@ai-setting/roy-agent-core 1.7.77 → 1.7.88

package/dist/shared/@ai-setting/{roy-agent-core-aa2j7bk9.js → roy-agent-core-0sbmdz8d.js}

@@ -4,35 +4,35 @@ import {
 } from "./roy-agent-core-fttgm52a.js";
 import {
   getSharedEventStore
-} from "./roy-agent-core-na18zwj0.js";
+} from "./roy-agent-core-4t3yskp8.js";
 import {
   builtInPrompts
-} from "./roy-agent-core-9vxh6f8h.js";
+} from "./roy-agent-core-y7fqtzk2.js";
 import {
   TaskHookPoints
 } from "./roy-agent-core-1pg0fepg.js";
 import {
   DEFAULT_SUBAGENT_PROMPT
-} from "./roy-agent-core-ed233k5z.js";
+} from "./roy-agent-core-v1n0106v.js";
 import {
   runWithBgTaskIdAsync
 } from "./roy-agent-core-c1v263jn.js";
 import {
   globalHookManager,
   init_global_hook_manager
-} from "./roy-agent-core-cpcd24n2.js";
+} from "./roy-agent-core-yet36q5k.js";
 import {
   init_context
-} from "./roy-agent-core-qqaak24r.js";
+} from "./roy-agent-core-tkpp1ba0.js";
 import {
   getCurrentTaskId,
   getEnvContext
-} from "./roy-agent-core-7cbpmk4q.js";
+} from "./roy-agent-core-p31ftgq9.js";
 import {
   TracedAs,
   init_decorator,
   wrapFunction
-} from "./roy-agent-core-qq96p0tj.js";
+} from "./roy-agent-core-5s2t8z00.js";
 import {
   createLogger,
   init_logger
@@ -47,6 +47,43 @@ init_decorator();
 init_context();
 import { z } from "zod";
 
+// src/env/task/delegate/delegate-channel-hint.ts
+var DELEGATE_CHANNEL_HINT_TITLE = "## 渠道交付提示（当前会话来自外部渠道）";
+function buildDelegateChannelHint(channelType) {
+  if (!channelType)
+    return;
+  let channelBody;
+  if (channelType === "lark-cli" || channelType.startsWith("lark")) {
+    channelBody = [
+      `- 触发渠道是**飞书**。文档类产出（调研文档 / 报告 / PPT / doc 等）`,
+      `  必须用**飞书云盘**存储：\`lark-cli docs +create --title <标题> --markdown @<本地md>\`，用完即弃。`,
+      `- 交付时只给**云盘链接**（https://my.feishu.cn/...），**不落本地路径**交付。`,
+      `  本地路径只作中转（生成 md → 上传云盘 → 回复里贴云盘链接），不作为交付物。`
+    ].join(`
+`);
+  } else if (channelType === "wecom-cli" || channelType.startsWith("wecom")) {
+    channelBody = [
+      `- 触发渠道是**企业微信**。文档类产出（调研文档 / docs / ppt 等）`,
+      `  必须上传到**企微文档**，链接作为交付物：`,
+      `  - 在线文档：\`wecom-cli doc create --doc-name <标题> --doc-type doc --content-type text --file-path <本地md>\``,
+      `  - 微盘文件：\`wecom-cli disk files upload --file-path <本地文件>\`（默认传到我的空间）`,
+      `- 本地路径只作中转（生成 → 上传企微文档 → 回复里贴链接），**不落本地路径**交付。`
+    ].join(`
+`);
+  }
+  if (!channelBody)
+    return;
+  return [
+    DELEGATE_CHANNEL_HINT_TITLE,
+    ``,
+    `通用措辞：当前会话来自外部渠道，交付类产出优先用该渠道的原生存储/展示方式，`,
+    `不要把本地文件路径当作交付物（渠道用户无法访问本机文件系统）。`,
+    ``,
+    channelBody
+  ].join(`
+`);
+}
+
 // src/env/task/delegate/subagent-resolver.ts
 function isKnownSubagentType(subagentType, registry) {
   if (getSubAgentSpec(subagentType)) {
@@ -743,7 +780,8 @@ var BackgroundTaskEventTypes = {
   FAILED: "task.background.failed",
   TIMEOUT: "task.background.timeout",
   STOPPED: "task.background.stopped",
-  ASK_USER: "task.background.ask_user"
+  ASK_USER: "task.background.ask_user",
+  SESSION_STARTED: "task.background.session_started"
 };
 var builtInSubAgents = [
   {
@@ -825,6 +863,21 @@ var builtInSubAgents = [
 function getSubAgentSpec(id) {
   return builtInSubAgents.find((agent) => agent.id === id);
 }
+function normalizeExtendTools(raw) {
+  if (!Array.isArray(raw))
+    return;
+  const out = [];
+  for (const v of raw) {
+    if (typeof v !== "string")
+      continue;
+    const trimmed = v.trim();
+    if (trimmed.length === 0)
+      continue;
+    if (!out.includes(trimmed))
+      out.push(trimmed);
+  }
+  return out.length > 0 ? out : undefined;
+}
