evolcore 0.0.9 → 0.0.11

package/dist/agents/ecagent-runner.js

@@ -10,6 +10,7 @@ import { normalizePermissionMode } from '../core/permission/mode.js';
 import { checkDangerousCommand, checkReadonly, evaluateToolPreflight } from '../core/permission/tool-policy.js';
 import { logger } from '../utils/logger.js';
 import { resolveEcagentConfig } from './baseagent.js';
+import { buildModelRequestHeaders } from './request-identity.js';
 const PROVIDER_ID = 'evolcore-gateway';
 const DEFAULT_SYSTEM_PROMPT = `You are ecagent, the coding agent built into EvolCore.
 Work directly in the current project. Inspect relevant files before changing them, keep edits scoped, and verify the result.
@@ -252,6 +253,7 @@ function createOpenAiTransport(config) {
                             authorization: `Bearer ${config.apiKey}`,
                             'content-type': 'application/json',
                             ...Object.fromEntries(Object.entries(options?.headers ?? {}).filter((entry) => entry[1] !== null)),
+                            ...config.headers,
                         },
                         body: JSON.stringify(payload),
                         signal: controller.signal,
@@ -678,7 +680,15 @@ export class EcagentRunner {
     onCompactStart;
     modelCache;
     constructor(config, callbacks) {
-        this.config = config;
+        this.config = {
+            ...config,
+            headers: buildModelRequestHeaders({
+                baseagent: 'ecagent',
+                baseUrl: config.baseUrl,
+                agentAid: config.evolcoreAgentAid,
+                configuredHeaders: config.headers,
+            }),
+        };
         this.model = config.model;
         this.effort = config.effort;
         this.onSessionIdUpdate = callbacks?.onSessionIdUpdate;
@@ -714,7 +724,11 @@ export class EcagentRunner {
         try {
             const signal = AbortSignal.timeout(MODEL_LIST_TIMEOUT_MS);
             const response = await fetch(`${this.config.baseUrl.replace(/\/+$/, '')}/models`, {
-                headers: { authorization: `Bearer ${this.config.apiKey}` }, signal,
+                headers: {
+                    authorization: `Bearer ${this.config.apiKey}`,
+                    ...this.config.headers,
+                },
+                signal,
             });
             if (!response.ok)
                 throw new Error(`Failed to list ecagent models: HTTP ${response.status}`);
@@ -948,6 +962,7 @@ export class EcagentRunner {
             return { block: true, reason: policy.reason || '当前会话策略拒绝此工具调用' };
         const preflight = evaluateToolPreflight(toolName, input, {
             sessionId,
+            selfAid: permissionContext?.selfAid,
             channel: permissionContext?.channel,
             userId: permissionContext?.userId,
             role: permissionContext?.role,

package/dist/agents/request-identity.js

@@ -0,0 +1,55 @@
+import { logger } from '../utils/logger.js';
+import { readInstalledEvolcoreVersion } from '../utils/evolcore-version.js';
+export const EVOLCORE_REQUEST_HEADERS = {
+    version: 'X-EvolCore-Version',
+    agentAid: 'X-EvolCore-Agent-AID',
+    baseagent: 'X-EvolCore-Base-Agent',
+};
+const RESERVED_HEADER_NAMES = new Set(Object.values(EVOLCORE_REQUEST_HEADERS).map(name => name.toLowerCase()));
+const warnedReservedHeaders = new Set();
+function officialHostname(baseagent) {
+    return baseagent === 'claude' ? 'api.anthropic.com' : 'api.openai.com';
+}
+export function isOfficialModelEndpoint(baseagent, baseUrl) {
+    const configured = baseUrl?.trim();
+    if (!configured)
+        return true;
+    try {
+        return new URL(configured).hostname.toLowerCase() === officialHostname(baseagent);
+    }
+    catch {
+        // Invalid URLs fail at the request layer. Treat them as configured here so
+        // identity behavior does not silently change if URL validation is relaxed.
