@mininglamp-oss/octo-runtime 1.1.1 → 1.1.3

package/node_modules/@mininglamp-oss/octo-runtime-adapter-opencode/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@mininglamp-oss/octo-runtime-adapter-opencode",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "private": true,
   "type": "module",
   "exports": "./dist/index.js",
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-protocol": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-acp": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.1"
+    "@mininglamp-oss/octo-runtime-protocol": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-acp": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.3"
   },
   "types": "./dist/index.d.ts",
   "files": [

package/node_modules/@mininglamp-oss/octo-runtime-adapter-qodercli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mininglamp-oss/octo-runtime-adapter-qodercli",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "private": true,
   "type": "module",
   "exports": "./dist/index.js",
@@ -9,6 +9,6 @@
     "dist"
   ],
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-adapter-acp": "1.1.1"
+    "@mininglamp-oss/octo-runtime-adapter-acp": "1.1.3"
   }
 }

package/node_modules/@mininglamp-oss/octo-runtime-adapter-qoderclicn/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mininglamp-oss/octo-runtime-adapter-qoderclicn",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "private": true,
   "type": "module",
   "exports": "./dist/index.js",
@@ -9,6 +9,6 @@
     "dist"
   ],
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-adapter-acp": "1.1.1"
+    "@mininglamp-oss/octo-runtime-adapter-acp": "1.1.3"
   }
 }

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/dist/approval.d.ts

@@ -7,10 +7,14 @@ export declare class AcpApprovalBridge {
     readonly options: {
         providerDecisions?: boolean;
         providerManagedExpiry?: boolean;
+        /** 仅由 Adapter 在首个审批前设置，用于已授权的原生兼容回退；不改写请求策略与身份。 */
+        effectiveApprovalMode?: "ask" | "full_access";
     };
     constructor(request: InvokeRequest, timeoutMs?: number, options?: {
         providerDecisions?: boolean;
         providerManagedExpiry?: boolean;
+        /** 仅由 Adapter 在首个审批前设置，用于已授权的原生兼容回退；不改写请求策略与身份。 */
+        effectiveApprovalMode?: "ask" | "full_access";
     });
     requestPermission(params: RecordValue, providerExpiresAt?: number): Promise<RecordValue>;
     respond(response: InteractionResponse): Promise<void>;

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/dist/approval.js

@@ -24,6 +24,7 @@ export class AcpApprovalBridge {
     requestPermission(params, providerExpiresAt) {
         if (this.#closed || this.request.signal?.aborted)
             return Promise.reject(new Error("APPROVAL_WAIT_UNAVAILABLE"));
+        const automatic = (this.options.effectiveApprovalMode ?? this.request.approvalMode) === "full_access";
         const options = Array.isArray(params.options) ? params.options.filter(isObject) : [];
         const option = (kind) => {
             const candidate = options.find((value) => value.kind === kind);
@@ -34,7 +35,7 @@ export class AcpApprovalBridge {
         const allow = option("allow_once");
         const always = this.options.providerDecisions ? option("allow_always") : undefined;
         const decline = option("reject_once");
-        if (!allow && !always && !decline && this.request.approvalMode !== "full_access")
+        if (!allow && !always && !decline && !automatic)
             return Promise.resolve(cancelled());
         if (this.#pending.size >= 16 || this.request.signal?.aborted)
             return Promise.reject(new Error("APPROVAL_WAIT_UNAVAILABLE"));
@@ -90,10 +91,8 @@ export class AcpApprovalBridge {
                 written,
                 confirm,
                 fail,
-                responding: this.request.approvalMode === "full_access",
-                ...(this.request.approvalMode === "full_access"
-                    ? { automaticOutcome: allow ? "accepted" : "cancelled" }
-                    : {})
+                responding: automatic,
+                ...(automatic ? { automaticOutcome: allow ? "accepted" : "cancelled" } : {})
             });
         });
         const tool = isObject(params.toolCall)
@@ -140,7 +139,7 @@ export class AcpApprovalBridge {
                 }
             }
         });
-        if (this.request.approvalMode === "full_access")
+        if (automatic)
             this.#pending.get(interactionId).resolve(allow ? selected(allow) : cancelled());
         return result;
     }

