evolcore 0.0.22 → 0.0.24

package/dist/channels/aun.js

@@ -16,7 +16,7 @@ import { createSendFileMarkerPattern } from '../core/message/file-markers.js';
 import { chatDirPath } from '../core/session/session-fs-store.js';
 import { appendHintAdd, appendHintRemove, parseInjectRequest } from '../core/message/pending-hints.js';
 import { appendAidLifecycle } from '../aun/aid/identity.js';
-import { enableFullGroupPullPagination, getAidStore, loadClient, SLOT } from '../aun/aid/store.js';
+import { enableFullGroupPullPagination, enableReliableMessageDelivery, getAidStore, loadClient, SLOT } from '../aun/aid/store.js';
 import { MAX_AUN_ATTACHMENT_SIZE, uploadBufferAndBuildPayload, uploadFileAndBuildPayload } from '../aun/msg/upload.js';
 import { loadAgent } from '../config-store.js';
 import { resolveAgentLifecycle } from '../config/lifecycle.js';
@@ -27,7 +27,6 @@ import { getProcessStartTime } from '../utils/process-introspect.js';
 import * as outbox from '../aun/outbox.js';
 import { guessMime, formatSize } from '../utils/media-cache.js';
 import { formatPeerKey, PeerIdentityCache } from '../core/relation/peer-identity.js';
-import { getFirstStaticAgentOwner } from '../config/peer-role-resolver.js';
 import { isHClassPath } from '../core/permission/protected-paths.js';
 import { consumeAunCausation, registerAunCausation } from '../core/causation/aun-association.js';
 import { deriveCausation, normalizeCausation } from '../core/causation/context.js';
@@ -35,7 +34,7 @@ import { recordCausationSpan } from '../core/causation/audit.js';
 import { refreshAgentDisplayName, resolveAgentDisplayName } from '../aun/aid/agentmd.js';
 import { readInstalledEvolcoreVersion } from '../utils/evolcore-version.js';
 import { toolInputForDisplay } from '../utils/tool-summary.js';
-import { bindPostBootstrapWelcomeOutboxSession, hasPendingPostBootstrapWelcomeOutbox, bootstrapInitialMessageOperationPrefix, postBootstrapWelcomeOperationId, preparePostBootstrapWelcomeOutbox, } from '../core/bootstrap-messages.js';
+import { bindPostBootstrapWelcomeOutboxSession, hasPendingPostBootstrapWelcomeOutbox, pendingPostBootstrapWelcomeOwners, isPostBootstrapWelcomeOperationId, findPostBootstrapWelcomeOutbox, bootstrapInitialMessageOperationPrefix, postBootstrapWelcomeOperationId, preparePostBootstrapWelcomeOutbox, } from '../core/bootstrap-messages.js';
 import { hasMentionAll, mentionEntryAids, mentionEntryTargets, } from '../core/message/mention-schema.js';
 import { normalizeAunMentionEntries, } from '../aun/msg/mention-schema.js';
 import { isDeliveryTarget, sameDeliveryTarget } from '../core/message/message-utils.js';
@@ -484,7 +483,8 @@ function redactMenuTokensForTrace(value, seen = new WeakSet()) {
         return value.map(item => redactMenuTokensForTrace(item, seen));
     const redacted = {};
     for (const [key, item] of Object.entries(value)) {
-        redacted[key] = key.toLowerCase() === 'menu_token'
+        const normalizedKey = key.replace(/([a-z0-9])([A-Z])/g, '$1_$2').replace(/-/g, '_').toLowerCase();
+        redacted[key] = /^(?:menu|ecweb)_token$/.test(normalizedKey)
             ? '[REDACTED]'
             : redactMenuTokensForTrace(item, seen);
     }
@@ -728,7 +728,10 @@ export class AUNChannel {
                     const actionValue = isComposeReply ? '_custom_input'
                         : typeof obj.value === 'string' ? obj.value
                             : typeof obj.action_value === 'string' ? obj.action_value : text;
-                    const threadId = typeof obj.thread_id === 'string' ? obj.thread_id : undefined;
+                    // Prefer the trusted context persisted with the card. A callback's
+                    // thread_id is client-controlled and may be absent or stale.
