metame-cli 1.5.10 → 1.5.12

package/scripts/daemon-session-commands.js

@@ -1,5 +1,7 @@
 'use strict';
 
+const { normalizeEngineName: _normalizeEngine } = require('./daemon-utils');
+
 function createSessionCommandHandler(deps) {
   const {
     fs,
@@ -29,8 +31,7 @@ function createSessionCommandHandler(deps) {
   } = deps;
 
   function normalizeEngineName(name) {
-    const n = String(name || '').trim().toLowerCase();
-    return n === 'codex' ? 'codex' : getDefaultEngine();
+    return _normalizeEngine(name, getDefaultEngine);
   }
 
   function inferStoredEngine(rawSession) {

package/scripts/daemon-session-store.js

@@ -1,6 +1,7 @@
 'use strict';
 
 const crypto = require('crypto');
+const { normalizeEngineName } = require('./daemon-utils');
 
 function normalizeCodexSandboxMode(value, fallback = null) {
   const text = String(value || '').trim().toLowerCase();
@@ -45,10 +46,6 @@ function normalizeCodexPermissionMeta(meta = {}) {
   };
 }
 
-function normalizeEngineName(name) {
-  return String(name || 'claude').trim().toLowerCase() === 'codex' ? 'codex' : 'claude';
-}
-
 function stripCodexInjectedHints(text) {
   return String(text || '')
     .replace(/\r\n/g, '\n')
@@ -217,17 +214,36 @@ function createSessionStore(deps) {
   }
 
   // [M3] 共享辅助：从 reversed JSONL 行数组中提取最后一条外部用户消息（统一规则）
+  function _extractMessageText(d) {
+    const content = d.message && d.message.content;
+    let raw = typeof content === 'string' ? content
+      : Array.isArray(content) ? (content.find(c => c.type === 'text') || {}).text || '' : '';
+    raw = raw.replace(/\[System hints[\s\S]*/i, '')
+      .replace(/<system-reminder>[\s\S]*?<\/system-reminder>/g, '').trim();
+    return raw;
+  }
+
   function extractLastUserFromLines(lines) {
     for (const line of lines) {
       if (!line) continue;
       try {
         const d = JSON.parse(line);
         if (d.type === 'user' && d.message && d.userType !== 'internal') {
-          const content = d.message.content;
-          let raw = typeof content === 'string' ? content
-            : Array.isArray(content) ? (content.find(c => c.type === 'text') || {}).text || '' : '';
-          raw = raw.replace(/\[System hints[\s\S]*/i, '')
-            .replace(/<system-reminder>[\s\S]*?<\/system-reminder>/g, '').trim();
+          const raw = _extractMessageText(d);
+          if (raw.length > 2) return raw.slice(0, 80);
+        }
+      } catch { /* skip */ }
+    }
+    return '';
+  }
+
+  function extractLastAssistantFromLines(lines) {
+    for (const line of lines) {
+      if (!line) continue;
+      try {
+        const d = JSON.parse(line);
+        if (d.type === 'assistant' && d.message) {
+          const raw = _extractMessageText(d);
           if (raw.length > 2) return raw.slice(0, 80);
         }
       } catch { /* skip */ }
@@ -256,11 +272,30 @@ function createSessionStore(deps) {
               }
             }
           }
-          // Fallback: decode projectPath from directory name (e.g. -Users-yaron-AGI-AChat → /Users/yaron/AGI/AChat)
+          // Fallback: decode projectPath from directory name (macOS: -Users-foo → /Users/foo)
           if (!projPathCache.has(proj) && proj.startsWith('-')) {
             const decoded = proj.replace(/-/g, '/');
             if (fs.existsSync(decoded)) projPathCache.set(proj, decoded);
           }
+          // Fallback 2: read cwd from first JSONL entry (works on all platforms,
+          // handles directory names that can't be reliably decoded, e.g. Windows paths
+          // with drive letters or filenames containing hyphens)
+          if (!projPathCache.has(proj)) {
+            try {
+              const _jsonls = fs.readdirSync(projDir).filter(f => f.endsWith('.jsonl'));
+              if (_jsonls.length > 0) {
+                const _fd = fs.openSync(path.join(projDir, _jsonls[0]), 'r');
+                try {
+                  const _buf = Buffer.alloc(4096);
+                  const _bytes = fs.readSync(_fd, _buf, 0, 4096, 0);
+                  for (const _line of _buf.toString('utf8', 0, _bytes).split('\n')) {
+                    if (!_line) continue;
+                    try { const _d = JSON.parse(_line); if (_d.cwd) { projPathCache.set(proj, path.resolve(_d.cwd)); break; } } catch {}
+                  }
+                } finally { fs.closeSync(_fd); }
+              }
+            } catch {}
+          }
         } catch { /* skip */ }
 
