evolcore 0.0.39 → 0.0.40

package/dist/core/message/response-engine.js

@@ -47,7 +47,7 @@ export { buildEnvelope, sendInteractionPayload } from './message-utils.js';
 import { constrainResolvedModelForRole, isModelAllowedForRoleBaseagent } from '../model/model-permission.js';
 import { eligibleFallbackModels } from '../model/model-fallback.js';
 import { RetryScheduler } from './retry-scheduler.js';
-import { constrainRuntimePermissionMode, resolveRuntimeStringField } from '../role/runtime-policy.js';
+import { assertSessionFullAccessAuthorization, constrainRuntimePermissionMode, resolveRuntimeStringField } from '../role/runtime-policy.js';
 import { resolveEffective, resolveEffectiveFieldWithSource } from '../../config/config-manager.js';
 import { resolveAgentLifecycle } from '../../config/lifecycle.js';
 import { authorizationConfigRevision, checkRoleAccess, getFirstStaticAgentOwner, listStaticAgentAdmins, listStaticAgentOwners, resolvePeerRoleDetail, roleToSessionIdentity, } from '../../config/peer-role-resolver.js';
@@ -84,6 +84,7 @@ export class AsyncQuestionService {
     deps;
     registered = new Map();
     deliveries = new Map();
+    blockingWaiters = new Map();
     constructor(deps) {
         this.deps = deps;
     }
@@ -115,10 +116,11 @@ export class AsyncQuestionService {
             const value = JSON.parse(fs.readFileSync(this.file(selfAid, id), 'utf8'));
             if (value.version !== 1 || value.selfAid !== selfAid || value.id !== id
                 || !value.sessionId || !value.providerThreadId || !value.itemId
-                || !value.origin?.peerId || !value.channelKey || !Number.isFinite(value.expiresAt))
+                || !value.origin?.peerId || !value.channelKey
+                || (value.expiresAt !== undefined && !Number.isFinite(value.expiresAt)))
                 return undefined;
             parseAsyncUserQuestions([value.question]);
-            return value;
+            return { ...value, blocking: value.blocking === true };
         }
         catch (error) {
             if (error.code !== 'ENOENT')
@@ -126,6 +128,25 @@ export class AsyncQuestionService {
             return undefined;
         }
     }
+    waitForBlocking(id) {
+        return new Promise((resolve, reject) => {
+            this.blockingWaiters.set(id, { resolve, reject });
+        });
+    }
+    resolveBlocking(id) {
+        const waiter = this.blockingWaiters.get(id);
+        if (!waiter)
+            return;
+        this.blockingWaiters.delete(id);
+        waiter.resolve();
+    }
+    rejectBlocking(id, reason) {
+        const waiter = this.blockingWaiters.get(id);
+        if (!waiter)
+            return;
+        this.blockingWaiters.delete(id);
+        waiter.reject(new Error(`用户交互已结束（${reason}）`));
+    }
     async present(session, request, message, adapter, envelope) {
         if (!session.selfAID || !message.peerId)
             throw new Error('Async question requires an authenticated route');
@@ -158,13 +179,19 @@ export class AsyncQuestionService {
                     threadId: sessionTopicThreadId(session), selfAID: session.selfAID,
                 },
                 envelope: { ...envelope, sessionId: session.id, replyContext, delivery: replyContext.delivery },
-                channelKey: adapter.channelKey, createdAt: Date.now(), expiresAt: Date.now() + QUESTION_TTL_MS,
+                channelKey: adapter.channelKey,
+                createdAt: Date.now(),
+                ...(question.blocking === true ? {} : { expiresAt: Date.now() + QUESTION_TTL_MS }),
+                blocking: question.blocking !== false,
                 status: 'pending',
             };
             if (!existing)
                 this.save(record);
             records.push(record);
         }
+        const blockingWaits = records
+            .filter(record => record.blocking)
+            .map(record => ({ record, promise: this.waitForBlocking(record.id) }));
         // Persist the complete batch before dispatch; one failed card must not lose the other questions.
         const errors = [];
         for (const record of records) {
@@ -173,10 +200,14 @@ export class AsyncQuestionService {
             }
             catch (error) {
                 errors.push(error);
+                this.rejectBlocking(record.id, '卡片投递失败');
             }
         }
-        if (errors.length)
+        if (errors.length) {
+            await Promise.allSettled(blockingWaits.map(wait => wait.promise));
             throw new AggregateError(errors, 'Async question delivery failed; pending questions retained');
+        }
+        await Promise.all(blockingWaits.map(wait => wait.promise));
     }
     async restore(adapter, selfAid) {
         let names;
@@ -197,7 +228,7 @@ export class AsyncQuestionService {
                     continue;
                 if (this.registered.get(record.id) === adapter)
                     continue;
-                if (record.expiresAt <= Date.now()) {
+                if (record.expiresAt !== undefined && record.expiresAt <= Date.now()) {
                     fs.unlinkSync(this.file(selfAid, record.id));
                     continue;
                 }
@@ -257,18 +288,24 @@ export class AsyncQuestionService {
         }
     }
     async deliverOnce(record, adapter) {
-        if (record.expiresAt <= Date.now() || !(await this.validSession(record))) {
+        if ((record.expiresAt !== undefined && record.expiresAt <= Date.now()) || !(await this.validSession(record))) {
             record.status = 'cancelled';
             record.reason = 'expired_or_binding_changed';
             this.save(record);
+            this.rejectBlocking(record.id, record.reason);
             return;
         }
         const options = record.question.options ?? [];
         const interaction = {
             type: 'interaction', id: record.id, sessionId: record.sessionId, channelId: record.origin.channelId,
-            initiatorId: record.origin.peerId, blocking: false, expiresAt: record.expiresAt,
+            initiatorId: record.origin.peerId,
+            ...(record.blocking ? { blocking: true } : { blocking: false }),
+            ...(record.expiresAt !== undefined ? { expiresAt: record.expiresAt } : {}),
             kind: {
                 kind: 'action', title: '请补充信息', body: record.question.title, bodyFormat: 'plain',
+                ...(record.question.recommendedOption
+                    ? { recommendedOption: `opt-${options.indexOf(record.question.recommendedOption)}` }
+                    : {}),
                 buttons: options.map((label, index) => ({ key: `opt-${index}`, label })),
                 allowCustomInput: true,
             },
@@ -282,13 +319,24 @@ export class AsyncQuestionService {
         this.registered.set(record.id, adapter);
         this.deps.router.register(record.id, record.sessionId, async (action, values) => {
             const current = this.read(record.selfAid, record.id);
