evolcore 0.0.23 → 0.0.24

package/dist/channels/aun.js

@@ -16,7 +16,7 @@ import { createSendFileMarkerPattern } from '../core/message/file-markers.js';
 import { chatDirPath } from '../core/session/session-fs-store.js';
 import { appendHintAdd, appendHintRemove, parseInjectRequest } from '../core/message/pending-hints.js';
 import { appendAidLifecycle } from '../aun/aid/identity.js';
-import { enableFullGroupPullPagination, getAidStore, loadClient, SLOT } from '../aun/aid/store.js';
+import { enableFullGroupPullPagination, enableReliableMessageDelivery, getAidStore, loadClient, SLOT } from '../aun/aid/store.js';
 import { MAX_AUN_ATTACHMENT_SIZE, uploadBufferAndBuildPayload, uploadFileAndBuildPayload } from '../aun/msg/upload.js';
 import { loadAgent } from '../config-store.js';
 import { resolveAgentLifecycle } from '../config/lifecycle.js';
@@ -27,7 +27,6 @@ import { getProcessStartTime } from '../utils/process-introspect.js';
 import * as outbox from '../aun/outbox.js';
 import { guessMime, formatSize } from '../utils/media-cache.js';
 import { formatPeerKey, PeerIdentityCache } from '../core/relation/peer-identity.js';
-import { getFirstStaticAgentOwner } from '../config/peer-role-resolver.js';
 import { isHClassPath } from '../core/permission/protected-paths.js';
 import { consumeAunCausation, registerAunCausation } from '../core/causation/aun-association.js';
 import { deriveCausation, normalizeCausation } from '../core/causation/context.js';
@@ -35,7 +34,7 @@ import { recordCausationSpan } from '../core/causation/audit.js';
 import { refreshAgentDisplayName, resolveAgentDisplayName } from '../aun/aid/agentmd.js';
 import { readInstalledEvolcoreVersion } from '../utils/evolcore-version.js';
 import { toolInputForDisplay } from '../utils/tool-summary.js';
-import { bindPostBootstrapWelcomeOutboxSession, hasPendingPostBootstrapWelcomeOutbox, bootstrapInitialMessageOperationPrefix, postBootstrapWelcomeOperationId, preparePostBootstrapWelcomeOutbox, } from '../core/bootstrap-messages.js';
+import { bindPostBootstrapWelcomeOutboxSession, hasPendingPostBootstrapWelcomeOutbox, pendingPostBootstrapWelcomeOwners, isPostBootstrapWelcomeOperationId, findPostBootstrapWelcomeOutbox, bootstrapInitialMessageOperationPrefix, postBootstrapWelcomeOperationId, preparePostBootstrapWelcomeOutbox, } from '../core/bootstrap-messages.js';
 import { hasMentionAll, mentionEntryAids, mentionEntryTargets, } from '../core/message/mention-schema.js';
 import { normalizeAunMentionEntries, } from '../aun/msg/mention-schema.js';
 import { isDeliveryTarget, sameDeliveryTarget } from '../core/message/message-utils.js';
@@ -729,7 +728,10 @@ export class AUNChannel {
                     const actionValue = isComposeReply ? '_custom_input'
                         : typeof obj.value === 'string' ? obj.value
                             : typeof obj.action_value === 'string' ? obj.action_value : text;
-                    const threadId = typeof obj.thread_id === 'string' ? obj.thread_id : undefined;
+                    // Prefer the trusted context persisted with the card. A callback's
+                    // thread_id is client-controlled and may be absent or stale.