         try {
@@ -287,6 +322,8 @@ function createSessionStore(deps) {
       }
 
       const all = Array.from(sessionMap.values()).map((entry) => ({ ...entry, engine: 'claude' }));
+      // Sort by recency BEFORE enrichment so we enrich the most recent sessions first
+      all.sort((a, b) => (b.fileMtime || 0) - (a.fileMtime || 0));
       const ENRICH_LIMIT = 20;
       for (let i = 0; i < Math.min(all.length, ENRICH_LIMIT); i++) {
         const s = all[i];
@@ -338,6 +375,9 @@ function createSessionStore(deps) {
             if (!s.lastUser) {
               s.lastUser = extractLastUserFromLines(tailLines);
             }
+            if (!s.lastAssistant) {
+              s.lastAssistant = extractLastAssistantFromLines(tailLines);
+            }
           } finally {
             fs.closeSync(fd);
           }
@@ -613,6 +653,13 @@ function createSessionStore(deps) {
     return s.sessionId ? s.sessionId.slice(0, 8) : '';
   }
 
+  // ── Display helpers (shared by sessionRichLabel & buildSessionCardElements) ──
+  const _escapeMd = (t) => t.replace(/[_*`\\]/g, '\\$&');
+  function _cleanSnippet(raw, maxLen) {
+    if (!raw || raw.length <= 2) return '';
+    return _escapeMd(raw.replace(/\n/g, ' ').slice(0, maxLen)) + (raw.length > maxLen ? '…' : '');
+  }
+
   function sessionRichLabel(s, index, sessionTags) {
     sessionTags = sessionTags || loadSessionTags();
     const title = sessionDisplayTitle(s, 50, sessionTags);
@@ -622,17 +669,15 @@ function createSessionStore(deps) {
     const tags = (sessionTags[s.sessionId] && sessionTags[s.sessionId].tags || []).slice(0, 3);
     const engineLabel = (s.engine || 'claude') === 'codex' ? 'codex' : 'claude';
 