+                    const threadId = cardInfo?.replyContext?.threadId
+                        ?? (typeof obj.thread_id === 'string' ? obj.thread_id : undefined);
                     // 卡片点击者身份：只信认证信封（senderAid 参数，由调用方从 msg.from / msg.sender_aid 提取）。
                     // payload 自报字段（from / sender_aid / user_id）不可信，可被客户端伪造，不读取。
                     // 两类卡片共用：CommandCard → 伪入站消息的 peerId，ActionInteraction → operatorId。
@@ -770,6 +773,10 @@ export class AUNChannel {
                                 peerId: cardClickerAid,
                                 peerName: typeof obj.label === 'string' ? obj.label : typeof obj.action_label === 'string' ? obj.action_label : undefined,
                                 messageId: `card-trigger-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+                                threadId,
+                                replyContext: cardInfo?.replyContext ?? ((threadId || cardDelivery)
+                                    ? { ...(threadId ? { threadId } : {}), ...(cardDelivery ? { delivery: cardDelivery } : {}) }
+                                    : undefined),
                                 source: 'card-trigger',
                             })).catch((err) => {
                                 logger.error(`${this.logPrefix()} CommandCard handler failed: action=${actionValue} mid=${cardMsgId}`, err);
@@ -1465,12 +1472,13 @@ export class AUNChannel {
         this.store = store;
         const client = await loadClient(store, aidName);
         enableFullGroupPullPagination(client);
+        enableReliableMessageDelivery(client);
         this.client = client;
         // A reconnect replaces the SDK client. Late events from the retired
         // instance must not mutate the new instance's health or message state.
         const isCurrentClient = () => this.client === client;
         // Register event handlers before connecting
-        client.on('message.received', (data) => {
+        client.on('message.received', async (data) => {
             if (!isCurrentClient())
                 return;
             this.aidState.lastInboundAt = Date.now();
@@ -1479,11 +1487,11 @@ export class AUNChannel {
             const kind = (data && typeof data === 'object') ? data.kind ?? '' : '';
             const keys = (data && typeof data === 'object') ? Object.keys(data).join(',') : typeof data;
             logger.debug(`${this.logPrefix()}[DIAG] message.received: kind=${kind} keys=${keys}`);
-            this.handleIncomingPrivateMessage(data);
+            await this.handleIncomingPrivateMessage(data);
         });
         // pureIdentity（控制 AID）：协议层不接群消息，不注册 group 创建监听
         if (!this.config.pureIdentity) {
-            client.on('group.message_created', (data) => {
+            client.on('group.message_created', async (data) => {
                 if (!isCurrentClient())
                     return;
                 this.aidState.lastInboundAt = Date.now();
@@ -1493,7 +1501,7 @@ export class AUNChannel {
                 const gid = env.group_id ?? '';
                 const sender = env.from ?? '';
                 logger.debug(`${this.logPrefix()}[DIAG] group.message_created: group_id=${gid} sender=${sender}`);
-                this.handleIncomingGroupMessage(data);
+                await this.handleIncomingGroupMessage(data);
             });
             client.on('group.changed', (data) => {
                 if (!isCurrentClient())
@@ -1504,6 +1512,35 @@ export class AUNChannel {
                     : {};
                 this.invalidateObserverGroupMembers(envelope.group_id ?? record.group_id);
             });
+            // fastaun 0.5.12+ exposes targeted invitations as a local, aggregated
+            // event. It is a control signal, not a user message, so keep it out of
+            // the Agent routing path while retaining it in diagnostics.