 function ensureSubAgentRegistered(agentComponent, subagentType, basePrompt, subAgent, deniedTools) {
   const registry = agentComponent.getRegistry?.();
   if (registry) {
@@ -858,7 +911,7 @@ var DelegateToolParameters = z.object({
   timeout: z.number().describe("Task timeout in milliseconds. Default: 1800000 (30 minutes). If set, task will be terminated after timeout.").optional(),
   reason: z.string().describe("Brief reason for calling this tool (max 30 chars, e.g., 'Delegate refactor task')").optional(),
   similar_task_ids: z.array(z.number()).max(3).describe("Similar task IDs (max 3) to reference for improving task execution. Search for similar tasks before calling this tool."),
-  sub_session_id: z.string().describe("Existing sub-agent session ID to resume. " + "If provided, the sub-agent will continue from the previous conversation " + "context (used for retry on timeout/failure). " + "Leave empty for a new session.").optional(),
+  sub_session_id: z.string().describe("⚠️ 硬约束：同一任务链的续跑必须传此参数（从终态 notify 的「子 session:」行" + "或 delegate 返回的「\uD83D\uDD17 Sub-session:」行复制）。" + "仅当旧 session 上下文已确认不可救（compact_session 后仍超限 / 迭代上限且无可复用断点）时才留空；" + "留空等于丢弃全部上下文，从零开始。").optional(),
   triggerEventId: z.string().describe("EventStore trigger event ID (ESPlugin v2). Pass it when this delegate_task " + "is triggered by an external event source (e.g. Feishu message) so the " + "completion notification can reply to the original chat instead of a " + "fallback channel. Leave empty if not triggered by an event source.").optional()
 });
 function buildEntryAgentPrompt(options) {
@@ -1058,7 +1111,7 @@ class BackgroundTaskManager {
       return;
     }
   }
-  publishBackgroundEvent(type, payload, parentSessionId, triggerEventId, replyChannel) {
+  publishBackgroundEvent(type, payload, parentSessionId, triggerEventId, replyChannel, pluginEnabledSnapshot) {
     if (this.env?.pushEnvEvent) {
       this.env.pushEnvEvent({
         type,
@@ -1067,7 +1120,8 @@ class BackgroundTaskManager {
           source: "task.background",
           trigger_session_id: parentSessionId,
           ...triggerEventId ? { triggerEventId } : {},
-          ...replyChannel ? { replyChannel } : {}
+          ...replyChannel ? { replyChannel } : {},
+          ...pluginEnabledSnapshot ? { pluginEnabled: pluginEnabledSnapshot } : {}
         }
       });
       logger3.info(`[BackgroundTaskManager] Event published: ${type}`, {
@@ -1076,8 +1130,8 @@ class BackgroundTaskManager {
       });
     }
   }
-  publishBackgroundEventWithTrigger(type, payload, parentSessionId, triggerEventId, replyChannel) {
-    this.publishBackgroundEvent(type, payload, parentSessionId, triggerEventId, replyChannel);
+  publishBackgroundEventWithTrigger(type, payload, parentSessionId, triggerEventId, replyChannel, pluginEnabledSnapshot) {
+    this.publishBackgroundEvent(type, payload, parentSessionId, triggerEventId, replyChannel, pluginEnabledSnapshot);
   }
   static parseAskUserErrorFromMessage(error) {
     const rawErrorMessage = error instanceof Error ? error.message : String(error);
@@ -1115,7 +1169,7 @@ class BackgroundTaskManager {
     return null;
   }
   async createTask(options) {
-    const { parentSessionId, description, prompt, subagentType, timeout, similarTaskIds, existingSubSessionId, triggerEventId, model, fallbackModel, fallbackModels } = options;
+    const { parentSessionId, description, prompt, subagentType, timeout, similarTaskIds, existingSubSessionId, triggerEventId, model, fallbackModel, fallbackModels, systemPrompt, extendTools } = options;
     const taskIdGen = `process_${Date.now()}_${Math.random().toString(36).slice(2, 11)}`;
