evolcore 0.0.12 → 0.0.14

package/dist/core/command/menu-handler.js

@@ -6,7 +6,7 @@ import { hasModelSwitcher } from '../../agents/runner-types.js';
 import { getCodexEfforts } from '../../agents/codex-runner.js';
 import { execCodexCliSync, resolveCodexCliPath } from '../../utils/codex-cli.js';
 import { resolvePaths, getPackageRoot, daemonControlDir } from '../../paths.js';
-import { buildEnvelope } from '../message/message-utils.js';
+import { buildEnvelope, isDeliveryTarget, isDeliveryTargetForChannel, replyContextFromSession } from '../message/message-utils.js';
 import path from 'path';
 import fs from 'fs';
 import os from 'os';
@@ -28,7 +28,7 @@ import { normalizeCliArgv, parseCliIntent, parseLegacyCliCommand, validateCliArg
 import { auditCommandAuthorization, hashArgv } from '../auth/authorization-audit.js';
 import { authorizeOperation, buildAuthSubject } from '../auth/auth-gateway.js';
 import { evaluateRoleOperationCapability } from '../auth/operation-authorizer.js';
-import { splitConfigBatchGetArgv } from '../../config/config-batch-get.js';
+import { splitConfigBatchGetArgv } from '../../cli/cli-argv.js';
 import { chatmodeFieldForPeer, resolveChatModeForField } from '../message/peer-mode.js';
 import { PUBLIC_PERMISSION_MODES } from '../permission/mode.js';
 import { resolveRuntimePermissionMode, resolveRuntimeStringField, validateRuntimeStringFieldOverride, } from '../role/runtime-policy.js';
@@ -36,6 +36,7 @@ import { isManagementRole } from '../../config/builtin-roles.js';
 import { SYSTEM_CONTROL_CHANNEL } from '../system-channels.js';
 import { logger } from '../../utils/logger.js';
 import { shouldSuppressRealRestart } from '../../utils/restart-safety.js';
+import { AGENT_DELEGATION_TOKEN_ENV } from '../auth/agent-delegation.js';
 import { evolMenuResponseTransportMetadata, menuFailure, menuCommandForName, menuSuccess, normalizeMenuError, validateConfigWriteScope, validateMenuRequest, } from './menu-protocol.js';
 import { roleMenuAction, roleMenuOperation, roleMenuOptions, roleMenuQuery, roleMenuUpdate, } from './role-menu.js';
 import { handleConnectMenu, connectMenuOperation } from './connect-menu.js';
@@ -1013,8 +1014,13 @@ function buildRelationIntentArgs(params) {
     return out;
 }
 function buildMenuAuthSubject(owner, params) {
-    if (params.subject)
-        return params.subject;
+    if (params.subject) {
+        return {
+            ...params.subject,
+            ...(params.requestId && !params.subject.requestId ? { requestId: params.requestId } : {}),
+            ...(params.session?.id && !params.subject.sessionId ? { sessionId: params.session.id } : {}),
+        };
+    }
     const agent = owner.getOwningAgent?.(params.channel);
     const selfAid = agent?.aid || params.session?.selfAID;
     const channelType = owner.resolveChannelType?.(params.channel) || params.session?.channelType;
@@ -1025,6 +1031,8 @@ function buildMenuAuthSubject(owner, params) {
     return buildAuthSubject({
         selfAid,
         actorId: params.userId,
+        requestId: params.requestId,
+        sessionId: params.session?.id,
         channel: params.channel,
         channelType: channelType || params.channel.split('#')[0],
         channelId: params.channelId,
@@ -1114,7 +1122,7 @@ function buildRoleMenuContext(owner, channel, subject) {
                     channel: contactAdapter.channelName,
                     channelId: applicantAid,
                     agentName: owningAgent?.name ?? '<unknown>',
-                    replyContext: { metadata: evolMenuResponseTransportMetadata() },
+                    replyContext: { delivery: { chatType: 'private' }, metadata: evolMenuResponseTransportMetadata() },
                 }), {
                     kind: 'custom',
                     channelType: 'aun',
@@ -2710,6 +2718,7 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
     const subject = buildMenuAuthSubject(this, {
         identity: authIdentity,
         session: authSession,
+        requestId,
         explicitChatType,
         channel,
         channelId,
@@ -2927,6 +2936,10 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
             if (triggerThread !== undefined && triggerThread !== 'per_run' && triggerThread !== 'by_run' && triggerThread !== 'by_trigger') {
                 return { error: `无效 triggerThread: ${triggerThread}`, code: 'INVALID_ARGS' };
             }
+            const targetChatType = args.targetChatType;
+            if (targetChatType !== undefined && targetChatType !== 'private' && targetChatType !== 'group') {
+                return { error: `无效 targetChatType: ${targetChatType}`, code: 'INVALID_ARGS' };
+            }
             const parsed = {
                 scheduleType: args.scheduleType,
                 scheduleValue: String(args.scheduleValue ?? ''),
@@ -2937,6 +2950,7 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
                 name: args.name,
                 targetChannel: args.targetChannel,
                 targetChannelId: args.targetChannelId,
+                targetChatType,
                 targetThreadId: args.targetThreadId,
                 agentId: args.agentId,
                 model: args.model,
@@ -3313,13 +3327,56 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
         }
         if (action === 'restart') {
             const suppressRealRestart = shouldSuppressRealRestart();
+            let restartReplyContext;
+            try {
+                restartReplyContext = session
+                    ? replyContextFromSession(session, transportReplyContext)
+                    : transportReplyContext;
+            }
+            catch (error) {
+                const code = error?.code;
+                if (channel.split('#', 1)[0].toLowerCase() !== 'aun'
+                    || (code !== 'AUN_OUTBOUND_ROUTE_REQUIRED' && code !== 'AUN_OUTBOUND_ROUTE_MISMATCH')) {
+                    throw error;
+                }
+                return {
+                    error: '当前 AUN 会话缺少有效的持久化出站路由，请从可信入站上下文重试',
+                    code,
+                };
+            }
+            const restartDelivery = restartReplyContext?.delivery
+                ?? (explicitChatType === 'group'
+                    ? { chatType: 'group', groupId: channelId }
