evolcore 0.0.10 → 0.0.12

package/dist/channels/aun.js

@@ -7,20 +7,21 @@ import { logger, localTimestamp } from '../utils/logger.js';
 import { LogWriter } from '../utils/log-writer.js';
 import { middleOutputModePolicy, resolveShowActivities, showActivitiesPolicy } from '../core/channel-loader.js';
 import { DEFAULT_FLUSH_DELAY_SECONDS } from '../types.js';
-import { resolvePaths, agentMdPath as agentMdPathFn, agentDir as agentDirPath, resolveRoot } from '../paths.js';
+import { resolvePaths, agentDir as agentDirPath, resolveRoot } from '../paths.js';
 import { saveToUploads, sanitizeFileName, bufferToInboundImage, safeFetch } from '../utils/media-cache.js';
 import { appendAidEvent } from '../utils/instance-registry.js';
-import { appendMessageLog, buildOutboundEntry, buildInboundEntry, classifyAunPayloadForLog } from '../core/message/message-log.js';
+import { appendMessageLog, appendMessageLogStrict, buildOutboundEntry, buildInboundEntry, classifyAunPayloadForLog, hasMessageLogOperation } from '../core/message/message-log.js';
 import { createSendFileMarkerPattern } from '../core/message/file-markers.js';
 import { chatDirPath } from '../core/session/session-fs-store.js';
 import { appendHintAdd, appendHintRemove, parseInjectRequest } from '../core/message/pending-hints.js';
 import { appendAidLifecycle } from '../aun/aid/identity.js';
 import { getAidStore, loadClient, SLOT } from '../aun/aid/store.js';
 import { MAX_AUN_ATTACHMENT_SIZE, uploadBufferAndBuildPayload, uploadFileAndBuildPayload } from '../aun/msg/upload.js';
-import { loadAgent, saveAgent } from '../config-store.js';
+import { loadAgent } from '../config-store.js';
+import { normalizeAgentLifecycle } from '../config/lifecycle.js';
 import { resolveEffective } from '../config/config-manager.js';
 import { isManagementRole } from '../config/builtin-roles.js';
-import { mentionModeToDispatch } from '../config/mention-mode.js';
+import { normalizeMentionMode } from '../config/mention-mode.js';
 import { getProcessStartTime } from '../utils/process-introspect.js';
 import * as outbox from '../aun/outbox.js';
 import { guessMime, formatSize } from '../utils/media-cache.js';
@@ -33,6 +34,9 @@ import { recordCausationSpan } from '../core/causation/audit.js';
 import { isExplicitGroupId } from '../aun/group-identity.js';
 import { refreshAgentDisplayName, resolveAgentDisplayName } from '../aun/aid/agentmd.js';
 import { readInstalledEvolcoreVersion } from '../utils/evolcore-version.js';
+import { bindPostBootstrapWelcomeOutboxSession, hasPendingPostBootstrapWelcomeOutbox, postBootstrapWelcomeOperationId, preparePostBootstrapWelcomeOutbox, } from '../core/bootstrap-messages.js';
+import { hasMentionAll, mentionEntryAids, mentionEntryTargets, } from '../core/message/mention-schema.js';
+import { normalizeAunMentionEntries, } from '../aun/msg/mention-schema.js';
 export const AUN_HANDOFF_MARKER_FIELD = '_evolcore_handoff_id';
 const AUN_INTERACTION_CARD_TTL_MS = 24 * 60 * 60 * 1000;
 const IMAGE_MIME_TYPE = /^image\/[!#$%&'*+.^_`|~0-9A-Za-z-]+$/i;
@@ -137,7 +141,7 @@ export function aunOptsToInbound(opts, channel, channelType) {
         replyContext: opts.replyContext,
         source: opts.source,
         images: opts.images,
-        dispatchMode: opts.dispatchMode,
+        mentionMode: opts.mentionMode,
     };
 }
 function verifiedProtectedHeaders(msg, env) {
@@ -200,7 +204,6 @@ export class AUNChannel {
     connected = false;
     traceWriter = null;
     eventBus = null;
-    ownerBoundHandler = null;
     queuedHandler = null;
     pendingEchoMessages = new Map();
     isEchoSending = false;
@@ -697,24 +700,20 @@ export class AUNChannel {
             .replace(/[ \t]+/g, ' ')
             .trim();
     }
-    extractMentionAids(mentions) {
-        const aids = [];
-        for (const m of mentions) {
-            if (typeof m === 'string')
-                aids.push(m);
-            else if (m && typeof m === 'object' && typeof m.aid === 'string')
-                aids.push(m.aid);
+    parsePayloadMentionsOrReject(payload, context, messageId, seq) {
+        const raw = payload && typeof payload === 'object' && !Array.isArray(payload)
+            ? payload.mentions
+            : undefined;
+        try {
+            return normalizeAunMentionEntries(raw);
         }
-        return aids;
-    }
-    hasMentionAll(mentions) {
-        for (const m of mentions) {
-            if (m === 'all')
-                return true;
-            if (m && typeof m === 'object' && m.scope === 'all')
-                return true;
+        catch (error) {
+            this.acknowledgeImmediately(messageId, seq);
+            const detail = error instanceof Error ? error.message : String(error);
+            const code = error?.code ?? 'INVALID_MENTION_SCHEMA';
+            logger.error(`${this.logPrefix()} Dropped ${context}: invalid payload.mentions (${detail}) code=${code} mid=${messageId}`);
+            return undefined;
         }
-        return false;
     }
     /** 从正文提取 @aid（AID 格式：至少三段域名），用于出站填充 payload.mentions */
     static MENTION_AID_RE = /@([a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?){2,})/g;
@@ -730,6 +729,19 @@ export class AUNChannel {
         }
         return out;
     }
+    /**
+     * Convert the AUN text mention notation into the canonical wire entries.
+     * `@all` is intentionally represented by its scope discriminator instead
+     * of being treated as an AID.
+     */
+    extractMentionEntriesFromText(text) {
+        const entries = [];
+        if (this.hasExplicitMention(text, 'all'))
+            entries.push({ scope: 'all' });
+        for (const aid of this.extractMentionAidsFromText(text))
+            entries.push({ aid });
+        return entries;
+    }
     /** Sanitize a raw topicName from untrusted payload: trim, strip control chars, enforce length. */
     sanitizeTopicName(raw) {
         if (typeof raw !== 'string')
@@ -754,6 +766,31 @@ export class AUNChannel {
         }
         return replyContext;
     }
+    claimInboundMessage(kind, messageId, seq) {
+        if (!messageId)
+            return true;
+        // Channel instance names are commonly reused across agents (the default
+        // is simply `aun`). Include the receiving AID so a server-scoped
+        // message_id cannot suppress an unrelated delivery in another channel.
+        const namespace = `${this.config.aid}:${this.config.channelName ?? 'aun'}:aun:${kind}`;
+        const dedupeKey = JSON.stringify([namespace, messageId]);
+        const existing = this.inboundSeenMessages.get(dedupeKey);
+        if (existing) {
+            if (seq !== undefined && existing.seq !== undefined && seq !== existing.seq) {
+                logger.warn(`${this.logPrefix()} Duplicate message_id with conflicting seq: namespace=${namespace} mid=${messageId} firstSeq=${existing.seq} duplicateSeq=${seq}`);
+            }
+            else {
+                logger.debug(`${this.logPrefix()} Duplicate inbound message dropped: namespace=${namespace} mid=${messageId} seq=${seq ?? 'unknown'}`);
+            }
+            this.acknowledgeImmediately(messageId, seq);
+            return false;
+        }
+        this.inboundSeenMessages.set(dedupeKey, { seenAt: Date.now(), seq });
+        if (seq !== undefined)
+            this.messageSeqMap.set(messageId, seq);
+        setTimeout(() => this.inboundSeenMessages.delete(dedupeKey), 5 * 60 * 1000);
+        return true;
+    }
     acknowledgeImmediately(messageId, _seq) {
         // SDK internally manages seq tracking and ack — do not call message.ack RPC directly,
         // as it corrupts the SDK's seqTracker state and breaks V2 e2ee message pull.