-    // [M2] 转义 markdown 特殊字符，防止用户历史消息破坏渲染
-    const escapeMd = (t) => t.replace(/[_*`\\]/g, '\\$&');
-    // fallback to firstPrompt when lastUser not found in tail
-    const snippetRaw = s.lastUser || (s.firstPrompt || '').replace(/<[^>]+>/g, '').replace(/\[System hints[\s\S]*/i, '').trim().slice(0, 80);
-    let line = `${index}. ${title}${title.length >= 50 ? '..' : ''}`;  // [M4] title 已有 sessionId 兜底，不会为空
+    let line = `${index}. ${title}${title.length >= 50 ? '..' : ''}`;
     if (tags.length) line += `  ${tags.map(t => `#${t}`).join(' ')}`;
     line += `\n   📁${proj} · ${ago} · ${engineLabel}`;
-    if (snippetRaw && snippetRaw.length > 2) {
-      const snippet = escapeMd(snippetRaw.replace(/\n/g, ' ').slice(0, 60));
-      line += `\n   💬 ${snippet}${snippetRaw.length > 60 ? '…' : ''}`;
-    }
+    const firstSnippet = _cleanSnippet(s.firstPrompt, 50);
+    const lastUserSnippet = _cleanSnippet(s.lastUser, 50);
+    const lastAiSnippet = _cleanSnippet(s.lastAssistant, 50);
+    if (firstSnippet) line += `\n   📝 ${firstSnippet}`;
+    if (lastUserSnippet && lastUserSnippet !== firstSnippet) line += `\n   💬 ${lastUserSnippet}`;
+    if (lastAiSnippet) line += `\n   🤖 ${lastAiSnippet}`;
     line += `\n   /resume ${shortId}`;
     return line;
   }
@@ -648,15 +693,16 @@ function createSessionStore(deps) {
       const shortId = s.sessionId.slice(0, 6);
       const tags = (sessionTags[s.sessionId] && sessionTags[s.sessionId].tags || []).slice(0, 4);
       const engineLabel = (s.engine || 'claude') === 'codex' ? 'codex' : 'claude';
-      // [M2] 转义 markdown 特殊字符；[M4] title 已有 sessionId 兜底
-      const escapeMd = (t) => t.replace(/[_*`\\]/g, '\\$&');
-      const snippetRaw = s.lastUser || (s.firstPrompt || '').replace(/<[^>]+>/g, '').replace(/\[System hints[\s\S]*/i, '').trim().slice(0, 80);
+
       let desc = `**${i + 1}. ${title}**\n📁${proj} · ${ago} · ${engineLabel}`;
       if (tags.length) desc += `\n${tags.map(t => `\`${t}\``).join(' ')}`;
-      if (snippetRaw && snippetRaw.length > 2) {
-        const snippet = escapeMd(snippetRaw.replace(/\n/g, ' ').slice(0, 60));
-        desc += `\n💬 ${snippet}${snippetRaw.length > 60 ? '…' : ''}`;
-      }
+      // Show first prompt, last user message, and last assistant reply
+      const firstSnippet = _cleanSnippet(s.firstPrompt, 50);
+      const lastUserSnippet = _cleanSnippet(s.lastUser, 50);
+      const lastAiSnippet = _cleanSnippet(s.lastAssistant, 50);
+      if (firstSnippet) desc += `\n📝 ${firstSnippet}`;
+      if (lastUserSnippet && lastUserSnippet !== firstSnippet) desc += `\n💬 ${lastUserSnippet}`;
+      if (lastAiSnippet) desc += `\n🤖 ${lastAiSnippet}`;
       elements.push({ tag: 'div', text: { tag: 'lark_md', content: desc } });
       elements.push({ tag: 'action', actions: [{ tag: 'button', text: { tag: 'plain_text', content: `▶️ Switch #${shortId}` }, type: 'primary', value: { cmd: `/resume ${s.sessionId}` } }] });
     });
@@ -924,6 +970,9 @@ function createSessionStore(deps) {
       }
       slot.started = true;
       s.last_active = Date.now();
+      // Clear stale findSessionFile cache: the JSONL/SQLite file now exists
+      // but may have been cached as null during createSession (before CLI created it).
+      if (slot.id) clearSessionFileCache(slot.id);
     } else {
       s.started = true; // old flat format
       s.last_active = Date.now();
@@ -970,7 +1019,13 @@ function createSessionStore(deps) {
   // Best approach: read cwd directly from session file content (not from dir name)
   function _isClaudeSessionValid(sessionId, normCwd) {
     try {
-      const sessionFile = findSessionFile(sessionId);
+      let sessionFile = findSessionFile(sessionId);
+      if (!sessionFile) {
+        // Cache may hold a stale null from createSession (before CLI wrote the JSONL).
+        // Clear and retry once to avoid false invalidation.
+        clearSessionFileCache(sessionId);
+        sessionFile = findSessionFile(sessionId);
+      }
       if (!sessionFile) {
         log('WARN', `[SessionValid] ${sessionId.slice(0, 8)}: JSONL file not found`);
         return false;

package/scripts/daemon-team-dispatch.js

@@ -274,15 +274,31 @@ function buildEnrichedPrompt(target, rawPrompt, metameDir, opts = {}) {
     } catch { /* non-critical */ }
   }
 
