(ns) ?? 0)),
+                    pendingAckSeq,
+                });
+                const shouldContinueForPipeline = shouldContinueForwardPage({
+                    rawCount,
+                    nextAfterSeq,
+                    nextAfter,
+                    limit,
+                    hasMoreField,
+                    hasMore,
+                    serverHead,
+                    observedUpper: Math.max(client._seqTracker.getMaxSeenSeq(ns), Number(client._delivery.pendingPullUpper?.(ns) ?? 0)),
+                    pendingAckSeq: 0,
+                });
+                if (!shouldContinue)
+                    break;
+                if (shouldContinueForPipeline && !pipelineRunning && limit >= V2_PULL_MAX_PAGE_LIMIT) {
+                    if (pendingAckSeq > 0) {
+                        await this.confirmForwardGroupAck(gid, pendingAckSeq, groupAid);
+                        pendingAckSeq = 0;
+                    }
+                    startPipeline(nextAfter);
                 }
-                else {
-                    client._clientLog.debug(`group.v2.pull sending terminal auto-ack: group=${gid}, ns=${ns}, ack_seq=${ackSeq}, raw_count=${messages.length}`);
-                    await this.confirmForwardGroupAck(gid, ackSeq, groupAid);
-                    lastAutoAckSeq = Math.max(lastAutoAckSeq, ackSeq);
+                if (!pipelineRunning && pullGateKey && opts?.gateLocked && client._rpcPipeline?.yieldPullGate) {
+                    const nextKey = pullGateKeyForClient(client, 'group.v2.pull', {
+                        group_id: gid, after_seq: nextAfter, force: opts?.force === true, limit,
+                        _group_cursor_params: cursorParams,
+                    }, `${ns}|forward|after=${nextAfter}|force=${String(Boolean(opts?.force))}|limit=${limit}`);
+                    await client._rpcPipeline.yieldPullGate(pullGateKey, nextKey, true);
+                    pullGateKey = nextKey;
                 }
+                const tailDelayMs = v2PullTailDelayMs(rawCount, limit);
+                if (tailDelayMs > 0)
+                    await v2Sleep(tailDelayMs);
+                nextAfterSeq = nextAfter;
             }
-            client._delivery.syncProgress(ns, {
-                rawCount: messages.length,
-                pulledCount: decrypted.length - pageDecryptedBefore,
-                remaining: result.remaining,
-                hasMore: hasMoreField ? hasMore : undefined,
-                currentSeq: client._seqTracker.getContiguousSeq(ns),
-                targetSeq: serverHead,
-            });
-            const nextAfter = Math.max(pageContiguousSeq, nextAfterSeq);
-            if (!ownsCursor)
-                break;
-            const rawCount = messages.length;
-            if (blockedSeq > 0)
-                break;
-            const shouldContinue = shouldContinueForwardPage({
-                rawCount,
-                nextAfterSeq,
-                nextAfter,
-                limit,
-                hasMoreField,
-                hasMore,
-                serverHead,
-                observedUpper: Math.max(client._seqTracker.getMaxSeenSeq(ns), Number(client._delivery.pendingPullUpper?.(ns) ?? 0)),
-                pendingAckSeq,
-            });
-            if (!shouldContinue)
-                break;
-            if (pullGateKey && opts?.gateLocked && client._rpcPipeline?.yieldPullGate) {
-                const nextKey = pullGateKeyForClient(client, 'group.v2.pull', {
-                    group_id: gid, after_seq: nextAfter, force: opts?.force === true, limit,
-                    _group_cursor_params: cursorParams,
-                }, `${ns}|forward|after=${nextAfter}|force=${String(Boolean(opts?.force))}|limit=${limit}`);
-                await client._rpcPipeline.yieldPullGate(pullGateKey, nextKey, true);
-                pullGateKey = nextKey;
-            }
-            const tailDelayMs = v2PullTailDelayMs(rawCount, limit);
-            if (tailDelayMs > 0)
-                await v2Sleep(tailDelayMs);
-            nextAfterSeq = nextAfter;
+        }
+        finally {
+            await stopPipeline();
         }
         if (pageCount >= maxPages) {
             client._clientLog.warn(`group.v2.pull reached max_pages=${maxPages} group=${gid} after_seq=${nextAfterSeq}`);
@@ -2751,7 +3198,6 @@ export class V2E2EECoordinator {
             seq: msg.seq,
             timestamp: (msg.timestamp ?? msg.t_server),
             device_id: msg.device_id,
-            slot_id: msg.slot_id,
             _decrypt_error: 'encrypted push payload is not decryptable on raw push path',
             _decrypt_stage: 'push_envelope',
         };
@@ -2795,13 +3241,18 @@ export class V2E2EECoordinator {
             encrypted: true,
             e2ee,
         };
-        result.direction = fromAid && fromAid === client._aid ? 'outbound_sync' : 'inbound';
+        const senderDeviceId = String(aad.from_device ?? '').trim();
+        if (senderDeviceId)
+            result.sender_device_id = senderDeviceId;
+        const direction = String(msg.direction ?? '').trim();
+        if (direction)
+            result.direction = direction;
+        else if (fromAid && fromAid !== client._aid)
+            result.direction = 'inbound';
         if (msg.t_server !== undefined)
             result.t_server = msg.t_server;
         if (msg.device_id !== undefined)
             result.device_id = msg.device_id;
-        if (msg.slot_id !== undefined)
-            result.slot_id = msg.slot_id;
         attachGatewayProximity(result, msg);
         if (group) {
             result.group_id = (msg.group_id ?? aad.group_id ?? envelope.group_id);
@@ -2839,10 +3290,10 @@ export class V2E2EECoordinator {
         }
         return await this.publishEncryptedPushAsUndecryptable(undecryptableEvent, ns, seq, msg, group);
     }
-    async decryptV2PushMessage(data) {
+    async decryptV2PushMessage(data, deferStatus) {
         if (!isJsonObject(data))
             return null;
-        return await this.client._decryptV2Message(data, false, false, false, false, undefined, false, 'inline_push');
+        return await this.client._decryptV2Message(data, false, true, false, false, deferStatus, false, 'inline_push');
     }
     handleGroupChangedSpk(data, groupId, action) {
         if (!this.client._v2Session || !groupId || !MEMBERSHIP_ACTIONS.has(action))