     const sessionComponent = this.getSessionComponent();
     if (!sessionComponent) {
@@ -1174,6 +1228,10 @@ class BackgroundTaskManager {
         if (profile) {
           metadata.larkProfile = profile;
         }
+        const channelType = replyChannel?.type;
+        if (channelType) {
+          metadata.channelType = channelType;
+        }
       }
       if (triggerEventId) {
         metadata.triggerEventId = triggerEventId;
@@ -1188,6 +1246,7 @@ class BackgroundTaskManager {
       }
     }
     const replyChannelSnapshot = captureReplyChannelSnapshot();
+    const pluginEnabledSnapshot = capturePluginEnabledSnapshot();
     const abortController = new AbortController;
     if (this.processRegistries.size >= this.maxProcessRegistries) {
       this.cleanupEmptyProcessRegistries();
@@ -1216,7 +1275,10 @@ class BackgroundTaskManager {
       model,
       fallbackModel,
       fallbackModels,
-      replyChannel: replyChannelSnapshot
+      systemPrompt,
+      extendTools,
+      replyChannel: replyChannelSnapshot,
+      pluginEnabledSnapshot
     };
     this.tasks.set(taskIdGen, task);
     this.abortControllers.set(taskIdGen, abortController);
@@ -1229,7 +1291,17 @@ class BackgroundTaskManager {
       startedAt: createdAt,
       timeoutMs: timeout || DEFAULT_TIMEOUT
     };
-    this.publishBackgroundEvent(BackgroundTaskEventTypes.STARTED, startedPayload, parentSessionId, triggerEventId, replyChannelSnapshot);
+    this.publishBackgroundEvent(BackgroundTaskEventTypes.STARTED, startedPayload, parentSessionId, triggerEventId, replyChannelSnapshot, task.pluginEnabledSnapshot);
+    this.publishBackgroundEvent(BackgroundTaskEventTypes.SESSION_STARTED, {
+      backgroundTaskId: taskIdGen,
+      subSessionId: subSession.id,
+      parentSessionId,
+      description,
+      subagentType,
+      associatedTaskId: undefined,
+      lifecycle: "running",
+      startedAt: createdAt
+    }, parentSessionId, triggerEventId, replyChannelSnapshot, task.pluginEnabledSnapshot);
     this.executeTask(taskIdGen, prompt, timeout, parentSessionId).catch((err) => {
       logger3.error(`[BackgroundTaskManager] executeTask unhandled rejection`, {
         taskId: taskIdGen,
@@ -1273,6 +1345,16 @@ class BackgroundTaskManager {
       if (task.associatedTaskId === undefined) {
         task.associatedTaskId = getCurrentTaskId();
       }
+      this.publishBackgroundEvent(BackgroundTaskEventTypes.SESSION_STARTED, {
+        backgroundTaskId: task.id,
+        subSessionId: task.subSessionId,
+        parentSessionId: parentSessionId || task.parentSessionId,
+        description: task.description,
+        subagentType: task.subagentType,
+        associatedTaskId: task.associatedTaskId,
+        lifecycle: "completed",
+        executionTimeMs
+      }, parentSessionId || task.parentSessionId, task.triggerEventId, task.replyChannel, task.pluginEnabledSnapshot);
       const completedPayload = {
         backgroundTaskId: task.id,
         subSessionId: task.subSessionId,
@@ -1283,7 +1365,7 @@ class BackgroundTaskManager {
         executionTimeMs,
         associatedTaskId: task.associatedTaskId
       };
-      this.publishBackgroundEvent(BackgroundTaskEventTypes.COMPLETED, completedPayload, parentSessionId || task.parentSessionId, task.triggerEventId, task.replyChannel);
+      this.publishBackgroundEvent(BackgroundTaskEventTypes.COMPLETED, completedPayload, parentSessionId || task.parentSessionId, task.triggerEventId, task.replyChannel, task.pluginEnabledSnapshot);
       logger3.info(`[BackgroundTaskManager] Task completed successfully`, {