+                    const threadId = cardInfo?.replyContext?.threadId
+                        ?? (typeof obj.thread_id === 'string' ? obj.thread_id : undefined);
                     // 卡片点击者身份：只信认证信封（senderAid 参数，由调用方从 msg.from / msg.sender_aid 提取）。
                     // payload 自报字段（from / sender_aid / user_id）不可信，可被客户端伪造，不读取。
                     // 两类卡片共用：CommandCard → 伪入站消息的 peerId，ActionInteraction → operatorId。
@@ -771,6 +773,10 @@ export class AUNChannel {
                                 peerId: cardClickerAid,
                                 peerName: typeof obj.label === 'string' ? obj.label : typeof obj.action_label === 'string' ? obj.action_label : undefined,
                                 messageId: `card-trigger-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+                                threadId,
+                                replyContext: cardInfo?.replyContext ?? ((threadId || cardDelivery)
+                                    ? { ...(threadId ? { threadId } : {}), ...(cardDelivery ? { delivery: cardDelivery } : {}) }
+                                    : undefined),
                                 source: 'card-trigger',
                             })).catch((err) => {
                                 logger.error(`${this.logPrefix()} CommandCard handler failed: action=${actionValue} mid=${cardMsgId}`, err);
@@ -1466,12 +1472,13 @@ export class AUNChannel {
         this.store = store;
         const client = await loadClient(store, aidName);
         enableFullGroupPullPagination(client);
+        enableReliableMessageDelivery(client);
         this.client = client;
         // A reconnect replaces the SDK client. Late events from the retired
         // instance must not mutate the new instance's health or message state.
         const isCurrentClient = () => this.client === client;
         // Register event handlers before connecting
-        client.on('message.received', (data) => {
+        client.on('message.received', async (data) => {
             if (!isCurrentClient())
                 return;
             this.aidState.lastInboundAt = Date.now();
@@ -1480,11 +1487,11 @@ export class AUNChannel {
             const kind = (data && typeof data === 'object') ? data.kind ?? '' : '';
             const keys = (data && typeof data === 'object') ? Object.keys(data).join(',') : typeof data;
             logger.debug(`${this.logPrefix()}[DIAG] message.received: kind=${kind} keys=${keys}`);
-            this.handleIncomingPrivateMessage(data);
+            await this.handleIncomingPrivateMessage(data);
         });
         // pureIdentity（控制 AID）：协议层不接群消息，不注册 group 创建监听
         if (!this.config.pureIdentity) {
-            client.on('group.message_created', (data) => {
+            client.on('group.message_created', async (data) => {
                 if (!isCurrentClient())
                     return;
                 this.aidState.lastInboundAt = Date.now();
@@ -1494,7 +1501,7 @@ export class AUNChannel {
                 const gid = env.group_id ?? '';
                 const sender = env.from ?? '';
                 logger.debug(`${this.logPrefix()}[DIAG] group.message_created: group_id=${gid} sender=${sender}`);
-                this.handleIncomingGroupMessage(data);
+                await this.handleIncomingGroupMessage(data);
             });
             client.on('group.changed', (data) => {
                 if (!isCurrentClient())
@@ -1659,6 +1666,14 @@ export class AUNChannel {
             this.connected = true;
             this.connectedAt = Date.now();
             this.setAidStatus('connected', { lastConnectedAt: Date.now(), lastError: undefined, gatewayUrl: this.gatewayUrl });
+            // AUN seq_tracker is transport-scoped, while this channel's durable
+            // dedup log is application-scoped.  A diagnostic consumer can advance
+            // the former without the application having seen those messages.  On a
+            // reconnect, repair only the in-memory P2P cursor to the last message
+            // the application actually claimed, then force a Forward pull.  The SDK
+            // persists cursors monotonically, so this does not rewrite SQLite and
+            // the normal pull will restore the high watermark after delivery.
+            this.scheduleInboundP2PCursorRepair(client, isCurrentClient);
             // Workaround: SDK e2ee uses _identity.cert for sender_cert_fingerprint;
             // if cert is missing, it falls back to public key SPKI fingerprint which
             // causes peer cert lookup failures. Backfill from keystore if needed.
@@ -1691,51 +1706,50 @@ export class AUNChannel {
                 logger.warn(`${this.logPrefix()} agent config not found for ${aidName}, skipping welcome message`);
                 return false;
             }
-            const owner = getFirstStaticAgentOwner(aidName);
-            if (!owner) {
+            const owners = Array.from(new Set(agentConfig.owners ?? []));
+            if (owners.length === 0) {
                 logger.info(`${this.logPrefix()} No owner configured, skipping post-bootstrap welcome message`);
                 return false;
             }
-            const operationId = postBootstrapWelcomeOperationId(aidName);
-            const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', owner, aidName);
-            if (hasMessageLogOperation(chatDir, operationId))
-                return true;
-            const prepared = outbox.findByDedupeKey(aidName, operationId);
+            this.repairBootstrapRoutes();
             // Bootstrap welcomes target the configured personal Owner AID. They are
             // not replies to an inbound group message, so their route is always
             // private and must not be inferred with group.get_info.