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mininglamp-oss/octo-runtime-adapter-sdk",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "private": true,
   "type": "module",
   "exports": {
@@ -9,7 +9,7 @@
     "./module-manifest": "./dist/module-manifest.js"
   },
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-protocol": "1.1.1",
+    "@mininglamp-oss/octo-runtime-protocol": "1.1.3",
     "import-meta-resolve": "4.2.0"
   },
   "types": "./dist/index.d.ts",

package/node_modules/@mininglamp-oss/octo-runtime-adapter-zcode-gui/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@mininglamp-oss/octo-runtime-adapter-zcode-gui",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "private": true,
   "type": "module",
   "exports": "./dist/index.js",
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-protocol": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.1"
+    "@mininglamp-oss/octo-runtime-protocol": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.3"
   },
   "types": "./dist/index.d.ts",
   "files": [

package/node_modules/@mininglamp-oss/octo-runtime-cli/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "commit": "20c377136288a55356300bd3d4a755d0f19a23ee",
+  "commit": "fe19d350431534da4ed3a76f3466add4ced86d81",
   "dirty": false,
-  "buildTime": "2026-10-22T07:38:35.134Z"
+  "buildTime": "2026-10-22T15:06:34.025Z"
 }

package/node_modules/@mininglamp-oss/octo-runtime-cli/dist/manifest.json

@@ -16,6 +16,11 @@
       "module": "@mininglamp-oss/octo-runtime-adapter-codebuddy",
       "export": "codebuddyAdapter"
     },
+    {
+      "type": "grok-build",
+      "module": "@mininglamp-oss/octo-runtime-adapter-grok-build",
+      "export": "grokBuildAdapter"
+    },
     {
       "type": "hermes",
       "module": "@mininglamp-oss/octo-runtime-adapter-hermes",

package/node_modules/@mininglamp-oss/octo-runtime-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mininglamp-oss/octo-runtime-cli",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "private": true,
   "type": "module",
   "bin": {
@@ -8,27 +8,28 @@
   },
   "types": "./dist/index.d.ts",
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.1",
+    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.3",
     "json5": "2.2.3",
-    "@mininglamp-oss/octo-runtime-extra-channel-gateway": "1.1.1",
-    "@mininglamp-oss/octo-runtime-host-sdk": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-openclaw": "1.1.1",
-    "@mininglamp-oss/octo-runtime-cross-service": "1.1.1",
-    "@mininglamp-oss/octo-runtime-protocol": "1.1.1",
-    "@mininglamp-oss/octo-runtime-executor-kernel": "1.1.1",
-    "@mininglamp-oss/octo-runtime-executor-core": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-antigravity": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-claude-code": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-codebuddy": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-codex": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-hermes": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-kimi-code": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-mcode": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-opencode": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-qodercli": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-qoderclicn": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-zcode-gui": "1.1.1",
-    "@mininglamp-oss/octo-runtime-extra-channel-wecom": "1.1.1",
-    "@mininglamp-oss/octo-runtime-extra-webui": "1.1.1"
+    "@mininglamp-oss/octo-runtime-extra-channel-gateway": "1.1.3",
+    "@mininglamp-oss/octo-runtime-host-sdk": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-openclaw": "1.1.3",
+    "@mininglamp-oss/octo-runtime-cross-service": "1.1.3",
+    "@mininglamp-oss/octo-runtime-protocol": "1.1.3",
+    "@mininglamp-oss/octo-runtime-executor-kernel": "1.1.3",
+    "@mininglamp-oss/octo-runtime-executor-core": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-antigravity": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-claude-code": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-codebuddy": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-codex": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-hermes": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-grok-build": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-kimi-code": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-mcode": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-opencode": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-qodercli": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-qoderclicn": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-zcode-gui": "1.1.3",
+    "@mininglamp-oss/octo-runtime-extra-channel-wecom": "1.1.3",
+    "@mininglamp-oss/octo-runtime-extra-webui": "1.1.3"
   }
 }

package/node_modules/@mininglamp-oss/octo-runtime-cross-service/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mininglamp-oss/octo-runtime-cross-service",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "private": true,
   "description": "Native user-service lifecycle backends for Octo Runtime",
   "type": "module",

package/node_modules/@mininglamp-oss/octo-runtime-executor-core/dist/model-input.d.ts