+            client.on('group.invite_received', (data) => {
+                if (!isCurrentClient())
+                    return;
+                const record = data && typeof data === 'object' ? data : {};
+                const groupId = record.group_id ?? record.group_aid ?? 'unknown';
+                const inviteIds = Array.isArray(record.invite_ids) ? record.invite_ids : [];
+                this.trace('IN', 'group.invite_received', data);
+                logger.info(`${this.logPrefix()} Group invitation received: group=${groupId} pending=${inviteIds.length || 1}`);
+            });
+        }
+        // 0.5.10/0.5.11 local lifecycle events summarize SDK delivery and Pull
+        // progress. They must never be interpreted as inbound chat messages.
+        for (const eventName of ['delivery.changed', 'sync.started', 'sync.progress', 'sync.stopped']) {
+            client.on(eventName, (data) => {
+                if (!isCurrentClient())
+                    return;
+                this.trace('IN', eventName, data);
+                if (eventName === 'sync.progress') {
+                    const record = data && typeof data === 'object' ? data : {};
+                    logger.debug(`${this.logPrefix()} AUN sync progress: namespace=${record.namespace ?? 'unknown'} page=${record.page ?? '?'} pulled=${record.page_pulled_count ?? record.pulled_count ?? 0}`);
+                }
+                else if (eventName === 'sync.stopped') {
+                    const record = data && typeof data === 'object' ? data : {};
+                    logger.info(`${this.logPrefix()} AUN sync stopped: reason=${record.reason ?? 'unknown'}`);
+                }
+            });
         }
         const handleSdkState = (source) => (data) => {
             if (!isCurrentClient())
@@ -1629,6 +1666,14 @@ export class AUNChannel {
             this.connected = true;
             this.connectedAt = Date.now();
             this.setAidStatus('connected', { lastConnectedAt: Date.now(), lastError: undefined, gatewayUrl: this.gatewayUrl });
+            // AUN seq_tracker is transport-scoped, while this channel's durable
+            // dedup log is application-scoped.  A diagnostic consumer can advance
+            // the former without the application having seen those messages.  On a
+            // reconnect, repair only the in-memory P2P cursor to the last message
+            // the application actually claimed, then force a Forward pull.  The SDK
+            // persists cursors monotonically, so this does not rewrite SQLite and
+            // the normal pull will restore the high watermark after delivery.
+            this.scheduleInboundP2PCursorRepair(client, isCurrentClient);
             // Workaround: SDK e2ee uses _identity.cert for sender_cert_fingerprint;
             // if cert is missing, it falls back to public key SPKI fingerprint which
             // causes peer cert lookup failures. Backfill from keystore if needed.
@@ -1661,51 +1706,50 @@ export class AUNChannel {
                 logger.warn(`${this.logPrefix()} agent config not found for ${aidName}, skipping welcome message`);
                 return false;
             }
-            const owner = getFirstStaticAgentOwner(aidName);
-            if (!owner) {
+            const owners = Array.from(new Set(agentConfig.owners ?? []));
+            if (owners.length === 0) {
                 logger.info(`${this.logPrefix()} No owner configured, skipping post-bootstrap welcome message`);
                 return false;
             }
-            const operationId = postBootstrapWelcomeOperationId(aidName);
-            const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', owner, aidName);
-            if (hasMessageLogOperation(chatDir, operationId))
-                return true;
-            const prepared = outbox.findByDedupeKey(aidName, operationId);
+            this.repairBootstrapRoutes();
             // Bootstrap welcomes target the configured personal Owner AID. They are
             // not replies to an inbound group message, so their route is always
             // private and must not be inferred with group.get_info.
             const lifecycle = resolveAgentLifecycle(agentConfig);
             const delivery = { chatType: 'private' };
-            if (prepared
-                && prepared.channelId === owner
-                && isDeliveryTarget(prepared.delivery)
-                && sameDeliveryTarget(prepared.delivery, delivery)) {
-                return true;
-            }
-            const ownerAidClean = owner.startsWith('@') ? owner.slice(1) : owner;
-            let ownerDisplayName = ownerAidClean.split('.')[0].slice(0, 12);
-            // Keep lifecycle=bootstrapping preparation entirely local. Resolving an
-            // uncached peer may download agent.md, and welcome display metadata must
-            // never delay the durable write-ahead record or the lifecycle commit.