-            if (!current || current.status !== 'pending' || current.expiresAt <= Date.now()) {
+            if (!current || current.status !== 'pending'
+                || (current.expiresAt !== undefined && current.expiresAt <= Date.now())) {
                 await this.deps.router.cancel(record.id, 'expired_or_resolved');
                 return false;
             }
             const answer = this.answerText(current.question, action, values);
-            if (!answer)
+            if (!answer) {
+                if (action === 'cancel' || action === 'dismiss' || values?.behavior === 'dismiss') {
+                    current.status = 'cancelled';
+                    current.reason = 'user_cancelled';
+                    this.save(current);
+                    this.registered.delete(record.id);
+                    this.rejectBlocking(record.id, current.reason);
+                    await adapter.invalidateInteraction?.(record.id, current.reason);
+                    return true;
+                }
                 return false;
+            }
             const session = await this.validSession(current);
             if (!session) {
                 await this.deps.router.cancel(record.id, 'binding_or_authorization_changed');
@@ -305,6 +353,13 @@ export class AsyncQuestionService {
                 current.status = 'answered';
                 this.save(current);
                 this.registered.delete(record.id);
+                this.resolveBlocking(record.id);
+                try {
+                    await adapter.invalidateInteraction?.(record.id, 'answered');
+                }
+                catch (error) {
+                    logger.debug(`[AsyncQuestions] card invalidation after answer failed: request=${record.id} error=${String(error)}`);
+                }
                 logger.info(`[AsyncQuestions] answer accepted: session=${record.sessionId} request=${record.id}`);
                 return true;
             }
@@ -312,12 +367,16 @@ export class AsyncQuestionService {
                 current.status = 'uncertain';
                 current.reason = 'submission_failed';
                 this.save(current);
+                this.rejectBlocking(record.id, '答案提交失败');
                 logger.warn(`[AsyncQuestions] answer submission failed: request=${record.id} error=${String(error)}`);
                 throw error;
             }
         }, {
             initiatorId: record.origin.peerId, initiatorChannelKey: adapter.channelKey,
-            blocking: false, retainOnRejected: true, fallbackCommand: 'ask', timeoutMs: record.expiresAt - Date.now(),
+            blocking: record.blocking,
+            retainOnRejected: true,
+            fallbackCommand: 'ask',
+            ...(record.expiresAt !== undefined ? { timeoutMs: Math.max(1, record.expiresAt - Date.now()) } : {}),
             onCancel: async (reason) => {
                 this.registered.delete(record.id);
                 if (reason === 'daemon_restart')
@@ -328,6 +387,7 @@ export class AsyncQuestionService {
                     current.reason = reason;
                     this.save(current);
                 }
+                this.rejectBlocking(record.id, reason);
                 await adapter.invalidateInteraction?.(record.id, reason);
             },
         });
@@ -432,6 +492,7 @@ const TOOL_INPUT_DIAGNOSTIC_MAX_LENGTH = 96_000;
 const TOOL_INPUT_DIAGNOSTIC_MAX_FINDINGS = 3;
 const TOOL_INPUT_DIAGNOSTIC_MAX_SHELL_DEPTH = 4;
 const TOOL_INPUT_DIAGNOSTIC_TIMEOUT_MS = 1_000;
+const PROACTIVE_CIRCUIT_BREAK_DRAIN_TIMEOUT_MS = 2_000;
 function isToolResultFailure(event) {
     return event.isError === true
         || event.executionState === 'failed'
@@ -871,12 +932,13 @@ class RetryAttemptTimeoutError extends Error {
 function createRetryAttemptTimeout(timeoutMs) {
     let timer;
     let settled = false;
+    let paused = false;
     let rejectTimeout;
     const promise = new Promise((_, reject) => {
         rejectTimeout = reject;
     });
     const arm = () => {
-        if (settled)
+        if (settled || paused)
             return;
         if (timer)
             clearTimeout(timer);
@@ -891,8 +953,23 @@ function createRetryAttemptTimeout(timeoutMs) {
     return {
         promise,
         reset: arm,
+        pause: () => {
+            if (settled || paused)
+                return;
+            paused = true;
+            if (timer)
+                clearTimeout(timer);
+            timer = undefined;
+        },
+        resume: () => {
+            if (settled || !paused)
+                return;
+            paused = false;
+            arm();
+        },
         clear: () => {
             settled = true;
+            paused = false;
             if (timer)
                 clearTimeout(timer);
             timer = undefined;
@@ -979,7 +1056,8 @@ function isNonErrorInterruptReason(reason) {
     return reason === 'new_message'
         || reason === 'stop'
         || reason === 'recalled'
-        || reason === 'daemon_restart';
+        || reason === 'daemon_restart'
+        || reason === 'proactive_circuit_break';
 }
 function isExpectedTerminalInterrupt(reason) {
     return isAbortTerminalReason(reason);
@@ -1109,7 +1187,7 @@ function getStreamRawErrorText(result, fallback) {
         fullTextLooksLikeDiagnostic ? fullText : undefined,
         fallbackLooksLikeDiagnostic ? fallback : undefined,
     ];
-    return candidates.find((part) => typeof part === 'string' && part.trim().length > 0)?.trim();
+    return candidates.find((part) => typeof part === 'string' && part.trim().length > 0);
 }
 function getStreamErrorMessage(result, includeEmoji = false) {
     const raw = getStreamErrorText(result);
@@ -1366,7 +1444,13 @@ export class ResponseEngine {
             agentName: error.evolagentName,
             chatmode: this.resolveEffectiveChatmodeForSession(session, channelKey, channelId),
             replyContext: sessionReplyContext,
-        }), { kind: 'system.error', text, subtype: 'baseagent_unavailable', recoverable: true });
+        }), {
+            kind: 'system.error',
+            text,
+            raw: error.message,
+            subtype: 'baseagent_unavailable',
+            recoverable: true,
+        });
     }
     resolveEffectiveChatmodeForSession(session, channelKey, channelId) {
         const peerType = session.metadata?.peerType;
@@ -2333,6 +2417,22 @@ export class ResponseEngine {
             && !!message.bgSessionMeta?.runId;
     }
     bgSessionTerminalMessages = new WeakSet();
+    /**
+     * 后台会话本次运行的模型：解析出请求模型时写 requestedModel，runner 回报结果后写
+     * actualModel，三个 bg-session 终态事件发布时读出。按入站 message 归属，随消息回收，
+     * 不落盘、不跨会话；只服务终态事件，其它路径不要读。
+     */
+    bgSessionModels = new WeakMap();
+    recordBgSessionModels(message, models) {
+        if (message.source !== 'bg-session')
+            return;
+        const current = this.bgSessionModels.get(message) ?? {};