@@ -770,10 +807,16 @@ export class AUNChannel {
     _aid;
     _selfName; // 本地 agent.md 中的 name，首次 connect 时读取
     _chatId = ''; // aid:device_id:slot_id — 多实例回声过滤
-    seenMessages = new Map();
+    /**
+     * Inbound application dedupe. The AUN SDK may redeliver the same message
+     * with a different transport sequence, so message_id is the identity and
+     * seq is only retained for ACK/conflict diagnostics. Claiming happens at
+     * the event handler boundary, before payload/slash/mention parsing.
+     */
+    inboundSeenMessages = new Map();
     groupNameCache = new Map(); // groupId → 群显示名（进程内缓存，群名极少变）
     peerInfoCache = new Map();
-    messageSeqMap = new Map(); // messageId → seq (for ack)
+    messageSeqMap = new Map(); // messageId → seq (for ack/diagnostics)
     sentCount = new Map(); // channelId → 已发消息计数（用于判断最终回复）
     peerE2ee = new Map();
     static E2EE_PROBE_TTL = 10 * 60 * 1000; // 10min
@@ -788,7 +831,7 @@ export class AUNChannel {
     interactionCardMessageIds = new Map();
     /** 撤权可能先于 outbox 卡片投递完成；迟到卡片注册后立即撤回。 */
     invalidatedInteractions = new Map();
-    dispatchModeResolver;
+    mentionModeResolver;
     static PROACTIVE_ALLOW_TYPES = new Set([
         'text', 'quote', 'image', 'video', 'voice', 'file', 'json',
         'merge', 'link', 'location', 'personal_card',
@@ -797,6 +840,10 @@ export class AUNChannel {
     static INJECT_REQUEST_TYPE = 'observer.inject';
     /** 绑定请求类型（Evol App → 控制 AID）：快速路径，绕过白名单透传原始 payload JSON 给 bridge。 */
     static BIND_REQUEST_TYPE = 'bind.request';
+    /** 联系人申请本人状态查询：在普通消息准入前交给 bridge，身份只取认证信封。 */
+    static CONTACT_REQUEST_QUERY_TYPE = 'contact.request.query';
+    /** App 联系人申请提交：结构化控制请求，不是 slash command。 */
+    static CONTACT_REQUEST_SUBMIT_TYPE = 'contact.request.submit';
     // Reconnect state
     // SDK 自己跑无限指数退避（1s → 5min）；TS 层只在 SDK 够不到的两类场景下接管：
     //  1. flap：短命 connected 反复出现（SDK 不记忆跨轮 base delay，会从 1s 重新开始）
@@ -833,9 +880,9 @@ export class AUNChannel {
                 baseName: 'aun',
                 logDir: resolvePaths().logs,
                 rotation: 'hourly',
-                retention: { hours: 12 },
+                retention: { hours: 24 },
             });
-            logger.info(`${this.logPrefix()} Trace logging enabled (hourly rotation, 12h retention): ${this.traceWriter.activePath()}`);
+            logger.info(`${this.logPrefix()} Trace logging enabled (hourly rotation, 24h retention): ${this.traceWriter.activePath()}`);
         }
         this.aidState = {
             aid: config.aid,
@@ -1083,11 +1130,6 @@ export class AUNChannel {
             logger.info(`${this.logPrefix()} Connected as ${this._aid}`);
             appendAidEvent({ ts: Date.now(), iso: new Date().toISOString(), event: 'connected', aid: this.config.aid, gateway: this.gatewayUrl });
             appendAidLifecycle({ ts: Date.now(), iso: new Date().toISOString(), event: 'connected', aid: this.config.aid, gateway: this.gatewayUrl });
-            // Send welcome message to owner after first connection
-            // pureIdentity（控制 AID）：跳过 evolagent onboarding（根除 warn 噪声 + 永不 agentmdPut）
-            if (!this.config.pureIdentity) {
-                await this.sendWelcomeMessage();
-            }
         }
         catch (e) {
             this.trace('OUT', 'client.connect.error', { error: String(e) });
@@ -1097,122 +1139,89 @@ export class AUNChannel {
             throw e;
         }
     }
-    async sendWelcomeMessage() {
+    async preparePostBootstrapWelcome() {
         try {
             const aid = this.config.aid;
             const aidName = aid.startsWith('@') ? aid.slice(1) : aid;
-            // Read initialized + owners from per-agent config.json
-            // (config.json 是 owner 的真相来源——auto-bind 后会更新这里，但 this.config 是
-            // channel 启动时的快照，不会自动同步)
             const agentConfig = loadAgent(aidName);
             if (!agentConfig) {
                 logger.warn(`${this.logPrefix()} agent config not found for ${aidName}, skipping welcome message`);
-                return;
-            }
-            if (agentConfig.initialized === true) {
-                logger.info(`${this.logPrefix()} Agent already initialized, skipping welcome message`);
-                return;
+                return false;
             }
             const owner = getFirstStaticAgentOwner(aidName);
             if (!owner) {
-                logger.info(`${this.logPrefix()} No owner configured, skipping welcome message (will retry after auto-bind)`);
-                return;
+                logger.info(`${this.logPrefix()} No owner configured, skipping post-bootstrap welcome message`);
+                return false;
             }
-            const agentMdLocalPath = agentMdPathFn(aidName);
-            const existingAgentMd = fs.existsSync(agentMdLocalPath) ? fs.readFileSync(agentMdLocalPath, 'utf-8') : '';
-            const existingFrontmatterMatch = existingAgentMd.match(/^---\n([\s\S]*?)\n---/);
-            const existingFrontmatter = existingFrontmatterMatch?.[1] ?? '';
-            // Fetch owner's agent.md to derive name and validate type
-            const ownerInfo = await this.fetchPeerInfo(owner);
-            if (ownerInfo.type !== null && ownerInfo.type !== 'human') {
-                logger.warn(`${this.logPrefix()} Owner ${owner} type is "${ownerInfo.type}" (not human). Consider using a human AID as owner.`);
+            const operationId = postBootstrapWelcomeOperationId(aidName);
+            const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', owner, aidName);
+            if (hasMessageLogOperation(chatDir, operationId) || outbox.findByDedupeKey(aidName, operationId)) {
+                return true;
             }
-            // Name: prefer existing agent.md name if user has customized it,
-            // otherwise generate "{ownerName}的Evol助手 ({aidLabel})" for disambiguation
             const ownerAidClean = owner.startsWith('@') ? owner.slice(1) : owner;
-            const ownerDisplayName = (ownerInfo.name || ownerAidClean.split('.')[0]).slice(0, 12);
-            const currentNameMatch = existingFrontmatter.match(/^name:\s*"?([^"\n]+)/m);
-            const currentName = currentNameMatch?.[1]?.trim().replace(/"$/, '');
-            const aidLabel = aidName.split('.')[0];
-            let agentDisplayName;
-            if (currentName && currentName !== aidLabel) {
-                agentDisplayName = currentName;
-            }
-            else {
-                agentDisplayName = `${ownerDisplayName}的Evol助手 (${aidLabel})`;
-            }
-            // Preserve user-provided description (from `agent new --description`), fallback to default
-            const currentDescMatch = existingFrontmatter.match(/^description:\s*"?([^"\n]*)/m);
-            const currentDesc = currentDescMatch?.[1]?.trim().replace(/"$/, '');
-            const agentDescription = currentDesc
-                ? currentDesc
-                : 'EvolCore AI Agent Gateway - 连接 Claude/Codex 到消息通道';
-            // Generate new agent.md (no `initialized` frontmatter — that's now in config.json)
-            const newAgentMd = `---
-aid: "${aid}"
-name: "${agentDisplayName}"
-type: "codeagent"
-version: "1.0.0"
-description: "${agentDescription}"
-tags:
-  - evolcore
-  - ai-agent
-  - gateway
----
-
-# ${agentDisplayName}
-
-EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
-`;
-            // Write locally and publish to AUN network (auto-sign)
-            try {
-                const { agentmdPut } = await import('../aun/aid/agentmd.js');
-                await agentmdPut(newAgentMd, { aid: aidName, store: this.store });
-                logger.info(`${this.logPrefix()} Published agent.md to AUN network`);
-            }
-            catch (e) {
-                logger.warn(`${this.logPrefix()} Failed to publish agent.md: ${e}`);
-            }
-            // Send welcome message
-            const { generateWelcomeMessage } = await import('../utils/welcome.js');
-            const welcomeText = generateWelcomeMessage({
-                channelType: 'aun',
-                agentName: agentDisplayName,
-                ownerName: ownerDisplayName,
-                includeBindingNote: true,
-            });
-            // First contact with Owner races against Owner's async cert fetch from
-            // gateway PKI; a 3s pause lets the cert propagate. persist_required asks
-            // the gateway to durably store the message so Owner can recover it via
-            // pull if the initial E2EE push still arrives before the cert resolves.