@@ -1,5 +1,5 @@
 import type { ContextEnvelope, InvokeRequest } from "@mininglamp-oss/octo-runtime-protocol";
-/** 仅渲染允许进入模型的业务 Context；固定格式使用英文，业务内容保留原文，对象键排序使同一快照稳定。 */
+/** 仅渲染允许进入模型的本轮业务 Context；Markdown 指引保留原文，排序后的 payload 用 CDATA 包裹，不修改输入。 */
 export declare function renderModelContexts(context: ContextEnvelope): string;
 /**
  * Core 冻结原请求后、派发 Adapter 前调用一次；接入方不应预先渲染而造成 Context 重复。

package/node_modules/@mininglamp-oss/octo-runtime-executor-core/dist/model-input.js

@@ -1,20 +1,24 @@
 const MODEL_CONTEXT_PATTERNS = [/^extra\.[^/]+\/[^/]+$/, /^octo\.content\/(inline|references)$/];
-/** 仅渲染允许进入模型的业务 Context；固定格式使用英文，业务内容保留原文，对象键排序使同一快照稳定。 */
+/** 仅渲染允许进入模型的本轮业务 Context；Markdown 指引保留原文，排序后的 payload 用 CDATA 包裹，不修改输入。 */
 export function renderModelContexts(context) {
     const items = context.items.filter((item) => MODEL_CONTEXT_PATTERNS.some((pattern) => pattern.test(item.namespace + "/" + item.name)));
     if (!items.length)
         return "";
     return [
-        "<--- Context information begins: the following is the current context --->",
+        "<!-- Context information begins: the following is the current context -->",
         "<contexts>",
-        ...items.map((item) => [
-            `  <context-item namespace="${item.namespace}" name="${item.name}">`,
-            ...(item.guidance ? [`    Guidance: ${item.guidance}`] : []),
-            `    Data: ${JSON.stringify(sorted(item.payload))}`,
-            "  </context-item>"
-        ].join("\n")),
+        ...items.map((item) => {
+            // 拆分 CDATA 终止符为相邻区段，避免材料中的标记提前结束数据边界；不解析内部内容。
+            const data = JSON.stringify(sorted(item.payload)).replaceAll("]]>", "]]]]><![CDATA[>");
+            return [
+                `  <context-item namespace="${item.namespace}" name="${item.name}">`,
+                ...(item.guidance ? [`    <guidence>${item.guidance}</guidence>`] : []),
+                `    <data><![CDATA[${data}]]></data>`,
+                "  </context-item>"
+            ].join("\n");
+        }),
         "</contexts>",
-        "<--- Context information ends --->"
+        "<!-- Context information ends -->"
     ].join("\n");
 }
 function sorted(value) {

package/node_modules/@mininglamp-oss/octo-runtime-executor-core/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@mininglamp-oss/octo-runtime-executor-core",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "private": true,
   "type": "module",
   "exports": "./dist/index.js",
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.1",
-    "@mininglamp-oss/octo-runtime-protocol": "1.1.1"
+    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.3",
+    "@mininglamp-oss/octo-runtime-protocol": "1.1.3"
   },
   "types": "./dist/index.d.ts",
   "files": [

package/node_modules/@mininglamp-oss/octo-runtime-executor-kernel/dist/invocation-manifest.js