+        this.bgSessionModels.set(message, {
+            ...current,
+            ...(models.requestedModel ? { requestedModel: models.requestedModel } : {}),
+            ...(models.actualModel ? { actualModel: models.actualModel } : {}),
+        });
+    }
     claimBgSessionTerminal(message) {
         const meta = message.bgSessionMeta;
         if (message.source !== 'bg-session' || !meta?.runId || this.bgSessionTerminalMessages.has(message)) {
@@ -2352,6 +2452,7 @@ export class ResponseEngine {
             runId,
             sessionId: meta.boundSessionId ?? '',
             messageId: opts.messageId ?? message.messageId ?? runId,
+            ...this.bgSessionModels.get(message),
             error,
             targetChannel: message.channel,
             targetChannelId: message.channelId,
@@ -2369,6 +2470,7 @@ export class ResponseEngine {
             runId,
             sessionId: meta.boundSessionId ?? '',
             messageId: message.messageId ?? runId,
+            ...this.bgSessionModels.get(message),
             reason,
             targetChannel: message.channel,
             targetChannelId: message.channelId,
@@ -2387,6 +2489,7 @@ export class ResponseEngine {
             sessionId: meta.boundSessionId ?? '',
             messageId,
             durationMs,
+            ...this.bgSessionModels.get(message),
             targetChannel: message.channel,
             targetChannelId: message.channelId,
             causation: causation ?? message.causation,
@@ -2429,7 +2532,7 @@ export class ResponseEngine {
      * them immediately before every Runner invocation, including retries.
      */
     async assertCurrentFullAccessExecutionAuthorization(authorization, agent) {
-        await refreshOwnershipForAuthorization(authorization.agentAid);
+        await refreshOwnershipForAuthorization(authorization.agentAid, { allowTransient: true });
         if (authorization.permissionMode !== 'fullaccess'
             || authorization.processRole !== 'fullaccess-run'
             || authorization.dataScope !== 'daemon'
@@ -2444,6 +2547,12 @@ export class ResponseEngine {
         if (authorization.source === 'agent-policy') {
             assertAgentPolicyAuthorization(authorization);
         }
+        else if (authorization.source === 'session-policy') {
+            const currentSession = this.sessionManager.getSessionById
+                ? await this.sessionManager.getSessionById(authorization.sessionId ?? '')
+                : undefined;
+            assertSessionFullAccessAuthorization(authorization, currentSession);
+        }
         else if (authorization.source !== 'fullaccess-command' && authorization.source !== 'trigger') {
             throw new Error('fullaccess execution authorization has an unsupported source');
         }
@@ -2686,7 +2795,7 @@ export class ResponseEngine {
      * 处理消息（主入口）
      */
     async processMessage(message) {
-        const fallbackFullAccessAudit = this.resolveFullAccessAuditCandidate(message);
+        const fallbackFullAccessAudit = await this.resolveFullAccessAuditCandidate(message);
         let outerFailureReason;
         try {
             await this.processMessageWithMonitors(message);
@@ -2707,7 +2816,9 @@ export class ResponseEngine {
                     event: fallbackFullAccessAudit.authorization.source === 'trigger'
                         ? 'fullaccess.trigger.execution.ended'
                         : fallbackFullAccessAudit.authorization.source === 'agent-policy'
-                            ? 'fullaccess.agent-policy.execution.ended' : 'fullaccess.execution.ended',
+                            ? 'fullaccess.agent-policy.execution.ended'
+                            : fallbackFullAccessAudit.authorization.source === 'session-policy'
+                                ? 'fullaccess.session-policy.execution.ended' : 'fullaccess.execution.ended',
                     source: fallbackFullAccessAudit.authorization.source,
                     actorId: fallbackFullAccessAudit.authorization.authorizedBy,
                     processRole: fallbackFullAccessAudit.processRole,
@@ -2774,7 +2885,10 @@ export class ResponseEngine {
         const accessAdapter = accessChannelInfo?.adapter;
         const accessAdapterSelfAid = typeof accessAdapter?._selfAid === 'function' ? accessAdapter._selfAid() : undefined;
         const selfAidForAccess = accessAdapterSelfAid || message.selfAID || session.selfAID || undefined;
-        await refreshOwnershipForAuthorization(selfAidForAccess, { maxAgeMs: OWNERSHIP_CACHE_MAX_AGE_MS });
+        await refreshOwnershipForAuthorization(selfAidForAccess, {
+            maxAgeMs: OWNERSHIP_CACHE_MAX_AGE_MS,
+            allowTransient: true,
+        });
         if (message.handoffDelivery?.direction === 'target'
             && this.handoffRuntime
             && selfAidForAccess) {
@@ -2823,9 +2937,10 @@ export class ResponseEngine {
         // ── 角色访问控制检查：读取该用户角色的 allowAccess 配置，false 则拦截并回复权限不足 ──
         const userRole = session.identity?.role || 'none';
         const isInternalHandoff = message.source === 'handoff';
-        const fullAccessAuditCandidate = this.resolveFullAccessAuditCandidate(message);
+        const fullAccessAuditCandidate = await this.resolveFullAccessAuditCandidate(message);
         const isCurrentFullAccessCommand = (fullAccessAuditCandidate?.authorization.source === 'fullaccess-command'
-            || fullAccessAuditCandidate?.authorization.source === 'agent-policy')
+            || fullAccessAuditCandidate?.authorization.source === 'agent-policy'
+            || fullAccessAuditCandidate?.authorization.source === 'session-policy')
             && fullAccessAuditCandidate.processRole === 'fullaccess-run';
         const isCurrentFullAccessTrigger = fullAccessAuditCandidate?.authorization.source === 'trigger'
             && fullAccessAuditCandidate.processRole === 'fullaccess-run';
@@ -2976,6 +3091,35 @@ export class ResponseEngine {
                 activityRecorder?.call(channelInfo.adapter, triggerAttemptId);
             }
         };
+        let totalExecutionDeadline;
+        let totalExecutionPausedRemaining;
+        const pauseTotalExecutionTimer = () => {
+            if (totalExecutionTimer === undefined || totalExecutionDeadline === undefined)
+                return;
+            totalExecutionPausedRemaining = Math.max(0, totalExecutionDeadline - Date.now());
+            clearTimeout(totalExecutionTimer);
+            totalExecutionTimer = undefined;
+        };
+        const resumeTotalExecutionTimer = () => {
+            if (totalExecutionTimer !== undefined || totalExecutionPausedRemaining === undefined)
+                return;
+            const remaining = totalExecutionPausedRemaining;
+            totalExecutionPausedRemaining = undefined;
+            totalExecutionDeadline = Date.now() + remaining;
+            totalExecutionTimer = setTimeout(() => {