-            await new Promise(resolve => setTimeout(resolve, 3000));
-            if (!this.client) {
-                logger.warn(`${this.logPrefix()} Client disconnected before welcome message could be sent`);
-                return;
-            }
-            await this.callAndTrace('message.send', {
-                to: owner,
-                payload: { type: 'text', text: welcomeText },
-                encrypt: this.shouldEncrypt(owner),
-                persist_required: true,
-            });
-            logger.info(`${this.logPrefix()} Welcome message sent to owner: ${owner}`);
-            // Mark agent as initialized in config.json (replaces old agent.md frontmatter flag)
+            let ownerDisplayName = ownerAidClean.split('.')[0].slice(0, 12);
             try {
-                const fresh = loadAgent(aidName);
-                if (fresh) {
-                    fresh.initialized = true;
-                    saveAgent(fresh);
-                    logger.info(`${this.logPrefix()} Marked ${aidName} as initialized in config.json`);
+                const ownerInfo = await this.fetchPeerInfo(owner);
+                ownerDisplayName = (ownerInfo.name || ownerDisplayName).slice(0, 12);
+                if (ownerInfo.type !== null && ownerInfo.type !== 'human') {
+                    logger.warn(`${this.logPrefix()} Owner ${owner} type is "${ownerInfo.type}" (not human).`);
                 }
             }
             catch (e) {
-                logger.warn(`${this.logPrefix()} Failed to update initialized flag in config.json: ${e}`);
+                logger.warn(`${this.logPrefix()} Failed to resolve owner display name; using AID label: ${e}`);
             }
+            preparePostBootstrapWelcomeOutbox(aidName, owner, ownerDisplayName);
+            logger.info(`${this.logPrefix()} Post-bootstrap welcome durably prepared for owner: ${owner}`);
+            return true;
         }
         catch (e) {
-            logger.warn(`${this.logPrefix()} Failed to send welcome message: ${e}`);
+            logger.warn(`${this.logPrefix()} Failed to prepare post-bootstrap welcome message: ${e}`);
+            return false;
+        }
+    }
+    async sendPostBootstrapWelcome() {
+        if (!await this.preparePostBootstrapWelcome())
+            return false;
+        return this.reconcilePostBootstrapWelcome();
+    }
+    async hasPendingPostBootstrapWelcome() {
+        const aid = this.config.aid.replace(/^@/, '');
+        return hasPendingPostBootstrapWelcomeOutbox(aid);
+    }
+    async bindPostBootstrapWelcomeToSession(sessionId) {
+        const aid = this.config.aid.replace(/^@/, '');
+        return bindPostBootstrapWelcomeOutboxSession(aid, sessionId);
+    }
+    /**
+     * Resume delivery of an already prepared completion welcome.
+     *
+     * Unlike sendPostBootstrapWelcome(), this method never creates a new
+     * operation. That distinction keeps repeated `ec agent ready` calls on an
+     * already-active agent from manufacturing another welcome message.
+     */
+    async reconcilePostBootstrapWelcome() {
+        const configuredAid = this.config.aid;
+        const aid = configuredAid.startsWith('@') ? configuredAid.slice(1) : configuredAid;
+        const operationId = postBootstrapWelcomeOperationId(aid);
+        const entry = outbox.findByDedupeKey(aid, operationId);
+        if (!entry) {
+            const owner = getFirstStaticAgentOwner(aid);
+            if (!owner)
+                return false;
+            const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', owner, aid);
+            return hasMessageLogOperation(chatDir, operationId);
+        }
+        const agentConfig = loadAgent(aid);
+        if (!agentConfig || normalizeAgentLifecycle(agentConfig).lifecycle !== 'active') {
+            logger.info(`${this.logPrefix()} Post-bootstrap welcome prepared; waiting for lifecycle=active`);
+            return true;
         }
+        if (!this.connected || !this.client)
+            return true;
+        const sent = await this.withOutboxInFlight(entry, () => this.deliverTextEntry(entry), false);
+        if (sent)
+            outbox.remove(aid, entry.id);
+        return true;
     }
     // ── Event handlers ──────────────────────────────────────────
     /**
@@ -1439,12 +1448,21 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         if (!data || typeof data !== 'object')
             return;
         const msg = data;
+        // Claim before any payload extraction or command parsing. Retransmits may
+        // carry a new seq, but the application identity remains message_id.
+        const messageId = typeof msg.message_id === 'string' ? msg.message_id : '';
+        const seq = typeof msg.seq === 'number' ? msg.seq : undefined;
+        if (!this.claimInboundMessage('private', messageId, seq))
+            return;
         // SDK 0.5.* 移除了顶层 from/to/group_id/encrypted 等别名，统一从 msg.envelope.* 读取。
         // message_id / seq / payload / same_* 等仍是顶层独立字段，不在 envelope 内。
         const env = (msg.envelope && typeof msg.envelope === 'object') ? msg.envelope : {};
         const protectedHeaders = verifiedProtectedHeaders(msg, env);
         const fromAid = env.from ?? '';
         const payload = msg.payload ?? '';
+        const mentions = this.parsePayloadMentionsOrReject(payload, 'p2p.inbound', messageId, seq);
+        if (!mentions)
+            return;
         const causationRef = payload && typeof payload === 'object' && typeof payload._evolcore_causation_ref === 'string'
             ? payload._evolcore_causation_ref
             : undefined;
@@ -1458,15 +1476,19 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         const topicName = (typeof payload === 'object' && payload !== null)
             ? this.sanitizeTopicName(payload.topicName)
             : undefined;
-        const messageId = msg.message_id ?? '';
         const causation = consumeAunCausation(causationRef || messageId, fromAid, this._aid || this.config.aid)
             ?? (causationRef ? consumeAunCausation(messageId, fromAid, this._aid || this.config.aid) : undefined);
-        const seq = msg.seq;
+        const inboundType = (payload && typeof payload === 'object') ? payload.type : undefined;
+        // 终态错误只作为展示信号，不能进入 Agent，也不能被 observer 再次传播。
+        if (inboundType === 'error') {
+            this.acknowledgeImmediately(messageId, seq);
+            logger.info(`${this.logPrefix()} P2P dropped terminal error: from=${fromAid || 'unknown'} mid=${messageId}`);
+            return;
+        }
         // Observer forward (inbound)：在所有过滤之前转发原始明文 payload。
         // forwardInbound 内部排除 self-echo 与 from-owner。
         // 显式排除 observer.inject：它是 owner 对本 agent 的控制消息，不应镜像给观察者
         // （即便日后 from-owner 排除规则调整，也不会泄漏）。
-        const inboundType = (payload && typeof payload === 'object') ? payload.type : undefined;
         if (inboundType !== AUNChannel.INJECT_REQUEST_TYPE) {
             this.forwardInbound(msg);
         }
@@ -1482,10 +1504,13 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         const msgEncrypted = !!env.encrypted;
         if (!msgEncrypted)
             this.plaintextRecv++;
-        // Detect @mentions
-        const mentions = [];
-        if (this._aid && text.includes(`@${this._aid}`)) {
-            mentions.push(this._aid);
+        // Preserve structured mentions for the shared inbound message model.