+        return false;
+    }
+}
+function configuredHeadersWithoutReserved(baseagent, configuredHeaders) {
+    const headers = {};
+    for (const [name, value] of Object.entries(configuredHeaders ?? {})) {
+        const normalizedName = name.toLowerCase();
+        if (!RESERVED_HEADER_NAMES.has(normalizedName)) {
+            headers[name] = value;
+            continue;
+        }
+        const warningKey = `${baseagent}:${normalizedName}`;
+        if (!warnedReservedHeaders.has(warningKey)) {
+            warnedReservedHeaders.add(warningKey);
+            logger.warn(`[RequestIdentity] Ignoring configured reserved header ${JSON.stringify(name)} for ${baseagent}; EvolCore manages this header at runtime`);
+        }
+    }
+    return headers;
+}
+export function buildModelRequestHeaders(input) {
+    const headers = configuredHeadersWithoutReserved(input.baseagent, input.configuredHeaders);
+    if (isOfficialModelEndpoint(input.baseagent, input.baseUrl))
+        return headers;
+    headers[EVOLCORE_REQUEST_HEADERS.version] = readInstalledEvolcoreVersion();
+    const agentAid = input.agentAid?.trim();
+    if (agentAid)
+        headers[EVOLCORE_REQUEST_HEADERS.agentAid] = agentAid;
+    headers[EVOLCORE_REQUEST_HEADERS.baseagent] = input.baseagent;
+    return headers;
+}
+export function _resetRequestIdentityWarningsForTests() {
+    warnedReservedHeaders.clear();
+}

package/dist/aun/outbox.js

@@ -1,7 +1,6 @@
-import fs from 'fs';
-import path from 'path';
 import crypto from 'crypto';
 import { agentOutboxPath } from '../paths.js';
+import { atomicRead, atomicWrite } from '../utils/atomic-write.js';
 const MAX_ENTRIES_PER_AID = 20;
 const DEFAULT_TTL = 300_000; // 5 minutes
 function outboxFile(aid) {
@@ -13,14 +12,14 @@ function generateId() {
     return `out-${ts}-${rand}`;
 }
 function isExpired(entry) {
+    if (entry.critical)
+        return false;
     return Date.now() - entry.ts > entry.ttl;
 }
 function readEntries(aid) {
     const file = outboxFile(aid);
-    if (!fs.existsSync(file))
-        return [];
     try {
-        const content = fs.readFileSync(file, 'utf-8').trim();
+        const content = atomicRead(file)?.trim();
         if (!content)
             return [];
         return content.split('\n').map(line => {
@@ -38,22 +37,25 @@ function readEntries(aid) {
 }
 function writeEntries(aid, entries) {
     const file = outboxFile(aid);
-    if (entries.length === 0) {
-        try {
-            fs.unlinkSync(file);
-        }
-        catch { }
-        return;
-    }
-    fs.mkdirSync(path.dirname(file), { recursive: true });
-    fs.writeFileSync(file, entries.map(e => JSON.stringify(e)).join('\n') + '\n');
+    const content = entries.length > 0
+        ? entries.map(e => JSON.stringify(e)).join('\n') + '\n'
+        : '';
+    atomicWrite(file, content);
 }
 export function enqueue(aid, opts) {
+    const existingEntries = readEntries(aid);
+    if (opts.dedupeKey) {
+        const existing = existingEntries.find(entry => entry.dedupeKey === opts.dedupeKey && !isExpired(entry));
+        if (existing)
+            return existing;
+    }
     const entry = {
         id: generateId(),
         ts: Date.now(),
         aid,
         channelId: opts.channelId,
+        dedupeKey: opts.dedupeKey,
+        critical: opts.critical,
         type: opts.type,
         contentKind: opts.contentKind,
         payload: opts.payload,
@@ -65,17 +67,18 @@ export function enqueue(aid, opts) {
         ttl: opts.ttl ?? DEFAULT_TTL,
         postSend: opts.postSend,
     };
-    const file = outboxFile(aid);
-    fs.mkdirSync(path.dirname(file), { recursive: true });
     // Enforce cap: read existing, drop oldest if over limit
