openclaw-lark-multi-agent 1.8.3 → 1.8.5

package/README.md

@@ -101,17 +101,24 @@ lma install-windows-service
 
 ### Real-time steering
 
-When the agent is mid-run and a new message arrives, the bridge calls the
-bundled `lma-steer` plugin. The plugin resolves the active embedded run and only
-returns `steered` after queueing the message into that run. LMA then retains its
-durable pending trigger until a matching `session.message` proves transcript
-commitment/consumption, and only then switches Feishu from Typing to Get.
-
-OpenClaw's public `chat.send { queueMode: "steer" }` returns `started` even when
-a message falls through to a later ordinary run, so LMA does not use that
-ambiguous response as proof of realtime insertion. If the plugin is unavailable,
-there is no active run, or injection is rejected, the message safely stays in
-the normal queue and is never falsely shown as inserted.
+Mid-run messages use the coordinated **lma-core** plugin (protocol 2). Inputs
+are durably reserved before network work; a short submit/query RPC and paced
+recovery keep waiting beyond 3/8 seconds and hours of temporary non-readiness.
+The plugin actually uses public `queueAgentHarnessMessage` with the runtime's
+`onQueueAccepted` callback. **Only callback true permits Get**; SDK boolean true
+is an attempt, not acceptance. Get is backend acceptance, not model consumption.
+Missing callbacks/lost responses remain unknown and cannot be automatically
+replayed. Only a proven never-dispatched input whose original run truly ended
+can be explicitly handed to the ordinary queue once after confirmed idle.
+
+Install the matching consolidated plugin with `lma install-core-plugin` (the
+old `install-steer-plugin` command is now an alias). Retire old standalone
+lma-steer/lma-go entries through supported plugin controls to avoid duplicate
+RPC owners. Installation is not activation proof: after authorized plugin load,
+check `lma.steer.capabilities` read-only for protocol 2 / durableAttempts true.
+`atomicRunBound` is honestly **false**: session generation and lifecycle fences
+are not a host final-effect original-run CAS; that stronger promise is not
+required to enable normal current-session inputs. See [1.8.5 notes](docs/releases/1.8.5.md).
 
 Useful CLI commands:
 