+        // Text scanning remains only a rendering fallback and is not promoted to
+        // a structured @all decision.
+        if (mentions.length === 0 && this._aid && text.includes(`@${this._aid}`)) {
+            // Private channels historically exposed a self mention even when the
+            // sender omitted payload.mentions; keep that compatibility signal.
+            mentions.push({ aid: this._aid });
         }
         // Process attachments (顶层 + 嵌套在 merge.items / quote.quote 中的)
         const { finalText, images: inboundImages } = await this.processAttachments(payload, text, fromAid);
@@ -1507,8 +1532,10 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
             this.appendInboundPayloadJsonl(chatId, fromAid, messageId, msgEncrypted, false, logDescriptor, threadId);
             return;
         }
-        // menu.* 协议：自定义消息快速路径，需要原始 payload JSON 传递给 bridge
-        if (p2pPayloadType.startsWith('menu.')) {
+        // menu.* 与联系人本人状态查询：需要原始 payload JSON 传递给 bridge。
+        if (p2pPayloadType.startsWith('menu.')
+            || p2pPayloadType === AUNChannel.CONTACT_REQUEST_QUERY_TYPE
+            || p2pPayloadType === AUNChannel.CONTACT_REQUEST_SUBMIT_TYPE) {
             this.acknowledgeImmediately(messageId, seq);
             this.appendInboundPayloadJsonl(chatId, fromAid, messageId, msgEncrypted, false, logDescriptor, threadId);
             this.dispatchMessage({
@@ -1519,6 +1546,8 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
                 peerType: peerIdentity.type,
                 encrypted: msgEncrypted,
                 protectedHeaders,
+                mentions,
+                mentionAids: mentionEntryAids(mentions),
                 replyContext: this.buildGroupReplyContext(threadId, fromAid, msgEncrypted, messageId),
                 msgType: logDescriptor.msgType,
                 payloadType: logDescriptor.payloadType,
@@ -1547,6 +1576,8 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
                 peerName: displayName || undefined,
                 peerType: peerIdentity.type,
                 encrypted: msgEncrypted,
+                mentions,
+                mentionAids: mentionEntryAids(mentions),
                 msgType: logDescriptor.msgType,
                 payloadType: logDescriptor.payloadType,
                 payloadSummary: logDescriptor.payloadSummary,
@@ -1606,28 +1637,38 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         if (!data || typeof data !== 'object')
             return;
         const msg = data;
+        // Deduplicate at the adapter boundary, before mention/slash routing.
+        const messageId = typeof msg.message_id === 'string' ? msg.message_id : '';
+        const seq = typeof msg.seq === 'number' ? msg.seq : undefined;
+        if (!this.claimInboundMessage('group', messageId, seq))
+            return;
         // SDK 0.5.* 移除了顶层 from/sender_aid/group_id/encrypted 等别名，统一从 msg.envelope.* 读取。
-        // message_id / seq / payload / same_* / dispatch_mode 等仍是顶层独立字段，不在 envelope 内。
+        // message_id / seq / payload / same_* / mention_mode 等仍是顶层独立字段，不在 envelope 内。
         const env = (msg.envelope && typeof msg.envelope === 'object') ? msg.envelope : {};
         const protectedHeaders = verifiedProtectedHeaders(msg, env);
         const groupId = env.group_id ?? '';
         const senderAid = env.from ?? '';
         const payload = msg.payload ?? '';
+        const payloadMentionEntries = this.parsePayloadMentionsOrReject(payload, 'group.inbound', messageId, seq);
+        if (!payloadMentionEntries)
+            return;
+        const payloadMentionAids = mentionEntryAids(payloadMentionEntries);
         const logDescriptor = classifyAunPayloadForLog(payload);
         const text = this.extractTextPayload(payload, groupId, senderAid);
         const threadId = typeof payload === 'object' && payload !== null ? payload.thread_id : undefined;
         const topicName = (typeof payload === 'object' && payload !== null)
             ? this.sanitizeTopicName(payload.topicName)
             : undefined;
-        const messageId = msg.message_id ?? '';
-        const seq = msg.seq;
+        const inboundType = (payload && typeof payload === 'object') ? payload.type : undefined;
+        // 终态错误只作为展示信号，不能进入 Agent，也不能被 observer 再次传播。
+        if (inboundType === 'error') {
+            this.acknowledgeImmediately(messageId, seq);
+            logger.info(`${this.logPrefix()} Group dropped terminal error: group=${groupId || 'unknown'} sender=${senderAid || 'unknown'} mid=${messageId}`);
+            return;
+        }
         // Observer forward (inbound)：群聊消息在所有过滤之前转发原始明文 payload。
         // forwardInbound 内部排除 self-echo 与 from-owner。
         this.forwardInbound(msg);
-        // Extract structured mentions from payload (e.g. payload.mentions: ["evolai.agentid.pub"])
-        const payloadMentions = Array.isArray(payload?.mentions)
-            ? payload.mentions.filter((m) => typeof m === 'string')
-            : [];
         logger.debug(`${this.logPrefix()}[DIAG-GRP] full_msg=${JSON.stringify(msg).substring(0, 500)}`);
         if (!groupId || !senderAid) {
             this.acknowledgeImmediately(messageId, seq);
@@ -1699,6 +1740,10 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
                     chatType: 'group', messageId, seq, groupId,
                     encrypted: menuEncrypted,
                     protectedHeaders,
+                    mentions: payloadMentionEntries,
+                    mentionAids: payloadMentionAids,
+                    isMentioned: hasMentionAll(payloadMentionEntries)
+                        || (!!this._aid && mentionEntryTargets(payloadMentionEntries).includes(this._aid)),
                     replyContext: this.buildGroupReplyContext(threadId, senderAid, menuEncrypted, messageId, payloadObj?.chatmode, topicName),
                     msgType: logDescriptor.msgType,
                     payloadType: logDescriptor.payloadType,
@@ -1718,17 +1763,17 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         const msgEncrypted = !!env.encrypted;
         if (!msgEncrypted)
             this.plaintextRecv++;
-        // dispatch_mode: 本地设置优先，fallback 到服务器参数
-        const serverDispatchMode = msg.dispatch_mode ?? payload?.dispatch_mode ?? 'mention';
-        const localDispatchMode = this.dispatchModeResolver
-            ? await this.dispatchModeResolver(groupId).catch(() => undefined)
-            : undefined;
-        const dispatchMode = localDispatchMode || serverDispatchMode;
-        const mentionedSelf = this._aid
-            ? (this.hasExplicitMention(text, this._aid) || payloadMentions.includes(this._aid))
-            : false;
-        // @all 仅认结构化 mentions（payload.mentions），不扫描正文 — 避免引述性 "@all" 误判
-        const mentionedAll = payloadMentions.includes('all');
+        // mention_mode 是唯一的服务端群 @ 策略字段；缺失/非法时使用协议内置默认 disabled。
+        const serverMentionMode = normalizeMentionMode(msg.mention_mode)
+            ?? normalizeMentionMode(payload?.mention_mode)
+            ?? 'disabled';
+        const localMentionMode = normalizeMentionMode(this.mentionModeResolver
+            ? await this.mentionModeResolver(groupId).catch(() => undefined)
+            : undefined);
+        const mentionMode = localMentionMode ?? serverMentionMode;
+        const mentionedSelf = !!this._aid && mentionEntryTargets(payloadMentionEntries).includes(this._aid);