             const lifecycle = resolveAgentLifecycle(agentConfig);
             const delivery = { chatType: 'private' };
-            if (prepared
-                && prepared.channelId === owner
-                && isDeliveryTarget(prepared.delivery)
-                && sameDeliveryTarget(prepared.delivery, delivery)) {
-                return true;
-            }
-            const ownerAidClean = owner.startsWith('@') ? owner.slice(1) : owner;
-            let ownerDisplayName = ownerAidClean.split('.')[0].slice(0, 12);
-            // Keep lifecycle=bootstrapping preparation entirely local. Resolving an
-            // uncached peer may download agent.md, and welcome display metadata must
-            // never delay the durable write-ahead record or the lifecycle commit.
-            const cachedOwnerInfo = this.peerInfoCached(owner);
-            try {
-                const ownerInfo = cachedOwnerInfo
-                    ?? (lifecycle === 'active' ? await this.fetchPeerInfo(owner) : undefined);
-                if (!ownerInfo) {
-                    preparePostBootstrapWelcomeOutbox(aidName, owner, ownerDisplayName, delivery);
-                    logger.info(`${this.logPrefix()} Post-bootstrap welcome durably prepared for owner: ${owner}`);
-                    return true;
+            for (const owner of owners) {
+                const operationId = postBootstrapWelcomeOperationId(aidName, owner);
+                const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', owner, aidName);
+                if (hasMessageLogOperation(chatDir, operationId)
+                    || hasMessageLogOperation(chatDir, postBootstrapWelcomeOperationId(aidName)))
+                    continue;
+                const prepared = outbox.findByDedupeKey(aidName, operationId);
+                if (prepared && prepared.channelId === owner && isDeliveryTarget(prepared.delivery) && sameDeliveryTarget(prepared.delivery, delivery))
+                    continue;
+                const ownerAidClean = owner.startsWith('@') ? owner.slice(1) : owner;
+                let ownerDisplayName = ownerAidClean.split('.')[0].slice(0, 12);
+                // Keep lifecycle=bootstrapping preparation entirely local. Resolving an
+                // uncached peer may download agent.md, and welcome display metadata must
+                // never delay the durable write-ahead record or the lifecycle commit.
+                const cachedOwnerInfo = this.peerInfoCached(owner);
+                try {
+                    const ownerInfo = cachedOwnerInfo
+                        ?? (lifecycle === 'active' ? await this.fetchPeerInfo(owner) : undefined);
+                    if (!ownerInfo) {
+                        preparePostBootstrapWelcomeOutbox(aidName, owner, ownerDisplayName, delivery);
+                        continue;
+                    }
+                    ownerDisplayName = (ownerInfo.name || ownerDisplayName).slice(0, 12);
+                    if (ownerInfo.type !== null && ownerInfo.type !== 'human') {
+                        logger.warn(`${this.logPrefix()} Owner ${owner} type is "${ownerInfo.type}" (not human).`);
+                    }
                 }
-                ownerDisplayName = (ownerInfo.name || ownerDisplayName).slice(0, 12);
-                if (ownerInfo.type !== null && ownerInfo.type !== 'human') {
-                    logger.warn(`${this.logPrefix()} Owner ${owner} type is "${ownerInfo.type}" (not human).`);
+                catch (e) {
+                    logger.warn(`${this.logPrefix()} Failed to resolve owner display name; using AID label: ${e}`);
                 }
+                preparePostBootstrapWelcomeOutbox(aidName, owner, ownerDisplayName, delivery);
             }
-            catch (e) {
-                logger.warn(`${this.logPrefix()} Failed to resolve owner display name; using AID label: ${e}`);
-            }
-            preparePostBootstrapWelcomeOutbox(aidName, owner, ownerDisplayName, delivery);
-            logger.info(`${this.logPrefix()} Post-bootstrap welcome durably prepared for owner: ${owner}`);
+            logger.info(`${this.logPrefix()} Post-bootstrap welcomes durably prepared for ${owners.length} owner(s)`);
             return true;
         }
         catch (e) {
@@ -1753,9 +1767,48 @@ export class AUNChannel {
         const aid = this.config.aid.replace(/^@/, '');
         return hasPendingPostBootstrapWelcomeOutbox(aid);
     }
-    async bindPostBootstrapWelcomeToSession(sessionId) {
+    async bindPostBootstrapWelcomeToSession(sessionId, owner) {
         const aid = this.config.aid.replace(/^@/, '');
-        return bindPostBootstrapWelcomeOutboxSession(aid, sessionId);
+        return bindPostBootstrapWelcomeOutboxSession(aid, sessionId, owner);
+    }
+    scheduleInboundP2PCursorRepair(client, isCurrentClient) {
+        const tracker = client?._seqTracker;
+        const repair = tracker?.repairContiguousSeq;
+        const pull = client?._pullV2;
+        if (typeof repair !== 'function' || typeof pull !== 'function')
+            return;
+        const ns = `p2p:${this.config.aid}`;
+        let appSeq = 0;
+        for (const [key, value] of this.inboundSeenMessages) {
+            // Group sequence spaces are independent from the P2P space.