@@ -121,7 +128,7 @@ lma doctor
 lma start [config]
 lma init [--state-dir DIR] [--force]
 lma install-systemd [--user|--system] [--state-dir DIR]
-lma install-steer-plugin [--no-force]  # required for realtime mid-run insertion
+lma install-core-plugin [--no-force]   # coordinated persistent real-time insertion
 ```
 
 ## Quick start from source
@@ -471,11 +478,10 @@ when that list is non-empty. Exact refs and `provider/*` wildcards are accepted.
 LMA now surfaces a model-policy rejection instead of logging a false “model
 ensured” success.
 
-Mid-run messages use the bundled `lma-steer` plugin because public
-`chat.send { queueMode: "steer" }` cannot distinguish true in-run insertion from
-a later ordinary run. LMA keeps the durable trigger until `session.message`
-confirms consumption; this is also the signal for the visible Typing-to-Get
-transition. Without the plugin, messages remain safely queued.
+Mid-run insertion uses lma-core's durable backend callback receipts, not a
+boolean eligibility value or a text-matched transcript echo. Public
+`chat.send { queueMode: "steer" }` cannot distinguish live insertion from ordinary
+followup, so it is not used to manufacture a realtime-insertion receipt.
 
 ## Live status
 

package/README.zh-CN.md

@@ -422,7 +422,9 @@ LMA 以 Gateway protocol 4 为基线，并使用 `openclaw@2026.8.2` 构建和
 
 新版把模型元数据与模型覆盖允许列表分开。如果 `agents.defaults.modelPolicy.allow` 非空，LMA 配置中的每个模型都必须被该列表的精确模型引用或 `provider/*` 通配符允许。遇到拒绝时，LMA 会直接报告 model policy 错误，不再错误记录“模型已确保”。
 
-执行中插入的消息使用内置 `lma-steer` 插件。插件会解析当前 active embedded run，只有消息确实排入该 run 时才返回 `steered`。LMA 仍会保留本地 pending trigger，直到匹配的 `session.message` 确认消息已写入转录并被消费后才清除，同时把飞书标记从 Typing 切换为 Get。公开的 `chat.send { queueMode: "steer" }` 即使退化为稍后的普通 run 也只返回 `started`，因此不再把它当作实时插入成功的证据。插件不可用、没有 active run 或拒绝插入时，消息会安全保留在普通队列中，不会伪报已插入。
+执行中插入使用配套 **lma-core / protocol 2** 插件。入站先持久预留消息；短 submit/query RPC 加 paced 恢复调度会跨过 3/8 秒乃至小时级未 ready 等待，不按消息年龄放弃。插件真实调用公开 `queueAgentHarnessMessage(..., { onQueueAccepted })`，**只有 backend callback true 才 Get**；同步 boolean true 只是尝试。Get 不是模型已消费；callback 缺失、断线或未知尝试不可自动重发。只有确定从未 dispatch 给 backend、原 run 已明确结束且会话确认 idle 时，才明示交回普通队列唯一执行一次。
+
+安装入口为 `lma install-core-plugin`，旧 `lma install-steer-plugin` 现在是同一入口的兼容别名。通过支持的插件管理入口退役旧 standalone lma-steer/lma-go，避免重复 RPC owner。文件安装不等于运行生效；授权加载后应只读验证 `lma.steer.capabilities` 的 protocol 2 / durableAttempts / acceptanceCallback。`atomicRunBound:false` 如实披露：会话代际和 lifecycle 围栏不冒充 host 最终副作用处原 run CAS，但这不再成为禁用正常当前会话插入的自设前置。详见 [1.8.5 候选说明](docs/releases/1.8.5.md)。
 
 ## Live Status 与最终回复
 

package/dist/cli.js

@@ -22,7 +22,8 @@ Usage:
   ${CLI_NAME} init [--state-dir DIR] [--force]
   ${CLI_NAME} install-systemd [--user|--system] [--state-dir DIR] [--no-restart]
   ${CLI_NAME} install-windows-service [--state-dir DIR] [--no-start]
-  ${CLI_NAME} install-steer-plugin [--no-force]
+  ${CLI_NAME} install-core-plugin [--no-force]
+  ${CLI_NAME} install-steer-plugin [--no-force]  (compatibility alias)
   ${CLI_NAME} doctor [--state-dir DIR]
   ${CLI_NAME} --help
 
@@ -31,7 +32,7 @@ Examples:
   ${CLI_NAME} start ~/.openclaw/${APP_NAME}/config.json
   ${CLI_NAME} install-systemd --user
   ${CLI_NAME} install-windows-service
-  ${CLI_NAME} install-steer-plugin
+  ${CLI_NAME} install-core-plugin
 
 (The command is also available as \`${APP_NAME}\` for back-compat.)
 `);
@@ -206,29 +207,28 @@ function runCapture(cmd, args) {
     }
 }
 /**
- * Install the bundled lma-steer plugin used for observable realtime mid-run
- * insertion. LMA remains functional without it, but busy messages queue until
- * the active run completes.
+ * Install the coordinated consolidated plugin, including callback receipts.
+ * Keep the old command as an alias, not an installer for a retired boolean API.
  */
-function cmdInstallSteerPlugin(args) {
-    console.warn("Note: lma-steer is required for confirmed realtime mid-run insertion; without it, busy messages remain safely queued.");
+function cmdInstallCorePlugin(args) {
+    console.warn("Note: use the coordinated lma-core plugin for durable callback-confirmed insertion. Retire old lma-steer/lma-go entries through the supported plugin controls; do not load duplicate RPC owners.");
     // Default to --force so reinstalling an updated bundled plugin overwrites the
     // previously installed copy. Pass --no-force to keep an existing install.
     const noForce = hasFlag(args, "--no-force");
     hasFlag(args, "--force");
     if (args.length > 0)