+        // @all 仅认结构化 mentions（payload.mentions），不扫描正文，避免引述性 "@all" 误判。
+        const mentionedAll = hasMentionAll(payloadMentionEntries);
         // Echo 机制优先于 mention 过滤：消息第一行包含 echo 时触发
         // 包含 [EvolCore.xxx] trace 说明已被本系统处理过，是回声的回声，丢弃防止链式爆炸
         const firstLineGroup = text.split('\n')[0] || '';
@@ -1763,16 +1808,17 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         }
         else {
             // 非 echo 消息：mention 标记（不再过滤，交给响应模式决定）
-            // 命令豁免 broadcast：slash 命令在任何 dispatchMode 下都强制走 mention 语义，
+            // slash 命令在任何 mentionMode 下都强制走 mention-only 语义
             // 即必须 @ 本 agent（或 @all）才处理，避免广播群里一条命令被全部 agent 各自执行。
-            const enforceMention = dispatchMode === 'mention' || isCommandMsg;
+            const enforceMention = mentionMode === 'mention-only' || isCommandMsg;
             const isMentioned = mentionedSelf || mentionedAll;
             // 过滤逻辑下移到响应层：这里只标记，不过滤
             // 但为了保持现有行为兼容（避免大量未 @ 消息涌入），暂时保留过滤
             // TODO: Phase 6 实施 selective-response 模式后，移除此过滤，只保留 isMentioned 标记
             if (enforceMention && !isMentioned && !isOwnHandoff) {
                 this.acknowledgeImmediately(messageId, seq);
-                logger.info(`${this.logPrefix()} Group dropped: unmentioned (group=${groupId} sender=${senderAid} mid=${messageId} mode=${dispatchMode} isCommand=${isCommandMsg} textPreview=${JSON.stringify(text.slice(0, 80))})`);
+                this.appendInboundPayloadJsonl(groupId, senderAid, messageId, msgEncrypted, true, logDescriptor, threadId);
+                logger.info(`${this.logPrefix()} Group dropped: unmentioned (group=${groupId} sender=${senderAid} mid=${messageId} mentionMode=${mentionMode} isCommand=${isCommandMsg} textPreview=${JSON.stringify(text.slice(0, 80))})`);
                 return;
             }
         }
@@ -1790,9 +1836,7 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
             logger.debug(`${this.logPrefix()} Group dropped: empty text and no attachments (group=${groupId} sender=${senderAid} mid=${messageId})`);
             return;
         }
-        const mentions = mentionedAll
-            ? ['all']
-            : mentionedSelf && this._aid ? [this._aid] : [];
+        const mentions = payloadMentionEntries;
         // Process attachments
         const { finalText, images: inboundImages } = await this.processAttachments(payload, strippedText, groupId, rawAttachments);
         const selfAgentDir = path.join(resolvePaths().agentsDir, this.config.aid);
@@ -1803,27 +1847,27 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         const payloadType = (payload && typeof payload === 'object') ? payload.type ?? '' : '';
         const textMentionSelf = this._aid ? this.hasExplicitMention(text, this._aid) : false;
         const textMentionAll = this.hasExplicitMention(text, 'all');
-        const structMentionSelf = this._aid ? payloadMentions.includes(this._aid) : false;
-        const structMentionAll = payloadMentions.includes('all');
+        const structMentionSelf = this._aid ? payloadMentionAids.includes(this._aid) : false;
+        const structMentionAll = mentionedAll;
         const reason = isOwnHandoff
             ? 'handoff.self'
             : mentionedAll
                 ? 'mention.all(struct)'
                 : mentionedSelf
                     ? (structMentionSelf ? 'mention.self(struct)' : 'mention.self(text)')
-                    : `${dispatchMode}.no-mention`;
-        logger.info(`${this.logPrefix()} Group dispatch decision: mid=${messageId} group=${groupId} sender=${shortAid}(${displayName}) peerType=${peerIdentity.type} payloadType=${payloadType} dispatchMode=${dispatchMode} reason=${reason} structMentions=${JSON.stringify(payloadMentions)} textMentionSelf=${textMentionSelf} textMentionAll=${textMentionAll} structMentionSelf=${structMentionSelf} structMentionAll=${structMentionAll} encrypt=${msgEncrypted} textPreview=${JSON.stringify(text.slice(0, 80))}`);
+                    : `${mentionMode}.no-mention`;
+        logger.info(`${this.logPrefix()} Group mention decision: mid=${messageId} group=${groupId} sender=${shortAid}(${displayName}) peerType=${peerIdentity.type} payloadType=${payloadType} mentionMode=${mentionMode} reason=${reason} structMentions=${JSON.stringify(payloadMentionEntries)} textMentionSelf=${textMentionSelf} textMentionAll=${textMentionAll} structMentionSelf=${structMentionSelf} structMentionAll=${structMentionAll} encrypt=${msgEncrypted} textPreview=${JSON.stringify(text.slice(0, 80))}`);
         // action_card_reply 已在 extractTextPayload 中消费，不分发给 agent
         if (payloadType === 'action_card_reply')
             return;
         const msgChatmode = (payload && typeof payload === 'object') ? payload.chatmode : undefined;
-        logger.info(`${this.logPrefix()} Group dispatched: group=${groupId} sender=${shortAid}(${displayName}) mode=${dispatchMode} mid=${messageId} chatmode=${msgChatmode ?? 'none'} text=${finalText.slice(0, 60)}`);
+        logger.info(`${this.logPrefix()} Group dispatched: group=${groupId} sender=${shortAid}(${displayName}) mentionMode=${mentionMode} mid=${messageId} chatmode=${msgChatmode ?? 'none'} text=${finalText.slice(0, 60)}`);
         appendAidEvent({ ts: Date.now(), iso: new Date().toISOString(), event: 'message_in', aid: this.config.aid, from: senderAid, msgId: messageId, kind: 'text', len: finalText.length, groupId });
         this.aidStatsCollector?.recordInbound(this.config.aid, senderAid, Buffer.byteLength(finalText, 'utf-8'), finalText, payloadType === 'event', msgEncrypted, msgChatmode, payloadType === 'event' ? 'notify' : 'send');
         // 渲染用完整 @ 列表：结构化 payload.mentions + 正文 @aid 兜底，去重（含 self / "all"）。
         // 与上面用于过滤/回复的精简 mentions 独立——这份不丢任何被 @ 的 AID。
         const renderMentionAids = Array.from(new Set([
-            ...payloadMentions,
+            ...payloadMentionAids,
             ...this.extractMentionAidsFromText(text),
         ]));
         this.dispatchMessage({
@@ -1846,7 +1890,7 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
             source: isOwnHandoff ? 'handoff' : undefined,
             encrypted: msgEncrypted,
             replyContext: this.buildGroupReplyContext(threadId, senderAid, msgEncrypted, messageId, msgChatmode, topicName),
-            dispatchMode: serverDispatchMode,
+            mentionMode: serverMentionMode,
             images: inboundImages.length > 0 ? inboundImages : undefined,
             msgType: logDescriptor.msgType,
             payloadType: logDescriptor.payloadType,
@@ -1855,17 +1899,9 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         });
     }
     dispatchMessage(event) {
-        // Dedup
-        if (event.messageId) {
-            if (this.seenMessages.has(event.messageId))
-                return;
-            this.seenMessages.set(event.messageId, Date.now());
-            setTimeout(() => this.seenMessages.delete(event.messageId), 5 * 60 * 1000);
-            // Track seq for acknowledge
-            if (event.seq != null) {
-                this.messageSeqMap.set(event.messageId, event.seq);
-            }
-        }
+        // Inbound events are claimed in handleIncomingPrivateMessage / GroupMessage
+        // before parsing. Keeping dedupe there prevents duplicate slash commands
+        // from reaching routing and mention policy code.