-            const cachedOwnerInfo = this.peerInfoCached(owner);
-            try {
-                const ownerInfo = cachedOwnerInfo
-                    ?? (lifecycle === 'active' ? await this.fetchPeerInfo(owner) : undefined);
-                if (!ownerInfo) {
-                    preparePostBootstrapWelcomeOutbox(aidName, owner, ownerDisplayName, delivery);
-                    logger.info(`${this.logPrefix()} Post-bootstrap welcome durably prepared for owner: ${owner}`);
-                    return true;
+            for (const owner of owners) {
+                const operationId = postBootstrapWelcomeOperationId(aidName, owner);
+                const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', owner, aidName);
+                if (hasMessageLogOperation(chatDir, operationId)
+                    || hasMessageLogOperation(chatDir, postBootstrapWelcomeOperationId(aidName)))
+                    continue;
+                const prepared = outbox.findByDedupeKey(aidName, operationId);
+                if (prepared && prepared.channelId === owner && isDeliveryTarget(prepared.delivery) && sameDeliveryTarget(prepared.delivery, delivery))
+                    continue;
+                const ownerAidClean = owner.startsWith('@') ? owner.slice(1) : owner;
+                let ownerDisplayName = ownerAidClean.split('.')[0].slice(0, 12);
+                // Keep lifecycle=bootstrapping preparation entirely local. Resolving an
+                // uncached peer may download agent.md, and welcome display metadata must
+                // never delay the durable write-ahead record or the lifecycle commit.
+                const cachedOwnerInfo = this.peerInfoCached(owner);
+                try {
+                    const ownerInfo = cachedOwnerInfo
+                        ?? (lifecycle === 'active' ? await this.fetchPeerInfo(owner) : undefined);
+                    if (!ownerInfo) {
+                        preparePostBootstrapWelcomeOutbox(aidName, owner, ownerDisplayName, delivery);
+                        continue;
+                    }
+                    ownerDisplayName = (ownerInfo.name || ownerDisplayName).slice(0, 12);
+                    if (ownerInfo.type !== null && ownerInfo.type !== 'human') {
+                        logger.warn(`${this.logPrefix()} Owner ${owner} type is "${ownerInfo.type}" (not human).`);
+                    }
                 }
-                ownerDisplayName = (ownerInfo.name || ownerDisplayName).slice(0, 12);
-                if (ownerInfo.type !== null && ownerInfo.type !== 'human') {
-                    logger.warn(`${this.logPrefix()} Owner ${owner} type is "${ownerInfo.type}" (not human).`);
+                catch (e) {
+                    logger.warn(`${this.logPrefix()} Failed to resolve owner display name; using AID label: ${e}`);
                 }
+                preparePostBootstrapWelcomeOutbox(aidName, owner, ownerDisplayName, delivery);
             }
-            catch (e) {
-                logger.warn(`${this.logPrefix()} Failed to resolve owner display name; using AID label: ${e}`);
-            }
-            preparePostBootstrapWelcomeOutbox(aidName, owner, ownerDisplayName, delivery);
-            logger.info(`${this.logPrefix()} Post-bootstrap welcome durably prepared for owner: ${owner}`);
+            logger.info(`${this.logPrefix()} Post-bootstrap welcomes durably prepared for ${owners.length} owner(s)`);
             return true;
         }
         catch (e) {
@@ -1723,9 +1767,48 @@ export class AUNChannel {
         const aid = this.config.aid.replace(/^@/, '');
         return hasPendingPostBootstrapWelcomeOutbox(aid);
     }
-    async bindPostBootstrapWelcomeToSession(sessionId) {
+    async bindPostBootstrapWelcomeToSession(sessionId, owner) {
         const aid = this.config.aid.replace(/^@/, '');
-        return bindPostBootstrapWelcomeOutboxSession(aid, sessionId);
+        return bindPostBootstrapWelcomeOutboxSession(aid, sessionId, owner);
+    }
+    scheduleInboundP2PCursorRepair(client, isCurrentClient) {
+        const tracker = client?._seqTracker;
+        const repair = tracker?.repairContiguousSeq;
+        const pull = client?._pullV2;
+        if (typeof repair !== 'function' || typeof pull !== 'function')
+            return;
+        const ns = `p2p:${this.config.aid}`;
+        let appSeq = 0;
+        for (const [key, value] of this.inboundSeenMessages) {
+            // Group sequence spaces are independent from the P2P space.