+            if (!key.includes(':aun:private'))
+                continue;
+            const seq = Number(value.seq);
+            if (Number.isSafeInteger(seq) && seq > appSeq)
+                appSeq = seq;
+        }
+        if (appSeq <= 0)
+            return;
+        setTimeout(() => {
+            if (!isCurrentClient() || !this.connected)
+                return;
+            const transportSeq = Number(tracker.getContiguousSeq?.(ns) ?? 0);
+            if (!Number.isSafeInteger(transportSeq) || transportSeq <= appSeq + 1)
+                return;
+            try {
+                repair.call(tracker, ns, appSeq);
+                logger.warn(`${this.logPrefix()} Rewinding in-memory P2P cursor for application recovery: transport=${transportSeq}, app=${appSeq}`);
+                Promise.resolve(pull.call(client, appSeq, 50, { force: true }))
+                    .then(() => logger.info(`${this.logPrefix()} Replayed P2P messages after cursor mismatch: after_seq=${appSeq}`))
+                    .catch((error) => logger.warn(`${this.logPrefix()} P2P cursor recovery pull failed: ${error instanceof Error ? error.message : String(error)}`));
+            }
+            catch (error) {
+                logger.warn(`${this.logPrefix()} P2P cursor repair failed: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }, 250);
+    }
+    pendingPostBootstrapWelcomeOwners() {
+        return pendingPostBootstrapWelcomeOwners(this.config.aid);
     }
     /**
      * Resume delivery of an already prepared completion welcome.
@@ -1768,20 +1821,9 @@ export class AUNChannel {
         this.repairBootstrapRoutes();
         const configuredAid = this.config.aid;
         const aid = configuredAid.startsWith('@') ? configuredAid.slice(1) : configuredAid;
-        const operationId = postBootstrapWelcomeOperationId(aid);
-        const entry = outbox.findByDedupeKey(aid, operationId);
-        if (!entry) {
-            const owner = getFirstStaticAgentOwner(aid);
-            if (!owner)
-                return false;
-            const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', owner, aid);
-            return hasMessageLogOperation(chatDir, operationId);
-        }
-        if (!outbox.isDeliveryForChannel(entry.delivery, entry.channelId)) {
-            logger.warn(`${this.logPrefix()} Discarding unrouted legacy post-bootstrap welcome: id=${entry.id}`);
-            outbox.remove(aid, entry.id);
+        const entries = findPostBootstrapWelcomeOutbox(aid);
+        if (entries.length === 0)
             return false;
-        }
         const agentConfig = loadAgent(aid);
         if (!agentConfig || resolveAgentLifecycle(agentConfig) !== 'active') {
             logger.info(`${this.logPrefix()} Post-bootstrap welcome prepared; waiting for lifecycle=active`);
@@ -1789,11 +1831,15 @@ export class AUNChannel {
         }
         if (!this.connected || !this.client)
             return true;
-        const sent = await this.withOutboxInFlight(entry, () => this.deliverTextEntry(entry), { status: 'retry', error: 'outbox send is already in flight' });
-        if (sent.status === 'sent')
-            this.removeDeliveredOutboxEntry(entry);
-        else if (sent.status === 'permanent')
-            this.markPermanentOutboxFailure(entry, sent);
+        for (const entry of entries) {
+            if (!outbox.isDeliveryForChannel(entry.delivery, entry.channelId))
+                continue;
+            const sent = await this.withOutboxInFlight(entry, () => this.deliverTextEntry(entry), { status: 'retry', error: 'outbox send is already in flight' });
+            if (sent.status === 'sent')
+                this.removeDeliveredOutboxEntry(entry);
+            else if (sent.status === 'permanent')
+                this.markPermanentOutboxFailure(entry, sent);
+        }
         return true;
     }
     // ── Event handlers ──────────────────────────────────────────
@@ -3553,7 +3599,7 @@ export class AUNChannel {
         if (ids && ids.size === 0)
             this.interactionCardMessageIds.delete(interactionId);
     }