         // Echo 机制：消息第一行包含 "echo"（不区分大小写）且原始内容 ≤10 字符时，直接回声
         // 包含 [EvolCore.xxx] trace 说明已被本系统处理过，是回声的回声，丢弃防止链式爆炸
         const firstLine = event.text.split('\n')[0] || '';
@@ -1897,7 +1933,6 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         }
         if (!this.messageHandler)
             return;
-        const mentionObjects = event.mentions?.map(aid => ({ userId: aid }));
         // Use caller-supplied replyContext (group path builds mentionUserIds);
         // fall back to simple threadId-only context for private messages
         let replyContext = event.replyContext;
@@ -1922,12 +1957,12 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
             messageId: event.messageId,
             causation: event.causation,
             threadId: event.threadId,
-            mentions: mentionObjects,
+            mentions: event.mentions,
             mentionAids: event.mentionAids,
             isMentioned: event.isMentioned, // ← 新增：传递 isMentioned 标记
             replyContext,
             source: event.source,
-            dispatchMode: event.dispatchMode,
+            mentionMode: event.mentionMode,
             images: event.images,
             msgType: event.msgType,
             payloadType: event.payloadType,
@@ -2445,31 +2480,12 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
     // ── Public API (same interface as before) ───────────────────
     setEventBus(bus) {
         // 重新订阅前先解掉旧的——避免 reload/重连后 listener 累积
-        if (this.eventBus && this.ownerBoundHandler && typeof this.eventBus.unsubscribe === 'function') {
-            this.eventBus.unsubscribe('channel:owner-bound', this.ownerBoundHandler);
-        }
         if (this.eventBus && this.queuedHandler && typeof this.eventBus.unsubscribe === 'function') {
             this.eventBus.unsubscribe('task:queued', this.queuedHandler);
         }
-        this.ownerBoundHandler = null;
         this.queuedHandler = null;
         this.eventBus = bus;
         if (bus && typeof bus.subscribe === 'function') {
-            const handler = (event) => {
-                if (event.channelName !== this.config.channelName)
-                    return;
-                // sendWelcomeMessage 内部读 config.json 中最新的 owners[0]，并幂等检查 initialized
-                // 自身做 client 健康检查后再发
-                if (!this.client) {
-                    logger.info(`${this.logPrefix()} owner-bound event received but client not connected; skip welcome retry`);
-                    return;
-                }
-                this.sendWelcomeMessage().catch(e => {
-                    logger.warn(`${this.logPrefix()} owner-bound welcome retry failed: ${e}`);
-                });
-            };
-            bus.subscribe('channel:owner-bound', handler);
-            this.ownerBoundHandler = handler;
             const queuedHandler = (event) => {
                 if (event.channel !== this.config.channelName)
                     return;
@@ -2485,8 +2501,8 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
     onMessage(handler) {
         this.messageHandler = handler;
     }
-    setDispatchModeResolver(resolver) {
-        this.dispatchModeResolver = resolver;
+    setMentionModeResolver(resolver) {
+        this.mentionModeResolver = resolver;
     }
     onRecall(handler) {
         this.recallHandler = handler;
@@ -2575,6 +2591,21 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
             finalPayload.chatmode = context.metadata.chatmode;
         return finalPayload;
     }
+    /**
+     * Validate the AUN-specific structured field before it crosses the durable
+     * send boundary. Return a copy when mentions are present so callers do not
+     * retain an unvalidated array reference.
+     */
+    normalizeAunPayloadMentions(payload) {
+        if (!payload || typeof payload !== 'object' || Array.isArray(payload))
+            return payload;
+        if (!Object.prototype.hasOwnProperty.call(payload, 'mentions'))
+            return payload;
+        return {
+            ...payload,
+            mentions: normalizeAunMentionEntries(payload.mentions),
+        };
+    }
     rememberInvalidatedInteraction(interactionId, reason) {
         this.invalidatedInteractions.set(interactionId, reason);
         const timer = setTimeout(() => this.invalidatedInteractions.delete(interactionId), 24 * 60 * 60 * 1000);
@@ -2666,6 +2697,16 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         }
     }
     async sendAunPayload(channelId, payload, context, label) {
+        let normalizedPayload;
+        try {
+            normalizedPayload = this.normalizeAunPayloadMentions(payload);
+        }
+        catch (error) {
+            const detail = error instanceof Error ? error.message : String(error);
+            const code = error?.code ?? 'INVALID_MENTION_SCHEMA';
+            logger.error(`${this.logPrefix()} Dropped durable AUN payload: invalid payload.mentions (${detail}) code=${code} channel=${channelId}`);
+            return { ok: false, discarded: true };
+        }
         if (!this.client || !this.connected)
             return { ok: false };
         const isGroup = this.isGroupId(channelId);
@@ -2680,8 +2721,8 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         if (causationRef && causation)
             registerAunCausation(causationRef, this.config.aid, targetAid, causation);
         const payloadWithCausationRef = causationRef
-            ? { ...payload, _evolcore_causation_ref: causationRef }
-            : payload;
+            ? { ...normalizedPayload, _evolcore_causation_ref: causationRef }
+            : normalizedPayload;
         // Truncate payload if too large (AUN SDK limit: 1MB)
         const truncatedPayload = this.truncatePayloadIfNeeded(payloadWithCausationRef, label);
         const params = { payload: truncatedPayload, encrypt };
@@ -2756,6 +2797,9 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         this.forwardOutbound(result);
     }
     async sendContentPayload(channelId, payload, opts) {
+        // Validate the caller's raw mentions before any early-return policy (such
+        // as a cancelled interaction) can hide a malformed wire payload.
+        const validatedPayload = this.normalizeAunPayloadMentions(payload);
         const interactionId = opts.postSend?.type === 'register_interaction_card'
             ? opts.postSend.requestId
             : undefined;
@@ -2763,7 +2807,12 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
             logger.info(`${this.logPrefix()} Dropped invalidated interaction before durable enqueue: request=${interactionId}`);
             return {};
         }
-        const finalPayload = this.applyReplyContextToPayload(payload, opts.context);
+        // Validate before write-ahead enqueue. Invalid AUN payloads must not be
+        // hidden in the outbox and emitted later after a reconnect.
+        // Validate the caller's raw mentions before deep-cleaning: that helper
+        // intentionally removes undefined array elements, which would otherwise
+        // turn malformed `mentions: [undefined]` into an apparently valid `[]`.
+        const finalPayload = this.normalizeAunPayloadMentions(this.applyReplyContextToPayload(validatedPayload, opts.context));
         const logText = opts.logText ?? this.payloadLogText(finalPayload, opts.contentKind);
         const entry = outbox.enqueue(this.config.aid, {
             channelId,
@@ -2923,17 +2972,48 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         }
         let finalText = text;
         this.sentCount.set(channelId, (this.sentCount.get(channelId) || 0) + 1);
-        if (this.isGroupId(channelId) && context?.peerId) {
-            if (!finalText.includes(`@${context.peerId}`)) {
-                finalText = `@${context.peerId} ` + finalText;
+        if (this.isGroupId(channelId)) {
+            const requestedMentions = Array.from(new Set((context?.mentionUserIds ?? [])
+                .filter((id) => typeof id === 'string' && id.trim().length > 0)
+                .map(id => id.trim())));
+            // AUN's textual representation gives @all precedence over individual
+            // targets, matching the cross-channel mention contract.