+            if (!key.includes(':aun:private'))
+                continue;
+            const seq = Number(value.seq);
+            if (Number.isSafeInteger(seq) && seq > appSeq)
+                appSeq = seq;
+        }
+        if (appSeq <= 0)
+            return;
+        setTimeout(() => {
+            if (!isCurrentClient() || !this.connected)
+                return;
+            const transportSeq = Number(tracker.getContiguousSeq?.(ns) ?? 0);
+            if (!Number.isSafeInteger(transportSeq) || transportSeq <= appSeq + 1)
+                return;
+            try {
+                repair.call(tracker, ns, appSeq);
+                logger.warn(`${this.logPrefix()} Rewinding in-memory P2P cursor for application recovery: transport=${transportSeq}, app=${appSeq}`);
+                Promise.resolve(pull.call(client, appSeq, 50, { force: true }))
+                    .then(() => logger.info(`${this.logPrefix()} Replayed P2P messages after cursor mismatch: after_seq=${appSeq}`))
+                    .catch((error) => logger.warn(`${this.logPrefix()} P2P cursor recovery pull failed: ${error instanceof Error ? error.message : String(error)}`));
+            }
+            catch (error) {
+                logger.warn(`${this.logPrefix()} P2P cursor repair failed: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }, 250);
+    }
+    pendingPostBootstrapWelcomeOwners() {
+        return pendingPostBootstrapWelcomeOwners(this.config.aid);
     }
     /**
      * Resume delivery of an already prepared completion welcome.
@@ -1738,20 +1821,9 @@ export class AUNChannel {
         this.repairBootstrapRoutes();
         const configuredAid = this.config.aid;
         const aid = configuredAid.startsWith('@') ? configuredAid.slice(1) : configuredAid;
-        const operationId = postBootstrapWelcomeOperationId(aid);
-        const entry = outbox.findByDedupeKey(aid, operationId);
-        if (!entry) {
-            const owner = getFirstStaticAgentOwner(aid);
-            if (!owner)
-                return false;
-            const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', owner, aid);
-            return hasMessageLogOperation(chatDir, operationId);
-        }
-        if (!outbox.isDeliveryForChannel(entry.delivery, entry.channelId)) {
-            logger.warn(`${this.logPrefix()} Discarding unrouted legacy post-bootstrap welcome: id=${entry.id}`);
-            outbox.remove(aid, entry.id);
+        const entries = findPostBootstrapWelcomeOutbox(aid);
+        if (entries.length === 0)
             return false;
-        }
         const agentConfig = loadAgent(aid);
         if (!agentConfig || resolveAgentLifecycle(agentConfig) !== 'active') {
             logger.info(`${this.logPrefix()} Post-bootstrap welcome prepared; waiting for lifecycle=active`);
@@ -1759,11 +1831,15 @@ export class AUNChannel {
         }
         if (!this.connected || !this.client)
             return true;
-        const sent = await this.withOutboxInFlight(entry, () => this.deliverTextEntry(entry), { status: 'retry', error: 'outbox send is already in flight' });
-        if (sent.status === 'sent')
-            this.removeDeliveredOutboxEntry(entry);
-        else if (sent.status === 'permanent')
-            this.markPermanentOutboxFailure(entry, sent);
+        for (const entry of entries) {
+            if (!outbox.isDeliveryForChannel(entry.delivery, entry.channelId))
+                continue;
+            const sent = await this.withOutboxInFlight(entry, () => this.deliverTextEntry(entry), { status: 'retry', error: 'outbox send is already in flight' });
+            if (sent.status === 'sent')
+                this.removeDeliveredOutboxEntry(entry);
+            else if (sent.status === 'permanent')
+                this.markPermanentOutboxFailure(entry, sent);
+        }
         return true;
     }
     // ── Event handlers ──────────────────────────────────────────
@@ -3523,7 +3599,7 @@ export class AUNChannel {
         if (ids && ids.size === 0)
             this.interactionCardMessageIds.delete(interactionId);
     }