+                    : explicitChatType === 'private'
+                        ? { chatType: 'private' }
+                        : undefined);
+            if (channel.split('#', 1)[0].toLowerCase() === 'aun'
+                && !isDeliveryTargetForChannel(restartDelivery, channelId)) {
+                return {
+                    error: '无法确定有效的重启通知出站路由，请从可信会话上下文重试',
+                    code: isDeliveryTarget(restartDelivery)
+                        ? 'AUN_OUTBOUND_ROUTE_MISMATCH'
+                        : 'AUN_OUTBOUND_ROUTE_REQUIRED',
+                };
+            }
             if (!suppressRealRestart) {
-                const restartInfo = { channel, channelId, timestamp: Date.now() };
+                const restartInfo = {
+                    channel,
+                    channelId,
+                    timestamp: Date.now(),
+                    ...(restartDelivery ? { delivery: restartDelivery } : {}),
+                };
                 const controlDir = daemonControlDir();
                 fs.mkdirSync(controlDir, { recursive: true });
                 fs.writeFileSync(path.join(controlDir, 'restart-pending.json'), JSON.stringify(restartInfo));
-                spawnDetachedNode([path.join(getPackageRoot(), 'dist', 'cli', 'index.js'), 'restart-monitor'], {
+                // Use the canonical CLI restart path so the restart itself performs
+                // the version check and automatic upgrades before replacing the daemon.
+                // Do not inherit managed-session credentials: otherwise cmdRestart can
+                // delegate back to this daemon and recursively enqueue another restart.
+                spawnDetachedNode([path.join(getPackageRoot(), 'dist', 'cli', 'index.js'), 'restart'], {
                     EVOLCORE_HOME: resolvePaths().root,
+                    EVOLCORE_SESSION_ID: '',
+                    [AGENT_DELEGATION_TOKEN_ENV]: '',
                 });
             }
             else {
@@ -3386,6 +3443,17 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
             ? (session?.metadata?.groupId || channelId)
             : userId;
         const cliPeerKey = cliChannelType && cliPeerKeyId ? formatPeerKey(cliChannelType, cliPeerKeyId) : undefined;
+        const subject = buildMenuAuthSubject(this, {
+            identity,
+            session,
+            requestId,
+            explicitChatType,
+            channel,
+            channelId,
+            userId,
+            fromControlChannel: fromControlChannel ?? false,
+            subject: authSubject,
+        });
         if (Array.isArray(args?.argv)) {
             argv = withDefaultRelationContext(argv, { self: cliSelfAid, peer: cliPeerKey });
         }
@@ -3404,6 +3472,8 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
                 await auditCommandAuthorization({
                     ts: Date.now(), source: 'menu.cli', operation: parsed.intent.operation,
                     scope: parsed.intent.scope, dangerous: true, actorId: userId,
+                    requestId, sessionId: subject.sessionId, agentAid: subject.selfAid,
+                    permissionMode: subject.permissionMode,
                     channel, channelId, role: identity.role, decision: 'deny', code: 'NOT_ALLOWED',
                     reason: 'Unrecognized CLI command', taskId: requestId, argvHash: hashArgv(intentArgv),
                     name: 'cli', action: 'exec', args: { argv: [...requestedArgv] },
@@ -3412,16 +3482,6 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
             }
             parsedCommands.push(parsed);
         }
-        const subject = buildMenuAuthSubject(this, {
-            identity,
-            session,
-            explicitChatType,
-            channel,
-            channelId,
-            userId,
-            fromControlChannel: fromControlChannel ?? false,
-            subject: authSubject,
-        });
         const selfAid = subject.selfAid;
         const peerKey = subject.peerKey;
         const isDaemonOwner = subject.isDaemonOwner;
@@ -3446,6 +3506,10 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
                 allowExplicitRelationTarget: true,
                 auditAllowed: false,
                 auditMetadata: {
+                    requestId,
+                    sessionId: subject.sessionId,
+                    agentAid: subject.selfAid,
+                    permissionMode: subject.permissionMode,
                     taskId: requestId,
                     argvHash: hashArgv(authArgv),
                     name: 'cli',
@@ -3466,6 +3530,8 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
                 ts: Date.now(), source: 'menu.cli', operation: parsed.intent.operation,
                 scope: parsed.intent.scope, dangerous: parsed.intent.dangerous ?? false,
                 actorId: userId, selfAid, peerKey,
+                requestId, sessionId: subject.sessionId, agentAid: selfAid,
+                permissionMode: subject.permissionMode,
                 channel, channelId, role: identity.role, isDaemonOwner,
                 fromControlChannel: fromControlChannel ?? false, decision: 'allow',
                 matchedRule: decision.command?.matchedRule, taskId: requestId, argvHash: hashArgv(argv),
@@ -3509,7 +3575,7 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
             return { error: '通道不存在', code: 'EXEC_FAILED' };
         if (!adapter.capabilities?.file)
             return { error: '通道不支持文件发送', code: 'NOT_SUPPORTED' };
-        const sessionReplyContext = session ? this.getReplyContext(session) : undefined;
+        const sessionReplyContext = session ? replyContextFromSession(session, this.getReplyContext(session)) : undefined;
         const replyCtx = transportReplyContext
             ? {
                 ...(sessionReplyContext ?? {}),
@@ -3593,6 +3659,7 @@ async function execMenuForSystemControl(payload, context) {
     const trustedSubject = buildAuthSubject({
         selfAid: targetAid,
         actorId: context.actorAid,
+        requestId: id !== undefined && id !== null && String(id) ? String(id) : undefined,
         channel: targetChannel,
         channelType: 'aun',
         channelId: context.actorAid || SYSTEM_CONTROL_CHANNEL,

