ws050: 转人工 handover emoji-ack + synthetic-card placeholder 弹不出 fix

Two fixes from the 1v8 (ws045) trace.

1) 转人工 handover acknowledgement (the customer-flagged requirement).
   When a customer transfers to human, Feige auto-greets ("Hi，欢迎光临本店…") and
   starts a service-attitude penalty timer. That greeting is the PLATFORM's — it
   does NOT count as our reply — so we must send our own. We now send a uniform
   ASCII ":)" once per handover:
   - frontdesk_dispatch: when first_system_row_match returns a handover-family
     reason (store_auto_greeting / smart_cs_auto_greeting / human_handover_notice
     / store_assignment_notice / transfer_to_human_label), record the customer via
     placeholder_timer.note_handover_ack_needed (deduped 600s, since the greeting
     row re-matches every cycle until the customer types).
   - placeholder_timer: the sweep loop drains pending acks and sends the emoji
     through the SAME submitter placeholders use (open conversation + type),
     inheriting browser_session/worker_loop/tab-pool — no new send plumbing.
   Gated ECAN_FEIGE_HANDOVER_ACK (default ON; =0 disables). Detection is DOM/
   dispatch-based because the WS fusion-handover frame
   (switch_human_triggered_word=人工, verified by decoding the 06-10 capture)
   carries no usable talk_id — only shop-side fusion ids.

2) Synthetic-card placeholder 弹不出. A placeholder armed under 'card:<conv>'
   failed feige_open_session with "Session not found" (live 1v8: 6x for
   card:7650132942676575524 — 半成品男孩's card conv) because the sidebar row is
   the real name, not 'card:<conv>'. direct_delivery now de-synthesizes the conv
   to the real name (ws_session.name_for_talk) before open AND send, falling back
   to the synthetic key if unresolved.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: scszcoder

agent/ec_skills/browser_use_extension/hooks/external/feige_chat/direct_delivery.py

@@ -317,7 +317,23 @@ async def _ph_invoke(action, params):
                     raise
             return _raw_call
 
-        _open_params = _open_fn.param_model(customer_name=customer_key)
+        # ws050: a placeholder armed under the synthetic 'card:<conv>' identity
+        # fails feige_open_session with "Session not found" — the sidebar row is
+        # the customer's REAL name, not 'card:<conv>' (live 1v8: 6x for
+        # card:7650132942676575524). De-synthesize to the real name before
+        # opening so the placeholder actually delivers (弹不出 fix). Falls back to
+        # the synthetic key if the WS stream never resolved a name for the conv.
+        _open_name = customer_key
+        if str(customer_key).startswith("card:"):
+            _conv = str(customer_key)[len("card:"):]
+            try:
+                from . import ws_session as _wss_open
+                _real = str(_wss_open.name_for_talk(_conv) or "").strip()
+                if _real and not _real.startswith("card:"):
+                    _open_name = _real
+            except Exception:
+                pass
+        _open_params = _open_fn.param_model(customer_name=_open_name)
         await _ph_invoke(_open_fn, _open_params)
 
         # 2026-05-20 v3: re-check suppression AFTER feige_open_session
@@ -344,7 +360,7 @@ async def _ph_invoke(action, params):
         # specific bubble — it's a stand-by message).
         _send_params = _send_fn.param_model(
             text=text,
-            customer_name=customer_key,
+            customer_name=_open_name,
             source_customer_msg_id="",
             source_latest_message="",
         )

agent/ec_skills/browser_use_extension/hooks/external/feige_chat/placeholder_timer.py

@@ -207,6 +207,64 @@ class _TimerEntry:
 _REGISTRY: dict[tuple[str, str], _TimerEntry] = {}
 _REGISTRY_LOCK = threading.Lock()
 