-    registerCardPostSend(messageId, action, channelId, delivery) {
+    registerCardPostSend(messageId, action, channelId, delivery, replyContext) {
         if (action.type !== 'register_interaction_card')
             return;
         this.cardMessageIdMap.set(messageId, {
@@ -3532,6 +3608,7 @@ export class AUNChannel {
             initiatorAid: action.initiatorAid,
             channelId,
             delivery: delivery ?? action.delivery,
+            replyContext,
         });
         this.ownedCardMsgIds.add(messageId);
         let messageIds = this.interactionCardMessageIds.get(action.requestId);
@@ -3564,7 +3641,7 @@ export class AUNChannel {
         if (!entry.postSend)
             return;
         if (entry.postSend.type === 'register_interaction_card') {
-            this.registerCardPostSend(messageId, entry.postSend, entry.channelId, entry.delivery);
+            this.registerCardPostSend(messageId, entry.postSend, entry.channelId, entry.delivery, entry.context);
         }
     }
     async sendAunPayload(channelId, payload, context, label) {
@@ -3893,6 +3970,9 @@ export class AUNChannel {
     }
     async sendReliableStructured(channelId, payload, context, logText) {
         const result = await this.sendContentPayload(channelId, payload, {
+            // Activity items use the durable activity queue so reconnect draining
+            // preserves their ordering relative to other lifecycle events.
+            queue: payload.type === 'activity' ? 'activity' : undefined,
             contentKind: 'custom',
             context,
             logText: logText ?? this.payloadLogText(payload, 'custom'),
@@ -3903,6 +3983,7 @@ export class AUNChannel {
                 outboxId: result.outboxId,
             });
         }
+        return result;
     }
     async sendMessage(channelId, text, context) {
         if (!text?.trim()) {
@@ -4314,7 +4395,7 @@ export class AUNChannel {
                 logger.info(`${this.logPrefix()} Durable operation already logged; skipping duplicate send: ${operationId}`);
                 return sentOutboxResult(completedMessageId);
             }
-            if (operationId === postBootstrapWelcomeOperationId(this.config.aid)) {
+            if (isPostBootstrapWelcomeOperationId(operationId, this.config.aid)) {
                 const agentConfig = loadAgent(this.config.aid);
                 if (!agentConfig || resolveAgentLifecycle(agentConfig) !== 'active') {
                     return { status: 'retry', error: 'post-bootstrap welcome is waiting for active lifecycle', code: 'BOOTSTRAP_NOT_ACTIVE' };
@@ -5287,15 +5368,19 @@ export class AUNChannel {
     /** Repair bootstrap outbox entries to the configured personal Owner route. */
     repairBootstrapRoutes() {
         const aid = this.config.aid.replace(/^@/, '');
-        const owner = getFirstStaticAgentOwner(aid);
-        if (!owner)
-            return;
-        const completionEntry = outbox.findByDedupeKey(aid, postBootstrapWelcomeOperationId(aid), { includeTerminal: true });
+        const owners = Array.from(new Set(loadAgent(aid)?.owners ?? []));
         const entries = [
             ...outbox.findByDedupePrefix(aid, bootstrapInitialMessageOperationPrefix(aid), { includeTerminal: true }),
-            ...(completionEntry ? [completionEntry] : []),
+            ...findPostBootstrapWelcomeOutbox(aid, { includeTerminal: true }),
         ].filter((entry) => !!entry?.channelId);
         for (const entry of entries) {
+            const isInitial = entry.dedupeKey?.startsWith(bootstrapInitialMessageOperationPrefix(aid));
+            const isOwnerSpecific = entry.dedupeKey?.startsWith(`bootstrap-complete:v2:${aid}:`);
+            const owner = isInitial ? owners[0]
+                : isOwnerSpecific ? owners.find(candidate => postBootstrapWelcomeOperationId(aid, candidate) === entry.dedupeKey)
+                    : (owners.includes(entry.channelId) ? entry.channelId : owners[0]);
+            if (!owner)
+                continue;
             const delivery = { chatType: 'private' };