package/dist/core/command/menu-protocol.js

@@ -269,6 +269,9 @@ export class MenuRequestDeduper {
     ttlMs;
     maxEntries;
     entries = new Map();
+    /** Retain failed request identities briefly so a subsequent identical
+     * request is observable as a retry instead of an unrelated first attempt. */
+    failures = new Map();
     constructor(ttlMs = 30_000, maxEntries = 2_048) {
         this.ttlMs = ttlMs;
         this.maxEntries = maxEntries;
@@ -279,7 +282,13 @@ export class MenuRequestDeduper {
         if (existing) {
             if (existing.fingerprint !== fingerprint)
                 return { conflict: true };
-            return { value: await existing.promise, replayed: true };
+            return { value: await existing.promise, replayed: true, retry: false };
+        }
+        const previousFailure = this.failures.get(key);
+        if (previousFailure) {
+            if (previousFailure.fingerprint !== fingerprint)
+                return { conflict: true };
+            this.failures.delete(key);
         }
         const promise = operation();
         const entry = { fingerprint, promise, expiresAt: Date.now() + this.ttlMs };
@@ -288,10 +297,12 @@ export class MenuRequestDeduper {
         try {
             const value = await promise;
             entry.expiresAt = Date.now() + this.ttlMs;
-            return { value, replayed: false };
+            return { value, replayed: false, retry: !!previousFailure };
         }
         catch (error) {
             this.entries.delete(key);
+            this.failures.set(key, { fingerprint, expiresAt: Date.now() + this.ttlMs });
+            this.enforceLimit();
             throw error;
         }
     }
@@ -301,6 +312,10 @@ export class MenuRequestDeduper {
             if (entry.expiresAt <= now)
                 this.entries.delete(key);
         }
+        for (const [key, entry] of this.failures) {
+            if (entry.expiresAt <= now)
+                this.failures.delete(key);
+        }
     }
     enforceLimit() {
         while (this.entries.size > this.maxEntries) {
@@ -309,6 +324,12 @@ export class MenuRequestDeduper {
                 break;
             this.entries.delete(oldest);
         }
+        while (this.failures.size > this.maxEntries) {
+            const oldest = this.failures.keys().next().value;
+            if (!oldest)
+                break;
+            this.failures.delete(oldest);
+        }
     }
 }
 export class MenuDiagnosticLimiter {