-    registerCardPostSend(messageId, action, channelId, delivery) {
+    registerCardPostSend(messageId, action, channelId, delivery, replyContext) {
         if (action.type !== 'register_interaction_card')
             return;
         this.cardMessageIdMap.set(messageId, {
@@ -3562,6 +3608,7 @@ export class AUNChannel {
             initiatorAid: action.initiatorAid,
             channelId,
             delivery: delivery ?? action.delivery,
+            replyContext,
         });
         this.ownedCardMsgIds.add(messageId);
         let messageIds = this.interactionCardMessageIds.get(action.requestId);
@@ -3594,7 +3641,7 @@ export class AUNChannel {
         if (!entry.postSend)
             return;
         if (entry.postSend.type === 'register_interaction_card') {
-            this.registerCardPostSend(messageId, entry.postSend, entry.channelId, entry.delivery);
+            this.registerCardPostSend(messageId, entry.postSend, entry.channelId, entry.delivery, entry.context);
         }
     }
     async sendAunPayload(channelId, payload, context, label) {
@@ -3923,6 +3970,9 @@ export class AUNChannel {
     }
     async sendReliableStructured(channelId, payload, context, logText) {
         const result = await this.sendContentPayload(channelId, payload, {
+            // Activity items use the durable activity queue so reconnect draining
+            // preserves their ordering relative to other lifecycle events.
+            queue: payload.type === 'activity' ? 'activity' : undefined,
             contentKind: 'custom',
             context,
             logText: logText ?? this.payloadLogText(payload, 'custom'),
@@ -3933,6 +3983,7 @@ export class AUNChannel {
                 outboxId: result.outboxId,
             });
         }
+        return result;
     }
     async sendMessage(channelId, text, context) {
         if (!text?.trim()) {
@@ -4344,7 +4395,7 @@ export class AUNChannel {
                 logger.info(`${this.logPrefix()} Durable operation already logged; skipping duplicate send: ${operationId}`);
                 return sentOutboxResult(completedMessageId);
             }
-            if (operationId === postBootstrapWelcomeOperationId(this.config.aid)) {
+            if (isPostBootstrapWelcomeOperationId(operationId, this.config.aid)) {
                 const agentConfig = loadAgent(this.config.aid);
                 if (!agentConfig || resolveAgentLifecycle(agentConfig) !== 'active') {
                     return { status: 'retry', error: 'post-bootstrap welcome is waiting for active lifecycle', code: 'BOOTSTRAP_NOT_ACTIVE' };
@@ -5317,15 +5368,19 @@ export class AUNChannel {
     /** Repair bootstrap outbox entries to the configured personal Owner route. */
     repairBootstrapRoutes() {
         const aid = this.config.aid.replace(/^@/, '');
-        const owner = getFirstStaticAgentOwner(aid);
-        if (!owner)
-            return;
-        const completionEntry = outbox.findByDedupeKey(aid, postBootstrapWelcomeOperationId(aid), { includeTerminal: true });
+        const owners = Array.from(new Set(loadAgent(aid)?.owners ?? []));
         const entries = [
             ...outbox.findByDedupePrefix(aid, bootstrapInitialMessageOperationPrefix(aid), { includeTerminal: true }),
-            ...(completionEntry ? [completionEntry] : []),
+            ...findPostBootstrapWelcomeOutbox(aid, { includeTerminal: true }),
         ].filter((entry) => !!entry?.channelId);
         for (const entry of entries) {
+            const isInitial = entry.dedupeKey?.startsWith(bootstrapInitialMessageOperationPrefix(aid));
+            const isOwnerSpecific = entry.dedupeKey?.startsWith(`bootstrap-complete:v2:${aid}:`);
+            const owner = isInitial ? owners[0]
+                : isOwnerSpecific ? owners.find(candidate => postBootstrapWelcomeOperationId(aid, candidate) === entry.dedupeKey)
+                    : (owners.includes(entry.channelId) ? entry.channelId : owners[0]);
+            if (!owner)
+                continue;
             const delivery = { chatType: 'private' };