-    let entries = readEntries(aid);
-    if (entries.length >= MAX_ENTRIES_PER_AID) {
-        entries = entries.slice(entries.length - MAX_ENTRIES_PER_AID + 1);
-        writeEntries(aid, [...entries, entry]);
+    let entries = existingEntries;
+    if (entries.filter(candidate => !candidate.critical).length >= MAX_ENTRIES_PER_AID) {
+        const dropIndex = entries.findIndex(candidate => !candidate.critical);
+        if (dropIndex >= 0)
+            entries.splice(dropIndex, 1);
+        entries = [...entries, entry];
     }
     else {
-        fs.appendFileSync(file, JSON.stringify(entry) + '\n');
+        entries = [...entries, entry];
     }
+    writeEntries(aid, entries);
     return entry;
 }
 export function remove(aid, id) {
@@ -105,6 +108,9 @@ export function removeInteractionCards(aid, requestId) {
 export function load(aid) {
     return readEntries(aid).filter(e => !isExpired(e));
 }
+export function findByDedupeKey(aid, dedupeKey) {
+    return load(aid).find(entry => entry.dedupeKey === dedupeKey);
+}
 export function cleanup(aid) {
     const all = readEntries(aid);
     const valid = all.filter(e => !isExpired(e));
@@ -185,16 +191,7 @@ export async function drain(aid, sender) {
     }
 }
 export function hasPending(aid) {
-    const file = outboxFile(aid);
-    if (!fs.existsSync(file))
-        return false;
-    try {
-        const stat = fs.statSync(file);
-        return stat.size > 0;
-    }
-    catch {
-        return false;
-    }
+    return readEntries(aid).some(entry => !isExpired(entry));
 }
 /**
  * 当前 outbox 中待发送条目数。用于诊断发送管线堵塞：depth 持续增长说明

package/dist/channels/aun.js

@@ -7,17 +7,18 @@ import { logger, localTimestamp } from '../utils/logger.js';
 import { LogWriter } from '../utils/log-writer.js';
 import { middleOutputModePolicy, resolveShowActivities, showActivitiesPolicy } from '../core/channel-loader.js';
 import { DEFAULT_FLUSH_DELAY_SECONDS } from '../types.js';
-import { resolvePaths, agentMdPath as agentMdPathFn, agentDir as agentDirPath, resolveRoot } from '../paths.js';
+import { resolvePaths, agentDir as agentDirPath, resolveRoot } from '../paths.js';
 import { saveToUploads, sanitizeFileName, bufferToInboundImage, safeFetch } from '../utils/media-cache.js';
 import { appendAidEvent } from '../utils/instance-registry.js';
-import { appendMessageLog, buildOutboundEntry, buildInboundEntry, classifyAunPayloadForLog } from '../core/message/message-log.js';
+import { appendMessageLog, appendMessageLogStrict, buildOutboundEntry, buildInboundEntry, classifyAunPayloadForLog, hasMessageLogOperation } from '../core/message/message-log.js';
 import { createSendFileMarkerPattern } from '../core/message/file-markers.js';
 import { chatDirPath } from '../core/session/session-fs-store.js';
 import { appendHintAdd, appendHintRemove, parseInjectRequest } from '../core/message/pending-hints.js';
 import { appendAidLifecycle } from '../aun/aid/identity.js';
 import { getAidStore, loadClient, SLOT } from '../aun/aid/store.js';
 import { MAX_AUN_ATTACHMENT_SIZE, uploadBufferAndBuildPayload, uploadFileAndBuildPayload } from '../aun/msg/upload.js';
-import { loadAgent, saveAgent } from '../config-store.js';
+import { loadAgent } from '../config-store.js';
+import { normalizeAgentLifecycle } from '../config/lifecycle.js';
 import { resolveEffective } from '../config/config-manager.js';
 import { isManagementRole } from '../config/builtin-roles.js';
 import { mentionModeToDispatch } from '../config/mention-mode.js';
@@ -33,6 +34,7 @@ import { recordCausationSpan } from '../core/causation/audit.js';
 import { isExplicitGroupId } from '../aun/group-identity.js';