-  // 3. Target's last output
+  // 3+5. Structured memory (L1+L2) OR legacy _latest.md fallback
+  //       Single stat — structured memory supersedes raw last output
+  let hasStructuredMemory = false;
   try {
-    const latestFile = path.join(base, 'memory', 'agents', `${target}_latest.md`);
-    if (fs.existsSync(latestFile)) {
-      const content = fs.readFileSync(latestFile, 'utf8').trim();
-      if (content) ctx += `[${target} 上次产出]\n${content}\n\n`;
+    const memFile = path.join(base, 'memory', 'now', `${target}_memory.md`);
+    if (fs.existsSync(memFile)) {
+      const content = fs.readFileSync(memFile, 'utf8').trim();
+      if (content) {
+        ctx += `[Memory Context]\n${content}\n\n`;
+        hasStructuredMemory = true;
+      }
     }
   } catch { /* non-critical */ }
 
+  if (!hasStructuredMemory) {
+    // Fallback: raw last output (for non-reactive projects without memory system)
+    try {
+      const latestFile = path.join(base, 'memory', 'agents', `${target}_latest.md`);
+      if (fs.existsSync(latestFile)) {
+        const content = fs.readFileSync(latestFile, 'utf8').trim();
+        if (content) ctx += `[${target} 上次产出]\n${content}\n\n`;
+      }
+    } catch { /* non-critical */ }
+  }
+
   // 4. Inbox unread messages (archive after reading)
   try {
     const inboxDir = path.join(base, 'memory', 'inbox', target);

package/scripts/daemon-utils.js

@@ -9,7 +9,9 @@
 
 function normalizeEngineName(name, defaultEngine = 'claude') {
   const n = String(name || '').trim().toLowerCase();
-  return n === 'codex' ? 'codex' : (typeof defaultEngine === 'function' ? defaultEngine() : defaultEngine);
+  if (n === 'codex') return 'codex';
+  if (n === 'claude') return 'claude';
+  return typeof defaultEngine === 'function' ? defaultEngine() : defaultEngine;
 }
 
 function normalizeCodexSandboxMode(value, fallback = null) {

package/scripts/daemon.js

@@ -48,6 +48,7 @@ const BRAIN_FILE = path.join(HOME, '.claude_profile.yaml');
 const DISPATCH_DIR = path.join(METAME_DIR, 'dispatch');
 const DISPATCH_LOG = path.join(DISPATCH_DIR, 'dispatch-log.jsonl');
 const { sleepSync, socketPath, needsSocketCleanup } = require('./platform');
+const { handleReactiveOutput } = require('./daemon-reactive-lifecycle');
 const SOCK_PATH = socketPath(METAME_DIR);
 