         taskId,
         executionTimeMs
@@ -1320,11 +1402,11 @@ class BackgroundTaskManager {
           executionTimeMs,
           hints: [
             "请把上面的问题原样通过 ask_user tool 展示给用户并等待答复",
-            `得到用户回复后，通过 delegate_task(subagentType="${task.subagentType}", existingSubSessionId="${task.subSessionId}", prompt=<基于用户回复>) 复用 sub-session 让 sub-agent 继承之前消息历史继续推进，无需实现 resume function`
+            `得到用户回复后，通过 delegate_task(subagent_type="${task.subagentType}", sub_session_id="${task.subSessionId}", prompt=<基于用户回复>) 复用 sub-session 让 sub-agent 继承之前消息历史继续推进，无需实现 resume function`
           ],
           associatedTaskId: task.associatedTaskId
         };
-        this.publishBackgroundEvent(BackgroundTaskEventTypes.ASK_USER, askUserPayload, parentSessionId || task.parentSessionId, task.triggerEventId, task.replyChannel);
+        this.publishBackgroundEvent(BackgroundTaskEventTypes.ASK_USER, askUserPayload, parentSessionId || task.parentSessionId, task.triggerEventId, task.replyChannel, task.pluginEnabledSnapshot);
         logger3.info(`[BackgroundTaskManager] Task awaiting user input (ask_user cascade)`, {
           taskId,
           subSessionId: task.subSessionId,
@@ -1346,7 +1428,17 @@ class BackgroundTaskManager {
           executionTimeMs,
           associatedTaskId: task.associatedTaskId
         };
-        this.publishBackgroundEvent(BackgroundTaskEventTypes.STOPPED, stoppedPayload, parentSessionId || task.parentSessionId, task.triggerEventId, task.replyChannel);
+        this.publishBackgroundEvent(BackgroundTaskEventTypes.STOPPED, stoppedPayload, parentSessionId || task.parentSessionId, task.triggerEventId, task.replyChannel, task.pluginEnabledSnapshot);
+        this.publishBackgroundEvent(BackgroundTaskEventTypes.SESSION_STARTED, {
+          backgroundTaskId: task.id,
+          subSessionId: task.subSessionId,
+          parentSessionId: parentSessionId || task.parentSessionId,
+          description: task.description,
+          subagentType: task.subagentType,
+          associatedTaskId: task.associatedTaskId,
+          lifecycle: "stopped",
+          executionTimeMs
+        }, parentSessionId || task.parentSessionId, task.triggerEventId, task.replyChannel, task.pluginEnabledSnapshot);
       } else if (errorMessage.startsWith("Task execution timeout after")) {
         task.status = "timeout";
         const timeoutPayload = {
@@ -1359,7 +1451,17 @@ class BackgroundTaskManager {
           executionTimeMs,
           associatedTaskId: task.associatedTaskId
         };
-        this.publishBackgroundEvent(BackgroundTaskEventTypes.TIMEOUT, timeoutPayload, parentSessionId || task.parentSessionId, task.triggerEventId, task.replyChannel);
+        this.publishBackgroundEvent(BackgroundTaskEventTypes.TIMEOUT, timeoutPayload, parentSessionId || task.parentSessionId, task.triggerEventId, task.replyChannel, task.pluginEnabledSnapshot);
+        this.publishBackgroundEvent(BackgroundTaskEventTypes.SESSION_STARTED, {
+          backgroundTaskId: task.id,
+          subSessionId: task.subSessionId,
+          parentSessionId: parentSessionId || task.parentSessionId,
+          description: task.description,
+          subagentType: task.subagentType,
+          associatedTaskId: task.associatedTaskId,
+          lifecycle: "timeout",
+          executionTimeMs
+        }, parentSessionId || task.parentSessionId, task.triggerEventId, task.replyChannel, task.pluginEnabledSnapshot);
       } else {
         task.status = "failed";
         const failedPayload = {
@@ -1371,7 +1473,17 @@ class BackgroundTaskManager {
