openclaw-lark-multi-agent 1.8.15 → 1.8.17

package/dist/feishu-bot.d.ts

@@ -38,6 +38,9 @@ export declare class FeishuBot {
     /** Per-chat processQueue lock to avoid duplicate concurrent chat.send runs */
     private queueRuns;
     private queueOwners;
+    /** Monotone local batch epoch: an empty owner map must not hide an
+     * intervening admission/finish (ABA) from an asynchronous public lookup. */
+    private queueAdmissionEpoch;
     /** Per-chat serial send queue to guarantee message order */
     private sendQueue;
     /** Per-chat delayed runtime failure notifications, canceled if a real reply arrives. */
@@ -128,10 +131,23 @@ export declare class FeishuBot {
     static getByName(name: string): FeishuBot | undefined;
     static findByOpenId(openId: string): FeishuBot | undefined;
     private handleMessage;
+    /** Separate guarded-admission proof. Aggregate busy never becomes idle. */
+    private observedFollowupGuard;
+    /** A positive refusal must be durable AND explained to the sender. */
+    private retainChangedFollowup;
+    private explainUnconfirmedFollowup;
+    /** Keep each input's first observed leaf: a fresh arrival must not borrow
+     * an obsolete scheduler leaf from before it was received. */
+    private pinDispatchFollowupProof;
     /** With no local owner, the Gateway can still have externally admitted work.
      * Read public activity and pin its exact root before choosing insertion. Missing
      * identity is durable unbound custody, never a fabricated run or blind send. */
     private reconcileCurrentInputActivity;
+    /** An ingress reservation can outlive an ACK-window owner which finished
+     * before learning its runId. It is still never-attempted custody, not a
+     * licence to retarget/steer a successor. Require the same guarded proof and
+     * bounded observation with NO replacement local scheduler at every await. */
+    private reconcileRetainedFollowup;
     /** CAS includes the actual batch, not merely the queue Promise, and excludes
      * local admission/RPC windows even if the host briefly reports idle. */
     private reconcileDispatchCustody;
@@ -171,11 +187,10 @@ export declare class FeishuBot {
     private fireRunFailureObservers;
     private processQueue;
     /**
-     * Force-release a stuck queue owner after the gateway authoritatively
-     * reported the session idle (no active run). The zombie owner's deep waits
-     * can otherwise hold chat custody forever: completion events routed through
-     * the proactive path are invisible to them. Steer-fallback triggers are
-     * restored via the failure observers so their input drains normally.
+     * Retire only the local queue scheduler after positive idle, trusted yield,
+     * or bounded guarded-followup proof. Never stop Gateway execution or infer
+     * a terminal outcome. Exact result recovery/target custody remains durable;
+     * attempted-unknown and accepted insertion records never enter replay.
      */
     private forceExpireQueueOwner;
     private processQueueInner;