+            const textMentionsAll = this.hasExplicitMention(finalText, 'all');
+            const mentionTargets = requestedMentions.includes('all') || textMentionsAll
+                ? ['all']
+                : requestedMentions;
+            if (mentionTargets.length > 0) {
+                for (const target of mentionTargets.reverse()) {
+                    if (!this.hasExplicitMention(finalText, target)) {
+                        finalText = `@${target} ` + finalText;
+                    }
+                }
+            }
+            else if (context?.peerId && !context.suppressPeerMention && !textMentionsAll) {
+                if (!this.hasExplicitMention(finalText, context.peerId)) {
+                    finalText = `@${context.peerId} ` + finalText;
+                }
             }
         }
+        const operationId = typeof context?.metadata?.operationId === 'string'
+            ? context.metadata.operationId
+            : undefined;
+        if (operationId) {
+            const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', channelId, this.config.aid);
+            if (hasMessageLogOperation(chatDir, operationId))
+                return;
+        }
         // Write-ahead: persist to outbox before attempting send
         const entry = outbox.enqueue(this.config.aid, {
             channelId,
+            dedupeKey: operationId,
+            critical: context?.metadata?.criticalDelivery === true,
             type: 'text',
             text: finalText,
             context,
+            ttl: typeof context?.metadata?.outboxTtl === 'number'
+                ? context.metadata.outboxTtl
+                : undefined,
         });
         logger.debug(`${this.logPrefix()} Outbox enqueued: id=${entry.id} channel=${channelId} text=${finalText.slice(0, 40)}`);
         // 积压深度告警：outbox 待发条目累积说明发送速度跟不上，回复将出现明显延迟。
@@ -2956,16 +3036,27 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
     }
     /** Daemon-side transport for `ec msg send` running inside an agent task. */
     async sendDaemonMsg(args) {
-        if (!this.connected || !this.client) {
-            return { ok: false, error: 'AUN channel is not connected', code: 'AUN_NOT_CONNECTED' };
-        }
         if (!args.to || this.isGroupId(args.to)) {
             return { ok: false, error: 'aun-msg-send only supports private AID targets', code: 'UNSUPPORTED_TARGET' };
         }
         if (!args.payload || typeof args.payload !== 'object' || Array.isArray(args.payload)) {
             return { ok: false, error: 'payload must be an object', code: 'INVALID_PAYLOAD' };
         }
-        const finalPayload = this.stripUndefinedDeep({ ...args.payload });
+        let finalPayload;
+        try {
+            const validatedPayload = this.normalizeAunPayloadMentions(args.payload);
+            finalPayload = this.stripUndefinedDeep(validatedPayload);
+        }
+        catch (e) {
+            return {
+                ok: false,
+                error: e?.message || String(e),
+                code: e?.code,
+            };
+        }
+        if (!this.connected || !this.client) {
+            return { ok: false, error: 'AUN channel is not connected', code: 'AUN_NOT_CONNECTED' };
+        }
         const info = await this.fetchPeerInfo(args.to);
         const chatmode = info.type === 'human' ? 'interactive' : 'proactive';
         if (!finalPayload.chatmode)
@@ -3070,20 +3161,34 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
     }
     /** Daemon-side transport for `ec group send` running inside an agent task. */
     async sendDaemonGroupMsg(args) {
-        if (!this.connected || !this.client) {
-            return { ok: false, error: 'AUN channel is not connected', code: 'AUN_NOT_CONNECTED' };
-        }
         if (!args.groupId || !this.isGroupId(args.groupId)) {
             return { ok: false, error: 'aun-msg-send requires a valid group target', code: 'UNSUPPORTED_TARGET' };
         }
         if (!args.payload || typeof args.payload !== 'object' || Array.isArray(args.payload)) {
             return { ok: false, error: 'payload must be an object', code: 'INVALID_PAYLOAD' };
         }
-        const finalPayload = this.stripUndefinedDeep({ ...args.payload });
-        if (args.mentions?.length)
-            finalPayload.mentions = args.mentions;
-        const encrypt = args.encrypt ?? this.shouldEncrypt(args.groupId);
         try {
+            // Validate before deep-cleaning so undefined entries cannot be silently
+            // removed from a malformed mentions array.
+            const validatedPayload = this.normalizeAunPayloadMentions(args.payload);
+            const finalPayload = this.stripUndefinedDeep(validatedPayload);
+            const payloadMentions = Object.prototype.hasOwnProperty.call(finalPayload, 'mentions')
+                ? normalizeAunMentionEntries(finalPayload.mentions)
+                : undefined;
+            if (args.mentions !== undefined) {
+                const normalizedMentions = normalizeAunMentionEntries(args.mentions);
+                if (normalizedMentions.length > 0)
+                    finalPayload.mentions = normalizedMentions;
+                else if (payloadMentions !== undefined)
+                    finalPayload.mentions = payloadMentions;
+            }
+            else if (payloadMentions !== undefined) {
+                finalPayload.mentions = payloadMentions;
+            }
+            if (!this.connected || !this.client) {
+                return { ok: false, error: 'AUN channel is not connected', code: 'AUN_NOT_CONNECTED' };
+            }
+            const encrypt = args.encrypt ?? this.shouldEncrypt(args.groupId);
             const result = await this.callAndTrace('group.send', {
                 group_id: args.groupId,
                 payload: this.truncatePayloadIfNeeded(finalPayload, 'group-send-ipc'),
@@ -3187,11 +3292,25 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         const channelId = entry.channelId;
         const finalText = entry.text;
         const context = entry.context;
+        const operationId = entry.dedupeKey
+            || (typeof context?.metadata?.operationId === 'string' ? context.metadata.operationId : undefined);
+        if (operationId) {
+            const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', channelId, this.config.aid);
+            if (hasMessageLogOperation(chatDir, operationId)) {
+                logger.info(`${this.logPrefix()} Durable operation already logged; skipping duplicate send: ${operationId}`);
+                return true;
+            }
+            if (operationId === postBootstrapWelcomeOperationId(this.config.aid)) {
+                const agentConfig = loadAgent(this.config.aid);
+                if (!agentConfig || normalizeAgentLifecycle(agentConfig).lifecycle !== 'active')
+                    return false;
+            }
+        }
         // 从 context.metadata.source 读取 source，默认为 'daemon'
         const source = context?.metadata?.source ?? 'daemon';
         const payload = { type: 'text', text: finalText };
         if (this.isGroupId(channelId)) {
-            const extracted = this.extractMentionAidsFromText(finalText);
+            const extracted = this.extractMentionEntriesFromText(finalText);
             if (extracted.length > 0)
                 payload.mentions = extracted;
         }
@@ -3215,11 +3334,25 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         logger.info(`${this.logPrefix()} deliverTextEntry: channelId=${channelId} thread_id=${payload.thread_id ?? 'none'} task_id=${payload.task_id ?? 'none'} chatmode=${payload.chatmode ?? 'none'} source=${source} textLen=${finalText.length}`);
         const isGroup = this.isGroupId(channelId);
         const targetAid = channelId;
+        if (operationId && entry.deliveryReceipt) {
+            this.appendOutboundJsonl(channelId, {
+                ...classifyAunPayloadForLog(payload),
+                msgId: entry.deliveryReceipt.messageId,
+                encrypt: entry.deliveryReceipt.encrypt,
+                context,
+                isGroup,
+                source,
+                transport: entry.deliveryReceipt.transport,
+            });
+            return true;
+        }
         const encryptTarget = isGroup ? channelId : targetAid;
         const encrypt = context?.metadata?.encrypted != null
             ? !!(context.metadata.encrypted)
             : this.shouldEncrypt(encryptTarget);
         const params = { payload, encrypt };
+        if (context?.metadata?.persistRequired === true)
+            params.persist_required = true;
         try {
             if (isGroup) {
                 params.group_id = channelId;
@@ -3237,6 +3370,7 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
                 }
                 else {
                     this.logAunSendAccepted('group.send', channelId, mid, encrypt, result, finalText);
+                    this.checkpointTextDelivery(entry, mid, encrypt, result);
                     appendAidEvent({ ts: Date.now(), iso: new Date().toISOString(), event: 'message_out', aid: this.config.aid, to: channelId, msgId: mid, kind: 'text', len: finalText.length, groupId: channelId });
                     const statsContext = await this.groupStatsContext(channelId);
                     this.aidStatsCollector?.recordOutbound(this.config.aid, channelId, Buffer.byteLength(finalText, 'utf-8'), finalText, false, encrypt, context?.metadata?.chatmode, 'send', statsContext);
@@ -3257,6 +3391,7 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
                 }
                 else {
                     this.logAunSendAccepted('message.send', this.peerLabel(targetAid), result.message_id, encrypt, result, finalText);