+                logger.warn(`[ResponseEngine] Total execution timeout after ${totalExecutionMs}ms, stream: ${streamKey}`);
+                rejectAfterInterruptBarrier(new Error('TOTAL_EXECUTION_TIMEOUT'));
+            }, remaining);
+            totalExecutionTimer.unref?.();
+        };
+        timeoutControl.pauseForInteraction = () => {
+            monitor?.pause();
+            pauseTotalExecutionTimer();
+        };
+        timeoutControl.resumeForInteraction = () => {
+            monitor?.resume();
+            resumeTotalExecutionTimer();
+        };
         // Cache background status to avoid async call inside setInterval
         const isBackground = this.isBackgroundSession(session, message.channel, message.channelId);
         const timeoutPromise = new Promise((_, reject) => {
@@ -3028,6 +3172,7 @@ export class ResponseEngine {
         const totalExecutionPromise = totalExecutionMs === undefined
             ? undefined
             : new Promise((_, reject) => {
+                totalExecutionDeadline = Date.now() + totalExecutionMs;
                 totalExecutionTimer = setTimeout(() => {
                     logger.warn(`[ResponseEngine] Total execution timeout after ${totalExecutionMs}ms, stream: ${streamKey}`);
                     rejectAfterInterruptBarrier(new Error('TOTAL_EXECUTION_TIMEOUT'));
@@ -3095,12 +3240,14 @@ export class ResponseEngine {
                 this.activeTimeoutHandlers.delete(session.id);
         }
     }
-    resolveFullAccessAuditCandidate(message) {
+    async resolveFullAccessAuditCandidate(message) {
         const commandAuthorization = message.executionPermissionOverride;
         if (commandAuthorization?.permissionMode === 'fullaccess'
             && commandAuthorization.processRole === 'fullaccess-run'
             && commandAuthorization.dataScope === 'daemon'
-            && (commandAuthorization.source === 'fullaccess-command' || commandAuthorization.source === 'agent-policy')
+            && (commandAuthorization.source === 'fullaccess-command'
+                || commandAuthorization.source === 'agent-policy'
+                || commandAuthorization.source === 'session-policy')
             && typeof commandAuthorization.authorizedBy === 'string'
             && commandAuthorization.authorizedBy.length > 0) {
             let currentOwner = false;
@@ -3108,6 +3255,12 @@ export class ResponseEngine {
                 currentOwner = new Set(getDaemonOwners()).has(commandAuthorization.authorizedBy);
                 if (commandAuthorization.source === 'agent-policy')
                     assertAgentPolicyAuthorization(commandAuthorization);
+                if (commandAuthorization.source === 'session-policy') {
+                    const session = this.sessionManager.getSessionById
+                        ? await this.sessionManager.getSessionById(commandAuthorization.sessionId ?? '')
+                        : undefined;
+                    assertSessionFullAccessAuthorization(commandAuthorization, session);
+                }
             }
             catch {
                 currentOwner = false;
@@ -3575,17 +3728,23 @@ export class ResponseEngine {
                 if (!timeoutControl.claimTerminal())
                     return;
                 const recoverable = timeoutControl.recoverable === true;
+                const rawErrorText = getErrorRawText(timeoutError);
                 const isTotalExecutionTimeout = timeoutError.message === 'TOTAL_EXECUTION_TIMEOUT';
                 const totalExecutionMs = timeoutError instanceof ExecutionTimeoutError ? timeoutError.timeoutMs : this.totalExecutionLimitMs();
                 const statusPayload = timeoutError instanceof OrphanedTargetSessionError ? {
                     kind: 'status.error',
-                    metadata: { errorType: timeoutError.reason, message: '任务执行状态丢失，已结束本次执行。' },
+                    metadata: {
+                        errorType: timeoutError.reason,
+                        message: '任务执行状态丢失，已结束本次执行。',
+                        ...(rawErrorText ? { raw: rawErrorText } : {}),
+                    },
                 } : {
                     kind: 'status.timeout',
                     metadata: isTotalExecutionTimeout
                         ? { ...(totalExecutionMs === undefined ? {} : { totalExecutionMs }),
-                            ...(timeoutError instanceof ExecutionTimeoutError ? { reason: timeoutError.reason } : {}) }
-                        : { idleSec: getLastIdleSec?.() || undefined },
+                            ...(timeoutError instanceof ExecutionTimeoutError ? { reason: timeoutError.reason } : {}),
+                            ...(rawErrorText ? { raw: rawErrorText } : {}) }
+                        : { idleSec: getLastIdleSec?.() || undefined, ...(rawErrorText ? { raw: rawErrorText } : {}) },
                 };
                 const idleSec = getLastIdleSec?.() || 0;
                 const userMessage = timeoutError instanceof OrphanedTargetSessionError
@@ -3612,7 +3771,7 @@ export class ResponseEngine {
                     kind: 'result.error',
                     text: userMessage,
                     recoverable,
-                    ...(getErrorRawText(timeoutError) ? { raw: getErrorRawText(timeoutError) } : {}),
+                    ...(rawErrorText ? { raw: rawErrorText } : {}),
                     subtype: normalizeCoreErrorSubtype(timeoutError, undefined, isTotalExecutionTimeout ? 'timeout' : 'timeout'),
                     reason: isExecutionFailure(timeoutError)
                         ? normalizeCoreErrorReason(timeoutError.reason)
@@ -3674,6 +3833,46 @@ export class ResponseEngine {
         let fullAccessExecutionFailed = false;
         let fullAccessExecutionFailureReason;
         let activePermissionContext;
+        let proactiveCircuitBreakRequested = false;
+        let proactiveCircuitBreakInterruptPromise;
+        let proactiveCircuitBreakTimer;
+        const interruptProactiveCircuitBreak = () => {
+            if (proactiveCircuitBreakInterruptPromise)
+                return proactiveCircuitBreakInterruptPromise;
+            if (!proactiveCircuitBreakRequested
+                || this.interruptedSessions.get(session.id) !== 'proactive_circuit_break'
+                || (turnLease && !this.turnCoordinator.isCurrent(turnLease)))
+                return Promise.resolve();
+            this.interruptedSessions.set(session.id, 'proactive_circuit_break');
+            if (proactiveCircuitBreakTimer) {
+                clearTimeout(proactiveCircuitBreakTimer);
+                proactiveCircuitBreakTimer = undefined;
+            }
+            const interruptPromise = (async () => {
+                await agent.interrupt(session.id).catch(error => {
+                    logger.debug(`[ResponseEngine] circuit break interrupt failed: session=${session.id} error=${error instanceof Error ? error.message : String(error)}`);
+                });
+            })();