@@ -28,10 +28,15 @@ export class InvocationManifest {
             this.#worker = undefined;
         }
         else {
-            const started = await processStartIdentity(pid);
-            if (!started)
-                throw new Error(`cannot identify worker process ${pid}`);
-            this.#worker = { pid, started, entrypoint };
+            try {
+                const started = await queryProcessStartIdentity(pid);
+                if (!started)
+                    throw new Error("system process start identity unavailable");
+                this.#worker = { pid, started, entrypoint };
+            }
+            catch (cause) {
+                throw new Error(`cannot identify worker process ${pid}`, { cause });
+            }
         }
         await this.#persist();
     }
@@ -112,6 +117,15 @@ export async function reapOrphanedInvocationManifest(path) {
 }
 /** 查询系统启动时间以区分 PID 复用；失败时不返回可用于回收的身份，绝不以 PID 本身兜底。 */
 export async function processStartIdentity(pid) {
+    try {
+        return await queryProcessStartIdentity(pid);
+    }
+    catch {
+        return undefined;
+    }
+}
+// 登记失败保留系统查询原因；公开探测与孤儿回收仍以 undefined 表示身份未知。
+async function queryProcessStartIdentity(pid) {
     if (!Number.isSafeInteger(pid) || pid < 1)
         return undefined;
     if (process.platform === "linux") {
@@ -136,18 +150,27 @@ export async function processStartIdentity(pid) {
         });
     }
     if (process.platform === "win32") {
-        return new Promise((resolve) => {
+        return new Promise((resolve, reject) => {
             execFile("powershell.exe", [
                 "-NoLogo",
                 "-NoProfile",
                 "-NonInteractive",
                 "-Command",
                 // 直接调用系统进程对象，避免 Get-Process 的命令发现/模块自动加载占用身份查询预算。
-                // 保持 UTC ticks 身份格式；不增加超时，也不缓存可能已经复用的 PID。
+                // 保持 UTC ticks 身份格式，不缓存可能已经复用的 PID。
                 `$PSModuleAutoLoadingPreference='None'; $target=[System.Diagnostics.Process]::GetProcessById(${pid}); try { [Console]::Out.Write($target.StartTime.ToUniversalTime().Ticks.ToString([Globalization.CultureInfo]::InvariantCulture)) } finally { $target.Dispose() }`
-            ], { encoding: "utf8", timeout: 10_000, windowsHide: true }, (error, stdout) => {
+            ], 
+            // 冷启动 PowerShell/.NET 也占用查询期限；10 秒已在独立 Windows CI 中反复超时。
+            // 身份登记独立于后续 RPC 就绪与关闭预算，失败仍禁止使用未知 PID。
+            { encoding: "utf8", timeout: 30_000, windowsHide: true }, (error, stdout) => {
+                if (error) {
+                    reject(error instanceof Error
+                        ? error
+                        : new Error("Windows process identity query failed", { cause: error }));
+                    return;
+                }
                 const value = stdout.trim();
-                resolve(error || !/^\d+$/.test(value) ? undefined : `windows:${value}`);
+                resolve(!/^\d+$/.test(value) ? undefined : `windows:${value}`);
             });
         });
     }

package/node_modules/@mininglamp-oss/octo-runtime-executor-kernel/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mininglamp-oss/octo-runtime-executor-kernel",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "private": true,
   "type": "module",
   "exports": {
@@ -18,9 +18,9 @@
     }
   },
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-executor-core": "1.1.1",
-    "@mininglamp-oss/octo-runtime-protocol": "1.1.1",
-    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.1"
+    "@mininglamp-oss/octo-runtime-executor-core": "1.1.3",
+    "@mininglamp-oss/octo-runtime-protocol": "1.1.3",
+    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.3"
   },
   "types": "./dist/index.d.ts",
   "files": [

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/config-schema.json

@@ -210,7 +210,7 @@
               },
               "allowed_sender_ids": {
                 "type": "array",
-                "description": "可选。允许触发本 Bot 的真实 Octo 发送者 ID 白名单；省略时仅允许服务端注册返回的 owner，显式名单替代默认 owner 名单，空数组拒绝所有发送者。不能使用展示名称代替身份；群/话题仍须满足真实 mention 和平台范围准入。",
+                "description": "可选。允许触发本 Bot 的真实 Octo 发送者 ID 白名单；省略时 DM 沿用平台好友准入，群/话题不增加发送者限制。显式非空名单仅允许列出的发送者，owner 不隐式补入，空数组拒绝全部，null 非法。自消息始终拒绝；群/话题仍须满足真实 mention、Space、启停与父群范围准入。",
                 "items": {
                   "type": "string",
                   "minLength": 1,

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/dist/application/im-channel.js

@@ -744,7 +744,8 @@ export class ImRuntime {
                     ? undefined
                     : await this.dependencies.prepareContexts?.(this.config, turnSignal),
                 initialSession,
-                mentionGuidance: initialSession || !executionSession.providerSession,
+                // 逐轮提醒让升级前的 Provider binding 也收到新 mention 规则，不隐式 reset。
+                mentionGuidance: true,
                 ...(gapEnabled
                     ? {
                         historyGap: gapPlan,