             const nestedDelivery = entry.context?.delivery;
             const routeAlreadyPrivate = entry.channelId === owner
@@ -5387,6 +5442,7 @@ export class AUNChannel {
             timeout: 'timeout',
             queued: 'queued',
             progress: 'progress',
+            notice: 'notice',
             requires_action: 'requires_action',
         };
         const statusPayload = {
@@ -5446,6 +5502,16 @@ export class AUNChannel {
             logger.info(logTaskStatus);
     }
     async sendCustomPayload(channelId, payload, context) {
+        // Validate the route even when disconnected; callers must never be able
+        // to bypass the fail-closed AUN routing contract.  This compatibility API
+        // is intentionally best-effort while offline, so a valid route simply
+        // returns until the channel reconnects.
+        const delivery = this.requireDelivery(channelId, context);
+        context = this.withDelivery(context, delivery);
+        if (!this.connected || !this.client) {
+            logger.debug(`${this.logPrefix()} Custom payload skipped while disconnected: channel=${channelId}`);
+            return;
+        }
         // SDK 0.3.0 E2EE requires payload to be an object
         let payloadObj;
         try {
@@ -5836,12 +5902,14 @@ export class AUNChannelPlugin {
                                 await channel.sendThought(channelId, envelope.taskId, aunPayload, replyCtx);
                             }
                             else {
-                                const result = await channel.sendContentPayload(channelId, aunPayload, {
-                                    queue: 'activity',
-                                    contentKind: 'custom',
-                                    context: replyCtx,
-                                    logText: channel.activityLogText(item),
-                                });
+                                // Interactive activities are reliable structured payloads;
+                                // sendReliableStructured internally selects the activity
+                                // outbox queue while preserving the common delivery contract.
+                                const result = await channel.sendReliableStructured(channelId, aunPayload, replyCtx, channel.activityLogText(item));
+                                // Test and legacy adapters may stub this method without a
+                                // structured result; the call itself still proves acceptance.
+                                if (!result)
+                                    continue;
                                 if (result.status === 'permanent' || result.status === 'failed')
                                     failedResult ??= result;
                                 else if (result.status === 'retry' || result.status === 'queued' || result.queued)
@@ -5885,6 +5953,9 @@ export class AUNChannelPlugin {
                     case 'status.progress':
                         channel.sendProcessingStatus(channelId, 'progress', envelope.sessionId ?? envelope.taskId, envelope.taskId, replyCtx, payload.metadata);
                         return;
+                    case 'status.notice':
+                        channel.sendProcessingStatus(channelId, 'notice', envelope.sessionId ?? envelope.taskId, envelope.taskId, replyCtx, payload.metadata);
+                        return;
                     case 'status.requires_action':
                         channel.sendProcessingStatus(channelId, 'requires_action', envelope.sessionId ?? envelope.taskId, envelope.taskId, replyCtx, payload.metadata);
                         return;

package/dist/channels/daemon.js

@@ -133,8 +133,12 @@ export class DaemonChannel {
         const slot = this.pending.get(runId);
         if (!slot || slot.terminalClaim)
             return;
-        if (payload.kind !== 'status.requires_action')
+        // A task notice reports an observation (for example, idle detection); it
+        // is not evidence that the runner made progress and must not renew the
+        // outer trigger watchdog.