package/dist/core/command/slash-handler.js

@@ -1,6 +1,6 @@
 import { hasModelSwitcher, hasPermissionController } from '../../agents/runner-types.js';
 import { getCodexEfforts } from '../../agents/codex-runner.js';
-import { buildEnvelope } from '../message/message-utils.js';
+import { buildEnvelope, isDeliveryTargetForChannel } from '../message/message-utils.js';
 import { resolvePaths, getPackageRoot, daemonControlDir } from '../../paths.js';
 import { logger } from '../../utils/logger.js';
 import { shouldSuppressRealRestart } from '../../utils/restart-safety.js';
@@ -2492,17 +2492,50 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         // 执行重启逻辑（共用于卡片回调和文本确认）
         const executeRestart = async () => {
             const suppressRealRestart = shouldSuppressRealRestart();
-            let replyContext;
-            if (threadId) {
-                const threadSession = await this.sessionManager.getThreadSession(channel, channelId, threadId);
-                if (threadSession)
-                    replyContext = this.getReplyContext(threadSession);
+            let restartReplyContext = replyContext;
+            try {
+                if (!restartReplyContext?.delivery && threadId) {
+                    const threadSession = await this.sessionManager.getThreadSession(channel, channelId, threadId);
+                    if (threadSession)
+                        restartReplyContext = this.getReplyContext(threadSession);
+                }
+                else if (!restartReplyContext?.delivery && activeSession) {
+                    restartReplyContext = this.getReplyContext(activeSession);
+                }
+            }
+            catch (error) {
+                const code = error?.code;
+                if (channel.split('#', 1)[0].toLowerCase() !== 'aun'
+                    || (code !== 'AUN_OUTBOUND_ROUTE_REQUIRED' && code !== 'AUN_OUTBOUND_ROUTE_MISMATCH')) {
+                    throw error;
+                }
+                logger.warn(`[System] Refusing restart from invalid persisted AUN session route: channel=${channel} channelId=${channelId} code=${code}`);
+                return false;
+            }
+            // The authenticated inbound transport context takes precedence over a
+            // potentially stale session snapshot. When no session exists, the
+            // explicit command chat type is the only acceptable local fallback.
+            if (restartReplyContext?.delivery === undefined) {
+                restartReplyContext = {
+                    ...(restartReplyContext ?? {}),
+                    ...(chatType === 'group'
+                        ? { delivery: { chatType: 'group', groupId: channelId } }
+                        : chatType === 'private'
+                            ? { delivery: { chatType: 'private' } }
+                            : {}),
+                };
+            }
+            if (channel.split('#', 1)[0].toLowerCase() === 'aun'
+                && !isDeliveryTargetForChannel(restartReplyContext?.delivery, channelId)) {
+                logger.warn(`[System] Refusing restart without a valid explicit delivery route: channel=${channel} channelId=${channelId}`);
+                return false;
             }
             const restartInfo = {
                 channel,
                 channelId,
                 timestamp: Date.now(),
-                ...(replyContext?.replyToMessageId ? { rootId: replyContext.replyToMessageId } : {}),
+                ...(restartReplyContext?.delivery ? { delivery: restartReplyContext.delivery } : {}),
+                ...(restartReplyContext?.replyToMessageId ? { rootId: restartReplyContext.replyToMessageId } : {}),
             };
             if (!suppressRealRestart) {
                 const controlDir = daemonControlDir();
@@ -2527,7 +2560,11 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                         channelId,
                         agentName: 'system',
                         chatmode: 'interactive',
-                        replyContext,
+                        replyContext: restartReplyContext ?? (chatType === 'group'
+                            ? { delivery: { chatType: 'group', groupId: channelId } }
+                            : chatType === 'private'
+                                ? { delivery: { chatType: 'private' } }
+                                : undefined),
                     });
                     await adapter.send(envelope, { kind: 'command.result', text: '🔄 服务正在重启，请稍候...（约 5 秒后恢复）' });
                     // 等待消息发送完成后再延迟 kill
@@ -2570,7 +2607,10 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                 return { kind: 'command.result', text: sessionsWithMessages.join('\n') + '\n再次输入 /restart 将强制重启。' };
             }
         }
-        await executeRestart();
+        const restarted = await executeRestart();
+        if (!restarted) {
+            return { kind: 'command.error', text: '❌ 无法确定重启通知的出站路由，请从可信会话上下文重试' };
+        }
         // executeRestart 内部已经发送了反馈消息，这里返回 null 避免重复发送
         return null;
     }
@@ -2728,7 +2768,15 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         }
         // 发送文件
         try {
-            const replyCtx = !isCrossChannel && sendSession ? this.getReplyContext(sendSession) : undefined;
+            const replyCtx = isCrossChannel
+                ? { delivery: { chatType: 'private' } }
+                : sendSession
+                    ? this.getReplyContext(sendSession)
+                    : chatType === 'group'
+                        ? { delivery: { chatType: 'group', groupId: channelId } }
+                        : chatType === 'private'
+                            ? { delivery: { chatType: 'private' } }
+                            : undefined;
             await targetAdapter.send(buildEnvelope({ channel: targetAdapter.channelName, channelId: targetChannelId, replyContext: replyCtx }), { kind: 'result.file', filePath: realPath });
             const sizeStr = stat.size < 1024 ? `${stat.size} B`
                 : stat.size < 1024 * 1024 ? `${(stat.size / 1024).toFixed(1)} KB`