 import { refreshAgentDisplayName, resolveAgentDisplayName } from '../aun/aid/agentmd.js';
 import { readInstalledEvolcoreVersion } from '../utils/evolcore-version.js';
+import { postBootstrapWelcomeOperationId, preparePostBootstrapWelcomeOutbox } from '../core/bootstrap-messages.js';
 export const AUN_HANDOFF_MARKER_FIELD = '_evolcore_handoff_id';
 const AUN_INTERACTION_CARD_TTL_MS = 24 * 60 * 60 * 1000;
 const IMAGE_MIME_TYPE = /^image\/[!#$%&'*+.^_`|~0-9A-Za-z-]+$/i;
@@ -200,7 +202,6 @@ export class AUNChannel {
     connected = false;
     traceWriter = null;
     eventBus = null;
-    ownerBoundHandler = null;
     queuedHandler = null;
     pendingEchoMessages = new Map();
     isEchoSending = false;
@@ -833,9 +834,9 @@ export class AUNChannel {
                 baseName: 'aun',
                 logDir: resolvePaths().logs,
                 rotation: 'hourly',
-                retention: { hours: 12 },
+                retention: { hours: 24 },
             });
-            logger.info(`${this.logPrefix()} Trace logging enabled (hourly rotation, 12h retention): ${this.traceWriter.activePath()}`);
+            logger.info(`${this.logPrefix()} Trace logging enabled (hourly rotation, 24h retention): ${this.traceWriter.activePath()}`);
         }
         this.aidState = {
             aid: config.aid,
@@ -1083,11 +1084,6 @@ export class AUNChannel {
             logger.info(`${this.logPrefix()} Connected as ${this._aid}`);
             appendAidEvent({ ts: Date.now(), iso: new Date().toISOString(), event: 'connected', aid: this.config.aid, gateway: this.gatewayUrl });
             appendAidLifecycle({ ts: Date.now(), iso: new Date().toISOString(), event: 'connected', aid: this.config.aid, gateway: this.gatewayUrl });
-            // Send welcome message to owner after first connection
-            // pureIdentity（控制 AID）：跳过 evolagent onboarding（根除 warn 噪声 + 永不 agentmdPut）
-            if (!this.config.pureIdentity) {
-                await this.sendWelcomeMessage();
-            }
         }
         catch (e) {
             this.trace('OUT', 'client.connect.error', { error: String(e) });
@@ -1097,122 +1093,81 @@ export class AUNChannel {
             throw e;
         }
     }
-    async sendWelcomeMessage() {
+    async preparePostBootstrapWelcome() {
         try {
             const aid = this.config.aid;
             const aidName = aid.startsWith('@') ? aid.slice(1) : aid;
-            // Read initialized + owners from per-agent config.json
-            // (config.json 是 owner 的真相来源——auto-bind 后会更新这里，但 this.config 是
-            // channel 启动时的快照，不会自动同步)
             const agentConfig = loadAgent(aidName);
             if (!agentConfig) {
                 logger.warn(`${this.logPrefix()} agent config not found for ${aidName}, skipping welcome message`);
-                return;
-            }
-            if (agentConfig.initialized === true) {
-                logger.info(`${this.logPrefix()} Agent already initialized, skipping welcome message`);
-                return;
+                return false;
             }
             const owner = getFirstStaticAgentOwner(aidName);
             if (!owner) {
-                logger.info(`${this.logPrefix()} No owner configured, skipping welcome message (will retry after auto-bind)`);
-                return;
+                logger.info(`${this.logPrefix()} No owner configured, skipping post-bootstrap welcome message`);
+                return false;
             }
-            const agentMdLocalPath = agentMdPathFn(aidName);
-            const existingAgentMd = fs.existsSync(agentMdLocalPath) ? fs.readFileSync(agentMdLocalPath, 'utf-8') : '';
-            const existingFrontmatterMatch = existingAgentMd.match(/^---\n([\s\S]*?)\n---/);