           executionTimeMs,
           associatedTaskId: task.associatedTaskId
         };
-        this.publishBackgroundEvent(BackgroundTaskEventTypes.FAILED, failedPayload, parentSessionId || task.parentSessionId, task.triggerEventId, task.replyChannel);
+        this.publishBackgroundEvent(BackgroundTaskEventTypes.FAILED, failedPayload, parentSessionId || task.parentSessionId, task.triggerEventId, task.replyChannel, task.pluginEnabledSnapshot);
+        this.publishBackgroundEvent(BackgroundTaskEventTypes.SESSION_STARTED, {
+          backgroundTaskId: task.id,
+          subSessionId: task.subSessionId,
+          parentSessionId: parentSessionId || task.parentSessionId,
+          description: task.description,
+          subagentType: task.subagentType,
+          associatedTaskId: task.associatedTaskId,
+          lifecycle: "failed",
+          executionTimeMs
+        }, parentSessionId || task.parentSessionId, task.triggerEventId, task.replyChannel, task.pluginEnabledSnapshot);
       }
       task.error = errorMessage;
       logger3.error(`[BackgroundTaskManager] Task execution error`, {
@@ -1416,7 +1528,7 @@ class BackgroundTaskManager {
         startedAt: task.createdAt,
         timeoutMs: task.timeoutMs
       };
-      this.publishBackgroundEvent(BackgroundTaskEventTypes.PROGRESS, progressPayload, parentSessionId, task.triggerEventId, task.replyChannel);
+      this.publishBackgroundEvent(BackgroundTaskEventTypes.PROGRESS, progressPayload, parentSessionId, task.triggerEventId, task.replyChannel, task.pluginEnabledSnapshot);
     }, PROGRESS_INTERVAL);
     this.progressTimers.set(taskId, timer);
   }
@@ -1444,14 +1556,10 @@ class BackgroundTaskManager {
     const basePrompt = resolved?.basePrompt || subAgent?.promptOverride || `You are a subagent. Complete this task: {task_description}`;
     const deniedTools = resolved?.deniedTools || subAgent?.deniedTools || [];
     const allowedTools = resolved?.allowedTools || subAgent?.allowedTools;
-    let fullPrompt = basePrompt.replace(/{task_description}/g, taskDescription || "N/A");
-    fullPrompt += `
-
----
-
-# Session Info
+    let fullPrompt = `# Session Info
 - task_id: ${taskId || "N/A"}
 - session_id: ${sessionId}
+- task_description: ${taskDescription || "N/A"}
 
 ---
 
@@ -1552,6 +1660,15 @@ ${reuseSection.markdown}`;
         error: err instanceof Error ? err.message : String(err)
       });
     }
+    const channelTypeHint = metadata.channelType ?? getEnvContext()?.replyChannel?.type;
+    const channelHint = buildDelegateChannelHint(channelTypeHint);
+    if (channelHint) {
+      fullPrompt += `
+
+---
+
+${channelHint}`;
+    }
     const subAgentForRegister = subAgent ? { ...subAgent, allowedTools } : allowedTools ? {
       id: subagentType,
       name: subagentType,
@@ -1640,7 +1757,9 @@ ${reuseSection.markdown}`;
           runId: capturedRunId,
           ...inheritedModel ? { model: inheritedModel } : {},
           ...inheritedFallbackModel ? { fallbackModel: inheritedFallbackModel } : {},
-          ...Array.isArray(inheritedFallbackModels) ? { fallbackModels: inheritedFallbackModels } : {}
+          ...Array.isArray(inheritedFallbackModels) ? { fallbackModels: inheritedFallbackModels } : {},
+          ...task?.systemPrompt ? { metadata: { systemPrompt: task.systemPrompt } } : {},
+          ...task?.extendTools?.length ? { extendTools: task.extendTools } : {}
         });
       };
       const wrappedPromise = processRegistry ? runWithProcessRegistryAsync(processRegistry, () => runWithBgTaskIdAsync(bgTaskId, () => invokeHandleQuery())) : runWithBgTaskIdAsync(bgTaskId, () => invokeHandleQuery());