 // Resolve claude binary path (daemon may not inherit user's full PATH)
@@ -286,12 +287,28 @@ function restoreConfig() {
   if (!fs.existsSync(bak)) return false;
   try {
     const bakCfg = yaml.load(fs.readFileSync(bak, 'utf8')) || {};
-    // Preserve security-critical fields from current config (chat IDs, agent map)
-    // so a /fix never loses manually-added channels
+    // Preserve ALL user-critical fields from current config so /fix never
+    // loses secrets, chat IDs, or agent mappings
     let curCfg = {};
     try { curCfg = yaml.load(fs.readFileSync(CONFIG_FILE, 'utf8')) || {}; } catch { }
+    // Secret fields that must NEVER be reverted by a restore
+    const SECRET_FIELDS = ['app_id', 'app_secret', 'bot_token', 'operator_ids'];
     for (const adapter of ['feishu', 'telegram']) {
       if (curCfg[adapter] && bakCfg[adapter]) {
+        // Preserve secrets: current config always wins
+        for (const field of SECRET_FIELDS) {
+          if (curCfg[adapter][field] != null) {
+            bakCfg[adapter][field] = curCfg[adapter][field];
+          }
+        }
+        // Preserve remote_dispatch secrets
+        if (curCfg[adapter].remote_dispatch && bakCfg[adapter].remote_dispatch) {
+          if (curCfg[adapter].remote_dispatch.secret) {
+            bakCfg[adapter].remote_dispatch.secret = curCfg[adapter].remote_dispatch.secret;
+          }
+        } else if (curCfg[adapter].remote_dispatch) {
+          bakCfg[adapter].remote_dispatch = curCfg[adapter].remote_dispatch;
+        }
         const curIds = curCfg[adapter].allowed_chat_ids || [];
         const bakIds = bakCfg[adapter].allowed_chat_ids || [];
         // Union of both lists
@@ -301,8 +318,15 @@ function restoreConfig() {
         bakCfg[adapter].chat_agent_map = Object.assign(
           {}, bakCfg[adapter].chat_agent_map || {}, curCfg[adapter].chat_agent_map || {}
         );
+      } else if (curCfg[adapter] && !bakCfg[adapter]) {
+        // Backup doesn't have this adapter at all — keep current entirely
+        bakCfg[adapter] = curCfg[adapter];
       }
     }
+    // Preserve projects (current takes precedence for each project key)
+    if (curCfg.projects) {
+      bakCfg.projects = Object.assign({}, bakCfg.projects || {}, curCfg.projects);
+    }
     writeConfigSafe(bakCfg);
     config = loadConfig(); // eslint-disable-line no-undef -- config is declared in main() closure
     return true;
@@ -1083,6 +1107,37 @@ function dispatchTask(targetProject, message, config, replyFn, streamOptions = n
         chain: [], // reset chain for callbacks
       }, config);
     }
+
+    // ── Reactive lifecycle hook ──
+    try {
+      handleReactiveOutput(targetProject, outStr, loadConfig(), {
+        log,
+        loadState,
+        saveState,
+        checkBudget,
+        handleDispatchItem: (item, cfg) => {
+          dispatchTask(item.target, {
+            from: item.from || '_reactive',
+            type: 'reactive',
+            priority: 'normal',
+            new_session: !!item.new_session,
+            payload: { title: 'reactive dispatch', prompt: item.prompt },
+          }, cfg, null, null);
+        },
+        notifyUser: (msg) => {
+          try {
+            const cfg = loadConfig();
+            if (cfg.feishu && cfg.feishu.enabled && cfg.feishu.admin_chat_id) {
+              const { sendFeishuText } = require('./daemon-notify');
+              sendFeishuText(cfg.feishu.admin_chat_id, msg, cfg);
+            }
+          } catch (e) { log('WARN', `Reactive notify failed: ${e.message}`); }
+        },
+        metameDir: path.join(os.homedir(), '.metame'),
+      });
+    } catch (e) {
+      log('ERROR', `Reactive lifecycle error for ${targetProject}: ${e.message}`);
+    }
   };
   // If streamOptions provided, use real bot so output appears in target's Feishu channel.
   // Otherwise fall back to nullBot which captures output for replyFn.
@@ -1697,6 +1752,27 @@ function physiologicalHeartbeat(config) {
   } catch (e) {
     log('WARN', `Dispatch log rotation failed: ${e.message}`);
   }
+
+  // 4. Reconcile perpetual projects — detect stale reactive loops
+  try {
+    const { reconcilePerpetualProjects } = require('./daemon-reactive-lifecycle');
+    reconcilePerpetualProjects(config, {
+      log,
+      loadState,
+      saveState,
+      notifyUser: (msg) => {
+        try {
+          const cfg = loadConfig();
+          if (cfg.feishu && cfg.feishu.enabled && cfg.feishu.admin_chat_id) {
+            const { sendFeishuText } = require('./daemon-notify');
+            sendFeishuText(cfg.feishu.admin_chat_id, msg, cfg);
+          }
+        } catch (e) { log('WARN', `Reconcile notify failed: ${e.message}`); }
+      },
+    });
+  } catch (e) {
+    log('WARN', `Reconcile check failed: ${e.message}`);
+  }
 }
 
 // ── Timing constants ─────────────────────────────────────────────────────────
@@ -2276,6 +2352,7 @@ const { handleAgentCommand } = createAgentCommandHandler({
   writeConfigSafe,
   backupConfig,
   execSync,
+  log,
 });
 