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/dist/contracts.d.ts

@@ -35,6 +35,7 @@ export interface ImCommonConfig {
         initial_delay_ms?: number;
         max_delay_ms?: number;
     };
+    /** 省略沿用平台消息准入；显式名单限制所有频道，空数组拒绝全部发送者。 */
     allowed_sender_ids?: string[];
 }
 export interface OctoBotConfig extends ImCommonConfig {
@@ -57,6 +58,7 @@ export interface ImInboundMessage {
     position?: {
         messageSeq: number;
     };
+    /** 同代次卡片重试：buildContext 返回 Gateway 已组合的冻结快照，不再采集或追加默认项。 */
     historyRetry?: boolean;
     bindHistoryTurn?(token: ImGapTurnToken): void;
     markRead?(signal: AbortSignal): Promise<void>;

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/dist/execution/dispatcher.js

@@ -9,6 +9,7 @@ import { join } from "node:path";
 import { assertContextEnvelope, mergeContext } from "@mininglamp-oss/octo-runtime-protocol";
 import { validateImConfig } from "../lifecycle/configuration.js";
 import { compactHistoryGap, historyGapContext } from "../application/context-gap.js";
+import { MENTION_GUIDANCE } from "../transport/mentions.js";
 export function createImInvocation(config, message, context, sessionKey, session, _signal, occurrenceId = message.messageId) {
     validateImConfig(config);
     assertContextEnvelope(context);
@@ -77,7 +78,30 @@ export function createImInvocation(config, message, context, sessionKey, session
         ]
     };
     // Channel 只组装公开 InvokeInput；执行解析和指令渲染统一交给 Host，避免再次拒绝业务 Context。
+    // 宿主已先解析静态/动态 Context；渠道默认指令只在本轮与有效 entries 保序组合一次。
+    // 不改变公共 mergeContext 或动态人设替换合同，也不把上一轮的组合结果累积回来。
     let submitted = context;
+    // 同代次卡片重试已从 occurrence 取得组合后的冻结快照，不能再次追加或按文本去重。
+    if (!message.historyRetry) {
+        const instructions = context.items.find((item) => item.namespace === "octo.control" && item.name === "instructions");
+        const channelInstructions = {
+            namespace: "octo.control",
+            name: "instructions",
+            payload: {
+                entries: [
+                    ...(instructions?.payload
+                        ?.entries ?? []),
+                    { text: MENTION_GUIDANCE }
+                ]
+            }
+        };
+        submitted = {
+            schema: context.schema,
+            items: instructions
+                ? context.items.map((item) => (item === instructions ? channelInstructions : item))
+                : [...context.items, channelInstructions]
+        };
+    }
     let snapshot;
     // 执行默认项也占协议预算；只降级本渠道自动追加的辅助材料，不丢弃显式业务项。
     for (const optional of [

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/dist/transport/channel.js

@@ -94,7 +94,7 @@ export class GatewayTransport {
                     this.callbacks.onRulesChanged?.(change);
                 return;
             }
-            if (!acceptsImMessage(this.scopedConfig, registration.owner_uid, message))
+            if (!acceptsImMessage(this.scopedConfig, message))
                 return;
             let finalReply;
             let historyTurn;
@@ -248,7 +248,7 @@ export class GatewayTransport {
                             this.#bindings.delete(idle[0]);
                     }
                     if (!this.#polling)
-                        this.#polling = this.#pollActions(token, registration.owner_uid, signal);
+                        this.#polling = this.#pollActions(token, signal);
                     return {
                         interaction: async (request) => {
                             const document = interactionCard(request);
@@ -351,7 +351,7 @@ export class GatewayTransport {
             throw new ImConnectionError("IM_DISCONNECTED", true);
         this.#connected = true;
     }
-    async #pollActions(token, owner, signal) {
+    async #pollActions(token, signal) {
         if (this.config.cards === false)
             return;
         let cursor = 0, failures = 0;
@@ -379,7 +379,8 @@ export class GatewayTransport {
                         continue;
                     }
                     if (action.spaceId !== this.#spaceId ||
-                        !(this.config.allowed_sender_ids ?? [owner]).includes(action.operatorUid)) {
+                        (this.config.allowed_sender_ids &&
+                            !this.config.allowed_sender_ids.includes(action.operatorUid))) {
                         cursor = event.event_id;
                         continue;
                     }