@@ -1718,7 +1837,7 @@ ${reuseSection.markdown}`;
       executionTimeMs: task.startedAt ? task.completedAt - task.startedAt : 0,
       associatedTaskId: task.associatedTaskId
     };
-    this.publishBackgroundEvent(BackgroundTaskEventTypes.STOPPED, stoppedPayload, task.parentSessionId, task.triggerEventId, task.replyChannel);
+    this.publishBackgroundEvent(BackgroundTaskEventTypes.STOPPED, stoppedPayload, task.parentSessionId, task.triggerEventId, task.replyChannel, task.pluginEnabledSnapshot);
     this.finalizeTask(taskId, "stopped");
     return {
       success: true,
@@ -1828,7 +1947,7 @@ ${reuseSection.markdown}`;
           executionTimeMs: taskSafe.startedAt && taskSafe.completedAt ? taskSafe.completedAt - taskSafe.startedAt : 0,
           associatedTaskId: taskSafe.associatedTaskId
         };
-        this.publishBackgroundEvent(BackgroundTaskEventTypes.STOPPED, stoppedPayload, taskSafe.parentSessionId, taskSafe.triggerEventId, taskSafe.replyChannel);
+        this.publishBackgroundEvent(BackgroundTaskEventTypes.STOPPED, stoppedPayload, taskSafe.parentSessionId, taskSafe.triggerEventId, taskSafe.replyChannel, taskSafe.pluginEnabledSnapshot);
       }
     }
   }
@@ -2056,7 +2175,7 @@ No need to poll — just wait for the notification and use \`task_get\` with the
       };
       await globalHookManager.execute(TaskHookPoints.DELEGATE_BEFORE, delegateCtx, { sessionId: parentSessionId });
       promptWithTaskInfo = delegateCtx.prompt;
-      return await handleBackgroundTask(backgroundTaskManager, parentSessionId, description, promptWithTaskInfo, delegateCtx.subagentType, delegateCtx.timeout, similar_task_ids, params.sub_session_id, resolvedTriggerEventId, ctx.model, ctx.fallbackModel, ctx.fallbackModels);
+      return await handleBackgroundTask(backgroundTaskManager, parentSessionId, description, promptWithTaskInfo, delegateCtx.subagentType, delegateCtx.timeout, similar_task_ids, params.sub_session_id, resolvedTriggerEventId, ctx.model, ctx.fallbackModel, ctx.fallbackModels, ctx.metadata?.systemPrompt, normalizeExtendTools(ctx.metadata?.extendTools));
     }
   };
   tool.execute = wrapFunction(tool.execute, "delegate.execute", {
@@ -2100,7 +2219,19 @@ function _captureReplyChannelSnapshot() {
   };
 }
 var captureReplyChannelSnapshot = wrapFunction(_captureReplyChannelSnapshot, "delegate.captureReplyChannel", { recordParams: false, recordResult: true, recordError: true });
-async function handleBackgroundTask(backgroundTaskManager, parentSessionId, description, prompt, subagentType, timeout, similarTaskIds, existingSubSessionId, triggerEventId, model, fallbackModel, fallbackModels) {
+function _capturePluginEnabledSnapshot() {
+  const pluginEnabled = getEnvContext()?.pluginEnabled;
+  if (!pluginEnabled)
+    return;
+  if (typeof pluginEnabled !== "object")
+    return;
+  const keys = Object.keys(pluginEnabled);
+  if (keys.length === 0)
+    return;
+  return { ...pluginEnabled };
+}
+var capturePluginEnabledSnapshot = wrapFunction(_capturePluginEnabledSnapshot, "delegate.capturePluginEnabled", { recordParams: false, recordResult: true, recordError: true });
+async function handleBackgroundTask(backgroundTaskManager, parentSessionId, description, prompt, subagentType, timeout, similarTaskIds, existingSubSessionId, triggerEventId, model, fallbackModel, fallbackModels, systemPrompt, extendTools) {
   const startTime = Date.now();
   try {
     let actualSubagentType = subagentType;
@@ -2129,7 +2260,9 @@ async function handleBackgroundTask(backgroundTaskManager, parentSessionId, desc