+            proactiveCircuitBreakInterruptPromise = interruptPromise;
+            return interruptPromise;
+        };
+        const requestProactiveCircuitBreak = () => {
+            if (proactiveCircuitBreakRequested)
+                return;
+            proactiveCircuitBreakRequested = true;
+            this.interruptedSessions.set(session.id, 'proactive_circuit_break');
+            void adapter.send(withEnvelopeReplyContext(envelope, taskReplyContext()), {
+                kind: 'result.text',
+                text: '⚠️ 任务执行长时间不反馈，已被自动中断。请重新发言继续。',
+                isFinal: true,
+            }).catch(error => {
+                logger.warn(`[ResponseEngine] circuit break channel send failed: session=${session.id} error=${error instanceof Error ? error.message : String(error)}`);
+            });
+            proactiveCircuitBreakTimer = setTimeout(() => {
+                void interruptProactiveCircuitBreak();
+            }, PROACTIVE_CIRCUIT_BREAK_DRAIN_TIMEOUT_MS);
+            proactiveCircuitBreakTimer.unref?.();
+        };
         try {
             const isBackground = this.isBackgroundSession(session, message.channel, message.channelId);
             // 记录收到消息
@@ -4127,6 +4326,15 @@ export class ResponseEngine {
                 ? systemSessionModule.runnerLaunch(normalizeBaseagent(agent.name).canonical, systemSessionContext).sandbox
                 : undefined;
             const pureSessionPolicyHook = systemSessionMarker ? undefined : modePolicyHook;
+            const purePreToolUsePolicyHook = pureSessionPolicyHook
+                ? (toolName, toolInput) => proactiveCircuitBreakRequested
+                    ? {
+                        block: true,
+                        policyCode: 'proactive_circuit_break',
+                        reason: '任务已触发主动模式熔断，工具调用已停止',
+                    }
+                    : pureSessionPolicyHook(toolName, toolInput)
+                : undefined;
             // 路径授权（仅用户会话）：身份就是角色名；运行时授予（ec ctl path grant）按 sessionId 再并一层。
             const pathGrantIdentity = systemSessionMarker ? undefined : (peerRole || undefined);
             const grantedReadRoots = (() => {
@@ -4168,7 +4376,8 @@ export class ResponseEngine {
                 permissionMode: effectivePermissionMode,
                 recordExecutionAnomaly,
                 pauseController: taskPauseController,
-                preToolUsePolicyHook: pureSessionPolicyHook,
+                preToolUsePolicyHook: purePreToolUsePolicyHook,
+                onProactiveCircuitBreak: requestProactiveCircuitBreak,
                 systemSessionCheck,
                 ...(systemSessionModule && systemSessionContext
                     ? {
@@ -4278,6 +4487,13 @@ export class ResponseEngine {
                     if (!pluginHook)
                         return undefined;
                     return (toolName, toolInput, meta) => {
+                        if (proactiveCircuitBreakRequested) {
+                            return {
+                                block: true,
+                                policyCode: 'proactive_circuit_break',
+                                reason: '任务已触发主动模式熔断，工具调用已停止',
+                            };
+                        }
                         const stBefore = modeState.get('proactive');
                         const wasFirstPending = stBefore && !stBefore.firstToolDone;
                         const result = pluginHook(toolName, toolInput, meta);
@@ -4287,19 +4503,9 @@ export class ResponseEngine {
                         if (result?.block) {
                             // 拦截事件（首工具非表态 / 工具进展汇报未完成）
                             snapshot.set(session.id, taskId, { policyHook: { triggered: true, blocked: true, toolName } });
-                            // 问题1/2修复：熔断码表示连续违规已超阈值，停止注入提醒，直接中断任务。
-                            // F5修复：向渠道发一条人类可读的错误说明，避免静默中断。
+                            // 熔断后拒绝新的工具调用，当前调用收尾后再中断流。
                             if (result.policyCode === 'proactive_circuit_break') {
-                                void adapter.send(withEnvelopeReplyContext(envelope, capturedReplyContext), {
-                                    kind: 'result.text',
-                                    text: '⚠️ 任务执行遇到循环障碍，已自动中断。请重新描述你的需求。',
-                                    isFinal: true,
-                                }).catch(err => {
-                                    logger.warn(`[ResponseEngine] circuit break channel send failed: session=${session.id} error=${err instanceof Error ? err.message : String(err)}`);
-                                });
-                                void agent.interrupt(session.id).catch(error => {
-                                    logger.debug(`[ResponseEngine] circuit break interrupt failed: session=${session.id} error=${error instanceof Error ? error.message : String(error)}`);
-                                });
+                                requestProactiveCircuitBreak();
                                 return result;
                             }
                             const errorMsg = `⚠️ proactive 模式违规：${result.reason ?? '请先发送必要说明'}。请重新执行正确的命令。`;
@@ -4390,7 +4596,7 @@ export class ResponseEngine {
                         if (commandFullAccess.permissionMode !== 'fullaccess'
                             || commandFullAccess.processRole !== 'fullaccess-run'
                             || commandFullAccess.dataScope !== 'daemon'
-                            || (commandFullAccess.source !== 'fullaccess-command' && commandFullAccess.source !== 'agent-policy')
+                            || (commandFullAccess.source !== 'fullaccess-command' && commandFullAccess.source !== 'agent-policy' && commandFullAccess.source !== 'session-policy')
                             || !commandFullAccess.authorizedBy) {
                             throw new Error('fullaccess command authorization is missing or malformed');
                         }
@@ -4403,6 +4609,10 @@ export class ResponseEngine {
                                 || authenticatedActor.operatorId !== commandFullAccess.policyActor?.operatorId)) {
                             throw new Error('Agent fullaccess policy authorization is missing its Agent identity');
                         }
+                        if (commandFullAccess.source === 'session-policy'
+                            && (commandFullAccess.sessionId !== session.id || configChatType !== 'private')) {
+                            throw new Error('Session fullaccess policy authorization is missing its EC session identity');
+                        }
                         fullAccessAuthorization = commandFullAccess;
                     }
                     else {
@@ -4413,7 +4623,7 @@ export class ResponseEngine {
                             || !message.triggerMeta.authorizedBy) {
                             throw new Error('fullaccess Trigger override lacks trusted scheduler identity or approval provenance');