-            const existingFrontmatter = existingFrontmatterMatch?.[1] ?? '';
-            // Fetch owner's agent.md to derive name and validate type
-            const ownerInfo = await this.fetchPeerInfo(owner);
-            if (ownerInfo.type !== null && ownerInfo.type !== 'human') {
-                logger.warn(`${this.logPrefix()} Owner ${owner} type is "${ownerInfo.type}" (not human). Consider using a human AID as owner.`);
+            const operationId = postBootstrapWelcomeOperationId(aidName);
+            const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', owner, aidName);
+            if (hasMessageLogOperation(chatDir, operationId) || outbox.findByDedupeKey(aidName, operationId)) {
+                return true;
             }
-            // Name: prefer existing agent.md name if user has customized it,
-            // otherwise generate "{ownerName}的Evol助手 ({aidLabel})" for disambiguation
             const ownerAidClean = owner.startsWith('@') ? owner.slice(1) : owner;
-            const ownerDisplayName = (ownerInfo.name || ownerAidClean.split('.')[0]).slice(0, 12);
-            const currentNameMatch = existingFrontmatter.match(/^name:\s*"?([^"\n]+)/m);
-            const currentName = currentNameMatch?.[1]?.trim().replace(/"$/, '');
-            const aidLabel = aidName.split('.')[0];
-            let agentDisplayName;
-            if (currentName && currentName !== aidLabel) {
-                agentDisplayName = currentName;
-            }
-            else {
-                agentDisplayName = `${ownerDisplayName}的Evol助手 (${aidLabel})`;
-            }
-            // Preserve user-provided description (from `agent new --description`), fallback to default
-            const currentDescMatch = existingFrontmatter.match(/^description:\s*"?([^"\n]*)/m);
-            const currentDesc = currentDescMatch?.[1]?.trim().replace(/"$/, '');
-            const agentDescription = currentDesc
-                ? currentDesc
-                : 'EvolCore AI Agent Gateway - 连接 Claude/Codex 到消息通道';
-            // Generate new agent.md (no `initialized` frontmatter — that's now in config.json)
-            const newAgentMd = `---
-aid: "${aid}"
-name: "${agentDisplayName}"
-type: "codeagent"
-version: "1.0.0"
-description: "${agentDescription}"
-tags:
-  - evolcore
-  - ai-agent
-  - gateway
----
-
-# ${agentDisplayName}
-
-EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
-`;
-            // Write locally and publish to AUN network (auto-sign)
+            let ownerDisplayName = ownerAidClean.split('.')[0].slice(0, 12);
             try {
-                const { agentmdPut } = await import('../aun/aid/agentmd.js');
-                await agentmdPut(newAgentMd, { aid: aidName, store: this.store });
-                logger.info(`${this.logPrefix()} Published agent.md to AUN network`);
-            }
-            catch (e) {
-                logger.warn(`${this.logPrefix()} Failed to publish agent.md: ${e}`);
-            }
-            // Send welcome message
-            const { generateWelcomeMessage } = await import('../utils/welcome.js');
-            const welcomeText = generateWelcomeMessage({
-                channelType: 'aun',
-                agentName: agentDisplayName,
-                ownerName: ownerDisplayName,
-                includeBindingNote: true,
-            });
-            // First contact with Owner races against Owner's async cert fetch from
-            // gateway PKI; a 3s pause lets the cert propagate. persist_required asks
-            // the gateway to durably store the message so Owner can recover it via
-            // pull if the initial E2EE push still arrives before the cert resolves.