       triggerEventId,
       model,
       fallbackModel,
-      fallbackModels
+      fallbackModels,
+      systemPrompt,
+      extendTools
     });
     const output = [
       `✅ Background task accepted`,
@@ -2139,6 +2272,8 @@ async function handleBackgroundTask(backgroundTaskManager, parentSessionId, desc
       `\uD83E\uDD16 Sub-agent: ${actualSubagentType}${originalWorkflowName ? ` (workflow: ${originalWorkflowName})` : ""}`,
       `⏱️ Timeout: ${(timeout || DEFAULT_TIMEOUT) / 1000}s`,
       "",
+      `\uD83D\uDD17 Sub-session: ${subSessionId}   （续跑本任务：delegate_task(sub_session_id="${subSessionId}", prompt="...")）`,
+      "",
       `Use stop_task with task_id="${bgProcessId}" to cancel this task.`
     ].join(`
 `);
@@ -2162,4 +2297,4 @@ async function handleBackgroundTask(backgroundTaskManager, parentSessionId, desc
     };
   }
 }
-export { BackgroundTaskEventTypes, builtInSubAgents, getSubAgentSpec, DelegateToolParameters, buildEntryAgentPrompt, WORKFLOW_COMPAT_ALIASES, DEFAULT_TIMEOUT, PROGRESS_INTERVAL, BackgroundTaskManager, createDelegateTool, deriveTriggerEventIdFromEnvContext, captureReplyChannelSnapshot, handleBackgroundTask };
+export { BackgroundTaskEventTypes, builtInSubAgents, getSubAgentSpec, normalizeExtendTools, DelegateToolParameters, buildEntryAgentPrompt, WORKFLOW_COMPAT_ALIASES, DEFAULT_TIMEOUT, PROGRESS_INTERVAL, BackgroundTaskManager, createDelegateTool, deriveTriggerEventIdFromEnvContext, captureReplyChannelSnapshot, capturePluginEnabledSnapshot, handleBackgroundTask };

package/dist/shared/@ai-setting/{roy-agent-core-87942bw4.js → roy-agent-core-1mhyh4c5.js}

@@ -4,7 +4,7 @@ import {
 } from "./roy-agent-core-rvv6ydff.js";
 import {
   BaseComponent
-} from "./roy-agent-core-pgvcf91v.js";
+} from "./roy-agent-core-m39v7qpx.js";
 import {
   __require
 } from "./roy-agent-core-fs0mn2jk.js";

package/dist/shared/@ai-setting/{roy-agent-core-v6vr6za7.js → roy-agent-core-1vv4fx15.js}

@@ -3,17 +3,17 @@ import {
 } from "./roy-agent-core-az13yzmc.js";
 import {
   BaseComponent
-} from "./roy-agent-core-pgvcf91v.js";
+} from "./roy-agent-core-m39v7qpx.js";
 import {
   globalHookManager,
   init_global_hook_manager
-} from "./roy-agent-core-cpcd24n2.js";
+} from "./roy-agent-core-yet36q5k.js";
 import {
   init_context
-} from "./roy-agent-core-qqaak24r.js";
+} from "./roy-agent-core-tkpp1ba0.js";
 import {
   getEnvContextOrEmpty
-} from "./roy-agent-core-7cbpmk4q.js";
+} from "./roy-agent-core-p31ftgq9.js";
 import {
   createLogger,
   init_logger

package/dist/shared/@ai-setting/roy-agent-core-2stt4rp5.js

@@ -0,0 +1,134 @@
+// src/config/config-protection.ts
+import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync, appendFileSync, rmSync, chmodSync } from "fs";
+import { join } from "path";
+var PROTECTED_CONFIG_FILES = [
+  "config.jsonc",
+  "auth.json",
+  "event-sources.json",
+  "wecom-credentials.json"
+];
+var SNAPSHOT_KEEP = 10;
+var SNAPSHOTS_DIRNAME = "snapshots";
+var AUDIT_LOG_FILENAME = "audit.log";
+var SNAP_META_FILENAME = ".snapshot-meta.json";
+var SNAPSHOT_DIR_MODE = 448;
+var SNAPSHOT_FILE_MODE = 384;
+function pad2(n) {
+  return String(n).padStart(2, "0");
+}
+function snapshotTimestamp(d = new Date) {
+  return d.getUTCFullYear() + pad2(d.getUTCMonth() + 1) + pad2(d.getUTCDate()) + "T" + pad2(d.getUTCHours()) + "-" + pad2(d.getUTCMinutes()) + "-" + pad2(d.getUTCSeconds()) + "-" + String(d.getUTCMilliseconds()).padStart(3, "0") + "Z";
+}
+function snapshotsDir(configDir) {
+  return join(configDir, SNAPSHOTS_DIRNAME);
+}