                         }
-                        await refreshOwnershipForAuthorization(selfAid);
+                        await refreshOwnershipForAuthorization(selfAid, { allowTransient: true });
                         const currentOwners = new Set(getDaemonOwners());
                         if (!currentOwners.has(message.triggerMeta.authorizedBy)) {
                             throw new Error('fullaccess Trigger approval is no longer owned');
@@ -4554,6 +4764,8 @@ export class ResponseEngine {
                 }
                 agentModel = (typeof agent.getModel === 'function') ? agent.getModel() : undefined;
                 primaryModel = modelOverride?.model || agentModel;
+                // runner 还没跑起来就终止时，终态事件至少带上解析出的模型
+                this.recordBgSessionModels(message, { requestedModel: primaryModel });
                 if (!hasExplicitTriggerModel && primaryModel) {
                     const fallbackResolution = await eligibleFallbackModels({
                         selfAid: selfAid || undefined,
@@ -5095,7 +5307,11 @@ export class ResponseEngine {
                     chatType: configChatType,
                     selfAid,
                     peerId: configActorId || undefined,
-                    peerKey,
+                    // 系统会话（如记忆整理）的消息 peerId 是后台伪对端 `bg:<kind>`，推出来的 peerKey 不是
+                    // 它要操作的关系；目标关系由发起方写在 session.metadata.peerKey，与 system-session
+                    // 模块的读写边界同源。ec memory 写盘读的是这里，必须用它。
+                    // 局部 peerKey（delegation grant / stats / 响应模式）保持伪对端不变，二者此处有意不一致。
+                    peerKey: systemSessionContext?.peerKey ?? peerKey,
                     peerName: peerName || undefined,
                     peerType: message.peerType || session.metadata?.peerType || undefined,
                     // 系统会话没有角色
@@ -5183,7 +5399,9 @@ export class ResponseEngine {
                                     event: fullAccessAuthorization.source === 'trigger'
                                         ? 'fullaccess.trigger.execution.started'
                                         : fullAccessAuthorization.source === 'agent-policy'
-                                            ? 'fullaccess.agent-policy.execution.started' : 'fullaccess.execution.started',
+                                            ? 'fullaccess.agent-policy.execution.started'
+                                            : fullAccessAuthorization.source === 'session-policy'
+                                                ? 'fullaccess.session-policy.execution.started' : 'fullaccess.execution.started',
                                     source: fullAccessAuthorization.source,
                                     actorId: fullAccessAuthorization.authorizedBy,
                                     processRole: fullAccessAuditProcessRole,
@@ -5234,6 +5452,8 @@ export class ResponseEngine {
                             this.activeRunnerModels.set(session.id, debugRunnerModel);
                         else
                             this.activeRunnerModels.delete(session.id);
+                        // 每次尝试前覆盖：备用模型切换后，请求模型以最后一次尝试为准
+                        this.recordBgSessionModels(message, { requestedModel: debugRunnerModel });
                         const stream = await agent.runQuery(session.id, effectivePrompt, absoluteProjectPath, runAgentSessionId, runnerImages, effectiveSystemPrompt, this.sessionManager, modelOverride, runtimeEnv);
                         // The turn may be superseded while the runner is still creating its
                         // backend query. Replay the interrupt after runQuery resolves, when
@@ -5279,28 +5499,51 @@ export class ResponseEngine {
                         } : undefined, taskCausation, turnLease, effectivePermissionMode, selfAid, async (request) => {
                             if (!this.asyncQuestions)
                                 throw new Error('Async question service is unavailable');
+                            const blocking = request.questions.some(question => question.blocking === true);
                             if (permissionContext.approvalInteractionPolicy === 'deny') {
                                 logger.info(`[AsyncQuestions] no interactive recipient for unattended task: session=${session.id}`);
+                                if (blocking)
+                                    throw new Error('阻塞式用户问题无法在无人值守任务中继续');
                                 return;
                             }
-                            await renderer.flush(false);
+                            if (blocking) {
+                                attemptTimeout?.pause();
+                                timeoutControl?.pauseForInteraction?.();
+                            }
                             try {
+                                if (blocking)
+                                    await agent.interrupt(session.id);
+                                await renderer.flush(false);
                                 await this.asyncQuestions.present(session, request, message, adapter, envelope);
                             }
                             catch (error) {
-                                // Card dispatch is non-blocking business input. Keep consuming the running turn;
-                                // pending records can be delivered after reconnect/restart.
+                                if (blocking)
+                                    throw error;
+                                // Non-blocking business input can be restored after reconnect/restart.
                                 logger.warn(`[AsyncQuestions] presentation failed: session=${session.id} error=${String(error)}`);
                             }
+                            finally {
+                                if (blocking) {
+                                    attemptTimeout?.resume();
+                                    timeoutControl?.resumeForInteraction?.();
+                                }
+                            }
+                        }, async () => {
+                            if (proactiveCircuitBreakRequested)
+                                await interruptProactiveCircuitBreak();
                         });
                         streamResult = attemptTimeout
                             ? await Promise.race([processAttempt, attemptTimeout.promise])
                             : await processAttempt;
+                        // runner 回报的实际模型；之后无论成功、失败还是被打断，终态事件都能带出
+                        this.recordBgSessionModels(message, {
+                            actualModel: streamResult.lastModelCall?.model || streamResult.model,
+                        });
                         // Activation can complete either before runQuery returns (Codex)
                         // or while its event stream is consumed (Claude/Gemini/Ecagent).
                         // Always reconcile from strict latest before any logical retry.