 // Caffeinate process for /nosleep toggle (macOS only)
@@ -2315,6 +2392,7 @@ const { handleOpsCommand } = createOpsCommandHandler({
   path,
   spawn,
   execSync,
+  execFileSync,
   log,
   loadConfig,
   loadState,

package/scripts/distill.js

@@ -221,7 +221,7 @@ ${promptInput}
 
   fs.mkdirSync(POSTMORTEM_DIR, { recursive: true });
   const day = new Date().toISOString().slice(0, 10);
-  const topicSlug = sanitizeSlug(skeleton.intent || title, `session-${String(skeleton.session_id || '').slice(0, 8)}`);
+  const topicSlug = sanitizeSlug(title || skeleton.intent, `session-${String(skeleton.session_id || '').slice(0, 8)}`);
   const filePath = path.join(POSTMORTEM_DIR, `${day}-${topicSlug}.md`);
   const markdown = [
     `# ${title}`,

package/scripts/docs/file-transfer.md

@@ -30,3 +30,4 @@
 - **永远不要读取再复述文件内容**，直接用 `[[FILE:...]]` 标记发送
 - 路径必须是绝对路径
 - daemon 会自动解析标记并通过 bot 发送给用户
+- **⛔ 禁止发到 open_id**：即使系统上下文中存在用户的飞书 `ou_...` ID，也绝不用它发文件。`[[FILE:...]]` 会自动发到**当前对话群**，这才是正确行为。直接发 open_id 会导致文件出现在 bot 和用户的 1-on-1 私聊，而不在当前群里。

package/scripts/docs/maintenance-manual.md

@@ -354,7 +354,60 @@ Claude 看到 hook 注入:
 - `/dispatch to windows:hunter <任务>`：手动跨设备派发
 - `/dispatch to 猎手 <任务>`：按昵称解析，自动检测 `member.peer` 走远端
 
-## 12. 私人配置保护
+## 12. 永续任务系统（Perpetual Task Engine）
+
+### 概念
+
+永续任务系统允许任何项目作为 reactive 永续循环运行。Agent 产出信号 → daemon 解析 → 门控检查 → 调度下一步。平台完全领域无关，科研、代码审计、文档维护等任何长期任务均可接入。
+
+### 核心组件
+
+| 组件 | 文件 | 职责 |
+|------|------|------|
+| Reactive Lifecycle | `daemon-reactive-lifecycle.js` | 信号解析、budget/depth gate、事件溯源、verifier 调用、state 生成 |
+| Event Log | `~/.metame/events/<key>.jsonl` | 唯一 Source of Truth，daemon 独占写入 |
+| Manifest | `<cwd>/perpetual.yaml` | 可选项目清单（completion_signal、脚本路径、约束） |
+| Reconciliation | `reconcilePerpetualProjects()` | heartbeat 中零 token 停滞检测 |
+| Status 命令 | `/status perpetual` | 查看所有永续项目的 phase/depth/mission/status |
+
+### 接入一个新永续项目
+
+1. 在 `daemon.yaml` 中注册项目，添加 `reactive: true`
+2. 在项目目录创建 `CLAUDE.md`（定义 agent 行为）
+3. 可选：创建 `scripts/verifier.js`（阶段门控）
+4. 可选：创建 `perpetual.yaml`（覆盖默认约定）
+5. 可选：创建 `scripts/archiver.js` + `scripts/mission-queue.js`（归档与任务队列）
+
+不创建 perpetual.yaml 时，平台使用默认约定：
+- Verifier: `scripts/verifier.js`
+- Archiver: `scripts/archiver.js`
+- Mission Queue: `scripts/mission-queue.js`
+- 完成信号: `MISSION_COMPLETE`
+
+### 事件溯源协议
+
+所有状态变更记录在 `~/.metame/events/<projectKey>.jsonl`，一行一个 JSON 事件。`now/<key>.md` 和 `workspace/progress.tsv` 都是 event log 的投影（Projection），可随时从 event log 重建。
+
+Event 类型：`MISSION_START` / `DISPATCH` / `MEMBER_COMPLETE` / `PHASE_GATE` / `DEPTH_LIMIT` / `BUDGET_LIMIT` / `MISSION_COMPLETE` / `ARCHIVE` / `STALE` / `INFRA_PAUSE`
+
+### 设计契约
+
+1. **Tolerant Reader**：`replayEventLog` 逐行解析，损坏行 WARN + skip，绝不 crash
+2. **Error Semantic Isolation**：verifier L2b 区分 404（幻觉，打回 agent）和 50x（基建故障，挂起项目通知人类）
+3. **State 由 daemon 生成**：agent 只读 `now/<key>.md`，不负责维护
+
+### 故障排查
+
+| 症状 | 检查 |
+|------|------|
+| 永续项目不启动 | `daemon.yaml` 中是否有 `reactive: true`？ |
+| 完成信号不触发 | 检查 `perpetual.yaml` 中的 `completion_signal` 是否与 CLAUDE.md 一致 |
+| Verifier 不运行 | 检查 `scripts/verifier.js` 路径（或 manifest 中的自定义路径）是否存在 |
+| 项目挂起 (infra_failure) | 外部 API 不可用，检查网络。非 agent 错误。 |
+| Event log 损坏 | 重启后 replay 会跳过损坏行。`progress.tsv` 和 `now/<key>.md` 可从 event log 重建 |
+| `/status perpetual` 无输出 | 确认项目配置了 `reactive: true` |
+
+## 13. 私人配置保护（原 §12）
 