package/dist/core/event-catalog.js

@@ -313,6 +313,10 @@ const CATALOG = [
             { path: 'sessionId', type: 'string' },
             { path: 'toolName', type: 'string' },
             { path: 'input', type: 'object' },
+            { path: 'callId', type: 'string', optional: true },
+            { path: 'correlationId', type: 'string', optional: true },
+            { path: 'agentAid', type: 'string', optional: true },
+            { path: 'permissionMode', type: 'string', optional: true },
             { path: 'timestamp', type: 'number', optional: true },
         ],
     },
@@ -326,6 +330,10 @@ const CATALOG = [
             { path: 'toolName', type: 'string' },
             { path: 'isError', type: 'boolean', optional: true },
             { path: 'agentName', type: 'string', optional: true },
+            { path: 'callId', type: 'string', optional: true },
+            { path: 'correlationId', type: 'string', optional: true },
+            { path: 'agentAid', type: 'string', optional: true },
+            { path: 'permissionMode', type: 'string', optional: true },
             { path: 'timestamp', type: 'number', optional: true },
         ],
     },

package/dist/core/handoff/runtime.js

@@ -6,6 +6,7 @@ import { HandoffStore } from './store.js';
 import { createRootCausation, deriveCausation, normalizeCausation } from '../causation/context.js';
 import { recordCausationSpan } from '../causation/audit.js';
 import { logger } from '../../utils/logger.js';
+import { replyContextFromSession } from '../message/message-utils.js';
 const HANDOFF_STALE_WARN_MS = 72 * 60 * 60 * 1000;
 const HANDOFF_RETENTION_MS = 7 * 24 * 60 * 60 * 1000;
 const HANDOFF_LARGE_AGGREGATE_COUNT = 10;
@@ -79,7 +80,12 @@ export class HandoffRuntime {
         if (!origin || origin.selfAID !== input.selfAid)
             throw new Error('origin session not found');
         const targetChannelKey = formatChannelKey({ type: 'aun', selfAID: input.selfAid, name: 'main' });
-        const targetChatType = input.targetChatType ?? 'private';
+        if (!input.targetChatType) {
+            throw Object.assign(new Error('AUN handoff requires an explicit target chat type'), {
+                code: 'AUN_OUTBOUND_ROUTE_REQUIRED',
+            });
+        }
+        const targetChatType = input.targetChatType;
         const target = await this.sessionManager.getOrCreateSession(targetChannelKey, input.to, origin.projectPath, input.thread, {
             channelKey: targetChannelKey,
             peerId: input.to,
@@ -112,6 +118,9 @@ export class HandoffRuntime {
                 targetSessionId: target.id,
                 payload: input.payload,
                 encrypt: input.encrypt,
+                delivery: targetChatType === 'group'
+                    ? { chatType: 'group', groupId: input.to }
+                    : { chatType: 'private' },
                 returnPolicy: input.explicitReturnPolicy ?? 'required',
                 originAuthorization: input.originAuthorization,
                 causation: handoffCausation,
@@ -209,6 +218,8 @@ export class HandoffRuntime {
             messageId,
             timestamp: Date.now(),
             source: 'handoff',
+            groupId: origin.chatType === 'group' ? (origin.metadata?.groupId || origin.channelId) : undefined,
+            replyContext: replyContextFromSession(origin),
             boundSessionId: origin.id,
             causation: instance.return_causation
                 ? deriveCausation(instance.return_causation)