                         await refreshTopicBindingForLogicalRetry();
-                        if (!streamResult.isError) {
+                        if (!streamResult.isError && !isExpectedTerminalInterrupt(streamResult.terminalReason)) {
                             const protocolDecision = this.turnCoordinator.evaluateCommit(turnLease, this.buildTurnCommitEvidence(session, streamResult));
                             const protocolReason = protocolDecision.ok ? undefined : protocolDecision.reason;
                             // Codex app-server turn/start appends its input before runQuery
@@ -5518,7 +5761,7 @@ export class ResponseEngine {
                 // 上下文过长但无法 auto-compact（无 session ID 或 agent 不支持），显示友好提示
                 await this.emitOperationalNotice(renderer, getContextTooLongHint(agent), 'warn', 'context-too-long');
             }
-            if (!streamResult.isError) {
+            if (!streamResult.isError && !isExpectedTerminalInterrupt(streamResult.terminalReason)) {
                 const commitEvidence = this.buildTurnCommitEvidence(session, streamResult);
                 const commitDecision = this.turnCoordinator.evaluateCommit(turnLease, commitEvidence);
                 if (!commitDecision.ok && commitDecision.reason === 'stale_generation') {
@@ -5715,6 +5958,7 @@ export class ResponseEngine {
                 await this.publishTriggerExecutionInterrupted(message, adapter, envelope, 'stale_turn', taskCausation);
                 return;
             }
+            const terminalInterrupt = isExpectedTerminalInterrupt(streamResult.terminalReason);
             const streamRecoverable = !permissionTerminalFailure
                 && !isExpectedTerminalInterrupt(streamResult.terminalReason)
                 && isRetryableError(new Error(getStreamErrorText(streamResult)));
@@ -5757,7 +6001,7 @@ export class ResponseEngine {
                 this.activeTaskRuntimeContexts.delete(session.id);
                 this.activeRunnerModels.delete(session.id); // F1修复
             }
-            this.agentDelegationRegistry?.revokeTask(session.id, taskId, streamResult.isError ? 'failed' : 'completed');
+            this.agentDelegationRegistry?.revokeTask(session.id, taskId, terminalInterrupt ? 'interrupted' : streamResult.isError ? 'failed' : 'completed');
             logger.info(`[ResponseEngine] session ${session.id} processing cleared task=${taskId}`);
             import('../../utils/msg-diag.js').then(m => m.diagLog('task_done', { aid: session.selfAID ?? '', msgId: message.messageId ?? '', taskId, text: message.content ?? '' })).catch(() => { });
             // 降级模型回复末尾追加标记（代码层硬注入，不依赖模型输出）
@@ -5800,7 +6044,6 @@ export class ResponseEngine {
                     throw tagged;
                 }
             }
-            const terminalInterrupt = isExpectedTerminalInterrupt(streamResult.terminalReason);
             if (!streamResult.isError && !terminalInterrupt) {
                 const commitDecision = await this.turnCoordinator.commit(session, turnLease, this.buildTurnCommitEvidence(session, streamResult));
                 if (!commitDecision.ok) {
@@ -5828,8 +6071,10 @@ export class ResponseEngine {
             const interruptReason = this.interruptedSessions.get(session.id);
             if (streamResult.isError || terminalInterrupt) {
                 // Agent 流正常结束但任务结果失败（权限被拒、max turns、工具链失败等）
-                const errorSummary = streamResult.errors?.join('; ')
-                    || (terminalInterrupt ? '用户交互未确认，任务已暂停' : '任务执行失败');
+                const errorSummary = streamResult.subtype === 'proactive_circuit_break'
+                    ? '主动模式门禁触发熔断，任务已中断'
+                    : streamResult.errors?.join('; ')
+                        || (terminalInterrupt ? '用户交互未确认，任务已暂停' : '任务执行失败');
                 const userErrorSummary = streamResult.subtype === 'protocol_incomplete'
                     ? errorSummary
                     : streamHitContextLimit(streamResult)
@@ -5852,6 +6097,7 @@ export class ResponseEngine {
                         errorType: rawSubtype,
                         recoverable: streamRecoverable,
                         message: userErrorSummary,
+                        ...(streamRawErrorText ? { raw: streamRawErrorText } : {}),
                         durationMs: Date.now() - startTime,
                         numTurns: streamResult.numTurns,
                         toolCallCount: streamResult.toolUseCount ?? 0,
@@ -6162,6 +6408,7 @@ export class ResponseEngine {
                     finalText: streamResult.lastReplyText || undefined,
                     durationMs: Date.now() - startTime,
                     agentName: agentNameForStats,
+                    agentAid: runnerSelfAid,
                     numTurns: streamResult.numTurns,
                     encrypted: message.encrypted ?? message.replyContext?.metadata?.encrypted,
                     timestamp: Date.now(),
@@ -6180,7 +6427,7 @@ export class ResponseEngine {
                 // 所有 message.send 成功后统一写入 messages.jsonl，此处不再重复写入。
             }
             const isFinallyBackground = this.isBackgroundSession(session, message.channel, message.channelId);
-            if (isFinallyBackground && !streamResult.isError) {
+            if (isFinallyBackground && !streamResult.isError && !terminalInterrupt) {
                 if (!this.turnCoordinator.canPublish(turnLease))
                     return;
                 this.messageCache.addEvent(session.id, {
@@ -6272,20 +6519,26 @@ export class ResponseEngine {
                     : failureReason, recoverable);
             }
             const totalExecutionMs = error instanceof ExecutionTimeoutError ? error.timeoutMs : this.totalExecutionLimitMs();
+            const rawErrorText = getErrorRawText(error);
             const procStatus = errType === ErrorType.SDK_TIMEOUT || isTotalExecutionTimeout ? 'timeout'
                 : errType === ErrorType.STREAM_ERROR ? 'interrupted'
                     : 'error';
             const daemonTrigger = this.isTrustedDaemonTrigger(message);
             const statusPayload = error instanceof OrphanedTargetSessionError
-                ? { kind: 'status.error', metadata: { errorType: error.reason, message: '任务执行状态丢失，已结束本次执行。' } }
+                ? { kind: 'status.error', metadata: {
+                        errorType: error.reason,
+                        message: '任务执行状态丢失，已结束本次执行。',
+                        ...(rawErrorText ? { raw: rawErrorText } : {}),
+                    } }
                 : procStatus === 'timeout'
                     ? { kind: 'status.timeout', metadata: isTotalExecutionTimeout