+        if (payload.kind !== 'status.requires_action' && payload.kind !== 'status.notice') {
             this.resetWatchdog(runId, slot);
+        }
         switch (payload.kind) {
             case 'activity.batch':
                 for (const item of payload.items) {
@@ -171,6 +175,8 @@ export class DaemonChannel {
                 if (payload.metadata?.activityType === 'tool_call')
                     this.recordToolCall(slot, payload.metadata.callId);
                 break;
+            case 'status.notice':
+                break;
             case 'status.requires_action':
                 slot.waitingForAction = true;
                 if (slot.watchdogTimer)

package/dist/channels/dingtalk.js

@@ -1319,6 +1319,7 @@ export class DingtalkChannelPlugin {
                     case 'status.started':
                     case 'status.queued':
                     case 'status.progress':
+                    case 'status.notice':
                         return suppressedReceipt(envelope, 'reaction_lifecycle');
                     case 'status.completed':
                         await channel.completeAckReaction(envelope.taskId, true);

package/dist/channels/feishu.js

@@ -393,6 +393,7 @@ export class FeishuChannel {
             const chatId = data.context?.open_chat_id || data.open_chat_id;
             const cardMessageId = data.open_message_id || data.context?.open_message_id;
             const formValues = action.form_value || {};
+            const entry = this.cardMetaStore.get(value._id);
             const decision = routeCardAction({ value, formValues, operatorId }, this.cardMetaStore);
             switch (decision.kind) {
                 case 'ignore':
@@ -413,6 +414,9 @@ export class FeishuChannel {
                             content: decision.command,
                             peerId: operatorId,
                             messageId: `card-trigger-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+                            threadId: entry?.replyContext?.threadId,
+                            chatType: entry?.replyContext?.delivery?.chatType,
+                            replyContext: entry?.replyContext,
                             source: 'card-trigger',
                         });
                     }
@@ -1197,6 +1201,7 @@ export class FeishuChannel {
                 const invalidationReason = this.invalidatedInteractions.get(interaction.id);
                 this.cardMetaStore.set(interaction.id, {
                     interaction, chatId, messageId, resolved: false,
+                    replyContext: options,
                     invalidated: !!invalidationReason,
                     invalidatedReason: invalidationReason,
                 });
@@ -1750,6 +1755,7 @@ export class FeishuChannelPlugin {
                     case 'status.started':
                     case 'status.queued':
                     case 'status.progress':
+                    case 'status.notice':
                         return suppressedReceipt(envelope, 'reaction_lifecycle');
                     case 'status.completed':
                         await channel.finalizeAckReaction(envelope.taskId, 'CheckMark');
@@ -1804,16 +1810,16 @@ export class FeishuChannelPlugin {
             disconnect: () => channel.disconnect(),
             onProjectPathRequest: () => Promise.resolve(ctx.defaultProjectPath),
             registerBridge(bridge, channelType) {
-                bridge.register(adapter.channelName, (handler) => channel.onMessage(async ({ channelId: chatId, content, images, peerId, peerName, messageId, mentions, mentionAids, threadId, rootId, chatType, source }) => {
-                    const replyContext = peerId || threadId
+                bridge.register(adapter.channelName, (handler) => channel.onMessage(async ({ channelId: chatId, content, images, peerId, peerName, messageId, mentions, mentionAids, threadId, rootId, chatType, replyContext: inboundReplyContext, source }) => {
+                    const replyContext = inboundReplyContext ?? (peerId || threadId
                         ? {
                             ...(peerId ? { peerId } : {}),
                             ...(threadId ? { threadId, replyToMessageId: rootId ?? threadId, replyInThread: true } : {}),
                         }
-                        : undefined;
+                        : undefined);
                     await handler({
                         channel: adapter.channelName, channelType, channelId: chatId, content, images,
-                        selfAID: ctx.agentName, chatType: chatType || 'private',
+                        selfAID: ctx.agentName, chatType: chatType || replyContext?.delivery?.chatType || 'private',