package/dist/core/handoff/store.js

@@ -115,7 +115,11 @@ export class HandoffStore {
             origin_session_id: input.originSessionId,
             origin_message_id: input.originMessageId,
             target_session_id: input.targetSessionId,
-            request: { payload: clonePayload(input.payload), encrypt: input.encrypt },
+            request: {
+                payload: clonePayload(input.payload),
+                encrypt: input.encrypt,
+                ...(input.delivery ? { delivery: input.delivery } : {}),
+            },
             ...(input.originAuthorization
                 ? { origin_authorization: { ...input.originAuthorization } }
                 : {}),

package/dist/core/interaction-router.js

@@ -228,6 +228,16 @@ export class InteractionRouter {
         return undefined;
     }
 }
+/** Bind an adapter response to its runtime-owned channel identity domain. */
+export function registerAdapterInteractions(adapter, router) {
+    const channelKey = adapter.channelKey;
+    adapter.onInteraction?.(async (response) => {
+        return router.handleAsync({ ...response, channelKey });
+    });
+    adapter.onInteractionInvalidated?.((interactionId, reason) => {
+        return router.cancelFromChannel(interactionId, reason);
+    });
+}
 /** 把 CommandCard 渲染为文本提示，channel 不支持卡片时使用 */
 export function renderCommandCardAsText(card) {
     const lines = [card.title];

package/dist/core/message/im-renderer.js

@@ -59,7 +59,21 @@ export class IMRenderer {
     /** 推入 AgentEvent，按 chatmode 投影 */
     emit(event) {
         try {
-            logger.event({ source: 'runner', taskId: this.opts.envelope.taskId, channelId: this.opts.envelope.channelId, event });
+            const correlatedEvent = event.type === 'tool_use' || event.type === 'tool_result'
+                ? { ...event, correlationId: event.correlationId ?? event.callId }
+                : event;
+            logger.event({
+                source: 'runner',
+                taskId: this.opts.envelope.taskId,
+                sessionId: this.opts.envelope.sessionId,
+                channelId: this.opts.envelope.channelId,
+                agentAid: this.opts.agentAid,
+                agentName: this.opts.envelope.agentName,
+                ...(correlatedEvent.type === 'tool_use' || correlatedEvent.type === 'tool_result'
+                    ? { correlationId: correlatedEvent.correlationId, toolName: correlatedEvent.name }
+                    : {}),
+                event: correlatedEvent,
+            });
         }
         catch {
             // logger.event 失败不影响业务
@@ -244,6 +258,25 @@ export class IMRenderer {
             durationMs: opts.durationMs,
         });
     }
+    /** 发送不进入 activity/thought 历史的非终态 warning status。 */
+    async sendWarningStatus(message, subtype, details) {
+        const payload = {
+            kind: 'status.progress',
+            metadata: {
+                activityType: 'progress',
+                message,
+                severity: 'warn',
+                ...(subtype !== undefined && { subtype }),
+                ...(details?.missingItems !== undefined && { missingItems: details.missingItems }),
+            },
+        };
+        try {
+            await this.opts.send(payload);
+        }
+        catch (error) {
+            logger.warn(`[IMRenderer] warning status send failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
     /** 添加任务生命周期边界事件，复用 activity.batch 投影路径。 */
     addLifecycle(phase, metadata, text) {
         const item = {