                             ? { ...(totalExecutionMs === undefined ? {} : { totalExecutionMs }),
-                                ...(error instanceof ExecutionTimeoutError ? { reason: error.reason } : {}) }
-                            : { idleSec: getLastIdleSec?.() || undefined } }
+                                ...(error instanceof ExecutionTimeoutError ? { reason: error.reason } : {}),
+                                ...(rawErrorText ? { raw: rawErrorText } : {}) }
+                            : { idleSec: getLastIdleSec?.() || undefined, ...(rawErrorText ? { raw: rawErrorText } : {}) } }
                     : procStatus === 'interrupted'
                         ? { kind: 'status.interrupted', metadata: { reason: 'stream_error' } }
-                        : { kind: 'status.error' };
+                        : { kind: 'status.error', metadata: rawErrorText ? { raw: rawErrorText } : undefined };
             // 用户主动中断（新消息打断 或 /stop 命令）时静默，不发送中断/错误提示
             if (!isUserInterrupt && ownsTimeoutTerminal && !daemonTrigger) {
                 await adapter.send(envelope, statusPayload).catch(() => { });
@@ -6404,13 +6657,15 @@ export class ResponseEngine {
                     : modelFallbackExhaustedMessage
                         ? ErrorType.MODEL_UNAVAILABLE
                         : normalizeCoreErrorSubtype(error, undefined, isTotalExecutionTimeout || isTimeout ? 'timeout' : undefined);
-                const rawErrorText = getErrorRawText(error);
+                const distinctRawErrorText = rawErrorText && !userMessage.includes(rawErrorText)
+                    ? rawErrorText
+                    : undefined;
                 const errorPayload = {
                     kind: 'result.error',
                     text: userMessage,
                     recoverable,
                     subtype: errorSubtype,
-                    ...(rawErrorText ? { raw: rawErrorText } : {}),
+                    ...(distinctRawErrorText ? { raw: distinctRawErrorText } : {}),
                     ...(errorReason ? { reason: errorReason } : {}),
                 };
                 if (!isUserInterrupt && daemonTrigger && procStatus === 'error') {
@@ -6423,6 +6678,7 @@ export class ResponseEngine {
                         metadata: {
                             errorType: errType,
                             message: userMessage,
+                            ...(rawErrorText ? { raw: rawErrorText } : {}),
                             recoverable,
                             durationMs: Date.now() - startTime,
                             numTurns: streamResult.numTurns,
@@ -6457,6 +6713,8 @@ export class ResponseEngine {
             }
         }
         finally {
+            if (proactiveCircuitBreakTimer)
+                clearTimeout(proactiveCircuitBreakTimer);
             if (taskActivityStore) {
                 try {
                     taskActivityStore.updateStatus(taskId, taskActivityStatus);
@@ -6497,7 +6755,9 @@ export class ResponseEngine {
                     event: fullAccessAuthorization.source === 'trigger'
                         ? 'fullaccess.trigger.execution.ended'
                         : fullAccessAuthorization.source === 'agent-policy'
-                            ? 'fullaccess.agent-policy.execution.ended' : 'fullaccess.execution.ended',
+                            ? 'fullaccess.agent-policy.execution.ended'
+                            : fullAccessAuthorization.source === 'session-policy'
+                                ? 'fullaccess.session-policy.execution.ended' : 'fullaccess.execution.ended',
                     source: fullAccessAuthorization.source,
                     actorId: fullAccessAuthorization.authorizedBy,
                     processRole: fullAccessAuditProcessRole,
@@ -6777,7 +7037,7 @@ export class ResponseEngine {
      */
     async processEventStream(stream, session, agent, renderer, resetTimer, shouldSuppress, proactive, 
     /** [迁移点4/5] 响应模式插件 + 状态，用于调 onToolUse/onComplete 钩子 */
-    modeHooks, causation, turnLease, permissionMode, proactiveSelfAid, onAsyncQuestion) {
+    modeHooks, causation, turnLease, permissionMode, proactiveSelfAid, onAsyncQuestion, onToolCallsSettled) {
         // Per-session agent name for stats bucketing
         const statsChannelKey = session.channel === 'daemon' ? session.channel : (session.metadata?.channelKey || session.channel);
         const agentNameForStats = this.agentRegistry?.resolveByChannel(statsChannelKey)?.name ?? '<unknown>';
@@ -6799,17 +7059,23 @@ export class ResponseEngine {
         const openToolUseIds = new Set();
         const anonymousToolUseIds = new Map();
         const anonymousOpenIdByCorrelation = new Map();
-        const finalizeResult = () => ({
-            ...completeResult,
-            hasReceivedText,
-            hasProjectedCurrentReplyText,
-            inputAccepted,
-            assistantUuid,
-            protocolIncompleteReason,
-            textCount,
-            toolUseCount,
-            openToolUseIds: [...openToolUseIds],
-        });
+        const finalizeResult = () => {
+            const circuitBreakInterrupted = this.interruptedSessions.get(session.id) === 'proactive_circuit_break';
+            return {
+                ...completeResult,
+                ...(circuitBreakInterrupted
+                    ? { isError: false, subtype: 'proactive_circuit_break', terminalReason: 'aborted_tools', errors: undefined }
+                    : {}),
+                hasReceivedText,
+                hasProjectedCurrentReplyText,
+                inputAccepted,
+                assistantUuid,
+                protocolIncompleteReason: circuitBreakInterrupted ? undefined : protocolIncompleteReason,
+                textCount,
+                toolUseCount,
+                openToolUseIds: [...openToolUseIds],
+            };
+        };
         // 追踪最后一轮 assistant 回复文本（tool_use 之后的纯文本）
         let lastReplyText = '';
         // 上游合成错误帧的原文（runner 标记 synthetic 的 text）。与正文通道分开存放：
@@ -7451,6 +7717,8 @@ export class ResponseEngine {
                         else if (!toolResultFailed && !shouldSuppress()) {
                             renderer.addToolResult(event.name || '\u5de5\u5177', true, event.result, undefined, event.callId, event.durationMs, cachedDesc, event, event.assistantUuid);
                         }
+                        if (openToolUseIds.size === 0)
+                            await onToolCallsSettled?.();
                     }
                     // 非终态运行时告警走 status notify，不进入 activity/thought 历史。
                     if (event.type === 'notice' && event.severity === 'warn') {