-            await new Promise(resolve => setTimeout(resolve, 3000));
-            if (!this.client) {
-                logger.warn(`${this.logPrefix()} Client disconnected before welcome message could be sent`);
-                return;
-            }
-            await this.callAndTrace('message.send', {
-                to: owner,
-                payload: { type: 'text', text: welcomeText },
-                encrypt: this.shouldEncrypt(owner),
-                persist_required: true,
-            });
-            logger.info(`${this.logPrefix()} Welcome message sent to owner: ${owner}`);
-            // Mark agent as initialized in config.json (replaces old agent.md frontmatter flag)
-            try {
-                const fresh = loadAgent(aidName);
-                if (fresh) {
-                    fresh.initialized = true;
-                    saveAgent(fresh);
-                    logger.info(`${this.logPrefix()} Marked ${aidName} as initialized in config.json`);
+                const ownerInfo = await this.fetchPeerInfo(owner);
+                ownerDisplayName = (ownerInfo.name || ownerDisplayName).slice(0, 12);
+                if (ownerInfo.type !== null && ownerInfo.type !== 'human') {
+                    logger.warn(`${this.logPrefix()} Owner ${owner} type is "${ownerInfo.type}" (not human).`);
                 }
             }
             catch (e) {
-                logger.warn(`${this.logPrefix()} Failed to update initialized flag in config.json: ${e}`);
+                logger.warn(`${this.logPrefix()} Failed to resolve owner display name; using AID label: ${e}`);
             }
+            preparePostBootstrapWelcomeOutbox(aidName, owner, ownerDisplayName);
+            logger.info(`${this.logPrefix()} Post-bootstrap welcome durably prepared for owner: ${owner}`);
+            return true;
         }
         catch (e) {
-            logger.warn(`${this.logPrefix()} Failed to send welcome message: ${e}`);
+            logger.warn(`${this.logPrefix()} Failed to prepare post-bootstrap welcome message: ${e}`);
+            return false;
+        }
+    }
+    async sendPostBootstrapWelcome() {
+        if (!await this.preparePostBootstrapWelcome())
+            return false;
+        return this.reconcilePostBootstrapWelcome();
+    }
+    /**
+     * Resume delivery of an already prepared completion welcome.
+     *
+     * Unlike sendPostBootstrapWelcome(), this method never creates a new
+     * operation. That distinction keeps repeated `ec agent ready` calls on an
+     * already-active agent from manufacturing another welcome message.
+     */
+    async reconcilePostBootstrapWelcome() {
+        const configuredAid = this.config.aid;
+        const aid = configuredAid.startsWith('@') ? configuredAid.slice(1) : configuredAid;
+        const operationId = postBootstrapWelcomeOperationId(aid);
+        const entry = outbox.findByDedupeKey(aid, operationId);
+        if (!entry) {
+            const owner = getFirstStaticAgentOwner(aid);
+            if (!owner)
+                return false;
+            const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', owner, aid);
+            return hasMessageLogOperation(chatDir, operationId);
         }
+        const agentConfig = loadAgent(aid);
+        if (!agentConfig || normalizeAgentLifecycle(agentConfig).lifecycle !== 'active') {
+            logger.info(`${this.logPrefix()} Post-bootstrap welcome prepared; waiting for lifecycle=active`);
+            return true;
+        }
+        if (!this.connected || !this.client)
+            return true;
+        const sent = await this.withOutboxInFlight(entry, () => this.deliverTextEntry(entry), false);
+        if (sent)
+            outbox.remove(aid, entry.id);
+        return true;
     }
     // ── Event handlers ──────────────────────────────────────────
     /**
@@ -2445,31 +2400,12 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
     // ── Public API (same interface as before) ───────────────────
     setEventBus(bus) {
         // 重新订阅前先解掉旧的——避免 reload/重连后 listener 累积
-        if (this.eventBus && this.ownerBoundHandler && typeof this.eventBus.unsubscribe === 'function') {
-            this.eventBus.unsubscribe('channel:owner-bound', this.ownerBoundHandler);
-        }
         if (this.eventBus && this.queuedHandler && typeof this.eventBus.unsubscribe === 'function') {
             this.eventBus.unsubscribe('task:queued', this.queuedHandler);
         }
-        this.ownerBoundHandler = null;
         this.queuedHandler = null;
         this.eventBus = bus;
         if (bus && typeof bus.subscribe === 'function') {
-            const handler = (event) => {
-                if (event.channelName !== this.config.channelName)
-                    return;