+                    this.checkpointTextDelivery(entry, result.message_id, encrypt, result);
                     const causation = normalizeCausation(context?.metadata?.causation);
                     if (causation) {
                         registerAunCausation(result.message_id, this.config.aid, targetAid, causation);
@@ -3292,6 +3427,7 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
                             logger.warn(`${this.logPrefix()} group.send fallback returned no message_id: ${JSON.stringify(result)}`);
                             return false;
                         }
+                        this.checkpointTextDelivery(entry, mid, false, result);
                         appendAidEvent({ ts: Date.now(), iso: new Date().toISOString(), event: 'message_out', aid: this.config.aid, to: channelId, msgId: mid, kind: 'text', len: finalText.length, groupId: channelId });
                         const statsContext = await this.groupStatsContext(channelId);
                         this.aidStatsCollector?.recordOutbound(this.config.aid, channelId, Buffer.byteLength(finalText, 'utf-8'), finalText, false, false, context?.metadata?.chatmode, 'send', statsContext);
@@ -3310,6 +3446,7 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
                             logger.warn(`${this.logPrefix()} message.send fallback returned no message_id: ${JSON.stringify(result)}`);
                             return false;
                         }
+                        this.checkpointTextDelivery(entry, mid, false, result);
                         const causation = normalizeCausation(context?.metadata?.causation);
                         if (causation) {
                             registerAunCausation(mid, this.config.aid, targetAid, causation);
@@ -3341,6 +3478,18 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
             }
         }
     }
+    checkpointTextDelivery(entry, messageId, encrypt, result) {
+        if (!entry.dedupeKey)
+            return;
+        entry.deliveryReceipt = {
+            messageId,
+            encrypt,
+            transport: this.sendReceiptFromResult(result),
+        };
+        if (!outbox.replace(this.config.aid, entry)) {
+            logger.warn(`${this.logPrefix()} Failed to checkpoint durable operation receipt: ${entry.dedupeKey}`);
+        }
+    }
     async deliverPayloadEntry(entry) {
         const interactionId = entry.postSend?.type === 'register_interaction_card'
             ? entry.postSend.requestId
@@ -3360,6 +3509,10 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         const context = entry.context;
         logger.info(`${this.logPrefix()} deliverPayloadEntry: id=${entry.id} kind=${contentKind ?? payload.type ?? 'payload'} channelId=${channelId} thread_id=${payload.thread_id ?? 'none'} task_id=${payload.task_id ?? 'none'} textLen=${logText.length}`);
         const sent = await this.sendAunPayload(channelId, payload, context, `${contentKind ?? payload.type ?? 'payload'}`);
+        if (sent.discarded) {
+            logger.warn(`${this.logPrefix()} Removed malformed durable payload from outbox: id=${entry.id} channel=${channelId}`);
+            return { ok: true, discarded: true };
+        }
         if (!sent.ok || !sent.messageId)
             return sent;
         const isGroup = this.isGroupId(channelId);
@@ -3371,13 +3524,16 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
     }
     /** 有效会话正文写入 messages.jsonl（message.send/group.send 成功后调用）。 */
     appendOutboundJsonl(channelId, descriptor) {
+        const operationId = typeof descriptor.context?.metadata?.operationId === 'string'
+            ? descriptor.context.metadata.operationId
+            : undefined;
         try {
             const { content, msgType, payloadType, payloadSummary, msgId, encrypt, transport, context, isGroup, source = 'daemon' } = descriptor;
             const sessionsDir = resolvePaths().sessionsDir;
             const selfAID = this.config.aid;
             const chatDir = chatDirPath(sessionsDir, 'aun', channelId, selfAID);
             const chatmode = context?.metadata?.chatmode;
-            appendMessageLog(chatDir, buildOutboundEntry({
+            const entry = buildOutboundEntry({
                 from: selfAID,
                 to: channelId,
                 sessionId: context?.sessionId,
@@ -3397,9 +3553,16 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
                 payloadType,
                 payloadSummary,
                 source,
-            }));
+                operationId,
+            });
+            if (operationId)
+                appendMessageLogStrict(chatDir, entry);
+            else
+                appendMessageLog(chatDir, entry);
         }
         catch (e) {
+            if (operationId)
+                throw e;
             logger.debug(`${this.logPrefix()} appendOutboundJsonl failed: ${e}`);
         }
     }
@@ -3412,13 +3575,14 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
      * 存储键：group_id/peer_aid + sender_aid + context.type + context.id
      */
     async sendThought(channelId, taskId, payload, context) {
-        if (!this.connected || !this.client)
-            return;
         if (!taskId)
             return;
+        const validatedPayload = this.normalizeAunPayloadMentions(payload);
+        const finalPayload = this.normalizeAunPayloadMentions(this.stripUndefinedDeep(validatedPayload));
+        if (!this.connected || !this.client)
+            return;
         // 私聊 channelId = 对端 AID（不含 device_id）
         const targetId = channelId;
-        const finalPayload = this.stripUndefinedDeep(payload);
         const encrypt = context?.metadata?.encrypted != null
             ? !!(context.metadata.encrypted)
             : this.shouldEncrypt(targetId);
@@ -3488,6 +3652,10 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
     }
     /** 发送结构化 AUN payload；transient 协议载荷不写本地 messages.jsonl。 */
     async sendStructured(channelId, payload, context) {
+        // Validate before checking connection state so malformed producer payloads
+        // are reported deterministically instead of being hidden by a disconnect.
+        const validatedPayload = this.normalizeAunPayloadMentions(payload);
+        const finalPayload = this.stripUndefinedDeep(validatedPayload);
         if (!this.connected || !this.client)
             return null;
         const isGroup = this.isGroupId(channelId);
@@ -3496,7 +3664,6 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         const encrypt = context?.metadata?.encrypted != null
             ? !!(context.metadata.encrypted)
             : this.shouldEncrypt(encryptTarget);
-        const finalPayload = this.stripUndefinedDeep({ ...payload });
         if (context?.threadId && !finalPayload.thread_id)
             finalPayload.thread_id = context.threadId;
         if (context?.replyToMessageId && !finalPayload.ref_message_id)
@@ -4233,11 +4400,30 @@ export class AUNChannelPlugin {
                         return;
                     }
                     case 'system.error': {
-                        await channel.sendMessage(channelId, payload.text, replyCtx);
+                        const errorPayload = {
+                            type: 'error',
+                            ...taskBase(),
+                            subtype: payload.subtype,
+                            text: payload.text,
+                            message: payload.text,
+                            user_message: payload.text,
+                            recoverable: payload.recoverable === true,
+                            terminal: payload.recoverable !== true,
+                        };
+                        await channel.sendReliableStructured(channelId, errorPayload, { ...(replyCtx ?? {}), suppressPeerMention: true }, payload.text);
                         return;
                     }
                     case 'result.error': {
-                        await channel.sendMessage(channelId, payload.text, replyCtx);
+                        const errorPayload = {
+                            type: 'error',
+                            ...taskBase(),
+                            reason: payload.reason,
+                            text: payload.text,
+                            message: payload.text,
+                            user_message: payload.text,
+                            terminal: true,
+                        };
+                        await channel.sendReliableStructured(channelId, errorPayload, { ...(replyCtx ?? {}), suppressPeerMention: true }, payload.text);
                         return;
                     }
                     case 'result.file': {
@@ -4435,15 +4621,12 @@ export class AUNChannelPlugin {
                         });
                     });
                 }
-                if (typeof channel.setDispatchModeResolver === 'function') {
-                    channel.setDispatchModeResolver(async (channelId) => {
-                        // 配置层用 mentionMode（mention-only/disabled），翻译成 AUN 协议
-                        // dispatch_mode（mention/broadcast）；未设值返回 undefined，回退服务端下发值。
-                        const mentionMode = resolveEffective({
+                if (typeof channel.setMentionModeResolver === 'function') {
+                    channel.setMentionModeResolver(async (channelId) => {
+                        return resolveEffective({
                             self: aid,
                             peerKey: formatPeerKey('aun', channelId),
                         }, { cache: true }).mentionMode;
-                        return mentionModeToDispatch(mentionMode);
                     });
                 }
             },