+# ws050: 转人工 handover acknowledgement ──────────────────────────────
+# When a customer transfers to human (转人工), Feige auto-greets ("Hi，欢迎光临
+# 本店…") and starts a service-attitude penalty timer.  That system greeting is
+# the PLATFORM's, not ours — it does NOT stop the clock; we must send our OWN
+# message.  We send a uniform ASCII emoji once per handover, routed through the
+# placeholder send path (open conversation + type), reusing the sweeper's
+# browser_session/worker_loop.  Gated by ECAN_FEIGE_HANDOVER_ACK (default ON;
+# set =0 to disable).  Deduped per customer for _HANDOVER_ACK_REDEDUP_S so the
+# persistent greeting row (which re-matches every dispatch cycle until the
+# customer types) acks exactly once.
+_HANDOVER_ACK_TEXT = ":)"
+_HANDOVER_ACK_REDEDUP_S = 600.0
+_handover_ack_pending: dict[str, float] = {}
+_handover_ack_done: dict[str, float] = {}
+_handover_ack_lock = threading.Lock()
+
+
+def handover_ack_enabled() -> bool:
+    return os.environ.get("ECAN_FEIGE_HANDOVER_ACK", "1") != "0"
+
+
+def note_handover_ack_needed(customer_key: str) -> None:
+    """Mark *customer_key* as owing a 转人工 handover emoji.  Idempotent and
+    rate-limited: a customer acked within the last _HANDOVER_ACK_REDEDUP_S is
+    skipped (the greeting row keeps re-matching until the customer types)."""
+    if not customer_key or not handover_ack_enabled():
+        return
+    now = time.time()
+    with _handover_ack_lock:
+        if now - _handover_ack_done.get(customer_key, 0.0) < _HANDOVER_ACK_REDEDUP_S:
+            return
+        _handover_ack_pending.setdefault(customer_key, now)
+
+
+def clear_handover_ack(customer_key: str) -> None:
+    """Re-arm: a genuine new customer message means a LATER handover for the
+    same customer may be acked again."""
+    if not customer_key:
+        return
+    with _handover_ack_lock:
+        _handover_ack_pending.pop(customer_key, None)
+        _handover_ack_done.pop(customer_key, None)
+
+
+def _drain_handover_acks() -> list[str]:
+    """Return + clear the customers currently owing a handover emoji, stamping
+    each as done (for the re-dedup window)."""
+    now = time.time()
+    with _handover_ack_lock:
+        custs = list(_handover_ack_pending.keys())
+        for c in custs:
+            _handover_ack_pending.pop(c, None)
+            _handover_ack_done[c] = now
+        for c in [c for c, t in _handover_ack_done.items()
+                  if now - t > _HANDOVER_ACK_REDEDUP_S * 2]:
+            _handover_ack_done.pop(c, None)
+    return custs
+
 # Per-customer typed-placeholder ledger (2026-05-21 Fix B).
 # Defense in depth: even when multiple timers exist for the same customer
 # (e.g., PreDispatch mis-dispatched a phantom turn + the real turn — Fix A
@@ -1036,6 +1094,19 @@ async def sweep_loop_async(
     while True:
         try:
             await _asyncio.sleep(interval_s)
+            # ws050: drain pending 转人工 handover acks — send the uniform ASCII
+            # emoji once per handover via the SAME submitter (open + type) that
+            # placeholders use, so it inherits browser_session/worker_loop/pool.
+            for _hk in _drain_handover_acks():
+                logger.info(
+                    f"[placeholder_timer] ws050 handover-ack -> cust={_hk!r} "
+                    f"text={_HANDOVER_ACK_TEXT!r}")
+                try:
+                    placeholder_submitter(_hk, "", _HANDOVER_ACK_TEXT)
+                except Exception as _hae:
+                    logger.debug(
+                        f"[placeholder_timer] handover-ack submit failed "
+                        f"cust={_hk!r}: {_hae}")
             expired = claim_expired(
                 max_placeholders=max_placeholders,
                 rearm_s=rearm_s,

agent/ec_skills/node_runtime/frontdesk_dispatch.py

@@ -43,6 +43,17 @@
 
 logger = logging.getLogger("eCan")
 
+# ws050: system_message_filter reasons that signal a 转人工 handover (customer
+# transferred to human + Feige's auto-greeting/接入) and so should trigger our
+# one-time ASCII-emoji acknowledgement. Excludes pure noise (已读/草稿/delivery).
+_HANDOVER_ACK_REASONS = frozenset({
+    "store_auto_greeting",
+    "smart_cs_auto_greeting",
+    "human_handover_notice",
+    "store_assignment_notice",
+    "transfer_to_human_label",
+})
+
 
 # ─── mt052D Day 1 — out-of-band (OOB) parallel dispatch foundation ─────
 #
@@ -1248,6 +1259,28 @@ def _pick_first(item: dict, keys: list[str]) -> str:
             )
             system_reason = first_system_row_match(item)
             if system_reason:
+                # ws050: a 转人工 handover / store-greeting / 接入 row means the
+                # customer transferred to human and Feige started its penalty
+                # timer. Its auto-greeting does NOT count as our reply — send a
+                # one-time ASCII emoji ack. Recorded here (customer in hand);
+                # the placeholder sweeper drains + sends it (it has browser_session).
+                if system_reason in _HANDOVER_ACK_REASONS:
+                    try:
+                        from agent.ec_skills.browser_use_extension.hooks.external.feige_chat.placeholder_timer import (
+                            note_handover_ack_needed as _note_handover_ack,
+                        )
+                        _ho_cust = str(
+                            item.get("customer_name")
+                            or item.get("customer_id")
+                            or item.get("session_id")
+                            or ""
+                        ).strip()
+                        if _ho_cust and not _ho_cust.startswith("card:"):
+                            _note_handover_ack(_ho_cust)
+                    except Exception as _ho_err:
+                        logger.debug(
+                            f"[BrowserAutomation] {cfg.log_tag} ws050 handover-ack "
+                            f"note failed: {_ho_err}")
                 pending_marker = any(
                     str(item.get(k) or "").strip()
                     for k in (