-                // sendWelcomeMessage 内部读 config.json 中最新的 owners[0]，并幂等检查 initialized
-                // 自身做 client 健康检查后再发
-                if (!this.client) {
-                    logger.info(`${this.logPrefix()} owner-bound event received but client not connected; skip welcome retry`);
-                    return;
-                }
-                this.sendWelcomeMessage().catch(e => {
-                    logger.warn(`${this.logPrefix()} owner-bound welcome retry failed: ${e}`);
-                });
-            };
-            bus.subscribe('channel:owner-bound', handler);
-            this.ownerBoundHandler = handler;
             const queuedHandler = (event) => {
                 if (event.channel !== this.config.channelName)
                     return;
@@ -2928,12 +2864,25 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
                 finalText = `@${context.peerId} ` + finalText;
             }
         }
+        const operationId = typeof context?.metadata?.operationId === 'string'
+            ? context.metadata.operationId
+            : undefined;
+        if (operationId) {
+            const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', channelId, this.config.aid);
+            if (hasMessageLogOperation(chatDir, operationId))
+                return;
+        }
         // Write-ahead: persist to outbox before attempting send
         const entry = outbox.enqueue(this.config.aid, {
             channelId,
+            dedupeKey: operationId,
+            critical: context?.metadata?.criticalDelivery === true,
             type: 'text',
             text: finalText,
             context,
+            ttl: typeof context?.metadata?.outboxTtl === 'number'
+                ? context.metadata.outboxTtl
+                : undefined,
         });
         logger.debug(`${this.logPrefix()} Outbox enqueued: id=${entry.id} channel=${channelId} text=${finalText.slice(0, 40)}`);
         // 积压深度告警：outbox 待发条目累积说明发送速度跟不上，回复将出现明显延迟。
@@ -3187,6 +3136,20 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         const channelId = entry.channelId;
         const finalText = entry.text;
         const context = entry.context;
+        const operationId = entry.dedupeKey
+            || (typeof context?.metadata?.operationId === 'string' ? context.metadata.operationId : undefined);
+        if (operationId) {
+            const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', channelId, this.config.aid);
+            if (hasMessageLogOperation(chatDir, operationId)) {
+                logger.info(`${this.logPrefix()} Durable operation already logged; skipping duplicate send: ${operationId}`);
+                return true;
+            }
+            if (operationId === postBootstrapWelcomeOperationId(this.config.aid)) {
+                const agentConfig = loadAgent(this.config.aid);
+                if (!agentConfig || normalizeAgentLifecycle(agentConfig).lifecycle !== 'active')
+                    return false;
+            }
+        }
         // 从 context.metadata.source 读取 source，默认为 'daemon'
         const source = context?.metadata?.source ?? 'daemon';
         const payload = { type: 'text', text: finalText };
@@ -3215,11 +3178,25 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         logger.info(`${this.logPrefix()} deliverTextEntry: channelId=${channelId} thread_id=${payload.thread_id ?? 'none'} task_id=${payload.task_id ?? 'none'} chatmode=${payload.chatmode ?? 'none'} source=${source} textLen=${finalText.length}`);
         const isGroup = this.isGroupId(channelId);
         const targetAid = channelId;
+        if (operationId && entry.deliveryReceipt) {
+            this.appendOutboundJsonl(channelId, {
+                ...classifyAunPayloadForLog(payload),
+                msgId: entry.deliveryReceipt.messageId,
+                encrypt: entry.deliveryReceipt.encrypt,
+                context,
+                isGroup,
+                source,
+                transport: entry.deliveryReceipt.transport,
+            });
+            return true;
+        }
         const encryptTarget = isGroup ? channelId : targetAid;
         const encrypt = context?.metadata?.encrypted != null
             ? !!(context.metadata.encrypted)
             : this.shouldEncrypt(encryptTarget);
         const params = { payload, encrypt };
+        if (context?.metadata?.persistRequired === true)
+            params.persist_required = true;
         try {
             if (isGroup) {
                 params.group_id = channelId;
@@ -3237,6 +3214,7 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
                 }
                 else {
                     this.logAunSendAccepted('group.send', channelId, mid, encrypt, result, finalText);
+                    this.checkpointTextDelivery(entry, mid, encrypt, result);