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/dist/transport/contexts.js

@@ -8,7 +8,7 @@ import { getGroupMd, getThreadMd } from "./api/rules.js";
 import { getChannelMessagePage } from "./api/conversations.js";
 import { compactHistoryGap, historyGapContext, IM_HISTORY_MESSAGE_LIMIT, planHistoryGap, validMessageSeq } from "../application/context-gap.js";
 import { OctoApiError } from "./api/errors.js";
-import { MENTION_GUIDANCE } from "./mentions.js";
+import { MENTION_REMINDER } from "./mentions.js";
 import { messageContent } from "./message-content.js";
 export async function build_im_contexts(config, message, botToken, signal, options = { initialSession: false }) {
     const items = structuredClone([
@@ -108,7 +108,7 @@ export async function build_im_contexts(config, message, botToken, signal, optio
         const instructions = {
             namespace: "extra.im",
             name: "mention-instructions",
-            guidance: MENTION_GUIDANCE,
+            guidance: MENTION_REMINDER,
             payload: {
                 source,
                 actorId: message.fromUid,

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/dist/transport/mentions.d.ts

@@ -1,11 +1,14 @@
 import type { MentionEntity } from "./api/types.js";
 import type { GroupMember } from "./api/conversations.js";
-export declare const MENTION_GUIDANCE = "\u4F60\u6B63\u5728\u901A\u8FC7 Octo \u56DE\u590D\u5F53\u524D\u9891\u9053\u3002\u666E\u901A\u56DE\u590D\u4E0D\u8981\u81EA\u52A8 @ \u53D1\u8D77\u8005\u3002\u82E5\u5F53\u524D\u7528\u6237\u660E\u786E\u8981\u6C42\u5728\u4EFB\u52A1\u5B8C\u6210\u540E\u901A\u77E5\u67D0\u4F4D\u771F\u4EBA\uFF0C\u5148\u5B8C\u6210\u4EFB\u52A1\uFF1B\u5728\u6700\u7EC8\u56DE\u7B54\u524D\uFF0C\u786E\u8BA4\u5BF9\u65B9\u5728\u5F53\u524D\u9891\u9053\u4E2D\u7684\u771F\u5B9E UID \u548C\u663E\u793A\u540D\u3002\u4FE1\u606F\u4E0D\u8DB3\u65F6\u6309\u9700\u4F7F\u7528 octo-cli \u67E5\u8BE2\uFF1B\u540C\u540D\u3001\u67E5\u8BE2\u5931\u8D25\u6216\u627E\u4E0D\u5230\u5408\u9002\u76EE\u6807\u65F6\uFF0C\u7531\u4F60\u5224\u65AD\u5E76\u6539\u7528\u666E\u901A @\u540D\u5B57 \u6216\u7EAF\u6587\u672C\uFF0C\u4E0D\u8981\u731C UID\uFF0C\u4E0D\u5FC5\u5F3A\u5236\u8FFD\u95EE\uFF0C\u4E5F\u4E0D\u5FC5\u5C55\u793A\u70B9\u540D\u672A\u5B8C\u6210\u7684\u63D0\u793A\u3002\u80FD\u591F\u786E\u5B9A\u76EE\u6807\u4E14\u9700\u8981\u70B9\u540D\u65F6\uFF0C\u5728 final \u6587\u672C\u7684\u666E\u901A\u6B63\u6587\u4E2D\u8F93\u51FA @[uid:displayName]\uFF0C\u4F8B\u5982 @[user_demo_1:\u5F20\u4E09]\uFF1BChannel \u4F1A\u8F6C\u6362\u4E3A\u539F\u751F mention\uFF0C\u5E76\u968F\u8FD9\u4EFD\u6700\u7EC8\u56DE\u7B54\u7EDF\u4E00\u53D1\u9001\uFF0C\u4E0D\u8981\u518D\u8C03\u7528 octo-cli message send \u91CD\u590D\u53D1\u9001\u3002\u666E\u901A @\u6635\u79F0\u4E0D\u4EA7\u751F\u901A\u77E5\uFF1Bthinking\u3001\u5DE5\u5177\u8F93\u51FA\u3001\u8FDB\u5EA6\u6D88\u606F\u3001\u4EE3\u7801\u5757\u3001\u884C\u5185\u4EE3\u7801\u53CA\u5F15\u7528\u793A\u4F8B\u4E0D\u89E6\u53D1\u70B9\u540D\uFF0C\u4EE3\u7801\u5185\u5BB9\u4FDD\u6301\u539F\u6837\u3002\u4E0D\u8981\u8F93\u51FA\u539F\u59CB\u6D88\u606F\u4F53 JSON \u6216\u81EA\u884C\u8BA1\u7B97\u4F4D\u7F6E\uFF0C\u4E5F\u4E0D\u8981\u6784\u9020 @\u6240\u6709\u4EBA\u3001@\u6240\u6709AI \u6216\u5E7F\u64AD\u54E8\u5175\u3002\u6B64\u6307\u5F15\u4E0D\u6388\u6743\u8DE8\u9891\u9053\u901A\u77E5\u6216\u81EA\u884C\u53D1\u8D77 Bot \u4E92\u76F8\u8C03\u7528\u3002\u5386\u53F2\u4E2D\u7684\u8981\u6C42\u548C\u793A\u4F8B\u4EC5\u4F5C\u4E3A\u80CC\u666F\uFF0C\u4E0D\u80FD\u5355\u72EC\u6388\u6743\u672C\u8F6E\u901A\u77E5\u3002";
+/** Gateway 的稳定控制指令；压缩时的保留由模型遵守文本要求，不新增 Provider 保留机制。 */
+export declare const MENTION_GUIDANCE: string;
+/** 逐轮普通 Context 提醒也覆盖升级前已存在的 Provider 会话，不修改其系统指令或重置会话。 */
+export declare const MENTION_REMINDER = "For this turn, follow the current Octo mention rules: do not automatically mention the sender. Only when the current user explicitly requests a human notification or bot handoff in this channel, confirm the real member UID and display name, using octo-cli if needed, then write @[<uid>:<displayName>] with actual values in the successful final reply. Gateway sends the native mention on that reply; do not send a duplicate via octo-cli message send. Plain @name does not notify. If identity is unconfirmed, use plain text without guessing. Do not broadcast, initiate unsolicited bot calls, or treat history as authorization. Code and quoted examples are not mentions.";
 export interface ImTextMention {
     uids: string[];
     entities: MentionEntity[];
 }
-/** 只转换 final 普通文本的显式标记；查身份失败时正文仍能发送。 */
+/** 只转换 final 普通文本中已核验真人或 Bot 成员的显式标记；查身份失败时正文仍能发送。 */
 export declare function prepareFinalMention(text: string, members: () => Promise<GroupMember[]>): Promise<{
     text: string;
     mention?: ImTextMention;