 - `daemon.yaml` 是用户私人配置，包含 API keys、chat IDs、个人项目配置
 - **绝不上传**到代码仓库，已加入 `.gitignore`
@@ -363,7 +416,7 @@ Claude 看到 hook 注入:
 - 同样不应上传的文件：`MEMORY.md`、`SOUL.md`、`.env*`
 - Agent 在执行任务时，**绝不能** `cp scripts/daemon.yaml ~/.metame/daemon.yaml`，这会覆盖用户私人配置
 
-## 13. 变更后维护动作
+## 14. 变更后维护动作
 
 1. `npm test`
 2. `npm run sync:plugin`

package/scripts/docs/pointer-map.md

@@ -130,6 +130,39 @@
   - `scripts/memory.js`：`saveFactLabels()` 原子写入 API
   - `scripts/memory-nightly-reflect.js`：`synthesized_insight` 回写、知识胶囊聚合与 `knowledge_capsule` 回写
 
+## 永续任务系统（Perpetual Task Engine）
+
+- Reactive 生命周期引擎：
+  - `scripts/daemon-reactive-lifecycle.js`
+  - 关键点：`handleReactiveOutput()` 通用任务链引擎（领域无关）；
+    `parseReactiveSignals()` 信号解析（NEXT_DISPATCH + 可配完成信号）；
+    `reconcilePerpetualProjects()` 停滞检测（零 token，heartbeat 驱动）；
+    `replayEventLog()` 事件溯源状态重放；
+    `generateStateFile()` 从 event log 生成 `now/<key>.md`（投影）；
+    `appendEvent()` 追加事件到 `~/.metame/events/<key>.jsonl`（唯一 SoT）；
+    `loadProjectManifest()` 读取项目 `perpetual.yaml`（convention over config）；
+    `resolveProjectScripts()` 按约定/manifest 发现 verifier/archiver/mission-queue 脚本
+
+- daemon.js 接入点：
+  - `scripts/daemon.js` `outputHandler` 内 `handleReactiveOutput` 调用（try/catch 隔离）
+  - `scripts/daemon.js` `physiologicalHeartbeat` 内 `reconcilePerpetualProjects` 调用
+
+- 可观测命令：
+  - `scripts/daemon-admin-commands.js`
+  - 关键点：`/status perpetual`（或 `/status reactive`）显示所有永续项目状态
+
+- 设计文档：
+  - `docs/perpetual-task-system-design.md`（v4，含 4 份附录）
+  - `docs/perpetual-task-system-plan.md`（实施计划，Phase A-C）
+
+- 项目清单协议：
+  - `<cwd>/perpetual.yaml` — 可选，声明 completion_signal / verifier / archiver / mission_queue 路径
+  - 不存在时使用默认约定：`scripts/verifier.js`、`scripts/archiver.js`、`scripts/mission-queue.js`、信号 `MISSION_COMPLETE`
+
+- 事件日志：
+  - `~/.metame/events/<projectKey>.jsonl` — append-only，daemon 独占写入
+  - Event 类型：MISSION_START / DISPATCH / MEMBER_COMPLETE / PHASE_GATE / DEPTH_LIMIT / BUDGET_LIMIT / MISSION_COMPLETE / ARCHIVE / STALE / INFRA_PAUSE
+
 ## 运行时数据位置
 