+function snapshotConfigDir(configDir, now = new Date) {
+  if (!existsSync(configDir))
+    return null;
+  const snapRoot = snapshotsDir(configDir);
+  mkdirSync(snapRoot, { recursive: true });
+  const ts = snapshotTimestamp(now);
+  const snapDir = join(snapRoot, ts);
+  mkdirSync(snapDir, { recursive: true, mode: SNAPSHOT_DIR_MODE });
+  try {
+    chmodSync(snapDir, SNAPSHOT_DIR_MODE);
+  } catch {}
+  for (const file of PROTECTED_CONFIG_FILES) {
+    const src = join(configDir, file);
+    if (!existsSync(src))
+      continue;
+    try {
+      writeFileSync(join(snapDir, file), readFileSync(src), { mode: SNAPSHOT_FILE_MODE });
+    } catch {}
+  }
+  writeFileSync(join(snapDir, SNAP_META_FILENAME), JSON.stringify({ ts: now.toISOString(), source: configDir, pid: process.pid }));
+  pruneSnapshots(snapRoot, SNAPSHOT_KEEP);
+  return snapDir;
+}
+function pruneSnapshots(snapRoot, keep) {
+  const all = readdirSync(snapRoot).filter((n) => !n.startsWith(".")).sort();
+  const excess = all.length - keep;
+  for (let i = 0;i < excess; i++) {
+    try {
+      rmSync(join(snapRoot, all[i]), { recursive: true, force: true });
+    } catch {}
+  }
+}
+function appendAuditLog(configDir, entry) {
+  try {
+    const full = {
+      ts: new Date().toISOString(),
+      pid: process.pid,
+      ...entry
+    };
+    appendFileSync(join(configDir, AUDIT_LOG_FILENAME), JSON.stringify(full) + `
+`);
+  } catch {}
+}
+function readAuditLog(configDir) {
+  const p = join(configDir, AUDIT_LOG_FILENAME);
+  if (!existsSync(p))
+    return [];
+  const out = [];
+  for (const line of readFileSync(p, "utf-8").split(`
+`)) {
+    if (!line.trim())
+      continue;
+    try {
+      out.push(JSON.parse(line));
+    } catch {}
+  }
+  return out;
+}
+function checkSourceCountDrop(previousCount, newCount) {
+  if (previousCount <= 0)
+    return { allowed: true };
+  if (newCount >= previousCount)
+    return { allowed: true };
+  const dropRatio = (previousCount - newCount) / previousCount;
+  if (dropRatio > 0.3) {
+    return {
+      allowed: false,
+      reason: `source count drop ${(dropRatio * 100).toFixed(0)}% (${previousCount} -> ${newCount}) exceeds 30% threshold; refusing to overwrite (ROY_AGENT_ES_FORCE_SAVE=1 to override)`
+    };
+  }
+  return { allowed: true };
+}
+function readSourceCountFromDisk(configPath) {
+  try {
+    if (!existsSync(configPath))
+      return -1;
+    const cfg = JSON.parse(readFileSync(configPath, "utf-8"));
+    if (!cfg || !Array.isArray(cfg.sources))
+      return -1;
+    return cfg.sources.length;
+  } catch {
+    return -1;
+  }
+}
+function guardConfigWrite(configDir, file, writeFn) {
+  try {
+    const snapDir = snapshotConfigDir(configDir);
+    if (snapDir) {
+      appendAuditLog(configDir, {
+        file,
+        action: "pre-save-snapshot",
+        detail: `snapshot=${snapDir}`
+      });
+    }
+  } catch {}
+  try {
+    writeFn();
+  } catch (err) {
+    appendAuditLog(configDir, {
+      file,
+      action: "write-failed",
+      detail: err?.message ?? String(err)
+    });
+    return false;
+  }
+  appendAuditLog(configDir, { file, action: "save" });
+  return true;
+}
+
+export { PROTECTED_CONFIG_FILES, snapshotConfigDir, appendAuditLog, readAuditLog, checkSourceCountDrop, readSourceCountFromDisk, guardConfigWrite };

package/dist/shared/@ai-setting/{roy-agent-core-nwbfepba.js → roy-agent-core-3e040tc5.js}

@@ -6,7 +6,7 @@ import {
 } from "./roy-agent-core-7hh0brvs.js";
 import {
   BaseComponent
-} from "./roy-agent-core-pgvcf91v.js";
+} from "./roy-agent-core-m39v7qpx.js";
 import {
   createLogger,
   init_logger