-        throw new Error(`Unknown install-steer-plugin arguments: ${args.join(" ")}`);
-    // Resolve the bundled plugin dir relative to this CLI file: dist/cli.js -> ../plugins/lma-steer.
+        throw new Error(`Unknown install-core-plugin arguments: ${args.join(" ")}`);
+    // Resolve the bundled plugin dir relative to this CLI file: dist/cli.js -> ../plugins/lma-core.
     const cliDir = dirname(fileURLToPath(import.meta.url));
-    const pluginDir = resolve(cliDir, "..", "plugins", "lma-steer");
+    const pluginDir = resolve(cliDir, "..", "plugins", "lma-core");
     if (!existsSync(resolve(pluginDir, "openclaw.plugin.json")) || !existsSync(resolve(pluginDir, "dist", "index.js"))) {
-        throw new Error(`bundled lma-steer plugin not found or not built at: ${pluginDir}`);
+        throw new Error(`bundled lma-core plugin not found or not built at: ${pluginDir}`);
     }
     const openclawBin = process.env.OPENCLAW_BIN || "openclaw";
     const installArgs = ["plugins", "install", pluginDir];
     if (!noForce)
         installArgs.push("--force");
-    console.log(`Installing lma-steer plugin from: ${pluginDir}`);
+    console.log(`Installing lma-core plugin from: ${pluginDir}`);
     const res = runCapture(openclawBin, installArgs);
     if (res.code !== 0) {
         if (res.spawnError) {
@@ -243,14 +243,13 @@ function cmdInstallSteerPlugin(args) {
             console.error(`\n"${openclawBin} plugins install" failed (exit ${res.code}).`);
             console.error(`Make sure the OpenClaw CLI is installed and on PATH (or set OPENCLAW_BIN),`);
         }
-        console.error(`then rerun: ${CLI_NAME} install-steer-plugin`);
+        console.error(`then rerun: ${CLI_NAME} install-core-plugin`);
         process.exit(res.code);
     }
-    console.log(`\nlma-steer plugin installed. Restart the OpenClaw gateway to load it, e.g.:`);
-    console.log(`  systemctl --user restart openclaw-gateway.service`);
-    console.log(`Then verify:`);
-    console.log(`  openclaw gateway call lma.steer --params '{"sessionKey":"test","text":"ping"}'`);
-    console.log(`  (expect {"status":"no_active_run"} for an idle session)`);
+    console.log(`\nlma-core files installed; this is not runtime activation proof.`);
+    console.log(`Load/reload with the Gateway's supported plugin control path, then verify the read-only capability endpoint:`);
+    console.log(`  openclaw gateway call lma.steer.capabilities --params '{}'`);
+    console.log(`  (expect protocol:2, durableAttempts:true, acceptanceCallback:true, atomicRunBound:false)`);
 }
 function cmdDoctor(args) {
     const stateDir = resolve(takeOption(args, "--state-dir") || DEFAULT_STATE_DIR);
@@ -274,8 +273,8 @@ async function main() {
         return cmdInstallSystemd(args);
     if (cmd === "install-windows-service")
         return cmdInstallWindowsService(args);
-    if (cmd === "install-steer-plugin")
-        return cmdInstallSteerPlugin(args);
+    if (cmd === "install-core-plugin" || cmd === "install-steer-plugin")
+        return cmdInstallCorePlugin(args);
     if (cmd === "doctor")
         return cmdDoctor(args);
     if (cmd === "start") {

package/dist/feishu-bot.d.ts

@@ -31,6 +31,7 @@ export declare class FeishuBot {
     private recentVerboseToolMessages;
     /** Per-chat processQueue lock to avoid duplicate concurrent chat.send runs */
     private queueRuns;
+    private queueOwners;
     /** Per-chat serial send queue to guarantee message order */
     private sendQueue;
     /** Per-chat delayed runtime failure notifications, canceled if a real reply arrives. */
@@ -61,6 +62,7 @@ export declare class FeishuBot {
     private installGoReceiptCapture;
     private goController;
     /** Per-chat durable outbox retry timer. */
+    private localDeliveryRetryCustody;
     private deliveryRetryTimers;
     /** Last time a real assistant-visible reply was successfully handed to the delivery pipeline. */
     private lastRealDeliveryAt;
@@ -116,6 +118,14 @@ export declare class FeishuBot {
     static getByName(name: string): FeishuBot | undefined;
     static findByOpenId(openId: string): FeishuBot | undefined;
     private handleMessage;
+    private stopGeneration;
+    private reactionChecks;
+    private receiptReaction;
+    private reconcileReactions;
+    private insertionTimer?;
+    private insertionChecks;
+    private scheduleInsertionRecovery;
+    private reconcileInsertions;
     private shouldUseLiveStatus;
     private getUnhealthySessionStatus;
     /**