 - 画像：`~/.claude_profile.yaml`
@@ -141,6 +174,7 @@
 - 复盘文档：`~/.metame/memory/postmortems/`
 - Dispatch 队列：`~/.metame/dispatch/pending.jsonl`（本地 socket 降级）
 - 远端 Dispatch 队列：`~/.metame/dispatch/remote-pending.jsonl`（跨设备中继）
+- **永续任务事件日志**：`~/.metame/events/<projectKey>.jsonl`（唯一 SoT，append-only）
 - 共享进度白板：`~/.metame/memory/now/shared.md`
 - Agent 最新产出：`~/.metame/memory/agents/{key}_latest.md`
 - Agent 收件箱：`~/.metame/memory/inbox/{key}/`（未读），`read/`（已归档）

package/scripts/feishu-adapter.js

@@ -91,6 +91,27 @@ function createBot(config) {
     appSecret: app_secret,
   });
 
+  /**
+   * Validate credentials by attempting a lightweight API call.
+   * Returns { ok: true } or { ok: false, error: string }.
+   */
+  async function validateCredentials() {
+    try {
+      await withTimeout(client.im.chat.list({ params: { page_size: 1 } }), 15000);
+      return { ok: true };
+    } catch (err) {
+      const msg = err && err.message || String(err);
+      const isAuthError = /invalid|unauthorized|forbidden|token|credential|app_id|app_secret|permission|99991663|99991664|99991665/i.test(msg);
+      return {
+        ok: false,
+        error: isAuthError
+          ? `Feishu credential validation failed (app_id/app_secret may be incorrect): ${msg}`
+          : `Feishu API probe failed (network or config issue): ${msg}`,
+        isAuthError,
+      };
+    }
+  }
+
   // Private: send an interactive card JSON; returns { message_id } or null.
   // All card functions funnel through here to avoid repeating the SDK call.
   async function _sendInteractive(chatId, card) {
@@ -106,6 +127,7 @@ function createBot(config) {
   let _editBrokenAt = 0;        // timestamp when broken; auto-resets after 10min
 
   return {
+    validateCredentials,
     /**
      * Send a plain text message
      */
@@ -526,6 +548,9 @@ function createBot(config) {
         reconnect() {
           _log('INFO', 'Feishu manual reconnect triggered');
           reconnectDelay = 5000;
+          clearTimeout(reconnectTimer);
+          try { currentWs?.stop?.(); } catch { /* ignore */ }
+          currentWs = null;
           connect();
         },
         isAlive() {

package/scripts/hooks/intent-file-transfer.js

@@ -35,9 +35,10 @@ module.exports = function detectFileTransfer(prompt) {
 
   if (isSend) {
     hints.push(
-      '- **发送文件到手机**：在回复末尾加 `[[FILE:/absolute/path]]`，daemon 自动发送',
+      '- **发送文件到手机**：在回复末尾加 `[[FILE:/absolute/path]]`，daemon 自动发到**当前对话群**',
       '- 多个文件用多个 `[[FILE:...]]` 标记',
       '- **不要读取文件内容再复述**，直接用标记发送（省 token）',
+      '- **⛔ 严禁发到 open_id**：即使上下文中有 `ou_...` 用户ID，也绝对不用它发文件——那会发到 bot 私聊而非当前群',
     );
   }