                         peerId: peerId || '', peerName, messageId, mentions, mentionAids, threadId,
                         replyContext,
                         source,

package/dist/channels/wecom.js

@@ -1461,7 +1461,8 @@ export class WecomChannelPlugin {
                         return;
                     case 'status.started':
                     case 'status.queued':
-                    case 'status.progress': return;
+                    case 'status.progress':
+                    case 'status.notice': return;
                     case 'status.requires_action':
                         await channel.sendMessage(channelId, '等待 owner 审批', envelope.replyContext);
                         return;

package/dist/cli/agent-command.js

@@ -69,6 +69,7 @@ Options:
         return;
     }
     const { agentList, agentShow, agentCreateInteractive, agentCreateNonInteractive, agentReload, agentEnable, agentDisable, agentGet, agentSet, agentRename, agentDelete, agentReady, runManagedAgentOperation, } = await import('./agent.js');
+    const { parseAgentOwnerArgs, resolveAgentCreatePlan, validateAgentCreatePlan } = await import('./agent-create.js');
     if (process.env.EVOLCORE_SESSION_ID && !wantsHelp(args) && !new Set(['get', 'set', 'ready']).has(sub)) {
         if (sub === 'new' && !args.includes('--non-interactive')) {
             const error = {
@@ -210,6 +211,8 @@ Options:
   --baseagent <claude|codex|gemini|ecagent>
                                       默认: defaults 配置，否则检测本机可用基座
   --owner <aid>                       默认: daemon.json 第一个 owner
+  --owners <json-array>               多个 Owner；与 --owner 互斥
+  --handoff <context>                 当前任务的 Bootstrap 上下文
   --name <display-name>               默认: package.json name，否则目录名
   --description <text>                默认: package.json description，否则使用 EvolCore 默认描述
   --dry-run                           只预览最终参数，不注册 AID、不写文件
@@ -223,6 +226,15 @@ Options:
   ec agent new mybot.agentid.pub --non-interactive --project ../project --baseagent claude`);
             return;
         }
+        if (args.includes('--handoff')) {
+            const result = { ok: false, code: 'MANAGED_ONLY', error: '--handoff requires a managed Agent task' };
+            if (formatJson)
+                console.log(JSON.stringify(result));
+            else
+                console.error(result.error);
+            process.exitCode = 1;
+            return;
+        }
         const name = args[1];
         const nonInteractive = args.includes('--non-interactive');
         if (nonInteractive) {
@@ -234,12 +246,25 @@ Options:
                 const idx = args.indexOf(flag);
                 return idx !== -1 && idx + 1 < args.length ? args[idx + 1] : undefined;
             };
-            const { resolveAgentCreatePlan, validateAgentCreatePlan } = await import('./agent.js');
+            let ownerOptions;
+            try {
+                ownerOptions = parseAgentOwnerArgs(args);
+            }
+            catch (error) {
+                const result = { ok: false, error: error instanceof Error ? error.message : String(error) };
+                if (formatJson)
+                    console.log(JSON.stringify(result));
+                else
+                    console.error(`❌ ${result.error}`);
+                process.exitCode = 1;
+                return;
+            }
             const plan = resolveAgentCreatePlan({
                 aid: name,
                 project: getArg('--project'),
                 baseagent: getArg('--baseagent'),
-                owner: getArg('--owner'),
+                ...ownerOptions,
+                handoff: getArg('--handoff'),
                 name: getArg('--name'),
                 description: getArg('--description'),
                 force: args.includes('--force'),
@@ -263,7 +288,7 @@ Options:
                     console.log(`  AID: ${plan.aid}`);
                     console.log(`  Project: ${plan.project}`);
                     console.log(`  Baseagent: ${plan.baseagent} (${plan.baseagentSource})`);
-                    console.log(`  Owner: ${plan.owner || '未设置'} (${plan.ownerSource})`);
+                    console.log(`  Owner: ${plan.owners?.join(', ') || plan.owner || '未设置'} (${plan.ownerSource})`);
                     console.log(`  Name: ${plan.name} (${plan.nameSource})`);
                     if (plan.description)
                         console.log(`  Description: ${plan.description} (${plan.descriptionSource})`);
@@ -276,6 +301,7 @@ Options:
                 baseagent: plan.baseagent,
                 project: plan.project,
                 owner: plan.owner,
+                owners: plan.owners,
                 name: plan.name,
                 description: plan.description,
                 force: args.includes('--force'),