             const nestedDelivery = entry.context?.delivery;
             const routeAlreadyPrivate = entry.channelId === owner
@@ -5357,6 +5442,7 @@ export class AUNChannel {
             timeout: 'timeout',
             queued: 'queued',
             progress: 'progress',
+            notice: 'notice',
             requires_action: 'requires_action',
         };
         const statusPayload = {
@@ -5416,6 +5502,16 @@ export class AUNChannel {
             logger.info(logTaskStatus);
     }
     async sendCustomPayload(channelId, payload, context) {
+        // Validate the route even when disconnected; callers must never be able
+        // to bypass the fail-closed AUN routing contract.  This compatibility API
+        // is intentionally best-effort while offline, so a valid route simply
+        // returns until the channel reconnects.
+        const delivery = this.requireDelivery(channelId, context);
+        context = this.withDelivery(context, delivery);
+        if (!this.connected || !this.client) {
+            logger.debug(`${this.logPrefix()} Custom payload skipped while disconnected: channel=${channelId}`);
+            return;
+        }
         // SDK 0.3.0 E2EE requires payload to be an object
         let payloadObj;
         try {
@@ -5806,12 +5902,14 @@ export class AUNChannelPlugin {
                                 await channel.sendThought(channelId, envelope.taskId, aunPayload, replyCtx);
                             }
                             else {
-                                const result = await channel.sendContentPayload(channelId, aunPayload, {
-                                    queue: 'activity',
-                                    contentKind: 'custom',
-                                    context: replyCtx,
-                                    logText: channel.activityLogText(item),
-                                });
+                                // Interactive activities are reliable structured payloads;
+                                // sendReliableStructured internally selects the activity
+                                // outbox queue while preserving the common delivery contract.
+                                const result = await channel.sendReliableStructured(channelId, aunPayload, replyCtx, channel.activityLogText(item));
+                                // Test and legacy adapters may stub this method without a
+                                // structured result; the call itself still proves acceptance.
+                                if (!result)
+                                    continue;
                                 if (result.status === 'permanent' || result.status === 'failed')
                                     failedResult ??= result;
                                 else if (result.status === 'retry' || result.status === 'queued' || result.queued)
@@ -5855,6 +5953,9 @@ export class AUNChannelPlugin {
                     case 'status.progress':
                         channel.sendProcessingStatus(channelId, 'progress', envelope.sessionId ?? envelope.taskId, envelope.taskId, replyCtx, payload.metadata);
                         return;
+                    case 'status.notice':
+                        channel.sendProcessingStatus(channelId, 'notice', envelope.sessionId ?? envelope.taskId, envelope.taskId, replyCtx, payload.metadata);
+                        return;
                     case 'status.requires_action':
                         channel.sendProcessingStatus(channelId, 'requires_action', envelope.sessionId ?? envelope.taskId, envelope.taskId, replyCtx, payload.metadata);
                         return;

package/dist/channels/daemon.js

@@ -133,8 +133,12 @@ export class DaemonChannel {
         const slot = this.pending.get(runId);
         if (!slot || slot.terminalClaim)
             return;
-        if (payload.kind !== 'status.requires_action')
+        // A task notice reports an observation (for example, idle detection); it
+        // is not evidence that the runner made progress and must not renew the
+        // outer trigger watchdog.