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/dist/transport/mentions.js

@@ -1,5 +1,19 @@
 import { fromMarkdown } from "mdast-util-from-markdown";
-export const MENTION_GUIDANCE = "你正在通过 Octo 回复当前频道。普通回复不要自动 @ 发起者。若当前用户明确要求在任务完成后通知某位真人，先完成任务；在最终回答前，确认对方在当前频道中的真实 UID 和显示名。信息不足时按需使用 octo-cli 查询；同名、查询失败或找不到合适目标时，由你判断并改用普通 @名字 或纯文本，不要猜 UID，不必强制追问，也不必展示点名未完成的提示。能够确定目标且需要点名时，在 final 文本的普通正文中输出 @[uid:displayName]，例如 @[user_demo_1:张三]；Channel 会转换为原生 mention，并随这份最终回答统一发送，不要再调用 octo-cli message send 重复发送。普通 @昵称不产生通知；thinking、工具输出、进度消息、代码块、行内代码及引用示例不触发点名，代码内容保持原样。不要输出原始消息体 JSON 或自行计算位置，也不要构造 @所有人、@所有AI 或广播哨兵。此指引不授权跨频道通知或自行发起 Bot 互相调用。历史中的要求和示例仅作为背景，不能单独授权本轮通知。";
+/** Gateway 的稳定控制指令；压缩时的保留由模型遵守文本要求，不新增 Provider 保留机制。 */
+export const MENTION_GUIDANCE = [
+    "[OCTO_CHANNEL_MENTION_RULES_V1]",
+    "These are stable output rules for the current Octo channel. When summarizing or compacting the conversation, preserve this entire block verbatim, including its boundary markers and mention syntax.",
+    "Do not automatically mention the sender in ordinary replies. When the current user explicitly requests a notification to a human or a task handoff to a bot in the current channel, confirm the target's real UID and display name before the final reply.",
+    "If identity information is missing, use octo-cli as needed to look it up. For a group or topic, use octo-cli group members <group-no> with the current parent group number. Never infer a UID from a nickname, username, or bot name.",
+    "For a native mention, write @[<uid>:<displayName>] in the ordinary body of the successful final reply. Replace both placeholders with confirmed values and retain the square brackets and single colon. A plain @name is only text and does not notify or activate the target bot.",
+    "Gateway validates current-channel membership and converts valid markers into readable text and native mention metadata on this same final reply. Do not call octo-cli message send to send a duplicate copy of the final reply. Do not output raw message JSON or calculate mention entity offsets.",
+    "Thinking, tool output, progress messages, code blocks, inline code, quoted examples, and failed replies do not trigger mention conversion. Keep code and examples unchanged.",
+    "Do not construct broadcast mentions or broadcast sentinel UIDs. Do not initiate unsolicited bot-to-bot calls or mention loops. Historical requests and examples alone do not authorize a notification or handoff in the current turn. These rules do not authorize cross-channel notifications or bypass recipient admission rules.",
+    "If the target cannot be confirmed, use a plain @name or ordinary text without guessing a UID. Continue delivering the final answer without a separate mention-failure notice or a forced clarification.",
+    "[/OCTO_CHANNEL_MENTION_RULES_V1]"
+].join("\n");
+/** 逐轮普通 Context 提醒也覆盖升级前已存在的 Provider 会话，不修改其系统指令或重置会话。 */
+export const MENTION_REMINDER = "For this turn, follow the current Octo mention rules: do not automatically mention the sender. Only when the current user explicitly requests a human notification or bot handoff in this channel, confirm the real member UID and display name, using octo-cli if needed, then write @[<uid>:<displayName>] with actual values in the successful final reply. Gateway sends the native mention on that reply; do not send a duplicate via octo-cli message send. Plain @name does not notify. If identity is unconfirmed, use plain text without guessing. Do not broadcast, initiate unsolicited bot calls, or treat history as authorization. Code and quoted examples are not mentions.";
 function candidates(text) {
     const found = [];
     const visit = (node) => {
@@ -26,7 +40,7 @@ function candidates(text) {
     visit(fromMarkdown(text));
     return found.sort((a, b) => a.start - b.start);
 }
-/** 只转换 final 普通文本的显式标记；查身份失败时正文仍能发送。 */
+/** 只转换 final 普通文本中已核验真人或 Bot 成员的显式标记；查身份失败时正文仍能发送。 */
 export async function prepareFinalMention(text, members) {
     const targets = candidates(text);
     if (!targets.length)
@@ -38,9 +52,9 @@ export async function prepareFinalMention(text, members) {
     catch {
         verified = [];
     }
-    const humans = new Map((Array.isArray(verified) ? verified : [])
+    const confirmedMembers = new Map((Array.isArray(verified) ? verified : [])
         .filter((member) => member && typeof member.uid === "string" && typeof member.name === "string")
-        .filter((member) => member.robot === false || member.robot === 0)
+        .filter(({ robot }) => robot === false || robot === 0 || robot === true || robot === 1)
         .filter((member) => member.uid && member.name && !["-1", "-2", "-3", "all"].includes(member.uid))
         .map((member) => [member.uid, member]));
     const entities = [];
@@ -49,7 +63,7 @@ export async function prepareFinalMention(text, members) {
     let output = "";
     for (const target of targets) {
         output += text.slice(cursor, target.start);
-        const member = humans.get(target.uid);
+        const member = confirmedMembers.get(target.uid);
         const label = `@${member?.name ?? target.name}`;
         if (member) {
             entities.push({ uid: member.uid, offset: output.length, length: label.length });

package/node_modules/@mininglamp-oss/octo-runtime-extra-channel-gateway/dist/transport/normalize.d.ts

@@ -9,7 +9,7 @@ export declare function groupScope(channelId: string): {
     shortId?: string;
 };
 export declare function observesImScope(config: ScopedOctoBotConfig, channelId: string, channelType: number, spaceId?: unknown): boolean;
-export declare function acceptsImMessage(config: ScopedOctoBotConfig, owner: string, message: ImMessage): boolean;
+export declare function acceptsImMessage(config: ScopedOctoBotConfig, message: ImMessage): boolean;
 export declare function isRulesNotification(message: ImMessage): boolean;
 /** 事件只使规则缓存失效，内容及版本仍由授权 API 核验，不产生执行授权。 */
 export declare function rulesChange(message: ImMessage): {