                     appendAidEvent({ ts: Date.now(), iso: new Date().toISOString(), event: 'message_out', aid: this.config.aid, to: channelId, msgId: mid, kind: 'text', len: finalText.length, groupId: channelId });
                     const statsContext = await this.groupStatsContext(channelId);
                     this.aidStatsCollector?.recordOutbound(this.config.aid, channelId, Buffer.byteLength(finalText, 'utf-8'), finalText, false, encrypt, context?.metadata?.chatmode, 'send', statsContext);
@@ -3257,6 +3235,7 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
                 }
                 else {
                     this.logAunSendAccepted('message.send', this.peerLabel(targetAid), result.message_id, encrypt, result, finalText);
+                    this.checkpointTextDelivery(entry, result.message_id, encrypt, result);
                     const causation = normalizeCausation(context?.metadata?.causation);
                     if (causation) {
                         registerAunCausation(result.message_id, this.config.aid, targetAid, causation);
@@ -3292,6 +3271,7 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
                             logger.warn(`${this.logPrefix()} group.send fallback returned no message_id: ${JSON.stringify(result)}`);
                             return false;
                         }
+                        this.checkpointTextDelivery(entry, mid, false, result);
                         appendAidEvent({ ts: Date.now(), iso: new Date().toISOString(), event: 'message_out', aid: this.config.aid, to: channelId, msgId: mid, kind: 'text', len: finalText.length, groupId: channelId });
                         const statsContext = await this.groupStatsContext(channelId);
                         this.aidStatsCollector?.recordOutbound(this.config.aid, channelId, Buffer.byteLength(finalText, 'utf-8'), finalText, false, false, context?.metadata?.chatmode, 'send', statsContext);
@@ -3310,6 +3290,7 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
                             logger.warn(`${this.logPrefix()} message.send fallback returned no message_id: ${JSON.stringify(result)}`);
                             return false;
                         }
+                        this.checkpointTextDelivery(entry, mid, false, result);
                         const causation = normalizeCausation(context?.metadata?.causation);
                         if (causation) {
                             registerAunCausation(mid, this.config.aid, targetAid, causation);
@@ -3341,6 +3322,18 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
             }
         }
     }
+    checkpointTextDelivery(entry, messageId, encrypt, result) {
+        if (!entry.dedupeKey)
+            return;
+        entry.deliveryReceipt = {
+            messageId,
+            encrypt,
+            transport: this.sendReceiptFromResult(result),
+        };
+        if (!outbox.replace(this.config.aid, entry)) {
+            logger.warn(`${this.logPrefix()} Failed to checkpoint durable operation receipt: ${entry.dedupeKey}`);
+        }
+    }
     async deliverPayloadEntry(entry) {
         const interactionId = entry.postSend?.type === 'register_interaction_card'
             ? entry.postSend.requestId
@@ -3371,13 +3364,16 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
     }
     /** 有效会话正文写入 messages.jsonl（message.send/group.send 成功后调用）。 */
     appendOutboundJsonl(channelId, descriptor) {
+        const operationId = typeof descriptor.context?.metadata?.operationId === 'string'
+            ? descriptor.context.metadata.operationId
+            : undefined;
         try {
             const { content, msgType, payloadType, payloadSummary, msgId, encrypt, transport, context, isGroup, source = 'daemon' } = descriptor;
             const sessionsDir = resolvePaths().sessionsDir;
             const selfAID = this.config.aid;
             const chatDir = chatDirPath(sessionsDir, 'aun', channelId, selfAID);
             const chatmode = context?.metadata?.chatmode;
-            appendMessageLog(chatDir, buildOutboundEntry({
+            const entry = buildOutboundEntry({
                 from: selfAID,
                 to: channelId,
                 sessionId: context?.sessionId,
@@ -3397,9 +3393,16 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
                 payloadType,
                 payloadSummary,
                 source,
-            }));
+                operationId,
+            });
+            if (operationId)
+                appendMessageLogStrict(chatDir, entry);
+            else
+                appendMessageLog(chatDir, entry);
         }
         catch (e) {
+            if (operationId)
+                throw e;
             logger.debug(`${this.logPrefix()} appendOutboundJsonl failed: ${e}`);
         }
     }