+        if (payload.kind !== 'status.requires_action' && payload.kind !== 'status.notice') {
             this.resetWatchdog(runId, slot);
+        }
         switch (payload.kind) {
             case 'activity.batch':
                 for (const item of payload.items) {
@@ -171,6 +175,8 @@ export class DaemonChannel {
                 if (payload.metadata?.activityType === 'tool_call')
                     this.recordToolCall(slot, payload.metadata.callId);
                 break;
+            case 'status.notice':
+                break;
             case 'status.requires_action':
                 slot.waitingForAction = true;
                 if (slot.watchdogTimer)

package/dist/channels/dingtalk.js

@@ -1319,6 +1319,7 @@ export class DingtalkChannelPlugin {
                     case 'status.started':
                     case 'status.queued':
                     case 'status.progress':
+                    case 'status.notice':
                         return suppressedReceipt(envelope, 'reaction_lifecycle');
                     case 'status.completed':
                         await channel.completeAckReaction(envelope.taskId, true);

package/dist/channels/feishu.js

@@ -393,6 +393,7 @@ export class FeishuChannel {
             const chatId = data.context?.open_chat_id || data.open_chat_id;
             const cardMessageId = data.open_message_id || data.context?.open_message_id;
             const formValues = action.form_value || {};
+            const entry = this.cardMetaStore.get(value._id);
             const decision = routeCardAction({ value, formValues, operatorId }, this.cardMetaStore);
             switch (decision.kind) {
                 case 'ignore':
@@ -413,6 +414,9 @@ export class FeishuChannel {
                             content: decision.command,
                             peerId: operatorId,
                             messageId: `card-trigger-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+                            threadId: entry?.replyContext?.threadId,
+                            chatType: entry?.replyContext?.delivery?.chatType,
+                            replyContext: entry?.replyContext,
                             source: 'card-trigger',
                         });
                     }
@@ -1197,6 +1201,7 @@ export class FeishuChannel {
                 const invalidationReason = this.invalidatedInteractions.get(interaction.id);
                 this.cardMetaStore.set(interaction.id, {
                     interaction, chatId, messageId, resolved: false,
+                    replyContext: options,
                     invalidated: !!invalidationReason,
                     invalidatedReason: invalidationReason,
                 });
@@ -1750,6 +1755,7 @@ export class FeishuChannelPlugin {
                     case 'status.started':
                     case 'status.queued':
                     case 'status.progress':
+                    case 'status.notice':
                         return suppressedReceipt(envelope, 'reaction_lifecycle');
                     case 'status.completed':
                         await channel.finalizeAckReaction(envelope.taskId, 'CheckMark');
@@ -1804,16 +1810,16 @@ export class FeishuChannelPlugin {
             disconnect: () => channel.disconnect(),
             onProjectPathRequest: () => Promise.resolve(ctx.defaultProjectPath),
             registerBridge(bridge, channelType) {
-                bridge.register(adapter.channelName, (handler) => channel.onMessage(async ({ channelId: chatId, content, images, peerId, peerName, messageId, mentions, mentionAids, threadId, rootId, chatType, source }) => {
-                    const replyContext = peerId || threadId
+                bridge.register(adapter.channelName, (handler) => channel.onMessage(async ({ channelId: chatId, content, images, peerId, peerName, messageId, mentions, mentionAids, threadId, rootId, chatType, replyContext: inboundReplyContext, source }) => {
+                    const replyContext = inboundReplyContext ?? (peerId || threadId
                         ? {
                             ...(peerId ? { peerId } : {}),
                             ...(threadId ? { threadId, replyToMessageId: rootId ?? threadId, replyInThread: true } : {}),
                         }
-                        : undefined;
+                        : undefined);
                     await handler({
                         channel: adapter.channelName, channelType, channelId: chatId, content, images,
-                        selfAID: ctx.agentName, chatType: chatType || 'private',
+                        selfAID: ctx.agentName, chatType: chatType || replyContext?.delivery?.chatType || 'private',
                         peerId: peerId || '', peerName, messageId, mentions, mentionAids, threadId,
                         replyContext,
                         source,